Linux Netfilter / IP Tables

Date Index

[Prev Page][Next Page]

Help with multiple interfaces and aliases, Flávio Costa
How do you correctly interpret the FORWARD chain interface options?, paddy joesoap
- Re: How do you correctly interpret the FORWARD chain interface options?, Richard Horton
  - Re: How do you correctly interpret the FORWARD chain interface options?, paddy joesoap
    - Re: How do you correctly interpret the FORWARD chain interface options?, paddy joesoap
      - Re: How do you correctly interpret the FORWARD chain interface options?, Покотиленко Костик
        
        Re: How do you correctly interpret the FORWARD chain interface options?, paddy joesoap
    - Re: How do you correctly interpret the FORWARD chain interface options?, Покотиленко Костик
      - Re: How do you correctly interpret the FORWARD chain interface options? From: Покотиленко Костик <casper@xxxxxxxxxxxx> X-Virus-Status: Clean Sender: netfilter-owner@xxxxxxxxxxxxxxx X-Mailing-List: netfilter@xxxxxxxxxxxxxxx, Mart Frauenlob
ebtables snat-arp option not working?, Khalid Mehmood Khan
IFB usage Documentation, sss123next
Who can give me any existing iptables rules for reference?, supercodeing35271 supercodeing35271
- Re: Who can give me any existing iptables rules for reference?, Richard Horton
- Re: Who can give me any existing iptables rules for reference?, /dev/rob0
  - Re: Who can give me any existing iptables rules for reference?, supercodeing35271 supercodeing35271
- Re: Who can give me any existing iptables rules for reference?, Mart Frauenlob
Checking /active/ libnetfilter_queue, Udo Schneider
IP Forwarding works on local port but not a remote port, Dan Daugherty
- Re: IP Forwarding works on local port but not a remote port, Покотиленко Костик
  - Re: IP Forwarding works on local port but not a remote port, Dan Daugherty
  - Message not available
    - Re: IP Forwarding works on local port but not a remote port, Покотиленко Костик
      - Re: IP Forwarding works on local port but not a remote port, Dan Daugherty
        
        Re: IP Forwarding works on local port but not a remote port, Christoph Paasch
        
        Re: IP Forwarding works on local port but not a remote port, Покотиленко Костик
        
        Re: IP Forwarding works on local port but not a remote port, Dan Daugherty
        
        Re: IP Forwarding works on local port but not a remote port, Dan Daugherty
        
        Re: IP Forwarding works on local port but not a remote port, Dan Daugherty
        
        Re: IP Forwarding works on local port but not a remote port, Christoph Paasch
        
        Re: IP Forwarding works on local port but not a remote port, Покотиленко Костик
        
        Re: IP Forwarding works on local port but not a remote port, Christoph Paasch
        
        Re: IP Forwarding works on local port but not a remote port, Покотиленко Костик
Does the INVALID state filter block port (nmap) scans?, paddy joesoap
- Re: Does the INVALID state filter block port (nmap) scans?, Weedy
  - Re: Does the INVALID state filter block port (nmap) scans?, paddy joesoap
Reach 150k financial planners - we have this list and more, Nichols depressor
Does stateful filtering automatically prevent nmap and bogon spoofing or are stateless rules also required?, paddy joesoap
iptables list command with very verbose option generates `ERROR' [64], forbiddentransition
If you're looking for a decent marketing list we probably have it, logarithm Waters
[patch 1/1] net/ipv4/netfilter/nf_nat_snmp_basic.c: correct the size argument to kzalloc, akpm
- Re: [patch 1/1] net/ipv4/netfilter/nf_nat_snmp_basic.c: correct the size argument to kzalloc, Patrick McHardy
  - Re: [patch 1/1] net/ipv4/netfilter/nf_nat_snmp_basic.c: correct the size argument to kzalloc, Andrew Morton
    - Re: [patch 1/1] net/ipv4/netfilter/nf_nat_snmp_basic.c: correct the size argument to kzalloc, Patrick McHardy
IPV6 and Pre/post routing, Gary Smith
- Re: IPV6 and Pre/post routing, Pascal Hambourg
  - RE: IPV6 and Pre/post routing, Gary Smith
    - RE: IPV6 and Pre/post routing, Amos Jeffries
      - RE: IPV6 and Pre/post routing, Gary Smith
    - Re: IPV6 and Pre/post routing, Joerg Dorchain
List issue., Juan Antonio
policy based routing - leaking packets, Serg Buslovsky
How to debug RST filter ?, Andre Schild
- Re: How to debug RST filter ?, Remzi AKYÜZ
  - RE: Re: How to debug RST filter ?, a . schild
    - Re: How to debug RST filter ?, Mart Frauenlob
    - Re: How to debug RST filter ?, Pascal Hambourg
      - RE: Re: How to debug RST filter ?, Andre Schild
        
        RE: RE: Re: How to debug RST filter ?, a . schild
- Regarding Iptables Redirect Target rule, Vikram Ragukumar
  - Re: Regarding Iptables Redirect Target rule, Pascal Hambourg
[REPORT] may be wrong place #endif in include/linux/netfilter_ipv4.h, Helight.Xu
- Re: [REPORT] may be wrong place #endif in include/linux/netfilter_ipv4.h, Jan Engelhardt
  - Re: [REPORT] may be wrong place #endif in include/linux/netfilter_ipv4.h, Patrick McHardy
multiple public ips to multiple internal ips, Patrick Chemla
- Re: multiple public ips to multiple internal ips, Patrick Chemla
  - Re: multiple public ips to multiple internal ips, Sven-Haegar Koch
NF_STOLEN and re-insert in to IP stack, Susant Sahani
nf_reinject crashes after NF_STOLEN, Susant Sahani
NF_STOLEN and reinsert in to IP stack, Susant Sahani
- <Possible follow-ups>
- NF_STOLEN and reinsert in to IP stack, Susant Sahani
multiple external IP's - virtual NIC - DNAT problems, koen.news
- Re: multiple external IP's - virtual NIC - DNAT problems, Mike Wright
  - Re: multiple external IP's - virtual NIC - DNAT problems, koen . news
    - Re: multiple external IP's - virtual NIC - DNAT problems, Mike Wright
    - Re: multiple external IP's - virtual NIC - DNAT problems, Sven-Haegar Koch
      - Re: multiple external IP's - virtual NIC - DNAT problems, koen.news
fwmark & iptables, Matt Hakim
- Re: fwmark & iptables, Pascal Hambourg
  - Re: fwmark & iptables, Matt Hakim
    - Re: fwmark & iptables, Pascal Hambourg
      - Re: fwmark & iptables, Matt Hakim
        
        Re: fwmark & iptables, Matt Hakim
        
        Re: fwmark & iptables, Pascal Hambourg
- Re: fwmark & iptables, Oskar Berggren
NOTRACK not working, Dennis J.
- Re: NOTRACK not working, Jozsef Kadlecsik
- RE: NOTRACK not working, Steven Kath
- Re: NOTRACK not working, Покотиленко Костик
  - Re: NOTRACK not working, Dennis J.
    - Re: NOTRACK not working, Покотиленко Костик
      - Re: NOTRACK not working, Dennis J.
    - Re: NOTRACK not working, Покотиленко Костик
How to create rule from log file information ?, J. Bakshi
- Re: How to create rule from log file information ?, Alessandro Vesely
  - Re: How to create rule from log file information ?, Mart Frauenlob
    - Re: How to create rule from log file information ?, J. Bakshi
Can iptables control what internal LAN clients can configure the Firewall over UPnP?, paddy joesoap
- Re: Can iptables control what internal LAN clients can configure the Firewall over UPnP?, Richard Horton
  - Re: Can iptables control what internal LAN clients can configure the Firewall over UPnP?, paddy joesoap
Can iptables filter WiFi Clients?, paddy joesoap
How to detect nmap scan ?, J. Bakshi
[ANNOUNCE] ipset-4.2 released, Jozsef Kadlecsik
iptables 1.4.1.1 crashes, Konrad Toczylowski
iptables MARK + ip rule fwmark on locally generated packets, Fredrik Ax
- Re: iptables MARK + ip rule fwmark on locally generated packets, Patrick McHardy
  - Re: iptables MARK + ip rule fwmark on locally generated packets, Fredrik Ax
    - Re: iptables MARK + ip rule fwmark on locally generated packets, Patrick McHardy
      - Re: iptables MARK + ip rule fwmark on locally generated packets, Fredrik Ax
        
        SOLVED: iptables MARK + ip rule fwmark on locally generated packets, Fredrik Ax
        
        Re: iptables MARK + ip rule fwmark on locally generated packets, Patrick McHardy
      - Re: iptables MARK + ip rule fwmark on locally generated packets, Mart Frauenlob
- Re: iptables MARK + ip rule fwmark on locally generated packets, Fredrik Ax
limit module not working with drop policy, J. Bakshi
- Re: limit module not working with drop policy, Remzi AKYÜZ
- Re: limit module not working with drop policy, Mart Frauenlob
  - Re: limit module not working with drop policy, J. Bakshi
    - Re: limit module not working with drop policy, Mart Frauenlob
      - Re: limit module not working with drop policy, J. Bakshi
- <Possible follow-ups>
- Re: limit module not working with drop policy, J. Bakshi
BUG: iptables-save: getlong_opt missing one argument, Lucas Fernando Vasconcelos de Arruda Amorim
Selective disabling of martian filtering?, Dennis J.
SNAT and FIN/ACK packets after a long time, Carsten Aulbert
- Re: SNAT and FIN/ACK packets after a long time, Mart Frauenlob
  - Re: SNAT and FIN/ACK packets after a long time, Carsten Aulbert
Netfilter packet flow and VLANs, Покотиленко Костик
--uid-owner question, Serg Buslovsky
filtering based on MAC address prefix, Daniel Drake
- Re: filtering based on MAC address prefix, Eray Aslan
  - Re: filtering based on MAC address prefix, Pascal Hambourg
  - Re: filtering based on MAC address prefix, Daniel Drake
    - Re: filtering based on MAC address prefix, Eray Aslan
      - Re: filtering based on MAC address prefix, Maximilian Wilhelm
SNAT - matching original and natted IP addresses, Shirley Ong
- Re: SNAT - matching original and natted IP addresses, Leonardo Rodrigues
BUG? iptables --datestop inconsistent behaviour, Karel Rericha
Double NAT port forward, Henno Täht
- Re: Double NAT port forward, Pascal Hambourg
  - Re: Double NAT port forward, Henno Täht
How do I test a libnetfilter_queue program?, Alessandro Vesely
find_best_ips_proto ??, ratheesh k
hashlimit rule problem with port 80, J. Bakshi
Iptables without ipt_state using xt_state, FiloSottile
- Re: Iptables without ipt_state using xt_state, Mart Frauenlob
  - Re: Iptables without ipt_state using xt_state, FiloSottile
    - Re: Iptables without ipt_state using xt_state, Pascal Hambourg
    - Re: Iptables without ipt_state using xt_state, Patrick McHardy
- Re: Iptables without ipt_state using xt_state, /dev/rob0
- <Possible follow-ups>
- Re: Iptables without ipt_state using xt_state, FiloSottile
  - Re: Iptables without ipt_state using xt_state, Mart Frauenlob
state module is deprecated?, Andrew Fedorov
- Re: state module is deprecated?, Mart Frauenlob
NF_QUEUE and NF_ACCEPT, ratheesh k
How to protect apache benchmarking attack ?, J. Bakshi
- Re: How to protect apache benchmarking attack ?, Marek Kierdelewicz
  - Re: How to protect apache benchmarking attack ?, J. Bakshi
    - Re: How to protect apache benchmarking attack ?, J. Bakshi
      - Re: [ Siccess ]How to protect apache benchmarking attack ?, J. Bakshi
REJECT as a default policy, Lars Nooden
- RE: REJECT as a default policy, Gary Smith
  - Re: REJECT as a default policy, Richard Horton
    - RE: REJECT as a default policy, Gary Smith
    - Re: REJECT as a default policy, Lars Nooden
      - Message not available
        
        Re: REJECT as a default policy, Lars Nooden
        
        Re: REJECT as a default policy, Mart Frauenlob
- Re: REJECT as a default policy, Mart Frauenlob
nf_conntrack_sip and sip_direct_signalling option, François Legal
tunneling ftp, Thomas
sequence numbers in conntrack, Nemeth Denes
- Re: sequence numbers in conntrack, vishesh
  - Re: sequence numbers in conntrack, Nemeth Denes
    - Re: sequence numbers in conntrack, Nemeth Denes
What is the "nice" priority of the code runing iptables?, Покотиленко Костик
passive mode ftp high ports driving me nuts, MargoAndTodd
- Re: passive mode ftp high ports driving me nuts, Mart Frauenlob
  - Re: passive mode ftp high ports driving me nuts, MargoAndTodd
    - Re: passive mode ftp high ports driving me nuts, Mart Frauenlob
  - Re: passive mode ftp high ports driving me nuts, MargoAndTodd
    - Re: passive mode ftp high ports driving me nuts, Mart Frauenlob
      - Re: passive mode ftp high ports driving me nuts, Mart Frauenlob
        
        Re: passive mode ftp high ports driving me nuts, MargoAndTodd
[PATCH] net/netfilter/xt_osf.c: Change %pi4 to %pI4, Joe Perches
- Re: [PATCH] net/netfilter/xt_osf.c: Change %pi4 to %pI4, Patrick McHardy
Query regarding libnetfilter_queue usage, Vikram Ragukumar
Is it possible to queue same packet into two IMQ interfaces sequentially?, Покотиленко Костик
- Re: Is it possible to queue same packet into two IMQ interfaces sequentially?, Покотиленко Костик
  - Re: Is it possible to queue same packet into two IMQ interfaces sequentially?, Покотиленко Костик
How do I read my state from this log?, MargoAndTodd
- Re: How do I read my state from this log?, Pascal Hambourg
what should I use for "unassigned" ports?, Anthony Ewell
- Re: what should I use for "unassigned" ports?, Richard Horton
  - Re: what should I use for "unassigned" ports?, MargoAndTodd
- Re: what should I use for "unassigned" ports?, Pascal Hambourg
- Re: what should I use for "unassigned" ports?, Richard Horton
conntrack -F not flushing the table, Elison Niven
- Re: conntrack -F not flushing the table, Pablo Neira Ayuso
  - Re: conntrack -F not flushing the table, Elison Niven
iptables for bandwidth tracking, Michael Nguyen
- Re: iptables for bandwidth tracking, John Haxby
- Re: iptables for bandwidth tracking, Mart Frauenlob
[PATCH 0/8] Remove most uses of NIPQUAD and NIPQUAD_FMT, Joe Perches
- [PATCH 6/8] net/netfilter/ipvs/ip_vs_ftp.c: Use standardized format in sprintf, Joe Perches
  - Re: [PATCH 6/8] net/netfilter/ipvs/ip_vs_ftp.c: Use standardized format in sprintf, Simon Horman
    - Re: [PATCH 6/8] net/netfilter/ipvs/ip_vs_ftp.c: Use standardized format in sprintf, Patrick McHardy
- [PATCH 5/8] net/ipv4/netfilter/nf_nat_ftp.c: Convert NIPQUAD to %pI4, Joe Perches
  - [PATCH v2 5/8] net/ipv4/netfilter/nf_nat_ftp.c: Remove (*mangle[]) array and functions, use %pI4, Joe Perches
    - Re: [PATCH v2 5/8] net/ipv4/netfilter/nf_nat_ftp.c: Remove (*mangle[]) array and functions, use %pI4, Patrick McHardy
How to block nessus ?, J. Bakshi
- Message not available
  - Re: How to block nessus ?, J. Bakshi
Squid Redirection, Aaron Clausen
- Re: Squid Redirection, Kenneth Sande
  - Re: Squid Redirection, Aaron Clausen
    - Re: Squid Redirection, Kenneth Sande
      - Re: Squid Redirection, Mart Frauenlob
        
        Re: Squid Redirection, Mart Frauenlob
- Re: Squid Redirection, Mart Frauenlob
  - Re: Squid Redirection, John Haxby
nf_conntrack_pptp with multiple clients, ml ml
- Re: nf_conntrack_pptp with multiple clients, Pascal Hambourg
[PATCH 5/5] net/ipv4 : Correct the size argument to kzalloc, Julia Lawall
- Re: [PATCH 5/5] net/ipv4 : Correct the size argument to kzalloc, Patrick McHardy
Why "No buffer space available"?, Medialy
- Re: Why "No buffer space available"?, Pablo Neira Ayuso
  - Message not available
    - Re: Why "No buffer space available"?, Pablo Neira Ayuso
[ANNOUNCE] conntrack-tools 0.9.14 released, Pablo Neira Ayuso
payload length, basteon
[ANNOUNCE] libnetfilter_conntrack 0.0.101 release, Pablo Neira Ayuso
net POSTROUTING with NFQUEUE, Demetrios J. Tsillas
ebtables broute DROP problem in production environment, Felipe W Damasio
- Re: ebtables broute DROP problem in production environment, Pascal Hambourg
- Re: ebtables broute DROP problem in production environment, Felipe W Damasio
  - Re: ebtables broute DROP problem in production environment, Felipe W Damasio
    - Re: ebtables broute DROP problem in production environment, Felipe W Damasio
Mapping external to internal IP addresses, Nick Peirson
- Re: Mapping external to internal IP addresses, Mart Frauenlob
  - Re: Mapping external to internal IP addresses, Pascal Hambourg
    - Re: Mapping external to internal IP addresses, Mart Frauenlob
table full, dropping packets when forwarding, Elison Niven
IPTABLES and NATTING, Ajith Adapa
- Message not available
  - Re: IPTABLES and NATTING, Ajith Adapa
    - Re: IPTABLES and NATTING, Pascal Hambourg
iptable - string matching - from to offset values, Suganthi K
Re: u32 question, Don Cohen
- <Possible follow-ups>
- u32 question, Don Cohen
  - u32 question, Don Cohen
    - Re: u32 question, Michal Soltys
      - Re: u32 question, Don Cohen
        
        Re: u32 question, Michal Soltys
IPv6 forwarding to TAP-interface with ip6tables fails, Mike Kazantsev
- Re: IPv6 forwarding to TAP-interface with ip6tables fails, Pascal Hambourg
  - Re: IPv6 forwarding to TAP-interface fails, Mike Kazantsev
    - [SOLVED] Re: IPv6 forwarding to TAP-interface fails, Mike Kazantsev
      - Re: [SOLVED] Re: IPv6 forwarding to TAP-interface fails, Pascal Hambourg
Returning nat packets vanishing after mangle:PREROUTING and conntrack processing, Scott Shambarger
- Re: Returning nat packets vanishing after mangle:PREROUTING and conntrack processing, Pascal Hambourg
  - Re: Returning nat packets vanishing after mangle:PREROUTING and conntrack processing, Scott Shambarger
    - Re: Returning nat packets vanishing after mangle:PREROUTING and conntrack processing, Pascal Hambourg
      - Re: Returning nat packets vanishing after mangle:PREROUTING and conntrack processing, Scott Shambarger
What's the default NAT type by using MASQUERADE target., Sharevon
SIP vs NAT, the configuration, rebeca . martinez-garcia
- Re: SIP vs NAT, the configuration, Lorenzo Allegrucci
- <Possible follow-ups>
- Re: SIP vs NAT, the configuration, Lorenzo Allegrucci
  - Message not available
    - Re: SIP vs NAT, the configuration, Lorenzo Allegrucci
connection tracking module, ratheesh k
Does someone have statistics about/experience with tc/qdisk on a few hundred ppp interfaces?, Richard Hartmann
SNAT and QUEUE target problem for IPv4 in IPv6 encapsulation, Tanguy Ropitault
multi homed linux router configuration, J. Bakshi
nf_conntrack_sip and nf_nat_sip not working, rebeca . martinez-garcia
- nf_conntrack_sip and nf_nat_sip can do this??, rebeca . martinez-garcia
  - Re: nf_conntrack_sip and nf_nat_sip can do this??, Patrick McHardy
    - Re: nf_conntrack_sip and nf_nat_sip can do this??, rebeca . martinez-garcia
      - Re: nf_conntrack_sip and nf_nat_sip can do this??, Patrick McHardy
        
        Re: nf_conntrack_sip and nf_nat_sip can do this??, rebeca . martinez-garcia
        
        Re: nf_conntrack_sip and nf_nat_sip can do this??, Patrick McHardy
        
        Message not available
        
        Re: nf_conntrack_sip and nf_nat_sip can do this??, Patrick McHardy
        
        Message not available
        
        Re: nf_conntrack_sip and nf_nat_sip can do this??, Patrick McHardy
ip_forwarding in a more restricted way, J. Bakshi
- Re: ip_forwarding in a more restricted way, J. Bakshi
  - Re: ip_forwarding in a more restricted way, J. Bakshi
Re: KVM related crash, Andrew Morton
- Re: KVM related crash, Avi Kivity
conntrack_sip messages showing up in 2.6.32, Joerg Dorchain
- Re: conntrack_sip messages showing up in 2.6.32, Patrick McHardy
  - Re: conntrack_sip messages showing up in 2.6.32, Joerg Dorchain
SIP Helper, François Legal
slip interfaces, Richard Horton
RTP traffic and nf_conntrack_sip, Lorenzo Allegrucci
configure iptables on lo for transparent proxy avoiding infinite loops, Gurvan Le Guernic
[ANNOUNCE]: Release of iptables-1.4.6, Patrick McHardy
Iptables 1.3.6 outgoing dns issue, M. Arts - Rootnet
- Re: Iptables 1.3.6 outgoing dns issue, Gáspár Lajos
Observations from a new user, System Support
- Selecting -m recent --seconds values, System Support
Netfilter injects network headers?, Aviad Lahav
Dynamic bidirectinal nat. Possible ?, Ilya Barsukov
can single linux box with dual gateway provide two separate connection ?, J. Bakshi
- Re: can single linux box with dual gateway provide two separate connection ?, J. Bakshi
  - Re: can single linux box with dual gateway provide two separate connection ?, J. Bakshi
Libnetfilter_queue: Queue sets up seemingly fine but it doesn't receive packets, Ahmed Tarek Megerisi
SNMP conntrack module a la netbios_ns, Tim Waugh
- Re: SNMP conntrack module a la netbios_ns, Patrick McHardy
  - Re: SNMP conntrack module a la netbios_ns, Patrick McHardy
SNAT on local interfaces?, Dave Malhotra
NAT issue, help, rebeca . martinez-garcia
nat problem: What's so special with traffic from audibank.de?, Lars Täuber
- Re: nat problem: What's so special with traffic from audibank.de?, Mattias Rönnblom
  - Re: nat problem: What's so special with traffic from audibank.de?, Lars Täuber
    - Re: nat problem: What's so special with traffic from audibank.de?, Patrick McHardy
      - Re: nat problem: What's so special with traffic from audibank.de?, Lars Täuber
        
        Re: nat problem: What's so special with traffic from audibank.de?, Lars Täuber
match SIP & RTP packets, Lorenzo Allegrucci
- Re: match SIP & RTP packets, Patrick McHardy
  - Re: match SIP & RTP packets, Ming-Ching Tiew
  - Re: match SIP & RTP packets, Lorenzo Allegrucci
soft lockup in inet_csk_get_port, kapil dakhane
- Re: soft lockup in inet_csk_get_port, Eric Dumazet
- [PATCH] tcp: Fix a connect() race with timewait sockets, Eric Dumazet
  - Re: [PATCH] tcp: Fix a connect() race with timewait sockets, David Miller
    - Re: [PATCH] tcp: Fix a connect() race with timewait sockets, Eric Dumazet
      - Re: [PATCH] tcp: Fix a connect() race with timewait sockets, Eric Dumazet
        
        Re: [PATCH] tcp: Fix a connect() race with timewait sockets, Evgeniy Polyakov
        
        Re: [PATCH] tcp: Fix a connect() race with timewait sockets, kapil dakhane
        
        Re: [PATCH] tcp: Fix a connect() race with timewait sockets, kapil dakhane
        
        [PATCH] tcp: fix a timewait refcnt race, Eric Dumazet
        
        Re: [PATCH] tcp: fix a timewait refcnt race, David Miller
        
        Re: [PATCH] tcp: fix a timewait refcnt race, kapil dakhane
        
        Re: [PATCH] tcp: fix a timewait refcnt race, Eric Dumazet
        
        Re: [PATCH] tcp: fix a timewait refcnt race, David Miller
        
        [PATCH net-next-2.6] tcp: connect() race with timewait reuse, Eric Dumazet
        
        Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse, Evgeniy Polyakov
        
        Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse, Eric Dumazet
        
        Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse, Eric Dumazet
        
        Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse, Evgeniy Polyakov
        
        Re: [PATCH net-next-2.6] tcp: connect() race with timewait reuse, David Miller
    - Re: [PATCH] tcp: Fix a connect() race with timewait sockets, Ashwani Wason
      - Re: [PATCH] tcp: Fix a connect() race with timewait sockets, David Miller
  - [PATCH 0/2] tcp: Fix connect() races with timewait sockets, Eric Dumazet
  - [PATCH 1/2] tcp: Fix a connect() race with timewait sockets, Eric Dumazet
    - Re: [PATCH 1/2] tcp: Fix a connect() race with timewait sockets, Evgeniy Polyakov
      - [PATCH] tcp: documents timewait refcnt tricks, Eric Dumazet
        
        Re: [PATCH] tcp: documents timewait refcnt tricks, Randy Dunlap
        
        Re: [PATCH] tcp: documents timewait refcnt tricks, David Miller
    - Re: [PATCH 1/2] tcp: Fix a connect() race with timewait sockets, David Miller
  - [PATCH 2/2] tcp: Fix a connect() race with timewait sockets, Eric Dumazet
    - Re: [PATCH 2/2] tcp: Fix a connect() race with timewait sockets, David Miller
pinging and routing tables, sinkyh
- Re: pinging and routing tables, Mart Frauenlob
FTP port mode, client and server behind iptables, Gary Smith
- Re: FTP port mode, client and server behind iptables, Mart Frauenlob
  - Re: FTP port mode, client and server behind iptables, Mart Frauenlob
  - RE: FTP port mode, client and server behind iptables, Gary Smith
help with ip-conntrack-sip, rebeca . martinez-garcia
IPTABLES do not work without ROUTE exist ?! , kapetr
- Re: IPTABLES do not work without ROUTE exist ?!, Pascal Hambourg
Help with BR_POSTROUTING hack, Alessio Cimmino
[patch] iptables.8 - add UNTRACKED state, Mart Frauenlob
conntrack/state with QUEUE target, Udo Schneider
- Re: conntrack/state with QUEUE target, Udo Schneider
- <Possible follow-ups>
- Re: conntrack/state with QUEUE target, Mart Frauenlob
An ping issue on Linux kernel 2.6.25, jiazhida 00102231
- Re: An ping issue on Linux kernel 2.6.25, Saikiran Madugula
- Re: An ping issue on Linux kernel 2.6.25, Pascal Hambourg
LED trigger in iptables, Mekabe Ramein
- Re: LED trigger in iptables, Mekabe Ramein
  - Re: LED trigger in iptables, Patrick McHardy
    - Re: LED trigger in iptables, Mekabe Ramein
      - Re: LED trigger in iptables, Mekabe Ramein
        
        Re: LED trigger in iptables, Patrick McHardy
        
        Re: LED trigger in iptables, Mekabe Ramein
Firewallrules for a gentoo box with 4 nics, homer_2008
bonding-related problem with DNAT/SNAT, Craig Craig
- Re: bonding-related problem with DNAT/SNAT, Richard Horton
- <Possible follow-ups>
- Re: Re: bonding-related problem with DNAT/SNAT, Craig Craig
arptables v0.0.8: no hln defined, Claus Wimmer
- Re: arptables v0.0.8: no hln defined, Patrick McHardy
Spontaneous reboot after change ip_pkt_list_tot - deb, M. Arts - Rootnet
- Re: Spontaneous reboot after change ip_pkt_list_tot - deb, Patrick McHardy
Xtables-addons 1.20 is out, Jan Engelhardt
- Re: Xtables-addons 1.20 is out, Mart Frauenlob
Fwd: Is there a tool can modified mac address?, IaMaPlAyEr
BUG: soft lockup detected on CPU#6!, Tim Fennelly
- Re: BUG: soft lockup detected on CPU#6!, Eric Leblond
Help deleting a rule, Cameron Smith
- Re: Help deleting a rule, Mart Frauenlob
- Re: Help deleting a rule, Paul Evans
connmark expire after X bytes, Karl Hiramoto
iptables/when loading a webpage, get subsequent firewall block(s)?, Justin Piszcz
- Re: iptables/when loading a webpage, get subsequent firewall block(s)?, Pascal Hambourg
  - Re: iptables/when loading a webpage, get subsequent firewall block(s)?, Justin Piszcz
    - Re: iptables/when loading a webpage, get subsequent firewall block(s)?, Pascal Hambourg
structure padding mismatches, Byoungyoung Lee
Raising the recent module lib_pkt_list_tot, M. Arts - Rootnet
[ANNOUNCE] ipset 4.1 released, Jozsef Kadlecsik
Ip Conntrack rare problem, Juan Antonio
Target in two chains simultaneously, Kristian Evensen
[ANNOUNCE] ipset 4.0 released, Jozsef Kadlecsik
- Re: [ANNOUNCE] ipset 4.0 released, Jan Engelhardt
- Re: [ANNOUNCE] ipset 4.0 released, Stephen Hemminger
  - Re: [ANNOUNCE] ipset 4.0 released, Jan Engelhardt
  - Re: [ANNOUNCE] ipset 4.0 released, Jozsef Kadlecsik
When writing rules for multiple sequenced firewalls, does the source IP of client need to be modified at each firewall, paddy joesoap
- Re: When writing rules for multiple sequenced firewalls, does the source IP of client need to be modified at each firewall, Oskar Berggren
  - Re: When writing rules for multiple sequenced firewalls, does the source IP of client need to be modified at each firewall, paddy joesoap
Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?, paddy joesoap
- Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?, Mart Frauenlob
  - Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?, Mart Frauenlob
- Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?, Oskar Berggren
  - Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?, paddy joesoap
    - Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?, Mart Frauenlob
      - Re: Forward Chain: is Inbound traffic on eth0 not also Outbound depending on your view?, paddy joesoap
TCPMSS - valid only in mangle table?, Mart Frauenlob
Round robin load balance to local port range, Kapetanakis Giannis
- Re: Round robin load balance to local port range, Patrick McHardy
  - Re: Round robin load balance to local port range, Kapetanakis Giannis
    - Re: Round robin load balance to local port range, Patrick McHardy
ip forwarding issue with dual gateway, J. Bakshi
- Re: ip forwarding issue with dual gateway, J. Bakshi
  - Re: ip forwarding issue with dual gateway, Marek Kierdelewicz
    - Re: ip forwarding issue with dual gateway, J. Bakshi
[HELP] forward ppp0 to eth1, Sandy Sumitro
- Re: [HELP] forward ppp0 to eth1, Gáspár Lajos
force a MAC to have one IP, Rakotomandimby Mihamina
- Re: force a MAC to have one IP, Karel Rericha
Automatic DNAT+SNAT fixup, Paul Evans
nftables status, Julien Vehent
- Re: nftables status, Patrick McHardy
ipt ROUTE, aidan mcgurn
- Re: ipt ROUTE, Mart Frauenlob
kernel panic when adding QUEUE to OUTGOING, François Delawarde
- Re: kernel panic when adding QUEUE to OUTGOING, Patrick McHardy
  - Re: kernel panic when adding QUEUE to OUTGOING, François Delawarde
    - Re: kernel panic when adding QUEUE to OUTGOING, Patrick McHardy
      - Re: kernel panic when adding QUEUE to OUTGOING, François Delawarde
        
        Re: kernel panic when adding QUEUE to OUTGOING, Patrick McHardy
        
        Re: kernel panic when adding QUEUE to OUTGOING, François Delawarde
        
        Re: kernel panic when adding QUEUE to OUTGOING, François Delawarde
        
        Re: kernel panic when adding QUEUE to OUTGOING, Patrick McHardy
        
        Re: kernel panic when adding QUEUE to OUTGOING, François Delawarde
        
        Re: kernel panic when adding QUEUE to OUTGOING, Patrick McHardy
        
        Re: kernel panic when adding QUEUE to OUTGOING, François Delawarde
        
        Re: kernel panic when adding QUEUE to OUTGOING, Javier Almillategui
- <Possible follow-ups>
- Re: kernel panic when adding QUEUE to OUTGOING, Slava Garaschenko
- Re: kernel panic when adding QUEUE to OUTGOING, Slava Garaschenko
Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?, Ralph de Boom
- Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?, Patrick McHardy
  - Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?, Ralph de Boom
    - Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?, Patrick McHardy
      - Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?, Ralph de Boom
        
        Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?, Richard Horton
        
        Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?, Ralph de Boom
        
        Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?, Ralph de Boom
        
        Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?, Richard Horton
HTTP Access Blocked After iptables Update, JR
- Re: HTTP Access Blocked After iptables Update, fakessh@xxxxxxxxxx
  - Re: HTTP Access Blocked After iptables Update, JR
  - Re: HTTP Access Blocked After iptables Update, JR
    - Re: HTTP Access Blocked After iptables Update, Saikiran Madugula
      - Re: HTTP Access Blocked After iptables Update, JR
      - Re: HTTP Access Blocked After iptables Update, JR
iptables ipt_ROUTE, aidan mcgurn
- Re: iptables ipt_ROUTE, Eray Aslan
Do I have this correct for FTP bandwidth usage?, Jeff Jensen
ebtables counters oddity, Jon Lewis
Beginner Question on restricting traffic within the same subnet., paddy joesoap
- Re: Beginner Question on restricting traffic within the same subnet., Pascal Hambourg
  - Re: Beginner Question on restricting traffic within the same subnet., paddy joesoap
    - Re: Beginner Question on restricting traffic within the same subnet., Pascal Hambourg
      - Re: Beginner Question on restricting traffic within the same subnet., paddy joesoap
        
        Re: Beginner Question on restricting traffic within the same subnet., Pascal Hambourg
        
        Re: Beginner Question on restricting traffic within the same subnet., paddy joesoap
Multiple nf_bind_pf to the same protocol, Mattias Rönnblom
- Re: Multiple nf_bind_pf to the same protocol, Patrick McHardy
  - Re: Multiple nf_bind_pf to the same protocol, Mattias Rönnblom
    - Re: Multiple nf_bind_pf to the same protocol, Patrick McHardy
SNAT with ipsec => return packets not de-natted, Jari Laurila
- Re: SNAT with ipsec => return packets not de-natted, Jari Laurila
  - Re: SNAT with ipsec => return packets not de-natted, Jari Laurila
    - Re: SNAT with ipsec => return packets not de-natted, Patrick McHardy
      - Re: SNAT with ipsec => return packets not de-natted, Jari Laurila
        
        Re: SNAT with ipsec => return packets not de-natted, Jari Laurila
Need POSTROUTING traversed twice or at least later, Ludovico Cavedon
- Re: Need POSTROUTING traversed twice or at least later, Ludovico Cavedon
Julian Anastasov netfilter and routing patches, François Delawarde
64bit MARK, François Delawarde
- Re: 64bit MARK, John A. Sullivan III
  - Re: 64bit MARK, Patrick McHardy
    - Re: 64bit MARK, John A. Sullivan III
- Re: 64bit MARK, Patrick McHardy
  - Re: 64bit MARK, François Delawarde
    - Re: 64bit MARK, Patrick McHardy
      - Re: 64bit MARK, François Delawarde
        
        Re: 64bit MARK, Patrick McHardy
        
        Re: 64bit MARK, François Delawarde
        
        Re: 64bit MARK, Patrick McHardy
        
        Re: 64bit MARK, François Delawarde
explanation of the syslog LEN and WINDOW entries, Jeff Jensen
- Message not available
  - Re: explanation of the syslog LEN and WINDOW entries, Jeff Jensen
    - Message not available
      - Re: explanation of the syslog LEN and WINDOW entries, Jeff Jensen
    - Re: explanation of the syslog LEN and WINDOW entries, John Haxby
      - Re: explanation of the syslog LEN and WINDOW entries, Jeff Jensen
correct net fitler rule, Ralph Blach
- Re: correct net fitler rule, Mart Frauenlob
  - Re: correct net fitler rule, Ralph Blach
    - Re: correct net fitler rule, Richard Horton
      - Re: correct net fitler rule, Ralph Blach
        
        Re: correct net fitler rule, Richard Horton
Iptables and URLs, sgmayo
Stupid on state match, Richard Horton
one server, two isp, Alfredo Sánchez
- RE: one server, two isp, Gary Smith
IPtables and SNAT, codingfreak
- Re: IPtables and SNAT, Richard Horton
  - Message not available
    - Fwd: IPtables and SNAT, Ajith Adapa
Disabling conntrack for local net, Gary Smith
- Re: Disabling conntrack for local net, Mart Frauenlob
  - Re: Disabling conntrack for local net, Mart Frauenlob
    - RE: Disabling conntrack for local net, Gary Smith
      - RE: Disabling conntrack for local net, Gary Smith
        
        Re: Disabling conntrack for local net, Mart Frauenlob
        
        RE: Disabling conntrack for local net, Gary Smith
ssh connections stalling, Carl Michal
- Re: ssh connections stalling, Karl Hiramoto
  - Re: ssh connections stalling, Carl Michal
    - RE: ssh connections stalling, Rob Sterenborg
    - Re: ssh connections stalling, Karl Hiramoto
  - Re: ssh connections stalling, Carl Michal
- Re: ssh connections stalling, Mart Frauenlob
  - Re: ssh connections stalling, Carl Michal
    - Re: ssh connections stalling, Jozsef Kadlecsik
      - Re: ssh connections stalling, Carl Michal
      - Re: ssh connections stalling, Carl Michal
        
        Re: ssh connections stalling, Jozsef Kadlecsik
        
        Re: ssh connections stalling, Carl Michal
        
        RE: ssh connections stalling, Steven Kath
        
        Re: ssh connections stalling, Carl Michal
        
        Re: ssh connections stalling, Payam Chychi
        
        Re: ssh connections stalling, Jozsef Kadlecsik
        
        Re: ssh connections stalling, Carl Michal
        
        Re: ssh connections stalling, Carl Michal
[PATCH] netfilter: remove CONFIG_NF_CT_ACCT, Jiri Kosina
- Re: [PATCH] netfilter: remove CONFIG_NF_CT_ACCT, Jiri Kosina
  - Re: [PATCH] netfilter: remove CONFIG_NF_CT_ACCT, David Miller
  - Re: [PATCH] netfilter: remove CONFIG_NF_CT_ACCT, Krzysztof Oledzki
Timeout for dynamic Nat, Tanguy Ropitault
simple question about state vs conntrack modules, Leonardo Rodrigues
- Re: simple question about state vs conntrack modules, Jozsef Kadlecsik
  - Re: simple question about state vs conntrack modules, Leonardo Rodrigues
filtering frames based on destiantion MAC address using ebtables, veerasena reddy
Query: TCP Flag Semantics post 3-way-handshake?, William Fitzgerald
- Re: Query: TCP Flag Semantics post 3-way-handshake?, William Fitzgerald
  - Re: Query: TCP Flag Semantics post 3-way-handshake?, Mart Frauenlob
    - Re: Query: TCP Flag Semantics post 3-way-handshake?, William Fitzgerald
      - Re: Query: TCP Flag Semantics post 3-way-handshake?, Mart Frauenlob
        
        Re: Query: TCP Flag Semantics post 3-way-handshake?, William Fitzgerald
Query: Stateful parameters Explicitly and Implicitly defined, which is it?, William Fitzgerald
- Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?, John Lister
- Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?, Mart Frauenlob
  - Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?, William Fitzgerald
    - Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?, Mart Frauenlob
      - Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?, William Fitzgerald
        
        Re: Query: Stateful parameters Explicitly and Implicitly defined, which is it?, Mart Frauenlob
access to terminal server in DMZ with 2 isp, alfredo
- RE: access to terminal server in DMZ with 2 isp, Gary Smith
- Re: access to terminal server in DMZ with 2 isp, Vlado Drz(ík
ebtables filtering based on destination MAC match doesn't work with FORWARD chain, veerasena reddy
intrapositioned and extrapositioned negation, Mart Frauenlob
- Re: intrapositioned and extrapositioned negation, Mart Frauenlob
  - Re: intrapositioned and extrapositioned negation, Patrick McHardy
- <Possible follow-ups>
- Re: intrapositioned and extrapositioned negation, Mart Frauenlob
FIN packets not getting NAT-ed, Dhyanesh Ramaiya
- Re: FIN packets not getting NAT-ed, Pascal Hambourg
  - RE: FIN packets not getting NAT-ed, Dhyanesh Ramaiya
Contrack hook sees each UDP packet as a new connection but proc/net/nf_conntrack shows correctly - what am I doing wrong?, Gareth Williams
how to drop an log packets, Ralph Blach
are my post getting thourgh, Ralph Blach
- Re: are my post getting thourgh, Bernd Petrovitsch
  - Re: [OT] are my post getting thourgh, John Haxby
propper logging and dropping, Ralph Blach
- Re: propper logging and dropping, Mart Frauenlob
  - Re: propper logging and dropping, Ralph Blach
  - Re: propper logging and dropping, Ralph Blach
CPU-based load balancing and IPTables, Lars Nooden
conntrack generates UDP 'ghost traffic', Roderick Groesbeek
- RE: conntrack generates UDP 'ghost traffic', Roderick Groesbeek
- Re: conntrack generates UDP 'ghost traffic', Thomas Jacob
  - RE: conntrack generates UDP 'ghost traffic', Roderick Groesbeek
    - RE: conntrack generates UDP 'ghost traffic', Thomas Jacob
      - RE: conntrack generates UDP 'ghost traffic', Roderick Groesbeek
        
        RE: conntrack generates UDP 'ghost traffic', Thomas Jacob
Pre-routing re-write, Kevin Bailey
- Re: Pre-routing re-write, Michele Petrazzo - Unipex
  - Re: Pre-routing re-write, Kevin Bailey
    - Re: Pre-routing re-write, Michele Petrazzo - Unipex
ipt ROUTE extension, Mallika Gautam
- Re: ipt ROUTE extension, Saikiran Madugula
  - Re: ipt ROUTE extension, Mallika Gautam
    - Re: ipt ROUTE extension, Saikiran Madugula
      - Re: ipt ROUTE extension, Mallika Gautam
ssh tunnel to port forwarded over localhost, Tito
- Re: ssh tunnel to port forwarded over localhost, /dev/rob0
Ramdom NAT drop, Gary Smith
- RE: Ramdom NAT drop, Gary Smith
  - Re: Ramdom NAT drop, Anatoly Muliarski
    - RE: Ramdom NAT drop, Gary Smith
  - Re: Ramdom NAT drop, Mart Frauenlob
    - RE: Ramdom NAT drop, Gary Smith
      - RE: Ramdom NAT drop, Gary Smith
        
        Re: Ramdom NAT drop, Mart Frauenlob
        
        RE: Ramdom NAT drop, Gary Smith
Re: transparent proxy and iptables (and ebtables) failing, Robin Wood
- Re: transparent proxy and iptables (and ebtables) failing, Robin Wood
Non-blocking access to packets via queue libraries, exnix . com
A little question about the RATEEST target., whiplash
- Re: A little question about the RATEEST target., Michele Petrazzo - Unipex
  - Re: A little question about the RATEEST target., whiplash
Best Kernel QoS Parameters, Lucas Willian Bocchi
- Re: Best Kernel QoS Parameters, Michele Petrazzo - Unipex
  - Message not available
    - Re: Best Kernel QoS Parameters, Michele Petrazzo - Unipex
      - Re: Best Kernel QoS Parameters, Lucas Willian Bocchi
        
        Re: Best Kernel QoS Parameters, Michele Petrazzo - Unipex
- <Possible follow-ups>
- Re: Best Kernel QoS Parameters, Lucas Willian Bocchi
IPv4 in IPv6 encapsulator, Tanguy Ropitault
IPv4 in IPv6 encapsulator - Locally generated traffic issue, Tanguy Ropitault
tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support, Andrei Moraru
- Re: tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support, Karel Rericha
  - Re: tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support, Michal Soltys
    - Re: tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support, Karel Rericha
      - Re: tc doesn't shape correctly -->> iproute2-latest + iptables 1.4.3.2 +linux-kernel 2.6.29.4 + imq support, Michal Soltys
Jumping to chains dynamically based on interface name, Tore Anderson
Forwarding link-local frames in a bridge, Zhen Lin
2 default routes on non router, Aleksander Kamenik
- Re: 2 default routes on non router, Aleksander Kamenik
pid-owner matcher, Vlad
Multiple interfaces with the same IP address, Greg Wilson-Lindberg
- Re: Multiple interfaces with the same IP address, Rick Jones
  - Re: Multiple interfaces with the same IP address, Greg Wilson-Lindberg
    - Re: Multiple interfaces with the same IP address, Rick Jones
      - Re: Multiple interfaces with the same IP address, Oskar Berggren
        
        Re: Multiple interfaces with the same IP address, Greg Wilson-Lindberg
        
        Re: Multiple interfaces with the same IP address, Rick Jones
        
        Re: Multiple interfaces with the same IP address, Greg Wilson-Lindberg
BUG with iptables 1.4.4 IMQ and ipset patch, Epure Daniel
conntrack command returns zeroed src, dst, sport and dport, Ethy H. Brito
Forward traffic between two interfaces on the same host, Kostas Pelechrinis
- Re: Forward traffic between two interfaces on the same host, Richard Horton
  - Re: Forward traffic between two interfaces on the same host, Oskar Berggren
    - Re: Forward traffic between two interfaces on the same host, Kostas Pelechrinis
transparent proxy and iptables failing, Robin Wood
- Re: transparent proxy and iptables failing, Rakotomandimby Mihamina
  - Re: transparent proxy and iptables failing, Brian Austin - Standard Universal
    - Re: transparent proxy and iptables failing, Robin Wood
- Re: transparent proxy and iptables failing, Robin Wood
CONNMARK howto, Fabio Marcone
Correctly classifying iptables NAT beahaviour..., Toby Bradshaw
- Re: Correctly classifying iptables NAT beahaviour..., Thomas Jacob
- Re: Correctly classifying iptables NAT beahaviour..., Jozsef Kadlecsik
  - Re: Correctly classifying iptables NAT beahaviour..., Thomas Jacob
evaluating kernel-mode packet processing (netfilter target extension?), Beyer, Philipp
- RE: evaluating kernel-mode packet processing (netfilter target extension?), Beyer, Philipp
  - Re: evaluating kernel-mode packet processing (netfilter target extension?), Saikiran Madugula
tc and CONNMARK, Fabio Marcone
- Message not available
  - Re: tc and CONNMARK, Fabio Marcone
    - Re: tc and CONNMARK, Michele Petrazzo - Unipex
      - Re: tc and CONNMARK, Fabio Marcone
        
        Message not available
        
        Re: tc and CONNMARK, Richard Horton
        
        Re: tc and CONNMARK, Michele Petrazzo - Unipex
        
        Re: tc and CONNMARK, Fabio Marcone
- Re: tc and CONNMARK [SOLVED], Fabio Marcone

[Home] [Bugtraq] [Photo] [Yosemite Photos] [Yosemite Discussion] [Linux]