Linux TCP/IP Netfilter

• Thread Index

• Re: what is atomicity of iptables packet processing?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• what is atomicity of iptables packet processing?
  • From: Bill Bogstad <bogstad@xxxxxxxxx>
• Multiple NFQUEUE numbers not quite working
  • From: Deborah Charan <dcharan@xxxxxxxxxx>
• libNetfilterQueue - Capturing all traffic
  • From: Michael Hakimi <yalakvar@xxxxxxxxx>
• Re: symmetric NAT and ICMP
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: symmetric NAT and ICMP
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: symmetric NAT and ICMP
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• symmetric NAT and ICMP
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: What's going on with my iptables?
  • From: "Jack Knowlton" <jknowlton@xxxxxxxx>
• RE: What's going on with my iptables?
  • From: "Jack Knowlton" <jknowlton@xxxxxxxx>
• Re: ACCOUNT target
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: Brouting VNC
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: What's going on with my iptables?
  • From: Bill Prochazka <billprozac@xxxxxxxxx>
• Brouting VNC
  • From: "Pavel Mikulka" <pavel@xxxxxxxxxxxx>
• RE: What's going on with my iptables?
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• RE: What's going on with my iptables?
  • From: "Jack Knowlton" <jknowlton@xxxxxxxx>
• Re: ACCOUNT target
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: DNAT issue (with added network diagram)
  • From: Simon Tennant <simon@xxxxxxxxxxxxxx>
• Re: DNAT issue (with added network diagram)
  • From: Steve Fink <sphink@xxxxxxxxx>
• Re: DNAT issue (with added network diagram)
  • From: Simon Tennant <simon@xxxxxxxxxxxxxx>
• Re: DNAT issue (with added network diagram)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• DNAT issue (with added network diagram)
  • From: Simon Tennant <simon@xxxxxxxxxxxxxx>
• Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Hannes Eder <heder@xxxxxxxxxx>
• RE: What's going on with my iptables?
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• What's going on with my iptables?
  • From: "Jack Knowlton" <jknowlton@xxxxxxxx>
• tc and making QoS
  • From: <mamadou.toure@xxxxxxxxx>
• Re: [patch v2.2 3/4] [PATCH v2.1 3/4] IPVS: make FTP work with full NAT support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.2 2/4] [PATCH v2.1 2/4] IPVS: make friends with nf_conntrack
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: NAT table bypass for local traffic
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: GRE protocol .
  • From: valerio balbi <valerio.balbi@xxxxxxxxx>
• Re: GRE protocol .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: NAT table bypass for local traffic
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• [patch v2.2 4/4] [PATCH v2.1 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.2 3/4] [PATCH v2.1 3/4] IPVS: make FTP work with full NAT support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.2 2/4] [PATCH v2.1 2/4] IPVS: make friends with nf_conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.2 0/4] IPVS full NAT support + netfilter 'ipvs' match support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• ACCOUNT target
  • From: Bob Miller <bob@xxxxxxxxxxxxxxx>
• Re: NAT table bypass for local traffic
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: tc and making QoS
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• corrupted ulog from iptables
  • From: Simon Tennant <simon@xxxxxxxxxxxxxx>
• Re: NAT table bypass for local traffic
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• GRE protocol .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Re: NAT table bypass for local traffic
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• (Re)injecting extra packets?
  • From: "Morgon J. Kanter" <morgon.j.kanter@xxxxxxxxxxxxx>
• Re: NAT table bypass for local traffic
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Re: NAT table bypass for local traffic
  • From: Bill Prochazka <billprozac@xxxxxxxxx>
• Re: NAT table bypass for local traffic
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: NAT table bypass for local traffic
  • From: Steve Fink <sphink@xxxxxxxxx>
• NAT table bypass for local traffic
  • From: Bill Prochazka <billprozac@xxxxxxxxx>
• Re: Polling for conntrack events
  • From: Eric Leblond <eleblond@xxxxxxxxxxxx>
• Re: Polling for conntrack events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• threaded interrupt handler
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• l2tp , pptp pass thru mode .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Reinjecting packets to beginning of iptables
  • From: "Przemyslaw Wrzos" <przemyslaw.wrzos@xxxxxxxxxxxxx>
• Re[2]: snat --persistent
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re[2]: snat --persistent
  • From: mindb0t@xxxxxxx
• Re: snat --persistent
  • From: "\"Oleg A. Arkhangelsky\"" <sysoleg@xxxxxxxxx>
• snat --persistent
  • From: mindb0t@xxxxxxx
• Polling for conntrack events
  • From: "Morgon J. Kanter" <morgon.j.kanter@xxxxxxxxxxxxx>
• Re: Blocking all APNIC addresses vs. per-country list
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Blocking all APNIC addresses vs. per-country list
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: Blocking all APNIC addresses vs. per-country list
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Blocking all APNIC addresses vs. per-country list
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: Blocking all APNIC addresses vs. per-country list
  • From: Roman Fiedler <roman.fiedler@xxxxxxxxx>
• Re: Blocking all APNIC addresses vs. per-country list
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: Blocking all APNIC addresses vs. per-country list
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Blocking all APNIC addresses vs. per-country list
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: Blocking all APNIC addresses vs. per-country list
  • From: "Tim Evans" <tkevans@xxxxxxxxxxx>
• Blocking all APNIC addresses vs. per-country list
  • From: Peter Zieseniss <peter@xxxxxxxxxxxxxxx>
• Re: Problem with rdate and iptables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Problem with rdate and iptables
  • From: Eric Bauman <baumane@xxxxxxxxxxxxxx>
• Re: libnetfilter_conntrack: notification on established/finished connection?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: stop e-mail from this list but leave me subscribed to this list
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• stop e-mail from this list but leave me subscribed to this list
  • From: Markus Feldmann <feldmann_markus@xxxxxx>
• Re: Problem with rdate and iptables
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Problem with rdate and iptables
  • From: Eric Bauman <baumane@xxxxxxxxxxxxxx>
• Re: Help with ftp helper please
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Help with ftp helper please
  • From: Jeff Jensen <jjensen@xxxxxxxxxxx>
• Re: Problem with rdate and iptables
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Help with ftp helper please
  • From: Jeff Jensen <jjensen@xxxxxxxxxxx>
• Re: Help with ftp helper please
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Help with ftp helper please
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Help with ftp helper please
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Help with ftp helper please
  • From: Jeff Jensen <jjensen@xxxxxxxxxxx>
• Re: Dose netfilter can intercept the http method like the GET and POST?
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Dose netfilter can intercept the http method like the GET and POST?
  • From: supercodeing35271 supercodeing35271 <supercodeing35271@xxxxxxxxx>
• Problem with rdate and iptables
  • From: Eric Bauman <baumane@xxxxxxxxxxxxxx>
• Re: Cannot use iptables with kernel 2.6.30
  • From: Elison Niven <elison.niven@xxxxxxxxx>
• RE: Adding ebtables entry from kernel module
  • From: "Parthiv Shah" <parthiv.shah@xxxxxxxxxxxxxxxx>
• Re: Cannot use iptables with kernel 2.6.30
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• PRIO qdisc + iptables TOS target
  • From: Salatiel Filho <salatiel.filho@xxxxxxxxx>
• Cannot use iptables with kernel 2.6.30
  • From: Elison Niven <elison.niven@xxxxxxxxx>
• Re: libnetfilter_conntrack: notification on established/finished connection?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_conntrack: notification on established/finished connection?
  • From: "Morgon J. Kanter" <morgon.j.kanter@xxxxxxxxxxxxx>
• Re: Possible IPTables bug in INPUT interface filtering?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Possible IPTables bug in INPUT interface filtering?
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: Possible IPTables bug in INPUT interface filtering?
  • From: Narendra Choyal <narendrachoyal@xxxxxxxxx>
• Re: mac filtering
  • From: Lars Nooden <lars.curator@xxxxxxxxx>
• Re: mac filtering
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• mac filtering
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: rx interrupt in userspace
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• rx interrupt in userspace
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: removing black listed ip
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Possible IPTables bug in INPUT interface filtering?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: removing black listed ip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: removing black listed ip
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Possible IPTables bug in INPUT interface filtering?
  • From: John Engelke <john.engelke@xxxxxxxxx>
• RE: SO_ORIGINAL_DST returning bogus port number
  • From: "Jeff Saremi" <jeffsaremi@xxxxxxxxx>
• Re: SO_ORIGINAL_DST returning bogus port number
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: SO_ORIGINAL_DST returning bogus port number
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• SO_ORIGINAL_DST returning bogus port number
  • From: "Jeff Saremi" <jeffsaremi@xxxxxxxxx>
• Re: can we design a modified fail2ban ?
  • From: Alessandro Vesely <vesely@xxxxxxx>
• [ANNOUNCE] people.netfilter.org unexpected downtime
  • From: Harald Welte <laforge@xxxxxxxxxxxxx>
• Re: tc/tcng default config
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Adding ebtables entry from kernel module
  • From: "Parthiv Shah" <parthiv.shah@xxxxxxxxxxxxxxxx>
• Re: can we design a modified fail2ban ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: tc/tcng default config
  • From: Bob Miller <bob@xxxxxxxxxxxxxxx>
• Re: tc/tcng default config
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• tc/tcng default config
  • From: Bob Miller <bob@xxxxxxxxxxxxxxx>
• Re: can we design a modified fail2ban ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: can we design a modified fail2ban ?
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Re: can we design a modified fail2ban ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: can we design a modified fail2ban ?
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Re: can we design a modified fail2ban ?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Possible IPTables bug in INPUT interface filtering?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Reg: Replacing sk_buff in a NetFilter hook
  • From: Subhadeep Ghosh <subhadeep.ghosh@xxxxxxxxxx>
• Re: Reg: Replacing sk_buff in a NetFilter hook
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Reg: Replacing sk_buff in a NetFilter hook
  • From: Subhadeep Ghosh <subhadeep.ghosh@xxxxxxxxxx>
• Re: Reg: Replacing sk_buff in a NetFilter hook
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Reg: Replacing sk_buff in a NetFilter hook
  • From: Subhadeep Ghosh <subhadeep.ghosh@xxxxxxxxxx>
• Re: How to block particular port based on src IP ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: How to block particular port based on src IP ?
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: can we design a modified fail2ban ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• can we design a modified fail2ban ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Possible IPTables bug in INPUT interface filtering?
  • From: John Engelke <john.engelke@xxxxxxxxx>
• GRE over IPsec -- filtering raw GRE packets?
  • From: abhijit <strongcofi@xxxxxxxxx>
• Re: Packets stops traversing after nat PREROUTING
  • From: Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx>
• Re: Packets stops traversing after nat PREROUTING
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Packets stops traversing after nat PREROUTING
  • From: Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx>
• How to block particular port based on src IP ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• automatic verification of iptables policies
  • From: deva seetharam <devaseetharam@xxxxxxxxx>
• Fw: INVALID connections and SNAT
  • From: Igor Bogomazov <bi@xxxxx>
• How to block particular port based on src IP ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: INVALID connections and SNAT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• INVALID connections and SNAT
  • From: Igor Bogomazov <bi@xxxxx>
• Re: removing black listed ip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: removing black listed ip
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Iptables and voip (sip) traffic
  • From: Indrek Paas <indrekpaas@xxxxxxxxx>
• Re: Iptables and voip (sip) traffic
  • From: whiplash <whiplash@xxxxxxxxxxxx>
• Re: removing black listed ip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: removing black listed ip
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: removing black listed ip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• removing black listed ip
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re:
  • From: "William Wilcox" <will.wilcox1@xxxxxxxxx>
• Iptables and voip (sip) traffic
  • From: Indrek Paas <indrekpaas@xxxxxxxxx>
• Re: Packet manipulation in user space
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Packet manipulation in user space
  • From: Hamid Nassiby <h.nassiby@xxxxxxxxx>
• Re: help need in understanding the ebtables MAC source
  • From: whiplash <whiplash@xxxxxxxxxxxx>
• Re: Packet manipulation in user space
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Packet manipulation in user space
  • From: Hamid Nassiby <h.nassiby@xxxxxxxxx>
• help need in understanding the ebtables MAC source
  • From: Shi Jin <jinzishuai@xxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Florian Weimer <fweimer@xxxxxx>
• Re: iptables vlan and 802.1p marking is possible?
  • From: Alessandro Fachin <alessandro.fachin@xxxxxxxxx>
• Re: iptables vlan and 802.1p marking is possible?
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• iptables vlan and 802.1p marking is possible?
  • From: Alessandro Fachin <alessandro.fachin@xxxxxxxxx>
• Re: about "tc"
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: Netfilter internal packet flow
  • From: hyperbatus@xxxxxx
• Re: One outgoing connection per process
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• One outgoing connection per process
  • From: Aleksandr Levchuk <alevchuk@xxxxxxxxx>
• Re: lxc, conntrack and routecache
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: about "tc"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Diskless and Firewall
  • From: Roman Fiedler <roman.fiedler@xxxxxxxxx>
• Re: about "tc"
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• about "tc"
  • From: Mihamina Rakotomandimby <mihamina@xxxxxxxxxx>
• Re: VLAN et iptables
  • From: Pieter Smit <mlist2010@xxxxxxxxxxx>
• lxc, conntrack and routecache
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: VLAN et iptables
  • From: Jeetu Golani <jeetu.golani@xxxxxxxxx>
• Re: Diskless and Firewall
  • From: Khaled Hussein <khaled@xxxxxxxxx>
• Re: VLAN et iptables
  • From: elko <elko@xxxxxxxxxxxxxxx>
• VLAN et iptables
  • From: Jeetu Golani <jeetu.golani@xxxxxxxxx>
• Re: MARK not working
  • From: Dennison Williams <dennison.williams@xxxxxxxxx>
• Re: setting quotas with quota
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: MARK not working
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: MARK not working
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: MARK not working
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Re: MARK not working
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: MARK not working
  • From: John Lister <john.lister@xxxxxxxxxxxxx>
• Re: MARK not working
  • From: Dennison Williams <dennison.williams@xxxxxxxxx>
• Re: MARK not working
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• MARK not working
  • From: Dennison Williams <dennison.williams@xxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [net-next-2.6 PATCH] netfilter: ctnetlink: compute message size properly
  • From: Jiri Pirko <jpirko@xxxxxxxxxx>
• Re: uisng L7 filter in ebtables commands
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: uisng L7 filter in ebtables commands
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Diskless and Firewall
  • From: Roman Fiedler <roman.fiedler@xxxxxxxxx>
• Re: uisng L7 filter in ebtables commands
  • From: agashi shipora <gashipo@xxxxxxxxx>
• Re: Diskless and Firewall
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Diskless and Firewall
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [net-next-2.6 PATCH] netfilter: ctnetlink: compute message size properly
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [net-next-2.6 PATCH] netfilter: ctnetlink: compute message size properly
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Diskless and Firewall
  • From: Khaled Hussein <khaled@xxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: uisng L7 filter in ebtables commands
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: uisng L7 filter in ebtables commands
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: uisng L7 filter in ebtables commands
  • From: agashi shipora <gashipo@xxxxxxxxx>
• Re: uisng L7 filter in ebtables commands
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: uisng L7 filter in ebtables commands
  • From: agashi shipora <gashipo@xxxxxxxxx>
• Re: uisng L7 filter in ebtables commands
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: [net-next-2.6 PATCH] netfilter: ctnetlink: compute message size properly
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• uisng L7 filter in ebtables commands
  • From: agashi shipora <gashipo@xxxxxxxxx>
• Re: [net-next-2.6 PATCH] netfilter: ctnetlink: compute message size properly
  • From: Jiri Pirko <jpirko@xxxxxxxxxx>
• Re: [net-next-2.6 PATCH] netfilter: ctnetlink: compute message size properly
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [net-next-2.6 PATCH] netfilter: ctnetlink: compute message size properly
  • From: Jiri Pirko <jpirko@xxxxxxxxxx>
• Re: Re: Assigning multiple marks to a packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Roman Tsisyk <roman@xxxxxxxxxx>
• Re: Assigning multiple marks to a packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Assigning multiple marks to a packet
  • From: Tiago Alves <alvesfonseca@xxxxxxxxxxxx>
• Re: Assigning multiple marks to a packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Assigning multiple marks to a packet
  • From: Tiago Alves <alvesfonseca@xxxxxxxxxxxx>
• Re: memory leak after enabling bridge-netfilter
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: Ipsec and masquerading
  • From: Peter Kaagman <prjv.kaagman@xxxxxxxxx>
• Re: memory leak after enabling bridge-netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• memory leak after enabling bridge-netfilter
  • From: Ram Krishna <rkr393@xxxxxxxxx>
• Re: Ipsec and masquerading
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Stig Thormodsrud <stig@xxxxxxxxxx>
• Ipsec and masquerading
  • From: Peter Kaagman <prjv.kaagman@xxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Roman Tsisyk <roman@xxxxxxxxxx>
• Re: Brouter basic question .
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Brouter basic question .
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: NetFlow / sFlow / IPFIX network probe proposal
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: Brouter basic question .
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• NetFlow / sFlow / IPFIX network probe proposal
  • From: Roman Tsisyk <roman@xxxxxxxxxx>
• Brouter basic question .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: how to install ipp2p on rhel5.2 ?
  • From: vishesh kumar <linuxtovishesh@xxxxxxxxx>
• Re: how to install ipp2p on rhel5.2 ?
  • From: vishesh kumar <linuxtovishesh@xxxxxxxxx>
• Re: how to install ipp2p on rhel5.2 ?
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• how to install ipp2p on rhel5.2 ?
  • From: vishesh kumar <linuxtovishesh@xxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: ssh overflow blacklisting not working properly
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• ssh overflow blacklisting not working properly
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• I have a list of 788k doctors in America
  • From: "Reaves prey" <twentythreehundred2300@xxxxxxxxx>
• Re: order of HOOK functions
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: How to change source address of packets destined for the box?
  • From: Ajay Lele <ajay.lele@xxxxxxxxx>
• Re: How to change source address of packets destined for the box?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• How to change source address of packets destined for the box?
  • From: Ajay Lele <ajay.lele@xxxxxxxxx>
• Re: Can arptables be used to SNAT TCP/UDP traffic?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: QoS weirdness : HTB accuracy
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Can arptables be used to SNAT TCP/UDP traffic?
  • From: Ajay Lele <ajay.lele@xxxxxxxxx>
• Re: QoS weirdness : HTB accuracy
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: QoS weirdness : HTB accuracy
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: QoS weirdness : HTB accuracy
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: QoS weirdness : HTB accuracy
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: QoS weirdness : HTB accuracy
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• QoS weirdness : HTB accuracy
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: Netfilter internal packet flow
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Netfilter internal packet flow
  • From: hyperbatus@xxxxxx
• Reach 120k finance and money professionals - we have this list and more
  • From: "Errol woodward" <german3627@xxxxxxxxx>
• Re: order of HOOK functions
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• order of HOOK functions
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: multicast packets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Nat and firewall holes
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: SNAT: Large TCP/IP message transfers get RST and client sees a broken pipe
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• SNAT: Large TCP/IP message transfers get RST and client sees a broken pipe
  • From: Terry C <tc5716@xxxxxxxxx>
• Re: Nat and firewall holes
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Nat and firewall holes
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Nat and firewall holes
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Nat and firewall holes
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Nat and firewall holes
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: two default routes
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: two default routes
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: two default routes
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: Nat and firewall holes
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: two default routes
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: two default routes
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Nat and firewall holes
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: two default routes
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: two default routes
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: two default routes
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• two default routes
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: nf_ct_ftp: dropping packet
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nf_ct_ftp: dropping packet
  • From: Marian Marinov <mm@xxxxxxxx>
• Re: nf_ct_ftp: dropping packet
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• nf_ct_ftp: dropping packet
  • From: Marian Marinov <mm@xxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Angel Motta <angelmotta@xxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Angel Motta <angelmotta@xxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Ugly issue with conntrack
  • From: Juan Antonio <pushakk@xxxxxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Angel Motta <angelmotta@xxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: Ugly issue with conntrack
  • From: Juan Antonio <pushakk@xxxxxxxxxxxx>
• Re: Ugly issue with conntrack
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Angel Motta <angelmotta@xxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: ipset setlist.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset setlist.
  • From: Husnu Demir <hdemir@xxxxxxxxxxx>
• Re: Rules PREROUTING doesn't work
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• Rules PREROUTING doesn't work
  • From: Angel Motta <angelmotta@xxxxxxxxx>
• Ugly issue with conntrack
  • From: Juan Antonio <pushakk@xxxxxxxxxxxx>
• Re: Update delay when using nat table?
  • From: "Sheepa" <sheepa@xxxxxxxxxx>
• Re: udplite and ports
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: udplite and ports
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: udplite and ports
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: udplite and ports
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• TBF parameters: overhead and linklayer ?
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: drop dhcp request from a particular mac address, after a dhcp relay
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: udplite and ports
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: transparent proxy
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: drop dhcp request from a particular mac address, after a dhcp relay
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Re: transparent proxy
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: drop dhcp request from a particular mac address, after a dhcp relay
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: drop dhcp request from a particular mac address, after a dhcp relay
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: transparent proxy
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: transparent proxy
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: transparent proxy
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• udplite and ports
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Update delay when using nat table?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: transparent proxy
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: drop dhcp request from a particular mac address, after a dhcp relay
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: iptables with snat/dnat under firewall/router 2 nic config
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: iptables NATed or not NATed
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• iptables with snat/dnat under firewall/router 2 nic config
  • From: Chris Cranford <crancran@xxxxxxxxx>
• Re: Update delay when using nat table?
  • From: "Sheepa" <sheepa@xxxxxxxxxx>
• Re: Update delay when using nat table?
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: iptables NATed or not NATed
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: drop dhcp request from a particular mac address, after a dhcp relay
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: Update delay when using nat table?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Update delay when using nat table?
  • From: "Sheepa" <sheepa@xxxxxxxxxx>
• Re: drop dhcp request from a particular mac address, after a dhcp relay
  • From: Ming-Ching Tiew <mctiew@xxxxxxxxx>
• Re: Update delay when using nat table?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: iptables NATed or not NATed
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Update delay when using nat table?
  • From: "Sheepa" <sheepa@xxxxxxxxxx>
• Re: iptables + 2 isp + dnat problem
  • From: Guillaume Vachon <gvachon@xxxxxxxxxxxx>
• Re: Update delay when using nat table?
  • From: "Sheepa" <sheepa@xxxxxxxxxx>
• Re: iptables NATed or not NATed
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• iptables NATed or not NATed
  • From: Patrick Chemla <patrick.chemla@xxxxxxxxxxxxxx>
• Update delay when using nat table?
  • From: "Sheepa" <sheepa@xxxxxxxxxx>
• Re: iptables + 2 isp + dnat problem
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• iptables + 2 isp + dnat problem
  • From: Guillaume Vachon <gvachon@xxxxxxxxxxxx>
• Re: drop dhcp request from a particular mac address, after a dhcp relay
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• drop dhcp request from a particular mac address, after a dhcp relay
  • From: Ming-Ching Tiew <mctiew@xxxxxxxxx>
• Re: transparent proxy
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• transparent proxy
  • From: "Marco Schuth" <marco@xxxxxxxxxxxxx>
• Re: [PATCH 40/66] include/linux/netfilter/nf_conntrack_tuple_common.h: Checkpatch cleanup
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: How does netfilter decide which in/out-interface a packet has
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Traversal of chains for muticast packets .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: How does netfilter decide which in/out-interface a packet has
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• Re: best approach for blocklist
  • From: Weedy <weedy2887@xxxxxxxxx>
• Re: best approach for blocklist
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: best approach for blocklist
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• bridging with nat, looking for recommendations
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: best approach for blocklist
  • From: Payam Chychi <pchychi@xxxxxxxxx>
• best approach for blocklist
  • From: "Dennis J." <dennisml@xxxxxxxxxxxx>
• Re: Traversal of chains for muticast packets .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Traversal of chains for muticast packets .
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Traversal of chains for muticast packets .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: iptable rule addition has no effect .
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Traversal of chains for muticast packets .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• iptable rule addition has no effect .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• IP-in-IP matching
  • From: Andrew Kraslavsky <andykras@xxxxxxxxxxx>
• Re: how to harden iptables rules?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: miscellaneous netfilter questions
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: How does netfilter decide which in/out-interface a packet has
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• untrusted internal(squid/vpn forwarding)
  • From: Barry Smoke <Barry.Smoke@xxxxxxxxxxxxxxx>
• Re: how to harden iptables rules?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: miscellaneous netfilter questions
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: how to harden iptables rules?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: how to harden iptables rules?
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• Re: How does netfilter decide which in/out-interface a packet has
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• Re: miscellaneous netfilter questions
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• Configuration question
  • From: "Jean-Damien.Pogolotti@xxxxxxxxxxxx" <Jean-Damien.Pogolotti@xxxxxxxxxxxx>
• Re: miscellaneous netfilter questions
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Multiple IPs to 2 interfaces problem with default route
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Re: Stateful port redirection?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Stateful port redirection?
  • From: Faré <fahree@xxxxxxxxx>
• Re: how to harden iptables rules?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: How does netfilter decide which in/out-interface a packet has
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: miscellaneous netfilter questions
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• miscellaneous netfilter questions
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• How does netfilter decide which in/out-interface a packet has
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• how to harden iptables rules?
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxxxxxxxxxxxxxxxxxx>
• Multiple IPs to 2 interfaces problem with default route
  • From: Patrick Chemla <patrick.chemla@xxxxxxxxxxxxxx>
• [Announce] NuFW 2.4.0 is available
  • From: Eric Leblond <eric@xxxxxx>
• Re: nf_ct_h323: incomplete TPKT (fragmented?)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Packets ending up in wrong chain after DNAT
  • From: Dion Kant <msn@xxxxxxxxxx>
• nf_ct_h323: incomplete TPKT (fragmented?)
  • From: Kapetanakis Giannis <bilias@xxxxxxxxxxxxxxxxxx>
• Re: Packets ending up in wrong chain after DNAT
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: Packets ending up in wrong chain after DNAT
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Using NFQUEUE from userspace with seteuid
  • From: backup95 <backup95@xxxxxxxxxx>
• Packets ending up in wrong chain after DNAT
  • From: Dion Kant <msn@xxxxxxxxxx>
• Re: LART mailing list substitute
  • From: Pasi Kärkkäinen <pasik@xxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Tim Gardner <timg@xxxxxxx>
• Re: Using NFQUEUE from userspace with seteuid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• AW: module owner does not work
  • From: "Lentes, Bernd" <bernd.lentes@xxxxxxxxxxxxxxxxxxxxx>
• Re: module owner does not work
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: module owner does not work
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• module owner does not work
  • From: "Lentes, Bernd" <bernd.lentes@xxxxxxxxxxxxxxxxxxxxx>
• Using NFQUEUE from userspace with seteuid
  • From: backup95 <backup95@xxxxxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Tim Gardner <timg@xxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Tim Gardner <timg@xxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Tim Gardner <timg@xxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: Is there some reason why IPSET kernel modules are not in kernel source?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: Howto match the 3rd packet in the 3way handshake
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: INVALID state
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Howto match the 3rd packet in the 3way handshake
  • From: Nemeth Denes <nemeth.denes@xxxxxxxxxx>
• Re: sync flood and resource utilization .
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: INVALID state
  • From: Nemeth Denes <nemeth.denes@xxxxxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Howto match the 3rd packet in the 3way handshake
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: INVALID state
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Howto match the 3rd packet in the 3way handshake
  • From: Nemeth Denes <nemeth.denes@xxxxxxxxxx>
• INVALID state
  • From: Nemeth Denes <nemeth.denes@xxxxxxxxxx>
• Re: sync flood and resource utilization .
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: [PATCH 40/66] include/linux/netfilter/nf_conntrack_tuple_common.h: Checkpatch cleanup
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Is there some reason why IPSET kernel modules are not in kernel source?
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: linux-next netfilter: xt_recent: Add an entry reaper
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• linux-next netfilter: xt_recent: Add an entry reaper
  • From: timg@xxxxxxx (Tim Gardner)
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: "Dennis J." <dennisml@xxxxxxxxxxxx>
• [PATCH 40/66] include/linux/netfilter/nf_conntrack_tuple_common.h: Checkpatch cleanup
  • From: Andrea Gelmini <andrea.gelmini@xxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: multiport needs `-p tcp', `-p udp' - Why?
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• multiport needs `-p tcp', `-p udp' - Why?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: sync flood and resource utilization .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: sync flood and resource utilization .
  • From: <lists@xxxxxxxxxxxxxxx>
• sync flood and resource utilization .
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: iptable: obtaining list of tables?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• RE: iptable: obtaining list of tables?
  • From: Karthik Venkateswaran <Karthik.Venkateswaran@xxxxxxxxxxxxxxx>
• Re: multicast packets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: multicast packets
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Re: iptables use only one cpu core.
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: Port Scanning: Is there a difference between stateful INVALID filtering and stateless TCP flag filtering?
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: multicast packets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: multicast packets
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Re: multicast packets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• iptables use only one cpu core.
  • From: MontyRee <chulmin2@xxxxxxxxxxx>
• Re: iptable: obtaining list of tables?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: multicast packets
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Re: iptable: obtaining list of tables?
  • From: andy thomas <andy@xxxxxxxxxxxxxxxxx>
• iptable: obtaining list of tables?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• root privs for ipset help?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: multicast packets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Jiri Pirko <jpirko@xxxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: MASQUERADE and ACCEPT targets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Jiri Pirko <jpirko@xxxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Jiri Pirko <jpirko@xxxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [question] ipt_CLUSTERIP and address length
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [question] ipt_CLUSTERIP and address length
  • From: Jiri Pirko <jpirko@xxxxxxxxxx>
• Re: MASQUERADE and ACCEPT targets
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: tcp dump and DROP
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• tcp dump and DROP
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: multicast packets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: multicast packets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Is there some reason why IPSET kernel modules are not in kernel source?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: MASQUERADE and ACCEPT targets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Port Scanning: Is there a difference between stateful INVALID filtering and stateless TCP flag filtering?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: Is there some reason why IPSET kernel modules are not in kernel source?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• is there suppose to be an error message when a module is not loaded?
  • From: MargoAndTodd <margoandtodd@xxxxxxxxx>
• ip_conntrack_ftp not loading
  • From: MargoAndTodd <margoandtodd@xxxxxxxxx>
• Is there some reason why IPSET kernel modules are not in kernel source?
  • From: "U. George" <netbeans@xxxxxxxxxxxx>
• Re: multicast packets
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Re: MASQUERADE and ACCEPT targets
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• MASQUERADE and ACCEPT targets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• multicast packets
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: Query: the limit module stateless or stateful?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxxx>
• Re: Query: the limit module stateless or stateful?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Query: the limit module stateless or stateful?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxxx>
• Re: Port Scanning: Is there a difference between stateful INVALID filtering and stateless TCP flag filtering?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Port Scanning: Is there a difference between stateful INVALID filtering and stateless TCP flag filtering?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Port Scanning: Is there a difference between stateful INVALID filtering and stateless TCP flag filtering?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: Altering MTU in ICMPv6 packet too big message
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Altering MTU in ICMPv6 packet too big message
  • From: Linus Lüssing <linus.luessing@xxxxxx>
• how to disable building extensions
  • From: David Acker <dacker@xxxxxxxxxx>
• Re: [PATCH] xt_recent: Fix false hit_count match
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] xt_recent: Fix buffer overflow
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: RTSP and iptables
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• RTSP and iptables
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• Re: [PATCH] xt_recent: Fix buffer overflow
  • From: Tim Gardner <timg@xxxxxxx>
• Re: [PATCH] xt_recent: Fix buffer overflow
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] xt_recent: Fix buffer overflow
  • From: timg@xxxxxxx (Tim Gardner)
• [PATCH] xt_recent: Fix false hit_count match
  • From: timg@xxxxxxx (Tim Gardner)
• LART mailing list substitute
  • From: Richard Horton <richard.horton@xxxxxxxxxxxxxx>
• Re: Transparent http filtering VLAN traffic without being a member of tagged VLANs
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: Very basic question about nfqnl_test.c
  • From: tednolan@xxxxxxxxxxxxx
• Infinite loop in inet_csk_get_port
  • From: kapil dakhane <kdakhane@xxxxxxxxx>
• Re: Transparent http filtering VLAN traffic without being a member of tagged VLANs
  • From: Yavetskiy Yuriy <yavetskiy@xxxxxx>
• Re: Transparent http filtering VLAN traffic without being a member of tagged VLANs
  • From: Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx>
• Re: Transparent http filtering VLAN traffic without being a member of tagged VLANs
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: Transparent http filtering VLAN traffic without being a member of tagged VLANs
  • From: Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx>
• Very basic question about nfqnl_test.c
  • From: tednolan@xxxxxxxxxxxxx
• Re: Transparent http filtering VLAN traffic without being a member of tagged VLANs
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Transparent http filtering VLAN traffic without being a member of tagged VLANs
  • From: Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx>
• Infinite loop in inet_csk_get_port
  • From: kapil dakhane <kdakhane@xxxxxxxxx>
• Re: nf_conntrack_sip and nf_nat_sip can do this??
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• Re: I can't make forwarding
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: I can't make forwarding
  • From: Patrick Chemla <patrick.chemla@xxxxxxxxxxxxxx>
• I can't make forwarding
  • From: Patrick Chemla <patrick.chemla@xxxxxxxxxxxxxx>
• alter packet length
  • From: Alessandro Rizzati <alessandrorizzati@xxxxxxxx>
• Re: netfilter missing interface name
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• netfilter missing interface name
  • From: Nemeth Denes <nemeth.denes@xxxxxxxxxx>
• hashlimit not working as expected
  • From: Brian Schang <netfilter@xxxxxxxxxxxxxxxx>
• Re: Natting html traffic
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Natting html traffic
  • From: Bojan Sukalo <shukalo83@xxxxxxxxx>
• Re: Natting html traffic
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Natting html traffic
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Natting html traffic
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Natting html traffic
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Natting html traffic
  • From: Bojan Sukalo <shukalo83@xxxxxxxxx>
• Re: Natting html traffic
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Natting html traffic
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Natting html traffic
  • From: Bojan Sukalo <shukalo83@xxxxxxxxx>
• Re: Natting html traffic
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Natting html traffic
  • From: Bojan Sukalo <shukalo83@xxxxxxxxx>
• Re: Natting html traffic
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: Natting html traffic
  • From: Peter Chacko <peterchacko35@xxxxxxxxx>
• Re: Natting html traffic
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Natting html traffic
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: Natting html traffic
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Natting html traffic
  • From: Bojan Sukalo <shukalo83@xxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Does the INVALID state filter block port (nmap) scans?
  • From: Weedy <weedy2887@xxxxxxxxx>
• DNAT and 802.1q tagged bridge
  • From: Yavetskiy Yuriy <yavetskiy@xxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: performance testing iptables...
  • From: Payam Chychi <pchychi@xxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Port forwarding with iptables on tunnel interface
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Port forwarding with iptables on tunnel interface
  • From: Guido Trentalancia <guido@xxxxxxxxxxxxxxxx>
• Re: Conntrackd and UDP
  • From: Tino Keitel <tkeitel@xxxxxxxxxxxxxx>
• Re: Conntrackd and UDP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: performance testing iptables...
  • From: Eric Leblond <eric@xxxxxx>
• performance testing iptables...
  • From: Payam Chychi <pchychi@xxxxxxxxx>
• Re: Conntrackd and UDP
  • From: Tino Keitel <tkeitel@xxxxxxxxxxxxxx>
• RE: Default server DNAT port remapping problem
  • From: "He Jiafu-MPNB73" <JHe@xxxxxxxxxxxx>
• Re: Who can give me any existing iptables rules for reference?
  • From: Gerardo Fernandez <gfhgfh@xxxxxxxxx>
• Re: Default server DNAT port remapping problem
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• RE: Default server DNAT port remapping problem
  • From: "He Jiafu-MPNB73" <JHe@xxxxxxxxxxxx>
• Re: Default server DNAT port remapping problem
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Default server DNAT port remapping problem
  • From: "He Jiafu-MPNB73" <JHe@xxxxxxxxxxxx>
• rules matching whether or not connection passed through QUEUE
  • From: Peter Warasin <peter@xxxxxxxxxx>
• Re: Who can give me any existing iptables rules for reference?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: How do you correctly interpret the FORWARD chain interface options? From: Покотиленко Костик <casper@xxxxxxxxxxxx> X-Virus-Status: Clean Sender: netfilter-owner@xxxxxxxxxxxxxxx X-Mailing-List: netfilter@xxxxxxxxxxxxxxx
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Help with multiple interfaces and aliases
  • From: Flávio Costa <fcosta75@xxxxxxxxx>
• Re: How do you correctly interpret the FORWARD chain interface options?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: Who can give me any existing iptables rules for reference?
  • From: supercodeing35271 supercodeing35271 <supercodeing35271@xxxxxxxxx>
• Re: How do you correctly interpret the FORWARD chain interface options?
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: How do you correctly interpret the FORWARD chain interface options?
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: How do you correctly interpret the FORWARD chain interface options?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: How do you correctly interpret the FORWARD chain interface options?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: How do you correctly interpret the FORWARD chain interface options?
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• How do you correctly interpret the FORWARD chain interface options?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• ebtables snat-arp option not working?
  • From: Khalid Mehmood Khan <kmk_pk@xxxxxxxxx>
• Re: Does the INVALID state filter block port (nmap) scans?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: Does the INVALID state filter block port (nmap) scans?
  • From: Weedy <weedy2887@xxxxxxxxx>
• IFB usage Documentation
  • From: sss123next@xxxxxxxxx
• Re: Who can give me any existing iptables rules for reference?
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Who can give me any existing iptables rules for reference?
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Who can give me any existing iptables rules for reference?
  • From: supercodeing35271 supercodeing35271 <supercodeing35271@xxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Dan Daugherty <rescue@xxxxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Dan Daugherty <rescue@xxxxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Dan Daugherty <rescue@xxxxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Checking /active/ libnetfilter_queue
  • From: Udo Schneider <Udo.Schneider@xxxxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Dan Daugherty <rescue@xxxxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Dan Daugherty <rescue@xxxxxxxxxxxxxx>
• Re: IP Forwarding works on local port but not a remote port
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• IP Forwarding works on local port but not a remote port
  • From: Dan Daugherty <rescue@xxxxxxxxxxxxxx>
• Does the INVALID state filter block port (nmap) scans?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Reach 150k financial planners - we have this list and more
  • From: "Nichols depressor" <itwasarainyday292893@xxxxxxxxx>
• Does stateful filtering automatically prevent nmap and bogon spoofing or are stateless rules also required?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• iptables list command with very verbose option generates `ERROR' [64]
  • From: forbiddentransition <forbiddentransition@xxxxxxxxx>
• If you're looking for a decent marketing list we probably have it
  • From: "logarithm Waters" <judy34@xxxxxxxxx>
• Re: IPV6 and Pre/post routing
  • From: Joerg Dorchain <joerg@xxxxxxxxxxxx>
• Re: [patch 1/1] net/ipv4/netfilter/nf_nat_snmp_basic.c: correct the size argument to kzalloc
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch 1/1] net/ipv4/netfilter/nf_nat_snmp_basic.c: correct the size argument to kzalloc
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• Re: [patch 1/1] net/ipv4/netfilter/nf_nat_snmp_basic.c: correct the size argument to kzalloc
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• RE: IPV6 and Pre/post routing
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• RE: IPV6 and Pre/post routing
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• [patch 1/1] net/ipv4/netfilter/nf_nat_snmp_basic.c: correct the size argument to kzalloc
  • From: akpm@xxxxxxxxxxxxxxxxxxxx
• RE: IPV6 and Pre/post routing
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: Regarding Iptables Redirect Target rule
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: IPV6 and Pre/post routing
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• IPV6 and Pre/post routing
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• List issue.
  • From: Juan Antonio <pushakk@xxxxxxxxxxxx>
• RE: RE: Re: How to debug RST filter ?
  • From: a.schild@xxxxxxxxxxx
• RE: Re: How to debug RST filter ?
  • From: "Andre Schild" <a.schild@xxxxxxxxxxx>
• Regarding Iptables Redirect Target rule
  • From: Vikram Ragukumar <vragukumar@xxxxxxxxxxxxxx>
• policy based routing - leaking packets
  • From: Serg Buslovsky <serg.buslovsky@xxxxxxxxx>
• Re: How to debug RST filter ?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: How to debug RST filter ?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: [REPORT] may be wrong place #endif in include/linux/netfilter_ipv4.h
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: multiple external IP's - virtual NIC - DNAT problems
  • From: <koen.news@xxxxxxx>
• RE: Re: How to debug RST filter ?
  • From: a.schild@xxxxxxxxxxx
• Re: How to debug RST filter ?
  • From: Remzi AKYÜZ <linuxliste@xxxxxxxxx>
• How to debug RST filter ?
  • From: "Andre Schild" <a.schild@xxxxxxxxxxx>
• Re: multiple public ips to multiple internal ips
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Re: [REPORT] may be wrong place #endif in include/linux/netfilter_ipv4.h
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: multiple public ips to multiple internal ips
  • From: Patrick Chemla <patrick.chemla@xxxxxxxxxxxxxx>
• [REPORT] may be wrong place #endif in include/linux/netfilter_ipv4.h
  • From: "Helight.Xu" <helight.xu@xxxxxxxxx>
• multiple public ips to multiple internal ips
  • From: Patrick Chemla <patrick.chemla@xxxxxxxxxxxxxx>
• Re: multiple external IP's - virtual NIC - DNAT problems
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• NF_STOLEN and reinsert in to IP stack
  • From: Susant Sahani <ssahani@xxxxxxxxx>
• NF_STOLEN and re-insert in to IP stack
  • From: Susant Sahani <ssahani@xxxxxxxxx>
• nf_reinject crashes after NF_STOLEN
  • From: Susant Sahani <ssahani@xxxxxxxxx>
• Re: multiple external IP's - virtual NIC - DNAT problems
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Re: multiple external IP's - virtual NIC - DNAT problems
  • From: koen.news@xxxxxxx
• Re: multiple external IP's - virtual NIC - DNAT problems
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• NF_STOLEN and reinsert in to IP stack
  • From: Susant Sahani <ssahani@xxxxxxxxx>
• multiple external IP's - virtual NIC - DNAT problems
  • From: <koen.news@xxxxxxx>