search for: coreteam

Hi! Thanks to Eric Leblond and Arturo Borrero who have now become emeritus members of the coreteam. Eric Leblond joined the coreteam in 2012 for his continuous contributions to the project since 2005 with a particular interest in the nfnetlink_* subsystems that allow to send packets and logs to user space, as well as to nftables. Eric Leblond was one of the main organizers of NFWS 2008 in Paris...

Hi everyone, The Netfilter coreteam PGP key 0xAB4655A126D292E4 expired on November 17th, 2020. Hence, we have generated a new PGP key 0xD55D978A8A1420E4. For more information, please visit: https://www.netfilter.org/about.html#gpg In accordance with good key management practices, we have also generated a revocation certificates for...

The netfilter coreteam presents: iptables version 1.4.4 the iptables release for the 2.6.30 kernel. Changes include: - support for the new features in the 2.6.30 kernel, namely the cluster match and persistent multi-range NAT mappings - support for the ipset set match and target - various minor fixes and cle...

The netfilter coreteam presents: iptables version 1.4.3 the iptables release for the 2.6.29 kernel. It has been some time since the last release and we've had a lot of changes all over the place. Besides the usual fixes and cleanups, we have: - numerous documentation updates from Jan Engelhardt and others -...

Dear Coreteam, I am getting closer to have some R-packages with interface to CoCo. I use something like package.skeleton("CoCo", list = ls(all.names = TRUE)) to also get my functions beginning with "." into the package. Functions with names starting with "." are put OK into the...

...and it needs some further manual cleanup after that transformation process. This needs to be done for the english master documents as well as for the translations.=20 If you are familiar with working with SGML/XML and the respective toolchain and willing to help us in that matter, please contact coreteam@netfilter.org. 2) Development of a mirror-consistency-checking script It is important to us, that the netfilter.org mirrors always have the latest up-to-date information on them. To guarantee this, we would like to have a script that can be run as cron job. That script would recursively downlo...

--DKU6Jbt7q3WqK7+M Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable My fellow netfilter users. Please don't misunderstand this posting, but the amount of simple end-user questions sent to the coreteam@netfilter.org address is increasing all the time. The coreteam has _NOT_ the time to respond to easy configuration or usage questions from the end user. Please remember, we're doing our work on netfilter for free in our spare ti= me.=20 As soon as you start sending simple questions to the co...

Hi! The netfilter coreteam proudly presents: iptables version 1.3.7 The 1.3.7 version contains accumulated bugfixes to the last 1.3.6 version. This comes a bit earlier after the last release than usual because the endian annotations in 2.6.19 broke iptables compilation, which is fixed with this version. The ChangeLog is...

The netfilter coreteam presents: iptables version 1.4.10 the iptables release for the 2.6.39 kernels. Due to some mistakes on my side we didn't have a release for longer than expected, so this contains a rather large number of changes. Changes include: - various bugfixes, cleanups and documentation updates -...

...fixed with this patch. Vendor Statement: Red Hat: All of the 2.4.20-based kernels shipped by Red Hat already contain the patch and are not vulnerable to this issue. Others: unknown Credits: The problem was found, and the fix implemented by the Netfilter Core Team. Contact: coreteam@netfilter.org diff -urpN --exclude TAGS -X /home/rusty/devel/kernel/kernel-patches/curren= t-dontdiff --minimal linux-2.4.21-pre7/net/ipv4/netfilter/ip_nat_helper.c w= orking-2.4.21-pre7-sackadjust/net/ipv4/netfilter/ip_nat_helper.c --- linux-2.4.21-pre7/net/ipv4/netfilter/ip_nat_helper.c 2003-04-...

...esent you, you will need to trust this CA. The same CA has signed all certificates of netfilter.org, including SMTP-TLS and https://lists.netfilter.org/. The CA certificate is available for download at http://www.gnumonks.org/static/gnumonks-CA.crt If you have any questions, please contact us at coreteam@netfilter.org. Thanks for your interest, Harald --=20 - Harald Welte / laforge@netfilter.org http://www.netfilter.org/ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=...

...held in Seville, Spain. This year the workshop covers two sections: - Users conference from 3th to 4th Oct. - Developers workshop from 5th to 6th Oct, plus two extra days of hacking on code days from 7th to 8th Oct. The invited participants of the developers workshop are the current netfilter coreteam members and about 10 developers. If you are involved in any kind of netfilter development, feel free to apply. We've still got a limited number of invitations. The event will take place at the School of Computer Engineering, located at Reina Mercedes' Campus in Sevilla. It is a nice set...

The netfilter coreteam proudly presents: iptables version 1.4.1 The header resync turned out to be unproblematic, changes since -rc3 include fixes for iptables-save output of the owner match, support for revision 1 of the addrtype match, more manpage updates and some sparse fixes. For people updating from 1.4.0,...

The netfilter coreteam presents: iptables version 1.4.1.1 This release is a pure bugfix release for regressions reported against 1.4.1, fixing some mainly cosmetic problems in the ruleset listing, installation problems with --disable-shared and non-working --src-range/--dst-range parameters in the iprange match....

The netfilter coreteam presents: iptables version 1.4.2-rc1 The first release candidate for iptables 1.4.2. The major change in this release are some scalability improvements from Jesper Dangaard Brouer that should greatly increase ruleset parsing performance with many chains. Besides that we have some minor bugf...

Hi! We're happy to announce the next Netfilter Workshop in the series. This year it will take place in Seville, Spain. We will provide you up to date information through our website: http://workshop.netfilter.org/2010/ On behalf of the Netfilter coreteam, Pablo!

...our FTP servers." So netfilter.org will also be shutting down FTP services by June 12th 2020. As an alternative, you can still reach the entire netfilter.org software repository through HTTP at this new location: https://netfilter.org/pub/ Thanks. Pablo, on behalf of the Netfilter coreteam. [1] https://www.kernel.org/shutting-down-ftp-services.html

The netfilter coreteam presents: iptables version 1.4.9 the iptables release for the 2.6.35 kernel. Changes include: - support for the LED target, which hadn't been merged so far because the kernel module had some bugs - a new version of the set extension for the upcoming release supporting IPv6 - negati...

Hi gurus, I need a way to do SNAT based on source mac before routing. This is because hosts attached to my gateway can have duplicate IP addresses, and I have to distinguish over them. I tried to use the nat tool that comes with iproute2, but this force to make a mapping only address to address, and I wanted to do it by mark (I also use iptables to do that). For example, I tried to

--5uhzMJlTksuFv+PE Content-Type: multipart/mixed; boundary="9A1A73/U17WN0PFw" Content-Disposition: inline --9A1A73/U17WN0PFw Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi! The netfilter coreteam proudly presents: iptables version 1.2.9 1.2.9 is (like most other 1.2.x releases) a maintainance release, containing lots of bugfixes that have accumulated over time. The ChangeLog is attached to this mail. Version 1.2.9 can be obtained from: http://www.netfilter.org/files/iptables-1.2.9.ta...