Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] connection tracking support for bridge
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Tycho Andersen <tycho@xxxxxxxx>
• Re: nftables release
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH v2] conntrackd: Use strdup in lexer
  • From: Ash Hughes <sehguh.hsa@xxxxxxxxx>
• Re: [PATCH 2/2] build: avoid unnecessary rebuild of iptables when rerunning configure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] build: remove -Wl,--no-as-needed and libiptc.so
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: Avoid unnecessary rebuilds of iptables
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH] conntrackd: search for RPC headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrackd: Use strdup in lexer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Apply userspace filter on resync with internal cache disabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrackd: Fix "Address Accept" filter case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [nft PATCH 2/4] mnl: Increase receive buffer in mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v4 5/7] mnl: estimate receiver buffer size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v3 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 6/7] mnl: mnl_batch_talk() returns -1 on internal netlink errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 7/7] erec: remove double \n on error when internal_netlink is used
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 5/7] mnl: estimate receiver buffer size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 4/7] mnl: add mnl_nft_batch_to_msg()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 1/7] mnl: add mnl_set_rcvbuffer() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 3/7] mnl: call mnl_set_sndbuffer() from mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] ipvs: add checksum support for gue encapsulation
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH v4] ipvs: add checksum support for gue encapsulation
  • From: Jacky Hu <hengqing.hu@xxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Tycho Andersen <tycho@xxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v3] ipvs: add checksum support for gue encapsulation
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [nft PATCH 2/4] mnl: Increase receive buffer in mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/4] Fix ENOBUFS error in large transactions with --echo
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/4] mnl: Fix and simplify mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] mnl: estimate receiver buffer size based on the number of commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] mnl: add mnl_set_rcvbuffer() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] mnl: call mnl_set_sndbuffer() from mnl_batch_talk()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Tycho Andersen <tycho@xxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 02/10] audit: add container id
  • From: Tycho Andersen <tycho@xxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Daniel Walsh <dwalsh@xxxxxxxxxx>
• Re: nftables release
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [nft PATCH 0/4] Fix ENOBUFS error in large transactions with --echo
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/4] tests/shell: Test large transaction with echo output
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/4] mnl: Maximize socket receive buffer by default
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/4] mnl: Fix and simplify mnl_batch_talk()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/4] mnl: Increase receive buffer in mnl_batch_talk()
  • From: Phil Sutter <phil@xxxxxx>
• nftables release
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Daniel Walsh <dwalsh@xxxxxxxxxx>
• [PATCH net-next,v3 5/9] net: ipv4: place control buffer handling away from fragmentation iterators
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 1/9] net: ipv4: add skbuff fraglist splitter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 6/9] netfilter: nf_conntrack: allow to register bridge support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 9/9] netfilter: nf_conntrack_bridge: register inet conntrack for bridge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 8/9] netfilter: nf_conntrack_bridge: add support for IPv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 4/9] net: ipv6: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 7/9] netfilter: bridge: add connection tracking system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 3/9] net: ipv4: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 2/9] net: ipv6: add skbuff fraglist splitter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 0/9] connection tracking support for bridge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH v3] ipvs: add checksum support for gue encapsulation
  • From: Jacky Hu <hengqing.hu@xxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [nft PATCH v4 1/7] src: Fix cache_flush() in cache_needs_more() logic
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] ipvs: add checksum support for gue encapsulation
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Daniel Walsh <dwalsh@xxxxxxxxxx>
• Announcing Netdev 0x14
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [nft PATCH v4 1/7] src: Fix cache_flush() in cache_needs_more() logic
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [nft PATCH v4 0/7] Cache update fix && intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 6/7] src: Make cache_is_complete() public
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 3/7] src: Make {table,chain}_not_found() public
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 2/7] libnftables: Keep list of commands in nft context
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 5/7] rule: Introduce rule_lookup_by_index()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 1/7] src: Fix cache_flush() in cache_needs_more() logic
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 7/7] src: Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 4/7] src: Restore local entries after cache update
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v5] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• memory leak in start_sync_thread
  • From: syzbot <syzbot+7e2e50c8adfccd2e5041@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nft v5] tests: py: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v5] tests: py: fix python3
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: add netns feature
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: add netns feature
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: add netns feature
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: add netns feature
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2]tests: json_echo: convert to py3
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v1 ] py: nftables.py: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v1 ] py: nftables.py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH 2/2] build: avoid unnecessary rebuild of iptables when rerunning configure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 1/2] src: replace IPTABLES_VERSION by PACKAGE_VERSION
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Avoid unnecessary rebuilds of iptables
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] Apply userspace filter on resync with internal cache disabled
  • From: Robin Geuze <robing@xxxxxxxxxx>
• [PATCH] build: remove -Wl,--no-as-needed and libiptc.so
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] build: remove -Wl,--no-as-needed and libiptc.so
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] conntrackd: Fix "Address Accept" filter case
  • From: Robin Geuze <robing@xxxxxxxxxx>
• [PATCH nft v2]tests: json_echo: convert to py3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft v3]tests: py: add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft v5] tests: py: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH iptables v1] iptables-test.py: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nft v1] tests: json_echo: fix python3
  • From: shekhar sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nf-next v3 4/4] netfilter: add NF_SYNPROXY symbol
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v3 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] conntrackd: Use strdup in lexer
  • From: Ash Hughes <sehguh.hsa@xxxxxxxxx>
• [PATCH] conntrackd: search for RPC headers
  • From: Ash Hughes <sehguh.hsa@xxxxxxxxx>
• Re: [PATCH nf-next v3 4/4] netfilter: add NF_SYNPROXY symbol
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] parser_json: Fix and simplify verdict expression parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables v1] iptables-test.py: fix python3
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v1] tests: json_echo: fix python3
  • From: Phil Sutter <phil@xxxxxx>
• [ANNOUNCE] iptables 1.8.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.1.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] parser_json: Fix and simplify verdict expression parsing
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 1/2] py: Implement JSON validation in nftables module
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 2/2] tests/py: Support JSON validation
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: add cache_is_complete() and cache_is_updated()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] ipset: Fix memory accounting for hash types on resize
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH v2] ipvs: add checksum support for gue encapsulation
  • From: Jacky Hu <hengqing.hu@xxxxxxxxx>
• [PATCH nf-next v5] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/3] Support intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v4 1/1] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 3/3] src: Restore local entries after cache update
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH v2 2/3] libnftables: Keep list of commands in nft context
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix module autoload with inet family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables v1] iptables-test.py: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [nft PATCH 3/3] src: Support intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4 2/2] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: kill anon sets with one element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: replace single element sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/3] src: Support intra-transaction rule references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v1 ] py: nftables.py: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft] src: add cache_is_complete() and cache_is_updated()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v1] tests: json_echo: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nf-next v3 4/4] netfilter: add NF_SYNPROXY symbol
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v3 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v3 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v3 1/4] netfilter: synproxy: add common uapi for SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v3 0/4] Extract SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [nft PATCH v2 1/3] src: update cache if cmd is more specific
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v1] ipvs: add checksum support for gue encapsulation
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nft v4 2/2] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft v4 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH v1] ipvs: add checksum support for gue encapsulation
  • From: Jacky Hu <hengqing.hu@xxxxxxxxx>
• Re: [PATCH 00/11] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 00/11] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/11] netfilter: nf_tables: fix oops during rule dump
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/11] ipvs: Fix use-after-free in ip_vs_in
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/11] selftests: netfilter: missing error check when setting up veth interface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/11] netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/11] selftests: netfilter: add flowtable test script
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/11] netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/11] netfilter: nat: fix udp checksum corruption
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/11] netfilter: nft_flow_offload: set liberal tracking mode for tcp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/11] netfilter: nf_flow_table: ignore DF bit setting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/11] netfilter: nft_fib: Fix existence check support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/11] netfilter: nf_queue: fix reinject verdict handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3]tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nf-next v4 0/1] add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nf-next v4 1/1] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH nft v4] tests: py: fix python3
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft v2] tests: py: Add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft v4] tests: py: fix python3
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nf-next 8/8] netfilter: replace skb_make_writable with skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 7/8] netfilter: tcpmss, optstrip: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 6/8] netfilter: xt_HL: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 5/8] netfilter: nf_tables: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/8] netfilter: ipv4: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/8] netfilter: conntrack, nat: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/8] netfilter: ipvs: prefer skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/8] netfilter: bridge: convert skb_make_writable to skb_ensure_writable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/8] netfilter: remove skb_make_writable helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nftables] exthdr: doc: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• [PATCH libnftnl] src: libnftnl: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• [PATCH nf-next] netfilter: add support for matching IPv4 options
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• Re: [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: free base chain counters from worker
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: support for arp sender and target ethernet and IPv4 addresses
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: support for arp sender and target ethernet and IPv4 addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v2 0/3] Resolve cache update woes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 3/3] src: Restore local entries after cache update
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/3] src: update cache if cmd is more specific
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 2/3] libnftables: Keep list of commands in nft context
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 2/2] tests/py: Support JSON validation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH v3 1/2] py: Implement JSON validation in nftables module
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH 0/3] Resolve cache update woes
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [nft PATCH v3 2/2] tests/py: Support JSON validation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v3 1/2] py: Implement JSON validation in nftables module
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v3 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/3] src: Fix cache_flush() in cache_needs_more() logic
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/3] Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/3] rule: Introduce rule_lookup_by_index()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/3] src: Support intra-transaction rule references
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] selftests: netfilter: missing error check when setting up veth interface
  • From: Jeffrin Thalakkottoor <jeffrin@xxxxxxxxxxxxxxxxxxx>
• Re: [nft PATCH v2 1/2] py: Implement JSON validation in nftables module
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: fix python3.
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft v3]tests: py: fix python3.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v3]tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH nf 0/5] netfilter: flow table fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/2] JSON schema for nftables.py
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Expectations
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Expectations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Expectations
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [iptables PATCH] Revert "build: don't include tests in released tarball"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: fix udp checksum corruption
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] selftests: netfilter: missing error check when setting up veth interface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• progress on connection tracking for bridge family
  • From: M. Schröder <nfdev.moschroe@xxxxxxxxx>
• Re: [PATCH nft v2] tests: py: fix python3.
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH 0/3] Resolve cache update woes
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH 0/3] Resolve cache update woes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_fib: Fix existence check support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net v3] netfilter: nf_queue:fix reinject verdict handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 5/5] selftests: netfilter: add flowtable test script
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 4/5] netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 3/5] netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/5] netfilter: nft_flow_offload: set liberal tracking mode for tcp
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/5] netfilter: nf_flow_table: ignore DF bit setting
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/5] netfilter: flow table fixes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] Drop release.sh
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 4/4] netfilter: add NF_SYNPROXY symbol
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: nftables flow offload possible mtu handling issue
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix oops during rule dump
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 5/6] nft: do not retry on EINTR
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 3/6] nft: don't skip table addition from ERESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 2/6] xtables: Fix for explicit rule flushes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 6/6] nft: reset netlink sender buffer size of socket restart
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 4/6] nft: don't care about previous state in ERESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 1/6] nft: keep original cache in case of ERESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 0/6] ERESTART fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables RFC 2/4] nft: keep original cache in case of ERESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables RFC 1/4] nft: don't check for table existence from __nft_table_flush()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables RFC 3/4] nft: don't skip table addition from ERESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables RFC 0/4] revisit RESTART log
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables 2/6] nft: statify nft_rebuild_cache()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 0/6] cache rework
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/3] src: Improve cache_needs_more() algorithm
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH iptables 4/6] nft: add flush_cache()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 5/6] nft: cache table list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 6/6] nft: ensure cache consistency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 3/6] nft: add __nft_table_builtin_find()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 1/6] nft: add struct nft_cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf] netfilter: nat: fix udp checksum corruption
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] Drop release.sh
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] Revert "build: don't include tests in released tarball"
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables: Testsuites in release tarballs?
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables: Testsuites in release tarballs?
  • From: Florian Westphal <fw@xxxxxxxxx>
• iptables: Testsuites in release tarballs?
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next v2 4/4] netfilter: add NF_SYNPROXY symbol
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next v2 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v2 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 0/5] Extract SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf-next v2 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 4/4] netfilter: add NF_SYNPROXY symbol
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v2 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v2 1/4] netfilter: synproxy: add common uapi for SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v2 0/4] Extract SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: Expectations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft v1] tests: py: Add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH iptables 1/4] nft: add struct nft_cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 3/4] nft: add flush_cache()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 2/4] nft: statify nft_rebuild_cache()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v1] tests: py: Add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH nft] evaluate: kill anon sets with one element
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft v1] tests: py: Add netns feature
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in
  • From: Julian Anastasov <ja@xxxxxx>
• Re: nftables flow offload possible mtu handling issue
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft v2] tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH 0/5] Extract SYNPROXY infrastructure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 5/5 nf-next] netfilter: add NF_SYNPROXY_IPV6 symbol
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 3/5 nf-next] netfilter: add NF_SYNPROXY_IPV4 symbol
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/5 nf-next] netfilter: synproxy: extract IPv4 SYNPROXY infrastructure from ipt_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/5 nf-next] netfilter: synproxy: add common uapi for SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 0/5] Extract SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Expectations
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Refcounts in libnftnl?
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/3] Resolve cache update woes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/3] src: Improve cache_needs_more() algorithm
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/3] libnftables: Keep list of commands in nft context
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/3] src: Restore local entries after cache update
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/2] py: Implement JSON validation in nftables module
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 2/2] tests/py: Support JSON validation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl,v3 2/2] examples: add ct expectation examples
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH libnftnl,v3 1/2] src: add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nftables,v3] add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• nftables flow offload possible mtu handling issue
  • From: <marcmicalizzi@xxxxxxxxx>
• [PATCH v2] ipvs: Fix use-after-free in ip_vs_in
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• oops in netfilter
  • From: David Howells <dhowells@xxxxxxxxxx>
• [nft PATCH 1/2] py: Implement JSON validation in nftables module
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/2] tests/py: Support JSON validation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nft v3 2/2] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft] tests: py: fix python3.
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] src: update cache if cmd is more specific
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf] netfilter: nft_fib: Fix existence check support
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH 2/2 nft v2] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft v2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] tests: Fix ipt-restore/0004-restore-race_0 testcase
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] xtables: Don't leak iter in error path of __nft_chain_zero_counters()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] evaluate: force full cache update on rule index translation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft] tests: py: fix python3.
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] ipvs: Fix use-after-free in ip_vs_in
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v4] netfilter: nf_conntrack_sip: fix expectation clash
  • From: xiao ruizhu <katrina.xiaorz@xxxxxxxxx>
• [PATCH nft] tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH v2] selftests: netfilter: missing error check when setting up veth interface
  • From: Jeffrin Jose T <jeffrin@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft] jump: Introduce chain_expr in jump and goto statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft WIP v2] jump: Introduce chain_expr in jump statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH iptables] man: refer to iptables-translate and ip6tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] include: Remove redundant declaration of nftnl_gen_nlmsg_parse()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] tests: Fix ipt-restore/0004-restore-race_0 testcase
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] xtables: Fix typo in nft_rebuild_cache()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v3] netfilter: nf_conntrack_sip: fix expectation clash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] xtables: Fix typo in nft_rebuild_cache()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net v3] netfilter: nf_queue:fix reinject verdict handling
  • From: Jagdish Motwani <j.k.motwani@xxxxxxxxx>
• [PATCH net v2] netfilter: nf_queue:fix reinject verdict handling
  • From: Jagdish Motwani <j.k.motwani@xxxxxxxxx>
• [iptables PATCH] xtables: Don't leak iter in error path of __nft_chain_zero_counters()
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] include: Remove redundant declaration of nftnl_gen_nlmsg_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] xtables: Fix for explicit rule flushes
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 00/13] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: [PATCH v3] netfilter: nf_conntrack_sip: fix expectation clash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH net] netfilter: nf_queue:fix reinject verdict handling
  • From: Jagdish Motwani <Jagdish.Motwani@xxxxxxxxxx>
• Re: [PATCH net] netfilter: nf_queue:fix reinject verdict handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/13] netfilter: nf_conntrack_h323: restore boundary check correctness
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/13] netfilter: nf_tables: fix base chain stat rcu_dereference usage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/13] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/13] netfilter: nf_flow_table: check ttl value in flow offload data path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/13] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/13] netfilter: nf_flow_table: do not flow offload deleted conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/13] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/13] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/13] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/13] netfilter: nf_tables: remove NFT_CT_TIMEOUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/13] netfilter: nf_flow_table: fix netdev refcnt leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/13] netfilter: nf_tables: delay chain policy update until transaction is complete
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/13] netfilter: nft_flow_offload: add entry to flowtable after confirmation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/13] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: nf_queue:fix reinject verdict handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Undefined reference?
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Undefined reference?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nft] src: use definitions in include/linux/netfilter/nf_tables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: incorrect definition for NFT_LOGLEVEL_MAX
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: use definitions in include/linux/netfilter/nf_tables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] py: fix missing decode/encode of strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [conntrack-tools PATCH] sync-mode: Also cancel flush timer in ALL_FLUSH_CACHE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ebtables PATCH] Fix incorrect IPv6 prefix formatting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Undefined reference?
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Undefined reference?
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: Undefined reference?
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Undefined reference?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Undefined reference?
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH nft v2] py: fix missing decode/encode of strings
  • From: Phil Sutter <phil@xxxxxx>
• [ebtables PATCH] Fix incorrect IPv6 prefix formatting
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl,v1 2/2] examples: add ct expectation examples
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH libnftnl,v1 1/2] src: add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nf-next,v2] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nft v2] py: fix missing decode/encode of strings
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH v3] extensions: libxt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [PATCH v3] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• linux-next: manual merge of the netfilter tree with Linus' tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• [conntrack-tools PATCH] sync-mode: Also cancel flush timer in ALL_FLUSH_CACHE
  • From: Simon Kirby <sim@xxxxxxxxxx>
• Re: [PATCH net-next,RFC 0/2] netfilter: add hardware offload infrastructure
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 0/2] netfilter: add hardware offload infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le"
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/9] Testsuite-indicated fixes for JSON
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [nft PATCH 6/9] parser_json: Fix ct timeout object support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 8/9] tests/py: Fix JSON expexted output after expr merge change
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le"
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/9] json: Support nat in inet family
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/9] tests/py: Fix JSON equivalents of osf tests
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 5/9] json: Fix tproxy support regarding latest changes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/9] Testsuite-indicated fixes for JSON
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/9] netlink: Fix printing of zero-length prefixes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 9/9] tests/py: Fix JSON expected output for icmpv6 code values
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/9] parser_json: Fix igmp support
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft WIP] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] netfilter: nf_queue:fix reinject verdict handling
  • From: Jagdish Motwani <j.k.motwani@xxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH v2] extensions: libxt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: remove NFT_CT_TIMEOUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach
  • From: hujunwei <hujunwei4@xxxxxxxxxx>
• Re: [PATCHv2 net-next 0/3] Add UDP tunnel support for ICMP errors in IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_owner: Add complementary groups option
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_owner: Add complementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [nft PATCH] doc: Review man page synopses
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] py: Fix gitignore of lib/ directory
  • From: Phil Sutter <phil@xxxxxx>
• Re: Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH AUTOSEL 5.0 64/99] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 63/99] netfilter: ctnetlink: don't use conntrack/expect object addresses as id
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 62/99] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 65/99] netfilter: nat: fix icmp id randomization
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 75/99] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 74/99] netfilter: never get/set skb->tstamp
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 46/81] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 45/81] netfilter: ctnetlink: don't use conntrack/expect object addresses as id
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 44/81] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 52/81] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 71/81] netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 70/81] netfilter: nf_tables: use-after-free in dynamic operations
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 24/95] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 25/95] netfilter: ctnetlink: don't use conntrack/expect object addresses as id
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 81/95] netfilter: nf_tables: warn when expr implements only one of activate/deactivate
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.9 17/25] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.4 11/14] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach
  • From: hujunwei <hujunwei4@xxxxxxxxxx>
• [PATCH nft v2] evaluate: force full cache update on rule index translation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft] evaluate: force full cache update on rule index translation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• linux-next: Fixes tag needs some work in the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH 00/12] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 04/12] netfilter: conntrack: limit sysctl setting for boolean options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/12] netfilter: nf_tables: relocate header content to consumer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/12] openvswitch: load and reference the NAT helper.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/12] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: xt_hashlimit: use struct_size() helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/12] netfilter: nf_nat: register NAT helpers.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/12] netfilter: add API to manage NAT helpers.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: slightly optimize nf_inet_addr_mask
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/12] netfilter: nft_ct: Add ct id support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/12] netfilter: use macros to create module aliases.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/12] netfilter: nf_tables: drop include of module.h from nf_tables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/12] netfilter: nf_tables: fix implicit include of module.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/12] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH][nf-next] netfilter: slightly optimize nf_inet_addr_mask
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH][next] netfilter: xt_hashlimit: use struct_size() helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_owner: Add complementary groups option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_flow_table: fix missing err check for rhashtable_insert_fast
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix base chain stat rcu_dereference usage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: nf_ct_h323: restore boundary check correctness
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: force full cache update on rule index translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] gmputil.h: Add missing header for va_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libmnl 1/1] examples: Add rtnl-addr-add.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libmnl 1/1] examples: Add rtnl-addr-add.c
  • From: Petr Vorel <pvorel@xxxxxxx>
• [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCHv2 net-next 1/3] ipvs: allow rs_table to contain different real server types
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv2 net-next 2/3] ipvs: add function to find tunnels
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv2 net-next 0/3] Add UDP tunnel support for ICMP errors in IPVS
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv2 net-next 3/3] ipvs: strip udp tunnel headers from icmp errors
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH net-next 3/3] ipvs: strip udp tunnel headers from icmp errors
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] gmputil.h: Add missing header for va_list
  • From: Rosen Penev <rosenp@xxxxxxxxx>
• [PATCH nf v2] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [nft PATCH] use UDATA defines from libnftnl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] py: fix missing decode/encode of strings
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH libnetfilter_conntrack] conntrack: api: use libmnl API to build the netlink headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_json: fix crash on add rule to bad references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_json: fix off by one index on rule add/replace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] py: fix missing decode/encode of strings
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] parser_json: fix crash on add rule to bad references
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] parser_json: fix off by one index on rule add/replace
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [nftables,v2] proto: support for draft-ietf-tsvwg-le-phb-10.txt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_json: default to unspecified l3proto for ct helper/timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_json: default to unspecified l3proto for ct helper/timeout
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables] extensions: SYNPROXY: should not be needed anymore on current kernels
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH nf] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_flow_table: fix missing err check for rhashtable_insert_fast
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nft] parser_json: default to unspecified l3proto for ct helper/timeout
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack 4/3] src: replace old libnfnetlink builder
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH libnetfilter_conntrack 3/3] src: replace old libnfnetlink parser
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack 2/3] expect: add missing handling for CTA_EXPECT_* attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack 1/3] src: introduce abi_breakage()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Port triggering
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: Port triggering
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH][next] netfilter: xt_hashlimit: use struct_size() helper
  • From: "Gustavo A. R. Silva" <gustavo@xxxxxxxxxxxxxx>
• [PATCH nft] evaluate: force full cache update on rule index translation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] py: fix missing decode/encode of strings
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] parser_json: fix crash on add rule to bad references
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] parser_json: fix off by one index on rule add/replace
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH net-next 3/3] ipvs: strip udp tunnel headers from icmp errors
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH net-next 3/3] ipvs: strip udp tunnel headers from icmp errors
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [nftables,v2] proto: support for draft-ietf-tsvwg-le-phb-10.txt
  • From: Loganaden Velvindron <logan@xxxxxxxxxxxxx>
• Debian 9 vs Xtables-addons 3.3 and GeoLite2
  • From: Patrick Adam <patrickbln@xxxxxxxxxx>
• Problem in libnetfilter_conntrack library
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix oops during rule dump
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [RFC nf-next v2 1/2] netfilter: connmark: introduce savedscp
  • From: "Kevin 'ldir' Darbyshire-Bryant" <ldir@xxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v3 nf] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH nf v2 3/3] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix oops during rule dump
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix base chain stat rcu_dereference usage
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nat: avoid unused-variable warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nf-next v2 1/2] netfilter: connmark: introduce savedscp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables v1] Add support for https://www.ietf.org/id/draft-ietf-tsvwg-le-phb-10.txt which is close to being published as an RFC.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/4] Misc minor fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: limit sysctl setting for boolean options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2,v2 2/2] IPFIX: Introduce template record support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2,v2 1/2] IPFIX: Add IPFIX output plugin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables,v2] xshared: check for maximum buffer length in add_param_to_argv()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v3 0/4] openvswitch: load and reference the NAT helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_ct: Add ct id support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2 3/3] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: delay chain policy update until transaction is complete
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2 0/3] netfilter: nf_flow_table: fix several flowtable bugs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next 0/3] netfilter: header cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: fix double free on xt stmt destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] selftests : netfilter: Wrote a error and exit code for a command which needed veth kernel module.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Dexuan-Linux Cui <dexuan.linux@xxxxxxxxx>
• Re: [PATCH 7/9 net-next,v2] netfilter: bridge: add connection tracking system
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
• [PATCH 1/9 net-next,v2] net: ipv4: add skbuff fraglist splitter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/9 net-next,v2] netfilter: nf_conntrack: allow to register bridge support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/9 net-next,v2] net: ipv6: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/9 net-next,v2] net: ipv4: place cb handling away from fragmentation iterators
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/9 net-next,v2] net: ipv4: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/9 net-next,v2] netfilter: bridge: add connection tracking system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 9/9 net-next,v2] netfilter: nf_conntrack_bridge: register inet conntrack for bridge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/9 net-next,v2] netfilter: nf_conntrack_bridge: add support for IPv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>