Linux TCP/IP Netfilter Devel

• Thread Index

• Re: Help: Cycle through iptables rules
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Felipe W Damasio <felipewd@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Felipe W Damasio <felipewd@xxxxxxxxx>
• Re: [PATCH] add nflog_snprintf_xml() to output a log in XML format
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] add nfq_snprintf_xml() to output a packet in XML format
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] add nflog_snprintf_xml() to output a log in XML format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] add nfq_snprintf_xml() to output a packet in XML format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] add nflog_snprintf_xml() to output a log in XML format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_statistic: remove nth_lock spinlock
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_statistic: remove nth_lock spinlock
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] netfilter: xt_statistic: remove nth_lock spinlock
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [patch] Fwd: Troubles compiling iptables v1.4.8
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Help: Cycle through iptables rules
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Help: Cycle through iptables rules
  • From: Felipe W Damasio <felipewd@xxxxxxxxx>
• Re: [PATCH RFC] netfilter: iptables target SYNPROXY
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH RFC] netfilter: iptables target SYNPROXY
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH RFC] netfilter: iptables target SYNPROXY
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH RFC] netfilter: iptables target SYNPROXY
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH RFC] netfilter: iptables target SYNPROXY
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH RFC] netfilter: iptables target SYNPROXY
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH RFC] netfilter: iptables target SYNPROXY
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH RFC] netfilter: iptables target SYNPROXY
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] utils: add missing include flags to Makefile
  • From: Brian Schang <netfilter@xxxxxxxxxxxxxxxx>
• [patch] Fwd: Troubles compiling iptables v1.4.8
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] utils: add missing include flags to Makefile
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: iptables 1.4.8
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [ANN] Linux Security Summit 2010 - Announcement and CFP
  • From: James Morris <jmorris@xxxxxxxxx>
• Re: Xtables 1.26 vs. Linux Kernel 2.6.34[.0] - Compile problem
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Xtables 1.26 vs. Linux Kernel 2.6.34[.0] - Compile problem
  • From: - <d.stussy@xxxxxxxxx>
• Re: libnetfilter_queue question
  • From: Victor Julien <lists@xxxxxxxxxxxx>
• Re: Any Performance benchmark on a Million conntracks
  • From: Simon Lodal <simonl@xxxxxxxxxx>
• Re: Xtables 1.26 vs. Linux Kernel 2.6.34[.0] - Compile problem
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Xtables 1.26 vs. Linux Kernel 2.6.34[.0] - Compile problem
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: iptables 1.4.8
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables 1.4.8
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/3] netfilter: netfilter fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Any Performance benchmark on a Million conntracks
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: Any Performance benchmark on a Million conntracks
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Any Performance benchmark on a Million conntracks
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [patch] IPVS: one-packet scheduling
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• iptables 1.4.8
  • From: Ladislav Hagara <ladislav.hagara@xxxxxxx>
• Re: iptables connlimit not works in RHEL 5.1
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables connlimit not works in RHEL 5.1
  • From: Narendra Choyal <narendrachoyal@xxxxxxxxx>
• Re: Any Performance benchmark on a Million conntracks
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: Any Performance benchmark on a Million conntracks
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• [PATCH 0/3] netfilter: netfilter fixes
  • From: kaber@xxxxxxxxx
• [PATCH 3/3] netfilter: fix description of expected checkentry return code on xt_target
  • From: kaber@xxxxxxxxx
• [PATCH 1/3] netfilter: nf_ct_sip: handle non-linear skbs
  • From: kaber@xxxxxxxxx
• [PATCH 2/3] netfilter: nf_conntrack: fix a race in __nf_conntrack_confirm against nf_ct_get_next_corpse()
  • From: kaber@xxxxxxxxx
• Re: [patch] IPVS: one-packet scheduling
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• iptables-next merged into master
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ANNOUNCE]: Release of iptables-1.4.8
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: RFC: netfilter: synproxy iptables target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: RFC: netfilter: synproxy iptables target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: RFC: netfilter: synproxy iptables target
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: RFC: netfilter: synproxy iptables target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: RFC: netfilter: synproxy iptables target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: RFC: netfilter: synproxy iptables target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nf_ct_ipv6 doesn't like ICMPv6 MTU notices
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Any Performance benchmark on a Million conntracks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] MASQUERADE: fix --to-ports parser
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: fix description of expected checkentry return code on xt_target
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nf_conntrack_core.c: fix for dead connection after flushing conntrack cache
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Any Performance benchmark on a Million conntracks
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Any Performance benchmark on a Million conntracks
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• RFC: netfilter: synproxy iptables target
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: libnetfilter_queue question
  • From: Eric Leblond <eric@xxxxxx>
• nf_ct_ipv6 doesn't like ICMPv6 MTU notices
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• libnetfilter_queue question
  • From: Victor Julien <lists@xxxxxxxxxxxx>
• [patch] IPVS: one-packet scheduling
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: ipset socket not closed
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] MASQUERADE: fix --to-ports parser
  • From: "Dmitry V. Levin" <ldv@xxxxxxxxxxxx>
• [PATCH] netfilter: fix description of expected checkentry return code on xt_target
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [RFC] NF: IP tables idletimer target implementation
  • From: Luciano Coelho <luciano.coelho@xxxxxxxxx>
• Re: [PATCH] nf_conntrack_core.c: fix for dead connection after flushing conntrack cache
  • From: Joerg Marx <joerg.marx@xxxxxxxxxxx>
• Re: ipset socket not closed
  • From: krunal patel <krunal.raj@xxxxxxxxx>
• Re: [PATCH -next] netfilter: xt_TEE depends on NF_CONNTRACK
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Jason Gunthorpe <jgunthorpe@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: ipset socket not closed
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Jason Gunthorpe <jgunthorpe@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCHv2] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Jason Gunthorpe <jgunthorpe@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: xt_TEE depends on NF_CONNTRACK
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH -next] netfilter: xt_TEE depends on NF_CONNTRACK
  • From: Randy Dunlap <randy.dunlap@xxxxxxxxxx>
• ipset socket not closed
  • From: krunal patel <krunal.raj@xxxxxxxxx>
• Re: [RFC] NF: IP tables idletimer target implementation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] MASQUERADE: fix --to-ports parser
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] iptables: add noreturn attribute to exit_tryhelp()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] REDIRECT: Fix --to-ports parser
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nf_conntrack_core.c: fix for dead connection after flushing conntrack cache
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter problem
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Whither xt_SYSRQ?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Whither xt_SYSRQ?
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: [PATCH] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 00/12] netfilter: netfilter update
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip
  • From: Jason Gunthorpe <jgunthorpe@xxxxxxxxxxxxxxxxxxxx>
• [PATCH 03/12] netfilter: xtables: dissolve do_match function
  • From: kaber@xxxxxxxxx
• [PATCH 01/12] netfilter: ip_tables: fix compilation when debug is enabled
  • From: kaber@xxxxxxxxx
• [PATCH 12/12] netfilter: remove unnecessary returns from void function()s
  • From: kaber@xxxxxxxxx
• [PATCH 05/12] netfilter: xtables: substitute temporary defines by final name
  • From: kaber@xxxxxxxxx
• [PATCH 06/12] netfilter: xtables: deconstify struct xt_action_param for matches
  • From: kaber@xxxxxxxxx
• [PATCH 09/12] netfilter: bridge-netfilter: fix crash in br_nf_forward_finish()
  • From: kaber@xxxxxxxxx
• [PATCH 11/12] netfilter: cleanup printk messages
  • From: kaber@xxxxxxxxx
• [PATCH 10/12] netfilter: change NF_ASSERT to WARN_ON
  • From: kaber@xxxxxxxxx
• [PATCH 04/12] netfilter: xtables: combine struct xt_match_param and xt_target_param
  • From: kaber@xxxxxxxxx
• [PATCH 02/12] netfilter: xtables: fix incorrect return code
  • From: kaber@xxxxxxxxx
• [PATCH 07/12] netfilter: xtables: change hotdrop pointer to direct modification
  • From: kaber@xxxxxxxxx
• [PATCH 08/12] netfilter: xtables: combine built-in extension structs
  • From: kaber@xxxxxxxxx
• [PATCH 00/12] netfilter: netfilter update
  • From: kaber@xxxxxxxxx
• Re: [PATCH net-next] net/: (netfilter related) Remove unnecessary returns from void function()s
  • From: Joe Perches <joe@xxxxxxxxxxx>
• iptables-next/TEE extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables: libxt_TEE
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH net-next] net/: (netfilter related) Remove unnecessary returns from void function()s
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: cleanup printk messages
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: change NF_ASSERT to WARN_ON
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Problem compiling libipq example
  • From: Zerouali Mehdi <mehdi.zerouali@xxxxxxxxxxxx>
• Re: Problem compiling libipq example
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Problem compiling libipq example
  • From: Zerouali Mehdi <mehdi.zerouali@xxxxxxxxxxxx>
• Re: linux-next: Tree for May 12 (netfilter: xt_TEE)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Problem compiling libipq example
  • From: Zerouali Mehdi <mehdi.zerouali@xxxxxxxxxxxx>
• Re: linux-next: Tree for May 12 (netfilter: xt_TEE)
  • From: Randy Dunlap <randy.dunlap@xxxxxxxxxx>
• Re: linux-next: Tree for May 12 (netfilter: xt_TEE)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: cleanup printk messages
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: cleanup printk messages
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] netfilter: cleanup printk messages
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• [PATCH 1/2] netfilter: change NF_ASSERT to WARN_ON
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Re: linux-next: Tree for May 12 (netfilter: xt_TEE)
  • From: Randy Dunlap <randy.dunlap@xxxxxxxxxx>
• [PATCH net-next] net/: (netfilter related) Remove unnecessary returns from void function()s
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: Whither xt_SYSRQ?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nf-next: a mixed bag, try#2
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 8/8] netfilter: xtables: combine built-in extension structs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 7/8] netfilter: xtables: change hotdrop pointer to direct modification
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 6/8] netfilter: xtables: deconstify struct xt_action_param for matches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 5/8] netfilter: xtables: substitute temporary defines by final name
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/8] netfilter: xtables: combine struct xt_match_param and xt_target_param
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/8] netfilter: xtables: dissolve do_match function
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/8] netfilter: xtables: fix incorrect return code
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/8] netfilter: ip_tables: fix compilation when debug is enabled
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• nf-next: a mixed bag, try#2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 11/11] netfilter: xtables: convert basic nfproto match functions into xt matches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Whither xt_SYSRQ?
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: [PATCH 11/11] netfilter: xtables: convert basic nfproto match functions into xt matches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 11/11] netfilter: xtables: convert basic nfproto match functions into xt matches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 11/11] netfilter: xtables: convert basic nfproto match functions into xt matches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 72/84] netfilter: xtables: inclusion of xt_TEE
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• libNetfilterQueue - Capturing all traffic
  • From: Michael Hakimi <yalakvar@xxxxxxxxx>
• Re: [PATCH 00/84] netfilter: netfilter update for 2.6.35
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 40/84] netfilter: ipvs: use NFPROTO values for NF_HOOK invocation
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 72/84] netfilter: xtables: inclusion of xt_TEE
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 01/84] netfilter: include/linux/netfilter/nf_conntrack_tuple_common.h: Checkpatch cleanup
  • From: kaber@xxxxxxxxx
• [PATCH 06/84] netfilter: xt_NFQUEUE: consolidate v4/v6 targets into one
  • From: kaber@xxxxxxxxx
• [PATCH 05/84] netfilter: xt_CT: par->family is an nfproto
  • From: kaber@xxxxxxxxx
• [PATCH 07/84] netfilter: xtables: add comment markers to Xtables Kconfig
  • From: kaber@xxxxxxxxx
• [PATCH 03/84] netfilter: remove stale declaration for ip6_masked_addrcmp()
  • From: kaber@xxxxxxxxx
• [PATCH 08/84] netfilter: xtables: merge xt_MARK into xt_mark
  • From: kaber@xxxxxxxxx
• [PATCH 10/84] netfilter: xtables: schedule xt_NOTRACK for removal
  • From: kaber@xxxxxxxxx
• [PATCH 09/84] netfilter: xtables: merge xt_CONNMARK into xt_connmark
  • From: kaber@xxxxxxxxx
• [PATCH 11/84] netfilter: update my email address
  • From: kaber@xxxxxxxxx
• [PATCH 15/84] netfilter: xt_recent: add an entry reaper
  • From: kaber@xxxxxxxxx
• [PATCH 12/84] netfilter: ebt_ip6: add principal maintainer in a MODULE_AUTHOR tag
  • From: kaber@xxxxxxxxx
• [PATCH 14/84] netfilter: xt_recent: remove old proc directory
  • From: kaber@xxxxxxxxx
• [PATCH 16/84] netfilter: xt_recent: check for unsupported user space flags
  • From: kaber@xxxxxxxxx
• [PATCH 13/84] netfilter: xt_recent: update description
  • From: kaber@xxxxxxxxx
• [PATCH 17/84] netfilter: remove unused headers in net/netfilter/nfnetlink.c
  • From: kaber@xxxxxxxxx
• [PATCH 04/84] netfilter: net/netfilter/ipvs/ip_vs_ftp.c: Remove use of NIPQUAD
  • From: kaber@xxxxxxxxx
• [PATCH 18/84] netfilter: xtables: do without explicit XT_ALIGN
  • From: kaber@xxxxxxxxx
• [PATCH 20/84] netfilter: xtables: limit xt_mac to ethernet devices
  • From: kaber@xxxxxxxxx
• [PATCH 19/84] netfilter: xtables: clean up xt_mac match routine
  • From: kaber@xxxxxxxxx
• [PATCH 21/84] netfilter: xtables: resort osf kconfig text
  • From: kaber@xxxxxxxxx
• [PATCH 22/84] netfilter: xtables: make use of caller family rather than match family
  • From: kaber@xxxxxxxxx
• [PATCH 32/84] netfilter: xt extensions: use pr_<level> (2)
  • From: kaber@xxxxxxxxx
• [PATCH 28/84] netfilter: xt extensions: use pr_<level>
  • From: kaber@xxxxxxxxx
• [PATCH 30/84] netfilter: remove unused headers in net/ipv4/netfilter/nf_nat_h323.c
  • From: kaber@xxxxxxxxx
• [PATCH 31/84] netfilter: xtables: make use of caller family rather than target family
  • From: kaber@xxxxxxxxx
• [PATCH 33/84] netfilter: xtables: make use of xt_request_find_target
  • From: kaber@xxxxxxxxx
• [PATCH 34/84] netfilter: xtables: consolidate code into xt_request_find_match
  • From: kaber@xxxxxxxxx
• [PATCH 36/84] netfilter: bridge: use NFPROTO values for NF_HOOK invocation
  • From: kaber@xxxxxxxxx
• [PATCH 35/84] netfilter: xt_recent: allow changing ip_list_[ug]id at runtime
  • From: kaber@xxxxxxxxx
• [PATCH 37/84] netfilter: ipv4: use NFPROTO values for NF_HOOK invocation
  • From: kaber@xxxxxxxxx
• [PATCH 38/84] netfilter: ipv6: use NFPROTO values for NF_HOOK invocation
  • From: kaber@xxxxxxxxx
• [PATCH 25/84] netfilter: xtables: reduce holes in struct xt_target
  • From: kaber@xxxxxxxxx
• [PATCH 40/84] netfilter: ipvs: use NFPROTO values for NF_HOOK invocation
  • From: kaber@xxxxxxxxx
• [PATCH 39/84] netfilter: decnet: use NFPROTO values for NF_HOOK invocation
  • From: kaber@xxxxxxxxx
• [PATCH 41/84] netfilter: xtables: untangle spaghetti if clauses in checkentry
  • From: kaber@xxxxxxxxx
• [PATCH 29/84] netfilter: remove unused headers in net/ipv6/netfilter/ip6t_LOG.c
  • From: kaber@xxxxxxxxx
• [PATCH 42/84] netfilter: xtables: change xt_match.checkentry return type
  • From: kaber@xxxxxxxxx
• [PATCH 43/84] netfilter: xtables: change xt_target.checkentry return type
  • From: kaber@xxxxxxxxx
• [PATCH 44/84] netfilter: xtables: change matches to return error code
  • From: kaber@xxxxxxxxx
• [PATCH 45/84] netfilter: xtables: change targets to return error code
  • From: kaber@xxxxxxxxx
• [PATCH 47/84] netfilter: xtables: shorten up return clause
  • From: kaber@xxxxxxxxx
• [PATCH 48/84] netfilter: xtables: remove xt_hashlimit revision 0
  • From: kaber@xxxxxxxxx
• [PATCH 49/84] netfilter: xtables: remove xt_multiport revision 0
  • From: kaber@xxxxxxxxx
• [PATCH 46/84] netfilter: xtables: slightly better error reporting
  • From: kaber@xxxxxxxxx
• [PATCH 53/84] netfilter: CLUSTERIP: clusterip_seq_stop() fix
  • From: kaber@xxxxxxxxx
• [PATCH 54/84] netfilter: xt_hashlimit: RCU conversion
  • From: kaber@xxxxxxxxx
• [PATCH 55/84] IPVS: fix potential stack overflow with overly long protocol names
  • From: kaber@xxxxxxxxx
• [PATCH 58/84] netfilter: only do skb_checksum_help on CHECKSUM_PARTIAL in nfnetlink_queue
  • From: kaber@xxxxxxxxx
• [PATCH 57/84] netfilter: only do skb_checksum_help on CHECKSUM_PARTIAL in ip6_queue
  • From: kaber@xxxxxxxxx
• [PATCH 56/84] netfilter: only do skb_checksum_help on CHECKSUM_PARTIAL in ip_queue
  • From: kaber@xxxxxxxxx
• [PATCH 61/84] netfilter: xtables: make XT_ALIGN() usable in exported headers by exporting __ALIGN_KERNEL()
  • From: kaber@xxxxxxxxx
• [PATCH 59/84] netfilter: remove invalid rcu_dereference() calls
  • From: kaber@xxxxxxxxx
• [PATCH 62/84] netfilter: fix some coding styles and remove moduleparam.h
  • From: kaber@xxxxxxxxx
• [PATCH 60/84] netfilter: xt_LED: add refcounts to LED target
  • From: kaber@xxxxxxxxx
• [PATCH 63/84] netfilter: bridge-netfilter: cleanup br_netfilter.c
  • From: kaber@xxxxxxxxx
• [PATCH 64/84] netfilter: bridge-netfilter: update a comment in br_forward.c about ip_fragment()
  • From: kaber@xxxxxxxxx
• [PATCH 51/84] netfilter: xtables: merge registration structure to NFPROTO_UNSPEC
  • From: kaber@xxxxxxxxx
• [PATCH 65/84] Restore __ALIGN_MASK()
  • From: kaber@xxxxxxxxx
• [PATCH 68/84] netfilter: bridge-netfilter: simplify IP DNAT
  • From: kaber@xxxxxxxxx
• [PATCH 66/84] netfilter: ipv6: move POSTROUTING invocation before fragmentation
  • From: kaber@xxxxxxxxx
• [PATCH 67/84] netfilter: ipv6: add IPSKB_REROUTED exclusion to NF_HOOK/POSTROUTING invocation
  • From: kaber@xxxxxxxxx
• [PATCH 70/84] netfilter: ipv6: move xfrm_lookup at end of ip6_route_me_harder
  • From: kaber@xxxxxxxxx
• [PATCH 71/84] netfilter: ipt_LOG/ip6t_LOG: use more appropriate log level as default
  • From: kaber@xxxxxxxxx
• [PATCH 69/84] netfilter: bridge-netfilter: Fix MAC header handling with IP DNAT
  • From: kaber@xxxxxxxxx
• [PATCH 74/84] netfilter: xt_TEE: have cloned packet travel through Xtables too
  • From: kaber@xxxxxxxxx
• [PATCH 76/84] netfilter: xt_TEE: resolve oif using netdevice notifiers
  • From: kaber@xxxxxxxxx
• [PATCH 81/84] netfilter: x_tables: rectify XT_FUNCTION_MAXNAMELEN usage
  • From: kaber@xxxxxxxxx
• [PATCH 80/84] netfilter: nf_conntrack: extend with extra stat counter
  • From: kaber@xxxxxxxxx
• [PATCH 79/84] netfilter: ip_tables: convert pr_devel() to pr_debug()
  • From: kaber@xxxxxxxxx
• [PATCH 82/84] netfilter: nf_ct_h323: switch "incomplete TPKT" message to pr_debug()
  • From: kaber@xxxxxxxxx
• [PATCH 83/84] netfilter: nf_conntrack_proto: fix warning with CONFIG_PROVE_RCU
  • From: kaber@xxxxxxxxx
• [PATCH 84/84] netfilter: use rcu_dereference_protected()
  • From: kaber@xxxxxxxxx
• [PATCH 78/84] netfilter: x_tables: move sleeping allocation outside BH-disabled region
  • From: kaber@xxxxxxxxx
• [PATCH 75/84] netfilter: xtables: remove old comments about reentrancy
  • From: kaber@xxxxxxxxx
• [PATCH 73/84] netfilter: xtables: make ip_tables reentrant
  • From: kaber@xxxxxxxxx
• [PATCH 77/84] netfilter: bridge-netfilter: fix refragmenting IP traffic encapsulated in PPPoE traffic
  • From: kaber@xxxxxxxxx
• [PATCH 72/84] netfilter: xtables: inclusion of xt_TEE
  • From: kaber@xxxxxxxxx
• [PATCH 50/84] netfilter: xtables: remove xt_string revision 0
  • From: kaber@xxxxxxxxx
• [PATCH 52/84] netfilter: ctnetlink: compute message size properly
  • From: kaber@xxxxxxxxx
• [PATCH 23/84] netfilter: update documentation fields of x_tables.h
  • From: kaber@xxxxxxxxx
• [PATCH 24/84] netfilter: xtables: remove almost-unused xt_match_param.data member
  • From: kaber@xxxxxxxxx
• [PATCH 27/84] netfilter: xtables: replace custom duprintf with pr_debug
  • From: kaber@xxxxxxxxx
• [PATCH 26/84] netfilter: xtables: do not print any messages on ENOMEM
  • From: kaber@xxxxxxxxx
• [PATCH 00/84] netfilter: netfilter update for 2.6.35
  • From: kaber@xxxxxxxxx
• [PATCH 02/84] netfilter: ebt_ip6: Use ipv6_masked_addr_cmp()
  • From: kaber@xxxxxxxxx
• Re: [PATCH] nf_conntrack_core.c: fix for dead connection after flushing conntrack cache
  • From: Joerg Marx <joerg.marx@xxxxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] iptables: optionally disable largefile support.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] iptables: optionally disable largefile support.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] iptables: optionally disable largefile support.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nf_conntrack_core.c: fix for dead connection after flushing conntrack cache
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] iptables: optionally disable largefile support.
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• Re: [PATCH] iptables: optionally disable largefile support.
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] iptables: optionally disable largefile support.
  • From: Karl Hiramoto <karl@xxxxxxxxxxxx>
• Re: [PATCH] nf_conntrack_core.c: fix for dead connection after flushing conntrack cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Document --state UNTRACKED
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf-next: a mixed bag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipt_LOG: MAC address output
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipt_LOG: MAC address output
  • From: Thomas Jarosch <thomas.jarosch@xxxxxxxxxxxxx>
• Re: [PATCH] Document --state UNTRACKED
  • From: Simon Lodal <simonl@xxxxxxxxxx>
• Re: [PATCH] Document --state UNTRACKED
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [PATCH] Document --state UNTRACKED
  • From: Simon Lodal <simonl@xxxxxxxxxx>
• Re: [PATCH] Document --state UNTRACKED
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] Document --state UNTRACKED
  • From: Simon Lodal <simonl@xxxxxxxxxx>
• Re: [PATCH net-next-2.6] net: if6_get_next() fix
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] net: if6_get_next() fix
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] net: if6_get_next() fix
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] net: if6_get_next() fix
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] net: if6_get_next() fix
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH net-next-2.6] net: if6_get_next() fix
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] net: if6_get_next() fix
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH net-next-2.6] net: if6_get_next() fix
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH net-next-2.6] net: if6_get_next() fix
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: ipt_LOG: MAC address output
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Valdis.Kletnieks@xxxxxx
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Valdis.Kletnieks@xxxxxx
• ipt_LOG: MAC address output
  • From: Thomas Jarosch <thomas.jarosch@xxxxxxxxxxxxx>
• Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Hannes Eder <heder@xxxxxxxxxx>
• [PATCH 11/11] netfilter: xtables: convert basic nfproto match functions into xt matches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/11] netfilter: xtables: move functions around
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• nf-next: a mixed bag
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/11] netfilter: ebtables: change ebt_basic_match to xt convention
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/11] netfilter: xtables: combine built-in extension structs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/11] netfilter: xtables: change hotdrop pointer to direct modification
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/11] netfilter: xtables: deconstify struct xt_action_param for matches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/11] netfilter: xtables: substitute temporary defines by final name
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/11] netfilter: xtables: combine struct xt_match_param and xt_target_param
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/11] netfilter: xtables: dissolve do_match function
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/11] netfilter: xtables: fix incorrect return code
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/11] netfilter: ip_tables: fix compilation when debug is enabled
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: mmotm 2010-04-28 - RCU whinges
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• mmotm 2010-04-28 - RCU whinges
  • From: Valdis.Kletnieks@xxxxxx
• Re: [PATCH] nfnetlink_queue: use hash table to speed up entry lookup
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: conntrack h323 reassembly
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.2 3/4] [PATCH v2.1 3/4] IPVS: make FTP work with full NAT support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.2 2/4] [PATCH v2.1 2/4] IPVS: make friends with nf_conntrack
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch v2.2 1/4] [PATCH v2.1 1/4] netfilter: xt_ipvs (netfilter matcher for IPVS)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: conntrack h323 reassembly
  • From: Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>
• Re: [PATCH] nfnetlink_queue: use hash table to speed up entry lookup
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] nfnetlink_queue: use hash table to speed up entry lookup
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: conntrack h323 reassembly
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: nfnetlink_queue: which userspace library?
  • From: David F <netfilter@xxxxxxxxxxxxxxxx>
• conntrack h323 reassembly
  • From: Stephen Hemminger <shemminger@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: xtables: inclusion of xt_SYSRQ
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: xtables: inclusion of xt_SYSRQ
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: xtables: inclusion of xt_SYSRQ
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: xtables: inclusion of xt_SYSRQ
  • From: John Haxby <john.haxby@xxxxxxxxxx>
• Re: nfnetlink_queue: which userspace library?
  • From: Eric Leblond <eric@xxxxxx>
• nfnetlink_queue: which userspace library?
  • From: David F <netfilter@xxxxxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: rectify XT_FUNCTION_MAXNAMELEN usage
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: [PATCH 2/2] netfilter: rectify XT_FUNCTION_MAXNAMELEN usage
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: bridge filter can't deal with big package of vlan tag and ipsec
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• bridge filter can't deal with big package of vlan tag and ipsec
  • From: "fenglg" <flg2932946@xxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: register an hook
  • From: Nicola Padovano <nicola.padovano@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: register an hook
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: DDoS attack causing bad effect on conntrack searches
  • From: Patrick McHardy <kaber@xxxxxxxxx>