Linux Netfilter / IP Tables

Date Index

Re: [PATCH 2/5] secmark: make secmark object handling generic, (continued)
- [PATCH 5/5] secmark: export secctx, drop secmark in procfs, Eric Paris
  - Re: [PATCH 5/5] secmark: export secctx, drop secmark in procfs, Paul Moore
    - Re: [PATCH 5/5] secmark: export secctx, drop secmark in procfs, Eric Paris
- [PATCH 4/5] conntrack: export lsm context rather than internal secid via netlink, Eric Paris
  - Re: [PATCH 4/5] conntrack: export lsm context rather than internal secid via netlink, Paul Moore
    - Re: [PATCH 4/5] conntrack: export lsm context rather than internal secid via netlink, Eric Paris
      - Re: [PATCH 4/5] conntrack: export lsm context rather than internal secid via netlink, Paul Moore
- Re: [PATCH 1/5] secmark: do not return early if there was no error, Paul Moore
- Re: [PATCH 1/5] secmark: do not return early if there was no error, James Morris
  - Re: [PATCH 1/5] secmark: do not return early if there was no error, Eric Paris
    - Re: [PATCH 1/5] secmark: do not return early if there was no error, James Morris
Problems with nf_conntrack_sip and multiple, Stephen Hemminger
About lxc and libnetfilter_queue, 周威廷
- Re: About lxc and libnetfilter_queue, vishesh kumar
force specific interface / late DNAT, mad_stuff
- Re: force specific interface / late DNAT, Pascal Hambourg
Question about a blocked packet sent by a windows machine on my lan, JD
Packets disappear in DNAT rule, richard lucassen
empty filter on FORWARD chain with rp_filter means safe right?, Scott Mcdermott
- Re: empty filter on FORWARD chain with rp_filter means safe right?, Payam Chychi
  - Re: empty filter on FORWARD chain with rp_filter means safe right?, Jan Engelhardt
    - Re: empty filter on FORWARD chain with rp_filter means safe right?, Payam Chychi
- Re: empty filter on FORWARD chain with rp_filter means safe right?, Pascal Hambourg
IPv6 project for Linux kernel, Łukasz Czyż
how to best limit "rate of rejects", Christoph Anton Mitterer
- Re: how to best limit "rate of rejects", Jan Engelhardt
  - Re: how to best limit "rate of rejects", Christoph Anton Mitterer
    - Re: how to best limit "rate of rejects", Jan Engelhardt
which reject code fits the most when rejecting non-IPsec packets, Christoph Anton Mitterer
Limiting Network traffic, Jonathan Tripathy
- Re: Limiting Network traffic, Stephen Hemminger
[patch v5 00/12] IPVS: SIP Persistence Engine, Simon Horman
- [patch v5 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument, Simon Horman
- [patch v5 02/12] netfilter: nf_conntrack_sip: Add callid parser, Simon Horman
- [patch v5 03/12] IPVS: compact ip_vs_sched_persist(), Simon Horman
- [patch v5 04/12] IPVS: Add struct ip_vs_conn_param, Simon Horman
  - Re: [patch v5 04/12] IPVS: Add struct ip_vs_conn_param, IPv6 forgotten ?, Hans Schillstrom
    - Re: [patch v5 04/12] IPVS: Add struct ip_vs_conn_param, IPv6 forgotten No, Hans Schillstrom
      - Re: [patch v5 04/12] IPVS: Add struct ip_vs_conn_param, IPv6 forgotten No, Simon Horman
- [patch v5 05/12] IPVS: Allow null argument to ip_vs_scheduler_put(), Simon Horman
- [patch v5 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments, Simon Horman
- [patch v5 07/12] IPVS: Add struct ip_vs_pe, Simon Horman
- [patch v5 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Simon Horman
- [patch v5 09/12] IPVS: management of persistence engine modules, Simon Horman
- [patch v5 10/12] IPVS: Allow configuration of persistence engines, Simon Horman
- [patch v5 11/12] IPVS: Fallback if persistence engine fails, Simon Horman
- [patch v5 12/12] IPVS: sip persistence engine, Simon Horman
- Re: [patch v5 00/12] IPVS: SIP Persistence Engine, Patrick McHardy
  - Re: [patch v5 00/12] IPVS: SIP Persistence Engine, Simon Horman
[patch v4 00/12] IPVS: SIP Persistence Engine, Simon Horman
- [patch v4 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument, Simon Horman
- [patch v4 02/12] netfilter: nf_conntrack_sip: Add callid parser, Simon Horman
- [patch v4 03/12] IPVS: compact ip_vs_sched_persist(), Simon Horman
- [patch v4 04/12] IPVS: Add struct ip_vs_conn_param, Simon Horman
- [patch v4 05/12] IPVS: Allow null argument to ip_vs_scheduler_put(), Simon Horman
- [patch v4 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments, Simon Horman
- [patch v4 07/12] IPVS: Add struct ip_vs_pe, Simon Horman
- [patch v4 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Simon Horman
- [patch v4 09/12] IPVS: management of persistence engine modules, Simon Horman
- [patch v4 10/12] IPVS: Allow configuration of persistence engines, Simon Horman
  - Re: [patch v4 10/12] IPVS: Allow configuration of persistence engines, Simon Horman
- [patch v4 11/12] IPVS: Fallback if persistence engine fails, Simon Horman
- [patch v4 12/12] IPVS: sip persistence engine, Simon Horman
- Re: [patch v4 00/12] IPVS: SIP Persistence Engine, Simon Horman
IP set and match skiping, Daniel Dehennin
- Re: IP set and match skiping, Jozsef Kadlecsik
netfilter and IPsec?, Christoph Anton Mitterer
- Re: netfilter and IPsec?, Jan Engelhardt
  - Re: netfilter and IPsec?, Christoph Anton Mitterer
    - Re: netfilter and IPsec?, Jan Engelhardt
[patch v3 00/12] IPVS: SIP Persistence Engine, Simon Horman
- [patch v3 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument, Simon Horman
- [patch v3 02/12] netfilter: nf_conntrack_sip: Add callid parser, Simon Horman
- [patch v3 03/12] IPVS: compact ip_vs_sched_persist(), Simon Horman
- [patch v3 04/12] IPVS: Add struct ip_vs_conn_param, Simon Horman
- [patch v3 05/12] IPVS: Allow null argument to ip_vs_scheduler_put(), Simon Horman
- [patch v3 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments, Simon Horman
- [patch v3 07/12] IPVS: Add struct ip_vs_pe, Simon Horman
- [patch v3 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Simon Horman
- [patch v3 09/12] IPVS: management of persistence engine modules, Simon Horman
- [patch v3 10/12] IPVS: Allow configuration of persistence engines, Simon Horman
- [patch v3 11/12] IPVS: Fallback if persistence engine fails, Simon Horman
- [patch v3 12/12] IPVS: sip persistence engine, Simon Horman
- Re: [patch v3 00/12] IPVS: SIP Persistence Engine, Julian Anastasov
  - Re: [patch v3 00/12] IPVS: SIP Persistence Engine, Simon Horman
[ANNOUNCE] ipset-4.4 released, Jozsef Kadlecsik
- ipset-4.4 on 2.6.16.60 kernel, Mr Dash Four
  - Re: ipset-4.4 on 2.6.16.60 kernel, Jozsef Kadlecsik
    - Re: ipset-4.4 on 2.6.16.60 kernel, Mr Dash Four
      - [SOLVED] Re: ipset-4.4 on 2.6.16.60 kernel, Mr Dash Four
[patch v2 0/2] [patch v1 0/2] ipvsadm: SIP Persistence Engine, Simon Horman
- [patch v2 1/2] [PATCH 1/2] Slightly simplify options conflicts logic, Simon Horman
- [patch v2 2/2] [PATCH 2/2] Add support for persistence engines., Simon Horman
[patch v2 00/12] IPVS: SIP Persistence Engine, Simon Horman
- [patch v2 01/12] [PATCH 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument, Simon Horman
- [patch v2 02/12] [PATCH 02/12] netfilter: nf_conntrack_sip: Add callid parser, Simon Horman
- [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist(), Simon Horman
  - Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist(), Julian Anastasov
    - Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist(), Simon Horman
      - Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist(), Julian Anastasov
        
        Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist(), Simon Horman
        
        Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist(), Julian Anastasov
- [patch v2 04/12] [PATCH 04/12] IPVS: Add struct ip_vs_conn_param, Simon Horman
  - Re: [patch v2 04/12] [PATCH 04/12] IPVS: Add struct ip_vs_conn_param, Julian Anastasov
    - Re: [patch v2 04/12] [PATCH 04/12] IPVS: Add struct ip_vs_conn_param, Simon Horman
      - Re: [patch v2 04/12] [PATCH 04/12] IPVS: Add struct ip_vs_conn_param, Simon Horman
- [patch v2 05/12] [PATCH 05/12] IPVS: Allow null argument to ip_vs_scheduler_put(), Simon Horman
- [patch v2 06/12] [PATCH 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments, Simon Horman
- [patch v2 07/12] [PATCH 07/12] IPVS: Add struct ip_vs_pe, Simon Horman
  - Re: [patch v2 07/12] [PATCH 07/12] IPVS: Add struct ip_vs_pe, Julian Anastasov
    - Re: [patch v2 07/12] [PATCH 07/12] IPVS: Add struct ip_vs_pe, Simon Horman
- [patch v2 08/12] [PATCH 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Simon Horman
  - Re: [patch v2 08/12] [PATCH 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Julian Anastasov
    - Re: [patch v2 08/12] [PATCH 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Simon Horman
- [patch v2 09/12] [PATCH 09/12] IPVS: management of persistence engine modules, Simon Horman
- [patch v2 10/12] [PATCH 10/12] IPVS: Allow configuration of persistence engines, Simon Horman
- [patch v2 11/12] [PATCH 11/12] IPVS: Fallback if persistence engine fails, Simon Horman
- [patch v2 12/12] [PATCH 12/12] IPVS: sip persistence engine, Simon Horman
- Re: [patch v2 00/12] IPVS: SIP Persistence Engine, Simon Horman
ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
- Re: ipporthash, ipportiphash, ipportnethash problems, Jozsef Kadlecsik
  - Re: ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
    - Re: ipporthash, ipportiphash, ipportnethash problems, Jozsef Kadlecsik
      - Re: ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Jozsef Kadlecsik
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Jan Engelhardt
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Jan Engelhardt
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Jozsef Kadlecsik
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Jozsef Kadlecsik
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Jozsef Kadlecsik
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Mike Wright
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Mr Dash Four
        
        Re: ipporthash, ipportiphash, ipportnethash problems, Jozsef Kadlecsik
nfqnl_test exits abnormally while monitoring some TCP packets., Shihwei Li
- Re: nfqnl_test exits abnormally while monitoring some TCP packets., Shihwei Li
  - Re: nfqnl_test exits abnormally while monitoring some TCP packets., Mistick Levi
    - Re: nfqnl_test exits abnormally while monitoring some TCP packets., Shihwei Li
      - Re: nfqnl_test exits abnormally while monitoring some TCP packets., Mistick Levi
        
        Re: nfqnl_test exits abnormally while monitoring some TCP packets., Shihwei Li
Problem with buffering packets, David
fwmark in the OUTPUT chain, Christopher Piggott
- Re: fwmark in the OUTPUT chain, Pascal Hambourg
- Re: fwmark in the OUTPUT chain, Jan Engelhardt
macipmap (ipset) matching, Mr Dash Four
- Re: macipmap (ipset) matching, Jozsef Kadlecsik
  - Re: macipmap (ipset) matching, Mr Dash Four
redirecting connections to userspace, rhn
- Re: redirecting connections to userspace, Jan Engelhardt
  - Re: redirecting connections to userspace, rhn
[PATCH 1/6] secmark: do not return early if there was no error, Eric Paris
- [PATCH 6/6] secmark: export secctx, drop secmark in procfs, Eric Paris
- [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Eric Paris
  - Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Pablo Neira Ayuso
    - Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Eric Paris
  - Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, James Morris
    - Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Eric Paris
      - Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Paul Moore
        
        Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Eric Paris
        
        Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Paul Moore
        
        Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Pablo Neira Ayuso
        
        Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Jan Engelhardt
        
        Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Mr Dash Four
        
        Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, James Morris
        
        Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid, Casey Schaufler
- [PATCH 4/6] security: secid_to_secctx returns len when data is NULL, Eric Paris
  - Re: [PATCH 4/6] security: secid_to_secctx returns len when data is NULL, Casey Schaufler
- [PATCH 5/6] conntrack: export lsm context rather than internal secid via netlink, Eric Paris
  - Re: [PATCH 5/6] conntrack: export lsm context rather than internal secid via netlink, Jan Engelhardt
  - Re: [PATCH 5/6] conntrack: export lsm context rather than internal secid via netlink, Pablo Neira Ayuso
    - Re: [PATCH 5/6] conntrack: export lsm context rather than internal secid via netlink, Eric Paris
- [PATCH 2/6] secmark: make secmark object handling generic, Eric Paris
  - Re: [PATCH 2/6] secmark: make secmark object handling generic, Pablo Neira Ayuso
    - Re: [PATCH 2/6] secmark: make secmark object handling generic, Eric Paris
- Re: [PATCH 1/6] secmark: do not return early if there was no error, Jan Engelhardt
netfilter_conntrack question - getting invalid argument, Steven Ayre
string and u32 modules, Greg Oliver
- Re: string and u32 modules, Greg Oliver
  - Re: string and u32 modules, Jan Engelhardt
    - Re: string and u32 modules, Greg Oliver
      - Re: string and u32 modules, Jan Engelhardt
TCP ack in libnetfilter_queue, Mistick Levi
Userspace control of load balancing via DNAT/IPVS, Steven Ayre
Help with compiling netfilter/iptables modules, Josu Gomez
- Re: Help with compiling netfilter/iptables modules, Jan Engelhardt
  - Re: Help with compiling netfilter/iptables modules, Josu Gomez
  - Message not available
    - Re: Help with compiling netfilter/iptables modules, Jan Engelhardt
      - Re: Help with compiling netfilter/iptables modules, Josu Gomez
        
        Re: Help with compiling netfilter/iptables modules, Jan Engelhardt
        
        Re: Help with compiling netfilter/iptables modules, Josu Gomez
        
        Re: Help with compiling netfilter/iptables modules, Jan Engelhardt
        
        Re: Help with compiling netfilter/iptables modules, Josu Gomez
        
        Re: Help with compiling netfilter/iptables modules, Jan Engelhardt
        
        Re: Help with compiling netfilter/iptables modules, Josu Gomez
        
        Re: Help with compiling netfilter/iptables modules, Jan Engelhardt
        
        Re: Help with compiling netfilter/iptables modules, Josu Gomez
decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
- Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
  - Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
    - Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
      - Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Tom Eastep
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Tom Eastep
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Eric Paris
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Eric Paris
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Eric Paris
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Eric Paris
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Eric Paris
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Eric Paris
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Eric Paris
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Eric Paris
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Tom Eastep
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Jan Engelhardt
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Mr Dash Four
        
        Re: decipher the secmark number from nf_conntrack/ip_conntrack, Tom Eastep
Ignore tcp checksum on ip_conntrack, Alex Bligh
- Re: Ignore tcp checksum on ip_conntrack, Pablo Neira Ayuso
How to log NAT translations, Italo Valcy
- Re: How to log NAT translations, Jan Engelhardt
  - Re: How to log NAT translations, Italo Valcy
    - Re: How to log NAT translations, Jan Engelhardt
      - Re: How to log NAT translations, Pablo Neira Ayuso
        
        Re: How to log NAT translations, Jozsef Kadlecsik
Packets occasionally not queued, Roger Sala
Is a match-all rule with jump to empty chain processed?, Data Shock
- Re: Is a match-all rule with jump to empty chain processed?, Jan Engelhardt
  - RE: Is a match-all rule with jump to empty chain processed?, Data Shock
nf_conntrack hashsize change during runtime?, Steven Kath
ULOGD and other logs, ratheesh k
- Re: ULOGD and other logs, Pablo Neira Ayuso
help to build iptables rules for an oscar cluster, giggzounet
[ANNOUNCE] libnetfilter_conntrack 0.9.0 release, Pablo Neira Ayuso
- Re: [ANNOUNCE] libnetfilter_conntrack 0.9.0 release, Jan Engelhardt
Re: rate of traffic that much a rule, vishesh kumar
OpenVPN throttling problem, J Webster
- Re: OpenVPN throttling problem, Thomas Jacob
  - Re: OpenVPN throttling problem, J Webster
    - Re: OpenVPN throttling problem, Thomas Jacob
      - Re: OpenVPN throttling problem, J Webster
        
        Re: OpenVPN throttling problem, Thomas Jacob
        
        Re: OpenVPN throttling problem, J Webster
        
        Re: OpenVPN throttling problem, Thomas Jacob
        
        Re: OpenVPN throttling problem, J Webster
- Re: OpenVPN throttling problem, Payam Chychi
- limit badwidth not working, J Webster
  - Re: limit badwidth not working, Andrew Beverley
    - Re: limit badwidth not working, J Webster
      - Re: limit badwidth not working, Andrew Beverley
        
        Re: limit badwidth not working, J Webster
tc add filter match src ip and mark, Mamadou Touré
a single rule that mach source ip or destination ip, Mamadou Touré
- Re: a single rule that mach source ip or destination ip, Jan Engelhardt
  - Re: a single rule that mach source ip or destination ip, Brian Austin - Standard Universal
  - Re: a single rule that mach source ip or destination ip, Pascal Hambourg
    - Re: a single rule that mach source ip or destination ip, Jan Engelhardt
      - Re: a single rule that mach source ip or destination ip, Mamadou Touré
- <Possible follow-ups>
- Re:a single rule that mach source ip or destination ip, arimus . uk
rate of traffic that mach a rule, Mamadou Touré
- Re: rate of traffic that mach a rule, Jan Engelhardt
- Re: rate of traffic that mach a rule, Richard Horton
change to max length of jump target, Stig Thormodsrud
NF_QUEUE: nfq_bind_pf() fails - solution, Athanasius
Need advise on none authenticate hotspot, ks ks
[PATCH] netfilter: remove duplicate include line, Vlad Dogaru
- Re: [PATCH] netfilter: remove duplicate include line, Vlad Dogaru
Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Giacomo Bernardi
- Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Jan Engelhardt
- Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Grant Taylor
  - Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Giacomo Bernardi
    - Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Grant Taylor
      - Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Giacomo Bernardi
        
        Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Marek Kierdelewicz
        
        Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Giacomo Bernardi
        
        Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Marek Kierdelewicz
        
        Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Giacomo Bernardi
        
        Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Marek Kierdelewicz
        
        Message not available
        
        Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Giacomo Bernardi
        
        Re: Awkward scenario: 3 interfaces and 3 devices with same ip/subnet., Marek Kierdelewicz
IPv6 routing, Jonathan Tripathy
- Re: IPv6 routing, Jonathan Tripathy
  - Re: IPv6 routing, Jan Engelhardt
    - Re: IPv6 routing, Jonathan Tripathy
      - Re: IPv6 routing, Jonathan Tripathy
        
        Re: IPv6 routing, Thomas Jacob
        
        Re: IPv6 routing, Jonathan Tripathy
        
        Re: IPv6 routing, Jozsef Kadlecsik
        
        Re: IPv6 routing, Thomas Jacob
        
        Re: IPv6 routing, Jozsef Kadlecsik
        
        Re: IPv6 routing, Thomas Jacob
        
        Re: IPv6 routing, Thomas Jacob
        
        Re: IPv6 routing, Jonathan Tripathy
        
        Re: IPv6 routing, Pascal Hambourg
      - Re: IPv6 routing, Jan Engelhardt
        
        Re: IPv6 routing, Jonathan Tripathy
aligned_{u64,be64,le64} defined in #ifdef __KERNEL__, Andreas Gruenbacher
- Re: aligned_{u64,be64,le64} defined in #ifdef __KERNEL__, David Miller
  - Re: aligned_{u64,be64,le64} defined in #ifdef __KERNEL__, Andreas Gruenbacher
    - Re: aligned_{u64,be64,le64} defined in #ifdef __KERNEL__, Jan Engelhardt
      - Re: aligned_{u64,be64,le64} defined in #ifdef __KERNEL__, David Miller
      - Re: aligned_{u64,be64,le64} defined in #ifdef __KERNEL__, Jan Engelhardt
        
        Re: aligned_{u64,be64,le64} defined in #ifdef __KERNEL__, David Miller
        
        Re: aligned_{u64,be64,le64} defined in #ifdef __KERNEL__, Iain Paton
ebtables and anti-spoofing rules not working 100%?, Tomasz Chmielewski
- Re: ebtables and anti-spoofing rules not working 100%?, Pascal Hambourg
  - Re: ebtables and anti-spoofing rules not working 100%?, Tomasz Chmielewski
    - Re: ebtables and anti-spoofing rules not working 100%?, Jonathan Tripathy
      - Re: ebtables and anti-spoofing rules not working 100%?, Tomasz Chmielewski
        
        Re: ebtables and anti-spoofing rules not working 100%?, Jonathan Tripathy
        
        Re: ebtables and anti-spoofing rules not working 100%?, Tomasz Chmielewski
    - Re: ebtables and anti-spoofing rules not working 100%?, Pascal Hambourg
      - Re: ebtables and anti-spoofing rules not working 100%?, Tomasz Chmielewski
        
        Re: ebtables and anti-spoofing rules not working 100%?, Pascal Hambourg
Need for a specific source address selection rule ? (not neccessarily netfilter), Xavier Roche
- Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Jan Engelhardt
  - Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Xavier Roche
    - Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Jan Engelhardt
      - Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Xavier Roche
        
        Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Jan Engelhardt
      - Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Xavier Roche
        
        Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Pascal Hambourg
        
        Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Xavier Roche
        
        Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Jan Engelhardt
        
        Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Xavier Roche
        
        Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Jan Engelhardt
        
        Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Xavier Roche
        
        Re: Need for a specific source address selection rule ? (not neccessarily netfilter), Jan Engelhardt
using iptables with tun/tap interfaces? no rule sees tun/tap interface traffic, Tomasz Chmielewski
- Re: using iptables with tun/tap interfaces? no rule sees tun/tap interface traffic, Marek Kierdelewicz
  - Re: using iptables with tun/tap interfaces? no rule sees tun/tap interface traffic, Tomasz Chmielewski
    - Re: using iptables with tun/tap interfaces? no rule sees tun/tap interface traffic, Marek Kierdelewicz
      - Re: using iptables with tun/tap interfaces? no rule sees tun/tap interface traffic, Tomasz Chmielewski
  - Re: using iptables with tun/tap interfaces? no rule sees tun/tap interface traffic, Pascal Hambourg
NDP and ebtables, Jonathan Tripathy
- Re: NDP and ebtables, Pascal Hambourg
  - Re: NDP and ebtables, Jonathan Tripathy
    - Re: NDP and ebtables, Jonathan Tripathy
      - Re: NDP and ebtables, Pascal Hambourg
Problems compiling xtables-addons v1.28, Brian Schang
- Re: Problems compiling xtables-addons v1.28, Jan Engelhardt
  - Re: Problems compiling xtables-addons v1.28, Brian Schang
Re: [PATCH 0/5] Eliminate memory leak, Julia Lawall
OFF??? POINT-TO-POINT, Gáspár Lajos
- Re: OFF??? POINT-TO-POINT, Jan Engelhardt
  - Re: OFF??? POINT-TO-POINT, Gáspár Lajos
    - Re: OFF??? POINT-TO-POINT, Jan Engelhardt
      - Re: OFF??? POINT-TO-POINT, Gáspár Lajos
        
        Re: OFF??? POINT-TO-POINT, Jan Engelhardt
[PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak, Julia Lawall
- Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak, Simon Horman
  - Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak, David Miller
    - Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak, Simon Horman
      - Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak, David Miller
    - Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak, Patrick McHardy
Full Cone NAT - Time elapsed inside local network, Navid Mohaghegh
- Re: Full Cone NAT - Time elapsed inside local network, Jan Engelhardt
- <Possible follow-ups>
- Full Cone NAT - Time elapsed inside local network, Navid Mohaghegh
Forced lladdr change with bridge - or not?, Jan Engelhardt
- Re: Forced lladdr change with bridge - or not?, Bart De Schuymer
  - Re: Forced lladdr change with bridge - or not?, Jan Engelhardt
    - Re: Forced lladdr change with bridge - or not?, Pascal Hambourg
      - Re: Forced lladdr change with bridge - or not?, Jan Engelhardt
        
        Re: Forced lladdr change with bridge - or not?, Pascal Hambourg
        
        Re: Forced lladdr change with bridge - or not?, Jan Engelhardt
- <Possible follow-ups>
- Re: Forced lladdr change with bridge - or not?, bdschuym
  - Re: Forced lladdr change with bridge - or not?, Pascal Hambourg
    - Re: Forced lladdr change with bridge - or not?, Pascal Hambourg
[patch v1 0/2] ipvsadm: SIP Persistence Engine, Simon Horman
- [patch v1 1/2] [PATCH 1/2] Slightly simplify options conflicts logic, Simon Horman
- [patch v1 2/2] [PATCH 2/2] Add support for persistence engines., Simon Horman
[patch v1 00/12] IPVS: SIP Persistence Engine, Simon Horman
- [patch v1 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument, Simon Horman
- [patch v1 02/12] netfilter: nf_conntrack_sip: Add callid parser, Simon Horman
- [patch v1 03/12] IPVS: compact ip_vs_sched_persist(), Simon Horman
- [patch v1 04/12] IPVS: Add struct ip_vs_conn_param, Simon Horman
- Re: [patch v1 00/12] IPVS: SIP Persistence Engine, Simon Horman
- [patch v1 05/12] IPVS: Allow null argument to ip_vs_scheduler_put(), Simon Horman
- [patch v1 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments, Simon Horman
- [patch v1 07/12] IPVS: Add struct ip_vs_pe, Simon Horman
- [patch v1 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Simon Horman
- [patch v1 09/12] IPVS: management of persistence engine modules, Simon Horman
- [patch v1 10/12] IPVS: Allow configuration of persistence engines, Simon Horman
- [patch v1 11/12] IPVS: Fallback if persistence engine fails, Simon Horman
- [patch v1 12/12] IPVS: sip persistence engine, Simon Horman
- Re: [patch v1 00/12] IPVS: SIP Persistence Engine, Patrick McHardy
  - Re: [patch v1 00/12] IPVS: SIP Persistence Engine, Simon Horman
    - Re: [patch v1 00/12] IPVS: SIP Persistence Engine, Patrick McHardy
      - Re: [patch v1 00/12] IPVS: SIP Persistence Engine, Simon Horman
routing VPN users through transparent Squid using iptables, Jack Andrews
- Re: routing VPN users through transparent Squid using iptables, Pascal Hambourg
  - Re: routing VPN users through transparent Squid using iptables, François Legal
    - Re: routing VPN users through transparent Squid using iptables, Pascal Hambourg
      - Re: routing VPN users through transparent Squid using iptables, François Legal
Bridges, Jonathan Tripathy
- Re: Bridges, Jan Engelhardt
  - Re: Bridges, Stephen Hemminger
- Re: Bridges, Thomas Jacob
  - Re: Bridges, Jonathan Tripathy
- Re: Bridges, Grant Taylor
  - Re: Bridges, Jonathan Tripathy
    - Re: Bridges, Grant Taylor
      - Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Karel Rericha
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jonathan Tripathy
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Grant Taylor
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Grant Taylor
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Grant Taylor
        
        Re: Bridges, Jan Engelhardt
  - Re: Bridges, Pascal Hambourg
    - Re: Bridges, Jonathan Tripathy
      - Re: Bridges, Pascal Hambourg
      - Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Pascal Hambourg
    - Re: Bridges, Grant Taylor
      - Re: Bridges, Pascal Hambourg
        
        Re: Bridges, Grant Taylor
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Grant Taylor
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Grant Taylor
        
        Re: Bridges, Jan Engelhardt
        
        Re: Bridges, Grant Taylor
        
        Re: Bridges, Rick Jones
[ANNOUNCE] ipset-4.3, Jozsef Kadlecsik
nfnetlink_queue interfering with ioctl calls, Roger Sala
- Re: nfnetlink_queue interfering with ioctl calls, Roger Sala
iptable and tproxy target, Mamadou Touré
- Re: iptable and tproxy target, Jan Engelhardt
mmotm 2010-08-11 - lockdep whinges at e1000e driver ifconfig up, Valdis . Kletnieks
Some problems with NAT, can't connect fo a few hosts, but the rest works, Hauke Hoffmann
Howto DNAT/SNAT existing TCP session (no SYN, only PUSH/ACK), Norbert van Bolhuis
- Re: Howto DNAT/SNAT existing TCP session (no SYN, only PUSH/ACK), Jan Engelhardt
ebtables nflog problem, Angel Inkov
- Re: ebtables nflog problem, Angel Inkov
Re: netfilter: add xt_cpu match, Geert Uytterhoeven
- Re: netfilter: add xt_cpu match, Jan Engelhardt
openvpn over udp failing, J Webster
- Re: openvpn over udp failing, Billy Crook
  - Re: openvpn over udp failing, J Webster
    - Re: openvpn over udp failing, Billy Crook
      - Re: openvpn over udp failing, Billy Crook
- <Possible follow-ups>
- Re: openvpn over udp failing, J Webster
  - Re: openvpn over udp failing, Billy Crook
    - Re: openvpn over udp failing, J Webster
      - Re: openvpn over udp failing, Billy Crook
        
        Re: openvpn over udp failing, J Webster
        
        Re: openvpn over udp failing, Billy Crook
Different limits in 32bit vs 64bit?, Ethan Sommer
- Re: Different limits in 32bit vs 64bit?, Jan Engelhardt
[ANNOUNCE]: Release of iptables-1.4.9.1, Patrick McHardy
- Re:[ANNOUNCE]: Release of iptables-1.4.9.1, xuhainanjing
  - Re: [ANNOUNCE]: Release of iptables-1.4.9.1, Robby Workman
Re: [Bugme-new] [Bug 16517] New: rp_filter fails to filter with CONFIG_IP_ROUTE_MULTIPATH and more than one 0/0 nexthop dev, Andrew Morton
- Re: [Bugme-new] [Bug 16517] New: rp_filter fails to filter with CONFIG_IP_ROUTE_MULTIPATH and more than one 0/0 nexthop dev, David Miller
[PATCH 16/42] net/ipv6/netfilter: Adjust confusing if indentation, Julia Lawall
[2.6.35 regression] iptables busted on Mac G5, Mikael Pettersson
[rfc 0/2] ipvsadm: SIP Persistence Engine, Simon Horman
- [rfc 1/2] [PATCH 1/2] Slightly simplify options conflicts logic, Simon Horman
- [rfc 2/2] [PATCH 2/2] Add support for persistence engines., Simon Horman
[rfc 00/13] IPVS: SIP Persistence Engine, Simon Horman
- [rfc 01/13] [RFC 01/13] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument, Simon Horman
- [rfc 02/13] [RFC 02/13] netfilter: nf_conntrack_sip: Add callid parser, Simon Horman
  - Re: [rfc 02/13] [RFC 02/13] netfilter: nf_conntrack_sip: Add callid parser, Patrick McHardy
    - Re: [rfc 02/13] [RFC 02/13] netfilter: nf_conntrack_sip: Add callid parser, Simon Horman
- [rfc 03/13] [RFC 03/13] ipvs: provide default ip_vs_conn_{in,out}_get_proto, Simon Horman
- [rfc 04/13] [RFC 04/13] IPVS: compact ip_vs_sched_persist(), Simon Horman
- [rfc 05/13] [RFC 05/13] IPVS: Add struct ip_vs_conn_param, Simon Horman
- [rfc 06/13] [RFC 06/13] IPVS: Allow null argument to ip_vs_scheduler_put(), Simon Horman
- [rfc 07/13] [RFC 07/13] IPVS: ip_vs_{un,}bind_scheduler NULL arguments, Simon Horman
- [rfc 08/13] [RFC 08/13] IPVS: Add struct ip_vs_pe, Simon Horman
- [rfc 09/13] [RFC 09/13] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Simon Horman
  - Re: [rfc 09/13] [RFC 09/13] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Jan Engelhardt
    - Re: [rfc 09/13] [RFC 09/13] IPVS: Add persistence engine data to /proc/net/ip_vs_conn, Simon Horman
- [rfc 10/13] [RFC 10/13] IPVS: management of persistence engine modules, Simon Horman
  - Re: [rfc 10/13] [RFC 10/13] IPVS: management of persistence engine modules, Stephen Hemminger
    - Re: [rfc 10/13] [RFC 10/13] IPVS: management of persistence engine modules, Simon Horman
- [rfc 11/13] [RFC 11/13] IPVS: Allow configuration of persistence engines, Simon Horman
- [rfc 12/13] [RFC 12/13] IPVS: Fallback if persistence engine fails, Simon Horman
- [rfc 13/13] [RFC 13/13] IPVS: sip persistence engine, Simon Horman
  - Re: [rfc 13/13] [RFC 13/13] IPVS: sip persistence engine, Jan Engelhardt
    - Re: [rfc 13/13] [RFC 13/13] IPVS: sip persistence engine, Simon Horman
  - Re: [rfc 13/13] [RFC 13/13] IPVS: sip persistence engine, Julian Anastasov
    - Re: [rfc 13/13] [RFC 13/13] IPVS: sip persistence engine, Simon Horman
Clone Filter Table, Edison Figueira
- Re: Clone Filter Table, Jan Engelhardt
ebtables PREROUTING -drop, ratheesh k
- Re: ebtables PREROUTING -drop, Jan Engelhardt
  - Re: ebtables PREROUTING -drop, ratheesh k
    - Re: ebtables PREROUTING -drop, Jan Engelhardt
      - Re: ebtables PREROUTING -drop, ratheesh k
- Re: [Bridge] ebtables PREROUTING -drop, Nicolas de Pesloüan
  - Re: [Bridge] ebtables PREROUTING -drop, Alex Bligh
    - Re: [Bridge] ebtables PREROUTING -drop, Jan Engelhardt
      - Re: [Bridge] ebtables PREROUTING -drop, Alex Bligh
        
        Re: [Bridge] ebtables PREROUTING -drop, Jan Engelhardt
        
        Re: [Bridge] ebtables PREROUTING -drop, Nicolas de Pesloüan
        
        Re: [Bridge] ebtables PREROUTING -drop, Jan Engelhardt
[ANNOUNCE]: Release of iptables-1.4.9, Patrick McHardy
- Re: [ANNOUNCE]: Release of iptables-1.4.9, Gabor Z. Papp
  - Re: [ANNOUNCE]: Release of iptables-1.4.9, Patrick McHardy
    - Re: [ANNOUNCE]: Release of iptables-1.4.9, Gabor Z. Papp
      - Re: [ANNOUNCE]: Release of iptables-1.4.9, Gabor Z. Papp
        
        Re: [ANNOUNCE]: Release of iptables-1.4.9, Jan Engelhardt
        
        Re: [ANNOUNCE]: Release of iptables-1.4.9, Gabor Z. Papp
        
        Re: [ANNOUNCE]: Release of iptables-1.4.9, Jan Engelhardt
        
        Re: [ANNOUNCE]: Release of iptables-1.4.9, Gabor Z. Papp
        
        snat range not cycling, Timothy Hayes
        
        Re: snat range not cycling, Jan Engelhardt
        
        Re: snat range not cycling, "Oleg A. Arkhangelsky"
        
        RE: snat range not cycling, Timothy Hayes
        
        Re: snat range not cycling, "Oleg A. Arkhangelsky"
        
        RE: snat range not cycling, Jan Engelhardt
        
        Re: [ANNOUNCE]: Release of iptables-1.4.9, Patrick McHardy
        
        Re: [ANNOUNCE]: Release of iptables-1.4.9, Jan Engelhardt
        
        Re: [ANNOUNCE]: Release of iptables-1.4.9, Patrick McHardy
      - Re: [ANNOUNCE]: Release of iptables-1.4.9, Michele Petrazzo - Unipex
libnetfilter_conntrack callbacks and nfct_destroy, Andrew Beverley
- Re: libnetfilter_conntrack callbacks and nfct_destroy, Pablo Neira Ayuso
libnfcontrack weirdness, Alex Bligh
- Re: libnfcontrack weirdness, Andrew Beverley
  - Re: libnfcontrack weirdness, Pablo Neira Ayuso
    - Re: libnfcontrack weirdness, Jan Engelhardt
      - Re: libnfcontrack weirdness, Pablo Neira Ayuso
        
        Re: libnfcontrack weirdness, Jan Engelhardt
    - Re: libnfcontrack weirdness, Andrew Beverley
  - Re: libnfcontrack weirdness, Alex Bligh
firewall and squid running on the same box, Mamadou Touré
- Re: firewall and squid running on the same box, Marek Kierdelewicz
  - Message not available
    - Message not available
      - Re: firewall and squid running on the same box, Mamadou Touré
        
        Message not available
        
        Re: firewall and squid running on the same box, Mamadou Touré
ipv6 forwarding without netfilter, Mark Ryden
- Re: ipv6 forwarding without netfilter, Pascal Hambourg
  - Re: ipv6 forwarding without netfilter, ABPNI
    - Re: ipv6 forwarding without netfilter, Jan Engelhardt
iptables / ebtables IP address intercept, Alex Bligh
- Re: iptables / ebtables IP address intercept, Grant Taylor
  - Re: iptables / ebtables IP address intercept, Alex Bligh
    - Re: iptables / ebtables IP address intercept, Grant Taylor
      - Re: iptables / ebtables IP address intercept, Alex Bligh
        
        Re: iptables / ebtables IP address intercept, Grant Taylor
block network access for certain users/groups, Elmar Stellnberger
- Re: block network access for certain users/groups, Richard Horton
- <Possible follow-ups>
- block network access for certain users/groups, Elmar Stellnberger
  - Re: block network access for certain users/groups, Lars Nooden
    - Re: block network access for certain users/groups, Jan Engelhardt
      - Re: block network access for certain users/groups, Lars Nooden
        
        Re: block network access for certain users/groups, Elmar Stellnberger
        
        Re: block network access for certain users/groups, Richard Horton
"Expect" from Netfilter hook, Jackson Alberto
iptables rule for ovh, Portedaix
- Re: iptables rule for ovh, Pascal Hambourg
  - Re: iptables rule for ovh, Portedaix
    - Re: iptables rule for ovh, Pascal Hambourg
- Re: iptables rule for ovh, Richard Horton
  - Re: iptables rule for ovh, Pascal Hambourg
- Re: iptables rule for ovh, Jan Engelhardt
  - Re: iptables rule for ovh, Richard Horton
strange log on gateway inside [], Michele Petrazzo - Unipex
- Re: strange log on gateway inside [], Jan Engelhardt
  - Re: strange log on gateway inside [], Michele Petrazzo - Unipex
    - Re: strange log on gateway inside [], Jan Engelhardt
- Re: strange log on gateway inside [], Pascal Hambourg
- Re: strange log on gateway inside [], Michele Petrazzo - Unipex
  - Re: strange log on gateway inside [], Richard Horton
  - Re: strange log on gateway inside [], Jan Engelhardt
How Expensive?, Jonathan Tripathy
- Re: How Expensive?, Payam Chychi
  - Re: How Expensive?, Jan Engelhardt
    - Re: How Expensive?, Payam Chychi
Synflood filtering and Conntrack, Dennis J.
- Re: Synflood filtering and Conntrack, Mart Frauenlob
  - Re: Synflood filtering and Conntrack, Jan Engelhardt
    - Re: Synflood filtering and Conntrack, Pascal Hambourg
      - Re: Synflood filtering and Conntrack, Jan Engelhardt
        
        Re: Synflood filtering and Conntrack, Pascal Hambourg
    - Re: Synflood filtering and Conntrack, Mart Frauenlob
      - Re: Synflood filtering and Conntrack, Jan Engelhardt
        
        Re: Synflood filtering and Conntrack, Mart Frauenlob
        
        Re: Synflood filtering and Conntrack, Pascal Hambourg
        
        Re: Synflood filtering and Conntrack, Jan Engelhardt
        
        Re: Synflood filtering and Conntrack, Pascal Hambourg
        
        Re: Synflood filtering and Conntrack, Jozsef Kadlecsik
        
        Re: Synflood filtering and Conntrack, Gáspár Lajos
        
        Re: Synflood filtering and Conntrack, Jozsef Kadlecsik
        
        Re: Synflood filtering and Conntrack, Mart Frauenlob
        
        Re: Synflood filtering and Conntrack, Pascal Hambourg
        
        Re: Synflood filtering and Conntrack, Jozsef Kadlecsik
match streaming traffic in iptable rule, Mamadou Touré
- Re: match streaming traffic in iptable rule, Jan Engelhardt
  - Re: match streaming traffic in iptable rule, Mamadou Touré
    - Re: match streaming traffic in iptable rule, Mart Frauenlob
- Re: match streaming traffic in iptable rule, Pieter Smit

[Index of Archives] [Linux Netfilter Development] [Advanced Routing & Traffice Control] [Netem] [Berkeley Packet Filter] [Bugtraq] [Yosemite Discussion] [Linux Kernel Development]