Linux TCP/IP Netfilter

• Thread Index

• Re: fwmark & iptables
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: fwmark & iptables
  • From: Matt Hakim <thepigs@xxxxxxxxx>
• Re: fwmark & iptables
  • From: Matt Hakim <thepigs@xxxxxxxxx>
• Re: fwmark & iptables
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: fwmark & iptables
  • From: Matt Hakim <thepigs@xxxxxxxxx>
• Re: fwmark & iptables
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: fwmark & iptables
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• fwmark & iptables
  • From: Matt Hakim <thepigs@xxxxxxxxx>
• Re: NOTRACK not working
  • From: "Dennis J." <dennisml@xxxxxxxxxxxx>
• Re: How to create rule from log file information ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: NOTRACK not working
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: NOTRACK not working
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: NOTRACK not working
  • From: "Dennis J." <dennisml@xxxxxxxxxxxx>
• Re: NOTRACK not working
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• RE: NOTRACK not working
  • From: "Steven Kath" <steven.kath@xxxxxxxxxx>
• Re: NOTRACK not working
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• NOTRACK not working
  • From: "Dennis J." <dennisml@xxxxxxxxxxxx>
• Re: How to create rule from log file information ?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: How to create rule from log file information ?
  • From: Alessandro Vesely <vesely@xxxxxxx>
• How to create rule from log file information ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: Can iptables control what internal LAN clients can configure the Firewall over UPnP?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: Can iptables control what internal LAN clients can configure the Firewall over UPnP?
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Can iptables control what internal LAN clients can configure the Firewall over UPnP?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Can iptables filter WiFi Clients?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• How to detect nmap scan ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: limit module not working with drop policy
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset-4.2 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: limit module not working with drop policy
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: limit module not working with drop policy
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: limit module not working with drop policy
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: limit module not working with drop policy
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• iptables 1.4.1.1 crashes
  • From: Konrad Toczylowski <konrad@xxxxxxxxxxxxxxxx>
• Re: iptables MARK + ip rule fwmark on locally generated packets
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: iptables MARK + ip rule fwmark on locally generated packets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• SOLVED: iptables MARK + ip rule fwmark on locally generated packets
  • From: Fredrik Ax <frax@xxxxxxxx>
• Re: iptables MARK + ip rule fwmark on locally generated packets
  • From: Fredrik Ax <frax@xxxxxxxx>
• Re: iptables MARK + ip rule fwmark on locally generated packets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables MARK + ip rule fwmark on locally generated packets
  • From: Fredrik Ax <frax@xxxxxxxx>
• Re: iptables MARK + ip rule fwmark on locally generated packets
  • From: Fredrik Ax <frax@xxxxxxxx>
• Re: iptables MARK + ip rule fwmark on locally generated packets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• iptables MARK + ip rule fwmark on locally generated packets
  • From: Fredrik Ax <frax@xxxxxxxx>
• Re: limit module not working with drop policy
  • From: Remzi AKYÜZ <linuxliste@xxxxxxxxx>
• limit module not working with drop policy
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• BUG: iptables-save: getlong_opt missing one argument
  • From: Lucas Fernando Vasconcelos de Arruda Amorim <lf.amorim@xxxxxxxxxxxx>
• Selective disabling of martian filtering?
  • From: "Dennis J." <dennisml@xxxxxxxxxxxx>
• Re: SNAT and FIN/ACK packets after a long time
  • From: Carsten Aulbert <carsten.aulbert@xxxxxxxxxx>
• Re: SNAT and FIN/ACK packets after a long time
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• SNAT and FIN/ACK packets after a long time
  • From: Carsten Aulbert <carsten.aulbert@xxxxxxxxxx>
• Netfilter packet flow and VLANs
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• --uid-owner question
  • From: Serg Buslovsky <serg.buslovsky@xxxxxxxxx>
• Re: filtering based on MAC address prefix
  • From: Maximilian Wilhelm <max@xxxxxxxxxxx>
• Re: filtering based on MAC address prefix
  • From: Eray Aslan <eray.aslan@xxxxxxxxxx>
• Re: filtering based on MAC address prefix
  • From: Daniel Drake <dsd@xxxxxxxxxx>
• Re: filtering based on MAC address prefix
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Iptables without ipt_state using xt_state
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: filtering based on MAC address prefix
  • From: Eray Aslan <eray.aslan@xxxxxxxxxx>
• filtering based on MAC address prefix
  • From: Daniel Drake <dsd@xxxxxxxxxx>
• Re: SNAT - matching original and natted IP addresses
  • From: Leonardo Rodrigues <leolistas@xxxxxxxxxxxxxx>
• SNAT - matching original and natted IP addresses
  • From: Shirley Ong <soap6gal@xxxxxxxxx>
• BUG? iptables --datestop inconsistent behaviour
  • From: Karel Rericha <karel@xxxxxxxxx>
• Re: nf_conntrack_sip and nf_nat_sip can do this??
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Double NAT port forward
  • From: Henno Täht <henno.taht@xxxxxxxx>
• Re: Double NAT port forward
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: nf_conntrack_sip and nf_nat_sip can do this??
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Double NAT port forward
  • From: Henno Täht <henno.taht@xxxxxxxx>
• Re: nf_conntrack_sip and nf_nat_sip can do this??
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nf_conntrack_sip and nf_nat_sip can do this??
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• How do I test a libnetfilter_queue program?
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Re: nf_conntrack_sip and nf_nat_sip can do this??
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nf_conntrack_sip and nf_nat_sip can do this??
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• Re: Iptables without ipt_state using xt_state
  • From: FiloSottile <filosottile.wiki@xxxxxxxxx>
• find_best_ips_proto ??
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: nf_conntrack_sip and nf_nat_sip can do this??
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Iptables without ipt_state using xt_state
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• hashlimit rule problem with port 80
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: Iptables without ipt_state using xt_state
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Iptables without ipt_state using xt_state
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Iptables without ipt_state using xt_state
  • From: FiloSottile <filosottile.wiki@xxxxxxxxx>
• Re: Iptables without ipt_state using xt_state
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: state module is deprecated?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Iptables without ipt_state using xt_state
  • From: FiloSottile <filosottile.wiki@xxxxxxxxx>
• state module is deprecated?
  • From: Andrew Fedorov <dmmdrs@xxxxxxxxx>
• Re: REJECT as a default policy
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: REJECT as a default policy
  • From: Lars Nooden <lars.curator@xxxxxxxxx>
• Re: REJECT as a default policy
  • From: Lars Nooden <lars.curator@xxxxxxxxx>
• Re: [ Siccess ]How to protect apache benchmarking attack ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: How to protect apache benchmarking attack ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: How to protect apache benchmarking attack ?
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• NF_QUEUE and NF_ACCEPT
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Re: How to protect apache benchmarking attack ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• How to protect apache benchmarking attack ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: REJECT as a default policy
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• RE: REJECT as a default policy
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: REJECT as a default policy
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• RE: REJECT as a default policy
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• nf_conntrack_sip and nf_nat_sip can do this??
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• REJECT as a default policy
  • From: Lars Nooden <lars.curator@xxxxxxxxx>
• Re: [PATCH] net/netfilter/xt_osf.c: Change %pi4 to %pI4
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/8] net/netfilter/ipvs/ip_vs_ftp.c: Use standardized format in sprintf
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 5/8] net/ipv4/netfilter/nf_nat_ftp.c: Remove (*mangle[]) array and functions, use %pI4
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Test
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• nf_conntrack_sip and sip_direct_signalling option
  • From: François Legal <devel@xxxxxxxxxxxxxx>
• tunneling ftp
  • From: Thomas <thomas@xxxxxxxxxxxxx>
• Re: sequence numbers in conntrack
  • From: Nemeth Denes <nemeth.denes@xxxxxxxxxx>
• Re: sequence numbers in conntrack
  • From: Nemeth Denes <nemeth.denes@xxxxxxxxxx>
• Re: sequence numbers in conntrack
  • From: vishesh <linuxtovishesh@xxxxxxxxx>
• sequence numbers in conntrack
  • From: Nemeth Denes <nemeth.denes@xxxxxxxxxx>
• What is the "nice" priority of the code runing iptables?
  • From: "Покотиленко Костик" <casper@xxxxxxxxxxx>
• Re: Is it possible to queue same packet into two IMQ interfaces sequentially?
  • From: "Покотиленко Костик" <casper@xxxxxxxxxxx>
• Re: passive mode ftp high ports driving me nuts
  • From: MargoAndTodd <margoandtodd@xxxxxxxxx>
• Re: passive mode ftp high ports driving me nuts
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: passive mode ftp high ports driving me nuts
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: passive mode ftp high ports driving me nuts
  • From: MargoAndTodd <margoandtodd@xxxxxxxxx>
• Re: Is it possible to queue same packet into two IMQ interfaces sequentially?
  • From: "Покотиленко Костик" <casper@xxxxxxxxxxx>
• Re: passive mode ftp high ports driving me nuts
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: conntrack -F not flushing the table
  • From: Elison Niven <elison.niven@xxxxxxxxx>
• Re: passive mode ftp high ports driving me nuts
  • From: MargoAndTodd <margoandtodd@xxxxxxxxx>
• Re: passive mode ftp high ports driving me nuts
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• passive mode ftp high ports driving me nuts
  • From: MargoAndTodd <margoandtodd@xxxxxxxxx>
• Re: what should I use for "unassigned" ports?
  • From: MargoAndTodd <margoandtodd@xxxxxxxxx>
• Re: conntrack -F not flushing the table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: what should I use for "unassigned" ports?
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: How do I read my state from this log?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: what should I use for "unassigned" ports?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• [PATCH] net/netfilter/xt_osf.c: Change %pi4 to %pI4
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Query regarding libnetfilter_queue usage
  • From: Vikram Ragukumar <vragukumar@xxxxxxxxxxxxxx>
• Is it possible to queue same packet into two IMQ interfaces sequentially?
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: what should I use for "unassigned" ports?
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• How do I read my state from this log?
  • From: MargoAndTodd <margoandtodd@xxxxxxxxx>
• [PATCH v2 5/8] net/ipv4/netfilter/nf_nat_ftp.c: Remove (*mangle[]) array and functions, use %pI4
  • From: Joe Perches <joe@xxxxxxxxxxx>
• what should I use for "unassigned" ports?
  • From: Anthony Ewell <amewell@xxxxxxxxxxx>
• conntrack -F not flushing the table
  • From: Elison Niven <elison.niven@xxxxxxxxx>
• Re: iptables for bandwidth tracking
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: iptables for bandwidth tracking
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: Squid Redirection
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Squid Redirection
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• iptables for bandwidth tracking
  • From: Michael Nguyen <iptables@xxxxxxxxxxxxx>
• Re: [PATCH 6/8] net/netfilter/ipvs/ip_vs_ftp.c: Use standardized format in sprintf
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 5/8] net/ipv4/netfilter/nf_nat_ftp.c: Convert NIPQUAD to %pI4
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH 6/8] net/netfilter/ipvs/ip_vs_ftp.c: Use standardized format in sprintf
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH 0/8] Remove most uses of NIPQUAD and NIPQUAD_FMT
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: Squid Redirection
  • From: Kenneth Sande <sandekt@xxxxxxxxxx>
• Re: Squid Redirection
  • From: Aaron Clausen <mightymartianca@xxxxxxxxx>
• Re: Squid Redirection
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: Squid Redirection
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: How to block nessus ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• How to block nessus ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: Squid Redirection
  • From: Kenneth Sande <sandekt@xxxxxxxxxx>
• Squid Redirection
  • From: Aaron Clausen <mightymartianca@xxxxxxxxx>
• Re: nf_conntrack_pptp with multiple clients
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• nf_conntrack_pptp with multiple clients
  • From: ml ml <mliebherr99@xxxxxxxxxxxxxx>
• Re: [PATCH 5/5] net/ipv4 : Correct the size argument to kzalloc
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Why "No buffer space available"?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Why "No buffer space available"?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ebtables broute DROP problem in production environment
  • From: Felipe W Damasio <felipewd@xxxxxxxxx>
• Re: ebtables broute DROP problem in production environment
  • From: Felipe W Damasio <felipewd@xxxxxxxxx>
• Re: Understanding conntrack: Delete and manual readd of same entry possible?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5] net/ipv4 : Correct the size argument to kzalloc
  • From: Julia Lawall <julia@xxxxxxx>
• Re: Understanding conntrack: Delete and manual readd of same entry possible?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Understanding conntrack: Delete and manual readd of same entry possible?
  • From: Roman Fiedler <roman.fiedler@xxxxxxxxx>
• Why "No buffer space available"?
  • From: Medialy <medialy@xxxxxxxxx>
• [ANNOUNCE] conntrack-tools 0.9.14 released
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: LED trigger in iptables
  • From: Mekabe Ramein <mrmrmrmr@xxxxxxxxx>
• Re: ebtables broute DROP problem in production environment
  • From: Felipe W Damasio <felipewd@xxxxxxxxx>
• Re: Mapping external to internal IP addresses
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: conntrack-tools: conntrack -L --> Operation failed: Connection refused
  • From: Lorenzo Allegrucci <lorenzo.allegrucci@xxxxxxxxxxxx>
• payload length
  • From: basteon <basteon@xxxxxxxxx>
• Re: conntrack-tools: conntrack -L --> Operation failed: Connection refused
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Understanding conntrack: Delete and manual readd of same entry possible?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ebtables broute DROP problem in production environment
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Mapping external to internal IP addresses
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 0.0.101 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• net POSTROUTING with NFQUEUE
  • From: "Demetrios J. Tsillas" <jtsillas@xxxxxxxxxxxx>
• ebtables broute DROP problem in production environment
  • From: Felipe W Damasio <felipewd@xxxxxxxxx>
• Re: Mapping external to internal IP addresses
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Mapping external to internal IP addresses
  • From: Nick Peirson <npeirson@xxxxxxxxxxxxxxxxxxxx>
• Re: [SOLVED] Re: IPv6 forwarding to TAP-interface fails
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: IPTABLES and NATTING
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• table full, dropping packets when forwarding
  • From: Elison Niven <elison.niven@xxxxxxxxx>
• Re: IPTABLES and NATTING
  • From: Ajith Adapa <adapa.ajith@xxxxxxxxx>
• IPTABLES and NATTING
  • From: Ajith Adapa <adapa.ajith@xxxxxxxxx>
• iptable - string matching - from to offset values
  • From: "Suganthi K" <sukandas@xxxxxxxxx>
• [SOLVED] Re: IPv6 forwarding to TAP-interface fails
  • From: Mike Kazantsev <mk.fraggod@xxxxxxxxx>
• Re: u32 question
  • From: Michal Soltys <soltys@xxxxxxxx>
• Re: IPv6 forwarding to TAP-interface fails
  • From: Mike Kazantsev <mk.fraggod@xxxxxxxxx>
• Re: u32 question
  • From: don-nfil2@xxxxxxxxxxxxxxxx (Don Cohen)
• Re: u32 question
  • From: Michal Soltys <soltys@xxxxxxxx>
• Re: Returning nat packets vanishing after mangle:PREROUTING and conntrack processing
  • From: Scott Shambarger <scott-netfilter@xxxxxxxxxxxxxx>
• u32 question
  • From: don-nfil2@xxxxxxxxxxxxxxxx (Don Cohen)
• u32 question
  • From: don-nfil2@xxxxxxxxxxxxxxxx (Don Cohen)
• Re: u32 question
  • From: don-temp288@xxxxxxxxxxxxxxxx (Don Cohen)
• Re: Returning nat packets vanishing after mangle:PREROUTING and conntrack processing
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Returning nat packets vanishing after mangle:PREROUTING and conntrack processing
  • From: Scott Shambarger <scott-netfilter@xxxxxxxxxxxxxx>
• Re: IPv6 forwarding to TAP-interface with ip6tables fails
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Returning nat packets vanishing after mangle:PREROUTING and conntrack processing
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• IPv6 forwarding to TAP-interface with ip6tables fails
  • From: Mike Kazantsev <mk.fraggod@xxxxxxxxx>
• Returning nat packets vanishing after mangle:PREROUTING and conntrack processing
  • From: Scott Shambarger <scott-netfilter@xxxxxxxxxxxxxx>
• Re: SIP vs NAT, the configuration
  • From: Lorenzo Allegrucci <lorenzo.allegrucci@xxxxxxxxxxxx>
• What's the default NAT type by using MASQUERADE target.
  • From: Sharevon <sharevon@xxxxxxxxx>
• Re: SIP vs NAT, the configuration
  • From: Lorenzo Allegrucci <lorenzo.allegrucci@xxxxxxxxxxxx>
• Re: SIP vs NAT, the configuration
  • From: Lorenzo Allegrucci <lorenzo.allegrucci@xxxxxxxxxxxx>
• SIP vs NAT, the configuration
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• connection tracking module
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• Does someone have statistics about/experience with tc/qdisk on a few hundred ppp interfaces?
  • From: Richard Hartmann <richih.mailinglist@xxxxxxxxx>
• Re: conntrack_sip messages showing up in 2.6.32
  • From: Joerg Dorchain <joerg@xxxxxxxxxxxx>
• SNAT and QUEUE target problem for IPv4 in IPv6 encapsulation
  • From: Tanguy Ropitault <tanguy.ropitault@xxxxxxxxxxxxxxxxxxx>
• Selecting -m recent --seconds values
  • From: "System Support" <support@xxxxxxxxxxxxxxxxxxx>
• Re: conntrack_sip messages showing up in 2.6.32
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• multi homed linux router configuration
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: ip_forwarding in a more restricted way
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• nf_conntrack_sip and nf_nat_sip not working
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• Re: ip_forwarding in a more restricted way
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• ip_forwarding in a more restricted way
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: KVM related crash
  • From: Avi Kivity <avi@xxxxxxxxxx>
• Re: KVM related crash
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• conntrack_sip messages showing up in 2.6.32
  • From: Joerg Dorchain <joerg@xxxxxxxxxxxx>
• SIP Helper
  • From: François Legal <devel@xxxxxxxxxxxxxx>
• slip interfaces
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• RTP traffic and nf_conntrack_sip
  • From: Lorenzo Allegrucci <lorenzo.allegrucci@xxxxxxxxxxxx>
• Re: Iptables 1.3.6 outgoing dns issue
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• configure iptables on lo for transparent proxy avoiding infinite loops
  • From: Gurvan Le Guernic <gleguern@xxxxxxxxx>
• [ANNOUNCE]: Release of iptables-1.4.6
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Iptables 1.3.6 outgoing dns issue
  • From: "M. Arts - Rootnet" <marco@xxxxxxxxxx>
• Re: can single linux box with dual gateway provide two separate connection ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: [PATCH] tcp: documents timewait refcnt tricks
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] tcp: Fix a connect() race with timewait sockets
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] tcp: Fix a connect() race with timewait sockets
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Observations from a new user
  • From: "System Support" <support@xxxxxxxxxxxxxxxxxxx>
• Re: can single linux box with dual gateway provide two separate connection ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Netfilter injects network headers?
  • From: Aviad Lahav <aviad.lahav@xxxxxxxxx>
• Re: [PATCH] tcp: documents timewait refcnt tricks
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxx>
• Dynamic bidirectinal nat. Possible ?
  • From: Ilya Barsukov <mzfk.0xff@xxxxxxxxx>
• [PATCH] tcp: documents timewait refcnt tricks
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: Slava Garaschenko <slava@xxxxxxxxxxxxxxxxxxxxx>
• can single linux box with dual gateway provide two separate connection ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: Slava Garaschenko <slava@xxxxxxxxxxxxxxxxxxxxx>
• Re: nat problem: What's so special with traffic from audibank.de?
  • From: Lars Täuber <lars.taeuber@xxxxxxx>
• Re: nat problem: What's so special with traffic from audibank.de?
  • From: Lars Täuber <lars.taeuber@xxxxxxx>
• Re: [PATCH 1/2] tcp: Fix a connect() race with timewait sockets
  • From: Evgeniy Polyakov <zbr@xxxxxxxxxxx>
• Libnetfilter_queue: Queue sets up seemingly fine but it doesn't receive packets
  • From: Ahmed Tarek Megerisi <tarek.megerisi@xxxxxxxxxxxxxx>
• Re: match SIP & RTP packets
  • From: Lorenzo Allegrucci <lorenzo.allegrucci@xxxxxxxxxxxx>
• [PATCH 2/2] tcp: Fix a connect() race with timewait sockets
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 1/2] tcp: Fix a connect() race with timewait sockets
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 0/2] tcp: Fix connect() races with timewait sockets
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: SNMP conntrack module a la netbios_ns
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: SNMP conntrack module a la netbios_ns
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• SNMP conntrack module a la netbios_ns
  • From: Tim Waugh <twaugh@xxxxxxxxxx>
• Re: [PATCH] tcp: fix a timewait refcnt race
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] tcp: fix a timewait refcnt race
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: LED trigger in iptables
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nat problem: What's so special with traffic from audibank.de?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] tcp: fix a timewait refcnt race
  • From: kapil dakhane <kdakhane@xxxxxxxxx>
• Re: [PATCH] tcp: fix a timewait refcnt race
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse
  • From: Evgeniy Polyakov <zbr@xxxxxxxxxxx>
• Re: nat problem: What's so special with traffic from audibank.de?
  • From: Lars Täuber <lars.taeuber@xxxxxxx>
• Re: LED trigger in iptables
  • From: Mekabe Ramein <mrmrmrmr@xxxxxxxxx>
• Re: nat problem: What's so special with traffic from audibank.de?
  • From: Mattias Rönnblom <hofors@xxxxxxxxxxxxxx>
• SNAT on local interfaces?
  • From: Dave Malhotra <davemalhotra@xxxxxxxxx>
• NAT issue, help
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• nat problem: What's so special with traffic from audibank.de?
  • From: Lars Täuber <lars.taeuber@xxxxxxx>
• Re: match SIP & RTP packets
  • From: Ming-Ching Tiew <mctiew@xxxxxxxxx>
• Re: match SIP & RTP packets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] tcp: fix a timewait refcnt race
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: pinging and routing tables
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] tcp: Fix a connect() race with timewait sockets
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] tcp: Fix a connect() race with timewait sockets
  • From: kapil dakhane <kdakhane@xxxxxxxxx>
• match SIP & RTP packets
  • From: Lorenzo Allegrucci <lorenzo.allegrucci@xxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse
  • From: Evgeniy Polyakov <zbr@xxxxxxxxxxx>
• Re: [PATCH] tcp: Fix a connect() race with timewait sockets
  • From: kapil dakhane <kdakhane@xxxxxxxxx>
• Re: [PATCH] tcp: Fix a connect() race with timewait sockets
  • From: Ashwani Wason <ashwas@xxxxxxxxx>
• [PATCH net-next-2.6] tcp: connect() race with timewait reuse
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Re: bonding-related problem with DNAT/SNAT
  • From: "Craig Craig" <craig@xxxxxxxxxxxx>
• Re: [PATCH] tcp: Fix a connect() race with timewait sockets
  • From: Evgeniy Polyakov <zbr@xxxxxxxxxxx>
• Re: [PATCH] tcp: Fix a connect() race with timewait sockets
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] tcp: Fix a connect() race with timewait sockets
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] tcp: Fix a connect() race with timewait sockets
  • From: David Miller <davem@xxxxxxxxxxxxx>
• RE: FTP port mode, client and server behind iptables
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• [PATCH] tcp: Fix a connect() race with timewait sockets
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: FTP port mode, client and server behind iptables
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Xtables-addons 1.20 is out
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: FTP port mode, client and server behind iptables
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: soft lockup in inet_csk_get_port
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• netfilter queue
  • From: ratheesh k <ratheesh.ksz@xxxxxxxxx>
• soft lockup in inet_csk_get_port
  • From: kapil dakhane <kdakhane@xxxxxxxxx>
• pinging and routing tables
  • From: sinkyh@xxxxxxxxxxxxx
• FTP port mode, client and server behind iptables
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• help with ip-conntrack-sip
  • From: rebeca.martinez-garcia@xxxxxxxxxxxxxxxxx
• Re: IPTABLES do not work without ROUTE exist ?!
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• IPTABLES do not work without ROUTE exist ?!
  • From: "kapetr" <kapetr@xxxxxxxxx>
• Help with BR_POSTROUTING hack
  • From: Alessio Cimmino <rainmaker85@xxxxxxxxx>
• Re: conntrack/state with QUEUE target
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: LED trigger in iptables
  • From: Mekabe Ramein <mrmrmrmr@xxxxxxxxx>
• [patch] iptables.8 - add UNTRACKED state
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: conntrack/state with QUEUE target
  • From: Udo Schneider <Udo.Schneider@xxxxxxxxxxxxxx>
• conntrack/state with QUEUE target
  • From: Udo Schneider <Udo.Schneider@xxxxxxxxxxxxxx>
• Re: LED trigger in iptables
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: LED trigger in iptables
  • From: Mekabe Ramein <mrmrmrmr@xxxxxxxxx>
• Re: An ping issue on Linux kernel 2.6.25
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: An ping issue on Linux kernel 2.6.25
  • From: Saikiran Madugula <hummerbliss@xxxxxxxxx>
• An ping issue on Linux kernel 2.6.25
  • From: jiazhida 00102231 <jiazhida@xxxxxxxxxx>
• Re: bonding-related problem with DNAT/SNAT
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• LED trigger in iptables
  • From: Mekabe Ramein <mrmrmrmr@xxxxxxxxx>
• Firewallrules for a gentoo box with 4 nics
  • From: homer_2008@xxxxxxx
• bonding-related problem with DNAT/SNAT
  • From: "Craig Craig" <craig@xxxxxxxxxxxx>
• Re: arptables v0.0.8: no hln defined
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• arptables v0.0.8: no hln defined
  • From: Claus Wimmer <Claus.Wimmer@xxxxxx>
• Re: Spontaneous reboot after change ip_pkt_list_tot - deb
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Spontaneous reboot after change ip_pkt_list_tot - deb
  • From: "M. Arts - Rootnet" <marco@xxxxxxxxxx>
• Xtables-addons 1.20 is out
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Fwd: Is there a tool can modified mac address?
  • From: IaMaPlAyEr <iamaplayer@xxxxxxxxx>
• Re: BUG: soft lockup detected on CPU#6!
  • From: Eric Leblond <eric@xxxxxx>
• BUG: soft lockup detected on CPU#6!
  • From: "Tim Fennelly" <tfennelly@xxxxxxxx>
• RE: Disabling conntrack for local net
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: Help deleting a rule
  • From: Paul Evans <paul@xxxxxxxxxxxxx>
• Re: iptables/when loading a webpage, get subsequent firewall block(s)?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Disabling conntrack for local net
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• RE: Disabling conntrack for local net
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: Help deleting a rule
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Help deleting a rule
  • From: Cameron Smith <velvetpixel@xxxxxxxxx>
• Re: iptables/when loading a webpage, get subsequent firewall block(s)?
  • From: Justin Piszcz <jpiszcz@xxxxxxxxxxxxxxx>
• connmark expire after X bytes
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• Re: iptables/when loading a webpage, get subsequent firewall block(s)?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• iptables/when loading a webpage, get subsequent firewall block(s)?
  • From: Justin Piszcz <jpiszcz@xxxxxxxxxxxxxxx>
• structure padding mismatches
  • From: Byoungyoung Lee <override@xxxxxxxxxxxxx>
• Raising the recent module lib_pkt_list_tot
  • From: "M. Arts - Rootnet" <marco@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 4.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 4.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 4.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 4.0 released
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 4.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?
  • From: Richard Horton <richard.horton@xxxxxxxxxxxxxx>
• Ip Conntrack rare problem
  • From: "Juan Antonio" <pushakk@xxxxxxxxxxxx>
• Target in two chains simultaneously
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• [ANNOUNCE] ipset 4.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?
  • From: Ralph de Boom <lkml@xxxxxxxxxx>
• Re: ip forwarding issue with dual gateway
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: ip forwarding issue with dual gateway
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: ip forwarding issue with dual gateway
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: ssh tunnel to port forwarded over localhost
  • From: "/dev/rob0" <rob0@xxxxxxxxx>
• Re: When writing rules for multiple sequenced firewalls, does the source IP of client need to be modified at each firewall
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: When writing rules for multiple sequenced firewalls, does the source IP of client need to be modified at each firewall
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• When writing rules for multiple sequenced firewalls, does the source IP of client need to be modified at each firewall
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• TCPMSS - valid only in mangle table?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Round robin load balance to local port range
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Round robin load balance to local port range
  • From: Kapetanakis Giannis <bilias@xxxxxxxxxxxxxxxxxx>
• Re: [HELP] forward ppp0 to eth1
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Round robin load balance to local port range
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Round robin load balance to local port range
  • From: Kapetanakis Giannis <bilias@xxxxxxxxxxxxxxxxxx>
• ip forwarding issue with dual gateway
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?
  • From: Ralph de Boom <lkml@xxxxxxxxxx>
• Re: SNAT with ipsec => return packets not de-natted
  • From: Jari Laurila <jari.laurila@xxxxxxxxx>
• [HELP] forward ppp0 to eth1
  • From: Sandy Sumitro <sandysumitro@xxxxxxxxx>
• Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?
  • From: Richard Horton <richard.horton@xxxxxxxxxxxxxx>
• Re: force a MAC to have one IP
  • From: Karel Rericha <karel@xxxxxxxxx>
• Re: SNAT with ipsec => return packets not de-natted
  • From: Jari Laurila <jari.laurila@xxxxxxxxx>
• force a MAC to have one IP
  • From: Rakotomandimby Mihamina <mihamina@xxxxxxxxxx>
• Re: HTTP Access Blocked After iptables Update
  • From: "JR" <jdnromao@xxxxxxxxx>
• Re: HTTP Access Blocked After iptables Update
  • From: "JR" <jdnromao@xxxxxxxxx>
• Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?
  • From: Ralph de Boom <lkml@xxxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: Javier Almillategui <jalmillategui@xxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Automatic DNAT+SNAT fixup
  • From: Paul Evans <paul@xxxxxxxxxxxxx>
• Re: nftables status
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• nftables status
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: ipt ROUTE
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?
  • From: Ralph de Boom <lkml@xxxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: SNAT with ipsec => return packets not de-natted
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• ipt ROUTE
  • From: aidan mcgurn <a_mcgurn@xxxxxxxxxxx>
• Re: kernel panic when adding QUEUE to OUTGOING
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• kernel panic when adding QUEUE to OUTGOING
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: HTTP Access Blocked After iptables Update
  • From: Saikiran Madugula <hummerbliss@xxxxxxxxx>
• Re: HTTP Access Blocked After iptables Update
  • From: "JR" <jdnromao@xxxxxxxxx>
• Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?
  • From: Ralph de Boom <lkml@xxxxxxxxxx>
• Re: HTTP Access Blocked After iptables Update
  • From: "fakessh@xxxxxxxxxx" <fakessh@xxxxxxxxxx>
• Re: HTTP Access Blocked After iptables Update
  • From: "JR" <jdnromao@xxxxxxxxx>
• HTTP Access Blocked After iptables Update
  • From: "JR" <jdnromao@xxxxxxxxx>
• Re: iptables ipt_ROUTE
  • From: Eray Aslan <eray.aslan@xxxxxxxxxx>
• iptables ipt_ROUTE
  • From: aidan mcgurn <a_mcgurn@xxxxxxxxxxx>
• Re: SNAT with ipsec => return packets not de-natted
  • From: Jari Laurila <jari.laurila@xxxxxxxxx>
• Do I have this correct for FTP bandwidth usage?
  • From: Jeff Jensen <jjensen@xxxxxxxxxxx>
• ebtables counters oddity
  • From: Jon Lewis <jlewis@xxxxxxxxx>
• Re: Multiple nf_bind_pf to the same protocol
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Multiple nf_bind_pf to the same protocol
  • From: Mattias Rönnblom <hofors@xxxxxxxxxxxxxx>
• Re: SNAT with ipsec => return packets not de-natted
  • From: Jari Laurila <jari.laurila@xxxxxxxxx>
• Re: Beginner Question on restricting traffic within the same subnet.
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: Beginner Question on restricting traffic within the same subnet.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Beginner Question on restricting traffic within the same subnet.
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: Beginner Question on restricting traffic within the same subnet.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Beginner Question on restricting traffic within the same subnet.
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Re: Beginner Question on restricting traffic within the same subnet.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Multiple nf_bind_pf to the same protocol
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Beginner Question on restricting traffic within the same subnet.
  • From: paddy joesoap <paddyjoesoap@xxxxxxxxx>
• Multiple nf_bind_pf to the same protocol
  • From: Mattias Rönnblom <hofors@xxxxxxxxxxxxxx>
• SNAT with ipsec => return packets not de-natted
  • From: Jari Laurila <jari.laurila@xxxxxxxxx>
• Re: correct net fitler rule
  • From: Richard Horton <richard.horton@xxxxxxxxxxxxxx>
• Re: Need POSTROUTING traversed twice or at least later
  • From: Ludovico Cavedon <ludovico.cavedon@xxxxxxxxx>
• Need POSTROUTING traversed twice or at least later
  • From: Ludovico Cavedon <ludovico.cavedon@xxxxxxxxx>
• Re: correct net fitler rule
  • From: Ralph Blach <rblach@xxxxxxxxxx>
• Re: intrapositioned and extrapositioned negation
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: explanation of the syslog LEN and WINDOW entries
  • From: Jeff Jensen <jjensen@xxxxxxxxxxx>
• Julian Anastasov netfilter and routing patches
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: 64bit MARK
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: 64bit MARK
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: 64bit MARK
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: intrapositioned and extrapositioned negation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: 64bit MARK
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: 64bit MARK
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: 64bit MARK
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: 64bit MARK
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: 64bit MARK
  • From: "John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxx>
• Re: 64bit MARK
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: 64bit MARK
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: 64bit MARK
  • From: "John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxx>
• 64bit MARK
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: intrapositioned and extrapositioned negation
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: explanation of the syslog LEN and WINDOW entries
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: explanation of the syslog LEN and WINDOW entries
  • From: Jeff Jensen <jjensen@xxxxxxxxxxx>
• Re: explanation of the syslog LEN and WINDOW entries
  • From: Jeff Jensen <jjensen@xxxxxxxxxxx>
• explanation of the syslog LEN and WINDOW entries
  • From: Jeff Jensen <jjensen@xxxxxxxxxxx>
• Re: correct net fitler rule
  • From: Richard Horton <richard.horton@xxxxxxxxxxxxxx>
• Re: correct net fitler rule
  • From: Ralph Blach <rcblach@xxxxxxxxx>
• Re: correct net fitler rule
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• correct net fitler rule
  • From: Ralph Blach <rcblach@xxxxxxxxx>
• Iptables and URLs
  • From: sgmayo@xxxxxxxxxxxxxxxxxxxxxxxxx
• Stupid on state match
  • From: Richard Horton <richard.horton@xxxxxxxxxxxxxx>
• RE: one server, two isp
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• one server, two isp
  • From: Alfredo Sánchez <Alfredo.Sanchez@xxxxx>
• Re: [PATCH] netfilter: remove CONFIG_NF_CT_ACCT
  • From: Krzysztof Oledzki <ole@xxxxxx>
• Re: [PATCH] netfilter: remove CONFIG_NF_CT_ACCT
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: remove CONFIG_NF_CT_ACCT
  • From: Jiri Kosina <jkosina@xxxxxxx>
• Fwd: IPtables and SNAT
  • From: Ajith Adapa <adapa.ajith@xxxxxxxxx>
• Re: IPtables and SNAT
  • From: Richard Horton <richard.horton@xxxxxxxxxxxxxx>
• IPtables and SNAT
  • From: codingfreak <adapa.ajith@xxxxxxxxx>
• RE: Question about conntrack
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Question about conntrack
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• Re: ssh connections stalling
  • From: Payam Chychi <pchychi@xxxxxxxxx>
• Re: ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• RE: ssh connections stalling
  • From: "Steven Kath" <steven.kath@xxxxxxxxxx>
• Re: ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• Re: simple question about state vs conntrack modules
  • From: Leonardo Rodrigues <leolistas@xxxxxxxxxxxxxx>
• RE: Disabling conntrack for local net
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: Best Kernel QoS Parameters
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• Re: Pre-routing re-write
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• Re: ssh connections stalling
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• Re: access to terminal server in DMZ with 2 isp
  • From: Vlado Drz(ík <vlado@xxxxxx>
• Re: ssh connections stalling
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• RE: ssh connections stalling
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• Re: Disabling conntrack for local net
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Disabling conntrack for local net
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Disabling conntrack for local net
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• Re: ssh connections stalling
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• ssh connections stalling
  • From: Carl Michal <michal@xxxxxxxxxxxxxx>
• Re: simple question about state vs conntrack modules
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• can't initialize iptables table `filter': Bad file descriptor
  • From: Israel Garcia <igalvarez@xxxxxxxxx>
• [PATCH] netfilter: remove CONFIG_NF_CT_ACCT
  • From: Jiri Kosina <jkosina@xxxxxxx>
• Re: A little question about the RATEEST target.
  • From: whiplash <whiplash@xxxxxxxxxxxx>
• Timeout for dynamic Nat
  • From: Tanguy Ropitault <tanguy.ropitault@xxxxxxxxxxxxxxxxxxx>
• simple question about state vs conntrack modules
  • From: Leonardo Rodrigues <leolistas@xxxxxxxxxxxxxx>
• RE: Ramdom NAT drop
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: Ramdom NAT drop
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• RE: Ramdom NAT drop
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• RE: Ramdom NAT drop
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• RE: Ramdom NAT drop
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: Query: TCP Flag Semantics post 3-way-handshake?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxx>
• Re: Query: TCP Flag Semantics post 3-way-handshake?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Query: TCP Flag Semantics post 3-way-handshake?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxx>
• filtering frames based on destiantion MAC address using ebtables
  • From: veerasena reddy <veeruyours@xxxxxxxxx>
• Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Query: TCP Flag Semantics post 3-way-handshake?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxx>
• Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Query: TCP Flag Semantics post 3-way-handshake?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxx>
• Query: TCP Flag Semantics post 3-way-handshake?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxx>
• Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxx>
• Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Ramdom NAT drop
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?
  • From: John Lister <john.lister@xxxxxxxxxxxxx>
• Re: Ramdom NAT drop
  • From: Anatoly Muliarski <x86ever@xxxxxxxxx>
• Query: Stateful parameters Explicitly and Implicitly defined, which is it?
  • From: William Fitzgerald <wfitzgerald@xxxxxxxx>
• RE: access to terminal server in DMZ with 2 isp
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• access to terminal server in DMZ with 2 isp
  • From: "alfredo" <asa@xxxxxxxxxxx>
• ebtables filtering based on destination MAC match doesn't work with FORWARD chain
  • From: veerasena reddy <veeruyours@xxxxxxxxx>
• RE: Ramdom NAT drop
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• RE: FIN packets not getting NAT-ed
  • From: "Dhyanesh Ramaiya" <dhyanesh.ramaiya@xxxxxxxxxxxx>
• Re: FIN packets not getting NAT-ed
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• intrapositioned and extrapositioned negation
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• FIN packets not getting NAT-ed
  • From: "Dhyanesh Ramaiya" <dhyanesh.ramaiya@xxxxxxxxxxxx>
• Re: transparent proxy and iptables (and ebtables) failing
  • From: Robin Wood <robin@xxxxxxxxxxxxx>
• Re: Pre-routing re-write
  • From: Kevin Bailey <ke-linux@xxxxxxxxxxxxxxxxxxxx>
• Contrack hook sees each UDP packet as a new connection but proc/net/nf_conntrack shows correctly - what am I doing wrong?
  • From: "Gareth Williams" <gwilliams@xxxxxxxxxx>
• Re: propper logging and dropping
  • From: Ralph Blach <rcblach@xxxxxxxxx>
• Re: propper logging and dropping
  • From: Ralph Blach <rcblach@xxxxxxxxx>
• how to drop an log packets
  • From: Ralph Blach <rcblach@xxxxxxxxx>
• RE: conntrack generates UDP 'ghost traffic'
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: ipt ROUTE extension
  • From: Mallika Gautam <mallika.gautam@xxxxxxxxx>
• Re: Best Kernel QoS Parameters
  • From: Lucas Willian Bocchi <challado@xxxxxxxxxxxxxxx>
• Re: Best Kernel QoS Parameters
  • From: Lucas Willian Bocchi <challado@xxxxxxxxxxxxxxx>
• Re: Best Kernel QoS Parameters
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• RE: conntrack generates UDP 'ghost traffic'
  • From: "Roderick Groesbeek" <r.groesbeek@xxxxxxxxxxxx>
• RE: conntrack generates UDP 'ghost traffic'
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: Best Kernel QoS Parameters
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• Re: A little question about the RATEEST target.
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• Re: Pre-routing re-write
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• RE: conntrack generates UDP 'ghost traffic'
  • From: "Roderick Groesbeek" <r.groesbeek@xxxxxxxxxxxx>
• Re: [OT] are my post getting thourgh
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: conntrack generates UDP 'ghost traffic'
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• RE: conntrack generates UDP 'ghost traffic'
  • From: "Roderick Groesbeek" <r.groesbeek@xxxxxxxxxxxx>
• Re: are my post getting thourgh
  • From: Bernd Petrovitsch <bernd@xxxxxxxxx>
• Re: propper logging and dropping
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• are my post getting thourgh
  • From: Ralph Blach <rcblach@xxxxxxxxx>
• propper logging and dropping
  • From: Ralph Blach <rcblach@xxxxxxxxx>
• CPU-based load balancing and IPTables
  • From: Lars Nooden <lars.curator@xxxxxxxxx>
• conntrack generates UDP 'ghost traffic'
  • From: "Roderick Groesbeek" <r.groesbeek@xxxxxxxxxxxx>
• Re: ipt ROUTE extension
  • From: Saikiran Madugula <hummerbliss@xxxxxxxxx>
• Re: ipt ROUTE extension
  • From: Mallika Gautam <mallika.gautam@xxxxxxxxx>
• Pre-routing re-write
  • From: Kevin Bailey <ke-linux@xxxxxxxxxxxxxxxxxxxx>
• Re: ipt ROUTE extension
  • From: Saikiran Madugula <hummerbliss@xxxxxxxxx>
• ipt ROUTE extension
  • From: Mallika Gautam <mallika.gautam@xxxxxxxxx>
• ssh tunnel to port forwarded over localhost
  • From: Tito <konstantin@xxxxxxxxxxx>
• Re: tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support
  • From: Michal Soltys <soltys@xxxxxxxx>
• Re: tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support
  • From: Karel Rericha <karel@xxxxxxxxx>
• Ramdom NAT drop
  • From: Gary Smith <gary.smith@xxxxxxxxxxxxx>
• Re: transparent proxy and iptables (and ebtables) failing
  • From: Robin Wood <robin@xxxxxxxxxxxxx>
• Non-blocking access to packets via queue libraries
  • From: exnix.com@xxxxxxxxx
• A little question about the RATEEST target.
  • From: whiplash <whiplash@xxxxxxxxxxxx>
• Best Kernel QoS Parameters
  • From: Lucas Willian Bocchi <challado@xxxxxxxxxxxxxxx>
• IPv4 in IPv6 encapsulator
  • From: Tanguy Ropitault <tanguy.ropitault@xxxxxxxxxxxxxxxxxxx>
• IPv4 in IPv6 encapsulator - Locally generated traffic issue
  • From: Tanguy Ropitault <tanguy.ropitault@xxxxxxxxxxxxxxxxxxx>
• Re: tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support
  • From: Michal Soltys <soltys@xxxxxxxx>
• Re: Port Forwarding
  • From: jen140@xxxxxxxxx
• Re: Port Forwarding
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Port Forwarding
  • From: Brian Austin - Standard Universal <brian@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: Port Forwarding
  • From: jen140@xxxxxxxxx
• Re: Port Forwarding
  • From: "John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxx>
• Port Forwarding
  • From: jen140@xxxxxxxxx
• Re: 2 default routes on non router
  • From: Aleksander Kamenik <aleksander@xxxxxxxxxxxxxxx>
• Re: tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support
  • From: Karel Rericha <karel@xxxxxxxxx>
• tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support
  • From: Andrei Moraru <matagou@xxxxxxxxx>
• Re: Forward traffic between two interfaces on the same host
  • From: Kostas Pelechrinis <kpele_ntua@xxxxxxxxx>
• Jumping to chains dynamically based on interface name
  • From: Tore Anderson <tore.anderson@xxxxxxxxxxxxxxxxxx>
• Forwarding link-local frames in a bridge
  • From: Zhen Lin <lowzhenlin@xxxxxxxxx>
• 2 default routes on non router
  • From: Aleksander Kamenik <aleksander@xxxxxxxxxxxxxxx>
• Re: Multiple interfaces with the same IP address
  • From: Greg Wilson-Lindberg <gwilson@xxxxxxxxxx>
• Re: Multiple interfaces with the same IP address
  • From: Rick Jones <rick.jones2@xxxxxx>
• Re: Multiple interfaces with the same IP address
  • From: Greg Wilson-Lindberg <gwilson@xxxxxxxxxx>
• Re: Multiple interfaces with the same IP address
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: Multiple interfaces with the same IP address
  • From: Rick Jones <rick.jones2@xxxxxx>
• Re: Multiple interfaces with the same IP address
  • From: Greg Wilson-Lindberg <gregw@xxxxxxxxxx>
• Re: Multiple interfaces with the same IP address
  • From: Rick Jones <rick.jones2@xxxxxx>
• pid-owner matcher
  • From: Vlad <vlad@xxxxxxxxxxx>
• Multiple interfaces with the same IP address
  • From: Greg Wilson-Lindberg <gregw@xxxxxxxxxx>
• BUG with iptables 1.4.4 IMQ and ipset patch
  • From: Epure Daniel <daniel.epure@xxxxxxxx>
• conntrack command returns zeroed src, dst, sport and dport
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: transparent proxy and iptables failing
  • From: Robin Wood <robin@xxxxxxxxxxxxx>
• Re: Forward traffic between two interfaces on the same host
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: Forward traffic between two interfaces on the same host
  • From: Richard Horton <richard.horton@xxxxxxxxxxxxxx>
• Forward traffic between two interfaces on the same host
  • From: Kostas Pelechrinis <kpele_ntua@xxxxxxxxx>
• Re: transparent proxy and iptables failing
  • From: Robin Wood <robin@xxxxxxxxxxxxx>
• Re: transparent proxy and iptables failing
  • From: Brian Austin - Standard Universal <brian@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: transparent proxy and iptables failing
  • From: Rakotomandimby Mihamina <mihamina@xxxxxxxxxx>
• transparent proxy and iptables failing
  • From: Robin Wood <robin@xxxxxxxxxxxxx>
• Re: tc and CONNMARK [SOLVED]
  • From: Fabio Marcone <fabio.marcone@xxxxxxx>
• Re: Correctly classifying iptables NAT beahaviour...
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: Correctly classifying iptables NAT beahaviour...
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• CONNMARK howto
  • From: Fabio Marcone <fabio.marcone@xxxxxxx>
• Re: evaluating kernel-mode packet processing (netfilter target extension?)
  • From: Saikiran Madugula <hummerbliss@xxxxxxxxx>
• RE: evaluating kernel-mode packet processing (netfilter target extension?)
  • From: "Beyer, Philipp" <Philipp.Beyer@xxxxxxxxxxxxxxxxxxx>
• Re: Correctly classifying iptables NAT beahaviour...
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: tc and CONNMARK
  • From: Fabio Marcone <fabio.marcone@xxxxxxx>
• Correctly classifying iptables NAT beahaviour...
  • From: Toby Bradshaw <Toby.Bradshaw@xxxxxxxxxxxxxxxxx>
• Re: tc and CONNMARK
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• Re: tc and CONNMARK
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Re: tc and CONNMARK
  • From: Fabio Marcone <fabio.marcone@xxxxxxx>
• Re: how to get ipset as module
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: how to get ipset as module
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: how to get ipset as module
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: how to get ipset as module
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: tc and CONNMARK
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• evaluating kernel-mode packet processing (netfilter target extension?)
  • From: "Beyer, Philipp" <Philipp.Beyer@xxxxxxxxxxxxxxxxxxx>
• Re: tc and CONNMARK
  • From: Fabio Marcone <fabio.marcone@xxxxxxx>
• Re: conntrack-tools
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• tc and CONNMARK
  • From: Fabio Marcone <fabio.marcone@xxxxxxx>
• Understanding conntrack: Delete and manual readd of same entry possible?
  • From: Roman Fiedler <roman.fiedler@xxxxxxxxx>
• how to get ipset as module
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• conntrack-tools
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: Using iptables with high volume mail
  • From: John Little <jlittle_97@xxxxxxxxx>
• Re: Problems getting NOTRACK to do anything at all
  • From: Marcel Laverdet <marcel@xxxxxxxxxxxx>
• Re: Using iptables with high volume mail
  • From: Michele Petrazzo - Unipex <michele.petrazzo@xxxxxxxxx>
• Re: Using iptables with high volume mail
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: Using iptables with high volume mail
  • From: John Little <jlittle_97@xxxxxxxxx>
• Re: Problems getting NOTRACK to do anything at all
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Problems getting NOTRACK to do anything at all
  • From: Marcel Laverdet <marcel@xxxxxxxxxxxx>
• Re: Using iptables with high volume mail
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• match for limit on bytes per second?
  • From: Andrew Kraslavsky <andykras@xxxxxxxxxxx>
• Re: SSH Port Forwarding with iptables
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Migrating machines from old subnet to multiple new subnets
  • From: "Brent Kuster" <Brent.Kuster@xxxxxxxx>
• Re: Using iptables with high volume mail
  • From: John Little <jlittle_97@xxxxxxxxx>
• Re: Using iptables with high volume mail
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: SSH Port Forwarding with iptables
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Mapping multiple interfaces to a single IP address (cont.)
  • From: Gáspár Lajos <gaspar.lajos@xxxxxx>
• Re: Mapping multiple interfaces to a single IP address (cont.)
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Mapping multiple interfaces to a single IP address
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Using iptables with high volume mail
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: Using iptables to anonymize incoming IP addresses
  • From: andy thomas <tds@xxxxxxxxxxxxxxxxx>
• Re: SSH Port Forwarding with iptables
  • From: Bill Hendrickson <wjhendrickson@xxxxxxxxx>
• Re: Using iptables with high volume mail
  • From: John Little <jlittle_97@xxxxxxxxx>
• Re: Using iptables with high volume mail
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Using iptables with high volume mail
  • From: John Little <jlittle_97@xxxxxxxxx>
• Re: SSH Port Forwarding with iptables
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Mapping multiple interfaces to a single IP address
  • From: Javier Gálvez Guerrero <javier.galvez.guerrero@xxxxxxxxx>
• [OT] Relocation lookup
  • From: Rakotomandimby Mihamina <mihamina@xxxxxxxxxx>
• ftp active mode conntracking with bridging
  • From: "Demetrios J. Tsillas" <jtsillas@xxxxxxxxxxxx>
• Re: Using iptables to anonymize incoming IP addresses
  • From: Leonardo Rodrigues <leolistas@xxxxxxxxxxxxxx>
• Re: Using iptables to anonymize incoming IP addresses
  • From: Richard Horton <arimus.uk@xxxxxxxxxxxxxx>
• Using iptables to anonymize incoming IP addresses
  • From: andy thomas <tds@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] conntrack: do not print garbage after the usage message
  • From: Hannes Eder <heder@xxxxxxxxxx>
• Re: [PATCH] conntrack: do not print garbage after the usage message
  • From: Hannes Eder <heder@xxxxxxxxxx>
• Re: CPU usage of simple DROP rule
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: CPU usage of simple DROP rule
  • From: Steve Fink <sphink@xxxxxxxxx>
• Re: CPU usage of simple DROP rule
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• CPU usage of simple DROP rule
  • From: Steve Fink <sphink@xxxxxxxxx>
• Re: SSH Port Forwarding with iptables
  • From: Bill Hendrickson <wjhendrickson@xxxxxxxxx>
• Re: SSH Port Forwarding with iptables
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: SSH Port Forwarding with iptables
  • From: Bill Hendrickson <wjhendrickson@xxxxxxxxx>
• Re: SSH Port Forwarding with iptables
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: SSH Port Forwarding with iptables
  • From: Bill Hendrickson <wjhendrickson@xxxxxxxxx>
• SSH Port Forwarding with iptables
  • From: Bill Hendrickson <wjhendrickson@xxxxxxxxx>
• Re: Cannot access to CVS server of Patch-O-Matic
  • From: Saikiran Madugula <hummerbliss@xxxxxxxxx>
• Cannot access to CVS server of Patch-O-Matic
  • From: "Nguyen Anh Dung" <serepok@xxxxxxxxx>
• Re: bandwidth counting
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• corrupted netfilter logging using ulogd
  • From: Simon Tennant <simon@xxxxxxxxxxxxxx>
• Question about IPTABLES and NETBIOS
  • From: patriceetstephanie@xxxxxxx
• Re: bandwidth counting
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• bandwidth counting
  • From: Bob Miller <bob@xxxxxxxxxxxxxxx>
• Multiple --to-source not supported
  • From: Dave Sparks <Dave.Sparks@xxxxxxxxxx>