Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [patch] netfilter: default to NF_DROP in sip_help_tcp()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [iptables]fix a typo
  • From: Li Yewang <lyw@xxxxxxxxxxxxxx>
• Re: [PATCH v2] ipt_REJECT: can't work with bridges
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.9
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.9
  • From: "Gabor Z. Papp" <gzp@xxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.9
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: nfqueue
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.9
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• Re: nfqueue
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.9
  • From: "Gabor Z. Papp" <gzp@xxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.9
  • From: "Gabor Z. Papp" <gzp@xxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.9
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• nfqueue
  • From: m <martinbarrowcliff@xxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.9
  • From: "Gabor Z. Papp" <gzp@xxxxxxx>
• iptables-next merged
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ANNOUNCE]: Release of iptables-1.4.9
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: TCPMSS clamp-mss-to-pmtu breaks packets that have no MSS set (incl. solution)
  • From: Nepenthes Development Team <nepenthesdev@xxxxxxxxx>
• Re: [PATCH 00/28] netfilter: netfilter update
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2] nf_nat: no IP_NAT_RANGE_MAP_IPS flags when alloc_null_binding()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• RE: Question about using "Expect" from Netfilter hook
  • From: Jackson Alberto <superj_2004@xxxxxxxxxxx>
• [PATCH 05/28] ipvs: lvs sctp protocol handler is incorrectly invoked ip_vs_app_pkt_out
  • From: kaber@xxxxxxxxx
• [PATCH 06/28] netfilter: xt_TPROXY: the length of lines should be within 80
  • From: kaber@xxxxxxxxx
• [PATCH 07/28] nfnetlink_log: do not expose NFULNL_COPY_DISABLED to user-space
  • From: kaber@xxxxxxxxx
• [PATCH 08/28] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled
  • From: kaber@xxxxxxxxx
• [PATCH 00/28] netfilter: netfilter update
  • From: kaber@xxxxxxxxx
• [PATCH 09/28] netfilter: add CHECKSUM target
  • From: kaber@xxxxxxxxx
• [PATCH 02/28] netfilter: ipt_REJECT: postpone the checksum calculation.
  • From: kaber@xxxxxxxxx
• [PATCH 10/28] netfilter: correct CHECKSUM header and export it
  • From: kaber@xxxxxxxxx
• [PATCH 03/28] netfilter: ipt_REJECT: avoid touching dst ref
  • From: kaber@xxxxxxxxx
• [PATCH 11/28] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: kaber@xxxxxxxxx
• [PATCH 12/28] IPVS: make friends with nf_conntrack
  • From: kaber@xxxxxxxxx
• [PATCH 13/28] IPVS: make FTP work with full NAT support
  • From: kaber@xxxxxxxxx
• [PATCH 14/28] netfilter: add xt_cpu match
  • From: kaber@xxxxxxxxx
• [PATCH 15/28] netfilter: nf_nat_core: merge the same lines
  • From: kaber@xxxxxxxxx
• [PATCH 19/28] netfilter: ip6tables: use skb->len for accounting
  • From: kaber@xxxxxxxxx
• [PATCH 20/28] netfilter: iptables: use skb->len for accounting
  • From: kaber@xxxxxxxxx
• [PATCH 21/28] netfilter: {ip,ip6,arp}_tables: dont block bottom half more than necessary
  • From: kaber@xxxxxxxxx
• [PATCH 22/28] netfilter: nf_conntrack_extend: introduce __nf_ct_ext_exist()
  • From: kaber@xxxxxxxxx
• [PATCH 25/28] netfilter: nf_nat: use local variable hdrlen
  • From: kaber@xxxxxxxxx
• [PATCH 23/28] ipvs: remove EXPERIMENTAL tag
  • From: kaber@xxxxxxxxx
• [PATCH 28/28] netfilter: nf_conntrack_acct: use skb->len for accounting
  • From: kaber@xxxxxxxxx
• [PATCH 24/28] ipvs: provide default ip_vs_conn_{in,out}_get_proto
  • From: kaber@xxxxxxxxx
• [PATCH 27/28] netfilter: nf_nat: don't check if the tuple is unique when there isn't any other choice
  • From: kaber@xxxxxxxxx
• [PATCH 26/28] netfilter: nf_nat: make unique_tuple return void
  • From: kaber@xxxxxxxxx
• [PATCH 18/28] xt_quota: report initial quota value instead of current value to userspace
  • From: kaber@xxxxxxxxx
• [PATCH 17/28] netfilter: xt_quota: use per-rule spin lock
  • From: kaber@xxxxxxxxx
• [PATCH 16/28] netfilter: arptables: use arp_hdr_len()
  • From: kaber@xxxxxxxxx
• [PATCH 04/28] ipvs: Kconfig cleanup
  • From: kaber@xxxxxxxxx
• [PATCH 01/28] netfilter: nf_conntrack_reasm: add fast path for in-order fragments
  • From: kaber@xxxxxxxxx
• Re: [PATCH] netfilter: xtables: introduce xt_length revision 2½
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH iptables] libxt_quota: don't ignore the quota value on deletion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: introduce xt_length revision 2½
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nf_conntrack_acct: use skb->len for accounting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nf: make skb_make_writable() return bool
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Misc consistency updates
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2] nf_nat: no IP_NAT_RANGE_MAP_IPS flags when alloc_null_binding()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 2/2] nf_nat: don't check if the tuple is unique when there isn't any other choice
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 1/2] nf_nat: make unique_tuple return void
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: TCPMSS clamp-mss-to-pmtu breaks packets that have no MSS set (incl. solution)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] nf_nat: use local variable hdrlen
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter : fix typo in Kconfig
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Misc consistency updates
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] nf_conntrack_extend: introduce __nf_ct_ext_exist()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Misc consistency updates
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: {ip,ip6,arp}_tables: dont block bottom half more than necessary
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] nf_nat_core: don't check if the tuple is used if there is no other choice
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH v2] nf_nat: no IP_NAT_RANGE_MAP_IPS flags when alloc_null_binding()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: socket match - add wildcard option [2/4]
  • From: Nepenthes Development Team <nepenthesdev@xxxxxxxxx>
• [PATCH] nf_nat: no IP_NAT_RANGE_MAP_IPS flags when alloc_null_binding()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH v2 2/2] nf_nat: don't check if the tuple is unique when there isn't any other choice
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH v2 1/2] nf_nat: make unique_tuple return void
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] nf: make skb_make_writable() return bool
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH 2/2] nf_nat: don't check if the tuple is unique when there isn't any other choice
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH 2/2] nf_nat: don't check if the tuple is unique when there isn't any other choice
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 1/2] nf_nat: make unique_tuple return void
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH 1/2] nf_nat: make unique_tuple return void
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] nf_nat: don't check if the tuple is unique when there isn't any other choice
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH 1/2] nf_nat: make unique_tuple return void
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] nf_nat: use local variable hdrlen
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: strange IP rewrite of the libnetfilter_conntrack
  • From: Pete Kay <petedao@xxxxxxxxx>
• strange IP rewrite of the libnetfilter_conntrack
  • From: Pete Kay <petedao@xxxxxxxxx>
• TCPMSS clamp-mss-to-pmtu breaks packets that have no MSS set (incl. solution)
  • From: Daniel Gibson <metalcaedes@xxxxxxxxx>
• Question about using "Expect" from Netfilter hook
  • From: Jackson Alberto <superj_2004@xxxxxxxxxxx>
• [PATCH] netfilter : fix typo in Kconfig
  • From: Meik Piepmeyer <meik.piepmeyer.lists@xxxxxxxxx>
• Re: question about libfilter_conntrack
  • From: Pete Kay <petedao@xxxxxxxxx>
• Re: question about libfilter_conntrack
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: question about libfilter_conntrack
  • From: Pete Kay <petedao@xxxxxxxxx>
• Re: question about libfilter_conntrack
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• question about libfilter_conntrack
  • From: Pete Kay <petedao@xxxxxxxxx>
• Re: [RFC 0/4] nfnetlink_queue bypass queue to userspace X bytes of connection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: socket match - add wildcard option [2/4]
  • From: Nepenthes Development Team <nepenthesdev@xxxxxxxxx>
• Re: [RFC 0/4] nfnetlink_queue bypass queue to userspace X bytes of connection
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• using libiptc to append iptables rule but no effect
  • From: Pete Kay <petedao@xxxxxxxxx>
• Re: [PATCH iptables] libxt_length: update to revision 1
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH iptables] libxt_length: update to revision 1
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: socket match - add wildcard option [2/4]
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: socket match - add wildcard option [2/4]
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: socket match - add wildcard option [2/4]
  • From: Nepenthes Development Team <nepenthesdev@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: xtables: inclusion of xt_SYSRQ
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: xtables: inclusion of xt_SYSRQ
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: about conntrack for oracle tns
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [rfc] netfilter: copy less data to the user
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH iptables] libxt_length: update to revision 1
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: socket match - add wildcard option [2/4]
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: socket match - add wildcard option [1/4]
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• socket match - add wildcard option [4/4]
  • From: Nepenthes Development Team <nepenthesdev@xxxxxxxxx>
• socket match - add wildcard option [3/4]
  • From: Nepenthes Development Team <nepenthesdev@xxxxxxxxx>
• socket match - add wildcard option [2/4]
  • From: Nepenthes Development Team <nepenthesdev@xxxxxxxxx>
• socket match - add wildcard option [1/4]
  • From: Nepenthes Development Team <nepenthesdev@xxxxxxxxx>
• [PATCH] nf_conntrack_extend: introduce __nf_ct_ext_exist()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• socket match - add wildcard option [0/4]
  • From: Nepenthes Development Team <nepenthesdev@xxxxxxxxx>
• Re: [RFC 0/4] nfnetlink_queue bypass queue to userspace X bytes of connection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC 0/4] nfnetlink_queue bypass queue to userspace X bytes of connection
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• Re: [RFC 0/4] nfnetlink_queue bypass queue to userspace X bytes of connection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC 2/4] nf_conntrack_queue: define struct that will be stored in nf_ct_extend
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• [RFC 4/4] nfnetlink_queue: allow part of a connection to bypass the queue
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• [RFC 3/4] nf_conntrack: add nf_queue extension
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• [RFC 1/4] netfilter/Kconfig: NF_QUEUE_CONNBYTES_BYPASS
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• [RFC 0/4] nfnetlink_queue bypass queue to userspace X bytes of connection
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: introduce xt_length revision 2½
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH iptables] libxt_length: update to revision 1
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: introduce xt_length revision 2
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH iptables] libxt_length: update to revision 1
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: xtables: introduce xt_length revision 2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH iptables v2] libxt_length: update to revision 1
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH iptables] libxt_length: update to revision 1
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH iptables] libxt_length: update to revision 1
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH iptables] libxt_quota: don't ignore the quota value on deletion
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH iptables] libxt_length: update to revision 1
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] xt_length: support ipv6 jumbo frames
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH 5/5] doc: consistent use of markup
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/5] all: consistent syntax use in struct option
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/5] doc: minimal spelling updates to xt_cpu
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/5] doc: remove extra empty line from xt_cpu
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/5] doc: let man(1) autoalign the text in xt_cpu
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Misc consistency updates
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH iptables] extension: add xt_cpu match
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH iptables] extension: add xt_cpu match
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH iptables] extension: add xt_cpu match
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] ip6tables: use skb->len for accounting
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: {ip,ip6,arp}_tables: dont block bottom half more than necessary
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [RFC v2 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [RFC v2 0/1] netfilter: xtables: xt_condition inclusion with namespace fix
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] iptables: use skb->len for accounting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ip6tables: use skb->len for accounting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ip6tables: use skb->len for accounting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH iptables] extension: add xt_cpu match
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH iptables] extension: add xt_cpu match
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] ip6tables: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] iptables: use skb->len for accounting
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] xt_quota: use per-rule spin lock
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] xt_helper: use sizeof()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] xt_helper: use sizeof()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] iptables: use skb->len for accounting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ip6tables: use skb->len for accounting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] arptables: use arp_hdr_len()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nf_nat_core: merge the same lines
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.8 4/4] [patch v2.2 4/4] [PATCH v2.1 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.8 3/4] IPVS: make FTP work with full NAT support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.8 2/4] IPVS: make friends with nf_conntrack
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.8 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2] xt_helper: use ARRAY_SIZE()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] xt_statistic: add the comment
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] xt_helper: use sizeof()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] iptables: use skb->len for accounting
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] iptables: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] ip6tables: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] iptables: use skb->len for accounting
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] ip6tables: use skb->len for accounting
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] xt_quota: don't copy quota back to userspace
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] xt_quota: use per-rule spin lock
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] nf_conntrack_acct: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] iptables: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] ip6tables: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] arptables: use arp_hdr_len()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: RE: Re: Fwd: LVS on local node
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: RE: Re: Fwd: LVS on local node
  • From: Franchoze Eric <franchoze@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• Re: Re: Fwd: LVS on local node
  • From: Franchoze Eric <franchoze@xxxxxxxxx>
• Re: Re: Fwd: LVS on local node
  • From: Franchoze Eric <franchoze@xxxxxxxxx>
• How to filter connections using connmark with libnetfilter_conntrack
  • From: Tino Keitel <tkeitel@xxxxxxxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [RFC 0/1] netfilter: xtables: xt_condition inclusion with namespace fix
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] netfilter: nfnetlink_log: Fix potential problem if skb->dev is null
  • From: Eric Leblond <eric@xxxxxx>
• re: netfilter: nfnetlink_log: send complete hardware header
  • From: Dan Carpenter <error27@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] nf_nat_core: merge the same lines
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [patch v2.8 4/4] [patch v2.2 4/4] [PATCH v2.1 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.8 3/4] IPVS: make FTP work with full NAT support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.8 2/4] IPVS: make friends with nf_conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.8 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.8 0/4] IPVS full NAT support + netfilter 'ipvs' match support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Fwd: LVS on local node
  • From: Franchoze Eric <franchoze@xxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch v2.7 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Hannes Eder <heder@xxxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Regarding write send a packet to network that received in NF_IP_PRE_ROUTING
  • From: Padmalochan Moharana <padman.m@xxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [RFC v2] netfilter: xt_condition: add condition target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/2] netfilter: xt_condition: export list management code
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/2] netfilter: xt_condition: export list management code
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: Are concurrent calls to tc action ipt safe?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC 1/2] netfilter: xt_condition: export list management code
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Are concurrent calls to tc action ipt safe?
  • From: "Gerd v. Egidy" <lists@xxxxxxxx>
• Re: [RFC 0/2] netfilter: xtables: CONDITION target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 0/2] netfilter: xtables: CONDITION target implementation
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [RFC 2/2] netfilter: xtables: implement CONDITION target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [RFC 0/2] netfilter: xtables: CONDITION target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [RFC 1/2] netfilter: xt_condition: export list management code
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [RFC] setting up throughput threshold indications to userspace
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: <Luciano.Coelho@xxxxxxxxx>
• Re: [RFC] setting up throughput threshold indications to userspace
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Payam Chychi <pchychi@xxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• [ANNOUNCE] ulogd 2.0.0beta4
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libnetfilter_log 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH v2] ipt_REJECT: can't work with bridges
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [RFC] setting up throughput threshold indications to userspace
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [RFC] setting up throughput threshold indications to userspace
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ipt_REJECT: can't work with bridges
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCHv4] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [ANNOUNCE] libnetfilter_log 1.0.0 release
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• [RFC] setting up throughput threshold indications to userspace
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Aijaz Baig <aijazbaig1@xxxxxxxxx>
• [PATCH] ipt_REJECT: can't work with bridges
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• [ANNOUNCE] conntrack-tools 0.9.15 released
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 0.0.102 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv4] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCH iptables] extensions: libxt_rateest: fix bps options for iptables-save
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH iptables] extensions: libxt_rateest: fix bps options for iptables-save
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH iptables] extensions: libxt_rateest: fix bps options for iptables-save
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH iptables] extensions: libxt_rateest: fix bps options for iptables-save
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [rfc] netfilter: copy less data to the user
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv4] extensions: libxt_CHECKSUM extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv4] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH iptables-next] extensions: libxt_IDLETIMER: use xtables_param_act when checking options
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nfnetlink_queue: add definition of aligned_be64 for user-space apps
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH iptables-next] extensions: libxt_IDLETIMER: use xtables_param_act when checking options
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• packet flow - ebtables broute DROP target
  • From: Aijaz Baig <aijazbaig1@xxxxxxxxx>
• Re: 'HELP ME PLEASE. libnetfilter_queue issue
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• [ANNOUNCE] libnetfilter_log 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nfnetlink_queue: add definition of aligned_be64 for user-space apps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv4] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• [PATCHv4] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [rfc] netfilter: copy less data to the user
  • From: Dan Carpenter <error27@xxxxxxxxx>
• Re: several messages
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [rfc] netfilter: copy less data to the user
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv3] extensions: libxt_CHECKSUM extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv2] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nfnetlink_log: do not expose NFULNL_COPY_DISABLED to user-space
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nfnetlink_queue: add definition of aligned_be64 for user-space apps
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• 'HELP ME PLEASE. libnetfilter_queue issue
  • From: "MAI JIN" <Jin.Mai@xxxxxxxxxxxxxxxxxxxx>
• [rfc] netfilter: copy less data to the user
  • From: Dan Carpenter <error27@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch] netfilter: default to NF_DROP in sip_help_tcp()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [patch] netfilter: default to NF_DROP in sip_help_tcp()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] nfnetlink_log: do not expose NFULNL_COPY_DISABLED to user-space
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: xtables: userspace notification target
  • From: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: xtables: userspace notification target
  • From: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
• Re: unable to find struct ip_nat_multi_range
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] netfilter: nfnetlink_queue: add definition of aligned_be64 for user-space apps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] A couple of netfilter fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• unable to find struct ip_nat_multi_range
  • From: Pete Kay <petedao@xxxxxxxxx>
• Re: netfilter hook/tuple question
  • From: Rusty Russell <rusty@xxxxxxxxxxxxxxx>