[ol8_u7_baseos_base] iptables-1.8.4-23.0.1.el8.i686

The iptables utility controls the network packet filtering code in the
Linux kernel. If you need to set up firewalls and/or IP masquerading,
you should either install nftables or this package.

Note: This package contains the nftables-based variants of iptables and
ip6tables, which are drop-in replacements of the legacy tools.

Changelog (Show File list) (Show related packages)

• Thu Sep 29 2022 EL Errata <el-errata_ww@oracle.com> - 1.8.4-23.0.1

  - Replace upstream references within the ebtables description tag

• Fri Jul 01 2022 Phil Sutter <psutter@redhat.com> - 1.8.4-23

  - libxtables: Fix unsupported extension warning corner case
  - tests: shell: Check overhead in iptables-save and -restore
  - nft: Fix EPERM handling for extensions without rev 0
  - Improve error messages for unsupported extensions
  - xshared: Fix response to unprivileged users
  - libxtables: Register only the highest revision extension
  - Use proto_to_name() from xshared in more places
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing

• Mon Nov 29 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-22

  - extensions: hashlimit: Fix tests with HZ=1000

• Thu Oct 07 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-21

  - extensions: hashlimit: Fix tests with HZ=100
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options

• Wed Aug 04 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-20

  - extensions: SECMARK: Use a better context in test case
  - extensions: sctp: Translate --chunk-types option
  - extensions: sctp: Fix nftables translation
  - extensions: SECMARK: Implement revision 1
  - nft: cache: Retry if kernel returns EINTR

• Fri Jun 18 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-19

  - Fix for rpminspect results

• Mon May 24 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-18

  - xtables-translate: Fix translation of odd netmasks
  - nft: Fix bitwise expression avoidance detection
  - xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
  - xtables-monitor: print packet first
  - xtables-monitor: fix packet family protocol
  - xtables-monitor: fix rule printing
  - xtables-monitor: Fix ip6tables rule printing

• Thu Dec 10 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-17

  - extensions: dccp: Fix for DCCP type 'INVALID'
  - tests: shell: Merge and extend return codes test
  - nft: Fix command name in ip6tables error message
  - extensions: libxt_CT: add translation for NOTRACK
  - extensions: libipt_icmp: Fix translation of type 'any'
  - tests/shell: Test for fixed extension registration
  - libxtables: Register multiple extensions in ascending order
  - libxtables: Simplify pending extension registration
  - libxtables: Make sure extensions register in revision order

• Wed Oct 28 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-16

  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection
  - nft: cache: Make nft_rebuild_cache() respect fake cache
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object

• Sat Aug 15 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-15

  - Ignore sysctl files not suffixed '.conf'