Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | bcp38: migrate to nftables | Stefan Brusch | 2022-11-16 |
| | | | | Signed-off-by: Stefan Brusch <ne20002@gmx.ch> | ||
* | bcp38: iptables 1.6.1 compatibility (#4248) | Kevin Darbyshire-Bryant | 2017-04-12 |
| | | | | | -m state has been removed, now use -m conntrack --ctstate Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> | ||
* | BCP38: don't slow down established connections (#2838) | Török Edwin | 2016-06-12 |
| | | | | | | | | | | | | | Enabling BCP38 causes an iptables rule to be inserted before this rule: ACCEPT all -- anywhere anywhere ID:66773300 ctstate RELATED,ESTABLISHED This makes all forwarded packets go through the BCP38 ipset match, which slows down download speed from 440 Mbit/s to 340 Mbit/s. Only apply BCP38 match rules if state is NEW. Bump package version. Signed-off-by: Török Edwin <edwin@skylable.com> | ||
* | Add BCP38 implementation package (from CeroWrt). | Toke Høiland-Jørgensen | 2014-11-05 |
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk> |