.RHEL 10 provides `iptables` version 1.8.11 The `iptables` framework has been upgraded to version 1.8.11, which provides multiple bug fixes and enhancements. Notable changes include: * New `arptables-translate` utility * `ebtables-nft`: ** Print negations (exclamation marks) before the match they invert for consistency with `iptables`. ** Support `--replace` and `--list-rules` command options. * `iptables-translate`: ** Align protocol name lookups with `iptables`. ** Support socket match with `TPROXY` target. * `iptables`: ** Enable implicit extension lookup for `dccp` and `ipcomp` protocols so that no extra `-m <proto>` command option is needed after `-p <proto>`. * `iptables-save`: ** Avoid calls to the `getprotobynumber()` function for consistency and improved performance with huge rule sets. * `arptables-nft`: ** Fixed wrong formatting of `--h-type` values and `--proto-type` masks which caused misinterpretation by `arptables-restore`. ** Improved ineffective masks when specified in `--h-type`, `--opcode` and `--proto-type` matches. * `iptables-nft`: ** Fixed wrong error messages in corner-case error conditions. ** Fixed incorrect combination of inverted payload matches. For more details, see the link: https://www.netfilter.org/projects/iptables/ [upstream documentation].