Linux TCP/IP Netfilter

• Thread Index

• Re: clarification on the use of --state parameter within conntrack command
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• RE: clarification on the use of --state parameter within conntrack command
  • From: Alexis Salinas <alexis.salinas@xxxxxxxxxxxxxxxxxxxxxx>
• Re: clarification on the use of --state parameter within conntrack command
  • From: Greg Folkert <greg@xxxxxxxxx>
• RE: clarification on the use of --state parameter within conntrack command
  • From: Alexis Salinas <alexis.salinas@xxxxxxxxxxxxxxxxxxxxxx>
• Re: clarification on the use of --state parameter within conntrack command
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• clarification on the use of --state parameter within conntrack command
  • From: Alexis Salinas <alexis.salinas@xxxxxxxxxxxxxxxxxxxxxx>
• Re: Wrong routing when combining ip rule with SNAT
  • From: Nikolaus Rath <Nikolaus@xxxxxxxx>
• Re: Wrong routing when combining ip rule with SNAT
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Wrong routing when combining ip rule with SNAT
  • From: Nikolaus Rath <Nikolaus@xxxxxxxx>
• Re: router and masquerade
  • From: budi wibowo <bwibowo@xxxxxxxxx>
• Re: router and masquerade
  • From: Tom van Leeuwen <tom.van.leeuwen@xxxxxxxxxxxxx>
• Re: router and masquerade
  • From: Tom van Leeuwen <tom.van.leeuwen@xxxxxxxxxxxxx>
• Re: router and masquerade
  • From: budi wibowo <bwibowo@xxxxxxxxx>
• Re: router and masquerade
  • From: Tom van Leeuwen <tom.van.leeuwen@xxxxxxxxxxxxx>
• Re: ipset causing a kernel crash
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• Re: ipset causing a kernel crash
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• PREROUTING to a non local subnet
  • From: Manu <traqueur@xxxxxxxxxxxxxxxx>
• Re: ipset causing a kernel crash
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• Re: ipset causing a kernel crash
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset causing a kernel crash
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• router and masquerade
  • From: budi wibowo <bwibowo@xxxxxxxxx>
• Re: ip6tables no target CT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ip6tables no target CT
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• Re: Limit rule for ICMP not working properly?
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: Limit rule for ICMP not working properly?
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• RE: Limit rule for ICMP not working properly?
  • From: "podo" <podo@xxxxxxx>
• Re: Ulogd not generating conf file
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Limit rule for ICMP not working properly?
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Ulogd not generating conf file
  • From: Austin Weidner <weidnera@xxxxxxxxx>
• RE: Limit rule for ICMP not working properly?
  • From: "podo" <podo@xxxxxxx>
• Re: automatic helper assignment is deprecated and it will be removed soon
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• DNAT / SNAT and two ISP Links
  • From: Jose Julian Buda <jbuda@xxxxxxxxxxxxxxxxxxxxxx>
• Re: automatic helper assignment is deprecated and it will be removed soon
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Classifying ingress traffic via cgroup filters
  • From: Justin Israel <justinisrael@xxxxxxxxx>
• Re: automatic helper assignment is deprecated and it will be removed soon
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• Re: automatic helper assignment is deprecated and it will be removed soon
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: DNAT on loopback
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• automatic helper assignment is deprecated and it will be removed soon
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• RE: libnfnetlink error: ./nfqnl_test usage ? FAILS ON 2.6.32-279.el6.i686
  • From: John Donnelly <john_donnelly@xxxxxxxxxxxxxxxxx>
• DNAT on loopback
  • From: Serge Kosyrev <skosyrev@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_defrag_ipv6.o included twice
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: a dos?
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Re: a dos?
  • From: Jon Lewis <jlewis@xxxxxxxxx>
• a dos?
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Re: only allow packets match interface ip
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Machine in the middle
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: avoid array overflow in nf_register_hook
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: avoid array overflow in nf_register_hook
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] netfilter: avoid array overflow in nf_register_hook
  • From: Dong Fang <yp.fangdong@xxxxxxxxx>
• [PATCH] netfilter: avoid array overflow in nf_register_hook
  • From: Dong Fang <yp.fangdong@xxxxxxxxx>
• [PATCH] netfilter: nf_defrag_ipv6.o included twice
  • From: Nathan Hintz <nlhintz@xxxxxxxxxxx>
• Re: ipvsadm: One-packet scheduling with UDP service is unstable
  • From: Drunkard Zhang <gongfan193@xxxxxxxxx>
• RE: libnfnetlink error: ./nfqnl_test usage ? FAILS ON 2.6.32-279.el6.i686
  • From: John Donnelly <john_donnelly@xxxxxxxxxxxxxxxxx>
• Re: ipvsadm: One-packet scheduling with UDP service is unstable
  • From: Julian Anastasov <ja@xxxxxx>
• Re: ipvsadm: One-packet scheduling with UDP service is unstable
  • From: Drunkard Zhang <gongfan193@xxxxxxxxx>
• only allow packets match interface ip
  • From: d tbsky <tbskyd@xxxxxxxxx>
• Re: ipvsadm: One-packet scheduling with UDP service is unstable
  • From: Julian Anastasov <ja@xxxxxx>
• Re: Machine in the middle
  • From: "Nestor A. Diaz" <nestor@xxxxxxxxxxxxxxx>
• Machine in the middle
  • From: "Nestor A. Diaz" <nestor@xxxxxxxxxxxxxxx>
• RE: libnetfilter_queue: ./nfqnl_test usage ? FAILS ON 2.6.32-279.el6.i686
  • From: John Donnelly <john_donnelly@xxxxxxxxxxxxxxxxx>
• ipvsadm: One-packet scheduling with UDP service is unstable
  • From: Drunkard Zhang <gongfan193@xxxxxxxxx>
• libnetfilter_queue: ./nfqnl_test usage ? no activity shown
  • From: John Donnelly <john_donnelly@xxxxxxxxxxxxxxxxx>
• RE: Minimal development platform for netfilter + libnetfilter_queue ?
  • From: John Donnelly <john_donnelly@xxxxxxxxxxxxxxxxx>
• Minimal development platform for netfilter + libnetfilter_queue ?
  • From: John Donnelly <john_donnelly@xxxxxxxxxxxxxxxxx>
• OpenSuse blocks outgoing connections to 3260 port. IPTABLES is not configured
  • From: Kevin Peterson <qh.resu01@xxxxxxxxx>
• Re: MASQUERADE/SNAT and multiple interfaces with the same IP
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: MASQUERADE/SNAT and multiple interfaces with the same IP
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: MASQUERADE/SNAT and multiple interfaces with the same IP
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: MASQUERADE/SNAT and multiple interfaces with the same IP
  • From: Florian Westphal <fw@xxxxxxxxx>
• MASQUERADE/SNAT and multiple interfaces with the same IP
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: Quick help with NOTRACK rule
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Quick help with NOTRACK rule
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Segment the conntrack table resources per chain?
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• RE: Help with stateless firewall
  • From: André Paulsberg <Andre.Paulsberg@xxxxxxxx>
• Re: Help with stateless firewall
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: Help with stateless firewall
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Help with stateless firewall
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: [PATCH 0/4] Generalize DEBUGP macros
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• iptables with limit and xt_recent modules, the efficiency of chains and some general questions
  • From: Chris <novashadow@xxxxxxxxxxxxxxxx>
• Re: PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch] netfilter: information leaks building packet message
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Limit based on req/sec and connections/sec plus accounting
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• [ANNOUNCE] conntrack-tools 1.4.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] iptables 1.4.20 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 1.0.4 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: fixed style errors in ip_vs_dh
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] ipvs: fixed spacing at for statements
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• how to set multiHOP gw rules for forward table?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: [RES] Re: net unreachable ipv6
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same
  • From: Henry Lee <henryronlee@xxxxxxxxx>
• [RES] Re: net unreachable ipv6
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• Re: PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: net unreachable ipv6
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• Re: net unreachable ipv6
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• question about DNAT/SNAT
  • From: Kevin Wilson <wkevils@xxxxxxxxx>
• net unreachable ipv6
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• Re: PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: Conntrackd and Stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [patch] netfilter: information leaks building packet message
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: Conntrackd and Stats
  • From: "Adam N." <adam.n@xxxxxxxxxx>
• Re: Conntrackd and Stats
  • From: Eric Leblond <eric@xxxxxxxxx>
• Conntrackd and Stats
  • From: "Adam N." <adam.n@xxxxxxxxxx>
• PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same
  • From: Henry Lee <henryronlee@xxxxxxxxx>
• Re: SNAT (again)
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• SNAT (again)
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Re: dropping UNTRACKED packets, breaks IPv6 - why?
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: dropping UNTRACKED packets, breaks IPv6 - why?
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• Re: dropping UNTRACKED packets, breaks IPv6 - why?
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: dropping UNTRACKED packets, breaks IPv6 - why?
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• Re: dropping UNTRACKED packets, breaks IPv6 - why?
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• dropping UNTRACKED packets, breaks IPv6 - why?
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 4/4] libiptc: Use DEBUGP macro from trace.h
  • From: Alexey Perevalov <a.perevalov@xxxxxxxxxxx>
• [PATCH 2/4] extensions: Use DEBUGP macro from trace.h
  • From: Alexey Perevalov <a.perevalov@xxxxxxxxxxx>
• [PATCH 3/4] iptables: Use DEBUGP macro from trace.h
  • From: Alexey Perevalov <a.perevalov@xxxxxxxxxxx>
• [PATCH 1/4] iptables: Introduce header for keeping debug and trace entities
  • From: Alexey Perevalov <a.perevalov@xxxxxxxxxxx>
• [PATCH 0/4] Generalize DEBUGP macros
  • From: Alexey Perevalov <a.perevalov@xxxxxxxxxxx>
• Re: Help with Load Balancing
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: How to use a random IP from a pool of static IPs for outgoing traffic
  • From: "Nestor A. Diaz" <nestor@xxxxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Re: How to use a random IP from a pool of static IPs for outgoing traffic
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: SNAT rule on LAN - unexpected result
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• SNAT rule on LAN - unexpected result
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Help to implement an firewall as a semi-transparent gateway
  • From: Hung NguyenTang <tanghungnguyen.itc@xxxxxxxxx>
• Re: Help with Load Balancing
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• How to use a random IP from a pool of static IPs for outgoing traffic
  • From: higkoohk <higkoohk@xxxxxxxxx>
• Limit rule for ICMP not working properly?
  • From: "podo" <podo@xxxxxxx>
• Captive portal on a bridged interface
  • From: Moritz Warning <moritzwarning@xxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Help with Load Balancing
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: Help with Load Balancing
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Help with Load Balancing
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Block traffic for specific http header and connection speed > 10 conn/sec
  • From: Edmond Cukalla <ecukalla@xxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Using netfilter in a multi-threaded program
  • From: Michael Kilian <michael.kilian@xxxxxxxxx>
• Re: Clarification on the use of the statistic module
  • From: "Nestor A. Diaz" <nestor@xxxxxxxxxxxxxxx>
• Re: iptables Qu: how to specify !dst:port
  • From: Die Optimisten <inform@xxxxxxxxxxxxxxxxxx>
• Re: Using netfilter in a multi-threaded program
  • From: Eric Leblond <eric@xxxxxxxxx>
• Using netfilter in a multi-threaded program
  • From: Michael Kilian <michael.kilian@xxxxxxxxx>
• Re: iptables Qu2: how to specify !dst:port
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: iptables Qu: how to specify !dst:port
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: iptables Qu: how to specify !dst:port
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: iptables Qu: how to specify !dst:port
  • From: Die Optimisten <inform@xxxxxxxxxxxxxxxxxx>
• Re: iptables Qu: how to specify !dst:port
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• iptables Qu2: how to specify !dst:port
  • From: Die Optimisten <inform@xxxxxxxxxxxxxxxxxx>
• iptables Qu: how to specify !dst:port
  • From: Die Optimisten <inform@xxxxxxxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Re: Clarification on the use of the statistic module
  • From: Emilio Lazo Zaia <emiliolazozaia@xxxxxxxxx>
• Re: Clarification on the use of the statistic module
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• About how to use RATEEST interval and ewmalog
  • From: Emilio Lazo Zaia <emiliolazozaia@xxxxxxxxx>
• [PATCH] ipvs: fixed style errors and warnings in ip_vs_conn
  • From: Dragos Foianu <dragos.foianu@xxxxxxxxx>
• [PATCH] ipvs: fixed style error in ip_vs_sched
  • From: Dragos Foianu <dragos.foianu@xxxxxxxxx>
• [PATCH] ipvs: fixed style errors in ip_vs_dh
  • From: Dragos Foianu <dragos.foianu@xxxxxxxxx>
• Re: Clarification on the use of the statistic module
  • From: "Nestor A. Diaz" <nestor@xxxxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Re: How to make conntrack to process all packets?
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Clarification on the use of the statistic module
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• [PATCH] ipvs: fixed spacing at for statements
  • From: Dragos Foianu <dragos.foianu@xxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Clarification on the use of the statistic module
  • From: "Nestor A. Diaz" <nestor@xxxxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• How to make conntrack to process all packets?
  • From: Petr Chmelar <chmelab@xxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Florian Westphal <fw@xxxxxxxxx>
• conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync
  • From: Bill Fink <billfink@xxxxxxxxxxxxxx>
• Re: Understanding --tcp-flags option
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: Understanding --tcp-flags option
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Understanding --tcp-flags option
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Build ipset for package (using DESTDIR)
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: iptables doesn't function properly with x32.
  • From: Kyle Sanderson <kyle.leet@xxxxxxxxx>
• iptables doesn't function properly with x32.
  • From: Kyle Sanderson <kyle.leet@xxxxxxxxx>
• ULOGD2 Help
  • From: Petr Chmelar <chmelab@xxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Nick Khamis <symack@xxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Nick Khamis <symack@xxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Nick Khamis <symack@xxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: 'Invalid packet' problem since upgrading
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: ftp tracking for outgoing connections
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Nick Khamis <symack@xxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Nick Khamis <symack@xxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• iptables-restore
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: Dabase BAcked IPTables
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Dabase BAcked IPTables
  • From: Nick Khamis <symack@xxxxxxxxx>
• Re: iptables 1.4.18 on linux 2.4
  • From: Horst Wente <horst.wente@xxxxxxx>
• Re: nf_nat_sip questions
  • From: Rodrigo Stuffs <rbs@xxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: "George Spelvin" <linux@xxxxxxxxxxx>
• http redirect with mirror port
  • From: 皮人杰 <pirenjie@xxxxxxxxx>
• RE: nf_nat_sip questions
  • From: Bob Reiber <bob@xxxxxxxx>
• nf_nat_sip questions
  • From: Rodrigo Stuffs <rbs@xxxxxxxxxxx>
• Re: ipset hash:ip,port not matching
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset hash:ip,port not matching
  • From: Michael Ludvig <mludvig@xxxxxxxxxxxx>
• Re: ipset hash:ip,port not matching
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset hash:ip,port not matching
  • From: Michael Ludvig <mludvig@xxxxxxxxxxxx>
• Re: ipset hash:ip,port not matching
  • From: Michael Ludvig <mludvig@xxxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: Borislav Petkov <bp@xxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: "George Spelvin" <linux@xxxxxxxxxxx>
• ebtables-2.0.10: 2 * bad if statements
  • From: David Binderman <dcb314@xxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: Borislav Petkov <bp@xxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: "George Spelvin" <linux@xxxxxxxxxxx>
• quetion about netfilter
  • From: hu-lei <hu-lei@xxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: "George Spelvin" <linux@xxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: "George Spelvin" <linux@xxxxxxxxxxx>
• Re: v3.10-rc7 oops soon after boot
  • From: Borislav Petkov <bp@xxxxxxxxx>
• Re: Routing Question
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Routing Question
  • From: "Bo Lynch" <blynch@xxxxxxxxxxxxxxxxx>
• Re: iptables 1.4.18 on linux 2.4
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• RE: 'Invalid packet' problem since upgrading
  • From: André Paulsberg <Andre.Paulsberg@xxxxxxxx>
• ftp tracking for outgoing connections
  • From: adam <adam_vs@xxxxx>
• Re: [patch] netfilter: prevent harmless integer overflow
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [patch] netfilter: prevent harmless integer overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [patch] netfilter: prevent harmless integer overflow
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• 'Invalid packet' problem since upgrading
  • From: Allen Seelye <alleninmt@xxxxxxxxx>
• RE: Quick help with stateless firewall
  • From: André Paulsberg <Andre.Paulsberg@xxxxxxxx>
• Re: Quick help with stateless firewall
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Quick help with stateless firewall
  • From: Bryan Harris <bryanlharris@xxxxxx>
• Quick help with stateless firewall
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Poll on netfilter_queue filedescriptor doesn't work.
  • From: LakshmiPathi Raju Poranki <raju.poranki@xxxxxxxxx>
• Re: xt_SECMARK: unable to map security context 'httpcontext (error)
  • From: Daniel Wagner <wagi@xxxxxxxxx>
• Re: Simple libipset program fails to link on Ubuntu 12.04 (precise)
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Simple libipset program fails to link on Ubuntu 12.04 (precise)
  • From: Dan Cook <dan.cook@xxxxxxxx>
• Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• error during nfq_bind_pf() for PF_INET6
  • From: LakshmiPathi Raju Poranki <raju.poranki@xxxxxxxxx>
• Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: Locally transmitted Multicast packets are being looped back, even if IP_MULTICAST_LOOP option is set to zero
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Locally transmitted Multicast packets are being looped back, even if IP_MULTICAST_LOOP option is set to zero
  • From: Vijay Tandeker <vijayt@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: Locally transmitted Multicast packets are being looped back, even if IP_MULTICAST_LOOP option is set to zero
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Locally transmitted Multicast packets are being looped back, even if IP_MULTICAST_LOOP option is set to zero
  • From: Vijay Tandeker <vijayt@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: Filtering Broadcasted UDP Packets on a Specific Bridged Interface
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries()
  • From: Julian Anastasov <ja@xxxxxx>
• xt_SECMARK: unable to map security context 'httpcontext (error)
  • From: Kevin Wilson <wkevils@xxxxxxxxx>
• [patch] ipvs: info leak in __ip_vs_get_dest_entries()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Filtering Broadcasted UDP Packets on a Specific Bridged Interface
  • From: Dan Osawa <dkosawa@xxxxxxxxx>
• [ANNOUNCE] iptables 1.4.19.1 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• netfilter routing/snat latency
  • From: François Legal <devel@xxxxxxxxxxxxxx>
• [ANNOUNCE] iptables 1.4.19 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Strange behavior with ipset not matching on public range
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Strange behavior with ipset not matching on public range
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: Strange behavior with ipset not matching on public range
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: Strange behavior with ipset not matching on public range
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Strange behavior with ipset not matching on public range
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: Strange behavior with ipset not matching on public range
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Strange behavior with ipset not matching on public range
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: [PATCH -resend 4/6] netfilter: Implement RFC 1123 for FTP conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ndpi-netfilter for filtering FTP
  • From: abdullah <aoner01@xxxxxxxxx>
• Re: IPTables - Going Stateless
  • From: Nick Khamis <symack@xxxxxxxxx>
• 2013 Workshop photos & videos
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: IPv6 connection tracking mDNS
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: IPTables - Going Stateless
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: It is correct to write: iptables -A INPUT -i ppp+,eth0+,tap+ . . .
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: about a LOG rule
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Fwd: Security in Virtual machine with DNAT
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• flushing secondary address deletes conntrack entries using primary IP
  • From: markdv <markdv77@xxxxxxxxx>
• Re: [PATCH v2] ipv4: netfilter: always let NUL terminated string ended by '\0'
  • From: Chen Gang <gang.chen@xxxxxxxxxxx>
• Re: ipset and hash:net,port,net set
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset and hash:net,port,net set
  • From: Wim Vandersmissen <Wim.Vandersmissen@xxxxxxxxxxx>
• Re: marking/mangling of local packets for altering routes?
  • From: Jeff Wiegley <jeffw@xxxxxxxx>
• Re: [PATCH v2] ipv4: netfilter: always let NUL terminated string ended by '\0'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0'
  • From: Chen Gang <gang.chen@xxxxxxxxxxx>
• [PATCH v2] ipv4: netfilter: always let NUL terminated string ended by '\0'
  • From: Chen Gang <gang.chen@xxxxxxxxxxx>
• Re: [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0'
  • From: Chen Gang <gang.chen@xxxxxxxxxxx>
• Re: [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• IPv6 connection tracking mDNS
  • From: Christian Hesse <list@xxxxxxxx>
• Re: [PATCH] bridge: netfilter: using strlcpy() instead of strncpy()
  • From: Chen Gang <gang.chen@xxxxxxxxxxx>
• Re: [PATCH] bridge: netfilter: using strlcpy() instead of strncpy()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: --arpop question
  • From: "Karolis B." <kbart.misc@xxxxxxxxx>
• Re: --arpop question
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• --arpop question
  • From: "Karolis B." <kbart.misc@xxxxxxxxx>
• Fwd: Security in Virtual machine with DNAT
  • From: Alberto <alberto@xxxxxxxxxxx>
• Re: marking/mangling of local packets for altering routes?
  • From: Bryan Harris <bryanlharris@xxxxxx>
• marking/mangling of local packets for altering routes?
  • From: Jeff Wiegley <jeffw@xxxxxxxx>
• Re: IPTables - Going Stateless
  • From: Nick Khamis <symack@xxxxxxxxx>
• Re: IPTables - Going Stateless
  • From: Nick Khamis <symack@xxxxxxxxx>
• RE: IPTables - Going Stateless
  • From: Paulsberg André <Andre.Paulsberg@xxxxxxxx>
• Re: IPTables - Going Stateless
  • From: Michal Kubeček <mkubecek@xxxxxxx>
• Re: IPTables - Going Stateless
  • From: Nick Khamis <symack@xxxxxxxxx>
• IPTables - Going Stateless
  • From: Nick Khamis <symack@xxxxxxxxx>
• performing some analysis over netfilter logs
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] bridge: netfilter: using strlcpy() instead of strncpy()
  • From: Chen Gang <gang.chen@xxxxxxxxxxx>
• Re: [PATCH] bridge: netfilter: using strlcpy() instead of strncpy()
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• It is correct to write: iptables -A INPUT -i ppp+,eth0+,tap+ . . .
  • From: julioarr@xxxxxxxxxxxx
• about a LOG rule
  • From: julioarr@xxxxxxxxxxxx
• syncookies uses only 1 core. how to maximize cpu usage?
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: loopback between tun and eth
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• using "recent" module to prevent port scanning
  • From: <konrad.vrba@xxxxxxxxx>
• [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0'
  • From: Chen Gang <gang.chen@xxxxxxxxxxx>
• [PATCH] bridge: netfilter: using strlcpy() instead of strncpy()
  • From: Chen Gang <gang.chen@xxxxxxxxxxx>
• To block multicast traffic to one of the two VLAN interfaces
  • From: arr <arunaa.n23@xxxxxxxxx>
• Re: LOG natted packet.
  • From: Federico Di Sante <federico.disante@xxxxxxx>
• Re: LOG natted packet.
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• LOG natted packet.
  • From: "federico.disante" <federico.disante@xxxxxxx>
• Re: OUTPUT: nat after filter (2nd nat). Please help :(
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: OUTPUT: nat after filter (2nd nat). Please help :(
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• OUTPUT: nat after filter (2nd nat). Please help :(
  • From: "krzf83@xxxxxxxxx " <krzf83@xxxxxxxxx>
• Re: syncookies load testing
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• syncookies load testing
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: synflood +syncookies + conntrack strange behaviour
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: synflood +syncookies + conntrack strange behaviour
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: synflood +syncookies + conntrack strange behaviour
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.19 released
  • From: Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.19 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: synflood +syncookies + conntrack strange behaviour
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: synflood +syncookies + conntrack strange behaviour
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.19 released
  • From: Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.19 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.19 released
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: loopback between tun and eth
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• synflood +syncookies + conntrack strange behaviour
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• RE: How to isolate wireless clients from each other
  • From: jack seth <bird_112@xxxxxxxxxxx>
• [ANNOUNCE] ipset 6.19 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Simulating router breaking idle TCP connections with IPTABLES
  • From: Bob Reiber <bob@xxxxxxxx>
• RE: [PATCH 07/21] netfilter: nf_nat: remove inline marking of EXPORT_SYMBOL functions
  • From: "David Laight" <David.Laight@xxxxxxxxxx>
• Re: ipset binding feature
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 07/21] netfilter: nf_nat: remove inline marking of EXPORT_SYMBOL functions
  • From: Denis Efremov <yefremov.denis@xxxxxxxxx>
• Re: Simulating router breaking idle TCP connections with IPTABLES
  • From: Timothy Arceri <t_arceri@xxxxxxxxxxxx>
• loopback between tun and eth
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Re: Changing the incoming interface of the packet using iptables MARK and ip route commands
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• ipset binding feature
  • From: xiuming zhu <xmzhu@xxxxxxxxxxxxx>
• Re: [PATCH 05/15] connection tracking helper for SLP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: How to isolate wireless clients from each other
  • From: jack seth <bird_112@xxxxxxxxxxx>
• RE: Fwd: ipset and counters
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• RE: Fwd: ipset and counters
  • From: "tian fang" <tianfang@xxxxxxxxx>
• Re: How to isolate wireless clients from each other
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• RE: Fwd: ipset and counters
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• RE: Fwd: ipset and counters
  • From: "tian fang" <tianfang@xxxxxxxxx>
• Fwd: conntrack full with TIME_WAIT on tcp passive close site
  • From: Vladimir Ondrus <vladimir.ondrus@xxxxxxxxx>
• Fwd: conntrack full with TIME_WAIT on tcp passive close site
  • From: Vladimir Ondrus <vladimir.ondrus@xxxxxxxxx>
• Classifying ingress traffic via cgroup filters
  • From: Pieter Ennes <pieter@xxxxxxxx>
• Re: conntrack full with TIME_WAIT on tcp passive close site
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• RE: Fwd: ipset and counters
  • From: hdemir@xxxxxxxxxxx
• How to isolate wireless clients from each other
  • From: jack seth <bird_112@xxxxxxxxxxx>
• RE: Fwd: ipset and counters
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• conntrack full with TIME_WAIT on tcp passive close site
  • From: Vladimir Ondrus <vladimir.ondrus@xxxxxxxxx>
• RE: Simulating router breaking idle TCP connections with IPTABLES
  • From: Bob Reiber <bob@xxxxxxxx>
• RE: Fwd: ipset and counters
  • From: "tian fang" <tianfang@xxxxxxxxx>
• RE: Fwd: ipset and counters
  • From: "tian fang" <tianfang@xxxxxxxxx>
• Re: Fwd: ipset and counters
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Fwd: ipset and counters
  • From: tian fang <tianfang@xxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Husnu Demir <hdemir@xxxxxxxxxxx>
• Re: Simulating router breaking idle TCP connections with IPTABLES
  • From: Timothy Arceri <t_arceri@xxxxxxxxxxxx>
• Re: syn flood load test
  • From: Vishesh kumar <linuxtovishesh@xxxxxxxxx>
• Re: Simulating router breaking idle TCP connections with IPTABLES
  • From: Timothy Arceri <t_arceri@xxxxxxxxxxxx>
• RE: Simulating router breaking idle TCP connections with IPTABLES
  • From: Bob Reiber <bob@xxxxxxxx>
• Re: Simulating router breaking idle TCP connections with IPTABLES
  • From: Timothy Arceri <t_arceri@xxxxxxxxxxxx>
• Simulating router breaking idle TCP connections with IPTABLES
  • From: Timothy Arceri <t_arceri@xxxxxxxxxxxx>
• syn flood load test
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Using IPTABLES to simulate router dropping TCP connection
  • From: Timothy Arceri <t_arceri@xxxxxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Steve Kann <stevek@xxxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Steve Kann <stevek@xxxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: hdemir@xxxxxxxxxxx
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: SynFloods and CPU usage with and without iptables. Confused!
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• SynFloods and CPU usage with and without iptables. Confused!
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• SynFloods and CPU usage with and without iptables. Confused!
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Re: How to use IPv6 SNPT?
  • From: Alex <world.peace.200887@xxxxxxxxx>
• Re: How to use IPv6 SNPT?
  • From: Alex <world.peace.200887@xxxxxxxxx>
• Changing the incoming interface of the packet using iptables MARK and ip route commands
  • From: Ravi Kanth Vanapalli <vvnrk.vanapalli@xxxxxxxxx>
• port forwarding to web server with different netmask than default netmask.
  • From: xavier droubay <xavier.droubay@xxxxxxxxx>
• Re: Increasing the number of ipsets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Increasing the number of ipsets
  • From: Rob Greenwood <bilco105@xxxxxxxxx>
• Re: [ANNOUNCE] Netfilter is participating in the Google Summer of Code 2013
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [ANNOUNCE] Netfilter is participating in the Google Summer of Code 2013
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch -next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [patch -next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: Remote IP in packet sent from WAN to LAN
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: nf-queue.c as an example of libnetfilter_queue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf-queue.c as an example of libnetfilter_queue
  • From: Flavio Poletti <polettix@xxxxxxxxx>
• ndpi-netfilter
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Multihoming: Changing out device of the packet using a hook
  • From: nakulgoud <nakulgoud@xxxxxxxxx>
• Re: Fwd: ipset and counters
  • From: hdemir@xxxxxxxxxxx
• Re: Fwd: ipset and counters
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Multihoming : Dynamically decide interface, for sending packet
  • From: Nikolai Lusan <nikolai@xxxxxxxxxxx>
• Re: Fwd: ipset and counters
  • From: Husnu Demir <hdemir@xxxxxxxxxxx>
• Re: Fwd: ipset and counters
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Fwd: ipset and counters
  • From: Husnu Demir <hdemir@xxxxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Moahn Reddy <mohanreddykv@xxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Moahn Reddy <mohanreddykv@xxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Multihoming : Dynamically decide interface, for sending packet
  • From: nakulgoud <nakulgoud@xxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Julian Anastasov <ja@xxxxxx>
• [patch] ipvs: off by one in set_sctp_state()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• iptables 1.4.18 on linux 2.4
  • From: Horst Wente <horst.wente@xxxxxxx>
• Re: Remote IP in packet sent from WAN to LAN
  • From: Ambroz Bizjak <ambrop7@xxxxxxxxx>
• RE: Remote IP in packet sent from WAN to LAN
  • From: Piotr Pawłowski <piotr.pawlowski@xxxxxxxxxxx>
• Re: Remote IP in packet sent from WAN to LAN
  • From: Ambroz Bizjak <ambrop7@xxxxxxxxx>
• Re: Remote IP in packet sent from WAN to LAN
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Remote IP in packet sent from WAN to LAN
  • From: Piotr Pawłowski <piotr.pawlowski@xxxxxxxxxxx>
• If the hooked SYN packets return with NS_STOLEN, TCP cannot successfully establish the connection
  • From: Lawrence Lee <lawrenceqli@xxxxxxxxx>
• Re: EPERM instead of ENETUNREACH for "to unreachable" route
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: cluster match and ipvsadm (not connection tracked)
  • From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
• EPERM instead of ENETUNREACH for "to unreachable" route
  • From: "markus lottmann" <LottvomSchlott@xxxxxx>
• cluster match and ipvsadm (not connection tracked)
  • From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• RE: [PATCH 3.8-stable] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Jonghwan Choi <jhbird.choi@xxxxxxxxxxx>
• [ANNOUNCE] ipset 6.18 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 3.8-stable] netfilter: nfnetlink_acct: return -EINVAL if object name is empty
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3.8-stable] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• CT target without options
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: DROPING ICMP and still getting kernel messages of icmp traffic?‏
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Question about behaviour of rule in a syn attack.
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• [PATCH 3.8-stable] netfilter: nfnetlink_acct: return -EINVAL if object name is empty
  • From: Jonghwan Choi <jhbird.choi@xxxxxxxxx>
• [PATCH 3.8-stable] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Jonghwan Choi <jhbird.choi@xxxxxxxxx>
• nf-queue.c as an example of libnetfilter_queue
  • From: Flavio Poletti <polettix@xxxxxxxxx>
• Re: ipset - understanding hash size and maxelem
  • From: Vladimir <ml@xxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: "Yoann JUET" <yoann.juet@xxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: "Yoann JUET" <yoann.juet@xxxxxxxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• [DNAT] applying a new rule for a connection marked as UNREPLIED
  • From: Jozef Balaz <jozef.balaz.237@xxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: "Yoann JUET" <yoann.juet@xxxxxxxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset] Match both on source AND destination
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• ipset - bitmap:ip,mac kernel crashes, errors
  • From: "Yoann JUET" <yoann.juet@xxxxxxxxxxxxxx>
• Re: ipset - understanding hash size and maxelem
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• ipset - understanding hash size and maxelem
  • From: Vladimir <ml@xxxxxxxx>
• Re: Zone based rules
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Zone based rules
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• DROPING ICMP and still getting kernel messages of icmp traffic?‏
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Some netfilter log messages are missing a log prefix
  • From: Yonatan Broza <yonatan.broza@xxxxxxxxx>
• Re: logging rsts
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: ipv6 rule icmp bug maybe
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• IPTables Time zone match to local time
  • From: Shanthosh Krishna Moorthy <shanthosh.rk@xxxxxxxxx>
• Re: netfilter ipset c library
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• netfilter ipset c library
  • From: Rod Salazar <rodrigos@xxxxxx>
• Re: ipv6 rule icmp bug maybe
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• Re: ipv6 rule icmp bug maybe
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• NFQUEUE after MASQUERADE: is it possible?
  • From: Paul Marks <pmarks@xxxxxxxxxx>
• Re: ipv6 rule icmp bug maybe
  • From: Michal Kubeček <mkubecek@xxxxxxx>
• ipv6 rule icmp bug maybe
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• session timers in iiptables-1.3.5-9.1.el5
  • From: Bob Reiber <bob@xxxxxxxx>
• Source process (PID) of a packet
  • From: Daniele Iamartino <danieleiamartino@xxxxxxxxx>
• How to directly deliver packets to the L4 layer in the NF_IP_PRE_ROUTING hook
  • From: Lawrence Lee <lawrenceqli@xxxxxxxxx>
• Re: [PATCH -next] netfilter: nf_conntrack_standalone: fix error return code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ip[6]tables: show --protocol instead of --proto in usage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• How to build an ebtables kernel module for MIPS64 Octeon processor
  • From: Ben Muj <beniaminmuj@xxxxxxxxx>
• logging rsts
  • From: Matt LaPlante <cybrmatt@xxxxxxxxx>
• Re: [PATCH] ip[6]tables: show --protocol instead of --proto in usage
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Laine Stump <laine@xxxxxxxxx>
• SNAT for routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Laine Stump <laine@xxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• [PATCH -next] netfilter: nf_conntrack_standalone: fix error return code
  • From: Wei Yongjun <weiyj.lk@xxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Dmitry Korzhevin <dmitry.korzhevin@xxxxxxxxxx>
• libnetfilter_queue not picking up any packets during recv step.
  • From: Rodrigo Salazar <rodrodsalazar@xxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Question about xt_ipp2p module
  • From: Dmitry Korzhevin <dmitry.korzhevin@xxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [no subject]
  • From: e639@xxxxxxx
• [no subject]
  • From: e639@xxxxxxx
• Re: [PATCH -next] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• port knocking using recent module
  • From: Konrad Vrba <konrad.vrba@xxxxxxxxx>
• Re: Need help with dialup connection (and syn packets)
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Need help with dialup connection (and syn packets)
  • From: John Lauro <johnalauro@xxxxxxxxx>
• Need help with dialup connection (and syn packets)
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Laine Stump <laine@xxxxxxxxx>
• [PATCH -next] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Wei Yongjun <weiyj.lk@xxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [announce] - Bash programmable completion for ip[6]tables
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Eric Blake <eblake@xxxxxxxxxx>
• Re: netfilter+libvirt=(smth got broken?)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• Re: conntrackd: fix IPv6 address pattern
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ip[6]tables: show --protocol instead of --proto in usage
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• Re: netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• Re: [PATCH] netfilter: remove unused "config IP_NF_QUEUE"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: remove unused "config IP_NF_QUEUE"
  • From: Paul Bolle <pebolle@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: Batch cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• conntrackd: fix IPv6 address pattern
  • From: Roman Hoog Antink <rha@xxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: Batch cleanup
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [Announce] ipset - programmable completion (bash)
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: AZ 9901 <az9901@xxxxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: AZ 9901 <az9901@xxxxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: AZ 9901 <az9901@xxxxxxxxx>
• Re: netfilter mailing list: rules
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• netfilter mailing list: rules
  • From: Konrad Vrba <konrad.vrba@xxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Jim Mellander <jmellander@xxxxxxx>
• Re: [PATCH] bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• need help with nfqueue and bridge
  • From: Stefan Sabolowitsch <Stefan.Sabolowitsch@xxxxxxxxxxxxxxxx>
• Re: need help with nfqueue and bridge
  • From: Stefan Sabolowitsch <Stefan.Sabolowitsch@xxxxxxxxxxxxxxxx>
• Re: need help with nfqueue and bridge
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• need help with nfqueue and bridge
  • From: Stefan Sabolowitsch <Stefan.Sabolowitsch@xxxxxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: Batch cleanup
  • From: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
• Options for a custom chain/target
  • From: Paul Chavent <paul.chavent@xxxxxxx>
• [PATCH] bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR
  • From: Silviu-Mihai Popescu <silviupopescu1990@xxxxxxxxx>
• iptables as a protocol demultiplexer
  • From: AZ 9901 <az9901@xxxxxxxxx>
• RE: Need a way to match vlan / pcp fields in 802.1Q header
  • From: <ggeorgiev@xxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• RE: Need a way to match vlan / pcp fields in 802.1Q header
  • From: <ggeorgiev@xxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Netfilter applied to specific interfaces only
  • From: Jim Mellander <jmellander@xxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: Xiong Wu <xiong.wu1981@xxxxxxxxx>
• Need a way to match vlan / pcp fields in 802.1Q header
  • From: <ggeorgiev@xxxxxxxxxxx>
• Re: question about port forwarding using dnat
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• question about port forwarding using dnat
  • From: Hamed Afshar <hamed_afshar@xxxxxxxxx>
• Re: conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• Re: SYN Cookies vs ip_conntrack in SYN Flood conditions
  • From: Marco Padovan <evcz@xxxxxxx>
• Re: brouting different VLANs
  • From: Dovydas Sankauskas <laisve@xxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.4.18 release
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Append rule to a NFQUEUE?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: brouting different VLANs
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 1.0.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: brouting different VLANs
  • From: Dovydas Sankauskas <laisve@xxxxxxxxx>
• [PATCH -v3 19/23] net/netfilter: rename random32() to prandom_u32()
  • From: Akinobu Mita <akinobu.mita@xxxxxxxxx>
• [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set
  • From: Paul Bolle <pebolle@xxxxxxxxxx>
• Re: brouting different VLANs
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: brouting different VLANs
  • From: Dovydas Sankauskas <laisve@xxxxxxxxx>
• [ANNOUNCE] ulogd 2.0.2 release
  • From: Eric Leblond <eric@xxxxxxxxx>
• [ANNOUNCE] iptables 1.4.18 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] conntrack-tools 1.4.1 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] nfacct 1.0.1 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter_acct 1.0.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: brouting different VLANs
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• brouting different VLANs
  • From: Dovydas Sankauskas <laisve@xxxxxxxxx>
• Re: how to discard a netfilter rule
  • From: Donghua Liu <liudonghua123@xxxxxxxxx>
• SYN Cookies vs ip_conntrack in SYN Flood conditions
  • From: Steve Kann <stevek@xxxxxxxxxx>
• Re: how to discard a netfilter rule
  • From: "Rob Sterenborg (lists)" <lists@xxxxxxxxxxxxxxx>
• Re: how to discard a netfilter rule
  • From: Donghua Liu <liudonghua123@xxxxxxxxx>
• Re: [MAINTENANCE] netfilter.org infrastructure updates
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: how to discard a netfilter rule
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• how to discard a netfilter rule
  • From: Donghua Liu <liudonghua123@xxxxxxxxx>
• Re: Block all input but two non-contiguous networks
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Block all input but two non-contiguous networks
  • From: jboyce@xxxxxxxxxxxxxxx
• Re: Using set mark to split traffic against 2 IF
  • From: Daniel huhardeaux <daniel.huhardeaux@xxxxxxxxxx>
• Re: Block all input but two non-contiguous networks
  • From: jboyce@xxxxxxxxxxxxxxx
• Re: Block all input but two non-contiguous networks
  • From: Jon Lewis <jlewis@xxxxxxxxx>
• Re: Block all input but two non-contiguous networks
  • From: jboyce@xxxxxxxxxxxxxxx
• Re: Block all input but two non-contiguous networks
  • From: Jon Lewis <jlewis@xxxxxxxxx>
• [MAINTENANCE] netfilter.org infrastructure updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Block all input but two non-contiguous networks
  • From: jboyce@xxxxxxxxxxxxxxx
• Re: conntrackd questions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Using set mark to split traffic against 2 IF
  • From: Daniel huhardeaux <daniel.huhardeaux@xxxxxxxxxx>
• Established Connections Timeout dropping to Unacknowledged Timeout
  • From: Sean <sean@xxxxxxxxxxxxxxx>
• Re: how to write rule specification according to port availablity
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: how to write rule specification according to port availablity
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• how to write rule specification according to port availablity
  • From: Donghua Liu <liudonghua123@xxxxxxxxx>
• Re: conntrackd questions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.17 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• Re: conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• Re: Bittorrent blocking
  • From: Michael Rash <mbr@xxxxxxxxxxxxxx>
• Re: ipset nomatch generating kernel error: "directory not empty"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Bittorrent blocking
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Bittorrent blocking
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Bittorrent blocking
  • From: Dmitry Korzhevin <dmitry.korzhevin@xxxxxxxxxx>
• Re: conntrackd questions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• ipset nomatch generating kernel error: "directory not empty"
  • From: John Brendler <brendlerjg@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Michael Ludvig <mludvig@xxxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: nf_nat_sip with CT target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf_nat_sip with CT target
  • From: Daniel Reurich <daniel@xxxxxxxxxxxxxxxx>
• Re: nf_nat_sip with CT target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [SOLVED] Re: Make packets go through when NFQUEUE app crashed
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: Make packets go through when NFQUEUE app crashed
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Make packets go through when NFQUEUE app crashed
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• nf_nat_sip with CT target
  • From: Daniel Reurich <daniel@xxxxxxxxxxxxxxxx>
• Re: Make packets go through when NFQUEUE app crashed
  • From: Eric Leblond <eric@xxxxxxxxx>
• Make packets go through when NFQUEUE app crashed
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: --and-mark while matching?
  • From: Ambroz Bizjak <ambrop7@xxxxxxxxx>
• [SOLVED] Re: LOG target with MARK?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Append rule to a NFQUEUE?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• --and-mark while matching?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: LOG target with MARK?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• [SOLVED] Re: Is it safe to use libnetfilter_queue in these cases?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• LOG target with MARK?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: connlimit reached - cannot open connections even after I close some
  • From: David Gubler <dg@xxxxxxxxxx>
• Re: Modifying data of a multiple packet connection with libnetfilter_queue
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Multithreading with libnetfilter_queue?
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Is it safe to use libnetfilter_queue in these cases?
  • From: Eric Leblond <eric@xxxxxxxxx>
• Multithreading with libnetfilter_queue?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Modifying data of a multiple packet connection with libnetfilter_queue
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Is it safe to use libnetfilter_queue in these cases?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: IPv6 routes too much
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: IPv6 routes too much
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• IPv6 routes too much
  • From: Prashant Batra <prashant0100@xxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• [Announce] ipset - programmable completion (bash)
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: How to use TPROXY with 2 lan interfaces and one wan
  • From: Francesco <francesco@xxxxxxx>
• Re: How to use TPROXY with 2 lan interfaces and one wan
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Lazuardi Nasution <mrxlazuardin@xxxxxxxxx>
• How to use TPROXY with 2 lan interfaces and one wan
  • From: Francesco <francesco@xxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: Ver 1.4.17 Error Appending Prerouting
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Ver 1.4.17 Error Appending Prerouting
  • From: Roman Gelfand <rgelfand2@xxxxxxxxx>
• Re: connlimit reached - cannot open connections even after I close some
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>