Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH] netfilter: fix the wrong alloc_size
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: libnetfilter_queue: extracting TCP options.
  • From: Yechiel Levi <gmistick@xxxxxxxxx>
• libnetfilter_queue: extracting TCP options.
  • From: Igor 'Lo' (И.L.) <bombsiteunrested@xxxxxxxxx>
• Re: [PATCH 2/5] include: use C++ headers in C++ mode
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Frederic Leroy <fredo@xxxxxxxxxx>
• Re: NFQUEUE verdicts - adding non-termination
  • From: Andrew Watts <akwatts@xxxxxxxxx>
• Re: NFQUEUE verdicts - adding non-termination
  • From: Stig Thormodsrud <stig@xxxxxxxxxx>
• Re: [PATCH 0/2] netfilter: netfilter fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Current state of nftables
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH resend] netfilter: remove modulo operations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH resend] netfilter: don't always initialize ct->proto
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH resend] netfilter: remove modulo operations
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH resend] netfilter: don't always initialize ct->proto
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH 2/2] netfilter: ipv6: fix overlap check for fragments
  • From: kaber@xxxxxxxxx
• [PATCH 1/2] netfilter: NF_HOOK_COND has wrong conditional
  • From: kaber@xxxxxxxxx
• [PATCH 0/2] netfilter: netfilter fixes
  • From: kaber@xxxxxxxxx
• Re: Current state of nftables
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Current state of nftables
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Re: NFQUEUE verdicts - adding non-termination
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: NFQUEUE verdicts - adding non-termination
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: NFQUEUE verdicts - adding non-termination
  • From: Andrew Watts <akwatts@xxxxxxxxx>
• Re: [PATCH] netfilter: ipv6: fix overlap check for fragments
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: ipv6: fix overlap check for fragments
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• Re: iptables: Resource temporarily unavailable.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch] netfilter: nfnetlink: guard against undefined entries
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: NF_HOOK_COND has wrong conditional
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch] netfilter: nfnetlink: guard against undefined entries
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 5/5] attr: avoid multiple definition of hidden variable
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: NF_HOOK_COND has wrong conditional
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: NF_HOOK_COND has wrong conditional
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: iptables: Resource temporarily unavailable.
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: iptables: Resource temporarily unavailable.
  • From: Michał Mirosław <mirq@xxxxxxxxxxxx>
• Re: iptables: Resource temporarily unavailable.
  • From: Jan Kasprzak <kas@xxxxxxxxxx>
• Re: iptables: Resource temporarily unavailable.
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 5/5] attr: avoid multiple definition of hidden variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables: Resource temporarily unavailable.
  • From: Jan Kasprzak <kas@xxxxxxxxxx>
• Re: iptables: Resource temporarily unavailable.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables: Resource temporarily unavailable.
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• iptables: Resource temporarily unavailable.
  • From: Jan Kasprzak <kas@xxxxxxxxxx>
• Re: [PATCH 5/5] attr: avoid multiple definition of hidden variable
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 2/5] include: use C++ headers in C++ mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/5] attr: avoid multiple definition of hidden variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/5] attr: remove redundant check for NULL
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/5] include: use C++ headers in C++ mode
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 3/5] nlmsg: use bool for all _ok functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/5] include: use C++ headers in C++ mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/5] socket: constify a struct sockaddr_nl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Frederic Leroy <fredo@xxxxxxxxxx>
• Re: sk->sk_socket seems to disappear before connection termination
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: NFQUEUE verdicts - adding non-termination
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Verdict with ebtables?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch] netfilter: nfnetlink: guard against undefined entries
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Verdict with ebtables?
  • From: Kfir Lavi <lavi.kfir@xxxxxxxxx>
• NFQUEUE verdicts - adding non-termination
  • From: Andrew Watts <akwatts@xxxxxxxxx>
• [PATCH 5/5] attr: avoid multiple definition of hidden variable
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/5] attr: remove redundant check for NULL
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/5] nlmsg: use bool for all _ok functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/5] include: use C++ headers in C++ mode
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/5] socket: constify a struct sockaddr_nl
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libmnl misc patches Nov 11
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: sk->sk_socket seems to disappear before connection termination
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: sk->sk_socket seems to disappear before connection termination
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: sk->sk_socket seems to disappear before connection termination
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [RFC 0/3] MPEG2/TS drop analyzer iptables match extension
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: sk->sk_socket seems to disappear before connection termination
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: sk->sk_socket seems to disappear before connection termination
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [patch] netfilter: nfnetlink: guard against undefined entries
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• sk->sk_socket seems to disappear before connection termination
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Frederic Leroy <fredo@xxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Frederic Leroy <fredo@xxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Frederic Leroy <fredo@xxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Frederic Leroy <fredo@xxxxxxxxxx>
• [PATCH] src: remove redundant casts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: balance traffic between virtual interfaces on the same network
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Frederic Leroy <fredo@xxxxxxxxxx>
• Re: [PATCH]extensions/tos_values.c mask value not accurate in certain condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• balance traffic between virtual interfaces on the same network
  • From: Tommaso Calosi <tcalosi@xxxxxxxxx>
• Re: Using Netfiletr hooks without IP stack
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Using Netfiletr hooks without IP stack
  • From: Yechiel Levi <gmistick@xxxxxxxxx>
• Re: RFC: netfilter: cache dst_entry in conntrack
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: RFC: netfilter: cache dst_entry in conntrack
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: RFC: netfilter: cache dst_entry in conntrack
  • From: "\"Oleg A. Arkhangelsky\"" <sysoleg@xxxxxxxxx>
• Re: RFC: netfilter: cache dst_entry in conntrack
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: RFC: netfilter: cache dst_entry in conntrack
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: RFC: netfilter: cache dst_entry in conntrack
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: RFC: netfilter: cache dst_entry in conntrack
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: RFC: netfilter: cache dst_entry in conntrack
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Fwd: RFC: netfilter: cache dst_entry in conntrack
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Using Netfiletr hooks without IP stack
  • From: "Yedidia Amit" <amit.yedidia@xxxxxxxxxxxxxxxx>
• Re: ulogd2 build updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libmnl build updates 2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrack-tools build updates 2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_queue build updates 2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_log build updates 2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_conntrack build updates 2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnfnetlink build updates 2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: xtables extenstions - Unknown symbol xtnu_register_match/xtnu_unregister_match
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xtables extenstions - Unknown symbol xtnu_register_match/xtnu_unregister_match
  • From: Jan Andrejkovic <jandrejk@xxxxxxxxx>
• Fwd: xtables extenstions - Unknown symbol xtnu_register_match/xtnu_unregister_match
  • From: Jan Andrejkovic <jandrejk@xxxxxxxxx>
• Re: [arptables] rfc: add classify target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [arptables] rfc: add classify target
  • From: Frederic Leroy <fredo@xxxxxxxxxx>
• [SOLVED] Re: ipset-4.4 on 2.6.16.60 kernel
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset-4.4 on 2.6.16.60 kernel
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: ipset-4.4 on 2.6.16.60 kernel
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset-4.4 on 2.6.16.60 kernel
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• people.netfilter.org v6 busted
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 9/9] filter/HWHDR: remove redundant sizeof(char)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 8/9] build: no need for error message in PKG_CHECK_MODULES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 7/9] build: propagate global CFLAGS
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 6/9] build: default to not building static libraries
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 5/9] output/LOGEMU: resolve build warning
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/9] build: move global automake options into configure.ac
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• ulogd2 build updates
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/9] build: remove unused $(all_includes)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/9] build: remove -fPIC flag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/9] build: remove statements without obvious effect
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] build: remove statements without obvious effect
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/2] build: remove -fPIC flag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libmnl build updates 2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 5/5] build: remove redundant bison/lex tests
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/5] build: use AM_YFLAGS instead of overriding YACC
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/5] build: run autoupdate to replace obsolete constructs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/5] build: default to not building static libraries
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/5] build: resolve automake warning
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• conntrack-tools build updates 2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] build: use AC_OUTPUT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/2] build: default to not building static libraries
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_queue build updates 2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_log build updates 2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] build: use AC_OUTPUT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/2] build: default to not building static libraries
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/3] build: run autoupdate to replace obsolete constructs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/3] build: use AC_OUTPUT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/3] build: default to not building static libraries
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_conntrack build updates 2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnfnetlink build updates 2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/3] Remove distro-specific parts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/3] build: default to not building static libraries
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/3] build: use AC_OUTPUT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 46/49] net/netfilter: Use vzalloc
  • From: Jesper Juhl <jj@xxxxxxxxxxxxx>
• Re: icmp_error_message return?
  • From: "\"Oleg A. Arkhangelsky\"" <sysoleg@xxxxxxxxx>
• Re: [PATCH 46/49] net/netfilter: Use vzalloc
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 46/49] net/netfilter: Use vzalloc
  • From: Jiri Kosina <jkosina@xxxxxxx>
• [PATCH] netfilter: ipv6: fix overlap check for fragments
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• Re: Can NFQUEUE accept/continue when there is no userspace listener registered ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Can NFQUEUE accept/continue when there is no userspace listener registered ?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 46/49] net/netfilter: Use vzalloc
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 46/49] net/netfilter: Use vzalloc
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 46/49] net/netfilter: Use vzalloc
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 46/49] net/netfilter: Use vzalloc
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: Can NFQUEUE accept/continue when there is no userspace listener registered ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• RE: rules matching ipv6 prefix addrs
  • From: "Jeff Haran" <jharan@xxxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: [RFC 0/3] MPEG2/TS drop analyzer iptables match extension
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC 0/3] MPEG2/TS drop analyzer iptables match extension
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Can NFQUEUE accept/continue when there is no userspace listener registered ?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Can NFQUEUE accept/continue when there is no userspace listener registered ?
  • From: Darryl Miles <darryl-mailinglists@xxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• Re: [PATCH 5/5] ipv4: netfilter: ip_tables: fix information leak to userland
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/5] netfilter: netfilter fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: icmp_error_message return?
  • From: Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx>
• Re: [RFC 0/3] MPEG2/TS drop analyzer iptables match extension
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 5/5] ipv4: netfilter: ip_tables: fix information leak to userland
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: "H. Peter Anvin" <hpa@xxxxxxxxx>
• [PATCH 5/5] ipv4: netfilter: ip_tables: fix information leak to userland
  • From: kaber@xxxxxxxxx
• [PATCH 2/5] netfilter: nf_nat: fix compiler warning with CONFIG_NF_CT_NETLINK=n
  • From: kaber@xxxxxxxxx
• [PATCH 0/5] netfilter: netfilter fixes
  • From: kaber@xxxxxxxxx
• [PATCH 3/5] netfilter: fix nf_conntrack_l4proto_register()
  • From: kaber@xxxxxxxxx
• [PATCH 1/5] netfilter: nf_conntrack: allow nf_ct_alloc_hashtable() to get highmem pages
  • From: kaber@xxxxxxxxx
• [PATCH 4/5] ipv4: netfilter: arp_tables: fix information leak to userland
  • From: kaber@xxxxxxxxx
• Re: rules matching ipv6 prefix addrs
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: libnetfilter_queue exiting on big tcp sessions
  • From: Justin Yaple <yaplej@xxxxxxxxx>
• Re: libnetfilter_queue exiting on big tcp sessions
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: libnetfilter_queue exiting on big tcp sessions
  • From: Justin Yaple <yaplej@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.10
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [PATCH] ipv4: netfilter: ip_tables: fix information leak to userland
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ipv4: netfilter: arp_tables: fix information leak to userland
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: libnetfilter_queue exiting on big tcp sessions
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• Re: libnetfilter_queue exiting on big tcp sessions
  • From: Justin Yaple <yaplej@xxxxxxxxx>
• Re: clone packet with new destination address
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: rules matching ipv6 prefix addrs
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• rules matching ipv6 prefix addrs
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: libnetfilter_queue exiting on big tcp sessions
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.10
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• [ipset-5: 9/9] Manpage and help text fixes.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset-5: 0/9] ipset-5 patches
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset-5: 4/9] Fix gfp_flags at resizing
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset-5: 3/9] Test to list large hash sets added.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset-5: 6/9] Resizing converted to run under read-locking of the set
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset-5: 7/9] Add parser function to handle IPv4 and IPv6 differently.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset-5: 5/9] Remove to support resizing from kernel context.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset-5: 2/9] Listing for hash types fixed
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset-5: 1/9] Kernel compile-time files are added to .gitignore
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ipset-5: 8/9] Enforce handling IPv4 and IPv6 differently for hash:ip type.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: icmp_error_message return?
  • From: "\"Oleg A. Arkhangelsky\"" <sysoleg@xxxxxxxxx>
• Re: [PATCH]extensions/tos_values.c mask value not accurate in certain condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH]extensions/tos_values.c mask value not accurate in certain condition
  • From: DuanZhenzhong <zhenzhong.duan@xxxxxxxxxx>
• Re: conntrack-tools: build system cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrack-tools: build system cleanups
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: conntrack-tools: build system cleanups
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: conntrack-tools: build system cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_queue: build system cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_log: build system cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_conntrack: build system cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnfnetlink: build system cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libmnl cast remover
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: icmp_error_message return?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• icmp_error_message return?
  • From: "\"Oleg A. Arkhangelsky\"" <sysoleg@xxxxxxxxx>
• Re: clone packet with new destination address
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: clone packet with new destination address
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: clone packet with new destination address
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• [PATCH 7/7] Add .gitignore files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 5/7] build: remove unused $(all_libraries)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 6/7] build: no need for error message in PKG_CHECK_MODULES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/7] build: remove statements without effect
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/7] build: drop unused $(all_includes)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/7] build: use modern call syntax for AM_INIT_AUTOMAKE
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/7] build: use autoconf-suggested naming of files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• conntrack-tools: build system cleanups
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/10] Update .gitignore
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/10] build: remove -fPIC flag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/10] build: remove statements without effect
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/10] build: set Libs.private for pkgconfig file
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/10] build: no need for error message in PKG_CHECK_MODULES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/10] build: run AC_CANONICAL_HOST only
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/10] build: use simpler autoreconf in autogen
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/10] build: avoid use of deprecated INCLUDES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/10] build: use modern call syntax for AC_INIT, AM_INIT_AUTOMAKE
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/10] build: build: use autoconf-suggested naming of files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_queue: build system cleanups
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/11] Remove accidentally-added file "depcomp"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/11] Add .gitignore files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/11] build: set Libs.private for pkgconfig file
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/11] build: no need for error message in PKG_CHECK_MODULES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/11] build: remove -fPIC flag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/11] build: remove statements without effect
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/11] build: run AC_CANONICAL_HOST only
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/11] build: use simpler autoreconf in autogen
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/11] build: use modern call syntax for AC_INIT, AM_INIT_AUTOMAKE
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/11] build: avoid use of deprecated INCLUDES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/11] build: use autoconf-suggested naming of files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_log: build system cleanups
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 7/7] Update .gitignore
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 6/7] build: no need for error message in PKG_CHECK_MODULES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 5/7] build: remove -fPIC flag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/7] build: remove unused $(all_includes)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/7] build: remove statements without effect
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/7] build: use sh -e, remove autom4te.cache
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/7] build: set Libs.private for pkgconfig file
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_conntrack: build system cleanup
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 9/9] Add .gitignore files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 8/9] build: remove -fPIC flag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 7/9] build: remove statements without effect
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 6/9] build: run AC_CANONICAL_HOST only
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 5/9] build: use AC_CONFIG_MACRO_DIR as directed
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/9] build: use simpler autoreconf in autogen
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/9] build: avoid use of deprecated INCLUDES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/9] build: use modern call syntax for AC_INIT, AM_INIT_AUTOMAKE
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/9] build: use autoconf-suggested naming of files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnfnetlink: build system cleanup
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] examples: remove redundant casts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libmnl cast remover
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 1/2] IPv6: conntrack: Use protocol-related initialization routine to initial queues of IPv6 connection track
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• [PATCH] ipv4: netfilter: arp_tables: fix information leak to userland
  • From: Vasiliy Kulikov <segooon@xxxxxxxxx>
• [PATCH] ipv4: netfilter: ip_tables: fix information leak to userland
  • From: Vasiliy Kulikov <segooon@xxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.10
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: fix nf_conntrack_l4proto_register()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.10
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: fix nf_conntrack_l4proto_register()
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [ANNOUNCE]: Release of iptables-1.4.10
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] libxtables: change option precedence order to be intuitive
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ANNOUNCE]: Release of iptables-1.4.10
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: tproxy: added IPv6 support to the socket match
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter: nf_nat: make find/put static
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] libxtables: change option precedence order to be intuitive
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] xtables-addons: match packets based on status of grsecurity RBAC
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] libxtables: change option precedence order to be intuitive
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: tproxy: added IPv6 support to the socket match
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: tproxy: added IPv6 support to the socket match
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• Re: netfilter: nf_nat: make find/put static
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• Re: CONMARK and SNAT
  • From: Jyotiswarup Raiturkar <jyotisr5@xxxxxxxxxxxxxx>
• Re: CONMARK and SNAT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• CONMARK and SNAT
  • From: Jyotiswarup Raiturkar <jyotisr5@xxxxxxxxxxxxxx>
• Re: [PATCH] libxtables: change option precedence order to be intuitive
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] conntrack: allow nf_ct_alloc_hashtable() to get highmem pages
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] libxtables: change option precedence order to be intuitive
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• netfilter for DPI
  • From: Pete Kay <petedao@xxxxxxxxx>
• [PATCH] conntrack: allow nf_ct_alloc_hashtable() to get highmem pages
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [rfc v2.1 03/10] ipvs network name space aware: conn
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: netns patches WAS( Re: [PATCH 8/8] net: Implement socketat.
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [rfc v2.1 03/10] ipvs network name space aware: conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [rfc v2 03/10] ipvs network name space aware: conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: netns patches WAS( Re: [PATCH 8/8] net: Implement socketat.
  • From: jamal <hadi@xxxxxxxxxx>
• [PATCH] netfilter: Add missing CONFIG_SYSCTL checks in ipv6's nf_conntrack_reasm.c
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for October 25 (netfilter/nf_conntrack_reasm)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [ULOGD2] UNIXSOCK plugin (v5b)
  • From: Eric Leblond <eric@xxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: linux-next: Tree for October 25 (netfilter/nf_conntrack_reasm)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for October 25 (netfilter/xt_socket)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for October 25 (netfilter/nf_conntrack_reasm)
  • From: Randy Dunlap <randy.dunlap@xxxxxxxxxx>
• Re: linux-next: Tree for October 25 (netfilter/xt_socket)
  • From: Randy Dunlap <randy.dunlap@xxxxxxxxxx>
• Re: [PATCH] libxtables: change option precedence order to be intuitive
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH v2 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: multi-icmp-type extension, similar to multiport
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/2] tproxy: add IPv6 support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: don't always initialize ct->proto
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v2 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• FYI: net-2.6 and net-next-2.6 rebased
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 5/9] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: libmnl: misc code updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: ipset-5 build patches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipset-5 build patches
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: libmnl: misc code updates
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] netfilter: remove modulo operations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: [patch] arptables: some patches from debian
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Moving modified packets between processes
  • From: Kfir Lavi <lavi.kfir@xxxxxxxxx>
• Re: Moving modified packets between processes
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Moving modified packets between processes
  • From: Kfir Lavi <lavi.kfir@xxxxxxxxx>
• Re: Moving modified packets between processes
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Moving modified packets between processes
  • From: Kfir Lavi <lavi.kfir@xxxxxxxxx>
• Re: [PATCH] netfilter: don't always initialize ct->proto
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] netfilter: don't always initialize ct->proto
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 5/9] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>
• [PATCH] netfilter: remove modulo operations
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] netfilter: don't always initialize ct->proto
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: libmnl: misc code updates
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libmnl: misc code updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/9] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: Balazs Scheidler <bazsi@xxxxxxxxxx>
• Re: [rfc v2 00/10] ipvs network name space (netns) aware
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [rfc v2 00/10] ipvs network name space (netns) aware
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 12/13] nlmsg: use bool return type for yes-no functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 13/13] attr: rename str_null from NULL away
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/13] include: add cplusplus guards for extern
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/13] socket: use more appropriate types for mnl_socket_bind
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/13] callback: mnl_cb_run should use a void *
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/13] attr: string functions should take char *
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/13] include: consistent usage of "extern"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/13] doc: documentation updates
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/13] socket: remove statement with no effect
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/13] src: remove redundant casts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/13] src: add const qualifiers
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/13] src: avoid using deprecated unspecified argument lists
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/13] build: fix disable_static functionality
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libmnl: misc code updates
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [rfc v2 03/10] ipvs network name space aware: conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 06/10] ipvs network name space aware: ctl
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 05/10] ipvs: Add ipvs_skbnet
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 09/10] ipvs network name space aware: proto
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 07/10] ipvs network name space aware: est
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 00/10] ipvs network name space (netns) aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 10/10] ipvs network name space aware: sync and xmit
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 01/10] ipvs network name space aware: include files
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 08/10] ipvs network name space aware: ftp
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 04/10] ipvs network name space aware: core
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [rfc v2 02/10] ipvs network name space aware: app
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: clone packet with new destination address
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: clone packet with new destination address
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• clone packet with new destination address
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Misleading statement in netfilter-hacking-HOWTO
  • From: "Jeff Haran" <jharan@xxxxxxxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 00/12] ipvs: changes for local server and local client
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] iptables/extensions/libipt_icmp.c: Add numeric values to the output of iptables -p icmp -h
  • From: Regid Ichira <regid.i@xxxxxxxxxxx>
• Re: [PATCH v2 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 5/9] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>
• Re: [PATCH 4/9] tproxy: added tproxy sockopt interface in the IPV6 layer
  • From: YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>
• Re: [PATCH 63/72] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>
• Re: [PATCH 00/12] ipvs: changes for local server and local client
  • From: Julian Anastasov <ja@xxxxxx>
• net GIT state...
  • From: David Miller <davem@xxxxxxxxxxxxx>
• multi-icmp-type extension, similar to multiport
  • From: Regid Ichira <regid.i@xxxxxxxxxxx>
• Re: [PATCH 00/72] netfilter: netfilter update for 2.6.37
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 00/72] netfilter: netfilter update for 2.6.37
  • From: kaber@xxxxxxxxx
• [PATCH 01/72] netfilter: nf_nat: add nf_nat_csum()
  • From: kaber@xxxxxxxxx
• [PATCH 02/72] netfilter: use NFPROTO_IPV4 instead of AF_INET
  • From: kaber@xxxxxxxxx
• [PATCH 03/72] netfilter: nf_nat_core: don't check if the tuple is used if there is no other choice
  • From: kaber@xxxxxxxxx
• [PATCH 04/72] netfilter: nf_nat: no IP_NAT_RANGE_MAP_IPS flags when alloc_null_binding()
  • From: kaber@xxxxxxxxx
• [PATCH 13/72] netfilter: ctnetlink: allow to specify the expectation flags
  • From: kaber@xxxxxxxxx
• [PATCH 10/72] ipvs: changes related to service usecnt
  • From: kaber@xxxxxxxxx
• [PATCH 11/72] netfilter: nf_nat: better error handling of nf_ct_expect_related() in helpers
  • From: kaber@xxxxxxxxx
• [PATCH 16/72] netfilter: nf_conntrack_sip: Add callid parser
  • From: kaber@xxxxxxxxx
• [PATCH 14/72] netfilter: ctnetlink: add support for user-space expectation helpers
  • From: kaber@xxxxxxxxx
• [PATCH 15/72] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument
  • From: kaber@xxxxxxxxx
• [PATCH 08/72] ipvs: make rerouting optional with snat_reroute
  • From: kaber@xxxxxxxxx
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 12/72] netfilter: ctnetlink: missing validation of CTA_EXPECT_ZONE attribute
  • From: kaber@xxxxxxxxx
• [PATCH 07/72] ipvs: netfilter connection tracking changes
  • From: kaber@xxxxxxxxx
• [PATCH 19/72] IPVS: Allow null argument to ip_vs_scheduler_put()
  • From: kaber@xxxxxxxxx
• [PATCH 17/72] IPVS: compact ip_vs_sched_persist()
  • From: kaber@xxxxxxxxx
• [PATCH 18/72] IPVS: Add struct ip_vs_conn_param
  • From: kaber@xxxxxxxxx
• [PATCH 20/72] IPVS: ip_vs_{un,}bind_scheduler NULL arguments
  • From: kaber@xxxxxxxxx
• [PATCH 22/72] IPVS: Add persistence engine data to /proc/net/ip_vs_conn
  • From: kaber@xxxxxxxxx
• [PATCH 21/72] IPVS: Add struct ip_vs_pe
  • From: kaber@xxxxxxxxx
• [PATCH 24/72] IPVS: Allow configuration of persistence engines
  • From: kaber@xxxxxxxxx
• [PATCH 23/72] IPVS: management of persistence engine modules
  • From: kaber@xxxxxxxxx
• [PATCH 26/72] IPVS: sip persistence engine
  • From: kaber@xxxxxxxxx
• [PATCH 25/72] IPVS: Fallback if persistence engine fails
  • From: kaber@xxxxxxxxx
• [PATCH 29/72] netfilter: remove duplicated include
  • From: kaber@xxxxxxxxx
• [PATCH 27/72] netfilter: nf_nat: make find/put static
  • From: kaber@xxxxxxxxx
• [PATCH 28/72] netfilter: ipt_LOG: add bufferisation to call printk() once
  • From: kaber@xxxxxxxxx
• [PATCH 31/72] netfilter: add missing xt_log.h file
  • From: kaber@xxxxxxxxx
• [PATCH 30/72] netfilter: unregister nf hooks, matches and targets in the reverse order
  • From: kaber@xxxxxxxxx
• [PATCH 32/72] netfilter: xtables: resolve indirect macros 1/3
  • From: kaber@xxxxxxxxx
• [PATCH 09/72] netfilter: save the hash of the tuple in the original direction for latter use
  • From: kaber@xxxxxxxxx
• [PATCH 06/72] ipvs: extend connection flags to 32 bits
  • From: kaber@xxxxxxxxx
• [PATCH 05/72] netfilter: nf_conntrack: fix the hash random initializing race
  • From: kaber@xxxxxxxxx
• [PATCH 34/72] netfilter: xtables: resolve indirect macros 3/3
  • From: kaber@xxxxxxxxx
• [PATCH 33/72] netfilter: xtables: resolve indirect macros 2/3
  • From: kaber@xxxxxxxxx
• [PATCH 36/72] netfilter: xtables: remove unused defines
  • From: kaber@xxxxxxxxx
• [PATCH 35/72] netfilter: xtables: unify {ip,ip6,arp}t_error_target
  • From: kaber@xxxxxxxxx
• [PATCH 37/72] IPVS: ip_vs_dbg_callid() is only needed for debugging
  • From: kaber@xxxxxxxxx
• [PATCH 38/72] netfilter: fix kconfig unmet dependency warning
  • From: kaber@xxxxxxxxx
• [PATCH 40/72] netfilter: ctnetlink: add expectation deletion events
  • From: kaber@xxxxxxxxx
• [PATCH 39/72] netfilter: install missing ebtables headers for userspace
  • From: kaber@xxxxxxxxx
• [PATCH 42/72] Fixed race condition at ip_vs.ko module init.
  • From: kaber@xxxxxxxxx
• [PATCH 49/72] ipvs: create ip_vs_defrag_user
  • From: kaber@xxxxxxxxx
• [PATCH 41/72] ipvs: IPv6 tunnel mode
  • From: kaber@xxxxxxxxx
• [PATCH 48/72] ipvs: fix CHECKSUM_PARTIAL for TUN method
  • From: kaber@xxxxxxxxx
• [PATCH 52/72] ipvs: changes for local client
  • From: kaber@xxxxxxxxx
• [PATCH 50/72] ipvs: move ip_route_me_harder for ICMP
  • From: kaber@xxxxxxxxx
• [PATCH 53/72] ipvs: inherit forwarding method in backup
  • From: kaber@xxxxxxxxx
• [PATCH 51/72] ipvs: changes for local real server
  • From: kaber@xxxxxxxxx
• [PATCH 54/72] ipvs: provide address family for debugging
  • From: kaber@xxxxxxxxx
• [PATCH 56/72] tproxy: add lookup type checks for UDP in nf_tproxy_get_sock_v4()
  • From: kaber@xxxxxxxxx
• [PATCH 55/72] tproxy: kick out TIME_WAIT sockets in case a new connection comes in with the same tuple
  • From: kaber@xxxxxxxxx
• [PATCH 58/72] nf_nat: restrict ICMP translation for embedded header
  • From: kaber@xxxxxxxxx
• [PATCH 57/72] tproxy: fix hash locking issue when using port redirection in __inet_inherit_port()
  • From: kaber@xxxxxxxxx
• [PATCH 60/72] tproxy: added const specifiers to udp lookup functions
  • From: kaber@xxxxxxxxx
• [PATCH 59/72] tproxy: split off ipv6 defragmentation to a separate module
  • From: kaber@xxxxxxxxx
• [PATCH 61/72] tproxy: added udp6_lib_lookup function
  • From: kaber@xxxxxxxxx
• [PATCH 64/72] tproxy: added IPv6 socket lookup function to nf_tproxy_core
  • From: kaber@xxxxxxxxx
• [PATCH 62/72] tproxy: added tproxy sockopt interface in the IPV6 layer
  • From: kaber@xxxxxxxxx
• [PATCH 63/72] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: kaber@xxxxxxxxx
• [PATCH 65/72] tproxy: added IPv6 support to the TPROXY target
  • From: kaber@xxxxxxxxx
• [PATCH 45/72] ipvs: switch to notrack mode
  • From: kaber@xxxxxxxxx
• [PATCH 43/72] ipvs: fix CHECKSUM_PARTIAL for TCP, UDP
  • From: kaber@xxxxxxxxx
• [PATCH 66/72] tproxy: added IPv6 support to the socket match
  • From: kaber@xxxxxxxxx
• [PATCH 67/72] tproxy: use the interface primary IP address as a default value for --on-ip
  • From: kaber@xxxxxxxxx
• [PATCH 69/72] netfilter: xtables: add a missing pair of parentheses
  • From: kaber@xxxxxxxxx
• [PATCH 68/72] netfilter: ebtables: remove unused definitions
  • From: kaber@xxxxxxxxx
• [PATCH 72/72] netfilter: ebtables: replace EBT_WATCHER_ITERATE macro
  • From: kaber@xxxxxxxxx
• [PATCH 71/72] netfilter: ebtables: replace EBT_MATCH_ITERATE macro
  • From: kaber@xxxxxxxxx
• [PATCH 70/72] netfilter: ebtables: replace EBT_ENTRY_ITERATE macro
  • From: kaber@xxxxxxxxx
• [PATCH 47/72] ipvs: stop ICMP from FORWARD to local
  • From: kaber@xxxxxxxxx
• [PATCH 1/2] tproxy: add IPv6 support for socket match
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 2/2] tproxy: add IPv6 support to the TPROXY target
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 0/2] tproxy: add IPv6 support
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 46/72] ipvs: do not schedule conns from real servers
  • From: kaber@xxxxxxxxx
• [PATCH 44/72] ipvs: optimize checksums for apps
  • From: kaber@xxxxxxxxx
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: Ebtables cleanup patches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 5/5] netfilter: ebtables: replace EBT_WATCHER_ITERATE macro
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/5] netfilter: ebtables: replace EBT_MATCH_ITERATE macro
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/5] netfilter: ebtables: remove unused definitions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/5] netfilter: ebtables: replace EBT_ENTRY_ITERATE macro
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/5] netfilter: xtables: add a missing pair of parentheses
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Ebtables cleanup patches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH v2 9/9] tproxy: use the interface primary IP address as a default value for --on-ip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/12] ipvs: changes for local server and local client
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [GIT PULL nf-next-2.6] ipvs + nf_net
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 9/9] tproxy: use the interface primary IP address as a default value for --on-ip
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• [GIT PULL nf-next-2.6] ipvs + nf_net
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH v2 9/9] tproxy: use the interface primary IP address as a default value for --on-ip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 8/9] tproxy: added IPv6 support to the socket match
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 7/9] tproxy: added IPv6 support to the TPROXY target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 6/9] tproxy: added IPv6 socket lookup function to nf_tproxy_core
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 5/9] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 4/9] tproxy: added tproxy sockopt interface in the IPV6 layer
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 3/9] tproxy: added udp6_lib_lookup function
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 2/9] tproxy: added const specifiers to udp lookup functions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/12] ipvs: changes for local server and local client
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [PATCH v2 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [PATCH v2 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] nf_nat: restrict ICMP translation for embedded header
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] nf_nat: restrict ICMP translation for embedded header
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 3/3] tproxy: fix hash locking issue when using port redirection in __inet_inherit_port()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2 6/9] tproxy: added IPv6 socket lookup function to nf_tproxy_core
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• Re: [PATCH 2/3] tproxy: add lookup type checks for UDP in nf_tproxy_get_sock_v4()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2 7/9] tproxy: added IPv6 support to the TPROXY target
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH v2 8/9] tproxy: added IPv6 support to the socket match
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH v2 9/9] tproxy: use the interface primary IP address as a default value for --on-ip
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH v2 5/9] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH v2 4/9] tproxy: added tproxy sockopt interface in the IPV6 layer
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH v2 3/9] tproxy: added udp6_lib_lookup function
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH v2 2/9] tproxy: added const specifiers to udp lookup functions
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH v2 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH v2 0/9] tproxy: add IPv6 support
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• Re: [PATCH 1/3] tproxy: kick out TIME_WAIT sockets in case a new connection comes in with the same tuple
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 9/9] tproxy: use the interface primary IP address as a default value for --on-ip
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• Re: [PATCH 6/9] tproxy: added IPv6 socket lookup function to nf_tproxy_core
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• Re: [PATCH 7/9] tproxy: added IPv6 support to the TPROXY target
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• Re: [PATCH 00/12] ipvs: changes for local server and local client
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 7/9] tproxy: added IPv6 support to the TPROXY target
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• Re: [PATCH 4/9] tproxy: added tproxy sockopt interface in the IPV6 layer
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• Re: [PATCH 7/9] tproxy: added IPv6 support to the TPROXY target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 9/9] tproxy: use the interface primary IP address as a default value for --on-ip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 7/9] tproxy: added IPv6 support to the TPROXY target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 6/9] tproxy: added IPv6 socket lookup function to nf_tproxy_core
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 4/9] tproxy: added tproxy sockopt interface in the IPV6 layer
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] Fixed race condition at ip_vs.ko module init.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Horms <horms@xxxxxxxxxxxx>
• Re: [RFC PATCH 3/9] ipvs network name space aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [RFC PATCH 3/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: [RFC PATCH 5/9] ipvs network name space aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 5/9] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: Balazs Scheidler <bazsi@xxxxxxxxxx>
• Re: [RFC PATCH 3/9] ipvs network name space aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 5/9] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>
• [PATCH 2/2] Add helper script pcap2ulog
  • From: Pierre Chifflier <chifflier@xxxxxxxxxxxx>
• [PATCH 4/9] tproxy: added tproxy sockopt interface in the IPV6 layer
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 5/9] tproxy: allow non-local binds of IPv6 sockets if IP_TRANSPARENT is enabled
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 9/9] tproxy: use the interface primary IP address as a default value for --on-ip
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 8/9] tproxy: added IPv6 support to the socket match
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 7/9] tproxy: added IPv6 support to the TPROXY target
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 6/9] tproxy: added IPv6 socket lookup function to nf_tproxy_core
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 3/9] tproxy: added udp6_lib_lookup function
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 2/9] tproxy: added const specifiers to udp lookup functions
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 1/9] tproxy: split off ipv6 defragmentation to a separate module
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 0/9] tproxy: add IPv6 support
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 1/3] tproxy: kick out TIME_WAIT sockets in case a new connection comes in with the same tuple
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 3/3] tproxy: fix hash locking issue when using port redirection in __inet_inherit_port()
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 2/3] tproxy: add lookup type checks for UDP in nf_tproxy_get_sock_v4()
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 0/3] tproxy fixes for current upstream code
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 1/2] Add new input plugin UNIXSOCK
  • From: Pierre Chifflier <chifflier@xxxxxxxxxxxx>
• [ULOGD2] UNIXSOCK plugin (v5b)
  • From: Pierre Chifflier <chifflier@xxxxxxxxxxxx>
• Re: libmnl build system patches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH 0/9] ipvs network name space (netns) aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [PATCH] net: make ctl_path local and const
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH 06/10] build: rebuild .pc files when configure status changed
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• libnetfilter-queue and the Callback
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• [PATCH 5/8] build: remove manual -fPIC flag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 6/8] build: use subdir-objects and CC_C_O
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/8] build: resolve autoreconf/libtoolize suggestions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/8] build: use libmnl's pkgconfig files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/8] build: just use autoreconf
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 8/8] Add .gitignore files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 7/8] build: run autoupdate
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/8] build: add separate option for kernel source directory
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• ipset-5 build patches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] Fixed race condition at ip_vs.ko module init.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] libxtables: change option precedence order to be intuitive
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables: option precedence order change
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [RFC 3/3] MPEG2/TS drop analyzer file: libxt_mp2t.c
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• [RFC 2/3] MPEG2/TS drop analyzer file: xt_mp2t.c
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• [RFC 1/3] MPEG2/TS drop analyzer file: xt_mp2t.h
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• [RFC 0/3] MPEG2/TS drop analyzer iptables match extension
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: [PATCH 06/10] build: rebuild .pc files when configure status changed
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 06/10] build: rebuild .pc files when configure status changed
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: [PATCH] xtables-addons: match packets based on status of grsecurity RBAC
  • From: "Anthony G. Basile" <basile@xxxxxxxxxxxxxxxxxx>
• [PATCH 02/10] build: do not abuse AM_INIT_AUTOMAKE for autoconf options
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/10] Add .gitignore files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/10] build: remove unneeded -dynamic -ldl -nostartfiles flags
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/10] build: default to not build static libraries
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/10] build: rebuild .pc files when configure status changed
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/10] build: resolve compiler warnings
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/10] build: run autoupdate
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/10] build: use subdir-objects and CC_C_O
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/10] build: automake options should be in AM_INIT_AUTOMAKE
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/10] build: just use autoreconf
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libmnl build system patches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch v5 04/12] IPVS: Add struct ip_vs_conn_param, IPv6 forgotten No
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v5 04/12] IPVS: Add struct ip_vs_conn_param, IPv6 forgotten No
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [patch v5 04/12] IPVS: Add struct ip_vs_conn_param, IPv6 forgotten ?
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [patch v4.1] ipvs: IPv6 tunnel mode
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: add expectation deletion events
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Question about ebtables.
  • From: AIJAZ BAIG <aijazbaig1@xxxxxxxxx>
• Re: Question about ebtables.
  • From: AIJAZ BAIG <aijazbaig1@xxxxxxxxx>
• Re: [PATCH] secmark: do not return early if there was no error
  • From: James Morris <jmorris@xxxxxxxxx>
• Re: [PATCH 00/12] ipvs: changes for local server and local client
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [RFC PATCH 0/9] ipvs network name space (netns) aware
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• Re: [RFC PATCH 0/9] ipvs network name space (netns) aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [PATCH] xtables-addons: match packets based on status of grsecurity RBAC
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: Install missing ebtables headers for userspace.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH resend] netfilter: fix kconfig unmet dependency warning
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH 1/9] ipvs network name space aware
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• Re: [PATCH 00/12] ipvs: changes for local server and local client
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: Question about ebtables.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Question about ebtables.
  • From: Sumin Xia <xiasumin1984@xxxxxxxxx>
• Re: [PATCH 1/4] secmark: make secmark object handling generic
  • From: James Morris <jmorris@xxxxxxxxx>
• [PATCH] xtables-addons: match packets based on status of grsecurity RBAC
  • From: basile@xxxxxxxxxxxxxxxxxx
• [PATCH 12/12] ipvs: provide address family for debugging
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 11/12] ipvs: inherit forwarding method in backup
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 10/12] ipvs: changes for local client
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 09/12] ipvs: changes for local real server
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 08/12] ipvs: move ip_route_me_harder for ICMP
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 07/12] ipvs: create ip_vs_defrag_user
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 06/12] ipvs: fix CHECKSUM_PARTIAL for TUN method
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 05/12] ipvs: stop ICMP from FORWARD to local
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 04/12] ipvs: do not schedule conns from real servers
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 03/12] ipvs: switch to notrack mode
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 02/12] ipvs: optimize checksums for apps
  • From: Julian Anastasov <ja@xxxxxx>