Netfilter Iptables Mailing List (thread)

Compiling iptables 1.3.8 over kernel 2.6.21 woes, CrackyBlue, 2007/06/27
How can I forward ICMP packages?, Bryan Christ, 2007/06/27
[ANNOUNCE] Release libnetfilter_conntrack, Pablo Neira Ayuso, 2007/06/27
ipt_account / iptables 1.3.8, Thomas Jacob, 2007/06/27
- Re: ipt_account / iptables 1.3.8, Pascal Hambourg, 2007/06/27
icmp-type question, Ross Cameron, 2007/06/27
- Re: icmp-type question, Mike Wright, 2007/06/27
  - Re: icmp-type question, Grant Taylor, 2007/06/27
Routing decision after FORWARD, Ivan Dubrov, 2007/06/27
How to remove TCP options when doing NAT?, Fabrice Triboix, 2007/06/27
- Re: How to remove TCP options when doing NAT?, Cedric Blancher, 2007/06/27
'recent' matching when less than hitcount hits, Msquared, 2007/06/27
- Re: 'recent' matching when less than hitcount hits, Patrick McHardy, 2007/06/27
  - Re: 'recent' matching when less than hitcount hits, Msquared, 2007/06/28
- Re: 'recent' matching when less than hitcount hits, hdemir, 2007/06/27
Block an IP if there is number of connection within a time limit ??, Ditro - BipinDas, 2007/06/27
- Re: Block an IP if there is number of connection within a time limit ??, Grant Taylor, 2007/06/27
  - Re: Block an IP if there is number of connection within a time limit ??, Juan León, 2007/06/27
Rule added, packets no longer forwarded across interfaces. What's wrong with my rule?, JOR HAY, 2007/06/26
patches against 2.6.21 and a small script, Gáspár Lajos, 2007/06/25
- Re: patches against 2.6.21 and a small script, Yasuyuki KOZAKAI, 2007/06/26
transparent proxy with captive page - ipt_recent?, Martin Whinnery, 2007/06/25
- Re: transparent proxy with captive page - ipt_recent?, Martijn Lievaart, 2007/06/26
  - Re: transparent proxy with captive page - ipt_recent?, Martin Whinnery, 2007/06/26
[ANNOUNCE] Release of iptables 1.3.8, Pablo Neira Ayuso, 2007/06/25
ipp2p problems, sandra-llistes, 2007/06/25
Unexpected UDP behavior using ipt_recent, Roger Venable, 2007/06/24
- ipt_recent module and UDP, Roger Venable, 2007/06/27
filter by application name, Deb ian, 2007/06/22
- Re: filter by application name, Tom Eastep, 2007/06/22
  - Re: filter by application name, R. DuFresne, 2007/06/23
    - Re: filter by application name, Daniel Lopes, 2007/06/23
Looking to exclude certain destinations from masquarade, Bruce Ferrell, 2007/06/21
- Re: Looking to exclude certain destinations from masquarade, Gáspár Lajos, 2007/06/22
  - Re: Looking to exclude certain destinations from masquarade, Ray Leach, 2007/06/23
nfct_query return code, switcher, 2007/06/21
- Re: nfct_query return code, Pablo Neira Ayuso, 2007/06/22
Netfilter Hooks, Tercio F. Gaudencio Filho, 2007/06/20
- Re: Netfilter Hooks, Werner Maier, 2007/06/21
  - Re: Netfilter Hooks, Jan Kogut, 2007/06/21
    - Re: Netfilter Hooks, Juan León, 2007/06/21
      
      Re: Netfilter Hooks, Jan Kogut, 2007/06/21
- Re: Netfilter Hooks, Elvir Kuric, 2007/06/21
Re-routing of output traffic, François Delawarde, 2007/06/20
- Re-routing of output traffic, François Delawarde, 2007/06/20
Re: ebtables v/s arptables, pankaj jain, 2007/06/20
- Re: ebtables v/s arptables, Petr Pisar, 2007/06/20
libipq library, amna bilal, 2007/06/19
- Re: libipq library, patric, 2007/06/20
  - Re: libipq library, amna bilal, 2007/06/21
REJECT doesnt work, Mohammad Norouzi, 2007/06/19
- RE: REJECT doesnt work, Rob Sterenborg, 2007/06/19
  - Message not available
    - RE: REJECT doesnt work, Rob Sterenborg, 2007/06/19
      
      Re: REJECT doesnt work, Mohammad Norouzi, 2007/06/19
      
      RE: REJECT doesnt work, Rob Sterenborg, 2007/06/19
      
      Re: REJECT doesnt work, Mohammad Norouzi, 2007/06/19
      
      RE: REJECT doesnt work, Rob Sterenborg, 2007/06/19
  - Re: REJECT doesnt work, Pascal Hambourg, 2007/06/19
ipt_recent failure, David Ford, 2007/06/18
Re: NAT addresses - RFC or tradition?, R. DuFresne, 2007/06/18
- Re: NAT addresses - RFC or tradition?, R. DuFresne, 2007/06/18
Check connection state in libipq hook, switcher, 2007/06/18
- Re: Check connection state in libipq hook, Pablo Neira Ayuso, 2007/06/18
  - Re: Check connection state in libipq hook, switcher, 2007/06/18
    - Re: Check connection state in libipq hook, Pablo Neira Ayuso, 2007/06/18
      
      Re: Check connection state in libipq hook, switcher, 2007/06/20
Comments at end of iptables statements, John V. Kjellman, 2007/06/18
- Re: Comments at end of iptables statements, Gáspár Lajos, 2007/06/18
- Re: Comments at end of iptables statements, Leonardo Rodrigues Magalhães, 2007/06/18
- Comments at end of iptables statements, John V. Kjellman, 2007/06/19
Static IP mapping, Saifuddin Sharif, 2007/06/18
NAT trouble (?) with Apple Macbook Pro, Daniel, 2007/06/18
change reply message of icmp request, Krishantha Dinesh, 2007/06/18
- RE: change reply message of icmp request, Jason Neurohr, 2007/06/18
- change reply message of icmp request, Krishantha Dinesh, 2007/06/18
- Re: change reply message of icmp request, Petr Pisar, 2007/06/18
ip_tables: policy match: invalid size 308 != 116, mess-mate, 2007/06/17
- ip_tables: policy match: invalid size 308 != 116, mess-mate, 2007/06/17
Many to many NAT, Robert LeBlanc, 2007/06/16
- Re: Many to many NAT, Robert LeBlanc, 2007/06/22
ICMP packets associated with NAT connections sent out wrong interface?, Jordan Russell, 2007/06/16
- Re: ICMP packets associated with NAT connections sent out wrong interface?, Martijn Lievaart, 2007/06/27
  - Re: ICMP packets associated with NAT connections sent out wrong interface?, Ray Leach, 2007/06/27
    - Re: ICMP packets associated with NAT connections sent out wrong interface?, Jordan Russell, 2007/06/27
regarding iptables and DROP, Mohammad Norouzi, 2007/06/16
- Re: regarding iptables and DROP, Kashif Ali Bukhari, 2007/06/16
""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server., rajeev.sekhar, 2007/06/16
- Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server., Gáspár Lajos, 2007/06/16
- Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server., Pascal Hambourg, 2007/06/16
  - Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptp VPN server., rajeev.sekhar, 2007/06/16
- RE: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., Neil Aggarwal, 2007/06/16
  - Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., Marcos Granero Vaz - Informatica/MTZ, 2007/06/16
    - Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., rajeev.sekhar, 2007/06/19
      
      Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., Pascal Hambourg, 2007/06/19
      
      Re: ""how can i allow IP protocol 47 "" on iptables to connet a pptpVPN server., rajeev.sekhar, 2007/06/20
NAT blocking HTTP .. But only some of it., Chris Spiegel, 2007/06/16
getsockopt failed strangely: Invalid argument, Yang, 2007/06/15
- getsockopt failed strangely: Invalid argument, Yang, 2007/06/15
Bonding & Bridging., semi linux, 2007/06/15
- Re: Bonding & Bridging., Grant Taylor, 2007/06/15
Improve queue handler performance, Rayed Alrashed, 2007/06/14
- Re: Improve queue handler performance, Eric Leblond, 2007/06/21
  - Re: Improve queue handler performance, Rayed Alrashed, 2007/06/22
Any advantage of multicore for netfilter/iptables?, Fran Fabrizio, 2007/06/14
Two gateway for two diff eth in one machine, rajeev.sekhar, 2007/06/14
- Re: Two gateway for two diff eth in one machine, Martijn Lievaart, 2007/06/27
weird mac address format, Daniel Castelhano, 2007/06/13
How to remove TCP options with NAT?, Fabrice Triboix, 2007/06/13
ipsec connection problems though netfilter., Martin Cheatle, 2007/06/12
- Re: ipsec connection problems though netfilter., Jorge Davila, 2007/06/12
Transparent web proxy, Ian Moyce, 2007/06/12
- Re: Transparent web proxy, Ray Leach, 2007/06/12
  - Re: Transparent web proxy, Ian Moyce, 2007/06/12
    - Re: Transparent web proxy, Ray Leach, 2007/06/12
      
      Re: Transparent web proxy, Gáspár Lajos, 2007/06/12
Bridge, DNAT, New Tables and ip rules, semi linux, 2007/06/11
- Re: Bridge, DNAT, New Tables and ip rules, Grant Taylor, 2007/06/11
  - Re: Bridge, DNAT, New Tables and ip rules, semi linux, 2007/06/12
    - Re: Bridge, DNAT, New Tables and ip rules, Grant Taylor, 2007/06/13
      
      Message not available
      
      Bridge, DNAT, New Tables and ip rules, semi linux, 2007/06/15
      
      Re: Bridge, DNAT, New Tables and ip rules, Grant Taylor, 2007/06/18
multiple routing tables for internal router programs, Andrea, 2007/06/11
- Re: multiple routing tables for internal router programs, Grant Taylor, 2007/06/11
iptables state transfer, Martin Schiøtz, 2007/06/11
- Re: iptables state transfer, Petr Pisar, 2007/06/11
  - Re: iptables state transfer, Martin Schiøtz, 2007/06/11
    - Re: iptables state transfer, Lars Wilke, 2007/06/20
      
      Re: iptables state transfer, Grant Taylor, 2007/06/20
--match recent, olivierk, 2007/06/11
- Re: --match recent, Grant Taylor, 2007/06/11
  - Re: --match recent, Olivier, 2007/06/11
    - Re: --match recent, Grant Taylor, 2007/06/11
      
      Re: --match recent, Olivier, 2007/06/11
iptables/pptp restriction, Hu, 2007/06/10
iptables port forwarding to tun0 device, Yaniv Fine, 2007/06/10
- Re: iptables port forwarding to tun0 device, Jorge Davila, 2007/06/10
  - Re: iptables port forwarding to tun0 device, Yaniv Fine, 2007/06/10
Limitations on connections, Christos Panagiotakis, 2007/06/10
- Re: Limitations on connections, Grant Taylor, 2007/06/10
- Re: Limitations on connections, Martijn Lievaart, 2007/06/25
  - Re: Limitations on connections, Jan Kogut, 2007/06/25
rtacct: history is aged out, resetting, semi linux, 2007/06/08
linux-2.6.21 iptables and NAT, John Zavgren, 2007/06/07
- Re: linux-2.6.21 iptables and NAT, Martijn Lievaart, 2007/06/25
Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables), Stefan Mayr, 2007/06/07
- Re: Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables), Grant Taylor, 2007/06/07
  - Re: Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables), Stefan Mayr, 2007/06/09
    - Re: Using DNAT and SNAT to do a local redirection does not work (want to do what rinetd does with iptables), Grant Taylor, 2007/06/09
RE: ..prevention, was: syn DDoS attack solution, Martin McKeay, 2007/06/07
- Re: ..prevention, was: syn DDoS attack solution, Arnt Karlsen, 2007/06/08
- RE: ..prevention, was: syn DDoS attack solution, Martin McKeay, 2007/06/12
  - RE: ..prevention, was: syn DDoS attack solution, R. DuFresne, 2007/06/12
    - RE: ..prevention, was: syn DDoS attack solution, Martin McKeay, 2007/06/13
      
      Re: ..prevention, was: syn DDoS attack solution, Arnt Karlsen, 2007/06/13
      
      RE: ..prevention, was: syn DDoS attack solution, Martin McKeay, 2007/06/13
      
      RE: ..prevention, was: syn DDoS attack solution, R. DuFresne, 2007/06/14
      
      Re: ..prevention, was: syn DDoS attack solution, supportnew@xxxxxxxxxxxx, 2007/06/14
linux-2.6.21 and iptables1.3.7 modprobe could not parse modules.dep, ss vincent, 2007/06/07
- linux-2.6.21 and iptables1.3.7 modprobe could not parse modules.dep, Vincent Wen, 2007/06/10
Combining rules, Ian Moyce, 2007/06/07
- Re: Combining rules, Grant Taylor, 2007/06/07
  - Re: Combining rules, Ian Moyce, 2007/06/07
allow this specific traffic, Andres Paglayan, 2007/06/06
Re: Logging NAT Translations, Craig Bernstein, 2007/06/05
- Re: Logging NAT Translations, Jan Engelhardt, 2007/06/06
  - Re: Logging NAT Translations, Craig Bernstein, 2007/06/06
    - Re: Logging NAT Translations, Jan Engelhardt, 2007/06/07
      
      Re: Logging NAT Translations, Pascal Hambourg, 2007/06/07
SNAT before IPSec, noa levy, 2007/06/05
- Re: SNAT before IPSec, Yasuyuki KOZAKAI, 2007/06/05
- Re: SNAT before IPSec, Grant Taylor, 2007/06/05
- Re: SNAT before IPSec, Jorge Davila, 2007/06/05
  - Re: SNAT before IPSec, Grant Taylor, 2007/06/05
    - Re: SNAT before IPSec, Jorge Davila, 2007/06/05
      
      Re: SNAT before IPSec, Grant Taylor, 2007/06/05
      
      Re: SNAT before IPSec, Jorge Davila, 2007/06/06
      
      Re: SNAT before IPSec, Grant Taylor, 2007/06/06
  - Re: SNAT before IPSec, noa levy, 2007/06/05
    - Re: SNAT before IPSec, Jorge Davila, 2007/06/05
      
      Re: SNAT before IPSec, noa levy, 2007/06/05
      
      Re: SNAT before IPSec, Jorge Davila, 2007/06/05
      
      Re: SNAT before IPSec, noa levy, 2007/06/05
      
      Re: SNAT before IPSec, Jorge Davila, 2007/06/06
      
      Re: SNAT before IPSec, noa levy, 2007/06/07
      
      Re: SNAT before IPSec, Jorge Davila, 2007/06/07
      
      Re: SNAT before IPSec, Grant Taylor, 2007/06/07
      
      Re: SNAT before IPSec, Grant Taylor, 2007/06/07
      
      Re: SNAT before IPSec, Jorge Davila, 2007/06/07
      
      Re: SNAT before IPSec, Grant Taylor, 2007/06/08
    - Re: SNAT before IPSec, Jorge Davila, 2007/06/05
Problem with FTP and NAT, Werner Maier, 2007/06/05
Single packet authorization: fwknop-1.8 release, Michael Rash, 2007/06/04
Restricting applications/protocols to use specific ports using iptables, is this possible, Elvir Kuric, 2007/06/04
- Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Marc Haber, 2007/06/04
  - Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Elvir Kuric, 2007/06/04
    - Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Gáspár Lajos, 2007/06/04
    - Re: Restricting applications/protocols to use specific ports using iptables, is this possible, jwlargent, 2007/06/05
      
      Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Elvir Kuric, 2007/06/05
      
      Re: Restricting applications/protocols to use specific ports using iptables, is this possible, Marc Haber, 2007/06/05
problem matching marked packets in nat PREROUTING chain, Richard Hauswald, 2007/06/04
- problem matching marked packets in nat PREROUTING chain, Richard Hauswald, 2007/06/04
  - Re: problem matching marked packets in nat PREROUTING chain, Pascal Hambourg, 2007/06/04
resolve reverse SRC DST, Matteo Cisilino, 2007/06/04
[PATCH 0/2] xt_connlimit - connection limiting, Jan Engelhardt, 2007/06/03
- [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Jan Engelhardt, 2007/06/03
  - Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Yasuyuki KOZAKAI, 2007/06/03
  - Message not available
    - Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Jan Engelhardt, 2007/06/03
  - Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Andrew Beverley, 2007/06/04
    - Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Jan Engelhardt, 2007/06/03
      
      Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting, Andrew Beverley, 2007/06/04
- [PATCH 2/2] xt_connlimit (iptables) - connection limiting, Jan Engelhardt, 2007/06/03
  - Re: [PATCH 2/2] xt_connlimit (iptables) - connection limiting, Jan Engelhardt, 2007/06/03
Enforce Per User IP Traffic Quota, Gardner, 2007/06/03
- Re: Enforce Per User IP Traffic Quota, Marc Haber, 2007/06/03
[PATCH 0/2] xt_u32 - match arbitrary bits and bytes of a packet, Jan Engelhardt, 2007/06/02
- [PATCH 1/2] xt_u32 (kernel) - match arbitrary bits and bytes of a packet, Jan Engelhardt, 2007/06/02
- [PATCH 2/2] xt_u32 (iptables) - match arbitrary bits and bytes of a packet, Jan Engelhardt, 2007/06/02
- Message not available
  - Re: [PATCH 0/2] xt_u32 - match arbitrary bits and bytes of a packet, Jan Engelhardt, 2007/06/03
- [PATCH 0/2] xt_u32 - match arbitrary bits and bytes of a packet, Jan Engelhardt, 2007/06/02
  - [PATCH 1/2] xt_u32 (kernel) - match arbitrary bits and bytes of a packet, Jan Engelhardt, 2007/06/02
  - [PATCH 2/2] xt_u32 (iptables) - match arbitrary bits and bytes of a packet, Jan Engelhardt, 2007/06/02
Re: How to match protocol 0, Jan Engelhardt, 2007/06/02
- Re: How to match protocol 0, Jan Engelhardt, 2007/06/02
conntrack-tools fails to compile, t, 2007/06/02
- Re: conntrack-tools fails to compile, Pablo Neira Ayuso, 2007/06/04
Force use of outgoing IP address, Neil Russell, 2007/06/01
- Re: Force use of outgoing IP address, Grant Taylor, 2007/06/01
- Re: Force use of outgoing IP address, John A. Sullivan III, 2007/06/01
Re: Default deny rule, Gáspár Lajos, 2007/06/01
Re: -m owner and INPUT chain, Ernest Davnis, 2007/06/01
Re: Two NICs, same network..., semi linux, 2007/05/31
- Re: Two NICs, same network..., Pascal Hambourg, 2007/05/31
- Re: Two NICs, same network..., Tommy W, 2007/06/01
Enabling internal connections to transparently connect via external IP address, Chris Willis, 2007/05/31
- Re: Enabling internal connections to transparently connect via external IP address, Robby Workman, 2007/05/31
  - Re: Enabling internal connections to transparently connect via external IP address, Martijn Lievaart, 2007/06/01
Re: syn DDoS attack solution, R. DuFresne, 2007/05/31
- Re: syn DDoS attack solution, Bgs, 2007/06/01
- RE: syn DDoS attack solution, Ric Messier, 2007/05/31
  - Re: syn DDoS attack solution, Tony.Ho, 2007/05/31
  - Re: syn DDoS attack solution, Bgs, 2007/06/01
    - RE: syn DDoS attack solution, Ric Messier, 2007/06/01
      
      Re: syn DDoS attack solution, Bgs, 2007/06/01
      
      Re: syn DDoS attack solution, R. DuFresne, 2007/06/02
      
      RE: syn DDoS attack solution, Ric Messier, 2007/06/04
      
      RE: syn DDoS attack solution, Martin McKeay, 2007/06/04
      
      RE: syn DDoS attack solution, R. DuFresne, 2007/06/04
      
      Re: syn DDoS attack solution, Bgs, 2007/06/05
      
      Re: syn DDoS attack solution, Steven M Campbell, 2007/06/05
      
      ..prevention, was: syn DDoS attack solution, Arnt Karlsen, 2007/06/05
      
      Re: ..prevention, was: syn DDoS attack solution, Steven M Campbell, 2007/06/05
      
      Re: ..prevention, was: syn DDoS attack solution, Arnt Karlsen, 2007/06/05
      
      Re: syn DDoS attack solution, Martijn Lievaart, 2007/06/01
      
      Re: syn DDoS attack solution, Martijn Lievaart, 2007/06/01
      
      RE: syn DDoS attack solution, Ric Messier, 2007/06/01
      
      Re: syn DDoS attack solution, Ethy H. Brito, 2007/06/01
      
      Re: syn DDoS attack solution, R. DuFresne, 2007/06/19
      
      Re: syn DDoS attack solution, Robert Nichols, 2007/06/19
      
      Re: syn DDoS attack solution, Pascal Hambourg, 2007/06/19
      
      Re: syn DDoS attack solution, R. DuFresne, 2007/06/21