Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH v2] netfilter: mark expected switch fall-throughs
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [RFC]: Is there any reason libnetfilter_queue 1.0.3 is not released yet?
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: timeouts can be const
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v5 0/5] netfilter: exit_net checks for objects initialized in net_init hook
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v5 5/5] x_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v5 4/5] nfnetlink_gueue: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v5 3/5] nfnetlink_log: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v5 2/5] nf_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v5 1/5] clusterip: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v5 0/5] netfilter: exit_net checks for objects initialized in net_init hook
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [PATCH v4 11/18] nfnetlink_log: exit_net cleanup check added
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH v4 12/18] nfnetlink_gueue: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [PATCH v4 11/18] nfnetlink_log: exit_net cleanup check added
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v4 12/18] nfnetlink_gueue: exit_net cleanup check added
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v4 13/18] x_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v4 12/18] nfnetlink_gueue: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v4 11/18] nfnetlink_log: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v4 10/18] nf_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v4 09/18] clusterip: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v4 00/18] exit_net checks for objects initialized in net_init hook
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: conntrack: clamp timeouts to INT_MAX
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC,WIP 5/5] netfilter: nft_flow_offload: add ndo hooks for hardware offload
  • From: Felix Fietkau <nbd@xxxxxxxx>
• [PATCH v2] netfilter: conntrack: clamp timeouts to INT_MAX
  • From: Jay Elliott <jelliott@xxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: use 64-bit conntracking timestamps
  • From: Jay Elliott <jelliott@xxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: use 64-bit conntracking timestamps
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: conntrack: use 64-bit conntracking timestamps
  • From: Jay Elliott <jelliott@xxxxxxxxxx>
• [nft PATCH] Eliminate struct mnl_ctx
  • From: Phil Sutter <phil@xxxxxx>
• Re: netfilter patches for stable 4.13
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [nft PATCH v2] libnftables: Unexport enum nftables_exit_codes
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables] libxt_sctp: fix array out of range in print_chunk
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_fwd_netdev: allow to forward packets via neighbour layer
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: nft_fwd_netdev: allow to forward packets via neighbour layer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• netfilter patches for stable 4.13
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] libnftables: Unexport enum nftables_exit_codes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] libnftables: Unexport enum nftables_exit_codes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] libnftables: Flush iface cache after command execution
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] net/icmp: restore source address if packet is NATed
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: [PATCH] net/icmp: restore source address if packet is NATed
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nft: I broke interactive mode with iface changes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: build warning after merge of the netfilter-next tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• [PATCH] net/icmp: restore source address if packet is NATed
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• nft: I broke interactive mode with iface changes
  • From: Phil Sutter <phil@xxxxxx>
• Re: linux-next: build warning after merge of the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH 00/23] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• [PATCH v2] netfilter: nf_nat_snmp_basic: use asn1 decoder library
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH v2] netfilter: mark expected switch fall-throughs
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• [PATCH] [net-next] netfilter: add ifdef around ctnetlink_proto_size
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH] netfilter: mark expected switch fall-throughs
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_nat_snmp_basic: use asn1 decoder library
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH][V2] netfilter: remove redundant assignment to e
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• [PATCH v2 nf-next 3/3] netfilter: conntrack: l4 protocol trackers can be const
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 2/3] netfilter: conntrack: constify list of builtin trackers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 1/3] netfilter: conntrack: remove nlattr_size pointer from l4proto trackers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 0/3] netfilter: conntrack: make l4 tracker structs const
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 09/21] clusterip: exit_net cleanup check added
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH] netfilter: mark expected switch fall-throughs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/23] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/23] netfilter: ipset: Fix sparse warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/23] netfilter: nat: use test_and_clear_bit when deleting ct from bysource list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/23] netfilter: conntrack: add and use nf_l4proto_log_invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/23] netfilter: conntrack: remove pf argument from l4 packet functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/23] netfilter: ipset: deduplicate prefixlen maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/23] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/23] netfilter: conntrack: add and use nf_ct_l4proto_log_invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/23] netfilter: xt_connlimit: don't store address in the conn nodes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/23] netfilter: nf_ct_h323: Out Of Bound Read in Netfilter Conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/23] netfilter: nf_conntrack_h323: Remove typedef struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/23] netfilter: ipvs: Use %pS printk format for direct addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/23] netfilter: conntrack: use power efficient workqueue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/23] netfilter: xt_connlimit: remove mask argument
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/23] netfilter: nf_tables: get set elements via netlink
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/23] netfilter: nf_tables: performance set policy skips size description in selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/23] netfilter: conntrack: move nf_ct_netns_{get,put}() to core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/23] netfilter: conntrack: don't cache nlattr_tuple_size result in nla_size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/23] netfilter: nft_hash: fix nft_hash_deactivate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/23] netfilter: ebtables: clean up initialization of buf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/23] netfilter: ipvs: Fix inappropriate output of procfs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/23] netfilter: conntrack: make l3proto trackers const
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/23] netfilter: x_tables: don't use seqlock when fetching old counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/23] netfilter: ipset: Compress return logic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• linux-next: build warning after merge of the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: use power efficient workqueue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: use power efficient workqueue
  • From: Vincent Guittot <vincent.guittot@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_hash: fix nft_hash_deactivate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] tests/monitor: Print error "this requires root" and exit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nf_tables: get set elements via netlink
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nf_tables: performance set policy skips size description in selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] tests/monitor: Print error "this requires root" and exit
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: use power efficient workqueue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next,1/4] netfilter: conntrack: don't cache nlattr_tuple_size result in nla_size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: use power efficient workqueue
  • From: Vincent Guittot <vincent.guittot@xxxxxxxxxx>
• Re: [PATCH] Out Of Bound Read in Netfilter Conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 00/16] tests: files: Remove test files.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: use power efficient workqueue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_nat_snmp_basic: use asn1 decoder library
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: use power efficient workqueue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: Fix inappropriate output of procfs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 11/21] clusterip: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_connlimit: remove mask argument
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: clean up initialization of buf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 13/14] netfilter/ipvs: Use %pS printk format for direct addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 11/21] clusterip: exit_net cleanup check added
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH v3 16/21] nfnetlink_log: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v3 18/21] x_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v3 17/21] nfnetlink_gueue: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v3 15/21] nf_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v3 11/21] clusterip: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ip6_tables: remove redundant assignment to e
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: use swap macro instead of _manually_ swapping values
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH v2 18/21] recent: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v2 17/21] hashlimit: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v2 16/21] x_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v2 15/21] nfnetlink_gueue: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v2 14/21] nfnetlink_log: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v2 13/21] nf_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH v2 09/21] clusterip: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH 18/21] recent: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH 17/21] hashlimit: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH 16/21] x_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH 15/21] nfnetlink_gueue: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH 14/21] nfnetlink_log: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH 13/21] nf_tables: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH 09/21] clusterip: exit_net cleanup check added
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
  • From: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
• [PATCH] parser: allow classid as set key
  • From: Tomas Mudrunka <mudrunka@xxxxxxxxx>
• Re: [PATCH RFC,WIP 0/5] Flow offload infrastructure
  • From: Florian Fainelli <f.fainelli@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH RFC,WIP 4/5] netfilter: nf_tables: flow offload expression
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] Net: netfilter: vmalloc/vfree to kvmalloc/kvfree
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC,WIP 5/5] netfilter: nft_flow_offload: add ndo hooks for hardware offload
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC,WIP 2/5] netfilter: add software flow offload infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] Net: netfilter: vmalloc/vfree to kvmalloc/kvfree
  • From: Charlie Sale <chucks.8090@xxxxxxxxx>
• Re: [PATCH RFC,WIP 3/5] netfilter: nf_flow_offload: integration with conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC,WIP 1/5] netfilter: nf_conntrack: move nf_ct_netns_{get,put}() to core
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH RFC,WIP 1/5] netfilter: nf_conntrack: move nf_ct_netns_{get,put}() to core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC,WIP 4/5] netfilter: nf_tables: flow offload expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC,WIP 3/5] netfilter: nf_flow_offload: integration with conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC,WIP 5/5] netfilter: nft_flow_offload: add ndo hooks for hardware offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC,WIP 2/5] netfilter: add software flow offload infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC,WIP 0/5] Flow offload infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipvs: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH nf-next 4/4] netfilter: conntrack: l4 protocol trackers can be const
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/4] netfilter: conntrack: constify list of builtin trackers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/4] netfilter: conntrack: remove nlattr_size pointer from l4proto trackers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/4] netfilter: conntrack: don't cache nlattr_tuple_size result in nla_size
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/4] netfilter: conntrack: make l4 tracker structs const
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nft_hash: fix nft_hash_deactivate
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: conntrack: use power efficient workqueue
  • From: Vincent Guittot <vincent.guittot@xxxxxxxxxx>
• Re: [PATCH] netfilter: ipvs: Convert timers to use timer_setup()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next] netfilter: xt_connlimit: remove mask argument
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/2] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nft_set_hash: disable fast_ops for 2-len keys
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: nf_reject_ipv4: Fix use-after-free in send_reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipv4: Fix use-after-free in send_reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC] connlimit for nftables and limiting ct count by zone
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: ipv4: Fix use-after-free in send_reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC] connlimit for nftables and limiting ct count by zone
  • From: Yi-Hung Wei <yihung.wei@xxxxxxxxx>
• [PATCH] netfilter: ipset: use swap macro instead of _manually_ swapping values
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: ip_set_bitmap_ipmac: use swap macro in bitmap_ipmac_create
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• Re: [RFC] connlimit for nftables and limiting ct count by zone
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: ipset: ip_set_bitmap_ipmac: use swap macro in bitmap_ipmac_create
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nft 08/16] tests: files: Remove test for syntactical errors.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 10/16] tests: files: Remove test for ct expression.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 09/16] tests: shell: Add test for ct expression.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 07/16] tests: files: Remove payload expression tests.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 16/16] tests: shell: Add test case for map expression.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 15/16] tests: files: Remove tests for concat expression.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 11/16] tests: files: Remove prefix file.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 13/16] tests: files: Remove test for meta expression.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 14/16] tests: shell: Add tests for concat expression.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 12/16] tests: files: Test for meta expressions.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 06/16] tests: shell: Add tests for payload expression.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 05/16] tests: shell: Add test for log flags.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 04/16] tests: files: Remove log statement tests.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 03/16] tests: shell: Add test for log statement.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 02/16] tests: files: Remove tests for ipv6
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 01/16] tests: files: Remove tests for ipv4
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 00/16] tests: files: Remove test files.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH] netfilter: nf_nat_snmp_basic: use asn1 decoder library
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH] netfilter: ipset: ip_set_bitmap_port: use swap macro in bitmap_port_create
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• [PATCH] netfilter: ipset: ip_set_bitmap_ip: use swap macro in bitmap_ip_create
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• [PATCH] netfilter: ipset: ip_set_bitmap_ipmac: use swap macro in bitmap_ipmac_create
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_set_hash: fix fast_ops for 2-len keys
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_set_hash: fix fast_ops for 2-len keys
  • From: Anatole Denis <natolumin@xxxxxxxxx>
• Re: [PATCH nft 1/8] tests: adjust output to silence warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/8] tests: adjust output to silence warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/8] tests: adjust output to silence warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/8] rework dependency removal
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/8] tests: adjust output to silence warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/8] rework dependency removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/8] tests: adjust output to silence warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: ipvs: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [RFC] connlimit for nftables and limiting ct count by zone
  • From: Yi-Hung Wei <yihung.wei@xxxxxxxxx>
• [PATCH nft 8/8] tests: silence test case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 7/8] payload: consider expression type during dependency removal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 6/8] payload: keep dependencies that enforce a specific l3 protocol
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 5/8] payload: add basic infrastructure to keep some dependencies
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/8] src: pass proto_ctx to payload_dependency_kill
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/8] src: add and use payload_dependency_update helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/8] src: remove exthdr_dependency_kill
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/8] tests: adjust output to silence warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/8] rework dependency removal
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] libnftables: Get rid of explicit cache flushes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Fw: [Bug 197367] New: NMI watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [nf_conntrack]
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• Re: nftables rules not matching after upgrading from 0.7 to 0.8
  • From: Florian Westphal <fw@xxxxxxxxx>
• nftables rules not matching after upgrading from 0.7 to 0.8
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• libnetfilter_queue documentation
  • From: Rafael Ludtke <rafaelludtke@xxxxxxxxx>
• [nft PATCH] libnftables: Get rid of explicit cache flushes
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: nft_set_hash: fix fast_ops for 2-len keys
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2 2/4] libnftables: Introduce nft_ctx_flush_cache()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Out Of Bound Read in Netfilter Conntrack
  • From: Eric Sesterhenn <eric.sesterhenn@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ipvs: Convert timers to use timer_setup()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [nft PATCH v2 2/4] libnftables: Introduce nft_ctx_flush_cache()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 1/4] libnftables: Move library stuff out of main.c
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] Out Of Bound Read in Netfilter Conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/4] libnftables preparations
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] Out Of Bound Read in Netfilter Conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: add nft_ prefix to everything exposed through include/nftables/nftables.h
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] extensions: add tests for ipcomp protocol
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] [PATCH v3] tests: xlate: print output in same way as nft-test.py
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: nft.8 simplify initial SYNOPSIS line
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_connlimit: don't store address in the conn nodes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: make l3proto trackers const
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 nf-next 0/2] netfilter: x_tables: speed up iptables-restore
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/3] netfilter: remove pf argument from conntrack l4 packet function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_h323: Remove typedef struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ebtables PATCH] Use flock() for --concurrent option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nat: use test_and_clear_bit when deleting ct from bysource list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 2/4] libnftables: Introduce nft_ctx_flush_cache()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 1/4] libnftables: Move library stuff out of main.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: add nft_ prefix to everything exposed through include/nftables/nftables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/4] libnftables preparations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Fw: [Bug 197367] New: NMI watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [nf_conntrack]
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: ipvs: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [nft PATCH v2 2/4] libnftables: Introduce nft_ctx_flush_cache()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 4/4] libnftables: Introduce getters and setters for everything
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 0/4] libnftables preparations
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 3/4] cli: Use nft_run_cmd_from_buffer()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/4] libnftables: Move library stuff out of main.c
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: ipv4: Fix use-after-free in send_reset
  • From: Tejaswi Tanikella <tejaswit@xxxxxxxxxxxxxx>
• [PATCH] extensions: add tests for ipcomp protocol
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH v3] tests: xlate: print output in same way as nft-test.py
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [nft PATCH 6/7] libnftables: Provide an API for include path handling
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 4/7] cli: Use nft_run_cmd_from_buffer()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 3/7] libnftables: Introduce nft_ctx_flush_cache()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 4/7] cli: Use nft_run_cmd_from_buffer()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 6/7] libnftables: Provide an API for include path handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/7] libnftables: Introduce nft_ctx_flush_cache()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/7] libnftables: Move library stuff out of main.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 6/7] libnftables: Provide an API for include path handling
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 4/7] cli: Use nft_run_cmd_from_buffer()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 3/7] libnftables: Introduce nft_ctx_flush_cache()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 2/7] libnftables: Move library stuff out of main.c
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 7/7] libnftables: Add remaining getters and setters
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] tests: xlate: print total no. of testfiles, tests and tests passed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] tests: xlate: print total no. of testfiles, tests and tests passed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 7/7] libnftables: Add remaining getters and setters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 6/7] libnftables: Provide an API for include path handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 4/7] cli: Use nft_run_cmd_from_buffer()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/7] libnftables: Introduce nft_ctx_flush_cache()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/7] libnftables: Move library stuff out of main.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/7] nft_ctx_free: Fix for wrong argument passed to cache_release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] libxt_recent: Remove ineffective checks for info->name
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] doc: nft.8 simplify initial SYNOPSIS line
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [iptables PATCH] libxt_recent: Remove ineffective checks for info->name
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: mark expected switch fall-throughs
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• Re: [PATCH] tests: xlate: print total no. of testfiles, tests and tests passed
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] tests: xlate: Change testfile to take "extensions/test_file" as argument
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH v2] tests: xlate: print total no. of testfiles, tests and tests passed
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: nftables and iptables nat coexistence
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables and iptables nat coexistence
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] tests: xlate: print total no. of testfiles, tests and tests passed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] tests: xlate: print total no. of testfiles, tests and tests passed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables and iptables nat coexistence
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables and iptables nat coexistence
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] rule: fix netlink debug flag when listing table/rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 0/7] libnftables preparations
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/7] nft_ctx_free: Fix for wrong argument passed to cache_release
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/7] libnftables: Move library stuff out of main.c
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 5/7] libnftables: Introduce nft_ctx_set_dry_run()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/7] libnftables: Introduce nft_ctx_flush_cache()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 6/7] libnftables: Provide an API for include path handling
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/7] cli: Use nft_run_cmd_from_buffer()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 7/7] libnftables: Add remaining getters and setters
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] rule: fix netlink debug flag when listing table/rules
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [10/26] netfilter: Allow xt_owner in any user namespace
  • From: Andrei Vagin <avagin@xxxxxxxxxxxxx>
• [PATCH] tests: xlate: print total no. of testfiles, tests and tests passed
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• nftables and iptables nat coexistence
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ipv6: mark expected switch fall-throughs
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] ipv4: mark expected switch fall-throughs
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Problem compiling nftables
  • From: "Frank A. Cancio Bello" <frank@xxxxxxxxxxxxxxxxxxxxxx>
• Re: Problem compiling nftables
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Problem compiling nftables
  • From: "Frank A. Cancio Bello" <frank@xxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] Bitwise Out Of Bound Read in Netfilter Conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Bitwise Out Of Bound Read in Netfilter Conntrack
  • From: Eric Sesterhenn <eric.sesterhenn@xxxxxxxxxxx>
• Re: [nft PATCH] netlink: Use nftnl_expr_fprintf() in netlink_dump_expr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v3] expr: Introduce nftnl_expr_fprintf()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH v3] expr: Introduce nftnl_expr_fprintf()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] Bitwise Out Of Bound Read in Netfilter Conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] update INSTALL to add library libnfnetlink
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] tests: xlate: print tests passed and error for testfile argument
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] tests: xlate: print tests passed and error for testfile argument
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] tests: xlate: print tests passed and error for testfile argument
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH v2] libxt_TOS: add tests for translation infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Update .gitignore
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Update .gitignore
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] libxt_TOS: add tests for translation infrastructure
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_tcpmss: Detect invalid ranges
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: nft.8 change "Native Address Translation" to "Network Address Translation"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: ip6_tables: remove redundant assignment to e
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named limits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] iptables: iptables-compat translation for TCPMSS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: add test file for TCPMSS extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: add test file for TCPMSS extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] tests: add regression tests for xtables-translate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] tests: xlate: print tests passed and error for testfile argument
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH v2] expr: Introduce nftnl_expr_fprintf()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 0/9] tests: Move tests from files to shell.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] expr: Introduce nftnl_expr_fprintf()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink: fix element addition to map with stateful object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] tests: xlate: print tests passed and error for testfile argument
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] tests: xlate: print tests passed or error for testfile argument
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH 36/58] inet: frags: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH 34/58] netfilter: ipset: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH] ipv6: mark expected switch fall-throughs
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• [PATCH] ipv4: mark expected switch fall-throughs
  • From: "Gustavo A. R. Silva" <garsilva@xxxxxxxxxxxxxx>
• [PATCH] iptables: add test file for TCPMSS extension
  • From: Aastha Gupta <aastha.gupta4104@xxxxxxxxx>
• Re: [PATCH] inet: frags: Convert timers to use timer_setup()
  • From: Stefan Schmidt <stefan@xxxxxxxxxxxxxxxxxx>
• [PATCH] tests: add regression tests for xtables-translate
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: libnftables, next steps
  • From: Phil Sutter <phil@xxxxxx>
• [RFC] connlimit for nftables and limiting ct count by zone
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: ebtables: clean up initialization of buf
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: libnftables, next steps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] iptables: iptables-compat translation for TCPMSS
  • From: Aastha Gupta <aastha.gupta4104@xxxxxxxxx>
• Re: [PATCH] ipvs: Fix inappropriate output of procfs
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nft V4 2/2] tests: shell: Add tests for low level json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [RFC PATCH nft V5 1/2] src: Add import command for low level json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [PATCH v3] iptables: iptables-compat translation for TCPMSS
  • From: Aastha Gupta <aastha.gupta4104@xxxxxxxxx>
• [PATCH v2] iptables: iptables-compat translation for TCPMSS
  • From: Aastha Gupta <aastha.gupta4104@xxxxxxxxx>
• [PATCH] ipvs: Fix inappropriate output of procfs
  • From: KUWAZAWA Takuya <albatross0@xxxxxxxxx>
• [PATCH nf-next] netfilter: xt_connlimit: don't store address in the conn nodes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/9] tests: Move tests from files to shell.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH] update INSTALL to add library libnfnetlink
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] tests: shell: add testcases for named limits
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] Bitwise Out Of Bound Read in Netfilter Conntrack
  • From: Eric Sesterhenn <eric.sesterhenn@xxxxxxxxxxx>
• [PATCH] Update .gitignore
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [ANNOUNCE] libnftnl 1.0.8 release
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] src: Remove unnecessary cast on void pointer
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [ANNOUNCE] nftables 0.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nfnl_cthelper: Replace kzalloc with kcalloc
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] libnftnl 1.0.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_h323: Remove typedef struct
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] netfilter: nfnl_cthelper: Replace kzalloc with kcalloc
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] tests: py: Add option --all to nft-test.py
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: make l3proto trackers const
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] doc: nft.8 change "Native Address Translation" to "Network Address Translation"
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] Out Of Bound Read in Netfilter Conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v4 2/2] netfilter: x_tables: don't use seqlock when fetching old counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v4 1/2] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v4 nf-next 0/2] netfilter: x_tables: speed up iptables-restore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: ensure readers see new ->private value
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• [PATCH nf] netfilter: x_tables: ensure readers see new ->private value
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] nftables: Add support for reserved header and addrs for routing header type 0
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• [PATCH v3 nf-next 2/2] netfilter: x_tables: don't use seqlock when fetching old counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 1/2] netfilter: x_tables: wait until old table isn't used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 0/2] netfilter: x_tables: speed up iptables-restore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/9] tests: Move tests from files to shell.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: conntrack: remove pf argument from l4 packet functions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: conntrack: add and use nf_ct_l4proto_log_invalid
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: conntrack: add and use nf_l4proto_log_invalid
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: remove pf argument from conntrack l4 packet function
  • From: Florian Westphal <fw@xxxxxxxxx>
• [redirect: netdev => netfilter-devel] Accept packets that the H.245 ALG can't process
  • From: Alexandru Ardelean <ardeleanalex@xxxxxxxxx>
• [PATCH nft 9/9] tests: files: Remove tests for verdict maps.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 8/9] tests: files: Remove tests for table.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 7/9] tests: files: Remove tests for chain.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 6/9] tests: files: Remove test cases for variable definition.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 5/9] tests: shell: Add tests for variable definition.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 4/9] tests: files: Remove tests for set.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 3/9] tests: shell: Add test case for sets.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 2/9] tests: shell: Add test case for jump chain.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 1/9] tests: files: Remove jump chain tests.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 0/9] tests: Move tests from files to shell.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH RFC tip/core/rcu 14/15] netfilter: Remove now-redundant smp_read_barrier_depends()
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Support for attribute based deletion operation in nftables
  • From: "Doddamadaiah, Abhijit (Nokia - IN/Bangalore)" <abhijit.doddamadaiah@xxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: x_tables: don't use seqlock when fetching old counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore
  • From: Florian Westphal <fw@xxxxxxxxx>
• netfilter: x_tables: speed up iptables-restore
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC tip/core/rcu 14/15] netfilter: Remove now-redundant smp_read_barrier_depends()
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• [PATCH RFC tip/core/rcu 14/15] netfilter: Remove now-redundant smp_read_barrier_depends()
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH] doc: nft.8 Document rule replace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/12] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 01/12] netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/12] netfilter: ipset: pernet ops must be unregistered last
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/12] netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/12] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/12] netfilter: nf_tables: fix update chain error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/12] netfilter: nf_tables: do not dump chain counters if not enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/12] netfilter: ipset: Fix race between dump and swap
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/12] netfilter: ebtables: fix race condition in frame_filter_net_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/12] netfilter: nf_tables: Release memory obtained by kasprintf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/12] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/12] netfilter: xt_socket: Restore mark from full sockets only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] doc: nft.8 Document rule replace
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [iptables PATCH] extensions: libxt_tcpmss: Detect invalid ranges
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] nftables: make pointers in string arrays constant
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] test: shell: update shell/run-tests.sh to refer to relative path of testcase
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] src: Merge assignment with return
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH v2] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_bison: allow to used named limit from dictionaries too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] scanner: IPv4-Mapped IPv6 addresses support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: allow to used named limit from dictionaries too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 41/47] netfilter: convert hook list to an array
  • From: Tariq Toukan <tariqt@xxxxxxxxxxxx>
• Re: [PATCH 41/47] netfilter: convert hook list to an array
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 13/14] netfilter/ipvs: Use %pS printk format for direct addresses
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] Out Of Bound Read in Netfilter Conntrack
  • From: Eric Sesterhenn <eric.sesterhenn@xxxxxxxxxxx>
• [PATCH] datatype: Change "%Zx" to "%zx" and "%Zu" to "%zu"
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] src: buffer is not null terminated
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH v2] src: Use snprintf() over strncpy()
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] src: buffer is not null terminated
  • From: Julia Lawall <julia.lawall@xxxxxxx>
• [PATCH] src: buffer is not null terminated
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH 41/47] netfilter: convert hook list to an array
  • From: Tariq Toukan <tariqt@xxxxxxxxxxxx>
• [PATCH] src: Code indent should use tabs wherever possible
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] src: Remove unnecessary spaces
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] test: shell: update shell/run-tests.sh to refer to relative path of testcase
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] src: Merge assignment with return
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• [PATCH] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• [PATCH v2] nftables: make pointers in string arrays constant
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• nftables: 0040set_0 test in tests/shell/testcases/transactions fails
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] nftables: make pointers in string arrays constant
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] netlink_linearize: skip set element expression in set statement key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: man page nft.8 add chain synopsis
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] tests: files: Remove old tests for chain rename.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] tests: shell: Add tests for chain rename.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] INSTALL: Update dependency list and configure with libxtables support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] tests: shell: add testcases for named objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] test: shell: execute shell/run-tests.sh from any directory
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] evaluate: Fix debug output
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ebtables PATCH] Use flock() for --concurrent option
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2] nftables: Add support for reserved header and addrs for routing header type 0
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• man page nft.8 add chain synopsis
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [ebtables] c70604d6de: BUG:unable_to_handle_kernel
  • From: kernel test robot <fengguang.wu@xxxxxxxxx>
• [PATCH v2] netfilter: ipset: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nat: use test_and_clear_bit when deleting ct from bysource list
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Convert timers to use timer_setup()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] tests: shell: add testcases for named objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH net] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] nftables: make pointers in string arrays constant
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH v3] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Lin Zhang <xiaolou4617@xxxxxxxxx>
• [PATCH nft] tests: files: Remove old tests for chain rename.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft v2] tests: shell: Add tests for chain rename.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH] test: shell: execute shell/run-tests.sh from any directory
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] INSTALL: Update dependency list and configure with libxtables support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] netfilter: ipset: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH] inet: frags: Convert timers to use timer_setup()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• libnftables, next steps
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] netlink: Use nftnl_expr_fprintf() in netlink_dump_expr()
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] expr: Introduce nftnl_expr_fprintf()
  • From: Phil Sutter <phil@xxxxxx>
• RE: [PATCH] netfilter: fix stringop-overflow warning with UBSAN
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: do not dump chain counters if not enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Juergen Borleis <jbe@xxxxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Juergen Borleis <jbe@xxxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] [PATCH 3/3] evaluate: make pointers in string arrays constant
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables] netlink_linearize: skip set element expression in set statement key
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• Re: [PATCH] iptables: change large file support handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 0/2] ip{,6}tables-restore: Fix wait-interval parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: Constify option struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] evaluate: Fix debug output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 0/2] Document nfnl_osf utility
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] build: libnftnl 1.0.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl,v2 4/4] src: do not nul-terminate internal helper functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl,v2 3/4] src: no need to nul-terminate buffer for nftnl_fprintf() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl,v2 2/4] expr: no need to nul-terminate buffer from expression ->snprintf indirection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl,v2 1/4] buffer: use nftnl_expr_snprintf() from nftnl_buf_expr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 3/3] src: no need to nul-terminate buffer for nftnl_fprintf() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 2/3] expr: no need to nul-terminate buffer from expression ->snprintf indirection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/3] buffer: use nftnl_expr_snprintf() from nftnl_buf_expr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables: Add support for reserved header and addrs for routing header type 0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables: Add support for unsupported codes in icmp and icmp6 extensions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables: Add support for unsupported codes in icmp and icmp6 extensions
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• nftables: Add support for reserved header and addrs for routing header type 0
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf] netfilter: nft_set_hash: disable fast_ops for 2-len keys
  • From: Anatole Denis <anatole@xxxxxxxxx>
• Re: [PATCH v2] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: Release memory obtained by kasprintf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] exthdr: Add support for reserved header and address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulog2 PATCH] Non-arbitrary malloc for SQL queries + string length limit
  • From: Jean Weisbuch <jean@xxxxxxxxxx>
• [PATCH nft] parser_bison: allow to used named limit from dictionaries too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ulogd2 PATCH] ulogd2: new config behaviour: load all plugins by default
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Memory Leak in nf_conntrack_in
  • From: Shankara Pailoor <sp3485@xxxxxxxxxxxx>
• Re: [ulog2 PATCH] Non-arbitrary malloc for SQL queries + string length limit
  • From: Jean Weisbuch <jean@xxxxxxxxxx>
• Re: [PATCH nft] tests: shell: Add test for chain rename.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] tests: shell: Add test for chain rename.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] mnl: fix broken sequence number allocation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH nft] tests: shell: Add test for chain rename.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft] tests: shell: Add test for chain rename.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft] tests: shell: Add test for chain rename.
  • From: Varsha <rvarsha016@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/3] evaluate: Follow linux-kernel coding style
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH 1/3] evaluate: Remove unnecessary spaces
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH 2/3] evaluate: Place constant on right side in comparison
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH 3/3] evaluate: make pointers in string arrays constant
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] exthdr: Add support for reserved header and address
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Lin Zhang <xiaolou4617@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix update chain error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] ebtables: fix race condition in frame_filter_net_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/2] Follow-up on nft_print() enhancement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 0/2] Follow-up on nft_print() enhancement
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/2] main: Flush output from nft_gmp_print()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/2] main: Drop stdout hack to expose nft_print() implementation issues
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 5/5] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 5/5] src: get rid of printf
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 5/5] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 4/5] rule: Refactor chain_print_declaration()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 3/5] erec_print: Pass output FILE pointer to netlink_dump_expr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 2/5] exthdr: Simplify tcp option printing a bit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 1/5] rule: Use C99-style initializer in cache_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/10] nftables remove use of meta nfproto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix race between dump and swap
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v2 0/5] Get output under application control
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 3/5] erec_print: Pass output FILE pointer to netlink_dump_expr()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 4/5] rule: Refactor chain_print_declaration()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 5/5] src: get rid of printf
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/5] rule: Use C99-style initializer in cache_init()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 2/5] exthdr: Simplify tcp option printing a bit
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ipset: Fix race between dump and swap
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] iptables: change large file support handling
  • From: Juergen Borleis <jbe@xxxxxxxxxxxxxx>
• [PATCH nft 10/10] doc: update man page
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 09/10] tests: rt: fix test cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 08/10] src: rt: add keyword distinction for nexthop vs nexthop6
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 07/10] tests: ct: adjust test case commands
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 06/10] src: ct: print nfproto name for some header fields
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 05/10] tests: update inet/bridge icmp test case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 04/10] src: unifiy meta and ct postprocessing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 03/10] src: ct: add eval part to inject dependencies for ct saddr/daddr
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 02/10] src: ct: store proto base of ct key, if any
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 01/10] src: add alternate syntax for ct saddr
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/10] nftables remove use of meta nfproto
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/3] bison: permit keywords in list_stmt_expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/3] src: parser_bison: rename ct_block to ct_helper_block
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] src: prepare for future ct timeout policy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] bison: permit keywords in list_stmt_expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] src: parser_bison: rename ct_block to ct_helper_block
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] src: prepare for future ct timeout policy support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] ct: make ct event set work with COMMA syntax
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [conntrack-tools PATCH] conntrack.8: refresh manpage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/2] evaluate: prepare to store expr key rather than datatype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] include: remove outdated comment
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] main: Fix for return of uninitialized variable in nft_run_cmd_from_filename()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] monitor: Fix for incorrect debug_mask
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] src: Buffer is null terminated.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] src: Change parameters of SNPRINTF_BUFFER_SIZE macro.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables: Constify option struct
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH] netfilter: ipset: Fix race between dump and swap
  • From: Ross Lagerwall <ross.lagerwall@xxxxxxxxxx>
• Re: [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: xt_socket: Restore mark from full sockets only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: ipset: pernet ops must be unregistered last
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: ipset: pernet ops must be unregistered last
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nft,v2 1/3] parser_bison: consolidate stmt_expr rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 2/3] parser_bison: use keywords in ct expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 3/3] parser_bison: allow helper keyword in ct object kind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] parser_bison: allow helper keyword in ct object kind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] parser_bison: use keywords in ct expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] parser_bison: consolidate stmt_expr rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3] ebtables: fix race condition in frame_filter_net_init()
  • From: Artem Savkov <asavkov@xxxxxxxxxx>
• [PATCH v2] ebtables: fix race condition in frame_filter_net_init()
  • From: Artem Savkov <asavkov@xxxxxxxxxx>
• Re: [PATCH] ebtables: fix race condition in frame_filter_net_init()
  • From: Artem Savkov <asavkov@xxxxxxxxxx>
• [conntrack-tools PATCH] conntrack.8: refresh manpage
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH] ebtables: fix race condition in frame_filter_net_init()
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] ebtables: fix race condition in frame_filter_net_init()
  • From: Artem Savkov <asavkov@xxxxxxxxxx>
• [PATCH nf v2] netfilter: ipset: pernet ops must be unregistered last
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ipset: pernet ops must be unregistered last
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipset: fix build with musl
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: ipset: pernet ops must be unregistered last
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ipset: fix build with musl
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [RFC PATCH nft V4] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [ulogd2 PATCH] ulogd2: add new config option: load_all_plugins
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH] ipset: fix build with musl
  • From: Stijn Tintel <stijn@xxxxxxxxxxxxx>
• [PATCH 4.9 61/77] net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.13 083/109] net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/1] ipset patch for nf
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.34 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [HEADS UP] ipset git tree is rebased
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] include: remove outdated comment
  • From: JingPiao Chen <chenjingpiao@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: fix update chain error
  • From: JingPiao Chen <chenjingpiao@xxxxxxxxx>
• Re: nftables/libnftnl release plan?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulog2 PATCH] Non-arbitrary malloc for SQL queries + string length limit
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH v3] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_socket: Restore mark from full sockets only
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH v2] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_socket: Restore mark from full sockets only
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] netfilter: xt_socket: Restore mark from full sockets only
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• [nft PATCH] monitor: Fix for incorrect debug_mask
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ulog2 PATCH] Non-arbitrary malloc for SQL queries + string length limit
  • From: Jean Weisbuch <jean@xxxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] main: Fix for return of uninitialized variable in nft_run_cmd_from_filename()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [RFC PATCH nft V4] src: Add import command for json
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft V4] src: Add import command for json
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [iptables PATCH 1/2] ip{,6}tables-restore: Don't ignore missing wait-interval value
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] ip{,6}tables-restore: Don't accept wait-interval without wait
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/2] ip{,6}tables-restore: Fix wait-interval parsing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] utils: Add a man page for nfnl_osf
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/2] utils: nfnl_osf: Fix synopsis in help text
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/2] Document nfnl_osf utility
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl] src: Buffer is null terminated.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>