Linux TCP/IP Netfilter

• Thread Index

• Kernel generated ICMP connection tracking and egress routing.
  • From: Michael Vallaly <netfilter@xxxxxxxxxxxxx>
• [ANNOUNCE]: Call for sponsors for the 8th netfilter developer workshop
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [MASQUERADE] Not changing to new source ip address when dynamically assigned in ppp link
  • From: Autocad Learner <learn.autocad@xxxxxxxxx>
• Re: Possible conntrack/kernel bug - not catching certain ICMP packets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [MASQUERADE] Not changing to new source ip address when dynamically assigned in ppp link
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [MASQUERADE] Not changing to new source ip address when dynamically assigned in ppp link
  • From: Autocad Learner <learn.autocad@xxxxxxxxx>
• Re: Possible conntrack/kernel bug - not catching certain ICMP packets
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• 2.6.36.2: Kernel oops when ipvs is used with ip_queue in x86_64
  • From: Kumar Swamy <kswamy@xxxxxxxxxxxxx>
• Re: [MASQUERADE] Not changing to new source ip address when dynamically assigned in ppp link
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [MASQUERADE] Not changing to new source ip address when dynamically assigned in ppp link
  • From: Autocad Learner <learn.autocad@xxxxxxxxx>
• Re: State Explanation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• State Explanation
  • From: netfilter@xxxxxxxxxxxxxx
• [PATCH][TRIVIAL] net, netfilter: Remove redundant goto in ebt_ulog_packet
  • From: Jesper Juhl <jj@xxxxxxxxxxxxx>
• [PATCH][RFC] netfilter: Fix small leak in ipq_build_packet_message()
  • From: Jesper Juhl <jj@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-6.8 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Possible conntrack/kernel bug - not catching certain ICMP packets
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: netflow
  • From: Peter Phaal <peter.phaal@xxxxxxxxx>
• Which one is better to use? "tcp_tw_recycle" or "tcp_max_tw_buckets"?
  • From: Jenny Lee <bodycare_5@xxxxxxxx>
• Re: netflow
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• netflow
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• OFF: Re: How to completely disable conntrack?
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: How to completely disable conntrack?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: How to completely disable conntrack?
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: How to completely disable conntrack?
  • From: nany <naveen.sadanand@xxxxxxxxx>
• Re: version iptables for ipt_netflow module
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: version iptables for ipt_netflow module
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Tracking packets generated from individual socket.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [ANNOUNCE] ipset-6.8 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• version iptables for ipt_netflow module
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: SYN, ACK, ACK PSH packets getting dropped (?)
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• RE: Bizarre NAT behavior
  • From: "Greg Scott" <GregScott@xxxxxxxxxxxxxxxx>
• SYN, ACK, ACK PSH packets getting dropped (?)
  • From: Sam Gandhi <samgandhi9@xxxxxxxxx>
• RE: Bizarre NAT behavior
  • From: "Greg Scott" <GregScott@xxxxxxxxxxxxxxxx>
• Re: Protocol wrong type for socket
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Protocol wrong type for socket
  • From: "Christian S. Perone" <christian.perone@xxxxxxxxx>
• Re: iptables in promiscuous mode
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: iptables in promiscuous mode
  • From: Emilio Lazo Zaia <emiliolazozaia@xxxxxxxxx>
• Re: Iptables State Table
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Iptables State Table
  • From: Jonathan Tripathy <jonnyt@xxxxxxxxxxx>
• Re: Iptables State Table
  • From: netfilter@xxxxxxxxxxxxxx
• Iptables State Table
  • From: netfilter@xxxxxxxxxxxxxx
• Re: iptables wildcard delete
  • From: "Nikolay S." <nowhere@xxxxxxxxxxxxxxxx>
• iptables wildcard delete
  • From: Jonathan Tripathy <jonnyt@xxxxxxxxxxx>
• Tracking packets generated from individual socket.
  • From: Borgert van der Kluit <borgertvanderkluit@xxxxxxxxx>
• iptables in promiscuous mode
  • From: Andrey <andrey@xxxxxxxxx>
• Re: [PATCH 00/12] net switch/case reformatting
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 02/12] decnet: Reduce switch/case indent
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH 05/12] netfilter: Reduce switch/case indent
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH 00/12] net switch/case reformatting
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Generating Ethernet Header in Prerouting?
  • From: Nader Al-Naji <nbal@xxxxxxxxxxxxx>
• Re: dropping packets of --ctstate INVALID stopped working with 2.6.39.1?
  • From: Sam Roberts <vieuxtech@xxxxxxxxx>
• Re: IPTABLES: How to NOT display MAC addr in log files
  • From: Eric Leblond <eric@xxxxxxxxx>
• IPTABLES: How to NOT display MAC addr in log files
  • From: John Brown <john.gmane@xxxxxxxxxxxxx>
• Re: iptables links
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Iptables NAT POOL
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Help on how to limit a NAT port forward to just a range of IP addresses
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• RE: Help on how to limit a NAT port forward to just a range of IP addresses
  • From: Mark Mitchell <mmitchell@xxxxxxxxxxxxxx>
• Re: Help on how to limit a NAT port forward to just a range of IP addresses
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: dropping packets of --ctstate INVALID stopped working with 2.6.39.1?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Help on how to limit a NAT port forward to just a range of IP addresses
  • From: Mark Mitchell <mmitchell@xxxxxxxxxxxxxx>
• Re: Conntracking on a multihomed server
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Conntracking on a multihomed server
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Conntracking on a multihomed server
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: iptables links
  • From: Jonathan Tripathy <jonnyt@xxxxxxxxxxx>
• Re: iptables links
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• dropping packets of --ctstate INVALID stopped working with 2.6.39.1?
  • From: Sam Roberts <vieuxtech@xxxxxxxxx>
• iptables links
  • From: Jonathan Tripathy <jonnyt@xxxxxxxxxxx>
• RE: Bizarre NAT behavior
  • From: Steven Kath <steven.kath@xxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: David Rientjes <rientjes@xxxxxxxxxx>
• Iptables NAT POOL
  • From: nima chavooshi <nima0102@xxxxxxxxx>
• RE: Bizarre NAT behavior
  • From: "Greg Scott" <GregScott@xxxxxxxxxxxxxxxx>
• Re: IPTables Filtering traffic before Natting HOW TO?
  • From: Auro Benas <ebay.omg@xxxxxxxxx>
• Re: Bizarre NAT behavior
  • From: Payam Chychi <pchychi@xxxxxxxxx>
• RE: Bizarre NAT behavior
  • From: "Greg Scott" <GregScott@xxxxxxxxxxxxxxxx>
• RE: Bizarre NAT behavior
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• RE: Bizarre NAT behavior
  • From: "Greg Scott" <GregScott@xxxxxxxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Christoph Lameter <cl@xxxxxxxxx>
• Re: IPTables Filtering traffic before Natting HOW TO?
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: IPTables Filtering traffic before Natting HOW TO?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: IPTables Filtering traffic before Natting HOW TO?
  • From: Auro Benas <ebay.omg@xxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: David Rientjes <rientjes@xxxxxxxxxx>
• Re: PCAP file to iptables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• PCAP file to iptables
  • From: andrey <andrey@xxxxxxxxx>
• Re: ip6tables HL bug ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: IPTables Filtering traffic before Natting HOW TO?
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: Using interface name as a command line option to create a iptables rule
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Using interface name as a command line option to create a iptables rule
  • From: Adishesh M <adisheshsm@xxxxxxxxx>
• Re: [PATCH] Remove redundant linux/version.h includes from net/
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: IPTables Filtering traffic before Natting HOW TO?
  • From: Auro Benas <ebay.omg@xxxxxxxxx>
• Re: IPTables Filtering traffic before Natting HOW TO?
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: [netfilter-core] [PATCH] Remove redundant linux/version.h includes from net/
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• IPTables Filtering traffic before Natting HOW TO?
  • From: Auro Benas <ebay.omg@xxxxxxxxx>
• [PATCH] Remove redundant linux/version.h includes from net/
  • From: Jesper Juhl <jj@xxxxxxxxxxxxx>
• ip6tables HL bug ?
  • From: "Christian S. Perone" <christian.perone@xxxxxxxxx>
• Re: Using interface name as a command line option to create a iptables rule
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Using interface name as a command line option to create a iptables rule
  • From: "icukeng@xxxxxxxxx" <icukeng@xxxxxxxxx>
• Re: Using interface name as a command line option to create a iptables rule
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Using interface name as a command line option to create a iptables rule
  • From: Adishesh M <adisheshsm@xxxxxxxxx>
• Re: Untagged Frames
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Untagged Frames
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Use ebtables to forward 802.1x frames ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Untagged Frames
  • From: Jonathan Tripathy <jonnyt@xxxxxxxxxxx>
• Use ebtables to forward 802.1x frames ?
  • From: Nick Carter <ncarter100@xxxxxxxxx>
• Re: pcap files reading with iptables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• pcap files reading with iptables
  • From: andrey <andrey@xxxxxxxxx>
• how ulogd 2 works with conntrack
  • From: "icukeng@xxxxxxxxx" <icukeng@xxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Pekka Enberg <penberg@xxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Pekka Enberg <penberg@xxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Matt Mackall <mpm@xxxxxxxxxxx>
• Re: [PATCH] netfilter/ip_tables: fix compile with debug
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [GIT PULL net-next-2.6] IPVS
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Pekka Enberg <penberg@xxxxxxxxxx>
• Re: come back the traffic on same interface which it input
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Matt Mackall <mpm@xxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: IPS recommendations?
  • From: Victor Julien <lists@xxxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Matt Mackall <mpm@xxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Pekka Enberg <penberg@xxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Matt Mackall <mpm@xxxxxxxxxxx>
• [PATCH] netfilter/ip_tables: fix compile with debug
  • From: Sebastian Andrzej Siewior <sebastian@xxxxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Sebastian Andrzej Siewior <sebastian@xxxxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Sebastian Andrzej Siewior <sebastian@xxxxxxxxxxxxx>
• IPS recommendations?
  • From: <bmcdowell@xxxxxxxxxxxxxxxxxx>
• Re: come back the traffic on same interface which it input
  • From: Steven Kath <steven.kath@xxxxxxxxxx>
• come back the traffic on same interface which it input
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Bizarre NAT behavior
  • From: "Greg Scott" <GregScott@xxxxxxxxxxxxxxxx>
• how do I find the supported targets for the raw table's PREROUTING chain?
  • From: Sam Roberts <vieuxtech@xxxxxxxxx>
• [PATCH 4/5] IPVS: labels at pos 0
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/5] ipvs: support more FTP PASV responses
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL net-next-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 3/5] IPVS: rename of netns init and cleanup functions.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 5/5] IPVS: remove unused init and cleanup functions.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/5] IPVS remove unused var from migration to netns
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [GIT PULL next-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Matt Mackall <mpm@xxxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Christoph Lameter <cl@xxxxxxxxx>
• Re: RHEL6 conntrack-tools RPM's
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] slob: push the min alignment to long long
  • From: Christoph Lameter <cl@xxxxxxxxx>
• Re: iptables blocking all ports except port 80
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• [PATCH] slob: push the min alignment to long long
  • From: Sebastian Andrzej Siewior <sebastian@xxxxxxxxxxxxx>
• Re: RHEL6 conntrack-tools RPM's
  • From: Petr Pisar <petr.pisar@xxxxxxxx>
• dropped connections only on hispeed networks.
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• iptables blocking all ports except port 80
  • From: Ivan Matala <ivanmatala@xxxxxxxxx>
• RHEL6 conntrack-tools RPM's
  • From: "Perkowski, Karol" <karol.perkowski@xxxxxxx>
• Re: API to find out wether a IP address is local?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: API to find out wether a IP address is local?
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• API to find out wether a IP address is local?
  • From: Clemens Eisserer <linuxhippy@xxxxxxxxx>
• [PATCH net-next 2/2] net: netfilter: Remove casts of void *
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH net-next 0/2] net: remove casts of void *
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [Ebtables configuration] CONFIG_BRIDGE_NETFILTER ebtables dependency
  • From: Sébastien LAVEZE <slaveze@xxxxxxxxx>
• [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] IPVS netns exit causes crash in conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 3/3] IPVS: rename of netns init and cleanup functions.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/3] ipvs: support more FTP PASV responses
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/3] IPVS remove unused var from migration to netns
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL next-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Adding features to xt_recent and xt_cluster
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Adding features to xt_recent and xt_cluster
  • From: Karl Heiss <kheiss@xxxxxxxxx>
• Re: Adding features to xt_recent and xt_cluster
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Adding features to xt_recent and xt_cluster
  • From: Karl Heiss <kheiss@xxxxxxxxx>
• [ANNOUNCE]: Release of iptables-1.4.11.1
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: ipset 6.6 bug: subnet (mis)matching
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset 6.6 bug: subnet (mis)matching
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.6 bug: subnet (mis)matching
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset 6.6 bug: subnet (mis)matching
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.6 bug: subnet (mis)matching
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [RFC] SLOB breaks netfilter
  • From: Sebastian Siewior <sebastian@xxxxxxxxxxxxx>
• Re: ipset 6.6 bug: subnet (mis)matching
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset 6.6 bug: subnet (mis)matching
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Unexpected (ct)state matching behaviour
  • From: Maximilian Wilhelm <max@xxxxxxxxxxx>
• Re: Unexpected (ct)state matching behaviour
  • From: Maximilian Wilhelm <max@xxxxxxxxxxx>
• Re: [RFC] SLOB breaks netfilter
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Unexpected (ct)state matching behaviour
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC] SLOB breaks netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC] SLOB breaks netfilter
  • From: David Miller <davem@xxxxxxxxxxxxx>
• RE: [Fwd: RE: ipv6 link local address]
  • From: <bmcdowell@xxxxxxxxxxxxxxxxxx>
• Re: Unexpected (ct)state matching behaviour
  • From: Maximilian Wilhelm <max@xxxxxxxxxxx>
• [RFC] SLOB breaks netfilter
  • From: Sebastian Andrzej Siewior <sebastian@xxxxxxxxxxxxx>
• Re: Unexpected (ct)state matching behaviour
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Unexpected (ct)state matching behaviour
  • From: Maximilian Wilhelm <max@xxxxxxxxxxx>
• RE: ipv6 link local address
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• RE: [Fwd: RE: ipv6 link local address]
  • From: <bmcdowell@xxxxxxxxxxxxxxxxxx>
• [Fwd: RE: ipv6 link local address]
  • From: "Nikolay S." <nowhere@xxxxxxxxxxxxxxxx>
• RE: ipv6 link local address
  • From: "Nikolay S." <nowhere@xxxxxxxxxxxxxxxx>
• RE: ipv6 link local address
  • From: <bmcdowell@xxxxxxxxxxxxxxxxxx>
• RE: ipv6 link local address
  • From: "Nikolay S." <nowhere@xxxxxxxxxxxxxxxx>
• RE: ipv6 link local address
  • From: <bmcdowell@xxxxxxxxxxxxxxxxxx>
• RE: [2:656]?
  • From: <bmcdowell@xxxxxxxxxxxxxxxxxx>
• Re: [NFLOG] How to determine the connection a packet belongs to?
  • From: Srinivasa T N <seenutn@xxxxxxxxxxxxxxxxxx>
• Re: [NFLOG] How to determine the connection a packet belongs to?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [NFLOG] How to determine the connection a packet belongs to?
  • From: Clemens Eisserer <linuxhippy@xxxxxxxxx>
• iptables nat ftp xen Problem
  • From: Philipp Weber <jpp.weber@xxxxxxxxxxxxxx>
• AW: ipv6 link local address
  • From: Fiedler Roman <Roman.Fiedler@xxxxxxxxx>
• Re: ipv6 link local address
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipv6 link local address
  • From: Erik Schorr <erik-lists@xxxxxxxx>
• Re: ipv6 link local address
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• RE: [2:656]?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipv6 link local address
  • From: "Nikolay S." <nowhere@xxxxxxxxxxxxxxxx>
• Re: ipv6 link local address
  • From: Erik Schorr <erik-lists@xxxxxxxx>
• Re: ipv6 link local address
  • From: "Nikolay S." <nowhere@xxxxxxxxxxxxxxxx>
• Re: [NFLOG] How to determine the connection a packet belongs to?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Conntrackd+Keepalived, active/active firewall cluster
  • From: CeR <cer.inet@xxxxxxxxxxxxx>
• Re: [2:656]?
  • From: John Lister <john.lister@xxxxxxxxxxxxx>
• RE: [2:656]?
  • From: <bmcdowell@xxxxxxxxxxxxxxxxxx>
• [2:656]?
  • From: <bmcdowell@xxxxxxxxxxxxxxxxxx>
• [NFLOG] How to determine the connection a packet belongs to?
  • From: Clemens Eisserer <linuxhippy@xxxxxxxxx>
• outbound http traffic requires inbound source port 80 rule?
  • From: Eric Swenson <eric@xxxxxxxxxxx>
• Re: [TRIVIAL PATCH next 15/15] net: Convert vmalloc/memset to vzalloc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [TRIVIAL PATCH next 15/15] net: Convert vmalloc/memset to vzalloc
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [TRIVIAL PATCH next 15/15] net: Convert vmalloc/memset to vzalloc
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [ANNOUNCE] IPTV-Analyzer project released v0.9.2
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: [TRIVIAL PATCH next 15/15] net: Convert vmalloc/memset to vzalloc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: restore support for iptables SNAT
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter, ipvs: Avoid undefined order of evaluation in assignments to struct nf_conn *
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: restore support for iptables SNAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [GIT PULL pablo/nf-2.6-updates] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] ipvs: restore support for iptables SNAT
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Bogus MAC in netfilter-queue for IF_MULTICAST_LOOPed packets.
  • From: Nicolas Cavallari <Nicolas.Cavallari@xxxxxx>
• Re: Bogus MAC in netfilter-queue for IF_MULTICAST_LOOPed packets.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Bogus MAC in netfilter-queue for IF_MULTICAST_LOOPed packets.
  • From: Nicolas Cavallari <Nicolas.Cavallari@xxxxxx>
• Re: [ANNOUNCE] ipset 6.7 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.7 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.7 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.7 released
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.7 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.7 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: SIP 5060 traffic
  • From: Erik Schorr <erik-lists@xxxxxxxx>
• Re: SIP 5060 traffic
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• SIP 5060 traffic
  • From: "cc" <cc@xxxxxxxx>
• Re: linux-next: build warning in Linus' tree
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• linux-next: build warning in Linus' tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter, ipvs: Avoid undefined order of evaluation in assignments to struct nf_conn *
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] netfilter, ipvs: Avoid undefined order of evaluation in assignments to struct nf_conn *
  • From: Jesper Juhl <jj@xxxxxxxxxxxxx>
• [TRIVIAL PATCH next 00/15] treewide: Convert vmalloc/memset to vzalloc
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [TRIVIAL PATCH next 15/15] net: Convert vmalloc/memset to vzalloc
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: On ebtables and tap.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• On ebtables and tap.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: iptables-restore - does it breaks existing connections?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: iptables-restore - does it breaks existing connections?
  • From: Erik Schorr <erik-lists@xxxxxxxx>
• Re: iptables-restore - does it breaks existing connections?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: iptables-restore - does it breaks existing connections?
  • From: Erik Schorr <erik-lists@xxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.11
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.11
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.11
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v3 resend] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 resend] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: nftables: introspection capabilities?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.11
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ANNOUNCE]: Release of iptables-1.4.11
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v3 resend] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Multiple Internal Networks
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Multiple Internal Networks
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: Multiple Internal Networks
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Multiple Internal Networks
  • From: Aaron Clausen <mightymartianca@xxxxxxxxx>
• Re: ULOG target in ip6tables?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• ULOG target in ip6tables?
  • From: Kent Shultz <kentmshultz@xxxxxxxxx>
• iptables-restore - does it breaks existing connections?
  • From: gapsf@xxxxxxxxx
• [ANNOUNCE] IPTV-Analyzer project released v0.9.1
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• TTL Exceeded packets coming from the original packet destination
  • From: Phil Stoneman <pws@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.6 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.6 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re[2]: nftables: introspection capabilities?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re[2]: nftables: introspection capabilities?
  • From: gapsf@xxxxxxxxx
• [ANNOUNCE] ipset 6.6 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: nftables: introspection capabilities?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• nftables: introspection capabilities?
  • From: gapsf@xxxxxxxxx
• icmp packets
  • From: "cc" <cc@xxxxxxxx>
• IP Accounting and blocking IP
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: FORWARD chain and Interfaces
  • From: netfilter@xxxxxxxxxxxxxx
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: FORWARD chain and Interfaces
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: FORWARD chain and Interfaces
  • From: netfilter@xxxxxxxxxxxxxx
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: FORWARD chain and Interfaces
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: FORWARD chain and Interfaces
  • From: netfilter@xxxxxxxxxxxxxx
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: FORWARD chain and Interfaces
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: FORWARD chain and Interfaces
  • From: netfilter@xxxxxxxxxxxxxx
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Source MAC address through bridged connection
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: FORWARD chain and Interfaces
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: FORWARD chain and Interfaces
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• FORWARD chain and Interfaces
  • From: netfilter@xxxxxxxxxxxxxx
• [PATCH v3 resend] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Kevin Cernekee <cernekee@xxxxxxxxx>
• Re: Source MAC address through bridged connection
  • From: Kelbel Junior <kelbel02@xxxxxxxxx>
• Re: Source MAC address through bridged connection
  • From: Rick Jones <rick.jones2@xxxxxx>
• Source MAC address through bridged connection
  • From: Kelbel Junior <kelbel02@xxxxxxxxx>
• [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] IPVS: Free resources on module removal
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Blocking UDP Fragments
  • From: Pandu Poluan <pandu@xxxxxxxxxxx>
• Re: Blocking UDP Fragments
  • From: Pandu Poluan <pandu@xxxxxxxxxxx>
• Re: iptables-save does not save correcly rateest bps parameter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: iptables commands interfere with each other
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• assuming valid ESTABLISHED connections without conntrack on firewall active/pasive HA cluster
  • From: CeR <cer.inet@xxxxxxxxxxxxx>
• ip6tables equivalent of "-m statistic --mode nth --every 2 -j SNAT"?
  • From: Tomasz Chmielewski <mangoo@xxxxxxxx>
• iptables commands interfere with each other
  • From: Steve Murphy <murf@xxxxxxxxxxxxx>
• Re: Blocking UDP Fragments
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Blocking UDP Fragments
  • From: Pandu Poluan <pandu@xxxxxxxxxxx>
• Re: assuming valid ESTABLISHED connections without conntrack on firewall active/pasive HA cluster
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Correct Chains to Apply Rules
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Correct Chains to Apply Rules
  • From: Jorge Dávila <jorgedavilalopez@xxxxxxxxx>
• Re: Correct Chains to Apply Rules
  • From: netfilter@xxxxxxxxxxxxxx
• Re: ipset, IP6_NF_IPTABLES
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Correct Chains to Apply Rules
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Correct Chains to Apply Rules
  • From: netfilter@xxxxxxxxxxxxxx
• Re: Load Balance
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Load Balance
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Nudge on Application Layer Gateway creation
  • From: Paul Hoffman <paul.hoffman@xxxxxxxxx>
• Re: Load Balance
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Denys Fedoryshchenko <denys@xxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Denys Fedoryshchenko <denys@xxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Denys Fedoryshchenko <denys@xxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset, IP6_NF_IPTABLES
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset, IP6_NF_IPTABLES
  • From: Denys Fedoryshchenko <denys@xxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Load Balance
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Load Balance
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: Load Balance
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Blocking UDP Fragments
  • From: Ryan Gelobter <r.gelobter@xxxxxxxxxxxxxxxxxxxxx>
• Re: Load Balance
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: To developers: What rules set would process packets faster?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• To developers: What rules set would process packets faster?
  • From: gapsf@xxxxxxxxx
• Application layer gateway HOWTO?
  • From: Paul Hoffman <paul.hoffman@xxxxxxxxx>
• Port foreword Problem!
  • From: Face <falazemi@xxxxxxxxx>
• Re: Load Balance
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• UDP packet and INVALID state
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Video connection timeout
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Video connection timeout
  • From: jobhunts02@xxxxxxx
• Re: Timestamping in nfqueue
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: NFQUEUE the plot is growing...
  • From: "Nikolay S." <nowhere@xxxxxxxxxxxxxxxx>
• Re: Timestamping in nfqueue
  • From: "Nikolay S." <nowhere@xxxxxxxxxxxxxxxx>
• Re: Timestamping in nfqueue
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: AW: Iptables segfault on ubuntu
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Timestamping in nfqueue
  • From: nowhere <nowhere@xxxxxxxxxxxxxxxx>
• IPv6 neighbor discovery protection
  • From: Chris Adams <cmadams@xxxxxxxxxx>
• AW: Iptables segfault on ubuntu
  • From: Fiedler Roman <Roman.Fiedler@xxxxxxxxx>
• Re: Iptables segfault on ubuntu
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Iptables segfault on ubuntu
  • From: Fiedler Roman <Roman.Fiedler@xxxxxxxxx>
• Re: manually update iptables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• manually update iptables
  • From: bm@xxxxxxx
• Re: High accuracy bandwidth accounting?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• kernel msg: ebtables bug
  • From: Kelbel Junior -- TAGHOS - Segurança em Tecnologia <kelbelms@xxxxxxxxxxxxx>
• Re: NFQUEUE the plot is growing...
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Re: problem in openning a port
  • From: Mahmood Naderan <nt_mahmood@xxxxxxxxx>
• assuming valid ESTABLISHED connections without conntrack on firewall active/pasive HA cluster
  • From: CeR <cer.inet@xxxxxxxxxxxxx>
• Re: problem in openning a port
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: problem in openning a port
  • From: Stephen Johnson <stephen.johnson@xxxxxxxxxxxx>
• problem in openning a port
  • From: Mahmood Naderan <nt_mahmood@xxxxxxxxx>
• Re: conntrack not displaying bytes and packets
  • From: Vieri <rentorbuy@xxxxxxxxx>
• Re: NFQUEUE looses packets between arrival and verdict
  • From: nowhere <nowhere@xxxxxxxxxxxxxxxx>
• Re: conntrack not displaying bytes and packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• A question about ebtables and virtual switching
  • From: carlopmart <carlopmart@xxxxxxxxx>
• Re: conntrack does not display bytes and packets
  • From: Vieri <rentorbuy@xxxxxxxxx>
• Re: conntrack does not display bytes and packets
  • From: "\"Oleg A. Arkhangelsky\"" <sysoleg@xxxxxxxxx>
• conntrack does not display bytes and packets
  • From: Vieri <rentorbuy@xxxxxxxxx>
• malfunction xt_CLASSIFY
  • From: Pavel Trefný <pavel.trefny@xxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: NFQUEUE looses packets between arrival and verdict
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• NFQUEUE looses packets between arrival and verdict
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• [ANNOUNCE] IPTV-Analyzer project released v0.9.0
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Interpret Invalid Log Entry
  • From: netfilter@xxxxxxxxxxxxxx
• Re: High accuracy bandwidth accounting?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: High accuracy bandwidth accounting?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• High accuracy bandwidth accounting?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: conntrack: how to handle child process's NETLINK_NETFILTER
  • From: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
• Re: Blocking in NAT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS (take III)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Blocking in NAT
  • From: Nikolay Kichukov <hijacker@xxxxxxxxx>
• howto share vpn connection (OpenVPN)?
  • From: Face <falazemi@xxxxxxxxx>
• [PATCH 2/2] IPVS: init and cleanup restructuring
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/2] IPVS: Change of socket usage to enable name space exit.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-2.6] IPVS (take III)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: conntrack: how to handle child process's NETLINK_NETFILTER
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Blocking in NAT
  • From: James Lay <jlay@xxxxxxxxxxxxxxxxxxx>
• conntrack: how to handle child process's NETLINK_NETFILTER
  • From: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
• Re: Blocking in NAT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Blocking in NAT
  • From: James Lay <jlay@xxxxxxxxxxxxxxxxxxx>
• Re: WAN balancing
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: How to programatically atomically write one CHAIN (not table)
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• Re: WAN balancing
  • From: Dimitri Yioulos <dyioulos@xxxxxxxxxxxxx>
• Re: WAN balancing
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: How to programatically atomically write one CHAIN (not table)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: WAN balancing
  • From: Matty Sarro <msarro@xxxxxxxxx>
• WAN balancing
  • From: Dimitri Yioulos <dyioulos@xxxxxxxxxxxxx>
• How to programatically atomically write one CHAIN (not table)
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• Re: libnetfilter_queue question
  • From: nowhere <nowhere@xxxxxxxxxxxxxxxx>
• Re: libnetfilter_queue question
  • From: Alessandro Vesely <vesely@xxxxxxx>
• nftables
  • From: Juraj Gabčík <juraj.gabcik@xxxxxxxxx>
• Re: Starter iptables scripts
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Starter iptables scripts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Only the "first" netfilter_queue process receives the packets?
  • From: Eric Leblond <eric@xxxxxxxxxxxxx>
• Re: Starter iptables scripts
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Starter iptables scripts
  • From: Harry Putnam <reader@xxxxxxxxxxx>
• Re: Port Scan Detection
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Port Scan Detection
  • From: netfilter@xxxxxxxxxxxxxx
• Only the "first" netfilter_queue process receives the packets?
  • From: brian.adamson@xxxxxxxxxxxx
• Re: libnetfilter_queue question
  • From: "Nikolay S." <nowhere@xxxxxxxxxxxxxxxx>
• Re: libnetfilter_queue question
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Re: Match strings with periods
  • From: James Lay <jlay@xxxxxxxxxxxxxxxxxxx>
• Re: iptables 1.4.10 - statically linked
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Cannot unload nf_conntrack
  • From: Menyhart Zoltan <Zoltan.Menyhart@xxxxxxxx>
• iptables 1.4.10 - statically linked
  • From: Christian Ernst <ernst997@xxxxxxxxx>
• libnetfilter_queue question
  • From: nowhere <nowhere@xxxxxxxxxxxxxxxx>
• Re: Match strings with periods
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Match strings with periods
  • From: James Lay <jlay@xxxxxxxxxxxxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS (Take II)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Mike Hendrie <mike@xxxxxxxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS (Take II)
  • From: "Hans Schillstrom" <hans@xxxxxxxxxxxxxxx>
• [PATCH 2/2] IPVS: init and cleanup restructuring.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/2] IPVS: Change of socket usage to enable name space exit.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-2.6] IPVS (Take II)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Cache Route Iproute2
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/2] IPVS: labels at pos 0
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/2] IPVS: Change of socket usage to enable name space exit.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Mike Hendrie <mike@xxxxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Mike Hendrie <mike@xxxxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: can't initialize iptables table `filter'
  • From: Mahmood Naderan <nt_mahmood@xxxxxxxxx>
• Re: can't initialize iptables table `filter'
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: can't initialize iptables table `filter'
  • From: Mahmood Naderan <nt_mahmood@xxxxxxxxx>
• Re: can't initialize iptables table `filter'
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: can't initialize iptables table `filter'
  • From: Mahmood Naderan <nt_mahmood@xxxxxxxxx>
• Re: can't initialize iptables table `filter'
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• can't initialize iptables table `filter'
  • From: Mahmood Naderan <nt_mahmood@xxxxxxxxx>
• Re: nftables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Fwd: nftables
  • From: Juraj Gabčík <juraj.gabcik@xxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Mike Hendrie <mike@xxxxxxxxxxxxxx>
• Re: iptables enough to handle brute force attacks?
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Re: AW: Best practice: Check --syn in PREROUTING with DNAT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• AW: Best practice: Check --syn in PREROUTING with DNAT
  • From: Fiedler Roman <Roman.Fiedler@xxxxxxxxx>
• Re: Best practice: Check --syn in PREROUTING with DNAT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Best practice: Check --syn in PREROUTING with DNAT
  • From: Fiedler Roman <Roman.Fiedler@xxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Mike Hendrie <mike@xxxxxxxxxxxxxx>
• Re: xtables-addons "--without-kbuild" not listed in ./configure
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Mike Hendrie <mike@xxxxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: xtables-addons "--without-kbuild" not listed in ./configure
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Mike Hendrie <mike@xxxxxxxxxxxxxx>
• Re: xtables-addons "--without-kbuild" not listed in ./configure
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: xtables-addons "--without-kbuild" not listed in ./configure
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Mike Hendrie <mike@xxxxxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Proxy Filter iptable Settings
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Using source nat to discriminate traffic
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Proxy Filter iptable Settings
  • From: Mike Hendrie <mike@xxxxxxxxxxxxxx>
• xtables-addons "--without-kbuild" not listed in ./configure
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Forward Rule, Client access only specific ip's, rest of world access client unrestricted.
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• RE: Forward Rule, Client access only specific ip's, rest of world access client unrestricted.
  • From: "Becskei Robert" <robert@xxxxxxxxxxxx>
• Re: Forward Rule, Client access only specific ip's, rest of world access client unrestricted.
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• RE: Forward Rule, Client access only specific ip's, rest of world access client unrestricted.
  • From: "Becskei Robert" <robert@xxxxxxxxxxxx>
• Re: ipset maximal/minimal revision conflict
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset maximal/minimal revision conflict
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Forward Rule, Client access only specific ip's, rest of world access client unrestricted.
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: ipset maximal/minimal revision conflict
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset maximal/minimal revision conflict
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Forward Rule, Client access only specific ip's, rest of world access client unrestricted.
  • From: "Becskei Robert" <robert@xxxxxxxxxxxx>
• Re: Using source nat to discriminate traffic
  • From: carlopmart <carlopmart@xxxxxxxxx>
• Forward Rule, Client access only specific ip's, rest of world access client unrestricted.
  • From: "Becskei Robert" <robert@xxxxxxxxxxxx>
• Re: Using source nat to discriminate traffic
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• ipset maximal/minimal revision conflict
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Using source nat to discriminate traffic
  • From: carlopmart <carlopmart@xxxxxxxxx>
• Re: Using source nat to discriminate traffic
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Using source nat to discriminate traffic
  • From: carlopmart <carlopmart@xxxxxxxxx>
• Using NFQUEUE rule on INPUT but yet still receiving packets on OUTPUT
  • From: Ricky Huang <rhhuang@xxxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset v6.latest bugs?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset kernel oops
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset kernel oops
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset v6.latest bugs?
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Lu Brian <lyt0112@xxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Lu Brian <lyt0112@xxxxxxxxx>
• Re: only direct port 80 traffic from client
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: ipset kernel oops
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Which has fast speed, BSP and iptable?
  • From: Roc Bai <buroc83@xxxxxxxxx>
• Re: ipset kernel oops
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: about TEE and POSTROUTING
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: only direct port 80 traffic from client
  • From: J Webster <jw.jwebster@xxxxxxxxx>
• about TEE and POSTROUTING
  • From: jian Jiang <ottojiang@xxxxxxxxx>
• Re: only direct port 80 traffic from client
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• ipset kernel oops
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Problem with SNAT trying to configure a load balancing router
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Pandu Poluan <pandu@xxxxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Lu Brian <lyt0112@xxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Lu Brian <lyt0112@xxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Lu Brian <lyt0112@xxxxxxxxx>
• IP NAT and IBM LUM Server
  • From: <Matthieu.Marc@xxxxxxxx>
• Re: How can I get rules with all resolved IPs for FQDN?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• How can I get rules with all resolved IPs for FQDN?
  • From: "Brian Lu" <lyt0112@xxxxxxxxx>
• only direct port 80 traffic from client
  • From: J Webster <jw.jwebster@xxxxxxxxx>
• Re: Problem with SNAT trying to configure a load balancing router
  • From: Emilio Lazo Zaia <emiliolazozaia@xxxxxxxxx>
• Re: Problem with SNAT trying to configure a load balancing router
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• iptables-save does not save correcly rateest bps parameter
  • From: Emilio Lazo Zaia <emiliolazozaia@xxxxxxxxx>
• Problem with SNAT trying to configure a load balancing router
  • From: Emilio Lazo Zaia <emiliolazozaia@xxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Tony Rogers <tony.rogers@xxxxxxxxxxx>
• [ANNOUNCE] ipset 6.4 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• netfilter acceleration for sun neptune, intel 82599 or the like?
  • From: Daniel Nilsson <gnuffel@xxxxxxxxx>
• Re: Ipset counters question
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Load Balance
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: Fwd: iptables redirect inbound traffic to tun
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: Latest iptables & latest xtables-addons
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Latest iptables & latest xtables-addons
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Latest iptables & latest xtables-addons
  • From: Pandu Poluan <pandu@xxxxxxxxxxx>
• Re: Fwd: iptables redirect inbound traffic to tun
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Fwd: iptables redirect inbound traffic to tun
  • From: JOSE FELIX HERNANDEZ BARRIO <jose.hernandez@xxxxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Tony Rogers <tony.rogers@xxxxxxxxxxx>
• Re: Ipset counters question
  • From: Jean-Philippe Menil <jean-philippe.menil@xxxxxxxxxxxxxx>
• Re: Ipset counters question
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Ipset counters question
  • From: Jean-Philippe Menil <jean-philippe.menil@xxxxxxxxxxxxxx>
• Re: Howto get ulog-prefix with ulogd-1.24 + sqlite3 backend?
  • From: Peter Phaal <peter.phaal@xxxxxxxxx>
• Re: Fwd: Iptables, timestart and timestop arguments and daylight saving time in UK
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Fwd: Iptables, timestart and timestop arguments and daylight saving time in UK
  • From: Sebastian Arcus <shop@xxxxxxxxxxxx>
• Re: Fwd: Iptables, timestart and timestop arguments and daylight saving time in UK
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Fwd: Iptables, timestart and timestop arguments and daylight saving time in UK
  • From: Sebastian Arcus <shop@xxxxxxxxxxxx>
• RE: Very strange ftp mget problem
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• RE: Very strange ftp mget problem
  • From: "Greg Scott" <GregScott@xxxxxxxxxxxxxxxx>
• Re: Very strange ftp mget problem
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Load Balance with equalize
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• Re: Problem with iptables -j TEE
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Problem with iptables -j TEE
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Very strange ftp mget problem
  • From: "Greg Scott" <GregScott@xxxxxxxxxxxxxxxx>
• Problem with iptables -j TEE
  • From: JOSE FELIX HERNANDEZ BARRIO <jose.hernandez@xxxxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Tony Rogers <tony.rogers@xxxxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• RE: iptables - external IP address on internal interface?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• RE: iptables - external IP address on internal interface?
  • From: "Tony Rogers" <Tony.Rogers@xxxxxxxxxxx>
• Re: load balanced between tunnel VPN and an Normal Link Internet
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• iptables and bridging
  • From: Jonathan Tripathy <jonnyt@xxxxxxxxxxx>
• Re: load balanced between tunnel VPN and an Normal Link Internet
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Load Balancing issue
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Load Balancing issue
  • From: Evan Pierce <evan@xxxxxxxxxxxx>
• Re: Load Balancing issue
  • From: John Lister <john.lister@xxxxxxxxxxxxx>
• Re: Howto get ulog-prefix with ulogd-1.24 + sqlite3 backend?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: iptables - external IP address on internal interface?
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• iptables - external IP address on internal interface?
  • From: "Tony Rogers" <Tony.Rogers@xxxxxxxxxxx>
• Re: Load Balancing issue
  • From: John Lister <john.lister@xxxxxxxxxxxxx>
• Load Balancing issue
  • From: Evan Pierce <evan@xxxxxxxxxxxx>
• load balanced between tunnel VPN and an Normal Link Internet
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• [ANNOUNCE] ipset 6.3 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Howto get ulog-prefix with ulogd-1.24 + sqlite3 backend?
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Howto get ulog-prefix with ulogd-1.24 + sqlite3 backend?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Howto get ulog-prefix with ulogd-1.24 + sqlite3 backend?
  • From: Clemens Eisserer <linuxhippy@xxxxxxxxx>
• Re: Problems with trying to use the TEE target
  • From: Stephen Johnson <stephen.johnson@xxxxxxxxxxxx>
• Re: Problems with trying to use the TEE target
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: Problems with trying to use the TEE target
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: Problems with trying to use the TEE target
  • From: Stephen Johnson <stephen.johnson@xxxxxxxxxxxx>
• Re: Problems with trying to use the TEE target
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Problems with trying to use the TEE target
  • From: Stephen Johnson <stephen.johnson@xxxxxxxxxxxx>
• Re: ipset macipmap troubles
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset macipmap troubles
  • From: Jean-Philippe Menil <jean-philippe.menil@xxxxxxxxxxxxxx>
• Re: iptables enough to handle brute force attacks?
  • From: Gilles <gilles.ganault@xxxxxxx>
• Re: Unable to use connbytes
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Unable to use connbytes
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: iptables enough to handle brute force attacks?
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Unable to use connbytes
  • From: Supratik Goswami <supratiksekhar@xxxxxxxxx>
• Re: [GIT PULL nf-next-2.6] IPVS
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• iptables enough to handle brute force attacks?
  • From: Gilles <gilles.ganault@xxxxxxx>
• [PATCH] IPVS: combine consecutive #ifdef CONFIG_PROC_FS blocks
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [Announce] New IPVS GIT trees
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Allow/deny with iptables or application?
  • From: Gilles <gilles.ganault@xxxxxxx>
• Re: Allow/deny with iptables or application?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Allow/deny with iptables or application?
  • From: Gilles <gilles.ganault@xxxxxxx>
• Re: [PATCH] IPVS Bug, Null ptr in ip_vs_ctl.c ip_vs_genl_dump_daemons().
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Transparent proxy with IPv6 on Linux [REDIRECT target is gone]
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Allow/deny with iptables or application?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxxx>
• Allow/deny with iptables or application?
  • From: Gilles <gilles.ganault@xxxxxxx>