Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH] netfilter: add a missing include in nf_conntrack_reasm.c
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter: xtables: use __uXX guarded types for userspace exports
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: add a missing include in nf_conntrack_reasm.c
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] netfilter: xtables: add missing header inclusions for headers_check
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: netfilter: xtables: use __uXX guarded types for userspace exports
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 4/5] netfilter: xtables: use __uXX guarded types for userspace exports
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH resend] netfilter: place in source hash after SNAT is done
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables: connlimit rev1 addendum
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: xtables: connlimit rev1 addendum
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] libxt_connlimit: remove duplicate member that caused size change
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables: connlimit rev1 addendum
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: xtables: remove duplicate member
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• xtables: connlimit rev1 addendum
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] NFQUEUE: add v2 revision with --queue-bypass option
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] libxt_AUDIT: add AUDIT target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables: connlimit dstaddr support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: xtables: connlimit with dstaddr support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/80] netfilter: netfilter update
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] netfilter: xtables: remove extraneous header that slipped in
  • From: kaber@xxxxxxxxx
• [PATCH 00/80] netfilter: netfilter update
  • From: kaber@xxxxxxxxx
• Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/79] netfilter: netfilter update
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/79] netfilter: netfilter update
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 00/79] netfilter: netfilter update
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/79] netfilter: netfilter update
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 00/79] netfilter: netfilter update
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 01/12] IP set core support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch 0/2] Ipset patches
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 01/12] IP set core support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 01/12] IP set core support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 00/79] netfilter: netfilter update
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [patch 1/2] ipset: remove the unneeded argvloop
  • From: holger@xxxxxxxxxxxxxxxx
• [patch 2/2] ipset: remove unneeded argvloop
  • From: holger@xxxxxxxxxxxxxxxx
• [patch 0/2] Ipset patches
  • From: holger@xxxxxxxxxxxxxxxx
• Re: [0/5] xtables: phase out case sensitivity
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [0/5] xtables: phase out case sensitivity
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 18/79] IPVS: Remove useless { } block from ip_vs_process_message()
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH 04/79] netfilter: ct_extend: fix the wrong alloc_size
  • From: kaber@xxxxxxxxx
• [PATCH 02/79] netfilter: xt_NFQUEUE: remove modulo operations
  • From: kaber@xxxxxxxxx
• [PATCH 05/79] netfilter: nf_conntrack: define ct_*_info as needed
  • From: kaber@xxxxxxxxx
• [PATCH 07/79] netfilter: ct_extend: define NF_CT_EXT_* as needed
  • From: kaber@xxxxxxxxx
• [PATCH 06/79] netfilter: nf_nat: don't use atomic bit operation
  • From: kaber@xxxxxxxxx
• [PATCH 08/79] netfilter: nf_nat: define nat_pptp_info as needed
  • From: kaber@xxxxxxxxx
• [PATCH 00/79] netfilter: netfilter update
  • From: kaber@xxxxxxxxx
• [PATCH 13/79] netfilter: nf_nat_amanda: rename a variable
  • From: kaber@xxxxxxxxx
• [PATCH 12/79] netfilter: add __rcu annotations
  • From: kaber@xxxxxxxxx
• [PATCH 11/79] netfilter: nf_ct_frag6_sysctl_table is static
  • From: kaber@xxxxxxxxx
• [PATCH 10/79] netfilter: add __rcu annotations
  • From: kaber@xxxxxxxxx
• [PATCH 09/79] netfilter: xt_CLASSIFY: add ARP support, allow CLASSIFY target on any table
  • From: kaber@xxxxxxxxx
• [PATCH 01/79] netfilter: nf_conntrack: don't always initialize ct->proto
  • From: kaber@xxxxxxxxx
• [PATCH 17/79] IPVS: Make the cp argument to ip_vs_sync_conn() static
  • From: kaber@xxxxxxxxx
• [PATCH 16/79] IPVS: Only match pe_data created by the same pe
  • From: kaber@xxxxxxxxx
• [PATCH 20/79] ipvs: add static and read_mostly attributes
  • From: kaber@xxxxxxxxx
• [PATCH 15/79] IPVS: Add persistence engine to connection entry
  • From: kaber@xxxxxxxxx
• [PATCH 14/79] netfilter: rcu sparse cleanups
  • From: kaber@xxxxxxxxx
• [PATCH 18/79] IPVS: Remove useless { } block from ip_vs_process_message()
  • From: kaber@xxxxxxxxx
• [PATCH 21/79] ipvs: remove shadow rt variable
  • From: kaber@xxxxxxxxx
• [PATCH 22/79] ipvs: allow transmit of GRO aggregated skbs
  • From: kaber@xxxxxxxxx
• [PATCH 24/79] IPVS: Backup, Prepare for transferring firewall marks (fwmark) to the backup daemon.
  • From: kaber@xxxxxxxxx
• [PATCH 23/79] netfilter: nf_conntrack: one less atomic op in nf_ct_expect_insert()
  • From: kaber@xxxxxxxxx
• [PATCH 27/79] IPVS: Handle Scheduling errors.
  • From: kaber@xxxxxxxxx
• [PATCH 28/79] IPVS: Backup, Adding structs for new sync format
  • From: kaber@xxxxxxxxx
• [PATCH 19/79] IPVS: buffer argument to ip_vs_process_message() should not be const
  • From: kaber@xxxxxxxxx
• [PATCH 26/79] IPVS: skb defrag in L7 helpers
  • From: kaber@xxxxxxxxx
• [PATCH 33/79] netfilter: fix compilation when conntrack is disabled but tproxy is enabled
  • From: kaber@xxxxxxxxx
• [PATCH 35/79] IPVS: netns to services part 1
  • From: kaber@xxxxxxxxx
• [PATCH 34/79] IPVS: netns, add basic init per netns.
  • From: kaber@xxxxxxxxx
• [PATCH 36/79] IPVS: netns awarness to lblcr sheduler
  • From: kaber@xxxxxxxxx
• [PATCH 37/79] IPVS: netns awarness to lblc sheduler
  • From: kaber@xxxxxxxxx
• [PATCH 32/79] netfilter: xtables: use guarded types
  • From: kaber@xxxxxxxxx
• [PATCH 39/79] IPVS: netns preparation for proto_tcp
  • From: kaber@xxxxxxxxx
• [PATCH 40/79] IPVS: netns preparation for proto_udp
  • From: kaber@xxxxxxxxx
• [PATCH 38/79] IPVS: netns, prepare protocol
  • From: kaber@xxxxxxxxx
• [PATCH 41/79] IPVS: netns preparation for proto_sctp
  • From: kaber@xxxxxxxxx
• [PATCH 31/79] IPVS: Backup, adding version 0 sending capabilities
  • From: kaber@xxxxxxxxx
• [PATCH 42/79] IPVS: netns preparation for proto_ah_esp
  • From: kaber@xxxxxxxxx
• [PATCH 30/79] IPVS: Backup, Change sending to Version 1 format
  • From: kaber@xxxxxxxxx
• [PATCH 29/79] IPVS: Backup, Adding Version 1 receive capability
  • From: kaber@xxxxxxxxx
• [PATCH 43/79] IPVS: netns, use ip_vs_proto_data as param.
  • From: kaber@xxxxxxxxx
• [PATCH 50/79] IPVS: netns, ip_vs_ctl local vars moved to ipvs struct.
  • From: kaber@xxxxxxxxx
• [PATCH 49/79] IPVS: netns, connection hash got net as param.
  • From: kaber@xxxxxxxxx
• [PATCH 44/79] IPVS: netns, common protocol changes and use of appcnt.
  • From: kaber@xxxxxxxxx
• [PATCH 51/79] IPVS: netns, defense work timer.
  • From: kaber@xxxxxxxxx
• [PATCH 54/79] IPVS: netns, misc init_net removal in core.
  • From: kaber@xxxxxxxxx
• [PATCH 52/79] IPVS: netns, trash handling
  • From: kaber@xxxxxxxxx
• [PATCH 53/79] IPVS: netns, svc counters moved in ip_vs_ctl,c
  • From: kaber@xxxxxxxxx
• [PATCH 55/79] IPVS: netns, final patch enabling network name space.
  • From: kaber@xxxxxxxxx
• [PATCH 56/79] netfilter: xt_comment: drop unneeded unsigned qualifier
  • From: kaber@xxxxxxxxx
• [PATCH 46/79] IPVS: netns awareness to ip_vs_est
  • From: kaber@xxxxxxxxx
• [PATCH 58/79] netfilter: x_table: speedup compat operations
  • From: kaber@xxxxxxxxx
• [PATCH 57/79] netfilter: xt_conntrack: support matching on port ranges
  • From: kaber@xxxxxxxxx
• [PATCH 59/79] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: kaber@xxxxxxxxx
• [PATCH 45/79] IPVS: netns awareness to ip_vs_app
  • From: kaber@xxxxxxxxx
• [PATCH 62/79] netfilter: audit target to record accepted/dropped packets
  • From: kaber@xxxxxxxxx
• [PATCH 61/79] netfilter: nf_conntrack: use is_vmalloc_addr()
  • From: kaber@xxxxxxxxx
• [PATCH 47/79] IPVS: netns awareness to ip_vs_sync
  • From: kaber@xxxxxxxxx
• [PATCH 48/79] IPVS: netns, ip_vs_stats and its procfs
  • From: kaber@xxxxxxxxx
• [PATCH 60/79] netfilter: fix Kconfig dependencies
  • From: kaber@xxxxxxxxx
• [PATCH 65/79] audit: export symbol for use with xt_AUDIT
  • From: kaber@xxxxxxxxx
• [PATCH 63/79] netfilter: create audit records for x_tables replaces
  • From: kaber@xxxxxxxxx
• [PATCH 67/79] netfilter: xtables: use __uXX guarded types for userspace exports
  • From: kaber@xxxxxxxxx
• [PATCH 68/79] netfilter: xtables: add missing header files to export list
  • From: kaber@xxxxxxxxx
• [PATCH 70/79] netfilter: nf_conntrack: remove an atomic bit operation
  • From: kaber@xxxxxxxxx
• [PATCH 69/79] netfilter: nf_nat: fix conversion to non-atomic bit ops
  • From: kaber@xxxxxxxxx
• [PATCH 71/79] netfilter: Kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUE
  • From: kaber@xxxxxxxxx
• [PATCH 78/79] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: kaber@xxxxxxxxx
• [PATCH 79/79] netfilter: nf_conntrack: fix lifetime display for disabled connections
  • From: kaber@xxxxxxxxx
• [PATCH 73/79] netfilter: nfnetlink_queue: do not free skb on error
  • From: kaber@xxxxxxxxx
• [PATCH 66/79] netfilter: xt_connlimit: use hotdrop jump mark
  • From: kaber@xxxxxxxxx
• [PATCH 74/79] netfilter: reduce NF_VERDICT_MASK to 0xff
  • From: kaber@xxxxxxxxx
• [PATCH 72/79] netfilter: nfnetlink_queue: return error number to caller
  • From: kaber@xxxxxxxxx
• [PATCH 77/79] netfilter: nf_conntrack: nf_conntrack snmp helper
  • From: kaber@xxxxxxxxx
• [PATCH 76/79] netfilter: ipt_CLUSTERIP: remove "no conntrack!"
  • From: kaber@xxxxxxxxx
• [PATCH 75/79] netfilter: allow NFQUEUE bypass if no listener is available
  • From: kaber@xxxxxxxxx
• [PATCH 64/79] netfilter: xtables: add missing aliases for autoloading via iptables
  • From: kaber@xxxxxxxxx
• [PATCH 25/79] IPVS: Split ports[2] into src_port and dst_port
  • From: kaber@xxxxxxxxx
• [PATCH 03/79] netfilter: xt_LOG: do print MAC header on FORWARD
  • From: kaber@xxxxxxxxx
• Re: netfilter: nf_conntrack: fix lifetime display for disabled connections
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• netfilter: nf_conntrack: fix lifetime display for disabled connections
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/3] libxt_connlimit: support for dstaddr-supporting revision 1
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/3] libxt_connlimit: add a --connlimit-upto option
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/3] libxt_connlimit: reword help text to say prefix length
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables: connlimit dstaddr support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: xtables: connlimit revision 1
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• xtables: connlimit with dstaddr support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 01/12] IP set core support
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [0/5] xtables: phase out case sensitivity
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 01/12] IP set core support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• net-next-2.6 open for business...
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH resend] netfilter: place in source hash after SNAT is done
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [ANNOUNCE] ipset 5.3 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [patch 4/4] ipset: fix build with NDEBUG defined
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [patch 3/4] ipset: do session initialization once
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [patch 1/4] ipset: show correct line numbers in restore output
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [0/5] xtables: phase out case sensitivity
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [0/5] xtables: phase out case sensitivity
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [0/5] xtables: phase out case sensitivity
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [0/5] xtables: phase out case sensitivity
  • From: Sam Roberts <vieuxtech@xxxxxxxxx>
• Re: [PATCHv2] netfilter: nf_conntrack snmp helper
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: [PATCHv2] netfilter: nf_conntrack snmp helper
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCHv2] netfilter: nf_conntrack snmp helper
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: [0/5] xtables: phase out case sensitivity
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/5] audit: export symbol for use with xt_AUDIT
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [5/5] netfilter: xtables: case-sensitivity avoidance (5/5)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [4/5] netfilter: xtables: case-sensitivity avoidance (4/5)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [3/5] netfilter: xtables: case-sensitivity avoidance (3/5)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [2/5] netfilter: xtables: case-sensitivity avoidance (2/5)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [1/5] netfilter: xtables: avoid case-sensitive filenames (1/5)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [0/5] xtables: phase out case sensitivity
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!"
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter: audit fix, headers,
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 5/5] netfilter: xtables: add missing header files to export list
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/5] netfilter: xtables: use __uXX guarded types for userspace exports
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/5] netfilter: xt_connlimit: use hotdrop jump mark
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/5] audit: export symbol for use with xt_AUDIT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/5] netfilter: xtables: add missing aliases for autoloading via iptables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• netfilter: audit fix, headers,
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 00/12] ipset kernel patches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 5/6] netfilter: allow NFQUEUE bypass if no listener is available
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 3/6] netfilter: nfnetlink_queue: do not free skb on error
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/6] netfilter: nfnetlink_queue: return error number to caller
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [patch 3/4] ipset: do session initialization once
  • From: holger@xxxxxxxxxxxxxxxx
• [patch 2/4] ipset: make IPv4 and IPv6 address handling similar
  • From: holger@xxxxxxxxxxxxxxxx
• [patch 4/4] ipset: fix build with NDEBUG defined
  • From: holger@xxxxxxxxxxxxxxxx
• [patch 1/4] ipset: show correct line numbers in restore output
  • From: holger@xxxxxxxxxxxxxxxx
• [patch 0/4] Ipset fixes
  • From: holger@xxxxxxxxxxxxxxxx
• Re: [PATCH 1/6] netfilter: kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUE
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH resend] netfilter: place in source hash after SNAT is done
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 resend] netfilter: remove an atomic bit operation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH resend] netfilter: change IPS_*_BIT to IPS_*
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack snmp helper
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] Use hotdrop jump mark.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] Use hotdrop jump mark.
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH] netfilter: nf_conntrack snmp helper
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• [PATCH] libxt_AUDIT: add AUDIT target
  • From: Thomas Graf <tgraf@xxxxxxxxxxxxx>
• Re: iptables --string-replace
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: create audit records for x_tables replaces
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv3] netfilter: audit target to record accepted/dropped packets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] NFQUEUE: add v2 revision with --queue-bypass option
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 5/6] netfilter: allow NFQUEUE bypass if no listener is available
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/6] netfilter: nfnetlink_queue: do not free skb on error
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/6] netfilter: nfnetlink_queue: return error number to caller
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/6] netfilter: kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUE
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] NFQUEUE v2 target with 'queue bypass' support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC,PATCH] netfilter: SNMP conntrack module
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv4] netfilter: audit target to record accepted/dropped packets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter: add a typedef for the recurring okfn use
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: netfilter: add a typedef for the recurring okfn use
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter: add a typedef for the recurring okfn use
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH resend] netfilter: make rcu read section smaller
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH resend] netfilter: place in source hash after SNAT is done
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH v2 resend] netfilter: remove an atomic bit operation
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH resend] netfilter: change IPS_*_BIT to IPS_*
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCHv4] netfilter: audit target to record accepted/dropped packets
  • From: Thomas Graf <tgraf@xxxxxxxxxxxxx>
• [PATCH 12/12] "set" match and "SET" target support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 02/12] bitmap:ip set type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 09/12] hash:net set type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 06/12] hash:ip,port set type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 05/12] hash:ip set type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 08/12] hash:ip,port,net set type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 01/12] IP set core support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 11/12] list:set set type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 04/12] bitmap:port set type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 03/12] bitmap:ip,mac type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 07/12] hash:ip,port,ip set type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 10/12] hash:net,port set type support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 00/12] ipset kernel patches
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets
  • From: Michał Mirosław <mirq-linux@xxxxxxxxxxxx>
• [PATCH] netfilter: create audit records for x_tables replaces
  • From: Thomas Graf <tgraf@xxxxxxxxxxxxx>
• [PATCHv3] netfilter: audit target to record accepted/dropped packets
  • From: Thomas Graf <tgraf@xxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets
  • From: Thomas Graf <tgraf@xxxxxxxxxxxxx>
• netfilter: add a typedef for the recurring okfn use
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC,PATCH] netfilter: SNMP conntrack module
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [RFC,PATCH] netfilter: SNMP conntrack module
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets
  • From: Eric Paris <eparis@xxxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCHv2] netfilter: audit target to record accepted/dropped packets
  • From: Thomas Graf <tgraf@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: audit target to record accepted/dropped packets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: audit target to record accepted/dropped packets
  • From: Thomas Graf <tgraf@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: audit target to record accepted/dropped packets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: audit target to record accepted/dropped packets
  • From: Thomas Graf <tgraf@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: audit target to record accepted/dropped packets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: audit target to record accepted/dropped packets
  • From: Eric Paris <eparis@xxxxxxxxxxxxxx>
• [PATCH] netfilter: audit target to record accepted/dropped packets
  • From: Thomas Graf <tgraf@xxxxxxxxxxxxx>
• Re: [PATCH]: netfilter: nf_conntrack: use is_vmalloc_addr()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH]: netfilter: nf_conntrack: use is_vmalloc_addr()
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH]: netfilter: nf_conntrack: use is_vmalloc_addr()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/22] ipvs namespaces v3.3
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/1] Netfilter fixes for 2.6.37 (round 3)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!"
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: ctnetlink: fix loop in ctnetlink_get_conntrack()
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 0/1] Netfilter fixes for 2.6.37 (round 3)
  • From: pablo@xxxxxxxxxxxxx
• Re: [PATCH] netfilter: ctnetlink: fix loop in ctnetlink_get_conntrack()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!"
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!"
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] netfilter: ctnetlink: fix loop in ctnetlink_get_conntrack()
  • From: Florian Westphal <fwestphal@xxxxxxxxxx>
• Re: [PATCH 00/22] ipvs namespaces v3.3
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/22] ipvs namespaces v3.3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: XT_MATCH_REALM Kconfig whinge...
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!"
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!"
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 00/22] ipvs namespaces v3.3
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!"
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!"
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 00/22] ipvs namespaces v3.3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter fixes for 2.6.37 (one leftover patch)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [GIT PULL nf-next-2.6] ipvs namespaces
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 01/22] IPVS: netns, add basic init per netns.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 02/22] IPVS: netns to services part 1
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 07/22] IPVS: netns preparation for proto_udp
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 08/22] IPVS: netns preparation for proto_sctp
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 10/22] IPVS: netns, use ip_vs_proto_data as param.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 11/22] IPVS: netns, common protocol changes and use of appcnt.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 12/22] IPVS: netns awareness to ip_vs_app
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 03/22] IPVS: netns awarness to lblcr sheduler
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 06/22] IPVS: netns preparation for proto_tcp
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 22/22] IPVS: netns, final patch enabling network name space.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 16/22] IPVS: netns, connection hash got net as param.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 18/22] IPVS: netns, defense work timer.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 04/22] IPVS: netns awarness to lblc sheduler
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 13/22] IPVS: netns awareness to ip_vs_est
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 15/22] IPVS: netns, ip_vs_stats and its procfs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 17/22] IPVS: netns, ip_vs_ctl local vars moved to ipvs struct.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 20/22] IPVS: netns, svc counters moved in ip_vs_ctl,c
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 14/22] IPVS: netns awareness to ip_vs_sync
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 21/22] IPVS: netns, misc init_net removal in core.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 19/22] IPVS: netns, trash handling
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 09/22] IPVS: netns preparation for proto_ah_esp
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 05/22] IPVS: netns, prepare protocol
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 00/22] ipvs namespaces v3.3
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 2/6] netfilter: nfnetlink_queue: return error number to caller
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/6] netfilter: nfnetlink_queue: return error number to caller
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: can libnetfilter_conntrack be used to write a userspace connection tracker?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• can libnetfilter_conntrack be used to write a userspace connection tracker?
  • From: Sam Roberts <vieuxtech@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: x_table: speedup compat operations
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• netfilter tree for 2.6.38 is open
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: x_table: speedup compat operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: XT_MATCH_REALM Kconfig whinge...
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: x_table: speedup compat operations
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: XT_MATCH_REALM Kconfig whinge...
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 3/6] netfilter: nfnetlink_queue: do not free skb on error
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/6] netfilter: nfnetlink_queue: return error number to caller
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: x_table: speedup compat operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: xt_conntrack: support matching on port ranges
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: xt_comment: drop unneeded unsigned qualifier
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL nf-next-2.6] ipvs namespaces
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: XT_MATCH_REALM Kconfig whinge...
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter fixes for 2.6.37 (one leftover patch)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: fix compilation when conntrack is disabled but tproxy is enabled
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH] netfilter: fix compilation when conntrack is disabled but tproxy is enabled
  • From: pablo@xxxxxxxxxxxxx
• [PATCH] netfilter fixes for 2.6.37 (one leftover patch)
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH] netfilter fixes for 2.6.37 (one leftover patch)
  • From: pablo@xxxxxxxxxxxxx
• XT_MATCH_REALM Kconfig whinge...
  • From: Valdis.Kletnieks@xxxxxx
• Re: [PATCH 5/6] netfilter: allow NFQUEUE bypass if no listener is available
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/6] netfilter: nfnetlink_queue: do not free skb on error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/6] netfilter: nfnetlink_queue: return error number to caller
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset: unused parameter removal
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [GIT] Networking
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [GIT PULL nf-next-2.6] ipvs namespaces
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [GIT PULL nf-next-2.6] ipvs namespaces
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/3] netfilter fixes for 2.6.37
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: ebtables: make broute table work again
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 2/3] netfilter: fix race in conntrack between dump_table and destroy
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 1/3] netfilter: x_tables: dont block BH while reading counters
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 0/3] netfilter fixes for 2.6.37
  • From: pablo@xxxxxxxxxxxxx
• Re: [GIT PULL nf-next-2.6] ipvs namespaces
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [GIT PULL nf-next-2.6] ipvs namespaces
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [GIT PULL nf-next-2.6] ipvs namespaces
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Idea for a new NFQUEUE module (ebtables) ?
  • From: Pierre Chifflier <chifflier@xxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ebtables: make broute table work again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: collecting netfilter bugfixes for 2.6.37
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ebtables: make broute table work again
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH v2] netfilter: ebtables: make broute table work again
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH][resend] netfilter: ebtables: make broute table work again
  • From: Florian Westphal <fw@xxxxxxxxx>
• How to redirect the package from eth0 to eth2
  • From: Roc Bai <buroc83@xxxxxxxxx>
• Re: collecting netfilter bugfixes for 2.6.37
  • From: Romain Francoise <romain@xxxxxxxxxxxxx>
• Re: [PATCH][resend] netfilter: ebtables: make broute table work again
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [patch] Re: genetlink misinterprets NEW as GET
  • From: David Miller <davem@xxxxxxxxxxxxx>
• GIT trees refreshed
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH][resend] netfilter: ebtables: make broute table work again
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: collecting netfilter bugfixes for 2.6.37
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: collecting netfilter bugfixes for 2.6.37
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• collecting netfilter bugfixes for 2.6.37
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix race in conntrack between dump_table and destroy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 net-next-2.6] netfilter: x_tables: dont block BH while reading counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Fwd: [iptables]fix a typo]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Possible bug with ip6tables hl module.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH][RESEND] libxt_time: fix random --datestart skips
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables: accumulated bugfixes and annotations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libmnl: genl patches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: new netfilter target - DNETMAP
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: [PATCH v4 net-next-2.6] netfilter: x_tables: dont block BH while reading counters
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 13/13] libipt_REDIRECT: avoid dereference of uninitialized pointer
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/13] extensions: remove no longer necessary default: cases
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/13] libxt_sctp: fix a typo
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 12/13] libxtables: do some option structure checking
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/13] libipt_CLUSTERIP: const annotations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/13] ip[6]tables: only call target's parse function when option char is in range
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/13] ip[6]tables: only call match's parse function when option char is in range
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/13] xtables: reorder num_old substraction for clarity
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/13] iptables: abort on empty interface specification
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/13] xt_comment: remove redundant cast
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/13] src: use C99/POSIX types
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/13] src: const annotations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/13] iptables-restore: resolve confusing policy error message
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables: accumulated bugfixes and annotations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• [PATCH] kernel: remove unused ctnl parameter from call_ad
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• ipset: unused parameter removal
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/2] examples/genl: fix newline imbalance
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] examples/genl: support dumping the genl families
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libmnl: genl patches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Possible bug with ip6tables hl module.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Possible bug with ip6tables hl module.
  • From: Steven Jan Springl <steven@xxxxxxxxxxxxxxxxx>
• Why and when to use skb_make_writable()?
  • From: doug arro <doug_arro@xxxxxxxxx>
• Re: new netfilter target - DNETMAP
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: [patch] Re: genetlink misinterprets NEW as GET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [patch] Re: genetlink misinterprets NEW as GET
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: genetlink misinterprets NEW as GET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: genetlink misinterprets NEW as GET
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: genetlink misinterprets NEW as GET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: new netfilter target - DNETMAP
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: fix export secctx error handling
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: fix the race when initializing nf_ct_expect_hash_rnd
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: genetlink misinterprets NEW as GET
  • From: Ben Pfaff <blp@xxxxxxxxxx>
• Re: tproxy for ipv6
  • From: Balazs Scheidler <bazsi@xxxxxxxxxx>
• Re: genetlink misinterprets NEW as GET
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: genetlink misinterprets NEW as GET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: genetlink misinterprets NEW as GET
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: genetlink misinterprets NEW as GET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Xtables-addons 1.32/ipset-GENL 5.2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Xtables-addons 1.32/ipset-GENL 5.2
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 04/22] IPVS: netns awarness to lblc sheduler
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 01/22] IPVS: netns, add basic init per netns.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 03/22] IPVS: netns awarness to lblcr sheduler
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 08/22] IPVS: netns preparation for proto_sctp
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 06/22] IPVS: netns preparation for proto_tcp
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 07/22] IPVS: netns preparation for proto_udp
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 09/22] IPVS: netns preparation for proto_ah_esp
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 16/22] IPVS: netns, connection hash got net as param.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 10/22] IPVS: netns, use ip_vs_proto_data as param.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 14/22] IPVS: netns awareness to ip_vs_sync
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 11/22] IPVS: netns, common protocol changes and use of appcnt.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 21/22] IPVS: netns, misc init_net removal in core.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 13/22] IPVS: netns awareness to ip_vs_est
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 18/22] IPVS: netns, defense work timer.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 15/22] IPVS: netns, ip_vs_stats and its procfs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 20/22] IPVS: netns, svc counters moved in ip_vs_ctl,c
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 19/22] IPVS: netns, trash handling
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 22/22] IPVS: netns, final patch enabling network name space.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 12/22] IPVS: netns awareness to ip_vs_app
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 17/22] IPVS: netns, ip_vs_ctl local vars moved to ipvs struct.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 02/22] IPVS: netns to services part 1
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 05/22] IPVS: netns, prepare protocol
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next-2.6] ipvs namespaces
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Xtables-addons 1.32/ipset-GENL 5.2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 4/5] build: implement export symbols
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/5] src: remove redundant cast near msg_name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_conntrack: build improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_log: build improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libmnl: build improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_queue: build improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Xtables-addons 1.32/ipset-GENL 5.2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: fix export secctx error handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Xtables-addons 1.32/ipset-GENL 5.2
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: fix the race when initializing nf_ct_expect_hash_rnd
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: fix the race when initializing nf_ct_expect_hash_rnd
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Xtables-addons 1.32/ipset-GENL 5.2
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• [PATCH v2] netfilter: fix the race when initializing nf_ct_expect_hash_rnd
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: Xtables-addons 1.32/ipset-GENL 5.2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Xtables-addons 1.32/ipset-GENL 5.2
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Xtables-addons 1.32/ipset-GENL 5.2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• genetlink misinterprets NEW as GET
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipset-5: buildsys improvements
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [*v3 PATCH 02/22] IPVS: netns to services part 1
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [*v3 PATCH 00/22] IPVS Network Name Space aware
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• Re: [*v3 PATCH 14/22] IPVS: netns awareness to ip_vs_sync
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• Re: [*v3 PATCH 02/22] IPVS: netns to services part 1
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [*v3 PATCH 00/22] IPVS Network Name Space aware
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [*v3 PATCH 01/22] IPVS: netns, add basic init per netns.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• Re: [*v3 PATCH 14/22] IPVS: netns awareness to ip_vs_sync
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [*v3 PATCH 01/22] IPVS: netns, add basic init per netns.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] build: remove autogenerated files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/2] build: use only AC_CANONICAL_HOST
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• ipset-5: buildsys improvements
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] build: use only AC_CANONICAL_HOST
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/2] build: use AM_CPPFLAGS
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libmnl: build improvements
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/3] build: use -Wall across the entire source
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/3] build: create a Make_global.am file
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/3] build: remove unused LIBTOOL_DEPS
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_queue: build improvements
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/4] utils: resolve compiler warnings
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/4] build: use -Wall across the entire source
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/4] build: create a Make_global.am file
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/4] build: remove unused LIBTOOL_DEPS
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_log: build improvements
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/4] qa: resolve compiler warnings
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/4] utils: resolve compiler warnings
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/4] build: use -Wall across the entire source
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/4] build: remove unused LIBTOOL_DEPS
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_conntrack: build improvements
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 5/5] src: remove redundant cast near msg_name
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/5] build: implement export symbols
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/5] build: remove unused LIBTOOL_DEPS
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/5] utils: resolve compiler warning
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/5] build: use -Wall across the entire source
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnfnetlink: build improvements
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: linux-next: Tree for December 29 (netfilter build errors)
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: linux-next: Tree for December 29 (netfilter build errors)
  • From: Sedat Dilek <sedat.dilek@xxxxxxxxxxxxxx>
• Buffer-bloat (was Re: IPTV buffering)
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• [*v3 PATCH 18/22] IPVS: netns, defense work timer.
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 05/22] IPVS: netns, prepare protocol
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 00/22] IPVS Network Name Space aware
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 13/22] IPVS: netns awareness to ip_vs_est
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 08/22] IPVS: netns preparation for proto_sctp
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 07/22] IPVS: netns preparation for proto_udp
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 19/22] IPVS: netns, trash handling
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 06/22] IPVS: netns preparation for proto_tcp
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 01/22] IPVS: netns, add basic init per netns.
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 15/22] IPVS: netns, ip_vs_stats and its procfs
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 16/22] IPVS: netns, connection hash got net as param.
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 12/22] IPVS: netns awareness to ip_vs_app
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 02/22] IPVS: netns to services part 1
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 14/22] IPVS: netns awareness to ip_vs_sync
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 17/22] IPVS: netns, ip_vs_ctl local vars moved to ipvs struct.
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 20/22] IPVS: netns, svc counters moved in ip_vs_ctl,c
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 04/22] IPVS: netns awarness to lblc sheduler
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 22/22] IPVS: netns, final patch enabling network name space.
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 21/22] IPVS: netns, misc init_net removal in core.
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 10/22] IPVS: netns, use ip_vs_proto_data as param.
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 11/22] IPVS: netns, common protocol changes and use of appcnt.
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 03/22] IPVS: netns awarness to lblcr sheduler
  • From: hans@xxxxxxxxxxxxxxx
• [*v3 PATCH 09/22] IPVS: netns preparation for proto_ah_esp
  • From: hans@xxxxxxxxxxxxxxx
• Re: linux-next: Tree for December 29 (netfilter build errors)
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: linux-next: Tree for December 29 (netfilter build errors)
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• Re: linux-next: Tree for December 29 (netfilter build errors)
  • From: Randy Dunlap <randy.dunlap@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/6] netfilter: kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUE
  • From: Michał Mirosław <mirq@xxxxxxxxxxxx>
• Re: [PATCH 1/6] netfilter: kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUE
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 5/6] netfilter: allow NFQUEUE bypass if no listener is available
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/6] netfilter: nfnetlink_queue: do not free skb on error
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/6] netfilter: nfnetlink_queue: return error number to caller
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/6] netfilter: kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUE
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] NFQUEUE v2 target with 'queue bypass' support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• [ANNOUNCE] libmnl 1.0.1 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• netfilter: xt_comment: drop unneeded unsigned qualifier
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ebtables: make broute table work again
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ebtables: make broute table work again
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH 1/1] netfilter: ebtables: make broute table work again
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: inconsistent address treatment.
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.2 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.2 released
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset-5.2 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• inconsistent address treatment.
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libmnl 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipsets: examples?
  • From: Reuben Martin <reuben.m@xxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.1 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipsets: examples?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset-5.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• iptables hashlimit behaviour
  • From: "Gurpreet Kaur" <G.Kaur@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] libmnl 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libmnl 1.0.0 release
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libmnl 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] src: declare non-modified data as const
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] src: remove redundant casts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] libipulog: rebuild required header file inclusion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: mnl: getpagesize
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnfnetlink: cast removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_conntrack: misc annotations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 net-next-2.6] netfilter: x_tables: dont block BH while reading counters
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: IPTV buffering
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: "Rob Sterenborg (lists)" <lists@xxxxxxxxxxxxxxx>
• [Fwd: [iptables]fix a typo]
  • From: Peter Volkov <pva@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• [PATCH] extend ebt_ip6 to allow matching on ipv6-icmp types/codes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v4 net-next-2.6] netfilter: x_tables: dont block BH while reading counters
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v4 net-next-2.6] netfilter: x_tables: dont block BH while reading counters
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: ipset-5: buncha patches
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] include: add missing unistd.h
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• mnl: getpagesize
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: "Rob Sterenborg (lists)" <lists@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/11] libipset: static annotations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/11] libipset: remove redundant casts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/11] kernel: use EXPORT_SYMBOL_GPL
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/11] libipset: const annotations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/11] libipset: remove redundant indirection via union name
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/11] libipset: ipset_strncpy is really a strlcpy-type operation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/11] kernel: const annotations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/11] kernel: use __read_mostly for registration-type structures
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/11] kernel: do not mix const and __read_mostly
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/11] xt_set: avoid user types in exported kernel headers
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/11] build: enable parallel building
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• ipset-5: buncha patches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] src: remove redundant casts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnfnetlink: cast removal
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/3] src: declare non-modified data as const
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/3] src: remove redundant casts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/3] libipulog: rebuild required header file inclusion
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_log: misc annotations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/3] src: remove redundant casts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/3] utils: use sizeof(buf) over hardcoded number
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/3] src: declare non-modified data as const
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_conntrack: misc annotations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH net-next] netfilter: x_table: speedup compat operations
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] ebtables: extend ebt_ip6 to allow matching on ipv6-icmp types/codes
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: [PATCH] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] libmnl 1.0.0 release
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] libmnl 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libmnl 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: "Rob Sterenborg (lists)" <lists@xxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] libmnl 1.0.0 release
  • From: "Rob Sterenborg (lists)" <lists@xxxxxxxxxxxxxxx>
• [PATCH v4 net-next-2.6] netfilter: x_tables: dont block BH while reading counters
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [ANNOUNCE] ipset-5.0 released
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch] xtables: use guarded types
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [ANNOUNCE] ipset-5.0 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] ebtables: extend ebt_ip6 to allow matching on ipv6-icmp types/codes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Xtables2 Netlink spec
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [ANNOUNCE] libmnl 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Error reporting in Netlink (Re: Xtables2 Netlink spec)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Error reporting in Netlink (Re: Xtables2 Netlink spec)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>