Netfilter and Multicast

Netfilter can by default not track replies to multicast(/broadcast for IPv4) messages. Thus they are, unless they are explicitely allowed through a stateless rule, not matched by a rule using the conntrack match module. To work around this limitation, I developed a equivalent workaround using ipset and iptables. Theoretically the same can be done with …

Getting IRC help: what information do I need to provide?

The necessary information to enable others to help you will of course vary with the problem for which you are seeking help. But here are some minimum guidelines, for users of the #netfilter channel on freenode.net IRC. First off, it’s always a good idea to put a summary of the problem and goal in your …

Summary page of the Netfilter related resources

Please note that we moved from Freenode to libera.chat because Freenode was taken over by Andrew Lee Summary page of the Netfilter related resources iptables 101 and FAQ to get started quickly iptables tutorial from frozentux flowgraph of the packets in netfilter as¬†svg Managing large lists of IPs,subnets, protocols or ports in iptables using ipset …