add xtables v11 match and target

[peakwinter]

This seems to enable basic compatibility with xtables v11. I tested normal function (adding targets and matches, purging tables, etc) and it seems to work fine. No idea about how it works with the new things added in iptables 1.6.0...

[coveralls]

Coverage increased (+0.03%) to 59.806% when pulling c2ccf4a on peakwinter:master into a0cafb4 on ldx:master.

[thejuan]

I get a seg fault with this patch and creating matches on Ubuntu 16.04 LTS

match_rule = iptc.Rule()
set_name = "ipset-name"
set_match = match_rule.create_match("set") # SegFault
set_match.match_set = [set_name, "dst"]

[mmellison]

Same here on arch, segfault when creating matches.

[mmellison]

Looks like the segfault problem is coming from this. The xlate member does not exist in the 1.6.0 tagged release of iptables, although it does exist in master branch.

[dealfonso]

Hi @seglberg and @peakwinter,

I have a fresh ubuntu 16.04 install and I am still having this problem using your PR. Just this example:

import iptc

table = iptc.Table(iptc.Table.NAT)
chain = iptc.Chain(table, "PREROUTING")
print "name: ", chain.name
print "rules: ", chain.rules

If I check xtables.h, I cannot find any reference to xlate. So I removed it from xtable.py, and I also found that "parse" field is not properly defined (according to the headers: the first int parameter is missing). So I corrected all these problems, but the problem is still there.

I have followed the code and the problem (whether removed the xlate or not) is in function find_match when using call xtables._xtables_find_match

Could you please check my code and figure out what is happening?

[mmellison]

I can take a quick look later, but I just realized I forgot to post my PR that included a fix for the segfault. See #177.