From 1bc1478f43aeed421347a556a29d46e64cc665ae5347c0b310177f5e5a024b99 Mon Sep 17 00:00:00 2001
From: Jan Engelhardt <jengelh@inai.de>
Date: Sun, 1 Nov 2020 13:31:56 +0000
Subject: [PATCH] - Update to release 1.8.6

OBS-URL: https://build.opensuse.org/package/show/security:netfilter/iptables?expand=0&rev=140
---
 iptables-1.8.5.tar.bz2     |   3 -
 iptables-1.8.5.tar.bz2.sig | Bin 590 -> 0 bytes
 iptables-1.8.6.tar.bz2     |   3 +
 iptables-1.8.6.tar.bz2.sig | Bin 0 -> 566 bytes
 iptables-batch-lock.patch  |  19 +++--
 iptables-batch.patch       |  18 ++--
 iptables.changes           |  11 +++
 iptables.keyring           | 163 ++++++++++++++-----------------------
 iptables.spec              |   2 +-
 9 files changed, 94 insertions(+), 125 deletions(-)
 delete mode 100644 iptables-1.8.5.tar.bz2
 delete mode 100644 iptables-1.8.5.tar.bz2.sig
 create mode 100644 iptables-1.8.6.tar.bz2
 create mode 100644 iptables-1.8.6.tar.bz2.sig

diff --git a/iptables-1.8.5.tar.bz2 b/iptables-1.8.5.tar.bz2
deleted file mode 100644
index e8ddadf..0000000
--- a/iptables-1.8.5.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d457d74512e63aa3f50336e0597d4023c0e3c6845594d38532efb6ebcb294309
-size 713769
diff --git a/iptables-1.8.5.tar.bz2.sig b/iptables-1.8.5.tar.bz2.sig
deleted file mode 100644
index 5d27d58b0ba7eab5633428a10fdcb98749898ee7f30e861e96a6d20c7c5f6fbd..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 590
zcmV-U0<ryx0!st{0SW*$79j+{ow5c$9dI<dVN$KDMpdCE(vsu_0$$gIaTgq8Z*paH
zWnpbVZe?_4X>4?5axQOjX8;Nb5UWO2p(fIj<hs-l0J_Q4By1BljLhqJ%{QkHye$u-
zH0UK-Yv)g&{www{J5KcVj9SwGOHN-KPk=xwAL~;cUz*uuuBPF_kxU!NYq{)zDzvQi
zVEPNnvtQLc!dK7H%lhd6#^<VVrUb_JEETE`K)Dy}#eXq-eu!L=ttN?aGeD`z$Erh{
z*p9s0oY`2`quq>Kp?zbQ$!*qHuYfc2sp8FOCAoFrj{FswmkxDTy+wPO%kqTbqe&CU
z4F>Kc1-t`Is0bUt|C(pFk;MC=r*k@otM~S<Nsm>QJ-^@WgJgSysyOsw{*N~PE!W3>
z96C3^sanPmXqz&T&*2c}EZzy4or-GaOydJlU~%r7mhsUFFIz4V$<hmbddj`F%IK&~
z1oK$>kA8w!9=7ea1Cp7DwT0UVCKQiArYBR@i<AHHOll)*kO)8Ky%%y<w76<EwihDV
z;Q8MohA8)Ve+Os(Y&ygmqb#L5L-H_!I8lXi@$zZLOlyFN8$ZFCLpkq^;fozI$%QG*
z6e%b2$b)^UNlNb2HwDTyOr)4S7h$M#ac>T|qAIx`247=8^LR-dPLwusX7dcmZeS+$
zH1+tue7ct2qHpZJ>oSE8vO7e_?Pkfg+f~wHV=55r`Zw6M91etRSlXTa)Jw?7BRr+%
cIR4TRcE`+KqNMc!VF0?A#-qrzxBpR#DnE%Ong9R*

diff --git a/iptables-1.8.6.tar.bz2 b/iptables-1.8.6.tar.bz2
new file mode 100644
index 0000000..1e88085
--- /dev/null
+++ b/iptables-1.8.6.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a0f4fe0c3eb8faa5bd9c8376d132f340b9558e750c91deb2d5028aa3d0047767
+size 715744
diff --git a/iptables-1.8.6.tar.bz2.sig b/iptables-1.8.6.tar.bz2.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..e9f0023b71654ae99cb04cf3b134f66f8e16b759d7c12f6d5d3e7c3a1b5ed5a0
GIT binary patch
literal 566
zcmV-60?GY}0y6{v0SW*e79j*T*<`H1NrA^z0Q;NOU6+cA6d>dU0$-h=Q~(MI5Y=6m
zii#8<<X&|T{w&mUTLX@o*FuauwT&3CXmI|>)N~O~$iO?dCTcOM)+*moKH+}d;oY$#
z*3y?QyVzBbBv64=d^a~W5OZ?pid#3qb)8KfSB{Z?%vGcd5_;iql_!*+RYFrvj+^N|
zjQ}dht$+c<Y(gHdvxFm84m#ra*!Yc)uw^ST+hD!0fbPk3R$?z$KO7(>d)wwN$p2!D
zN?j&F376!HN%Xl*r-${UuuD1nVz?z-N>kcGb76s2Zp)s0=X`<|cd4{B$ESS9&1;&F
zK_Vip%SNp$HZR6{_s--`#<22`HEcs_LaZxj6p@d2_;H=gt8}KJkuaBdtfelOmcA`{
zF+M>j@5~xt6_wY=Z3&sBDNfyPD{_+cOfr=%#Fhd~6;WIZgKT6ZTEc(S!_b{bNfZA$
z-|Y)HbmkUq@3vuBN>YQ`>$C7~YeXVoKyl=5uG{}tCQAbR>du$@0&s#K{_qEGoi=cn
z+lTmk6=<JJ3C%pbw&>({DZ=QWtfliwaG>o&r60KKvbP`B!_xyBzd8}y@zuQ#^f`Z{
zji7fzjb4%12$2U(Rq_CrV@q<hY0B7P@eM-Z_<Ste+)#>_Kb{b|QTL~Fl0(gJ2P5tZ
znP(k5LB?$P`fu~#JXrtCrIM{<$6uD5v$a;Vy*AxHV{M)rXUBztKbo#`k{<0Uf;pe1
E<Yl-Og#Z8m

literal 0
HcmV?d00001

diff --git a/iptables-batch-lock.patch b/iptables-batch-lock.patch
index 4f3b0c7..018eff3 100644
--- a/iptables-batch-lock.patch
+++ b/iptables-batch-lock.patch
@@ -10,10 +10,10 @@ Date: 2017-06-26T10:53:24+0000
  iptables/xshared.c        |    8 +++++++-
  2 files changed, 28 insertions(+), 1 deletion(-)
 
-Index: iptables-1.6.2/iptables/iptables-batch.c
+Index: iptables-1.8.6/iptables/iptables-batch.c
 ===================================================================
---- iptables-1.6.2.orig/iptables/iptables-batch.c
-+++ iptables-1.6.2/iptables/iptables-batch.c
+--- iptables-1.8.6.orig/iptables/iptables-batch.c
++++ iptables-1.8.6/iptables/iptables-batch.c
 @@ -403,6 +403,27 @@ main(int argc, char *argv[])
  	tables[3].name = "raw";
  	tables[3].handle = NULL;
@@ -42,16 +42,17 @@ Index: iptables-1.6.2/iptables/iptables-batch.c
  
  	while((r = getline(&iline, &llen, fp)) != -1)
  	{
-Index: iptables-1.6.2/iptables/xshared.c
+Index: iptables-1.8.6/iptables/xshared.c
 ===================================================================
---- iptables-1.6.2.orig/iptables/xshared.c
-+++ iptables-1.6.2/iptables/xshared.c
-@@ -248,9 +248,13 @@ void xs_init_match(struct xtables_match
+--- iptables-1.8.6.orig/iptables/xshared.c
++++ iptables-1.8.6/iptables/xshared.c
+@@ -248,10 +248,14 @@ void xs_init_match(struct xtables_match
  
  static int xtables_lock(int wait, struct timeval *wait_interval)
  {
 +	static bool already_locked = false;
  	struct timeval time_left, wait_time;
+ 	const char *lock_file;
  	int fd, i = 0;
  
 +	if (already_locked)
@@ -60,7 +61,7 @@ Index: iptables-1.6.2/iptables/xshared.c
  	time_left.tv_sec = wait;
  	time_left.tv_usec = 0;
  
-@@ -262,8 +266,10 @@ static int xtables_lock(int wait, struct
+@@ -267,8 +271,10 @@ static int xtables_lock(int wait, struct
  	}
  
  	if (wait == -1) {
@@ -70,5 +71,5 @@ Index: iptables-1.6.2/iptables/xshared.c
  			return fd;
 +		}
  
- 		fprintf(stderr, "Can't lock %s: %s\n", XT_LOCK_NAME,
+ 		fprintf(stderr, "Can't lock %s: %s\n", lock_file,
  			strerror(errno));
diff --git a/iptables-batch.patch b/iptables-batch.patch
index 45e5327..0873e7b 100644
--- a/iptables-batch.patch
+++ b/iptables-batch.patch
@@ -3,14 +3,14 @@
  iptables/iptables-batch.c |  468 ++++++++++++++++++++++++++++++++++++++++++++++
  2 files changed, 477 insertions(+)
 
-Index: iptables-1.8.5/iptables/Makefile.am
+Index: iptables-1.8.6/iptables/Makefile.am
 ===================================================================
---- iptables-1.8.5.orig/iptables/Makefile.am
-+++ iptables-1.8.5/iptables/Makefile.am
-@@ -111,3 +111,12 @@ install-exec-hook:
- 	for i in ${v6_sbin_links}; do ${LN_S} -f xtables-legacy-multi "${DESTDIR}${sbindir}/$$i"; done;
- 	for i in ${x_sbin_links}; do ${LN_S} -f xtables-nft-multi "${DESTDIR}${sbindir}/$$i"; done;
- 	${LN_S} -f iptables-apply "${DESTDIR}${sbindir}/ip6tables-apply"
+--- iptables-1.8.6.orig/iptables/Makefile.am
++++ iptables-1.8.6/iptables/Makefile.am
+@@ -138,3 +138,12 @@ uninstall-hook:
+ 		); \
+ 		( cd "$$dir" && rm -f ip6tables-apply ); \
+ 	}
 +
 +iptables_legacy_batch_SOURCES  = iptables-batch.c iptables.c xshared.c
 +iptables_legacy_batch_LDFLAGS  = ${xtables_legacy_multi_LDFLAGS}
@@ -20,10 +20,10 @@ Index: iptables-1.8.5/iptables/Makefile.am
 +ip6tables_legacy_batch_LDFLAGS = ${xtables_legacy_multi_LDFLAGS}
 +ip6tables_legacy_batch_LDADD   = ${xtables_legacy_multi_LDADD}
 +sbin_PROGRAMS += iptables-legacy-batch ip6tables-legacy-batch
-Index: iptables-1.8.5/iptables/iptables-batch.c
+Index: iptables-1.8.6/iptables/iptables-batch.c
 ===================================================================
 --- /dev/null
-+++ iptables-1.8.5/iptables/iptables-batch.c
++++ iptables-1.8.6/iptables/iptables-batch.c
 @@ -0,0 +1,468 @@
 +/*
 + * Author: Ludwig Nussel <ludwig.nussel@suse.de>
diff --git a/iptables.changes b/iptables.changes
index 8e7294b..08c9c77 100644
--- a/iptables.changes
+++ b/iptables.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Sun Nov  1 12:31:34 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.8.6
+  * iptables-nft had pointlessly added "bitwise" expressions to
+    each IP address match, needlessly slowing down run-time
+    performance (by 50% in worst cases).
+  * iptables-nft-restore: Support basechain policy value of "-"
+    (indicating to not change the chain's policy).
+  * nft-translte: Fix translation of ICMP type "any" match.
+
 -------------------------------------------------------------------
 Wed Jun  3 13:21:57 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/iptables.keyring b/iptables.keyring
index 1cce01f..34ba618 100644
--- a/iptables.keyring
+++ b/iptables.keyring
@@ -1,107 +1,64 @@
-pub   4096R/0xA4111F89BB5F58CC 2010-10-21 [expires: 2015-10-20]
-      Key fingerprint = 57FF 5E9C 9AA6 7A86 0B55  7AF7 A411 1F89 BB5F 58CC
-uid                 [ expired] Netfilter Core Team <coreteam@netfilter.org>
-sub   4096R/0x0FD3A13A04B92F5C 2010-10-21 [expires: 2015-10-20]
-
-pub   4096R/0xAB4655A126D292E4 2015-10-19 [expires: 2020-10-17]
-      Key fingerprint = C09D B206 3F1D 7034 BA61  52AD AB46 55A1 26D2 92E4
-uid                 [ unknown] Netfilter Core Team <coreteam@netfilter.org>
-sub   4096R/0xE3B0B6BAE3AAA39E 2015-10-19 [expires: 2020-10-17]
-
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
-mQINBEzAS5EBEADVlGm+KwODJcVmP33HTCbn/eP8obZbgu+3Z1CYRklF8V43vC6D
-8Jfk7fjD4/gWbAKZxriOESXVAN7mp0Fho4+Ga+pxWeLIET9tVM5xbNFK1p9R3XCK
-p5SrugG+tGhizTR9b/1YCMVRz/yX3aDtC7lwObas4hkr5BqhphjvlkjFE7us32by
-43LPpFj2yUpp1VdOf6gxl03kAgJg08h9J7a+n9KHQeAhIpXSRFq3tXiTdXQlovsv
-ckwBjO0m8P2d1Z8/UYwXQgXzuO8W8EqaUSR95nDwl7UnilnKJm2fGvNg3A6PfCSk
-3KdeEBZ45SRfMTPsuC5C4T0Az75h3HFR6YSae46ymg7d4ZA/Bd5K4hvp4PdYrfCi
-GXen7iK9q5XDpopWb0yCrEVJzKjBjDurvpLtAD0IFWcpB6zwM38AnxVH05J8QOx/
-VCZ4vZJxTKWbpHbdcISSMmVt00VfKorF9DsjiAcBRMBcIvDpJTP4yjvr32W09wLc
-d5CIYGrLKhLNysUIJ44AQoTL9yV5aQvCb2EFnoPqCEKQm8onTAGX19PpTDjDPJFt
-WyMMUDtiMp2yODuFo1qHjxvqzSVX+Ti2sGpiT1hEz97GAIlbAvmXs/bTb+U+rBnd
-6027ooes3cWmBSV5kpz/sMp+nFynrLZ5NDnehPScz3W31oGgSdrGsnnhaQARAQAB
+mQINBF+HdQgBEACzteJUJGtj3N6u5mcGh4Nu/9GQfwrrphZuI7jto2N6+ZoURded
+660mFLnax7wgIE8ugAa085jwFWbFY3FzGutUs/kDmnqy9WneYNBLIAF3ZTFfY+oi
+V1C09bBlHKDj9gSEM2TZ/qU14exKdSloqcMKSdIqLQX27w/D6WmO1crDjOKKN9F2
+zjc3uLjo1gIPrY+Kdld29aI0W4gYvNLOo+ewhVC5Q6ymWOdR3eKaP2HIAt8CYf0t
+Sx8ChHdBvXQITDmXoGPLTTiCHBoUzaJ/N8m4AZTuSUTr9g3jUNFmL48OrJjFPhHh
+KDY0V59id5nPu4RX3fa/XW+4FNlrthA5V9dQSIPh7r7uHynDtkcCHT5m4mn0NqG3
+dsUqeYQlrWKCVDTfX/WQB3Rq1tgmOssFG9kZkXcVTmis3KFP1ZAahBRB33OJgSfi
+WKc/mWLMEQcljbysbJzq74Vrjg44DNK7vhAXGoR35kjj5saduxTywdb3iZhGXEsg
+9zqV0uOIfMQsQJQCZTlkqvZibdB3xlRyiCwqlf1eHB2Vo7efWbRIizX2da4c5xUj
++IL1eSPmTV+52x1dYXpn/cSVKJAROtcSmwvMRyjuGOcTNtir0XHCxC5YYBow6tKR
+U1hrFiulCMH80HeS+u/g4SpT4lcv+x0DlN5BfWQuN5k5ZzwKb6EQs092qQARAQAB
 tCxOZXRmaWx0ZXIgQ29yZSBUZWFtIDxjb3JldGVhbUBuZXRmaWx0ZXIub3JnPokC
-PgQTAQIAKAUCTMBLkQIbAwUJCWYBgAYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AA
-CgkQpBEfibtfWMzULxAAtGgYeuEqk0F9y4sz6hFJf+fXKSPPrwWTIUXs/sCxlBtS
-lgf9oTvk3aT48zsMIfsDsS8yfIUjaK+eedIZW3oJ0lBtwRncZKjks8Od5J7DvEhR
-Kpo3cajT1KXJh584IvXN0/BbCdPUI6EQE8n0fEUrSWANfzhuD3qYtX9UUGBq/7i8
-Cf3pGFDeYRjcwWeNZ1T+xbaCKPS5BGlOVhMtauaTBZvTJniB828bOZXd3KrXUeul
-AicbzZzqU7XcNX2YKw19MTQzuGNZQ3npJUPQiHgyELTh3+YUmRkPaZaZiDNZeQvu
-/j8cgSoa26Q48apjghREo0Ues4MwQwEGBbdVkEQQMuC9ASti3OyZBTOqyApc2rpE
-VsW2CkqvoQ8jaP51Ua4mjerYkqEqXaVtbPelNFMJXGNXrKdf0xg5Nl/onWnT9S/s
-jtR3LtjOQ0apbBiGPROtYKWSQtA55TgYNLLS1+947TvU134Px1FA8Dqi72SBl7Xc
-ET4nwISO222wMJBxbY4MYB2TppMysIKXUazIyekbRkpK1woH4AR6NsuJOiVdhjEi
-46MkN7tmHI9S9blA98Ih6C9hMz2YgmQEwOQ0qYgVruPdYZSP+M5o+pra9ch+STBk
-FbB03L9kqcAAE8wpGSBRYU+KuyVRipnPeqoeR8niO71AiKbsfbL1skTGRafC2Q+5
-Ag0ETMBLkQEQANNv2Ymm/BVxwqb1vrLq1scoWK5kmeaRD3ndMBv9F3xwqGnE/JTn
-HnVoZIzGb8MD+MCe9jfm8Y+NLU0D71NpDDqRzFZCCjcTmRMYV6QXlsg/ndnSaU1b
-hG0gSq4N+qZFZ+35yiY5pYv1qZkIqWr4/vg9mk53CU620bNgNJ1+F19s/eTw1231
-pJ6K6BsDi7pj4LXGD5wHZPKAmLabFweCkGbGQo6VwWw1ieNJ0igvzkZtVXuvoeHU
-mAitCaZT9AIYDl4PHryckIzjgTdhK0PP92fyHV64Yr3B7G6hWlEwq4wKk9irdgqD
-20Fuqw8Cvv6k1YucWfdpNbZkUI3siQE+1HUUuRTcT8yrPcEA5ZM1/U+e8jBT3EAr
-hk69G6LCfwyX2Xd/JGlBmc0Qv0t2YKqj9Io1G5lBN1q57+vK7ttiIUomwvfD2ltY
-0bdcEr5LjXOk3Sb+OPIVm7+vr6hDMKdUpdm5ABZRSUb0RJ37hBT+DKYbnp0t/e3a
-MXxV9m3jUq8hNdwc8vU1khr9kf+MWPonE0Vw2kqHIIb4I5W9HkMJf4Vzj9/hVPMI
-ucV+2de/7zqxwa0Jh5VSD7SeKj7LznsAy9gi/AioYq4AKVTsigfyJlWpjOLeOvv7
-z4uUfLRQ5OWWfX8BBw8SoPwnWQD4cXHkrHXVwYR2yy7pEc1CstUN+uqXABEBAAGJ
-AiUEGAECAA8FAkzAS5ECGwwFCQlmAYAACgkQpBEfibtfWMyLqw/6A12S4bnLYaik
-ToKc13ywTUsHplbmlLOy2E/5ZMksdfuWjh9XTMR0nbXWnFULxGKTP00kA0yVpv/j
-beDY/qLzY2Yb0rROCQJjuWSLYuNW40+Hmh9TGsDWt7iK3XsONVpV0sRsMOBCwV3k
-2EsFXu73Fj+1JvQ+WSGluj+N7HFAqPi5OFk3IFFnIGhScUz22V6meSaOEqiXLySg
-qh3lv7+XuGzoBjdy7dDm+SnbmK9lO1IqPsIm4iDwmTNJBiu1Wrz319kLYA0/Vx+o
-fmxyViOX1GZShb1mGH0Aeo4jeYmDNLXapkoymC3HCIMctYDmuIw6QlgG8i1LRcFh
-VKMngLjZ17dl/w8gYOdkCsGIUBzvbFBhxuJnXMnFVyDxft/lorMAimH2kbjDn6qa
-H0uV8ILfFVe6gnKzanugmaSQjWzby/ARPhs6OYAXoIUv5MUVDgvTzVmTckWjVa1R
-kMm3eGmDSqoMxsPmarb80nkoFQMOPhJWlyaUCt6HHRYuSkIcxY4H4Ni3Oq1s1R9/
-EqUuIfxNv7Kp0mcsE2KvANc3JfB9wXwLWqDYRCifLkCD6pbpt9L/+xQ49VzcFxNO
-9DqTyk4N7cz7OZrAi+ouVrdFuiwnZyn5YSQoof6Pos58b3bkFn14m9gofwTqGzPh
-R4Vot9rRu5zrWdoCM4cRThpJyrjqBMuZAg0EViV2IwEQALrfnP0L2QbpXPN1Yg7w
-ESbOMnp3B7nIyeVmo3mvYI/mH0GtEHcFbigsUt4nIXCxI/ppB5NQH/GR8EbTUbq2
-OycNaIRWSDYHX+LDijyZ9NO6m8wbQODdhjroK7q8rHzO8Vp+reNzPM2nY7Uh3w3s
-dPrOERGYeZld1nDyN20ko2Zg4fIJIwVJaHwv4L1j9GYAKp6ACnyG81+VA9adPNCi
-9YyIbET/3/bWkl86AS78rLY7fFo5s2BZn0gvFzCB/q9v/dKYs6e5aX7DUeF2q4OW
-/J7vJjITXGum7ydRC3Neov8PdeNAbBfciznWvnTyArExjgTiHwqQOIDnW4dEJtJw
-iNP50rVKb5DZI3/YokZ5AAQV70ZZemL/5vfGl6a77wvuUFcKFtiQq3JYvt3oWcBO
-zyWbd7L1McwAbOOeSXS9hGWuWHjzFuQl7igdJAXs4GRCgUbM83yTCtmDD11337De
-diSfrcgtmNpkvfRBkjUKYten6N1jsNBqCevLxw0uFYBeSVl96KJyybMd2Rd7P+tC
-jtfpPuEvw9AlPqHZKnKQ4c8vp07MCI9JavJ/nola7rCMk0LULC9tttyaOGNSD3vb
-/t26lXr6qOV60+0lw7xEbdAu8zdEqR/ixKbvn1jbSajTcH3geGL7YakliuctRWTB
-XYyd8abaKDUzrTES1JJ53xRNABEBAAG0LE5ldGZpbHRlciBDb3JlIFRlYW0gPGNv
-cmV0ZWFtQG5ldGZpbHRlci5vcmc+iQI+BBMBAgAoBQJWJXYjAhsDBQkJZgGABgsJ
-CAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRCrRlWhJtKS5NoHEAC6mgfbDygR+Mrb
-Hg3qbGkgonPjUnYBqkBDz8jgdvFXS3Qm/ANI92qqeLkG+eFusuioIpXg4SHNmyUB
-oR+B60tApBtzO88iAbCHkjvfz4fqAZpYJ3VzYXIa/ScSoQHj77quNkO9aauikTj4
-ro6gnMUI2ilN1dv9Fb9/3XYxfyvP7QhWyGRuu9MekaPNjATtw7tDnDBe0C5eHrwX
-l2ojGxldj2eecoLLYcGw8x4rVDAxlNldh6tNgwc3IQ+4FkIri5sudK4vxDkPbouf
-srT6xoUe+qAj+9mScUeRFSrrdCCRd2EsBq+jhWS/kOWa0OAi6TKSOXMIdJze84Og
-R+67m+PNivmZ5+XgSmM/AzN36Lynx8nx7WNThVCd9HViq9kyXI1tQazGU30++Wec
-ct+7VE2f4aP5ITjd7WlHlEULVjRMBg+mFdz+jfmEncmC41TjWykqvrZWsT98FhNR
-YiRVsniiNvc7BS8X1qBODovvKg44yF3xEy3uFScHMqwMjiEqtVfQpfZh9PjzX1eA
-uj9sMF16NnzVeT/n4gKbO8E4vebtIJgzMd19Y0KCxfMxu4rjSHw1T0bYzwOoa9y/
-ejKM/G/NEnFKzwjySEbG9zlciJXrhb7a2y+YzNvSjEuP8Hs2BLPgJkZtVoiE4UVE
-9Wb7jNhyUz4RC0FdjRyGItGglyc9IbkCDQRWJXYjARAArK1scDuvvWTEJv+y0Sr3
-hnM8mnHIK2XNcn4p/d5nO1myCtZWPRVDIQyyXJMntEqrLBMnjxBdQcQkt7o2mJFL
-yJYO+Xb/9JyH161MPybM60dDXOTTxnAp3dDH4tdL/5snVAyrC93W2PMahK4bdwpM
-10Cz/FxtcB2xJ7Zoqq3bveN4KSUabsRYJN29BwjKtg392MtJ68SAAWN21feQ/Js9
-KjDpNoX2Sl9ZoIR2bbIsaGNeti/ciTy43MS/V6KXNTcoYrgySyW/HCNw9KjtvH+g
-/W/ze0sCXJKLby6oRQfsR2zPBTs9YB92GepG+3j1v+tw4jtbvmLKSse+S5BG8Ue2
-j3Bxbz4/RECdrlxDe4gX1hi5K/W0159pB65fha+DM3YvKrNouKsqLsxm5DMjDjdE
-qVQWtPd4tYy4uL2RWcGvvede+tN5rYsBatfelMfTSFN+jxFntwok6YmulnzIDP4O
-tUjLOpH1ZyNTcXEyAQz51aXcjVuk/6MV64hSEnH1FB7v79Zo9afdmNSKdpXf8nvZ
-3IO7HnXhpwh3pjWplyalZR7nb7PlIDxHCK6S3EN3lutBX4w9oh03KfrWlfZb2TD/
-s85uNzbU7TSb8KFC90i9H/qsd1w3kzy4evRJlyFvIqwksYY76huTfpDdx8yabfFY
-IG2TXc2iMkA7R+oMo+B46kkAEQEAAYkCJQQYAQIADwUCViV2IwIbDAUJCWYBgAAK
-CRCrRlWhJtKS5IB2D/9eL6TJ82wCrh3Hx+R3YeWVObukEBq4Ho8KRFngvIi+2D14
-PljWtITPeplDtpXu3E1i7I74F1925xFs7pT6BD65e13/18y4RX5pwGfu0HTJpi3U
-B47WXlSnyRBLD+/qiKcSCkR1mcKJgyIY9KbA0rr1Drv/3DJR+wBt9Fuww/gxgv7v
-yIxxrDa2+GESxJc1iLyuKFiDtnUkmJpqtJV0szi38W1NQUwWWF3CWUpqfvn316CJ
-4cTyuurLn994ceJDherS9tFcYASdmbl6g6PwWgdFrpmb44J7gdBCsB9q2cpjhDbu
-bgTq7V32CVMBGKOThihJZHIz/LZyuHv9WNYXUNfpEOOUN97C+j6091TSh+5P6oJO
-E61VMBBL51nw3T0FFKtA9kubKLk08GH75vPLaBqLa5B88Z3nJWdlaJOdgGEz65PU
-Uh78iWJ3AFAOwhsDEfxFYC+gZWqt9qw3Wyp2eY2q+5ep4KRxuqq3M0V3zXE6z5ff
-F8CCqRe/yzGAh8RxEmT/Nl+yHEIVv7qpJk6GSvkXr5dN/jyZCiN2fHEhZOBtLvln
-E5UjMbYOGqk3F8OARHarJ/qARATzqNYdDRe9SKxlbog+k6WWxJ4ivSVmYY28vEWf
-79IZ79ZHJ0woRi+vr3Cwpc488Sjwi7a/O0HW6zXSaxXNeYR0VnwvcrZrtlCqIQ==
-=zI6p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+=wukb
 -----END PGP PUBLIC KEY BLOCK-----
diff --git a/iptables.spec b/iptables.spec
index d4e1fb6..396a63e 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -17,7 +17,7 @@
 
 
 Name:           iptables
-Version:        1.8.5
+Version:        1.8.6
 Release:        0
 Summary:        IP packet filter administration utilities
 License:        GPL-2.0-only AND Artistic-2.0