Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- [PATCH 1/2] build: remove -fPIC flag, (continued)
- conntrack-tools build updates 2,
Jan Engelhardt
- libnetfilter_queue build updates 2,
Jan Engelhardt
- libnetfilter_log build updates 2,
Jan Engelhardt
- libnetfilter_conntrack build updates 2,
Jan Engelhardt
- libnfnetlink build updates 2,
Jan Engelhardt
- [PATCH] netfilter: ipv6: fix overlap check for fragments,
Shan Wei
- [PATCH 46/49] net/netfilter: Use vzalloc,
Joe Perches
- Can NFQUEUE accept/continue when there is no userspace listener registered ?,
Darryl Miles
- [PATCH 0/5] netfilter: netfilter fixes,
kaber
- rules matching ipv6 prefix addrs,
David Miller
- Re: libnetfilter_queue exiting on big tcp sessions,
Mistick Levi
- [ipset-5: 0/9] ipset-5 patches,
Jozsef Kadlecsik
- [PATCH]extensions/tos_values.c mask value not accurate in certain condition,
DuanZhenzhong
- icmp_error_message return?,
"Oleg A. Arkhangelsky"
- conntrack-tools: build system cleanups,
Jan Engelhardt
- libnetfilter_queue: build system cleanups,
Jan Engelhardt
- [PATCH 01/10] build: build: use autoconf-suggested naming of files, Jan Engelhardt
- [PATCH 02/10] build: use modern call syntax for AC_INIT, AM_INIT_AUTOMAKE, Jan Engelhardt
- [PATCH 03/10] build: avoid use of deprecated INCLUDES, Jan Engelhardt
- [PATCH 04/10] build: use simpler autoreconf in autogen, Jan Engelhardt
- [PATCH 05/10] build: run AC_CANONICAL_HOST only, Jan Engelhardt
- [PATCH 06/10] build: no need for error message in PKG_CHECK_MODULES, Jan Engelhardt
- [PATCH 07/10] build: set Libs.private for pkgconfig file, Jan Engelhardt
- [PATCH 08/10] build: remove statements without effect, Jan Engelhardt
- [PATCH 09/10] build: remove -fPIC flag, Jan Engelhardt
- [PATCH 10/10] Update .gitignore, Jan Engelhardt
- Re: libnetfilter_queue: build system cleanups, Pablo Neira Ayuso
- libnetfilter_log: build system cleanups,
Jan Engelhardt
- [PATCH 01/11] build: use autoconf-suggested naming of files, Jan Engelhardt
- [PATCH 03/11] build: avoid use of deprecated INCLUDES, Jan Engelhardt
- [PATCH 02/11] build: use modern call syntax for AC_INIT, AM_INIT_AUTOMAKE, Jan Engelhardt
- [PATCH 04/11] build: use simpler autoreconf in autogen, Jan Engelhardt
- [PATCH 05/11] build: run AC_CANONICAL_HOST only, Jan Engelhardt
- [PATCH 06/11] build: remove statements without effect, Jan Engelhardt
- [PATCH 07/11] build: remove -fPIC flag, Jan Engelhardt
- [PATCH 08/11] build: no need for error message in PKG_CHECK_MODULES, Jan Engelhardt
- [PATCH 09/11] build: set Libs.private for pkgconfig file, Jan Engelhardt
- [PATCH 11/11] Add .gitignore files, Jan Engelhardt
- [PATCH 10/11] Remove accidentally-added file "depcomp", Jan Engelhardt
- Re: libnetfilter_log: build system cleanups, Pablo Neira Ayuso
- libnetfilter_conntrack: build system cleanup,
Jan Engelhardt
- libnfnetlink: build system cleanup,
Jan Engelhardt
- [PATCH 1/9] build: use autoconf-suggested naming of files, Jan Engelhardt
- [PATCH 2/9] build: use modern call syntax for AC_INIT, AM_INIT_AUTOMAKE, Jan Engelhardt
- [PATCH 3/9] build: avoid use of deprecated INCLUDES, Jan Engelhardt
- [PATCH 4/9] build: use simpler autoreconf in autogen, Jan Engelhardt
- [PATCH 5/9] build: use AC_CONFIG_MACRO_DIR as directed, Jan Engelhardt
- [PATCH 6/9] build: run AC_CANONICAL_HOST only, Jan Engelhardt
- [PATCH 7/9] build: remove statements without effect, Jan Engelhardt
- [PATCH 8/9] build: remove -fPIC flag, Jan Engelhardt
- [PATCH 9/9] Add .gitignore files, Jan Engelhardt
- Re: libnfnetlink: build system cleanup, Pablo Neira Ayuso
- libmnl cast remover,
Jan Engelhardt
- Re: [PATCH 1/2] IPv6: conntrack: Use protocol-related initialization routine to initial queues of IPv6 connection track, Pascal Hambourg
- [PATCH] ipv4: netfilter: arp_tables: fix information leak to userland,
Vasiliy Kulikov
- [PATCH] ipv4: netfilter: ip_tables: fix information leak to userland,
Vasiliy Kulikov
- [PATCH] netfilter: fix nf_conntrack_l4proto_register(),
Eric Dumazet
- [ANNOUNCE]: Release of iptables-1.4.10,
Patrick McHardy
- Re: tproxy: added IPv6 support to the socket match,
Geert Uytterhoeven
- Re: netfilter: nf_nat: make find/put static,
Geert Uytterhoeven
- CONMARK and SNAT,
Jyotiswarup Raiturkar
- netfilter for DPI, Pete Kay
- [PATCH] conntrack: allow nf_ct_alloc_hashtable() to get highmem pages,
Eric Dumazet
- Re: [rfc v2.1 03/10] ipvs network name space aware: conn,
Simon Horman
- [PATCH] netfilter: Add missing CONFIG_SYSCTL checks in ipv6's nf_conntrack_reasm.c, David Miller
- Re: linux-next: Tree for October 25 (netfilter/nf_conntrack_reasm),
Randy Dunlap
- Re: linux-next: Tree for October 25 (netfilter/xt_socket),
Randy Dunlap
- FYI: net-2.6 and net-next-2.6 rebased, David Miller
- Moving modified packets between processes,
Kfir Lavi
- [PATCH] netfilter: remove modulo operations,
Changli Gao
- [PATCH] netfilter: don't always initialize ct->proto,
Changli Gao
- [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension,
Pablo Neira Ayuso
- libmnl: misc code updates,
Jan Engelhardt
- [PATCH 01/13] build: fix disable_static functionality, Jan Engelhardt
- [PATCH 02/13] src: avoid using deprecated unspecified argument lists, Jan Engelhardt
- [PATCH 03/13] src: add const qualifiers, Jan Engelhardt
- [PATCH 04/13] src: remove redundant casts, Jan Engelhardt
- [PATCH 05/13] socket: remove statement with no effect, Jan Engelhardt
- [PATCH 06/13] doc: documentation updates, Jan Engelhardt
- [PATCH 07/13] include: consistent usage of "extern", Jan Engelhardt
- [PATCH 08/13] attr: string functions should take char *, Jan Engelhardt
- [PATCH 09/13] callback: mnl_cb_run should use a void *, Jan Engelhardt
- [PATCH 10/13] socket: use more appropriate types for mnl_socket_bind, Jan Engelhardt
- [PATCH 11/13] include: add cplusplus guards for extern, Jan Engelhardt
- [PATCH 13/13] attr: rename str_null from NULL away, Jan Engelhardt
- [PATCH 12/13] nlmsg: use bool return type for yes-no functions, Jan Engelhardt
- Re: libmnl: misc code updates, Pablo Neira Ayuso
- [rfc v2 00/10] ipvs network name space (netns) aware,
Simon Horman
- [rfc v2 02/10] ipvs network name space aware: app, Simon Horman
- [rfc v2 04/10] ipvs network name space aware: core, Simon Horman
- [rfc v2 08/10] ipvs network name space aware: ftp, Simon Horman
- [rfc v2 01/10] ipvs network name space aware: include files, Simon Horman
- [rfc v2 10/10] ipvs network name space aware: sync and xmit, Simon Horman
- [rfc v2 07/10] ipvs network name space aware: est, Simon Horman
- [rfc v2 09/10] ipvs network name space aware: proto, Simon Horman
- [rfc v2 05/10] ipvs: Add ipvs_skbnet, Simon Horman
- [rfc v2 06/10] ipvs network name space aware: ctl, Simon Horman
- [rfc v2 03/10] ipvs network name space aware: conn, Simon Horman
- Re: [rfc v2 00/10] ipvs network name space (netns) aware, Hans Schillstrom
- Re: [rfc v2 00/10] ipvs network name space (netns) aware, Julian Anastasov
- clone packet with new destination address,
Stephen Clark
- Misleading statement in netfilter-hacking-HOWTO, Jeff Haran
- [PATCH] iptables/extensions/libipt_icmp.c: Add numeric values to the output of iptables -p icmp -h, Regid Ichira
- net GIT state..., David Miller
- multi-icmp-type extension, similar to multiport,
Regid Ichira
- [PATCH 00/72] netfilter: netfilter update for 2.6.37,
kaber
- [PATCH 44/72] ipvs: optimize checksums for apps, kaber
- [PATCH 46/72] ipvs: do not schedule conns from real servers, kaber
- [PATCH 47/72] ipvs: stop ICMP from FORWARD to local, kaber
- [PATCH 70/72] netfilter: ebtables: replace EBT_ENTRY_ITERATE macro, kaber
- [PATCH 71/72] netfilter: ebtables: replace EBT_MATCH_ITERATE macro, kaber
- [PATCH 72/72] netfilter: ebtables: replace EBT_WATCHER_ITERATE macro, kaber
- [PATCH 68/72] netfilter: ebtables: remove unused definitions, kaber
- [PATCH 69/72] netfilter: xtables: add a missing pair of parentheses, kaber
- [PATCH 67/72] tproxy: use the interface primary IP address as a default value for --on-ip, kaber
- [PATCH 66/72] tproxy: added IPv6 support to the socket match, kaber
- [PATCH 43/72] ipvs: fix CHECKSUM_PARTIAL for TCP, UDP, kaber
- [PATCH 45/72] ipvs: switch to notrack mode, kaber
- [PATCH 65/72] tproxy: added IPv6 support to the TPROXY target, kaber
- [PATCH 63/72] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled, kaber
- [PATCH 62/72] tproxy: added tproxy sockopt interface in the IPV6 layer, kaber
- [PATCH 64/72] tproxy: added IPv6 socket lookup function to nf_tproxy_core, kaber
- [PATCH 61/72] tproxy: added udp6_lib_lookup function, kaber
- [PATCH 59/72] tproxy: split off ipv6 defragmentation to a separate module, kaber
- [PATCH 60/72] tproxy: added const specifiers to udp lookup functions, kaber
- [PATCH 57/72] tproxy: fix hash locking issue when using port redirection in __inet_inherit_port(), kaber
- [PATCH 58/72] nf_nat: restrict ICMP translation for embedded header, kaber
- [PATCH 55/72] tproxy: kick out TIME_WAIT sockets in case a new connection comes in with the same tuple, kaber
- [PATCH 56/72] tproxy: add lookup type checks for UDP in nf_tproxy_get_sock_v4(), kaber
- [PATCH 54/72] ipvs: provide address family for debugging, kaber
- [PATCH 51/72] ipvs: changes for local real server, kaber
- [PATCH 53/72] ipvs: inherit forwarding method in backup, kaber
- [PATCH 50/72] ipvs: move ip_route_me_harder for ICMP, kaber
- [PATCH 52/72] ipvs: changes for local client, kaber
- [PATCH 48/72] ipvs: fix CHECKSUM_PARTIAL for TUN method, kaber
- [PATCH 41/72] ipvs: IPv6 tunnel mode, kaber
- [PATCH 49/72] ipvs: create ip_vs_defrag_user, kaber
- [PATCH 42/72] Fixed race condition at ip_vs.ko module init., kaber
- [PATCH 39/72] netfilter: install missing ebtables headers for userspace, kaber
- [PATCH 40/72] netfilter: ctnetlink: add expectation deletion events, kaber
- [PATCH 38/72] netfilter: fix kconfig unmet dependency warning, kaber
- [PATCH 37/72] IPVS: ip_vs_dbg_callid() is only needed for debugging, kaber
- [PATCH 35/72] netfilter: xtables: unify {ip,ip6,arp}t_error_target, kaber
- [PATCH 36/72] netfilter: xtables: remove unused defines, kaber
- [PATCH 33/72] netfilter: xtables: resolve indirect macros 2/3, kaber
- [PATCH 34/72] netfilter: xtables: resolve indirect macros 3/3, kaber
- [PATCH 05/72] netfilter: nf_conntrack: fix the hash random initializing race, kaber
- [PATCH 06/72] ipvs: extend connection flags to 32 bits, kaber
- [PATCH 09/72] netfilter: save the hash of the tuple in the original direction for latter use, kaber
- [PATCH 32/72] netfilter: xtables: resolve indirect macros 1/3, kaber
- [PATCH 30/72] netfilter: unregister nf hooks, matches and targets in the reverse order, kaber
- [PATCH 31/72] netfilter: add missing xt_log.h file, kaber
- [PATCH 28/72] netfilter: ipt_LOG: add bufferisation to call printk() once, kaber
- [PATCH 27/72] netfilter: nf_nat: make find/put static, kaber
- [PATCH 29/72] netfilter: remove duplicated include, kaber
- [PATCH 25/72] IPVS: Fallback if persistence engine fails, kaber
- [PATCH 26/72] IPVS: sip persistence engine, kaber
- [PATCH 23/72] IPVS: management of persistence engine modules, kaber
- [PATCH 24/72] IPVS: Allow configuration of persistence engines, kaber
- [PATCH 21/72] IPVS: Add struct ip_vs_pe, kaber
- [PATCH 22/72] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, kaber
- [PATCH 20/72] IPVS: ip_vs_{un,}bind_scheduler NULL arguments, kaber
- [PATCH 18/72] IPVS: Add struct ip_vs_conn_param, kaber
- [PATCH 17/72] IPVS: compact ip_vs_sched_persist(), kaber
- [PATCH 19/72] IPVS: Allow null argument to ip_vs_scheduler_put(), kaber
- [PATCH 07/72] ipvs: netfilter connection tracking changes, kaber
- [PATCH 12/72] netfilter: ctnetlink: missing validation of CTA_EXPECT_ZONE attribute, kaber
- [PATCH 08/72] ipvs: make rerouting optional with snat_reroute, kaber
- [PATCH 15/72] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument, kaber
- [PATCH 14/72] netfilter: ctnetlink: add support for user-space expectation helpers, kaber
- [PATCH 16/72] netfilter: nf_conntrack_sip: Add callid parser, kaber
- [PATCH 11/72] netfilter: nf_nat: better error handling of nf_ct_expect_related() in helpers, kaber
- [PATCH 10/72] ipvs: changes related to service usecnt, kaber
- [PATCH 13/72] netfilter: ctnetlink: allow to specify the expectation flags, kaber
- [PATCH 04/72] netfilter: nf_nat: no IP_NAT_RANGE_MAP_IPS flags when alloc_null_binding(), kaber
- [PATCH 03/72] netfilter: nf_nat_core: don't check if the tuple is used if there is no other choice, kaber
- [PATCH 02/72] netfilter: use NFPROTO_IPV4 instead of AF_INET, kaber
- [PATCH 01/72] netfilter: nf_nat: add nf_nat_csum(), kaber
- Re: [PATCH 00/72] netfilter: netfilter update for 2.6.37, David Miller
- [PATCH 0/2] tproxy: add IPv6 support,
KOVACS Krisztian
- Ebtables cleanup patches,
Jan Engelhardt
- [GIT PULL nf-next-2.6] ipvs + nf_net,
Simon Horman
- [PATCH v2 0/9] tproxy: add IPv6 support,
KOVACS Krisztian
- [PATCH 0/9] tproxy: add IPv6 support,
KOVACS Krisztian
- [PATCH 0/3] tproxy fixes for current upstream code,
KOVACS Krisztian
- [ULOGD2] UNIXSOCK plugin (v5b),
Pierre Chifflier
- [PATCH] net: make ctl_path local and const, Changli Gao
- libnetfilter-queue and the Callback, Mistick Levi
- ipset-5 build patches,
Jan Engelhardt
- Re: [PATCH] Fixed race condition at ip_vs.ko module init.,
Simon Horman
- iptables: option precedence order change,
Jan Engelhardt
- [RFC 0/3] MPEG2/TS drop analyzer iptables match extension,
Jesper Dangaard Brouer
- libmnl build system patches,
Jan Engelhardt
- [PATCH 01/10] build: just use autoreconf, Jan Engelhardt
- [PATCH 03/10] build: automake options should be in AM_INIT_AUTOMAKE, Jan Engelhardt
- [PATCH 04/10] build: use subdir-objects and CC_C_O, Jan Engelhardt
- [PATCH 05/10] build: run autoupdate, Jan Engelhardt
- [PATCH 07/10] build: resolve compiler warnings, Jan Engelhardt
- [PATCH 06/10] build: rebuild .pc files when configure status changed, Jan Engelhardt
- [PATCH 09/10] build: default to not build static libraries, Jan Engelhardt
- [PATCH 08/10] build: remove unneeded -dynamic -ldl -nostartfiles flags, Jan Engelhardt
- [PATCH 10/10] Add .gitignore files, Jan Engelhardt
- [PATCH 02/10] build: do not abuse AM_INIT_AUTOMAKE for autoconf options, Jan Engelhardt
- Re: libmnl build system patches, Pablo Neira Ayuso
- Question about ebtables.,
Sumin Xia
[PATCH] xtables-addons: match packets based on status of grsecurity RBAC,
basile
[PATCH 12/12] ipvs: provide address family for debugging, Julian Anastasov
[PATCH 11/12] ipvs: inherit forwarding method in backup, Julian Anastasov
[PATCH 10/12] ipvs: changes for local client, Julian Anastasov
[PATCH 09/12] ipvs: changes for local real server, Julian Anastasov
[PATCH 08/12] ipvs: move ip_route_me_harder for ICMP, Julian Anastasov
[PATCH 07/12] ipvs: create ip_vs_defrag_user, Julian Anastasov
[PATCH 06/12] ipvs: fix CHECKSUM_PARTIAL for TUN method, Julian Anastasov
[PATCH 05/12] ipvs: stop ICMP from FORWARD to local, Julian Anastasov
[PATCH 04/12] ipvs: do not schedule conns from real servers, Julian Anastasov
[PATCH 03/12] ipvs: switch to notrack mode, Julian Anastasov
[PATCH 02/12] ipvs: optimize checksums for apps, Julian Anastasov
[PATCH 01/12] ipvs: fix CHECKSUM_PARTIAL for TCP, UDP, Julian Anastasov
[PATCH 00/12] ipvs: changes for local server and local client,
Julian Anastasov
[patch v4.1] ipvs: IPv6 tunnel mode,
Simon Horman
[PATCH resend] netfilter: fix kconfig unmet dependency warning,
Randy Dunlap
[PATCH] netfilter: Install missing ebtables headers for userspace.,
Nick Bowler
-j MARK in raw vs. mangle (was Re: xfrm by MARK: tcp problems when mark for in and out differ),
Gerd v. Egidy
[PATCH] netfilter: ctnetlink: add expectation deletion events,
Pablo Neira Ayuso
[PATCH 1/4] secmark: make secmark object handling generic,
Eric Paris
[PATCH] secmark: do not return early if there was no error,
Eric Paris
Quick intermediate cleanup,
Jan Engelhardt
event-driven connection tracking,
Mr Dash Four
[PATCH 1/5] secmark: do not return early if there was no error,
Eric Paris
[PATCH] nf_nat: restrict ICMP translation for embedded header,
Julian Anastasov
[PATCH] Tarpit target for the last stable (2.6.35.7): right version,
Nicola
[PATCH] Tarpit target for the last stable (2.6.35.7), Nicola Padovano
[RFC PATCH 6/9] ipvs network name space aware, Hans Schillstrom
[RFC PATCH 2/9] ipvs network name space aware,
Hans Schillstrom
[RFC PATCH 4/9] ipvs network name space aware,
Hans Schillstrom
[RFC PATCH 1/9] ipvs network name space aware,
Hans Schillstrom
[RFC PATCH 0/9] ipvs network name space (netns) aware,
Hans Schillstrom
[RFC PATCH 8/9] ipvs network name space aware, Hans Schillstrom
[RFC PATCH 7/9] ipvs network name space aware, Hans Schillstrom
[RFC PATCH 9/9] ipvs network name space aware, Hans Schillstrom
[RFC PATCH 5/9] ipvs network name space aware,
Hans Schillstrom
[RFC PATCH 3/9] ipvs network name space aware,
Hans Schillstrom
[patch] IPVS: ip_vs_dbg_callid() is only needed for debugging,
Simon Horman
Announcement: MAP66 extension for ip6tables,
Sven-Ola Tuecke
xt_hashlimit: restore per-rule effectiveness,
Jan Engelhardt
[PATCH] netfilter: remove duplicated include,
Nicolas Kaiser
[patch v5 00/12] IPVS: SIP Persistence Engine,
Simon Horman
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
