iptables: Update to 1.8.6

iptables: Update to 1.8.6

- Update from 1.8.5 to 1.8.6
- Changelog info
Arturo Borrero Gonzalez (1):
      xtables-translate: don't fail if help was requested

Giuseppe Scrivano (1):
      iptables: accept lock file name at runtime

Jan Engelhardt (2):
      doc: document danger of applying REJECT to INVALID CTs
      build: resolve iptables-apply not getting installed

Maciej Żenczykowski (1):
      libxtables: compiler warning fixes for NO_SHARED_LIBS

Pablo Neira Ayuso (4):
      extensions: libxt_conntrack: provide translation for DNAT and SNAT --ctstate
      iptables: replace libnftnl table list by linux list
      iptables-nft: fix basechain policy configuration
      configure: bump version for 1.8.6 release

Phil Sutter (31):
      xtables-restore: Fix verbose mode table flushing
      build: Fix for failing 'make uninstall'
      xtables-translate: Use proper clear_cs function
      tests: shell: Add help output to run-tests.sh
      nft: Make table creation purely implicit
      nft: Be lazy when flushing
      nft: cache: Drop duplicate chain check
      nft: Drop pointless nft_xt_builtin_init() call
      nft: Turn nft_chain_save() into a foreach-callback
      nft: Use nft_chain_find() in two more places
      nft: Reorder enum nft_table_type
      nft: Eliminate table list from cache
      nft: Fix command name in ip6tables error message
      tests: shell: Merge and extend return codes test
      xtables-monitor: Fix ip6tables rule printing
      nft: Fix for ruleset flush while restoring
      Makefile: Add missing man pages to CLEANFILES
      nft: cache: Check consistency with NFT_CL_FAKE, too
      nft: Extend use of nftnl_chain_list_foreach()
      nft: Fold nftnl_rule_list_chain_save() into caller
      nft: Use nft_chain_find() in nft_chain_builtin_init()
      nft: Fix for broken address mask match detection
      extensions: libipt_icmp: Fix translation of type 'any'
      libxtables: Make sure extensions register in revision order
      libxtables: Simplify pending extension registration
      libxtables: Register multiple extensions in ascending order
      nft: Make batch_add_chain() return the added batch object
      nft: Fix error reporting for refreshed transactions
      libiptc: Avoid gcc-10 zero-length array warning
      nft: Fix for concurrent noflush restore calls
      tests: shell: Improve concurrent noflush restore test a bit
- Rootfiles updated

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>