Index: general.ent
===================================================================
--- general.ent	(revision c59e2ce6c50434822807fcca992a6a14116ef550)
+++ general.ent	(revision 7f5b9490011366b5e53ae909752d3e27ba8aabf3)
@@ -64,5 +64,5 @@
 <!ENTITY linux-pam-version            "0.99.4.0">
 <!ENTITY shadow-version               "4.0.15">
-<!ENTITY iptables-version             "1.3.5">
+<!ENTITY iptables-version             "1.3.6">
 <!ENTITY gnupg-version                "1.4.3">
 <!ENTITY tripwire-version             "2.4.0.1">
Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision c59e2ce6c50434822807fcca992a6a14116ef550)
+++ introduction/welcome/changelog.xml	(revision 7f5b9490011366b5e53ae909752d3e27ba8aabf3)
@@ -43,4 +43,14 @@
 
     <listitem>
+      <para>February 7th, 2007</para>
+      <itemizedlist>
+        <listitem>
+          <para>[randy] - Updated to iptables-1.3.6, thanks to Andy Beverley
+          for helping solve some build issues.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>February 6th, 2007</para>
       <itemizedlist>
Index: postlfs/security/iptables.xml
===================================================================
--- postlfs/security/iptables.xml	(revision c59e2ce6c50434822807fcca992a6a14116ef550)
+++ postlfs/security/iptables.xml	(revision 7f5b9490011366b5e53ae909752d3e27ba8aabf3)
@@ -5,22 +5,10 @@
   %general-entities;
 
-    <!-- Inserted as a reminder to do this. The mention of a test suite
-         is usually right before the root user installation commands. Please
-         delete these 12 (including one blank) lines after you are done.-->
-
-    <!-- Use one of the two mentions below about a test suite,
-         delete the line that is not applicable. Of course, if the
-         test suite uses syntax other than "make check", revise the
-         line to reflect the actual syntax to run the test suite -->
-
-    <!-- <para>This package does not come with a test suite.</para> -->
-    <!-- <para>To test the results, issue: <command>make check</command>.</para> -->
-
   <!ENTITY iptables-download-http "http://www.netfilter.org/projects/iptables/files/iptables-&iptables-version;.tar.bz2">
   <!ENTITY iptables-download-ftp  "ftp://ftp.netfilter.org/pub/iptables/iptables-&iptables-version;.tar.bz2">
-  <!ENTITY iptables-md5sum        "00fb916fa8040ca992a5ace56d905ea5">
-  <!ENTITY iptables-size          "187 KB">
-  <!ENTITY iptables-buildsize     "5.0 MB">
-  <!ENTITY iptables-time          "0.2 SBU">
+  <!ENTITY iptables-md5sum        "077e886a9c90a11bb47f3d7a4fc4a689">
+  <!ENTITY iptables-size          "185 KB">
+  <!ENTITY iptables-buildsize     "5.5 MB">
+  <!ENTITY iptables-time          "0.1 SBU">
 ]>
 
@@ -75,5 +63,5 @@
     <ulink url="&blfs-wiki;/iptables"/></para>
 
-</sect2>
+  </sect2>
 
   <sect2 role="kernel" id='iptables-kernel'>
@@ -97,5 +85,15 @@
 
     <note>
-      <para>Installation of <application>iptables</application> will fail
+      <para>The installation below does not include building some specialized
+      extension libraries which require the raw headers in the
+      <application>Linux</application> source code. If you wish to build the
+      additional extensions (if you aren't sure, then you probably don't), you
+      can look at the <filename>INSTALL</filename> file to see an example of
+      how to change the <parameter>KERNEL_DIR=</parameter> parameter to point
+      at the <application>Linux</application> source code. Note that if you
+      upgrade the kernel version, you may also need to recompile
+      <application>iptables</application>.</para>
+
+      <!-- <para>Installation of <application>iptables</application> will fail
       if raw kernel headers are found in <filename
       class='directory'>/usr/src/linux</filename> either as actual files
@@ -103,9 +101,10 @@
       should no longer exist because appropriate headers were installed
       from the <application>Linux-Libc-Headers</application> package during
-      the base LFS installation.</para>
-
+      the base LFS installation.</para> -->
+  
       <para>For some non-x86 architectures, the raw kernel headers may be
-      required. In that case, add the environment variable
-      <envar>KERNEL_DIR=/usr/src/linux</envar> to the make commands below.</para>
+      required. In that case, modify the <parameter>KERNEL_DIR=</parameter>
+      parameter to point at the <application>Linux</application> source
+      code.</para>
     </note>
 
@@ -113,9 +112,11 @@
     commands:</para>
 
-<screen><userinput>make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin</userinput></screen>
+<screen><userinput>make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin KERNEL_DIR=/usr</userinput></screen>
+
+    <para>This package does not come with a test suite.</para>
 
     <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
 
-<screen role="root"><userinput>make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin install</userinput></screen>
+<screen role="root"><userinput>make PREFIX=/usr LIBDIR=/lib BINDIR=/sbin KERNEL_DIR=/usr install</userinput></screen>
 
   </sect2>
@@ -134,4 +135,9 @@
     that time.</para>
 
+    <para><parameter>KERNEL_DIR=/usr</parameter>: This parameter is used to
+    point at the sanitized kernel headers in
+    <filename class='directory'>/usr</filename> and not use the raw kernel
+    headers in <filename class='directory'>/usr/src/linux</filename>.</para>
+
   </sect2>
 
