search for: udplite

https://bugzilla.netfilter.org/show_bug.cgi?id=1448 Bug ID: 1448 Summary: SNAT/DNAT/Masquerading not working for UDPLite protocol Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: normal Priority: P5 Component: NAT Assignee: netfilter-buglog at lists.ne...

...ing able > to run using only ED25519 makes tinc very appealing for this platform, and > saves tons of space for more nodes or other things. > > Great release and thanks for your work! I am going to start fiddling with this release over the next quarter as well. * Would anyone care for udplite support? Adding it is easy (mostly done already), but there isn't a whole lot of point (aside from my research into what protocols can be carried end to end in the ipv6 era). * There MAY be some linux kernel work into a better virtual tunneling device coming up. * I am pretty hot on the &quot...

Hi! The netfilter project presents another development release of the conntrack-tools that includes support for all the protocol helpers available in 2.6.30 that were missing so far (SCTP, UDPlite, DCCP and GRE). The daemon updates includes a fix for a memory leak that can be triggered under heavy load and if you set a hashtable in user-space that is smaller than the one in the kernel. Moreover, it adds initial support for DCCP and SCTP state-synchronization. Please, see changelog attached...

...with both iptables-restore and ip6tables-restore. This option has no effect in ip6tables and ip6tables-restore. Also, the error message is always a inconsistent, telling something else is the problem. In my case: iptables-restore v1.8.2 (nf_tables): multiport needs `-p tcp', `-p udp', `-p udplite', `-p sctp' or `-p dccp' -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20190422/eead5bed/attachment.html&gt...

...ipv6 rules. Surely it should just skip them? I also ran into a baffling error message for a rule that uses the multiport module, and couldn't find a workaround or even what the real problem was: iptables-translate-restore v1.8.2 (nf_tables): multiport needs `-p tcp', `-p udp', `-p udplite', `-p sctp' or `-p dccp' Here's an attempt to manually translate the line in question: bash# iptables-translate -4 -A protect-re -m multiport -p udp -s 10.0.0.0/24 --ports 161,514 -j ACCEPT nft # -4 -A protect-re -m multiport -p udp -s 10.0.0.0/24 --ports 161,514 -j ACCEPT bas...

...assertion when using non-equal comparison, eg. nft add rule filter input ip protocol != icmp counter ^^ * Range inversions, eg. nft add rule filter input != 192.168.0.1-192.168.0.10 ^^ * Fix 'meta iiftype ether'. * Fix the udplite selector, due to missing code in the tokenizer. Ongoing works ============= There are several open fronts in terms of development: * Full logging support for all the supported families (ip, ip6, arp, bridge and inet). * Masquerading support. * Better reject support, which allows you to indic...

https://bugzilla.netfilter.org/show_bug.cgi?id=1057 Bug ID: 1057 Summary: Allow for multiple protocols to be specified in a rule Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at

...parse 'syslog' as a tcp port The problem is that syslog is only defined as a UDP service in /etc/services, and not as a TCP service. I could think of two options for how to resolve this: 1. Try TCP first, and if that fails try UDP, but then presumably that would mean also trying SCTP and UDPLITE for completeness. 2. Allow a protocol to be specified. 1. has disadvantages in that it doesn't appear to fit within the existing code structure, and also if at some time in the future a service name had different port numbers for different protocols it wouldn't work. 2. seems to work but...

...9;> Within the rule there are a wide variety of elements allowed, which do protocol specific matching. Supported protocols currently include 'mac', 'arp', 'rarp', 'ip', 'ipv6', 'tcp/ip', 'icmp/ip', 'igmp/ip', 'udp/ip', 'udplite/ip' 'esp/ip', 'ah/ip', 'sctp/ip', 'tcp/ipv6', 'icmp/ipv6', 'igmp/ipv6', 'udp/ipv6', 'udplite/ipv6', 'esp/ipv6', 'ah/ipv6', 'sctp/ipv6'. Each protocol defines what is valid inside the <rule> element, th...

...| 4 +-- include/net/llc_conn.h | 4 +-- include/net/llc_s_ev.h | 2 +- include/net/netrom.h | 8 +++--- include/net/scm.h | 14 +++++----- include/net/udplite.h | 2 +- include/net/x25.h | 8 +++--- include/net/xfrm.h | 18 ++++++------- include/video/newport.h | 12 ++++----- net/appletalk/atalk_proc.c | 4 +...

...| 4 +-- > include/net/llc_conn.h | 4 +-- > include/net/llc_s_ev.h | 2 +- > include/net/netrom.h | 8 ++--- > include/net/scm.h | 14 ++++---- > include/net/udplite.h | 2 +- > include/net/x25.h | 8 ++--- > include/net/xfrm.h | 18 +++++----- > include/uapi/linux/atm.h | 4 +-- > include/uapi/linux/atmsap.h...

On 05/27/2014 02:46 AM, Brian Rak wrote: > Make sure you have: > > /proc/sys/net/bridge/bridge-nf-call-iptables = 1 That doesn't make sense. bridge-nf-call-iptables controls whether or not traffic going across a Linux host bridge device will be sent through iptables, but the rules created by nwfilter are applied to the "vnetX" tap devices that connect the guest to the

With pleasure we announce the release of tinc version 1.1pre11. Here is a summary of the changes: * Added a "network" command to list or switch networks. * Switched to Ed25519 keys and the ChaCha-Poly1305 cipher for the new protocol. * AutoConnect is now a boolean option, when enabled tinc always tries to keep at least three meta-connections open. * The new protocol now

With pleasure we announce the release of tinc version 1.1pre11. Here is a summary of the changes: * Added a "network" command to list or switch networks. * Switched to Ed25519 keys and the ChaCha-Poly1305 cipher for the new protocol. * AutoConnect is now a boolean option, when enabled tinc always tries to keep at least three meta-connections open. * The new protocol now

On Wed, Oct 10, 2018 at 01:54:33PM -0500, Segher Boessenkool wrote: > It would be great to hear from kernel people if it works adequately for > what you guys want it for :-) Sure, ping me when you have the final version and I'll try to build gcc with it and do some size comparisons. Thx. -- Regards/Gruss, Boris. Good mailing practices for 400: avoid top-posting and trim the

On Wed, Oct 10, 2018 at 01:54:33PM -0500, Segher Boessenkool wrote: > It would be great to hear from kernel people if it works adequately for > what you guys want it for :-) Sure, ping me when you have the final version and I'll try to build gcc with it and do some size comparisons. Thx. -- Regards/Gruss, Boris. Good mailing practices for 400: avoid top-posting and trim the

Hi All, I followed the instructions here at http://bderzhavets.wordpress.com/2009/06/10/setup-fedora-11-pv-domu-at-xen-3-4-1-dom0-kernel-2-6-30-rc6-tip-on-top-of-fedora-11/ However, when I do a "make menuconfig", I cannot see any XEN related configuration options. What am I missing? Thank you. Mr. Teo En Ming Dip(Mechatronics Engineering) BEng(Hons)(Mechanical Engineering)