Linux TCP/IP Netfilter

• Thread Index

• Re: ebtables: ebtables-restore segfaults when 'among' list has many items
  • From: Stuart Shelton <srcshelton@xxxxxxxxx>
• ebtables: ebtables-restore segfaults when 'among' list has many items
  • From: Stuart Shelton <srcshelton@xxxxxxxxx>
• Is my connection timing out here?
  • From: jack seth <bird_112@xxxxxxxxxxx>
• Issue in conntrack udpate cmd for UDP -- "conntrack -U -p udp -t xx" updates only unreplied connections
  • From: Murugan Venugopal <muruga86@xxxxxxxxx>
• Issue with "conntrack -U -p tcp -t xx" cmd -- need to update TO for specific TCP state filter
  • From: Murugan Venugopal <muruga86@xxxxxxxxx>
• Statefull tcp failovers.
  • From: Mike Mestnik <cheako@xxxxxxxxxxxxxxx>
• Re: Forward all incoming connection to other address
  • From: prmarino1@xxxxxxxxx
• Forward all incoming connection to other address
  • From: "Nima Afshari" <nima.afshari.1389@xxxxxxxxx>
• Re: time module rules using localtime
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: time module rules using localtime
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: time module rules using localtime
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: [PMX:#] Re: time module rules using localtime
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: time module rules using localtime
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• time module rules using localtime
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: packet marking
  • From: Sebastian Pöhn <sebastian.poehn@xxxxxxxxx>
• Re: packet marking
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• packet marking
  • From: Bob Miller <bob@xxxxxxxxxxxxxxx>
• Re: bug in iptables-restore and "recent" module
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• NFLOG and Namespaces
  • From: nfnty <arch@xxxxxxxx>
• [RFC] nf_conntrack_dns: Workaround parallel DNS resolve
  • From: Sebastian Poehn <sebastian.poehn@xxxxxxxxx>
• Re: How are ct helper to be configured with NFT ?
  • From: Jason Sipula <alupis1@xxxxxxxxx>
• Re: How are ct helper to be configured with NFT ?
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: [PATCH v2] net: Remove state argument from skb_find_text()
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] net: Remove state argument from skb_find_text()
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: bug in iptables-restore and "recent" module
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: bug in iptables-restore and "recent" module
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: Trouble with full nf_conntrack table
  • From: Andy Hester <andy.hester@xxxxxxxxx>
• Mangle VLAN Priority Bit
  • From: Greg Procunier <greg.procunier@xxxxxxxxx>
• Re: [PATCH] net: Remove state argument from skb_find_text()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nft & notrack
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: bug in iptables-restore and "recent" module
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Re: bug in iptables-restore and "recent" module
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: bug in iptables-restore and "recent" module
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: bug in iptables-restore and "recent" module
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• bug in iptables-restore and "recent" module
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: how to bind NF_ARP family in netfilter queue
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: how to bind NF_ARP family in netfilter queue
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: how to bind NF_ARP family in netfilter queue
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• how to bind NF_ARP family in netfilter queue
  • From: Stéphane Charette <stephanecharette@xxxxxxxxx>
• Re: Trouble with full nf_conntrack table
  • From: Andy Hester <andy.hester@xxxxxxxxx>
• [ANNOUNCE] 11th Netfilter Workshop in Budapest, Hungary
  • From: Pablo Neira Ayuso <pneira@xxxxx>
• conntrack apparently losing connections in kernel 3.18
  • From: Tim Coote <tim@xxxxxxxxx>
• Re: Trouble with full nf_conntrack table
  • From: Andy Hester <andy.hester@xxxxxxxxx>
• Fwd: Implemeting Deficit Round Robin to schedule over Different virtual network interfaces
  • From: ronald pina <pinaronald@xxxxxxxxx>
• Re: Limit transfer speed rate by Iptables Rules
  • From: prmarino1@xxxxxxxxx
• Limit transfer speed rate by Iptables Rules
  • From: jack Linux <ilinuxer.85@xxxxxxxxx>
• MASQUERADE problems
  • From: Jan-Aage Frydenbø-Bruvoll <jan@xxxxxxxxxxxxxxxxxxxx>
• Re: iptables build error when using musl-libc and kernel 3.18.x targeting ARM
  • From: Jason Sipula <alupis1@xxxxxxxxx>
• Re: Trouble with full nf_conntrack table
  • From: Andy Hester <andy.hester@xxxxxxxxx>
• Re: Trouble with full nf_conntrack table
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Trouble with full nf_conntrack table
  • From: Andy Hester <andy.hester@xxxxxxxxx>
• NetDev 0.1 final schedule and new sponsor update
  • From: Richard Guy Briggs <rgb@xxxxxxxxxxxx>
• Limit transfer speed rate by Iptables Rules
  • From: jack Linux <ilinuxer.85@xxxxxxxxx>
• problems loading a module
  • From: Samir Sharma <s53554@xxxxxxxxxxxxxxxxxxx>
• Re: nft iptable-compat and TCPMSS target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• iptables build error when using musl-libc and kernel 3.18.x targeting ARM
  • From: Jason Sipula <alupis1@xxxxxxxxx>
• Strange / irritating behaviour with NAT using Mark-based-Routing
  • From: Martin <develop@xxxxxxxxxx>
• NetDev 0.1 Preliminary schedule posted
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• nft & notrack
  • From: Oleg <lego12239@xxxxxxxxx>
• NetDev 0.1 Schedule delay update
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: modules required for ftp helper
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• modules required for ftp helper
  • From: Jason Miller <jason@xxxxxxxx>
• NetDev 0.1 conference post-CFP deadline weekly update
  • From: Richard Guy Briggs <rgb@xxxxxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Jan Niggemann <jn@xxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Order of iptables vs. ip6tables chains
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: Order of iptables vs. ip6tables chains
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Order of iptables vs. ip6tables chains
  • From: Thomas Preissler <thomas@xxxxxxxxxxxxxxx>
• Re: Order of iptables vs. ip6tables chains
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: Order of iptables vs. ip6tables chains
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Order of iptables vs. ip6tables chains
  • From: Thomas Preissler <thomas@xxxxxxxxxxxxxxx>
• Sad news - our Netfilter collegue Holger Eitzenberger passed away
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Jan Niggemann <jn@xxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Jan Niggemann <jn@xxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Jan Niggemann <jn@xxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Jan Niggemann <jn@xxxxxx>
• Re: conntrack GRE behaves differently in 3.17 / 3.18
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: installing error
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• NetDev 0.1 conference new proposals accepted + misc updates
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• conntrack GRE behaves differently in 3.17 / 3.18
  • From: Jan Niggemann <jn@xxxxxx>
• installing error
  • From: Samir <lucknow@xxxxxx>
• Re: netfilter queues only seeing IPv4/TCP traffic
  • From: Stéphane Charette <stephanecharette@xxxxxxxxx>
• Re: netfilter queues only seeing IPv4/TCP traffic
  • From: Stéphane Charette <stephanecharette@xxxxxxxxx>
• netfilter queues only seeing IPv4/TCP traffic
  • From: Stéphane Charette <stephanecharette@xxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: P-o Lévesque <olygraph.po@xxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• ulogd unexpected character problem
  • From: Umut Yerci <umutyerci@xxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• What is the format of the header read from netfilter queues?
  • From: Stéphane Charette <stephanecharette@xxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• RE: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• RE: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: P-o Lévesque <olygraph.po@xxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• netfilter@xxxxxxxxxxxxxxx
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• Re: Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• Re: IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• IPTABLES + PREROUTING + --set-mark + Ubuntu
  • From: The Media Server <info@xxxxxxxxxxxxxxxxxx>
• Re: TAP interface and iptables forwarding/nat/masquerading
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Iptables and ipsec racoon
  • From: Alexandre Chaves <achaves@xxxxxxxxxxxxxx>
• Re: TAP interface and iptables forwarding/nat/masquerading
  • From: Stéphane Charette <stephanecharette@xxxxxxxxx>
• Re: TAP interface and iptables forwarding/nat/masquerading
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• TAP interface and iptables forwarding/nat/masquerading
  • From: Stéphane Charette <stephanecharette@xxxxxxxxx>
• Fastest / most reliable way of matching conntrack log entries to PID
  • From: "Hassan Sultan" <hsultan@xxxxxxxxxxxx>
• NetDev 0.1 new proposals accepted update
  • From: Richard Guy Briggs <rgb@xxxxxxxxxxxx>
• Re: Stateless NAT with iptables
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• RE: Stateless NAT with iptables
  • From: Glen Miner <shaggie76@xxxxxxxxxxx>
• RE: Stateless NAT with iptables
  • From: Glen Miner <shaggie76@xxxxxxxxxxx>
• nftables: variable network ranges in named maps
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• Re: tproxy with nftables
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• Re: Usefulness of xt_recent's "last seen" and "oldest_pkt" on a tickless system
  • From: David Hagood <david.hagood@xxxxxxxxx>
• Re: Usefulness of xt_recent's "last seen" and "oldest_pkt" on a tickless system
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Usefulness of xt_recent's "last seen" and "oldest_pkt" on a tickless system
  • From: David Hagood <david.hagood@xxxxxxxxx>
• Re: Usefulness of xt_recent's "last seen" and "oldest_pkt" on a tickless system
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Usefulness of xt_recent's "last seen" and "oldest_pkt" on a tickless system
  • From: David Hagood <david.hagood@xxxxxxxxx>
• Re: Transparent proxy requirement
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: Stateless NAT with iptables
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• RE: Stateless NAT with iptables
  • From: Glen Miner <shaggie76@xxxxxxxxxxx>
• Re: Stateless NAT with iptables
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• RE: Stateless NAT with iptables
  • From: Glen Miner <shaggie76@xxxxxxxxxxx>
• Re: Stateless NAT with iptables
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Stateless NAT with iptables
  • From: Glen Miner <shaggie76@xxxxxxxxxxx>
• Re: NFQUEUE and TCP retransmission
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• nft iptable-compat and TCPMSS target
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• NFQUEUE and TCP retransmission
  • From: 邓尧 <torshie@xxxxxxxxx>
• BUG: using smp_processor_id() in preemptible [00000000] code: iptables-compat/498
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• Re: tproxy with nftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• DHCP broadcasts coming from a "mystery" interface
  • From: Mike <debian@xxxxxxxxxxxxxxxxxxxxx>
• Re: Transparent proxy requirement
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• NetDev 0.1 Hotel guaranteed rate expiry fast approaching
  • From: Richard Guy Briggs <rgb@xxxxxxxxxxxx>
• tproxy with nftables
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• Re: Transparent proxy requirement
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: traffic distribution not happening on 40G ethernet card.
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: Parsing conntrack entries
  • From: Hendrik Visage <hvjunk@xxxxxxxxx>
• IPset v6.24 - make modules fails
  • From: Neven Vrenko <neven.vrenko@xxxxxxxxx>
• Re: Parsing conntrack entries
  • From: Stig Thormodsrud <stig@xxxxxxxx>
• Re: Parsing conntrack entries
  • From: Karsten Hohmeier <karsten.hohmeier@xxxxxxxxxxxxx>
• Parsing conntrack entries
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Re: Logging for NAT information with ULOG/NFLOG/LOG
  • From: Hendrik Visage <hvjunk@xxxxxxxxx>
• Re: Logging for NAT information with ULOG/NFLOG/LOG
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Logging for NAT information with ULOG/NFLOG/LOG
  • From: Hendrik Visage <hvjunk@xxxxxxxxx>
• iptables: DNAT on virtual interfaces not working
  • From: "William T. Mann" <wtmann@xxxxxxxxxxxxxxxxx>
• Re: Trouble with ulog_test/fprobe-ulog
  • From: Orion Poplawski <orion@xxxxxxxxxxxxx>
• Trouble with ulog_test/fprobe-ulog
  • From: Orion Poplawski <orion@xxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• Transparent proxy requirement
  • From: "U.Mutlu" <for-gmane@xxxxxxxxxxx>
• Re: NAT and listen on random ports
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: NAT and listen on random ports
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• Re: NAT and listen on random ports
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• NAT and listen on random ports
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• netdev01 twitter feed, first proposal accepted
  • From: Richard Guy Briggs <rgb@xxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Jason Cooper <jason@xxxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Jason Cooper <jason@xxxxxxxxxxxxxx>
• Intercepting connection creation/close with libnetfilter_conntrack
  • From: "Hassan Sultan" <hsultan@xxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Jason Cooper <jason@xxxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• Re: Fwd: ipset 6.24 and iptables 1.4.14, errno 22 (EINVAL)
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: Fwd: ipset 6.24 and iptables 1.4.14, errno 22 (EINVAL)
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Fwd: ipset 6.24 and iptables 1.4.14, errno 22 (EINVAL)
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: Fwd: ipset 6.24 and iptables 1.4.14, errno 22 (EINVAL)
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Fwd: ipset 6.24 and iptables 1.4.14, errno 22 (EINVAL)
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• [ANNOUNCE] nftables 0.4 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.0.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Issue with specifying interface/NIC name with drop packets rule
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Issue with specifying interface/NIC name with drop packets rule
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• Re: iptables DNAT algorithm -- another way?
  • From: John Miller <johnmill@xxxxxxxxxxxx>
• Re: iptables DNAT algorithm -- another way?
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Issue with specifying interface/NIC name with drop packets rule
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: iptables DNAT algorithm -- another way?
  • From: John Miller <johnmill@xxxxxxxxxxxx>
• Re: iptables DNAT algorithm -- another way?
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: iptables DNAT algorithm -- another way?
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: iptables DNAT algorithm -- another way?
  • From: John Miller <johnmill@xxxxxxxxxxxx>
• Re: iptables DNAT algorithm -- another way?
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• iptables DNAT algorithm -- another way?
  • From: John Miller <johnmill@xxxxxxxxxxxx>
• Bridging / VLANs / ebtables
  • From: Tim Nelson <tnelson@xxxxxxxxxxxxx>
• bug : nft_redirect port byteorder issue
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: Problem setting up nftables dnat : dport set to 0 instead of requested value (22)
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: Problem setting up nftables dnat : dport set to 0 instead of requested value (22)
  • From: leroy christophe <christophe.leroy@xxxxxx>
• NetDev 0.1 Registration open
  • From: Richard Guy Briggs <rgb@xxxxxxxxxxxx>
• Re: Problem setting up nftables dnat : dport set to 0 instead of requested value (22)
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: Problem setting up nftables dnat : dport set to 0 instead of requested value (22)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Problem setting up nftables dnat : dport set to 0 instead of requested value (22)
  • From: leroy christophe <christophe.leroy@xxxxxx>
• iptables-restore vmalloc allocation failure
  • From: Dan Cook <dan.cook@xxxxxxxxxxx>
• Re: How are ct helper to be configured with NFT ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: How are ct helper to be configured with NFT ?
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: Reversed byte order issue with nft ?
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: Reversed byte order issue with nft ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Reversed byte order issue with nft ?
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Netdev 0.1 Call for Proposals
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables compatibility
  • From: Jean-Philippe Menil <jpmenil@xxxxxxxxx>
• Re: nftables compatibility
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables compatibility
  • From: Jean-Philippe Menil <jpmenil@xxxxxxxxx>
• Re: nftables compatibility
  • From: Eric Leblond <eric@xxxxxxxxx>
• nftables compatibility
  • From: Jean-Philippe Menil <jpmenil@xxxxxxxxx>
• Re: Can not see VM packets using Netfilter
  • From: Smart Weblications GmbH - Florian Wiessner <f.wiessner@xxxxxxxxxxxxxxxxxxxxx>
• Can not see VM packets using Netfilter
  • From: 王可 王 <klwangke@xxxxxxxxx>
• Re: nft icmpv6 mld-listener-query rule not honored?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft icmpv6 mld-listener-query rule not honored?
  • From: stoffl4ever <stoffl4ever@xxxxxxxxx>
• Re: nft icmpv6 mld-listener-query rule not honored?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: issue with nftable - goto : Operation not supported
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• hashlimit : limiting cases of 250pkts/sec. Does it hold now also?
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: issue with nftable - goto : Operation not supported
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: issue with nftable - goto : Operation not supported
  • From: stoffl4ever <stoffl4ever@xxxxxxxxx>
• Re: issue with nftable - goto : Operation not supported
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• How are ct helper to be configured with NFT ?
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: issue with nftable - goto : Operation not supported
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: issue with nftable - goto : Operation not supported
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: issue with nftable - goto : Operation not supported
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: issue with nftable - goto : Operation not supported
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Issue with specifying interface/NIC name with drop packets rule
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• issue with nftable - goto : Operation not supported
  • From: leroy christophe <christophe.leroy@xxxxxx>
• Re: Issue with specifying interface/NIC name with drop packets rule
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• nft icmpv6 mld-listener-query rule not honored?
  • From: stoffl4ever <stoffl4ever@xxxxxxxxx>
• [ANNOUNCE] ipset 6.24 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Issue with specifying interface/NIC name with drop packets rule
  • From: Vijay Kumar K <kvijay@xxxxxxxxx>
• Re: iptables logging using ulog : which can handle high traffic, writing in db or json or xml?
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• TPROXY and syn packets maybe a solution?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: iptables logging using ulog : which can handle high traffic, writing in db or json or xml?
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• RE: iptables logging using ulog : which can handle high traffic, writing in db or json or xml?
  • From: Joel Gerber <Joel.Gerber@xxxxxxxxxxxxxxxx>
• iptables logging using ulog : which can handle high traffic, writing in db or json or xml?
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: Redirected packets being dropped
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Redirected packets being dropped
  • From: <karl@xxxxxxxx>
• tc() not reporting burst values correctly
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Simple NFT example
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Burst not working correctly in hashlimit !!!
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Iptables limit match dropping packets
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: ipset 6.23 hangs on CentOS6 with hash:mac
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: Hardware benchmark list (was: Recommended hardware for iptables based firewall/router)
  • From: shawn wilson <ag4ve.us@xxxxxxxxx>
• Re: Hardware benchmark list (was: Recommended hardware for iptables based firewall/router)
  • From: Michael Schwartzkopff <ms@xxxxxxx>
• Hardware benchmark list (was: Recommended hardware for iptables based firewall/router)
  • From: shawn wilson <ag4ve.us@xxxxxxxxx>
• Re: Recommended hardware for iptables based firewall/router
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Re: Recommended hardware for iptables based firewall/router
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Re: Recommended hardware for iptables based firewall/router
  • From: Stig Thormodsrud <stig@xxxxxxxx>
• Re: Recommended hardware for iptables based firewall/router
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Re: Recommended hardware for iptables based firewall/router
  • From: Yucong Sun <sunyucong@xxxxxxxxx>
• Re: Recommended hardware for iptables based firewall/router
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Robert Sander <r.sander@xxxxxxxxxxxxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: System becomes unresponsive due to kernel oops (IP: dev_queue_xmit+0x256/0x3f4)
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: shawn wilson <ag4ve.us@xxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Michael Schwartzkopff <ms@xxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: Linux Firewall Active/Active
  • From: Michael Schwartzkopff <ms@xxxxxxx>
• Linux Firewall Active/Active
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: ipset 6.23 hangs on CentOS6 with hash:mac
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: System becomes unresponsive due to kernel oops (IP: dev_queue_xmit+0x256/0x3f4)
  • From: prasad zambare <prasadzambare@xxxxxxxxx>
• Re: ipset 6.23 hangs on CentOS6 with hash:mac
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: ipset 6.23 hangs on CentOS6 with hash:mac
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• conntrack + fragment retransmission: What are the basic assumptions?
  • From: Karsten Hohmeier <karsten.hohmeier@xxxxxxxxxxxxx>
• conntrack + fragmentation: What are the timeouts?
  • From: Karsten Hohmeier <karsten.hohmeier@xxxxxxxxxxxxx>
• Re: Static mapping of private subnet to different private subnet
  • From: Tannador <mail@xxxxxxxxxxxx>
• Re: ipset 6.23 hangs on CentOS6 with hash:mac
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: System becomes unresponsive due to kernel oops (IP: dev_queue_xmit+0x256/0x3f4)
  • From: prasad zambare <prasadzambare@xxxxxxxxx>
• Re: Static mapping of private subnet to different private subnet
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: System becomes unresponsive due to kernel oops (IP: dev_queue_xmit+0x256/0x3f4)
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Static mapping of private subnet to different private subnet
  • From: Tannador <mail@xxxxxxxxxxxx>
• Re: ipset 6.23 hangs on CentOS6 with hash:mac
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: Recommended hardware for iptables based firewall/router
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Recommended hardware for iptables based firewall/router
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• System becomes unresponsive due to kernel oops (IP: dev_queue_xmit+0x256/0x3f4)
  • From: prasad zambare <prasadzambare@xxxxxxxxx>
• Re: recent module
  • From: Pietro Paolini <pulsarpietro@xxxxxxx>
• Re: ipset 6.23 hangs on CentOS6 with hash:mac
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Simple NFT example
  • From: Loganaden Velvindron <loganaden@xxxxxxxxx>
• ipset 6.23 hangs on CentOS6 with hash:mac
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• recent module
  • From: Pietro Paolini <pulsarpietro@xxxxxxx>
• Will ingress rate limiting using ifb works at 1gbps
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: only the first FORWARD rule is matching
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• only the first FORWARD rule is matching
  • From: "Ralf Schwarzmaier" <ralf@xxxxxxxxxxxxx>
• Re: please add a command to drop all nft tables
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• please add a command to drop all nft tables
  • From: 積丹尼 Dan Jacobson <jidanni@xxxxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: vDev <vijaypas@xxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: vDev <vijaypas@xxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: vDev <vijaypas@xxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: vDev <vijaypas@xxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: vDev <vijaypas@xxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: vDev <vijaypas@xxxxxxxxx>
• Re: TCP LAST ACK incorrectly treated as invalid
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• TCP LAST ACK incorrectly treated as invalid
  • From: vDev <vijaypas@xxxxxxxxx>
• Re: ulogd_inppkt_NFLOG.c:503 forcing unbind of existing log handler for protocol
  • From: Eric Leblond <eric@xxxxxxxxx>
• ulogd_inppkt_NFLOG.c:503 forcing unbind of existing log handler for protocol
  • From: E R <ears.box@xxxxxxxxx>
• installing netfilter
  • From: Pro Gupta <pchemistry.35@xxxxxxxxx>
• Re: conntrack-tools[]: can't get kernel conntrack table
  • From: Raphaël Berlamont <raphael.berlamont@xxxxxxxxxx>
• Re: conntrack-tools[]: can't get kernel conntrack table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• conntrack-tools[]: can't get kernel conntrack table
  • From: Raphaël Berlamont <raphael.berlamont@xxxxxxxxxx>
• Re: Help: Marking UDP packets in a bridge
  • From: Aravindhan Dhanasekaran <adhanas@xxxxxxxx>
• Re: Help: Marking UDP packets in a bridge
  • From: Anton Danilov <littlesmilingcloud@xxxxxxxxx>
• Re: Help: Marking UDP packets in a bridge
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Help: Marking UDP packets in a bridge
  • From: Aravindhan Dhanasekaran <adhanas@xxxxxxxx>
• Re: ban traffic per country
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Re: dyn. SNAT based on different source addresses?
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: dyn. SNAT based on different source addresses?
  • From: Meike Stone <meike.stone@xxxxxxxxxxxxxx>
• Re: dyn. SNAT based on different source addresses?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: dyn. SNAT based on different source addresses?
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: dyn. SNAT based on different source addresses?
  • From: Meike Stone <meike.stone@xxxxxxxxxxxxxx>
• Re: dyn. SNAT based on different source addresses?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• dyn. SNAT based on different source addresses?
  • From: Meike Stone <meike.stone@xxxxxxxxxxxxxx>
• RE: Basic routing
  • From: André Paulsberg <Andre.Paulsberg@xxxxxxxx>
• arptables question
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Re: Basic routing
  • From: John Lister <john.lister@xxxxxxxxxxxxx>
• Re: ban traffic per country
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: ban traffic per country
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Re: ban traffic per country
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Re: ban traffic per country
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Re: Basic routing
  • From: John Smithee <for-gmane@xxxxxxxxxxx>
• Re: Basic routing
  • From: John Smithee <for-gmane@xxxxxxxxxxx>
• Re: Basic routing
  • From: Thomas Bätzler <t.baetzler@xxxxxxxxxx>
• Re: Basic routing
  • From: John Smithee <for-gmane@xxxxxxxxxxx>
• Re: Basic routing
  • From: George Botye <gybotye@xxxxxxxxx>
• Re: Basic routing
  • From: John Lister <john.lister@xxxxxxxxxxxxx>
• Re: Basic routing
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Basic routing
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Re: Basic routing
  • From: John Smithee <for-gmane@xxxxxxxxxxx>
• Re: Basic routing
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Basic routing
  • From: John Smithee <for-gmane@xxxxxxxxxxx>
• Basic routing
  • From: John Smithee <for-gmane@xxxxxxxxxxx>
• Re: ban traffic per country
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Re: ban traffic per country
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Re: ban traffic per country
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: ban traffic per country
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: ban traffic per country
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• ban traffic per country
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• 64-bit kernel, 32-bit user space
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: advanced routing with NAT: returning UDP traffic
  • From: Maarten Vanraes <maarten@xxxxx>
• Re: advanced routing with NAT: returning UDP traffic
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Filtering inbound DNS traffic
  • From: "Bruce, Paul" <Paul.Bruce@xxxxxxxxxxxxxxxxxx>
• Re: Challenge: subnet wildcard or range
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Challenge: subnet wildcard or range
  • From: Craig <craigslistjobapp@xxxxxxxxx>
• Re: advanced routing with NAT: returning UDP traffic
  • From: Maarten Vanraes <maarten@xxxxx>
• Re: advanced routing with NAT: returning UDP traffic
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: advanced routing with NAT: returning UDP traffic
  • From: Maarten Vanraes <maarten@xxxxx>
• Re: advanced routing with NAT: returning UDP traffic
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: advanced routing with NAT: returning UDP traffic
  • From: Maarten Vanraes <maarten@xxxxx>
• Re: [Linux-kernel] [PATCH v2] net/netfilter/x_tables.c: use __seq_open_private()
  • From: Rob Jones <rob.jones@xxxxxxxxxxxxxxx>
• Re: [Linux-kernel] [PATCH v2] net/netfilter/x_tables.c: use __seq_open_private()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Error configuring NAT with nftables
  • From: Pavel Volkov <sailor@xxxxxxxxxxxxxxxxxx>
• Re: Error configuring NAT with nftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Linux-kernel] [PATCH v2] net/netfilter/x_tables.c: use __seq_open_private()
  • From: Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx>
• Re: advanced routing with NAT: returning UDP traffic
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Error configuring NAT with nftables
  • From: Pavel Volkov <sailor@xxxxxxxxxxxxxxxxxx>
• [PATCH v2] net/netfilter/x_tables.c: use __seq_open_private()
  • From: Rob Jones <rob.jones@xxxxxxxxxxxxxxx>
• advanced routing with NAT: returning UDP traffic
  • From: Maarten <maarten@xxxxx>
• [ANNOUNCE] ipset 6.23 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: typo on wiki
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• typo on wiki
  • From: John de la Garza <john@xxxxxxxxx>
• For NDPI fans (Deep Packet Inspection)
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: Iptables Unnown Error
  • From: Hossein Zabolzadeh <zabolzadeh@xxxxxxxxx>
• Re: Iptables Unnown Error
  • From: Hossein Zabolzadeh <zabolzadeh@xxxxxxxxx>
• Re: Iptables Unnown Error
  • From: Hossein Zabolzadeh <zabolzadeh@xxxxxxxxx>
• Iptables Unnown Error
  • From: Hossein Zabolzadeh <zabolzadeh@xxxxxxxxx>
• [HEADS UP] netfilter.org maintainance downtime
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH] net/netfilter/x_tables.c: use __seq_open_private()
  • From: Lars Dam <l.p.dam@xxxxxxxx>
• RE: FW: Can IPTables check for a valid IP address
  • From: Lars Dam <l.p.dam@xxxxxxxx>
• [PATCH] net/netfilter/x_tables.c: use __seq_open_private()
  • From: Rob Jones <rob.jones@xxxxxxxxxxxxxxx>
• Re: FW: Can IPTables check for a valid IP address
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• FW: Can IPTables check for a valid IP address
  • From: Lars Dam <l.p.dam@xxxxxxxx>
• Re: Can IPTables check for a valid IP address
  • From: Michael Schwartzkopff <ms@xxxxxxx>
• RE: Can IPTables check for a valid IP address
  • From: Lars Dam <l.p.dam@xxxxxxxx>
• Re: Can IPTables check for a valid IP address
  • From: "R. Sterenborg (lists)" <lists@xxxxxxxxxxxxxx>
• Can IPTables check for a valid IP address
  • From: Lars Dam <l.p.dam@xxxxxxxx>
• Re: Minor language issues in documentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Minor language issues in documentation
  • From: Ben Gamari <ben@xxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.22 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Established UDP connection seems to have the wrong timeout.
  • From: Younes Manton <younes.m@xxxxxxxxx>
• Re: How to stop kernel TCP responses on a port
  • From: Dale Mellor <dale@xxxxxxxx>
• Re: How to stop kernel TCP responses on a port
  • From: Brad Campbell <lists2009@xxxxxxxxxxxxxxx>
• Re: How to stop kernel TCP responses on a port
  • From: Dale Mellor <dale@xxxxxxxx>
• Re: How to stop kernel TCP responses on a port
  • From: Dale Mellor <dale@xxxxxxxx>
• Re: How to stop kernel TCP responses on a port
  • From: Leonardo Rodrigues <leolistas@xxxxxxxxxxxxxx>
• How to stop kernel TCP responses on a port
  • From: Dale Mellor <dale@xxxxxxxx>
• Reading packets larger than MTU size from netfilter queue
  • From: "Vitthaladevuni, Pavan Kumar" <pavanv@xxxxxxxxxxxxxxxx>
• Re: Problem using hashlimit for bandwidth limit
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: Source NAT in POSTROUTING chain for locally generated packets
  • From: Michael Schwartzkopff <ms@xxxxxxx>
• Re: Source NAT in POSTROUTING chain for locally generated packets
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Source NAT in POSTROUTING chain for locally generated packets
  • From: Michael Schwartzkopff <ms@xxxxxxx>
• Re: Source NAT in POSTROUTING chain for locally generated packets
  • From: Michael Schwartzkopff <ms@xxxxxxx>
• Re: Problem using hashlimit for bandwidth limit
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: unexpected behavior of ebtables' BROUTING target redirect
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Source NAT in POSTROUTING chain for locally generated packets
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• RE: nft json export interpretation
  • From: Alex Chapman <ajchapman88@xxxxxxxxxxxxx>
• unexpected behavior of ebtables' BROUTING target redirect
  • From: k-yo@xxxxxxxxxxx
• Problem using hashlimit for bandwidth limit
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: nft json export interpretation
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• nft json export interpretation
  • From: Alex Chapman <ajchapman88@xxxxxxxxxxxxx>
• Source NAT in POSTROUTING chain for locally generated packets
  • From: Michael Schwartzkopff <ms@xxxxxxx>
• where's my return traffic going?!?!
  • From: Leonardo Rodrigues <leolistas@xxxxxxxxxxxxxx>
• nfsynproxy usage
  • From: fi <florin-pgpool@xxxxxx>
• mangle table+tc command - real scenario
  • From: Mohsen Pahlevanzadeh <mohsen@xxxxxxxxxxxxxxxxx>
• Adding accounting object via libiptc
  • From: Sourabh Nanoti <sourabh.nanoti@xxxxxxxxx>
• Re: [Bulk] Re: a missing rule / incomplete routing
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: [Bulk] Re: a missing rule / incomplete routing
  • From: lejeczek <peljasz@xxxxxxxxxxx>
• Re: nftables and FTP connection tracking
  • From: tomekx1000 <tomekx1000@xxxxxxxx>
• Re: nftables and FTP connection tracking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables and FTP connection tracking
  • From: tomekx1000 <tomekx1000@xxxxxxxx>
• Re: tc filter connmark
  • From: George Amanakis <gamanakis@xxxxxxxxx>
• Post_Routing hook with encapsulated packets (forwarding scenario)
  • From: Hugo Alves <hugo.ma.alves@xxxxxxxxx>
• Re: tc filter connmark
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• tc filter connmark
  • From: George Amanakis <gamanakis@xxxxxxxxx>
• nftables and FTP connection tracking
  • From: Tomek L <tl-netfilter@xxxxxxxxx>
• Re: [Bulk] Re: a missing rule / incomplete routing
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• nftables and FTP connection tracking
  • From: Tomek L <tl-netfilter@xxxxxxxxx>
• Re: [Bulk] Re: a missing rule / incomplete routing
  • From: lejeczek <peljasz@xxxxxxxxxxx>
• Re: a missing rule / incomplete routing
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: nftables with Classify target
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• nftables with Classify target
  • From: Albert K <alberk@xxxxxxxxx>
• a missing rule / incomplete routing
  • From: lejeczek <peljasz@xxxxxxxxxxx>
• Re: Match EUI64 in IPv6 Address
  • From: Jean-Louis Dupond <jean-louis@xxxxxxxxx>
• RE: Match EUI64 in IPv6 Address
  • From: Jeff Haran <Jeff.Haran@xxxxxxxxxx>
• Match EUI64 in IPv6 Address
  • From: Jean-Louis Dupond <jean-louis@xxxxxxxxx>
• [PATCH] netfilter: xt_u32: Accept negative offset in AT operation
  • From: Takero Funaki <raphanus@xxxxxxxxx>
• state NEW logging
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• netfilter/iptables dependent on kernel version?
  • From: Chris Cross <xcross59@xxxxxxxxx>
• conntrack issue with SIP SDP
  • From: Cormac Long <cormac.long@xxxxxxxxxxxxxxxxxxxx>
• nftables dnat not working
  • From: Matteo Croce <technoboy85@xxxxxxxxx>
• FwGuardian 5.0
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: nftables NAT
  • From: Matteo Croce <technoboy85@xxxxxxxxx>
• Re: nftables NAT
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: nftables NAT
  • From: Matteo Croce <technoboy85@xxxxxxxxx>
• Re: SNAT problem with alias IP
  • From: Paolo Tezza <paolo.tezza@xxxxxxxxx>
• Re: nftables NAT
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• nftables: udp port matching on bridge
  • From: Michael Rigoni <michael.rigoni@xxxxxxxxx>
• nftables NAT
  • From: Matteo Croce <technoboy85@xxxxxxxxx>
• [announce] iptables-bash_completion 1.2
  • From: AllKind <AllKind@xxxxxxxxxx>
• Re: SNAT problem with alias IP
  • From: Anton Danilov <littlesmilingcloud@xxxxxxxxx>
• SNAT problem with alias IP
  • From: Paolo Tezza <paolo.tezza@xxxxxxxxx>
• Re: multicast traffic no longer working after reboot
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Re: firewalld and iptables
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• RE: firewalld and iptables
  • From: Paul Greenberg <paul@xxxxxxxxxxxxx>
• Re: firewalld and iptables
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• multicast traffic no longer working after reboot
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• firewalld and iptables
  • From: Paul Greenberg <paul@xxxxxxxxxxxxx>
• Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: nftables: no table for ipv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables: no table for ipv6
  • From: Thomas Witt <lists@xxxxxxxxx>
• Re: nftables: no table for ipv6
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• nftables: no table for ipv6
  • From: Thomas Witt <lists@xxxxxxxxx>
• Re: Disable port translation in SNAT
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: ulogd2, netfilter, and link-layer information
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Disable port translation in SNAT
  • From: James Lamanna <james@xxxxxxxxxxxx>
• Re: Disable port translation in SNAT
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• ulogd2, netfilter, and link-layer information
  • From: Laurent Parenteau <laurent.parenteau@xxxxxxxxx>
• Disable port translation in SNAT
  • From: James Lamanna <james@xxxxxxxxxxxx>
• Do we need these iptables patches for our project?
  • From: Казимир Малевич <nvinside@xxxxxxxxx>
• Fwd: Performance issue with iptables and nf-accounting
  • From: Sourabh Nanoti <sourabh.nanoti@xxxxxxxxx>
• Re: why scapy packet no effected by ip tables
  • From: Jeff White <jaw171@xxxxxxxx>
• Re: ipset and hash:net,iface type
  • From: Thomas Martin <tmartincpp@xxxxxxxxx>
• Re: why scapy packet no effected by ip tables
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Re: nftables, after adding a rule without any action, nft doesn't return correctly
  • From: Ryo Fujita <rfujita@xxxxxxxxxx>
• Re: why scapy packet no effected by ip tables
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: nftables, after adding a rule without any action, nft doesn't return correctly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: List of current sites
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• ipset and hash:net,iface type
  • From: Thomas Martin <tmartincpp@xxxxxxxxx>
• Re: nftables, after adding a rule without any action, nft doesn't return correctly
  • From: "Alex van den Bogaerdt" <alex@xxxxxxxxxxxxxxxxx>
• Re: nftables, after adding a rule without any action, nft doesn't return correctly
  • From: "Alex van den Bogaerdt" <alex@xxxxxxxxxxxxxxxxx>
• Re: nftables, after adding a rule without any action, nft doesn't return correctly
  • From: Ryo Fujita <rfujita@xxxxxxxxxx>
• Re: nftables, after adding a rule without any action, nft doesn't return correctly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables, after adding a rule without any action, nft doesn't return correctly
  • From: Ryo Fujita <rfujita@xxxxxxxxxx>
• why scapy packet no effected by ip tables
  • From: Abogholo A <abogholo@xxxxxxxxx>
• List of current sites
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• nftables & special case traffic
  • From: Fejes József <jozsef.fejes@xxxxxxxxx>
• Re: conntrackd: inject-add2: Invalid argument
  • From: Sascha Frey <sf@xxxxxxxxxxx>
• Searching NAT46 and NAT64 solution
  • From: Ruben Herold <ruben@xxxxxxxxxxx>
• Re: conntrackd, internal cache keeps filling up
  • From: Martin Kraus <lists_mk@xxxxxxxxxxx>
• IEEE 802.11 Proxy ARP using netfilter?
  • From: Kyeyoon Park <kyeyoonp@xxxxxxxxxxxxxxxx>
• conntrackd: inject-add2: Invalid argument
  • From: Sascha Frey <sf@xxxxxxxxxxx>
• Re: errors found in nftable docs on wiki
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: errors found in nftable docs on wiki
  • From: Jonathan Johnson <ecybernard@xxxxxxxxx>
• Re: errors found in nftable docs on wiki
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: errors found in nftable docs on wiki
  • From: Jonathan Johnson <ecybernard@xxxxxxxxx>
• Re: help needed preventing bruteforce behind a reverse proxy
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: help needed preventing bruteforce behind a reverse proxy
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Re: help needed preventing bruteforce behind a reverse proxy
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: help needed preventing bruteforce behind a reverse proxy
  • From: William Taylor <williamt@xxxxxxxxxxxxxx>
• help needed preventing bruteforce behind a reverse proxy
  • From: Francesco Morosinotto <francescomorosinotto@xxxxxxxxx>
• Re: errors found in nftable docs on wiki
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• MASQUERADE doesn't work unless bridge is in promiscuous mode
  • From: Patrick Hemmer <kernel@xxxxxxxxxxxxxxx>
• Re: errors found in nftable docs on wiki
  • From: Jonathan Johnson <ecybernard@xxxxxxxxx>
• Re: errors found in nftable docs on wiki
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• errors found in nftable docs on wiki
  • From: Jonathan Johnson <ecybernard@xxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• Re: eth - NAT - Bridge - veth
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: TFTP conntrack research.
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Sub: NAT issue in netfilter
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• TFTP conntrack research.
  • From: "megacrabogoahell ." <megakrabo@xxxxxxxxx>
• eth - NAT - Bridge - veth
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• Re: Sub: NAT issue in netfilter
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Sub: NAT issue in netfilter
  • From: Kamal Kumar <malkarikamalkumar@xxxxxxxxx>
• RE: Iptables: Matching packets leaving a bridged interface
  • From: Jamie Cockburn <jcockburn@xxxxxxxxx>
• [ANNOUNCE] libnftnl 1.0.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] nftables 0.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Sub: nat issue in netfilter
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• RE: Default netfilter kernel buffer size?
  • From: "Cade Robinson" <cade.robinson@xxxxxxxxx>
• Sub: nat issue in netfilter
  • From: Kamal Kumar <malkarikamalkumar@xxxxxxxxx>
• Re: LKM with hook that catches iptables hits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Iptables: Matching packets leaving a bridged interface
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• RE: Iptables: Matching packets leaving a bridged interface
  • From: Jamie Cockburn <jcockburn@xxxxxxxxx>
• Re: Iptables: Matching packets leaving a bridged interface
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Iptables: Matching packets leaving a bridged interface
  • From: Jamie Cockburn <jcockburn@xxxxxxxxx>
• LKM with hook that catches iptables hits
  • From: Alexandru Gheorghe <alghe.global@xxxxxxxxx>
• Re: Default netfilter kernel buffer size?
  • From: SplitIce <mat999@xxxxxxxxx>
• Re: How to mark RTSP child connections with different value.
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• How to mark RTSP child connections with different value.
  • From: Thierry Du Tre <thierry.dutre.tch@xxxxxxxxx>
• Re: nftables&iptables coexistence
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• libiptc - 'string' match module - --hex-string
  • From: Sourabh Nanoti <snanoti@xxxxxxxxxxxxxxxxxxxx>
• [BUG] nf: xt_LED: led-always-blink invisible
  • From: Jiří Prchal <jiri.prchal@xxxxxxxxxxx>
• nftables&iptables coexistence
  • From: Fejes József <jozsef.fejes@xxxxxxxxx>
• Re: Aw: Re: Problems to get started with nftables
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Support for user namespaces for /proc/net/ip_tables_names
  • From: Alin Dobre <alin.dobre@xxxxxxxxxxxxxxxx>
• Aw: Re: Problems to get started with nftables
  • From: pistenflitzer@xxxxxxxxxxxxx
• RE: Default netfilter kernel buffer size?
  • From: "Cade Robinson" <cade.robinson@xxxxxxxxx>
• Re: conntrackd crash after few seconds
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Default netfilter kernel buffer size?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Configure NAT behaviors with iptables rules
  • From: HaTiM Chikhi <chikhi.hatim@xxxxxxxxx>
• Re: ipset patch for kernel 2.6.32
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset patch for kernel 2.6.32
  • From: vm@xxxxxx
• Re: Problems to get started with nftables
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: ebtables, MAC masquerading, and ARP and ND rewriting
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• Default netfilter kernel buffer size?
  • From: "Cade Robinson" <cade.robinson@xxxxxxxxx>
• Problems to get started with nftables
  • From: Michael <pistenflitzer@xxxxxxxxxxxxx>
• Re: ebtables, MAC masquerading, and ARP and ND rewriting
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Re: [RFC][PATCH] net: Allow xt_owner in any user namespace
  • From: Alin Dobre <alin.dobre@xxxxxxxxxxxxxxxx>
• Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
• How to make IPTables work with cgroup?
  • From: Vijay Viswanathan <vijay.vishy@xxxxxxxxx>
• Re: conntrackd crash after few seconds
  • From: Nicolas RENAULT <nicolas_renault@xxxxxxxx>
• Re: conntrackd crash after few seconds
  • From: Nicolas RENAULT <nicolas_renault@xxxxxxxx>
• Re: conntrackd crash after few seconds
  • From: Martin Kraus <martin.kraus@xxxxxxxxxxx>
• Re: conntrackd crash after few seconds
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: conntrackd crash after few seconds
  • From: Martin Kraus <lists_mk@xxxxxxxxxxx>
• conntrackd crash after few seconds
  • From: Nicolas RENAULT <nicolas_renault@xxxxxxxx>
• ebtables, MAC masquerading, and ARP and ND rewriting
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: fix checkpatch errors
  • From: Luca Ellero <luca.ellero@xxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: fix checkpatch errors
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: fix checkpatch errors
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: fix checkpatch errors
  • From: Luca Ellero <luca.ellero@xxxxxxxxxxxxxxxx>
• Adding an MPLS label in netfilter_queue
  • From: Robert Soule <souler@xxxxxx>
• addrtype match of multiple address types inconsistent between IPv4 and IPv6?
  • From: Quentin Armitage <quentin@xxxxxxxxxxxxxxx>
• sampling conntrack account data
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: ebtables not blocking arp (or anything). I am using knoppix
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: ebtables not blocking arp (or anything). I am using knoppix
  • From: dapiot holmp <dapiotholmp@xxxxxxxxx>
• Re: ebtables not blocking arp (or anything). I am using knoppix
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• ebtables not blocking arp (or anything). I am using knoppix
  • From: dapiot holmp <dapiotholmp@xxxxxxxxx>
• Re: [PATCH] driver/netfilter/nfnetlink: removed unused variable
  • From: Richard Weinberger <richard.weinberger@xxxxxxxxx>
• [PATCH] driver/netfilter/nfnetlink: removed unused variable
  • From: Robin Schroer <sulamiification@xxxxxxxxx>
• Re: [RFC][PATCH] net: Allow xt_owner in any user namespace
  • From: Alin Dobre <alin.dobre@xxxxxxxxxxxxxxxx>
• Re: [HEADS UP] Migrating ebtables and arptables to netfilter.org
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [HEADS UP] Migrating ebtables and arptables to netfilter.org
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Netlink Events for iptables
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Netlink Events for iptables
  • From: "vivek.reddykadaru@xxxxxxxxxxxxx" <vivek.reddykadaru@xxxxxxxxxxxxx>
• [HEADS UP] Migrating ebtables and arptables to netfilter.org
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Error when adding iptables MARK rules from my C code using the iptc library
  • From: Ibrahim Sulaiman <isukity@xxxxxxxxx>
• Re: [RFC][PATCH] net: Allow xt_owner in any user namespace
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Error when adding iptables from my C code using the iptc library "Error commit: Invalid argument"
  • From: Ibrahim Sulaiman <isukity@xxxxxxxxx>
• Re: Netfilter owner matching inside user namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: Netfilter owner matching inside user namespace
  • From: Marian Marinov <mm@xxxxxx>
• traffic distribution not happening on centos 6.5.
  • From: Varun Sharma <vsdssd@xxxxxxxxx>
• Re: Netfilter owner matching inside user namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Netfilter owner matching inside user namespace
  • From: Alin Dobre <alin.dobre@xxxxxxxxxxxxxxxx>
• ebtables vlan and pppoe filtering
  • From: george Nopicture <mad-proffessor@xxxxxxxxxxx>
• [PATCH 6/13] [NETFILTER]: arp_tables: make return of 0 explicit
  • From: Julia Lawall <Julia.Lawall@xxxxxxx>
• [PATCH 0/13] make return of 0 explicit
  • From: Julia Lawall <Julia.Lawall@xxxxxxx>
• Re: randomly SNATed devices after reboot
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Re: randomly SNATed devices after reboot
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: randomly SNATed devices after reboot
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: randomly SNATed devices after reboot
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: randomly SNATed devices after reboot
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Use the src ip from the routing table for SNAT (not the first if IP)
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: randomly SNATed devices after reboot
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• randomly SNATed devices after reboot
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: conntrackd, internal cache keeps filling up
  • From: Martin Kraus <martin.kraus@xxxxxxxxxxx>
• Re: conntrackd, internal cache keeps filling up
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrackd, internal cache keeps filling up
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrackd, internal cache keeps filling up
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: conntrackd, internal cache keeps filling up
  • From: Martin Kraus <lists_mk@xxxxxxxxxxx>
• Re: [net] BUG: unable to handle kernel NULL pointer dereference at 000000000000022f
  • From: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
• Re: [net] BUG: unable to handle kernel NULL pointer dereference at 000000000000022f
  • From: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
• Re: [net] BUG: unable to handle kernel NULL pointer dereference at 000000000000022f
  • From: Oliver Hartkopp <socketcan@xxxxxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• [ANNOUNCE] nft-sync: nftables ruleset synchronization software
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrackd, internal cache keeps filling up
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Bruno de Paula Larini <bruno.larini@xxxxxxxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: conntrackd, internal cache keeps filling up
  • From: Martin Kraus <lists_mk@xxxxxxxxxxx>
• Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout
  • From: Hangbin Liu <liuhangbin@xxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Bruno de Paula Larini <bruno.larini@xxxxxxxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Bruno de Paula Larini <bruno.larini@xxxxxxxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Anton Danilov <littlesmilingcloud@xxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Bruno de Paula Larini <bruno.larini@xxxxxxxxxxxxxx>
• Re: Losing connection between nat and filter tables
  • From: Anton Danilov <littlesmilingcloud@xxxxxxxxx>
• Losing connection between nat and filter tables
  • From: Bruno de Paula Larini <bruno.larini@xxxxxxxxxxxxxx>
• Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout
  • From: Hangbin Liu <liuhangbin@xxxxxxxxx>
• Re: conntrackd, internal cache keeps filling up
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout
  • From: Hangbin Liu <liuhangbin@xxxxxxxxx>
• [PATCH] nfacct: remove unecessary end of line check
  • From: mathieu.poirier@xxxxxxxxxx
• Is DRR qdisc capable for bandwidth sharing between classes in a specific proportion?
  • From: gapsf@xxxxxxxxx
• Kernel Panic in nf_nat_cleanup_conntrack
  • From: Scott McWhirter <scottm@xxxxxxxxxxxxx>
• conntrackd, internal cache keeps filling up
  • From: Martin Kraus <lists_mk@xxxxxxxxxxx>
• traffic distribution not happening on 40G ethernet card.
  • From: Varun Sharma <vsdssd@xxxxxxxxx>
• Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• How to interpret time stamps in xt_recent?
  • From: David Hagood <david.hagood@xxxxxxxxx>
• Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• Re: proxy_arp [resolved]
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: proxy_arp [resolved]
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: proxy_arp
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>