Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision 28a9992c34f9e2ef1a4ef2226831619e42d17580)
+++ introduction/welcome/changelog.xml	(revision e760c5cf0791a7a6bb521daab84098ad5f13c6e1)
@@ -10,4 +10,7 @@
 
 <itemizedlist>
+
+<listitem><para>May 5th, 2003 [larry]: postlfs: updated to
+iptables-1.2.8.</para></listitem>
 
 <listitem><para>May 5th, 2003 [larry]: multimedia: updated to
Index: postlfs/security/iptables.xml
===================================================================
--- postlfs/security/iptables.xml	(revision 28a9992c34f9e2ef1a4ef2226831619e42d17580)
+++ postlfs/security/iptables.xml	(revision e760c5cf0791a7a6bb521daab84098ad5f13c6e1)
@@ -5,7 +5,9 @@
 <para>The next part of this chapter deals with firewalling.  The
 principle firewalling tool for Linux, as of the 2.4 kernel series, is
-iptables.  It replaces ipchains from the 2.2 series and ipfwadm from the
-2.0 series. You will need to install iptables if you intend on
-using any form of firewalling.</para>
+<application>iptables</application>.  It replaces
+<application>ipchains</application> from the 2.2 series and
+<application>ipfwadm</application> from the
+2.0 series. You will need to install <application>iptables</application> if 
+you intend on using any form of firewalling.</para>
 
 &iptables-intro;
Index: postlfs/security/iptables/iptables-desc.xml
===================================================================
--- postlfs/security/iptables/iptables-desc.xml	(revision 28a9992c34f9e2ef1a4ef2226831619e42d17580)
+++ postlfs/security/iptables/iptables-desc.xml	(revision e760c5cf0791a7a6bb521daab84098ad5f13c6e1)
@@ -2,6 +2,6 @@
 <title>Contents</title>
 
-<para>The iptables-package contains <userinput>iptables</userinput>,
-<userinput>ip6tables</userinput> and some libraries.</para>
+<para>The iptables-package contains <command>iptables</command>,
+<command>ip6tables</command> and some libraries.</para>
 
 </sect2>
@@ -10,21 +10,23 @@
 
 <sect3><title>iptables</title>
-<para>iptables is used to set up, maintain, and inspect the tables of IP packet
-filter rules in the Linux kernel.</para>
+<para><command>iptables</command> is used to set up, maintain, and inspect the 
+tables of <acronym>IP</acronym> packet filter rules in the Linux kernel.</para>
 </sect3>
 
 <sect3><title>iptables-save, ~-restore</title>
-<para>These are used to save and to restore your elaborated set of chains and rules. Until iptables-1.2.5 they were declared experimental.</para>
+<para>These are used to save and to restore your elaborated set of chains and 
+rules. Until <application>iptables</application>-1.2.5 they were declared 
+experimental.</para>
 </sect3>
 
 <sect3 id="ip6tables" xreflabel="ip6tables"><title>ip6tables</title>
-<para>This is the same as iptables but for use with IPv6.  As of v1.2.5,
-it is not as complete as the standard IPv4 version, especially with
-regard to some of the modules.</para>
+<para>This is the same as <command>iptables</command> but for use with
+<acronym>IP</acronym>v6.  As of v1.2.5, it is not as complete as the standard 
+<acronym>IP</acronym>v4 version, especially with regard to some of the modules.</para>
 </sect3>
 
 <sect3><title>libip*.so</title>
 <para>These are various modules (implemented as dynamic libraries) which
-extend the core functionality of iptables.</para>
+extend the core functionality of <command>iptables</command>.</para>
 </sect3>
 
Index: postlfs/security/iptables/iptables-exp.xml
===================================================================
--- postlfs/security/iptables/iptables-exp.xml	(revision 28a9992c34f9e2ef1a4ef2226831619e42d17580)
+++ postlfs/security/iptables/iptables-exp.xml	(revision e760c5cf0791a7a6bb521daab84098ad5f13c6e1)
@@ -2,7 +2,8 @@
 <title>Command explanations</title>
 
-<para><userinput>PREFIX=/usr</userinput> : Compiles and installs 
-iptables into the <filename>/usr</filename> hierarchy instead 
-of <filename>/usr/local</filename>.</para>
+<para><command>PREFIX=/usr</command> : Compiles and installs 
+<application>iptables</application> into the <filename class="directory">
+/usr</filename> hierarchy instead of <filename class="directory">/usr/local
+</filename>.</para>
 
 </sect2>
Index: postlfs/security/iptables/iptables-inst.xml
===================================================================
--- postlfs/security/iptables/iptables-inst.xml	(revision 28a9992c34f9e2ef1a4ef2226831619e42d17580)
+++ postlfs/security/iptables/iptables-inst.xml	(revision e760c5cf0791a7a6bb521daab84098ad5f13c6e1)
@@ -1,9 +1,9 @@
 <sect2>
-<title>Installation of iptables</title>
+<title>Installation of <application>iptables</application></title>
 
-<para>Install iptables by running the following commands:</para>
+<para>Install <application>iptables</application> by running the following commands:</para>
 
-<para><screen><userinput>make PREFIX=/usr &amp;&amp;
-make PREFIX=/usr install</userinput></screen></para>
+<screen><userinput><command>make PREFIX=/usr &amp;&amp;
+make PREFIX=/usr install</command></userinput></screen>
 
 </sect2>
Index: postlfs/security/iptables/iptables-intro.xml
===================================================================
--- postlfs/security/iptables/iptables-intro.xml	(revision 28a9992c34f9e2ef1a4ef2226831619e42d17580)
+++ postlfs/security/iptables/iptables-intro.xml	(revision e760c5cf0791a7a6bb521daab84098ad5f13c6e1)
@@ -1,31 +1,27 @@
 <sect2>
-<title>Introduction to iptables</title>
+<title>Introduction to <application>iptables</application></title>
 
-<screen>Download location (HTTP):       <ulink url="&iptables-download-http;"/>
-Download location (FTP):        <ulink url="&iptables-download-ftp;"/>
-Version used:			&iptables-version;
-Package size:			&iptables-size;
-Estimated Disk space required:	&iptables-buildsize;</screen>
-
-<para>To use firewalling, as well as installing iptables, you will need
+<para>To use firewalling, as well as installing
+<application>iptables</application>, you will need
 to configure the relevant options into your kernel.  This is discussed
 in the next part of this chapter - <xref linkend="postlfs-security-fw-kernel"/>.</para>
 
-<para>If you intend to use IPv6 you might consider extending the kernel
-by running <userinput>make patch-o-matic</userinput> in the top-level
-directory of the sources of iptables.  If you are going to do this, on a
-freshly untarred kernel, you need to run <userinput>yes "" | make config
-&amp;&amp; make dep</userinput> first because otherwise the
-patch-o-matic command is likely to fail while setting up
+<para>If you intend to use <acronym>IP</acronym>v6 you might consider extending
+the kernel by running <command>make patch-o-matic</command> in the top-level
+directory of the sources of <application>iptables</application>.  If you are 
+going to do this, on a freshly untarred kernel, you need to run 
+<command>yes "" | make config &amp;&amp; make dep</command> first because 
+otherwise the patch-o-matic command is likely to fail while setting up
 some dependencies.</para>
 
 <para>If you are going to patch the kernel, you need to do it before you
-compile iptables, because during the compilation, the kernel source tree
-is checked (if it is available at <filename>/usr/src/linux</filename> to
-see which features are available.  Support will only be compiled into
-iptables for the features recognized at compile-time.  Applying a kernel
-patch may result in errors, often because the hooks for the patches
-have changed or because the runme script doesn't recognize that a patch
-has already been incorporated.</para>
+compile <application>iptables</application>, because during the compilation, 
+the kernel source tree is checked (if it is available at <filename
+class="directory">/usr/src/linux-<replaceable>[version]</replaceable>
+</filename> to see which features are available.  Support will only be compiled
+into <application>iptables</application> for the features recognized at 
+compile-time.  Applying a kernel patch may result in errors, often because the 
+hooks for the patches have changed or because the runme script doesn't 
+recognize that a patch has already been incorporated.</para>
 
 <para>Note that for most people, patching the kernel is unnecessary.
@@ -35,3 +31,17 @@
 unlikely to need to!</para>
 
+<sect3><title>Package information</title>
+<itemizedlist spacing='compact'>
+<listitem><para>Download (HTTP): <ulink
+url="&iptables-download-http;"/></para></listitem>
+<listitem><para>Download (FTP): <ulink
+url="&iptables-download-ftp;"/></para></listitem>
+<listitem><para>Download size: &iptables-size;</para></listitem>
+<listitem><para>Estimated Disk space required:
+&iptables-buildsize;</para></listitem>
+<listitem><para>Estimated build time:
+&iptables-time;</para></listitem></itemizedlist>
+</sect3>
+
+
 </sect2>
Index: postlfs/security/iptables/iptables.ent
===================================================================
--- postlfs/security/iptables/iptables.ent	(revision 28a9992c34f9e2ef1a4ef2226831619e42d17580)
+++ postlfs/security/iptables/iptables.ent	(revision e760c5cf0791a7a6bb521daab84098ad5f13c6e1)
@@ -4,7 +4,8 @@
 <!ENTITY iptables-exp SYSTEM "iptables-exp.xml">
 <!ENTITY iptables-desc SYSTEM "iptables-desc.xml">
-<!ENTITY iptables-buildsize "2.4 MB">
-<!ENTITY iptables-version "1.2.7a">
+<!ENTITY iptables-buildsize "2.8 MB">
+<!ENTITY iptables-version "1.2.8">
 <!ENTITY iptables-download-http "http://www.iptables.org/files/iptables-&iptables-version;.tar.bz2">
 <!ENTITY iptables-download-ftp "ftp://ftp.netfilter.org/pub/iptables/iptables-&iptables-version;.tar.bz2">
-<!ENTITY iptables-size "115 KB">
+<!ENTITY iptables-size "128 KB">
+<!ENTITY iptables-time "0.28 SBU">
