About:
iptables is built on top of netfilter, the packet alteration framework for Linux 2.4.x and 2.6.x. It is a major rewrite of its predecessor ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects such as packet mangling.

Release focus: Minor bugfixes

Changes:
Memory leaks were fixed in ip(6)tables-save/restore. The printout of odd length netmasks was fixed in ip6tables. iptables-save now works properly with condition match, fuzzy match, (inverted) MAC match, the LOG target, and mport match. Invalid port ranges are now checked for by ip6tables UDP match. The ipq_id_t definition in libipq was fixed on "real" 64bit/64bit architectures. Endianness bugs related to ipv6_prefix_length in libip6tc were fixed.

Author:
Harald Welte [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.79/10.00 (50 votes)

Homepage:
http://www.iptables.org
Tar/BZ2:
ftp://ftp.netfilter.org/pub/iptables/iptables-1.2.9rc1.tar.bz2
Changelog:
http://www.iptables.org/files/changes-iptables-1.2.9rc1.txt

Trove categories: [change]

[Development Status]		5 - Production/Stable
[Environment]		Console (Text Based)
[Intended Audience]		End Users/Desktop, System Administrators
[License]		OSI Approved :: GNU General Public License (GPL)
[Operating System]		POSIX :: Linux
[Programming Language]		C
[Topic]		Internet, Security, System :: Networking, System :: Networking :: Firewalls

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
Default	1.4.2	23-Oct-2008	GNU General Public License (GPL)
Release candidates After code freeze, intended for testing.	1.2.9rc1	09-Oct-2003	GNU General Public License (GPL)

 Releases

Version	Focus	Date
1.2.9rc1	Minor bugfixes	09-Oct-2003 04:02

 Articles referencing this project

• Telephony Software
  by Flavio Villanustre , in Category Reviews
  Sat, Mar 30th 2002 00:00
  

 Comments

[»] Main Features
by sonyvaio - Nov 21st 2008 05:59:02

* stateless packet filtering (IPv4 and IPv6)
* stateful packet filtering (IPv4 and IPv6)
* all kinds of network address and port translation, e.g. NAT/NAPT (IPv4 only)
* flexible and extensible infrastructure
* multiple layers of API's for 3rd party extensions
* large number of plugins/modules kept in 'patch-o-matic' repository

[reply] [top]

[»] High performance, featureful, firewall
by Robert Marmorstein - Jun 2nd 2006 08:29:35

IPtables/Netfilter supports all sorts of advanced features, such as NAT, masquerading, packet redirect, and many others. It also has all sorts of useful matches, such as the STRING match and the ipset module. It is one of the very best stateful firewall systems available.

[reply] [top]