Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [iptables PATCH] extensions: libxt_tcpmss: Detect invalid ranges
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: nft.8 change "Native Address Translation" to "Network Address Translation"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: ip6_tables: remove redundant assignment to e
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named limits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] iptables: iptables-compat translation for TCPMSS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: add test file for TCPMSS extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: add test file for TCPMSS extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] tests: add regression tests for xtables-translate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] tests: xlate: print tests passed and error for testfile argument
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 0/9] tests: Move tests from files to shell.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] expr: Introduce nftnl_expr_fprintf()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink: fix element addition to map with stateful object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] tests: xlate: print tests passed and error for testfile argument
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] tests: xlate: print tests passed or error for testfile argument
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH 36/58] inet: frags: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH 34/58] netfilter: ipset: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH] ipv6: mark expected switch fall-throughs
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• [PATCH] ipv4: mark expected switch fall-throughs
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• [PATCH] iptables: add test file for TCPMSS extension
  • From: Aastha Gupta <aastha.gupta4104@xxxxxxxxx>
• Re: [PATCH] inet: frags: Convert timers to use timer_setup()
  • From: Stefan Schmidt <stefan@xxxxxxxxxxxxxxxxxx>
• [PATCH] tests: add regression tests for xtables-translate
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: libnftables, next steps
  • From: Phil Sutter <phil@xxxxxx>
• [RFC] connlimit for nftables and limiting ct count by zone
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: ebtables: clean up initialization of buf
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: libnftables, next steps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] iptables: iptables-compat translation for TCPMSS
  • From: Aastha Gupta <aastha.gupta4104@xxxxxxxxx>
• Re: [PATCH] ipvs: Fix inappropriate output of procfs
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nft V4 2/2] tests: shell: Add tests for low level json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [RFC PATCH nft V5 1/2] src: Add import command for low level json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [PATCH v3] iptables: iptables-compat translation for TCPMSS
  • From: Aastha Gupta <aastha.gupta4104@xxxxxxxxx>
• [PATCH v2] iptables: iptables-compat translation for TCPMSS
  • From: Aastha Gupta <aastha.gupta4104@xxxxxxxxx>
• [PATCH] ipvs: Fix inappropriate output of procfs
  • From: KUWAZAWA Takuya <albatross0@xxxxxxxxx>
• [PATCH nf-next] netfilter: xt_connlimit: don't store address in the conn nodes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/9] tests: Move tests from files to shell.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH] update INSTALL to add library libnfnetlink
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] tests: shell: add testcases for named limits
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] Bitwise Out Of Bound Read in Netfilter Conntrack
  • From: Eric Sesterhenn <eric.sesterhenn@xxxxxxxxxxx>
• [PATCH] Update .gitignore
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [ANNOUNCE] libnftnl 1.0.8 release
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] src: Remove unnecessary cast on void pointer
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [ANNOUNCE] nftables 0.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nfnl_cthelper: Replace kzalloc with kcalloc
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] libnftnl 1.0.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_h323: Remove typedef struct
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] netfilter: nfnl_cthelper: Replace kzalloc with kcalloc
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] tests: py: Add option --all to nft-test.py
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: make l3proto trackers const
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] doc: nft.8 change "Native Address Translation" to "Network Address Translation"
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] Out Of Bound Read in Netfilter Conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v4 2/2] netfilter: x_tables: don't use seqlock when fetching old counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v4 1/2] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v4 nf-next 0/2] netfilter: x_tables: speed up iptables-restore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: ensure readers see new ->private value
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• [PATCH nf] netfilter: x_tables: ensure readers see new ->private value
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] nftables: Add support for reserved header and addrs for routing header type 0
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• [PATCH v3 nf-next 2/2] netfilter: x_tables: don't use seqlock when fetching old counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 0/2] netfilter: x_tables: speed up iptables-restore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/9] tests: Move tests from files to shell.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: conntrack: remove pf argument from l4 packet functions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: conntrack: add and use nf_ct_l4proto_log_invalid
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: conntrack: add and use nf_l4proto_log_invalid
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: remove pf argument from conntrack l4 packet function
  • From: Florian Westphal <fw@xxxxxxxxx>
• [redirect: netdev => netfilter-devel] Accept packets that the H.245 ALG can't process
  • From: Alexandru Ardelean <ardeleanalex@xxxxxxxxx>
• [PATCH nft 9/9] tests: files: Remove tests for verdict maps.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 8/9] tests: files: Remove tests for table.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 7/9] tests: files: Remove tests for chain.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 6/9] tests: files: Remove test cases for variable definition.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 5/9] tests: shell: Add tests for variable definition.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 4/9] tests: files: Remove tests for set.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 3/9] tests: shell: Add test case for sets.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 2/9] tests: shell: Add test case for jump chain.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 1/9] tests: files: Remove jump chain tests.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 0/9] tests: Move tests from files to shell.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH RFC tip/core/rcu 14/15] netfilter: Remove now-redundant smp_read_barrier_depends()
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Support for attribute based deletion operation in nftables
  • From: "Doddamadaiah, Abhijit (Nokia - IN/Bangalore)" <abhijit.doddamadaiah@xxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: x_tables: don't use seqlock when fetching old counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• netfilter: x_tables: speed up iptables-restore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC tip/core/rcu 14/15] netfilter: Remove now-redundant smp_read_barrier_depends()
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• [PATCH RFC tip/core/rcu 14/15] netfilter: Remove now-redundant smp_read_barrier_depends()
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH] doc: nft.8 Document rule replace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/12] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 01/12] netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/12] netfilter: ipset: pernet ops must be unregistered last
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/12] netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/12] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/12] netfilter: nf_tables: fix update chain error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/12] netfilter: nf_tables: do not dump chain counters if not enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/12] netfilter: ipset: Fix race between dump and swap
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/12] netfilter: ebtables: fix race condition in frame_filter_net_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/12] netfilter: nf_tables: Release memory obtained by kasprintf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/12] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/12] netfilter: xt_socket: Restore mark from full sockets only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] doc: nft.8 Document rule replace
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [iptables PATCH] extensions: libxt_tcpmss: Detect invalid ranges
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] nftables: make pointers in string arrays constant
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] test: shell: update shell/run-tests.sh to refer to relative path of testcase
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] src: Merge assignment with return
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH v2] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_bison: allow to used named limit from dictionaries too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] scanner: IPv4-Mapped IPv6 addresses support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: allow to used named limit from dictionaries too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 41/47] netfilter: convert hook list to an array
  • From: Tariq Toukan <tariqt@xxxxxxxxxxxx>
• Re: [PATCH 41/47] netfilter: convert hook list to an array
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 13/14] netfilter/ipvs: Use %pS printk format for direct addresses
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] Out Of Bound Read in Netfilter Conntrack
  • From: Eric Sesterhenn <eric.sesterhenn@xxxxxxxxxxx>
• [PATCH] datatype: Change "%Zx" to "%zx" and "%Zu" to "%zu"
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] src: buffer is not null terminated
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH v2] src: Use snprintf() over strncpy()
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] src: buffer is not null terminated
  • From: Julia Lawall <julia.lawall@xxxxxxx>
• [PATCH] src: buffer is not null terminated
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH 41/47] netfilter: convert hook list to an array
  • From: Tariq Toukan <tariqt@xxxxxxxxxxxx>
• [PATCH] src: Code indent should use tabs wherever possible
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] src: Remove unnecessary spaces
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] test: shell: update shell/run-tests.sh to refer to relative path of testcase
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] src: Merge assignment with return
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• [PATCH v2] nftables: make pointers in string arrays constant
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• nftables: 0040set_0 test in tests/shell/testcases/transactions fails
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] nftables: make pointers in string arrays constant
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] netlink_linearize: skip set element expression in set statement key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: man page nft.8 add chain synopsis
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] tests: files: Remove old tests for chain rename.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] tests: shell: Add tests for chain rename.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] INSTALL: Update dependency list and configure with libxtables support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] test: shell: execute shell/run-tests.sh from any directory
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] evaluate: Fix debug output
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ebtables PATCH] Use flock() for --concurrent option
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2] nftables: Add support for reserved header and addrs for routing header type 0
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• man page nft.8 add chain synopsis
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [ebtables] c70604d6de: BUG:unable_to_handle_kernel
  • From: kernel test robot <fengguang.wu@xxxxxxxxx>
• [PATCH v2] netfilter: ipset: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nat: use test_and_clear_bit when deleting ct from bysource list
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Convert timers to use timer_setup()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] tests: shell: add testcases for named objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH net] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] nftables: make pointers in string arrays constant
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH v3] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Lin Zhang <xiaolou4617@xxxxxxxxx>
• [PATCH nft] tests: files: Remove old tests for chain rename.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft v2] tests: shell: Add tests for chain rename.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH] test: shell: execute shell/run-tests.sh from any directory
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] INSTALL: Update dependency list and configure with libxtables support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] netfilter: ipset: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH] inet: frags: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• libnftables, next steps
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] netlink: Use nftnl_expr_fprintf() in netlink_dump_expr()
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] expr: Introduce nftnl_expr_fprintf()
  • From: Phil Sutter <phil@xxxxxx>
• RE: [PATCH] netfilter: fix stringop-overflow warning with UBSAN
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: do not dump chain counters if not enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Juergen Borleis <jbe@xxxxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Juergen Borleis <jbe@xxxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] [PATCH 3/3] evaluate: make pointers in string arrays constant
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables] netlink_linearize: skip set element expression in set statement key
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 0/2] ip{,6}tables-restore: Fix wait-interval parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: Constify option struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] evaluate: Fix debug output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 0/2] Document nfnl_osf utility
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] build: libnftnl 1.0.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl,v2 4/4] src: do not nul-terminate internal helper functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl,v2 3/4] src: no need to nul-terminate buffer for nftnl_fprintf() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl,v2 2/4] expr: no need to nul-terminate buffer from expression ->snprintf indirection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl,v2 1/4] buffer: use nftnl_expr_snprintf() from nftnl_buf_expr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 3/3] src: no need to nul-terminate buffer for nftnl_fprintf() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 2/3] expr: no need to nul-terminate buffer from expression ->snprintf indirection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/3] buffer: use nftnl_expr_snprintf() from nftnl_buf_expr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables: Add support for reserved header and addrs for routing header type 0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables: Add support for unsupported codes in icmp and icmp6 extensions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables: Add support for unsupported codes in icmp and icmp6 extensions
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• nftables: Add support for reserved header and addrs for routing header type 0
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf] netfilter: nft_set_hash: disable fast_ops for 2-len keys
  • From: Anatole Denis <anatole@xxxxxxxxx>
• Re: [PATCH v2] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: Release memory obtained by kasprintf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] exthdr: Add support for reserved header and address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulog2 PATCH] Non-arbitrary malloc for SQL queries + string length limit
  • From: Jean Weisbuch <jean@xxxxxxxxxx>
• [PATCH nft] parser_bison: allow to used named limit from dictionaries too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ulogd2 PATCH] ulogd2: new config behaviour: load all plugins by default
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Memory Leak in nf_conntrack_in
  • From: Shankara Pailoor <sp3485@xxxxxxxxxxxx>
• Re: [ulog2 PATCH] Non-arbitrary malloc for SQL queries + string length limit
  • From: Jean Weisbuch <jean@xxxxxxxxxx>
• Re: [PATCH nft] tests: shell: Add test for chain rename.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] tests: shell: Add test for chain rename.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] mnl: fix broken sequence number allocation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH nft] tests: shell: Add test for chain rename.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft] tests: shell: Add test for chain rename.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft] tests: shell: Add test for chain rename.
  • From: Varsha <rvarsha016@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/3] evaluate: Follow linux-kernel coding style
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH 1/3] evaluate: Remove unnecessary spaces
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH 2/3] evaluate: Place constant on right side in comparison
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH 3/3] evaluate: make pointers in string arrays constant
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] exthdr: Add support for reserved header and address
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Lin Zhang <xiaolou4617@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix update chain error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] ebtables: fix race condition in frame_filter_net_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/2] Follow-up on nft_print() enhancement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 0/2] Follow-up on nft_print() enhancement
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/2] main: Flush output from nft_gmp_print()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/2] main: Drop stdout hack to expose nft_print() implementation issues
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 5/5] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 5/5] src: get rid of printf
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 5/5] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 4/5] rule: Refactor chain_print_declaration()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 3/5] erec_print: Pass output FILE pointer to netlink_dump_expr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 2/5] exthdr: Simplify tcp option printing a bit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 1/5] rule: Use C99-style initializer in cache_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/10] nftables remove use of meta nfproto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix race between dump and swap
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v2 0/5] Get output under application control
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 3/5] erec_print: Pass output FILE pointer to netlink_dump_expr()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 4/5] rule: Refactor chain_print_declaration()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 5/5] src: get rid of printf
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/5] rule: Use C99-style initializer in cache_init()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 2/5] exthdr: Simplify tcp option printing a bit
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ipset: Fix race between dump and swap
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] iptables: change large file support handling
  • From: Juergen Borleis <jbe@xxxxxxxxxxxxxx>
• [PATCH nft 10/10] doc: update man page
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 09/10] tests: rt: fix test cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 08/10] src: rt: add keyword distinction for nexthop vs nexthop6
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 07/10] tests: ct: adjust test case commands
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 06/10] src: ct: print nfproto name for some header fields
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 05/10] tests: update inet/bridge icmp test case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 04/10] src: unifiy meta and ct postprocessing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 03/10] src: ct: add eval part to inject dependencies for ct saddr/daddr
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 02/10] src: ct: store proto base of ct key, if any
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 01/10] src: add alternate syntax for ct saddr
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/10] nftables remove use of meta nfproto
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/3] bison: permit keywords in list_stmt_expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/3] src: parser_bison: rename ct_block to ct_helper_block
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] src: prepare for future ct timeout policy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] bison: permit keywords in list_stmt_expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] src: parser_bison: rename ct_block to ct_helper_block
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] src: prepare for future ct timeout policy support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] ct: make ct event set work with COMMA syntax
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [conntrack-tools PATCH] conntrack.8: refresh manpage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/2] evaluate: prepare to store expr key rather than datatype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] include: remove outdated comment
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] main: Fix for return of uninitialized variable in nft_run_cmd_from_filename()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] monitor: Fix for incorrect debug_mask
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] src: Buffer is null terminated.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] src: Change parameters of SNPRINTF_BUFFER_SIZE macro.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables: Constify option struct
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] netfilter: ipset: Fix race between dump and swap
  • From: Ross Lagerwall <ross.lagerwall@xxxxxxxxxx>
• Re: [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: xt_socket: Restore mark from full sockets only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: ipset: pernet ops must be unregistered last
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: ipset: pernet ops must be unregistered last
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nft,v2 1/3] parser_bison: consolidate stmt_expr rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 2/3] parser_bison: use keywords in ct expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 3/3] parser_bison: allow helper keyword in ct object kind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] parser_bison: allow helper keyword in ct object kind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] parser_bison: use keywords in ct expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] parser_bison: consolidate stmt_expr rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3] ebtables: fix race condition in frame_filter_net_init()
  • From: Artem Savkov <asavkov@xxxxxxxxxx>
• [PATCH v2] ebtables: fix race condition in frame_filter_net_init()
  • From: Artem Savkov <asavkov@xxxxxxxxxx>
• Re: [PATCH] ebtables: fix race condition in frame_filter_net_init()
  • From: Artem Savkov <asavkov@xxxxxxxxxx>
• [conntrack-tools PATCH] conntrack.8: refresh manpage
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH] ebtables: fix race condition in frame_filter_net_init()
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] ebtables: fix race condition in frame_filter_net_init()
  • From: Artem Savkov <asavkov@xxxxxxxxxx>
• [PATCH nf v2] netfilter: ipset: pernet ops must be unregistered last
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ipset: pernet ops must be unregistered last
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipset: fix build with musl
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: ipset: pernet ops must be unregistered last
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ipset: fix build with musl
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [RFC PATCH nft V4] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH] ipset: fix build with musl
  • From: Stijn Tintel <stijn@xxxxxxxxxxxxx>
• [PATCH 4.9 61/77] net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.13 083/109] net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/1] ipset patch for nf
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.34 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [HEADS UP] ipset git tree is rebased
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] include: remove outdated comment
  • From: JingPiao Chen <chenjingpiao@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: fix update chain error
  • From: JingPiao Chen <chenjingpiao@xxxxxxxxx>
• Re: nftables/libnftnl release plan?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulog2 PATCH] Non-arbitrary malloc for SQL queries + string length limit
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH v3] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_socket: Restore mark from full sockets only
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH v2] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_socket: Restore mark from full sockets only
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• [nft PATCH] monitor: Fix for incorrect debug_mask
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ulog2 PATCH] Non-arbitrary malloc for SQL queries + string length limit
  • From: Jean Weisbuch <jean@xxxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] main: Fix for return of uninitialized variable in nft_run_cmd_from_filename()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [RFC PATCH nft V4] src: Add import command for json
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft V4] src: Add import command for json
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [iptables PATCH 1/2] ip{,6}tables-restore: Don't ignore missing wait-interval value
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] ip{,6}tables-restore: Don't accept wait-interval without wait
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/2] ip{,6}tables-restore: Fix wait-interval parsing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] utils: Add a man page for nfnl_osf
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/2] utils: nfnl_osf: Fix synopsis in help text
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/2] Document nfnl_osf utility
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl] src: Buffer is null terminated.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH libnftnl] src: Change parameters of SNPRINTF_BUFFER_SIZE macro.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero div
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH nft V4] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd: use a RT scheduler by default
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: Release memory obtained by kasprintf
  • From: Arvind Yadav <arvind.yadav.cs@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd: use a RT scheduler by default
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/2] evaluate: prepare to store expr key rather than datatype
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/2] store expression instead of data type as set key
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/4] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Willem de Bruijn <willemb@xxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables/libnftnl release plan?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: nftables/libnftnl release plan?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables/libnftnl release plan?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 2/2] extensions: xt_bpf: get the pinned ebpf object when match is initialized
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• nftables/libnftnl release plan?
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 4/4] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero div
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] ipset patches for nf-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 2/2] extensions: xt_bpf: get the pinned ebpf object when match is initialized
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• [PATCH v2 0/2] xt_bpf: fix handling of pinned objects
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: [PATCH 0/2] xt_bpf: fix handling of pinned objects
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• [PATCH 2/2] extensions: xt_bpf: get the pinned ebpf object when match is initialized
  • From: Rafael Buchbinder <shmulik@xxxxxxx>
• [PATCH 1/2] iptables: support match info fixup after tc_init
  • From: Rafael Buchbinder <shmulik@xxxxxxx>
• [PATCH 0/2] xt_bpf: fix handling of pinned objects
  • From: Rafael Buchbinder <shmulik@xxxxxxx>
• Re: [PATCH ipset] fix compilation with musl libc
  • From: Bo YU <tsu.yubo@xxxxxxxxx>
• [PATCH ipset] fix compilation with musl libc
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• Re: nft typeof keywork patch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft typeof keywork patch
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Memory leaks in conntrack
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: Memory leaks in conntrack
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: nft typeof keywork patch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Memory leaks in conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter: xt_bpf: ABI issue in xt_bpf_info_v1?
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• Re: nft typeof keywork patch
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter: xt_bpf: ABI issue in xt_bpf_info_v1?
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• Re: netfilter: xt_bpf: ABI issue in xt_bpf_info_v1?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• netfilter: xt_bpf: ABI issue in xt_bpf_info_v1?
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: does nftables support string match?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: does nftables support string match?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• does nftables support string match?
  • From: Michael Chi <chibo.michael@xxxxxxxxx>
• Re: Memory leaks in conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• Memory leaks in conntrack
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: [RFC PATCH nft V3] src: Add import command for json
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 3/4] netfilter: ipset: deduplicate prefixlen maps
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 4/4] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/4] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/4] netfilter: ipset: Compress return logic
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: ipset: Fix sparse warnings
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [RFC PATCH nft V3] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH nf 0/2] netfilter: nat: do not use rhltable
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• Re: [RFC PATCH nft V2] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [RFC PATCH nft V2] src: Add import command for json
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_bpf: fix missing __NR_bpf declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] xtables-compat-restore: fix translation of mangle's OUTPUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] xtables-compat-restore: fix translation of mangle's OUTPUT
  • From: Louis Sautier <sautier.louis@xxxxxxxxx>
• [RFC PATCH nft V2] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [PATCH] netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero div
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• [PATCH] extensions: libxt_bpf: fix missing __NR_bpf declaration
  • From: Rafael Buchbinder <rafi@xxxxxx>
• Re: [netfilter-core] Build failure with Linux 4.13+: ERROR: "__udivdi3" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: Paul Menzel <pmenzel@xxxxxxxxxxxxx>
• [PATCH] xtables-compat-restore: fix translation of mangle's OUTPUT
  • From: Louis Sautier <sautier.louis@xxxxxxxxx>
• Re: [netfilter-core] Build failure with Linux 4.13+: ERROR: "__udivdi3" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Build failure with Linux 4.13+: ERROR: "__udivdi3" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: Paul Menzel <pmenzel@xxxxxxxxxxxxx>
• [nft] Documentation point release/backport
  • From: Colin Caine <colin.caine@xxxxxxxxxxxxxxxx>
• Re: [PATCH 0/9] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [netfilter-core] [PATCH] netfilter: nat: constify rhashtable_params
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/9] netfilter: ipvs: fix the issue that sctp_conn_schedule drops non-INIT packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/9] netfilter: nf_nat: don't bug when mapping already exists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/9] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/9] netfilter: ipvs: do not create conn for ABORT packet in sctp_conn_schedule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/9] netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/9] netfilter: nat: use keyed locks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/9] netfilter: xtables: add scheduling opportunity in get_counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 9/9] netfilter: xt_hashlimit: fix build error caused by 64bit division
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/9] netfilter: xt_hashlimit: alloc hashtable with right size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/9] netfilter: core: remove erroneous warn_on
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter/libxt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] mnl: do not set NLM_F_CREATE in deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] chain: Don't print unset policy value in netlink debug
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_hashlimit: fix build error caused by 64bit division
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: core: remove erroneous warn_on
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net:netfilter alloc xt_byteslimit_htable with wrong size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] netfilter: nat: do not use rhltable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: xtables: add scheduling opportunity in get_counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_nat: don't bug when mapping already exists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nat: constify rhashtable_params
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2] netfilter: xt_hashlimit: fix build error caused by 64bit division
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] net:netfilter alloc xt_byteslimit_htable with wrong size
  • From: zhizhou.tian@xxxxxxxxx
• [PATCH] netfilter: xt_hashlimit: fix build error caused by 64bit division
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: WARN_ON() in __nf_hook_entries_try_shrink()
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• WARN_ON() in __nf_hook_entries_try_shrink()
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• [libnftnl PATCH] chain: Don't print unset policy value in netlink debug
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• [ulogd2 PATCH] ulogd: use a RT scheduler by default
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: core: remove erroneous warn_on
  • From: Aaron Conole <aconole@xxxxxxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [PATCH 13/14] netfilter/ipvs: Use %pS printk format for direct addresses
  • From: Helge Deller <deller@xxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: core: remove erroneous warn_on
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nf_nat_cleanup_conntrack performance with rhlist
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/2] netfilter: nat: use keyed locks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/2] netfilter: nat: do not use rhltable
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Phil Sutter <phil@xxxxxx>
• nf_nat_cleanup_conntrack performance with rhlist
  • From: Ivan Babrou <ibobrik@xxxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [nft PATCH RFC] Convert man page source to asciidoc
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH V2] tests: shell: Add tests for json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH V2] tests: shell: Add tests for json import
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] netfilter: xt_hashlimit: fix 64 bit division compile error
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [nf-next:master 1/12] ERROR: "__udivdi3" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: kbuild test robot <fengguang.wu@xxxxxxxxx>
• [nf-next:master 1/12] ERROR: "__aeabi_uldivmod" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: kbuild test robot <fengguang.wu@xxxxxxxxx>
• net-next is CLOSED
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 00/12] Netfilter updates for next-net (part 2)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• linux-next: Signed-off-by missing for commits in the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] examples: Fix memory leaks detected by Valgrind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] tests: py: add tests for limit stateful object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 1/2] src: add flags fo nft_ctx_new
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] src: limit stateful object support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/12] net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/12] net: Replace NF_CT_ASSERT() with WARN_ON().
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/12] netfilter: nft_limit: add stateful object type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/12] netfilter: xt_hashlimit: add rate match mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/12] netlink: add NLM_F_NONREC flag for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: nf_tables: use NLM_F_NONREC for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/12] netfilter: nf_tables: add nf_tables_addchain()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/12] netfilter: remove unused hooknum arg from packet functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/12] netfilter: nf_tables: add nf_tables_updchain()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: nf_tables: support for recursive chain deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/12] netfilter: nf_tables: add select_ops for stateful objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/12] netfilter: nft_limit: replace pkt_bytes with bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/12] Netfilter updates for next-net (part 2)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH V2] tests: shell: Add tests for json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [PATCH nft V3] tests: shell: Add tests for json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/3] netfilter: nft_limit: add stateful object type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 2/3] netfilter: nft_limit: replace pkt_bytes with bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_tables: add select_ops for stateful objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v2 2/2] src: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH v2 1/2] src: add flags fo nft_ctx_new
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH v2] libnftables preparation work
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATCH 2/2] src: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATCH V2] tests: shell: Add tests for json import
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] src: add flags fo nft_ctx_new
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH nf-next 3/5] netlink: add NLM_F_NONREC flag for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/5] netlink: add NLM_F_NONREC flag for deletion requests
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 00/47] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] src: add flags fo nft_ctx_new
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 25/47] netfilter: remove prototype of netfilter_queue_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 28/47] netfilter: exthdr: split netlink dump function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 24/47] netfilter: connlimit: merge root4 and root6.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 26/47] netfilter: use audit_log()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 27/47] netfilter: exthdr: factor out tcp option access
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 31/47] netfilter: nf_nat_h323: fix logical-not-parentheses warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 29/47] netfilter: exthdr: tcp option set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 32/47] netfilter: conntrack: compute l3proto nla size at compile time
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 38/47] netfilter: conntrack: make protocol tracker pointers const
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 39/47] netfilter: ebtables: fix indent on if statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 47/47] netfilter: rt: account for tcp header size too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 46/47] netfilter: conntrack: remove unused code in nf_conntrack_proto_generic.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 43/47] netfilter: core: batch nf_unregister_net_hooks synchronize_net calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 42/47] netfilter: debug: check for sorted array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 44/47] netfilter: conntrack: don't log "invalid" icmpv6 connections
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 45/47] netfilter: Remove NFDEBUG()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 41/47] netfilter: convert hook list to an array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 40/47] netfilter: fix a few (harmless) sparse warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 37/47] netfilter: conntrack: print_conntrack only needed if CONFIG_NF_CONNTRACK_PROCFS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 36/47] netfilter: conntrack: place print_tuple in procfs part
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 35/47] netfilter: conntrack: reduce size of l4protocol trackers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 34/47] netfilter: conntrack: remove protocol name from l4proto struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 33/47] netfilter: conntrack: remove protocol name from l3proto struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 30/47] netfilter: rt: add support to fetch path mss
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/47] netfilter: constify nf_loginfo structures
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] src: add flags fo nft_ctx_new
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/47] netfilter: conntrack: do not enable connection tracking unless needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/47] netfilter: xtables: Remove unused variable in compat_copy_entry_from_user()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/47] netfilter: constify nf_conntrack_l3/4proto parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/47] netfilter: nf_tables: No need to check chain existence when tracing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/47] netlink: Introduce nla_strdup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/47] netfilter: nf_hook_ops structs can be const
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/47] netfilter: nf_tables: Allow chain name of up to 255 chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/47] netfilter: nf_tables: Allow table names of up to 255 chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/47] netfilter: nf_tables: Allow object names of up to 255 chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/47] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/47] netfilter: nf_tables: Allow set names of up to 255 chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/47] netfilter: nfnetlink_queue: don't queue dying conntracks to userspace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/47] netfilter: conntrack: destroy functions need to free queued packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/47] netfilter: nf_tables: fib: use skb_header_pointer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/47] netfilter: Remove duplicated rcu_read_lock.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/47] netfilter: nf_tables: Attach process info to NFT_MSG_NEWGEN notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/47] netfilter: expect: add to hash table after expect init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/47] netfilter: expect: add and use nf_ct_expect_iterate helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/47] netfilter: nf_tables: add fib expression to the netdev family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/47] netfilter: conntrack: Change to deferable work queue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/47] netfilter: add and use nf_ct_unconfirmed_destroy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/47] netfilter: nf_tables: keep chain counters away from hot path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/47] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 2/2] src: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH 1/2] src: add flags fo nft_ctx_new
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH 0/2] libnftables preparation work
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH nf-next 3/5] netlink: add NLM_F_NONREC flag for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: nf_tables: support for recursive chain deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: nf_tables: use NLM_F_NONREC for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: nf_tables: add nf_tables_addchain()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: nf_tables: add nf_tables_updchain()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH V2] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] netfilter: ipt_CLUSTERIP: Fix potential deadlock when CLUSTERIP target is inserted
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• On ulogd2, nfacct and sqlite3
  • From: DEXTER <mydexterid@xxxxxxxxx>
• [nft PATCH V2] tests: shell: Add tests for json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH nf] netfilter: xtables: add scheduling opportunity in get_counters
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• [PATCH nf] netfilter: xtables: add scheduling opportunity in get_counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/3] src: move nf_sock into nft_ctx structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] netlink: remove nfsock_open()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] src: move nf_sock into nft_ctx structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_nat: don't bug when mapping already exists
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft v2 00/18] introducing libnftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• hi, any update on bug id 1177, ulogd, export 'ct.zone' field?
  • From: Alex Guo <alexand.guo@xxxxxxxxxxx>
• [PATCH] netfilter: nat: constify rhashtable_params
  • From: Arvind Yadav <arvind.yadav.cs@xxxxxxxxx>
• Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 00/18] introducing libnftables
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nf-next] net: Replace NF_CT_ASSERT() with WARN_ON().
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Re: [PATCH] examples: Fix memory leaks detected by Valgrind
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH] examples: Fix memory leaks detected by Valgrind
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH] examples: Fix memory leaks detected by Valgrind
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [PATCH nf-next] netfilter: remove unused hooknum arg from packet functions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 1/2] nft.8: Fix and enhance synopsis section
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/7] bridge: make ebt_table const
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 5/7] RDS: make rhashtable_params const
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 4/7] ipv4: make net_protocol const
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nft] tests: py: add tests for limit stateful object
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [nft PATCH 1/2] nft.8: Fix and enhance synopsis section
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH RFC 2/2] nft.8: Make use of synopfragment in synopsis section
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] net: netfilter: Remove NFDEBUG.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: convert expr_rt byteorder when evaluating statment arg
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: rt: account for tcp header size too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_conntrack: remove unused code in nf_conntrack_proto_generic.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: don't log "invalid" icmpv6 connections
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/3] netfilter: convert hook list to an array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: fix a few (harmless) sparse warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] parser: Fix memleaks for STRING token (and derived ones)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: convert expr_rt byteorder when evaluating statment arg
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: rt: account for tcp header size too
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_conntrack: remove unused code in nf_conntrack_proto_generic.c
  • From: Davide Caratti <dcaratti@xxxxxxxxxx>
• Re: netfilter fixes for 4.12.y tree
  • From: Greg KH <greg@xxxxxxxxx>
• libnetfilter_queue 1.0.3 docs
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: libnetfilter_queue & multithreading & 1 queue freezing
  • From: Oleg <lego12239@xxxxxxxxx>
• libnetfilter_queue 1.0.3
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: NFQUEUE --queue-balance
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: libnetfilter_queue & multithreading & 1 queue freezing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: NFQUEUE --queue-balance
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nftables] netlink_linearize: skip set element expression in set statement key
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• NFQUEUE --queue-balance
  • From: Oleg <lego12239@xxxxxxxxx>
• libnetfilter_queue & multithreading & 1 queue freezing
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: [PATCH] netfilter: ipv4: nf_defrag: constify nf_hook_ops
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: ipv6: nf_defrag: constify nf_hook_ops
  • From: Arvind Yadav <arvind.yadav.cs@xxxxxxxxx>
• [PATCH] netfilter: ipv4: nf_defrag: constify nf_hook_ops
  • From: Arvind Yadav <arvind.yadav.cs@xxxxxxxxx>
• Re: [PATCH 3/7] ieee802154: 6lowpan: make header_ops const
  • From: Marcel Holtmann <marcel@xxxxxxxxxxxx>
• Re: [PATCH 5/7] RDS: make rhashtable_params const
  • From: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
• Re: [PATCH 6/7] netfilter: nat: make rhashtable_params const
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 7/7] SUNRPC: make kvec const
  • From: Jeff Layton <jlayton@xxxxxxxxxx>
• Re: [PATCH 3/7] ieee802154: 6lowpan: make header_ops const
  • From: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
• [PATCH 1/7] Bluetooth: 6lowpan: make header_ops const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 2/7] bridge: make ebt_table const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 7/7] SUNRPC: make kvec const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 6/7] netfilter: nat: make rhashtable_params const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 5/7] RDS: make rhashtable_params const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 4/7] ipv4: make net_protocol const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 3/7] ieee802154: 6lowpan: make header_ops const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 0/7] net: make some structures const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATH nft v2 04/18] libnftables: add context new and free
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH] parser: Fix memleaks for STRING token (and derived ones)
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH nf-next] net: netfilter: Remove NFDEBUG.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Florian Westphal <fw@xxxxxxxxx>