[ANNOUNCE] iptables 1.8.3 release

[Pablo Neira Ayuso]

Hi!

The Netfilter project proudly presents:

        iptables 1.8.3

iptables is the userspace command line program used to configure the
Linux 2.4.x and later packet filtering ruleset. It is targeted towards
system administrators.

See ChangeLog that comes attached to this email for more details.

You can download it from:

http://www.netfilter.org/projects/iptables/downloads.html
ftp://ftp.netfilter.org/pub/iptables/

Happy firewalling.
-------------- next part --------------
Adam Gołębiowski (1):
      extensions: format-security fixes in libip[6]t_icmp

Baruch Siach (5):
      ebtables: vlan: fix userspace/kernel headers collision
      xtables-monitor: fix build with older glibc
      include: fix build with kernel headers before 4.2
      xtables-monitor: fix build with musl libc
      include: extend the headers conflict workaround to in6.h

Florian Westphal (12):
      arptables-nft: use generic expression parsing function
      xtables: rename opcodes to arp_opcodes
      xtables: make all nft_parse_ helpers static
      arptables-nft: fix decoding of hlen on bigendian platforms
      tests: return-codes script is bash specific
      xtables: unify user chain add/flush for restore case
      xtables: add skip flag to objects
      xtables: add and use nft_build_cache
      xtables: add and set "implict" flag on transaction objects
      xtables: handle concurrent ruleset modifications
      tests: add test script for race-free restore
      extensions: SYNPROXY: should not be needed anymore on current kernels

Lucas Stach (1):
      xtables-legacy: add missing config.h include

Pablo Neira Ayuso (19):
      nft: add type field to builtin_table
      nft: move chain_cache back to struct nft_handle
      nft: move initialize to struct nft_handle
      xtables: constify struct builtin_table and struct builtin_chain
      extensions: libip6t_mh: fix bogus translation error
      xshared: check for maximum buffer length in add_param_to_argv()
      man: refer to iptables-translate and ip6tables
      nft: add struct nft_cache
      nft: statify nft_rebuild_cache()
      nft: add __nft_table_builtin_find()
      nft: add flush_cache()
      nft: cache table list
      nft: ensure cache consistency
      nft: keep original cache in case of ERESTART
      nft: don't skip table addition from ERESTART
      nft: don't care about previous state in ERESTART
      nft: do not retry on EINTR
      nft: reset netlink sender buffer size of socket restart
      configure: bump versions for 1.8.3 release

Phil Sutter (84):
      libiptc: Extend struct xtc_ops
      ip6tables-restore: Merge into iptables-restore.c
      ip6tables-save: Merge into iptables-save.c
      xtables: Introduce per table chain caches
      arptables: Support --set-counters option
      ebtables: Use xtables_exit_err()
      xtables: Don't use native nftables comments
      extensions: libipt_realm: Document allowed realm values
      extensions: TRACE: Point at xtables-monitor in documentation
      nft: Simplify nftnl_rule_list_chain_save()
      nft: Review unclear return points
      xtables-restore: Review chain handling
      nft: Review is_*_compatible() routines
      nft: Reduce __nft_rule_del() signature
      nft: Reduce indenting level in flush_chain_cache()
      nft: Simplify per table chain cache update
      nft: Simplify nft_rule_insert() a bit
      nft: Introduce fetch_chain_cache()
      nft: Move nft_rule_list_get() above nft_chain_list_get()
      xtables: Implement per chain rule cache
      nft: Drop nft_chain_list_find()
      xtables: Optimize flushing a specific chain
      xtables: Optimize nft_chain_zero_counters()
      tests: Extend verbose output and return code tests
      xtables: Optimize user-defined chain deletion
      xtables: Optimize list command with given chain
      xtables: Optimize list rules command with given chain
      nft: Make use of nftnl_rule_lookup_byindex()
      nft: Simplify nft_is_chain_compatible()
      nft: Simplify flush_chain_cache()
      xtables: Set errno in nft_rule_check() if chain not found
      nft: Add new builtin chains to cache immediately
      xtables: Fix position of replaced rules in cache
      utils: Add a manpage for nfbpf_compile
      xtables: Fix for inserting rule at wrong position
      xtables: Speed up chain deletion in large rulesets
      arptables-nft: Fix listing rules without target
      arptables-nft: Fix MARK target parsing and printing
      arptables-nft: Fix CLASSIFY target printing
      arptables-nft: Remove space between *cnt= and value
      arptables-nft-save: Fix position of -j option
      arptables-nft: Don't print default h-len/h-type values
      tests: shell: Add arptables-nft verbose output test
      xtables: Catch errors when zeroing rule rounters
      ebtables: Fix rule listing with counters
      nft: Fix potential memleaks in nft_*_rule_find()
      arptables-nft: Set h-type/h-length masks by default, too
      extensions: Fix arptables extension tests
      xtables: Fix for crash when comparing rules with standard target
      xtables: Fix for false-positive rule matching
      Revert "ebtables: use extrapositioned negation consistently"
      xshared: Explicitly pass target to command_jump()
      xtables-save: Fix table not found error message
      nft: Don't assume NFTNL_RULE_USERDATA holds a comment
      nft: Introduce UDATA_TYPE_EBTABLES_POLICY
      ebtables-nft: Support user-defined chain policies
      nft: Eliminate dead code in __nft_rule_list
      xtables: Fix error message when zeroing a non-existent chain
      xtables: Move new chain check to where it belongs
      xtables: Fix error messages in commands with rule number
      xtables: Fix error message for chain renaming
      tests: Extend return codes check by error messages
      arptables: Print space before comma and counters
      xlate-test: Support testing host binaries
      tests/shell: Support testing host binaries
      doc: Install ip{6,}tables-translate.8 manpages
      extensions: AUDIT: Document ineffective --type option
      extensions: Fix ipvs vproto parsing
      extensions: Fix ipvs vproto option printing
      extensions: Add testcase for libxt_ipvs
      extensions: connlabel: Fallback on missing connlabel.conf
      doc: Add arptables-nft man pages
      doc: Adjust arptables man pages
      doc: Add ebtables man page
      doc: Adjust ebtables man page
      xtables-legacy.8: Remove stray colon
      xtables-save: Point at existing man page in help text
      extensions: Install symlinks as such
      man: iptables-save: Add note about module autoloading
      xtables: Don't leak iter in error path of __nft_chain_zero_counters()
      tests: Fix ipt-restore/0004-restore-race_0 testcase
      xtables: Fix for explicit rule flushes
      Drop release.sh
      Revert "build: don't include tests in released tarball"

Sam Banks (1):
      extensions: libxt_osf.: Typo in manpage