Netfilter / IPtables (thread)

how do I set the MAC address in POSTROUTING?, sean, 2006/11/30
- Re: how do I set the MAC address in POSTROUTING?, Daniel Musketa, 2006/11/30
asus p5b-vm onboard gigabit card problem, Daniel Nogradi, 2006/11/30
ipt_time doesn't work with new kernels, Fulvio Ricciardi, 2006/11/30
-i interface filter not working for firewall, victor oliveira, 2006/11/30
Transfer, (forward) all traffic bound for PublicIP-A to PublicIP-B. Is iptables the right tool?, Eric J. Marang, 2006/11/30
Patch for h323 conntack for certain kernels, ArcosCom Linux User, 2006/11/30
- Re: Patch for h323 conntack for certain kernels, Alan Ezust, 2006/11/30
weird multilink problem, Philippe BRAND, 2006/11/29
-j SNAT, Denis, 2006/11/28
- Re: -j SNAT, Danny, 2006/11/29
  - Re: -j SNAT, Denis, 2006/11/29
    - Re: -j SNAT, Danny, 2006/11/29
    - Message not available
    - Message not available
    - Re: -j SNAT, Denis, 2006/11/30
strange udp redirect problem, Brane F . Gračnar, 2006/11/28
would like to use match limit, Brent Clark, 2006/11/28
NOTRACK not working as expected, Wilson, Richard E, 2006/11/27
- Re: NOTRACK not working as expected, Tom Eastep, 2006/11/27
invalid ACK/RST droped, strange client, apache, Sebastian Ewert, 2006/11/27
Iptables/Bridge/Passive FTP problem, Gary W. Smith, 2006/11/27
This is possible?, Mike S. Matsumoto, 2006/11/27
- Re: This is possible?, Taylor, Grant, 2006/11/27
iptables binary version vs kernel version?, Shaun, 2006/11/27
Iptables, squid, alok pathak, 2006/11/27
- Re: Iptables, squid, piraguasu, 2006/11/27
Watched a DDoS attack for hours and couldn't do much :S, AntiProxy, 2006/11/27
- Re: Watched a DDoS attack for hours and couldn't do much :S, Danny, 2006/11/27
- Re: Watched a DDoS attack for hours and couldn't do much :S, Danny, 2006/11/27
  - Re: Watched a DDoS attack for hours and couldn't do much :S, AntiProxy, 2006/11/27
- Watched a DDoS attack for hours and couldn't do much :S, G.W. Haywood, 2006/11/27
  - Re: Watched a DDoS attack for hours and couldn't do much :S, AntiProxy, 2006/11/27
    - Re: Watched a DDoS attack for hours and couldn't do much :S, Taylor, Grant, 2006/11/27
Passive FTP sees remote's _internal_ IP!!??, gypsy, 2006/11/26
- Re: Passive FTP sees remote's _internal_ IP!!??, William Lima, 2006/11/26
- Passive FTP sees remote's _internal_ IP!!??, gypsy, 2006/11/27
  - Re: Passive FTP sees remote's _internal_ IP!!??, David Sims, 2006/11/27
  - RE: Passive FTP sees remote's _internal_ IP!!??, Maxime Ducharme, 2006/11/27
- Re: Passive FTP sees remote's _internal_ IP!!??, Pascal Hambourg, 2006/11/27
  - Re: Passive FTP sees remote's _internal_ IP!!??, gypsy, 2006/11/27
    - RE: Passive FTP sees remote's _internal_ IP!!??, Maxime Ducharme, 2006/11/28
    - Re: Passive FTP sees remote's _internal_ IP!!??, Pascal Hambourg, 2006/11/28
  - Re: Passive FTP sees remote's _internal_ IP!!??, gypsy, 2006/11/28
Duplicate IPs using proxy_arp, Ing. Rogelio Sevilla Fernandez, 2006/11/25
ip routing after changing mac address to a virtual one, first last, 2006/11/25
- Re: ip routing after changing mac address to a virtual one, Mike, 2006/11/26
- Re: Re: ip routing after changing mac address to a virtual one, first last, 2006/11/30
iptables MAC problem, alok pathak, 2006/11/25
- Re: iptables MAC problem, Tommy W, 2006/11/25
  - Re: iptables MAC problem, Elvir Kuric, 2006/11/26
segfault in nfct_conntrack_compare() at libnetfilter_conntrack.c:933, Alan Ezust, 2006/11/24
Where to get SIP conntrack and nat for pre-2.6.18 kernel?, Andrew Kraslavsky, 2006/11/22
- Re: Where to get SIP conntrack and nat for pre-2.6.18 kernel?, Pascal Hambourg, 2006/11/25
can't tunnel through iptables, Alex Feldman, 2006/11/22
- Re: can't tunnel through iptables, Ethy H. Brito, 2006/11/22
- Message not available
  - Re: can't tunnel through iptables, Alex Feldman, 2006/11/27
problems building conntrack w/ uclibc - no output, Alan Ezust, 2006/11/22
- Re: problems building conntrack w/ uclibc - no output, Pablo Neira Ayuso, 2006/11/27
  - Re: problems building conntrack w/ uclibc - no output, Alan Ezust, 2006/11/28
    - Re: problems building conntrack w/ uclibc - no output, Alan Ezust, 2006/11/28
What happened to ipt_physdev.c ?, Paul Reilly, 2006/11/22
- Re: What happened to ipt_physdev.c ?, Andy Furniss, 2006/11/22
  - Re: What happened to ipt_physdev.c ?, Robert P. J. Day, 2006/11/22
- Re: What happened to ipt_physdev.c ?, Pascal Hambourg, 2006/11/25
- Re: What happened to ipt_physdev.c ?, Paul Reilly, 2006/11/22
RE: Someone is using too much bandwidth???, lubasi, 2006/11/21
- RE: Someone is using too much bandwidth???, Pablo Sanchez, 2006/11/21
- Re: Someone is using too much bandwidth???, Taylor, Grant, 2006/11/21
  - Re: Someone is using too much bandwidth???, tom, 2006/11/21
    - Re: Someone is using too much bandwidth???, Danny, 2006/11/22
    - Re: Someone is using too much bandwidth???, R. DuFresne, 2006/11/25
- RE: Someone is using too much bandwidth???, lubasi, 2006/11/22
  - Re: Someone is using too much bandwidth???, Taylor, Grant, 2006/11/22
- Re: Someone is using too much bandwidth???, lubasi, 2006/11/22
  - Re: Someone is using too much bandwidth???, Gavin White, 2006/11/22
[Fwd: Re: load balancing multiple isp], Danny, 2006/11/21
(no subject), Tim Edwards, 2006/11/21
- Re: (no subject), Bernd Petrovitsch, 2006/11/21
- RE: (no subject), Tim Edwards, 2006/11/21
  - RE: (no subject), Bernd Petrovitsch, 2006/11/21
- RE: (no subject), Tim Edwards, 2006/11/21
How to measure CPU usage of netfilter, Mohammad Farooq, 2006/11/20
- load balancing multiple isp, ArioS, 2006/11/21
  - Re: load balancing multiple isp, Taylor, Grant, 2006/11/21
- Re: How to measure CPU usage of netfilter, Yakov Lerner, 2006/11/22
- Re: How to measure CPU usage of netfilter, Mike Williams, 2006/11/27
iptables/bridge/nfs, Gary W. Smith, 2006/11/20
- RE: iptables/bridge/nfs, Gary W. Smith, 2006/11/21
Fwd: multiple DNAT alternative?, Noman Jamil, 2006/11/20
- Re: Fwd: multiple DNAT alternative?, Pascal Hambourg, 2006/11/25
[announce] iptables-tutorial 1.2.2 book, Oskar Andreasson, 2006/11/20
- RE: [announce] iptables-tutorial 1.2.2 book, Pablo Sanchez, 2006/11/20
need advice - research project, Rodrigo Lazo, 2006/11/19
Dynamic chain alternatives, Gary W. Smith, 2006/11/19
- Re: Dynamic chain alternatives, Sven Schuster, 2006/11/20
  - RE: Dynamic chain alternatives, Gary W. Smith, 2006/11/20
ipset: how to run non-root, Mike Wright, 2006/11/18
- Re: ipset: how to run non-root, Maximilian Wilhelm, 2006/11/18
  - Re: ipset: how to run non-root, Mike Wright, 2006/11/18
    - Re: ipset: how to run non-root, PINTU, 2006/11/19
  - Re: ipset: how to run non-root, R. DuFresne, 2006/11/20
MATCH_PHYSDEV missing from 2.6.16.29 ??, Paul Reilly, 2006/11/18
inotify in netfilter socket, tom, 2006/11/17
Multicast route table, Marcos Gileno, 2006/11/16
- Re: Multicast route table, Andy Furniss, 2006/11/22
  - Re: Multicast route table, Marcos Gileno, 2006/11/22
NAT with two external IP numbers, Mogens Kjaer, 2006/11/16
- Re: NAT with two external IP numbers, former03 | Baltasar Cevc, 2006/11/16
  - Re: NAT with two external IP numbers, Mogens Kjaer, 2006/11/17
iptables promisc mode, Magnus Månsson, 2006/11/15
- Re: iptables promisc mode, R. DuFresne, 2006/11/15
  - Re: iptables promisc mode, Magnus Månsson, 2006/11/15
    - Re: iptables promisc mode, Victor Julien, 2006/11/15
    - Re: iptables promisc mode, Magnus Månsson, 2006/11/15
    - Re: iptables promisc mode, Alan Ezust, 2006/11/16
trouble with RTCP dst-address with ip_conntrack_sip, ip_nat_sip and RTCP to non-SIP address, Helge Jensen, 2006/11/15
Can not run iptables, Vladimir Iskoz, 2006/11/15
NAPT with loab balance does not work with iptables 1.2.11, RHEL 3, Mahmoud Aghapour, 2006/11/15
- Re: NAPT with loab balance does not work with iptables 1.2.11, RHEL 3, Pascal Hambourg, 2006/11/16
iptables: Invalid argument Using mac match, nawawi, 2006/11/15
- Re: iptables: Invalid argument Using mac match, nawawi, 2006/11/15
how to change ip source address of incoming packets, Matevz Langus, 2006/11/15
- Re: how to change ip source address of incoming packets, Gáspár Lajos, 2006/11/15
  - Re: how to change ip source address of incoming packets, Matevz Langus, 2006/11/15
    - Re: how to change ip source address of incoming packets, Gáspár Lajos, 2006/11/15
    - Re: how to change ip source address of incoming packets, Gáspár Lajos, 2006/11/15
About writing my hook function, Baining Zhu, 2006/11/14
- FW: About writing my hook function, Baining Zhu, 2006/11/15
opening up an ipchain, Alex Feldman, 2006/11/14
- Re: opening up an ipchain, former03 | Baltasar Cevc, 2006/11/14
  - Re: opening up an ipchain, Alex Feldman, 2006/11/15
    - Re: opening up an ipchain, former03 | Baltasar Cevc, 2006/11/15
- Re: opening up an ipchain, Pascal Hambourg, 2006/11/16
  - Re: opening up an ipchain, Alex Feldman, 2006/11/16
    - Re: opening up an ipchain, Pascal Hambourg, 2006/11/17
Mutlicast Routing, Marcos Gileno, 2006/11/14
maybe a bug in the conntrack ?, Eric Belhomme, 2006/11/14
cannot find -ldl, Vladimir Iskoz, 2006/11/14
- Re: cannot find -ldl, Eric Leblond, 2006/11/14
- RE: cannot find -ldl, Vladimir Iskoz, 2006/11/14
QUEUE working, ULOG not, Brian Litzinger, 2006/11/13
WAN DHCP for machines in LAN, Pedro Werneck, 2006/11/13
Iptables for load balancing internet traffic, Danny, 2006/11/13
- Re: Iptables for load balancing internet traffic, bill, 2006/11/14
  - Re: Iptables for load balancing internet traffic, Danny, 2006/11/14
    - Re: Iptables for load balancing internet traffic, Jorge Nerín, 2006/11/14
    - Re: Iptables for load balancing internet traffic, Danny, 2006/11/14
    - Re: Iptables for load balancing internet traffic, Jorge Nerín, 2006/11/14
Wrong addresses passed to warn_if_extra_mangle() ?, Pascal Hambourg, 2006/11/13
Cannot go out the firewall from internal network (NAT), Marco Nicoloso, 2006/11/13
- Re: Cannot go out the firewall from internal network (NAT), Tommy W, 2006/11/13
  - Re: Cannot go out the firewall from internal network (NAT), Marco Nicoloso, 2006/11/13
- Re: Cannot go out the firewall from internal network (NAT), Pradeep Jindal, 2006/11/14
  - Re: Cannot go out the firewall from internal network (NAT), Marco Nicoloso, 2006/11/14
    - Re: Cannot go out the firewall from internal network (NAT), Gáspár Lajos, 2006/11/15
    - Re: Cannot go out the firewall from internal network (NAT), Pradeep Jindal, 2006/11/15
Help with expect : master conntrack not found, Jean-François SMIGIELSKI, 2006/11/13
Architecture advice for a newbie, Hal Moroff, 2006/11/13
- RE: Architecture advice for a newbie, Seferovic Edvin, 2006/11/13
CONNMARK target's dependency on MANGLE table, François Barel, 2006/11/12
connlimit where has it gone?, John Covici, 2006/11/11
- Re: connlimit where has it gone?, gary douglas, 2006/11/14
QUEUE vs ULOG, Brian Litzinger, 2006/11/10
Re: Conntrack timeout, Pablo Neira Ayuso, 2006/11/09
- Re: Conntrack timeout, Pablo Neira Ayuso, 2006/11/09
iptables + ROUTE, Mato Vidovic, 2006/11/09
- RE: iptables + ROUTE, Seferovic Edvin, 2006/11/09
- Re: iptables + ROUTE, Pascal Hambourg, 2006/11/09
DNS Manipulation via IPTables?, Dan Bogda, 2006/11/08
- Re: DNS Manipulation via IPTables?, Taylor, Grant, 2006/11/08
[announce] pyctd 0.1, a connection tracking XML-RPC server, Eric Leblond, 2006/11/08
- Re: [announce] pyctd 0.1, a connection tracking XML-RPC server, Pablo Neira Ayuso, 2006/11/08
drop by mac address, but only to packets to other interface, Branko Kokanovic, 2006/11/07
- Re: drop by mac address, but only to packets to other interface, Jasbir Khehra, 2006/11/08
iplog X ulogd, Allan Spagnol Comar, 2006/11/07
How to configure firewall rules through a website, Satvika Bejai, 2006/11/07
- Re: How to configure firewall rules through a website, Clemens, 2006/11/08
- Re: How to configure firewall rules through a website, Bo Yang, 2006/11/08
Use of set-counters option of iptables, Manish Jain, 2006/11/07
Small doubt from a newbie :), utteerna, 2006/11/07
- Re: Small doubt from a newbie :), Rob Sterenborg, 2006/11/07
  - Re: Small doubt from a newbie :), utteerna, 2006/11/07
    - Re: Small doubt from a newbie :), Rob Sterenborg, 2006/11/07
- Re: Small doubt from a newbie :), Marco Berizzi, 2006/11/07
  - Re: Small doubt from a newbie :), utteerna, 2006/11/08
    - Re: Small doubt from a newbie :), Marco Berizzi, 2006/11/09
    - Re: Small doubt from a newbie :), utteerna, 2006/11/10
    - Re: Small doubt from a newbie :), Marco Berizzi, 2006/11/10
    - Re: Small doubt from a newbie :), utteerna, 2006/11/13
    - Re: Small doubt from a newbie :), Pollywog, 2006/11/10
nfq_get_timestamp fails, Ury Segal, 2006/11/06
"beep" on match, Erik Alberti, 2006/11/06
- Re: "beep" on match, Justin Schoeman, 2006/11/07
  - Re: "beep" on match, Arnt Karlsen, 2006/11/07
[ANNOUNCE] conntrackd-0.9.1 released, Pablo Neira Ayuso, 2006/11/06
bugzilla.netfilter.org problems, Alan Ezust, 2006/11/06
HowTo: Intercept every packet sent to TCP layer by IP layer and logging them in user space., will_u_tellmemore will_u_tellmemore, 2006/11/06
PPTP issue, Jason Neurohr, 2006/11/05
- Re: PPTP issue, Pascal Hambourg, 2006/11/07
- RE: PPTP issue, Jason Neurohr, 2006/11/08
Why the network is unreable?, , 2006/11/05
- RE: Why the network is unreable?, Rob Sterenborg, 2006/11/05
LVS breaking ip_nat_ftp (??), Antonio Forster, 2006/11/04
Allow few workstation to access internet but deny others by Mac address, Lawrence - Daltron, 2006/11/03
RE: Blocking Yahoo, lubasi, 2006/11/03
hashlimit bucket, woger151, 2006/11/03
- RE: hashlimit bucket, Pablo Sanchez, 2006/11/03
REF: Blocking Yahoo, lubasi, 2006/11/03
- RE: Blocking Yahoo, Steffen Heil, 2006/11/03
- Re: REF: Blocking Yahoo, Jasbir Khehra, 2006/11/03
- Re: REF: Blocking Yahoo, Mr. Ritter, 2006/11/03
Transparent splitting, lee nookx, 2006/11/02
- Re: Transparent splitting, Martijn Lievaart, 2006/11/02
odd issues with connections to external websites, Scott van Looy, 2006/11/02
- Re: odd issues with connections to external websites, Pascal Hambourg, 2006/11/02
iptables performance and Dual CPU, Monty Ree, 2006/11/01
conntrack -E -i not allowed?, Alan Ezust, 2006/11/01
- Re: conntrack -E -i not allowed?, Alan Ezust, 2006/11/02
  - Re: conntrack -E -i not allowed?, Pablo Neira Ayuso, 2006/11/07
    - Re: conntrack -E -i not allowed?, Alan Ezust, 2006/11/07
    - Re: conntrack -E -i not allowed?, Pablo Neira Ayuso, 2006/11/08
    - Re: conntrack -E -i not allowed?, Alan Ezust, 2006/11/09
    - Re: conntrack -E -i not allowed?, Pablo Neira Ayuso, 2006/11/09
    - Re: conntrack -E -i not allowed?, Alan Ezust, 2006/11/09
Explicit source port mapping, Andreas Micklei, 2006/11/01
- Re: Explicit source port mapping, Eric Leblond, 2006/11/01
  - Re: Explicit source port mapping, Andreas Micklei, 2006/11/01
- RE: Explicit source port mapping, Frank Bulk, 2006/11/01
  - Re: Explicit source port mapping, Andreas Micklei, 2006/11/01
Fwd: using netfilter for implementing ft-fcp, will_u_tellmemore will_u_tellmemore, 2006/11/01
Writing a POSTROUTING SNAT rule, Frank Bulk, 2006/11/01
INPUT and PORTS, plugthebox.net /dev/null, 2006/11/01
- RE: INPUT and PORTS, anisha.chandrasekaran, 2006/11/01
- RE: INPUT and PORTS, plugthebox.net /dev/null, 2006/11/01
- Re: RE: INPUT and PORTS, plugthebox.net /dev/null, 2006/11/01
  - Re: RE: INPUT and PORTS, Wakko Warner, 2006/11/01
- RE: RE: INPUT and PORTS, anisha.chandrasekaran, 2006/11/01
cooperation between connection tracking and traffic shaping, Yakov Lerner, 2006/11/01
- Re: cooperation between connection tracking and traffic shaping, Filip Sneppe, 2006/11/01
  - Re: cooperation between connection tracking and traffic shaping, Eric Leblond, 2006/11/01
    - Re: cooperation between connection tracking and traffic shaping, Yakov Lerner, 2006/11/02