- new version 1.4.12 with support of all new features of kernel 3.0
      - build: attempt to fix building under Linux 2.4
      - build: bump soversion for recent data structure change
      - build: install modules in arch-dependent location
      - doc: fix group range in libxt_NFLOG's man
      - doc: fix version string in ip6tables.8
      - doc: include matches/targets in manpage again
      - doc: mention multiple verbosity flags
      - doc: the -m option cannot be inverted
      - extensions: support for per-extension instance global variable space
      - iptables-apply: select default rule file depending on call name
      - iptables: consolidate target/match init call
      - iptables: Coverity: DEADCODE
      - iptables: Coverity: NEGATIVE_RETURNS
      - iptables: Coverity: RESOURCE_LEAK
      - iptables: Coverity: REVERSE_INULL
      - iptables: Coverity: VARARGS
      - iptables: restore negation for -f
      - libip6t_HL: fix option names from ttl -> hl
      - libipt_LOG: fix ignoring all but last flags
      - libxtables: ignore whitespace in the multiaddress argument parser
      - libxtables: properly reject empty hostnames
      - libxtables: set clone's initial data to NULL
      - libxt_conntrack: move more data into the xt_option_entry
      - libxt_conntrack: restore network-byte order for v1,v2
      - libxt_hashlimit: use a more obvious expiry value by default
      - libxt_rateest: abolish global variables
      - libxt_RATEEST: abolish global variables
      - libxt_RATEEST: fix userspacesize field
      - libxt_RATEEST: use guided option parser
      - libxt_state: fix regression about inversion of main option
      - option: remove last traces of intrapositional negation
    - complete changelog:
      http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt