Linux TCP/IP Netfilter

• Thread Index

• Re: [ANNOUNCE] ipset 2.4.7 released
  • From: "G.W. Haywood" <ged@xxxxxxxxxxxxxxxxxx>
• Re: iptables, ipsec, and host2host
  • From: Joe Pruett <joey@xxxxxxxxxxxx>
• Re: newbie question: UDP is stateless ... right?
  • From: "Nikolay S. Rybaloff" <nowhere@xxxxxxxxxxxxxxxx>
• Re: newbie question: UDP is stateless ... right?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: newbie question: UDP is stateless ... right?
  • From: "Nikolay S. Rybaloff" <nowhere@xxxxxxxxxxxxxxxx>
• Re: newbie question: UDP is stateless ... right?
  • From: Knute Johnson <knute2009@xxxxxxxxxxxxxxxxxxxx>
• Re: newbie question: UDP is stateless ... right?
  • From: "Nikolay S. Rybaloff" <nowhere@xxxxxxxxxxxxxxxx>
• newbie question: UDP is stateless ... right?
  • From: Mr Vandeley <mr.vandeley@xxxxxxxxx>
• Re: ebtables filtering inside vlan.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Connectiontracking of IPv6 on modified Fritzbox
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 2.4.7 released
  • From: "G.W. Haywood" <ged@xxxxxxxxxxxxxxxxxx>
• Connectiontracking of IPv6 on modified Fritzbox
  • From: wlet@xxxxxxx
• Re: Best hardware platform for routing/firewalling?
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Best hardware platform for routing/firewalling?
  • From: Tore Anderson <tore.anderson@xxxxxxxxxxxxxxxxxx>
• Re: icmp forward
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: icmp forward
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: icmp forward
  • From: Hinko Kocevar <hinko.kocevar@xxxxxxxxxxxx>
• Re: icmp forward
  • From: Hinko Kocevar <hinko.kocevar@xxxxxxxxxxxx>
• Re: icmp forward
  • From: Hinko Kocevar <hinko.kocevar@xxxxxxxxxxxx>
• ebtables filtering inside vlan.
  • From: aras as <arunelis007@xxxxxxxxx>
• Re: icmp forward
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Multiple Incoming connections
  • From: "Cloves Pereira Costa Jr" <cloves.costa@xxxxxxxxxxxx>
• Re: icmp forward
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: icmp forward
  • From: Hinko Kocevar <hinko.kocevar@xxxxxxxxxxxx>
• Re: icmp forward
  • From: Hinko Kocevar <hinko.kocevar@xxxxxxxxxxxx>
• Re: icmp forward
  • From: Payam Chychi <pchychi@xxxxxxxxx>
• Re: icmp forward
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Re: icmp forward
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• icmp forward
  • From: Hinko Kocevar <hinko.kocevar@xxxxxxxxxxxx>
• Re: Multiple Incoming connections
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Multiple Incoming connections
  • From: Didster <didster@xxxxxxxxx>
• Re: SMP load balancing of softirqs
  • From: Tore Anderson <tore.anderson@xxxxxxxxxxxxxxxxxx>
• Re: SMP load balancing of softirqs
  • From: Rick Jones <rick.jones2@xxxxxx>
• Re: Second failover failure with conntrackd - INVALID packets
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• Re: SMP load balancing of softirqs
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re[2]: install patch-o-matic on fedora10
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: SMP load balancing of softirqs
  • From: Tore Anderson <tore.anderson@xxxxxxxxxxxxxxxxxx>
• Re: SMP load balancing of softirqs
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• SMP load balancing of softirqs
  • From: Tore Anderson <tore.anderson@xxxxxxxxxxxxxxxxxx>
• Conntrack UDP timeout callback
  • From: Giuseppe Roberti <jnod@xxxxxxxx>
• [ANNOUNCE] ipset 2.4.7 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• iptables, ipsec, and host2host
  • From: Joe Pruett <joey@xxxxxxxxxxxx>
• Redirecting Pakets
  • From: nemesis <nemesis.edsa@xxxxxx>
• Re: nth match extension (was: Blocking outgoing 802.11 ACKs)
  • From: Ivan Petrushev <ivanatora@xxxxxxxxx>
• nth match extension (was: Blocking outgoing 802.11 ACKs)
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Blocking outgoing 802.11 ACKs
  • From: Ivan Petrushev <ivanatora@xxxxxxxxx>
• Re: Blocking outgoing 802.11 ACKs
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Re: Blocking outgoing 802.11 ACKs
  • From: Kostas Pelechrinis <kpele_ntua@xxxxxxxxx>
• Re: Blocking outgoing 802.11 ACKs
  • From: Kostas Pelechrinis <kpele_ntua@xxxxxxxxx>
• Re: Blocking outgoing 802.11 ACKs
  • From: Ivan Petrushev <ivanatora@xxxxxxxxx>
• Blocking outgoing 802.11 ACKs
  • From: Kostas Pelechrinis <kpele_ntua@xxxxxxxxx>
• Re: Statistic module
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Statistic module
  • From: "Barry A Rich" <barich@xxxxxxxxxxxxxx>
• Re: martian destination and RAW iptable
  • From: Yury Polyanskiy <ypolyans@xxxxxxxxxxxxx>
• Re: DNAT on another interfaces' IP
  • From: Blaž Bačnik <bacnik@xxxxxxxxx>
• Re: DNAT on another interfaces' IP
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• RE: Problems adding a simple rule via iptables on an embedded Linux target
  • From: "Hodapp Jim (CDI)" <Jim.Hodapp@xxxxxxxxxxx>
• Re: NAT Port Forward problem in a not so simple network
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: martian destination and RAW iptable
  • From: Yury Polyanskiy <ypolyans@xxxxxxxxxxxxx>
• NAT Port Forward problem in a not so simple network
  • From: Fabio De Paolis <fabiodepaolis@xxxxxxx>
• Re: martian destination and RAW iptable
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• martian destination and RAW iptable
  • From: Yury Polyanskiy <ypolyans@xxxxxxxxxxxxx>
• DNAT on another interfaces' IP
  • From: Blaž Bačnik <bacnik@xxxxxxxxx>
• Re: Second failover failure with conntrackd - INVALID packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Second failover failure with conntrackd - INVALID packets
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• Re: --iif argument unrecognized by iptables
  • From: Andy Theuninck <gohanman@xxxxxxxxx>
• Re: --iif argument unrecognized by iptables
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: --iif argument unrecognized by iptables
  • From: Andy Theuninck <gohanman@xxxxxxxxx>
• Re: Is the libnetfilter_queue thread-safe?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: --iif argument unrecognized by iptables
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Does ebtables support --arp-opcode on vlan's?
  • From: aras as <arunelis007@xxxxxxxxx>
• --iif argument unrecognized by iptables
  • From: Andy Theuninck <gohanman@xxxxxxxxx>
• Re: [ANNOUNCE] conntrack-tools 0.9.10 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [ANNOUNCE] conntrack-tools 0.9.10 released
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Second failover failure with conntrackd - INVALID packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Second failover failure with conntrackd - INVALID packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• guest MAC-address isolation
  • From: Robert Rebstock <rebstock@xxxxxxxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• Re: Why --syn on tcp connlimit?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Why --syn on tcp connlimit?
  • From: "Nikolay S. Rybaloff" <nowhere@xxxxxxxxxxxxxxxx>
• Why --syn on tcp connlimit?
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Sam Ravnborg <sam@xxxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Sam Ravnborg <sam@xxxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: Second failover failure with conntrackd - INVALID packets
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• tc filter - marks equals classids
  • From: Karel Rericha <karel@xxxxxxxxx>
• Re: Is the libnetfilter_queue thread-safe?
  • From: Eric Leblond <eric@xxxxxx>
• Is the libnetfilter_queue thread-safe?
  • From: "Jacky Luk" <jacky.luk@xxxxxxxxxxxxxxxxx>
• Re: Second failover failure with conntrackd - INVALID packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Problems adding a simple rule via iptables on an embedded Linux target
  • From: "Hodapp Jim (CDI)" <Jim.Hodapp@xxxxxxxxxxx>
• random src dst ports for OUTPUT chain in FILTER table
  • From: Ma-ris Ruskulis <maris@xxxxxxxx>
• random src dst ports for OUTPUT chain in FILTER table
  • From: Ma-ris Ruskulis <maris@xxxxxxxx>
• Re: Conntrack not recording packets going through a firewall [ SOLVED! ]
  • From: David J Craigon <david@xxxxxxxxxxxxx>
• Re: Second failover failure with conntrackd - INVALID packets
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• [patch] iptables fix for bug 568
  • From: Peter Volkov <pva@xxxxxxxxxx>
• wlan0 ppp0 NAT problem
  • From: Deephay <tudoxxx@xxxxxxxxx>
• Re: Conntrack not recording packets going through a firewall
  • From: David J Craigon <david@xxxxxxxxxxxxx>
• Re: Conntrack not recording packets going through a firewall
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Re: Second failover failure with conntrackd - INVALID packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Conntrack not recording packets going through a firewall
  • From: David J Craigon <david@xxxxxxxxxxxxx>
• Re: CONNLIMIT Questions
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Re: CONNLIMIT Questions
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Re: CONNLIMIT Questions
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Conntrack not recording packets going through a firewall
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Second failover failure with conntrackd - INVALID packets
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• Re: CONNLIMIT Questions
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Re: Conntrack not recording packets going through a firewall
  • From: David J Craigon <david@xxxxxxxxxxxxx>
• Re: Conntrack not recording packets going through a firewall
  • From: David J Craigon <david@xxxxxxxxxxxxx>
• Re: Conntrack not recording packets going through a firewall
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Conntrack not recording packets going through a firewall
  • From: David J Craigon <david@xxxxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: multi-wan with conn-mark
  • From: Brian Austin - Standard Universal <brian@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: multi-wan with conn-mark
  • From: Thomas Creutz <thomas.creutz@xxxxxx>
• Re: Add IP_OPTIONS to IP header using netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• multi-wan with conn-mark
  • From: Thomas Creutz <thomas.creutz@xxxxxx>
• Questions about Conntrack Timeouts
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Re: CONNLIMIT Questions
  • From: Sitaram Chamarty <sitaramc@xxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• CONNLIMIT Questions
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Sam Ravnborg <sam@xxxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Ingo Molnar <mingo@xxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Kyle McMartin <kyle@xxxxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Kyle McMartin <kyle@xxxxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: "H. Peter Anvin" <hpa@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Sam Ravnborg <sam@xxxxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [GIT PULL -tip] fix 33 make headers_check warnings
  • From: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
• [GIT PULL -tip] fix 33 make headers_check warnings
  • From: Jaswinder Singh Rajput <jaswinder@xxxxxxxxxx>
• Re: Counting Connections
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• EBTABLES: init-table says kernel doesn't know about table
  • From: "Demetrios J. Tsillas" <jtsillas@xxxxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• ebtalbes: --init-table returns "kernel doesn't support..."
  • From: "Demetrios J. Tsillas" <jtsillas@xxxxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ANNOUNCE] libnfnetlink 0.0.40 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Counting Connections
  • From: Artūras Šlajus <x11@xxxxxxxxxxx>
• Counting Connections
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• False reading of /proc/net/ip_conntrack
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: "Nikolay S. Rybaloff" <nowhere@xxxxxxxxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Troubles with MARK target in 2.6.28
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: Vlado Drz(ík <vlado@xxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: Peter Renzland <peter@xxxxxxxxxxx>
• Troubles with MARK target in 2.6.28
  • From: "Nikolay S. Rybalov" <nowhere@xxxxxxxxxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: "Payam Chychi" <pchychi@xxxxxxxxx>
• iptables 1.4.2 Module is wrong version
  • From: Hinko Kocevar <hinko.kocevar@xxxxxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: "Richard Hartmann" <richih.mailinglist@xxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: "Richard Hartmann" <richih.mailinglist@xxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: "Richard Hartmann" <richih.mailinglist@xxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: (Ab)using iptables to record byte count per IP?
  • From: Artūras Šlajus <x11@xxxxxxxxxxx>
• (Ab)using iptables to record byte count per IP?
  • From: "Richard Hartmann" <richih.mailinglist@xxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Haeder <r.haeder@xxxxxx>
• Re: Mystics of packet forwarding
  • From: Artūras Šlajus <x11@xxxxxxxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Häder <r.haeder@xxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Häder <r.haeder@xxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Häder <r.haeder@xxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Häder <r.haeder@xxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: "Ivan Petrushev" <ivanatora@xxxxxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Häder <r.haeder@xxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: "Billy Crook" <billycrook@xxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: Roman Fiedler <roman.fiedler@xxxxxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: "Ivan Petrushev" <ivanatora@xxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: Artūras Šlajus <x11@xxxxxxxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: Artūras Šlajus <x11@xxxxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: Artūras Šlajus <x11@xxxxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: "Ivan Petrushev" <ivanatora@xxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: Artūras Šlajus <x11@xxxxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: Artūras Šlajus <x11@xxxxxxxxxxx>
• Re: Mystics of packet forwarding
  • From: "Billy Crook" <billycrook@xxxxxxxxx>
• Mystics of packet forwarding
  • From: Artūras Šlajus <x11@xxxxxxxxxxx>
• Re: sip voip traffic forwarding
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• RE: iptables terminating targets
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• RE: iptables terminating targets
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Häder <r.haeder@xxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Häder <r.haeder@xxxxxx>
• Re: Q: iptables terminating targets
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Q: iptables terminating targets
  • From: Indiana Epilepsy and Child Neurology <BrainChild@xxxxxxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• Re: help on tc with kernels >= 2.6.27
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Häder <r.haeder@xxxxxx>
• Re: Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• Re: help on tc with kernels >= 2.6.27
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• sip voip traffic forwarding
  • From: Barry R Cisna <brcisna@xxxxxxxxxxxxx>
• Bastille/netfilter with Linux 2.6.28 blocks connections
  • From: Roland Häder <r.haeder@xxxxxx>
• Re: help on tc with kernels >= 2.6.27
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• Re: help on tc with kernels >= 2.6.27
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• Re: help on tc with kernels >= 2.6.27
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• LARTC (was: Re: help on tc with kernels >= 2.6.27)
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: help on tc with kernels >= 2.6.27
  • From: bsilva <bsilva@xxxxxxxxx>
• Re: help on tc with kernels >= 2.6.27
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: help on tc with kernels >= 2.6.27
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• help on tc with kernels >= 2.6.27
  • From: "Jorge Bastos" <jorge.decimal@xxxxxxxxx>
• Re: Firewall
  • From: Piotr Bratkowski <pioterbrat@xxxxx>
• Firewall
  • From: Piotr Bratkowski <pioterbrat@xxxxx>
• Re: Links to projects using netfilter
  • From: Eric Leblond <eric@xxxxxx>
• Re: can't port forward on multihome
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: can't port forward on multihome
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• Re: can't port forward on multihome
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• level up iptables !! improvement !!
  • From: swilting <john.swilting@xxxxxxxxxx>
• Re: Links to projects using netfilter
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Re: multiple exclusive DNAT does not work
  • From: Aleksei Bebinov <alex@xxxxxxx>
• Re: multiple exclusive DNAT does not work
  • From: Leonardo Rodrigues Magalhães <leolistas@xxxxxxxxxxxxxx>
• multiple exclusive DNAT does not work
  • From: Aleksei Bebinov <alex@xxxxxxx>
• Re: Links to projects using netfilter
  • From: Nick <vbox.nick@xxxxxxxxx>
• Links to projects using netfilter
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Understanding the routing rules
  • From: Daniel Huhardeaux <daniel.huhardeaux@xxxxxxxxxx>
• Xtables-addons 1.7
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Redirecting network traffic (except VPN and DHCP) through VPN
  • From: Stone <stone@xxxxxxxxx>
• Re: please, what is the mistake????????
  • From: "ArcosCom Linux User" <linux@xxxxxxxxxxxx>
• Re: Add a rule to PREROUTING table
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Add a rule to PREROUTING table
  • From: "Jianqing Zhang" <arrow.jianqing@xxxxxxxxx>
• Re: Access from inside proxy to server with apache
  • From: "Javi Legido" <javi@xxxxxxxxxx>
• Re: FW: Using iptables for configuring VRF
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: can't port forward on multihome
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• can't port forward on multihome
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• please, what is the mistake????????
  • From: "Diego Ramos V." <diegorvdebian@xxxxxxxxx>
• FW: Using iptables for configuring VRF
  • From: "Cheli Monia" <monia.cheli@xxxxxxxxxxxxxxxx>
• Re: Problems with UNIX SCO
  • From: "Oscar N" <oscar@xxxxxxxxxx>
• Re: Access from inside proxy to server with apache
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: Access from inside proxy to server with apache
  • From: "Javi Legido" <javi@xxxxxxxxxx>
• [ANNOUNCE] conntrack-tools 0.9.9 released
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Two lines, IMQ, and NAT
  • From: Jason Cosby <sky_jason@xxxxxxxxx>
• Re: Access from inside proxy to server with apache
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Conntrack UDP timeout callback
  • From: Giuseppe Roberti <jnod@xxxxxxxx>
• Re: Bug in limit match?
  • From: "Payam Chychi" <pchychi@xxxxxxxxx>
• Re: Access from inside proxy to server with apache
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Access from inside proxy to server with apache
  • From: "Javi Legido" <javi@xxxxxxxxxx>
• using EBTABLES to route traffic to specific VLAN
  • From: "Hag Unt" <hagayu.sys@xxxxxxxxx>
• Bug in limit match?
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: SpamHaus DROP list in Netfilter
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: ip_forward failing at random times for random amount of time
  • From: Aleksander Kamenik <aleksander@xxxxxxxxxxxxxxx>
• Re: SpamHaus DROP list in Netfilter
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Re: SpamHaus DROP list in Netfilter
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: Iptables with Apache - virtualhosts by name
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• [PATCH 11/11] net/bridge/netfilter: Move a dereference below a NULL test
  • From: Julia Lawall <julia@xxxxxxx>
• One TFTP-Server much devices with same IP-Address
  • From: Björn Paulsen <b.paulsen@xxxxxxxxxxx>
• SpamHaus DROP list in Netfilter
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Iptables with Apache - virtualhosts by name
  • From: "Javi Legido" <javi@xxxxxxxxxx>
• One TFTP-Server much devices with same IP-Address
  • From: Björn Paulsen <b.paulsen@xxxxxxxxxxx>
• ip_forward failing at random times for random amount of time
  • From: Aleksander Kamenik <aleksander@xxxxxxxxxxxxxxx>
• Using statistics and nth match
  • From: "John Lister" <john.lister@xxxxxxxxxxxxxxx>
• Re: [netfilter-core] [PATCH] netfilter: remove padding from struct xt_match on 64bit builds
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• IPsec vs. iptables NAT
  • From: RUMI Szabolcs <rumi_ml@xxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 0.0.99 release [was Re: [ANNOUNCE] libnetfilter_conntrack 0.0.98 release]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 0.0.98 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Port forwarding
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• Port forwarding
  • From: "Błażej Ślusarek" <beju@xxxxxxxxxxx>
• Re: Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: "Javier Gálvez Guerrero" <javier.galvez.guerrero@xxxxxxxxx>
• [PATCH] netfilter: remove padding from struct xt_match on 64bit builds
  • From: Richard Kennedy <richard@xxxxxxxxxxxxxxx>
• Re: Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: UDP netbios nameserver packets blocked
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: "Javier Gálvez Guerrero" <javier.galvez.guerrero@xxxxxxxxx>
• Re: Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: Philip Craig <philipc@xxxxxxxxxxxx>
• Port forwarding and locally generated packets
  • From: "Ashok Rao" <greatarbor@xxxxxxxxx>
• Why the tcp ckecsum involves the skuff checksum?
  • From: rigoberto perez <rigo666beast@xxxxxxxxx>
• Re: Problems with UNIX SCO
  • From: rigoberto perez <rigo666beast@xxxxxxxxx>
• Re: Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: "Javier Gálvez Guerrero" <javier.galvez.guerrero@xxxxxxxxx>
• Re: Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Using MARK and TOS to route traffic through different interfaces to the same destination
  • From: "Javier Gálvez Guerrero" <javier.galvez.guerrero@xxxxxxxxx>
• Problems with UNIX SCO
  • From: rigoberto perez <rigo666beast@xxxxxxxxx>
• Re: "excessively large" library built in standalone ipset build
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: nf_conntrack format
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxxxxxxxxxxxxx>
• statistic module problem
  • From: "John Lister" <john.lister@xxxxxxxxxxxxxxx>
• nf_conntrack format
  • From: dstorvik <dstorvik@xxxxxxxxxxxxxx>
• Re: UDP netbios nameserver packets blocked
  • From: Knute Johnson <knute2008@xxxxxxxxxxxxxxxxxxxx>
• Re: UDP netbios nameserver packets blocked
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Outgoing TCP RST packets dropped
  • From: Guillaume Tamboise <gtamboise@xxxxxxxxx>
• RE: routing to forward a service request to another machine with iptables.
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• howto setup masquerade in multihomed server
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• UDP netbios nameserver packets blocked
  • From: Knute Johnson <knute2008@xxxxxxxxxxxxxxxxxxxx>
• routing to forward a service request to another machine with iptables.
  • From: Patrik Hasibuan <patrikhasibuan@xxxxxxxxx>
• Re: IPv4 traffic in 802.2 LLC SNAP frames queued to netfilter ...
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• IPv4 traffic in 802.2 LLC SNAP frames queued to netfilter ...
  • From: "Jonothan Kane" <jonothan.kane@xxxxxxxxx>
• Re: Ping in ESTABLISHED
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• RE: Ping in ESTABLISHED
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• ip/tcp checksumming
  • From: Ivan Chernyavsky <camposer@xxxxxxxxx>
• Re: Ping in ESTABLISHED
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Ping in ESTABLISHED
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• 3 bridged IPs, one server
  • From: "Omid Mottaghi" <omidmr@xxxxxxxxx>
• More nf_conntrack_sip questions (resending to netfilter)
  • From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
• Re: Kernel 2.6.21: 802.3 frames not hitting netfilter filter table FORWARD chain
  • From: "Jonothan Kane" <jonothan.kane@xxxxxxxxx>
• Kernel 2.6.21: 802.3 frames not hitting netfilter filter table FORWARD chain
  • From: "Jonothan Kane" <jonothan.kane@xxxxxxxxx>
• RE: Sending packets through different interfaces and with different IPs to the same destination
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• Re: Sending packets through different interfaces and with different IPs to the same destination
  • From: "Javier Gálvez Guerrero" <javier.galvez.guerrero@xxxxxxxxx>
• conntrackd reports message before expected seq [was Re: [ANNOUNCE] libnetfilter_conntrack 0.0.98 release]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Using iptables for configuring VRF
  • From: "Oscar N" <oscar@xxxxxxxxxx>
• Using iptables for configuring VRF
  • From: "Cheli Monia" <monia.cheli@xxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] libnetfilter_conntrack 0.0.98 release
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] libnetfilter_conntrack 0.0.98 release
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: NAT for locahost to IP LAN for mail services
  • From: Zagato <zagato.gekko@xxxxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 0.0.98 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: NAT for locahost to IP LAN for mail services
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: NAT for locahost to IP LAN for mail services
  • From: Zagato <zagato.gekko@xxxxxxxxx>
• Iproute2: tc + iptables actions
  • From: Vlado Držík <vlado@xxxxxx>
• Iproute2: tc + iptables actions
  • From: Vlado Držík <vlado@xxxxxx>
• Sending packets through different interfaces and with different IPs to the same destination
  • From: "Javier Gálvez Guerrero" <javier.galvez.guerrero@xxxxxxxxx>
• INT_MIN INT_MAX ULONG_MAX
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: NAT for locahost to IP LAN for mail services
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: NAT for locahost to IP LAN for mail services
  • From: Zagato <zagato.gekko@xxxxxxxxx>
• Re: NAT for locahost to IP LAN for mail services
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• NAT for locahost to IP LAN for mail services
  • From: Zagato <zagato.gekko@xxxxxxxxx>
• ipt_recent: negated seconds match not working
  • From: Michael Weiser <michael@xxxxxxxxxxxxxxxxxxx>
• Re: Which "illegal" tcp-fragments should be blocked?
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: Which "illegal" tcp-fragments should be blocked?
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: http PREROUTING works but other ports do not
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Which "illegal" tcp-fragments should be blocked?
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: banning bot ips with ipset
  • From: Nigel Heron <nigel-ml@xxxxxxxxxx>
• Re: Quickly checking number of rules/chains
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Quickly checking number of rules/chains
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• RE: Tracking broadcasting replies *only* using 'conntrack'
  • From: Joris Korbeeck <korbeeck@xxxxxxxxxxx>
• Re: Allow client only 1 connect per 20 seconds
  • From: Paul Evans <paul@xxxxxxxxxxxxx>
• Re: banning bot ips with ipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: banning bot ips with ipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: banning bot ips with ipset
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: banning bot ips with ipset
  • From: "Adem" <for-gmane@xxxxxxxxxxxx>
• Re: banning bot ips with ipset
  • From: "G.W. Haywood" <ged@xxxxxxxxxxxxxxxxxx>
• banning bot ips with ipset
  • From: Nigel Heron <nigel-ml@xxxxxxxxxx>
• Re: Allow client only 1 connect per 20 seconds
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: Allow client only 1 connect per 20 seconds
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: Allow client only 1 connect per 20 seconds
  • From: "Adem" <for-gmane@xxxxxxxxxxxx>
• Allow client only 1 connect per 20 seconds
  • From: "Adem" <for-gmane@xxxxxxxxxxxx>
• Re: Which "illegal" tcp-fragments should be blocked?
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Tracking broadcasting replies *only* using 'conntrack'
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• strange NAT/masquerading problem with dhcp over linksys switch (one NIC)
  • From: Marcel Partap <mpartap@xxxxxxx>
• unclean match
  • From: bahamin takhtaei <b_takhtaei@xxxxxxxxx>
• Tracking broadcasting replies *only* using 'conntrack'
  • From: Joris Korbeeck <korbeeck@xxxxxxxxxxx>
• getting kernel compilation error after applying patches using p-o-m
  • From: kamal.garg@xxxxxxxxxxxxxxxxxxxx
• Re: SYN flooding
  • From: "Adem" <for-gmane@xxxxxxxxxxxx>
• Which "illegal" tcp-fragments should be blocked?
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: Question about NAT, src ports and dst ports.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• iptables and SOCKS4
  • From: "Jesse Thompson" <jesset@xxxxxxxxx>
• Question about NAT, src ports and dst ports.
  • From: "patrick daures" <patrick.daures@xxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: pageexec@xxxxxxxxxxx
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• unclean match
  • From: bahamin takhtaei <b_takhtaei@xxxxxxxxx>
• Re: xtables problem
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• problem with ip_queue
  • From: "varun uppal" <varuneet.uppal@xxxxxxxxx>
• Re: conntrack: will it restart after delete?
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• Re: conntrack: will it restart after delete?
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• Re: "excessively large" library built in standalone ipset build
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: "excessively large" library built in standalone ipset build
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: "excessively large" library built in standalone ipset build
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: "excessively large" library built in standalone ipset build
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• "excessively large" library built in standalone ipset build
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: Xtables-addons 1.6
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: Xtables-addons 1.6
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Xtables-addons 1.6
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: Xtables-addons 1.6
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Ports
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Ports
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Ports
  • From: Mike <mikef1007@xxxxxxxxx>
• Re: Ports
  • From: Paul Evans <paul@xxxxxxxxxxxxx>
• Re: Ports
  • From: Mike <mikef1007@xxxxxxxxx>
• Re: Ports
  • From: Paul Evans <paul@xxxxxxxxxxxxx>
• Re: Ports
  • From: Mike <mikef1007@xxxxxxxxx>
• Re: xtables-addons problem
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xtables problem
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: pageexec@xxxxxxxxxxx
• Re: Ports
  • From: Paul Evans <paul@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ip{,6}t_policy.h should include xp_policy.h
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ip{,6}t_policy.h should include xp_policy.h
  • From: Andy Whitcroft <apw@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ip{,6}t_policy.h should include xp_policy.h
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ip{,6}t_policy.h should include xp_policy.h
  • From: Andy Whitcroft <apw@xxxxxxxxxxxxx>
• Ports
  • From: Mike <mikef1007@xxxxxxxxx>
• Re: How to make NFQUEUE ?
  • From: Eric Leblond <eric@xxxxxx>
• iptables (1.4.2 release) failed to run on embedded system with "can't initialize iptables table `filter'"
  • From: "David Wu" <davidwu@xxxxxxxxxxxxxxxxxxxx>
• How to make NFQUEUE ?
  • From: sriliam <sriliam@xxxxxxx>
• Re: [PATCH 1/1] netfilter: ip{,6}t_policy.h should include xp_policy.h
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ip{,6}t_policy.h should include xp_policy.h
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ip{,6}t_policy.h should include xp_policy.h
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• xtables problem
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• [PATCH 1/1] netfilter: ip{,6}t_policy.h should include xp_policy.h
  • From: Andy Whitcroft <apw@xxxxxxxxxxxxx>
• DNAT + Bridge ?
  • From: "patrick daures" <patrick.daures@xxxxxxxxx>
• Re: Xtables-addons 1.6
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: Check whether an IPSET already exists?
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: When is ipset's "resize 0" used?
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: Xtables-addons 1.6
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: isp like shaping with tc
  • From: Michele Petrazzo - Unipex srl <michele.petrazzo@xxxxxxxxx>
• Re: isp like shaping with tc
  • From: Aleksander Kamenik <aleksander@xxxxxxxxxxxxxxx>
• Re: specified protocl number problem
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Check whether an IPSET already exists?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: When is ipset's "resize 0" used?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Check whether an IPSET already exists?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Xtables-addons 1.6
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• I write a module for Dynamic NAT, but it's not working
  • From: "nfsnfs chen" <nfsnfs@xxxxxxxxx>
• When is ipset's "resize 0" used?
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Check whether an IPSET already exists?
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Ebtables, bridge, and vlan confusion
  • From: "Jason Pyeron" <jpyeron@xxxxxxxx>
• Re: Xtables-addons 1.6
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Xtables-addons 1.6
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: isp like shaping with tc
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: SNAT with ip address range not working...
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• conntrack helper documentation
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• isp like shaping with tc
  • From: Aleksander Kamenik <aleksander@xxxxxxxxxxxxxxx>
• SNAT with ip address range not working...
  • From: "John Lister" <john.lister@xxxxxxxxxxxxxxx>
• How can transfer Public IP packet inside NAT to outside Public IP site....
  • From: "Darren Yang" <pigsign.pykota@xxxxxxxxx>
• Re: specified protocl number problem
  • From: bahamin takhtaei <b_takhtaei@xxxxxxxxx>
• Re: specified protocl number problem
  • From: Bill Chappell <chappewr@xxxxxxxxxxxx>
• specified protocl number problem
  • From: bahamin takhtaei <b_takhtaei@xxxxxxxxx>
• Problem compiling
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: conntrack: will it restart after delete?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: where are my udp packets going?
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• conntrack: will it restart after delete?
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: pageexec@xxxxxxxxxxx
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: where are my udp packets going?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: The "badguy" example in the man page not working(-->"iptables: No chain/target/match by that name")
  • From: "Adem" <for-gmane@xxxxxxxxxxxx>
• Re: howto dumb switch?
  • From: bsilva <bsilva@xxxxxxxxx>
• Re: where are my udp packets going?
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• howto dumb switch?
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Re: where are my udp packets going?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: where are my udp packets going?
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• where are my udp packets going?
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• [ANNOUNCE] ipset-2.4.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• setting up separate route for VOIP
  • From: sean darcy <seandarcy2@xxxxxxxxx>
• Re: Alternate routing table and source IP address question.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Subscribing and question on extern exec prog with iptables.
  • From: sebastien <sebastien@xxxxxxxxxxxxxxxxxx>
• Re: question on extern exec prog with iptables.
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• question on extern exec prog with iptables.
  • From: sebastien <sebastien@xxxxxxxxxxxxxxxxxx>
• Re: L2 NAT
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: www.adobe.com
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Alternate routing table and source IP address question.
  • From: bsilva <bsilva@xxxxxxxxx>
• Re: The "badguy" example in the man page not working (-->"iptables: No chain/target/match by that name")
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: The "badguy" example in the man page not working (-->"iptables: No chain/target/match by that name")
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: The "badguy" example in the man page not working (-->"iptables: No chain/target/match by that name")
  • From: "Adem" <for-gmane@xxxxxxxxxxxx>
• L2 NAT
  • From: ivan <lagigliaivan@xxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: pageexec@xxxxxxxxxxx
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: The "badguy" example in the man page not working (--> "iptables: No chain/target/match by that name")
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• The "badguy" example in the man page not working (--> "iptables: No chain/target/match by that name")
  • From: "Adem" <for-gmane@xxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: PREROUTING table and quota
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: www.adobe.com
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: PREROUTING table and quota
  • From: Michael <micolous@xxxxxxxxx>
• Re: INVALID state
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• RE: INVALID state
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• Re: INVALID state
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: INVALID state
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• Re: using iptables to deny ipsec connections
  • From: Bill Chappell <chappewr@xxxxxxxxxxxx>
• Re: using iptables to deny ipsec connections
  • From: Bill Chappell <chappewr@xxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-2.4.4 released
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: [ANNOUNCE] ipset-2.4.4 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: special SNAT and DNAT gateway
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: PREROUTING table and quota
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• special SNAT and DNAT gateway
  • From: "patrick daures" <patrick.daures@xxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-2.4.4 released
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: INVALID state
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• Re: INVALID state
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: INVALID state
  • From: Christoph Paasch <christoph.paasch@xxxxxxxxx>
• PREROUTING table and quota
  • From: Michael <micolous@xxxxxxxxx>
• Re: www.adobe.com
  • From: TheOldFellow <theoldfellow@xxxxxxxxx>
• Re: www.adobe.com
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: INVALID state
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• Re: www.adobe.com
  • From: TheOldFellow <theoldfellow@xxxxxxxxx>
• PaX killing conntrackd (strange "execution attempt")
  • From: Wolfram Schlich <lists@xxxxxxxxxxxxxxxxxxx>
• Re: www.adobe.com
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset-2.4.4 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• RE: www.adobe.com
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• Re: www.adobe.com
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: www.adobe.com
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: www.adobe.com
  • From: Wessel <wessel.louwris@xxxxxxxxx>
• Re: www.adobe.com
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• www.adobe.com
  • From: TheOldFellow <theoldfellow@xxxxxxxxx>
• Re: using iptables to deny ipsec connections
  • From: Eric Lease Morgan <emorgan@xxxxxx>
• Re: Altering firewall rules to enable NAT Reflection
  • From: Simon <greminn@xxxxxxxxx>
• Re: http PREROUTING works but other ports do not
  • From: mictlan tecutli <mictlan.tecutli.0@xxxxxxxxx>
• Re: monitoring network question
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• INVALID state
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• Re: ipset returns "Zero valued IP address" when trying to add '0.0.0.0/7'
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• monitoring network question
  • From: Leonardo Rodrigues Magalhães <leolistas@xxxxxxxxxxxxxx>
• Re: FTP-server on non-standard port behind DNAT, client behind SNAT
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: FTP-server on non-standard port behind DNAT, client behind SNAT
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: ipset returns "Zero valued IP address" when trying to add '0.0.0.0/7'
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset returns "Zero valued IP address" when trying to add '0.0.0.0/7'
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: http PREROUTING works but other ports do not
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• ipset returns "Zero valued IP address" when trying to add '0.0.0.0/7'
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: FTP-server on non-standard port behind DNAT, client behind SNAT
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: FTP-server on non-standard port behind DNAT, client behind SNAT
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: FTP-server on non-standard port behind DNAT, client behind SNAT
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: conntrackd + mark problems
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• FTP-server on non-standard port behind DNAT, client behind SNAT
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Re: ipset, when to use iptree?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: conntrackd + mark problems
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• skb_copy_expand with a single pointer
  • From: Frank Ramirez <coquinino@xxxxxxxxx>
• http PREROUTING works but other ports do not
  • From: mictlan tecutli <mictlan.tecutli.0@xxxxxxxxx>
• Re: using iptables to deny ipsec connections
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• using iptables to deny ipsec connections
  • From: Eric Lease Morgan <emorgan@xxxxxx>
• Re: DNAT to a specific interface?
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• DNAT to a specific interface?
  • From: "news.gmane.org" <seandarcy2@xxxxxxxxx>
• ipset, when to use iptree?
  • From: "JC Janos" <jcjanos245@xxxxxxxxx>
• Re: Is it a bug???
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Is it a bug???
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Altering firewall rules to enable NAT Reflection
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Altering firewall rules to enable NAT Reflection
  • From: Simon <greminn@xxxxxxxxx>
• Re: Altering firewall rules to enable NAT Reflection
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Altering firewall rules to enable NAT Reflection
  • From: Simon <greminn@xxxxxxxxx>
• SYN flooding
  • From: "Servers 4you" <servers4you@xxxxxxxxx>
• Re: Altering firewall rules to enable NAT Reflection
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Altering firewall rules to enable NAT Reflection
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: QUEUE Target
  • From: "OpenSource Dev" <dev.opensource@xxxxxxxxx>
• QUEUE Target
  • From: "OpenSource Dev" <dev.opensource@xxxxxxxxx>
• Re: Redirect back to internal network
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Redirect back to internal network
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Redirect back to internal network
  • From: "Henrique Netfilter" <henrique.netfilter@xxxxxxxxx>
• Re: Redirect back to internal network
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Altering firewall rules to enable NAT Reflection
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Redirect back to internal network
  • From: "Henrique Netfilter" <henrique.netfilter@xxxxxxxxx>
• Re: filtering packet within a L2 brige
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Altering firewall rules to enable NAT Reflection
  • From: Simon <greminn@xxxxxxxxx>
• filtering packet within a L2 brige
  • From: "Amine KERKENI" <amine.kerkeni@xxxxxxxxx>
• Re: Error when IPRANGE used on 2.4 Kernel
  • From: Grant Coady <gcoady.lk@xxxxxxxxx>
• Re: Error when IPRANGE used on 2.4 Kernel
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Re: Error when IPRANGE used on 2.4 Kernel
  • From: "Karthik V" <karthikv.vk@xxxxxxxxx>
• Re: Error when IPRANGE used on 2.4 Kernel
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Error when IPRANGE used on 2.4 Kernel
  • From: "Karthik V" <karthikv.vk@xxxxxxxxx>
• RE: Basic Routing
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: 2 ips, same port, forward to original ip but different port
  • From: Fu-Tung Cheng <futung.cheng@xxxxxxxxx>
• RE: Basic Routing
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Problem in using TC Traffic Control
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Problem in using TC Traffic Control
  • From: Karim Asif Sattar <karimas@xxxxxxxxxxxx>
• Re: Basic Routing
  • From: John Haxby <jch@xxxxxxxxxxxxxxx>
• Re: 2 ips, same port, forward to original ip but different port
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• RE: Basic Routing
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• 2 ips, same port, forward to original ip but different port
  • From: Fu-Tung Cheng <futung.cheng@xxxxxxxxx>
• Re: Basic Routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Basic Routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: conntrackd and CacheWriteThrough
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrackd and CacheWriteThrough
  • From: md@xxxxxxxx (Marco d'Itri)
• About the using of libnetfilter_queue!
  • From: "Jacky Luk" <jacky.luk@xxxxxxxxxxxxxxxxx>
• Re: conntrackd and CacheWriteThrough
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Can iptables/netfilter capture an incoming IP packet which is not addressed to the local machine?
  • From: "Jianqing Zhang" <arrow.jianqing@xxxxxxxxx>
• Re: Basic Routing
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Basic Routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Another way of doing? --state NEW -j DROP
  • From: Sylvan <sylvan@xxxxxxxxxxx>
• [Fwd: Re: Another way of doing? --state NEW -j DROP]
  • From: Sylvan <sylvan@xxxxxxxxxxx>
• [Fwd: Re: Another way of doing? --state NEW -j DROP]
  • From: Sylvan <sylvan@xxxxxxxxxxx>
• Re: Another way of doing? --state NEW -j DROP
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Another way of doing? --state NEW -j DROP
  • From: Maximilian Wilhelm <max@xxxxxxxxxxx>
• Another way of doing? --state NEW -j DROP
  • From: Sylvan Andrew - NIDS <sylvan@xxxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Single-NIC Traffic Shaping
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Basic Routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Single-NIC Traffic Shaping
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Single-NIC Traffic Shaping
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• RE: Basic Routing
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• Re: Basic Routing
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Weird NAT problem
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Single-NIC Traffic Shaping
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Basic Routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• RE: Basic Routing
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• Backporting TCPOPTSTRIP to 2.6.18
  • From: "Luigi Iotti" <luigi@xxxxxxxxx>
• Single-NIC Traffic Shaping
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Basic Routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Weird NAT problem
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Weird NAT problem
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Weird NAT problem
  • From: Bernhard Rosenkraenzer <bero@xxxxxxxxxxx>
• Re: Weird NAT problem
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Weird NAT problem
  • From: Bernhard Rosenkraenzer <bero@xxxxxxxx>
• Re: Weird NAT problem
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Weird NAT problem
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Weird NAT problem
  • From: Bernhard Rosenkraenzer <bero@xxxxxxxx>
• Re: Marking particular programs
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Marking particular programs
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: Netlink programming problem
  • From: Rick Jones <rick.jones2@xxxxxx>
• Re: About the version of libnfnetlink and libnetfilter_queue in RHEL 5.2!
  • From: Eric Leblond <eleblond@xxxxxx>
• About the netfilter_queue and multi threads!
  • From: "Jacky Luk" <jacky.luk@xxxxxxxxxxxxxxxxx>
• Re: Marking particular programs
  • From: Покотиленко Костик <casper@xxxxxxxxxxxx>
• Netlink programming problem
  • From: "Jianqing Zhang" <arrow.jianqing@xxxxxxxxx>
• [no subject]
  • From: "Jianqing Zhang" <arrow.jianqing@xxxxxxxxx>
• About the version of libnfnetlink and libnetfilter_queue in RHEL 5.2!
  • From: "Jacky Luk" <jacky.luk@xxxxxxxxxxxxxxxxx>
• Re: Shortcuts to counting rules?
  • From: Philip Craig <philipc@xxxxxxxxxxxx>
• Re: Shortcuts to counting rules?
  • From: Philip Craig <philipc@xxxxxxxxxxxx>
• Re: Shortcuts to counting rules?
  • From: Rick Jones <rick.jones2@xxxxxx>
• Marking particular programs
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Load balancing across multiple PPP uplinks
  • From: "Barry A Rich" <barich@xxxxxxxxxxxxxx>
• Re: Shortcuts to counting rules?
  • From: Rick Jones <rick.jones2@xxxxxx>
• Re: Userland Netfilter
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: Userland Netfilter
  • From: Sebastien Tricaud <stricaud@xxxxxx>
• Re: Shortcuts to counting rules?
  • From: Rick Jones <rick.jones2@xxxxxx>
• Userland Netfilter
  • From: "Gilad Benjamini" <gilad.benjamini@xxxxxxxxx>
• [OffTopic] Re: NAT in an already established TCP connection
  • From: Diego Casado Mansilla <diego.casadomansilla@xxxxxxxxx>
• Re: Shortcuts to counting rules?
  • From: Philip Craig <philipc@xxxxxxxxxxxx>
• Shortcuts to counting rules?
  • From: Rick Jones <rick.jones2@xxxxxx>
• help with whitelist
  • From: "Joey" <Joey@xxxxxxxxx>
• Re: -j ROUTE and conntrack
  • From: Paul Evans <paul@xxxxxxxxxxxxx>
• "invalid packets" and "bad HW ICMP checksum"
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: [ANNOUNCE] iface match released
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] iface match released
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• conntrackd and CacheWriteThrough
  • From: md@xxxxxxxx (Marco d'Itri)
• Re: [ANNOUNCE] iface match released
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• -j ROUTE and conntrack
  • From: Paul Evans <paul@xxxxxxxxxxxxx>
• RE: [ANNOUNCE] iface match released
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• Re: libpcap (tcpdump) and netfilter (iptables)
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] iface match released
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• RE: [ANNOUNCE] iface match released
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• Re: libpcap (tcpdump) and netfilter (iptables)
  • From: Thomas Jacob <jacob@xxxxxxxxxxxxx>
• [ANNOUNCE] iface match released
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: libpcap (tcpdump) and netfilter (iptables)
  • From: Gáspár Lajos <gaspar.lajos@xxxxxx>
• Re: libpcap (tcpdump) and netfilter (iptables)
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: libpcap (tcpdump) and netfilter (iptables)
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• libpcap (tcpdump) and netfilter (iptables)
  • From: Pierre LEBRECH <pierre.lebrech@xxxxxxxxxxx>
• libxt_conntrack.c ctdir patch
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: NAT in an already established TCP connection
  • From: Julien Vehent <julien@xxxxxxxxxxxxxx>
• Re: NAT in an already established TCP connection
  • From: Diego Casado Mansilla <diego.casadomansilla@xxxxxxxxx>
• Re: [PATCH 1/7] netns ebtables: part 1
  • From: Patrick McHardy <kaber@xxxxxxxxx>