Unbreak nfnl_osf tool and fix duplicate entries handling (RHBZ#1829820)

Fix iptables-restore for rules with '-' and 't' in comments (RHBZ#1749700)
Make services start before network-pre.target is reached (RHBZ#1736765)

man: iptables-save: Add note about module autoloading (RHBZ#1691380)

iptables-xml: fix segfault if missing space after -A (RHBZ#1525980)

Fix iptables-restore with empty comment in rule (RHBZ#1668475)
Fix parsing and printing of -m ipvs --vproto option (RHBZ#1679726)
Fix for wrong location of devgroup definition file (RHBZ#1657075)
Fix for non-numeric devgroup name output (RHBZ#1657075)
Reject negative realm values (RHBZ#1657075)

Drop leftover variable from init script (RHBZ#1520534)

Do not attempt to unload any modules when stopping the firewall (RHBZ#1520534)
Fix for covscan warnings (RHBZ#1525980)

Add nfnl_osf.8 man page (RHBZ#1487331)

libxt_tcpmss: Detect invalid ranges (RHBZ#1128510)
ip(6)tables-save/restore: Exit if invalid option was given (RHBZ#1465078)
ip(6)tables-save/restore: Require value to -W option (RHBZ#1465078)
ip(6)tables-save/restore: Don't accept -W without -w (RHBZ#1465078)
Ignore security table when setting policies (RHBZ#1494012)
Fix spec file changing SRPM content (RHBZ#1531290)

Avoid overwriting parent's return code (RHBZ#1560012)

Fix for stopping iptables and ip6tables at the same time (RHBZ#1560012)
Propagate errors on service stop (RHBZ#1560012)

Fix fgrep call over multiple files in iptables.init

Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)

Search for restorecon binary using which (RHBZ#1406860)

Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)

Prevent iptables.service and ip6tables.service from running in parallel
Don't restart services upon upgrade (RHBZ#1380141)