Netfilter Extensions HOWTO

Fabrice MARIE <[email protected]>, mailing list [email protected]

1. Introduction

2. Patch-O-Matic

• 2.1 What is Patch-O-Matic ?
• 2.2 Running Patch-O-Matic
• 2.3 So what's next ?

3. New netfilter matches

• 3.1 ah-esp patch
• 3.2 condition match
• 3.3 conntrack patch
• 3.4 fuzzy patch
• 3.5 iplimit patch
• 3.6 ipv4options patch
• 3.7 length patch
• 3.8 mport patch
• 3.9 nth patch
• 3.10 pkttype patch
• 3.11 pool patch
• 3.12 psd patch
• 3.13 quota patch
• 3.14 random patch
• 3.15 realm patch
• 3.16 recent patch
• 3.17 record-rpc patch
• 3.18 string patch
• 3.19 time patch
• 3.20 ttl patch
• 3.21 u32 patch

4. New netfilter targets

• 4.1 ftos patch
• 4.2 IPV4OPTSSTRIP patch
• 4.3 NETLINK patch
• 4.4 NETMAP patch
• 4.5 ROUTE patch
• 4.6 SAME patch
• 4.7 tcp-MSS patch
• 4.8 TTL patch
• 4.9 ulog patch
• 4.10 XOR patch

5. New connection tracking patches

• 5.1 amanda-conntrack-nat patch
• 5.2 eggdrop-conntrack patch
• 5.3 h323-conntrack-nat patch
• 5.4 irc-conntrack-nat patch
• 5.5 mms-conntrack-nat patch
• 5.6 pptp patch
• 5.7 quake3-conntrack patch
• 5.8 rsh patch
• 5.9 snmp-nat patch
• 5.10 talk-conntrack-nat patch
• 5.11 tcp-window-tracking patch
• 5.12 tftp patch

6. New IPv6 netfilter matches

• 6.1 agr patch
• 6.2 ahesp6 patch
• 6.3 frag6 patch
• 6.4 ipv6header patch
• 6.5 ipv6-ports patch
• 6.6 length patch
• 6.7 route6 patch

7. New IPv6 netfilter targets

• 7.1 LOG patch
• 7.2 REJECT patch

8. New IPv6 connection tracking patches

9. Contributing

• 9.1 Contributing a new extension
• 9.2 Contributing to this HOWTO