Ana Rey (1): extensions: libxt_udp: add translation to nft Arpan Kapoor (1): libxtables: Replace gethostbyname() with getaddrinfo() Arturo Borrero (3): extensions/libxt_rpfilter.man: fix typo, specifiy vs specify iptables/xtables-arp.c: fix typo, wierd vs weird extensions/libxt_tcp: fix nftables translate flags value, 'none' vs '0x0' Arturo Borrero Gonzalez (1): extensions: update Arturo Borrero email address Brian Haley (1): iptables-restore: add missing arguments to usage message Florian Westphal (5): iptables.8: mention iptables-save in -L documentation iptables.8: nat table has four builtin chains extensions: NETMAP: add ' to:' prefix when printing NETMAP target extensions: NETMAP: fix iptables-save output connlabel: clarify default config path George Burgess IV (1): libxt_multiport: remove an unused variable Giuseppe Longo (1): configure: make libmnl and libnftnl hard requirements Guruswamy Basavaiah (4): iptables: extensions: iptables-translate prints extra "nft" after printing any error iptables-translate: translate iptables --flush iptables-translate: Printing the table name before chain name. iptables-translate: Don't print "nft" in iptables-restore-translate command Gustavo Zacarias (1): iptables: add xtables-config-parser.h to BUILT_SOURCES Janani Ravichandran (1): extensions: libip6t_rt.c: Add translation to nft Jordan Yelloz (1): extensions: added AR substitution Keno Fischer (1): build: Fix two compile errors during out-of-tree build Laura Garcia Liebana (12): extensions: libip6t_icmp6: Add translation to nft extensions: libipt_LOG: Avoid to print the default log level in the translation extensions: libipt_icmp: Add translation to nft extensions: libipt_REJECT: Avoid to print the default reject with value in the translation extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation extensions: libxt_ipcomp: Add translation to nft extensions: libip6t_hbh: Add translation to nft extensions: libxt_multiport: Add translation to nft extensions: libxt_dscp: Add translation to nft extensions: libip6t_frag: Add translation to nft extensions: libxt_cgroup: Add translation to nft extensions: libxt_conntrack: Add translation to nft Liping Zhang (27): extensions: libxt_limit: fix a wrong translation to nft rule extensions: libxt_mark: fix a wrong translation to nft when mask is specified extensions: libxt_TRACE: Add translation to nft extensions: libipt_realm: fix order of mask and id when do nft translation extensions: libxt_connlabel: fix crash when connlabel.conf is empty extensions: libxt_connlabel: Add translation to nft extensions: libxt_NFLOG: display nflog-size even if it is zero extensions: libxt_NFLOG: translate to nft log snaplen if nflog-size is specified extensions: libxt_NFLOG: add unit test to cover nflog-size with zero extensions: libxt_connlabel: add unit test iptables-translate: add in/out ifname wildcard match translation to nft extensions: libxt_CLASSIFY: Add translation to nft extensions: libipt_DNAT/SNAT: fix "OOM" when do translation to nft extensions: libip[6]t_SNAT/DNAT: use the new nft syntax when do xlate extensions: libip[6]t_REDIRECT: use new nft syntax when do xlate extensions: libip6t_SNAT/DNAT: add square bracket in xlat output when port is specified extensions: libipt_realm: add a missing space in translation extensions: libxt_iprange: rename "ip saddr" to "ip6 saddr" in ip6tables-xlate extensions: libxt_iprange: handle the invert flag properly in translation extensions: libxt_devgroup: handle the invert flag properly in translation extensions: libxt_ipcomp: add range support in translation extensions: libxt_quota: add translation to nft extensions: libxt_DSCP: add translation to nft extensions: libxt_statistic: add translation to nft extensions: LOG: add log flags translation to nft extensions: libxt_connbytes: Add translation to nft extensions: libxt_rpfilter: add translation to nft Loganaden Velvindron (1): libxt_TCPOPTSTRIP: Fix musl compatibility Pablo M. Bermudo Garay (11): extensions: iprange: remove extra space in translation iptables-compat: use nft built-in comments support xtables-translate: fix multiple spaces issue include: xtables: fix struct definitions grepability xtables-translate: fix issue with quotes xtables-compat: fix comments listing xtables-compat: remove useless functions xtables-translate: add escape_quotes option to comment_xlate xtables-compat: check if nft ruleset is compatible xtables-compat: add rule cache xtables-translate-restore: do not escape quotes Pablo Neira Ayuso (13): nft: xtables: add generic parsing infrastructure to interpret commands nft: xtables-restore: add generic parsing infrastructure nft: xtables: add the infrastructure to translate from iptables to nft extensions: libxt_tcp: add translation to nft extensions: libxt_state: add translation to nft libxtables: fix leak in xt_buf object extensions: rename xt_buf to xt_xlate xtables: add xt_xlate_add_comment() iptables-translate: pass ipt_entry and ip6t_entry to ->xlate() libxtables: missing comment initialization in xt_xlate_alloc() src: introduce struct xt_xlate_{mt,tg}_params configure: update libnetfilter_conntrack version dependency iptables 1.6.1 release Phil Sutter (5): extensions: libip6t_ah: Fix translation of plain '-m ah' xtables-translate: Support setting standard chain policy nft_ipv{4,6}_xlate: Respect prefix lengths xtables-translate: Fix chain type when translating nat table tcp_xlate: Enclose LH flag values in parentheses Rami Rosen (1): extensions: fix cgroup2 help message in libxt_cgroup.c. Roberto García (7): extensions: libip6t_LOG: Avoid to print the default log level in the translation iptables: extensions: libxt_TEE: Add translation to nft extensions: libxt_MARK: Add translation to nft extensions: libxt_MARK: Add translation for revision 1 to nft extensions: libxt_CONNMARK: Add translation to nft iptables: extensions: libxt_MARK: Fix translation of --set-xmark option iptables: extensions: libxt_ecn: Add translation to nft Sami Kerola (1): extensions: REJECT: do not adjust reject-with type footnote indentation Shivani Bhardwaj (51): extensions: libxt_mark: Add translation to nft extensions: libxt_esp: Add translation to nft extensions: libxt_NFLOG: Add translation to nft extensions: libxt_iprange: Add translation to nft extensions: libxt_mac: Add translation to nft extensions: libxt_helper: Add translation to nft extensions: libxt_NFLOG: Add group_info and remove multiple keywords extensions: libxt_limit: Add translation to nft include: xtables: Add enum for better nft translation code extensions: libxt_mark: Fix inversion code extensions: libxt_devgroup: Add translation to nft extensions: libxt_cpu: Add translation to nft extensions: libipt_ah: Add translation to nft extensions: libxt_connmark: Add translation to nft extensions: libxt_pkttype: Add translation to nft extensions: libipt_REJECT: Add translation to nft extensions: libipt_realm: Add translation to nft extensions: libipt_SNAT: Add translation to nft extensions: libipt_DNAT: Add translation to nft iptables: nft-ipv6: Replace ip with ip6 extensions: libip6t_DNAT: Add translation to nft extensions: libip6t_SNAT: Add translation to nft extensions: libxt_length: Add translation to nft extensions: libip6t_ah: Add translation to nft extensions: libipt_ttl: Add translation to nft extensions: libip6t_REJECT: Add translation to nft extensions: libipt_LOG: Add translation to nft extensions: libip6t_LOG: Add translation to nft extensions: libip6t_hl: Add translation to nft extensions: libipt_REDIRECT: Add translation to nft extensions: libip6t_REDIRECT: Add translation to nft iptables: nft-ipv6: Fix ipv6 flags extensions: libxt_NFQUEUE: Add translation to nft comment: Add translation to nft extensions: libipt_MASQUERADE: Add translation to nft extensions: libip6t_MASQUERADE: Add translation to nft iptables: nft-ipv6: Use meta l4proto instead of nexthdr extensions: libip6t_mh: Add translation to nft extensions: libxt_owner: Add translation to nft extensions: libxt_sctp: Add translation to nft extensions: libxt_dccp: Add translation to nft configure: Show support for connlabel extensions: libxt_NFQUEUE: Fix bug with order of fanout and bypass extensions: libxt_NFQUEUE: Unstack different versions extensions: libxt_NFQUEUE: Add missing tests extensions: libxt_connmark: Fix order of mask and mark extensions: libxt_devgroup: Fix order of mask and id configure: Remove flex check warning configure: Fix assignment statement iptables: xtables-arp: Use getaddrinfo() extensions: libxt_mangle: Use getaddrinfo() Shyam Saini (3): libxtables: xtables: remove unnecessary debug code libxtables: xtables: Use getnameinfo() iptables: fix the wrong appending of jump verdict after the comment. Subash Abhinov Kasiviswanathan (1): xtables: Add an interval option for xtables lock wait Tejun Heo (3): libxt_cgroup: prepare for multi revisions libxt_cgroup2: add support for cgroup2 path matching extensions: libxt_cgroup: add unit test Thomas Habets (1): iptables-save: exit with error if unable to open proc file Thomas Woerner (1): ip6tables: Warn about use of DROP in nat table Vishwanath Pai (3): extensions: libxt_NFLOG: nflog-range does not truncate packets extensions: libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2 extensions: libxt_hashlimit: Create revision 2 of xt_hashlimit to support higher pps rates Willem de Bruijn (3): extensions/libxt_bpf.man: clarify BPF code generation with tcpdump extensions: libxt_bpf: support ebpf pinned objects iptables: on revision mismatch, do not call print/save Xose Vazquez Perez (1): iptables: update pf.os