conntrack-tools i.e. conntrack and conntrackd (mirror of https://github.com/vyos/conntrack-tools.git) https://git.amelek.net/vyos/conntrack-tools.git/atom?h=lithium 2015-11-26T22:10:55+00:00 2015-11-26T22:10:55+00:00 Alex Harpin development@landsofshadow.co.uk 2015-11-26T22:10:55+00:00 urn:sha1:71f0da9318b926578ed44818f4b2709a821980ae conntrack-tools 1.4.3 release 2015-11-21T14:44:29+00:00 Alex Harpin development@landsofshadow.co.uk 2015-11-21T14:44:29+00:00 urn:sha1:2a53b5dfee3c80b4c4940ad4c73c82248b4571bb conntrack-tools 1.4.0 release 2015-09-08T18:10:13+00:00 Pablo Neira Ayuso pablo@netfilter.org 2015-08-21T17:18:38+00:00 urn:sha1:882bb111285a3a4465995b4af03040a291145d7b Since dd73ceecdbe8 ("nfct: Update syntax to specify command before subsystem") the command comes before the object type. Update documentation accordingly. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2015-08-26T18:43:55+00:00 Arturo Borrero Gonzalez arturo.borrero.glez@gmail.com 2015-08-20T11:56:42+00:00 urn:sha1:a8f74d021676096eaa40af72e6d91787408fe44d This file is likely dead code. It's outdated. Also I think distributors should manage themselves to integrate daemons in their operating systems. Following this idea, this file doesn't belong here. Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2014-03-12T12:34:57+00:00 Ash Hughes ashley.hughes@blueyonder.co.uk 2014-03-08T21:13:34+00:00 urn:sha1:92246dcc1fdcf222302a42926e0e95af2c30463e Here is a patch which adds a userspace conntrack helper for the SSDP protocol. This is based on the code found at: http://marc.info/?t=132945775100001&r=1&w=2 I'm not sure how to get my laptop to play at IPv6, so I've not tested this part, but I've tested the IPv4 section and it works. Signed-off-by: Ash Hughes <ashley.hughes@blueyonder.co.uk> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2013-09-26T16:52:26+00:00 Pablo Neira Ayuso pablo@netfilter.org 2013-08-06T12:21:04+00:00 urn:sha1:36118bfc4901b0978d2c8f17912fe91ec66f35e8 This patch adds support for the DHCPv6 helper. 1) nfct helper add dhcpv6 inet6 udp 2) ip6tables -I OUTPUT -t raw -p udp --sport 546 -j CT --helper dhcpv6 3) run conntrackd You should see: % conntrack -L exp -f ipv6 279 proto=17 src=:: dst=ff02::1:2 sport=0 dport=546 mask-src=:: mask-dst=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff sport=0 dport=65535 master-src=fe80::221:ccff:fe4a:7f9c master-dst=ff02::1:2 sport=546 dport=547 PERMANENT class=0 helper=dhcpv6 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-10-08T10:22:28+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-10-08T10:22:28+00:00 urn:sha1:affe4656f3aeeba4040f9d63efd7719ef0345ae9 This patch adds documentation on how to enable user-space helper support. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-10-04T08:42:43+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-10-03T20:19:25+00:00 urn:sha1:3f845636159298fb18b6d6c455066d0344a61bee ExpectationSync requires Linux kernel >= 3.5 to work sanely, document this. Still, we don't want to crash if someone enables expectation sync with old Linux kernels (like 2.6.32). Reported-by: James Gutholm <gutholmj@evergreen.edu> Tested-by: James Gutholm <gutholmj@evergreen.edu> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-09-10T11:24:59+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-09-10T11:17:24+00:00 urn:sha1:febb3cceac1889fb6558b8ef40ac733072fdcd47 This patch adds the QueueLen option, that allows you to increase the maximum number of packets waiting in the nfnetlink_queue to receive a verdict from userspace. Rising the default value (1024) is useful to avoid hitting the following error message: "nf_queue: full at X entries, dropping packets(s)". Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-08-01T17:20:17+00:00 Jozsef Kadlecsik kadlec@blackhole.kfki.hu 2012-05-15T12:43:20+00:00 urn:sha1:40f4330e6b50ed2b198549b1006c6fcb349f5a3b Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>