Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH iptables v2 2/2] iptables-restore: support acquiring the lock.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables v2 1/2] iptables: remove duplicated argument parsing code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: move XT_LOCK_NAME from CFLAGS to config.h.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: cthelper: fix leak in nfnl_cthelper_del()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: ctlink: Fix one possible memleak in nfnl_cthelper_create
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset 6.32 - build failure
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: cthelper: no need for rcu read side on helper creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset 6.32 - build failure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [nft PATCH v2 2/2] doc: Describe ICMP(v6) expression and types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 1/2] proto: Add some exotic ICMPv6 types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net, netfilter: refcounter conversions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7] net, netfilter refcounter conversions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL 0/5] IPVS Updates for v4.12
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrack: Support IPv6 NAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/4] netfilter: sip: Use NF_DROP and NF_ACCEPT instead of 0 and 1
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf-next 1/4] netfilter: amanda: Correct the return value comparison of the func nf_nat_mangle_udp_packet
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf-next 3/4] netfilter: helper: Use the bool instead of int type
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf-next 2/4] netfilter: irc: Correct the return value comparison of the func nf_nat_mangle_tcp_packet
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf-next 0/4] Refine the nat helper codes
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH 05/10] netfilter: nf_tables: fix mismatch in big-endian system
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• ANNOUNCE: New Platinum sponsor - Facebook
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH 5/5] ipvs: Document sysctl pmtu_disc
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [nft PATCH v2 2/2] doc: Describe ICMP(v6) expression and types
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/2] proto: Add some exotic ICMPv6 types
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 3/5] ipvs: Document sysctl sync_qlen_max and sync_sock_size
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 4/5] ipvs: Document sysctl sync_ports
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL 0/5] IPVS Updates for v4.12
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/5] ipvs: remove an annoying printk in netns init
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/5] ipvs: fix sync_threshold description and add sync_refresh_period, sync_retries
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] conntrack: Support IPv6 NAT
  • From: Neil Wilson <neil@xxxxxxxxxxx>
• Re: conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Peter Marczis <peter.marczis@xxxxxxxxxxxxxxxxxxxx>
• RE: [PATCH 05/10] netfilter: nf_tables: fix mismatch in big-endian system
  • From: David Laight <David.Laight@xxxxxxxxxx>
• RE: [PATCH 07/10] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: David Laight <David.Laight@xxxxxxxxxx>
• [PATCH] net, netfilter: refcounter conversions
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• Re: [PATCH iptables 1/2] iptables: remove duplicated argument parsing code
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables v2 1/2] iptables: remove duplicated argument parsing code
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables v2 2/2] iptables-restore: support acquiring the lock.
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables v2]: Support the iptables lock in ip[6]tables-restore
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• RE: [PATCH 0/7] net, netfilter refcounter conversions
  • From: "Reshetova, Elena" <elena.reshetova@xxxxxxxxx>
• [PATCH] iptables: move XT_LOCK_NAME from CFLAGS to config.h.
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH nf 1/1] netfilter: ctlink: Fix one possible memleak in nfnl_cthelper_create
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH iptables 1/2] iptables: remove duplicated argument parsing code
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 00/10] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] proto: Add some exotic ICMPv6 types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• Re: [nft PATCH] proto: Add some exotic ICMPv6 types
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/10] netfilter: nf_tables: set pktinfo->thoff at AH header if found
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/10] netfilter: nft_set_bitmap: fetch the element key based on the set->klen
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/10] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/10] netfilter: bridge: honor frag_max_size when refragmenting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/10] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/10] netfilter: nf_tables: fix mismatch in big-endian system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/10] netfilter: nf_nat_sctp: fix ICMP packet to be dropped accidently
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/10] netfilter: don't track fragmented packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/10] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/10] Revert "netfilter: nf_tables: add flush field to struct nft_set_iter"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/10] netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl 0/2] add backend support to define ct helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nftables 0/7] ct helper set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] proto: Add some exotic ICMPv6 types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] proto: Add some exotic ICMPv6 types
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2 nftables 0/7] ct helper set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 2/7] evaluate: refactor CMD_OBJ_QUOTA/COUNTER handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 1/7] src: add initial ct helper support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 6/7] tests: add insert-failure test
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 5/7] tests: py: add ct helper tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 7/7] doc: ct helper objects and helper set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 3/7] src: allow listing all ct helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nftables 4/7] src: implement add/create/delete for ct helper objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalid
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• [PATCH nf] netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalid
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: [PATCH] netfilter: logging copyrights is useless
  • From: Harald Welte <laforge@xxxxxxxxxxxxx>
• [PATCH iptables 1/2] iptables: remove duplicated argument parsing code
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables]: Support the iptables lock in ip[6]tables-restore
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH iptables 2/2] iptables-restore: support acquiring the lock.
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• [PATCH] netfilter: logging copyrights is useless
  • From: Corentin Labbe <clabbe.montjoie@xxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7] net, netfilter refcounter conversions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ANNOUNCE: New Talk: Story of a Network Virtualization and it's future in Software and in Hardware
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nft 6/9] tests: py: add ct helper tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] 13th Netfilter Workshop nearby Faro, Portugal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] net, netfilter: convert ip_vs_conn.refcnt from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 0/7] net, netfilter refcounter conversions
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 2/7] net, netfilter: convert ip_vs_dest.refcnt from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 3/7] net, netfilter: convert ctnl_timeout.refcnt from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 4/7] net, netfilter: convert nf_acct.refcnt from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 6/7] net, netfilter: convert nfulnl_instance.use from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 5/7] net, netfilter: convert nf_conntrack_expect.use from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• [PATCH 7/7] net, netfilter: convert clusterip_config.refcount and clusterip_config.entries from atomic_t to refcount_t
  • From: Elena Reshetova <elena.reshetova@xxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_statistic: Complete nft translator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 9/9] doc: helper assignement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 6/9] tests: py: add ct helper tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/9] ct helper set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 5/9] ct: add conntrack event mask support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• [PATCH nf-next 1/1] netfilter: ctlink: Remove duplicated condition check in nfnl_cthelper_create
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH nft 5/9] ct: add conntrack event mask support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 8/9] doc: ct zone set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 9/9] doc: helper assignement
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 7/9] files: provide 'raw' table equivalent
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 6/9] tests: py: add ct helper tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 5/9] ct: add conntrack event mask support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/9] src: implement add/create/delete for ct helper objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/9] src: allow listing all ct helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/9] evaluate: refactor CMD_OBJ_QUOTA/COUNTER handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/9] src: add initial ct helper support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/9] ct helper set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 2/2] src: ct helper support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 1/2] object: extend set/get api for u8/u16 types
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 0/2] add backend support to define ct helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_statistic: Complete nft translator
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ANNOUNCE: New talk accepted on Netesto tool suite
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Peter Marczis <peter.marczis@xxxxxxxxxxxxxxxxxxxx>
• Re: conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] iptables: set the path of the lock file via a configure option.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• conntrack (possibly) hangs on our ARM CPU in case we delete 5k+ connections as fast as possible
  • From: Peter Marczis <peter.marczis@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [PATCH] iptables: set the path of the lock file via a configure option.
  • From: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
• Re: [PATCH net-next 1/1] netfilter: helper: Remove the rcu lock in nf_ct_helper_expectfn_find_by_name and nf_ct_helper_expectfn_find_by_symbol.
  • From: Feng Gao <gfree.wind@xxxxxxxxx>
• [PATCH net-next 1/1] netfilter: helper: Remove the rcu lock in nf_ct_helper_expectfn_find_by_name and nf_ct_helper_expectfn_find_by_symbol.
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH nf 1/1] netfilter: helper: Fix possible panic caused by invoking expectfn unloaded
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH net] bridge: drop netfilter fake rtable unconditionally
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: drop netfilter fake rtable unconditionally
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_set_rbtree: use per-set rwlock to improve the scalability
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: limit: use per-rule spinlock to improve the scalability
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_conntrack: reduce resolve_normal_ct args
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: ip_rcv_finish() NULL pointer kernel panic
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ip_rcv_finish() NULL pointer kernel panic
  • From: Dan Streetman <dan.streetman@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_statistic: Complete nft translator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] bridge: drop netfilter fake rtable unconditionally
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] bridge: drop netfilter fake rtable unconditionally
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] extensions: libxt_statistic: Complete nft translator
  • From: Phil Sutter <phil@xxxxxx>
• ANNOUNCE: New talk Busypolling next generation
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: [nf-next PATCH] nftables: fib: Support existence check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/2] netfilter: helper set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Force fake conntrack entry to be at least 8 bytes aligned
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: bridge: honor frag_max_size when refragmenting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix missmatch in big-endian system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nft_set_bitmap: fetch the element key based on the set->klen
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nf] Revert "netfilter: nf_tables: add flush field to struct nft_set_iter"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 nf] netfilter: nft_set_bitmap: keep a list of dummy elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/3] Follow-up to boolean type and existence checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] expr: exthdr: Display NFT_EXTHDR_F_PRESENT in debug output
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCHv2] fib: Add support for NFTA_FIB_F_PRESENT flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: fix crash when inputting an incomplete set add command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.32 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.32 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ANNOUNCE: New talk accepted: TIPC Overlapping Ring Neighbor Monitoring Algorithm
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_set_rbtree: use per-set rwlock to improve the scalability
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [nft PATCH v2 2/3] tests: Adjust for changed exthdr debug output
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 3/3] doc: Document boolean type and applications
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 0/3] Follow-up to boolean type and existence checks
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/3] fib: Support existence check
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] expr: exthdr: Display NFT_EXTHDR_F_PRESENT in debug output
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCHv2] fib: Add support for NFTA_FIB_F_PRESENT flag
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: limit: use per-rule spinlock to improve the scalability
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nft] src: fix crash when inputting an incomplete set add command
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: [nft PATCH 4/5] fib: Support existence check
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 1/2] harmonize log file defaults with ulogd.conf
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• [PATCH 2/2] rotate all default output files
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] libxtables: avoid returning duplicate address for host resolution
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 5/5] doc: Document boolean type and applications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 4/5] fib: Support existence check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/5] Introduce boolean type and existence checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 3/5] exthdr: Implement existence check
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 5/5] doc: Document boolean type and applications
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/5] fib: Support existence check
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/5] Introduce boolean datatype and boolean expression
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/5] exthdr: Add support for exthdr specific flags
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/5] Introduce boolean type and existence checks
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] fib: Add support for NFTA_FIB_F_PRESENT flag
  • From: Phil Sutter <phil@xxxxxx>
• [nf-next PATCH] nftables: fib: Support existence check
  • From: Phil Sutter <phil@xxxxxx>
• ANNOUNCE: New talk! Kernel HTTP/TCP/IP stack for HTTP DDoS mitigation
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH conntrackd 1/2] conntrackd: Remove obsolete rule to catch ambiguous Checksum option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrackd 2/2] conntrackd: CommitTimeout breaks DisableExternalCache set On
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: conntrack: refine gc worker heuristics, redux
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH nf v2] netfilter: bridge: honor frag_max_size when refragmenting
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: bridge: honor frag_max_size when refragmenting
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: bridge: honor frag_max_size when refragmenting
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: per flow stats collection using libnetfilter_conntrack
  • From: Tarun Khanna <tkhanna@xxxxxxxxxx>
• Re: Question about getting counters for transparent terminated flows
  • From: Tarun Khanna <tkhanna@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix missmatch in big-endian system
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix missmatch in big-endian system
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_conntrack: reduce resolve_normal_ct args
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables] iptables-translate: print nft iff there are more expanded rules to print
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• [PATCH iptables] iptables-translate: print nft iff there are more expanded rules to print
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix missmatch in big-endian system
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
• Re: per flow stats collection using libnetfilter_conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Question about getting counters for transparent terminated flows
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] libxtables: duplicated loopback address via host_to_ipaddr()
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• Re: [PATCH iptables 1/2] iptables-translate: print nft command for each expand rules via dns names
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: bridge: remove unneeded rcu_read_lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_reject: remove unused variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Question about getting counters for transparent terminated flows
  • From: Tarun Khanna <tkhanna@xxxxxxxxxx>
• Re: [PATCH v2 nf] netfilter: don't track fragmented packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [net] netfilter: nat: sctp: fix ICMP packet to be dropped accidently
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] libxtables: avoid returning duplicate address for host resolution
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 1/3] libxtables: remove unnecessary nesting from host_to_ip(6)addr
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 1/3] libxtables: remove unnecessary nesting from host_to_ip(6)addr
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] libxtables: abolish AI_CANONNAME
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] libxtables: avoid returning duplicate address for host resolution
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/2] netfilter: helper set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] libxtables: avoid returning duplicate address for host resolution
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 2/3] libxtables: abolish AI_CANONNAME
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 3/3] libxtables: avoid returning duplicate address for host resolution
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 1/3] libxtables: remove unnecessary nesting from host_to_ip(6)addr
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 2/3] libxtables: abolish AI_CANONNAME
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Filter duplicate IP addresses from libxtables
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nf-next 0/2] netfilter: untracked object removal
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 1/3] extensions: libxt_socket: add --restore-skmark option
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 3/3] extensions: restore matching any SPI id by default
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 2/3] build: resolve build error involving libnftnl
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] libxtables: duplicated loopback address via host_to_ipaddr()
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH nf-next 1/2] netfilter: provide nft_ctxc in object init function
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/2] netfilter: helper set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nft_ct: add helper set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables-translate: Avoid querying the kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] xtables-translate: Avoid querying the kernel
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf] netfilter: nf_tables: fix missmatch in big-endian system
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH] libxtables: duplicated loopback address via host_to_ipaddr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables 2/2] libxtables: pass AI_ADDRCONFIG flag to getaddrinfo()
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables 2/2] libxtables: pass AI_ADDRCONFIG flag to getaddrinfo()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/2] netfilter: untracked object removal
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 1/2] iptables-translate: print nft command for each expand rules via dns names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables 2/2] libxtables: pass AI_ADDRCONFIG flag to getaddrinfo()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: kill the fake untracked conntrack objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• ANNOUNCE: Verizon Labs New Platinum Sponsor
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: remove nf_ct_is_untracked
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables] libxtables: fix wrong naddr when using localhost
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• Re: [PATCH iptables] libxtables: fix wrong naddr when using localhost
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_addrtype: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v2 1/1] netfilter: Use bool type instead of int as the return type of some functions
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [iptables PATCH] extensions: libxt_addrtype: Add translation to nft
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables] libxtables: fix wrong naddr when using localhost
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• [PATCH v2] netfilter: Parse ICMPv6 redirects
  • From: Alin Nastac <alin.nastac@xxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] extensions: libxt_conntrack: Fix 'state' translation to nft
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH ulogd2 1/2] ulogd.conf: harmonize log file options with module default values
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH] netfilter: nf_reject: remove unused variable
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH libnetfilter_conntrack] src: remove old libnfnetlink parsers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Thanks to netfilter project
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: bridge: remove unneeded rcu_read_lock
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/1] netfilter: Use bool type instead of int as the return value of nf_conntrack_tuple_taken and nf_nat_used_tuple
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH nf 1/2] netfilter: nft_set_bitmap: fetch the element key based on the set->klen
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: validate the expr explicitly after init successfully
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Thanks to netfilter project
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
• Re: [PATCH nft v2] src: hash: support of symmetric hash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Use pr_cont where appropriate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] expr: hash: support of symmetric hash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: remove redundant check on ret being non-zero
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 2/2] netfilter: nft_hash: support of symmetric hash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH] nftables: exthdr: Allow checking TCP option presence, too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/2] netfilter: nft_hash: rename nft_hash to nft_jhash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nft_set_bitmap: fetch the element key based on the set->klen
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink: use nftnl_udata_put_u32()/nftnl_udata_get_u32()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] udata: add nftnl_udata_put_u32() and nftnl_udata_get_u32()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: add nft_set_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nft_set_bitmap: fetch the element key based on the set->klen
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• ANNOUNCE: New talk accepted on IO no Things
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nft_set_bitmap: fetch the element key based on the set->klen
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: validate the expr explicitly after init successfully
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• ANNOUNCE: New talk accepted on Netfilter Connection Tracking
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nft_set_bitmap: fix memory leak
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• [PATCH nf 1/2] netfilter: nft_set_bitmap: fetch the element key based on the set->klen
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: set pktinfo->thoff at AH header if found
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: set pktinfo->thoff at AH header if found
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: set pktinfo->thoff at AH header if found
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: set pktinfo->thoff at AH header if found
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [net] netfilter: nat: sctp: fix ICMP packet to be dropped accidently
  • From: Ying Xue <ying.xue@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• ANNOUNCE: Netdev 2.1 update Mar 03
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH v2 nf] netfilter: don't track fragmented packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: remove incorrect debug assert
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/4] netfilter: use skb_to_full_sk in ip_route_me_harder
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: nf_conntrack_sip: fix wrong memory initialisation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/4] netfilter: nf_tables: don't call nfnetlink_set_err() if nfnetlink_send() fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: nft_set_rbtree: incorrect assumption on lower interval lookups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft: ah expression doesn't work for IPv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: nftables queue target aborts rules processing unconditionally
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• Re: nftables queue target aborts rules processing unconditionally
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables queue target aborts rules processing unconditionally
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables queue target aborts rules processing unconditionally
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• Re: [PATCH lnfct 2/2] conntrack: revert getobjopt_is_nat condition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] src: Use nftnl_buf to export XML/JSON rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables queue target aborts rules processing unconditionally
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• Re: [PATCH iptables] utils: nfsynproxy: fix build with musl libc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipv6: Preserve link scope traffic original oif
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft: ah expression doesn't work for IPv6
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] ipv6: Preserve link scope traffic original oif
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix wrong memory initialisation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: remove incorrect debug assert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipv6: Preserve link scope traffic original oif
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: remove incorrect debug assert
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: remove incorrect debug assert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipv6: Preserve link scope traffic original oif
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: nat_masquerade: Check oom when invoke nfct_nat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: nat_masquerade: Check oom when invoke nfct_nat
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nf 1/1] netfilter: nat_masquerade: Check oom when invoke nfct_nat
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: nft: ah expression doesn't work for IPv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft: ah expression doesn't work for IPv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: h323,sip: Fix possible dead loop in nat_rtp_rtcp and nf_nat_sdp_media
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• nft: ah expression doesn't work for IPv6
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf,v2] netfilter: nf_tables: don't call nfnetlink_set_err() if nfnetlink_send() fails
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• [PATCH libnftnl] src: Use nftnl_buf to export XML/JSON rules
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• Re: [PATCH nftables] tests: py: fix some typos in README
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables] tests: py: fix some typos in README
  • From: Timothy Redaelli <tredaelli@xxxxxxxxxx>
• ANNOUNCE: Netdev 2.1 New Gold Sponsor
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: h323,sip: Fix possible dead loop in nat_rtp_rtcp and nf_nat_sdp_media
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [PATCH nf-next v3 2/2] netfilter: nft_hash: support of symmetric hash
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: don't call nfnetlink_set_err() if nfnetlink_send() fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: h323,sip: Fix possible dead loop in nat_rtp_rtcp and nf_nat_sdp_media
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] netfilter: h323,sip: Fix possible dead loop in nat_rtp_rtcp and nf_nat_sdp_media
  • From: Gao Feng <fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf 1/1] netfilter: h323,sip: Fix possible dead loop in nat_rtp_rtcp and nf_nat_sdp_media
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• [PATCH iptables] utils: nfsynproxy: fix build with musl libc
  • From: Baruch Siach <baruch@xxxxxxxxxx>
• About Kernel SynProxy Performance
  • From: Tugrul Erdogan <h.tugrul.erdogan@xxxxxxxxx>
• Re: [PATCH nft] mnl: continue monitor if errno is ESRCH
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_tables: netlink listener hits ESRCH on socket overrun
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nft_set_rbtree: incorrect assumption on lower interval lookups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH lnfct 2/2] conntrack: revert getobjopt_is_nat condition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Parse ICMPv6 redirects
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: netfilter: conntrack: refine gc worker heuristics, redux
  • From: Florian Westphal <fw@xxxxxxxxx>
• netfilter: conntrack: refine gc worker heuristics, redux
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 09/14] netfilter: conntrack: refine gc worker heuristics, redux
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] mnl: continue monitor if errno is ESRCH
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_sip: fix wrong memory initialisation
  • From: Christophe Leroy <christophe.leroy@xxxxxx>
• Re: [PATCH nft] mnl: continue monitor if errno is ESRCH
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 09/14] netfilter: conntrack: refine gc worker heuristics, redux
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH] netfilter: Parse ICMPv6 redirects
  • From: Alin Nastac <alin.nastac@xxxxxxxxx>
• [PATCH] ipv6: Preserve link scope traffic original oif
  • From: Alin Nastac <alin.nastac@xxxxxxxxx>
• [PATCH] ipv6: Preserve link scope traffic original oif
  • From: Alin Nastac <alin.nastac@xxxxxxxxx>
• Re: [PATCH nf-next v2 2/2] netfilter: nft_hash: support of symmetric hash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] mnl: continue monitor if errno is ESRCH
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] mnl: continue monitor if errno is ESRCH
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft authentication
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nft authentication
  • From: Fabian Franz <s1410239008@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 2/2] netfilter: nft_hash: support of symmetric hash
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• Re: nft authentication
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: Use pr_cont where appropriate
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH lnfct 2/2] conntrack: revert getobjopt_is_nat condition
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• nft authentication
  • From: Fabian Franz <s1410239008@xxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft v2] src: hash: support of symmetric hash
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH nf-next v2 2/2] netfilter: nft_hash: support of symmetric hash
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• ANNOUNCE: Netdev 2.1 update Feb 28
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH v3] libiptc: don't set_changed() when checking rules with module jumps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [4.9.10] ip_route_me_harder() reading off-slab
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] libiptc: don't set_changed() when checking rules with module jumps
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH lnfct 2/2] conntrack: revert getobjopt_is_nat condition
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH lnfct 2/2] conntrack: revert getobjopt_is_nat condition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] libiptc: don't set_changed() when checking rules with module jumps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: remove redundant check on ret being non-zero
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: [PATCH 0/7] nftables: add ct helper set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] extensions: libxt_hashlimit: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables 1/2] xshared: do not lock again and again if "-w" option is not specified
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables V2 2/2] xshared: using the blocking file lock request when we wait indefinitely
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH lnfct 2/2] conntrack: revert getobjopt_is_nat condition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH lnfct 1/2] conntrack: fix missing break
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH lnfct 0/2] fix - src: add support for IPv6 NAT
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH lnfct 2/2] conntrack: revert getobjopt_is_nat condition
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH lnfct 1/2] conntrack: fix missing break
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH nft 3/4] src: support zone set statement with optional direction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/4] src: add conntrack zone support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/4] tests: add test entries for conntrack zones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/4] ct: refactor print function so it can be re-used for ct statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] xtables: Remove unused macro
  • From: Liping Zhang <zlpnobody@xxxxxxxxx>
• [PATCH nft 4/4] src: store byteorder for set data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/4] evaluate: set byteorder as lhs expression context in stmt_evaluate_arg()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/4] netlink: rework NFTNL_SET_USERDATA to accomodate new attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/4] src: rename set_keytype_alloc() to set_datatype_alloc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: per flow stats collection using libnetfilter_conntrack
  • From: Tarun Khanna <tkhanna@xxxxxxxxxx>
• Re: per flow stats collection using libnetfilter_conntrack
  • From: Florian Westphal <fw@xxxxxxxxx>
• per flow stats collection using libnetfilter_conntrack
  • From: Tarun Khanna <tkhanna@xxxxxxxxxx>
• [PATCH iptables] xtables: Remove unused macro
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• [PATCH iptables] extensions: libxt_hashlimit: Add translation to nft
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• [PATCH nft 3/7] netlink: BUG when object type is unknown
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 6/7] src: allow listing all ct helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnftnl 1/2] object: don't set NFTNL_OBJ_TYPE unless obj->ops is non-null
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/2] object: don't set NFTNL_OBJ_TYPE unless obj->ops is non-null
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnftnl 2/2] object: fix crash when object ops is null
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/7] evaluate: refactor CMD_OBJ_QUOTA/COUNTER handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 0/2] object: fix crashes with out-of-tree nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/7] src: add initial ct helper support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 7/7] src: implement add/create/delete for ct helper objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 2/2] object: fix crash when object ops is null
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 0/7] nftables: add ct helper set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 2/7] src: ct helper support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 1/7] object: extend set/get api for u8/u16 types
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [4.9.10] ip_route_me_harder() reading off-slab
  • From: Daniel J Blueman <daniel@xxxxxxxxx>
• Re: [PATCH 0/6] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• ANNOUNCE: Netdev 2.1 update Feb 27
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH 2/6] uapi: stop including linux/sysctl.h in uapi/linux/netfilter.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: nft_set_bitmap: incorrect bitmap size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: nf_ct_expect: nf_ct_expect_related_report(): Return zero on success.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] uapi: fix linux/netfilter/xt_hashlimit.h userspace compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/6] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/6] netfilter: nft_ct: fix random validation errors for zone set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nft] mnl: continue monitor if errno is ESRCH
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH V3] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nf] netfilter: nft_set_bitmap: incorrect bitmap size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft bug: Deleting map elements with intervals
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nft bug: Deleting map elements with intervals
  • From: Felix Kluge <f.kluge@xxxxxxxx>
• [PATCH nft] mnl: continue monitor if errno is ESRCH
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• [PATCH v3] libiptc: don't set_changed() when checking rules with module jumps
  • From: Dan Williams <dcbw@xxxxxxxxxx>
• Re: [PATCH] uapi: fix linux/netfilter/xt_hashlimit.h userspace compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] erec: Fix input descriptors for included files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/2] netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nf_ct_expect: nf_ct_expect_related_report(): Return zero on success.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] datatype: add DTYPE_F_CLONE flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: py: fix incorrect bytecode in numgen and hash mappings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink_delinearize: remove integer_type_postprocess()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] libiptc: don't set_changed() when checking rules with module jumps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] evaluate: store byteorder for set keys
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] netlink: store set byteorder in NFTA_SET_USERDATA
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] libiptc: don't set_changed() when checking rules with module jumps
  • From: Dan Williams <dcbw@xxxxxxxxxx>
• [PATCH] libiptc: don't set_changed() when checking rules with module jumps
  • From: Dan Williams <dcbw@xxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: net: possible deadlock in skb_queue_tail
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf 1/2] netfilter: nf_ct_expect: nf_ct_expect_related_report(): Return zero on success.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] uapi: fix linux/netfilter/xt_hashlimit.h userspace compilation error
  • From: "Dmitry V. Levin" <ldv@xxxxxxxxxxxx>
• Re: [PATCH libnftnl] exthdr: remove unused variable uval8
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl] exthdr: remove unused variable uval8
  • From: Alexander Alemayhu <alexander@xxxxxxxxxxxx>
• Re: [PATCH] uapi: stop including linux/sysctl.h in uapi/linux/netfilter.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_ct: fix random validation errors for zone set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 0/8] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT (fwd)
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nf-next 2/2] netfilter: nft_hash: support of symmetric hash
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: netfilter: nft_ct: add zone id set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter: nft_ct: add zone id set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: nft_ct: add zone id set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: hash: support of symmetric hash
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nft_hash: support of symmetric hash
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nft_hash: rename nft_hash to nft_jhash
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH 1/8] netfilter: nf_ct_helper: warn when not applying default helper assignment
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/8] netfilter: ipset: Null pointer exception in ipset list:set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: nfnetlink: remove static declaration from err_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/8] netfilter: xt_hashlimit: Fix integer divide round to zero.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: ctnetlink: Fix regression in CTA_STATUS processing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/8] Fix bug: sometimes valid entries in hash:* types of sets were evicted
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/8] netfilter: nfnetlink_queue: fix NFQA_VLAN_MAX definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/8] netfilter: ctnetlink: Fix regression in CTA_HELP processing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/8] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] expr: hash: support of symmetric hash
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH nf-next 0/2] netfilter: nft_hash: symhash type support
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: netfilter: nft_ct: add zone id set support
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT (fwd)
  • From: Julia Lawall <julia.lawall@xxxxxxx>
• Re: [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] uapi: stop including linux/sysctl.h in uapi/linux/netfilter.h
  • From: "Dmitry V. Levin" <ldv@xxxxxxxxxxxx>
• [PATCH V2] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nft] src: revisit tcp options support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: revisit tcp options support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: revisit tcp options support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 1/2] netfilter: nf_ct_expect: nf_ct_expect_related_report(): Return zero on success,
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ANNOUNCE: Netdev 2.1 CFP extended
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: remove incorrect debug assert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] erec: Fix input descriptors for included files
  • From: Anatole Denis <anatole@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: remove incorrect debug assert
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: remove incorrect debug assert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] ipset patches for nf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_hashlimit: Fix integer divide round to zero.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: net: possible deadlock in skb_queue_tail
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• [nf-next PATCH] nftables: exthdr: Allow checking TCP option presence, too
  • From: Phil Sutter <phil@xxxxxx>
• net: possible deadlock in skb_queue_tail
  • From: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
• ANNOUNCE: Netdev 2.1 update Feb 20
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH] nfnetlink_log: fix the typo
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nfnetlink: remove static declaration from err_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink_queue: fix NFQA_VLAN_MAX definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl 4/9] src: ct: add zone support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.31 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/2] ipset patches for nf
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/2] Fix bug: sometimes valid entries in hash:* types of sets were evicted
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: ipset: Null pointer exception in ipset list:set
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nfnetlink: remove static declaration from err_list
  • From: Liping Zhang <zlpnobody@xxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [4.9.10] ip_route_me_harder() reading off-slab
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: Parameter 'size' in type list:set is ignored
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Null pointer exception in ipset list:set
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nft] doc: Document maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nf-next] netfilter: ct: add helper assignment support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC nf-next] netfilter: ct: add helper assignment support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] exthdr: Add missing exthdr flags cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: conntrack_ftp and DNAT
  • From: Klaus Ethgen <Klaus+lkml@xxxxxxxxx>
• [libnftnl PATCH] exthdr: Add missing exthdr flags cases
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: nfnetlink_queue: fix NFQA_VLAN_MAX definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nfnetlink_queue: fix NFQA_VLAN_MAX definition
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: conntrack_ftp and DNAT
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: conntrack_ftp and DNAT
  • From: Klaus Ethgen <Klaus+lkml@xxxxxxxxx>
• [PATCH] nfnetlink_log: fix the typo
  • From: 段炯 <jduan@xxxxxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: conntrack_ftp and DNAT
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: ipset: Null pointer exception in ipset list:set
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: [RFC nf-next] netfilter: ct: add helper assignment support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Parameter 'size' in type list:set is ignored
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: [Question] Is there some documentation for nftables development
  • From: Fabian Franz <s1410239008@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [Question] Is there some documentation for nftables development
  • From: Anatole Denis <natolumin@xxxxxxxxx>
• Re: [Question] Is there some documentation for nftables development
  • From: Fabian Franz <s1410239008@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [RFC nf-next] netfilter: ct: add helper assignment support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC nf-next] netfilter: ct: add helper assignment support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [Question] Is there some documentation for nftables development
  • From: Fabian Franz <s1410239008@xxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH libnftnl 3/3] rule: add NFTA_RULE_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 2/3] common: return nlmsghdr in nftnl_batch_{begin,end}()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/3] common: get rid of nftnl_batch_build_hdr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Parameter 'size' in type list:set is ignored
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Parameter 'size' in type list:set is ignored
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: ANNOUNCE: Netdev 2.1 update Feb 14
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• ANNOUNCE: Netdev 2.1 update Feb 14
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_ct: fix random validation errors for zone set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [bug report] netfilter: nft_ct: add zone id set support
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• [PATCH nft] doc: Document maps
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• [PATCH ulogd2 2/2] rotate all default output files
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• [PATCH ulogd2 1/2] ulogd.conf: harmonize log file options with module default values
  • From: Kaarle Ritvanen <kaarle.ritvanen@xxxxxxxxxxxxx>
• Re: [PATCH 00/21] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 01/21] netfilter: nft_exthdr: Add support for existence check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/21] netfilter: nf_tables: use struct nft_set_iter in set element flush
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/21] netfilter: nf_tables: rename deactivate_one() to flush()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/21] netfilter: nf_tables: add flush field to struct nft_set_iter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/21] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/21] netfilter: nft_ct: add zone id get support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/21] netfilter: nf_tables: add bitmap set type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/21] netfilter: nf_tables: add space notation to sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/21] netfilter: nft_ct: prepare for key-dependent error unwind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/21] netfilter: nft_ct: add zone id set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/21] netfilter: nfnetlink: get rid of u_intX_t types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/21] netfilter: nf_tables: rename struct nft_set_estimate class field
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/21] netfilter: nfnetlink: add nfnetlink_rcv_skb_batch()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/21] netfilter: nf_tables: add NFTA_RULE_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/21] netfilter: update MAINTAINERS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/21] netfilter: nf_ct_expect: nf_ct_expect_insert() returns void
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/21] netfilter: nf_tables: add check_genid to the nfnetlink subsystem
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/21] netfilter: nf_ct_sip: Use mod_timer_pending()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/21] netfilter: nf_tables: honor NFT_SET_OBJECT in set backend selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/21] netfilter: nfnetlink: allow to check for generation ID
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/21] netfilter: nft_exthdr: add TCP option matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/21] netfilter: nf_tables: pass netns to set->ops->remove()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables bug: Only the first two elements of a map are used for NAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
• Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2 conntrack-tools] conntrackd: cthelper: ssdp: Track UPnP eventing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] statement: Avoid rounding bytes in get_rate()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: Document sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nft] doc: Document stateful objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] src: consolidate XML/JSON exportation for rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] src: consolidate XML/JSON exportation for rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/1] netfilter: expect: Make return value of nf_ct_expect_insert is void
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/1] netfilter: sip: Use mod_timer_pending instead of current multiple statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] statement: Avoid rounding bytes in get_rate()
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• conntrack_ftp and DNAT
  • From: Klaus Ethgen <Klaus+lkml@xxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: honor NFT_SET_OBJECT in set backend selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nft] doc: Document sets
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• [PATCH nf-next] netfilter: update MAINTAINERS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: nf_tables: add check_genid to the nfnetlink subsystem
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/5] nf_tables: rule deletion by description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: nfnetlink: get rid of u_intX_t types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: nfnetlink: add nfnetlink_rcv_skb_batch()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: nf_tables: add NFTA_RULE_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/5] netfilter: nfnetlink: allow to check for generation ID
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Concurrent iptables-restore calls clobberring each other
  • From: Shaun Crampton <shaun@xxxxxxxxxx>
• [PATCH v2 nft] doc: Document stateful objects
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• [PATCH nf-next 1/1] netfilter: expect: Make return value of nf_ct_expect_insert is void
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: [PATCH] src: consolidate XML/JSON exportation for rule
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/1] netfilter: sip: Use mod_timer_pending instead of current multiple statements
  • From: fgao@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
• Re: AUDIT_NETFILTER_PKT message format
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [RFC PATCH] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [RFC PATCH] audit: normalize NETFILTER_PKT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nat: remove incorrect debug assert
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: net/ipv4: warning in nf_nat_ipv4_fn
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] doc: Document stateful objects
  • From: Elise Lennion <elise.lennion@xxxxxxxxx>
• nftables bug: Only the first two elements of a map are used for NAT
  • From: Simon Hanisch <hanisch@xxxxxxxxxxxxxxxxx>
• net/ipv4: warning in nf_nat_ipv4_fn
  • From: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
• Re: AUDIT_NETFILTER_PKT message format
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• [PATCH] src: consolidate XML/JSON exportation for rule
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• ANNOUNCE: Netdev 2.1 seeking netdev conferences reporter(s)
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [RFC PATCH] audit: normalize NETFILTER_PKT
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nftables 0/7] TCP option matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 2/9] netfilter: nft_ct: prepare for key-dependent error unwind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/9] netfilter: nft_ct: add zone id get support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/9] netfilter: nft_ct: add zone id set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/1] net: netfilter: nft_exthdr: add TCP option matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>