xtables-addons/xtables-addons.changes

-------------------------------------------------------------------
Wed Sep 21 18:01:56 UTC 2011 - jengelh@medozas.de

- update to new upstream release 1.39
* update to ipset 6.9.1
* resolve compilation errors due to missing libxtables_CFLAGS

-------------------------------------------------------------------
Sat Aug 20 15:03:31 UTC 2011 - jengelh@medozas.de

- update to new upstream release 1.38
* Restore UDP functionality for xt_psd
* UDPLITE support for xt_SYSRQ, xt_ipp2p, xt_pknock, xt_psd
* Provides ipset 6.8

-------------------------------------------------------------------
Sat Jun 25 09:25:25 UTC 2011 - jengelh@medozas.de

- update to new upstream release 1.37
* xt_SYSRQ: make IPv6 trigger work again
* xt_SYSRQ: improve security: include host address in digest
* xt_TARPIT: fix a kernel oops in --reset mode

-------------------------------------------------------------------
Fri Jun  3 15:11:54 UTC 2011 - jengelh@medozas.de

- update to new upstream release 1.36
* update to ipset 6.7
* xt_TARPIT has gained the "honeypot" and "reset" modes

-------------------------------------------------------------------
Mon Apr 11 21:59:02 UTC 2011 - jengelh@medozas.de

- Update to new upstream release 1.35
* update to ipset 6.3
* ipset-genl: handle EAGAIN return value emitted from autoloader
* ipset-genl: resolve nfgenmsg remains and fix spurious protocol abort

-------------------------------------------------------------------
Thu Apr  7 15:11:31 UTC 2011 - jengelh@medozas.de

- Update to new upstream release 1.34
* xt_pknock: avoid crash when hash TFM could not be allocated
* xt_pknock: avoid inversion of rule lookup that led to warnings
* xt_DNETMAP: add missing module alias
* xt_DNETMAP: support for kernels below 2.6.34
- Add kmp preamble file

-------------------------------------------------------------------
Wed Feb  2 04:28:55 UTC 2011 - jengelh@medozas.de

- Update to new upstream release 1.33
* IPv6 GeoIP support
* New DNETMAP extension
* Update to ipset 5.4-genl

-------------------------------------------------------------------
Fri Nov  5 18:50:05 UTC 2010 - jengelh@medozas.de

- Update to new upstream release 1.31
* LOGMARK: print remaining lifetime of ct entries
* xt_iface: allow matching against incoming/outgoing interface
* libxt_gradm: match packets based on status of grsecurity RBAC

-------------------------------------------------------------------
Sat Oct  9 06:59:07 UTC 2010 - jengelh@medozas.de

- Do not build xt_TEE, xt_CHECKSUM; they are provided in newer
  iptables and kernel versions already

-------------------------------------------------------------------
Sun Oct  3 08:17:43 UTC 2010 - jengelh@medozas.de

- new upstream release 1.30
* support for Linux 2.6.36
* update to ipset 4.4
  - ipport{,ip,net}hash did not work with mixed "src" and "dst"
    destination parameters
* do ship ip_set_ipport{ip,net}hash

-------------------------------------------------------------------
Sat Jul 24 09:47:54 UTC 2010 - jengelh@medozas.de

- new upstream release 1.28
  * RAWNAT: IPv6 variants erroneously rejected masks /33-/128
  * new target xt_CHECKSUM
  * xt_length2: add support for IPv6 jumbograms
  * xt_geoip: fix possible out-of-bounds access
  * import xt_geoip database scripts

-------------------------------------------------------------------
Tue Jun 29 11:51:47 UTC 2010 - lnussel@suse.de

- don't require kernel module package (bnc#618244)

-------------------------------------------------------------------
Mon May 17 07:23:05 UTC 2010 - jengelh@medozas.de

- new upstream release 1.27
  * support for upcoming Linux 2.6.35

-------------------------------------------------------------------
Sat May  1 09:15:48 UTC 2010 - jengelh@medozas.de

- new upstream release 1.26
  * fix compile error with kernel 2.6.34

-------------------------------------------------------------------
Mon Apr 26 12:15:08 UTC 2010 - jengelh@medozas.de

- new upstream release 1.25
  * incorporated changes from upstream review into xt_TEE:
    (rechecksumming in PREROUTING, decrease TTL on cloned packet, set
    dont-fragment on cloned packets, free skb when route lookup
    failed, do not limit use to mangle table, do not retain iif and
    mark on cloned packet, new loop detection logic, use less
    expensive pskb_copy)

-------------------------------------------------------------------
Wed Mar 17 22:09:45 UTC 2010 - jengelh@medozas.de

- new upstream release 1.24
  * ipp2p: updated bittorent command recognition

-------------------------------------------------------------------
Thu Feb 25 00:07:24 UTC 2010 - jengelh@medozas.de

- new upstream release 1.23
  * ipset updated to 4.2
  * removal of obsoleted configure options;
    compile fixes for IPV6=n and 2.6.32's skb_dst
  * support for Linux 2.6.33 and the projected 2.6.34 net tree

-------------------------------------------------------------------
Fri Feb 12 00:46:09 CET 2010 - ro@suse.de

- add KMP to specfile (to give description to kmp subpacks) 

-------------------------------------------------------------------
Sat Jan 23 02:32:52 CET 2010 - jengelh@medozas.de

- new upstream release 1.22
  * ipset: enable build of ip_set_setlist.ko
  * quota2: add the --no-change mode
- remove merged patch geoip-dir.diff (use
  /usr/share/xt_geoip instead of /var/geoip)

-------------------------------------------------------------------             
Thu Dec 31 01:50:38 CET 2009 - jengelh@medozas.de

- initial OBS package

-------------------------------------------------------------------
Wed Dec 09 2009 - jengelh@medozas.de

- new upstream release: 1.21
  * fix clashing setsockopt numbers between xt_ACCOUNT and arptables

-------------------------------------------------------------------             
Thu Nov 19 2009 - jengelh@medozas.de

- new upstream release: 1.20

-------------------------------------------------------------------             
Mon Oct 12 2009 - jengelh@medozas.de

- new upstream release: 1.19