- new upstream release 1.30
* support for Linux 2.6.36
* update to ipset 4.4
- ipport{,ip,net}hash did not work with mixed "src" and "dst"
destination parameters
* do ship ip_set_ipport{ip,net}hash

- new upstream release 1.28
* RAWNAT: IPv6 variants erroneously rejected masks /33-/128
* new target xt_CHECKSUM
* xt_length2: add support for IPv6 jumbograms
* xt_geoip: fix possible out-of-bounds access
* import xt_geoip database scripts