Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH 22/51] netfilter: nf_flow_table: add support for sending flows back to the slow path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 36/51] netfilter: nf_tables: support timeouts larger than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 35/51] netfilter: xtables: use ipt_get_target_c instead of ipt_get_target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 34/51] netfilter: ebtables: add ebt_get_target and ebt_get_target_c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 24/51] netfilter: nf_flow_table: add missing condition for TCP state check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 38/51] netfilter: merge meta_bridge into nft_meta
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 37/51] netfilter: nf_tables: always use an upper set size for dynsets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 40/51] netfilter: nf_tables: merge rt expression into nft core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 42/51] ipvs: initialize tbl->entries after allocation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 41/51] netfilter: nf_tables: merge exthdr expression into nft core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 39/51] netfilter: nf_tables: make meta expression builtin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 25/51] netfilter: nf_flow_table: fix offloading connections with SNAT+DNAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 43/51] ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 46/51] netfilter: ip6t_srh: extend SRH matching for previous, next and last SID
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 47/51] netfilter: nf_nat: remove unused ct arg from lookup functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 48/51] netfilter: nf_tables: Provide NFT_{RT,CT}_MAX for userspace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 50/51] netfilter: ctnetlink: export nf_conntrack_max
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 49/51] netfilter: extract Passive OS fingerprint infrastructure from xt_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 51/51] netfilter: nft_dynset: fix timeout updates on 32bit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 45/51] netfilter: nft_numgen: enable hashing of one element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 44/51] netfilter: nft_numgen: add map lookups for numgen statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 27/51] netfilter: nf_tables: initial support for extended ACK reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/51] netfilter: nf_flow_table: track flow tables in nf_flow_table directly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/51] netfilter: ipvs: Add configurations of Maglev hashing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/51] netfilter: xt_NFLOG: use nf_log_packet instead of nfulnl_log_packet.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/51] ipvs: fix multiplicative hashing in sh/dh/lblc/lblcr algorithms
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• linux-next: Signed-off-by missing for commit in the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_dynset: fix timeout updates on 32bit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: export nf_conntrack_max
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5] netfilter: nf_osf: nf_osf_ttl() and nf_osf_match()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5] netfilter: nf_osf: nf_osf_ttl() and nf_osf_match()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5] netfilter: nf_osf: nf_osf_ttl() and nf_osf_match()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nftables: Provide NFT_{RT,CT}_MAX for userspace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_nat: remove unused ct arg from lookup functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next v2] netfilter: extend SRH matching for previous, next and last SID
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: enable hashing of one element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: add map lookups for numgen statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] scanner: Support rfc4291 IPv4-compatible addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests/py: Fix expected output in {bridge,inet}/icmpX.t
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] proto: Fix wrong token in proto_icmp6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] files: restore base table skeletons
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: simplify procfs code for seq_file instances V2
  • From: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
• Re: simplify procfs code for seq_file instances V2
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• [PATCH] Add kernal module meta-data to nf_conntrack_proto_gre
  • From: Константин С. Вишнивецкий <net-projects@xxxxxxxxxxxxxxx>
• [PATCH] netfilter: ctnetlink: export nf_conntrack_max
  • From: Florent Fourcot <florent.fourcot@xxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: export nf_conntrack_max
  • From: Florent Fourcot <florent.fourcot@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: don't assume chain stats are set when jumplabel is set
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: x_tables: add module alias for icmp matches
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: prefer nla_strlcpy for dealing with NLA_STRING attributes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 38/40] ide: remove ide_driver_proc_write
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [nft PATCH v2 03/14] libnftables: Make some arrays globally accessible
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 00/14] libnftables: JSON support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 08/14] py: Add getter/setter for echo output option
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 04/14] libnftables: Make some functions globally accessible
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 13/14] tests/py: Highlight offending parts in differences warnings
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 11/14] tests/py: Simplify parsing of 'set' lines
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 10/14] tests/py: Reduce indenting level in nft-test.py
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 05/14] libnftables: Introduce a few helper functions
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 12/14] tests/py: Don't read expected payload for each table
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 06/14] libnftables: Implement JSON output support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 09/14] py: Add JSON support to nftables Class
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 07/14] libnftables: Implement JSON parser
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 02/14] libnftables: Put bison parsing into dedicated functions
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 01/14] include/linux: Add required NFT_CT_MAX macro
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 34/40] atm: simplify procfs code
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [nft PATCH] scanner: Support rfc4291 IPv4-compatible addresses
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] tests/py: Fix expected output in {bridge,inet}/icmpX.t
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] proto: Fix wrong token in proto_icmp6
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 11/40] ipv6/flowlabel: simplify pid namespace lookup
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH iptables] xtables-compat: fix ipv4 frag (-f)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] parser: Removed LOOKUP token
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] parser: Removed LOOKUP token
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH iptables-compat 2/3] iptables-compat: do not fail on restore if user chain exists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ghak81 RFC V1 2/5] audit: convert sessionid unset to a macro
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak81 RFC V1 1/5] audit: normalize loginuid read access
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak81 RFC V1 4/5] audit: use inline function to set audit context
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak81 RFC V1 3/5] audit: use inline function to get audit context
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak81 RFC V1 5/5] audit: collect audit task parameters
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak81 RFC V1 0/5] audit: group task params
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nf] netfilter: core: add missing __rcu annotation
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_queue: Replace conntrack entry
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: Fix handling simultaneous open in TCP conntrack
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH iptables-compat 2/3] iptables-compat: do not fail on restore if user chain exists
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH iptables-compat 3/3] iptables-compat: chains are purge out already from table flush
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables-compat 2/3] iptables-compat: do not fail on restore if user chain exists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables-compat 1/3] iptables-compat: remove non-batching routines
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ebtables] Fix musl libc compatibility
  • From: Baruch Siach <baruch@xxxxxxxxxx>
• Re: [PATCH][PING] Hide private symbols in libnfnetlink
  • From: Yuri Gribov <tetra2005@xxxxxxxxx>
• Re: [PATCH][PING] Hide private symbols in libnfnetlink
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH iptables] extensions: libipt_DNAT: use size of nf_nat_range2 for rev2
  • From: Thierry Du Tre <thierry@xxxxxxxxxxxx>
• [PATCH iptables] extensions: libipt_DNAT: use size of nf_nat_range2 for rev2
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] ipvs: fix stats update from local clients
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net] ipvs: fix refcount usage for conns in ops mode
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH][PING] Hide private symbols in libnfnetlink
  • From: Yuri Gribov <tetra2005@xxxxxxxxx>
• [PATCH] netfilter: nf_queue: Replace conntrack entry
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• [PATCH nf-next v5] netfilter: nf_osf: nf_osf_ttl() and nf_osf_match()
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: Silently dropped UDP packets on kernel 4.14
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• [PATCH nft 5/5] src: use location to display error messages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/5] src: add table_spec
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/5] src: add obj_spec
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/5] src: add set_spec
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/5] src: add chain_spec
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Silently dropped UDP packets on kernel 4.14
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [arptables PATCH] arptables: cleanup sysvinit script
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: Silently dropped UDP packets on kernel 4.14
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [ANNOUNCE] libnftnl 1.1.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Silently dropped UDP packets on kernel 4.14
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Silently dropped UDP packets on kernel 4.14
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH] doc: update doc/ispell_nft to track recent nft.8 updates
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] doc: update doc/ispell_nft to track recent nft.8 updates
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [nft PATCH 02/13] libnftables: Put bison parsing into dedicated functions
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 00/13] libnftables: JSON support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 01/13] include/linux: Add required NFT_CT_MAX macro
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 04/13] libnftables: Make some functions globally accessible
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 05/13] libnftables: Introduce a few helper functions
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 11/13] tests/py: Simplify parsing of 'set' lines
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 06/13] libnftables: Implement JSON output support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 03/13] libnftables: Make some arrays globally accessible
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 10/13] tests/py: Reduce indenting level in nft-test.py
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 07/13] libnftables: Implement JSON parser
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 12/13] tests/py: Don't read expected payload for each table
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 09/13] py: Add JSON support to nftables Class
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 08/13] py: Add getter/setter for echo output option
  • From: Phil Sutter <phil@xxxxxx>
• Re: [ANNOUNCE] libnftnl 1.1.0 release
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nft] meter: enforce presence of a max size
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2] libnftables: fix header export
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2] libnftables: fix header export
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: nft_compat: fix refcount leak on xt module
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2] libnftables: fix header export
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH v2] libnftables: fix header export
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libnftnl 1.1.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libnftnl 1.1.0 release
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: Silently dropped UDP packets on kernel 4.14
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: Silently dropped UDP packets on kernel 4.14
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] nftables 0.8.4 release
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] libnftnl 1.1.0 release
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Silently dropped UDP packets on kernel 4.14
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Silently dropped UDP packets on kernel 4.14
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• [nft PATCH] libnftables: fix header export
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nf-next] netfilter: nf_tables: add release callback in nft_expr_type
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH] ulogd: json: send messages to a remote host / unix socket
  • From: Andreas Jaggi <andreas.jaggi@xxxxxxxxxxxx>
• [ANNOUNCE] libnetfilter-conntrack 1.0.7 release
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [ANNOUNCE] conntrack-tools 1.4.5 release
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nf-next] netfilter: nf_tables: add release callback in nft_expr_type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/3 nf-next] netfilter: nf_tables: add release callback in nft_expr_type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: simplify procfs code for seq_file instances V2
  • From: David Howells <dhowells@xxxxxxxxxx>
• Re: Found Regression in v0.8.x
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Found Regression in v0.8.x
  • From: Fran Fitzpatrick <francis.x.fitzpatrick@xxxxxxxxx>
• Re: [PATCH 1/3 nf-next] netfilter: nf_tables: add release callback in nft_expr_type
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: Found Regression in v0.8.x
  • From: Fran Fitzpatrick <francis.x.fitzpatrick@xxxxxxxxx>
• Re: Found Regression in v0.8.x
  • From: Florian Westphal <fw@xxxxxxxxx>
• Found Regression in v0.8.x
  • From: Fran Fitzpatrick <francis.x.fitzpatrick@xxxxxxxxx>
• [PATCH 2/2] Allow limit to use any value for time unit (bug #1214)
  • From: X Ryl <boite.pour.spam@xxxxxxxxx>
• [PATCH 1/2] Allow limit to use any value for time unit (bug #1214)
  • From: X Ryl <boite.pour.spam@xxxxxxxxx>
• Re: [PATCH 04/40] proc: introduce proc_create_seq{,_data}
  • From: David Howells <dhowells@xxxxxxxxxx>
• nftables: added support for per-file variable scopes and global variables
  • From: David Fabian <david.fabian@xxxxxxxxx>
• Re: [PATCH 3/3 nf-next] netfilter: nf_tables: fix use-after-free in nf_tables_rule_destroy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/3 nf-next] netfilter: fix error path of the nf_tables_newrule
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/3 nf-next] netfilter: nf_tables: add release callback in nft_expr_type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/3 nf-next] netfilter: nf_tables: fix use-after-free in nf_tables_rule_destroy
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH 2/3 nf-next] netfilter: fix error path of the nf_tables_newrule
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH 1/3 nf-next] netfilter: nf_tables: add release callback in nft_expr_type
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH 0/3 nf-next] fix module leak and use-after-free
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Yuri Gribov <tetra2005@xxxxxxxxx>
• [PATCH iptables] xtables-compat: truncate comments to 254 bytes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl] udata: refuse to put more than UINT8_MAX bytes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Yuri Gribov <tetra2005@xxxxxxxxx>
• Re: [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Yuri Gribov <tetra2005@xxxxxxxxx>
• [PATCH iptables] xlate-test: use locally installed xlate tools
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Yuri Gribov <tetra2005@xxxxxxxxx>
• Re: [PATCH iptables 3/3] xtables: Introduce and use common function to print val[/mask] arguments
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables 2/3] xtables: Introduce and use common function to parse val[/mask] arguments
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables 1/3] extensions: Initialize linear mapping of symbols in _init() of extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: nft_dynset: fix timeout updates on 32bit
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Yuri Gribov <tetra2005@xxxxxxxxx>
• Re: [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] bridge: netfilter stp fix reference to uninitialized data
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH iptables] iptables-test: add nft switch and test binaries from git
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables] xtables-compat: only fetch revisions for ip/ip6
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nftables: Provide NFT_{RT,CT}_MAX for userspace
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ebtables: handle string from userspace with care
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: handle string from userspace with care
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] ulogd2 2.0.7 release
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH] netfilter: ebtables: handle string from userspace with care
  • From: Paolo Abeni <pabeni@xxxxxxxxxx>
• Re: How to use limit rate on ip address through nft command ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: How to use limit rate on ip address through nft command ?
  • From: "Rosysong" <rosysong@xxxxxxxxxxxx>
• Re: How to use limit rate on ip address through nft command ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• How to use limit rate on ip address through nft command ?
  • From: "黄邦浪" <rosysong@xxxxxxxxxxxx>
• [RFC][PATCH] Hide private symbols in libnfnetlink
  • From: Yuri Gribov <tetra2005@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: skip synchronize_rcu if transaction log is empty
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: check name length in find_match/target, too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: Fix handling simultaneous open in TCP conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: export nf_conntrack_max
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ebtables PATCH v2] Add string filter to ebtables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH] net: nftables: Make rule position deterministic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH] net: nftables: Make rule position deterministic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Patch nf] ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Patch nf] ipvs: initialize tbl->entries after allocation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL 0/5] IPVS Updates for v4.18
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix nf_tables filter chain type build
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 4/6] netfilter: nf_tables: merge exthdr expression into nft core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: merge rt expression into nft core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: merge meta_bridge into nft_meta
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: support timeouts larger than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: always use an upper set size for dynsets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: remove duplicate ip6t_get_target function call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ebtables: add ebt_free_table_info function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ebtables: remove EBT_MATCH and EBT_NOMATCH
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: use ipt_get_target_c instead of ipt_get_target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ebtables: add ebt_get_target and ebt_get_target_c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] net: nftables: Simplify set backend selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v6] netfilter : add NAT support for shifted portmap ranges
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 0/17] netfilter: nf_flow_table: refactoring, TCP state tracking, sending flows to slow path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] rule: do not hardcode ingress when printing flowtable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] evaluate: missing flowtable evaluation from nested notation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_nat: remove unused ct arg from lookup functions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Patch nf] ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [Patch nf] ipvs: initialize tbl->entries after allocation
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 06/40] proc: introduce proc_create_single{,_data}
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] nft: Fix --debug mnl not producing output
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] nft: Fix --debug mnl not producing output
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: simplify procfs code for seq_file instances
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• Re: Module crash due to broken count
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 27/40] rtc/proc: switch to proc_create_single_data
  • From: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx>
• [PATCH 03/40] proc: add a proc_create_reg helper
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 01/40] net/can: single_open_net needs to be paired with single_release_net
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 05/40] proc: introduce proc_create_seq_private
  • From: Christoph Hellwig <hch@xxxxxx>
• simplify procfs code for seq_file instances V2
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 07/40] ipv{4,6}/udp{,lite}: simplify proc registration
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 04/40] proc: introduce proc_create_seq{,_data}
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 10/40] ipv{4,6}/raw: simplify ѕeq_file code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 14/40] net: move seq_file_single_net to <linux/seq_file_net.h>
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 15/40] proc: introduce proc_create_net{,_data}
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 11/40] ipv6/flowlabel: simplify pid namespace lookup
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 13/40] netfilter/x_tables: simplify ѕeq_file code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 17/40] acpi/battery: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 16/40] proc: introduce proc_create_net_single
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 19/40] megaraid: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 22/40] ext4: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 21/40] afs: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 20/40] sg: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 29/40] hostap: switch to proc_create_{seq,single}_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 30/40] neigh: switch to proc_create_seq_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 25/40] resource: switch to proc_create_seq_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 26/40] drbd: switch to proc_create_single
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 23/40] jfs: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 27/40] rtc/proc: switch to proc_create_single_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 38/40] ide: remove ide_driver_proc_write
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 36/40] isdn: replace ->proc_fops with ->proc_show
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 40/40] tty: replace ->proc_fops with ->proc_show
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 34/40] atm: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 39/40] ide: replace ->proc_fops with ->proc_show
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 37/40] proc: don't detour through seq->private to get the inode
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 33/40] bluetooth: switch to proc_create_seq_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 35/40] atm: switch to proc_create_seq_private
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 31/40] netfilter/xt_hashlimit: switch to proc_create_{seq,single}_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 32/40] netfilter/x_tables: switch to proc_create_seq_private
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 24/40] staging/rtl8192u: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 28/40] bonding: switch to proc_create_seq_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 18/40] sgi-gru: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 09/40] ipv{4,6}/ping: simplify proc file creation
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 12/40] net/kcm: simplify proc registration
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 08/40] ipv{4,6}/tcp: simplify procfs registration
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 06/40] proc: introduce proc_create_single{,_data}
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 02/40] proc: simplify proc_register calling conventions
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH nf] netfilter: nf_tables: skip synchronize_rcu if transaction log is empty
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nf-next PATCH] net: nftables: Make rule position deterministic
  • From: Eric Garver <e@xxxxxxx>
• [PATCH nf] netfilter: x_tables: check name length in find_match/target, too
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables v2] extensions: libip6t_srh: support matching previous, next and last SID
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [nf-next v2] netfilter: extend SRH matching for previous, next and last SID
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• KASAN: stack-out-of-bounds Write in compat_copy_entries
  • From: syzbot <syzbot+4e42a04e0bc33cb6c087@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [nf-next PATCH] net: nftables: Make rule position deterministic
  • From: Phil Sutter <phil@xxxxxx>
• Re: simplify procfs code for seq_file instances
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [nf-next PATCH] net: nftables: Make rule position deterministic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: simplify procfs code for seq_file instances
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 02/39] proc: introduce proc_create_seq{,_data}
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 03/39] proc: introduce proc_create_seq_private
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: simplify procfs code for seq_file instances
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 03/39] proc: introduce proc_create_seq_private
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 16/39] ipmi: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 26/39] rtc/proc: switch to proc_create_single_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH iptables] iptables-compat: handle netlink dump EINTR errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] statement: Fix get_rate() for zero byte_rate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] Free flowtable in handle_free()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: centralize netlink error reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] netlink: no EINTR handling from netlink_get_setelem()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] statement: Fix get_rate() for zero byte_rate
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] Free flowtable in handle_free()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 03/12] netfilter: ebtables: don't attempt to allocate 0-sized compat array
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [Patch nf] ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [Patch nf] ipvs: initialize tbl->entries after allocation
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH v5] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH v4] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH nft 3/4] netlink: don't pass location to netlink_list_*() function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/4] netlink: pass cmd object to netlink function calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/4] netlink: netlink_list_chains() callers always wants all existing chains
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/4] netlink: remove unused function declarations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [Patch nf] ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• [Patch nf] ipvs: initialize tbl->entries after allocation
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: [PATCH 00/12] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxx>
• Re: [nf-next] netfilter: extend SRH match to support matching previous, next and last SID
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• Re: [nf-next] netfilter: extend SRH match to support matching previous, next and last SID
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nf-next] netfilter: extend SRH match to support matching previous, next and last SID
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [PATCH 05/12] netfilter: conntrack: silent a memory leak warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/12] ipvs: fix rtnl_lock lockups caused by start_sync_thread
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: xt_connmark: do not cast xt_connmark_tginfo1 to xt_connmark_tginfo2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/12] netfilter: nf_tables: NAT chain and extensions require NF_TABLES
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/12] netfilter: xt_connmark: Add bit mapping for bit-shift operation.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/12] netfilter: conntrack: include kmemleak.h for kmemleak_not_leak()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/12] netfilter: fix CONFIG_NF_REJECT_IPV6=m link error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/12] netfilter: nf_tables: free set name in error path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/12] netfilter: nf_tables: can't fail after linking rule into active rule list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/12] netfilter: nf_conntrack_sip: allow duplicate SDP expectations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/12] netfilter: ebtables: don't attempt to allocate 0-sized compat array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/12] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next] netfilter: extend SRH match to support matching previous, next and last SID
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] ebtables-compat: add 'vlan' match extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables] ebtables-compat: add 'pkttype' match extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• KMSAN: uninit-value in ip_vs_lblc_check_expire
  • From: syzbot <syzbot+3e9695f147fb529aa9bc@xxxxxxxxxxxxxxxxxxxxxxxxx>
• KMSAN: uninit-value in ip_vs_lblcr_check_expire
  • From: syzbot <syzbot+3dfdea57819073a04f21@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [nf-next] netfilter: extend SRH match to support matching previous, next and last SID
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [iptables 1/2] extensions: libip6t_srh: support matching previous, next and last SID
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [iptables 2/2] extensions: libip6t_srh: add test-cases for matching previous, next and last SID
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: enable hashing of one element
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• KMSAN: uninit-value in ebt_stp_mt_check
  • From: syzbot <syzbot+5c06e318fc558cc27823@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2] iptables: Set wait to true by default.
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH] iptables: Set wait to true by default.
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 15/39] acpi/battery: simplify procfs code
  • From: "Rafael J. Wysocki" <rafael@xxxxxxxxxx>
• [PATCH nft] expr: add map lookups for numgen statements
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH libnftnl] expr: add map lookups for numgen statements
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: add map lookups for numgen statements
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH] netfilter: fix nf_tables filter chain type build
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: BUG: unable to handle kernel paging request in compat_copy_entries
  • From: Eric Biggers <ebiggers3@xxxxxxxxx>
• [PATCH 0/1] TCP conntrack patch to handle simultaneous open
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: Fix handling simultaneous open in TCP conntrack
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [nf-next PATCH] net: nftables: Make rule position deterministic
  • From: Eric Garver <e@xxxxxxx>
• [PATCH nft 2/2] netlink: remove dead netlink_io_error() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] mnl: remove non-batch netlink code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH] net: nftables: Make rule position deterministic
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] netfilter: ctnetlink: export nf_conntrack_max
  • From: Florent Fourcot <florent.fourcot@xxxxxxxxxx>
• Re: [nf-next PATCH] net: nftables: Make rule position deterministic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: xt_connmark: do not cast xt_connmark_tginfo1 to xt_connmark_tginfo2
  • From: Jack Ma <Jack.Ma@xxxxxxxxxxxxxxxxxxx>
• [nf-next PATCH] net: nftables: Make rule position deterministic
  • From: Phil Sutter <phil@xxxxxx>
• Re: simplify procfs code for seq_file instances
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• Re: [PATCH 03/39] proc: introduce proc_create_seq_private
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• Re: [PATCH 14/39] proc: introduce proc_create_net_single
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• Re: [PATCH 02/39] proc: introduce proc_create_seq{,_data}
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• [PATCH nft] evaluate: clear expression context before cmd evaluation
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 16/39] ipmi: simplify procfs code
  • From: Corey Minyard <minyard@xxxxxxx>
• Re: [PATCH v2] xt_connmark: Fix invalid tginfo* casting.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: xt_connmark: do not cast xt_connmark_tginfo1 to xt_connmark_tginfo2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 03/39] proc: introduce proc_create_seq_private
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• [PATCH nft 2/2] src: use ibrname and obrname
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] parser_bison: missing rules for IBRIDGENAME and OBRIDGENAME
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 26/39] rtc/proc: switch to proc_create_single_data
  • From: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx>
• [PATCH 05/39] ipv{4,6}/udp{,lite}: simplify proc registration
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 06/39] ipv{4,6}/tcp: simplify procfs registration
  • From: Christoph Hellwig <hch@xxxxxx>
• simplify procfs code for seq_file instances
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 01/39] net/can: single_open_net needs to be paired with single_release_net
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 02/39] proc: introduce proc_create_seq{,_data}
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 03/39] proc: introduce proc_create_seq_private
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 04/39] proc: introduce proc_create_single{,_data}
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 08/39] ipv{4,6}/raw: simplify ѕeq_file code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 07/39] ipv{4,6}/ping: simplify proc file creation
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 20/39] afs: simplify procfs code
  • From: David Howells <dhowells@xxxxxxxxxx>
• [PATCH 11/39] netfilter/x_tables: simplify ѕeq_file code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 09/39] ipv6/flowlabel: simplify pid namespace lookup
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 14/39] proc: introduce proc_create_net_single
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 15/39] acpi/battery: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 21/39] ext4: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 20/39] afs: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 16/39] ipmi: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 17/39] sgi-gru: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 18/39] megaraid: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 19/39] sg: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 22/39] jfs: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 27/39] bonding: switch to proc_create_seq_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 26/39] rtc/proc: switch to proc_create_single_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 24/39] resource: switch to proc_create_seq_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 25/39] drbd: switch to proc_create_single
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 32/39] bluetooth: switch to proc_create_seq_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 31/39] netfilter/x_tables: switch to proc_create_seq_private
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 34/39] atm: switch to proc_create_seq_private
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 33/39] atm: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 29/39] neigh: switch to proc_create_seq_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 35/39] isdn: replace ->proc_fops with ->proc_show
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 28/39] hostap: switch to proc_create_{seq,single}_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 36/39] proc: don't detour through seq->private to get the inode
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 39/39] tty: replace ->proc_fops with ->proc_show
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 38/39] ide: replace ->proc_fops with ->proc_show
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 37/39] ide: remove ide_driver_proc_write
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 30/39] netfilter/xt_hashlimit: switch to proc_create_{seq,single}_data
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 23/39] staging/rtl8192u: simplify procfs code
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 13/39] proc: introduce proc_create_net{,_data}
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 12/39] net: move seq_file_single_net to <linux/seq_file_net.h>
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 10/39] net/kcm: simplify proc registration
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH nft 1/1] evaluate: reset eval context when evaluating set definitions
  • From: David Fabian <david.fabian@xxxxxxxxx>
• Re: [PATCH nft] expression: fix constant expression allocation on big endian with partial bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] ebtables-compat: add 'ip6' match extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/5] netfilter: ipvs: Fix space before '[' error.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL 0/5] IPVS Updates for v4.18
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 5/5] ipvs: fix multiplicative hashing in sh/dh/lblc/lblcr algorithms
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 3/5] netfilter: ipvs: Add Maglev hashing scheduler
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 4/5] netfilter: ipvs: Add configurations of Maglev hashing
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/5] netfilter: ipvs: Keep latest weight of destination
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nft] expression: fix constant expression allocation on big endian with partial bytes
  • From: Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_update
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [conntrack-tools PATCH v2] systemd: default to use libsystemd if build with support for it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH] tests: reallocate cli testing script
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/1] evaluate: reset eval context when evaluating set definitions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: NAT chain and extensions require NF_TABLES
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables: strange behavior of named sets with concatenations
  • From: Florian Westphal <fw@xxxxxxxxx>
• nftables: strange behavior of named sets with concatenations
  • From: David Fabian <david.fabian@xxxxxxxxx>
• [PATCH iptables 3/3] libebt_ip: add icmp support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 2/3] xt-translate: quote interface names in translated output
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 1/3] icmp: split icmp type printing to header file
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 0/3] libebt_ip: add icmp support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: linux-next: build failure after merge of the netfilter tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Jack Ma <Jack.Ma@xxxxxxxxxxxxxxxxxxx>
• Re: linux-next: build failure after merge of the netfilter tree
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• linux-next: build failure after merge of the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: support timeouts larger than 23 days
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [conntrack-tools PATCH v2] systemd: default to use libsystemd if build with support for it
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nf-next 6/6] netfilter: nat: merge nf_nat_redirect into nf_nat
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 5/6] netfilter: nat: merge ipv4/ipv6 masquerade code into main nat module
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/6] netfilter: nf_tables: merge exthdr expression into nft core
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/6] netfilter: nf_tables: merge rt expression into nft core
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/6] netfilter: nftables: make meta expression builtin
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/6] netfilter: merge meta_bridge into nft_meta
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/6] netfilter: remove kconfig options
  • From: Florian Westphal <fw@xxxxxxxxx>
• [conntrack-tools PATCH] tests: reallocate cli testing script
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [conntrack-tools PATCH] conntrackd: add missing fall-through annotation in switch statements
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [conntrack-tools PATCH] systemd: default to use libsystemd if build with support for it
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: always use an upper set size for dynsets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: support timeouts larger than 23 days
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: support timeouts larger than 23 days
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: support timeouts larger than 23 days
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: can't fail after linking rule into active rule list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: free set name in error path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Patch nf] nf_conntrack_extend: silent a memory leak warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] xt_connmark: Fix invalid tginfo* casting.
  • From: Jack Ma <Jack.Ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH v2] xt_connmark: Fix invalid tginfo* casting.
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v3] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Jack Ma <Jack.Ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH v3] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH] xt_connmark: Add bit mapping for bit-shift operation.
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• Re: [nft PATCH 00/12] Fallout from upcoming JSON support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: CONFIG_NF_REJECT_IPV{4,6} becomes bool toggle
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH] netfilter: CONFIG_NF_REJECT_IPV{4,6} becomes bool toggle
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH iptables 8/8] ebtables-translate: add initial test cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 7/8] xt-compat: add ebtables-translate
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 6/8] xlate-translate: split common parts into helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 5/8] xtables-eb: export 3 functions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 4/8] nft-bridge: add eb-translate backend functions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 3/8] nft-bridge: fix mac address printing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 2/8] nft: fix crash when getprotobynumber() returns 0
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 1/8] ebtables-compat: support intra-positioned negations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 0/8] xt-compat: add ebtables-translate
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH 00/12] Fallout from upcoming JSON support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 06/12] segtree: Fix for last elem at interval end
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 08/12] tests/py: Fix differences printing for rules with sets
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 12/12] parser_bison: Pass struct nft_ctx to parser_init()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 11/12] libnftables: Keep cmds list outside of parser_state
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 01/12] erec: Review erec_print()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 04/12] segtree: Fix memory leaks
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 07/12] tests/py: rt.t: Drop needless rule output
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 05/12] Review raw payload allocation points
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 02/12] libnftables: Fix forgotten bit after introducing error_fp
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: fix CONFIG_NF_REJECT_IPV6=m link error
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [nft PATCH 10/12] ct: Remove duplicate include of gmputil.h
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 09/12] Review .gitignore files contents
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 03/12] rule: Free table->objs in table_free()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: xtables: use ipt_get_target_c instead of ipt_get_target
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf-next] netfilter: ebtables: add ebt_get_target and ebt_get_target_c
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH] netfilter: fix CONFIG_NF_REJECT_IPV6=m link error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: rename ibrportname, obrportname
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] scanner: add helpers token
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] proto: permit icmp-in-ipv6 and icmpv6-in-ipv4
  • From: Phil Sutter <phil@xxxxxx>
• Re: INFO: task hung in do_ip_vs_set_ctl (2)
  • From: syzbot <syzbot+7810ed2e0cb359580c17@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Jack Ma <Jack.Ma@xxxxxxxxxxxxxxxxxxx>
• Re: nftables code size
  • From: Phil Sutter <phil@xxxxxx>
• Re: nftables code size
  • From: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
• Re: nftables code size
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 0/8] Convert tests/py to use libnftables directly
  • From: Phil Sutter <phil@xxxxxx>
• Re: nftables code size
  • From: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
• Re: nftables code size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables code size
  • From: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] iptables: constify option struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd PATCH] ulogd2: cleanup downstream files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] xt_connmark: Add bit mapping for bit-shift operation.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] ebtables-compat: add initial translations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] ebtables-compat: add initial translations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] cli: Drop String termination workaround
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] cli: Drop String termination workaround
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH ebtables 1/4] include: sync linux/netfilter_bridge/ebt_ip.h with kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] ebtables-compat: don't make failing extension load fatal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables code size (was: Re: [PATCH nf-next 0/2] ebtables: add support for ICMP and IGMP type/code matching)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] ebtables-compat: load mark target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/8] libnftables: Introduce nft_ctx_set_error()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/8] Convert tests/py to use libnftables directly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables code size (was: Re: [PATCH nf-next 0/2] ebtables: add support for ICMP and IGMP type/code matching)
  • From: Florian Westphal <fw@xxxxxxxxx>
• nftables code size (was: Re: [PATCH nf-next 0/2] ebtables: add support for ICMP and IGMP type/code matching)
  • From: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: ftp helper: Support \n and \r terminators for PORT
  • From: Scott Parlane <scott.parlane@xxxxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.37 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.37
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.37
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [ANNOUNCE] ipset 6.37 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [nft PATCH 1/8] ct: Fix output_fp bypass in ct_print()
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH 3/8] libnftables: Introduce nft_ctx_set_error()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 8/8] tests/py: Allow passing multiple files to nft-test.py
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/8] Convert tests/py to use libnftables directly
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/8] libnftables: Fix for input without trailing newline
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/8] ct: Fix output_fp bypass in ct_print()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 5/8] libnftables: Simplify cookie integration
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 7/8] tests/py: Review print statements in nft-test.py
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 6/8] tests/py: Use libnftables instead of calling nft binary
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/8] libnftables: Support buffering output and error
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables] ebtables-compat: don't make failing extension load fatal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables] ebtables-compat: load mark target
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: can't fail after linking rule into active rule list
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: free set name in error path
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] ipvs: fix rtnl_lock lockups caused by start_sync_thread
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ebtables: don't attempt to allocate 0-sized compat array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] ipvs: fix rtnl_lock lockups caused by start_sync_thread
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_conntrack_sip: allow duplicate SDP expectations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix CONFIG_NF_REJECT_IPV6=m link error
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH] netfilter: fix CONFIG_NF_REJECT_IPV6=m link error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: fix CONFIG_NF_REJECT_IPV6=m link error
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [PATCH nf-next v4] netfilter: nf_osf: nf_osf_ttl() and nf_osf_match()
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH net] ipvs: fix rtnl_lock lockups caused by start_sync_thread
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Jack Ma <Jack.Ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH v2] libxt_CONNMARK: Support bit-shifting for --restore,set and save-mark
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH iptables 4/4] xtables-compat: only validate the xtables builtin tables
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 3/4] xtables-compat: skip unsupported tables
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 2/4] xtables-compat: also validate priorities and hook points match expected values
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables 1/4] xtables-compat: fix snprintf truncation warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: x_tables: remove duplicate ip6t_get_target function call
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf-next] netfilter: ebtables: remove EBT_MATCH and EBT_NOMATCH
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf-next] netfilter: ebtables: add ebt_free_table_info function
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf-next] netfilter: add __exit mark to helper modules
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH net] ipvs: fix rtnl_lock lockups caused by start_sync_thread
  • From: Julian Anastasov <ja@xxxxxx>
• INFO: task hung in do_ip_vs_set_ctl (2)
  • From: syzbot <syzbot+7810ed2e0cb359580c17@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] xt_connmark: Add bit mapping for bit-shift operation.
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] xt_connmark: Add bit mapping for bit-shift operation.
  • From: Jack Ma <jack.ma@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 00/12] Ethernet: Add and use ether_<type>_addr globals
  • From: Felix Fietkau <nbd@xxxxxxxx>
• Re: [PATCH 00/12] Ethernet: Add and use ether_<type>_addr globals
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 00/12] Ethernet: Add and use ether_<type>_addr globals
  • From: Felix Fietkau <nbd@xxxxxxxx>
• [ANNOUNCE] 14th Netfilter Workshop in Berlin, Germany
  • From: Florian Westphal <fw@xxxxxxxxx>
• Proposal: Add config option to set xtable_lock wait = true.
  • From: Jack Ma <Jack.Ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: ebtables: don't attempt to allocate 0-sized compat array
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: compat ebtables broke in syzkaller
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: compat ebtables broke in syzkaller
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: compat ebtables broke in syzkaller
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: compat ebtables broke in syzkaller
  • From: Florian Westphal <fw@xxxxxxxxx>
• compat ebtables broke in syzkaller
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: [PATCH 40/47] netfilter: nf_tables: build-in filter chain type
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH 40/47] netfilter: nf_tables: build-in filter chain type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 40/47] netfilter: nf_tables: build-in filter chain type
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [PATCH v6] netfilter : add NAT support for shifted portmap ranges
  • From: Thierry Du Tre <thierry@xxxxxxxxxxxx>
• Re: [PATCH nft] configure: don't enable xtables when --without-xtables is passed
  • From: Alexander Dahl <ada@xxxxxxxxxxx>
• [PATCH nft] configure: don't enable xtables when --without-xtables is passed
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v5] netfilter : add NAT support for shifted portmap ranges
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next v3] netfilter: nf_osf: nf_osf_ttl() and nf_osf_match()
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH v5] netfilter : add NAT support for shifted portmap ranges
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH] xt_conntrack: Support bit-shifting for CONNMARK & MARK targets.
  • From: Jack Ma <Jack.Ma@xxxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6}
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• [PATCH v2 0/2] net: nftables: Simplify set backend selection
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2 1/2] net: nftables: Simplify set backend selection
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2 2/2] net: nftables: Export set backend name via netlink
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v3] extensions: libipt_DNAT: support shifted portmap ranges
  • From: Thierry Du Tre <thierry@xxxxxxxxxxxx>
• [PATCH v5] netfilter : add NAT support for shifted portmap ranges
  • From: Thierry Du Tre <thierry@xxxxxxxxxxxx>
• [PATCH nf-next v3] netfilter: nf_osf: nf_osf_ttl() and nf_osf_match()
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft 0/4] evaluate: clean up binop transfer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/4] evaluate: use recursive call for SET_REF handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/4] evaluate: handle EXPR_MAPPING
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/4] evaluate: split binop xfer to separate function
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/4] evaluate: move lhs fixup to a helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/4] evaluate: clean up binop transfer
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] evaluate: increase set key size if needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: increase set key size if needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] evaluate: increase set key size if needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] netlink: floating point exception
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] evaluate: propagate binop_transfer() adjustment to set key size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/47] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_conntrack_sip: allow duplicate SDP expectations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ulogd PATCH] ulogd2: cleanup downstream files
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH 00/47] Netfilter/IPVS updates for net-next
  • From: Rafał Miłecki <zajec5@xxxxxxxxx>
• Re: [PATCH v2 1/3] net: Allow to and from offsets to be equal in skb_find_text
  • From: Bernie Harris <Bernie.Harris@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: increase set key size if needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] evaluate: do not inconditionally update cache from flush command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: increase set key size if needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] net: netfilter: nf_tables_api: Use id allocation.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Problems on redirecting traffic transparently
  • From: Haohao Lee <hayatelee@xxxxxxxxx>
• Re: [PATCH WIP nf-next] netfilter: nft_ct: add ct timeout support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH WIP nf-next] netfilter: nft_ct: add ct timeout support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nft] evaluate: increase set key size if needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: Updates for mini-gmp.{c,h}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH WIP nf-next] netfilter: nft_ct: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC xt-compat] ebtables: full nft translations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC xt-compat] ebtables: full nft translations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH WIP libnftnl 2/2] examples: add nft-ct-timeout-{add,del,get}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC xt-compat] ebtables: full nft translations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/6] tests: redirect: fix tests for upcoming nft-test.py fix
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC xt-compat] ebtables: full nft translations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/6] tests: redirect: fix tests for upcoming nft-test.py fix
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/6] fix dependency eval and nft-test.py
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/6] tests: redirect: fix tests for upcoming nft-test.py fix
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: nf_osf implementation: nf_osf_ttl() and nf_osf_match()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: nf_osf implementation: nf_osf_ttl() and nf_osf_match()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 04/12] bridge: netfilter: Use the new global ether_<foo>_addr arrays
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH nft] src: Updates for mini-gmp.{c,h}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 04/12] bridge: netfilter: Use the new global ether_<foo>_addr arrays
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC xt-compat] ebtables: full nft translations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 6/6] nft-test: check start of rule with sets too
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 5/6] tests: ct, meta: fixes for upcoming nft-test.py fix
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/6] tests: mh: fix expected test output
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/6] tests: redirect: fix tests for upcoming nft-test.py fix
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/6] netlink_delinearize: kill dependency before eval of 'redirect' stmt
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/6] statement: print space before "{" in set add
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/6] fix dependency eval and nft-test.py
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: nf_osf implementation: nf_osf_ttl() and nf_osf_match()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: nf_osf implementation: nf_osf_ttl() and nf_osf_match()
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: nf_osf implementation: nf_osf_ttl() and nf_osf_match()
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nft] src: Updates for mini-gmp.{c,h}
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH WIP nf-next] netfilter: nft_ct: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH WIP libnftnl 2/2] examples: add nft-ct-timeout-{add,del,get}
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH WIP libnftnl 1/2] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH WIP libnftnl 0/2] Add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH 00/12] Ethernet: Add and use ether_<type>_addr globals
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH 04/12] bridge: netfilter: Use the new global ether_<foo>_addr arrays
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [Patches] iptables and ip6tables: Warning on use of -L
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• [Patch nf] nf_conntrack_extend: silent a memory leak warning
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: INFO: task hung in stop_sync_thread (2)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: INFO: task hung in stop_sync_thread (2)
  • From: syzbot <syzbot+5fe074c01b2032ce9618@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 00/47] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next 0/3] Close race between {un, }register_netdevice_notifier and pernet_operations
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next 0/3] Close race between {un, }register_netdevice_notifier and pernet_operations
  • From: Kirill Tkhai <ktkhai@xxxxxxxxxxxxx>
• [PATCH nf-next v2] netfilter: nf_osf implementation: nf_osf_ttl() and nf_osf_match()
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 42/47] netfilter: nf_tables: rename to nft_set_lookup_global()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 40/47] netfilter: nf_tables: build-in filter chain type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 43/47] netfilter: nf_tables: use nft_set_lookup_global from nf_tables_newsetelem()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 41/47] netfilter: nf_tables: enable conntrack if NAT chain is registered
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 45/47] netfilter: x_tables: Add note about how to free percpu counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 44/47] netfilter: Merge assignment with return
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 47/47] netfilter: ipset: Use is_zero_ether_addr instead of static and memcmp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 46/47] Revert "netfilter: x_tables: ensure last rule in base chain matches underflow/policy"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 30/47] netfilter: Replace printk() with pr_*() and define pr_fmt()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 32/47] netfilter: ebtables: add support for matching ICMP type and code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 31/47] netfilter: ctnetlink: synproxy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 33/47] netfilter: ebtables: add support for matching IGMP type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 34/47] netfilter: ebtables: Add support for specifying match revision
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 36/47] netfilter: add flowtable documentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 35/47] netfilter: ebtables: Add string filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 37/47] netfilter: ebt_stp: Use generic functions for comparisons
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 39/47] netfilter: nf_tables: nft_register_chain_type() returns void
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 38/47] netfilter: nf_tables: rename struct nf_chain_type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/47] netfilter: x_tables: fix build with CONFIG_COMPAT=n
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/47] netfilter: Refactor nf_conncount
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/47] netfilter: conncount: Support count only use case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/47] ipvs: use true and false for boolean values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>