search for: kozakai

...2.6.22 fix last change fix build warnings netem: static Add TC_LIB_DIR environment variable. ss: fix issues with signed inodes Thomas Graf (2): iproute2: support for goto/nop action and detached flag iproute2: Support IFF_LOWER_UP and IFF_DORMANT Yasuyuki KOZAKAI (1): Fix symbolic link to tc-bfifo.8 jamal (2): SAD info SPD info -- Stephen Hemminger <shemminger@linux-foundation.org> - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@vger.kernel.org More majordomo in...

Hi! The netfilter coreteam proudly presents: iptables version 1.3.7 The 1.3.7 version contains accumulated bugfixes to the last 1.3.6 version. This comes a bit earlier after the last release than usual because the endian annotations in 2.6.19 broke iptables compilation, which is fixed with this version. The ChangeLog is attached to this mail. Version 1.3.7 can be obtained from:

...eply sorry that it has taken that long, but my time to spend on netfilter is close to zero at this point (will increase in Q1/2007!) I'd like to also use this opportunity to thank the active developers, most notably Patrick McHardy, Pablo Neira, Jozsef Kadlecksik, Martin Josefsson and Yasuyuki Kozakai for their excellent work on the project. It's good to know that you can rely on other people during periods of absence. Also, a merry christmas and a happy new year to all netfilter/iptables developers, supporters and administrators. And a big thanks to http://noris.net/, the ISP funding all...

...ed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WORKSFORME ------- Additional Comments From yasuyuki.kozakai@toshiba.co.jp 2003-07-04 08:35 ------- Created an attachment (id=30) a bit of miss, so I don't mail to netfilter-devel ------- Additional Comments From laforge@netfilter.org 2003-08-19 12:25 ------- I cannot reproduce the problem with either iptables-1.2.7a, 1.2.8 or current CVS. Can you p...

...(probably endianness bug) Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: nf_conntrack AssignedTo: yasuyuki.kozakai@toshiba.co.jp ReportedBy: jan.oravec@6com.sk I have new connection tracking engine in kernel 2.6.16 -- nf_conntrack -- and the following rules in IPv4 iptables INPUT table: iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -m state --state INVALID -j DROP...

...lls existing connections Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: nf_conntrack AssignedTo: yasuyuki.kozakai@toshiba.co.jp ReportedBy: phelps@gnusto.com I'm trying to use the new netfilter nf_nat code in linux-2.6.20-rc3 and running into a minor issue: when I load the iptable_nat module, all existing connections stop working, as if the packets are being dropped. This is somewhat irritatin...

...in nf_conntrack_ipv6 with fragmented UDPv6 Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: critical Priority: P2 Component: nf_conntrack AssignedTo: yasuyuki.kozakai@toshiba.co.jp ReportedBy: berni@birkenwald.de Already reported on lkml and netfilter-devel a few days ago, one reply from Andrew Morton on lkml (http://thread.gmane.org/gmane.linux.kernel/480685) and no fix yet. I think this bug is a remote exploitable DoS issue, so pretty serious. Copy...

...: fix iptables-save (save numerically) [ Thomas Woerner ] - libipq: fix ipq_id_t definition on 'real' 64bit/64bit architectures [ Ryan Veety ] - libip6tc: fix ipv6_prefix_length endianness bugs [ Mikko Markus Torni ] - MASQUERADE target: don't accept negative port numbers [ Yasuyuki Kozakai ] - physdev match: fix new structure layout for kernel > 2.6.0-test8 [ Bart De Schuymer ] Changes from 1.2.8: - build plugins for connlimit, iprange, realm, CLASSIFY, CONNMARK, NETMAP [ Harald Welte ] - libip(6)tc: Speedup due to inceremental chain cache updates [ Harald Welte ] - recent ma...

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=48 ------- Additional Comments From tatonet@tiscali.it 2004-02-25 15:05 ------- I know that this is an old bug report, but it's still opened... If we save the size of each single fragment we have to face another problem: how should we re-fragment the packet if original fragments were partially or totally overlapped?

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Component|ip_conntrack |nf_conntrack ------- Additional Comments From laforge@netfilter.org 2006-02-14 09:05 MET ------- ipv6 conntrack is