Bug#708369: closed by Julien Cristau <jcristau@debian.org> (Re: Bug#708369: release-notes: Please mention ipset)
> It's not clear to me what you think is release-notes material about
> this, sorry.
I'd have expected some subsection of Chapter 5 to say something like, say:
5.16 Ipset and Iptables
On squeeze systems that have xtables-addons the upgrade process
may stop when attempting to install the corresponding wheezy
package. Upgrade can be recovered by removing the package.
Wheezy stock kernel supports ipset 6 natively, so do custom
kernels based on linux-source, provided the relevant IP_SET
configure options are enabled. Hence, no addons are necessary
for that.
Please not ipset 6 syntax changes with respect to version 4: Now
ipset provides for word-style rather than option-style commands;
e.g. /ipset create $name $type/ rather than /ipset -N $name $type/.
Iptables command line parsing is also more strict: Using
intrapositioned negation (`--option ! this`) is deprecated in
favor of extrapositioned (`! --option this`).
That would have saved some downtime when upgrading.
Reply to: