Netfilter Iptables Mailing List (date)

Netfilter Iptables Mailing List (date)

[Thread Index] [Top] [All Lists]

June 28, 2007

Re: 'recent' matching when less than hitcount hits, Msquared, 00:04

June 27, 2007

Compiling iptables 1.3.8 over kernel 2.6.21 woes, CrackyBlue, 22:24
How can I forward ICMP packages?, Bryan Christ, 18:03
Re: icmp-type question, Grant Taylor, 15:17
Re: ICMP packets associated with NAT connections sent out wrong interface?, Jordan Russell, 14:21
Re: ipt_account / iptables 1.3.8, Pascal Hambourg, 14:16
[ANNOUNCE] Release libnetfilter_conntrack, Pablo Neira Ayuso, 13:34
Re: icmp-type question, Mike Wright, 13:10
ipt_account / iptables 1.3.8, Thomas Jacob, 12:44
icmp-type question, Ross Cameron, 12:28
ipt_recent module and UDP, Roger Venable, 11:59
Re: Block an IP if there is number of connection within a time limit ??, Juan León, 11:56
Re: How to remove TCP options when doing NAT?, Cedric Blancher, 11:19
Routing decision after FORWARD, Ivan Dubrov, 09:20
Re: ICMP packets associated with NAT connections sent out wrong interface?, Ray Leach, 07:45
How to remove TCP options when doing NAT?, Fabrice Triboix, 05:50
Re: 'recent' matching when less than hitcount hits, hdemir, 05:42
Re: ICMP packets associated with NAT connections sent out wrong interface?, Martijn Lievaart, 05:19
Re: Two gateway for two diff eth in one machine, Martijn Lievaart, 05:11
Re: 'recent' matching when less than hitcount hits, Patrick McHardy, 05:08
'recent' matching when less than hitcount hits, Msquared, 05:01
Re: Block an IP if there is number of connection within a time limit ??, Grant Taylor, 01:18
Block an IP if there is number of connection within a time limit ??, Ditro - BipinDas, 01:13

June 26, 2007

Rule added, packets no longer forwarded across interfaces. What's wrong with my rule?, JOR HAY, 23:34
Re: transparent proxy with captive page - ipt_recent?, Martin Whinnery, 04:12
Re: transparent proxy with captive page - ipt_recent?, Martijn Lievaart, 03:43
Re: patches against 2.6.21 and a small script, Yasuyuki KOZAKAI, 02:54

June 25, 2007

patches against 2.6.21 and a small script, Gáspár Lajos, 13:05
transparent proxy with captive page - ipt_recent?, Martin Whinnery, 11:40
[ANNOUNCE] Release of iptables 1.3.8, Pablo Neira Ayuso, 09:22
Re: linux-2.6.21 iptables and NAT, Martijn Lievaart, 09:16
Re: Limitations on connections, Jan Kogut, 07:48
Re: Limitations on connections, Martijn Lievaart, 07:19
ipp2p problems, sandra-llistes, 06:22

June 24, 2007

Unexpected UDP behavior using ipt_recent, Roger Venable, 10:40

June 23, 2007

Re: filter by application name, Daniel Lopes, 11:02
Re: Looking to exclude certain destinations from masquarade, Ray Leach, 03:28
Re: filter by application name, R. DuFresne, 02:13

June 22, 2007

Re: filter by application name, Tom Eastep, 18:00
filter by application name, Deb ian, 17:55
Re: Many to many NAT, Robert LeBlanc, 10:14
Re: Looking to exclude certain destinations from masquarade, Gáspár Lajos, 09:53
Re: Improve queue handler performance, Rayed Alrashed, 06:47
Re: nfct_query return code, Pablo Neira Ayuso, 03:00

June 21, 2007

Looking to exclude certain destinations from masquarade, Bruce Ferrell, 17:24
nfct_query return code, switcher, 16:54
Re: Netfilter Hooks, Jan Kogut, 14:29
Re: syn DDoS attack solution, R. DuFresne, 14:22
Re: Netfilter Hooks, Juan León, 14:15
Re: Netfilter Hooks, Jan Kogut, 11:30
Re: Netfilter Hooks, Elvir Kuric, 08:09
Re: Improve queue handler performance, Eric Leblond, 07:52
Re: libipq library, amna bilal, 07:19
Re: Netfilter Hooks, Werner Maier, 03:10

June 20, 2007

Re: iptables state transfer, Grant Taylor, 21:48
Netfilter Hooks, Tercio F. Gaudencio Filho, 21:41
Re: iptables state transfer, Lars Wilke, 21:00
Re: Check connection state in libipq hook, switcher, 12:25
Re: ebtables v/s arptables, Petr Pisar, 10:34
Re-routing of output traffic, François Delawarde, 08:11
Re-routing of output traffic, François Delawarde, 08:09
Re: ebtables v/s arptables, pankaj jain, 07:26
Re: libipq library, patric, 06:39
Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., rajeev.sekhar, 01:41

June 19, 2007

Re: REJECT doesnt work, Pascal Hambourg, 19:19
Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., Pascal Hambourg, 19:12
Re: syn DDoS attack solution, Pascal Hambourg, 19:03
Re: syn DDoS attack solution, Robert Nichols, 18:20
Re: syn DDoS attack solution, R. DuFresne, 14:19
Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., rajeev.sekhar, 09:44
RE: REJECT doesnt work, Rob Sterenborg, 09:01
Re: REJECT doesnt work, Mohammad Norouzi, 08:46
Comments at end of iptables statements, John V. Kjellman, 08:28
RE: REJECT doesnt work, Rob Sterenborg, 08:26
Re: REJECT doesnt work, Mohammad Norouzi, 06:21
libipq library, amna bilal, 05:57
RE: REJECT doesnt work, Rob Sterenborg, 05:49
RE: REJECT doesnt work, Rob Sterenborg, 02:27
REJECT doesnt work, Mohammad Norouzi, 01:23

June 18, 2007

ipt_recent failure, David Ford, 20:42
Re: Check connection state in libipq hook, Pablo Neira Ayuso, 15:11
Re: Check connection state in libipq hook, switcher, 14:19
Re: Check connection state in libipq hook, Pablo Neira Ayuso, 14:06
Re: NAT addresses - RFC or tradition?, R. DuFresne, 13:24
Re: NAT addresses - RFC or tradition?, R. DuFresne, 13:22
Check connection state in libipq hook, switcher, 10:13
Re: Comments at end of iptables statements, Leonardo Rodrigues Magalhães, 08:15
Re: Comments at end of iptables statements, Gáspár Lajos, 08:11
Comments at end of iptables statements, John V. Kjellman, 07:56
Static IP mapping, Saifuddin Sharif, 07:54
Re: change reply message of icmp request, Petr Pisar, 03:57
change reply message of icmp request, Krishantha Dinesh, 03:49
NAT trouble (?) with Apple Macbook Pro, Daniel, 03:29
RE: change reply message of icmp request, Jason Neurohr, 03:01
change reply message of icmp request, Krishantha Dinesh, 02:33
Re: Bridge, DNAT, New Tables and ip rules, Grant Taylor, 01:19

June 17, 2007

ip_tables: policy match: invalid size 308 != 116, mess-mate, 05:50
ip_tables: policy match: invalid size 308 != 116, mess-mate, 05:46

June 16, 2007

Many to many NAT, Robert LeBlanc, 21:35
Re: regarding iptables and DROP, Kashif Ali Bukhari, 17:21
ICMP packets associated with NAT connections sent out wrong interface?, Jordan Russell, 13:00
Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., Marcos Granero Vaz - Informatica/MTZ, 11:13
Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server., rajeev.sekhar, 09:38
RE: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., Neil Aggarwal, 09:27
Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server., Pascal Hambourg, 08:28
regarding iptables and DROP, Mohammad Norouzi, 08:19
Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server., Gáspár Lajos, 07:24
""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server., rajeev.sekhar, 07:02
NAT blocking HTTP .. But only some of it., Chris Spiegel, 02:06

June 15, 2007

Re: Bonding & Bridging., Grant Taylor, 21:13
getsockopt failed strangely: Invalid argument, Yang, 20:54
getsockopt failed strangely: Invalid argument, Yang, 20:48
Bonding & Bridging., semi linux, 18:14
Bridge, DNAT, New Tables and ip rules, semi linux, 15:05

June 14, 2007

Improve queue handler performance, Rayed Alrashed, 18:33
Re: ..prevention, was: syn DDoS attack solution, supportnew@xxxxxxxxxxxx, 16:14
RE: ..prevention, was: syn DDoS attack solution, R. DuFresne, 15:39
Any advantage of multicore for netfilter/iptables?, Fran Fabrizio, 15:36
Two gateway for two diff eth in one machine, rajeev.sekhar, 13:57

June 13, 2007

Re: Bridge, DNAT, New Tables and ip rules, Grant Taylor, 23:47
weird mac address format, Daniel Castelhano, 14:11
RE: ..prevention, was: syn DDoS attack solution, Martin McKeay, 13:43
Re: ..prevention, was: syn DDoS attack solution, Arnt Karlsen, 13:28
RE: ..prevention, was: syn DDoS attack solution, Martin McKeay, 10:24
How to remove TCP options with NAT?, Fabrice Triboix, 08:00

June 12, 2007

RE: ..prevention, was: syn DDoS attack solution, R. DuFresne, 18:41
Re: Bridge, DNAT, New Tables and ip rules, semi linux, 15:11
RE: ..prevention, was: syn DDoS attack solution, Martin McKeay, 14:10
Re: ipsec connection problems though netfilter., Jorge Davila, 11:37
Re: Transparent web proxy, Gáspár Lajos, 09:39
Re: Transparent web proxy, Ray Leach, 09:13
Re: Transparent web proxy, Ian Moyce, 08:44
ipsec connection problems though netfilter., Martin Cheatle, 08:42
Re: Transparent web proxy, Ray Leach, 07:37
Transparent web proxy, Ian Moyce, 07:13

June 11, 2007

Re: Bridge, DNAT, New Tables and ip rules, Grant Taylor, 20:31
Bridge, DNAT, New Tables and ip rules, semi linux, 18:36
Re: --match recent, Olivier, 14:51
Re: --match recent, Grant Taylor, 14:26
Re: --match recent, Olivier, 14:13
Re: multiple routing tables for internal router programs, Grant Taylor, 11:56
multiple routing tables for internal router programs, Andrea, 10:42
Re: --match recent, Grant Taylor, 09:59
Re: iptables state transfer, Martin Schiøtz, 08:12
Re: iptables state transfer, Petr Pisar, 07:22
iptables state transfer, Martin Schiøtz, 06:55
--match recent, olivierk, 05:23

June 10, 2007

Re: Limitations on connections, Grant Taylor, 17:14
Re: iptables port forwarding to tun0 device, Yaniv Fine, 10:28
Re: iptables port forwarding to tun0 device, Jorge Davila, 10:19
linux-2.6.21 and iptables1.3.7 modprobe could not parse modules.dep, Vincent Wen, 08:50
iptables/pptp restriction, Hu, 08:39
iptables port forwarding to tun0 device, Yaniv Fine, 08:34
Limitations on connections, Christos Panagiotakis, 05:12

June 09, 2007

Re: Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables), Grant Taylor, 19:43
Re: Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables), Stefan Mayr, 15:26

June 08, 2007

Re: SNAT before IPSec, Grant Taylor, 13:55
rtacct: history is aged out, resetting, semi linux, 11:57
Re: ..prevention, was: syn DDoS attack solution, Arnt Karlsen, 08:32

June 07, 2007

Re: Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables), Grant Taylor, 20:17
Re: Logging NAT Translations, Pascal Hambourg, 18:36
linux-2.6.21 iptables and NAT, John Zavgren, 17:42
Re: SNAT before IPSec, Jorge Davila, 16:57
Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables), Stefan Mayr, 16:30
RE: ..prevention, was: syn DDoS attack solution, Martin McKeay, 14:42
Re: SNAT before IPSec, Grant Taylor, 14:01
Re: Combining rules, Ian Moyce, 13:37
Re: SNAT before IPSec, Grant Taylor, 13:05
Re: SNAT before IPSec, Jorge Davila, 12:36
Re: Combining rules, Grant Taylor, 12:20
Re: SNAT before IPSec, noa levy, 11:40
linux-2.6.21 and iptables1.3.7 modprobe could not parse modules.dep, ss vincent, 11:13
Combining rules, Ian Moyce, 05:19
Re: Logging NAT Translations, Jan Engelhardt, 04:09

June 06, 2007

allow this specific traffic, Andres Paglayan, 22:42
Re: SNAT before IPSec, Grant Taylor, 14:47
Re: SNAT before IPSec, Jorge Davila, 11:47
Re: SNAT before IPSec, Jorge Davila, 11:39
Re: Logging NAT Translations, Craig Bernstein, 03:15
Re: Logging NAT Translations, Jan Engelhardt, 02:02

June 05, 2007

Re: Logging NAT Translations, Craig Bernstein, 22:10
Re: SNAT before IPSec, Grant Taylor, 19:53
Re: SNAT before IPSec, noa levy, 19:05
Re: SNAT before IPSec, Jorge Davila, 18:53
Re: SNAT before IPSec, noa levy, 18:40
Re: SNAT before IPSec, Jorge Davila, 18:37
Re: SNAT before IPSec, Jorge Davila, 18:35
Re: SNAT before IPSec, noa levy, 17:29
Re: SNAT before IPSec, Jorge Davila, 16:44
Re: SNAT before IPSec, Grant Taylor, 16:26
Re: SNAT before IPSec, Jorge Davila, 16:15
Re: ..prevention, was: syn DDoS attack solution, Arnt Karlsen, 14:35
Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Marc Haber, 13:42
Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Elvir Kuric, 13:01
Re: Restricting applications/protocols to use specific ports using iptables, is this possible, jwlargent, 12:00
Re: ..prevention, was: syn DDoS attack solution, Steven M Campbell, 11:40
..prevention, was: syn DDoS attack solution, Arnt Karlsen, 11:24
Re: SNAT before IPSec, Grant Taylor, 10:34
Re: syn DDoS attack solution, Steven M Campbell, 10:16
Re: SNAT before IPSec, Yasuyuki KOZAKAI, 08:56
SNAT before IPSec, noa levy, 08:29
Problem with FTP and NAT, Werner Maier, 04:43
Re: syn DDoS attack solution, Bgs, 04:30

June 04, 2007

RE: syn DDoS attack solution, R. DuFresne, 19:13
Re: problem matching marked packets in nat PREROUTING chain, Pascal Hambourg, 13:43
RE: syn DDoS attack solution, Martin McKeay, 13:25
Single packet authorization: fwknop-1.8 release, Michael Rash, 10:29
RE: syn DDoS attack solution, Ric Messier, 10:22
Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Gáspár Lajos, 10:18
Re: conntrack-tools fails to compile, Pablo Neira Ayuso, 10:12
Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Elvir Kuric, 08:38
Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Marc Haber, 08:05
Restricting applications/protocols to use specific ports using iptables, is this possible, Elvir Kuric, 07:41
problem matching marked packets in nat PREROUTING chain, Richard Hauswald, 07:39
Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Andrew Beverley, 07:36
Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Andrew Beverley, 07:32
problem matching marked packets in nat PREROUTING chain, Richard Hauswald, 07:30
resolve reverse SRC DST, Matteo Cisilino, 04:21

June 03, 2007

Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Jan Engelhardt, 13:21
Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Jan Engelhardt, 08:37
Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Yasuyuki KOZAKAI, 07:47
Re: [PATCH 2/2] xt_connlimit (iptables) - connection limiting, Jan Engelhardt, 07:25
[PATCH 2/2] xt_connlimit (iptables) - connection limiting, Jan Engelhardt, 07:19
[PATCH 1/2] xt_connlimit (kernel) - connection limiting, Jan Engelhardt, 07:16
[PATCH 0/2] xt_connlimit - connection limiting, Jan Engelhardt, 07:14
Re: [PATCH 0/2] xt_u32 - match arbitrary bits and bytes of a packet, Jan Engelhardt, 04:21
Re: Enforce Per User IP Traffic Quota, Marc Haber, 03:23
Enforce Per User IP Traffic Quota, Gardner, 02:55

June 02, 2007

[PATCH 2/2] xt_u32 (iptables) - match arbitrary bits and bytes of a packet, Jan Engelhardt, 18:00
[PATCH 1/2] xt_u32 (kernel) - match arbitrary bits and bytes of a packet, Jan Engelhardt, 18:00
[PATCH 2/2] xt_u32 (iptables) - match arbitrary bits and bytes of a packet, Jan Engelhardt, 17:54
[PATCH 1/2] xt_u32 (kernel) - match arbitrary bits and bytes of a packet, Jan Engelhardt, 17:50
[PATCH 0/2] xt_u32 - match arbitrary bits and bytes of a packet, Jan Engelhardt, 17:50
[PATCH 0/2] xt_u32 - match arbitrary bits and bytes of a packet, Jan Engelhardt, 17:46
Re: How to match protocol 0, Jan Engelhardt, 17:25
Re: syn DDoS attack solution, R. DuFresne, 15:04
Re: How to match protocol 0, Jan Engelhardt, 14:57
conntrack-tools fails to compile, t, 05:48

June 01, 2007

Re: syn DDoS attack solution, Ethy H. Brito, 19:15
RE: syn DDoS attack solution, Ric Messier, 17:38
Re: syn DDoS attack solution, Martijn Lievaart, 17:36
Re: syn DDoS attack solution, Martijn Lievaart, 17:34
Re: Force use of outgoing IP address, John A. Sullivan III, 13:24
Re: Force use of outgoing IP address, Grant Taylor, 13:21
Force use of outgoing IP address, Neil Russell, 12:43
Re: Default deny rule, Gáspár Lajos, 12:01
Re: syn DDoS attack solution, Bgs, 11:38
Re: Enabling internal connections to transparently connect via external IP address, Martijn Lievaart, 11:36
RE: syn DDoS attack solution, Ric Messier, 11:03
Re: Two NICs, same network..., Tommy W, 07:52
Re: syn DDoS attack solution, Bgs, 07:17
Re: syn DDoS attack solution, Bgs, 05:45
Re: -m owner and INPUT chain, Ernest Davnis, 03:23

May 31, 2007

Re: syn DDoS attack solution, Tony.Ho, 21:26
Re: Enabling internal connections to transparently connect via external IP address, Robby Workman, 20:10
Re: Two NICs, same network..., Pascal Hambourg, 18:41
Re: Two NICs, same network..., semi linux, 18:17
Enabling internal connections to transparently connect via external IP address, Chris Willis, 16:17
RE: syn DDoS attack solution, Ric Messier, 16:08
Re: syn DDoS attack solution, R. DuFresne, 15:55