My contributions to netfilter/iptables

On 7th December 2001, I became a core team member of the netfilter project. Since then this page is kept for historical reasons only and not maintained anymore.

Newer versions of my patches can be found in the cvs repository of the Netfilter project.

The patches below are outdated.

The complete list of my patches:

ipt_LOG bugfix
- 28.09.2001: bug at printing inner protocols
H.323 (netmeeting) protocol helper
- 31.10.2001: DNAT/redirect was still broken, fixed
- 28.09.2001: NAT part fixed, complete release
- 19.09.2001: p-o-m files and locking issue in ip_nat_h323.c fixed.
- 11.09.2001: little bit improved module
- 06.09.2001: initial release
patch-o-matic support for multiple helpers
- 12.07.2001: initial release
newnat code
- 31.10.2001: safety checking to ip_nat_ftp.c added
- 11.09.2001: final release :-)
- 29.08.2001: one-line bugfix
- 28.08.2001: bug fixed, new functionality added
- 08.07.2001: new release, not incremental
- 22.06.2001: previous incomplete patch fixed
- 22.06.2001: resent packets hadled by the core
- 18.06.2001: initial release, incremental patch
FTP security patch
- 05.06.2001: comment
- 21.05.2001: patch in p-o-m format
- 19.04.2001: patch handles resent packets properly
- 18.04.2001: initial release
prestate/NOTRACK patch
- 21.05.2001: fixed patch
- 03.04.2001: initial release
talk protocol patch (in patch-o-matic)
- 09.05.2001: p-o-m compatibility release
- 27.03.2001: initial release
log patch (for rule debugging)
- 21.05.2001: repost
- 29.03.2001: complete reworking
- 28.02.2001: initial release
TCP window tracking (in patch-o-matic)
- 24.10.2001: support for 2.4.11 and above
- 03.10.2001: syctl support added
- 30.10.2000: Rusty's comments implemented, full window scaling support
- 22.08.2000: initial release
conntrack DoS protection
- 18.07.2000: bug in conntrack patch, fix not released due to the TCP window tracking patch
- 14.07.2000: ESTABLISHED state is not reached until the TCP 3-way handshake is not completed
REJECT target (in netfilter)
- 10.05.2000: Fragment from a long thread on the acceptance of the new functionalities in the REJECT target.
- 09.03.2000: REJECT is valid only in the INPUT and FORWARD rules.
- 28.02.2000: SYN protection support removed
- 02.02.2000: packet generation moved from IP stack to the module
- 18.01.2000: initial release

Netfilter homepages: