About
Coreteam Contributors History License Thanks PGP key Projects iptables libnfnetlink libnetfilter_log libnetfilter_queue libnetfilter_conntrack conntrack-tools ipset nf-hipac patch-o-matic-ng ulogd Downloads git Repository ftp Server rsync Server News ipset 2.4.8 release ipset 2.4.7 release conntrack-tools 0.9.10 release ipset moves to git tree libnfnetlink-0.0.40 release conntrack-tools 0.9.9 release libnetfilter_conntrack-0.0.99 release libnetfilter_conntrack-0.0.98 release conntrack-tools 0.9.8 release several releases ulogd 2.0.0beta2 released iptables 1.4.2-rc1 released libnetfilter_conntrack-0.0.96 release libraries release iptables 1.4.1.1 released iptables 1.4.1 released iptables 1.4.1-rc3 released several releases iptables 1.4.1-rc2 released iptables 1.4.1-rc1 released Moving to GIT 6th Netfilter Workshop libnfnetlink release conntrack-tools 0.9.6 release libnetfilter_conntrack release iptables-1.4.0 Michael Rash's book libnetfilter_conntrack release iptables-1.4.0rc1 security announces libnetfilter_queue release libnfnetlink release conntrack-tools-0.9.5 release libnetfilter_conntrack release conntrack-tools-0.9.4 release libnetfilter_conntrack release iptables-1.3.8 conntrack-tools release libnetfilter_conntrack release Netfilter Workshop new PGP key Pablo Neira Ayuso joins core team library releases iptables-1.3.7 iptables-1.3.6 iptables-1.3.5 ulogd-1.24 ulogd-2.00beta1 library releases iptables-1.3.4 Yasuyuki Kozakai joins core team planet.netfilter.org conntrack-0.81 iptables-1.3.3 Documentation FAQ HOWTOs Events Tutorials Various other docs Security Information Mailing Lists List Rules netfilter-announce list netfilter list netfilter-devel list netfilter-failover list Contact bugzilla coreteam webmaster imprint / postal address Supporting netfilter Licensing Events Links Mirrors About website |
Licensing information about netfilter/iptablesnetfilter/iptables is - like all of the Linux Kernel - Free Software (sometimes referred to as Open Source Software), distributed under the terms of the GNU GPLv2 only. Please, note that some source code files might differ, and in that case it is explicitely stated in the header of every file. The GPL also contains some obligations. If you distribute netfilter/iptables code in binary form, you have to offer the source code, too. The netfilter/iptables project has made available some more detailed information on this subject:
The TeX source code of those documents can be found via our ViewCVS interface. Contact the coreteam in case you have any further questions. As netfilter/iptables is increasingly used by commercial vendors as part of their network security products, we'd like to give some explanations on how to comply with the license terms of this software. The target audience for this document is somebody who re-distributes any software published by the netfilter/iptables project, independent of the medium of distribution (cd-rom, floppy disk, firmware image in flash/rom, internet download, ...).
netfilter/iptables is, like the Linux operating system kernel itself,
“free software”. Free refers to free as
in freedom. It doesn't necessarily make a statement about the cost. Free does
explicitly ImportantFree software is copyrighted material, very much like almost all software. You might have heard about freeware or public domain software. They are totally different concepts that do not apply to free software! As many free software, netfilter/iptables is licensed under the terms of the GNU General Public License (GPL), Version 2. You can find the full text of this license at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt. There's also a comprehensive list of frequently asked questions available. Important
The license enables you to distribute netfilter/iptables software
In any doubt, feel free to contact the netfilter core team at
According to Section 1 of the GNU GPLv2, you have the following obligations when distributing the original source code as published by the netfilter/iptables project:
According to Section 2 of the GNU GPLv2, you have the following obligations when distributing or publishing modified versions of the source code:
According to section 3 of the GNU GPLv2, when distributing or publishing either original or modified version of the program, you have to fulfill all the obligations of Section 1 and 2, plus one out of the two possible options:
Let's assume you are a vendor that sells embedded firewalling devices, using any of the netfilter/iptables code. Let's assume you are shipping this device with pre-installed object code of the software (sometimes referred to as firmware), but also offer software updates via the internet. Because of your specific needs, you had to modify parts of the original netfilter/iptables code to make it fit your requirements. The GPL gives you two different ways of complying with the license. You can chose between both. However, the netfilter project prefers the option described first in this document: You have to accompany the device (as well as any version of a firmware update) with
In this case, you have to accompany the device (as well as any firmware update) with:
netfilter/iptables is a community based effort. This means that if it weren't for volunteers contributing source code to the project, it wouldn't exist and you wouldn't be able to build products based on it. So as long as you want to continue selling netfilter/iptables products, it is in your own vital interest that the netfilter/iptables project flourishes. Contributions to the project are the most important part in the development of our project. ImportantAll of this is optional. You are not required to support the netfilter/iptables project. We're just kindly asking you to do so. Vendors are welcome to contribute their modifications and/or new features back to the project. This way we can consider to include them into one of our next releases, and thus increasing the value of our software. There are lots of other ways how you can support and encourage further development of the netfilter/iptables software. Possible options include:
If you are interested in supporting the netfilter/iptables project in any way,
maybe even one not listed above, please don't hesitate to contact us at
|