Linux TCP/IP Netfilter Devel
[Prev Page][Next Page]
- Re: [PATCH 2/2] libxtables: xtables: Use getnameinfo()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/2] libxtables: xtables: remove unnecessary debug code
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [ANNOUNCE] libnftnl 1.0.7 release
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] expression: Show the base which pre-defined constants are displayed
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- [PATCH libnftnl] build: update LIBVERSION to prepare a new release
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [-stable 4.8.y] Revert NAT conversion to rhashtable
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK
- From: Joseph Conley <joseph.j.conley@xxxxxxxxx>
- RE: libmnl compile failure.
- From: maowenan <maowenan@xxxxxxxxxx>
- Re: libmnl compile failure.
- From: Phil Sutter <phil@xxxxxx>
- Re: nftables: masquerade sets wrong source address
- From: Liping Zhang <zlpnobody@xxxxxxxxx>
- Re: [PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP
- From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
- Re: [PATCH 0/2] GTP tunneling fixes for net
- From: David Miller <davem@xxxxxxxxxxxxx>
- Re: Easy way to set NOTRACK for INPUT, FORWARD and OUTPUT independently
- Re: nftables: masquerade sets wrong source address
- From: Liping Zhang <zlpnobody@xxxxxxxxx>
- Re: Easy way to set NOTRACK for INPUT, FORWARD and OUTPUT independently
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH] netfilter: use fwmark_reflect in nf_send_reset
- From: Pau Espin Pedrol <pau.espin@xxxxxxxxxxxx>
- libmnl compile failure.
- From: maowenan <maowenan@xxxxxxxxxx>
- Re: Adding element to interval map consumes entire memory
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: Adding element to interval map consumes entire memory
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 0/2] GTP tunneling fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/2] GTP tunneling fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/2] gtp: Fix initialization of Flags octet in GTPv1 header
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/2] gtp: gtp_check_src_ms_ipv4() always return success
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: use fwmark_reflect in nf_send_reset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] netfilter: use fwmark_reflect in nf_send_reset
- From: Pau Espin Pedrol <pau.espin@xxxxxxxxxxxx>
- [PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP
- From: Xin Long <lucien.xin@xxxxxxxxx>
- Re: Adding element to interval map consumes entire memory
- From: Richard Mörbitz <richard.moerbitz@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: nft_payload: mangle ckecksum if NFT_PAYLOAD_L4CSUM_PSEUDOHDR is set
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK
- From: joseph.j.conley@xxxxxxxxx
- Re: [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers
- From: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
- [PATCH nft] netlink_linearize: fix IPv6 layer 4 checksum mangling
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] tests: py: update quota and payload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] mnl: don't send empty set elements netlink message to kernel
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: fix oob access
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH] ARM: add cmpxchg64 helper for ARMv7-M
- From: Russell King - ARM Linux <linux@xxxxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: fix oob access
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers
- From: Michał Mirosław <mirq-linux@xxxxxxxxxxxx>
- Re: [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers
- From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: fix oob access
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: Adding element to interval map consumes entire memory
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 1/2] segtree: wrong prefix expression length on interval_map_decompose()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 2/2] segtree: don't trigger error on exact overlaps
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers
- From: Michał Mirosław <mirq-linux@xxxxxxxxxxxx>
- [PATCH net-next 16/27] nfnetlink/queue: use __vlan_hwaccel helpers
- From: Michał Mirosław <mirq-linux@xxxxxxxxxxxx>
- [PATCH 2/2] libxtables: xtables: Use getnameinfo()
- From: Shyam Saini <mayhs11saini@xxxxxxxxx>
- [PATCH 1/2] libxtables: xtables: remove unnecessary debug code
- From: Shyam Saini <mayhs11saini@xxxxxxxxx>
- Re: [PATCH] libxtables: xtables.c: Use getnameinfo()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] libxtables: xtables.c: Use getnameinfo()
- From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
- Re: [PATCH] libxtables: xtables.c: Use getnameinfo()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] libxtables: xtables.c: Use getnameinfo()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH next] iptables: on revision mismatch, do not call print/save
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nft_queue: use raw_smp_processor_id()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] datatype: Display pre-defined inet_service values in decimal base
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: Adding element to interval map consumes entire memory
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nft_quota: reset quota after dump
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset
- From: Arnd Bergmann <arnd@xxxxxxxx>
- Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset
- From: David Miller <davem@xxxxxxxxxxxxx>
- Adding element to interval map consumes entire memory
- From: Richard Mörbitz <richard.moerbitz@xxxxxxxxxxxxx>
- [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] datatype: Display pre-defined inet_service values in decimal base
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft v3] datatype: Display pre-defined inet_service values in host byte order
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] extensions: libxt_bpf: support ebpf pinned objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] ARM: add cmpxchg64 helper for ARMv7-M
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] ARM: add cmpxchg64 helper for ARMv7-M
- From: Arnd Bergmann <arnd@xxxxxxxx>
- RFC: nft.8 review
- From: Phil Sutter <phil@xxxxxx>
- [PATCH nft v3] datatype: Display pre-defined inet_service values in host byte order
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- Question on match pid owner
- From: Christos <christos@xxxxxxxxxxx>
- Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH libnftnl 7/7] quota: support for consumed bytes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 3/7] expr: add stateful object reference expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 2/7] src: support for stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 6/7] expr: objref: add support for stateful object maps
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 5/7] set_elem: add NFTNL_SET_ELEM_OBJREF attribute
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 1/7] include: fetch stateful object updates for nf_tables.h cache copy
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 4/7] set: add NFTNL_SET_OBJ_TYPE attribute
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] libxtables: xtables.c: Use getnameinfo()
- From: Shyam Saini <mayhs11saini@xxxxxxxxx>
- Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects
- From: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
- [PATCH next] iptables: on revision mismatch, do not call print/save
- From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
- [PATCH] extensions: libxt_bpf: support ebpf pinned objects
- From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
- Re: [PATCH nft v2] datatype: Display pre-defined inet_service values in host byte order
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft v2] datatype: Display pre-defined inet_service values in host byte order
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- [nf-next:master 36/49] ERROR: "__cmpxchg_u64" [net/netfilter/nft_counter.ko] undefined!
- From: kbuild test robot <fengguang.wu@xxxxxxxxx>
- Re: [PATCH 00/50] Netfilter/IPVS updates for net-next
- From: David Miller <davem@xxxxxxxxxxxxx>
- [PATCH 00/50] Netfilter/IPVS updates for net-next
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 08/50] netfilter: nfnetlink_log: add "nf-logger-5-1" module alias name
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 06/50] netfilter: built-in NAT support for UDPlite
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 09/50] netfilter: nf_conntrack_tuple_common.h: fix #include
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 11/50] netfilter: conntrack: built-in support for SCTP
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 14/50] netfilter: add and use nf_ct_netns_get/put
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 24/50] netfilter: x_tables: pass xt_counters struct to counter allocator
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 12/50] netfilter: conntrack: built-in support for UDPlite
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 15/50] netfilter: nat: add dependencies on conntrack module
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 16/50] netfilter: nf_tables: add conntrack dependencies for nat/masq/redir expressions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 18/50] netfilter: conntrack: add nf_conntrack_default_on sysctl
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 22/50] netfilter: convert while loops to for loops
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 27/50] netfilter: nft_fib_ipv4: initialize *dest to zero
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 26/50] netfilter: nft_fib: convert htonl to ntohl properly
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 29/50] netfilter: xt_multiport: Fix wrong unmatch result with multiple ports
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 28/50] netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 23/50] netfilter: x_tables: pass xt_counters struct instead of packet counter
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 19/50] netfilter: defrag: only register defrag functionality if needed
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 30/50] netfilter: ingress: translate 0 nf_hook_slow retval to -1
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 25/50] netfilter: x_tables: pack percpu counter allocations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 31/50] netfilter: add and use nf_fwd_netdev_egress
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 20/50] netfilter: introduce accessor functions for hook entries
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 32/50] netfilter: nf_tables: add stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 34/50] netfilter: nft_quota: add stateful object type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 38/50] netfilter: nf_tables: notify internal updates of stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 39/50] netfilter: nft_quota: add depleted flag for objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 40/50] netfilter: nf_tables: add stateful object reference to set elements
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 41/50] netfilter: nft_objref: support for stateful object maps
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 21/50] netfilter: decouple nf_hook_entry and nf_hook_ops
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 17/50] netfilter: conntrack: register hooks in netns when needed by ruleset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 36/50] netfilter: nft_quota: dump consumed quota
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 43/50] netfilter: rpfilter: bypass ipv4 lbcast packets with zeronet source
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 33/50] netfilter: nft_counter: add stateful object type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 42/50] netfilter: nf_tables: allow to filter stateful object dumps by type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 46/50] netfilter: nft_set: introduce nft_{hash, rbtree}_deactivate_one()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 44/50] netfilter: nat: skip checksum on offload SCTP packets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 45/50] netfilter: nf_tables: constify struct nft_ctx * parameter in nft_trans_alloc()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 49/50] netfilter: xt_bpf: support ebpf
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 48/50] netfilter: x_tables: avoid warn and OOM killer on vmalloc call
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 50/50] netfilter: nft_quota: allow to restore consumed quota
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 47/50] netfilter: nf_tables: support for set flushing
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 35/50] netfilter: nf_tables: add stateful object reference expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 13/50] netfilter: conntrack: remove unused init_net hook
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 10/50] netfilter: conntrack: built-in support for DCCP
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 05/50] netfilter: built-in NAT support for SCTP
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 04/50] netfilter: built-in NAT support for DCCP
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 07/50] netfilter: nf_log: do not assume ethernet header in netdev family
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 03/50] netfilter: update Arturo Borrero Gonzalez email address
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 02/50] ipvs: Decrement ttl
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 01/50] ipvs: Use IS_ERR_OR_NULL(svc) instead of IS_ERR(svc) || svc == NULL
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft v2] datatype: Display pre-defined inet_service values in host byte order
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft v2] datatype: Display pre-defined inet_service values in host byte order
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- [nf-next:master 36/48] net/netfilter/nft_counter.c:131:9: error: implicit declaration of function 'cmpxchg64'
- From: kbuild test robot <fengguang.wu@xxxxxxxxx>
- [PATCH nf-next] netfilter: nft_quota: allow to restore consumed quota
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next v2] netfilter: xt_bpf: support ebpf
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] netfilter: nft_counter: use cmpxchg64 instead of xchg
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
- [PATCH nf-next v2] netfilter: xt_bpf: support ebpf
- From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
- Rebasing nf-next
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nf_tables: silence gcc warning with stateful object maps
- From: kbuild test robot <lkp@xxxxxxxxx>
- [nf-next:master 37/48] net/netfilter/nft_counter.c:125:21: error: call to '__xchg_wrong_size' declared with attribute error: Bad argument size for xchg
- From: kbuild test robot <fengguang.wu@xxxxxxxxx>
- [nf-next:master 18/48] net/ipv6/netfilter/nf_defrag_ipv6_hooks.c:94:9: error: 'struct net' has no member named 'ct'
- From: kbuild test robot <fengguang.wu@xxxxxxxxx>
- [PATCH nf-next] netfilter: add list element test to br_netfilter_hooks
- From: Aaron Conole <aconole@xxxxxxxxxx>
- [PATCH nf-next] netfilter: nft_quota: don't read quota twice on reset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 1/2] netfilter: nf_tables: restore check for NFTA_SET_ELEM_LIST_ELEMENTS
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 2/2] netfilter: nft_counter: move counter reset into separated function
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [bug report] netfilter: convert while loops to for loops
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- [nf-next:master 37/48] net/netfilter/nft_counter.c:128:18: warning: 'packets' may be used uninitialized in this function
- From: kbuild test robot <fengguang.wu@xxxxxxxxx>
- Re: [bug report] netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2] netfilter: nf_tables: silence gcc warning with stateful object maps
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nf_tables: silence gcc warning with stateful object maps
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [bug report] netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [PATCH v2] netfilter: avoid warn and OOM killer on vmalloc call
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nf-next:master 41/48] net/netfilter/nf_tables_api.c:3003:15: warning: 'objtype' may be used uninitialized in this function
- From: kbuild test robot <fengguang.wu@xxxxxxxxx>
- Re: [bug report] netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [bug report] netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [PATCH nft] src: add support to flush sets
- From: Anatole Denis <anatole@xxxxxxxxx>
- Re: [PATCH nft] src: add support to flush sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] NAT: skip checksum on offload SCTP packets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 1/2] netfilter: conntrack: merge udp and udplite helpers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: rpfilter: bypass ipv4 lbcast packets with zeronet source
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 1/2] netfilter: conntrack: merge udp and udplite helpers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: ingress: translate 0 nf_hook_slow retval to -EINPROGRESS
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nft_payload: restrict l4 checksum updates to l3 header mangling
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: fix build failure with CONNTRACK=n NF_DEFRAG=y
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] datatype: Display pre-defined inet_service values in host byte order
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Easy way to set NOTRACK for INPUT, FORWARD and OUTPUT independently
- Re: Easy way to set NOTRACK for INPUT, FORWARD and OUTPUT independently
- [PATCH nft] datatype: Display pre-defined inet_service values in host byte order
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Willem de Bruijn <willemb@xxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft] src: add support to flush sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl] set_elem: nftnl_set_elems_nlmsg_build_payload_iter()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 3/3] netfilter: nf_tables: support for set flushing
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 2/3] netfilter: nft_set: introduce nft_{hash,rbtree}_deactivate_one()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 1/3] netfilter: nf_tables: constify struct nft_ctx * parameter in nft_trans_alloc()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] parser: Add glob support to include directive
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Kernel panic in netfilter 4.8.10 probably on conntrack -L
- From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH nf-next] netfilter: xt_bpf: support ebpf
- From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
- Re: [PATCH v3 net-next] net_sched: gen_estimator: complete rewrite of rate estimators
- From: David Miller <davem@xxxxxxxxxxxxx>
- [PATCH nf-next] NAT: skip checksum on offload SCTP packets
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nft] parser: Add glob support to include directive
- From: Kohei Suzuki <eagletmt@xxxxxxxxx>
- linux-next: build warnings after merge of the netfilter-next tree
- From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: fix build failure with CONNTRACK=n NF_DEFRAG=y
- From: Florian Westphal <fw@xxxxxxxxx>
- [nf-next:master 18/28] net/ipv4/netfilter/nf_defrag_ipv4.c:110:9: error: 'struct net' has no member named 'ct'
- From: kbuild test robot <fengguang.wu@xxxxxxxxx>
- Re: [conntrack-tools PATCH] config: drop old/obsolete/deprecated conntrackd.conf config options
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [conntrack-tools PATCH] systemd: fix missing log.h include
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] tests: shell: add test case for inserting element into verdict map
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [GIT PULL nf-next 0/2] IPVS Updates for v4.10
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib_ipv4: initialize *dest to zero
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib: convert htonl to ntohl properly
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next v3 1/1] netfilter: xt_multiport: Fix wrong unmatch result with multiple ports
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v4 nf-next] netfilter: allow disabling conntrack-on-by-default
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 0/3] Additional nf_hook_entry compaction
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v3 nf-next 0/3] netfilter: x_tables: pack percpu counter allocations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next v2 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nfnetlink_log: add "nf-logger-5-1" module alias name
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nf_log: do not assume ethernet header in netdev family
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next v2 0/4] netfilter: built-in conntrack support for DCCP, SCTP, UDPlite
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v3 net-next] net_sched: gen_estimator: complete rewrite of rate estimators
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: [PATCN v2 net-next] net_sched: gen_estimator: complete rewrite of rate estimators
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: [PATCN net-next] net_sched: gen_estimator: complete rewrite of rate estimators
- From: kbuild test robot <lkp@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: rpfilter: bypass ipv4 lbcast packets with zeronet source
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCN v2 net-next] net_sched: gen_estimator: complete rewrite of rate estimators
- From: kbuild test robot <lkp@xxxxxxxxx>
- Re: [PATCN net-next] net_sched: gen_estimator: complete rewrite of rate estimators
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCN net-next] net_sched: gen_estimator: complete rewrite of rate estimators
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCN v2 net-next] net_sched: gen_estimator: complete rewrite of rate estimators
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH nf-next] netfilter: rpfilter: bypass ipv4 lbcast packets with zeronet source
- From: Liping Zhang <zlpnobody@xxxxxxx>
- Re: [PATCH nf-next 1/2] netfilter: conntrack: merge udp and udplite helpers
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 1/2] netfilter: conntrack: merge udp and udplite helpers
- From: kbuild test robot <lkp@xxxxxxxxx>
- [PATCH nf-next 2/2] netfilter: nat: merge udp and udplite helpers
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 1/2] netfilter: conntrack: merge udp and udplite helpers
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 0/2] netfilter: merge udp and udplite helpers
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v2,nf-next 09/11] netfilter: nf_tables: add stateful object reference to set elements
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 01/11] netfilter: nf_tables: add stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 04/11] netfilter: nf_tables: add stateful object reference expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 07/11] netfilter: nft_quota: dump consumed quota
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 02/11] netfilter: nft_counter: add stateful object type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 11/11] netfilter: nf_tables: allow to filter stateful object dumps by type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 08/11] netfilter: nft_quota: add depleted flag for objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 10/11] netfilter: nft_objref: support for stateful object maps
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 06/11] netfilter: nf_tables: notify internal updates of stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 05/11] netfilter: nf_tables: atomic dump and reset for stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 03/11] netfilter: nft_quota: add stateful object type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2,nf-next 00/11] nf_tables: add stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [conntrack-tools PATCH] config: drop old/obsolete/deprecated conntrackd.conf config options
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- [conntrack-tools PATCH] systemd: fix missing log.h include
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- [PATCH v2] netfilter: avoid warn and OOM killer on vmalloc call
- From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
- Re: [PATCH] netfilter: avoid warn and OOM on vmalloc call
- From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
- Re: [RFC nft PATCH] tests: shell: add a basic scapy test
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 00/11] Netfilter fixes for net
- From: David Miller <davem@xxxxxxxxxxxxx>
- Re: [RFC nft PATCH] tests: shell: add a basic scapy test
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- Re: [conntrack-tools PATCH] src: add log message when resync is requested by other node
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 2/2] evaluate: Update cache on flush ruleset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 1/2] rule: Introduce helper function cache_flush
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] evaluate: return ctx->table from table_lookup_global()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [RFC nft PATCH] tests: shell: add a basic scapy test
- From: Vadim Kochan <vadim4j@xxxxxxxxx>
- [PATCH nft 2/2] evaluate: Update cache on flush ruleset
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 1/2] rule: Introduce helper function cache_flush
- From: Anatole Denis <anatole@xxxxxxxxx>
- Re: [RFC nft PATCH] tests: shell: add a basic scapy test
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [conntrack-tools PATCH] src: add log message when resync is requested by other node
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- Re: [PATCH] netfilter: avoid warn and OOM on vmalloc call
- From: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
- Re: [RFC nft PATCH] tests: shell: add a basic scapy test
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- [PATCH nft] datatype: honor -nn option from inet_service_type_print()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 07/11] netfilter: nf_tables: fix inconsistent element expiration calculation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 05/11] netfilter: nat: fix cmp return value
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 08/11] netfilter: nft_range: add the missing NULL pointer check
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 04/11] netfilter: nft_hash: validate maximum value of u32 netlink hash attribute
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 10/11] netfilter: ipv6: nf_defrag: drop mangled skb on ream error
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 06/11] netfilter: nat: switch to new rhlist interface
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 11/11] netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 09/11] netfilter: nat: fix crash when conntrack entry is re-used
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 02/11] netfilter: Update nf_send_reset6 to consider L3 domain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 03/11] netfilter: fix nf_conntrack_helper documentation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 01/11] netfilter: Update ip_route_me_harder to consider L3 domain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 00/11] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH] tests: py: Test TCP flags match with parentheses
- From: Florian Westphal <fw@xxxxxxxxx>
- [nft PATCH] tests: py: Test TCP flags match with parentheses
- From: Phil Sutter <phil@xxxxxx>
- [PATCH] netfilter: avoid warn and OOM on vmalloc call
- From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
- Re: [PATCH] bison: remove old log level tokens
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] bison: remove old log level tokens
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
- Re: [PATCH nft v4] datatype: Replace getnameinfo() by internal lookup table
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nftables RFC] build: honor Scrooge McDuck in our release names
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [RFC nft PATCH] tests: shell: add a basic scapy test
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [RFC nft PATCH] tests: shell: add a basic scapy test
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib: store loopback interface to dreg when rt is local
- From: Liping Zhang <zlpnobody@xxxxxxxxx>
- [RFC nft PATCH] tests: shell: add a basic scapy test
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [PATCH] netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel
- From: Hongxu Jia <hongxu.jia@xxxxxxxxxxxxx>
- [PATCH nft v4] datatype: Replace getnameinfo() by internal lookup table
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- Re: [PATCH iptables] extensions: LOG: add log flags translation to nft
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH] tcp_xlate: Enclose LH flag values in parentheses
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH] nft_ipv{4,6}_xlate: Respect prefix lengths
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] xtables-translate: Support setting standard chain policy
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH] xtables-translate: Fix chain type when translating nat table
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] extensions: libip6t_ah: Fix translation of plain '-m ah'
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: Re : [PATCH nft 1/7] Interpret OP_NEQ against a set as OP_LOOKUP
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 2/2] tests: shell: add testcase for different defines usage
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 1/2] tests: shell: add a testcase for many defines
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH] parser_bison: Allow parens on RHS of relational_expr
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 2/7] tests/py/{arp,any}: Unmask negative set lookup
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 1/7] Interpret OP_NEQ against a set as OP_LOOKUP
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 3/3] Revert "evaluate: check for NULL datatype in rhs in lookup expr"
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 2/3] tests: Add regression test for malformed sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 1/3] evaluate: Add set to cache only when well-formed
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] expr: call expr->ops->snprintf only if defined
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: ipv6: nf_defrag: drop mangled skb on ream error
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft v3 1/2] datatype: Replace getnameinfo() by internal lookup table
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [iptables PATCH] tcp_xlate: Enclose LH flag values in parentheses
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH nft v3 2/2] datatype: Implement binary search in symbolic_constant_print()
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nft v3 2/2] datatype: Implement binary search in symbolic_constant_print()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: ipv6: nf_defrag: drop mangled skb on ream error
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH nf] netfilter: ipv6: nf_defrag: drop mangled skb on ream error
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nft v3 2/2] datatype: Implement binary search in symbolic_constant_print()
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft v3 2/2] datatype: Implement binary search in symbolic_constant_print()
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- [PATCH nft v3 1/2] datatype: Replace getnameinfo() by internal lookup table
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Neil Horman <nhorman@xxxxxxxxxxxxx>
- [nft PATCH] parser_bison: Allow parens on RHS of relational_expr
- From: Phil Sutter <phil@xxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Neil Horman <nhorman@xxxxxxxxxxxxx>
- Re : [PATCH nft 1/7] Interpret OP_NEQ against a set as OP_LOOKUP
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 3/3] Revert "evaluate: check for NULL datatype in rhs in lookup expr"
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 2/3] tests: Add regression test for malformed sets
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 1/3] evaluate: Add set to cache only when well-formed
- From: Anatole Denis <anatole@xxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Neil Horman <nhorman@xxxxxxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
- Re: net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Neil Horman <nhorman@xxxxxxxxxxxxx>
- net/sctp: vmalloc allocation failure in sctp_setsockopt/xt_alloc_table_info
- From: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
- [nft PATCH 2/2] tests: shell: add testcase for different defines usage
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nft PATCH 1/2] tests: shell: add a testcase for many defines
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib: store loopback interface to dreg when rt is local
- From: Florian Westphal <fw@xxxxxxxxx>
- [iptables PATCH] xtables-translate: Fix chain type when translating nat table
- From: Phil Sutter <phil@xxxxxx>
- Re: Problem with iptables-translate and tcp flags match
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH nft 1/7] Interpret OP_NEQ against a set as OP_LOOKUP
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: Problem with iptables-translate and tcp flags match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: SNAT --random & fully is not actually random for ips
- From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
- Re: SNAT --random & fully is not actually random for ips
- From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
- Re: SNAT --random & fully is not actually random for ips
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 1/2] netfilter: nf_tables: add chain to pktinfo structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 08/11] netfilter: nft_quota: add depleted flag for objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: SNAT --random & fully is not actually random for ips
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: ingress: translate 0 nf_hook_slow retval to -EINPROGRESS
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next] netfilter: add and use nf_fwd_netdev_egress
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next] netfilter: remove need for skb_clone in nf_fwd_netdev_egress
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 1/2] netfilter: nf_tables: add chain to pktinfo structure
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 08/11] netfilter: nft_quota: add depleted flag for objects
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nft v2 2/2] datatype: Implement binary search in symbolic_constant_print()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 1/2] netfilter: nf_tables: add chain to pktinfo structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: Filtering invalid MAC addresses
- From: Phil Sutter <phil@xxxxxx>
- Re: Filtering invalid MAC addresses
- From: Michal Kubecek <mkubecek@xxxxxxx>
- Filtering invalid MAC addresses
- From: jordi guri <jordi@xxxxxxxxxxx>
- [PATCH nft v2 2/2] datatype: Implement binary search in symbolic_constant_print()
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- [PATCH nft v2 1/2] datatype: Replace getnameinfo() by internal lookup table
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- Re: [PATCH nf-next 1/2] netfilter: nf_tables: add chain to pktinfo structure
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 11/11] netfilter: nf_tables: allow to filter stateful object dumps by type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 10/11] netfilter: nft_objref: support for stateful object maps
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 09/11] netfilter: nf_tables: add stateful object reference to set elements
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 08/11] netfilter: nft_quota: add depleted flag for objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 07/11] netfilter: nft_quota: dump consumed quota
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 06/11] netfilter: nf_tables: notify internal updates of stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 05/11] netfilter: nf_tables: atomic dump and reset for stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 04/11] netfilter: nf_tables: add stateful object reference expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 03/11] netfilter: nft_quota: add stateful object type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 02/11] netfilter: nft_counter: add stateful object type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 01/11] netfilter: nf_tables: add stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 00/11] nf_tables: add stateful objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 2/2] netfilter: nf_tables: add numeric expression type definitions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 1/2] netfilter: nf_tables: add chain to pktinfo structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH iptables] extensions: LOG: add log flags translation to nft
- From: Liping Zhang <zlpnobody@xxxxxxx>
- Problem with iptables-translate and tcp flags match
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH] nft_ipv{4,6}_xlate: Respect prefix lengths
- From: Phil Sutter <phil@xxxxxx>
- [PATCH] xtables-translate: Support setting standard chain policy
- From: Phil Sutter <phil@xxxxxx>
- [PATCH] extensions: libip6t_ah: Fix translation of plain '-m ah'
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib: store loopback interface to dreg when rt is local
- From: "Liping Zhang" <zlpnobody@xxxxxxx>
- Re: [PATCH net-next 1/1] netfilter: xt_multiport: Fix wrong unmatch result with multiple ports
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH nf-next v3 1/1] netfilter: xt_multiport: Fix wrong unmatch result with multiple ports
- From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
- Re: [PATCH net-next 1/1] netfilter: xt_multiport: Fix wrong unmatch result with multiple ports
- From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- [PATCH nf-next v2 1/1] netfilter: xt_multiport: Fix wrong unmatch result with multiple ports
- From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
- Re: [PATCH net-next 1/1] netfilter: xt_multiport: Fix wrong unmatch result with multiple ports
- From: Feng Gao <gfree.wind@xxxxxxxxx>
- [PATCH net-next 1/1] netfilter: xt_multiport: Fix wrong unmatch result with multiple ports
- From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
- Re: "random" syn packets dropped
- From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib: store loopback interface to dreg when rt is local
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib: store loopback interface to dreg when rt is local
- From: "Liping Zhang" <zlpnobody@xxxxxxx>
- [PATCH nft 4/7] tests/py/ip6: Unmark inverted set lookup testcases
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 1/7] Interpret OP_NEQ against a set as OP_LOOKUP
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 6/7] tests/py/{dccp,sctp,tcp}: Unmark inverted lookup
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 3/7] tests/py/ip: Unmark negative set lookup tests
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 5/7] tests/py{ah,esp,comp}: Unmark inverted set lookup
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 7/7] tests/py/{udp,udplite}: Unmark inverted set lookup
- From: Anatole Denis <anatole@xxxxxxxxx>
- [PATCH nft 2/7] tests/py/{arp,any}: Unmask negative set lookup
- From: Anatole Denis <anatole@xxxxxxxxx>
- Re: "random" syn packets dropped
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib: store loopback interface to dreg when rt is local
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nf_tables: validate maximum value of u32 netlink hash attribute
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: "random" syn packets dropped
- From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
- [PATCH nf-next] netfilter: nft_fib: store loopback interface to dreg when rt is local
- From: Liping Zhang <zlpnobody@xxxxxxx>
- Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib_ipv4: initialize *dest to zero
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf] netfilter: nat: fix crash when conntrack entry is re-used
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf 0/2] netfilter: nat: fix regressions introduced by rhashtable conversion
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nft_range: add the missing NULL pointer check
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft V2] src: add log flags syntax support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_fib: convert htonl to ntohl properly
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [nft PATCH 1/3] tests: shell: testcase for adding many set elements
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH] tests: shell: allow to execute a single testcase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: Update nf_send_reset6 to consider L3 domain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] src: trigger layer 4 checksum when pseudoheader fields are modified
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/2 libnftnl] expr: payload: add NFTNL_EXPR_PAYLOAD_FLAGS
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/2 libnftnl] include: refresh nf_tables.h cache copy
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] datatype: Replace getnameinfo() by internal lookup table
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] datatype: Replace getnameinfo() by internal lookup table
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- [PATCH nf-next] netfilter: nft_fib: convert htonl to ntohl properly
- From: Liping Zhang <zlpnobody@xxxxxxx>
- [PATCH nf-next] netfilter: nft_fib_ipv4: initialize *dest to zero
- From: Liping Zhang <zlpnobody@xxxxxxx>
- [PATCH nf] netfilter: nat: fix crash when conntrack entry is re-used
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v3 nf-next 3/3] netfilter: x_tables: pack percpu counter allocations
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v3 nf-next 2/3] netfilter: x_tables: pass xt_counters struct to counter allocator
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v3 nf-next 1/3] netfilter: x_tables: pass xt_counters struct instead of packet counter
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v3 nf-next 0/3] netfilter: x_tables: pack percpu counter allocations
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH v2 nf-next 3/3] netfilter: x_tables: pack percpu counter allocations
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH v2 nf-next 0/3] netfilter: x_tables: pack percpu counter allocations
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v2 nf-next 1/3] netfilter: x_tables: pass xt_counters struct instead of packet counter
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v2 nf-next 2/3] netfilter: x_tables: pass xt_counters struct to counter allocator
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v2 nf-next 3/3] netfilter: x_tables: pack percpu counter allocations
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 3/3] netfilter: x_tables: pack percpu counter allocations
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: [PATCH nf-next 2/3] netfilter: x_tables: pass xt_counters struct to counter allocator
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: [PATCH nf-next 1/3] netfilter: x_tables: pass xt_counters struct instead of packet counter
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH nf-next 3/3] netfilter: x_tables: pack percpu counter allocations
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 2/3] netfilter: x_tables: pass xt_counters struct to counter allocator
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 1/3] netfilter: x_tables: pass xt_counters struct instead of packet counter
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 0/3] netfilter: x_tables: pack percpu counter allocations
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] netfilter: nft_range: add the missing NULL pointer check
- From: Liping Zhang <zlpnobody@xxxxxxx>
- Re: "random" syn packets dropped
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: "random" syn packets dropped
- From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation
- From: Liping Zhang <zlpnobody@xxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation
- From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation
- From: Liping Zhang <zlpnobody@xxxxxxxxx>
- Re: netfilter question
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: netfilter question
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation
- From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nft_dynset: fix incorrect element expiration calculation
- From: Liping Zhang <zlpnobody@xxxxxxxxx>
- Re: [PATCH nf] netfilter: nft_dynset: fix incorrect element expiration calculation
- From: "Anders K. Pedersen | Cohaesio" <akp@xxxxxxxxxxxx>
- Re: netfilter question
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH nf] netfilter: nft_dynset: fix incorrect element expiration calculation
- From: Liping Zhang <zlpnobody@xxxxxxx>
- [PATCH nft V2] src: add log flags syntax support
- From: Liping Zhang <zlpnobody@xxxxxxx>
- Re: netfilter/nftables oops in 4.8
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- netfilter/nftables oops in 4.8
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- Re: [nft] about commit 3e5b0e406cf2b635200f9ee05ba8a158528fe622
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: netfilter question
- From: Eric Desrochers <ericd@xxxxxxxxxxxx>
- [nft] about commit 3e5b0e406cf2b635200f9ee05ba8a158528fe622
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- Re: [PATCH nf-next,RFC] netfilter: nft_meta: add cgroup version 2 support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: netfilter question
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: netfilter question
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v3 2/2] parser_bison: Use __error() to avoid syntax error message duplication
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- [PATCH v3 1/2] erec: Make error messages in nft consistent
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- Re: [PATCH v2] erec: Make error messages in nft consistent
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- [PATCH v2] erec: Make error messages in nft consistent
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- Re: netfilter question
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: netfilter question
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf 2/2] netfilter: nat: switch to new rhlist interface
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf 1/2] netfilter: nat: fix cmp return value
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf 0/2] netfilter: nat: fix regressions introduced by rhashtable conversion
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: netfilter question
- From: Eric Dumazet <edumazet@xxxxxxxxxx>
- [nft PATCH 3/3] tests: shell: another testcase for deleting many set elements
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nft PATCH 2/3] tests: shell: testcase for deleting many set elements
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nft PATCH 1/3] tests: shell: testcase for adding many set elements
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nft PATCH] tests: shell: allow to execute a single testcase
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [PATCH nf-next 3/3] netfilter: convert while loops to for loops
- From: Aaron Conole <aconole@xxxxxxxxxx>
- [PATCH nf-next 2/3] netfilter: decouple nf_hook_entry and nf_hook_ops
- From: Aaron Conole <aconole@xxxxxxxxxx>
- [PATCH nf-next 1/3] netfilter: introduce accessor functions for hook entries
- From: Aaron Conole <aconole@xxxxxxxxxx>
- [PATCH nf-next 0/3] Additional nf_hook_entry compaction
- From: Aaron Conole <aconole@xxxxxxxxxx>
- [PATCH v4 nf-next 7/7] netfilter: defrag: only register defrag functionality if needed
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 6/7] conntrack: add nf_conntrack_default_on sysctl
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v4 nf-next 5/7] netfilter: conntrack: register hooks in netns when needed by ruleset
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v4 nf-next 4/7] nftables: add conntrack dependencies for nat/masq/redir expressions
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v4 nf-next 3/7] netfilter: nat: add dependencies on conntrack module
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v4 nf-next 2/7] netfilter: add and use nf_ct_netns_get/put
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 1/7] conntrack: remove unused init_net hook
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v4 nf-next] netfilter: allow disabling conntrack-on-by-default
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH] erec: Make error messages in nft consistent
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] erec: Make error messages in nft consistent
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next v2 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include
- From: Mikko Rapeli <mikko.rapeli@xxxxxx>
- [PATCH] erec: Make error messages in nft consistent
- From: Elise Lennion <elise.lennion@xxxxxxxxx>
- Re: [PATCH nft 0/3] src: add nft log flags support
- From: Liping Zhang <zlpnobody@xxxxxxxxx>
- [PATCH nf-next v2 4/4] netfilter: conntrack: built-in support for UDPlite
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nf-next v2 3/4] netfilter: conntrack: built-in support for SCTP
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nf-next v2 2/4] netfilter: conntrack: built-in support for DCCP
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nf-next v2 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nf-next v2 0/4] netfilter: built-in conntrack support for DCCP, SCTP, UDPlite
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- RE: [PATCH 20/39] netfilter: ipset: Use kmalloc() in comment extension helper
- From: David Laight <David.Laight@xxxxxxxxxx>
- [PATCH nf-next 1/2] ipvs: Use IS_ERR_OR_NULL(svc) instead of IS_ERR(svc) || svc == NULL
- From: Simon Horman <horms@xxxxxxxxxxxx>
- [GIT PULL nf-next 0/2] IPVS Updates for v4.10
- From: Simon Horman <horms@xxxxxxxxxxxx>
- [PATCH nf-next 2/2] ipvs: Decrement ttl
- From: Simon Horman <horms@xxxxxxxxxxxx>
- Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information
- From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
- Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information
- From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
- Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain
- From: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
- Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain
- From: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
- Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 0/3] src: add nft log flags support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] mnl: use nftnl_set_elems_nlmsg_build_payload_iter() when deleting elements
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nf_tables: validate maximum value of u32 netlink hash attribute
- From: Laura Garcia Liebana <nevola@xxxxxxxxx>
- [PATCH 2/2 nft] tests: py: missing range conversion in icmpv6
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/2 nft] tests: py: add some testcases for log flags
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include
- From: mikko.rapeli@xxxxxx
- iptables: incorrect package match w/ conntrack_sip
- From: Juergen Schmidt <abcdmail@xxxxxxxxxx>
- [PATCH nf-next] netfilter: nfnetlink_log: add "nf-logger-5-1" module alias name
- From: Liping Zhang <zlpnobody@xxxxxxx>
- [PATCH nf-next] netfilter: nf_log: do not assume ethernet header in netdev family
- From: Liping Zhang <zlpnobody@xxxxxxx>
- Re: [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- Re: [PATCH nf-next,RFC] netfilter: nft_meta: add cgroup version 2 support
- From: Daniel Mack <daniel@xxxxxxxxxx>
- [PATCH nf-next,RFC] netfilter: nft_meta: add cgroup version 2 support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 00/39] Netfilter updates for net-next
- From: David Miller <davem@xxxxxxxxxxxxx>
- [PATCH 00/39] Netfilter updates for net-next
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 05/39] netfilter: x_tables: move hook state into xt_action_param structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 06/39] netfilter: nf_tables: use hook state from xt_action_param structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 07/39] netfilter: use switch() to handle verdict cases from nf_hook_slow()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 09/39] netfilter: merge nf_iterate() into nf_hook_slow()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 11/39] netfilter: nft_hash: get random bytes if seed is not specified
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 10/39] netfilter: handle NF_REPEAT from nf_conntrack_in()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 14/39] udp: provide udp{4,6}_lib_lookup for nf_socket_ipv{4,6}
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 08/39] netfilter: remove hook_entries field from nf_hook_state
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 15/39] netfilter: conntrack: fix NF_REPEAT handling
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 16/39] netfilter: ipset: Remove extra whitespaces in ip_set.h
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 12/39] netfilter: nf_tables: simplify the basic expressions' init routine
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 20/39] netfilter: ipset: Use kmalloc() in comment extension helper
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 21/39] netfilter: ipset: Split extensions into separate files
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 22/39] netfilter: ipset: Separate memsize calculation code into dedicated function
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 25/39] netfilter: ipset: Add element count to all set types header
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 18/39] netfilter: ipset: Headers file cleanup
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 19/39] netfilter: ipset: Improve skbinfo get/init helpers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 28/39] netfilter: ipset: Simplify mtype_expire() for hash types
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 24/39] netfilter: ipset: Add element count to hash headers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 29/39] netfilter: ipset: Make NLEN compile time constant for hash types
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 30/39] netfilter: ipset: Make sure element data size is a multiple of u32
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 27/39] netfilter: ipset: Remove redundant mtype_expire() arguments
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 34/39] netfilter: ipset: Fix reported memory size for hash:* types
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 31/39] netfilter: ipset: Optimize hash creation routine
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 33/39] netfilter: ipset: Collapse same condition body to a single one
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 35/39] netfilter: ipset: hash:ipmac type support added to ipset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 37/39] netfilter: ipset: hash: fix boolreturn.cocci warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 36/39] netfilter: ipset: use setup_timer() and mod_timer().
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 32/39] netfilter: ipset: Make struct htype per ipset family
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 38/39] netfilter: conntrack: remove unused netns_ct member
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 39/39] netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL test
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 26/39] netfilter: ipset: Count non-static extension memory for userspace
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 23/39] netfilter: ipset: Regroup ip_set_put_extensions and add extern
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 17/39] netfilter: ipset: Mark some helper args as const.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 13/39] netfilter: conntrack: simplify init/uninit of L4 protocol trackers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 02/39] netfilter: remove comments that predate rcu days
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 04/39] netfilter: deprecate NF_STOP
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 03/39] netfilter: kill NF_HOOK_THRESH() and state->tresh
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 01/39] netfilter: get rid of useless debugging from core
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL test
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: conntrack: remove unused netns_ct member
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 00/22] ipset patches for nf-next, v3
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: linux-next: manual merge of the net-next tree with the netfilter tree
- From: David Miller <davem@xxxxxxxxxxxxx>
- [PATCH] netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL test
- From: Julia Lawall <Julia.Lawall@xxxxxxx>
- Re: [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- Re: question about xt_find_table_lock
- From: Julia Lawall <julia.lawall@xxxxxxx>
- Re: question about xt_find_table_lock
- From: Florian Westphal <fw@xxxxxxxxx>
- question about xt_find_table_lock
- From: Julia Lawall <julia.lawall@xxxxxxx>
- Re: [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include
- From: Mikko Rapeli <mikko.rapeli@xxxxxx>
- [PATCH nf-next 4/4] netfilter: conntrack: built-in support for UDPlite
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nf-next 3/4] netfilter: conntrack: built-in support for SCTP
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nf-next 2/4] netfilter: conntrack: built-in support for DCCP
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nf-next 0/4] netfilter: built-in conntrack support for DCCP, SCTP, UDPlite
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- [PATCH nf] netfilter: fix nf_conntrack_helper documentation
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next] netfilter: conntrack: remove unused netns_ct member
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 16/22] netfilter: ipset: Optimize hash creation routine
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 03/22] netfilter: ipset: Headers file cleanup
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 15/22] netfilter: ipset: Make sure element data size is a multiple of u32
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 04/22] netfilter: ipset: Improve skbinfo get/init helpers
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 07/22] netfilter: ipset: Separate memsize calculation code into dedicated function
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 17/22] netfilter: ipset: Make struct htype per ipset family
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 19/22] netfilter: ipset: Fix reported memory size for hash:* types
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 11/22] netfilter: ipset: Count non-static extension memory for userspace
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 18/22] netfilter: ipset: Collapse same condition body to a single one
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 13/22] netfilter: ipset: Simplify mtype_expire() for hash types
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 22/22] netfilter: ipset: hash: fix boolreturn.cocci warnings
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 10/22] netfilter: ipset: Add element count to all set types header
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 14/22] netfilter: ipset: Make NLEN compile time constant for hash types
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 20/22] netfilter: ipset: hash:ipmac type support added to ipset
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 21/22] netfilter: ipset: use setup_timer() and mod_timer().
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 09/22] netfilter: ipset: Add element count to hash headers
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 08/22] netfilter: ipset: Regroup ip_set_put_extensions and add extern
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 12/22] netfilter: ipset: Remove redundant mtype_expire() arguments
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 05/22] netfilter: ipset: Use kmalloc() in comment extension helper
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 06/22] netfilter: ipset: Split extensions into separate files
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 02/22] netfilter: ipset: Mark some helper args as const.
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 00/22] ipset patches for nf-next, v3
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH 01/22] netfilter: ipset: Remove extra whitespaces in ip_set.h
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [PATCH 00/14] Netfilter fixes for net
- From: David Miller <davem@xxxxxxxxxxxxx>
- Re: [PATCH] extensions: libxt_mangle: Use getaddrinfo()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] iptables: xtables-arp: Use getaddrinfo()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: linux-next: manual merge of the net-next tree with the netfilter tree
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 00/14] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 05/14] netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_check
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 04/14] netfilter: nf_conntrack_sip: extend request line validation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 02/14] netfilter: nf_tables: fix *leak* when expr clone fail
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 03/14] netfilter: nf_tables: fix race when create new element in dynset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 07/14] netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 09/14] netfilter: nft_dup: do not use sreg_dev if the user doesn't specify it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 10/14] ipvs: use IPVS_CMD_ATTR_MAX for family.maxattr
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 12/14] netfilter: conntrack: fix CT target for UNSPEC helpers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 08/14] netfilter: nf_tables: destroy the set if fail to add transaction
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 11/14] netfilter: connmark: ignore skbs with magic untracked conntrack objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 13/14] netfilter: conntrack: refine gc worker heuristics
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 14/14] netfilter: nf_tables: fix oops when inserting an element into a verdict map
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 06/14] netfilter: conntrack: avoid excess memory allocation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 01/14] netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- linux-next: manual merge of the net-next tree with the netfilter tree
- From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
- Re: [PATCH 2/2] [nf-next] netfilter: fix NF_REPEAT handling
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/2] [net-next] udp: provide udp{4,6}_lib_lookup for nf_socket_ipv{4,6}
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next v3] netfilter: conntrack: simplify init/uninit of L4 protocol trackers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nf_tables: simplify the basic expressions' init routine
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: nf_nat_tftp broken in 4.8?
- From: Florian Fainelli <f.fainelli@xxxxxxxxx>
- Re: nf_nat_tftp broken in 4.8?
- From: Florian Westphal <fw@xxxxxxxxx>
- nf_nat_tftp broken in 4.8?
- From: Florian Fainelli <f.fainelli@xxxxxxxxx>
- Re: linux-next: Tree for Nov 9 (netdev, netfilter v6)
- From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
- [PATCH] netfilter: Update nf_send_reset6 to consider L3 domain
- From: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
- [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain
- From: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
- Re: [PATCH nft] tests: shell: add test case for inserting element into verdict map
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- [nft PATCH] tests: shell: add testcases for comments in set elements
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH nft] segtree: keep element comments in set intervals
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
- Re: [PATCH nf] netfilter: xt_NFLOG: fix unexpected truncated packet
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- Re: [conntrack-tools PATCH 1/3] log: introduce a mechanism to know if log was initialized
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v3 nft 2/4] src: add offset attribute for hash expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v3 nft 1/4] src: make hash seed attribute optional
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 1/3] tests: shell: delete useless stderr output in testcase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] segtree: keep element comments in set intervals
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] net/netfilter: Fix use uninitialized warn in nft_range_eval()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: fix CT target for UNSPEC helpers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: fix oops when inserting an element into a verdict map
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf v4] netfilter: conntrack: refine gc worker heuristics
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: connmark: ignore skbs with magic untracked conntrack objects
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [Patch net] ipvs: use IPVS_CMD_ATTR_MAX for family.maxattr
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: "random" syn packets dropped
- From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
- sip helper doesn't match on calls to myself
- From: Juergen Schmidt <abcdmail@xxxxxxxxxx>
- Re: linux-next: Tree for Nov 8 (netdev, netfilter)
- From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
- [PATCH nft] tests: shell: add test case for inserting element into verdict map
- From: Liping Zhang <zlpnobody@xxxxxxx>
- Re: "random" syn packets dropped
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 2/2] [nf-next] netfilter: fix NF_REPEAT handling
- From: Arnd Bergmann <arnd@xxxxxxxx>
- [PATCH 1/2] [net-next] udp: provide udp{4,6}_lib_lookup for nf_socket_ipv{4,6}
- From: Arnd Bergmann <arnd@xxxxxxxx>
- "random" syn packets dropped
- From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
- [PATCH nf-next v3] netfilter: conntrack: simplify init/uninit of L4 protocol trackers
- From: Davide Caratti <dcaratti@xxxxxxxxxx>
- Re: nfqueue: Get pid of socket owner
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: nfqueue: Get pid of socket owner
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH] net/netfilter: Fix use uninitialized warn in nft_range_eval()
- From: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
- nfqueue: Get pid of socket owner
- From: David Buchmann <david@xxxxxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: fix oops when inserting an element into a verdict map
- From: Liping Zhang <zlpnobody@xxxxxxxxx>
- [PATCH] extensions: libxt_mangle: Use getaddrinfo()
- From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite News]
[Samba]