Linux TCP/IP Netfilter

• Thread Index

• ICMP packets associated with NAT connections sent out wrong interface?
  • From: Jordan Russell <jr-list-2007@xxxxxx>
• Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server.
  • From: Marcos Granero Vaz - Informatica/MTZ <MarcosGranero@xxxxxxxxxxxxxx>
• Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server.
  • From: "rajeev.sekhar" <rajeev.sekhar@xxxxxxxxxxxx>
• RE: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server.
  • From: "Neil Aggarwal" <neil@xxxxxxxxxxxxxxxxxx>
• Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• regarding iptables and DROP
  • From: "Mohammad Norouzi" <mnrz57@xxxxxxxxx>
• Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server.
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server.
  • From: "rajeev.sekhar" <rajeev.sekhar@xxxxxxxxxxxx>
• NAT blocking HTTP .. But only some of it.
  • From: Chris Spiegel <netfilter@xxxxxxxxxxxxx>
• Re: Bonding & Bridging.
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• getsockopt failed strangely: Invalid argument
  • From: "Yang" <aybtdym02@xxxxxxxxxxxxxx>
• getsockopt failed strangely: Invalid argument
  • From: "Yang" <aybtdym02@xxxxxxxxxxxxxx>
• Bonding & Bridging.
  • From: "semi linux" <linuxsemi@xxxxxxxxx>
• Bridge, DNAT, New Tables and ip rules
  • From: "semi linux" <linuxsemi@xxxxxxxxx>
• Improve queue handler performance
  • From: Rayed Alrashed <rayed@xxxxxxxxxxxx>
• Re: ..prevention, was: syn DDoS attack solution
  • From: "supportnew@xxxxxxxxxxxx" <supportnew@xxxxxxxxxxxx>
• RE: ..prevention, was: syn DDoS attack solution
  • From: "R. DuFresne" <dufresne@xxxxxxxxxxx>
• Any advantage of multicore for netfilter/iptables?
  • From: Fran Fabrizio <fran@xxxxxxxxxxx>
• Two gateway for two diff eth in one machine
  • From: "rajeev.sekhar" <rajeev.sekhar@xxxxxxxxxxxx>
• Re: Bridge, DNAT, New Tables and ip rules
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• weird mac address format
  • From: "Daniel Castelhano" <CastelhanoD@xxxxxxxxxxxx>
• RE: ..prevention, was: syn DDoS attack solution
  • From: "Martin McKeay" <mmckeay@xxxxxxxxxxxxxxx>
• Re: ..prevention, was: syn DDoS attack solution
  • From: Arnt Karlsen <arnt@xxxxxxx>
• RE: ..prevention, was: syn DDoS attack solution
  • From: "Martin McKeay" <mmckeay@xxxxxxxxxxxxxxx>
• How to remove TCP options with NAT?
  • From: Fabrice Triboix <gstdbg@xxxxxxxxx>
• RE: ..prevention, was: syn DDoS attack solution
  • From: "R. DuFresne" <dufresne@xxxxxxxxxxx>
• Re: Bridge, DNAT, New Tables and ip rules
  • From: "semi linux" <linuxsemi@xxxxxxxxx>
• RE: ..prevention, was: syn DDoS attack solution
  • From: "Martin McKeay" <mmckeay@xxxxxxxxxxxxxxx>
• Re: ipsec connection problems though netfilter.
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: Transparent web proxy
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Transparent web proxy
  • From: Ray Leach <raymondl@xxxxxxxxxxxxxxxxxxxxxx>
• Re: Transparent web proxy
  • From: Ian Moyce <ian@xxxxxxxxxxxxxx>
• ipsec connection problems though netfilter.
  • From: Martin Cheatle <marche@xxxxxxxxxxxxxxx>
• Re: Transparent web proxy
  • From: Ray Leach <raymondl@xxxxxxxxxxxxxxxxxxxxxx>
• Transparent web proxy
  • From: Ian Moyce <ian@xxxxxxxxxxxxxx>
• Re: Bridge, DNAT, New Tables and ip rules
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Bridge, DNAT, New Tables and ip rules
  • From: "semi linux" <linuxsemi@xxxxxxxxx>
• Re: --match recent
  • From: Olivier <olivierk@xxxxxxxxxxxxxxxx>
• Re: --match recent
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: --match recent
  • From: Olivier <olivierk@xxxxxxxxxxxxxxxx>
• Re: multiple routing tables for internal router programs
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• multiple routing tables for internal router programs
  • From: Andrea <andang76@xxxxxxxxx>
• Re: --match recent
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: iptables state transfer
  • From: "Martin Schiøtz" <malinux@xxxxxxxxx>
• Re: iptables state transfer
  • From: Petr Pisar <petr.pisar@xxxxxxxx>
• iptables state transfer
  • From: "Martin Schiøtz" <malinux@xxxxxxxxx>
• --match recent
  • From: olivierk@xxxxxxxxxxxxxxxx
• Re: Limitations on connections
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: iptables port forwarding to tun0 device
  • From: Yaniv Fine <yfine@xxxxxxxxxx>
• Re: iptables port forwarding to tun0 device
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• iptables/pptp restriction
  • From: "Hu" <budget@xxxxxxxxxxxx>
• linux-2.6.21 and iptables1.3.7 modprobe could not parse modules.dep
  • From: "Vincent Wen" <vincent.wen@xxxxxxxxxxxxxxxx>
• iptables port forwarding to tun0 device
  • From: Yaniv Fine <yfine@xxxxxxxxxx>
• Limitations on connections
  • From: "Christos Panagiotakis" <chrismfz@xxxxxxxxx>
• Re: Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables)
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables)
  • From: Stefan Mayr <stefan@xxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• rtacct: history is aged out, resetting
  • From: "semi linux" <linuxsemi@xxxxxxxxx>
• Re: ..prevention, was: syn DDoS attack solution
  • From: Arnt Karlsen <arnt@xxxxxxx>
• Re: Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables)
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Logging NAT Translations
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• linux-2.6.21 iptables and NAT
  • From: John Zavgren <john@xxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables)
  • From: Stefan Mayr <stefan@xxxxxxxxxxxxxx>
• RE: ..prevention, was: syn DDoS attack solution
  • From: "Martin McKeay" <mmckeay@xxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Combining rules
  • From: Ian Moyce <ian@xxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: Combining rules
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: "noa levy" <noalevy@xxxxxxxxx>
• linux-2.6.21 and iptables1.3.7 modprobe could not parse modules.dep
  • From: "ss vincent" <w112318@xxxxxxxxxxx>
• Combining rules
  • From: Ian Moyce <ian@xxxxxxxxxxxxxx>
• Re: Logging NAT Translations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• allow this specific traffic
  • From: Andres Paglayan <andres@xxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: Logging NAT Translations
  • From: "Craig Bernstein" <cbernstein@xxxxxxxxxxxxxx>
• Re: Logging NAT Translations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Logging NAT Translations
  • From: "Craig Bernstein" <cbernstein@xxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: "noa levy" <noalevy@xxxxxxxxx>
• Re: SNAT before IPSec
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: "noa levy" <noalevy@xxxxxxxxx>
• Re: SNAT before IPSec
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: "noa levy" <noalevy@xxxxxxxxx>
• Re: SNAT before IPSec
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: ..prevention, was: syn DDoS attack solution
  • From: Arnt Karlsen <arnt@xxxxxxx>
• Re: Restricting applications/protocols to use specific ports using iptables, is this possible
  • From: Marc Haber <mh+netfilter@xxxxxxxxxxxx>
• Re: Restricting applications/protocols to use specific ports using iptables, is this possible
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• Re: Restricting applications/protocols to use specific ports using iptables, is this possible
  • From: jwlargent <jwlargent@xxxxxxxxxxx>
• Re: ..prevention, was: syn DDoS attack solution
  • From: Steven M Campbell <Netfilter@xxxxxxxxxxxxx>
• ..prevention, was: syn DDoS attack solution
  • From: Arnt Karlsen <arnt@xxxxxxx>
• Re: SNAT before IPSec
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: syn DDoS attack solution
  • From: Steven M Campbell <Netfilter@xxxxxxxxxxxxx>
• Re: SNAT before IPSec
  • From: Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx>
• SNAT before IPSec
  • From: "noa levy" <noalevy@xxxxxxxxx>
• Problem with FTP and NAT
  • From: Werner Maier <maier@xxxxxxxxx>
• Re: syn DDoS attack solution
  • From: Bgs <bgs@xxxxxx>
• RE: syn DDoS attack solution
  • From: "R. DuFresne" <dufresne@xxxxxxxxxxx>
• Re: problem matching marked packets in nat PREROUTING chain
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• RE: syn DDoS attack solution
  • From: "Martin McKeay" <mmckeay@xxxxxxxxxxxxxxx>
• Single packet authorization: fwknop-1.8 release
  • From: Michael Rash <mbr@xxxxxxxxxxxxxx>
• RE: syn DDoS attack solution
  • From: "Ric Messier" <kilroy@xxxxxxxxxxx>
• Re: Restricting applications/protocols to use specific ports using iptables, is this possible
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: conntrack-tools fails to compile
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Restricting applications/protocols to use specific ports using iptables, is this possible
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• Re: Restricting applications/protocols to use specific ports using iptables, is this possible
  • From: Marc Haber <mh+netfilter@xxxxxxxxxxxx>
• Restricting applications/protocols to use specific ports using iptables, is this possible
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• problem matching marked packets in nat PREROUTING chain
  • From: "Richard Hauswald" <richard.hauswald@xxxxxx>
• Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• problem matching marked packets in nat PREROUTING chain
  • From: "Richard Hauswald" <richard.hauswald@xxxxxx>
• resolve reverse SRC DST
  • From: Matteo Cisilino <matteo@xxxxxxxxxxxx>
• Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting
  • From: Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] xt_connlimit (iptables) - connection limiting
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 2/2] xt_connlimit (iptables) - connection limiting
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 1/2] xt_connlimit (kernel) - connection limiting
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 0/2] xt_connlimit - connection limiting
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: [PATCH 0/2] xt_u32 - match arbitrary bits and bytes of a packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Enforce Per User IP Traffic Quota
  • From: Marc Haber <mh+netfilter@xxxxxxxxxxxx>
• Enforce Per User IP Traffic Quota
  • From: Gardner <gbickford@xxxxxxxxx>
• [PATCH 2/2] xt_u32 (iptables) - match arbitrary bits and bytes of a packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 1/2] xt_u32 (kernel) - match arbitrary bits and bytes of a packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 0/2] xt_u32 - match arbitrary bits and bytes of a packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: How to match protocol 0
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: syn DDoS attack solution
  • From: "R. DuFresne" <dufresne@xxxxxxxxxxx>
• Re: How to match protocol 0
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• conntrack-tools fails to compile
  • From: t@xxxxxxxxxx
• Re: syn DDoS attack solution
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• RE: syn DDoS attack solution
  • From: "Ric Messier" <kilroy@xxxxxxxxxxx>
• Re: syn DDoS attack solution
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: syn DDoS attack solution
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: Force use of outgoing IP address
  • From: "John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxx>
• Re: Force use of outgoing IP address
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Force use of outgoing IP address
  • From: "Neil Russell" <NeilR@xxxxxxxxxxxx>
• Re: Default deny rule
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: syn DDoS attack solution
  • From: Bgs <bgs@xxxxxx>
• Re: Enabling internal connections to transparently connect via external IP address
  • From: Martijn Lievaart <m@xxxxxxx>
• RE: syn DDoS attack solution
  • From: "Ric Messier" <kilroy@xxxxxxxxxxx>
• Re: Two NICs, same network...
  • From: Tommy W <tommy@xxxxxxxxxxxxxxxxxx>
• Re: syn DDoS attack solution
  • From: Bgs <bgs@xxxxxx>
• Re: syn DDoS attack solution
  • From: Bgs <bgs@xxxxxx>
• Re: -m owner and INPUT chain
  • From: Ernest Davnis <mark@xxxxxxxxxxx>
• Re: syn DDoS attack solution
  • From: "Tony.Ho" <support@xxxxxxxxxxxx>
• Re: Enabling internal connections to transparently connect via external IP address
  • From: Robby Workman <netfilter@xxxxxxxxxxxxx>
• Re: Two NICs, same network...
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Two NICs, same network...
  • From: "semi linux" <linuxsemi@xxxxxxxxx>
• Enabling internal connections to transparently connect via external IP address
  • From: Chris Willis <chris@xxxxxxxxxxxxx>
• RE: syn DDoS attack solution
  • From: "Ric Messier" <kilroy@xxxxxxxxxxx>
• Re: syn DDoS attack solution
  • From: "R. DuFresne" <dufresne@xxxxxxxxxxx>
• syn DDoS attack solution
  • From: Bgs <bgs@xxxxxx>
• Need to get source and destination IP?
  • From: amna bilal <bilal.amna@xxxxxxxxx>
• Welcome to the Mailing List.
  • From: bilal.amna@xxxxxxxxx
• Confirm your subscription
  • From: bilal.amna@xxxxxxxxx
• Re: Default deny rule
  • From: Gopinath <gopinath.u@xxxxxxxxx>
• RE: NAT rules for VPN only allowing one user?
  • From: "Neil Aggarwal" <neil@xxxxxxxxxxxxxxxxxx>
• Re: NAT rules for VPN only allowing one user?
  • From: Gregory Carter <gcarter@xxxxxxxxx>
• Re: NAT rules for VPN only allowing one user?
  • From: Martijn Lievaart <m@xxxxxxx>
• RE: NAT rules for VPN only allowing one user?
  • From: "Martin McKeay" <mmckeay@xxxxxxxxxxxxxxx>
• RE: NAT rules for VPN only allowing one user?
  • From: "Neil Aggarwal" <neil@xxxxxxxxxxxxxxxxxx>
• Re: iptables 1.3.7 doesn't properly test for condition patch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: NAT rules for VPN only allowing one user?
  • From: "Martin McKeay" <mmckeay@xxxxxxxxxxxxxxx>
• Re: NAT rules for VPN only allowing one user?
  • From: Michael Gale <michael.gale@xxxxxxxxx>
• Looking for feedback on our GUI
  • From: "Martin McKeay" <mmckeay@xxxxxxxxxxxxxxx>
• RE: NAT rules for VPN only allowing one user?
  • From: "Neil Aggarwal" <neil@xxxxxxxxxxxxxxxxxx>
• Re: iptables 1.3.7 doesn't properly test for condition patch
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: NAT rules for VPN only allowing one user?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Port forwarding without masquerading..???
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• NAT rules for VPN only allowing one user?
  • From: "Neil Aggarwal" <neil@xxxxxxxxxxxxxxxxxx>
• RE: T1 router and multiple public ips
  • From: Paul Blondé <jpb@xxxxxxxx>
• Re: Looking for a how-to type battle plan for 2 physical subnets and an openvpn tunnel.
  • From: "R. DuFresne" <dufresne@xxxxxxxxxxx>
• Re: Default deny rule
  • From: Gopinath <gopinath.u@xxxxxxxxx>
• Re: Default deny rule
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• [Announce] NuFW 2.2 is available
  • From: Eric Leblond <eric@xxxxxx>
• Re: iptables 1.3.7 doesn't properly test for condition patch
  • From: Andrew Schulman <andrex@xxxxxxxxxxxxxxxxx>
• condition match: incompatible pointer types
  • From: Andrew Schulman <andrex@xxxxxxxxxxxxxxxxx>
• time match: build errors with kernel 2.6.21
  • From: Andrew Schulman <andrex@xxxxxxxxxxxxxxxxx>
• T1 router and multiple public ips
  • From: "jamil egdemir" <unclejamil@xxxxxxxxx>
• Port forwarding without masquerading..???
  • From: dummy@xxxxxxxxxxxxxx
• Newbies questions compiling uClinux-dist-20070130 with m68k-uclinux-tools-20061214
  • From: "Francisco Perea" <faperea@xxxxxxxxx>
• Re: -m owner and INPUT chain
  • From: "Fernando R. Durso" <fernando@xxxxxxxxxxxxxx>
• -m owner and INPUT chain
  • From: Ernest Davnis <mark@xxxxxxxxxxx>
• Re: Default deny rule
  • From: Gopinath <gopinath.u@xxxxxxxxx>
• iptables 1.3.7 doesn't properly test for condition patch
  • From: Andrew Schulman <andrex@xxxxxxxxxxxxxxxxx>
• Re: DNAT rule requires extra firewall pinhole
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: DNAT rule requires extra firewall pinhole
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• DNAT rule requires extra firewall pinhole
  • From: Jeff Weber <jweber@xxxxxxxxxxx>
• Re: Two NICs, same network...
  • From: "semi linux" <linuxsemi@xxxxxxxxx>
• RE: Dynamic kernel module load
  • From: Paul Blondé <jpb@xxxxxxxx>
• Re: Dynamic kernel module load
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: Rules to block traffic form an interface to a netblock
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Dynamic kernel module load
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Dynamic kernel module load
  • From: "Paul Harlow" <pharlow@xxxxxxxx>
• Re: Conntrack rule timeout problem
  • From: Pat Riehecky <prieheck@xxxxxxx>
• [ANNOUNCE] Release conntrack-tools 0.9.3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: URL Logging
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: using packet filtering to discover TCP end-to-end latency
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: Conntrack rule timeout problem
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Queued packet in user space: network order or host order?
  • From: "Michael Ransburg" <michael.ransburg@xxxxxxxxx>
• Re: Conntrack rule timeout problem
  • From: Pat Riehecky <prieheck@xxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Conntrack rule timeout problem
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Rules to block traffic form an interface to a netblock
  • From: trellmor@xxxxxxxxxxxxx
• Re: redirect 127.0.0.1:25 -> 127.0.0.1:2000
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Jon Tim <lcguy229@xxxxxxxxx>
• RE: simple question
  • From: "Filka Michal" <Michal.Filka@xxxxxxxxxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Petr Pisar <xpisar@xxxxxxxxxx>
• Re: URL Logging
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: NAT addresses - RFC or tradition?
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Logging NAT Translations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: NAT addresses - RFC or tradition?
  • From: Leonardo Rodrigues Magalhães <leolistas@xxxxxxxxxxxxxx>
• Re: NAT addresses - RFC or tradition?
  • From: Marius-Iulian Corici <marius-iulian.corici@xxxxxxxxxxxxxxxxxxx>
• Re: NAT addresses - RFC or tradition?
  • From: "Tim Evans" <tkevans@xxxxxxxxxxx>
• Re: NAT addresses - RFC or tradition?
  • From: Andre Guimarães <ramoni@xxxxxxxxxxxxxxx>
• NAT addresses - RFC or tradition?
  • From: Paul Blondé <jpb@xxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Robert LeBlanc <robert@xxxxxxxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] Release libnfnetlink_conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Robert LeBlanc <robert@xxxxxxxxxxxxx>
• RE: ip_conntrack table full after upgrade from RHEL3 (2.4/1.2.8) to RHEL4U4 (2.6.9/1.2.11)
  • From: Paul Blondé <jpb@xxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• RE: iptables doesn't keep chain list after reboot
  • From: Paul Blondé <jpb@xxxxxxxx>
• Re: Bridge Transparent Proxy
  • From: Robert LeBlanc <robert@xxxxxxxxxxxxx>
• Bridge Transparent Proxy
  • From: Jon Tim <lcguy229@xxxxxxxxx>
• simple question
  • From: "Filka Michal" <Michal.Filka@xxxxxxxxxxxxxxx>
• problems applying ipset patch
  • From: Andrea <andang76@xxxxxxxxx>
• Re: ip_conntrack table full after upgrade from RHEL3 (2.4/1.2.8) to RHEL4U4 (2.6.9/1.2.11)
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: is it possible to block ip packets that contains experimental tcp options ?
  • From: Glenn Terjesen <glenn@xxxxxxxxx>
• ip_conntrack table full after upgrade from RHEL3 (2.4/1.2.8) to RHEL4U4 (2.6.9/1.2.11)
  • From: Alex Tang <altitude@xxxxxxxxxxxx>
• URL Logging
  • From: "Muzinich, Mike" <MuziniM@xxxxxxxxxxx>
• iptables doesn't keep chain list after reboot
  • From: TheNokia <nokiairc@xxxxxxxxx>
• Re: is it possible to block ip packets that contains experimental tcp options ?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Conntrack rule timeout problem
  • From: Pat Riehecky <prieheck@xxxxxxx>
• Re: Default deny rule
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Packets lost
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Policy targets...
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• using packet filtering to discover TCP end-to-end latency
  • From: Rohit Grover <rgrover1@xxxxxxxxx>
• RE: is it possible to block ip packets that contains experimental tcp options ?
  • From: Glenn Terjesen <glenn@xxxxxxxxx>
• Re: mini-hack for country-based filter.
  • From: patric <pakar@xxxxxxxxxxxxxxx>
• RE: is it possible to block ip packets that contains experimental tcp options ?
  • From: Glenn Terjesen <glenn@xxxxxxxxx>
• Re: Logging NAT Translations
  • From: Petr Pisar <xpisar@xxxxxxxxxx>
• Re: Help with DOS attack
  • From: "Jonny K" <mrjk600@xxxxxxxxx>
• Logging NAT Translations
  • From: "Craig Bernstein" <cbernstein@xxxxxxxxxxxxxx>
• pptp and iptables
  • From: Tiron Adrian <tiron_adrian@xxxxxxxxx>
• RE: Help with DOS attack
  • From: "Joris Dobbelsteen" <Joris@xxxxxxxxxxxxxxxxxxxxx>
• Re: Help with DOS attack
  • From: "Jonny K" <mrjk600@xxxxxxxxx>
• no connection
  • From: William Perry <wlperry@xxxxxxxxxxxxxxxx>
• Re: redirect 127.0.0.1:25 -> 127.0.0.1:2000
  • From: Alex Tang <altitude@xxxxxxxxxxxx>
• Re: redirect 127.0.0.1:25 -> 127.0.0.1:2000
  • From: Alex Tang <altitude@xxxxxxxxxxxx>
• redirect 127.0.0.1:25 -> 127.0.0.1:2000
  • From: Alex Tang <altitude@xxxxxxxxxxxx>
• iptables and poptop
  • From: Tiron Adrian <tiron_adrian@xxxxxxxxx>
• Re: problem when compiling lbnfnetlink
  • From: "Eric Leblond" <eric@xxxxxx>
• problem when compiling lbnfnetlink
  • From: "Filka Michal" <Michal.Filka@xxxxxxxxxxxxxxx>
• Re: TCP RST vulnerability - handling question
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: TCP RST vulnerability - handling question
  • From: "Mike C" <smith.not.western@xxxxxxxxx>
• [solved?] Re: UDP packets are not being forwarded to pc on the local net.
  • From: "k bah" <kbah@xxxxxxxxxxxxx>
• RE: TCP RST vulnerability - handling question
  • From: Paul Blondé <jpb@xxxxxxxx>
• RE: is it possible to block ip packets that contains experimentaltcp options ?
  • From: Paul Blondé <jpb@xxxxxxxx>
• RE: is it possible to block ip packets that contains experimental tcp options ?
  • From: Marc Cozzi <cozzi@xxxxxx>
• TCP RST vulnerability - handling question
  • From: "Mike C" <smith.not.western@xxxxxxxxx>
• connection refused trying to bind AF_INET to AF_NETLINK/NETFILTER socket
  • From: "Sussman, Scott" <ssussman@xxxxxxxxxxxxxxxxxxx>
• RE: is it possible to block ip packets that contains experimentaltcp options ?
  • From: Paul Blondé <jpb@xxxxxxxx>
• Re: iptables doesn't keep chain list after reboot
  • From: "Benjamin RIOU" <pandolphe@xxxxxxxxxxxxxxxxxxxx>
• RE: iptables doesn't keep chain list after reboot
  • From: Paul Blondé <jpb@xxxxxxxx>
• iptables doesn't keep chain list after reboot
  • From: TheNokia <nokiairc@xxxxxxxxx>
• Re: Questions about DHCP firewall rules
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• Re: Packets lost
  • From: "Vasantha Kumar Puttappa" <vasanthakumar@xxxxxxxxxx>
• Re: Match specific netbios flag?
  • From: "k bah" <kbah@xxxxxxxxxxxxx>
• Re: Looking for a how-to type battle plan for 2 physical subnets and an openvpn tunnel.
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: Match specific netbios flag?
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• UDP packets are not being forwarded to pc on the local net.
  • From: "k bah" <kbah@xxxxxxxxxxxxx>
• Match specific netbios flag?
  • From: "k bah" <kbah@xxxxxxxxxxxxx>
• Questions about DHCP firewall rules
  • From: Nicholas Kline <kakster7@xxxxxxxxxxxxx>
• SPAM(6.0) Re: Looking for a how-to type battle plan for 2 physical subnets and an openvpn tunnel.
  • From: patric <pakar@xxxxxxxxxxxxxxx>
• Looking for a how-to type battle plan for 2 physical subnets and an openvpn tunnel.
  • From: "Bill Ries-Knight" <steelhoof@xxxxxxxxx>
• RE: is it possible to block ip packets that contains experimental tcp options ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Packets lost
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Packets lost
  • From: "Vasantha Kumar Puttappa" <vasanthakumar@xxxxxxxxxx>
• RE: is it possible to block ip packets that contains experimental tcp options ?
  • From: Marc Cozzi <cozzi@xxxxxx>
• is it possible to block ip packets that contains experimental tcp options ?
  • From: Glenn Terjesen <glenn@xxxxxxxxx>
• Unexpected UDP behavior using ipt_recent
  • From: "Roger Venable" <roger38@xxxxxxxx>
• SPAM(6.2) mini-hack for country-based filter.
  • From: patric <pakar@xxxxxxxxxxxxxxx>
• IPSET iptree problem
  • From: Łukasz Nierychło <nofast@xxxxxxxxxxxxx>
• time /date server
  • From: MAPASA Informatica - Assistenza Tecnica <paolo@xxxxxxxxxxxxxxxxxxxxx>
• Re: Policy targets...
  • From: Petr Pisar <xpisar@xxxxxxxxxx>
• Re: Policy targets...
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Firewall L7
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: netfilter load sharing
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Firewall L7
  • From: "Fernando R. Durso" <fernando@xxxxxxxxxxxxxx>
• Re: Firewall L7
  • From: "Stephan Higuti" <higuti.sam@xxxxxxxxx>
• 12 interface FTP server - Possible routing problem - Please help
  • From: Sumit Malik <sumit_malik1@xxxxxxxxx>
• Re: Two internet connection in a gateway server howto.
  • From: Denis <denismpa@xxxxxxxxx>
• Re: Default deny rule
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Problem with connection tracking in IPtables!!
  • From: Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx>
• Async processing using NetFilters
  • From: Lokesh <lokeshnb@xxxxxxxxxx>
• netfilter load sharing
  • From: Thomas Fragstein <thomas@xxxxxxxxxxxx>
• Re: Default deny rule
  • From: Gopinath <gopinath.u@xxxxxxxxx>
• Re: Questions about DHCP firewall rules
  • From: "Anatoly Y." <snelius@xxxxxx>
• Questions about DHCP firewall rules
  • From: Nicholas Kline <kakster7@xxxxxxxxxxxxx>
• Re: Firewall L7
  • From: "Stephan Higuti" <higuti.sam@xxxxxxxxx>
• Re: persistent packet marking for use in VPN creation.
  • From: Gregory Carter <gcarter@xxxxxxxxx>
• persistent packet marking for use in VPN creation.
  • From: Sven Agnew <sven@xxxxxxxxxx>
• Re: Policy targets...
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Problem with connection tracking in IPtables!!
  • From: "Ramsurrun Visham" <vishamr@xxxxxxxxx>
• Re: Policy targets...
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Policy targets...
  • From: Pedro Gonçalves <pedro.pandre@xxxxxxxxx>
• Policy targets...
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Re: Default deny rule
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• NAT "triangulation" and already opened nat port not reachable
  • From: Andres Paglayan <andres@xxxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Filter a TCP stream based on a text appearing in the initial IP packet of the stream
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Bas Verhoeven <netfilter@xxxxxxxxxx>
• Re: Filter a TCP stream based on a text appearing in the initial IP packet of the stream
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• how to return a packet back to netfilter
  • From: gcho <gcho@xxxxxxxxxxx>
• [2.6.21 linux kernel] NAT on sparc64
  • From: BERTRAND Joël <joel.bertrand@xxxxxxxxxxx>
• Re: delete NAT conntrack entry.
  • From: Wakko Warner <wakko@xxxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Bas Verhoeven <netfilter@xxxxxxxxxx>
• Re: Filter a TCP stream based on a text appearing in the initial IP packet of the stream
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Filter a TCP stream based on a text appearing in the initial IP packet of the stream
  • From: "Michael Ransburg" <michael.ransburg@xxxxxxxxx>
• Re: delete NAT conntrack entry.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Fw: conntrack and SIP
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: delete NAT conntrack entry.
  • From: Wakko Warner <wakko@xxxxxxxxxxxx>
• Re: delete NAT conntrack entry.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Problem with connection tracking in IPtables!!
  • From: Nandan Bhat <nlbhat@xxxxxxxxx>
• delete NAT conntrack entry.
  • From: "???" <safecode@xxxxxxxxx>
• Re: Problem with connection tracking in IPtables!!
  • From: Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx>
• Two internet connection in a gateway server howto.
  • From: BipinDas <bipindas.k@xxxxxxxxx>
• Default deny rule
  • From: Gopinath <gopinath.u@xxxxxxxxx>
• RE: Wireless Login Page
  • From: "Brent Wilkinson" <brent@xxxxxxxxxxxx>
• Problem with connection tracking in IPtables!!
  • From: "Ramsurrun Visham" <vishamr@xxxxxxxxx>
• Re: Two NICs, same network...
  • From: "Mark L. Wise" <mark@xxxxxxxxxx>
• Re: IPset included in distro
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Maximilian Wilhelm <max@xxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Bas Verhoeven <netfilter@xxxxxxxxxx>
• Re: Two NICs, same network...
  • From: Sébastien CRAMATTE <scramatte@xxxxxxxxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Maximilian Wilhelm <max@xxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: iptables NAT routing issues
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• iptables NAT routing issues
  • From: Bas Verhoeven <netfilter@xxxxxxxxxx>
• Re: Two NICs, same network...
  • From: David Lang <david.lang@xxxxxxxxxxxxxxxxxx>
• Re: Two NICs, same network...
  • From: "semi linux" <linuxsemi@xxxxxxxxx>
• Re: Two NICs, same network...
  • From: David Lang <david.lang@xxxxxxxxxxxxxxxxxx>
• Re: IPset included in distro
  • From: Eric Leblond <eric@xxxxxx>
• IPset included in distro
  • From: "Randall C Grimshaw" <rgrimsha@xxxxxxx>
• Two NICs, same network...
  • From: "semi linux" <linuxsemi@xxxxxxxxx>
• 'tcpmss' match for ip6tables ?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: IPset and IPv6 support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• IPset and IPv6 support
  • From: husnu demir <hdemir@xxxxxxxxxxx>
• Re: Advanced routing problem -- solution
  • From: Jaap Winius <jwinius@xxxxxxx>
• Unable to see entries in ip_conntrack file!!
  • From: "Ramsurrun Visham" <vishamr@xxxxxxxxx>
• Re: DNAT and local hosts
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: DNAT and local hosts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• RE: DNAT and local hosts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• DNAT and local hosts
  • From: "Pieter De Wit" <Pieter.DeWit@xxxxxxxxxxxxx>
• DNAT and local hosts
  • From: "Pieter De Wit" <Pieter.DeWit@xxxxxxxxxxxxx>
• [OT] iptables and 802.1x authenticator
  • From: "John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: DNAT and local hosts
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Handling queued packets?
  • From: "Michael Ransburg" <michael.ransburg@xxxxxxxxx>
• RE: DNAT and local hosts
  • From: "Pieter De Wit" <Pieter.DeWit@xxxxxxxxxxxxx>
• Re: DNAT and local hosts
  • From: Ray Leach <spoons@xxxxxxxxxx>
• RE: DNAT and local hosts
  • From: "Pieter De Wit" <Pieter.DeWit@xxxxxxxxxxxxx>
• Re: DNAT and local hosts
  • From: Ray Leach <spoons@xxxxxxxxxx>
• RE: DNAT and local hosts
  • From: "Pieter De Wit" <Pieter.DeWit@xxxxxxxxxxxxx>
• Re: DNAT and local hosts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• DNAT and local hosts
  • From: "Pieter De Wit" <Pieter.DeWit@xxxxxxxxxxxxx>
• [ANNOUNCE] Netfilter Workshop 2007 in Karlsruhe, Germany
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] Netfilter Workshop 2007 in Karlsruhe, Germany
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Fw: conntrack and SIP
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: Simulating a "bad" connection.
  • From: Tommy W <tommy@xxxxxxxxxxxxxxxxxx>
• Re: Advanced routing problem
  • From: Jaap Winius <jwinius@xxxxxxx>
• Re: Simulating a "bad" connection.
  • From: Andy Furniss <lists@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: Rules review
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: Advanced routing problem
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: [OT] iptables and 802.1x authenticator
  • From: Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx>
• Re: [OT] iptables and 802.1x authenticator
  • From: "John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxx>
• Rules review
  • From: Scott <scott@xxxxxxxxxxxxx>
• Advanced routing problem
  • From: Jaap Winius <jwinius@xxxxxxx>
• Re: [OT] iptables and 802.1x authenticator
  • From: Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx>
• [OT] iptables and 802.1x authenticator
  • From: "John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxx>
• Re: Simulating a "bad" connection.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Simulating a "bad" connection.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Simulating a "bad" connection.
  • From: Tommy W <tommy@xxxxxxxxxxxxxxxxxx>
• Re: Simulating a "bad" connection.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: libipt_time.so
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Simulating a "bad" connection.
  • From: Tommy W <tommy@xxxxxxxxxxxxxxxxxx>
• Re: Wireless Login Page
  • From: Kirk Wallace <kwallace@xxxxxxxxxxxxxxxxxx>
• Re: libipt_time.so
  • From: "Benjamin RIOU" <pandolphe@xxxxxxxxxxxxxxxxxxxx>
• libipt_time.so
  • From: Darmoul Ramzi <dardiration@xxxxxxxx>
• conntrack: Operation failed: invalid parameters
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• SIP and NAT conntrack or RTP streams
  • From: cas12@xxxxxxxxxxxxx
• Re: Proxy arping
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Proxy arping
  • From: Martijn Lievaart <m@xxxxxxx>
• conntrack and SIP
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: Forking inside netfilter queue
  • From: Rayed Alrashed <rayed@xxxxxxxxxxxx>
• Re: Proxy arping
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• conntrack -e filter by ethernet addr?
  • From: Alan Ezust <alan.ezust@xxxxxxxxxxxx>
• Re: Forking inside netfilter queue
  • From: "Alex" <alex@xxxxxxxxxxx>
• Proxy arping
  • From: Andres Paglayan <andres@xxxxxxxxxxxx>
• Re: Forking inside netfilter queue
  • From: Rayed Alrashed <rayed@xxxxxxxxxxxx>
• Re: Forking inside netfilter queue
  • From: "Alex" <alex@xxxxxxxxxxx>
• Re: [ANNOUNCE] new match extension about Port Knocking and SPA
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• missing DESTROY events in conntrack -e output?
  • From: Alan Ezust <alan.ezust@xxxxxxxxxxxx>
• [ANNOUNCE] new match extension about Port Knocking and SPA
  • From: fender <frozenspot@xxxxxxxxx>
• Re: SIP conntrack question
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Wireless Login Page
  • From: Michelle Konzack <linux4michelle@xxxxxxxxxx>
• Re: my DNAT not working...help
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• Re: Port forwarding question
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• Re: Question about running nf_queue
  • From: Eric Leblond <eric@xxxxxx>
• Question about running nf_queue
  • From: Bahamin Takhtaei <takhtaei@xxxxxxxxxxxx>
• RE: Can't get --dport to work
  • From: "Krishnamoorthy (Siva) Sivakumar" <ksivakumar@xxxxxxxxxxxxxxxx>
• ip_conntrack crashs box with kernel 2.6.13.1
  • From: "Michael Heimpold" <michael.heimpold@xxxxxxxxxxxxxxxxxxxx>
• Can't get --dport to work
  • From: "Joel Lindsay" <joel@xxxxxxxxxxx>
• Re: Forking inside netfilter queue
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Forking inside netfilter queue
  • From: Rayed <rayed@xxxxxxxxxxxx>
• SIP conntrack question
  • From: "Sanjoy Dey" <sdpmops@xxxxxxxxx>
• Port forwarding question
  • From: David <shadoweyez@xxxxxxxxx>
• my DNAT not working...help
  • From: <sneak@xxxxxxxxxxx>
• Re: Forking inside netfilter queue
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Forking inside netfilter queue
  • From: Rayed <rayed@xxxxxxxxxxxx>
• RE: Port forwarding not working
  • From: "Neil Aggarwal" <neil@xxxxxxxxxxxxxxxxxx>
• [PATCH] linux 2.4, RPC conntrack (1 of 2)
  • From: Lee Kok Seng <kokseng@xxxxxxxx>
• [PATCH] linux 2.4, RPC conntrack (2 of 2)
  • From: Lee Kok Seng <kokseng@xxxxxxxx>
• Re: Layer (5,6,7) based NAT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Layer (5,6,7) based NAT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Layer (5,6,7) based NAT
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: Layer (5,6,7) based NAT
  • From: Kirk Wallace <kwallace@xxxxxxxxxxxxxxxxxx>
• Re: DHCP & remote ssh logins
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: in-memory table change
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: Port forwarding not working
  • From: Jim Laurino <nfcan.x.jimlaur@xxxxxxxx>
• Layer (5,6,7) based NAT
  • From: "Adam" <adam@xxxxxxxxxx>
• DHCP & remote ssh logins
  • From: Phil Rhoades <phil@xxxxxxxxxxxxx>
• RE: Port forwarding not working (nfcan: to exclusive) (nfcan: to exclusive)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• RE: Port forwarding not working (nfcan: to exclusive) (nfcan: to exclusive)
  • From: "Neil Aggarwal" <neil@xxxxxxxxxxxxxxxxxx>
• in-memory table change
  • From: Július Bemš <julius.bems@xxxxxxxxx>
• NATing Not wotking
  • From: <sneak@xxxxxxxxxxx>
• Re: Port forwarding not working (nfcan: to exclusive) (nfcan: to exclusive)
  • From: Jim Laurino <nfcan.x.jimlaur@xxxxxxxx>
• Re: Port forwarding not working (nfcan: to exclusive)
  • From: neil@xxxxxxxxxxxxxxxxxx
• Re: Port forwarding not working (nfcan: to exclusive)
  • From: Jim Laurino <nfcan.x.jimlaur@xxxxxxxx>
• Port forwarding not working
  • From: "Neil Aggarwal" <neil@xxxxxxxxxxxxxxxxxx>
• Wireless Login Page
  • From: Kirk Wallace <kwallace@xxxxxxxxxxxxxxxxxx>
• Re: [Fwd: Re: Wireless Login Page]
  • From: Daniel Lopes <lopsch@xxxxxxxxxx>
• Re: Wireless Login Page
  • From: "Alex" <alex@xxxxxxxxxxx>
• [Fwd: Re: Wireless Login Page]
  • From: Kirk Wallace <kwallace@xxxxxxxxxxxxxxxxxx>
• Re: nating / routing to device or to device's ip?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: google.com
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• nating / routing to device or to device's ip?
  • From: Andres Paglayan <andres@xxxxxxxxxxxx>
• google.com
  • From: dhottinger@xxxxxxxxxxxxxxxxxxxxxx
• Re: Masquerade based on skb->mark ?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Wireless Login Page
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Wireless Login Page
  • From: "Alex" <alex@xxxxxxxxxxx>
• Wireless Login Page
  • From: Kirk Wallace <kwallace@xxxxxxxxxxxxxxxxxx>
• Re: Masquerade based on skb->mark ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Masquerade based on skb->mark ?
  • From: Ben Greear <greearb@xxxxxxxxxxxxxxx>
• Re: Masquerade based on skb->mark ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Masquerade based on skb->mark ?
  • From: Ben Greear <greearb@xxxxxxxxxxxxxxx>
• Re: Masquerade based on skb->mark ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Yet another local nat/port redirecting question
  • From: Henrik Martin <henrik@xxxxxxxxxxx>
• RE: Iptables rule on span traffic
  • From: "Krishnamoorthy (Siva) Sivakumar" <ksivakumar@xxxxxxxxxxxxxxxx>
• Re: Yet another local nat/port redirecting question
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• RE: Iptables rule on span traffic
  • From: "Krishnamoorthy (Siva) Sivakumar" <ksivakumar@xxxxxxxxxxxxxxxx>
• Re: tcp_window_tracking / tcp sequence number tracking ?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Yet another local nat/port redirecting question
  • From: Henrik Martin <henrik@xxxxxxxxxxx>
• Re: IPMark won't compile on a vanilla 2.6.20 kernel
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Yet another local nat/port redirecting question
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: tcp_window_tracking / tcp sequence number tracking ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Masquerade based on skb->mark ?
  • From: Ben Greear <greearb@xxxxxxxxxxxxxxx>
• Yet another local nat/port redirecting question
  • From: Henrik Martin <henrik@xxxxxxxxxxx>
• Re: IPTables NAT: Strange behaviour: bug?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: SYN Proxy for iptables?
  • From: "Andrew Kraslavsky" <andykras@xxxxxxxxxxx>
• Very strange ip_conntrack_max value with kernel 2.6.20 !!!
  • From: Sébastien CRAMATTE <scramatte@xxxxxxxxxxxxxxxxx>
• IPMark won't compile on a vanilla 2.6.20 kernel
  • From: Sébastien CRAMATTE <scramatte@xxxxxxxxxxxxxxxxx>
• Re: Geoip patch and its features
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: connlimit with fc6
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• connlimit with fc6
  • From: kako@xxxxxxxx
• IPTables NAT: Strange behaviour: bug?
  • From: Pedro Gonçalves <pedro.pandre@xxxxxxxxx>
• IPTables NAT: Strange behaviour: bug?
  • From: Pedro Gonçalves <pedro.pandre@xxxxxxxxx>
• problem related to coustom hook module .....plz help
  • From: "hitesh sharma" <engineerhitesh@xxxxxxxxx>
• problem related to coustem module .....plz help
  • From: "hitesh sharma" <engineerhitesh@xxxxxxxxx>
• Re: SYN Proxy for iptables?
  • From: "Wang, Baojun" <wangbj@xxxxxxxxxx>
• SYN Proxy for iptables?
  • From: "Andrew Kraslavsky" <andykras@xxxxxxxxxxx>
• Re: How to filter this packet?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• tcp_window_tracking / tcp sequence number tracking ?
  • From: Michael Gale <michael.gale@xxxxxxxxx>
• RE: Iptables rule on span traffic
  • From: "Krishnamoorthy (Siva) Sivakumar" <ksivakumar@xxxxxxxxxxxxxxxx>
• Re: How to filter this packet?
  • From: Nagy Zoltan <nagy.zoltan@xxxxxx>
• Re: Iptables rule on span traffic
  • From: Martijn Lievaart <m@xxxxxxx>
• RE: Iptables rule on span traffic
  • From: "Krishnamoorthy (Siva) Sivakumar" <ksivakumar@xxxxxxxxxxxxxxxx>
• Re: Iptables rule on span traffic
  • From: Martijn Lievaart <m@xxxxxxx>
• RE: Iptables rule on span traffic
  • From: "Krishnamoorthy (Siva) Sivakumar" <ksivakumar@xxxxxxxxxxxxxxxx>
• Conntrack table full freeze my Heavy loaded QoS manager...
  • From: Sébastien CRAMATTE <scramatte@xxxxxxxxxxxxxxxxx>
• Re: Iptables rule on span traffic
  • From: Oleg <xsov@xxxxxxx>
• Geoip patch and its features
  • From: "Elvir Kuric" <omasnjak@xxxxxxxxx>
• fwsnort-1.0 release
  • From: Michael Rash <mbr@xxxxxxxxxxxxxx>
• Re: Iptables rule on span traffic
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• RE: Iptables rule on span traffic
  • From: "Krishnamoorthy (Siva) Sivakumar" <ksivakumar@xxxxxxxxxxxxxxxx>
• Re: Forwarding packets on iptables firewall
  • From: Marc Haber <mh+netfilter@xxxxxxxxxxxx>
• Re: Iptables rule on span traffic
  • From: Oleg <sov.rbsec@xxxxxxxxx>
• Re: Forwarding packets on iptables firewall
  • From: "crux crux" <cruxam@xxxxxxxxx>
• Re: Forwarding packets on iptables firewall
  • From: Marc Haber <mh+netfilter@xxxxxxxxxxxx>
• Re: Forwarding packets on iptables firewall
  • From: "crux crux" <cruxam@xxxxxxxxx>
• Re: Iptables rule on span traffic
  • From: Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx>
• Re: Iptables rule on span traffic
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: Route Balancers going crazy??
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Iptables rule on span traffic
  • From: "Krishnamoorthy (Siva) Sivakumar" <ksivakumar@xxxxxxxxxxxxxxxx>
• Re: Forwarding packets on iptables firewall
  • From: Marc Haber <mh+netfilter@xxxxxxxxxxxx>
• Forwarding packets on iptables firewall
  • From: "crux crux" <cruxam@xxxxxxxxx>
• Re: NAT Issue
  • From: Nagy Zoltan <nagy.zoltan@xxxxxx>
• Re: Failed to establish TCP connection when Masqueradeing
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Failed to establish TCP connection when Masqueradeing
  • From: "Simon Olofsson" <simon.olofsson@xxxxxxxxx>
• Fwd: Async processing using NetFilters
  • From: Lokesh <lokeshnb@xxxxxxxxxx>
• Re: NAT Issue
  • From: Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx>
• Re: NAT Issue
  • From: Kiran Murari <kmurari@xxxxxxxxxxxxxxxxxxxx>
• Re: NAT Issue
  • From: Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx>
• Re: NAT Issue
  • From: Kiran Murari <kmurari@xxxxxxxxxxxxxxxxxxxx>
• How to filter this packet?
  • From: monty denis <montydenis@xxxxxxxxx>
• Re: Setup of different types of NAT
  • From: Pedro Gonçalves <pedro.pandre@xxxxxxxxx>
• Route Balancers going crazy??
  • From: "Michael R. Dilworth" <michael@xxxxxxxxxxxx>
• Re: NAT Issue
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Setup of different types of NAT
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Setup of different types of NAT
  • From: Denis <denismpa@xxxxxxxxx>
• Re: Firewall L7
  • From: "Stephan Higuti" <higuti.sam@xxxxxxxxx>
• Question on MASQUERADE in virtual-router configuration.
  • From: Ben Greear <greearb@xxxxxxxxxxxxxxx>
• Re: DNAT not working
  • From: Payal Rathod <payal-iptables@xxxxxxxxxxxxxxxxx>
• Re: Setup of different types of NAT
  • From: Pedro Gonçalves <pedro.pandre@xxxxxxxxx>
• Re: Setup of different types of NAT
  • From: Elvir Kuric <omasnjak@xxxxxxxxx>
• Re: DNAT not working
  • From: Gáspár Lajos <swifty@xxxxxxxxxxx>
• Problem resolved!
  • From: Lars Täuber <taeuber@xxxxxxx>
• NAT Issue
  • From: Kiran Murari <kmurari@xxxxxxxxxxxxxxxxxxxx>
• Re: Where has NAT gone?
  • From: richard@xxxxxxxxxxxxxxxxxxxx
• Re: Valid packets blocked as invalid?
  • From: Lars Täuber <taeuber@xxxxxxx>
• Re: Unable to block ICMP
  • From: Ronald <ronald645@xxxxxxxxx>
• Re: [RESOLVED] Can't change ipt_conntrack hashsize under debian sarge ???
  • From: Sébastien CRAMATTE <scramatte@xxxxxxxxxxxxxxxxx>
• Async processing using NetFilters
  • From: Lokesh <lokeshnb@xxxxxxxxxx>
• Re: ipt_connlimit.c + kernel 2.6.20 = big problem. HELP
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Valid packets blocked as invalid?
  • From: Lars Täuber <taeuber@xxxxxxx>
• Re: DNAT not working
  • From: Payal Rathod <payal-iptables@xxxxxxxxxxxxxxxxx>
• [HEADS UP] merge of conntrack and conntrackd into conntrack-tools
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Can't change ipt_conntrack hashsize under debian sarge ???
  • From: Sébastien CRAMATTE <scramatte@xxxxxxxxxxxxxxxxx>
• Re: DNAT not working
  • From: Martijn Lievaart <m@xxxxxxx>
• DNAT not working
  • From: Payal Rathod <payal-iptables@xxxxxxxxxxxxxxxxx>
• Re: Valid packets blocked as invalid?
  • From: Jorge Davila <davila@xxxxxxxxxxxxxxxxxxxxxxx>
• ipt_connlimit.c + kernel 2.6.20 = big problem. HELP
  • From: dominiaz <dominiaz@xxxxxxxxx>
• Empty archives?
  • From: "Patrick Ale" <patrick.ale@xxxxxxxxx>
• Valid packets blocked as invalid?
  • From: Lars Täuber <taeuber@xxxxxxx>
• Re: Firewall L7
  • From: Leonardo Rodrigues Magalhães <leolistas@xxxxxxxxxxxxxx>
• Re: Firewall L7
  • From: Pablo Sanchez <pablo@xxxxxxxxxxxxx>
• Firewall L7
  • From: "Stephan Higuti" <higuti.sam@xxxxxxxxx>
• Setup of different types of NAT
  • From: Pedro Gonçalves <pedro.pandre@xxxxxxxxx>
• Where has NAT gone?
  • From: netsol3@xxxxxxxxxxxxxx
• Re: Trying to understand a performance problem - help please.
  • From: Alan Chandler <alan@xxxxxxxxxxxxxxxxxxxxx>
• Re: Trying to understand a performance problem - help please.
  • From: Torsten Luettgert <t.luettgert@xxxxxxxxxxxxxxxx>
• Re: Where has NAT gone?
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Where has NAT gone?
  • From: Torsten Luettgert <t.luettgert@xxxxxxxxxxxxxxxx>
• Re: Unable to block ICMP
  • From: Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx>
• Re: Unable to block ICMP
  • From: Marc Haber <mh+netfilter@xxxxxxxxxxxx>
• Re: Unable to block ICMP
  • From: Michael Hissler <mhis38@xxxxxxxxxx>
• Re: Where has NAT gone?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Where has NAT gone?
  • From: richard@xxxxxxxxxxxxxxxxxxxx
• Re: Unable to block ICMP
  • From: Ronald <ronald645@xxxxxxxxx>
• ip packet fields modyfications
  • From: "Bury!" <bury1@xxxxx>
• Re: Unable to block ICMP
  • From: Michael Hissler <mhis38@xxxxxxxx>
• Re: Unable to block ICMP
  • From: Dean Anderson <dean@xxxxxxx>
• Re: Unable to block ICMP
  • From: Ronald <ronald645@xxxxxxxxx>
• [ANNOUNCE] New Netfilter core team PGP Key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: Unable to block ICMP
  • From: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>
• Trying to understand a performance problem - help please.
  • From: Alan Chandler <alan@xxxxxxxxxxxxxxxxxxxxx>
• Re: Unable to block ICMP
  • From: Ronald <ronald645@xxxxxxxxx>
• i/o stats per inode in /proc/net/tcp
  • From: Robert Hogan <robert@xxxxxxxxxxxxxxx>
• Help applying iplimit patch to kernel 2.6.20.4
  • From: Javier Soques <jsoques@xxxxxxxxx>
• Re: Unable to block ICMP
  • From: "Thomas d'Otreppe" <tdotreppe@xxxxxxxxx>
• Re: Unable to block ICMP
  • From: "Thomas d'Otreppe" <tdotreppe@xxxxxxxxx>
• Unable to block ICMP
  • From: Ronald <ronald645@xxxxxxxxx>
• i/o stats per inode in /proc/net/tcp
  • From: Robert Hogan <lists@xxxxxxxxxxxxxxx>
• Re: ESTABLISHED makes possible to connect to internal servers
  • From: Arnd-Hendrik Mathias <arnd-hendrik.mathias@xxxxxxxxxx>
• Re: Inspection of Link Layer Packets?
  • From: Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx>
• Re: RELATED connections and the feeling of security
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: RELATED connections and the feeling of security
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: RELATED connections and the feeling of security
  • From: Hugo Mildenberger <Hugo.Mildenberger@xxxxxxxxxxx>
• Re: RELATED connections and the feeling of security
  • From: tom <tom@xxxxxxxx>
• Re: RELATED connections and the feeling of security
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Inspection of Link Layer Packets?
  • From: John Dowling <johnd@xxxxxxxxxxxxxxxx>
• Re: Default syslog level from -j LOG
  • From: "Oliver Schulze L." <oliver@xxxxxxxxxxxxx>
• Re: RELATED connections and the feeling of security
  • From: Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx>
• Re: RELATED connections and the feeling of security
  • From: Hugo Mildenberger <Hugo.Mildenberger@xxxxxxxxxxx>
• Re: RELATED connections and the feeling of security
  • From: Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx>
• Re: Problem compiling nth match
  • From: "Marco Berizzi" <pupilla@xxxxxxxxxxx>
• RELATED connections and the feeling of security
  • From: Susan.Scheibe@xxxxxxxxxxx (Hugo Mildenberger)
• Problem compiling nth match
  • From: Neubauer Christian <neu@xxxxxxxxxxxxx>
• two ISP but only one NAT
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: IPtables l7 string
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: IPtables l7 string
  • From: "Stephan Higuti" <higuti.sam@xxxxxxxxx>
• Re: IPtables l7 string
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: IPtables l7 string
  • From: "Ethy H. Brito" <ethy.brito@xxxxxxxxxxxx>
• Re: No timestamp on log entries.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• No timestamp on log entries.
  • From: Steve <netfilter@xxxxxxxxxx>
• Using Netfilter to modify the payload of an IP packet?
  • From: "Michael Ransburg" <michael.ransburg@xxxxxxxxx>
• IPtables l7 string
  • From: "Stephan Higuti" <higuti.sam@xxxxxxxxx>
• Re: ESTABLISHED makes possible to connect to internal servers
  • From: Anton Sidorov <asidorov@xxxxxxxxx>
• Re: Time module included in the default Fedora
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Time module included in the default Fedora
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Default syslog level from -j LOG
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Time module included in the default Fedora
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Time module included in the default Fedora
  • From: "Fred Trotter" <fred.trotter@xxxxxxxxx>
• Re: Time module included in the default Fedora
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Time module included in the default Fedora
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: Default syslog level from -j LOG
  • From: "Oliver Schulze L." <oliver@xxxxxxxxxxxxx>
• Re: ESTABLISHED makes possible to connect to internal servers
  • From: Maximilian Wilhelm <max@xxxxxxxxxxx>
• Time module included in the default Fedora
  • From: "Fred Trotter" <fred.trotter@xxxxxxxxx>
• SIP ALG TOS Marking
  • From: "allug4me allug4me" <allug4me@xxxxxxxxx>
• Default syslog level from -j LOG
  • From: "Oliver Schulze L." <oliver@xxxxxxxxxxxxx>
• Re: iptables-retore very slow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ESTABLISHED makes possible to connect to internal servers
  • From: Anton Sidorov <asidorov@xxxxxxxxx>
• Re: packets to local addresses
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• TCP dynamic redirection
  • From: switcher <switcher@xxxxxxxxxxxxxx>
• Re: packets to local addresses
  • From: MKS <rekordmeister@xxxxxxxxx>
• Re: packets to local addresses
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: packets to local addresses
  • From: MKS <rekordmeister@xxxxxxxxx>
• Re: Error using MARK
  • From: Franck Joncourt <franck.joncourt@xxxxxxxxxx>
• Error using MARK
  • From: cookie <cookie@xxxxxxxxxxxx>
• Re: packets to local addresses
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: packets to local addresses
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [PATCH] ip_tables.h
  • From: "Patrick Ale" <patrick.ale@xxxxxxxxx>
• [PATCH 7/7] ipt_u32 compile fix for 2.6.21
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 6/7] ipt_time compile fix for 2.6.21
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 5/7] ipt_ipp2p compile fix for 2.6.21
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 4/7] ipt_connlimit compile fix for 2.6.21
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 3/7] ipt_TARPIT compile fix for 2.6.21
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 2/7] ipt_SYSRQ compile fix for 2.6.21
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 1/7] ipt_ACCOUNT compile fix for 2.6.21
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• [PATCH 0/7] Compile fixes for 2.6.21
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: WARNING: "ipt_unregister_match"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: packets to local addresses
  • From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
• Re: [PATCH] ip_tables.h
  • From: "Patrick Ale" <patrick.ale@xxxxxxxxx>
• [PATCH] ip_tables.h
  • From: "Patrick Ale" <patrick.ale@xxxxxxxxx>
• WARNING: "ipt_unregister_match"
  • From: "Patrick Ale" <patrick.ale@xxxxxxxxx>
• Re: packets to local addresses
  • From: Martijn Lievaart <m@xxxxxxx>
• IETF RFC 4787 and NAT behaviour recommendations
  • From: Dupond Jean <mootrul@xxxxxxxx>
• Re: packets to local addresses
  • From: MKS <rekordmeister@xxxxxxxxx>
• Re: iptables, multiple hosts, one IP
  • From: Martijn Lievaart <m@xxxxxxx>
• iptables, multiple hosts, one IP
  • From: "jj" <jj_rocks2003@xxxxxxxxx>
• Re: blocking all connections
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: blocking all connections
  • From: dhottinger@xxxxxxxxxxxxxxxxxxxxxx
• Re: blocking all connections
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: packets to local addresses
  • From: Martijn Lievaart <m@xxxxxxx>
• blocking all connections
  • From: dhottinger@xxxxxxxxxxxxxxxxxxxxxx
• packets to local addresses
  • From: MKS <rekordmeister@xxxxxxxxx>
• Re: Does iptables support VLANs
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: Does iptables support VLANs
  • From: Martijn Lievaart <m@xxxxxxx>
• Re: Does iptables support VLANs
  • From: Elvir Kuric <omasnjak@xxxxxxxxx>
• Re: Does iptables support VLANs
  • From: Martijn Lievaart <m@xxxxxxx>
• Does iptables support VLANs
  • From: Elvir Kuric <omasnjak@xxxxxxxxx>
• ipt_error_target in kernel difers from that in user space and causing "ip_tables: ERROR target: invalid size 30 != 32"
  • From: "David Wu" <davidwu@xxxxxxxxxxxxxxxxxxxx>