Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.8 4/4] [patch v2.2 4/4] [PATCH v2.1 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.8 3/4] IPVS: make FTP work with full NAT support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.8 2/4] IPVS: make friends with nf_conntrack
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.8 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2] xt_helper: use ARRAY_SIZE()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] xt_statistic: add the comment
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] xt_helper: use sizeof()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] iptables: use skb->len for accounting
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] iptables: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] ip6tables: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] iptables: use skb->len for accounting
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] ip6tables: use skb->len for accounting
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] xt_quota: don't copy quota back to userspace
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] xt_quota: don't copy quota back to userspace
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] xt_quota: use per-rule spin lock
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] nf_conntrack_acct: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] iptables: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] ip6tables: use skb->len for accounting
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] arptables: use arp_hdr_len()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: RE: Re: Fwd: LVS on local node
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: RE: Re: Fwd: LVS on local node
  • From: Franchoze Eric <franchoze@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• Re: Re: Fwd: LVS on local node
  • From: Franchoze Eric <franchoze@xxxxxxxxx>
• Re: Re: Fwd: LVS on local node
  • From: Franchoze Eric <franchoze@xxxxxxxxx>
• How to filter connections using connmark with libnetfilter_conntrack
  • From: Tino Keitel <tkeitel@xxxxxxxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [RFC 1/1] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [RFC 0/1] netfilter: xtables: xt_condition inclusion with namespace fix
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: add xt_cpu match
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] netfilter: nfnetlink_log: Fix potential problem if skb->dev is null
  • From: Eric Leblond <eric@xxxxxx>
• re: netfilter: nfnetlink_log: send complete hardware header
  • From: Dan Carpenter <error27@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] nf_nat_core: merge the same lines
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [patch v2.8 4/4] [patch v2.2 4/4] [PATCH v2.1 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.8 3/4] IPVS: make FTP work with full NAT support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.8 2/4] IPVS: make friends with nf_conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.8 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.8 0/4] IPVS full NAT support + netfilter 'ipvs' match support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Fwd: LVS on local node
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Fwd: LVS on local node
  • From: Franchoze Eric <franchoze@xxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [patch v2.7 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Hannes Eder <heder@xxxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Regarding write send a packet to network that received in NF_IP_PRE_ROUTING
  • From: Padmalochan Moharana <padman.m@xxxxxxxxx>
• Re: [RFC v2] netfilter: xt_condition: add condition target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [RFC v2] netfilter: xt_condition: add condition target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/2] netfilter: xt_condition: export list management code
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 1/2] netfilter: xt_condition: export list management code
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: Are concurrent calls to tc action ipt safe?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC 1/2] netfilter: xt_condition: export list management code
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Are concurrent calls to tc action ipt safe?
  • From: "Gerd v. Egidy" <lists@xxxxxxxx>
• Re: [RFC 0/2] netfilter: xtables: CONDITION target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC 0/2] netfilter: xtables: CONDITION target implementation
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [RFC 2/2] netfilter: xtables: implement CONDITION target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [RFC 0/2] netfilter: xtables: CONDITION target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [RFC 1/2] netfilter: xt_condition: export list management code
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [RFC] setting up throughput threshold indications to userspace
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: <Luciano.Coelho@xxxxxxxxx>
• Re: [RFC] setting up throughput threshold indications to userspace
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Payam Chychi <pchychi@xxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• [ANNOUNCE] ulogd 2.0.0beta4
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libnetfilter_log 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH v2] ipt_REJECT: can't work with bridges
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [RFC] setting up throughput threshold indications to userspace
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [RFC] setting up throughput threshold indications to userspace
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] ipt_REJECT: can't work with bridges
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCHv4] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: inclusion of xt_condition
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [ANNOUNCE] libnetfilter_log 1.0.0 release
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] ipt_REDIRECT: only change dest-ip if not local ip
  • From: Bas van Sisseren <bas@xxxxxxxxxxxxxxxxx>
• [RFC] setting up throughput threshold indications to userspace
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Aijaz Baig <aijazbaig1@xxxxxxxxx>
• [PATCH] ipt_REJECT: can't work with bridges
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• [ANNOUNCE] conntrack-tools 0.9.15 released
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter_conntrack 0.0.102 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv4] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCH iptables] extensions: libxt_rateest: fix bps options for iptables-save
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH iptables] extensions: libxt_rateest: fix bps options for iptables-save
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH iptables] extensions: libxt_rateest: fix bps options for iptables-save
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH iptables] extensions: libxt_rateest: fix bps options for iptables-save
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [rfc] netfilter: copy less data to the user
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv4] extensions: libxt_CHECKSUM extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv4] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH iptables-next] extensions: libxt_IDLETIMER: use xtables_param_act when checking options
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nfnetlink_queue: add definition of aligned_be64 for user-space apps
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH iptables-next] extensions: libxt_IDLETIMER: use xtables_param_act when checking options
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: packet flow - ebtables broute DROP target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• packet flow - ebtables broute DROP target
  • From: Aijaz Baig <aijazbaig1@xxxxxxxxx>
• Re: 'HELP ME PLEASE. libnetfilter_queue issue
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• [ANNOUNCE] libnetfilter_log 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nfnetlink_queue: add definition of aligned_be64 for user-space apps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv4] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• [PATCHv4] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [rfc] netfilter: copy less data to the user
  • From: Dan Carpenter <error27@xxxxxxxxx>
• Re: several messages
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [rfc] netfilter: copy less data to the user
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv3] extensions: libxt_CHECKSUM extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv2] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nfnetlink_log: do not expose NFULNL_COPY_DISABLED to user-space
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nfnetlink_queue: add definition of aligned_be64 for user-space apps
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• 'HELP ME PLEASE. libnetfilter_queue issue
  • From: "MAI JIN" <Jin.Mai@xxxxxxxxxxxxxxxxxxxx>
• [rfc] netfilter: copy less data to the user
  • From: Dan Carpenter <error27@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch] netfilter: default to NF_DROP in sip_help_tcp()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [patch] netfilter: default to NF_DROP in sip_help_tcp()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] nfnetlink_log: do not expose NFULNL_COPY_DISABLED to user-space
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: xtables: userspace notification target
  • From: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] netfilter: xtables: userspace notification target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: xtables: userspace notification target
  • From: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
• Re: unable to find struct ip_nat_multi_range
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] netfilter: nfnetlink_queue: add definition of aligned_be64 for user-space apps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nf_ct_tcp: fix flow recovery with TCP window tracking enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] A couple of netfilter fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• unable to find struct ip_nat_multi_range
  • From: Pete Kay <petedao@xxxxxxxxx>
• Re: netfilter hook/tuple question
  • From: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• [ANNOUNCE] libnetfilter_queue 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCHv3] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• [PATCHv2] extensions: libxt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• [PATCHv2] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• Re: Problem with Too many levels of symbolic links
  • From: Pete Kay <petedao@xxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• [patch v2.6 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: horms@xxxxxxxxxxxx
• [patch v2.6 3/4] IPVS: make FTP work with full NAT support
  • From: horms@xxxxxxxxxxxx
• [patch v2.6 2/4] IPVS: make friends with nf_conntrack
  • From: horms@xxxxxxxxxxxx
• [patch v2.6 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: horms@xxxxxxxxxxxx
• [patch v2.6 0/4] IPVS full NAT support + netfilter 'ipvs' match support
  • From: horms@xxxxxxxxxxxx
• Re: [patch v2.5 3/4] IPVS: make FTP work with full NAT support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Problem with Too many levels of symbolic links
  • From: Pete Kay <petedao@xxxxxxxxx>
• [patch] netfilter: default to NF_DROP in sip_help_tcp()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.5 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.5 3/4] IPVS: make FTP work with full NAT support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.5 2/4] IPVS: make friends with nf_conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.5 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.5 0/4] [patch v2.4 0/4] IPVS full NAT support + netfilter 'ipvs' match support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.4 0/4] IPVS full NAT support + netfilter 'ipvs' match support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.4 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.4 3/4] IPVS: make FTP work with full NAT support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.4 2/4] IPVS: make friends with nf_conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.4 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.4 0/4] IPVS full NAT support + netfilter 'ipvs' match support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch v2.3 3/4] IPVS: make FTP work with full NAT support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] tproxy: the length of lines should be within 80
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.3 3/4] IPVS: make FTP work with full NAT support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter: add CHECKSUM target
  • From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxxx>
• [PATCH] tproxy: the length of lines should be within 80
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] extensions: libipt_CHECKSUM extension
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• [PATCH] netfilter: add CHECKSUM target
  • From: "Michael S. Tsirkin" <mst@xxxxxxxxxx>
• about conntrack for oracle tns
  • From: "Neco.F" <necofang@xxxxxxxxx>
• Re: [patch v2.3 3/4] IPVS: make FTP work with full NAT support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: API...
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• API...
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• Re: [patch v2.3 3/4] IPVS: make FTP work with full NAT support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.3 2/4] IPVS: make friends with nf_conntrack
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.3 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: xt2 table core
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xt2 table core
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: xt2 table core
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xt2 table core
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: xt2 table core
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: xt2 table core
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xt2 table core
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: LED: fix man page fragment inclusion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: ipt_REJECT: avoid touching dst ref
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: postpone the checksum calculation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nf_conntrack_reasm: add fast path for in-order fragments
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: xt2 table core
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xt2 table core
  • From: Simon Lodal <simonl@xxxxxxxxxx>
• Re: xt2 table core
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [patch v2.3 0/4]
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.3 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.3 4/4] libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.3 3/4] IPVS: make FTP work with full NAT support
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [patch v2.3 2/4] IPVS: make friends with nf_conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: LED: fix man page fragment inclusion
  • From: Sergei Zhirikov <sfzhi@xxxxxxxxx>
• Re: [PATCH 0/9] netfilter: netfilter update
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: xtables addons; mktemp
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 0/9] netfilter: netfilter update
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/1] netfilter: netfilter fix
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/9] netfilter: netfilter update
  • From: David Miller <davem@xxxxxxxxxxxxx>
• xtables addons; mktemp
  • From: martinbarrowcliff <martinbarrowcliff@xxxxxxxxx>
• Re: [PATCH 1/9] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: ipt_REJECT: avoid touching dst ref
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 1/9] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 1/9] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/9] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: ip6t_REJECT: fix a dst leak in ipv6 REJECT
  • From: kaber@xxxxxxxxx
• [PATCH 0/1] netfilter: netfilter fix
  • From: kaber@xxxxxxxxx
• Re: [PATCH] xt_quota: also document negation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/9] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] xt_quota: also document negation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 1/9] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/9] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: kaber@xxxxxxxxx
• [PATCH 2/9] IPVS: one-packet scheduling
  • From: kaber@xxxxxxxxx
• [PATCH 3/9] netfilter: xt_IDLETIMER needs kdev_t.h
  • From: kaber@xxxxxxxxx
• [PATCH 0/9] netfilter: netfilter update
  • From: kaber@xxxxxxxxx
• [PATCH 4/9] netfilter: fix simple typo in KConfig for netfiltert xt_TEE
  • From: kaber@xxxxxxxxx
• [PATCH 9/9] bridge: add per bridge device controls for invoking iptables
  • From: kaber@xxxxxxxxx
• [PATCH 7/9] netfilter: ipt_LOG/ip6t_LOG: remove comparison within loop
  • From: kaber@xxxxxxxxx
• [PATCH 8/9] netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header
  • From: kaber@xxxxxxxxx
• [PATCH 5/9] netfilter: xt_connbytes: Force CT accounting to be enabled
  • From: kaber@xxxxxxxxx
• [PATCH 6/9] netfilter: complete the deprecation of CONFIG_NF_CT_ACCT
  • From: kaber@xxxxxxxxx
• Re: [PATCH] netfilter: fix a dst leak in ipv6 REJECT
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_quota.c: Support option negation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Packet marked wrongly as INVALID?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nf_conntrack_reasm: add fast path for in-order fragments
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: LED: fix man page fragment inclusion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_rateest: fix typo in the man page
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: fix a dst leak in ipv6 REJECT
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] netfilter: postpone the checksum calculation
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH v3] netfilter: xtables target SYNPROXY
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: xt2 table core
  • From: Simon Lodal <simonl@xxxxxxxxxx>
• [PATCH] extensions: libxt_rateest: fix typo in the man page
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_quota.c: Support option negation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [PATCH] extensions: libxt_quota.c: Support option negation
  • From: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
• Packet marked wrongly as INVALID?
  • From: Marco Innocenti <m.innocenti@xxxxxxxxx>
• [PATCH] nf_conntrack_reasm: add fast path for in-order fragments
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [Bug 16317] New: oops in nf_nat_setup_info
  • From: Siim Põder <siim@xxxxxxxxxxxxxxx>
• [PATCH] netfilter: LED: fix man page fragment inclusion
  • From: Sergei Zhirikov <sfzhi@xxxxxxxxx>
• Re: [Bug 16317] New: oops in nf_nat_setup_info
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ANNOUNCE] 7th Netfilter Workshop in Seville, Spain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: xt2 table core [*/33, not */56]
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 30/56] netfilter: xtables2: normal->compat target data translation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 32/56] netfilter: xtables: turn procfs entries to walk xt2 table list
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 33/56] netfilter: xtables2: switch ip6's tables to the xt2 table format
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 31/56] netfilter: xtables2: packet tracing
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 29/56] netfilter: xtables2: normal->compat match data translation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 28/56] netfilter: xtables2: outsource code into xts_match_to_xt1 function
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 27/56] netfilter: xtables2: compat->normal target data translation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 26/56] netfilter: xtables2: compat->normal match data translation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 22/56] netfilter: xtables2: xt1->xt2 translation - ADD_COUNTERS support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 24/56] netfilter: ip6tables: move mark_chains to xt1_perproto.c
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 25/56] netfilter: xtables2: xt2<->xt1 translation - compat GET_ENTRIES/SET_REPLACE support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 23/56] netfilter: xtables2: xt2->xt1 translation - compat GET_INFO support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 21/56] netfilter: xtables2: return counters after SET_REPLACE
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 20/56] netfilter: xtables2: xt1->xt2 translation - SET_REPLACE support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 19/56] netfilter: xtables2: xt2->xt1 translation - GET_ENTRIES support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 17/56] netfilter: xtables2: initial xt1->xt2 translation for tables
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 18/56] netfilter: xtables2: xt2->xt1 translation - GET_INFO support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 16/56] netfilter: xtables2: make a copy of the ipv6_filter table
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 15/56] netfilter: xtables: add xt_quota revision 3
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 13/56] netfilter: xtables2: jumpstack (de)allocation functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 14/56] netfilter: xtables2: table traversal
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 12/56] netfilter: xtables2: xt_check_target in combination with xt2 contexts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/56] netfilter: xtables2: per-rule target skeletal functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/56] netfilter: xtables2: per-rule match skeletal functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/56] netfilter: xtables: alternate size checking in xt_check_target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/56] netfilter: xtables: alternate size checking in xt_check_match
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/56] netfilter: xtables2: initial rule skeletal functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/56] netfilter: xtables2: initial chain skeletal functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/56] netfilter: xtables2: initial table skeletal functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/56] netfilter: xtables: convert basic nfproto match functions into xt matches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/56] netfilter: xtables: move functions around
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/56] netfilter: ebtables: change ebt_basic_match to xt convention
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/56] netfilter: ebtables: simplify a device in/out check
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• xt2 table core
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• netns net_mutex deadlock in my path
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: multi-path route can't keep long time connections
  • From: tingwei liu <tingw.liu@xxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH v2] netfilter: xtables target SYNPROXY
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH 2/2 v2] man - IP_NODEFRAG option for IPv4 socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: [PATCH 2/2] man - IP_NODEFRAG option for IPv4 socket
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] man - IP_NODEFRAG option for IPv4 socket
  • From: Michael Kerrisk <mtk.manpages@xxxxxxxxx>
• iptlog: tracing iptables packet flow
  • From: Michael Stapelberg <michael+netfilter@xxxxxxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: krunal patel <krunal.raj@xxxxxxxxx>
• Re: [PATCH V4 2/2] netfilter: Complete the deprecation of CONFIG_NF_CT_ACCT
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• Re: iptables: hashlimit & conntrack misc
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/2] libxt_hashlimit: always print burst value
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH V4 2/2] netfilter: Complete the deprecation of CONFIG_NF_CT_ACCT
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] libxt_conntrack: do print netmask
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/2] libxt_hashlimit: always print burst value
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables: hashlimit & conntrack misc
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH V4 1/2] netfilter: xt_connbytes: Force CT accounting to be enabled
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH V4 2/2] netfilter: Complete the deprecation of CONFIG_NF_CT_ACCT
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH V4 2/2] netfilter: Complete the deprecation of CONFIG_NF_CT_ACCT
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• [PATCH V4 1/2] netfilter: xt_connbytes: Force CT accounting to be enabled
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• nf-next-2.6 pull request, Complete deprecation of CONFIG_NF_CT_ACCT (V4)
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/2] netfilter: ipt_LOG/ip6t_LOG: remove comparison within loop
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RESEND] [PATCH] Fix a couple of problems with xt_SYSRQ
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• [RESEND2] [PATCH] Fix a couple of problems with xt_SYSRQ
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• [RESEND] [PATCH] Fix a couple of problems with xt_SYSRQ
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: Where to post patches to xtables-addons?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Where to post patches to xtables-addons?
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: [PATCH 2/3] netfilter: xt_connbytes: Force CT accounting to be enabled
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/3] netfilter: xt_connbytes: Force CT accounting to be enabled
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• Re: Where to post patches to xtables-addons?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 2/3] netfilter: xt_connbytes: Force CT accounting to be enabled
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 1/3] netfilter: Expose connection tracking accounting toggles
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 1/3] netfilter: Expose connection tracking accounting toggles
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• Where to post patches to xtables-addons?
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: [PATCH 1/3] netfilter: Expose connection tracking accounting toggles
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/3] netfilter: Complete the deprecation of CONFIG_NF_CT_ACCT
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: Expose connection tracking accounting toggles
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• [PATCH 2/3] netfilter: xt_connbytes: Force CT accounting to be enabled
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• nf-next-2.6 pull request, Complete deprecation of CONFIG_NF_CT_ACCT (V3)
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• Re: iptables: headers, chain length
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/3] includes: sync header files from Linux 2.6.35-rc1
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/3] xtables: remove xtables_set_revision function
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/3] xtables: another try at chain name length checking
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables: headers, chain length
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Fwd: API For Iptables
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• Re: [PATCH 1/2] net - IP_NODEFRAG option for IPv4 socket
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• need help with iptables and iptc
  • From: Pete Kay <petedao@xxxxxxxxx>
• Re: netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: krunal patel <krunal.raj@xxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: krunal patel <krunal.raj@xxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: krunal patel <krunal.raj@xxxxxxxxx>
• [PATCH] netfilter: xtables target SYNPROXY
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH 2/3] netfilter: xt_connbytes: Force CT tracking to be enabled
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/3] netfilter: Expose connection tracking accounting toggles
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/3] netfilter: xt_connbytes: Force CT tracking to be enabled
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] netfilter: xt_connbytes: Force CT tracking to be enabled
  • From: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] netfilter: xt_connbytes: Force CT tracking to be enabled
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/3] netfilter: xt_connbytes: Force CT tracking to be enabled
  • From: tim.gardner@xxxxxxxxxxxxx
• [PATCH 3/3] netfilter: Complete the deprecation of CONFIG_NF_CT_ACCT
  • From: tim.gardner@xxxxxxxxxxxxx
• [PATCH 1/3] netfilter: Expose connection tracking accounting toggles
  • From: tim.gardner@xxxxxxxxxxxxx
• [PATCH 0/3] nf-next-2.6 pull request, Complete deprecation of CONFIG_NF_CT_ACCT (V2)
  • From: tim.gardner@xxxxxxxxxxxxx
• Re: Utilization of Multi-core hardware by Netfilter
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Utilization of Multi-core hardware by Netfilter
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Utilization of Multi-core hardware by Netfilter
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [PATCH] net-next-2.6, Complete deprecation of CONFIG_NF_CT_ACCT
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] net-next-2.6, Complete deprecation of CONFIG_NF_CT_ACCT
  • From: Tim Gardner <timg@xxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] Fix simple typo in KConfig for netfiltert xt_TEE.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/2] net,man - IP_NODEFRAG option for IPv4 socket
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: multi-path route can't keep long time connections
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH -next] netfilter: xt_IDLETIMER needs kdev_t.h
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] net-next-2.6, Complete deprecation of CONFIG_NF_CT_ACCT
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch nf-next-2.6] IPVS: one-packet scheduling
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: Nishit Shah <nsshah.82@xxxxxxxxx>
• [patch nf-next-2.6] IPVS: one-packet scheduling
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• multi-path route can't keep long time connections
  • From: tingwei liu <tingw.liu@xxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: krunal patel <krunal.raj@xxxxxxxxx>
• NF_Queue Copy made to userspace
  • From: Mistick Levi <gmistick@xxxxxxxxx>
• Re: high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• high latency with ipset-4.2 and 2.6.27.45 kernel.
  • From: krunal patel <krunal.raj@xxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 0/2] net,man - IP_NODEFRAG option for IPv4 socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: Accessing packet marking functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Accessing packet marking functions
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• [PATCH -next] netfilter: xt_IDLETIMER needs kdev_t.h
  • From: Randy Dunlap <randy.dunlap@xxxxxxxxxx>
• [PATCH] net-next-2.6, Complete deprecation of CONFIG_NF_CT_ACCT
  • From: timg@xxxxxxx (Tim Gardner)
• Re: [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [ANNOUNCE] Linux Security Summit 2010 - Schedule Published
  • From: James Morris <jmorris@xxxxxxxxx>
• [RFC PATCH] netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• 2.6.34 ALIGN patch
  • From: martinbarrowcliff <martinbarrowcliff@xxxxxxxxx>
• Re: [PATCH 00/17] netfilter: netfilter update
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/1] netfilter: netfilter fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2] tcp: unify tcp flag macros
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: ip_conntrack fails to track Windows Vista TCP connection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: ip_conntrack fails to track Windows Vista TCP connection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• RE: ip_conntrack fails to track Windows Vista TCP connection
  • From: "Fischer, Anna" <anna.fischer@xxxxxx>
• [PATCH 03/17] netfilter: vmalloc_node cleanup
  • From: kaber@xxxxxxxxx
• [PATCH 04/17] netfilter: xt_rateest: Better struct xt_rateest layout
  • From: kaber@xxxxxxxxx
• [PATCH 06/17] netfilter: nf_conntrack: per_cpu untracking
  • From: kaber@xxxxxxxxx
• [PATCH 00/17] netfilter: netfilter update
  • From: kaber@xxxxxxxxx
• [PATCH 08/17] netfilter: ip_queue: rwlock to spinlock conversion
  • From: kaber@xxxxxxxxx
• [PATCH 05/17] netfilter: nf_conntrack: IPS_UNTRACKED bit
  • From: kaber@xxxxxxxxx
• [PATCH 07/17] netfilter: xt_sctp: use WORD_ROUND macro to calculate length of multiple of 4 bytes
  • From: kaber@xxxxxxxxx
• [PATCH 02/17] netfilter: xt_statistic: remove nth_lock spinlock
  • From: kaber@xxxxxxxxx
• [PATCH 10/17] netfilter: nfnetlink_queue: some optimizations
  • From: kaber@xxxxxxxxx
• [PATCH 09/17] netfilter: ip6_queue: rwlock to spinlock conversion
  • From: kaber@xxxxxxxxx
• [PATCH 11/17] netfilter: nfnetlink_log: RCU conversion
  • From: kaber@xxxxxxxxx
• [PATCH 12/17] netfilter: nfnetlink_log: RCU conversion, part 2
  • From: kaber@xxxxxxxxx
• [PATCH 16/17] netfilter: CLUSTERIP: RCU conversion
  • From: kaber@xxxxxxxxx
• [PATCH 13/17] netfilter: kill redundant check code in which setting ip_summed value
  • From: kaber@xxxxxxxxx
• [PATCH 17/17] netfilter: xtables: idletimer target implementation
  • From: kaber@xxxxxxxxx
• [PATCH 14/17] netfilter: defrag: remove one redundant atomic ops
  • From: kaber@xxxxxxxxx
• [PATCH 15/17] netfilter: defrag: kill unused work parameter of frag_kfree_skb()
  • From: kaber@xxxxxxxxx
• [PATCH 01/17] netfilter: br_netfilter: use skb_set_noref()
  • From: kaber@xxxxxxxxx
• Re: [PATCH v2] extensions: add idletimer xt target extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/1] ipvs: Add missing locking during connection table hashing and unhashing
  • From: kaber@xxxxxxxxx
• [PATCH 0/1] netfilter: netfilter fixes
  • From: kaber@xxxxxxxxx
• Re: [PATCH v6] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v6] netfilter: Xtables: idletimer target implementation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v6] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v5] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v5] netfilter: Xtables: idletimer target implementation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: CLUSTERIP: RCU conversion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] man - IP_NODEFRAG option for IPv4 socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• [PATCH 1/2] net - IP_NODEFRAG option for IPv4 socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• [PATCH 0/2] net,man - IP_NODEFRAG option for IPv4 socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: [PATCH] net: IP_NODEFRAG option for IPv4 socket
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH v2] extensions: add idletimer xt target extension
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] Fix a couple of problems with xt_SYSRQ
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• [PATCH v5] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] net: IP_NODEFRAG option for IPv4 socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: [PATCH] net: IP_NODEFRAG option for IPv4 socket
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] net: IP_NODEFRAG option for IPv4 socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: ip_conntrack fails to track Windows Vista TCP connection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: xtables-addons build fails
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: xtables-addons build fails
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• xtables-addons build fails
  • From: martinbarrowcliff <martinbarrowcliff@xxxxxxxxx>
• Re: ip_conntrack fails to track Windows Vista TCP connection
  • From: Narendra Choyal <narendrachoyal@xxxxxxxxx>
• Re: Using conntrack to create new expectation entry
  • From: Narendra Choyal <narendrachoyal@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: CLUSTERIP: RCU conversion
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• RE: ip_conntrack fails to track Windows Vista TCP connection
  • From: "Fischer, Anna" <anna.fischer@xxxxxx>
• RE: ip_conntrack fails to track Windows Vista TCP connection
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• RE: ip_conntrack fails to track Windows Vista TCP connection
  • From: "Fischer, Anna" <anna.fischer@xxxxxx>
• Re: ip_conntrack fails to track Windows Vista TCP connection
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: CLUSTERIP: RCU conversion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: ip_conntrack fails to track Windows Vista TCP connection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• ip_conntrack fails to track Windows Vista TCP connection
  • From: "Fischer, Anna" <anna.fischer@xxxxxx>
• Re: [PATCH 1/1] extensions: add idletimer xt target extension
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH 1/1] extensions: add idletimer xt target extension
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 0/1] iptables: extensions: add idletimer target extension
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [PATCH 1/1] extensions: add idletimer xt target extension
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH net-next-2.6] ipfrag : frag_kfree_skb() cleanup
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH net-next-2.6] ip_frag: Remove some atomic ops
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: kill redundant check code in which setting ip_summed value
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH net-next-2.6] ipfrag : frag_kfree_skb() cleanup
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH net-next-2.6] ip_frag: Remove some atomic ops
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: nfnetlink_log: RCU conversion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH net-next-2.6] ipfrag : frag_kfree_skb() cleanup
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] ip_frag: Remove some atomic ops
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• newbie seeking clarification between nf_conntrack_l3proto and ip_conntrack*
  • From: AIJAZ BAIG <aijazbaig1@xxxxxxxxx>
• Using conntrack to create new expectation entry
  • From: GLAUME Vincent <vincent.glaume@xxxxxx>
• Re: [PATCH xt-addons] xt_geoip: fix possible out-of-bounds access
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH xt-addons] xt_geoip: fix possible out-of-bounds access
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] tcp: unify tcp flag macros
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] tcp: unify tcp flag macros
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] tcp: unify tcp flag macros
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] tcp: unify tcp flag macros
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH xt-addons] xt_geoip: fix possible out-of-bounds access
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] tcp: unify tcp flag macros
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: RAWNAT: fix rawnat_ipv6_mask()
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] tcp: unify tcp flag macros
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH v4] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: `conntrack -L --src-nat --dst-nat` doesn't work with version 0.9.14
  • From: Mohit Mehta <mohit.mehta@xxxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: `conntrack -L --src-nat --dst-nat` doesn't work with version 0.9.14
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: kill redundant check code in which setting ip_summed value
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Jiri Olsa <jolsa@xxxxxxxxxx>
• `conntrack -L --src-nat --dst-nat` doesn't work with version 0.9.14
  • From: Mohit Mehta <mohit.mehta@xxxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: nfnetlink_log: RCU conversion
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: CLUSTERIP: RCU conversion
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: CLUSTERIP: RCU conversion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: nfnetlink_log: RCU conversion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: CLUSTERIP: RCU conversion
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: nfnetlink_queue: some optimizations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: nfnetlink_log: RCU conversion
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: nfnetlink_queue: some optimizations
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] Fix a couple of problems with xt_SYSRQ
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: ip6queue: rwlock to spinlock conversion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: ip6queue: rwlock to spinlock conversion
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: no reassembly for outgoing packets on RAW socket
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: queue: rwlock to spinlock conversion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: queue: rwlock to spinlock conversion
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: queue: rwlock to spinlock conversion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [NETFILTER] [PATCH] xt_sctp: use WORD_ROUND macro to calculate length of multiple of 4 bytes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6 2/2] conntrack: per_cpu untracking
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Redundant calls to nf_ct_tuplehash_to_ctrack
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Redundant calls to nf_ct_tuplehash_to_ctrack
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: Redundant calls to nf_ct_tuplehash_to_ctrack
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next-2.6 2/2] conntrack: per_cpu untracking
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next-2.6 2/2] conntrack: per_cpu untracking
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next-2.6 2/2] conntrack: per_cpu untracking
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Redundant calls to nf_ct_tuplehash_to_ctrack
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] conntrack: IPS_UNTRACKED bit
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: queue: rwlock to spinlock conversion
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [IPTABLES][PATCH 2/2 v2] xt_sctp: support FORWARD_TSN chunk type
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [IPTABLES][PATCH 1/2] xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] xt_rateest: Better struct xt_rateest layout
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables: xt_LED and docs
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next-2.6] xt_rateest: Better struct xt_rateest layout
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [IPTABLES][PATCH 2/2 v2] xt_sctp: support FORWARD_TSN chunk type
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• [NETFILTER] [PATCH] xt_sctp: use WORD_ROUND macro to calculate length of multiple of 4 bytes
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• [IPTABLES][PATCH 2/2] xt_sctp: support FORWARD_TSN chunk type
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• [IPTABLES][PATCH 1/2] xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
  • From: Shan Wei <shanwei@xxxxxxxxxxxxxx>
• Re: [PATCH v5] iptables code for netfilter target to trigger LED devices
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/4] doc: xt_LED: nroff formatting requirements
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/4] extensions: add the LED target
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/4] doc: xt_hashlimit: fix a typo
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/4] doc: xt_string: correct copy-and-pasting in manpage
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables: xt_LED and docs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH v5] iptables code for netfilter target to trigger LED devices
  • From: Adam Nielsen <a.nielsen@xxxxxxxxxxx>
• [PATCH nf-next-2.6 2/2] conntrack: per_cpu untracking
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Netfilter Implementation Details.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Netfilter Implementation Details.
  • From: Ninad Adi <adi.ninad@xxxxxxxxx>
• [PATCH nf-next-2.6] conntrack: IPS_UNTRACKED bit
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [RFC nf-next-2.6] conntrack: per cpu nf_conntrack_untracked
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [RFC nf-next-2.6] conntrack: per cpu nf_conntrack_untracked
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC nf-next-2.6] conntrack: per cpu nf_conntrack_untracked
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [RFC nf-next-2.6] conntrack: per cpu nf_conntrack_untracked
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next-2.6] netfilter: vmalloc_node cleanup
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v3] netfilter: Xtables: idletimer target implementation
  • From: luciano.coelho@xxxxxxxxx
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH v2] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] netfilter: Xtables: idletimer target implementation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: Xtables: idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [PATCH nf-next-2.6] netfilter: vmalloc_node cleanup
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [RFC] netfilter: WIP: Xtables idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC] netfilter: WIP: Xtables idletimer target implementation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [RFC] netfilter: WIP: Xtables idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• [RFC nf-next-2.6] conntrack: per cpu nf_conntrack_untracked
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] Fix simple typo in KConfig for netfiltert xt_TEE.
  • From: Arnd Hannemann <hannemann@xxxxxxxxxxxxxxxxxxx>
• nf-next-2.6
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_statistic: remove nth_lock spinlock
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH xt-addons] xt_geoip: fix possible out-of-bounds access
  • From: Florian Westphal <fwestphal@xxxxxxxxxx>
• Re: [PATCH 0/2] netfilter: netfilter fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [RFC] netfilter: WIP: Xtables idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC] netfilter: WIP: Xtables idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC] netfilter: WIP: Xtables idletimer target implementation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>