{"id":161909,"date":"2026-02-20T17:12:07","date_gmt":"2026-02-20T15:12:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-paketnogo-filtra-iptables-1-8-12"},"modified":"2026-02-20T17:12:07","modified_gmt":"2026-02-20T15:12:07","slug":"vypusk-paketnogo-filtra-iptables-1-8-12","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-paketnogo-filtra-iptables-1-8-12","title":{"rendered":"Release of Packet Filter Iptables 1.8.12","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
After a year and a half of development, the release of the classic toolkit for managing the packet filter iptables 1.8.12 has been published. Recently, its development has focused on components for preserving backward compatibility \u2014 iptables-nft and ebtables-nft, which provide utilities with the same command-line syntax as iptables and ebtables but translate the received rules into nftables bytecode. The original set of iptables programs, including ip6tables, arptables, and ebtables, was declared obsolete in 2018 and has already been replaced by nftables in most distributions. <\/p>\n
In the new version: <\/p>\n
\n
The iptables-nft utility has implemented support for atomic rule addition and replacement in a single transaction. *filter -A FORWARD -m comment --comment 'new rule being replaced' -R FORWARD 1 -m comment --comment 'new replacing rule' COMMIT\n
The xtables-monitor utility has gained support for recognizing base chain removal operations (INPUT, FORWARD, OUTPUT) and in this case outputs the command 'iptables -X chain_name'.\n
Translation to the nftables format of rules with protocol '-p sctp' has been provided, but without explicitly specifying the module '-m sctp', as is done for TCP and UDP (it is sufficient to specify '-p tcp' or '-p udp', and '-m tcp' or '-m udp' will be applied automatically).\n
Support for ICPM packets info-request and info-reply has been added.\n
Errors in the iptables-translate and ip6tables-translate utilities, used for converting rules to nftables, have been corrected. <\/ul>\n