- new version 1.4.16.2
      - build: support for automake-1.12
      - build: separate AC variable replacements from xtables.h
      - build: have `make clean` remove dep files too
      - doc: grammatical updates to libxt_SET
      - doc: clean up interpunction in state list for xt_conntrack
      - doc: deduplicate extension descriptions into a new manpage
      - doc: trim "state" manpage and reference conntrack instead
      - doc: have NOTRACK manpage point to CT instead
      - doc: mention iptables-apply in the SEE ALSO sections
      - extensions: libxt_addrtype: fix type in help message
      - include: add missing linux/netfilter_ipv4/ip_queue.h
      - iptables: fix wrong error messages
      - iptables: support for match aliases
      - iptables: support for target aliases
      - iptables-restore: warn about -t in rule lines
      - ip[6]tables-restore: cleanup to reduce one level of indentation
      - libip6t_frag: match any frag id by default
      - libxtables: consolidate preference logic
      - libxt_devgroup: consolidate devgroup specification parsing
      - libxt_devgroup: guard against negative numbers
      - libxt_LED: guard against negative numbers
      - libxt_NOTRACK: replace as an alias to CT --notrack
      - libxt_state: replace as an alias to xt_conntrack
      - libxt_tcp: print space before, not after "flags:"
      - libxt_u32: do bounds checking for @'s operands
      - libxt_*limit: avoid division by zero
      - Merge branch 'master' of git://git.inai.de/iptables
      - Merge remote-tracking branch 'nf/stable'
      - New set match revision with --return-nomatch flag support
    - dropped fixrestore patch, upstream