# The Netfilter HomePage: 1.2

This version requires 2.4.0-test9 or above.

Bugs Fixed from 1.1.2:

- Now default installs into /usr/local/sbin, not /usr/local/bin.
- Only does IPv6 compilation on libc6.
- More header fixes for weird header combos.
- ip6tables now refers to "icmpv6" protocol, not "icmp".
  [ Harald Welte ]
- IPPROTO_ESP and AH defined in iptables for primitive headers.
- iptables multiple-DNS resolve fixed
  [ Harald Welte, Rusty ]
- Kernel bugfixes in patch-o-matic:
  - IPv6 netfilter fixes
    [ Harald Welte ]
  - Masquerade with fwmark routing fix
  - Dynamic hashsize optimization (NAT) + `hashsize=' module parameter.
  - NAT overlap fix
  - PPC/Sparc mangle table fix.

Changes from 1.1.2:

- New `install-devel' target
  [ James Morris ]
- libipq now has man pages!
  [ James Morris ]
- iptables-save and iptables-restore added (with man pages!)
  [ Harald Welte ]
- iptables now inserts modules if CONFIG_KMOD or --modprobe
  [ Harald Welte, Rusty ]
- New `experimental' and `install-experimental' targets.
- `--reject-with=echo-reply' removed in anticipation of the removal of kernel support.
- ttl match enhancements (greater or less than tests)
  [ Harald Welte ]
- Reworked patch-o-matic interface, to force reading of help.
- patch-o-matic updated for new 2.4 Makefiles
  [ Daniel Stone, Harald Welte ]
- patch-o-matic now supports non-IPv4 netfilter patches
  [ Harald Welte ]
- New patch-o-matic patches:
  - eggdrop bot connection tracking
    [ Magnus Sandin ]
  - FTOS target for full ToS mangling.
    [ Matthew G. Marsh ]
  - BALANCE target for simple load-balancing.
  - iplimit match for limiting number of connections.
    [ Gerd Knorr ]
  - IPv6 MARK target
    [ Harald Welte ]
  - IPv6 mark match
    [ Harald Welte ]