Linux下的防火墙软件Iptables发布1.4.20 2013-08-06 上一个版本是2013-05-29的1.4.19.修正了一些BUG以及一些扩展的增强。
iptables 是与 Linux 内核集成的 IP 信息包过滤系统。如果 Linux 系统连接到因特网或 LAN、服务器或连接 LAN 和因特网的代理服务器， 则该系统有利于在 Linux 系统上更好地控制 IP 信息包过滤和防火墙配置。
完全改进：
Alexey Perevalov (1):
doc: clarify DEBUG usage macro
Andy Spencer (1):
iptables: use autoconf to process .in man pages
Eric Leblond (1):
configure: display summary
Florian Westphal (2):
extensions: libipt_ULOG: man page should mention NFLOG as replacement
extensions: libxt_connlabel: use libnetfilter_conntrack
Jozsef Kadlecsik (2):
Introduce a new revision for the set match with the counters support
libxt_CT: Add the "NOTRACK" alias
Mart Frauenlob (7):
libip6t_mh: Correct command to list named mh types in manpage
extensions: libxt_DNAT: rename IPv4 manpage and tell about IPv6 support
extensions: libxt_REDIRECT: rename IPv4 manpage and tell about IPv6 support
extensions: libxt_NETMAP: rename IPv4 manpage and tell about IPv6 support
extensions: libxt_SNAT: rename IPv4 manpage and tell about IPv6 support
extensions: libxt_MASQUERADE: rename IPv4 manpage and tell about IPv6 support
extensions: libxt_LOG: rename IPv4 manpage and tell about IPv6 support
Pablo Neira Ayuso (7):
extensions: libxt_LED: fix parsing of delay
Merge branch 'stable'
Merge branch 'stable'
ip{6}tables-restore: fix breakage due to new locking approach
libxt_recent: restore minimum value for --seconds
iptables-xml: fix parameter parsing (similar to 2165f38)
iptables 1.4.20 release
Patrick McHardy (1):
extensions: add copyright statements
Phil Oester (7):
xtables: improve get_modprobe handling
ip[6]tables: Add locking to prevent concurrent instances
iptables: Fix connlabel.conf install location
ip6tables: don't print out /128
libip6t_LOG: target output is different to libipt_LOG
build: additional include path required after UAPI changes
iptables: iptables-xml: Fix various parsing bugs
Russell Senior (1):
libxt_recent: restore reap functionality to recent module
Willem de Bruijn (1):
build: fail in configure on missing dependency with --enable-bpf-compiler
holger@eitzenberger.org (1):
extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
下载：http://iptables.org/projects/iptables/files/iptables-1.4.20.tar.bz2
来自:开源中国社区
