iptables is built on top of netfilter, the packet alteration framework for Linux 2.4.x and 2.6.x. It is a major rewrite of its predecessor ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects such as packet mangling.
License: GNU General Public License (GPL)
Changes:
This release is a pure bugfix release for regressions reported against 1.4.1, fixing some mainly cosmetic problems in the ruleset listing, installation problems with --disable-shared, and non-working --src-range/--dst-range parameters in the iprange match.