iptables: Update to 1.8.6

- Update from 1.8.5 to 1.8.6
- Changelog info
Arturo Borrero Gonzalez (1):
      xtables-translate: don't fail if help was requested

Giuseppe Scrivano (1):
      iptables: accept lock file name at runtime

Jan Engelhardt (2):
      doc: document danger of applying REJECT to INVALID CTs
      build: resolve iptables-apply not getting installed

Maciej Żenczykowski (1):
      libxtables: compiler warning fixes for NO_SHARED_LIBS

Pablo Neira Ayuso (4):
      extensions: libxt_conntrack: provide translation for DNAT and SNAT --ctstate
      iptables: replace libnftnl table list by linux list
      iptables-nft: fix basechain policy configuration
      configure: bump version for 1.8.6 release

Phil Sutter (31):
      xtables-restore: Fix verbose mode table flushing
      build: Fix for failing 'make uninstall'
      xtables-translate: Use proper clear_cs function
      tests: shell: Add help output to run-tests.sh
      nft: Make table creation purely implicit
      nft: Be lazy when flushing
      nft: cache: Drop duplicate chain check
      nft: Drop pointless nft_xt_builtin_init() call
      nft: Turn nft_chain_save() into a foreach-callback
      nft: Use nft_chain_find() in two more places
      nft: Reorder enum nft_table_type
      nft: Eliminate table list from cache
      nft: Fix command name in ip6tables error message
      tests: shell: Merge and extend return codes test
      xtables-monitor: Fix ip6tables rule printing
      nft: Fix for ruleset flush while restoring
      Makefile: Add missing man pages to CLEANFILES
      nft: cache: Check consistency with NFT_CL_FAKE, too
      nft: Extend use of nftnl_chain_list_foreach()
      nft: Fold nftnl_rule_list_chain_save() into caller
      nft: Use nft_chain_find() in nft_chain_builtin_init()
      nft: Fix for broken address mask match detection
      extensions: libipt_icmp: Fix translation of type 'any'
      libxtables: Make sure extensions register in revision order
      libxtables: Simplify pending extension registration
      libxtables: Register multiple extensions in ascending order
      nft: Make batch_add_chain() return the added batch object
      nft: Fix error reporting for refreshed transactions
      libiptc: Avoid gcc-10 zero-length array warning
      nft: Fix for concurrent noflush restore calls
      tests: shell: Improve concurrent noflush restore test a bit
- Rootfiles updated

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

config/rootfiles/common/iptables

@@ -133,6 +133,7 @@ sbin/ip6tables-apply
 sbin/ip6tables-restore
 sbin/ip6tables-save
 sbin/iptables
+sbin/iptables-apply
 #sbin/iptables-legacy
 #sbin/iptables-legacy-restore
 #sbin/iptables-legacy-save

lfs/iptables

@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.8.5
+VER        = 1.8.6
 
 THISAPP    = iptables-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -41,7 +41,7 @@ objects = $(DL_FILE) \
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 netfilter-layer7-v2.23.tar.gz = $(URL_IPFIRE)/netfilter-layer7-v2.23.tar.gz
 
-$(DL_FILE)_MD5 = 42cfa96d4ac5eb93ee7ed8dd85cfe8fb
+$(DL_FILE)_MD5 = bc0f0adccc93c09dc5b7507ccba93148
 netfilter-layer7-v2.23.tar.gz_MD5 = 10910b6173d18e426cb56ae7e1300eeb
 
 install : $(TARGET)