Netfilter / IPtables (thread)

Enabling internal connections to transparently connect via external IP address, Chris Willis, 2007/05/31
- Re: Enabling internal connections to transparently connect via external IP address, Robby Workman, 2007/05/31
syn DDoS attack solution, Bgs, 2007/05/31
- Re: syn DDoS attack solution, R. DuFresne, 2007/05/31
- RE: syn DDoS attack solution, Ric Messier, 2007/05/31
  - Re: syn DDoS attack solution, Tony.Ho, 2007/05/31
Need to get source and destination IP?, amna bilal, 2007/05/31
Welcome to the Mailing List., bilal . amna, 2007/05/31
Confirm your subscription, bilal . amna, 2007/05/31
Looking for feedback on our GUI, Martin McKeay, 2007/05/30
NAT rules for VPN only allowing one user?, Neil Aggarwal, 2007/05/29
- Re: NAT rules for VPN only allowing one user?, Jan Engelhardt, 2007/05/29
  - RE: NAT rules for VPN only allowing one user?, Neil Aggarwal, 2007/05/30
    - Re: NAT rules for VPN only allowing one user?, Michael Gale, 2007/05/30
    - RE: NAT rules for VPN only allowing one user?, Martin McKeay, 2007/05/30
    - RE: NAT rules for VPN only allowing one user?, Neil Aggarwal, 2007/05/30
- Re: NAT rules for VPN only allowing one user?, Martijn Lievaart, 2007/05/30
  - Re: NAT rules for VPN only allowing one user?, Gregory Carter, 2007/05/30
    - RE: NAT rules for VPN only allowing one user?, Neil Aggarwal, 2007/05/30
- RE: NAT rules for VPN only allowing one user?, Martin McKeay, 2007/05/30
[Announce] NuFW 2.2 is available, Eric Leblond, 2007/05/29
condition match: incompatible pointer types, Andrew Schulman, 2007/05/29
time match: build errors with kernel 2.6.21, Andrew Schulman, 2007/05/29
T1 router and multiple public ips, jamil egdemir, 2007/05/29
- RE: T1 router and multiple public ips, Paul Blondé, 2007/05/29
Port forwarding without masquerading..???, dummy, 2007/05/29
- Re: Port forwarding without masquerading..???, Pascal Hambourg, 2007/05/29
Newbies questions compiling uClinux-dist-20070130 with m68k-uclinux-tools-20061214, Francisco Perea, 2007/05/29
-m owner and INPUT chain, Ernest Davnis, 2007/05/28
- Re: -m owner and INPUT chain, Fernando R. Durso, 2007/05/28
iptables 1.3.7 doesn't properly test for condition patch, Andrew Schulman, 2007/05/28
- Re: iptables 1.3.7 doesn't properly test for condition patch, Andrew Schulman, 2007/05/29
  - Re: iptables 1.3.7 doesn't properly test for condition patch, Jan Engelhardt, 2007/05/30
    - Re: iptables 1.3.7 doesn't properly test for condition patch, Pablo Neira Ayuso, 2007/05/30
DNAT rule requires extra firewall pinhole, Jeff Weber, 2007/05/25
- Re: DNAT rule requires extra firewall pinhole, Jan Engelhardt, 2007/05/26
- Re: DNAT rule requires extra firewall pinhole, Pascal Hambourg, 2007/05/26
Dynamic kernel module load, Paul Harlow, 2007/05/24
- Re: Dynamic kernel module load, Jan Engelhardt, 2007/05/24
- Re: Dynamic kernel module load, Martijn Lievaart, 2007/05/24
- RE: Dynamic kernel module load, Paul Blondé, 2007/05/24
[ANNOUNCE] Release conntrack-tools 0.9.3, Pablo Neira Ayuso, 2007/05/23
Queued packet in user space: network order or host order?, Michael Ransburg, 2007/05/23
Rules to block traffic form an interface to a netblock, trellmor, 2007/05/23
- Re: Rules to block traffic form an interface to a netblock, Jan Engelhardt, 2007/05/24
[ANNOUNCE] Release libnfnetlink_conntrack, Pablo Neira Ayuso, 2007/05/22
Bridge Transparent Proxy, Jon Tim, 2007/05/22
- Re: Bridge Transparent Proxy, Robert LeBlanc, 2007/05/22
  - Re: Bridge Transparent Proxy, Pascal Hambourg, 2007/05/22
    - Re: Bridge Transparent Proxy, Jon Tim, 2007/05/23
    - Re: Bridge Transparent Proxy, Gáspár Lajos, 2007/05/23
  - Re: Bridge Transparent Proxy, Grant Taylor, 2007/05/22
    - Re: Bridge Transparent Proxy, Robert LeBlanc, 2007/05/22
    - Re: Bridge Transparent Proxy, Grant Taylor, 2007/05/22
    - Re: Bridge Transparent Proxy, Pascal Hambourg, 2007/05/22
    - Re: Bridge Transparent Proxy, Grant Taylor, 2007/05/22
    - NAT addresses - RFC or tradition?, Paul Blondé, 2007/05/22
    - Re: NAT addresses - RFC or tradition?, Andre Guimarães, 2007/05/22
    - Re: NAT addresses - RFC or tradition?, Tim Evans, 2007/05/22
    - Re: NAT addresses - RFC or tradition?, Marius-Iulian Corici, 2007/05/22
    - Re: NAT addresses - RFC or tradition?, Leonardo Rodrigues Magalhães, 2007/05/22
    - Re: NAT addresses - RFC or tradition?, Grant Taylor, 2007/05/22
    - Re: Bridge Transparent Proxy, Petr Pisar, 2007/05/22
    - Re: Bridge Transparent Proxy, Pascal Hambourg, 2007/05/22
    - Re: Bridge Transparent Proxy, Grant Taylor, 2007/05/22
    - Re: Bridge Transparent Proxy, Robert LeBlanc, 2007/05/22
simple question, Filka Michal, 2007/05/22
- Message not available
  - RE: simple question, Filka Michal, 2007/05/23
problems applying ipset patch, Andrea, 2007/05/22
ip_conntrack table full after upgrade from RHEL3 (2.4/1.2.8) to RHEL4U4 (2.6.9/1.2.11), Alex Tang, 2007/05/21
- Re: ip_conntrack table full after upgrade from RHEL3 (2.4/1.2.8) to RHEL4U4 (2.6.9/1.2.11), Pascal Hambourg, 2007/05/22
  - RE: ip_conntrack table full after upgrade from RHEL3 (2.4/1.2.8) to RHEL4U4 (2.6.9/1.2.11), Paul Blondé, 2007/05/22
URL Logging, Muzinich, Mike, 2007/05/21
- Re: URL Logging, Jan Engelhardt, 2007/05/22
- Re: URL Logging, Martijn Lievaart, 2007/05/23
Conntrack rule timeout problem, Pat Riehecky, 2007/05/21
- Re: Conntrack rule timeout problem, Gáspár Lajos, 2007/05/23
  - Re: Conntrack rule timeout problem, Pat Riehecky, 2007/05/23
    - Re: Conntrack rule timeout problem, Gáspár Lajos, 2007/05/23
    - Re: Conntrack rule timeout problem, Pat Riehecky, 2007/05/24
using packet filtering to discover TCP end-to-end latency, Rohit Grover, 2007/05/21
- Re: using packet filtering to discover TCP end-to-end latency, Martijn Lievaart, 2007/05/23
Logging NAT Translations, Craig Bernstein, 2007/05/20
- Re: Logging NAT Translations, Petr Pisar, 2007/05/20
- Re: Logging NAT Translations, Jan Engelhardt, 2007/05/22
pptp and iptables, Tiron Adrian, 2007/05/20
Re: Help with DOS attack, Jonny K, 2007/05/20
- RE: Help with DOS attack, Joris Dobbelsteen, 2007/05/20
  - Re: Help with DOS attack, Jonny K, 2007/05/20
no connection, William Perry, 2007/05/19
redirect 127.0.0.1:25 -> 127.0.0.1:2000, Alex Tang, 2007/05/18
- Re: redirect 127.0.0.1:25 -> 127.0.0.1:2000, Alex Tang, 2007/05/18
- Re: redirect 127.0.0.1:25 -> 127.0.0.1:2000, Alex Tang, 2007/05/18
  - Re: redirect 127.0.0.1:25 -> 127.0.0.1:2000, Jan Engelhardt, 2007/05/23
iptables and poptop, Tiron Adrian, 2007/05/18
problem when compiling lbnfnetlink, Filka Michal, 2007/05/18
- Re: problem when compiling lbnfnetlink, Eric Leblond, 2007/05/18
[solved?] Re: UDP packets are not being forwarded to pc on the local net., k bah, 2007/05/17
TCP RST vulnerability - handling question, Mike C, 2007/05/17
- RE: TCP RST vulnerability - handling question, Paul Blondé, 2007/05/17
- Re: TCP RST vulnerability - handling question, Mike C, 2007/05/17
  - Re: TCP RST vulnerability - handling question, Jozsef Kadlecsik, 2007/05/18
connection refused trying to bind AF_INET to AF_NETLINK/NETFILTER socket, Sussman, Scott, 2007/05/17
iptables doesn't keep chain list after reboot, TheNokia, 2007/05/17
- Re: iptables doesn't keep chain list after reboot, Benjamin RIOU, 2007/05/17
- RE: iptables doesn't keep chain list after reboot, Paul Blondé, 2007/05/17
- iptables doesn't keep chain list after reboot, TheNokia, 2007/05/21
  - RE: iptables doesn't keep chain list after reboot, Paul Blondé, 2007/05/22
UDP packets are not being forwarded to pc on the local net., k bah, 2007/05/16
Match specific netbios flag?, k bah, 2007/05/16
- Re: Match specific netbios flag?, Jorge Davila, 2007/05/16
- Re: Match specific netbios flag?, k bah, 2007/05/16
Looking for a how-to type battle plan for 2 physical subnets and an openvpn tunnel., Bill Ries-Knight, 2007/05/16
- SPAM(6.0) Re: Looking for a how-to type battle plan for 2 physical subnets and an openvpn tunnel., patric, 2007/05/16
- Re: Looking for a how-to type battle plan for 2 physical subnets and an openvpn tunnel., Jorge Davila, 2007/05/16
- Re: Looking for a how-to type battle plan for 2 physical subnets and an openvpn tunnel., R. DuFresne, 2007/05/29
Packets lost, Vasantha Kumar Puttappa, 2007/05/16
- Re: Packets lost, Gáspár Lajos, 2007/05/16
  - Re: Packets lost, Vasantha Kumar Puttappa, 2007/05/17
    - Re: Packets lost, Gáspár Lajos, 2007/05/21
RE: is it possible to block ip packets that contains experimental tcp options ?, Marc Cozzi, 2007/05/16
- RE: is it possible to block ip packets that contains experimental tcp options ?, Jan Engelhardt, 2007/05/16
- RE: is it possible to block ip packets that contains experimentaltcp options ?, Paul Blondé, 2007/05/17
- RE: is it possible to block ip packets that contains experimental tcp options ?, Marc Cozzi, 2007/05/17
  - RE: is it possible to block ip packets that contains experimentaltcp options ?, Paul Blondé, 2007/05/17
  - RE: is it possible to block ip packets that contains experimental tcp options ?, Glenn Terjesen, 2007/05/21
    - RE: is it possible to block ip packets that contains experimental tcp options ?, Glenn Terjesen, 2007/05/21
    - Re: is it possible to block ip packets that contains experimental tcp options ?, Pascal Hambourg, 2007/05/21
    - Re: is it possible to block ip packets that contains experimental tcp options ?, Glenn Terjesen, 2007/05/22
is it possible to block ip packets that contains experimental tcp options ?, Glenn Terjesen, 2007/05/16
Unexpected UDP behavior using ipt_recent, Roger Venable, 2007/05/15
SPAM(6.2) mini-hack for country-based filter., patric, 2007/05/15
- Re: mini-hack for country-based filter., patric, 2007/05/21
IPSET iptree problem, Łukasz Nierychło, 2007/05/15
time /date server, MAPASA Informatica - Assistenza Tecnica, 2007/05/15
12 interface FTP server - Possible routing problem - Please help, Sumit Malik, 2007/05/14
Async processing using NetFilters, Lokesh, 2007/05/14
netfilter load sharing, Thomas Fragstein, 2007/05/14
- Re: netfilter load sharing, Jan Engelhardt, 2007/05/14
Questions about DHCP firewall rules, Nicholas Kline, 2007/05/11
- Re: Questions about DHCP firewall rules, Anatoly Y., 2007/05/12
- Questions about DHCP firewall rules, Nicholas Kline, 2007/05/16
  - Re: Questions about DHCP firewall rules, Elvir Kuric, 2007/05/17
Re: Firewall L7, Stephan Higuti, 2007/05/11
- Message not available
  - Re: Firewall L7, Stephan Higuti, 2007/05/14
    - Re: Firewall L7, Fernando R. Durso, 2007/05/14
    - Re: Firewall L7, Jan Engelhardt, 2007/05/14
persistent packet marking for use in VPN creation., Sven Agnew, 2007/05/11
- Re: persistent packet marking for use in VPN creation., Gregory Carter, 2007/05/11
Policy targets..., Gáspár Lajos, 2007/05/11
- Re: Policy targets..., Pedro Gonçalves, 2007/05/11
  - Re: Policy targets..., Gáspár Lajos, 2007/05/11
    - Message not available
    - Re: Policy targets..., Gáspár Lajos, 2007/05/11
    - Message not available
    - Re: Policy targets..., Gáspár Lajos, 2007/05/15
- Re: Policy targets..., Petr Pisar, 2007/05/15
  - Re: Policy targets..., Gáspár Lajos, 2007/05/21
how to return a packet back to netfilter, gcho, 2007/05/10
Fw: conntrack and SIP, Ethy H. Brito, 2007/05/10
delete NAT conntrack entry., ???, 2007/05/10
- Re: delete NAT conntrack entry., Jan Engelhardt, 2007/05/10
  - Re: delete NAT conntrack entry., Wakko Warner, 2007/05/10
    - Re: delete NAT conntrack entry., Jan Engelhardt, 2007/05/10
    - Re: delete NAT conntrack entry., Wakko Warner, 2007/05/10
Default deny rule, Gopinath, 2007/05/10
- Re: Default deny rule, Gáspár Lajos, 2007/05/11
  - Re: Default deny rule, Gopinath, 2007/05/14
    - Re: Default deny rule, Gáspár Lajos, 2007/05/14
    - Message not available
    - Re: Default deny rule, Gáspár Lajos, 2007/05/21
    - Re: Default deny rule, Gopinath, 2007/05/28
    - Re: Default deny rule, Gáspár Lajos, 2007/05/29
    - Re: Default deny rule, Gopinath, 2007/05/29
    - Message not available
    - Re: Default deny rule, Gopinath, 2007/05/31
Two internet connection in a gateway server howto., BipinDas, 2007/05/10
- Re: Two internet connection in a gateway server howto., Denis, 2007/05/14
Filter a TCP stream based on a text appearing in the initial IP packet of the stream, Michael Ransburg, 2007/05/10
- Re: Filter a TCP stream based on a text appearing in the initial IP packet of the stream, Jan Engelhardt, 2007/05/10
  - Re: Filter a TCP stream based on a text appearing in the initial IP packet of the stream, Pascal Hambourg, 2007/05/10
    - Re: Filter a TCP stream based on a text appearing in the initial IP packet of the stream, Jan Engelhardt, 2007/05/10
[2.6.21 linux kernel] NAT on sparc64, BERTRAND Joël, 2007/05/10
RE: Wireless Login Page, Brent Wilkinson, 2007/05/10
NAT "triangulation" and already opened nat port not reachable, Andres Paglayan, 2007/05/10
Re: Problem with connection tracking in IPtables!!, Nandan Bhat, 2007/05/10
- Problem with connection tracking in IPtables!!, Ramsurrun Visham, 2007/05/10
  - Re: Problem with connection tracking in IPtables!!, Yasuyuki KOZAKAI, 2007/05/10
- Re: Problem with connection tracking in IPtables!!, Ramsurrun Visham, 2007/05/11
  - Re: Problem with connection tracking in IPtables!!, Yasuyuki KOZAKAI, 2007/05/14
iptables NAT routing issues, Bas Verhoeven, 2007/05/10
- Re: iptables NAT routing issues, Maximilian Wilhelm, 2007/05/10
- Re: iptables NAT routing issues, Jan Engelhardt, 2007/05/10
  - Re: iptables NAT routing issues, Pascal Hambourg, 2007/05/10
    - Re: iptables NAT routing issues, Jan Engelhardt, 2007/05/10
    - Re: iptables NAT routing issues, Bas Verhoeven, 2007/05/10
    - Re: iptables NAT routing issues, Pascal Hambourg, 2007/05/10
    - Re: iptables NAT routing issues, Bas Verhoeven, 2007/05/10
    - Re: iptables NAT routing issues, Pascal Hambourg, 2007/05/10
    - Re: iptables NAT routing issues, Bas Verhoeven, 2007/05/10
    - Re: iptables NAT routing issues, Pascal Hambourg, 2007/05/10
    - Re: iptables NAT routing issues, Maximilian Wilhelm, 2007/05/10
Two NICs, same network..., semi linux, 2007/05/10
- Re: Two NICs, same network..., David Lang, 2007/05/10
  - Re: Two NICs, same network..., semi linux, 2007/05/10
    - Re: Two NICs, same network..., Sébastien CRAMATTE, 2007/05/10
    - Re: Two NICs, same network..., David Lang, 2007/05/10
    - Re: Two NICs, same network..., Mark L. Wise, 2007/05/10
    - Re: Two NICs, same network..., semi linux, 2007/05/24
    - Re: Two NICs, same network..., semi linux, 2007/05/31
    - Re: Two NICs, same network..., Pascal Hambourg, 2007/05/31
'tcpmss' match for ip6tables ?, Pascal Hambourg, 2007/05/10
IPset and IPv6 support, husnu demir, 2007/05/10
- Re: IPset and IPv6 support, Jozsef Kadlecsik, 2007/05/10
  - IPset included in distro, Randall C Grimshaw, 2007/05/10
    - Re: IPset included in distro, Eric Leblond, 2007/05/10
    - Re: IPset included in distro, Elvir Kuric, 2007/05/10
Unable to see entries in ip_conntrack file!!, Ramsurrun Visham, 2007/05/10
[OT] iptables and 802.1x authenticator, John A. Sullivan III, 2007/05/10
Handling queued packets?, Michael Ransburg, 2007/05/10
DNAT and local hosts, Pieter De Wit, 2007/05/10
- Re: DNAT and local hosts, Jan Engelhardt, 2007/05/10
  - RE: DNAT and local hosts, Pieter De Wit, 2007/05/10
    - Re: DNAT and local hosts, Ray Leach, 2007/05/10
    - RE: DNAT and local hosts, Pieter De Wit, 2007/05/10
    - Re: DNAT and local hosts, Ray Leach, 2007/05/10
    - RE: DNAT and local hosts, Pieter De Wit, 2007/05/10
    - RE: DNAT and local hosts, Jan Engelhardt, 2007/05/10
    - Re: DNAT and local hosts, Jan Engelhardt, 2007/05/10
- Re: DNAT and local hosts, Pascal Hambourg, 2007/05/10
  - Re: DNAT and local hosts, Pascal Hambourg, 2007/05/10
- DNAT and local hosts, Pieter De Wit, 2007/05/10
- DNAT and local hosts, Pieter De Wit, 2007/05/10
[ANNOUNCE] Netfilter Workshop 2007 in Karlsruhe, Germany, Pablo Neira Ayuso, 2007/05/10
- Re: [ANNOUNCE] Netfilter Workshop 2007 in Karlsruhe, Germany, Pablo Neira Ayuso, 2007/05/10
Re: Simulating a "bad" connection., Andy Furniss, 2007/05/10
- Re: Simulating a "bad" connection., Tommy W, 2007/05/10
Re: Advanced routing problem, Jaap Winius, 2007/05/10
- Re: Advanced routing problem -- solution, Jaap Winius, 2007/05/10