Index: general.ent
===================================================================
--- general.ent	(revision ff40dcf3ae8176bcf65ced3701c472d4eea9f43a)
+++ general.ent	(revision ab6bf6a6dbbd2970ea6f421fa945590e87c91769)
@@ -1,5 +1,5 @@
 <!-- $LastChangedBy$ $Date$ -->
 
-<!ENTITY day          "23">                   <!-- Always 2 digits -->
+<!ENTITY day          "24">                   <!-- Always 2 digits -->
 <!ENTITY month        "01">                   <!-- Always 2 digits -->
 <!ENTITY year         "2021">
@@ -7,5 +7,5 @@
 <!ENTITY copyholder   "The BLFS Development Team">
 <!ENTITY version      "&year;-&month;-&day;">
-<!ENTITY releasedate  "January 23rd, &year;">
+<!ENTITY releasedate  "January 24th, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->
Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision ff40dcf3ae8176bcf65ced3701c472d4eea9f43a)
+++ introduction/welcome/changelog.xml	(revision ab6bf6a6dbbd2970ea6f421fa945590e87c91769)
@@ -43,4 +43,14 @@
     -->
     <listitem>
+      <para>January 24th, 2021</para>
+      <itemizedlist>
+        <listitem>
+          <para>[renodr] - Update to iptables-1.8.7. Fixes
+          <ulink url="&blfs-ticket-root;14523">#14523</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>January 23rd, 2021</para>
       <itemizedlist>
Index: packages.ent
===================================================================
--- packages.ent	(revision ff40dcf3ae8176bcf65ced3701c472d4eea9f43a)
+++ packages.ent	(revision ab6bf6a6dbbd2970ea6f421fa945590e87c91769)
@@ -16,5 +16,5 @@
 <!ENTITY gpgme-version                "1.15.1">
 <!ENTITY haveged-version              "1.9.14">
-<!ENTITY iptables-version             "1.8.6">
+<!ENTITY iptables-version             "1.8.7">
 <!ENTITY libcap-version               "2.46">
 <!ENTITY liboauth-version             "1.0.3">
Index: postlfs/security/iptables.xml
===================================================================
--- postlfs/security/iptables.xml	(revision ff40dcf3ae8176bcf65ced3701c472d4eea9f43a)
+++ postlfs/security/iptables.xml	(revision ab6bf6a6dbbd2970ea6f421fa945590e87c91769)
@@ -7,8 +7,8 @@
   <!ENTITY iptables-download-http "http://www.netfilter.org/projects/iptables/files/iptables-&iptables-version;.tar.bz2">
   <!ENTITY iptables-download-ftp  "ftp://ftp.netfilter.org/pub/iptables/iptables-&iptables-version;.tar.bz2">
-  <!ENTITY iptables-md5sum        "bc0f0adccc93c09dc5b7507ccba93148">
-  <!ENTITY iptables-size          "700 KB">
-  <!ENTITY iptables-buildsize     "17 MB">
-  <!ENTITY iptables-time          "0.2 SBU">
+  <!ENTITY iptables-md5sum        "602ba7e937c72fbb7b1c2b71c3b0004b">
+  <!ENTITY iptables-size          "704 KB">
+  <!ENTITY iptables-buildsize     "22 MB">
+  <!ENTITY iptables-time          "0.1 SBU">
 ]>
 
@@ -32,5 +32,5 @@
     <para>
       <application>iptables</application> is a userspace command line program
-      used to configure Linux 2.4 and later kernel packet filtering ruleset.
+      used to configure the Linux 2.4 and later kernel packet filtering ruleset.
     </para>
 
@@ -78,8 +78,8 @@
       <xref linkend="libpcap"/> (required for nfsypproxy support),
       <ulink url="https://github.com/tadamdam/bpf-utils">bpf-utils</ulink>
-      (required for Berkely Packet Filter support),
+      (required for Berkeley Packet Filter support),
       <ulink url="https://netfilter.org/projects/libnfnetlink/">libnfnetlink</ulink>
       (required for connlabel support),
-      <ulink url="https://netfilter.org/projects/libnetfilter_conntrack/">libnetfilter_conntrack"</ulink>
+      <ulink url="https://netfilter.org/projects/libnetfilter_conntrack/">libnetfilter_conntrack</ulink>
       (required for connlabel support), and 
       <ulink url="https://netfilter.org/projects/nftables/">nftables</ulink>
@@ -184,5 +184,5 @@
     <para>
       <parameter>--disable-nftables</parameter>: This switch disables building
-      nftables compat. <!--Omit this switch if you have installed
+      nftables compatibility. <!--Omit this switch if you have installed
       <xref linkend="nftables"/>.-->
     </para>
@@ -195,6 +195,6 @@
 
     <para>
-      <parameter>--with-xtlibdir=/lib/xtables</parameter>: Ensure all
-      <application>iptables</application> modules are installed in the
+      <parameter>--with-xtlibdir=/lib/xtables</parameter>: This switch ensures that
+      all <application>iptables</application> modules are installed in the
       <filename class="directory">/lib/xtables</filename> directory.
     </para>
@@ -207,5 +207,6 @@
     <para>
       <command>ln -sfv ../../sbin/xtables-legacy-multi /usr/bin/iptables-xml</command>:
-      Ensure the symbolic link for <command>iptables-xml</command> is relative.
+      This command ensures that the symbolic link for the 
+      <command>iptables-xml</command> command is relative.
     </para>
 
@@ -241,5 +242,5 @@
       <para>
         A Personal Firewall is designed to let you access all the
-        services offered on the Internet, but keep your box secure and
+        services offered on the Internet while keeping your computer secure and
         your data private.
       </para>
@@ -250,5 +251,5 @@
         url="http://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO.html">
         Linux 2.4 Packet Filtering HOWTO</ulink>. It is still applicable
-        to the Linux 3.x kernels.
+        to the Linux 5.x kernels.
       </para>
 
@@ -322,5 +323,5 @@
 iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
 
-# Log everything else. What's Windows' latest exploitable vulnerability?
+# Log everything else.
 iptables -A INPUT -j LOG --log-prefix "FIREWALL:INPUT "
 
@@ -400,5 +401,5 @@
 iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
 
-# Log everything else. What's Windows' latest exploitable vulnerability?
+# Log everything else.
 iptables -A INPUT -j LOG --log-prefix "FIREWALL:INPUT "
 
@@ -434,10 +435,10 @@
 
       <para>
-        A network Firewall has two interfaces, one connected to an
+        A Network Firewall has two interfaces, one connected to an
         intranet, in this example <emphasis role="strong">LAN1</emphasis>,
         and one connected to the Internet, here <emphasis
         role="strong">WAN1</emphasis>. To provide the maximum security
         for the firewall itself, make sure that there are no unnecessary
-        servers running on it such as <application>X11</application> et al.
+        servers running on it such as <application>X11</application>.
         As a general principle, the firewall itself should not access
         any untrusted service (think of a remote server giving answers that
@@ -756,5 +757,5 @@
         </listitem>
         <listitem>
-          <para id='fw-BB-4-ipt' xreflabel="BusyBox with iptable example number 4">
+          <para id='fw-BB-4-ipt' xreflabel="BusyBox with iptables example number 4">
             If you are frequently accessing FTP servers or enjoy chatting, you
             might notice delays because some implementations of these daemons
@@ -874,12 +875,32 @@
       <seglistitem>
         <seg>
-          ip6tables, ip6tables-restore, ip6tables-save, iptables, iptables-restore,
-          iptables-save, iptables-xml, nfsynproxy (optional) and xtables-multi
+          ip6tables, 
+          ip6tables-apply,
+          ip6tables-legacy,
+          ip6tables-legacy-restore,
+          ip6tables-legacy-save,
+          ip6tables-restore, 
+          ip6tables-save, 
+          iptables, 
+          iptables-apply,
+          iptables-legacy,
+          iptables-legacy-restore,
+          iptables-legacy-apply,
+          iptables-restore,
+          iptables-save, 
+          iptables-xml, 
+          nfsynproxy (optional),
+          and xtables-multi
         </seg>
         <seg>
-          libip4tc.so, libip6tc.so, libipq.so, libiptc.so, and libxtables.so
+          libip4tc.so, 
+          libip6tc.so, 
+          libipq.so, 
+          libiptc.so,
+          and libxtables.so
         </seg>
         <seg>
-          /lib/xtables and /usr/include/libiptc
+          /lib/xtables and 
+          /usr/include/libiptc
         </seg>
       </seglistitem>
@@ -904,4 +925,52 @@
       </varlistentry>
 
+      <varlistentry id="iptables-apply">
+        <term><command>iptables-apply</command></term>
+        <listitem>
+          <para>
+            is a safer way to update iptables remotely.
+          </para>
+          <indexterm zone="iptables iptables-apply">
+            <primary sortas="b-iptables-apply">iptables-apply</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
+
+      <varlistentry id="iptables-legacy">
+        <term><command>iptables-legacy</command></term>
+        <listitem>
+          <para>
+            is used to interact with iptables using the legacy command set.
+          </para>
+          <indexterm zone="iptables iptables-legacy">
+            <primary sortas="b-iptables-legacy">iptables-legacy</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
+
+      <varlistentry id="iptables-legacy-restore">
+        <term><command>iptables-legacy-restore</command></term>
+        <listitem>
+          <para>
+            is used to restore a set of legacy iptables rules.
+          </para>
+          <indexterm zone="iptables iptables-legacy-restore">
+            <primary sortas="b-iptables-legacy-restore">iptables-legacy-restore</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
+
+      <varlistentry id="iptables-legacy-save">
+        <term><command>iptables-legacy-save</command></term>
+        <listitem>
+          <para>
+            is used to save a set of legacy iptables rules.
+          </para>
+          <indexterm zone="iptables iptables-legacy-save">
+            <primary sortas="b-iptables-legacy-save">iptables-legacy-save</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
+
       <varlistentry id="iptables-restore">
         <term><command>iptables-restore</command></term>
