Iptables; Rhba-2009:1414: Bug Fix And Enhancement Update - Red Hat ENTERPRISE LINUX 5.4 - TECHNICAL NOTES Manual

• the ifup initscript has been updated to ensure HiperSocket VLAN support is initialized correctly
(BZ#490584)
during boot.
• previously, adding networking routes using the system-config-network-gui resulted in the following
error message being displayed:
/lib/udev/ccw_init: line 31: echo: write error: Operation not permitted
With this update the initscripts have been fixed, allowing the use of system-config-networking-gui to
add network routes.
Users are advised to upgrade to this updated package, which resolves these issues.

1.87. iptables

1.87.1. RHBA-2009:1414: bug fix and enhancement update

Updated iptables packages that fix several bugs and add an enhancement are now available.
The iptables utility controls the network packet filtering code in the Linux kernel.
These updated iptables packages provide the following enhancement:
• while its IPv4 counterpart was present, the Differentiated Services Code Point (DSCP) match target
for IPv6 was missing. Two new modules, one for iptables and a separate one for the Linux kernel,
now enable this functionality.
Note
along with this iptables update, the kernel update for Red Hat Enterprise Linux 5.4
must be installed, and the system must be rebooted, in order to enable Differentiated
Services Code Point (DSCP) match target functionality for IPv6.
In addition, these updated iptables packages provide fixes for the following bugs:
• the init scripts for iptables and ip6tables sometimes exited with incorrect or invalid exit statuses.
575
(BZ#242457 )
• the Internet Control Message Protocol (ICMP) '--reject-with' types did not always work as expected.
This has been fixed in these updated packages.
• the iptables-restore(8) man page did not contain descriptions of some of the options that were listed
in the program's help information. These information sources for the utility's options have now been
synchronized. (BZ#474847
• the "ROUTE" section of the iptables(8) man page contained misleading information on certain
features that do not exist in the iptables packages.
• the iptables-devel package did not include certain header files, which are now included in the
updated package. (BZ#487649
• the spec file contained a typo on the the Release line.
572
573
(BZ#484411)
577
)
579
)
576
(BZ#253014 )
578
(BZ#485834 )
580
(BZ#440622 )
iptables
574
(BZ#480371 )
93