{"id":120546,"date":"2024-11-10T13:09:17","date_gmt":"2024-11-10T11:09:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-paketnogo-filtra-iptables-1-8-11"},"modified":"2024-11-10T13:09:17","modified_gmt":"2024-11-10T11:09:17","slug":"vypusk-paketnogo-filtra-iptables-1-8-11","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-paketnogo-filtra-iptables-1-8-11","title":{"rendered":"The release of the iptables 1.8.11 packet filter.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
After a year of development, the release of the classic toolkit for managing the packet filter iptables 1.8.11 has been published. The recent focus of its development has been on components to maintain backward compatibility \u2014 iptables-nft and ebtables-nft, which provide utilities with the same command-line syntax as iptables and ebtables, but translate the received rules into nftables bytecode. The original set of iptables programs, including ip6tables, arptables, and ebtables, was marked as deprecated in 2018 and has already been replaced by nftables in most distributions. <\/p>\n
In the new version: <\/p>\n
\n
A new utility, arptables-translate, has been added to convert arptables rules into a configuration format for use with nftables.\n
The ebtables-nft utility has added support for the commands \u2018\u2014change-counters\u2019, \u2018\u2014replace\u2019, and \u2018\u2014list-rules\u2019. It is now possible to specify counters for rules using the syntax \u2018-c N,M\u2019. The ability to reset individual rules has also been added.\n
The iptables-translate utility has been enhanced with support for TPROXY targets and the xt_socket extension for socket matching. The definition of protocol names has been unified with iptables.\n
The iptables utility now includes implicit extension searching for dccp and ipcomp protocols to achieve behavior consistent with iptables-save.\n
Calls to getprotobynumber() have been removed from the iptables-save utility to improve performance when processing large sets of rules.\n
The configure script has been updated to allow the disabling of builds with libnfnetlink. <\/ul>\n