[ol8_baseos_latest] iptables-ebtables-1.8.4-23.0.1.el8.aarch64

Ethernet bridge tables is a firewalling tool to transparently filter network
traffic passing a bridge. The filtering possibilities are limited to link
layer filtering and some basic filtering on higher network layers.

This tool is the userspace control for the bridge and ebtables kernel
components (built by default in RHCK and UEK kernels).

The ebtables tool can be used together with the other Linux filtering tools,
like iptables. There are no known incompatibility issues.

Note: This package contains the nftables-based variant of ebtables, a drop-in
replacement of the legacy tool.

Changelog (Show File list) (Show related packages)

• Thu Sep 29 2022 EL Errata <el-errata_ww@oracle.com> - 1.8.4-23.0.1

  - Replace upstream references within the ebtables description tag

• Fri Jul 01 2022 Phil Sutter <psutter@redhat.com> - 1.8.4-23

  - libxtables: Fix unsupported extension warning corner case
  - tests: shell: Check overhead in iptables-save and -restore
  - nft: Fix EPERM handling for extensions without rev 0
  - Improve error messages for unsupported extensions
  - xshared: Fix response to unprivileged users
  - libxtables: Register only the highest revision extension
  - Use proto_to_name() from xshared in more places
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing

• Mon Nov 29 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-22

  - extensions: hashlimit: Fix tests with HZ=1000

• Thu Oct 07 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-21

  - extensions: hashlimit: Fix tests with HZ=100
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options

• Wed Aug 04 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-20

  - extensions: SECMARK: Use a better context in test case
  - extensions: sctp: Translate --chunk-types option
  - extensions: sctp: Fix nftables translation
  - extensions: SECMARK: Implement revision 1
  - nft: cache: Retry if kernel returns EINTR

• Fri Jun 18 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-19

  - Fix for rpminspect results

• Mon May 24 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-18

  - xtables-translate: Fix translation of odd netmasks
  - nft: Fix bitwise expression avoidance detection
  - xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
  - xtables-monitor: print packet first
  - xtables-monitor: fix packet family protocol
  - xtables-monitor: fix rule printing
  - xtables-monitor: Fix ip6tables rule printing

• Thu Dec 10 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-17

  - extensions: dccp: Fix for DCCP type 'INVALID'
  - tests: shell: Merge and extend return codes test
  - nft: Fix command name in ip6tables error message
  - extensions: libxt_CT: add translation for NOTRACK
  - extensions: libipt_icmp: Fix translation of type 'any'
  - tests/shell: Test for fixed extension registration
  - libxtables: Register multiple extensions in ascending order
  - libxtables: Simplify pending extension registration
  - libxtables: Make sure extensions register in revision order

• Wed Oct 28 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-16

  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection
  - nft: cache: Make nft_rebuild_cache() respect fake cache
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object

• Sat Aug 15 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-15

  - Ignore sysctl files not suffixed '.conf'