Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH nft 2/3] src: statement: disable reject statement type omission for bridge
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] netlink_delinerize: remove network header dep for reject statement also in bridge family
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/3] use skb->protocol as l3 protocol dependency
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RESEND nf-next] netfilter: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• Re: [PATCH nft] nft-test.py: use tempfile module
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft] nft-test.py: use tempfile module
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix IPV6 dependency
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix IPV6 dependency
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH nft v7 1/2]tests:py: conversion to python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v7 1/2]tests:py: conversion to python3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v7 1/2]tests:py: conversion to python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v7 1/2]tests:py: conversion to python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v8]tests: py: add netns feature
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v8]tests: py: add netns feature
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft] rule: do not suggest anonymous sets on mispelling errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: bridge: add nft_bridge_pvid to tag the default pvid for non-tagged packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v7 1/2]tests:py: conversion to python3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND nf-next] netfilter: add support for matching IPv4 options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2,v3] evaluate: do not allow to list/flush anonymous sets via list command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v8]tests: py: add netns feature
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft,v2 2/2] evaluate: do not allow to list/flush anonymous sets via list command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 1/2] evaluate: allow get/list/flush dynamic sets and maps via list command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: do not allow to list anonymous sets via list command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v7 1/2]tests:py: conversion to python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: wenxu <wenxu@xxxxxxxxx>
• [PATCH][V2][next] netfilter: synproxy: ensure zero is returned on non-error return path
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: [PATCH][next] netfilter: synproxy: ensure zero is returned on non-error return path
  • From: Colin Ian King <colin.king@xxxxxxxxxxxxx>
• [PATCH][next] netfilter: synproxy: ensure zero is returned on non-error return path
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: working with libnetfilter_queue and linbetfilter_contrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• re: netfilter: nft_ct: add ct expectations support
  • From: Colin Ian King <colin.king@xxxxxxxxxxxxx>
• Re: working with libnetfilter_queue and linbetfilter_contrack
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: working with libnetfilter_queue and linbetfilter_contrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] evaluate: allow get/list/flush dynamic sets and maps via list command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Is this possible SYN Proxy bug?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Is this possible SYN Proxy bug?
  • From: İbrahim Ercan <ibrahim.metu@xxxxxxxxx>
• Re: Is this possible SYN Proxy bug?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Is this possible SYN Proxy bug?
  • From: İbrahim Ercan <ibrahim.metu@xxxxxxxxx>
• Re: Is this possible SYN Proxy bug?
  • From: İbrahim Ercan <ibrahim.metu@xxxxxxxxx>
• Re: working with libnetfilter_queue and linbetfilter_contrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Is this possible SYN Proxy bug?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: working with libnetfilter_queue and linbetfilter_contrack
  • From: Mojtaba <mespio@xxxxxxxxx>
• Is this possible SYN Proxy bug?
  • From: İbrahim Ercan <ibrahim.metu@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
  • From: Igor Ryzhov <iryzhov@xxxxxxxxxx>
• Re: working with libnetfilter_queue and linbetfilter_contrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: working with libnetfilter_queue and linbetfilter_contrack
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3 nf-next] netfilter: enable set expiration time for set elements
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• netfilter fix for -stable 5.1.x
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: ipv6: fix CONFIG_SYN_COOKIES=n
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 nf-next] netfilter: enable set expiration date for set elements
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [PATCH nf-next] src: enable set expiration date for set elements
  • From: Laura Garcia <nevola@xxxxxxxxx>
• [PATCH v7] netfilter: nf_conntrack_sip: fix expectation clash
  • From: xiao ruizhu <katrina.xiaorz@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: wenxu <wenxu@xxxxxxxxx>
• [nf-next:master 9/10] net/ipv6/netfilter.c:237:26: error: '__cookie_v6_init_sequence' undeclared here (not in a function); did you mean 'cookie_init_sequence'?
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [nf-next:master 9/10] include/linux/netfilter_ipv6.h:174:9: error: implicit declaration of function '__cookie_v6_init_sequence'; did you mean 'cookie_init_sequence'?
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH 2/3] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/3] netfilter: ipv6: nf_defrag: accept duplicate fragments again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: nf_tables: fix module autoload with inet family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v6] netfilter: nf_conntrack_sip: fix expectation clash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] src: enable set expiration date for set elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next WIP] netfilter: nf_tables: Add SYNPROXY support
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf-next WIP] netfilter: nf_tables: Add SYNPROXY support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/5] src: add cache level flags
  • From: Phil Sutter <phil@xxxxxx>
• Re: [netfilter-core] [sparc64] possible circular locking / deadlock
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [netfilter-core] [sparc64] possible circular locking / deadlock
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next WIP] netfilter: nf_tables: Add SYNPROXY support
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [netfilter-core] [sparc64] possible circular locking / deadlock
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nft,v2 2/5] tests: shell: cannot use handle for non-existing rule in kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/5,v3] src: add cache level flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v2 2/5] tests: shell: cannot use handle for non-existing rule in kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/5] src: add cache level flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/5] src: add cache level flags
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft,v2 2/5] tests: shell: cannot use handle for non-existing rule in kernel
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 3/5] src: add cache level flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 5/5] src: add cache level flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 4/5] netlink: remove netlink_list_table()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 3/5] rule: skip cache population from do_command_monitor()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 2/5] tests: shell: cannot use handle for non-existing rule in kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 1/5] src: remove useless parameter from cache_flush()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/5] src: add cache level flags
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 2/5] tests: shell: cannot use handle for non-existing rule in kernel
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 3/5] src: add cache level flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: enable set expiration date for set elements
  • From: nevola <nevola@xxxxxxxxx>
• [PATCH libnftnl] src: enable set expiration date for set elements
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH nf-next] src: enable set expiration date for set elements
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [PATCH nft 3/5] src: add cache level flags
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 2/5] tests: shell: cannot use handle for non-existing rule in kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/5] tests: shell: cannot use handle for non-existing rule in kernel
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 3/5] src: add cache level flags
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next WIP] netfilter: nf_tables: Add SYNPROXY support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next WIP] netfilter: nf_tables: Add SYNPROXY support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [netfilter-core] [sparc64] possible circular locking / deadlock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [netfilter-core] [sparc64] possible circular locking / deadlock
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [sparc64] possible circular locking / deadlock
  • From: Anatoly Pugachev <matorola@xxxxxxxxx>
• Re: [PATCH nft v2] datatype: fix print of raw numerical symbol values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v8]tests: py: add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nf-next v5] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7] ipset patches for nf-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v4 0/3] Extract SYNPROXY infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v7 2/2]tests:py: add netns feature
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: small conntrack lookup optimization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v2 0/2] br_netfilter: enable in non-initial netns
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] netfilter: fix nf_conntrack_bridge/ipv6 link error
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH nft,v2] cache: do not populate the cache in case of flush ruleset command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/5] netlink: remove netlink_list_table()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/5] src: add cache level flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/5] rule: skip cache population from do_command_monitor()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/5] tests: shell: cannot use handle for non-existing rule in kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/5] src: remove useless parameter from cache_flush()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft WIP] src: introduce SYNPROXY matching
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft WIP] src: introduce SYNPROXY matching
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next WIP] netfilter: nf_tables: Add SYNPROXY support
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH libnftnl WIP] expr: add synproxy support
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft v2] datatype: fix print of raw numerical symbol values
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] datatype: fix print of raw numerical symbol values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• working with libnetfilter_queue and linbetfilter_contrack
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH nft] datatype: fix print of raw numerical symbol values
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] datatype: fix print of raw numerical symbol values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] datatype: fix print of raw numerical symbol values
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nftables v4 0/1] add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH net-next] netfilter: bridge: add nft_bridge_pvid to tag the default pvid for non-tagged packet
  • From: wenxu@xxxxxxxxx
• [PATCH WIP v1]tests: Makefile.am (Work in Progress)
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft v7 2/2]tests:py: add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft v7 1/2]tests:py: conversion to python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft,v2] cache: do not populate the cache in case of flush ruleset command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft,v2] cache: do not populate the cache in case of flush ruleset command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v2] cache: do not populate the cache in case of flush ruleset command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v2] cache: do not populate the cache in case of flush ruleset command
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft,v2] cache: do not populate the cache in case of flush ruleset command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] cache: do not populate the cache in case of flush ruleset command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables v2]iptables-test: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft 2/2] evaluate: double datatype_free() with dynamic integer datatypes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] evaluate: update byteorder only for implicit maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: use-after-free in meter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• memory leak in __nf_hook_entries_try_shrink
  • From: syzbot <syzbot+c51f73e78e7e2ce3a31e@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] netlink_delinearize: use-after-free in expr_postprocess_string()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2] netlink_delinearize: use-after-free in expr_postprocess_string()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] monitor: Accept -j flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables release
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v1 22/31] docs: leds: convert to ReST
  • From: Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx>
• [PATCH 1/2 nft,v4] src: add reference counter for dynamic datatypes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nft,v2] datatype: dtype_clone() should clone flags too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables v1] iptables-test: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v6 2/2]tests: py: add netns feature
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v6 1/2]tests: py: conversion to python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [nft PATCH] monitor: Accept -j flag
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 1/3,v3] src: add reference counter for dynamic datatypes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] datatype: dtype_clone() should clone flags too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] datatype: add datatype_set()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] netfilter: ipv6: Fix build error without CONFIG_IPV6
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH iptables v1] iptables-test: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v6 2/2]tests: py: add netns feature
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v6 1/2]tests: py: conversion to python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: mmotm 2019-06-11-16-59 uploaded (nf_conntrack_bridge)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: memory leak in start_sync_thread
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH iptables v1] iptables-test: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v6 2/2]tests: py: add netns feature
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft,v2] src: add reference counter for dynamic datatypes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: add reference counter for dynamic datatypes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] src: add reference counter for dynamic datatypes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v6 1/2]tests: py: conversion to python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH RESEND nf-next] netfilter: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• 答复: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• [PATCH v6] netfilter: nf_conntrack_sip: fix expectation clash
  • From: xiao ruizhu <katrina.xiaorz@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: memory leak in start_sync_thread
  • From: Eric Biggers <ebiggers@xxxxxxxxxx>
• [PATCH net-next v2 0/2] br_netfilter: enable in non-initial netns
  • From: Christian Brauner <christian@xxxxxxxxxx>
• [PATCH net-next v2 2/2] br_netfilter: namespace bridge netfilter sysctls
  • From: Christian Brauner <christian@xxxxxxxxxx>
• [PATCH net-next v2 1/2] br_netfilter: port sysctls to use brnf_net
  • From: Christian Brauner <christian@xxxxxxxxxx>
• Re: [PATCH net-next v1 1/1] br_netfilter: namespace bridge netfilter sysctls
  • From: Christian Brauner <christian@xxxxxxxxxx>
• Re: [PATCH v5] netfilter: nf_conntrack_sip: fix expectation clash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v1 1/1] br_netfilter: namespace bridge netfilter sysctls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: free chain name after creating constant expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] netlink_delinearize: release expression before calling netlink_parse_concat_expr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] netlink_delinearize: release expressions in context registers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] ipset 7.2 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 7/7] Update my email address
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 5/7] netfilter: ipset: Fix error path in set_target_v3_checkentry()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 3/7] netfilter: ipset: fix a missing check of nla_parse
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/7] netfilter: ipset: remove useless memset() calls
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/7] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/7] netfilter: ipset: merge uadd and udel functions
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 6/7] ipset: Fix memory accounting for hash types on resize
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: ipset: Fix the last missing check of nla_parse_deprecated()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nft] expression: use expr_clone() from verdict_expr_clone()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: invalid read when importing chain name (trace and json)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: invalid read when importing chain name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v5] extensions: libxt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH v4] extensions: libxt_owner: Add supplementary groups option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v4] extensions: libxt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [PATCH] netfilter: nft_paylaod: add base type NFT_PAYLOAD_LL_HEADER_NO_TAG
  • From: wenxu@xxxxxxxxx
• Re: [iptables PATCH] xtables-restore: Fix program names in help texts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v6 2/2]tests: py: add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft v6 1/2]tests: py: conversion to python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH net-next v1 1/1] br_netfilter: namespace bridge netfilter sysctls
  • From: Christian Brauner <christian@xxxxxxxxxx>
• [PATCH net-next v1 0/1] br_netfilter: enable in non-initial netns
  • From: Christian Brauner <christian@xxxxxxxxxx>
• Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf
  • From: Christian Brauner <christian@xxxxxxxxxx>
• [iptables PATCH] xtables-restore: Fix program names in help texts
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH AUTOSEL 5.1 09/70] netfilter: nf_tables: fix oops during rule dump
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 12/70] netfilter: nft_fib: Fix existence check support
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 13/70] ipvs: Fix use-after-free in ip_vs_in
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 15/70] netfilter: nat: fix udp checksum corruption
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 03/31] netfilter: nf_queue: fix reinject verdict handling
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 04/31] ipvs: Fix use-after-free in ip_vs_in
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 05/49] netfilter: nf_queue: fix reinject verdict handling
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 06/49] ipvs: Fix use-after-free in ip_vs_in
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 11/70] netfilter: nf_queue: fix reinject verdict handling
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [nft PATCH 0/4] Some fixes and minor improvements in tests/
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v6 0/5] Support intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 0/4] Some fixes and minor improvements in tests/
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/4] tests/shell: Fix warning from awk call
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/4] tests/shell: Print unified diffs in dump errors
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/4] tests/py: Fix JSON equivalents
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/4] tests/py: Add missing arp.t JSON equivalents
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v6 5/5] src: Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v6 2/5] tests/json_echo: Drop needless workaround
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v6 3/5] rule: Introduce rule_lookup_by_index()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v6 0/5] Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v6 1/5] cache: Fix evaluation for rules with index reference
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v6 4/5] src: Make cache_is_complete() public
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: xt_owner: bail out with EINVAL in case of unsupported flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf
  • From: Christian Brauner <christian@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] libnftables: check for errors after evaluations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] mnl: bogus error when running monitor mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] libnftables: keep evaluating until parser_max_errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: use-after-free in implicit set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2,v2] rule: ensure cache consistency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: generation ID is 32-bit long
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v4 3/3] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v4 2/3] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v4 1/3] netfilter: synproxy: add common uapi for SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v4 0/3] Extract SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: How to use concatenation ipv4_addr . inet_proto . inet_service
  • From: Vladimir Khailenko <vkhailenko@xxxxxxxxx>
• Re: How to use concatenation ipv4_addr . inet_proto . inet_service
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables v1] iptables-test: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again
  • From: Guillaume Nault <gnault@xxxxxxxxxx>
• Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again
  • From: Guillaume Nault <gnault@xxxxxxxxxx>
• Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf
  • From: Christian Brauner <christian@xxxxxxxxxx>
• Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH nft] rule: ensure cache consistency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf
  • From: Christian Brauner <christian@xxxxxxxxxx>
• [PATCH RESEND net-next 2/2] br_netfilter: namespace bridge netfilter sysctls
  • From: Christian Brauner <christian@xxxxxxxxxx>
• [PATCH RESEND net-next 0/2] br_netfilter: enable in non-initial netns
  • From: Christian Brauner <christian@xxxxxxxxxx>
• Re: [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/4] split parse and evaluation phase to simplify cache logic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v5 03/10] libnftables: Drop cache in error case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v5 01/10] src: Fix cache_flush() in cache_needs_more() logic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/4,v2] src: single cache_update() call to build cache before evaluation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] mnl: bogus error when running monitor mode
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 4/4] src: single cache_update() call to build cache before evaluation
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] mnl: bogus error when running monitor mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl v4 0/2] add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
  • From: Igor Ryzhov <iryzhov@xxxxxxxxxx>
• [PATCH nft 3/4] src: Display parser and evaluate errors in one shot
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables v4 1/1] add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nft 4/4] src: single cache_update() call to build cache before evaluation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables v4 0/1] add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nft 2/4] src: perform evaluation after parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/4] src: dynamic input_descriptor allocation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/4] split parse and evaluation phase to simplify cache logic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl v4 0/2] add ct expectation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl v4 0/2] add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH net] ipvs: defer hook registration to avoid leaks
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH] ipset: Fix memory accounting for hash types on resize
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• LPC 2019 Networking Track CFP
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [nft PATCH v5 06/10] src: Restore local entries after cache update
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 02/10] src: Utilize CMD_FLUSH for cache->cmd
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 03/10] libnftables: Drop cache in error case
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 04/10] libnftables: Keep list of commands in nft context
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 10/10] src: Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 07/10] rule: Introduce rule_lookup_by_index()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 08/10] src: Make cache_is_complete() public
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 05/10] src: Make {table,chain}_not_found() public
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 01/10] src: Fix cache_flush() in cache_needs_more() logic
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v5 09/10] include: Collect __stmt_binary_error() wrapper macros
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
  • From: Guillaume Nault <gnault@xxxxxxxxxx>
• Re: [PATCH net] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: small conntrack lookup optimization
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v5] netfilter: nf_conntrack_sip: fix expectation clash
  • From: xiao ruizhu <katrina.xiaorz@xxxxxxxxx>
• Re: [nft PATCH v4 7/7] src: Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• Re: memory leak in nf_hook_entries_grow
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• memory leak in nf_hook_entries_grow
  • From: syzbot <syzbot+722da59ccb264bc19910@xxxxxxxxxxxxxxxxxxxxxxxxx>
• WARNING: suspicious RCU usage in in_dev_dump_addr
  • From: syzbot <syzbot+bad6e32808a3a97b1515@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [nft PATCH v4 7/7] src: Support intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6] fixup! audit: add containerid filtering
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables release
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather
  • From: wenxu@xxxxxxxxx
• [PATCH] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather
  • From: wenxu@xxxxxxxxx
• [PATCH net] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
  • From: Guillaume Nault <gnault@xxxxxxxxxx>
• Re: [PATCH 00/15] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 07/15] netfilter: bridge: convert skb_make_writable to skb_ensure_writable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/15] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/15] netfilter: ipvs: prefer skb_ensure_writable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/15] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/15] ipvs: add function to find tunnels
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/15] netfilter: nf_tables: free base chain counters from worker
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/15] ipvs: strip udp tunnel headers from icmp errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/15] netfilter: ipv4: prefer skb_ensure_writable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/15] netfilter: nf_tables: prefer skb_ensure_writable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/15] netfilter: tcpmss, optstrip: prefer skb_ensure_writable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/15] ipvs: add checksum support for gue encapsulation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/15] netfilter: replace skb_make_writable with skb_ensure_writable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/15] netfilter: conntrack, nat: prefer skb_ensure_writable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/15] netfilter: xt_HL: prefer skb_ensure_writable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/15] netfilter: xt_owner: Add supplementary groups option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/15] ipvs: allow rs_table to contain different real server types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• [PATCH AUTOSEL 5.1 070/186] netfilter: nf_conntrack_h323: restore boundary check correctness
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 069/186] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 066/186] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 061/173] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 064/173] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 065/173] netfilter: nf_conntrack_h323: restore boundary check correctness
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 067/173] netfilter: nf_tables: fix base chain stat rcu_dereference usage
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 051/141] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 054/141] netfilter: nf_tables: fix base chain stat rcu_dereference usage
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 052/141] netfilter: nf_conntrack_h323: restore boundary check correctness
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.1 072/186] netfilter: nf_tables: fix base chain stat rcu_dereference usage
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Kernel compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Kernel compilation error
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• Re: [PATCH nft,v2 5/7] mnl: estimate receiver buffer size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v2 5/7] mnl: estimate receiver buffer size
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH ghak90 V6] fixup! audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 7/7] src: Support intra-transaction rule references
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH libnftnl v4 2/2] examples: add ct expectation examples
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH libnftnl v4 1/2] src: add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH libnftnl v4 0/2] add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [nft PATCH 4/4] tests/shell: Test large transaction with echo output
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] ipvs: add checksum support for gue encapsulation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 0/2] JSON schema for nftables.py
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/2] Fix and simplify mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] build: avoid unnecessary rebuild of iptables when rerunning configure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: remove skb_make_writable helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: free base chain counters from worker
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: xt_owner: Add supplementary groups option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2 net-next 0/3] Add UDP tunnel support for ICMP errors in IPVS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 1/2] mnl: Initialize fd_set before select(), not after
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/2] Fix and simplify mnl_batch_talk()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/2] mnl: Simplify mnl_batch_talk()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] conntrackd: Fix "Address Accept" filter case
  • From: Robin Geuze <robing@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nft 2/7,v4] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v3 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v2] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH nft,v3 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next] netfilter: ipv6: fix compile err unknown field br_defrag and br_fragment
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] netfilter: ipv6: fix compile err unknown field br_defrag and br_fragment
  • From: wenxu@xxxxxxxxx
• Re: [PATCH net-next] netfilter: missing #include for nf_ct_frag6_gather declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_conntrack_bridge: Fix build error without IPV6
  • From: Yuehaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH v4] ipvs: add checksum support for gue encapsulation
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf-next 2/8] netfilter: ipvs: prefer skb_ensure_writable
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH net-next] netfilter: missing #include for nf_ct_frag6_gather declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_conntrack_bridge: Fix build error without IPV6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] build: avoid unnecessary rebuild of iptables when rerunning configure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH net-next] netfilter: nf_conntrack_bridge: Fix build error without IPV6
  • From: Yuehaibing <yuehaibing@xxxxxxxxxx>
• [PATCH net-next] netfilter: nf_conntrack_bridge: Fix build error without IPV6
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] connection tracking support for bridge
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Tycho Andersen <tycho@xxxxxxxx>
• Re: nftables release
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH v2] conntrackd: Use strdup in lexer
  • From: Ash Hughes <sehguh.hsa@xxxxxxxxx>
• Re: [PATCH 2/2] build: avoid unnecessary rebuild of iptables when rerunning configure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] build: remove -Wl,--no-as-needed and libiptc.so
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: Avoid unnecessary rebuilds of iptables
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH] conntrackd: search for RPC headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrackd: Use strdup in lexer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Apply userspace filter on resync with internal cache disabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrackd: Fix "Address Accept" filter case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [nft PATCH 2/4] mnl: Increase receive buffer in mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v4 5/7] mnl: estimate receiver buffer size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v3 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 6/7] mnl: mnl_batch_talk() returns -1 on internal netlink errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 7/7] erec: remove double \n on error when internal_netlink is used
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 5/7] mnl: estimate receiver buffer size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 4/7] mnl: add mnl_nft_batch_to_msg()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 1/7] mnl: add mnl_set_rcvbuffer() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 3/7] mnl: call mnl_set_sndbuffer() from mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] ipvs: add checksum support for gue encapsulation
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH v4] ipvs: add checksum support for gue encapsulation
  • From: Jacky Hu <hengqing.hu@xxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Tycho Andersen <tycho@xxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v3] ipvs: add checksum support for gue encapsulation
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [nft PATCH 2/4] mnl: Increase receive buffer in mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/4] Fix ENOBUFS error in large transactions with --echo
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/4] mnl: Fix and simplify mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] mnl: estimate receiver buffer size based on the number of commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] mnl: add mnl_set_rcvbuffer() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] mnl: call mnl_set_sndbuffer() from mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Tycho Andersen <tycho@xxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Tycho Andersen <tycho@xxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Daniel Walsh <dwalsh@xxxxxxxxxx>
• Re: nftables release
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [nft PATCH 0/4] Fix ENOBUFS error in large transactions with --echo
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/4] tests/shell: Test large transaction with echo output
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/4] mnl: Maximize socket receive buffer by default
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/4] mnl: Fix and simplify mnl_batch_talk()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/4] mnl: Increase receive buffer in mnl_batch_talk()
  • From: Phil Sutter <phil@xxxxxx>
• nftables release
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Daniel Walsh <dwalsh@xxxxxxxxxx>
• [PATCH net-next,v3 5/9] net: ipv4: place control buffer handling away from fragmentation iterators
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 1/9] net: ipv4: add skbuff fraglist splitter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 6/9] netfilter: nf_conntrack: allow to register bridge support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 9/9] netfilter: nf_conntrack_bridge: register inet conntrack for bridge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 8/9] netfilter: nf_conntrack_bridge: add support for IPv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 4/9] net: ipv6: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 7/9] netfilter: bridge: add connection tracking system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 3/9] net: ipv4: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 2/9] net: ipv6: add skbuff fraglist splitter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 0/9] connection tracking support for bridge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH v3] ipvs: add checksum support for gue encapsulation
  • From: Jacky Hu <hengqing.hu@xxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [nft PATCH v4 1/7] src: Fix cache_flush() in cache_needs_more() logic
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] ipvs: add checksum support for gue encapsulation
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Daniel Walsh <dwalsh@xxxxxxxxxx>
• Announcing Netdev 0x14
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [nft PATCH v4 1/7] src: Fix cache_flush() in cache_needs_more() logic
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [nft PATCH v4 0/7] Cache update fix && intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 6/7] src: Make cache_is_complete() public
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 3/7] src: Make {table,chain}_not_found() public
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 2/7] libnftables: Keep list of commands in nft context
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 5/7] rule: Introduce rule_lookup_by_index()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 1/7] src: Fix cache_flush() in cache_needs_more() logic
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 7/7] src: Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 4/7] src: Restore local entries after cache update
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v5] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• memory leak in start_sync_thread
  • From: syzbot <syzbot+7e2e50c8adfccd2e5041@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nft v5] tests: py: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v5] tests: py: fix python3
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: add netns feature
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: add netns feature
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: add netns feature
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: add netns feature
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v1 ] py: nftables.py: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v1 ] py: nftables.py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH 2/2] build: avoid unnecessary rebuild of iptables when rerunning configure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 1/2] src: replace IPTABLES_VERSION by PACKAGE_VERSION
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Avoid unnecessary rebuilds of iptables
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] Apply userspace filter on resync with internal cache disabled
  • From: Robin Geuze <robing@xxxxxxxxxx>
• [PATCH] build: remove -Wl,--no-as-needed and libiptc.so
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] build: remove -Wl,--no-as-needed and libiptc.so
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] conntrackd: Fix "Address Accept" filter case
  • From: Robin Geuze <robing@xxxxxxxxxx>
• [PATCH nft v2]tests: json_echo: convert to py3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft v3]tests: py: add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft v5] tests: py: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH iptables v1] iptables-test.py: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v1] tests: json_echo: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nf-next v3 4/4] netfilter: add NF_SYNPROXY symbol
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v3 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] conntrackd: Use strdup in lexer
  • From: Ash Hughes <sehguh.hsa@xxxxxxxxx>
• [PATCH] conntrackd: search for RPC headers
  • From: Ash Hughes <sehguh.hsa@xxxxxxxxx>
• Re: [PATCH nf-next v3 4/4] netfilter: add NF_SYNPROXY symbol
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] parser_json: Fix and simplify verdict expression parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables v1] iptables-test.py: fix python3
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v1] tests: json_echo: fix python3
  • From: Phil Sutter <phil@xxxxxx>
• [ANNOUNCE] iptables 1.8.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.1.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] parser_json: Fix and simplify verdict expression parsing
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 1/2] py: Implement JSON validation in nftables module
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 2/2] tests/py: Support JSON validation
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: add cache_is_complete() and cache_is_updated()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] ipset: Fix memory accounting for hash types on resize
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH v2] ipvs: add checksum support for gue encapsulation
  • From: Jacky Hu <hengqing.hu@xxxxxxxxx>
• [PATCH nf-next v5] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/3] Support intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v4 1/1] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 3/3] src: Restore local entries after cache update
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH v2 2/3] libnftables: Keep list of commands in nft context
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix module autoload with inet family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables v1] iptables-test.py: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [nft PATCH 3/3] src: Support intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4 2/2] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: replace single element sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/3] src: Support intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v1 ] py: nftables.py: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft] src: add cache_is_complete() and cache_is_updated()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v1] tests: json_echo: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nf-next v3 4/4] netfilter: add NF_SYNPROXY symbol
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v3 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v3 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v3 1/4] netfilter: synproxy: add common uapi for SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v3 0/4] Extract SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [nft PATCH v2 1/3] src: update cache if cmd is more specific
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v1] ipvs: add checksum support for gue encapsulation
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nft v4 2/2] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft v4 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH v1] ipvs: add checksum support for gue encapsulation
  • From: Jacky Hu <hengqing.hu@xxxxxxxxx>
• Re: [PATCH 00/11] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 00/11] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/11] netfilter: nf_tables: fix oops during rule dump
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/11] ipvs: Fix use-after-free in ip_vs_in
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/11] selftests: netfilter: missing error check when setting up veth interface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/11] netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/11] selftests: netfilter: add flowtable test script
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/11] netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/11] netfilter: nat: fix udp checksum corruption
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/11] netfilter: nft_flow_offload: set liberal tracking mode for tcp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/11] netfilter: nf_flow_table: ignore DF bit setting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/11] netfilter: nft_fib: Fix existence check support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/11] netfilter: nf_queue: fix reinject verdict handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3]tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nf-next v4 0/1] add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nf-next v4 1/1] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft v2] tests: py: Add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft v4] tests: py: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nf-next 8/8] netfilter: replace skb_make_writable with skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 7/8] netfilter: tcpmss, optstrip: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 6/8] netfilter: xt_HL: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 5/8] netfilter: nf_tables: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/8] netfilter: ipv4: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/8] netfilter: conntrack, nat: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/8] netfilter: ipvs: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/8] netfilter: bridge: convert skb_make_writable to skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/8] netfilter: remove skb_make_writable helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nftables] exthdr: doc: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• [PATCH libnftnl] src: libnftnl: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• Re: [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: free base chain counters from worker
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: support for arp sender and target ethernet and IPv4 addresses
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: support for arp sender and target ethernet and IPv4 addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v2 0/3] Resolve cache update woes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 3/3] src: Restore local entries after cache update
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/3] src: update cache if cmd is more specific
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 2/3] libnftables: Keep list of commands in nft context
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 2/2] tests/py: Support JSON validation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH v3 1/2] py: Implement JSON validation in nftables module
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH 0/3] Resolve cache update woes
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [nft PATCH v3 2/2] tests/py: Support JSON validation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v3 1/2] py: Implement JSON validation in nftables module
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/3] src: Fix cache_flush() in cache_needs_more() logic
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/3] Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/3] rule: Introduce rule_lookup_by_index()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/3] src: Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] selftests: netfilter: missing error check when setting up veth interface
  • From: Jeffrin Thalakkottoor <jeffrin@xxxxxxxxxxxxxxxxxxx>
• Re: [nft PATCH v2 1/2] py: Implement JSON validation in nftables module
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: fix python3.
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: fix python3.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v3]tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nf 0/5] netfilter: flow table fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/2] JSON schema for nftables.py
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Expectations
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Expectations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Expectations
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [iptables PATCH] Revert "build: don't include tests in released tarball"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: fix udp checksum corruption
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] selftests: netfilter: missing error check when setting up veth interface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• progress on connection tracking for bridge family
  • From: M. Schröder <nfdev.moschroe@xxxxxxxxx>
• Re: [PATCH nft v2] tests: py: fix python3.
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH 0/3] Resolve cache update woes
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH 0/3] Resolve cache update woes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_fib: Fix existence check support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net v3] netfilter: nf_queue:fix reinject verdict handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 5/5] selftests: netfilter: add flowtable test script
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 4/5] netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 3/5] netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment
  • From: Florian Westphal <fw@xxxxxxxxx>