Changelog
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
v8.4.0 - 2026-06-10
Added
- (feat) Add restore_mark, nfmask, ctmask support for CONNMARK-based policy routing #1291 (david22swan)
Fixed
- (bugfix) Fix icmp_name_to_number to support type/code format (e.g. 3/4) #1290 (david22swan)
- (bugfix) Allow underscores in firewall rule names #1289 (david22swan)
- (bugfix) Fix ipset idempotency: single-element array not in sync with String equivalent #1286 (david22swan)
- (bugfix) Fix table parsing when iptables-save output contains * in rule comments #1285 (david22swan)
- (bugfix) Fix log_level idempotency when explicitly setting the iptables default value #1284 (david22swan)
- fix(firewall): avoid parsing flags from chain names and quoted values #1275 (ashishrase)
- explicitly do AAAA lookups even if IPv6 is unavailable #1255 (kjetilho)
- Ensure global variables are unique among providers #1227 (nabertrand)