Linux TCP/IP Netfilter

• Thread Index

• Re: How to use IPv6 SNPT?
  • From: Alex <world.peace.200887@xxxxxxxxx>
• Re: How to use IPv6 SNPT?
  • From: Alex <world.peace.200887@xxxxxxxxx>
• Changing the incoming interface of the packet using iptables MARK and ip route commands
  • From: Ravi Kanth Vanapalli <vvnrk.vanapalli@xxxxxxxxx>
• port forwarding to web server with different netmask than default netmask.
  • From: xavier droubay <xavier.droubay@xxxxxxxxx>
• Re: Increasing the number of ipsets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Increasing the number of ipsets
  • From: Rob Greenwood <bilco105@xxxxxxxxx>
• Re: [ANNOUNCE] Netfilter is participating in the Google Summer of Code 2013
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [ANNOUNCE] Netfilter is participating in the Google Summer of Code 2013
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch -next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [patch -next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: Remote IP in packet sent from WAN to LAN
  • From: Vigneswaran R <vignesh@xxxxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: nf-queue.c as an example of libnetfilter_queue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf-queue.c as an example of libnetfilter_queue
  • From: Flavio Poletti <polettix@xxxxxxxxx>
• ndpi-netfilter
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Multihoming: Changing out device of the packet using a hook
  • From: nakulgoud <nakulgoud@xxxxxxxxx>
• Re: Fwd: ipset and counters
  • From: hdemir@xxxxxxxxxxx
• Re: Fwd: ipset and counters
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Multihoming : Dynamically decide interface, for sending packet
  • From: Nikolai Lusan <nikolai@xxxxxxxxxxx>
• Re: Fwd: ipset and counters
  • From: Husnu Demir <hdemir@xxxxxxxxxxx>
• Re: Fwd: ipset and counters
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Fwd: ipset and counters
  • From: Husnu Demir <hdemir@xxxxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Moahn Reddy <mohanreddykv@xxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Moahn Reddy <mohanreddykv@xxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Multihoming : Dynamically decide interface, for sending packet
  • From: nakulgoud <nakulgoud@xxxxxxxxx>
• Re: [patch] ipvs: off by one in set_sctp_state()
  • From: Julian Anastasov <ja@xxxxxx>
• [patch] ipvs: off by one in set_sctp_state()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• iptables 1.4.18 on linux 2.4
  • From: Horst Wente <horst.wente@xxxxxxx>
• Re: Remote IP in packet sent from WAN to LAN
  • From: Ambroz Bizjak <ambrop7@xxxxxxxxx>
• RE: Remote IP in packet sent from WAN to LAN
  • From: Piotr Pawłowski <piotr.pawlowski@xxxxxxxxxxx>
• Re: Remote IP in packet sent from WAN to LAN
  • From: Ambroz Bizjak <ambrop7@xxxxxxxxx>
• Re: Remote IP in packet sent from WAN to LAN
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Remote IP in packet sent from WAN to LAN
  • From: Piotr Pawłowski <piotr.pawlowski@xxxxxxxxxxx>
• If the hooked SYN packets return with NS_STOLEN, TCP cannot successfully establish the connection
  • From: Lawrence Lee <lawrenceqli@xxxxxxxxx>
• Re: EPERM instead of ENETUNREACH for "to unreachable" route
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: cluster match and ipvsadm (not connection tracked)
  • From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
• EPERM instead of ENETUNREACH for "to unreachable" route
  • From: "markus lottmann" <LottvomSchlott@xxxxxx>
• cluster match and ipvsadm (not connection tracked)
  • From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Yoann Juet <yoann.juet@xxxxxxxxxxxxxx>
• RE: [PATCH 3.8-stable] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Jonghwan Choi <jhbird.choi@xxxxxxxxxxx>
• [ANNOUNCE] ipset 6.18 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 3.8-stable] netfilter: nfnetlink_acct: return -EINVAL if object name is empty
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3.8-stable] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• CT target without options
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: DROPING ICMP and still getting kernel messages of icmp traffic?‏
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Question about behaviour of rule in a syn attack.
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• [PATCH 3.8-stable] netfilter: nfnetlink_acct: return -EINVAL if object name is empty
  • From: Jonghwan Choi <jhbird.choi@xxxxxxxxx>
• [PATCH 3.8-stable] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Jonghwan Choi <jhbird.choi@xxxxxxxxx>
• nf-queue.c as an example of libnetfilter_queue
  • From: Flavio Poletti <polettix@xxxxxxxxx>
• Re: ipset - understanding hash size and maxelem
  • From: Vladimir <ml@xxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: "Yoann JUET" <yoann.juet@xxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: "Yoann JUET" <yoann.juet@xxxxxxxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• [DNAT] applying a new rule for a connection marked as UNREPLIED
  • From: Jozef Balaz <jozef.balaz.237@xxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: "Yoann JUET" <yoann.juet@xxxxxxxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: [ipset] Match both on source AND destination
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset - bitmap:ip,mac kernel crashes, errors
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset] Match both on source AND destination
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• ipset - bitmap:ip,mac kernel crashes, errors
  • From: "Yoann JUET" <yoann.juet@xxxxxxxxxxxxxx>
• Re: ipset - understanding hash size and maxelem
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• ipset - understanding hash size and maxelem
  • From: Vladimir <ml@xxxxxxxx>
• Re: Zone based rules
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Zone based rules
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• DROPING ICMP and still getting kernel messages of icmp traffic?‏
  • From: Alex Flex <aflexzor@xxxxxxxxx>
• Some netfilter log messages are missing a log prefix
  • From: Yonatan Broza <yonatan.broza@xxxxxxxxx>
• Re: logging rsts
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: ipv6 rule icmp bug maybe
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• IPTables Time zone match to local time
  • From: Shanthosh Krishna Moorthy <shanthosh.rk@xxxxxxxxx>
• Re: netfilter ipset c library
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• netfilter ipset c library
  • From: Rod Salazar <rodrigos@xxxxxx>
• Re: ipv6 rule icmp bug maybe
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• Re: ipv6 rule icmp bug maybe
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• NFQUEUE after MASQUERADE: is it possible?
  • From: Paul Marks <pmarks@xxxxxxxxxx>
• Re: ipv6 rule icmp bug maybe
  • From: Michal Kubeček <mkubecek@xxxxxxx>
• ipv6 rule icmp bug maybe
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• session timers in iiptables-1.3.5-9.1.el5
  • From: Bob Reiber <bob@xxxxxxxx>
• Source process (PID) of a packet
  • From: Daniele Iamartino <danieleiamartino@xxxxxxxxx>
• How to directly deliver packets to the L4 layer in the NF_IP_PRE_ROUTING hook
  • From: Lawrence Lee <lawrenceqli@xxxxxxxxx>
• Re: [PATCH -next] netfilter: nf_conntrack_standalone: fix error return code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ip[6]tables: show --protocol instead of --proto in usage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• How to build an ebtables kernel module for MIPS64 Octeon processor
  • From: Ben Muj <beniaminmuj@xxxxxxxxx>
• logging rsts
  • From: Matt LaPlante <cybrmatt@xxxxxxxxx>
• Re: [PATCH] ip[6]tables: show --protocol instead of --proto in usage
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx>
• Re: [libvirt] [PATCH v3] nwfilter: probe for inverted ctdir
  • From: Laine Stump <laine@xxxxxxxxx>
• SNAT for routing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Laine Stump <laine@xxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• [PATCH -next] netfilter: nf_conntrack_standalone: fix error return code
  • From: Wei Yongjun <weiyj.lk@xxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Dmitry Korzhevin <dmitry.korzhevin@xxxxxxxxxx>
• libnetfilter_queue not picking up any packets during recv step.
  • From: Rodrigo Salazar <rodrodsalazar@xxxxxxxxx>
• Re: Question about xt_ipp2p module
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Question about xt_ipp2p module
  • From: Dmitry Korzhevin <dmitry.korzhevin@xxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [no subject]
  • From: e639@xxxxxxx
• [no subject]
  • From: e639@xxxxxxx
• Re: [PATCH -next] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• port knocking using recent module
  • From: Konrad Vrba <konrad.vrba@xxxxxxxxx>
• Re: Need help with dialup connection (and syn packets)
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Need help with dialup connection (and syn packets)
  • From: John Lauro <johnalauro@xxxxxxxxx>
• Need help with dialup connection (and syn packets)
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Laine Stump <laine@xxxxxxxxx>
• [PATCH -next] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init()
  • From: Wei Yongjun <weiyj.lk@xxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [announce] - Bash programmable completion for ip[6]tables
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Eric Blake <eblake@xxxxxxxxxx>
• Re: netfilter+libvirt=(smth got broken?)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libvirt-users] netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• Re: conntrackd: fix IPv6 address pattern
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ip[6]tables: show --protocol instead of --proto in usage
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• Re: netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• netfilter+libvirt=(smth got broken?)
  • From: Nikolai Zhubr <n-a-zhubr@xxxxxxxxx>
• Re: [PATCH] netfilter: remove unused "config IP_NF_QUEUE"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: remove unused "config IP_NF_QUEUE"
  • From: Paul Bolle <pebolle@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: Batch cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• conntrackd: fix IPv6 address pattern
  • From: Roman Hoog Antink <rha@xxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: Batch cleanup
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [Announce] ipset - programmable completion (bash)
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: AZ 9901 <az9901@xxxxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: AZ 9901 <az9901@xxxxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: iptables as a protocol demultiplexer
  • From: AZ 9901 <az9901@xxxxxxxxx>
• Re: netfilter mailing list: rules
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• netfilter mailing list: rules
  • From: Konrad Vrba <konrad.vrba@xxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Jim Mellander <jmellander@xxxxxxx>
• Re: [PATCH] bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• need help with nfqueue and bridge
  • From: Stefan Sabolowitsch <Stefan.Sabolowitsch@xxxxxxxxxxxxxxxx>
• Re: need help with nfqueue and bridge
  • From: Stefan Sabolowitsch <Stefan.Sabolowitsch@xxxxxxxxxxxxxxxx>
• Re: need help with nfqueue and bridge
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• need help with nfqueue and bridge
  • From: Stefan Sabolowitsch <Stefan.Sabolowitsch@xxxxxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: Batch cleanup
  • From: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
• Options for a custom chain/target
  • From: Paul Chavent <paul.chavent@xxxxxxx>
• [PATCH] bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR
  • From: Silviu-Mihai Popescu <silviupopescu1990@xxxxxxxxx>
• iptables as a protocol demultiplexer
  • From: AZ 9901 <az9901@xxxxxxxxx>
• RE: Need a way to match vlan / pcp fields in 802.1Q header
  • From: <ggeorgiev@xxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• RE: Need a way to match vlan / pcp fields in 802.1Q header
  • From: <ggeorgiev@xxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Netfilter applied to specific interfaces only
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Netfilter applied to specific interfaces only
  • From: Jim Mellander <jmellander@xxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: Xiong Wu <xiong.wu1981@xxxxxxxxx>
• Need a way to match vlan / pcp fields in 802.1Q header
  • From: <ggeorgiev@xxxxxxxxxxx>
• Re: question about port forwarding using dnat
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• Re: Connection tracking counters increasing
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Connection tracking counters increasing
  • From: "Daniel L. Miller" <dmiller@xxxxxxxxx>
• question about port forwarding using dnat
  • From: Hamed Afshar <hamed_afshar@xxxxxxxxx>
• Re: conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• Re: SYN Cookies vs ip_conntrack in SYN Flood conditions
  • From: Marco Padovan <evcz@xxxxxxx>
• Re: brouting different VLANs
  • From: Dovydas Sankauskas <laisve@xxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.4.18 release
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Append rule to a NFQUEUE?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: brouting different VLANs
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 1.0.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: brouting different VLANs
  • From: Dovydas Sankauskas <laisve@xxxxxxxxx>
• [PATCH -v3 19/23] net/netfilter: rename random32() to prandom_u32()
  • From: Akinobu Mita <akinobu.mita@xxxxxxxxx>
• [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set
  • From: Paul Bolle <pebolle@xxxxxxxxxx>
• Re: brouting different VLANs
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: brouting different VLANs
  • From: Dovydas Sankauskas <laisve@xxxxxxxxx>
• [ANNOUNCE] ulogd 2.0.2 release
  • From: Eric Leblond <eric@xxxxxxxxx>
• [ANNOUNCE] iptables 1.4.18 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] conntrack-tools 1.4.1 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] nfacct 1.0.1 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter_acct 1.0.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: brouting different VLANs
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• brouting different VLANs
  • From: Dovydas Sankauskas <laisve@xxxxxxxxx>
• Re: how to discard a netfilter rule
  • From: Donghua Liu <liudonghua123@xxxxxxxxx>
• SYN Cookies vs ip_conntrack in SYN Flood conditions
  • From: Steve Kann <stevek@xxxxxxxxxx>
• Re: how to discard a netfilter rule
  • From: "Rob Sterenborg (lists)" <lists@xxxxxxxxxxxxxxx>
• Re: how to discard a netfilter rule
  • From: Donghua Liu <liudonghua123@xxxxxxxxx>
• Re: [MAINTENANCE] netfilter.org infrastructure updates
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: how to discard a netfilter rule
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• how to discard a netfilter rule
  • From: Donghua Liu <liudonghua123@xxxxxxxxx>
• Re: Block all input but two non-contiguous networks
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Block all input but two non-contiguous networks
  • From: jboyce@xxxxxxxxxxxxxxx
• Re: Using set mark to split traffic against 2 IF
  • From: Daniel huhardeaux <daniel.huhardeaux@xxxxxxxxxx>
• Re: Block all input but two non-contiguous networks
  • From: jboyce@xxxxxxxxxxxxxxx
• Re: Block all input but two non-contiguous networks
  • From: Jon Lewis <jlewis@xxxxxxxxx>
• Re: Block all input but two non-contiguous networks
  • From: jboyce@xxxxxxxxxxxxxxx
• Re: Block all input but two non-contiguous networks
  • From: Jon Lewis <jlewis@xxxxxxxxx>
• [MAINTENANCE] netfilter.org infrastructure updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Block all input but two non-contiguous networks
  • From: jboyce@xxxxxxxxxxxxxxx
• Re: conntrackd questions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Using set mark to split traffic against 2 IF
  • From: Daniel huhardeaux <daniel.huhardeaux@xxxxxxxxxx>
• Established Connections Timeout dropping to Unacknowledged Timeout
  • From: Sean <sean@xxxxxxxxxxxxxxx>
• Re: how to write rule specification according to port availablity
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: how to write rule specification according to port availablity
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• how to write rule specification according to port availablity
  • From: Donghua Liu <liudonghua123@xxxxxxxxx>
• Re: conntrackd questions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.17 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• Re: conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• Re: Bittorrent blocking
  • From: Michael Rash <mbr@xxxxxxxxxxxxxx>
• Re: ipset nomatch generating kernel error: "directory not empty"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Bittorrent blocking
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Bittorrent blocking
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Bittorrent blocking
  • From: Dmitry Korzhevin <dmitry.korzhevin@xxxxxxxxxx>
• Re: conntrackd questions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• conntrackd questions
  • From: Marco <listaddr@xxxxxxxxx>
• ipset nomatch generating kernel error: "directory not empty"
  • From: John Brendler <brendlerjg@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Michael Ludvig <mludvig@xxxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: Redirecting DNS Not Working
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Redirecting DNS Not Working
  • From: John Corps <envoys@xxxxxxxxx>
• Re: nf_nat_sip with CT target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf_nat_sip with CT target
  • From: Daniel Reurich <daniel@xxxxxxxxxxxxxxxx>
• Re: nf_nat_sip with CT target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [SOLVED] Re: Make packets go through when NFQUEUE app crashed
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: Make packets go through when NFQUEUE app crashed
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Make packets go through when NFQUEUE app crashed
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• nf_nat_sip with CT target
  • From: Daniel Reurich <daniel@xxxxxxxxxxxxxxxx>
• Re: Make packets go through when NFQUEUE app crashed
  • From: Eric Leblond <eric@xxxxxxxxx>
• Make packets go through when NFQUEUE app crashed
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: --and-mark while matching?
  • From: Ambroz Bizjak <ambrop7@xxxxxxxxx>
• [SOLVED] Re: LOG target with MARK?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Append rule to a NFQUEUE?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• --and-mark while matching?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: LOG target with MARK?
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• [SOLVED] Re: Is it safe to use libnetfilter_queue in these cases?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• LOG target with MARK?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: connlimit reached - cannot open connections even after I close some
  • From: David Gubler <dg@xxxxxxxxxx>
• Re: Modifying data of a multiple packet connection with libnetfilter_queue
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Multithreading with libnetfilter_queue?
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Is it safe to use libnetfilter_queue in these cases?
  • From: Eric Leblond <eric@xxxxxxxxx>
• Multithreading with libnetfilter_queue?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Modifying data of a multiple packet connection with libnetfilter_queue
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Is it safe to use libnetfilter_queue in these cases?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: IPv6 routes too much
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: IPv6 routes too much
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• IPv6 routes too much
  • From: Prashant Batra <prashant0100@xxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• [Announce] ipset - programmable completion (bash)
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: How to use TPROXY with 2 lan interfaces and one wan
  • From: Francesco <francesco@xxxxxxx>
• Re: How to use TPROXY with 2 lan interfaces and one wan
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Lazuardi Nasution <mrxlazuardin@xxxxxxxxx>
• How to use TPROXY with 2 lan interfaces and one wan
  • From: Francesco <francesco@xxxxxxx>
• Re: SNAT using the same internal address multiple times
  • From: Jimmy Thrasibule <thrasibule.jimmy@xxxxxxxxx>
• Re: Ver 1.4.17 Error Appending Prerouting
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• Ver 1.4.17 Error Appending Prerouting
  • From: Roman Gelfand <rgelfand2@xxxxxxxxx>
• Re: connlimit reached - cannot open connections even after I close some
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• SNAT using the same internal address multiple times
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• Re: connlimit reached - cannot open connections even after I close some
  • From: David Gubler <dg@xxxxxxxxxx>
• Re: connlimit reached - cannot open connections even after I close some
  • From: Pascal Hambourg <pascal@xxxxxxxxxxxxxxx>
• SMB over port fowards
  • From: Al Grant <bigal.nz@xxxxxxxxx>
• Re: hex string matching at a negative offset from the end of the packet payload
  • From: 叶雨飞 <sunyucong@xxxxxxxxx>
• hex string matching at a negative offset from the end of the packet payload
  • From: Tom <tom@xxxxxxxx>
• Re: iptables and slave interfaces
  • From: Bryan Harris <bryanlharris@xxxxxx>
• SSL Handshaking Failure
  • From: Roman Gelfand <rgelfand2@xxxxxxxxx>
• Re: connlimit reached - cannot open connections even after I close some
  • From: David Gubler <dg@xxxxxxxxxx>
• iptables and slave interfaces
  • From: lejeczek <peljasz@xxxxxxxxxxx>
• Re: [patch] ipvs: freeing uninitialized pointer on error
  • From: Julian Anastasov <ja@xxxxxx>
• [patch] ipvs: freeing uninitialized pointer on error
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: ip6tables -S & NPT, bug ?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• ip6tables -S & NPT, bug ?
  • From: Jean-Michel DILLY <jm@xxxxxxxx>
• Re: connlimit reached - cannot open connections even after I close some
  • From: David Gubler <dg@xxxxxxxxxx>
• connlimit reached - cannot open connections even after I close some
  • From: David Gubler <dg@xxxxxxxxxx>
• Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17]
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17]
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17]
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17]
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• cluster ip for heavy application
  • From: benjamin fernandis <benjo11111@xxxxxxxxx>
• Re: [patch v3] doc: add nf_conntrack sysctl api documentation
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• netlink queue to implement ipsec
  • From: Prashant Batra <prashant0100@xxxxxxxxx>
• Re: [patch v3] doc: add nf_conntrack sysctl api documentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnetfilter_queue PATCH 1/2] doxygen: improve fail-open documentation.
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: [patch v3] doc: add nf_conntrack sysctl api documentation
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: [patch v3] doc: add nf_conntrack sysctl api documentation
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Bug? EPERM on UDP send if packet is DROPped on OUTPUT
  • From: Richard Tollerton <rich.tollerton@xxxxxx>
• [patch v3] doc: add nf_conntrack sysctl api documentation
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH v4] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: [libnetfilter_queue PATCH 1/2] doxygen: improve fail-open documentation.
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: [patch net-next v2] doc: add nf_conntrack sysctl api documentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnetfilter_queue PATCH 1/2] doxygen: improve fail-open documentation.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• Re: [patch net-next v2] doc: add nf_conntrack sysctl api documentation
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Iptables configuration NAT router and PPTP endpoint
  • From: Andrew Peng <pengc99@xxxxxxxxx>
• Restored Reply Packets Hook
  • From: Lazuardi Nasution <mrxlazuardin@xxxxxxxxx>
• [patch net-next v2] doc: add nf_conntrack sysctl api documentation
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next] doc: add nf_conntrack sysctl api documentation
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next] doc: add nf_conntrack sysctl api documentation
  • From: Florian Westphal <fw@xxxxxxxxx>
• [patch net-next] doc: add nf_conntrack sysctl api documentation
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: iptables deactivate "getportbyname"
  • From: Manuel Scheub <manuel.scheub@xxxxxxxxxxx>
• Re: connlimit performance
  • From: 叶雨飞 <sunyucong@xxxxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable
  • From: Cong Ding <dinggnu@xxxxxxxxx>
• Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable
  • From: "Waskiewicz Jr, Peter P" <peter.p.waskiewicz.jr@xxxxxxxxx>
• [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable
  • From: Cong Ding <dinggnu@xxxxxxxxx>
• Re: How to use TROXY target only for specific outgoing interface
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: How to use TROXY target only for specific outgoing interface
  • From: Sebastian Poehn <sebastian.poehn@xxxxxxxxxxxxxx>
• Re: iptables deactivate "getportbyname"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17]
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: iptables deactivate "getportbyname"
  • From: Manuel Scheub <manuel.scheub@xxxxxxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: iptables deactivate "getportbyname"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: iptables deactivate "getportbyname"
  • From: Manuel Scheub <manuel.scheub@xxxxxxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: iptables deactivate "getportbyname"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• iptables deactivate "getportbyname"
  • From: Manuel Scheub <manuel.scheub@xxxxxxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: How to use TROXY target only for specific outgoing interface
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: NAT, DROP and walled-gardens (~= captive portal)
  • From: Tom <tom@xxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Victor Julien <lists@xxxxxxxxxxxx>
• Re: connlimit performance
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: state match is obsolete 1.4.17
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• connlimit performance
  • From: 叶雨飞 <sunyucong@xxxxxxxxx>
• Re: NAT, DROP and walled-gardens (~= captive portal)
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• state match is obsolete 1.4.17
  • From: Nick Edwards <nick.z.edwards@xxxxxxxxx>
• NAT, DROP and walled-gardens (~= captive portal)
  • From: <tom@xxxxxxx>
• Re: [mangle table] end rule
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: [mangle table] end rule
  • From: Born Without <blackhole@xxxxxxxxxxx>
• [mangle table] end rule
  • From: richard lucassen <mailinglists@xxxxxxxxxxxx>
• Re: Dropping brute force attacks
  • From: Dimitri Yioulos <dyioulos@xxxxxxxxxxxxx>
• Re: How to use TROXY target only for specific outgoing interface
  • From: Sebastian Poehn <sebastian.poehn@xxxxxxxxxxxxxx>
• [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_queue issues
  • From: dorian <dorian33@xxxxx>
• Re: [libnetfilter_queue PATCH 1/2] doxygen: improve fail-open documentation.
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• [libnetfilter_queue PATCH 2/2] doxygen: improve documentation
  • From: Eric Leblond <eric@xxxxxxxxx>
• [libnetfilter_queue PATCH 1/2] doxygen: improve fail-open documentation.
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: libnetfilter_queue issues
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: How to use TROXY target only for specific outgoing interface
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: How to use TROXY target only for specific outgoing interface
  • From: Sebastian Poehn <sebastian.poehn@xxxxxxxxxxxxxx>
• Re: How to use TROXY target only for specific outgoing interface
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: libnetfilter_queue issues
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• How to use TROXY target only for specific outgoing interface
  • From: Sebastian Poehn <sebastian.poehn@xxxxxxxxxxxxxx>
• Re: libnetfilter_queue issues
  • From: dorian <dorian33@xxxxx>
• Re: libnetfilter_queue issues
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: libnetfilter_queue issues
  • From: dorian <dorian33@xxxxx>
• Bidirectional ULOG with REDIRECT
  • From: Lazuardi Nasution <mrxlazuardin@xxxxxxxxx>
• Re: libnetfilter_queue issues
  • From: Felix <credzba@xxxxxxxxx>
• Re: libnetfilter_queue issues
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: libnetfilter_queue issues
  • From: Felix <credzba@xxxxxxxxx>
• libnetfilter_queue issues
  • From: dorian <dorian33@xxxxx>
• Re: Basic bridge routing via ebtables and iproute2
  • From: Peter McAlpine <peter@xxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: Dropping brute force attacks
  • From: Dimitri Yioulos <dyioulos@xxxxxxxxxxxxx>
• Re: Basic bridge routing via ebtables and iproute2
  • From: 叶雨飞 <sunyucong@xxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Basic bridge routing via ebtables and iproute2
  • From: Peter McAlpine <peter@xxxxxxx>
• Dropping brute force attacks
  • From: Dimitri Yioulos <dyioulos@xxxxxxxxxxxxx>
• xtadm 1.5.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c
  • From: Borislav Petkov <bp@xxxxxxxxx>
• Re: v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c
  • From: Borislav Petkov <bp@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.16.1 released
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.16.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.16.1 released
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.16.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.16.1 released
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.16.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.16.1 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [ANNOUNCE] ipset 6.16.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Limits higher than 10000/sec
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Compile iptables on Debian
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Compile iptables on Debian
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: Deleting subnet range from conntrack
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.16.1 released
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: Deleting subnet range from conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Deleting subnet range from conntrack
  • From: "Steve \(Telsat Broadband\)" <steve@xxxxxxxxxxx>
• Re: Limits higher than 10000/sec
  • From: Darius Jahandarie <djahandarie@xxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Fwd: Re: problems iptables pptpd
  • From: forums@xxxxxxxxxxxxxx
• Re: FW: Packets missing the NAT table
  • From: Born Without <blackhole@xxxxxxxxxxx>
• RE: FW: Packets missing the NAT table
  • From: "Steve \(Telsat Broadband\)" <steve@xxxxxxxxxxx>
• Re: FW: Packets missing the NAT table
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• FW: Packets missing the NAT table
  • From: "Steve \(Telsat Broadband\)" <steve@xxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Wrapper script for ipset listing
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: [SOLVED] Re: Native support of counting rules?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: [SOLVED] Re: Native support of counting rules?
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: [SOLVED] Re: Native support of counting rules?
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: [SOLVED] Re: Native support of counting rules?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: [SOLVED] Re: Native support of counting rules?
  • From: Jan Vales <jan@xxxxxxxxxx>
• Re: [SOLVED] Re: Native support of counting rules?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [SOLVED] Re: Native support of counting rules?
  • From: Jan Vales <jan@xxxxxxxxxx>
• [SOLVED] Re: Native support of counting rules?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: Native support of counting rules?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• [PATCH -v2 22/26] net/netfilter: rename random32() to prandom_u32()
  • From: Akinobu Mita <akinobu.mita@xxxxxxxxx>
• Re: How to use IPv6 SNPT?
  • From: Ulrich Weber <ulrich.weber@xxxxxxxxxx>
• Fw: [Bug 52171] New: Error: No such file or directory
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Connlimit troubles ( still )
  • From: "me" <todh@xxxxxxxxxxxxxx>
• Re: Native support of counting rules?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Native support of counting rules?
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Clang static analysis of iptables-1.4.17
  • From: Marcin Mirosław <marcin@xxxxxxxx>
• Re: osf match, --ttl & --log options missing in iptables[-save] [-[L|S]]
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: Mirroring traffic with iptables TEE target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Mirroring traffic with iptables TEE target
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Mirroring traffic with iptables TEE target
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: Mirroring traffic with iptables TEE target
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Mirroring traffic with iptables TEE target
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: How to use IPv6 SNPT?
  • From: Michael Ludvig <mludvig@xxxxxxxxxxxx>
• Mirroring traffic with iptables TEE target
  • From: Aaron Lewis <the.warl0ck.1989@xxxxxxxxx>
• Re: Concurrent Sessions/Sessions per second
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: Concurrent Sessions/Sessions per second
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: osf match, --ttl & --log options missing in iptables[-save] [-[L|S]]
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: osf match, --ttl & --log options missing in iptables[-save] [-[L|S]]
  • From: Born Without <blackhole@xxxxxxxxxxx>
• ipset - adding two MACs with same IP address
  • From: Piotr Kaczmarzyk <piotr@xxxxxxxxxxx>
• Re: kernel panic when running /etc/init.d/iptables restart
  • From: canqun zhang <canqunzhang@xxxxxxxxx>
• Re: kernel panic when running /etc/init.d/iptables restart
  • From: canqun zhang <canqunzhang@xxxxxxxxx>
• Re: osf match, --ttl & --log options missing in iptables[-save] [-[L|S]]
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: osf match, --ttl & --log options missing in iptables[-save] [-[L|S]]
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: osf match, --ttl & --log options missing in iptables[-save] [-[L|S]]
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Concurrent Sessions/Sessions per second
  • From: Usuário do Sistema <maiconlp@xxxxxxxxx>
• osf match, --ttl & --log options missing in iptables[-save] [-[L|S]]
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: conntrack-tools rpc helper
  • From: Richard A Nelson <cowboy@xxxxxxxxxx>
• Re: help with cluster and/or clusterip
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrack-tools rpc helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Don't leak 'exp' in ctnetlink_create_expect()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: Don't leak 'exp' in ctnetlink_create_expect()
  • From: Jesper Juhl <jj@xxxxxxxxxxxxx>
• [ANNOUNCE] iptables 1.4.17 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: kernel panic when running /etc/init.d/iptables restart
  • From: canqun zhang <canqunzhang@xxxxxxxxx>
• Re: kernel panic when running /etc/init.d/iptables restart
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: kernel panic when running /etc/init.d/iptables restart
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: kernel panic when running /etc/init.d/iptables restart
  • From: canqun zhang <canqunzhang@xxxxxxxxx>
• Re: kernel panic when running /etc/init.d/iptables restart
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: conntrack-tools rpc helper
  • From: Richard A Nelson <cowboy@xxxxxxxxxx>
• conntrack-tools rpc helper
  • From: Richard A Nelson <cowboy@xxxxxxxxxx>
• kernel panic when running /etc/init.d/iptables restart
  • From: canqun zhang <canqunzhang@xxxxxxxxx>
• [PATCH 25/29] net/netfilter: rename random32() and net_random() to prandom_u32()
  • From: Akinobu Mita <akinobu.mita@xxxxxxxxx>
• iptables will match the following ICMP request packet as ESTABLISHED state after the first reply packet is sent
  • From: Ronnie Zheng <jeromezhr@xxxxxxxxx>
• Re: How to use IPv6 SNPT?
  • From: Ulrich Weber <ulrich.weber@xxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: ipset save and restore
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset save and restore
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Leonardo Rodrigues <leolistas@xxxxxxxxxxxxxx>
• Re: ipset save and restore
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Re: ipset net:hash and nomatch option
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: ipset save and restore
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxx>
• Re: ipset save and restore
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset save and restore
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: ipset net:hash and nomatch option
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset save and restore
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Leonardo Rodrigues <leolistas@xxxxxxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• ipset net:hash and nomatch option
  • From: Born Without <blackhole@xxxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Redirect network traffic
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• ipset save and restore
  • From: Christoph Anton Mitterer <christoph.anton.mitterer@xxxxxx>
• How to use IPv6 SNPT?
  • From: Michael Ludvig <mludvig@xxxxxxxxxxxx>
• Re: Using DNAT with multiple upstreams
  • From: 叶雨飞 <sunyucong@xxxxxxxxx>
• Re: Using DNAT with multiple upstreams
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• Re: Using DNAT with multiple upstreams
  • From: 叶雨飞 <sunyucong@xxxxxxxxx>
• Using DNAT with multiple upstreams
  • From: Alex Bligh <alex@xxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Leonardo Rodrigues <leolistas@xxxxxxxxxxxxxx>
• Re: Discriminate client requests from transparent proxy requests?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Discriminate client requests from transparent proxy requests?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• [PATCH v4] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Kevin Cernekee <cernekee@xxxxxxxxx>
• RE: help with cluster and/or clusterip
  • From: Alex Samad - Yieldbroker <Alex.Samad@xxxxxxxxxxxxxxx>
• RE: help with cluster and/or clusterip
  • From: Alex Samad - Yieldbroker <Alex.Samad@xxxxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• help with cluster and/or clusterip
  • From: Alex Samad - Yieldbroker <Alex.Samad@xxxxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: UDP fragments , legitimate ?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Formal submission of Xtables2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: UDP fragments , legitimate ?
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: Formal submission of Xtables2
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH v3] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Kevin Cernekee <cernekee@xxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v3] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] fix conntrack reassembly expire code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• How can I force all outgoing -p tcp --dport 80 from lan side to router lanside on port 80 and go out on router wanside?
  • From: Anthony Frazee <afrazee@xxxxxxxxx>
• Re: UDP fragments , legitimate ?
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: UDP fragments , legitimate ?
  • From: Brad Silva <bsilva@xxxxxxxxx>
• UDP fragments , legitimate ?
  • From: 叶雨飞 <sunyucong@xxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Formal submission of Xtables2
  • From: Andreas Herz <andi@xxxxxxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Anatoly Muliarski <x86ever@xxxxxxxxx>
• Packet performance impact of using netfilter
  • From: Felix <credzba@xxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Andrew Collins <bsderandrew@xxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Anatoly Muliarski <x86ever@xxxxxxxxx>
• Re: conn association query
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Formal submission of Xtables2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Packet performance impact of using netfilter
  • From: Felix <credzba@xxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Formal submission of Xtables2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Formal submission of Xtables2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: About cluster deployments.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Formal submission of Xtables2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Formal submission of Xtables2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• conn association query
  • From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Andrew Collins <bsderandrew@xxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Anatoly Muliarski <x86ever@xxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Re: [PATCH 2/2] net: remove obsolete simple_strto<foo>
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Question about NFTABLES
  • From: Jorge Bastos <mysql.jorge@xxxxxxxxxx>
• RE: About cluster deployments.
  • From: Arnoud Tijssen <ATijssen@xxxxxx>
• Re: About cluster deployments.
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• [PATCH 2/2] net: remove obsolete simple_strto<foo>
  • From: Abhijit Pawar <abhi.c.pawar@xxxxxxxxx>
• Re: [PATCH RESEND RESEND] net: remove obsolete simple_strto<foo>
  • From: Abhijit Pawar <abhi.c.pawar@xxxxxxxxx>
• Re: [PATCH RESEND RESEND] net: remove obsolete simple_strto<foo>
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH RESEND RESEND] net: remove obsolete simple_strto<foo>
  • From: Abhijit Pawar <abhi.c.pawar@xxxxxxxxx>
• Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>
  • From: Abhijit Pawar <abhi.c.pawar@xxxxxxxxx>
• Re: [PATCH] fix conntrack reassembly expire code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Anatoly Muliarski <x86ever@xxxxxxxxx>
• Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>
  • From: Neil Horman <nhorman@xxxxxxxxxxxxx>
• Re: Limits higher than 10000/sec
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH RESEND] net: remove obsolete simple_strto<foo>
  • From: Abhijit Pawar <abhi.c.pawar@xxxxxxxxx>
• RE: About cluster deployments.
  • From: Arnoud Tijssen <ATijssen@xxxxxx>
• Re: Limits higher than 10000/sec
  • From: 叶雨飞 <sunyucong@xxxxxxxxx>
• Re: Limits higher than 10000/sec
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: help with --helper sane
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• help with --helper sane
  • From: Mike Wright <mike.wright@xxxxxxxxxxxxxx>
• Limits higher than 10000/sec
  • From: Darius Jahandarie <djahandarie@xxxxxxxxx>
• Re: iptable rule to change incoming interface
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• About cluster deployments.
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• About cluster deployments.
  • From: Humberto Jucá <betolj@xxxxxxxxx>
• Re: [PATCH 2/4] net: remove obsolete simple_strto<foo>
  • From: Neil Horman <nhorman@xxxxxxxxxxxxx>
• [PATCH 2/4] net: remove obsolete simple_strto<foo>
  • From: Abhijit Pawar <abhi.c.pawar@xxxxxxxxx>
• [PATCH] fix conntrack reassembly expire code
  • From: haibbo@xxxxxxxxx
• Re: iptable rule to change incoming interface
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• iptable rule to change incoming interface
  • From: Rishi Kapoor <rkapoor.rishi@xxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Anatoly Muliarski <x86ever@xxxxxxxxx>
• problems with iptables ptpd
  • From: forums@xxxxxxxxxxxxxx
• Re: Mark traffic on one machine, match on another machine?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Re: How to force all packet go through tun0 ?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• How to force all packet go through tun0 ?
  • From: "J. Bakshi" <joydeep@xxxxxxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• question about iptables
  • From: 胡磊 <hu-lei@xxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Anatoly Muliarski <x86ever@xxxxxxxxx>
• Re: Deleting set/SET rules by exact match fails
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• promblem routing pptpd
  • From: forums@xxxxxxxxxxxxxx
• Re: Mark traffic on one machine, match on another machine?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Deleting set/SET rules by exact match fails
  • From: Born Without <blackhole@xxxxxxxxxxx>
• -m recent recently broken?
  • From: tlhackque <tlhackque@xxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Giles Coochey <giles@xxxxxxxxxxx>
• Re: Mark traffic on one machine, match on another machine?
  • From: Steven Kath <steven@xxxxxxxxxx>
• Mark traffic on one machine, match on another machine?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Re: ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• [ANNOUNCE] ipset 6.16.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Packet forwarding question
  • From: Safuat Hamdy <safuat.hamdy@xxxxxxxxxx>
• Packet forwarding question
  • From: Safuat Hamdy <safuat.hamdy@xxxxxxxxxx>
• Re: ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset 6.16 kernel panic on bitmap:hash,ip
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Redirect to ifb0 outgoing traffic that entered from WAN interface?
  • From: Jack Bates <uo4zau@xxxxxxxxxxxxxxxx>
• Blocking incoming non-localhost traffic, *except* for certain gid
  • From: pawa@xxxxxxxxxxx
• Explanation about RATEEST interval and ewmalog
  • From: Emilio Lazo Zaia <emiliolazozaia@xxxxxxxxx>
• Re: Best kernel version
  • From: Torsten Luettgert <ml-netfilter@xxxxxxx>
• netfilter bugzilla is back working
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.15 released
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.15 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.15 released
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.15 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [ANNOUNCE] ipset 6.15 released
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.15 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.15 released
  • From: Ricardo Klein <klein.rfk@xxxxxxxxx>
• SNATing w/o SNAT rule
  • From: "Alexander Y. Tiurin" <alexanderyt@xxxxxxxxx>
• [ANNOUNCE] ipset 6.15 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Iptables rules with module string give strange counter results
  • From: Vladimir Budnev <vladimir.budnev@xxxxxxxxx>
• Re: xt_hashlimit: max count of 8192 reached
  • From: 叶雨飞 <sunyucong@xxxxxxxxx>
• xt_hashlimit: max count of 8192 reached
  • From: Marco Padovan <evcz@xxxxxxx>
• Re: Conntrack-tool error - undefined symbol: nfct_filter_dump_create
  • From: Karthikeyan Vinayagam <vkarthik@xxxxxxxxx>
• ipt_SYNPROXY
  • From: Marco Padovan <evcz@xxxxxxx>
• Re: [OT] Are there Italians here?
  • From: Marco Padovan <evcz@xxxxxxx>
• Re: Best kernel version
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Best kernel version
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [OT] Are there Italians here?
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: Rate-limiting to halt brute-force attack
  • From: /dev/rob0 <rob0@xxxxxxxxx>
• Re: Rate-limiting to halt brute-force attack
  • From: Emilio Lazo Zaia <emiliolazozaia@xxxxxxxxx>
• Re: Rate-limiting to halt brute-force attack
  • From: Dimitri Yioulos <dyioulos@xxxxxxxxxxxxx>