Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH 01/12] ipvs: fix CHECKSUM_PARTIAL for TCP, UDP
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 00/12] ipvs: changes for local server and local client
  • From: Julian Anastasov <ja@xxxxxx>
• [patch v4.1] ipvs: IPv6 tunnel mode
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [RFC PATCH 0/9] ipvs network name space (netns) aware
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH resend] netfilter: fix kconfig unmet dependency warning
  • From: Randy Dunlap <randy.dunlap@xxxxxxxxxx>
• Re: Missing kernel header files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: add expectation deletion events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: add expectation deletion events
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/4] secmark: export secctx, drop secmark in procfs
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/4] secmark: export secctx, drop secmark in procfs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 4/4] secmark: export secctx, drop secmark in procfs
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 3/4] conntrack: export lsm context rather than internal secid via netlink
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/4] secmark: make secmark object handling generic
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] secmark: do not return early if there was no error
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• netns patches WAS( Re: [PATCH 8/8] net: Implement socketat.
  • From: jamal <hadi@xxxxxxxxxx>
• Re: -j MARK in raw vs. mangle (was Re: xfrm by MARK: tcp problems when mark for in and out differ)
  • From: "Gerd v. Egidy" <lists@xxxxxxxx>
• Re: event-driven connection tracking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: -j MARK in raw vs. mangle (was Re: xfrm by MARK: tcp problems when mark for in and out differ)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: Install missing ebtables headers for userspace.
  • From: Nick Bowler <nbowler@xxxxxxxxxxxxxxxx>
• Re: [patch] arptables: some patches from debian
  • From: Peter Volkov <pva@xxxxxxxxxx>
• -j MARK in raw vs. mangle (was Re: xfrm by MARK: tcp problems when mark for in and out differ)
  • From: "Gerd v. Egidy" <lists@xxxxxxxx>
• Re: event-driven connection tracking
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: event-driven connection tracking
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: event-driven connection tracking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: ctnetlink: add expectation deletion events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: event-driven connection tracking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: event-driven connection tracking
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: event-driven connection tracking
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• [PATCH 4/4] secmark: export secctx, drop secmark in procfs
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 1/4] secmark: make secmark object handling generic
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 3/4] conntrack: export lsm context rather than internal secid via netlink
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 2/4] security: secid_to_secctx returns len when data is NULL
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH] secmark: do not return early if there was no error
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [patch] IPVS: ip_vs_dbg_callid() is only needed for debugging
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nf_nat: restrict ICMP translation for embedded header
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Quick intermediate cleanup
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 5/5] netfilter: xtables: remove unused defines
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/5] netfilter: xtables: unify {ip,ip6,arp}t_error_target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/5] netfilter: xtables: resolve indirect macros 3/3
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/5] netfilter: xtables: resolve indirect macros 2/3
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/5] netfilter: xtables: resolve indirect macros 1/3
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Quick intermediate cleanup
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: event-driven connection tracking
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• event-driven connection tracking
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [PATCH 4/5] conntrack: export lsm context rather than internal secid via netlink
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [RFC PATCH 4/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [PATCH 1/5] secmark: do not return early if there was no error
  • From: James Morris <jmorris@xxxxxxxxx>
• Re: [PATCH 1/5] secmark: do not return early if there was no error
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 1/5] secmark: do not return early if there was no error
  • From: James Morris <jmorris@xxxxxxxxx>
• Re: [PATCH 5/5] secmark: export secctx, drop secmark in procfs
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 4/5] conntrack: export lsm context rather than internal secid via netlink
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [PATCH 5/5] secmark: export secctx, drop secmark in procfs
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 4/5] conntrack: export lsm context rather than internal secid via netlink
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [PATCH 3/5] security: secid_to_secctx returns len when data is NULL
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [PATCH 1/5] secmark: do not return early if there was no error
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/5] secmark: make secmark object handling generic
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC PATCH 4/9] ipvs network name space aware
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• [PATCH 1/5] secmark: do not return early if there was no error
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 4/5] conntrack: export lsm context rather than internal secid via netlink
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 5/5] secmark: export secctx, drop secmark in procfs
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 3/5] security: secid_to_secctx returns len when data is NULL
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 2/5] secmark: make secmark object handling generic
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [RFC PATCH 2/9 v1.1] ipvs network name space aware (resend with right patch)
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [RFC PATCH 2/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [RFC PATCH 2/9] ipvs network name space aware
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• [PATCH] nf_nat: restrict ICMP translation for embedded header
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [patch] arptables: some patches from debian
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• [patch] arptables: some patches from debian
  • From: Peter Volkov <pva@xxxxxxxxxx>
• Re: [PATCH] Tarpit target for the last stable (2.6.35.7): right version
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] Tarpit target for the last stable (2.6.35.7): right version
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] Tarpit target for the last stable (2.6.35.7): right version
  • From: Ben Hutchings <bhutchings@xxxxxxxxxxxxxx>
• [PATCH] Tarpit target for the last stable (2.6.35.7): right version
  • From: Nicola <nicola.padovano@xxxxxxxxx>
• [PATCH] Tarpit target for the last stable (2.6.35.7)
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• [RFC PATCH 6/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [RFC PATCH 2/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [RFC PATCH 4/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [RFC PATCH 1/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [RFC PATCH 0/9] ipvs network name space (netns) aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [RFC PATCH 8/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [RFC PATCH 7/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [RFC PATCH 9/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [RFC PATCH 5/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [RFC PATCH 3/9] ipvs network name space aware
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: "Sven-Ola Tuecke" <sven-ola@xxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: "Sven-Ola Tuecke" <sven-ola@xxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: "Sven-Ola Tuecke" <sven-ola@xxxxxx>
• [patch] IPVS: ip_vs_dbg_callid() is only needed for debugging
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: "Sven-Ola Tuecke" <sven-ola@xxxxxx>
• Re: Announcement: MAP66 extension for ip6tables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Announcement: MAP66 extension for ip6tables
  • From: "Sven-Ola Tuecke" <sven-ola@xxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: restore per-rule effectiveness
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: restore per-rule effectiveness
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: restore per-rule effectiveness
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: xt_hashlimit: restore per-rule effectiveness
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• xt_hashlimit: restore per-rule effectiveness
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: checkentry function
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: checkentry function
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: checkentry function
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: checkentry function
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch v5 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: checkentry function
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: ipvs: Use frag walker helper in SCTP proto support.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: checkentry function
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: checkentry function
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: checkentry function
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Re: checkentry function
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: checkentry function
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH] netfilter: unregister nf hooks, matches and targets in the reverse order
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [patch v2] ipvs: IPv6 tunnel mode
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: remove duplicated include
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next] ipt_LOG: add bufferisation to call printk() once
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH net-next] nf_nat: make find/put static
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v5 00/12] IPVS: SIP Persistence Engine
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Missing kernel header files
  • From: David Corrales <corrales.david@xxxxxxxxx>
• [PATCH] netfilter: remove duplicated include
  • From: Nicolas Kaiser <nikai@xxxxxxxxx>
• [patch v5 12/12] IPVS: sip persistence engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 11/12] IPVS: Fallback if persistence engine fails
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 10/12] IPVS: Allow configuration of persistence engines
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 09/12] IPVS: management of persistence engine modules
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 07/12] IPVS: Add struct ip_vs_pe
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 05/12] IPVS: Allow null argument to ip_vs_scheduler_put()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 04/12] IPVS: Add struct ip_vs_conn_param
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 02/12] netfilter: nf_conntrack_sip: Add callid parser
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v5 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v4 10/12] IPVS: Allow configuration of persistence engines
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v4 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• [patch v4 12/12] IPVS: sip persistence engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 11/12] IPVS: Fallback if persistence engine fails
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 10/12] IPVS: Allow configuration of persistence engines
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 09/12] IPVS: management of persistence engine modules
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 07/12] IPVS: Add struct ip_vs_pe
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 05/12] IPVS: Allow null argument to ip_vs_scheduler_put()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 04/12] IPVS: Add struct ip_vs_conn_param
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 02/12] netfilter: nf_conntrack_sip: Add callid parser
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v4 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: ipvs: Use frag walker helper in SCTP proto support.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• ipvs: Use frag walker helper in SCTP proto support.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: jamal <hadi@xxxxxxxxxx>
• Re: [PATCH 3/6] build: add debug configure flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch v3 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• Re: problem with flowi structure
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nf-next] ipt_LOG: add bufferisation to call printk() once
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• checkentry function
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: [patch v3 00/12] IPVS: SIP Persistence Engine
  • From: Julian Anastasov <ja@xxxxxx>
• Re: problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net-next] nf_nat: make find/put static
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• [patch v3 12/12] IPVS: sip persistence engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 11/12] IPVS: Fallback if persistence engine fails
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 10/12] IPVS: Allow configuration of persistence engines
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 09/12] IPVS: management of persistence engine modules
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 07/12] IPVS: Add struct ip_vs_pe
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 05/12] IPVS: Allow null argument to ip_vs_scheduler_put()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 04/12] IPVS: Add struct ip_vs_conn_param
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 02/12] netfilter: nf_conntrack_sip: Add callid parser
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v3 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2 08/12] [PATCH 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2 07/12] [PATCH 07/12] IPVS: Add struct ip_vs_pe
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2 04/12] [PATCH 04/12] IPVS: Add struct ip_vs_conn_param
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2 04/12] [PATCH 04/12] IPVS: Add struct ip_vs_conn_param
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: unregister nf hooks, matches and targets in the reverse order
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: problem with flowi structure
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 3/6] build: add debug configure flag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch v2 08/12] [PATCH 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [patch v2 07/12] [PATCH 07/12] IPVS: Add struct ip_vs_pe
  • From: Julian Anastasov <ja@xxxxxx>
• Re: Missing kernel header files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [ANNOUNCE] ipset-4.4 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [patch v2 04/12] [PATCH 04/12] IPVS: Add struct ip_vs_conn_param
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [patch v2 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 12/12] [PATCH 12/12] IPVS: sip persistence engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 11/12] [PATCH 11/12] IPVS: Fallback if persistence engine fails
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 10/12] [PATCH 10/12] IPVS: Allow configuration of persistence engines
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 09/12] [PATCH 09/12] IPVS: management of persistence engine modules
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 08/12] [PATCH 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 07/12] [PATCH 07/12] IPVS: Add struct ip_vs_pe
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 06/12] [PATCH 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 05/12] [PATCH 05/12] IPVS: Allow null argument to ip_vs_scheduler_put()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 04/12] [PATCH 04/12] IPVS: Add struct ip_vs_conn_param
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 03/12] [PATCH 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 02/12] [PATCH 02/12] netfilter: nf_conntrack_sip: Add callid parser
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 2/2] [PATCH 2/2] Add support for persistence engines.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 01/12] [PATCH 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 1/2] [PATCH 1/2] Slightly simplify options conflicts logic
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2 0/2] [patch v1 0/2] ipvsadm: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: IS Mapping ipset to iptable chains possible
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: IS Mapping ipset to iptable chains possible
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: IS Mapping ipset to iptable chains possible
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• IS Mapping ipset to iptable chains possible
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [PATCH 2/6] ulogd.conf: Comment library dependant plugins
  • From: Eric Leblond <eric@xxxxxx>
• Re: [PATCH 3/6] build: add debug configure flag
  • From: Eric Leblond <eric@xxxxxx>
• Missing kernel header files
  • From: David Corrales <corrales.david@xxxxxxxxx>
• Re: how to use secure_tcp_sequence_number
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: how to use secure_tcp_sequence_number
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: could ipporthash be extended/modified
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] libnfnetlink-1.0.0 iftable.c:nlif_open() has handler unregister error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: could ipporthash be extended/modified
  • From: krunal patel <krunal.raj@xxxxxxxxx>
• Re: [PATCH 1/6] build: nfct and nflog can be disabled via configure option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/6] ulogd.conf: Comment library dependant plugins
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/6] build: add debug configure flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] ulogd: use snprintf instead of sprintf in printpkt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] libnfnetlink-1.0.0 iftable.c:nlif_open() has handler unregister error
  • From: Kuzin Andrey <kuzinandrey@xxxxxxxxx>
• Re: [patch v2] ipvs: IPv6 tunnel mode
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• how to use secure_tcp_sequence_number
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: could ipporthash be extended/modified
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: could ipporthash be extended/modified
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• could ipporthash be extended/modified
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [PATCH 4/4] netfilter: ctnetlink: add support for user-space expectation helpers
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: performing dnat from userspace with libnetfilter_conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: James Morris <jmorris@xxxxxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [PATCH 2/6] secmark: make secmark object handling generic
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 5/6] conntrack: export lsm context rather than internal secid via netlink
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [patch] ipvs: Keep track of backlog connections
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2] ipvs: IPv6 tunnel mode
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 4/6] security: secid_to_secctx returns len when data is NULL
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH 5/6] conntrack: export lsm context rather than internal secid via netlink
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• performing dnat from userspace with libnetfilter_conntrack
  • From: Steven Ayre <steveayre@xxxxxxxxx>
• Fwd: Fwd: TCP ack in libnetfilter_queue
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• Re: Fwd: TCP ack in libnetfilter_queue
  • From: Eric Leblond <eric@xxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: James Morris <jmorris@xxxxxxxxx>
• Fwd: TCP ack in libnetfilter_queue
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• Re: [rfc] IPVS: Masq local real-servers
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/6] secmark: make secmark object handling generic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/6] conntrack: export lsm context rather than internal secid via netlink
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 1/6] secmark: do not return early if there was no error
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/6] secmark: make secmark object handling generic
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 5/6] conntrack: export lsm context rather than internal secid via netlink
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 4/6] security: secid_to_secctx returns len when data is NULL
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 3/6] secmark: export binary yes/no rather than kernel internal secid
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 6/6] secmark: export secctx, drop secmark in procfs
  • From: Eric Paris <eparis@xxxxxxxxxx>
• [PATCH 1/6] secmark: do not return early if there was no error
  • From: Eric Paris <eparis@xxxxxxxxxx>
• Re: [ABI REVIEW][PATCH 0/8] Namespace file descriptors
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: jamal <hadi@xxxxxxxxxx>
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: David Lamparter <equinox@xxxxxxxxxx>
• Re: [ABI REVIEW][PATCH 0/8] Namespace file descriptors
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: Daniel Lezcano <dlezcano@xxxxxxxxxx>
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: jamal <hadi@xxxxxxxxxx>
• Re: [ABI REVIEW][PATCH 0/8] Namespace file descriptors
  • From: Andrew Lutomirski <luto@xxxxxxx>
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: David Lamparter <equinox@xxxxxxxxxx>
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: jamal <hadi@xxxxxxxxxx>
• [PATCH] netfilter: fix kconfig unmet dependency warning
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxx>
• Re: [ABI REVIEW][PATCH 0/8] Namespace file descriptors
  • From: David Lamparter <equinox@xxxxxxxxxx>
• Re: [ABI REVIEW][PATCH 0/8] Namespace file descriptors
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 3/8] ns proc: Add support for the network namespace.
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: David Lamparter <equinox@xxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: David Lamparter <equinox@xxxxxxxxxx>
• Re: [ABI REVIEW][PATCH 0/8] Namespace file descriptors
  • From: David Lamparter <equinox@xxxxxxxxxx>
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 8/8] net: Implement socketat.
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: Brian Haley <brian.haley@xxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: Pavel Emelyanov <xemul@xxxxxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: jamal <hadi@xxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: Pavel Emelyanov <xemul@xxxxxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: jamal <hadi@xxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: Pavel Emelyanov <xemul@xxxxxxxxxxxxx>
• Re: [PATCH 3/8] ns proc: Add support for the network namespace.
  • From: Louis Rilling <Louis.Rilling@xxxxxxxxxxx>
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: jamal <hadi@xxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: jamal <hadi@xxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 8/8] net: Implement socketat.
  • From: Pavel Emelyanov <xemul@xxxxxxxxxxxxx>
• [PATCH 8/8] net: Implement socketat.
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH 7/8] net: Allow setting the network namespace by fd
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH 6/8] ns proc: Add support for the mount namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH 5/8] ns proc: Add support for the ipc namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH 4/8] ns proc: Add support for the uts namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH 3/8] ns proc: Add support for the network namespace.
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH 2/8] ns: Introduce the setns syscall
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH 1/8] ns: proc files for namespace naming policy.
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [ABI REVIEW][PATCH 0/8] Namespace file descriptors
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 0/6] netfilter: netfilter fixes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: xtables does not reconise ipportiphash/ipportnethash sets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 0/6] netfilter: netfilter fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• xtables does not reconise ipportiphash/ipportnethash sets
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: don't disable BH again in BH disabled context
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 4/4] netfilter: ctnetlink: add support for user-space expectation helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: don't disable BH again in BH disabled context
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH 4/6] netfilter: fix a race in nf_ct_ext_create()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/6] netfilter: fix a race in nf_ct_ext_create()
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 5/6] netfilter: nf_nat_snmp: fix checksum calculation (v4)
  • From: kaber@xxxxxxxxx
• [PATCH 6/6] netfilter: nf_conntrack_defrag: check socket type before touching nodefrag flag
  • From: kaber@xxxxxxxxx
• [PATCH 0/6] netfilter: netfilter fixes
  • From: kaber@xxxxxxxxx
• [PATCH 3/6] netfilter: fix ipt_REJECT TCP RST routing for indev == outdev
  • From: kaber@xxxxxxxxx
• [PATCH 4/6] netfilter: fix a race in nf_ct_ext_create()
  • From: kaber@xxxxxxxxx
• [PATCH 1/6] netfilter: tproxy: nf_tproxy_assign_sock() can handle tw sockets
  • From: kaber@xxxxxxxxx
• [PATCH 2/6] netfilter: nf_ct_sip: default to NF_ACCEPT in sip_help_tcp()
  • From: kaber@xxxxxxxxx
• Re: [PATCH] net: ipv4,nodefrag: check socket type before touching nodefrag flag
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RESEND 1/3] netfilter: xtables: inclusion of xt_condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/4] netfilter: ctnetlink: add support for user-space expectation helpers
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 3/4] netfilter: ctnetlink: allow to specify the expectation flags
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/4] netfilter: ctnetlink: missing validation of CTA_EXPECT_ZONE attribute
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/4] netfilter: nf_nat: better error handling of nf_ct_expect_related() in helpers
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 5/6] filter_MARK: code factorization.
  • From: Eric Leblond <eric@xxxxxx>
• [PATCH 3/6] build: add debug configure flag
  • From: Eric Leblond <eric@xxxxxx>
• [PATCH 6/6] ulogd: use snprintf instead of sprintf in printpkt
  • From: Eric Leblond <eric@xxxxxx>
• [PATCH 4/6] ulogd.conf: add a complex but useful stack example
  • From: Eric Leblond <eric@xxxxxx>
• [PATCH 2/6] ulogd.conf: Comment library dependant plugins
  • From: Eric Leblond <eric@xxxxxx>
• [ULOGD PATCH 0/6] misc improvements and code cleaning
  • From: Eric Leblond <eric@xxxxxx>
• [PATCH 1/6] build: nfct and nflog can be disabled via configure option
  • From: Eric Leblond <eric@xxxxxx>
• Re: [PATCH 4/4] netfilter: ctnetlink: add support for user-space expectation helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/4] netfilter: ctnetlink: allow to specify the expectation flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND 1/3] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH RESEND 2/3] netfilter: xt_condition: change the value from boolean to u32
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH RESEND 1/3] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] ipvs: changes related to service usecnt
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v6] netfilter: save the hash of the tuple in the original direction for latter use
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 3/3] ipvs: make rerouting optional with snat_reroute
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/3] ipvs: Netfilter connection tracking changes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/4] netfilter: ctnetlink: add support for user-space expectation helpers
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v5 2/2] netfilter: save the hash of the tuple in the original direction for latter use
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 3/4] netfilter: ctnetlink: allow to specify the expectation flags
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/4] netfilter: nf_nat: better error handling of nf_ct_expect_related() in helpers
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/3] ipvs: Netfilter connection tracking changes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/3] ipvs: Netfilter connection tracking changes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/4] netfilter: ctnetlink: add support for user-space expectation helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: ctnetlink: allow to specify the expectation flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: ctnetlink: missing validation of CTA_EXPECT_ZONE attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/4] netfilter: nf_nat: better error handling of nf_ct_expect_related() in helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/4] We all need more expectations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5 2/2] netfilter: save the hash of the tuple in the original direction for latter use
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: PacketScript: packet mangling using the Lua scripting language
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• PacketScript: packet mangling using the Lua scripting language
  • From: André Graf <andre@xxxxxxxxxxx>
• Re: [PATCH v5 2/2] netfilter: save the hash of the tuple in the original direction for latter use
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v6] netfilter: save the hash of the tuple in the original direction for latter use
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• neighbour struct
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: [PATCH v5 2/2] netfilter: save the hash of the tuple in the original direction for latter use
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] net: ipv4,nodefrag: check socket type before touching nodefrag flag
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• [rfc] IPVS: Masq local real-servers
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Re: Fwd: LVS on local node
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 3/3] ipvs: make rerouting optional with snat_reroute
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 2/3] ipvs: Netfilter connection tracking changes
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] ipvs: changes related to service usecnt
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: unregister nf hooks, matches and targets in the reverse order
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [rfc 13/13] [RFC 13/13] IPVS: sip persistence engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [rfc 13/13] [RFC 13/13] IPVS: sip persistence engine
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] ipvs: changes related to service usecnt
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [patch v1 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 2/3] ipvs: Netfilter connection tracking changes
  • From: Julian Anastasov <ja@xxxxxx>
• Re: problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: [PATCH 2/3] ipvs: Netfilter connection tracking changes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/3] ipvs: extend connection flags to 32 bits
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v1 00/12] IPVS: SIP Persistence Engine
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: problem with flowi structure
  • From: AIJAZ BAIG <aijazbaig1@xxxxxxxxx>
• Re: [patch] netfilter: Use header-y instead of unifdef-y
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v1 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 3/3] ipvs: make rerouting optional with snat_reroute
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 2/3] ipvs: Netfilter connection tracking changes
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 1/3] ipvs: extend connection flags to 32 bits
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 0/3] ipvs: nfct changes
  • From: Julian Anastasov <ja@xxxxxx>
• Re: problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: [PATCH] netfilter: fix a race in nf_ct_ext_create()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/2 v2] netfilter: fix the hash random initializing race
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 resend] netfilter: ipt_REJECT can't send TCP reset
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 resend] nf_nat: no IP_NAT_RANGE_MAP_IPS flags when alloc_null_binding()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH resend] netfilter: nf_nat_core: don't check if the tuple is used if there is no other choice
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: use NFPROTO_IPV4 instead of AF_INET
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Strange behaviors: tcp header and id flag
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: problem with flowi structure
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• problem with flowi structure
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: Kernel Panic on OOM with 10 HTB rules
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [PATCH 2/4] iptables: limit chain name length to be consistent with targets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Kernel Panic on OOM with 10 HTB rules
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch] netfilter: Use header-y instead of unifdef-y
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v1 00/12] IPVS: SIP Persistence Engine
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v5 2/2] netfilter: save the hash of the tuple in the original direction for latter use
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RESEND 1/3] netfilter: xtables: inclusion of xt_condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/4] iptables: limit chain name length to be consistent with targets
  • From: Stig Thormodsrud <stig@xxxxxxxxxx>
• Re: [PATCH RESEND 1/3] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH RESEND 1/3] netfilter: xtables: inclusion of xt_condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RESEND 2/3] netfilter: xt_condition: change the value from boolean to u32
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH RESEND 1/3] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH RESEND 2/3] netfilter: xt_condition: change the value from boolean to u32
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RESEND 1/3] netfilter: xtables: inclusion of xt_condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: pull: misc nf bugfixes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/4] libiptc: add Libs.private to pkgconfig files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/4] libiptc: build with -Wl,--no-as-needed
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/4] iptables-xml: resolve compiler warnings
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/4] iptables: limit chain name length to be consistent with targets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• pull: misc nf bugfixes
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: nat: add nf_nat_csum()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: unregister nf hooks, matches and targets in the reverse order
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [patch] arptables respect LDFLAGS
  • From: Peter Volkov <pva@xxxxxxxxxx>
• Re: TCP Timeout Values
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] enable getsockopt() for IP_NODEFRAG
  • From: David Miller <davem@xxxxxxxxxxxxx>
• TCP Timeout Values
  • From: Erik Schweigert <ejschweigert@xxxxxxxxx>
• Re: change to max length of jump target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] enable getsockopt() for IP_NODEFRAG
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: libnetfilter_conntrack autotools updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] enable getsockopt() for IP_NODEFRAG
  • From: Michael Kerrisk <mtk.manpages@xxxxxxxxx>
• Re: [PATCH 2/2 v2] man - IP_NODEFRAG option for IPv4 socket
  • From: Michael Kerrisk <mtk.manpages@xxxxxxxxx>
• LVS with REDIRECT
  • From: Fabricio Archanjo <farchanjo@xxxxxxxxx>
• Re: VLAN ebtables target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: VLAN ebtables target
  • From: Michele Jr De Candia <michele.de_candia@xxxxxxxxxxxxxxxxxx>
• Re: VLAN ebtables target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: VLAN ebtables target
  • From: Michele Jr De Candia <michele.de_candia@xxxxxxxxxxxxxxxxxx>
• Re: VLAN ebtables target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: need help with capturing packet and bytes count from conntrack
  • From: James King <t.james.king@xxxxxxxxx>
• Re: [ANNOUNCE] libnetfilter_conntrack 0.9.0 release
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [ANNOUNCE] libnetfilter_conntrack 0.9.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Strange behaviors: tcp header and id flag
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• nfnetlink_queue interfering with ioctl calls
  • From: Roger Sala <rsala@xxxxxxxx>
• need help with capturing packet and bytes count from conntrack
  • From: Pete Kay <petedao@xxxxxxxxx>
• VLAN ebtables target
  • From: Michele Jr De Candia <michele.de_candia@xxxxxxxxxxxxxxxxxx>
• Re: [patch net] ipvs: fix active FTP
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 5/7] build: run AC_CANONICAL_HOST only
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 7/7] Add .gitignore
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 6/7] build: no need for error message in PKG_CHECK_MODULES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/7] build: avoid use of deprecated INCLUDES
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/7] build: use modern call syntax for AC_INIT, AM_INIT_AUTOMAKE
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/7] build: use autoconf-suggested naming of files
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/7] build: use simpler autoreconf in autogen
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_conntrack autotools updates
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• change to max length of jump target
  • From: Stig Thormodsrud <stig@xxxxxxxxxx>
• Re: [ANNOUNCE] libnetfilter_conntrack 0.9.0 release
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch net] ipvs: fix active FTP
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Kernel Panic on OOM with 10 HTB rules
  • From: Jarek Poplawski <jarkao2@xxxxxxxxx>
• Re: Kernel Panic on OOM with 10 HTB rules
  • From: Krzysztof Olędzki <ole@xxxxxx>
• Re: Kernel Panic on OOM with 10 HTB rules
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Kernel Panic on OOM with 10 HTB rules
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: Kernel Panic on OOM with 10 HTB rules
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Kernel Panic on OOM with 10 HTB rules
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 0.9.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Is nftables project still alive?
  • From: François Delawarde <fdelawarde@xxxxxxxxxxxxxxxxx>
• Is nftables project still alive?
  • From: Darcy Watkins <dwatkins@xxxxxxxxxxx>
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: TCP proto info
  • From: rui.sousa@xxxxxxxxxxxxx
• Re: [PATCH] ulogd2: Fix length handling in PCAP output
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: fragmented packet
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: fragmented packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [patch net] ipvs: fix active FTP
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: fragmented packet
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: fragmented packet
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: fragmented packet
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: fragmented packet
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: fragmented packet
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• [PATCH] ulogd2: Fix length handling in PCAP output
  • From: Jan Andres <jandres@xxxxxxx>
• Re: fragmented packet
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: fragmented packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: fragmented packet
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: fragmented packet
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: fragmented packet
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: fragmented packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: fragmented packet
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: fragmented packet
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: fragmented packet
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• fragmented packet
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• [PATCH] netfilter: nat: add nf_nat_csum()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH v3] netfilter: xtables target SYNPROXY
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH v3] netfilter: xtables target SYNPROXY
  • From: Fabricio Archanjo <farchanjo@xxxxxxxxx>
• Re: TCP proto info
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch net] ipvs: avoid oops for passive FTP
  • From: Julian Anastasov <ja@xxxxxx>
• Re: Resolver behind NetFilter NAT service vulnerable to DNS poisoning attack
  • From: Amir Herzberg <amir.herzberg@xxxxxxxxx>
• Re: [patch net] ipvs: avoid oops for passive FTP
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Resolver behind NetFilter NAT service vulnerable to DNS poisoning attack
  • From: Amir Herzberg <amir.herzberg@xxxxxxxxx>
• Fw: [Bug 17622] New: snmp trap ALG issue
  • From: Stephen Hemminger <shemminger@xxxxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: unregister nf hooks, matches and targets in the reverse order
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: Resolver behind NetFilter NAT service vulnerable to DNS poisoning attack
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Resolver behind NetFilter NAT service vulnerable to DNS poisoning attack
  • From: Amir Herzberg <amir.herzberg@xxxxxxxxx>
• Re: TCP proto info
  • From: rui.sousa@xxxxxxxxxxxxx
• [patch net] ipvs: avoid oops for passive FTP
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: TCP proto info
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: fix problems with active FTP
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: get tcp header
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: get tcp header
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• TCP proto info
  • From: rui.sousa@xxxxxxxxxxxxx
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: get tcp header
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: get tcp header
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: get tcp header
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: get tcp header
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• get tcp header
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: [PATCH] netfilter: fix a race in nf_ct_ext_create()
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: fix a race in nf_ct_ext_create()
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] netfilter: remove duplicate include line
  • From: Vlad Dogaru <ddvlad@xxxxxxxxxx>
• [PATCH] netfilter: remove duplicate include line
  • From: Vlad Dogaru <ddvlad@xxxxxxxxxx>
• [PATCH iptables-next 2/2] extensions: add condition target extension.
  • From: luciano.coelho@xxxxxxxxx
• [PATCH iptables-next 1/2] extensions: add condition match extension
  • From: luciano.coelho@xxxxxxxxx
• [PATCH iptables-next 0/2] extensions: add condition match and target extensions
  • From: luciano.coelho@xxxxxxxxx
• Re: write a new simple target for netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH][RESEND] netfilter: fix CONFIG_COMPAT support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Justin Kamerman <justin@xxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Elmar Stellnberger <estellnb@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Justin Kamerman <justin@xxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: [PATCH][RESEND] netfilter: fix CONFIG_COMPAT support
  • From: Florian Mickler <florian@xxxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Justin Kamerman <justin@xxxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• write a new simple target for netfilter
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: block network access for certain users/groups
  • From: Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
• Re: block network access for certain users/groups
  • From: Elmar Stellnberger <estellnb@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [patch net-next 0/4] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch net-next 0/4] IPVS
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [patch net-next 1/4] [patch nf-next v2] IPVS: ICMPv6 checksum calculation
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [patch net-next 1/4] [patch nf-next v2] IPVS: ICMPv6 checksum calculation
  • From: Julian Anastasov <ja@xxxxxx>
• [patch net-next 4/4] [PATCH net-next-2.6] ipvs: switch to GFP_KERNEL allocations
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch net-next 3/4] [patch nf-next] IPVS: convert __ip_vs_securetcp_lock to a spinlock
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch net-next 2/4] [patch nf-next] IPVS: convert __ip_vs_sched_lock to a spinlock
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch net-next 1/4] [patch nf-next v2] IPVS: ICMPv6 checksum calculation
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch net-next 0/4] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: block network access for certain users/groups
  • From: Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/5] Eliminate memory leak
  • From: Julia Lawall <julia@xxxxxxx>
• Re: Kernel Crash - 300+ Rule Creation
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [patch nf-next v2] IPVS: ICMPv6 checksum calculation
  • From: Julian Anastasov <ja@xxxxxx>
• Re: block network access for certain users/groups
  • From: Hagen Paul Pfeifer <hagen@xxxxxxxx>
• Re: Fwd: help needed with EXPORT_SYMBOL
  • From: Randy Dunlap <randy.dunlap@xxxxxxxxxx>
• Re: block network access for certain users/groups
  • From: Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
• block network access for certain users/groups
  • From: Elmar Stellnberger <estellnb@xxxxxxxxx>
• Re: Fwd: help needed with EXPORT_SYMBOL
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• Re: Fwd: help needed with EXPORT_SYMBOL
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Fwd: help needed with EXPORT_SYMBOL
  • From: Aijaz Baig <aijazbaig1@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [patch nf-next v2] IPVS: ICMPv6 checksum calculation
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Kernel Crash - 300+ Rule Creation
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 5/5] net/netfilter/ipvs: Eliminate memory leak
  • From: Julia Lawall <julia@xxxxxxx>
• Re: IPVS network namespace aware ?
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: IPVS network namespace aware ?
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• Re: IPVS network namespace aware ?
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH net-next-2.6] ipvs: switch to GFP_KERNEL allocations
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH net-next-2.6] ipvs: switch to GFP_KERNEL allocations
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: help needed with EXPORT_SYMBOL
  • From: Aijaz Baig <aijazbaig1@xxxxxxxxx>
• Re: [PATCH][RESEND] netfilter: fix CONFIG_COMPAT support
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: IPVS network namespace aware ?
  • From: Daniel Lezcano <daniel.lezcano@xxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: help needed with EXPORT_SYMBOL
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• Re: help needed with EXPORT_SYMBOL
  • From: Brian Gerst <brgerst@xxxxxxxxx>
• Re: help needed with EXPORT_SYMBOL
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_condition: add security capability support
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: help needed with EXPORT_SYMBOL
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: help needed with EXPORT_SYMBOL
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• Re: [BISECTED][2.6.35 regression] iptables busted on Mac G5
  • From: Mikael Pettersson <mikpe@xxxxxxxx>
• [PATCH] netfilter: xt_condition: add security capability support
  • From: luciano.coelho@xxxxxxxxx
• [PATCH][RESEND] netfilter: fix CONFIG_COMPAT support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [BISECTED][2.6.35 regression] iptables busted on Mac G5
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [BISECTED][2.6.35 regression] iptables busted on Mac G5
  • From: Florian Westphal <fw@xxxxxxxxx>
• [BISECTED][2.6.35 regression] iptables busted on Mac G5
  • From: Mikael Pettersson <mikpe@xxxxxxxx>
• Re: help needed with EXPORT_SYMBOL
  • From: Brian Gerst <brgerst@xxxxxxxxx>
• Re: help needed with EXPORT_SYMBOL
  • From: Aijaz Baig <aijazbaig1@xxxxxxxxx>
• [patch] netfilter: Use header-y instead of unifdef-y
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH net-2.6] header: fix broken headers for user space
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [patch nf-next] IPVS: ICMPv6 checksum calculation
  • From: xiaoyu Du <tingsrain@xxxxxxxxx>
• Re: TCPMSS clamp-mss-to-pmtu breaks packets that have no MSS set (incl. solution)
  • From: Daniel Gibson <metalcaedes@xxxxxxxxx>
• [patch v1 12/12] IPVS: sip persistence engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 11/12] IPVS: Fallback if persistence engine fails
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 10/12] IPVS: Allow configuration of persistence engines
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 09/12] IPVS: management of persistence engine modules
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 08/12] IPVS: Add persistence engine data to /proc/net/ip_vs_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 07/12] IPVS: Add struct ip_vs_pe
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 06/12] IPVS: ip_vs_{un,}bind_scheduler NULL arguments
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 05/12] IPVS: Allow null argument to ip_vs_scheduler_put()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v1 00/12] IPVS: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 04/12] IPVS: Add struct ip_vs_conn_param
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 03/12] IPVS: compact ip_vs_sched_persist()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 2/2] [PATCH 2/2] Add support for persistence engines.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 02/12] netfilter: nf_conntrack_sip: Add callid parser
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 1/2] [PATCH 1/2] Slightly simplify options conflicts logic
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 01/12] netfilter: nf_conntrack_sip: Allow ct_sip_get_header() to be called with a null ct argument
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v1 0/2] ipvsadm: SIP Persistence Engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>