similar to: [ANNOUNCE] iptables 1.4.21 release

Hi! The Netfilter project proudly presents: iptables 1.6.0 This release includes accumulated fixes and enhancements for the following matches: * ah * connlabel * cgroup * devgroup * dst * icmp6 * ipcomp * ipv6header * quota * set * socket * string and targets: * CT * REJECT * SET * SNAT * SNPT,DNPT * SYNPROXY * TEE We also got rid of the very very old MIRROR and SAME targets and the

Hello from ealier 6.0 there is problem with synproxy in pf filter: this one 6.1-PRERELEASE #2: Wed Mar 15 02:02:37 MSK 2006 pf.conf just with single rule pass in quick on lo0 proto tcp from any to any port 22 flags S/SA synproxy state result telnet 127.0.0.1 22 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. and it's hangs pfctl -s rules -v No ALTQ support in

https://bugzilla.netfilter.org/show_bug.cgi?id=1054 Bug ID: 1054 Summary: SYNPROXY Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: kernel Assignee: pablo at netfilter.org Reporter:

high everyone,( in pariticular Max :-)) The configuration line in my pf.conf is: pass in quick on lo0 proto tcp from any to any port 21 flags S/SA synproxy state But: the connection is established, but the control did not seams to pass to the ftpd Sincerely yours Zhouyi Zhou

high everyone pass in quick on lo0 proto tcp from any to any port 21 flags S/SA synproxy state the connection is established, but the control did not seams to pass to the ftpd

Hi! The Netfilter project proudly presents: libnftnl 1.2.7 libnftnl is a userspace library providing a low-level netlink programming interface (API) to the in-kernel nf_tables subsystem. This library is currently used by nftables. This release contains fixes only: * Avoid potential use-after-free when clearing set's expression list * Avoid misc buffer overflows in attribute

Hi! The Netfilter project proudly presents: libnftnl 1.1.4 libnftnl is a userspace library providing a low-level netlink programming interface (API) to the in-kernel nf_tables subsystem. The library libnftnl has been previously known as libnftables. This library is currently used by nftables. See ChangeLog that comes attached to this email for more details. You can download it from:

https://bugzilla.netfilter.org/show_bug.cgi?id=1104 Bug ID: 1104 Summary: Use close on exec flags instead of fcntl Product: iptables Version: CVS (please indicate timestamp) Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: iptables Assignee:

Network stopped just out of the blue leaving this backtrace After this or during this my network switch just stopped working ang got stuck. Maybe the switch made the problem? Thanks, Eliezer Feb 1 04:07:15 localhost kernel: ------------[ cut here ]------------ Feb 1 04:07:15 localhost kernel: WARNING: at net/sched/sch_generic.c:261 dev_watchdog+0x26d/0x280() (Not tainted) Feb 1 04:07:15

Hi! The Netfilter project proudly presents: nftables 1.1.0 ... after a release cycles of 8 months. This release contains mostly fixes, listed in no particular order: - Restore compatibility set element dump with <= 0.9.8 add element t s { 23 counter packets 10 bytes 20 timeout 10s } add element t s { 42 timeout 10s counter packets 10 bytes 20 } - Disallow ifname less than

Hi! The Netfilter project proudly presents: iptables 1.6.2 iptables is the userspace command line program used to configure the Linux 2.4.x and later packet filtering ruleset. It is targeted towards system administrators. This update contains accumulated bugfixes, a few new extensions and lots of translations via iptables-translate to ease migration to nftables. See ChangeLog that comes

Hi! The Netfilter project proudly presents: libnetfilter_conntrack 1.0.8 libnetfilter_conntrack is a userspace library providing a programming interface (API) to the in-kernel connection tracking state table. This library is currently used by conntrack-tools among many other applications. See ChangeLog that comes attached to this email for more details. You can download it from:

Dear All, I am a student enrolled google summer code 2007. My job is to write security regression testsuites for FreeBSD under the guidance of my mentor Dr. Robert Watson. Under his encourage, I write following request for comments RFC :-) ////////////////////////////////////////////////////////////// What I plan to do: 1) to test the stability of Mandatory Access Control and Audit

Hi! The Netfilter project proudly presents: iptables 1.8.3 iptables is the userspace command line program used to configure the Linux 2.4.x and later packet filtering ruleset. It is targeted towards system administrators. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/iptables/downloads.html

https://bugzilla.netfilter.org/show_bug.cgi?id=531 Phil Oester <netfilter at linuxace.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #2 from Phil Oester <netfilter

On 10/15/19 9:16 PM, Nathan Coulson wrote: > On 2019-10-15 12:12 p.m., Nathan Coulson wrote: >> I was working on a haproxy transparent proxy setup that we had working >> on Centos 7 (iptables), but running into issues getting tproxy working >> with NFTables on Centos 8. >> >> From https://www.kernel.org/doc/Documentation/networking/tproxy.txt, >> >> It

Hi Guys, My Debian box has been hacked a few days ago using an OpenSSH vulnerability. Subsequently my box was used for sending spam and as a hacking platform (according to my ISP). I was running a fairly recent version of OpenSSH (3.9p1). I reinstalled my box (now with 3.8p1 as supplied by Debian Stable), and started tcpdump to see if I would get lucky. I DID! The aut.log file shows the

1.4 was working fine. I thought I would try 1.6 beta 9 from my asteirsk 1.4 server to my asterisk client 1.6beta it wont accept the call. [Jul 18 20:34:55] NOTICE[966]: chan_sip.c:16416 handle_request_invite: Call from 'JJ' to extension 'jj_audio' rejected because extension not found. I changed nothing in the config files. I tried setting debug level to 5 and verbose to 5 all

hello: i want to test the g729 with asterisk. my scenario is sipp(ulaw)->asterisk1 with g729->asterisk2 with g729. I want to test g729 module with asterisk-1.4.21, when i make calls from asterisk 1 to asterisk 2, the asterisk 1 always send ulaw to asterisk 2. my sip in asterisk 1 is with codec g729 and enforce that use g729, the sip in asterisk 2 also work with G729 only, but asterisk 2

The Asterisk development team has released Asterisk version 1.4.21-rc1. This release is a release candidate for the upcoming official release of 1.4.21. It contains fewer bug fixes than usual for a 1.4 release series update, but some of them are important enough to get the release out sooner. We would like to encourage the community to assist us in testing before we release 1.4.21. The