Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH nft,RFC,PoC 2/2] src: restore typeof datatype when listing set definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft,RFC,PoC 2/2] src: restore typeof datatype when listing set definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libiptc] libip6tc.h: Add extern "C" wrapping for C++ linking.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,RFC,PoC 2/2] src: restore typeof datatype when listing set definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/2] typeof keyword
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/2] src: store expr, not dtype to track data in sets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [RFC 0/2] typeof keyword, alternate patch
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2 0/2] parser_bison: Get rid of (most) bison compiler warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,RFC,PoC 2/2] src: restore typeof datatype when listing set definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,RFC,PoC 1/2] parser: add typeof keyword for declarations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,RFC,PoC 0/2] typeof support for set / map
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/2] parser_bison: Get rid of (most) bison compiler warnings
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] bridge:fragmented packets dropped by bridge
  • From: Rundong Ge <rdong.ge@xxxxxxxxx>
• Re: [PATCH] bridge:fragmented packets dropped by bridge
  • From: Rundong Ge <rdong.ge@xxxxxxxxx>
• [PATCH nft] src: fix flush chain cache flag
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_flow_table: fix offload for flows that are subject to xfrm
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] selftests: netfilter: extend flowtable test script for ipsec
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] bridge:fragmented packets dropped by bridge
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/2] parser_bison: Get rid of (most) bison compiler warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] bridge:fragmented packets dropped by bridge
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft v2] src: Support maps as left side expressions
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• [PATCH] bridge:fragmented packets dropped by bridge
  • From: Rundong Ge <rdong.ge@xxxxxxxxx>
• Re: [PATCH nft] scanner: don't rely on fseek for input stream repositioning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/3] ipset patches for the nf tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ebtables: also count base chain policies
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_bitwise: add offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: map basechain priority to hardware priority
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: map basechain priority to hardware priority
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: map basechain priority to hardware priority
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net v2] ipvs: Improve robustness to the ipvs sysctl
  • From: hujunwei <hujunwei4@xxxxxxxxxx>
• Re: [PATCH net] ipvs: Improve robustness to the ipvs sysctl
  • From: hujunwei <hujunwei4@xxxxxxxxxx>
• Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net] ipvs: Improve robustness to the ipvs sysctl
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 0/3] ipset patches for the nf tree
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: ipset: Fix rename concurrency with listing
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/3] netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [net-next 1/2] ipvs: batch __ip_vs_cleanup
  • From: Julian Anastasov <ja@xxxxxx>
• [ANNOUNCE] ipset 7.3 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: ebtables: also count base chain policies
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] ipvs: Improve robustness to the ipvs sysctl
  • From: hujunwei <hujunwei4@xxxxxxxxxx>
• Re: [PATCH nft] src: Support maps as left side expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: Support maps as left side expressions
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: add include guard to xt_connlabel.h
  • From: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
• Re: [iptables PATCH 2/2] xtables: Drop support for /etc/xtables.conf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 1/2] nft: Set errno in nft_rule_flush()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: add include guard to xt_connlabel.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH] netfilter: nfacct: Fix alignment mismatch in xt_nfacct_match_info
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nfacct: Fix alignment mismatch in xt_nfacct_match_info
  • From: Juliana Rodrigueiro <juliana.rodrigueiro@xxxxxxxxxxxxx>
• Re: memory leak in __nf_hook_entries_try_shrink
  • From: syzbot <syzbot+c51f73e78e7e2ce3a31e@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: memory leak in bio_copy_user_iov
  • From: Bob Liu <bob.liu@xxxxxxxxxx>
• Re: [PATCH net] ipvs: Improve robustness to the ipvs sysctl
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: memory leak in bio_copy_user_iov
  • From: syzbot <syzbot+03e5c8ebd22cc6c3a8cb@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH iptables v2]: restore legacy behaviour of iptables-restore when rules start with -4/-6
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: add include guard to xt_connlabel.h
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• Re: memory leak in fdb_create
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: add include guard to xt_connlabel.h
  • From: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
• Re: memory leak in fdb_create
  • From: syzbot <syzbot+88533dc8b582309bf3ee@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v4 3/3] netfilter: nf_tables_offload: support indr block call
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v4 0/3] flow_offload: add indr-block in nf_table_offload
  • From: wenxu@xxxxxxxxx
• Re: [PATCHv2] Fix dumping vlan rules
  • From: michael-dev@xxxxxxxxxxxxx
• Re: [PATCH nf] netfilter: conntrack: always store window size un-scaled
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [PATCH net-next v3 1/3] flow_offload: move tc indirect block to flow offload
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next v3 2/3] flow_offload: support get tcf block immediately
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next v3 1/3] flow_offload: move tc indirect block to flow offload
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• Re: [PATCH net-next v3 2/3] flow_offload: support get tcf block immediately
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• [PATCH net-next v3 1/3] flow_offload: move tc indirect block to flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v3 3/3] netfilter: nf_tables_offload: support indr block call
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v3 2/3] flow_offload: support get tcf block immediately
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v3 0/3] flow_offload: add indr-block in nf_table_offload
  • From: wenxu@xxxxxxxxx
• Re: [PATCH net-next v2 1/3] flow_offload: move tc indirect block to flow offload
  • From: Vlad Buslov <vladbu@xxxxxxxxxxxx>
• Re: vrf and flowtable problems
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH iptables]: restore legacy behaviour of iptables-restore when rules start with -4/-6
  • From: Adel Belhouane <bugs.a.b@xxxxxxx>
• [PATCH iptables v2]: restore legacy behaviour of iptables-restore when rules start with -4/-6
  • From: Adel Belhouane <bugs.a.b@xxxxxxx>
• [PATCH net-next v2 1/3] flow_offload: move tc indirect block to flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v2 2/3] flow_offload: Support get tcf block immediately
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v2 0/3] flow_offload: add indr-block in nf_table_offload
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v2 3/3] netfilter: nf_tables_offload: support indr block call
  • From: wenxu@xxxxxxxxx
• Re: memory leak in dma_buf_ioctl
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: memory leak in dma_buf_ioctl
  • From: syzbot <syzbot+b2098bc44728a4efb3e9@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nft,v1 2/2] src: add tunnel expression support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• [iptables PATCH 2/2] xtables: Drop support for /etc/xtables.conf
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/2] nft: Set errno in nft_rule_flush()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next v2 11/11] netfilter: nft_tunnel: support nft_tunnel_obj offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 10/11] netfilter: nft_objref: add nft_objref_type offload
  • From: wenxu@xxxxxxxxx
• Re: [PATCH nf-next v6 0/8] netfilter: nf_flow_offload: support bridge family offload for both ipv4 and ipv6
  • From: wenxu <wenxu@xxxxxxxxx>
• [PATCH nf-next v2 03/11] netfilter: nf_tables_offload: split nft_offload_reg to match and action type
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 06/11] netfilter: nft_payload: add nft_set_payload offload support
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 05/11] netfilter: nft_fwd_netdev: add fw_netdev action support
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 09/11] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 08/11] netfilter: nft_tunnel: support tunnel meta match offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 07/11] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 02/11] netfilter: nf_tables_offload: add offload_actions callback
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 00/11] netfilter: nf_tables_offload: support more expr and obj offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 01/11] netfilter: nf_flow_offload: add net in offload_ctx
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 04/11] netfilter: nft_immediate: add offload support for actions
  • From: wenxu@xxxxxxxxx
• Re: nftables feature request: modify set element timeout
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [PATCH 1/2 nft] src: allow variables in the chain priority specification
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v6 3/8] netfilter:nf_flow_table_ip: Separate inet operation to single function
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v6 8/8] netfilter: Support the bridge family in flow table
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v6 6/8] netfilter:nf_flow_table_ip: Support bridge family flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v6 5/8] netfilter:nf_flow_table_core: Support bridge family flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v6 7/8] netfilter:nft_flow_offload: Support bridge family flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v6 4/8] bridge: add br_vlan_get_info_rcu()
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v6 0/8] netfilter: nf_flow_offload: support bridge family offload for both ipv4 and ipv6
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v6 1/8] netfilter:nf_flow_table: Refactor flow_offload_tuple to destination
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v6 2/8] netfilter:nf_flow_table_core: Separate inet operation to single function
  • From: wenxu@xxxxxxxxx
• Re: [PATCH net-next 2/3] flow_offload: Support get tcf block immediately
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH iptables]: restore legacy behaviour of iptables-restore when rules start with -4/-6
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH 2/2 nft] src: allow variable in chain policy
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf-next v2 0/5] sipport nft_tunnel offload
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: vrf and flowtable problems
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH nf-next 3/5] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH nf-next 2/7] netfilter: nf_tables_offload: add offload_actions callback
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH 2/2 nft] src: allow variable in chain policy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/7] netfilter: nft_table_offload: Add rtnl for chain and rule operations
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH iptables]: restore legacy behaviour of iptables-restore when rules start with -4/-6
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 1/2 nft] src: allow variables in the chain priority specification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 2/3] flow_offload: Support get tcf block immediately
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 0/5] sipport nft_tunnel offload
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v2 0/5] sipport nft_tunnel offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/5] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 2/7] netfilter: nf_tables_offload: add offload_actions callback
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/7] netfilter: nft_table_offload: Add rtnl for chain and rule operations
  • From: Florian Westphal <fw@xxxxxxxxx>
• vrf and flowtable problems
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 3/3] netfilter: nf_tables_offload: support indr block call
  • From: wenxu@xxxxxxxxx
• [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH net-next 2/3] flow_offload: Support get tcf block immediately
  • From: wenxu@xxxxxxxxx
• Re: [PATCH nf-next 3/7] netfilter: nft_table_offload: Add rtnl for chain and rule operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v2 3/5] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 4/5] netfilter: nft_objref: add nft_objref_type offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 2/5] netfilter: nft_tunnel: support tunnel meta match offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 5/5] netfilter: nft_tunnel: support nft_tunnel_obj offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 1/5] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 0/5] sipport nft_tunnel offload
  • From: wenxu@xxxxxxxxx
• Re: [PATCH iptables v2] nfnl_osf: fix snprintf -Wformat-truncation warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nft_tunnel: Fix don't convert tun id to host endian
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH nf-next v3] netfilter:nft_meta: add NFT_META_VLAN support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v1 2/2] src: add tunnel expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v1 1/2] src: add tunnel support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: Signed-off-by missing for commit in the netfilter tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nft_tunnel: Fix don't convert tun id to host endian
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf v2] netfilter: nft_tunnel: Fix don't convert tun id to host endian
  • From: wenxu@xxxxxxxxx
• Re: [PATCH nf] netfilter: nft_tunnel: Fix convert tunnel id to host endian
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_tunnel: Fix convert tunnel id to host endian
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] [v2 net-next] ipvs: reduce kernel stack usage
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nf-next 3/5] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 4/5] netfilter: nft_objref: add nft_objref_type offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 2/5] netfilter: nft_tunnel: support tunnel meta match offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 5/5] netfilter: nft_tunnel: support nft_tunnel_obj offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 1/5] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 0/5] sipport nft_tunnel offload
  • From: wenxu@xxxxxxxxx
• Re: [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: linux-next: Signed-off-by missing for commit in the netfilter tree
  • From: Phil Sutter <phil@xxxxxx>
• linux-next: Signed-off-by missing for commit in the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• [PATCH iptables]: restore legacy behaviour of iptables-restore when rules start with -4/-6
  • From: Adel Belhouane <bugs.a.b@xxxxxxx>
• [PATCH] netfilter: trivial: remove extraneous space from message
  • From: Rui Salvaterra <rsalvaterra@xxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 2/2] net: netfilter: nft_meta_bridge: Eliminate 'out' label
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_tunnel: Fix convert tunnel id to host endian
  • From: wenxu@xxxxxxxxx
• Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables v2] nfnl_osf: fix snprintf -Wformat-truncation warning
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables] nfnl_osf: fix snprintf -Wformat-truncation warning
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH iptables] nfnl_osf: fix snprintf -Wformat-truncation warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: Sync comments with current expr definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] src: erec: fall back to internal location if its null
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 00/11] Larger xtables-save review
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: Sync comments with current expr definition
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• [iptables PATCH 2/2] doc: Install ip{6,}tables-restore-translate.8 man pages
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/2] doc: Install nft-variant man pages only if enabled
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Phil Sutter <phil@xxxxxx>
• Re: ct state vmap (nft noob question)
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] cache: add NFT_CACHE_UPDATE and NFT_CACHE_FLUSHED flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3 2/2] net: netfilter: nft_meta_bridge: Eliminate 'out' label
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/2] parser_bison: Fix for deprecated statements
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 2/2] src: Call bison with -Wno-yacc to silence warnings
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 0/2] parser_bison: Get rid of (most) bison compiler warnings
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next 6/7] netfilter: nft_fwd_netdev: add fw_netdev action support
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 1/7] netfilter: nf_flow_offload: add net in offload_ctx
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 5/7] netfilter: nft_immediate: add offload support for actions
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 7/7] netfilter: nft_payload: add nft_set_payload offload support
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 4/7] netfilter: nf_tables_offload: split nft_offload_reg to match and action type
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 3/7] netfilter: nft_table_offload: Add rtnl for chain and rule operations
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 2/7] netfilter: nf_tables_offload: add offload_actions callback
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 0/7] netfilter: nf_tables_offload: support more actions
  • From: wenxu@xxxxxxxxx
• [PATCH net-next] netfilter: conntrack: use shared sysctl constants
  • From: Matteo Croce <mcroce@xxxxxxxxxx>
• Re: [PATCH nft v2 0/2] netlink_ctx initialization fixes.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrackd: cthelper: Add new SLP helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables feature request: modify set element timeout
  • From: Fran Fitzpatrick <francis.x.fitzpatrick@xxxxxxxxx>
• Re: [PATCH nft v3] src: osf: fix snprintf -Wformat-truncation warning
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/2 nft v2] src: allow variable in chain policy
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft v2] src: allow variables in the chain priority specification
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 0/2 nft v2] Introduce variables in chain priority and policy
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: memleak when using "nft -f"
  • From: Phil Sutter <phil@xxxxxx>
• Re: memleak when using "nft -f"
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft v3] src: osf: fix snprintf -Wformat-truncation warning
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• memleak when using "nft -f"
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/2 nft] src: allow variable in chain policy
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft] src: allow variables in the chain priority specification
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 0/2 nft] Introduce variables in chain priority and policy
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ebtables: compat: fix a memory leak bug
  • From: Wenwen Wang <wenwen@xxxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 00/11] Larger xtables-save review
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] evaluate: missing location for chain nested in table definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft v2] src: evaluate: support prefix expression in statements
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: compat: fix a memory leak bug
  • From: "Liam R. Howlett" <Liam.Howlett@xxxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3] netfilter: synproxy: erroneous TCP mss option fixed.
  • From: Ibrahim Ercan <ibrahim.ercan@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nft v2] src: evaluate: support prefix expression in statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] evaluate: missing location for chain nested in table definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] [v2 net-next] ipvs: reduce kernel stack usage
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH 4/4] ipvs: reduce kernel stack usage
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [iptables PATCH v2 05/11] nft: Make nft_for_each_table() more versatile
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 09/11] xtables-save: Pass format flags to do_output()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 06/11] xtables-save: Avoid mixed code and declarations
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 10/11] arptables-save: Merge into xtables_save_main()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 03/11] xtables-save: Unify *-save header/footer comments
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 4/4] ipvs: reduce kernel stack usage
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [iptables PATCH v2 11/11] ebtables-save: Merge into xtables_save_main()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 02/11] ebtables-save: Fix counter formatting
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 00/11] Larger xtables-save review
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 07/11] xtables-save: Pass optstring/longopts to xtables_save_main()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 01/11] ebtables: Fix error message for invalid parameters
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 08/11] xtables-save: Make COMMIT line optional
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 04/11] xtables-save: Fix table compatibility check
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft v2] src: evaluate: support prefix expression in statements
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: evaluate: support prefix expression in statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: synproxy: erroneous TCP mss option fixed.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: synproxy: erroneous TCP mss option fixed.
  • From: İbrahim Ercan <ibrahim.metu@xxxxxxxxx>
• [PATCH iptables] nfnl_osf: fix snprintf -Wformat-truncation warning
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft v2] src: osf: fix snprintf -Wformat-truncation warning
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: compat: fix a memory leak bug
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 00/12] Larger xtables-save review
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/3] src: erec: fall back to internal location if its null
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] src: erec: fall back to internal location if its null
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 03/12] xtables-save: Use argv[0] as program name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: evaluate: support prefix expression in statements
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] doc: fib: explain example in more detail
  • From: Jones Desougi <jones.desougi+netfilter@xxxxxxxxx>
• Re: [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft] doc: fib: explain example in more detail
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: osf: fix snprintf -Wformat-truncation warning
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] scanner: don't rely on fseek for input stream repositioning
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: osf: fix snprintf -Wformat-truncation warning
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: compat: fix a memory leak bug
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/3] src: evaluate: return immediately if no op was requested
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] src: evaluate: don't rely on global chain ctx for error reporting
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] src: erec: fall back to internal location if its null
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/3] fix crash bug during rule restore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: WARNING in xt_compat_add_offset
  • From: syzbot <syzbot+276ddebab3382bbf72db@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] src: osf: fix snprintf -Wformat-truncation warning
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 09/12] xtables-save: Make COMMIT line optional
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 1/2] parser_bison: Get rid of (most) bison compiler warnings
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 09/12] xtables-save: Make COMMIT line optional
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 09/12] xtables-save: Make COMMIT line optional
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 1/2] parser_bison: Get rid of (most) bison compiler warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 00/12] Larger xtables-save review
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 09/12] xtables-save: Make COMMIT line optional
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/2] parser_bison: Get rid of (most) bison compiler warnings
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 03/12] xtables-save: Use argv[0] as program name
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 00/12] Larger xtables-save review
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 12/12] ebtables-save: Merge into xtables_save_main()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/12] ebtables-save: Fix counter formatting
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 04/12] xtables-save: Unify *-save header/footer comments
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/12] xtables-save: Pass optstring/longopts to xtables_save_main()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/12] ebtables: Fix error message for invalid parameters
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/12] xtables-save: Pass format flags to do_output()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 07/12] xtables-save: Avoid mixed code and declarations
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/12] arptables-save: Merge into xtables_save_main()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 06/12] nft: Make nft_for_each_table() more versatile
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/12] xtables-save: Use argv[0] as program name
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/12] xtables-save: Make COMMIT line optional
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 05/12] xtables-save: Fix table compatibility check
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: ebtables: compat: fix a memory leak bug
  • From: Wenwen Wang <wang6495@xxxxxxx>
• Re: [PATCH nf,v5 0/4] flow_offload fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 00/14] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next,v2 2/3] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH ghak90 V6 03/10] audit: read container ID of a process
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: userspace conntrack helper and confirming the master conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/14] netfilter: bridge: make NF_TABLES_BRIDGE tristate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/14] netfilter: bridge: NF_CONNTRACK_BRIDGE does not depend on NF_TABLES_BRIDGE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/14] netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/14] netfilter: synproxy: fix rst sequence number mismatch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/14] netfilter: nf_tables: Support auto-loading for inet nat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/14] netfilter: nf_tables: don't fail when updating base chain policy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/14] netfilter: synproxy: fix erroneous tcp mss option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/14] netfilter: nf_conntrack_sip: fix expectation clash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/14] netfilter: nft_hash: fix symhash with modulus one
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/14] netfilter: conntrack: always store window size un-scaled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/14] netfilter: Update obsolete comments referring to ip_conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/14] netfilter: nf_tables: fix module autoload for redir
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/14] netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/14] netfilter: nfnetlink: avoid deadlock due to synchronous request_module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/14] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v5 4/4] net: flow_offload: add flow_block structure and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v5 3/4] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v5 2/4] net: flow_offload: remove netns parameter from flow_block_cb_alloc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v5 1/4] net: openvswitch: rename flow_stats to sw_flow_stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v5 0/4] flow_offload fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH ghak90 V6 03/10] audit: read container ID of a process
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH nft] src: allow variables in the chain priority specification
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/2] net: netfilter: nft_meta_bridge: Eliminate 'out' label
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 1/2] libnftables: got rid of repeated initialization of netlink_ctx variable in loop.
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 2/2] rule: removed duplicate member initializer.
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft v2 2/2] rule: removed duplicate member initializer.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft v2 1/2] libnftables: got rid of repeated initialization of netlink_ctx variable in loop.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft v2 0/2] netlink_ctx initialization fixes.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft] libnftables: got rid of repeated initialization of netlink_ctx variable in loop.
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net,v4 4/4] net: flow_offload: add flow_block structure and use it
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net,v4 1/4] net: openvswitch: rename flow_stats to sw_flow_stats
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH conntrack-tools] conntrackd: cthelper: Add new SLP helper
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH] [net-next] netfilter: bridge: make NF_TABLES_BRIDGE tristate
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH] [net-next] netfilter: bridge: make NF_TABLES_BRIDGE tristate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] net/netfilter: remove unnecessary spaces
  • From: yangxingwu <xingwu.yang@xxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nft] libnftables: got rid of repeated initialization of netlink_ctx variable in loop.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net,v4 0/4] flow_offload fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net,v4 0/4] flow_offload fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] [net-next] netfilter: bridge: make NF_TABLES_BRIDGE tristate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nft_meta: Fix build error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v3] netfilter: synproxy: fix rst sequence number mismatch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] net/netfilter: remove unnecessary spaces
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] [net-next] netfilter: bridge: make NF_TABLES_BRIDGE tristate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: bridge: NF_CONNTRACK_BRIDGE does not depend on NF_TABLES_BRIDGE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH] net: nf_tables: Support auto-loading for inet nat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH] net: nf_tables: Make nft_meta expression more robust
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH] net: nf_tables: Make nft_meta expression more robust
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] expr: meta: Make NFT_META_{I,O}IFKIND known
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] json: Fix memleak in timeout_policy_json()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net,v4 4/4] net: flow_offload: add flow_block structure and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net,v4 3/4] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net,v4 2/4] net: flow_offload: remove netns parameter from flow_block_cb_alloc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net,v4 1/4] net: openvswitch: rename flow_stats to sw_flow_stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net,v4 0/4] flow_offload fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: support for element deletion
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_dynset: support for element deletion
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables-save: Use argv[0] as program name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] json: Fix memleak in timeout_policy_json()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] xtables-save: Use argv[0] as program name
  • From: Phil Sutter <phil@xxxxxx>
• Re: json_cmd_assoc and cmd
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [iptables PATCH] xtables-save: Use argv[0] as program name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: json_cmd_assoc and cmd
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [net-next 1/2] ipvs: batch __ip_vs_cleanup
  • From: Haishuang Yan <yanhaishuang@xxxxxxxxxxxxxxxxxxxx>
• Re: json_cmd_assoc and cmd
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v5 1/3] meta: Introduce new conditions 'time', 'day' and 'hour'
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v5 1/3] meta: Introduce new conditions 'time', 'day' and 'hour'
  • From: Ander Juaristi <a@xxxxxxxxxxxx>
• [iptables PATCH] xtables-save: Use argv[0] as program name
  • From: Phil Sutter <phil@xxxxxx>
• Re: json_cmd_assoc and cmd
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft] src: osf: fix snprintf -Wformat-truncation warning
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [RFC net] net: generate icmp redirects after netfilter forward hook
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: userspace conntrack helper and confirming the master conntrack
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH nft] include: json: add missing synproxy stmt print stub
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft] include: json: add missing synproxy stmt print stub
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] include: json: add missing synproxy stmt print stub
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: userspace conntrack helper and confirming the master conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• userspace conntrack helper and confirming the master conntrack
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [PATCH v2] netfilter: nft_dynset: support for element deletion
  • From: Ander Juaristi <a@xxxxxxxxxxxx>
• [nft PATCH 1/3] meta: Reject zero ifindex values
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/3] tests/py: Add missing meta tests
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/3] meta: Reject nfproto value 0xffff
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] expr: meta: Make NFT_META_{I,O}IFKIND known
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH] net: nf_tables: Make nft_meta expression more robust
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH net,v3 1/4] net: openvswitch: rename flow_stats to sw_flow_stats
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [nf PATCH RFC] net: nf_tables: Support auto-loading inet family nat chain
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net,v3 4/4] net: flow_offload: add flow_block structure and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net,v3 3/4] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net,v3 2/4] net: flow_offload: remove netns parameter from flow_block_cb_alloc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net,v3 1/4] net: openvswitch: rename flow_stats to sw_flow_stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf PATCH] net: nf_tables: Support auto-loading for inet nat
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2] net: apply proc_net_mkdir() harder
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [nf PATCH RFC] net: nf_tables: Support auto-loading inet family nat chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf PATCH RFC] net: nf_tables: Support auto-loading inet family nat chain
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nftables v5 1/1] add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH 2/2 nft] tests: py: add missing json outputs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft] src: json: fix synproxy flag parser typo
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables v5 1/1] add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nft] tests: py: add missing json outputs
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft] src: json: fix synproxy flag parser typo
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nftables v5 1/1] add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Pre-patch of nftables for nft_tunnel
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH nft v2] src: introduce SYNPROXY matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft WIP] src: introduce prio_expr in chain priority
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: json_cmd_assoc and cmd
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nftables v5 1/1] add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: missing basic evaluation of expectations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables v5 1/1] add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: json_cmd_assoc and cmd
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2] net: apply proc_net_mkdir() harder
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• rebasing nf.git
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• json_cmd_assoc and cmd
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nft WIP] src: allow variables in chain priority
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft WIP] src: introduce prio_expr in chain priority
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft,v2] evaluate: bogus error when refering to existing non-base chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nft] evaluate: bogus error when refering to existing non-base chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: fix symhash with modulus one
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: don't fail when updating base chain policy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: always store window size un-scaled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nf-next] netfilter: synproxy: rename mss synproxy_options field
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf-next] netfilter: synproxy: fix erroneous tcp mss option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: nf_tables: fix module autoload for redir
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Update obsolete comments referring to ip_conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v8] netfilter: nf_conntrack_sip: fix expectation clash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/5] src: add set_is_datamap(), set_is_objmap() and set_is_map() helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/5] cache: incorrect cache flags for create commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/5] evaluate: missing object maps handling in list and flush commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/5] src: use set_is_anonymous()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/5] evaluate: honor NFT_SET_OBJECT flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5 0/8] netfilter: nf_flow_offload: support bridge family offload for both
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/2 nft WIP] src: allow variables in chain priority
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft WIP] src: introduce prio_expr in chain priority
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 0/2 nft WIP] Using variables in chain priority
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload)
  • From: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: remove unnecessary space
  • From: yangxingwu <xingwu.yang@xxxxxxxxx>
• [PATCH v2] net/netfilter: remove unnecessary spaces
  • From: yangxingwu <xingwu.yang@xxxxxxxxx>
• Re: [PATCH] ipvs: remove unnecessary space
  • From: yangxingwu <xingwu.yang@xxxxxxxxx>
• [PATCH nf-next v5 2/8] netfilter:nf_flow_table_core: Separate inet operation to single function
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v5 6/8] netfilter:nf_flow_table_ip: Support bridge family flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v5 5/8] netfilter:nf_flow_table_core: Support bridge family flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v5 7/8] netfilter:nft_flow_offload: Support bridge family flow offload
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v5 8/8] netfilter: Support the bridge family in flow table
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v5 1/8] netfilter:nf_flow_table: Refactor flow_offload_tuple to destination
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v5 3/8] netfilter:nf_flow_table_ip: Separate inet operation to single function
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v5 0/8] netfilter: nf_flow_offload: support bridge family offload for both
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v5 4/8] bridge: add br_vlan_get_info_rcu()
  • From: wenxu@xxxxxxxxx
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [net-next 1/2] ipvs: batch __ip_vs_cleanup
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_dynset: support for element deletion
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf v3] netfilter: synproxy: fix rst sequence number mismatch
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] Fix dumping vlan rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload)
  • From: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload)
  • From: Laura Garcia <nevola@xxxxxxxxx>
• [PATCHv2] Fix dumping vlan rules
  • From: michael-dev@xxxxxxxxxxxxx
• Re: [PATCH] netfilter: nft_dynset: support for element deletion
  • From: Ander Juaristi <a@xxxxxxxxxxxx>
• [PATCH libiptc] libip6tc.h: Add extern "C" wrapping for C++ linking.
  • From: Chris PeBenito <chpebeni@xxxxxxxxxxxxxxxxxxx>
• [PATCH AUTOSEL 5.2 080/249] netfilter: ipset: fix a missing check of nla_parse
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.2 081/249] ipset: Fix memory accounting for hash types on resize
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.2 174/249] netfilter: ctnetlink: Fix regression in conntrack entry deletion
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 070/219] ipset: Fix memory accounting for hash types on resize
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 143/219] ipvs: fix tinfo memory leak in start_sync_thread
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 183/219] netfilter: Fix remainder of pseudo-header protocol 0
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 091/158] ipvs: defer hook registration to avoid leaks
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 107/158] ipvs: fix tinfo memory leak in start_sync_thread
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 039/105] ipset: Fix memory accounting for hash types on resize
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH net] ipvs: Improve robustness to the ipvs sysctl
  • From: hujunwei <hujunwei4@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 060/105] ipvs: defer hook registration to avoid leaks
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 075/105] ipvs: fix tinfo memory leak in start_sync_thread
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 051/158] ipset: Fix memory accounting for hash types on resize
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 153/219] netfilter: ctnetlink: Fix regression in conntrack entry deletion
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 125/219] ipvs: defer hook registration to avoid leaks
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.2 210/249] netfilter: Fix remainder of pseudo-header protocol 0
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.2 161/249] ipvs: fix tinfo memory leak in start_sync_thread
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.2 143/249] ipvs: defer hook registration to avoid leaks
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf] netfilter: fix symhash with modulus one
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [PATCH] ipvs: remove unnecessary space
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: remove unnecessary space
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_meta: support for time matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrackd: use correct max unix path length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH xtables] nft: exit in case we can't fetch current genid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] proto: add pseudo th protocol to match d/sport in generic way
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: remove unnecessary space
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrackd: use correct max unix path length
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH v5 1/3] meta: Introduce new conditions 'time', 'day' and 'hour'
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_meta: support for time matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v5 2/3] tests/py: Add tests for 'time', 'day' and 'hour'
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v5 1/3] meta: Introduce new conditions 'time', 'day' and 'hour'
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] New Netfilter core team member: Phil Sutter
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH xtables] nft: exit in case we can't fetch current genid
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: don't fail when updating base chain policy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] Fix dumping vlan rules
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] Fix dumping vlan rules
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [sparc64] nft bus error
  • From: Anatoly Pugachev <matorola@xxxxxxxxx>
• [sparc64] nft bus error
  • From: Anatoly Pugachev <matorola@xxxxxxxxx>
• [PATCH nft] proto: add pseudo th protocol to match d/sport in generic way
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_dynset: support for element deletion
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: support for element deletion
  • From: Ander Juaristi <a@xxxxxxxxxxxx>
• [PATCH] netfilter: nft_dynset: support for element deletion
  • From: Ander Juaristi <a@xxxxxxxxxxxx>
• [net-next 0/2] ipvs: speedup ipvs netns dismantle
  • From: Haishuang Yan <yanhaishuang@xxxxxxxxxxxxxxxxxxxx>
• [net-next 2/2] ipvs: batch __ip_vs_dev_cleanup
  • From: Haishuang Yan <yanhaishuang@xxxxxxxxxxxxxxxxxxxx>
• [net-next 1/2] ipvs: batch __ip_vs_cleanup
  • From: Haishuang Yan <yanhaishuang@xxxxxxxxxxxxxxxxxxxx>
• LPC 2019 Networking Track CFP (reminder)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nft] src/ct: provide fixed data lengh sizes for ip/ip6 keys
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] ipvs: remove unnecessary space
  • From: yangxingwu <xingwu.yang@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: always store window size un-scaled
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft] src/ct: provide fixed data lengh sizes for ip/ip6 keys
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src/ct: provide fixed data lengh sizes for ip/ip6 keys
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/4] lpfc: reduce stack size with CONFIG_GCC_PLUGIN_STRUCTLEAK_VERBOSE
  • From: "Martin K. Petersen" <martin.petersen@xxxxxxxxxx>
• [PATCH nf-next] netfilter: synproxy: fix rst sequence number mismatch
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: always store window size un-scaled
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ipv6: Use ipv6_authlen for len
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v2 3/3] net: flow_offload: add flow_block structure and use it
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next 3/3] net: flow_offload: add flow_block structure and use it
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next 3/3] net: flow_offload: add flow_block structure and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 3/3] net: flow_offload: add flow_block structure and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 2/3] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 1/3] net: flow_offload: remove netns parameter from flow_block_cb_alloc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: 3-way handshake sets conntrack timeout to max_retrans
  • From: Jakub Jankowski <shasta@xxxxxxxxxxx>
• Re: 3-way handshake sets conntrack timeout to max_retrans
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: 3-way handshake sets conntrack timeout to max_retrans
  • From: Jakub Jankowski <shasta@xxxxxxxxxxx>
• Re: 3-way handshake sets conntrack timeout to max_retrans
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 1/3] net: flow_offload: remove netns parameter from flow_block_cb_alloc()
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next 2/3] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next 3/3] net: flow_offload: add flow_block structure and use it
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload
  • From: wenxu@xxxxxxxxx
• [PATCH] ipvs: remove unnecessary space
  • From: yangxingwu <xingwu.yang@xxxxxxxxx>
• Re: [PATCH] ipvs: remove unnecessary space
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH net-next,v4 12/12] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 3/3] net: flow_offload: add flow_block structure and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 2/3] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 1/3] net: flow_offload: remove netns parameter from flow_block_cb_alloc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: nf_tables: fix module autoload for redir
  • From: Christian Hesse <mail@xxxxxxxx>
• Re: [PATCH net-next] net/sched: Fix kernel NULL pointer dereference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] net/sched: Fix kernel NULL pointer dereference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] net/sched: Fix kernel NULL pointer dereference
  • From: wenxu@xxxxxxxxx
• [PATCH] ipv6: Use ipv6_authlen for len
  • From: yangxingwu <xingwu.yang@xxxxxxxxx>
• Re: 3-way handshake sets conntrack timeout to max_retrans
  • From: Jakub Jankowski <shasta@xxxxxxxxxxx>
• Re: 3-way handshake sets conntrack timeout to max_retrans
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/2 nf-next] netfilter: synproxy: rename mss synproxy_options field
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nf-next] netfilter: synproxy: fix erroneous tcp mss option
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 0/2 nf-next] Fix mss value announced to the client
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH net-next,v4 05/12] net: flow_offload: add list handling functions
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH] [net-next] netfilter: bridge: make NF_TABLES_BRIDGE tristate
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: Question about nf_conntrack_proto for IPsec
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ipvs: remove unnecessary space
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH net-next,v4 08/12] drivers: net: use flow block API
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next,v4 12/12] netfilter: nf_tables: add hardware offload support
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH] ipvs: remove unnecessary space
  • From: yangxingwu <xingwu.yang@xxxxxxxxx>
• Re: [PATCH net-next,v4 05/12] net: flow_offload: add list handling functions
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: Question about nf_conntrack_proto for IPsec
  • From: Naruto Nguyen <narutonguyen2018@xxxxxxxxx>
• Re: [PATCH net-next,v4 00/11] netfilter: add hardware offload infrastructure
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH net-next 12/12,v5] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 11/12] net: flow_offload: rename tc_cls_flower_offload to flow_cls_offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 12/12] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 08/12] drivers: net: use flow block API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 10/12] net: flow_offload: add flow_block_cb_is_busy() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 09/12] net: sched: remove tcf block API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 07/12] net: sched: use flow block API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 06/12] net: flow_offload: add flow_block_cb_{priv,incref,decref}()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 05/12] net: flow_offload: add list handling functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 03/12] net: flow_offload: rename TCF_BLOCK_BINDER_TYPE_* to FLOW_BLOCK_BINDER_TYPE_*
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 04/12] net: flow_offload: add flow_block_cb_alloc() and flow_block_cb_free()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 02/12] net: flow_offload: rename TC_BLOCK_{UN}BIND to FLOW_BLOCK_{UN}BIND
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 01/12] net: flow_offload: add flow_block_cb_setup_simple()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 00/11] netfilter: add hardware offload infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 10/11] net: flow_offload: add flow_block_cb_is_busy() and use it
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_nat_proto: add nf_nat_bridge_ops support
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next,v3 04/11] net: flow_offload: add flow_block_cb_alloc() and flow_block_cb_free()
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next,v3 10/11] net: flow_offload: add flow_block_cb_is_busy() and use it
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH nftables v5 1/1] add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nftables v5 0/1] add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_nat_proto: add nf_nat_bridge_ops support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_nat_proto: add nf_nat_bridge_ops support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH net-next] netfilter: nft_meta: Fix build error
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH net-next,v3 11/11] netfilter: nf_tables: add hardware offload support
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: linux-next: build failure after merge of the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_nat_proto: add nf_nat_bridge_ops support
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next,v3 11/11] netfilter: nf_tables: add hardware offload support
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 08/11] drivers: net: use flow block API
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 01/11] net: flow_offload: add flow_block_cb_setup_simple()
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: Update obsolete comments referring to ip_conntrack
  • From: Yonatan Goldschmidt <yon.goldschmidt@xxxxxxxxx>
• Re: [PATCH net-next,v3 00/11] netfilter: add hardware offload infrastructure
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 00/15] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH net-next,v3 07/11] net: sched: use flow block API
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next,v3 06/11] net: flow_offload: add flow_block_cb_{priv,incref,decref}()
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next,v3 05/11] net: flow_offload: add list handling functions
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH net-next,v3 11/11] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 08/11] drivers: net: use flow block API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 10/11] net: flow_offload: add flow_block_cb_is_busy() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 09/11] net: sched: remove tcf block API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 01/11] net: flow_offload: add flow_block_cb_setup_simple()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 04/11] net: flow_offload: add flow_block_cb_alloc() and flow_block_cb_free()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 02/11] net: flow_offload: rename TC_BLOCK_{UN}BIND to FLOW_BLOCK_{UN}BIND
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 05/11] net: flow_offload: add list handling functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 07/11] net: sched: use flow block API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 03/11] net: flow_offload: rename TCF_BLOCK_BINDER_TYPE_* to FLOW_BLOCK_BINDER_TYPE_*
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 06/11] net: flow_offload: add flow_block_cb_{priv,incref,decref}()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 00/11] netfilter: add hardware offload infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_nat_proto: add nf_nat_bridge_ops support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 02/15] netfilter: nf_log: Replace a seq_printf() call by seq_puts() in seq_show()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/15] ipvs: allow tunneling with gre encapsulation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>