[el5_latest] iptables-1.3.5-9.1.0.1.el5.x86_64

Name:	iptables
Version:	1.3.5
Release:	9.1.0.1.el5
Architecture:	x86_64
Group:	System Environment/Base
Size:	678798
License:	GPL
RPM:	iptables-1.3.5-9.1.0.1.el5.x86_64.rpm
Source RPM:	iptables-1.3.5-9.1.0.1.el5.src.rpm
Build Date:	Fri Dec 23 2011
Build Host:	ca-build10.us.oracle.com
Vendor:	Oracle America
URL:	http://www.netfilter.org/
Summary:	Tools for managing Linux kernel packet filtering capabilities.
Description:	The iptables utility controls the network packet filtering code in the Linux kernel. If you need to set up firewalls and/or IP masquerading, you should install this package.

Changelog (Show File list) (Show related packages)

Tue Dec 20 2011 Fredrick He <fredrick.he@oracle.com> - 1.3.5-9.1.0.1.el5
```
- Add TOS syntax to support kernel 2.6.32 series
```

Mon Nov 21 2011 Thomas Woerner <twoerner@redhat.com> 1.3.5-9.1

- added reload to usage output of init script (rhbz#710050)
- only reload if iptables was started before (rhbz#710050)

Wed Oct 26 2011 Thomas Woerner <twoerner@redhat.com> 1.3.5-9
```
- readded ipt_connlimit_data alignment patch (rhbz#520797)
```

Wed Oct 26 2011 Thomas Woerner <twoerner@redhat.com> 1.3.5-8

- added libipt_statistic support (rhbz#471163)
- added patch to load sysctl settings on iptables start (rhbz#552522)
  Thanks to Martin Foster for the patch
- added patch to load ip_tables.ko just before checking revision support in
  kernel. (rhbz#554340)
- added reload action for service script (rhbz#710050)

Wed Sep 22 2010 Thomas Woerner <twoerner@redhat.com> 1.3.5-7

- reverting to 1.3.5-5.4
  - dropped SECMARK targets again (rhbz#535074)
  - dropped ipt_connlimit_data alignment patch (rhbz#520797)

Wed Sep 22 2010 Thomas Woerner <twoerner@redhat.com> 1.3.5-6.1
```
- bump release because of test package build
```
Mon Sep 06 2010 Thomas Woerner <twoerner@redhat.com> 1.3.5-6
```
- enabled SECMARK targets (rhbz#535074)
```

Mon Oct 19 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.4

- fixed ipt_connlimit_data alignment
  Thanks to Jiri Pirko for the patch
  Resolves: rhbz#520797

Tue May 19 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.3

- added build requirement for kernel-headers >= 2.6.18-141.el5
  Related: rhbz#480371

Tue May 12 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.2

- reverting init script return codes because of bahaviour change, only fixing
  the ipchains test
  Related: rhbz#242457

Mon May 04 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.1
```
- build with -fno-strict-aliasing
```

Mon May 04 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5

- fixed init script return codes for LSB conformance
  Resolves: rhbz#242457
- fixed ICMP6 reject types
  Resolves: rhbz#253014
- fixed missing headers in iptables-devel package
  Resolves: rhbz#402281, rhbz#487649
- fixed dist tag in release
  Resolves: rhbz#440622
- added all options to the man page of iptables-restore
  Resolves: rhbz#474847
- added DSCP match target for IPv6
  Resolves: rhbz#480371
- removed unsuppported ipt_ROUTE from documentation
  Resolves: rhbz#485834

Mon Jan 14 2008 Thomas Woerner <twoerner@redhat.com> 1.3.5-4.el5

- fixed man page for dscp extension max value
  Resolves: rhbz#239383
- fixed missing extension modules, because of build problems
  Resolves: rhbz#244047

Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2.1
```
- rebuild
```
Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2
```
- bump again for double-long bug on ppc(64)
```
Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.1
```
- rebuilt for new gcc4.1 snapshot and glibc changes
```

Thu Feb 02 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-1

- new version 1.3.5
- fixed init script to set policy for raw tables, too (#179094)

Tue Jan 24 2006 Thomas Woerner <twoerner@redhat.com> 1.3.4-3
```
- added important iptables header files to devel package
```
Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
```
- rebuilt
```

Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-2

- fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
  replace "_init" with "__attribute((constructor)) my_init"

Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1.1
```
- rebuild due to unresolved symbols in shared libraries
```

Fri Nov 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1

- new version 1.3.4
- dropped free_opts patch (upstream fixed)
- made libipq PIC (#158623)
- additional configuration options for iptables startup script (#172929)
  Thanks to Jan Gruenwald for the patch
- spec file cleanup (dropped linux_header define and usage)

Mon Jul 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.2-1

- new version 1.3.2 with additional patch for the misplaced free_opts call
  from Marcus Sundberg

Wed May 11 2005 Thomas Woerner <twoerner@redhat.com> 1.3.1-1
```
- new version 1.3.1
```

Fri Mar 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-2

- Remove unnecessary explicit kernel dep (#146142)
- Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
  for the patch
- Adapted iptables-config to reference to modprobe.conf (#150143)
- Remove misleading message (#140154): Thanks to Ulrich Drepper
  for the patch

Mon Feb 21 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-1
```
- new version 1.3.0
```

Thu Nov 11 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.2

- fixed autoload problem in iptables and ip6tables (CAN-2004-0986)

Fri Sep 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1

- changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
- modified config file to match this change and un-commented variables with
  default values

Thu Sep 16 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3

- applied second part of cleanup patch from (#131848): thanks to Steve Grubb
  for the patch

Wed Aug 25 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-2
```
- fixed free bug in iptables (#128322)
```
Tue Jun 22 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-1
```
- new version 1.2.11
```
Thu Jun 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.10-1
```
- new version 1.2.10
```
Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```

Thu Feb 26 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-2.3

- fixed iptables-restore -c fault if there are no counters (#116421)

Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```

Sun Jan 25 2004 Dan Walsh <dwalsh@redhat.com> 1.2.9-1.2

- Close File descriptors to prevent SELinux error message

Wed Jan 07 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-1.1
```
- rebuild
```

Wed Dec 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.9-1

- vew version 1.2.9
- new config options in ipXtables-config:
  IPTABLES_MODULES_UNLOAD
- more documentation in ipXtables-config
- fix for netlink security issue in libipq (devel package)
- print fix for libipt_icmp (#109546)

Thu Oct 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-13

- marked all messages in iptables init script for translation (#107462)
- enabled devel package (#105884, #106101)
- bumped build for fedora for libipt_recent.so (#106002)

Tue Sep 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1

- fixed lost udp port range in ip6tables-save (#104484)
- fixed non numeric multiport port output in ipXtables-savs

Mon Sep 22 2003 Florian La Roche <Florian.LaRoche@redhat.de> 1.2.8-11
```
- do not link against -lnsl
```
Wed Sep 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-10
```
- made variables in rmmod_r local
```
Tue Jul 22 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-9
```
- fixed permission for init script
```

Sat Jul 19 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-8

- fixed save when iptables file is missing and iptables-config permissions

Tue Jul 08 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-7

- fixes for ip6tables: module unloading, setting policy only for existing 
  tables

Thu Jul 03 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-6

- IPTABLES_SAVE_COUNTER defaults to no, now
- install config file in /etc/sysconfig
- exchange unload of ip_tables and ip_conntrack
- fixed start function

Wed Jul 02 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-5

- new config option IPTABLES_SAVE_ON_RESTART
- init script: new status, save and restart
- fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374

Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-4

- new config option IPTABLES_STATUS_NUMERIC
- cleared IPTABLES_MODULES in iptables-config

Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-3
```
- new init scripts
```

Sat Jun 28 2003 Florian La Roche <Florian.LaRoche@redhat.de>

- remove check for very old kernel versions in init scripts
- sync up both init scripts and remove some further ugly things
- add some docu into rpm

Thu Jun 26 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-2
```
- rebuild
```
Mon Jun 16 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-1
```
- update to 1.2.8
```
Wed Jan 22 2003 Tim Powers <timp@redhat.com>
```
- rebuilt
```

Mon Jan 13 2003 Bill Nottingham <notting@redhat.com> 1.2.7a-1

- update to 1.2.7a
- add a plethora of bugfixes courtesy Michael Schwendt <mschewndt@yahoo.com>

Fri Dec 13 2002 Elliot Lee <sopwith@redhat.com> 1.2.6a-3
```
- Fix multilib
```

Wed Aug 07 2002 Karsten Hopp <karsten@redhat.de>

- fixed iptables and ip6tables initscript output, based on #70511
- check return status of all iptables calls, not just the last one
  in a 'for' loop.

Mon Jul 29 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.6a-1
```
- 1.2.6a (bugfix release, #69747)
```
Fri Jun 21 2002 Tim Powers <timp@redhat.com>
```
- automated rebuild
```
Thu May 23 2002 Tim Powers <timp@redhat.com>
```
- automated rebuild
```
Mon Mar 04 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-3
```
- Add some fixes from CVS, fixing bug #60465
```

Tue Feb 12 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2

- Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
  - Update URL (#59354)
- Use /sbin/chkconfig rather than chkconfig in %postun script

Fri Jan 11 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-1
```
- 1.2.5
```
Wed Jan 09 2002 Tim Powers <timp@redhat.com>
```
- automated rebuild
```
Mon Nov 05 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-2
```
- Fix %preun script
```

Tue Oct 30 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1

- Update to 1.2.4 (various fixes, including security fixes; among others:
  - Fix init script (#31133)

Mon Sep 03 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-1

- 1.2.3 (5 security fixes, some other fixes)
- Fix updating (#53032)

Mon Aug 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-4

- Fix #50990
- Add some fixes from current CVS; should fix #52620

Mon Jul 16 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-3

- Add some fixes from the current CVS tree; fixes #49154 and some IPv6
  issues

Tue Jun 26 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-2

- Fix iptables-save reject-with (#45632), Patch from Michael Schwendt
  <mschwendt@yahoo.com>

Tue May 08 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-1
```
- 1.2.2
```
Wed Mar 21 2001 Bernhard Rosenkraenzer <bero@redhat.com>
```
- 1.2.1a, fixes #28412, #31136, #31460, #31133
```

Thu Mar 01 2001 Bernhard Rosenkraenzer <bero@redhat.com>

- Yet another initscript fix (#30173)
- Fix the fixes; they fixed some issues but broke more important
  stuff :/ (#30176)

Tue Feb 27 2001 Bernhard Rosenkraenzer <bero@redhat.com>

- Fix up initscript (#27962)
- Add fixes from CVS to iptables-{restore,save}, fixing #28412

Fri Feb 09 2001 Karsten Hopp <karsten@redhat.de>

- create /etc/sysconfig/iptables mode 600 (same problem as #24245)

Mon Feb 05 2001 Karsten Hopp <karsten@redhat.de>

- fix bugzilla #25986 (initscript not marked as config file)
- fix bugzilla #25962 (iptables-restore)
- mv chkconfig --del from postun to preun

Thu Feb 01 2001 Trond Eivind Glomsrød <teg@redhat.com>
```
- Fix check for ipchains
```
Mon Jan 29 2001 Bernhard Rosenkraenzer <bero@redhat.com>
```
- Some fixes to init scripts
```

Wed Jan 24 2001 Bernhard Rosenkraenzer <bero@redhat.com>

- Add some fixes from CVS, fixes among other things Bug #24732

Wed Jan 17 2001 Bernhard Rosenkraenzer <bero@redhat.com>

- Add missing man pages, fix up init script (Bug #17676)

Mon Jan 15 2001 Bill Nottingham <notting@redhat.com>
```
- add init script
```

Mon Jan 15 2001 Bernhard Rosenkraenzer <bero@redhat.com>

- 1.2
- fix up ipv6 split
- add init script
- Move the plugins from /usr/lib/iptables to /lib/iptables.
  This needs to work before /usr is mounted...
- Use -O1 on alpha (compiler bug)

Sat Jan 06 2001 Bernhard Rosenkraenzer <bero@redhat.com>
```
- 1.1.2
- Add IPv6 support (in separate package)
```
Thu Aug 17 2000 Bill Nottingham <notting@redhat.com>
```
- build everywhere
```
Tue Jul 25 2000 Bernhard Rosenkraenzer <bero@redhat.com>
```
- 1.1.1
```
Thu Jul 13 2000 Prospector <bugzilla@redhat.com>
```
- automatic rebuild
```

Tue Jun 27 2000 Preston Brown <pbrown@redhat.com>

- move iptables to /sbin.
- excludearch alpha for now, not building there because of compiler bug(?)

Fri Jun 09 2000 Bill Nottingham <notting@redhat.com>
```
- don't obsolete ipchains either
- update to 1.1.0
```
Sun Jun 04 2000 Bill Nottingham <notting@redhat.com>
```
- remove explicit kernel requirement
```
Tue May 02 2000 Bernhard Rosenkränzer <bero@redhat.com>
```
- initial package
```