Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero div
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH nft V4] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd: use a RT scheduler by default
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: Release memory obtained by kasprintf
  • From: Arvind Yadav <arvind.yadav.cs@xxxxxxxxx>
• Re: [ulogd2 PATCH] ulogd: use a RT scheduler by default
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: store expression as set key instead of data type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/2] evaluate: prepare to store expr key rather than datatype
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/2] store expression instead of data type as set key
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/4] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Willem de Bruijn <willemb@xxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables/libnftnl release plan?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: nftables/libnftnl release plan?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables/libnftnl release plan?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 2/2] extensions: xt_bpf: get the pinned ebpf object when match is initialized
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• nftables/libnftnl release plan?
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 4/4] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero div
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] ipset patches for nf-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 2/2] extensions: xt_bpf: get the pinned ebpf object when match is initialized
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• [PATCH v2 1/2] iptables: support match info fixup after tc_init
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• [PATCH v2 0/2] xt_bpf: fix handling of pinned objects
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: [PATCH 0/2] xt_bpf: fix handling of pinned objects
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• [PATCH 2/2] extensions: xt_bpf: get the pinned ebpf object when match is initialized
  • From: Rafael Buchbinder <shmulik@xxxxxxx>
• [PATCH 1/2] iptables: support match info fixup after tc_init
  • From: Rafael Buchbinder <shmulik@xxxxxxx>
• [PATCH 0/2] xt_bpf: fix handling of pinned objects
  • From: Rafael Buchbinder <shmulik@xxxxxxx>
• Re: [PATCH ipset] fix compilation with musl libc
  • From: Bo YU <tsu.yubo@xxxxxxxxx>
• [PATCH ipset] fix compilation with musl libc
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• Re: nft typeof keywork patch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft typeof keywork patch
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Memory leaks in conntrack
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: Memory leaks in conntrack
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: nft typeof keywork patch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Memory leaks in conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter: xt_bpf: ABI issue in xt_bpf_info_v1?
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• Re: nft typeof keywork patch
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter: xt_bpf: ABI issue in xt_bpf_info_v1?
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• Re: netfilter: xt_bpf: ABI issue in xt_bpf_info_v1?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• netfilter: xt_bpf: ABI issue in xt_bpf_info_v1?
  • From: Shmulik Ladkani <shmulik@xxxxxxx>
• Re: does nftables support string match?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: does nftables support string match?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• does nftables support string match?
  • From: Michael Chi <chibo.michael@xxxxxxxxx>
• Re: Memory leaks in conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• Memory leaks in conntrack
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: [RFC PATCH nft V3] src: Add import command for json
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 3/4] netfilter: ipset: deduplicate prefixlen maps
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 4/4] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/4] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/4] netfilter: ipset: Compress return logic
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: ipset: Fix sparse warnings
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [RFC PATCH nft V3] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH nf 0/2] netfilter: nat: do not use rhltable
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• Re: [RFC PATCH nft V2] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [RFC PATCH nft V2] src: Add import command for json
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_bpf: fix missing __NR_bpf declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] xtables-compat-restore: fix translation of mangle's OUTPUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] xtables-compat-restore: fix translation of mangle's OUTPUT
  • From: Louis Sautier <sautier.louis@xxxxxxxxx>
• [RFC PATCH nft V2] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [PATCH] netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero div
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• [PATCH] extensions: libxt_bpf: fix missing __NR_bpf declaration
  • From: Rafael Buchbinder <rafi@xxxxxx>
• Re: [netfilter-core] Build failure with Linux 4.13+: ERROR: "__udivdi3" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: Paul Menzel <pmenzel@xxxxxxxxxxxxx>
• [PATCH] xtables-compat-restore: fix translation of mangle's OUTPUT
  • From: Louis Sautier <sautier.louis@xxxxxxxxx>
• Re: [netfilter-core] Build failure with Linux 4.13+: ERROR: "__udivdi3" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Build failure with Linux 4.13+: ERROR: "__udivdi3" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: Paul Menzel <pmenzel@xxxxxxxxxxxxx>
• [nft] Documentation point release/backport
  • From: Colin Caine <colin.caine@xxxxxxxxxxxxxxxx>
• Re: [PATCH 0/9] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [netfilter-core] [PATCH] netfilter: nat: constify rhashtable_params
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/9] netfilter: ipvs: fix the issue that sctp_conn_schedule drops non-INIT packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/9] netfilter: nf_nat: don't bug when mapping already exists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/9] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/9] netfilter: ipvs: do not create conn for ABORT packet in sctp_conn_schedule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/9] netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/9] netfilter: nat: use keyed locks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/9] netfilter: xtables: add scheduling opportunity in get_counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 9/9] netfilter: xt_hashlimit: fix build error caused by 64bit division
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/9] netfilter: xt_hashlimit: alloc hashtable with right size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/9] netfilter: core: remove erroneous warn_on
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter/libxt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] mnl: do not set NLM_F_CREATE in deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] chain: Don't print unset policy value in netlink debug
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_hashlimit: fix build error caused by 64bit division
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: core: remove erroneous warn_on
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net:netfilter alloc xt_byteslimit_htable with wrong size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] netfilter: nat: do not use rhltable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: xtables: add scheduling opportunity in get_counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_nat: don't bug when mapping already exists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nat: constify rhashtable_params
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2] netfilter: xt_hashlimit: fix build error caused by 64bit division
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] net:netfilter alloc xt_byteslimit_htable with wrong size
  • From: zhizhou.tian@xxxxxxxxx
• [PATCH] netfilter: xt_hashlimit: fix build error caused by 64bit division
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: WARN_ON() in __nf_hook_entries_try_shrink()
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• WARN_ON() in __nf_hook_entries_try_shrink()
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• [libnftnl PATCH] chain: Don't print unset policy value in netlink debug
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• [ulogd2 PATCH] ulogd: use a RT scheduler by default
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: core: remove erroneous warn_on
  • From: Aaron Conole <aconole@xxxxxxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [PATCH 13/14] netfilter/ipvs: Use %pS printk format for direct addresses
  • From: Helge Deller <deller@xxxxxx>
• Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] netfilter: xt_hashlimit: avoid 64-bit division
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: core: remove erroneous warn_on
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nf_nat_cleanup_conntrack performance with rhlist
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/2] netfilter: nat: use keyed locks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/2] netfilter: nat: do not use rhltable
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Phil Sutter <phil@xxxxxx>
• nf_nat_cleanup_conntrack performance with rhlist
  • From: Ivan Babrou <ibobrik@xxxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH RFC] Convert man page source to asciidoc
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [nft PATCH RFC] Convert man page source to asciidoc
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH V2] tests: shell: Add tests for json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH V2] tests: shell: Add tests for json import
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] netfilter: xt_hashlimit: fix 64 bit division compile error
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [nf-next:master 1/12] ERROR: "__udivdi3" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: kbuild test robot <fengguang.wu@xxxxxxxxx>
• [nf-next:master 1/12] ERROR: "__aeabi_uldivmod" [net/netfilter/xt_hashlimit.ko] undefined!
  • From: kbuild test robot <fengguang.wu@xxxxxxxxx>
• net-next is CLOSED
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 00/12] Netfilter updates for next-net (part 2)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• linux-next: Signed-off-by missing for commits in the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] examples: Fix memory leaks detected by Valgrind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] tests: py: add tests for limit stateful object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 1/2] src: add flags fo nft_ctx_new
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] src: limit stateful object support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/12] net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/12] net: Replace NF_CT_ASSERT() with WARN_ON().
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/12] netfilter: nft_limit: add stateful object type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/12] netfilter: xt_hashlimit: add rate match mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/12] netlink: add NLM_F_NONREC flag for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: nf_tables: use NLM_F_NONREC for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/12] netfilter: nf_tables: add nf_tables_addchain()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/12] netfilter: remove unused hooknum arg from packet functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/12] netfilter: nf_tables: add nf_tables_updchain()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: nf_tables: support for recursive chain deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/12] netfilter: nf_tables: add select_ops for stateful objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/12] netfilter: nft_limit: replace pkt_bytes with bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/12] Netfilter updates for next-net (part 2)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH V2] tests: shell: Add tests for json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [PATCH nft V3] tests: shell: Add tests for json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/3] netfilter: nft_limit: add stateful object type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 2/3] netfilter: nft_limit: replace pkt_bytes with bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_tables: add select_ops for stateful objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v2 2/2] src: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH v2 1/2] src: add flags fo nft_ctx_new
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH v2] libnftables preparation work
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATCH 2/2] src: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATCH V2] tests: shell: Add tests for json import
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] src: add flags fo nft_ctx_new
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH nf-next 3/5] netlink: add NLM_F_NONREC flag for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/5] netlink: add NLM_F_NONREC flag for deletion requests
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 00/47] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] src: add flags fo nft_ctx_new
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 25/47] netfilter: remove prototype of netfilter_queue_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 28/47] netfilter: exthdr: split netlink dump function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 24/47] netfilter: connlimit: merge root4 and root6.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 26/47] netfilter: use audit_log()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 27/47] netfilter: exthdr: factor out tcp option access
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 31/47] netfilter: nf_nat_h323: fix logical-not-parentheses warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 29/47] netfilter: exthdr: tcp option set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 32/47] netfilter: conntrack: compute l3proto nla size at compile time
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 38/47] netfilter: conntrack: make protocol tracker pointers const
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 39/47] netfilter: ebtables: fix indent on if statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 47/47] netfilter: rt: account for tcp header size too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 46/47] netfilter: conntrack: remove unused code in nf_conntrack_proto_generic.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 43/47] netfilter: core: batch nf_unregister_net_hooks synchronize_net calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 42/47] netfilter: debug: check for sorted array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 44/47] netfilter: conntrack: don't log "invalid" icmpv6 connections
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 45/47] netfilter: Remove NFDEBUG()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 41/47] netfilter: convert hook list to an array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 40/47] netfilter: fix a few (harmless) sparse warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 37/47] netfilter: conntrack: print_conntrack only needed if CONFIG_NF_CONNTRACK_PROCFS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 36/47] netfilter: conntrack: place print_tuple in procfs part
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 35/47] netfilter: conntrack: reduce size of l4protocol trackers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 34/47] netfilter: conntrack: remove protocol name from l4proto struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 33/47] netfilter: conntrack: remove protocol name from l3proto struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 30/47] netfilter: rt: add support to fetch path mss
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/47] netfilter: constify nf_loginfo structures
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] src: get rid of printf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] src: add flags fo nft_ctx_new
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/47] netfilter: conntrack: do not enable connection tracking unless needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/47] netfilter: xtables: Remove unused variable in compat_copy_entry_from_user()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/47] netfilter: constify nf_conntrack_l3/4proto parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/47] netfilter: nf_tables: No need to check chain existence when tracing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/47] netlink: Introduce nla_strdup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/47] netfilter: nf_hook_ops structs can be const
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/47] netfilter: nf_tables: Allow chain name of up to 255 chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/47] netfilter: nf_tables: Allow table names of up to 255 chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/47] netfilter: nf_tables: Allow object names of up to 255 chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/47] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/47] netfilter: nf_tables: Allow set names of up to 255 chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/47] netfilter: nfnetlink_queue: don't queue dying conntracks to userspace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/47] netfilter: conntrack: destroy functions need to free queued packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/47] netfilter: nf_tables: fib: use skb_header_pointer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/47] netfilter: Remove duplicated rcu_read_lock.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/47] netfilter: nf_tables: Attach process info to NFT_MSG_NEWGEN notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/47] netfilter: expect: add to hash table after expect init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/47] netfilter: expect: add and use nf_ct_expect_iterate helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/47] netfilter: nf_tables: add fib expression to the netdev family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/47] netfilter: conntrack: Change to deferable work queue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/47] netfilter: add and use nf_ct_unconfirmed_destroy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/47] netfilter: nf_tables: keep chain counters away from hot path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/47] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 2/2] src: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH 1/2] src: add flags fo nft_ctx_new
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH 0/2] libnftables preparation work
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH nf-next 3/5] netlink: add NLM_F_NONREC flag for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: nf_tables: support for recursive chain deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: nf_tables: use NLM_F_NONREC for deletion requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: nf_tables: add nf_tables_addchain()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: nf_tables: add nf_tables_updchain()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH V2] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] netfilter: ipt_CLUSTERIP: Fix potential deadlock when CLUSTERIP target is inserted
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• On ulogd2, nfacct and sqlite3
  • From: DEXTER <mydexterid@xxxxxxxxx>
• [nft PATCH V2] tests: shell: Add tests for json import
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH nf] netfilter: xtables: add scheduling opportunity in get_counters
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• [PATCH nf] netfilter: xtables: add scheduling opportunity in get_counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/3] src: move nf_sock into nft_ctx structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] src: add nft_ctx_netlink_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] netlink: remove nfsock_open()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] src: move nf_sock into nft_ctx structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_nat: don't bug when mapping already exists
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft v2 00/18] introducing libnftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• hi, any update on bug id 1177, ulogd, export 'ct.zone' field?
  • From: Alex Guo <alexand.guo@xxxxxxxxxxx>
• [PATCH] netfilter: nat: constify rhashtable_params
  • From: Arvind Yadav <arvind.yadav.cs@xxxxxxxxx>
• Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 00/18] introducing libnftables
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nf-next] net: Replace NF_CT_ASSERT() with WARN_ON().
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Re: [PATCH] examples: Fix memory leaks detected by Valgrind
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH] examples: Fix memory leaks detected by Valgrind
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH] examples: Fix memory leaks detected by Valgrind
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [PATCH nf-next] netfilter: remove unused hooknum arg from packet functions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 1/2] nft.8: Fix and enhance synopsis section
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/7] bridge: make ebt_table const
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 5/7] RDS: make rhashtable_params const
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 4/7] ipv4: make net_protocol const
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nft] tests: py: add tests for limit stateful object
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [nft PATCH 1/2] nft.8: Fix and enhance synopsis section
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH RFC 2/2] nft.8: Make use of synopfragment in synopsis section
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] net: netfilter: Remove NFDEBUG.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: convert expr_rt byteorder when evaluating statment arg
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: rt: account for tcp header size too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_conntrack: remove unused code in nf_conntrack_proto_generic.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: don't log "invalid" icmpv6 connections
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/3] netfilter: convert hook list to an array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: fix a few (harmless) sparse warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] parser: Fix memleaks for STRING token (and derived ones)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: convert expr_rt byteorder when evaluating statment arg
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: rt: account for tcp header size too
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_conntrack: remove unused code in nf_conntrack_proto_generic.c
  • From: Davide Caratti <dcaratti@xxxxxxxxxx>
• Re: netfilter fixes for 4.12.y tree
  • From: Greg KH <greg@xxxxxxxxx>
• libnetfilter_queue 1.0.3 docs
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: libnetfilter_queue & multithreading & 1 queue freezing
  • From: Oleg <lego12239@xxxxxxxxx>
• libnetfilter_queue 1.0.3
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: NFQUEUE --queue-balance
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: libnetfilter_queue & multithreading & 1 queue freezing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: NFQUEUE --queue-balance
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nftables] netlink_linearize: skip set element expression in set statement key
  • From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
• NFQUEUE --queue-balance
  • From: Oleg <lego12239@xxxxxxxxx>
• libnetfilter_queue & multithreading & 1 queue freezing
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: [PATCH] netfilter: ipv4: nf_defrag: constify nf_hook_ops
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: ipv6: nf_defrag: constify nf_hook_ops
  • From: Arvind Yadav <arvind.yadav.cs@xxxxxxxxx>
• [PATCH] netfilter: ipv4: nf_defrag: constify nf_hook_ops
  • From: Arvind Yadav <arvind.yadav.cs@xxxxxxxxx>
• Re: [PATCH 3/7] ieee802154: 6lowpan: make header_ops const
  • From: Marcel Holtmann <marcel@xxxxxxxxxxxx>
• Re: [PATCH 5/7] RDS: make rhashtable_params const
  • From: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
• Re: [PATCH 6/7] netfilter: nat: make rhashtable_params const
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 7/7] SUNRPC: make kvec const
  • From: Jeff Layton <jlayton@xxxxxxxxxx>
• Re: [PATCH 3/7] ieee802154: 6lowpan: make header_ops const
  • From: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
• [PATCH 1/7] Bluetooth: 6lowpan: make header_ops const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 2/7] bridge: make ebt_table const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 7/7] SUNRPC: make kvec const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 6/7] netfilter: nat: make rhashtable_params const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 5/7] RDS: make rhashtable_params const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 4/7] ipv4: make net_protocol const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 3/7] ieee802154: 6lowpan: make header_ops const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• [PATCH 0/7] net: make some structures const
  • From: Bhumika Goyal <bhumirks@xxxxxxxxx>
• Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATH nft v2 04/18] libnftables: add context new and free
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH] parser: Fix memleaks for STRING token (and derived ones)
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH nf-next] net: netfilter: Remove NFDEBUG.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [PATCH nf-next] netfilter: conntrack: don't log "invalid" icmpv6 connections
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/5] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/4] Memleak fixes and some minor cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 3/4] scanner: Make use of yylex_init_extra()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/4] scanner: Fix for wrong parameter type of scanner_destroy()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/4] scanner: Fix for memleak due to unclosed file pointer
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/4] parser: Fix for memleak when commands fail
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/4] Memleak fixes and some minor cleanups
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH][V2] netfilter: fix indent on if statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/7] netfilter: conntrack: constify protocol trackers, part 1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH] tests: don't fail on modprobe since the driver might be built-in
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nf_nat_h323: fix logical-not-parentheses warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nf_nat_h323: fix logical-not-parentheses warning
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [nft PATCH] Fix debug_proto_ctx()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] Fix debug_proto_ctx()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 11/18] libnftables: move iface_cache_release to deinit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: remove unused hooknum arg from packet functions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATH nft v2 04/18] libnftables: add context new and free
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 01/18] mnl: fix error handling in mnl_batch_talk
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrackd: cthelper: ssdp: fix build with musl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrack: Show multiple CPUs stats from proc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: ipt_CLUSTERIP: fix use-after-free of proc entry
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5] netfilter: nf_tables: Fix nft limit burst handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/5] netfilter: check for seqadj ext existence before adding it in nf_nat_setup_info
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: nft_compat: check extension hook mask only if set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/5] netfilter: x_tables: Fix use-after-free in ipt_do_table.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch nf] netfilter: nf_tables: Fix nft limit burst handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: Initialize struct stmt in _match and _target functions.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: check for seqadj ext existence before adding it in nf_nat_setup_info
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• netfilter fixes for 4.12.y tree
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Davide Caratti <dcaratti@xxxxxxxxxx>
• Re: [PATCH V2] tests: json: Add test cases for json format
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH V2] tests: json: Add test cases for json format
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH V2] tests: json: Add test cases for json format
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] src: limit stateful object support
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [PATCH] tests: json: Add test cases for json format
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [PATCH V2] tests: json: Add test cases for json format
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH nft 1/2] parser: fix typo
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v2 1/3] netfilter: convert hook list to an array
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: limit stateful object support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] files: add arp filter and add in/output to nat skeleton
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v2] files: add arp filter and add in/output to nat skeleton
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: limit stateful object support
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: convert hook list to an array
  • From: Aaron Conole <aconole@xxxxxxxxxx>
• [PATCH nft 2/2] src: limit stateful object support
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 1/2] parser: fix typo
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH libnftnl] src: limit stateful object support
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: nft_limit: replace pkt_bytes with bytes
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: nft_limit: add stateful object type
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: nf_tables: add select_ops for stateful objects
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [nft PATCH] Keep cache in struct nft_ctx
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: convert hook list to an array
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH nft] files: add arp filter and add in/output to nat skeleton
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: core: batch nf_unregister_net_hooks synchronize_net calls
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: debug: check for sorted array
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: convert hook list to an array
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: convert hook list to an array
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] tests: json: Add test cases for json format
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrackd: cthelper: ssdp: fix build with musl
  • From: Stijn Tintel <stijn@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 00/18] introducing libnftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 6/6] src: add debugging mask to context structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/6] mnl: pass struct netlink_ctx to mnl_nft_socket_sendmsg()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/6] src: add struct mnl_ctx
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/6] src: remove ifdef DEBUG pollution
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/6] src: add maximum number of parser errors to struct nft_ctx
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/6] src: add include_paths to struct nft_ctx
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/6] Remove more global variables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/3] tests: add tcp option set support / tcp mss mangling test cases
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/3] rt: add path mtu support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] src: add tcp options set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 1/3] src: add tcp options set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nft 0/3] nftables: tcp option set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] rt: add path mtu support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/3] tests: add tcp option set support / tcp mss mangling test cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH] Keep cache in struct nft_ctx
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] tests: json: Add test cases for json format
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH] tests: json: Add test cases for json format
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 00/18] introducing libnftables
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [patch nf] netfilter: nf_tables: Fix nft limit burst handling
  • From: Joe Stringer <joe@xxxxxxx>
• [PATCH] tests: json: Add test cases for json format
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [patch nf] netfilter: nf_tables: Fix nft limit burst handling
  • From: Andy Zhou <azhou@xxxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATH nft v2 08/18] libnftables: add missing variables to library
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATH nft v2 01/18] mnl: fix error handling in mnl_batch_talk
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH nft] src: Initialize struct stmt in _match and _target functions.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrack: Show multiple CPUs stats from proc
  • From: Chieh-Min Wang <chiehmin18@xxxxxxxxx>
• Re: [PATCH nft 7/7] tests: add tcp option set support / tcp mss mangling test cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 5/7] src: implement shortcut for tcp mss size mangling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: fix a few (harmless) sparse warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 7/7] tests: add tcp option set support / tcp mss mangling test cases
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 6/7] rt: add path mss support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/7] src: implement shortcut for tcp mss size mangling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 4/7] src: add tcp options set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl 2/7] rt: tcpmss get support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl 1/7] exthdr: tcp option set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH nft v2 00/18] introducing libnftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 17/18] libnftables: suppress unused global variables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 11/18] libnftables: move iface_cache_release to deinit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 10/18] libnftables: add a nft_cache to nft_ctx
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 08/18] libnftables: add missing variables to library
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATH 01/16] libnftables: introduce library
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 04/18] libnftables: add context new and free
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 02/18] erec: add function to free list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATH nft v2 01/18] mnl: fix error handling in mnl_batch_talk
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net 2/2] netfilter: ipvs: do not create conn for ABORT packet in sctp_conn_schedule
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH net 1/2] netfilter: ipvs: fix the issue that sctp_conn_schedule drops non-INIT packet
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH nft] src: Initialize struct stmt in _match and _target functions.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 7/7] tests: add tcp option set support / tcp mss mangling test cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 6/7] rt: add path mss support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 5/7] src: implement shortcut for tcp mss size mangling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/7] src: add tcp options set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/7] exthdr: move print of tcp options to tcpopt.c
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 2/7] rt: tcpmss get support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 1/7] exthdr: tcp option set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/7] tcp mss mangling support
  • From: Florian Westphal <fw@xxxxxxxxx>
• How to contribute to documentation?
  • From: Jeff Klesky <netfilter@xxxxxxxxxxxx>
• Re: [nft PATH 01/16] libnftables: introduce library
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATH nft v2 13/18] libnftables: add nft_context_set_print
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 11/18] libnftables: move iface_cache_release to deinit
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 14/18] libnftables: transaction support
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 15/18] libnftables: set max_errors to 1 in library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 10/18] libnftables: add a nft_cache to nft_ctx
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 18/18] libnftables: doxygen documentation
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 16/18] libnftables: add error handling
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 12/18] libnftables: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 17/18] libnftables: suppress unused global variables
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 09/18] libnftables: add NFT_EXIT_* to library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 08/18] libnftables: add missing variables to library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 07/18] libnftables: put nft_run in library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 06/18] libnftables: add nft_run_command_from_filename
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 04/18] libnftables: add context new and free
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 03/18] libnftables: introduce library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 01/18] mnl: fix error handling in mnl_batch_talk
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATH nft v2 02/18] erec: add function to free list
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH nft v2 00/18] introducing libnftables
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH nft-sync] fix build
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft-sync] fix build
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [RFC PATCH] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• [RFC PATCH] src: Add import command for json
  • From: Shyam Saini <mayhs11saini@xxxxxxxxx>
• Re: [PATCH nft 0/5] src: Removes unused functions.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_NFLOG: use nf_log_packet instead of nfulnl_log_packet.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: nftables: tcp mss mangling support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: use audit_log()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: use audit_log()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: remove prototype of netfilter_queue_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: connlimit: merge root4 and root6.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATH 06/16] libnftables: add missing variable to library
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATH 15/16] libnftables: add error handling
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATH 10/16] libnftables: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATH 01/16] libnftables: introduce library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH 2/2] netfilter/libxt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Finding the PID of a process from sk_buff
  • From: Hyunseok <hyunseok@xxxxxxxx>
• Re: [nft PATCH 0/2] First attempt at synopsis fixup
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATH 01/16] libnftables: introduce library
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATH 01/16] libnftables: introduce library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH RFC 2/2] nft.8: Make use of synopfragment in synopsis section
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/2] nft.8: Fix and enhance synopsis section
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/2] First attempt at synopsis fixup
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• Re: [nft PATCH 0/16] introduce libnftables
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 0/16] introduce libnftables
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATH 15/16] libnftables: add error handling
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATH 12/16] libnftables: transaction support
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] tests: add test case for ttl/protocol set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATH 10/16] libnftables: get rid of printf
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 1/2] evaluate: shift immediate value when adjusting size for csum fixup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATH 08/16] libnftables: add a nft_cache to nft_ctx
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATH 06/16] libnftables: add missing variable to library
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATH 03/16] libnftables: add nft_run_command_from_buffer
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATH 02/16] libnftables: add context new and free
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 0/16] introduce libnftables
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [nft PATH 01/16] libnftables: introduce library
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 0/16] introduce libnftables
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• [PATCH] netfilter: ipset: ipset list may return wrong member count for set with timeout
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [nft PATH 12/16] libnftables: transaction support
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 06/16] libnftables: add missing variable to library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH 0/16] introduce libnftables
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 10/16] libnftables: get rid of printf
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 08/16] libnftables: add a nft_cache to nft_ctx
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 11/16] libnftables: add nft_context_set_print
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 07/16] libnftables: add NFT_EXIT_* to library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 01/16] libnftables: introduce library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 03/16] libnftables: add nft_run_command_from_buffer
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 13/16] libnftables: set max_errors to 1 in library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 04/16] libnftables: add nft_run_command_from_filename
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 14/16] erec: add function to free list
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 02/16] libnftables: add context new and free
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 16/16] libnftables: basic doxygen documentation
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 05/16] libnftables: put nft_run in library
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 15/16] libnftables: add error handling
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATH 09/16] libnftables: move iface_cache_release to deinit
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH nft 2/2] tests: add test case for ttl/protocol set
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/2] evaluate: shift immediate value when adjusting size for csum fixup
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 5/5] src: mnl: Remove unused functions.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 4/5] src: netlink: Remove unused functions.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 3/5] src: cli: Remove cli_display() function.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 2/5] src: gmputil: Remove mpz_get_be64() function.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 1/5] src: Remove xt_stmt_() functions.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nft 0/5] src: Removes unused functions.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [conntrack-tools PATCH] tests: don't fail on modprobe since the driver might be built-in
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2] echo: Fix for added delays in rule updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: make netlink sequence number non-static
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v2] echo: Fix for added delays in rule updates
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 3/4] echo: Fix for added delays in rule updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/4] mnl: Drop --echo support for non-batch calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/4] echo: Fix for added delays in rule updates
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 3/4] echo: Fix for added delays in rule updates
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 1/4] mnl: Drop --echo support for non-batch calls
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 4/4] tests: Merge monitor and echo test suites
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/4] echo: Fix for added delays in rule updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/4] netlink: Fix segfault when using --echo flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/4] mnl: Drop --echo support for non-batch calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix indent on in statements
  • From: Colin Ian King <colin.king@xxxxxxxxxxxxx>
• [PATCH][V2] netfilter: fix indent on if statements
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix indent on in statements
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix indent on in statements
  • From: walter harms <wharms@xxxxxx>
• [PATCH] netfilter: fix indent on in statements
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• [nft PATCH 0/4] A bunch of fixes for echo output
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/4] tests: Merge monitor and echo test suites
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/4] netlink: Fix segfault when using --echo flag
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/4] mnl: Drop --echo support for non-batch calls
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/4] echo: Fix for added delays in rule updates
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] man: use https for wiki link
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nf_nat_h323: fix logical-not-parentheses warning
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• [PATCH] man: use https for wiki link
  • From: Daniel Kahn Gillmor <dkg@xxxxxxxxxxxxxxxxx>
• Re: [nft PATCH v4 0/3] Implement --echo option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 0/3] Implement --echo option
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 0/3] Implement --echo option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 0/3] Implement --echo option
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 2/3] Implement --echo option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] man: Fix typo.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables 2/2] xtables-compat: fix memory leak when listing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables 1/2] xtables-compat-restore: fix several memory leaks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH] conntrackd: remove warning for -S
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: rule: Remove variable cache_initialized.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 0/3] Implement --echo option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: rule: Remove variable cache_initialized.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH nf-next 7/7] netfilter: conntrack: make protocol tracker pointers const
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/7] netfilter: conntrack: remove protocol name from l4proto struct
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/7] netfilter: conntrack: reduce size of l4protocol trackers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 6/7] netfilter: conntrack: print_conntrack only needed if CONFIG_NF_CONNTRACK_PROCFS
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 5/7] netfilter: conntrack: place print_tuple in procfs part
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/7] netfilter: conntrack: compute l3proto nla size at compile time
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/7] netfilter: conntrack: remove protocol name from l3proto struct
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/7] netfilter: conntrack: constify protocol trackers, part 1
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] netfilter: nf_nat_h323: fix logical-not-parentheses warning
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_nat_h323: fix logical-not-parentheses warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: RFC: Synopsis syntax change in nft.8
  • From: Phil Sutter <phil@xxxxxx>
• Re: RFC: Synopsis syntax change in nft.8
  • From: Phil Sutter <phil@xxxxxx>
• Re: RFC: Synopsis syntax change in nft.8
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: RFC: Synopsis syntax change in nft.8
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: RFC: Synopsis syntax change in nft.8
  • From: Florian Westphal <fw@xxxxxxxxx>
• RFC: Synopsis syntax change in nft.8
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/6] nft.8: Describe conntrack types
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 5/6] nft.8: Describe base chain details
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/6] nft.8: Document operations on ruleset
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/6] nft.8: Review reject statement description
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/6] A bunch of man page enhancements
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 6/6] nft.8: Complete short description of arp family
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/6] nft.8: Add note about supported hooks for bridge family
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] src: place object cache in context structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] netfilter: check for seqadj ext existence before adding it in nf_nat_setup_info
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [conntrack-tools PATCH] conntrackd: remove warning for -S
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [nft PATCH v4 1/3] netlink: Pass nlmsg flags from rule.c
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 0/3] Implement --echo option
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 2/3] Implement --echo option
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v4 3/3] tests: Add a simple test suite for --echo option
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: xt_NFLOG: use nf_log_packet instead of nfulnl_log_packet.
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_nat_h323: fix logical-not-parentheses warning
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• [PATCH iptables 2/2] xtables-compat: fix memory leak when listing
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH iptables 1/2] xtables-compat-restore: fix several memory leaks
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [PATCH nf-next 4/4] netfilter: rt: add support to fetch path mss
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 4/4] netfilter: rt: add support to fetch path mss
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 4/4] netfilter: rt: add support to fetch path mss
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH nf-next 4/4] netfilter: rt: add support to fetch path mss
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/4] netfilter: exthdr: tcp option set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/4] netfilter: exthdr: split netlink dump function
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/4] netfilter: exthdr: factor out tcp option access
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/4] netfilter: nftables: tcp mss mangling support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: [nft PATCH] mnl: Remove dead code
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH] netfilter: ebtables: use audit_log()
  • From: Geliang Tang <geliangtang@xxxxxxxxx>
• [PATCH] netfilter: xtables: use audit_log()
  • From: Geliang Tang <geliangtang@xxxxxxxxx>
• [PATCH nft] man: Fix typo.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Re: nftables: Testcase crashes the kernel
  • From: Florian Westphal <fw@xxxxxxxxx>
• nftables: Testcase crashes the kernel
  • From: Phil Sutter <phil@xxxxxx>
• net/netfilter/nf_tables_api.c: BUG_ON(ctx->table->use > 0)
  • From: Michael Tirado <mtirado418@xxxxxxxxx>
• libnetfilter_queue & nfq_errno
  • From: Oleg <lego12239@xxxxxxxxx>
• libnetfilter_queue new versions
  • From: Oleg <lego12239@xxxxxxxxx>
• [PATCH] netfilter: remove prototype of netfilter_queue_init
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [nft PATCH v3 3/4] Implement --echo option
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 2/4] netlink: Pass nlmsg flags from rule.c
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v3 3/4] Implement --echo option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 2/4] netlink: Pass nlmsg flags from rule.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 3/4] Implement --echo option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 2/4] netlink: Pass nlmsg flags from rule.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 1/4] mnl: Consolidate mnl_batch_talk() parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xtables: Remove unused variable in compat_copy_entry_from_user()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: constify nf_loginfo structures
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1 v3 nf-next] netfilter: constify nf_conntrack_l3/4proto parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: handle rule tracing as an monitor object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: connlimit: merge root4 and root6.
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf-next] netfilter: constify nf_loginfo structures
  • From: Julia Lawall <Julia.Lawall@xxxxxxx>
• [PATCH 0/1 v3 nf-next] constify nf_conntrack_l3/4proto parameters
  • From: Julia Lawall <Julia.Lawall@xxxxxxx>
• [PATCH 1/1 v3 nf-next] netfilter: constify nf_conntrack_l3/4proto parameters
  • From: Julia Lawall <Julia.Lawall@xxxxxxx>
• RE: [PATCH] netfilter: fix stringop-overflow warning with UBSAN
  • From: David Laight <David.Laight@xxxxxxxxxx>
• [PATCH nft v4] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_ecn: Add missing hotdrop mark.
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH v2 tip/core/rcu 02/10] net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/1 v2] netfilter: constify nf_conntrack_l3/4proto parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_nat_h323: fix logical-not-parentheses warning
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [PATCH V3] netfilter: x_tables: Fix use-after-free in ipt_do_table.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_ecn: Add missing hotdrop mark.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: do not enable connection tracking unless needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf-next] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>