diff --git a/iptables-1.4.20.tar.bz2 b/iptables-1.4.20.tar.bz2
deleted file mode 100644
index a0affb6..0000000
--- a/iptables-1.4.20.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:109b8c7ca90b4536bc5de869ae705f6d5efcc0c08ef3003755aad3ed6d2d49ad
-size 546864
diff --git a/iptables-1.4.20.tar.bz2.sig b/iptables-1.4.20.tar.bz2.sig
deleted file mode 100644
index 93f9c46..0000000
Binary files a/iptables-1.4.20.tar.bz2.sig and /dev/null differ
diff --git a/iptables-1.4.21.tar.bz2 b/iptables-1.4.21.tar.bz2
new file mode 100644
index 0000000..dfe7c8f
--- /dev/null
+++ b/iptables-1.4.21.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:52004c68021da9a599feed27f65defcfb22128f7da2c0531c0f75de0f479d3e0
+size 547439
diff --git a/iptables-1.4.21.tar.bz2.sig b/iptables-1.4.21.tar.bz2.sig
new file mode 100644
index 0000000..8812082
Binary files /dev/null and b/iptables-1.4.21.tar.bz2.sig differ
diff --git a/iptables.changes b/iptables.changes
index 0205be3..5fb2331 100644
--- a/iptables.changes
+++ b/iptables.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Sat Nov 23 04:39:31 UTC 2013 - jengelh@inai.de
+
+- Update to new upstream release 1.4.21
+* --nowildcard option for xt_socket, available since Linux kernel 3.11
+* SYNPROXY support, available since Linux kernel 3.12
+
 -------------------------------------------------------------------
 Wed Aug  7 13:19:02 UTC 2013 - jengelh@inai.de
 
diff --git a/iptables.spec b/iptables.spec
index 1b6cde5..8e0efd6 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -20,7 +20,7 @@ Name:           iptables
 %define lname_ipq	libipq0
 %define lname_iptc	libiptc0
 %define lname_xt	libxtables10
-Version:        1.4.20
+Version:        1.4.21
 Release:        0
 Summary:        IP Packet Filter Administration utilities
 License:        GPL-2.0 and Artistic-2.0