Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH 1/2] net: netfilter: Remove typedef from "typedef struct field_t"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] iptables: Remove unnecessary braces.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] iptables: Remove explicit static variables initalization.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH nf 1/1] netfilter: xt_CT: Fix one possible memleak of timeout
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• [PATCH nf v2 1/1] netfilter: xt_CT: Fix one possible memleak of timeout
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf-next 1/1] netfilter: cttimeout: Return -EOPNOTSUPP if l4proto doesn't support
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf 1/1] netfilter: cttimeout: Fix one possible use-after-free issue
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf 1/1] netfilter: xt_CT: Fix one possible memleak of timeout
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf 1/1] netfilter: CLUSTERIP: Fix one wrong refcnt usage
  • From: gfree.wind@xxxxxxxxxxx
• RE: [PATCH nf-next 1/1] netfilter: Remove useless variable timeouts in init_conntrack
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• RE: [PATCH nf-next 1/1] netfilter: Remove useless variable timeouts in init_conntrack
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH nf-next 1/1] netfilter: Remove useless variable timeouts in init_conntrack
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next 1/1] netfilter: Remove useless variable timeouts in init_conntrack
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next 1/1] netfilter: Remove useless variable timeouts in init_conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/1] netfilter: Remove useless variable timeouts in init_conntrack
  • From: gfree.wind@xxxxxxxxxxx
• RE: [PATCH nf-next 1/1] netfilter: udplite4: Remove duplicated udplite4 declaration
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• [PATCH nf-next v2 1/1] netfilter: udplite: Remove duplicated udplite4/6 declaration
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf-next 1/1] netfilter: udplite4: Remove duplicated udplite4 declaration
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nft] exthdr: avoid crash with older kernels
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: fix build warning on i686
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] net: netfilter: Use seq_puts()/seq_putc() where possible
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] net: netfilter: Replace explicit NULL comparison with ! operator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net: netfilters: Remove unnecessary parenthesis
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] net: netfilter: Replace explicit NULL comparison with ! operator
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] libnetfilter_conntrack: Add API support for passing bound file descriptor
  • From: Skylar Chang <chiaweic@xxxxxxxxxxxxxx>
• [PATCH] libnfnetlink: Add API support for passing bound file descriptor
  • From: Skylar Chang <chiaweic@xxxxxxxxxxxxxx>
• [PATCH] iptables-restore/ip6tables-restore: add --version/-V argument
  • From: Dan Williams <dcbw@xxxxxxxxxx>
• [PATCH iptables v1] iptables-restore/save: exit when given an unknown option
  • From: Vincent Bernat <vincent@xxxxxxxxx>
• [PATCH net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH nf] netfilter: nft_hash: do not dump the auto generated seed
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nft] hash: generate a random seed if seed option is empty
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
• [PATCH libmnl] nlmsg: introduce mnl_nlmsg_batch_rest to get the rest length
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
• [PATCH 1/2] iptables: extensions: unnecessary cast on void pointer
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 2/2] iptables: iptables: unnecessary cast on void pointer
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH nf] netfilter: nf_ct_expect: use proper RCU list traversal/update APIs
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf] netfilter: ctnetlink: skip dumping expect when nfct_help(ct) is NULL
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf] netfilter: make it safer during the inet6_dev->addr_list traversal
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH] iptables: iptables: Remove exceptional & on function name
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 4/4] net: ipv6: Remove exceptional & on function name
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 3/4] net: ipv4: Remove exceptional & on function name
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 2/4] net: bridge: Remove exceptional & on function name
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 1/4] net: netfilter:Remove exceptional & on function name
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• KASAN, xt_TCPMSS finally found nasty use-after-free bug? 4.10.8
  • From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
• [PATCH 2/2] iptables: iptables: Constify option struct
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 1/2] extensions: libarpt_mangle.c : Constify option struct
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 2/2] ipv6: netfilter: Simplify NULL comparisons
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 1/2] ipv4: netfilter: Simplify NULL comparisons
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH v2] net: Remove unnecessary cast on void pointer
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH 0/2] Simplify NULL comparisons
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 1/2] ipv4: netfilter: Simplify NULL comparisons
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 2/2] ipv6: netfilter: Simplify NULL comparisons
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH nf] netfilter: ctnetlink: remove unnecessary nf_conntrack_expect_lock protection
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH] net: ipv4: netfilter: Remove unused function nf_nat_need_gre()
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• Re: [PATCH] ipv4: netfilter: Comparison to NULL could be written
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH nf] netfilter: ctnetlink: make it safer when checking the ct helper name
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf] netfilter: ctnetlink: using bit to represent the ct event
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH] ipv4: netfilter: Comparison to NULL could be written
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 2/2] staging: iio: meter: Replace mlock with driver private buf_lock
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 1/2] iio: adc: replace comma with a semicolon
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 0/2] Add/Remove spaces
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 4/4] iptables: iptables: switch and case should be at the same indent
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: probably serious conntrack/netfilter panic, 4.8.14, timers and intel turbo
  • From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
• [PATCH 3/4] iptables: iptables: Indent the code.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 2/4] iptables: iptables: Remove assignment in if condition
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 1/4] iptables: iptables: Add blank line after declaration
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 0/4] Multiple checkpatch issues.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH iptables] tests: add regression tests for xtables-translate
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nf v5 2/3] netfilter: nat_helper: Make sure every proto nat module uses its nat_helper
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf v5 1/3] netfilter: helper: Rename struct nf_ct_helper_expectfn to nf_ct_nat_helper
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf v5 3/3] netfilter: nat_helper: Remove the expectations when its module is unloaded
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf v5 0/3] Refine the robust of helper expectfn
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH] iptables: extensions: Add/Remove the braces where necessary
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: Writing metadata to a packet
  • From: Patrick Schaaf <bof@xxxxxx>
• Writing metadata to a packet
  • From: Vikas <vikas.c.kumar@xxxxxxxxxx>
• [PATCH] iptables: extensions: Remove spaces.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] iptables: extensions: Place trailing */ on a separate line.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH v2] net: netfilter: remove unused variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] iptables: extensions: Remove assignments in if condition.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH v2] net: netfilter: remove unused variable
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ipvs: don't check for presence of nat extension
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] iptables: extensions: Remove typedef in struct.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH] iptables: extensions: Remove assignment in if condition.
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] iptables: extensions: Remove unnecessary parenthesis.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] iptables: extensions: Add/Remove unnecessary spaces.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH nf V2] netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [PATCH] iptables: extensions: Add blank line after declarations.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] iptables: extensions: Remove assignment in if condition.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] iptables: extensions: Add space around operators
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH 0/8] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 2/2] iptables: Remove unnecessary braces.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH 1/2] iptables: Remove explicit static variables initalization.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH 0/2] iptables: Fix multiple checkpatch issues.
  • From: Varsha Rao <rvarsha016@xxxxxxxxx>
• [PATCH v2] net: netfilter: remove unused variable
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] net: netfilter: remove unused variable
  • From: Julia Lawall <julia.lawall@xxxxxxx>
• [PATCH] net: netfilter: remove unused variable
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH nf V2] netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• RE: [PATCH nf v4 2/2] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• [PATCH 8/8] netfilter: nfnetlink_queue: fix secctx memory leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/8] netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/8] netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregister
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/8] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/8] netfilter: invoke synchronize_rcu after set the _hook_ to NULL
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/8] netfilter: nfnl_cthelper: Fix memory leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: nfnl_cthelper: fix runtime expectation policy updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/8] netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/8] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 1/1] netfilter: helper: Remove useless rcu lock when get expectfn
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 1/1] netfilter: helper: Remove useless rcu lock when get expectfn
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf v3 1/1] netfilter: helper: Add the rcu lock when call __nf_conntrack_helper_find
  • From: gfree.wind@xxxxxxxxxxx
• Re: [PATCH nf] netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• RE: [PATCH nf-next v2 1/1] netfilter: helper: Remove useless rcu lock when get expectfn
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nfnetlink_queue: fix secctx memory leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH nf-next v2 1/1] netfilter: helper: Remove useless rcu lock when get expectfn
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• [PATCH] net: ipv6: Removed unnecessary parenthesis
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] net: netfilter: Replace explicit NULL comparison with ! operator
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 1/1] netfilter: helper: Remove useless rcu lock when get expectfn
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] net: netfilterL: Fix line over 80 characters.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH nf v4 2/2] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Clean up tests if NULL returned on failure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v2] netfilter: Clean up tests if NULL returned on failure
  • From: SIMRAN SINGHAL <singhalsimran0@xxxxxxxxx>
• [PATCH] net: ipv6: Removed unnecessary parenthesis
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Clean up tests if NULL returned on failure
  • From: SIMRAN SINGHAL <singhalsimran0@xxxxxxxxx>
• [PATCH] net: ipv6: netfilter: Format block comments.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Clean up tests if NULL returned on failure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] net: netfilter: replace explicit NULL comparison with ! operator
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] net: bridge: netfilter: Comparison to NULL could be written
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] iptables: libiptc: Use list_{next/prev}_entry instead of list_entry
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH] net: ipv6: netfilter: replace explicit NULL comparison with ! operator
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] net: netfilter: Use list_{next/prev}_entry instead of list_entry
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• ANNOUNCE: netdev 2.1 conference Schedule out!
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH] net: netfilter: Use seq_puts()/seq_putc() where possible
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• Re: [PATCH 2/4] netfilter: ipset: generalize netmask to support cidr and mask values
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/4] netfilter: ipset: generalize netmask to support cidr and mask values
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v2] net: Remove unnecessary cast on void pointer
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [RFC v2] extensions: libxt_TOS: Add translation to nft
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• Re: [PATCH 2/4] netfilter: ipset: generalize netmask to support cidr and mask values
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] net: netfilter: Remove typedef from "typedef struct bitstr_t".
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [RFC] extensions: libxt_TOS: Add translation to nft
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH v3] net: netfilter: Add nfnl_msg_type() helper function
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH v2] net: netfilter: add nfnl_msg_type() helper function
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Clean up tests if NULL returned on failure
  • From: SIMRAN SINGHAL <singhalsimran0@xxxxxxxxx>
• Re: [RFC] extensions: libxt_TOS: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• [RFC] extensions: libxt_TOS: Add translation to nft
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] net: Remove unnecessary cast on void pointer
  • From: Julia Lawall <julia.lawall@xxxxxxx>
• Re: [Outreachy kernel] [PATCH] net: netfilter: Remove complexity
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nfnetlink_queue: fix secctx memory leak
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH v3] ebtables: extensions: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• RE: [PATCH] netfilter: ipset: Use max macro instead of ternary operator
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Use max macro instead of ternary operator
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v2] netfilter: Clean up tests if NULL returned on failure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] net: Remove unnecessary cast on void pointer
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 2/4] netfilter: ipset: generalize netmask to support cidr and mask values
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH] netfilter: ipset: Use max macro instead of ternary operator
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH] net: netfilters: Remove unnecessary parenthesis
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH v2] netfilter: Clean up tests if NULL returned on failure
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH] net: netfilter: Remove complexity
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] net: Remove unnecessary cast on void pointer
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH v2] ebtables: extensions: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• Re: [PATCH 0/3] ebtables: Constify option struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] ebtables: extensions: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH 2/3] ebtables: extensions: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH 1/3] ebtables: extensions: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH 0/3] ebtables: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH v3] netfilter: Compress return logic
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH nf-next] netfilter: ipvs: don't check for presence of nat extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: nat: avoid use of nf_conn_nat extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/1] netfilter: ctlink: Return error directly when create expect without help
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH v2] net: netfilter: Remove multiple assignment.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: [Outreachy kernel] Re: [PATCH] iptables: Constify option struct
  • From: Julia Lawall <julia.lawall@xxxxxxx>
• Re: [PATCH 3/5] ipset: hash:ipport: netmask support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/5] ipset: netmask: expand to support cidr and full mask
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 4/4] netfilter: ipset: hash:ipport: add netmask support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [Outreachy kernel] Re: [PATCH] iptables: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• Re: [PATCH 3/4] netfilter: ipset: hash:ip: add support for new netmask types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [Outreachy kernel] Re: [PATCH] iptables: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• Re: [PATCH 2/4] netfilter: ipset: generalize netmask to support cidr and mask values
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] iptables: Constify option struct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH 0/4] Constify option structures
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/4] extensions: libebt_nflog: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH 3/4] extensions: libebt_mark: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH 2/4] extenstions: libebt_mark_m: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH 0/4] Constify option structures
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH 1/4] extensions: libebt_limit: Constify option struct
  • From: Gargi Sharma <gs051095@xxxxxxxxx>
• [PATCH v2 ulogd2 1/2] harmonize log file defaults with ulogd.conf
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• [PATCH v2 ulogd2 2/2] rotate all default output files
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• [PATCH] netfilter: nat: remove rcu_read_lock in __nf_nat_decode_session.
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf-next v2 1/1] netfilter: nat: Correct the return value check for nat mangled packet
  • From: gfree.wind@xxxxxxxxxxx
• RE: [PATCH] net: netfilter: Remove multiple assignment.
  • From: David Laight <David.Laight@xxxxxxxxxx>
• RE: [PATCH nf v4 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH nf v4 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: kbuild test robot <lkp@xxxxxxxxx>
• RE: [PATCH nf-next 1/1] netfilter: Use bool type instead of int as the return value of nf_conntrack_tuple_taken and nf_nat_used_tuple
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• RE: [PATCH nf-next 1/4] netfilter: amanda: Correct the return value comparison of the func nf_nat_mangle_udp_packet
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH 0/2] netfilter: Remove unnecessary cast on void pointer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/1] netfilter: Use bool type instead of int as the return value of nf_conntrack_tuple_taken and nf_nat_used_tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] Re: [PATCH] net: netfilter: Remove multiple assignment.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/4] netfilter: amanda: Correct the return value comparison of the func nf_nat_mangle_udp_packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net: netfilter: Remove multiple assignment.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net: netfilters: Remove extra parenthesis
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregister
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf V3] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v5 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf V2] netfilter: invoke synchronize_rcu after set the _hook_ to NULL
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/1] netfilter: expect: Add one common func nf_ct_remove_expect to simplify codes
  • From: gfree.wind@xxxxxxxxxxx
• Re: [PATCH 1/2] net: netfilter: Remove typedef from "typedef struct field_t"
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [Netdev ANNOUNCE]: New sponsors and workshop workshop accepted
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH] net: netfilters: Remove extra parenthesis
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH nf] netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH] net: netfilter: Remove multiple assignment.
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• __nf_conntrack_find_get - NMI watchdog, 4.10.5
  • From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
• [PATCH 0/2] net: netfilters: Remove typedef
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 2/2] net: netfilter: Remove typedef from "typedef struct bitstr_t"
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH 1/2] net: netfilter: Remove typedef from "typedef struct field_t"
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH nf v5 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: gfree.wind@xxxxxxxxxxx
• RE: [PATCH nf v4 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregister
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregister
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: [PATCH nf v4 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [PATCH nf V3] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf v4 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: gfree.wind@xxxxxxxxxxx
• RE: [PATCH nf v3 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• [PATCH nf V2] netfilter: invoke synchronize_rcu after set the _hook_ to NULL
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: [PATCH nf] netfilter: invoke synchronize_rcu after set the _hook_ to NULL
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [ANNOUNCE]: New Gold sponsor VMware
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nft] src: hash: fix seed attribute not listed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: hash: fix seed attribute not listed
  • From: Laura Garcia Liebana <laura.garcia@xxxxxxxxxxx>
• [PATCH nft] src: hash: fix seed attribute not listed
  • From: Laura Garcia Liebana <laura.garcia@xxxxxxxxxxx>
• Re: [PATCH nf v3 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: invoke synchronize_rcu after set the _hook_ to NULL
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] tests: Add test for flush command selectiveness on sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/2] src: Make flush command selective of the set structure type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [Netdev ANNOUNCE]: New talk accepted debug pipe
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH nft 2/2] tests: Add test for flush command selectiveness on sets
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• [PATCH nft 1/2] src: Make flush command selective of the set structure type
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• [PATCH nf v2 1/1] netfilter: expect: Make sure the max_expected limit is effective
  • From: gfree.wind@xxxxxxxxxxx
• RE: [PATCH nf 1/1] netfilter: expect: Make sure the max_expected limit is effective
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH nf] netfilter: invoke synchronize_rcu after set the _hook_ to NULL
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• RE: [PATCH nf v3 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH libnetfilter_cthelper] src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v3 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v3 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: invoke synchronize_rcu after set the _hook_ to NULL
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf V2] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: expect: Make sure the max_expected limit is effective
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf V2] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/4] netfilter: ipset: generalize netmask to support cidr and mask values
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nf 1/1] netfilter: expect: Make sure the max_expected limit is effective
  • From: gfree.wind@xxxxxxxxxxx
• [ANNOUNCE] Linux Security Summit 2017 - CFP
  • From: James Morris <jmorris@xxxxxxxxx>
• [ANNOUNCE]: New sponsor and accepted talk
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH V4 2/2] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH V4 1/2] netfilter: xt_AUDIT: use consistent ipv4 network offset
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nf V2] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nft] tests: nft removes required payload protocol expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Florian Westphal <fw@xxxxxxxxx>
• [Netdev] ANNOUNCE: New silver sponsor!
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ulogd: add +1 char for null char
  • From: Alexandru Ardelean <ardeleanalex@xxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/5] netfilter: Clean up tests if NULL returned on failure
  • From: SIMRAN SINGHAL <singhalsimran0@xxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/5] netfilter: Clean up tests if NULL returned on failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_statistic: Complete nft translator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_cthelper] examples: kill the "invalid argument" error in nftc-helper-add
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: [PATCH libnetfilter_cthelper] examples: kill the "invalid argument" error in nftc-helper-add
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V4 1/2] netfilter: xt_AUDIT: use consistent ipv4 network offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: add nft_is_base_chain() helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/3] sets: Fix for missing space after last element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2,v3] netfilter: nfnetlink_cthelper: fix runtime expectation policy updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/3] tests: shell: netns/0003many_0: Fix cleanup after error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/3] tests: Add test cases for nested anonymous sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V4 1/2] netfilter: xt_AUDIT: use consistent ipv4 network offset
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V4 1/2] netfilter: xt_AUDIT: use consistent ipv4 network offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/3] tests: shell: netns/0003many_0: Fix cleanup after error
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
• Re: [PATCH] ulogd: add +1 char for null char
  • From: Alexandru Ardelean <ardeleanalex@xxxxxxxxx>
• [PATCH V4 2/2] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH V4 1/2] netfilter: xt_AUDIT: use consistent ipv4 network offset
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nf 1/2,v3] netfilter: nfnetlink_cthelper: fix runtime expectation policy updates
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [PATCH nf v2 1/1] netfilter: helper: Add the rcu lock when call __nf_conntrack_helper_find
  • From: gfree.wind@xxxxxxxxxxx
• RE: [PATCH RESENT nf 1/1] netfilter: ctlink: Fix one possible use-after-free in ctnetlink_create_expect
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH 2/2 nf] netfilter: cthelper: Fix memory leak
  • From: jeffy <jeffy.chen@xxxxxxxxxxxxxx>
• [PATCH nf-next v2 1/1] netfilter: helper: Remove useless rcu lock when get expectfn
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH 1/2] netfilter: ipset: warn users of list:set that parameter 'size' is ignored
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] netfilter: ipset: print out warnings generated by commands
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 2/2] netfilter: ipset: warn users of list:set that parameter 'size' is ignored
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• RE: [PATCH RESENT nf 1/1] netfilter: ctlink: Fix one possible use-after-free in ctnetlink_create_expect
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• [PATCH RESENT nf 1/1] netfilter: ctlink: Fix one possible use-after-free in ctnetlink_create_expect
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf v4 0/2] Fix invoking expectfn unloaded
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf v4 1/2] netfilter: helper: Rename struct nf_ct_helper_expectfn to nf_ct_nat_helper
  • From: gfree.wind@xxxxxxxxxxx
• [PATCH nf v4 2/2] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: gfree.wind@xxxxxxxxxxx
• [nft PATCH 1/3] tests: Add test cases for nested anonymous sets
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/3] sets: Fix for missing space after last element
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/3] tests: shell: netns/0003many_0: Fix cleanup after error
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf 5/5] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: [PATCH v2] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH v2] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• Re: [PATCH 00/22] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] ulogd: use strncpy instead of memcpy
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH] ulogd: add +1 char for null char
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH nft] src: allow update of net base w. meta l4proto icmpv6
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/5] ipset: hash:ipport: netmask support
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 2/5] ipset: hash:ip: add support for new netmask types
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 5/5] hash:ip,port: add netmask support to man page
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 0/5] ipset: Extend netmask support for userspace
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 4/5] hash:ip: add new netmask support to man page
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 1/5] ipset: netmask: expand to support cidr and full mask
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 0/4] netfilter: ipset: Extend netmask support for kernel
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 3/4] netfilter: ipset: hash:ip: add support for new netmask types
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 1/4] net: netfilter: add nf_inet_addr_mask_inplace helper fn
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 4/4] netfilter: ipset: hash:ipport: add netmask support
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 2/4] netfilter: ipset: generalize netmask to support cidr and mask values
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: ipvs: Compress return logic
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf 5/5] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [Netdev ANNOUNCE]: Two new talks on network emulators and zero copy sendmsg
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nf 5/5] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [PATCH nf 1/2,v3] netfilter: nfnetlink_cthelper: fix runtime expectation policy updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 3/5] netfilter: drop const qualifier from struct nf_conntrack_expect_policy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 3/5] netfilter: drop const qualifier from struct nf_conntrack_expect_policy
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: [PATCH nf 2/5] netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 5/5] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• RE: [PATCH net-next 1/1] netfilter: helper: Remove the rcu lock in nf_ct_helper_expectfn_find_by_name and nf_ct_helper_expectfn_find_by_symbol.
  • From: 高峰 <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: Interrest in a ASA-like packet tracer?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/5] netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• RE: [PATCH nf v3 2/2] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: "Gao Feng" <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH net-next 1/1] netfilter: helper: Remove the rcu lock in nf_ct_helper_expectfn_find_by_name and nf_ct_helper_expectfn_find_by_symbol.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/5] netfilter: nfnl_cthelper: don't report error if NFCTH_PRIV_DATA_LEN is empty
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: [PATCH nf v3 2/2] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables v2 2/2] iptables-restore: support acquiring the lock.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 2/2] netfilter: ipvs: Compress return logic
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH v2 1/2] netfilter: ipset: Compress return logic
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH v2 0/2] netfilter: Compress return logic
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• Re: [nft PATCH 0/2] Some fixes for nested sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: ipset: Compress return logic
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH 1/2,v2] netfilter: nfnetlink_cthelper: fix runtime expectation policy updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: ipvs: Compress return logic
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• Re: [PATCH nf 4/5] netfilter: nfnl_cthelper: fix memory leak when do update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] netfilter: ,netdev@xxxxxxxxxxxxxxx
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH 2/2 nf] netfilter: cthelper: Fix memory leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 nf] netfilter: nfnetlink_cthelper: fix runtime expectation policy updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] netfilter: Remove unnecessary cast on void pointer
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH 1/2] netfilter: ipset: Remove unnecessary cast on void pointer
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH 2/2] netfilter: Remove unnecessary cast on void pointer
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• Re: [PATCH] [RESENT]netfilter: nfnetlink_cthelper: Fix memory leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] [RESENT]netfilter: nfnetlink_cthelper: Fix memory leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_cthelper] examples: fix double free in nftc-helper-add
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/5] netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 3/5] netfilter: drop const qualifier from struct nf_conntrack_expect_policy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 5/5] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 4/5] netfilter: nfnl_cthelper: fix memory leak when do update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Bridge] [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/5] netfilter: nfnl_cthelper: don't report error if NFCTH_PRIV_DATA_LEN is empty
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/5] netfilter: Clean up tests if NULL returned on failure
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH 1/5] netfilter: ipvs: Clean up tests if NULL returned on failure
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH 5/5] netfilter: xt_TEE: Clean up tests if NULL returned on failure
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH 2/5] netfilter: Clean up tests if NULL returned on failure
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH 3/5] netfilter: nf_tables_api: Clean up tests if NULL returned on failure
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH 4/5] netfilter: nfnetlink: Clean up tests if NULL returned on failure
  • From: simran singhal <singhalsimran0@xxxxxxxxx>
• [PATCH nf v3 1/2] netfilter: helper: Rename struct nf_ct_helper_expectfn to nf_ct_nat_helper
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf v3 0/2] Fix invoking expectfn unloaded
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf v3 2/2] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [Bridge] [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• [PATCH nf v3 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH nf v2 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• Re: [NetDev-tech] [NetDev] [Netdev ANNOUNCE]: New tc workshop accepted
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [NetDev] [Netdev ANNOUNCE]: New tc workshop accepted
  • From: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
• [Netdev ANNOUNCE]: New tc workshop accepted
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [nft PATCH 1/2] evaluate: set: Allow for set elems to be sets
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/2] Some fixes for nested sets
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/2] evaluate: set: Fix nested set merge size adjustment
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf v2 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• [PATCH libnetfilter_cthelper] src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf] netfilter: invoke synchronize_rcu after set the _hook_ to NULL
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: [PATCH v2 nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• Re: [PATCH v2 nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] [netfilter-next] netfilter: remove unused refcount variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Interrest in a ASA-like packet tracer?
  • From: Oliver Schröder <netfilter@xxxxxxxxxxxx>
• [PATCH] [netfilter-next] netfilter: remove unused refcount variable
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH nf v2 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• Re: [PATCH v2 nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• Re: [PATCH nft 2/3] parser_bison: Allow flushing maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/3] doc: Document add / delete element operations of sets and maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] parser_bison: Allow flushing flow tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/22] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/22] netfilter: nft_hash: support of symmetric hash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/22] netfilter: Use pr_cont where appropriate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/22] netfilter: nft_hash: rename nft_hash to nft_jhash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• [PATCH 12/22] netfilter: nft_fib: Support existence check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/22] netfilter: bridge: remove unneeded rcu_read_lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/22] netfilter: nf_conntrack: reduce resolve_normal_ct args
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/22] netfilter: arp_tables: remove redundant check on ret being non-zero
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/22] netfilter: nf_reject: remove unused variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/22] ipvs: Document sysctl sync_ports
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/22] ipvs: Document sysctl sync_qlen_max and sync_sock_size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/22] netfilter: fix the warning on unused refcount variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/22] ipvs: fix sync_threshold description and add sync_refresh_period, sync_retries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/22] netfilter: nf_tables: validate the expr explicitly after init successfully
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/22] netfilter: nft_set_rbtree: use per-set rwlock to improve the scalability
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/22] netfilter: provide nft_ctx in object init function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/22] netfilter: nf_tables: add nft_set_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/22] ipvs: Document sysctl pmtu_disc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/22] netfilter: refcounter conversions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/22] netfilter: limit: use per-rule spinlock to improve the scalability
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/22] ipvs: remove an annoying printk in netns init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/22] netfilter: nft_ct: add helper set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/22] netfilter: nft_exthdr: Allow checking TCP option presence, too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf v2 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH] netfilter: fix the warning on unused refcount variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: fix the warning on unused refcount variable
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: linux-next: build warning after merge of the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• [PATCH] ulogd: add +1 char for null char
  • From: Alexandru Ardelean <ardeleanalex@xxxxxxxxx>
• RE: linux-next: build warning after merge of the netfilter-next tree
  • From: "Reshetova, Elena" <elena.reshetova@xxxxxxxxx>
• [PATCH nf 1/1] netfilter: snmp: Fix one possible panic when snmp_trap_helper fail to register
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• linux-next: build warning after merge of the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• [PATCH nf 3/5] netfilter: drop const qualifier from struct nf_conntrack_expect_policy
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf 2/5] netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf 1/5] netfilter: nfnl_cthelper: don't report error if NFCTH_PRIV_DATA_LEN is empty
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf 4/5] netfilter: nfnl_cthelper: fix memory leak when do update
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH libnetfilter_cthelper] examples: fix double free in nftc-helper-add
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf 5/5] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf 0/5] netfilter: nfnl_cthelper: fix some bugs
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• ANNOUNCE: New talk accepted! Droplet: DDoS countermeasures powered by BPF + XDP
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [NetDev] [NetDev-tech] ANNOUNCE: New sponsor Netronome
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• Re: [NetDev-tech] [NetDev] ANNOUNCE: New sponsor Netronome
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [NetDev-tech] [NetDev] ANNOUNCE: New sponsor Netronome
  • From: Alexis Green <agreen@xxxxxxxxxxxxx>
• Re: [NetDev-tech] [NetDev] ANNOUNCE: New sponsor Netronome
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [NetDev-tech] [NetDev] ANNOUNCE: New sponsor Netronome
  • From: Amine Aouled Hamed <amine.ahd@xxxxxxxxx>
• Re: [NetDev] ANNOUNCE: New sponsor Netronome
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• ANNOUNCE: New talk accepted on TCP algorithms performance on wireless LTE networks
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [NetDev] ANNOUNCE: New sponsor Netronome
  • From: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
• Re: ANNOUNCE: New sponsor Netronome
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: ANNOUNCE: New sponsor Netronome
  • From: Amine Aouled Hamed <amine.ahd@xxxxxxxxx>
• ANNOUNCE: New sponsor Netronome
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH v2 nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• [PATCH v2 nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH nf 1/1] netfilter: ctlink: Fix one possible use-after-free in ctnetlink_create_expect
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: ctlink: Fix one possible use-after-free in ctnetlink_create_expect
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf 1/1] netfilter: ctlink: Fix one possible use-after-free in ctnetlink_create_expect
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH 1/7] net, netfilter: convert ip_vs_conn.refcnt from atomic_t to refcount_t
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [nf-next:master 1/1] net/netfilter/nfnetlink_acct.c:329: warning: unused variable 'refcount'
  • From: kbuild test robot <fengguang.wu@xxxxxxxxx>
• Re: [PATCH iptables v2 2/2] iptables-restore: support acquiring the lock.
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• ANNOUNCE: New tutorial on XDP
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH nft 3/3] doc: Document add / delete element operations of sets and maps
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• [PATCH nft 1/3] parser_bison: Allow flushing flow tables
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• [PATCH nft 2/3] parser_bison: Allow flushing maps
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH iptables v2 2/2] iptables-restore: support acquiring the lock.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables v2 1/2] iptables: remove duplicated argument parsing code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: move XT_LOCK_NAME from CFLAGS to config.h.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: cthelper: fix leak in nfnl_cthelper_del()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: ctlink: Fix one possible memleak in nfnl_cthelper_create
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset 6.32 - build failure
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: cthelper: no need for rcu read side on helper creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset 6.32 - build failure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [nft PATCH v2 2/2] doc: Describe ICMP(v6) expression and types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 1/2] proto: Add some exotic ICMPv6 types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net, netfilter: refcounter conversions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7] net, netfilter refcounter conversions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL 0/5] IPVS Updates for v4.12
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrack: Support IPv6 NAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/4] netfilter: sip: Use NF_DROP and NF_ACCEPT instead of 0 and 1
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf-next 1/4] netfilter: amanda: Correct the return value comparison of the func nf_nat_mangle_udp_packet
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf-next 3/4] netfilter: helper: Use the bool instead of int type
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf-next 2/4] netfilter: irc: Correct the return value comparison of the func nf_nat_mangle_tcp_packet
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf-next 0/4] Refine the nat helper codes
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH 05/10] netfilter: nf_tables: fix mismatch in big-endian system
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• ANNOUNCE: New Platinum sponsor - Facebook
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH 5/5] ipvs: Document sysctl pmtu_disc
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [nft PATCH v2 2/2] doc: Describe ICMP(v6) expression and types
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/2] proto: Add some exotic ICMPv6 types
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 3/5] ipvs: Document sysctl sync_qlen_max and sync_sock_size
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 4/5] ipvs: Document sysctl sync_ports
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL 0/5] IPVS Updates for v4.12
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/5] ipvs: remove an annoying printk in netns init
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/5] ipvs: fix sync_threshold description and add sync_refresh_period, sync_retries
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] conntrack: Support IPv6 NAT
  • From: Neil Wilson <neil@xxxxxxxxxxx>
• Re: conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Peter Marczis <peter.marczis@xxxxxxxxxxxxxxxxxxxx>
• RE: [PATCH 05/10] netfilter: nf_tables: fix mismatch in big-endian system
  • From: David Laight <David.Laight@xxxxxxxxxx>
• RE: [PATCH 07/10] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: David Laight <David.Laight@xxxxxxxxxx>
• [PATCH] net, netfilter: refcounter conversions
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• Re: [PATCH iptables 1/2] iptables: remove duplicated argument parsing code
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables v2 1/2] iptables: remove duplicated argument parsing code
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables v2 2/2] iptables-restore: support acquiring the lock.
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables v2]: Support the iptables lock in ip[6]tables-restore
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• RE: [PATCH 0/7] net, netfilter refcounter conversions
  • From: "Reshetova, Elena" <elena.reshetova@xxxxxxxxx>
• [PATCH] iptables: move XT_LOCK_NAME from CFLAGS to config.h.
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH nf 1/1] netfilter: ctlink: Fix one possible memleak in nfnl_cthelper_create
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH iptables 1/2] iptables: remove duplicated argument parsing code
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 00/10] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] proto: Add some exotic ICMPv6 types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• Re: [nft PATCH] proto: Add some exotic ICMPv6 types
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/10] netfilter: nf_tables: set pktinfo->thoff at AH header if found
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/10] netfilter: nft_set_bitmap: fetch the element key based on the set->klen
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/10] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/10] netfilter: bridge: honor frag_max_size when refragmenting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/10] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/10] netfilter: nf_tables: fix mismatch in big-endian system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/10] netfilter: nf_nat_sctp: fix ICMP packet to be dropped accidently
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/10] netfilter: don't track fragmented packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/10] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/10] Revert "netfilter: nf_tables: add flush field to struct nft_set_iter"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/10] netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl 0/2] add backend support to define ct helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nftables 0/7] ct helper set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] proto: Add some exotic ICMPv6 types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] proto: Add some exotic ICMPv6 types
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2 nftables 0/7] ct helper set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 2/7] evaluate: refactor CMD_OBJ_QUOTA/COUNTER handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 1/7] src: add initial ct helper support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 6/7] tests: add insert-failure test
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 5/7] tests: py: add ct helper tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 7/7] doc: ct helper objects and helper set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 3/7] src: allow listing all ct helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 4/7] src: implement add/create/delete for ct helper objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalid
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• [PATCH nf] netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalid
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: [PATCH] netfilter: logging copyrights is useless
  • From: Harald Welte <laforge@xxxxxxxxxxxxx>
• [PATCH iptables 1/2] iptables: remove duplicated argument parsing code
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables]: Support the iptables lock in ip[6]tables-restore
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables 2/2] iptables-restore: support acquiring the lock.
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH] netfilter: logging copyrights is useless
  • From: Corentin Labbe <clabbe.montjoie@xxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7] net, netfilter refcounter conversions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ANNOUNCE: New Talk: Story of a Network Virtualization and it's future in Software and in Hardware
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nft 6/9] tests: py: add ct helper tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] 13th Netfilter Workshop nearby Faro, Portugal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] net, netfilter: convert ip_vs_conn.refcnt from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 0/7] net, netfilter refcounter conversions
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 2/7] net, netfilter: convert ip_vs_dest.refcnt from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 3/7] net, netfilter: convert ctnl_timeout.refcnt from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 4/7] net, netfilter: convert nf_acct.refcnt from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 6/7] net, netfilter: convert nfulnl_instance.use from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 5/7] net, netfilter: convert nf_conntrack_expect.use from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 7/7] net, netfilter: convert clusterip_config.refcount and clusterip_config.entries from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_statistic: Complete nft translator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 9/9] doc: helper assignement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 6/9] tests: py: add ct helper tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/9] ct helper set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 5/9] ct: add conntrack event mask support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• [PATCH nf-next 1/1] netfilter: ctlink: Remove duplicated condition check in nfnl_cthelper_create
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH nft 5/9] ct: add conntrack event mask support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 8/9] doc: ct zone set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 9/9] doc: helper assignement
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 7/9] files: provide 'raw' table equivalent
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 6/9] tests: py: add ct helper tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 5/9] ct: add conntrack event mask support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/9] src: implement add/create/delete for ct helper objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/9] src: allow listing all ct helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/9] evaluate: refactor CMD_OBJ_QUOTA/COUNTER handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/9] src: add initial ct helper support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/9] ct helper set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 2/2] src: ct helper support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 1/2] object: extend set/get api for u8/u16 types
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 0/2] add backend support to define ct helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_statistic: Complete nft translator
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ANNOUNCE: New talk accepted on Netesto tool suite
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Peter Marczis <peter.marczis@xxxxxxxxxxxxxxxxxxxx>
• Re: conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] iptables: set the path of the lock file via a configure option.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Peter Marczis <peter.marczis@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [PATCH] iptables: set the path of the lock file via a configure option.
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• Re: [PATCH net-next 1/1] netfilter: helper: Remove the rcu lock in nf_ct_helper_expectfn_find_by_name and nf_ct_helper_expectfn_find_by_symbol.
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• [PATCH net-next 1/1] netfilter: helper: Remove the rcu lock in nf_ct_helper_expectfn_find_by_name and nf_ct_helper_expectfn_find_by_symbol.
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH net] bridge: drop netfilter fake rtable unconditionally
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: drop netfilter fake rtable unconditionally
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_set_rbtree: use per-set rwlock to improve the scalability
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: limit: use per-rule spinlock to improve the scalability
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_conntrack: reduce resolve_normal_ct args
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: ip_rcv_finish() NULL pointer kernel panic
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ip_rcv_finish() NULL pointer kernel panic
  • From: Dan Streetman <dan.streetman@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_statistic: Complete nft translator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: drop netfilter fake rtable unconditionally
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] bridge: drop netfilter fake rtable unconditionally
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] extensions: libxt_statistic: Complete nft translator
  • From: Phil Sutter <phil@xxxxxx>
• ANNOUNCE: New talk Busypolling next generation
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: [nf-next PATCH] nftables: fib: Support existence check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/2] netfilter: helper set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: bridge: honor frag_max_size when refragmenting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix missmatch in big-endian system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nft_set_bitmap: fetch the element key based on the set->klen
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nf] Revert "netfilter: nf_tables: add flush field to struct nft_set_iter"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/3] Follow-up to boolean type and existence checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] expr: exthdr: Display NFT_EXTHDR_F_PRESENT in debug output
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCHv2] fib: Add support for NFTA_FIB_F_PRESENT flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: fix crash when inputting an incomplete set add command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.32 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.32 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ANNOUNCE: New talk accepted: TIPC Overlapping Ring Neighbor Monitoring Algorithm
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_set_rbtree: use per-set rwlock to improve the scalability
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [nft PATCH v2 2/3] tests: Adjust for changed exthdr debug output
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 3/3] doc: Document boolean type and applications
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 0/3] Follow-up to boolean type and existence checks
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/3] fib: Support existence check
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] expr: exthdr: Display NFT_EXTHDR_F_PRESENT in debug output
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCHv2] fib: Add support for NFTA_FIB_F_PRESENT flag
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: limit: use per-rule spinlock to improve the scalability
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nft] src: fix crash when inputting an incomplete set add command
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: [nft PATCH 4/5] fib: Support existence check
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 1/2] harmonize log file defaults with ulogd.conf
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• [PATCH 2/2] rotate all default output files
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] libxtables: avoid returning duplicate address for host resolution
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 5/5] doc: Document boolean type and applications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 4/5] fib: Support existence check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/5] Introduce boolean type and existence checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 3/5] exthdr: Implement existence check
  • From: Phil Sutter <phil@xxxxxx>