IP Packet Filter Administration

Edit Package iptables

Iptables is used to set up, maintain, and inspect the tables of IP
packet filter rules in the Linux kernel. This version requires kernel
2.4.0 or newer.

Refresh
Refresh
Source Files
Filename Size Changed
iptables-1.8.2-dont_read_garbage.patch 0000000769 769 Bytes
iptables-1.8.3.tar.bz2 0000716257 699 KB
iptables-1.8.3.tar.bz2.sig 0000000590 590 Bytes
iptables-apply-mktemp-fix.patch 0000000708 708 Bytes
iptables-batch-lock.patch 0000002592 2.53 KB
iptables-batch.patch 0000010381 10.1 KB
iptables.changes 0000035107 34.3 KB
iptables.keyring 0000006684 6.53 KB
iptables.spec 0000012207 11.9 KB
Latest Revision
Gustavo Yokoyama Ribeiro's avatar Gustavo Yokoyama Ribeiro (gyribeiro) committed (revision 2)
- Add Conflicts with iptables-nft = 1.6.2 as during the update to
  iptables 1.8 ip6tables-restore-translate, ip6tables-translate,
  iptables-restore-translate and iptables-translate were moved from
  iptables-nft subpackage (now iptables-backend-nft) to the main
  package. So we need to add a conflict here otherwise we hit file
  conflicts error during the update.

- add missing Provides/Obsoletes for the renamed package
  iptables-backend-nft (was iptables-nft)

- Update to new upstream release 1.8.3
  * ebtables: Fix rule listing with counters
  * ebtables-nft: Support user-defined chain policies
- Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch
  0001-include-fix-build-with-kernel-headers-before-4.2.patch
  (upstreamed)

- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch,
  0001-include-extend-the-headers-conflict-workaround-to-in.patch
  to fix build with older linux-glibc-devel. [boo#1132821]

- Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation
  where 'iptables -L' reads garbage from the struct as the kernel
  never filled it in the bugged case. This can lead to issues like
  mapping a few TiB of memory [bsc#1106751].

- Update to new upstream release 1.8.2
  * Fix incorrect handling of various targets and options in
    iptables-nft,ebtables-nft,arptables-nft.
Comments 0
openSUSE Build Service is sponsored by