Bugzilla Bug 209222

Bugfixes:

* Fix "iptables getsockopt failed strangely" when querying revisions for
non-existant matches and targets
* Add support for generic xtables infrastructure (improved IPv6 support!)

and others.

See history:

http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.0.txt

and:

http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.0rc1.txt

PLEASE stabilize this package.
It is the ONLY version which works with a 2.6.24 kernel!!!

(In reply to comment #1)
> PLEASE stabilize this package.
> It is the ONLY version which works with a 2.6.24 kernel!!!

Richard, how iptables-1.3.8-r3 is broken? I fail to see any problems there.

(In reply to comment #2)
> (In reply to comment #1)
> > PLEASE stabilize this package.
> > It is the ONLY version which works with a 2.6.24 kernel!!!
> 
> Richard, how iptables-1.3.8-r3 is broken? I fail to see any problems there.
> 

afaik it fails to compile against kernel headers

(In reply to comment #3)
> afaik it fails to compile against kernel headers

Could you open bug then? The more details the better as I did not manage to
reproduce the problem... Neither in unstable system with gentoo sources
2.6.24-r4 nor in stable with unstable openvz-sources 2.6.24.004.1 (btw, openvz
sources required some patches, but that's not iptables problem).

iptables-1.3.8* compiles fine with 2.6.24 kernel, but failes to start with
strange errors:

"The 1.3.8 version of iptables does not seem to work correctly when built
against kernel 2.6.24; any operation attempted returns with "error 0". If you
prefer the 1.3.8 version over the newer 1.4.0, try building with the headers
from kernel 2.6.23 or earlier."

ppc64 stable

x86 stable

Doesn't like imq in combination with static on ppc.
Leaving out either of the two from USE makes it build ok.

extensions/libext.a(initext.o): In function `init_extensions':
initext.c:(.text+0x7c): undefined reference to `ipt_IMQ_init'
collect2: ld returned 1 exit status
make: *** [iptables-save] Error 1
rm libiptc/libip4tc.o libipq/libipq.o libiptc/libip6tc.o
 *
 * ERROR: net-firewall/iptables-1.4.0-r1 failed.
 * Call stack:
 *               ebuild.sh, line   49:  Called src_compile
 *             environment, line 2873:  Called die

Stable for HPPA.

sparc stable

(In reply to comment #8)
> Doesn't like imq in combination with static on ppc.
> Leaving out either of the two from USE makes it build ok.

I don't think we should bother about this. I could add:

use static && use imq || die 

but IMQ itself is more or less experimental, but still very useful that's why
it's here. Static afaik is also not so recommended way to install package in
Gentoo...

ia64 stable

Stable on alpha.

Marked stable on ppc as directed in #11.

amd64 stable