netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Pablo Neira Ayuso <pablo@netfilter.org>
To: Daniel Borkmann <dborkman@redhat.com>,
	netfilter-devel@vger.kernel.org, netdev@vger.kernel.org,
	kaber@trash.net
Subject: Re: [PATCH iptables] iptables: snat: add randomize-full support
Date: Sat, 4 Jan 2014 00:43:32 +0100	[thread overview]
Message-ID: <20140103234332.GA27882@localhost> (raw)
In-Reply-To: <20131222031538.GJ14073@order.stressinduktion.org>

On Sun, Dec 22, 2013 at 04:15:38AM +0100, Hannes Frederic Sowa wrote:
> From: Daniel Borkmann <dborkman@redhat.com>
> 
> This patch provides the user space part for dnat in order to make
> randomize-full support available in {ip,nf}tables. It allows for
> enabling full port randomization that was motivated in [1] and
> introduced to the kernel in [2].
> 
> Joint work between Hannes Frederic Sowa and Daniel Borkmann.

Applied to iptables-next, thanks.

  reply	other threads:[~2014-01-03 23:43 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-12-19 13:40 [PATCH] nf-nat: don't use per destination incrementing ports in nat random mode Hannes Frederic Sowa
2013-12-19 23:21 ` Daniel Borkmann
2013-12-20  0:48   ` [PATCH next v2] " Hannes Frederic Sowa
2013-12-20  8:01     ` Pablo Neira Ayuso
2013-12-20 21:40       ` [PATCH v2 -next] netfilter: don't use per-destination " Hannes Frederic Sowa
2013-12-21 12:17         ` Pablo Neira Ayuso
2013-12-21 12:26           ` Hannes Frederic Sowa
2013-12-21 12:27             ` Pablo Neira Ayuso
2013-12-21 16:25               ` Daniel Borkmann
2013-12-22  3:15         ` [PATCH iptables] iptables: snat: add randomize-full support Hannes Frederic Sowa
2014-01-03 23:43           ` Pablo Neira Ayuso [this message]
2014-01-03 22:52         ` [PATCH v2 -next] netfilter: don't use per-destination incrementing ports in nat random mode Pablo Neira Ayuso
2014-01-03 23:11           ` Daniel Borkmann

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20140103234332.GA27882@localhost \
    --to=pablo@netfilter.org \
    --cc=dborkman@redhat.com \
    --cc=kaber@trash.net \
    --cc=netdev@vger.kernel.org \
    --cc=netfilter-devel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).