Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- [PATCH 01/28] netfilter: nf_conntrack_reasm: add fast path for in-order fragments, (continued)
- [PATCH 01/28] netfilter: nf_conntrack_reasm: add fast path for in-order fragments, kaber
- [PATCH 04/28] ipvs: Kconfig cleanup, kaber
- [PATCH 16/28] netfilter: arptables: use arp_hdr_len(), kaber
- [PATCH 17/28] netfilter: xt_quota: use per-rule spin lock, kaber
- [PATCH 18/28] xt_quota: report initial quota value instead of current value to userspace, kaber
- [PATCH 26/28] netfilter: nf_nat: make unique_tuple return void, kaber
- [PATCH 27/28] netfilter: nf_nat: don't check if the tuple is unique when there isn't any other choice, kaber
- [PATCH 24/28] ipvs: provide default ip_vs_conn_{in,out}_get_proto, kaber
- [PATCH 28/28] netfilter: nf_conntrack_acct: use skb->len for accounting, kaber
- [PATCH 23/28] ipvs: remove EXPERIMENTAL tag, kaber
- [PATCH 25/28] netfilter: nf_nat: use local variable hdrlen, kaber
- [PATCH 22/28] netfilter: nf_conntrack_extend: introduce __nf_ct_ext_exist(), kaber
- [PATCH 21/28] netfilter: {ip,ip6,arp}_tables: dont block bottom half more than necessary, kaber
- [PATCH 20/28] netfilter: iptables: use skb->len for accounting, kaber
- [PATCH 19/28] netfilter: ip6tables: use skb->len for accounting, kaber
- [PATCH 15/28] netfilter: nf_nat_core: merge the same lines, kaber
- [PATCH 14/28] netfilter: add xt_cpu match, kaber
- [PATCH 13/28] IPVS: make FTP work with full NAT support, kaber
- [PATCH 12/28] IPVS: make friends with nf_conntrack, kaber
- [PATCH 11/28] netfilter: xt_ipvs (netfilter matcher for IPVS), kaber
- [PATCH 03/28] netfilter: ipt_REJECT: avoid touching dst ref, kaber
- [PATCH 10/28] netfilter: correct CHECKSUM header and export it, kaber
- [PATCH 02/28] netfilter: ipt_REJECT: postpone the checksum calculation., kaber
- [PATCH 09/28] netfilter: add CHECKSUM target, kaber
- [PATCH 08/28] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled, kaber
- [PATCH 07/28] nfnetlink_log: do not expose NFULNL_COPY_DISABLED to user-space, kaber
- [PATCH 06/28] netfilter: xt_TPROXY: the length of lines should be within 80, kaber
- [PATCH 05/28] ipvs: lvs sctp protocol handler is incorrectly invoked ip_vs_app_pkt_out, kaber
- Re: [PATCH 00/28] netfilter: netfilter update, David Miller
- [PATCH] nf_nat_core: don't check if the tuple is used if there is no other choice, Changli Gao
- [PATCH v2] nf_nat: no IP_NAT_RANGE_MAP_IPS flags when alloc_null_binding(),
Changli Gao
- [PATCH] nf_nat: no IP_NAT_RANGE_MAP_IPS flags when alloc_null_binding(), Changli Gao
- [PATCH v2 2/2] nf_nat: don't check if the tuple is unique when there isn't any other choice,
Changli Gao
- [PATCH v2 1/2] nf_nat: make unique_tuple return void,
Changli Gao
- [PATCH] nf: make skb_make_writable() return bool,
Changli Gao
- [PATCH 2/2] nf_nat: don't check if the tuple is unique when there isn't any other choice,
Changli Gao
- [PATCH 1/2] nf_nat: make unique_tuple return void,
Changli Gao
- [PATCH] nf_nat: use local variable hdrlen,
Changli Gao
- strange IP rewrite of the libnetfilter_conntrack,
Pete Kay
- TCPMSS clamp-mss-to-pmtu breaks packets that have no MSS set (incl. solution),
Daniel Gibson
- Question about using "Expect" from Netfilter hook,
Jackson Alberto
- [PATCH] netfilter : fix typo in Kconfig,
Meik Piepmeyer
- question about libfilter_conntrack,
Pete Kay
- using libiptc to append iptables rule but no effect, Pete Kay
- Re: [PATCH 1/2] netfilter: xtables: inclusion of xt_SYSRQ,
Jan Engelhardt
- socket match - add wildcard option [4/4], Nepenthes Development Team
- socket match - add wildcard option [3/4], Nepenthes Development Team
- socket match - add wildcard option [2/4],
Nepenthes Development Team
- socket match - add wildcard option [1/4],
Nepenthes Development Team
- [PATCH] nf_conntrack_extend: introduce __nf_ct_ext_exist(),
Changli Gao
- socket match - add wildcard option [0/4], Nepenthes Development Team
- [RFC 0/4] nfnetlink_queue bypass queue to userspace X bytes of connection,
Karl Hiramoto
- [PATCH] netfilter: xtables: introduce xt_length revision 2,
Jan Engelhardt
- [PATCH iptables v2] libxt_length: update to revision 1, Changli Gao
- [PATCH iptables] libxt_quota: don't ignore the quota value on deletion,
Changli Gao
- [PATCH iptables] libxt_length: update to revision 1,
Changli Gao
- [PATCH] xt_length: support ipv6 jumbo frames, Changli Gao
- Misc consistency updates,
Jan Engelhardt
- [PATCH nf-next-2.6] netfilter: {ip,ip6,arp}_tables: dont block bottom half more than necessary,
Eric Dumazet
- [RFC v2 0/1] netfilter: xtables: xt_condition inclusion with namespace fix,
Luciano Coelho
- [PATCH v2] xt_helper: use ARRAY_SIZE(), Changli Gao
- [PATCH] xt_statistic: add the comment, Changli Gao
- [PATCH] xt_helper: use sizeof(),
Changli Gao
- [PATCH] xt_quota: don't copy quota back to userspace,
Changli Gao
- [PATCH] xt_quota: use per-rule spin lock,
Changli Gao
- [PATCH] nf_conntrack_acct: use skb->len for accounting,
Changli Gao
- [PATCH] iptables: use skb->len for accounting,
Changli Gao
- [PATCH] ip6tables: use skb->len for accounting,
Changli Gao
- [PATCH] arptables: use arp_hdr_len(),
Changli Gao
- How to filter connections using connmark with libnetfilter_conntrack, Tino Keitel
- [RFC 0/1] netfilter: xtables: xt_condition inclusion with namespace fix,
Luciano Coelho
- [PATCH nf-next-2.6] netfilter: add xt_cpu match,
Eric Dumazet
- re: netfilter: nfnetlink_log: send complete hardware header,
Dan Carpenter
- [PATCH] nf_nat_core: merge the same lines,
Changli Gao
- [patch v2.8 0/4] IPVS full NAT support + netfilter 'ipvs' match support,
Simon Horman
- Fwd: LVS on local node,
Franchoze Eric
- Regarding write send a packet to network that received in NF_IP_PRE_ROUTING, Padmalochan Moharana
- [RFC v2] netfilter: xt_condition: add condition target,
Luciano Coelho
- Are concurrent calls to tc action ipt safe?,
Gerd v. Egidy
- [RFC 0/2] netfilter: xtables: CONDITION target implementation,
Luciano Coelho
- [ANNOUNCE] ulogd 2.0.0beta4, Pablo Neira Ayuso
- [PATCH v2] ipt_REJECT: can't work with bridges,
Changli Gao
- Re: [PATCH] netfilter: xtables: inclusion of xt_condition,
Luciano Coelho
- [PATCH] ipt_REDIRECT: only change dest-ip if not local ip,
Bas van Sisseren
- [RFC] setting up throughput threshold indications to userspace,
Luciano Coelho
- [PATCH] ipt_REJECT: can't work with bridges,
Changli Gao
- [ANNOUNCE] conntrack-tools 0.9.15 released,
Pablo Neira Ayuso
- [ANNOUNCE] libnetfilter_conntrack 0.0.102 release, Pablo Neira Ayuso
- [PATCH iptables] extensions: libxt_rateest: fix bps options for iptables-save,
Luciano Coelho
- [PATCH iptables-next] extensions: libxt_IDLETIMER: use xtables_param_act when checking options,
Luciano Coelho
- [ANNOUNCE] libnetfilter_log 1.0.0 release,
Pablo Neira Ayuso
- [PATCHv4] extensions: libxt_CHECKSUM extension,
Michael S. Tsirkin
- [PATCHv4] netfilter: add CHECKSUM target,
Michael S. Tsirkin
- 'HELP ME PLEASE. libnetfilter_queue issue,
MAI JIN
- [rfc] netfilter: copy less data to the user,
Dan Carpenter
- [PATCH] nfnetlink_log: do not expose NFULNL_COPY_DISABLED to user-space,
Pablo Neira Ayuso
- [PATCH] netfilter: xtables: userspace notification target,
Samuel Ortiz
- [PATCH 0/2] A couple of netfilter fixes,
Pablo Neira Ayuso
- unable to find struct ip_nat_multi_range,
Pete Kay
- Re: netfilter hook/tuple question, Rusty Russell
- [ANNOUNCE] libnetfilter_queue 1.0.0 release, Pablo Neira Ayuso
- [PATCHv2] netfilter: add CHECKSUM target,
Michael S. Tsirkin
- [patch v2.6 0/4] IPVS full NAT support + netfilter 'ipvs' match support,
horms
- Problem with Too many levels of symbolic links,
Pete Kay
- [patch] netfilter: default to NF_DROP in sip_help_tcp(),
Simon Horman
- [patch v2.5 0/4] [patch v2.4 0/4] IPVS full NAT support + netfilter 'ipvs' match support,
Simon Horman
- [patch v2.4 0/4] IPVS full NAT support + netfilter 'ipvs' match support,
Simon Horman
- [PATCH] tproxy: the length of lines should be within 80,
Changli Gao
- [PATCH] netfilter: add CHECKSUM target,
Michael S. Tsirkin
- about conntrack for oracle tns,
Neco.F
- API...,
Mistick Levi
- [patch v2.3 0/4],
Simon Horman
- xtables addons; mktemp,
martinbarrowcliff
- [PATCH nf-next-2.6] netfilter: ipt_REJECT: avoid touching dst ref,
Eric Dumazet
- [PATCH] netfilter: ip6t_REJECT: fix a dst leak in ipv6 REJECT, kaber
- [PATCH 0/1] netfilter: netfilter fix,
kaber
- [PATCH] xt_quota: also document negation,
Jan Engelhardt
- [PATCH 0/9] netfilter: netfilter update,
kaber
- [PATCH 6/9] netfilter: complete the deprecation of CONFIG_NF_CT_ACCT, kaber
- [PATCH 5/9] netfilter: xt_connbytes: Force CT accounting to be enabled, kaber
- [PATCH 8/9] netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header, kaber
- [PATCH 7/9] netfilter: ipt_LOG/ip6t_LOG: remove comparison within loop, kaber
- [PATCH 9/9] bridge: add per bridge device controls for invoking iptables, kaber
- [PATCH 4/9] netfilter: fix simple typo in KConfig for netfiltert xt_TEE, kaber
- [PATCH 3/9] netfilter: xt_IDLETIMER needs kdev_t.h, kaber
- [PATCH 2/9] IPVS: one-packet scheduling, kaber
- [PATCH 1/9] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN, kaber
- Re: [PATCH 0/9] netfilter: netfilter update, David Miller
- [PATCH] netfilter: fix a dst leak in ipv6 REJECT,
Eric Dumazet
- [PATCH] netfilter: postpone the checksum calculation,
Changli Gao
- [PATCH v3] netfilter: xtables target SYNPROXY,
Changli Gao
- [PATCH] extensions: libxt_rateest: fix typo in the man page,
Luciano Coelho
- [PATCH] extensions: libxt_quota.c: Support option negation,
Samuel Ortiz
- Packet marked wrongly as INVALID?,
Marco Innocenti
- [PATCH] nf_conntrack_reasm: add fast path for in-order fragments,
Changli Gao
- [PATCH] netfilter: LED: fix man page fragment inclusion,
Sergei Zhirikov
- Re: [Bug 16317] New: oops in nf_nat_setup_info,
Patrick McHardy
- [ANNOUNCE] 7th Netfilter Workshop in Seville, Spain, Pablo Neira Ayuso
- xt2 table core,
Jan Engelhardt
- [PATCH 01/56] netfilter: ebtables: simplify a device in/out check, Jan Engelhardt
- [PATCH 02/56] netfilter: ebtables: change ebt_basic_match to xt convention, Jan Engelhardt
- [PATCH 03/56] netfilter: xtables: move functions around, Jan Engelhardt
- [PATCH 04/56] netfilter: xtables: convert basic nfproto match functions into xt matches, Jan Engelhardt
- [PATCH 05/56] netfilter: xtables2: initial table skeletal functions, Jan Engelhardt
- [PATCH 06/56] netfilter: xtables2: initial chain skeletal functions, Jan Engelhardt
- [PATCH 07/56] netfilter: xtables2: initial rule skeletal functions, Jan Engelhardt
- [PATCH 08/56] netfilter: xtables: alternate size checking in xt_check_match, Jan Engelhardt
- [PATCH 09/56] netfilter: xtables: alternate size checking in xt_check_target, Jan Engelhardt
- [PATCH 10/56] netfilter: xtables2: per-rule match skeletal functions, Jan Engelhardt
- [PATCH 11/56] netfilter: xtables2: per-rule target skeletal functions, Jan Engelhardt
- [PATCH 12/56] netfilter: xtables2: xt_check_target in combination with xt2 contexts, Jan Engelhardt
- [PATCH 14/56] netfilter: xtables2: table traversal, Jan Engelhardt
- [PATCH 13/56] netfilter: xtables2: jumpstack (de)allocation functions, Jan Engelhardt
- [PATCH 15/56] netfilter: xtables: add xt_quota revision 3, Jan Engelhardt
- [PATCH 16/56] netfilter: xtables2: make a copy of the ipv6_filter table, Jan Engelhardt
- [PATCH 18/56] netfilter: xtables2: xt2->xt1 translation - GET_INFO support, Jan Engelhardt
- [PATCH 17/56] netfilter: xtables2: initial xt1->xt2 translation for tables, Jan Engelhardt
- [PATCH 19/56] netfilter: xtables2: xt2->xt1 translation - GET_ENTRIES support, Jan Engelhardt
- [PATCH 20/56] netfilter: xtables2: xt1->xt2 translation - SET_REPLACE support, Jan Engelhardt
- [PATCH 21/56] netfilter: xtables2: return counters after SET_REPLACE, Jan Engelhardt
- [PATCH 23/56] netfilter: xtables2: xt2->xt1 translation - compat GET_INFO support, Jan Engelhardt
- [PATCH 25/56] netfilter: xtables2: xt2<->xt1 translation - compat GET_ENTRIES/SET_REPLACE support, Jan Engelhardt
- [PATCH 24/56] netfilter: ip6tables: move mark_chains to xt1_perproto.c, Jan Engelhardt
- [PATCH 22/56] netfilter: xtables2: xt1->xt2 translation - ADD_COUNTERS support, Jan Engelhardt
- [PATCH 26/56] netfilter: xtables2: compat->normal match data translation, Jan Engelhardt
- [PATCH 27/56] netfilter: xtables2: compat->normal target data translation, Jan Engelhardt
- [PATCH 28/56] netfilter: xtables2: outsource code into xts_match_to_xt1 function, Jan Engelhardt
- [PATCH 29/56] netfilter: xtables2: normal->compat match data translation, Jan Engelhardt
- [PATCH 31/56] netfilter: xtables2: packet tracing, Jan Engelhardt
- [PATCH 33/56] netfilter: xtables2: switch ip6's tables to the xt2 table format, Jan Engelhardt
- [PATCH 32/56] netfilter: xtables: turn procfs entries to walk xt2 table list, Jan Engelhardt
- [PATCH 30/56] netfilter: xtables2: normal->compat target data translation, Jan Engelhardt
- Re: xt2 table core [*/33, not */56], Jan Engelhardt
- Re: xt2 table core, Simon Lodal
- netns net_mutex deadlock in my path, Jan Engelhardt
- [PATCH v2] netfilter: xtables target SYNPROXY, Changli Gao
- iptlog: tracing iptables packet flow, Michael Stapelberg
- iptables: hashlimit & conntrack misc,
Jan Engelhardt
- nf-next-2.6 pull request, Complete deprecation of CONFIG_NF_CT_ACCT (V4),
Tim Gardner
- [PATCH 2/2] netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header, Patrick McHardy
- [PATCH 1/2] netfilter: ipt_LOG/ip6t_LOG: remove comparison within loop, Patrick McHardy
- [RESEND2] [PATCH] Fix a couple of problems with xt_SYSRQ, John Haxby
- [RESEND] [PATCH] Fix a couple of problems with xt_SYSRQ,
John Haxby
- Where to post patches to xtables-addons?,
John Haxby
- nf-next-2.6 pull request, Complete deprecation of CONFIG_NF_CT_ACCT (V3),
Tim Gardner
- iptables: headers, chain length,
Jan Engelhardt
- Fwd: API For Iptables, Mistick Levi
- need help with iptables and iptc, Pete Kay
- netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header,
Patrick McHardy
- [PATCH] netfilter: xtables target SYNPROXY, Changli Gao
- [PATCH 0/3] nf-next-2.6 pull request, Complete deprecation of CONFIG_NF_CT_ACCT (V2),
tim . gardner
- Utilization of Multi-core hardware by Netfilter,
Anand Raj Manickam
- Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS),
Simon Horman
- [patch nf-next-2.6] IPVS: one-packet scheduling,
Simon Horman
- multi-path route can't keep long time connections,
tingwei liu
- NF_Queue Copy made to userspace, Mistick Levi
- high latency with ipset-4.2 and 2.6.27.45 kernel.,
krunal patel
- Accessing packet marking functions,
Andrew Beverley
- [PATCH -next] netfilter: xt_IDLETIMER needs kdev_t.h,
Randy Dunlap
- [PATCH] net-next-2.6, Complete deprecation of CONFIG_NF_CT_ACCT,
Tim Gardner
- [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN,
Patrick McHardy
- 2.6.34 ALIGN patch, martinbarrowcliff
- [PATCH 00/17] netfilter: netfilter update,
kaber
- [PATCH 01/17] netfilter: br_netfilter: use skb_set_noref(), kaber
- [PATCH 15/17] netfilter: defrag: kill unused work parameter of frag_kfree_skb(), kaber
- [PATCH 14/17] netfilter: defrag: remove one redundant atomic ops, kaber
- [PATCH 17/17] netfilter: xtables: idletimer target implementation, kaber
- [PATCH 13/17] netfilter: kill redundant check code in which setting ip_summed value, kaber
- [PATCH 16/17] netfilter: CLUSTERIP: RCU conversion, kaber
- [PATCH 12/17] netfilter: nfnetlink_log: RCU conversion, part 2, kaber
- [PATCH 11/17] netfilter: nfnetlink_log: RCU conversion, kaber
- [PATCH 09/17] netfilter: ip6_queue: rwlock to spinlock conversion, kaber
- [PATCH 10/17] netfilter: nfnetlink_queue: some optimizations, kaber
- [PATCH 02/17] netfilter: xt_statistic: remove nth_lock spinlock, kaber
- [PATCH 07/17] netfilter: xt_sctp: use WORD_ROUND macro to calculate length of multiple of 4 bytes, kaber
- [PATCH 05/17] netfilter: nf_conntrack: IPS_UNTRACKED bit, kaber
- [PATCH 08/17] netfilter: ip_queue: rwlock to spinlock conversion, kaber
- [PATCH 06/17] netfilter: nf_conntrack: per_cpu untracking, kaber
- [PATCH 04/17] netfilter: xt_rateest: Better struct xt_rateest layout, kaber
- [PATCH 03/17] netfilter: vmalloc_node cleanup, kaber
- Re: [PATCH 00/17] netfilter: netfilter update, David Miller
- [PATCH 0/1] netfilter: netfilter fixes,
kaber
- [PATCH v6] netfilter: Xtables: idletimer target implementation,
Luciano Coelho
- [PATCH 0/2] net,man - IP_NODEFRAG option for IPv4 socket,
Jiri Olsa
- [PATCH v2] extensions: add idletimer xt target extension,
Luciano Coelho
- [PATCH v5] netfilter: Xtables: idletimer target implementation,
Luciano Coelho
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]