From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4fMxRL2TMnz342J for ; Fri, 27 Feb 2026 18:18:54 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4fMxR81cLCz33t6 for ; Fri, 27 Feb 2026 18:18:44 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4fMxR76T0Wz5h3; Fri, 27 Feb 2026 18:18:43 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1772216324; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=eCsksiNZkbKHpZOe453GAWjp8OFujqNfR7/7GrpnzLc=; b=5BtBYkkYnWfnDW6rp7eCn3Ds9bLl8FWjnYdxXGlslKMX0Kny+Fga3U0CxQ2jAAnFNkLT+C 6vsvNFHSsklB2oDg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1772216324; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=eCsksiNZkbKHpZOe453GAWjp8OFujqNfR7/7GrpnzLc=; b=cRXVN6ZvqUQLQBjee1NfbPrpeDSRnCgt3Phw+fDZJnIxibEnlCYsxvMOTtb1a24zUsDGiP KbE1shzyLwKf1bJQLYtTQpnsmihK7tr8nRD/8JLppX0x7V4vDc2XZg1nFhQD7W/jRJi3JL 1slsJlfbSKsdkWpFR9l+ksENCmEKAA1VGfktomiABnjZculS4pQYbWcN/v11brAjKi16Fq 665JR/zB40IMAQk3lPO1yL9GlafHugdpl83LcwXADZadhBGxjmJPZbYo90IZB2k2d2qgBM sqZQkWl71g9tbjxQIf7BCtIpJ4wGHjts2S6MZnWDNFfairf+3bnUcjU1bsqYrg== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] iptables: Update to version 1.8.12 Date: Fri, 27 Feb 2026 19:18:34 +0100 Message-ID: <20260227181838.3716442-6-adolf.belka@ipfire.org> In-Reply-To: <20260227181838.3716442-1-adolf.belka@ipfire.org> References: <20260227181838.3716442-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit - Update from version 1.8.11 to 1.8.12 - No change to rootfile - Changelog 1.8.12 configure: Avoid addition assignment operators libxtables: refuse to run under file capabilities man: iptables-restore.8: document flush behaviour for user-defined chains nft: revert compat expressions in userdata ip[6]tables-translate: fix test failures when WESP is defined nft: fix interface comparisons in `-C` commands extensions: libebt_redirect: prevent translation configure: Bump version for 1.8.12 release nft: Drop interface mask leftovers from post_parse callbacks nft: Make add_log() static nft: ruleparse: Introduce nft_parse_rule_expr() nft: __add_{match,target}() can't fail nft: Introduce UDATA_TYPE_COMPAT_EXT nft-ruleparse: Fallback to compat expressions in userdata nft: Pass nft_handle into add_{action,match}() nft: Embed compat extensions in rule userdata tests: iptables-test: Add nft-compat variant extensions: icmp: Support info-request/-reply type names xshared: Accept an option if any given command allows it extensions: sctp: Translate bare '-m sctp' match libxtables: Promote xtopt_esize_by_type() as xtopt_psize getter Revert "libxtables: Promote xtopt_esize_by_type() as xtopt_psize getter" xtables-monitor: Print -X command for base chains, too nft: Support replacing a rule added in the same batch libxtables: Store all requested target types ruleparse: arp: Fix for all-zero mask on Big Endian tests: shell: Review nft-only/0009-needless-bitwise_0 configure: Auto-detect libz unless explicitly requested iptables: fix null dereference parsing bitwise operations extensions: man: Add a note about route_localnet sysctl Signed-off-by: Adolf Belka --- lfs/iptables | 30 ++++++++++++++---------------- 1 file changed, 14 insertions(+), 16 deletions(-) diff --git a/lfs/iptables b/lfs/iptables index e8c4069d6..398dbb4be 100644 --- a/lfs/iptables +++ b/lfs/iptables @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.8.11 +VER = 1.8.12 THISAPP = iptables-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -41,7 +41,7 @@ objects = $(DL_FILE) \ $(DL_FILE) = $(DL_FROM)/$(DL_FILE) netfilter-layer7-v2.23.tar.gz = $(URL_IPFIRE)/netfilter-layer7-v2.23.tar.gz -$(DL_FILE)_BLAKE2 = 82daca3940e253f6fda7cf5b3332488c31391ff66c0112c0cae2645ab61918f81e6028ea2b1e1385f21e4c5ff8cd64cba31072a2417a2ab696fe1c6b5464cea1 +$(DL_FILE)_BLAKE2 = 5516aadcf413efde272b09d1747e78e19f1d9e5481cdfdfe2360ca5f16926bb17535f58e4014a3616c59da83f41b39fc71e591c916bc309c7ca31701785a9e7e netfilter-layer7-v2.23.tar.gz_BLAKE2 = 5c8ab722f6fbc126f2f65ecf401de5fc40560c20e3be52f783db34410446185dcb6781b3148e4a174e8b2d2c290bec0342dea95e8cefc35c39345617fa7a8fdc install : $(TARGET) @@ -78,22 +78,20 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_SRC) && tar zxf $(DIR_DL)/netfilter-layer7-v2.23.tar.gz cd $(DIR_APP) && cp -vf $(DIR_SRC)/netfilter-layer7-v2.23/iptables-1.4.3forward-for-kernel-2.6.20forward/* \ ./extensions/ - cd $(DIR_APP) && ./configure \ - --prefix=/usr \ - --libdir=/lib \ - --includedir=/usr/include \ - --enable-libipq \ - --with-xtlibdir=/lib/xtables \ - --libexecdir=/lib \ - --bindir=/sbin \ - --sbindir=/sbin \ - --mandir=/usr/share/man \ - --disable-nftables \ - --with-pkgconfigdir=/usr/lib/pkgconfig + --prefix=/usr \ + --libdir=/lib \ + --includedir=/usr/include \ + --enable-libipq \ + --with-xtlibdir=/lib/xtables \ + --libexecdir=/lib \ + --bindir=/sbin \ + --sbindir=/sbin \ + --mandir=/usr/share/man \ + --disable-nftables \ + --with-pkgconfigdir=/usr/lib/pkgconfig cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install - @rm -rf $(DIR_APP) $(DIR_SRC)/netfilter-layer7* @$(POSTBUILD) -- 2.53.0