conntrack-tools i.e. conntrack and conntrackd (mirror of https://github.com/vyos/conntrack-tools.git) https://git.amelek.net/vyos/conntrack-tools.git/atom?h=lithium 2015-11-26T22:10:55+00:00 2015-11-26T22:10:55+00:00 Alex Harpin development@landsofshadow.co.uk 2015-11-26T22:10:55+00:00 urn:sha1:71f0da9318b926578ed44818f4b2709a821980ae conntrack-tools 1.4.3 release 2015-11-21T14:44:29+00:00 Alex Harpin development@landsofshadow.co.uk 2015-11-21T14:44:29+00:00 urn:sha1:2a53b5dfee3c80b4c4940ad4c73c82248b4571bb conntrack-tools 1.4.0 release 2015-09-08T18:10:13+00:00 Pablo Neira Ayuso pablo@netfilter.org 2015-08-21T17:18:38+00:00 urn:sha1:882bb111285a3a4465995b4af03040a291145d7b Since dd73ceecdbe8 ("nfct: Update syntax to specify command before subsystem") the command comes before the object type. Update documentation accordingly. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2014-03-12T12:34:57+00:00 Ash Hughes ashley.hughes@blueyonder.co.uk 2014-03-08T21:13:34+00:00 urn:sha1:92246dcc1fdcf222302a42926e0e95af2c30463e Here is a patch which adds a userspace conntrack helper for the SSDP protocol. This is based on the code found at: http://marc.info/?t=132945775100001&r=1&w=2 I'm not sure how to get my laptop to play at IPv6, so I've not tested this part, but I've tested the IPv4 section and it works. Signed-off-by: Ash Hughes <ashley.hughes@blueyonder.co.uk> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-10-08T10:22:28+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-10-08T10:22:28+00:00 urn:sha1:affe4656f3aeeba4040f9d63efd7719ef0345ae9 This patch adds documentation on how to enable user-space helper support. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-10-04T08:42:43+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-10-03T20:19:25+00:00 urn:sha1:3f845636159298fb18b6d6c455066d0344a61bee ExpectationSync requires Linux kernel >= 3.5 to work sanely, document this. Still, we don't want to crash if someone enables expectation sync with old Linux kernels (like 2.6.32). Reported-by: James Gutholm <gutholmj@evergreen.edu> Tested-by: James Gutholm <gutholmj@evergreen.edu> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-06-16T15:42:28+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-06-16T15:42:28+00:00 urn:sha1:c88266b35ba130e804422ce2fe0da6704d620bd6 The H.323 helper is actually composed of three helpers: ras q.931 h.245 We have to specify those in the configuration file since h.323 is not any known helper itself. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-05-30T14:54:05+00:00 Gaurav Sinha gaurav.sinha@vyatta.com 2012-05-30T14:54:05+00:00 urn:sha1:a608049a22dc23676c85bbf443e45cbbf0e9b83c Conflicts: .gitignore src/run.c 2012-03-05T22:14:32+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-03-05T22:13:12+00:00 urn:sha1:1de3034f8c4f597cbe4be35b2f84e2848e46e64e You have to use this: iptables -I PREROUTING -t raw -j CT --ctevents assured,destroy instead of: iptables -I PREROUTING -t raw -j CT --ctevents assured Otherwise, conntrackd cache gets full since no destroy events are delivered. Reported-by: Kerin Millar <kerframil@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-01-12T22:45:24+00:00 Gaurav Sinha gaurav.sinha@vyatta.com 2012-01-12T22:45:24+00:00 urn:sha1:ca37a710d526d17490ebdc3af760bfddd316426d