{"id":110739,"date":"2023-10-11T15:10:13","date_gmt":"2023-10-11T13:10:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-paketnogo-filtra-iptables-1-8-10"},"modified":"2023-10-11T15:10:13","modified_gmt":"2023-10-11T13:10:13","slug":"vypusk-paketnogo-filtra-iptables-1-8-10","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-paketnogo-filtra-iptables-1-8-10","title":{"rendered":"Release of the iptables 1.8.10 packet filter","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A release of the classic toolkit for managing the packet filter iptables 1.8.10 has been published, with recent developments focused on components to maintain backward compatibility \u2014 iptables-nft and ebtables-nft, providing utilities with the same command-line syntax as iptables and ebtables but translating the received rules into nftables bytecode. The original set of iptables programs, including ip6tables, arptables, and ebtables, was deprecated in 2018 and has already been replaced by nftables in most distributions. <\/p>\n
In the new version: <\/p>\n
\n
Support for insert rules specifying the index number has been added to the xtables-translate utility (these are transformed into nft rules 'insert rule \u2026 index N').\n
Support for broute (bridge route) tables has been added to ebtables-nft.\n
The debug output of the nft-variants utility, enabled when the '-v' option is specified multiple times, now includes the display of existing set collections.\n
Support for the names 'mld-listener-query', 'mld-listener-report', and 'mld-listener-done' has been added for addressing ICMPv6 messages with types 130, 131, and 132.\n
Correct parsing of 'meta mark' expressions and their transformation into '-j MARK' rules has been provided, which may be necessary for mixing nftables and iptables-nft in a single table.\n