Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH net-next] change nfqueue failopen to apply also to receive message buffer in addition to queue size
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next] change nfqueue failopen to apply also to receive message buffer in addition to queue size
  • From: "Yigal Reiss (yreiss)" <yreiss@xxxxxxxxx>
• Re: [PATCH] Add systemd files
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: conntrack-tool question for contribution.
  • From: Miguel Angel Ajo Pelayo <majopela@xxxxxxxxxx>
• [PATCH] Add systemd files
  • From: Sébastien Luttringer <seblu@xxxxxxxxx>
• Re: [PATCH] netfilter: x_tables: ensure e->next_offset consistency with table size
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/4] netfilter: x_tables: don't move to non-existent next rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] change nfqueue fail-open mechanism to apply also to receive message
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nf-next v5 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR
  • From: Stephane Bryant <stephane.ml.bryant@xxxxxxxxx>
• [PATCH nf-next v5 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace
  • From: Stephane Bryant <stephane.ml.bryant@xxxxxxxxx>
• [PATCH nf-next v5 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace
  • From: Stephane Bryant <stephane.ml.bryant@xxxxxxxxx>
• [PATCH] change nfqueue fail-open mechanism to apply also to receive message
  • From: "Yigal Reiss (yreiss)" <yreiss@xxxxxxxxx>
• [PATCH 4/4] netfilter: xtables: don't attempt to alloc more than 4g
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/4] netfilter: xtables: validate targets of jumps
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/4] netfilter: x_tables: don't move to non-existent next rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/4] netfilter: x_tables: validate e->target_offset early
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 2/2] tests/shell: add testcases for Netfilter bug #965
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 1/2] src/parser_bison: fix ruleid_spec ambiguity
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 2/2] tests/shell: add testcases for Netfilter bug #965
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] netfilter: x_tables: ensure e->next_offset consistency with table size
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: x_tables: ensure e->next_offset consistency with table size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables-translate: translate iptables --flush
  • From: Guruswamy Basavaiah <guru2018@xxxxxxxxx>
• [nft PATCH 2/2] tests/shell: add testcases for Netfilter bug #965
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 1/2] src/parser_bison: fix ruleid_spec ambiguity
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf-next v4 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v4 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace
  • From: Stephane Bryant <stephane.ml.bryant@xxxxxxxxx>
• [PATCH nf-next v4 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace
  • From: Stephane Bryant <stephane.ml.bryant@xxxxxxxxx>
• [PATCH nf-next v4 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR
  • From: Stephane Bryant <stephane.ml.bryant@xxxxxxxxx>
• [PATCH] ulogd: fix cross compilation errors with mysql_config
  • From: Helmut Schaa <helmut.schaa@xxxxxxxxxxxxxx>
• [nft PATCH] tests/shell: add new testcases for commit/rollback
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: conntrack-tool question for contribution.
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft PATCH] tests/shell: unload modules between tests
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft PATCH] tests/shell: unload modules between tests
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH] iptables: Replace gethostbyname() with getaddrinfo()
  • From: Arpan Kapoor <rpnkpr@xxxxxxxxx>
• Re: [PATCHv2] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv7] extensions: libipt_icmp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests/shell: unload modules between tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: include/mini-gmp.h is not included at "make dist"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: Replace gethostbyname() with getaddrinfo()
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [ANNOUNCE] ipset 6.29 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] iptables: Replace gethostbyname() with getaddrinfo()
  • From: Arpan Kapoor <rpnkpr@xxxxxxxxx>
• [PATCH] nft: include/mini-gmp.h is not included at "make dist"
  • From: Magnus Öberg <magnus.oberg@xxxxxxxxxxx>
• [nft PATCH] tests/shell: unload modules between tests
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: Re: [PATCH V7] netfilter: h323: avoid potential attack
  • From: "Zhouyi Zhou" <yizhouzhou@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.29 released
  • From: AllKind <AllKind@xxxxxxxxxx>
• [PATCHv2] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCHv2] extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCHv7] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH 1/1] netfilter: ipset: fix race condition in ipset save, swap and delete
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/1] ipset patch for nf
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.29 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: fix race condition in ipset save, swap and delete
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v3] configure: Show support for connlabel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• conntrack-tool question for contribution.
  • From: Miguel Angel Ajo Pelayo <majopela@xxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/3] ct: add conntrack label set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 4/4 v5] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 3/4 v5] libnftnl: test: Update test to check new nftnl_udata features of nftnl_rule
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 2/4 v5] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 1/4 v5] libnftnl: Implement new buffer of TLV objects
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCH 4/4 v4] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCH 1/4 v4] libnftnl: Implement new buffer of TLV objects
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCH v3] configure: Show support for connlabel
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Memory-leak in nft
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH] Shows proper function name for pr_debug() messages.
  • From: Weongyo Jeong <weongyo.linux@xxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: Uses pr_fmt() for logging.
  • From: Weongyo Jeong <weongyo.linux@xxxxxxxxx>
• Re: [PATCH nft 3/3] ct: add conntrack label set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft 3/3] parser_bison: release parsed type and hook name strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft 1/3] parser_bison: simplify hook_spec rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft 2/3] parser_bison: duplicate string returned by chain_type_name_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] ct: add conntrack label set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftl 2/3] ct: add label set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [RFC PATCH 0/3] connlabel set support using extra setter attr
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] NetDev 1.1 videos now available
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] nft: Remove memory-leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft] src: revisit cache population logic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: Removed ^L characters
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working
  • From: ravin goyal <ravirocks1021@xxxxxxxxx>
• Re: [PATCH v5] extensions: libxt_multiport: Add translation to nft
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• [PATCH] nft: Removed ^L characters
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• [PATCH v2] nft: Remove memory-leak
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH 00/18] Netfilter/IPVS/OVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v4 3/3] netfilter: nftables: add connlabel set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/18] Netfilter/IPVS/OVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/18] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/18] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/18] ipvs: drop first packet to redirect conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/18] openvswitch: Add commentary to conntrack.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/18] netfilter: nft_compat: check match/targetinfo attr size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/18] openvswitch: Find existing conntrack entry after upcall.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/18] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/18] netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/18] ipvs: correct initial offset of Call-ID header search in SIP persistence engine
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/18] netfilter: nf_conntrack: consolidate lock/unlock into unlock_wait
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/18] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/18] openvswitch: Interface with NAT.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/18] netfilter: x_tables: check for size overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/18] ipvs: handle ip_vs_fill_iph_skb_off failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/18] openvswitch: Delay conntrack helper call for new connections.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/18] netfilter: Allow calling into nat helper without skb_dst.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/18] ipvs: allow rescheduling after RST
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/18] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] extensions: libxt_multiport: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] configure: Show support for connlabel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: Remove memory-leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] [PATCHv6] extensions: libipt_icmp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Shows proper function name for pr_debug() messages.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: consolidate lock/unlock into unlock_wait
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v10 0/8] openvswitch: NAT support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] Shows proper function name for pr_debug() messages.
  • From: Weongyo Jeong <weongyo.linux@xxxxxxxxx>
• [PATCH v2] netfilter: fix race condition in ipset save, swap and delete
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 2/2 nft] evaluate: use table_lookup_global() from expr_evaluate_symbol()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 nft] src: revisit cache population logic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v4 3/3] netfilter: nftables: add connlabel set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: nftables: add connlabel set support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nf-next v3 3/3] netfilter: nftables: add connlabel set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v3 2/3] netfilter: labels: don't emit ct event if labels are unchanged
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v3 1/3] netfilter: connlabels: move helpers to xt_connlabel
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next resend 0/3] netfilter: connlabel set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: consolidate lock/unlock into unlock_wait
  • From: Nicholas Mc Guire <hofrat@xxxxxxxxx>
• Re: [RFC] nft: Remove memory-leak
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• [PATCH] nft: Remove memory-leak
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working
  • From: ravin goyal <ravirocks1021@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [RFC] nft: Remove memory-leak
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: fix race condition in ipset save and delete
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [RFC] nft: Remove memory-leak
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH] netfilter: fix race condition in ipset save and delete
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.28 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.28 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [ANNOUNCE] ipset 6.28 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.28 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.28 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [ANNOUNCE] ipset 6.28 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [ANNOUNCE] ipset 6.28 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH v5] extensions: libxt_multiport: Add translation to nft
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• [PATCH] netfilter: fix race condition in ipset save and delete
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.28 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [ANNOUNCE] ipset 6.28 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCHv6] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [PATCH V7] netfilter: h323: avoid potential attack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3] configure: Show support for connlabel
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v2] configure: Show support for connlabel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] extensions: libxt_multiport: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libip6t_LOG: Avoid to print the default log level in the translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: userns, netns, and quick physical memory consumption by unprivileged user
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/4 v4] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4 v4] libnftnl: Implement new buffer of TLV objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: check for size overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] extensions: libip6t_LOG: Avoid to print the default log level in the translation
  • From: Roberto García <rodanber@xxxxxxxxx>
• [PATCH v4] extensions: libxt_multiport: Add translation to nft
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• [PATCH v4] extensions: libxt_multiport: Add translation to nft
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: NFQUEUE "fail-open" only open to queue limit and not receive buffer limit
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v10 8/8] openvswitch: Interface with NAT.
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v10 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH nf-next v10 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [PATCH nf-next v10 3/8] openvswitch: Add commentary to conntrack.c
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• [PATCH 4/4 v4] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 3/4 v4] libnftnl: test: Actualize test to check new nftnl_udata features of nftnl_rule
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 2/4 v4] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 1/4 v4] libnftnl: Implement new buffer of TLV objects
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCH 4/4 v3] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf MIME-Version: 1.0
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCH 2/4 v3] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v10 6/8] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v10 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v10 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v10 5/8] openvswitch: Find existing conntrack entry after upcall.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v10 2/8] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v10 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v10 3/8] openvswitch: Add commentary to conntrack.c
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v10 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v10 0/8] openvswitch: NAT support
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [PATCH] libip6t_hbh: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH nf-next v8 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCHv5] extensions: libipt_icmp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v3] libxt_multiport: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/1] ipset patch for nf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_compat: check match/targetinfo attr size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] configure: Show support for connlabel
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_compat: check match/targetinfo attr size
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_compat: check match/targetinfo attr size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL v2 0/4] IPVS Fixes for v4.5
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf v2] netfilter: x_tables: don't rely on well-behaving userspace
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv5] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCHv4] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values
  • From: Ben Hawkes <hawkes@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 1/2] extensions/libxt_rpfilter.man: fix typo, specifiy vs specify
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3] libxt_multiport: Add translation to nft
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• [PATCH libnftnl] trace: fix missing NFTNL_TRACE_JUMP_TARGET in nftnl_trace_get_str()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT.
  • From: Thomas Graf <tgraf@xxxxxxx>
• [iptables PATCH 2/2] iptables/xtables-arp.c: fix typo, wierd vs weird
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [iptables PATCH 1/2] extensions/libxt_rpfilter.man: fix typo, specifiy vs specify
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nft] proto: Add router advertisement and solicitation icmp types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/4] tests: frag: enable more tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [PATCH nf-next v8 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Or Gerlitz <gerlitz.or@xxxxxxxxx>
• Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT.
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [PATCH nf-next v9 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [PATCH nf-next v9 5/8] openvswitch: Find existing conntrack entry after upcall.
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [ovs-dev] [PATCH nf-next v9 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Joe Stringer <joe@xxxxxxx>
• [PATCH nf] netfilter: x_tables: check for size overflow
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v8 3/8] openvswitch: Add commentary to conntrack.c
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v9 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v9 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v9 6/8] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v9 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v9 3/8] openvswitch: Add commentary to conntrack.c
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v9 5/8] openvswitch: Find existing conntrack entry after upcall.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v9 2/8] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v9 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: Cyrill Gorcunov <gorcunov@xxxxxxxxx>
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• NFQUEUE "fail-open" only open to queue limit and not receive buffer limit
  • From: "Yigal Reiss (yreiss)" <yreiss@xxxxxxxxx>
• Re: [PATCH] extensions: libip6t_hbh: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] proto: Add router advertisement and solicitation icmp types
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [PATCH v2] libxt_multiport: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] iptables-translate: pass ipt_entry and ip6t_entry to ->xlate()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] libxt_multiport: Add translation to nft
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH] libxt_multiport: Add translation to nft
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: Regarding libxt_multiport translation in nft
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH nf-next v8 3/8] openvswitch: Add commentary to conntrack.c
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: nft: Modified punctuation used in nft's show_help
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] libxt_multiport: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] doc: nft: Fixed a typo and added/changed punctuation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: allow 'snat' and 'dnat' keywords from the right-hand side
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Regarding libxt_multiport translation in nft
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT.
  • From: kbuild test robot <lkp@xxxxxxxxx>
• nft: Modified punctuation used in nft's show_help
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• [PATCH] libip6t_hbh: Add translation to nft
  • From: FaTe <gokuvsvegita@xxxxxxxxx>
• Regarding libxt_multiport translation in nft
  • From: FaTe <gokuvsvegita@xxxxxxxxx>
• [PATCH] libxt_multiport: Add translation to nft
  • From: FaTe <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT.
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT.
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nf-next v8 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v8 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v8 6/8] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v8 5/8] openvswitch: Find existing conntrack entry after upcall.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v8 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v8 3/8] openvswitch: Add commentary to conntrack.c
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v8 2/8] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nf-next v8 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: Seeking help for implementing CT HELPER in nftables
  • From: Christophe Leroy <christophe.leroy@xxxxxx>
• [PATCH nft 4/4] netlink_delinarize: shift constant for ranges too
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/4] nft-test: don't zap remainder of rule after handling a set
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/4] netlink_delinearize: fix bogus offset w exthdr expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/4] tests: frag: enable more tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nft_compat: check match/targetinfo attr size
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH 0/1] ipset patch for nf
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 00/10] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH v2] doc: nft: Fixed a typo and added/changed punctuation
  • From: FaTe <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH] configure: Show support for connlabel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] configure: Show support for connlabel
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] configure: Show support for connlabel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4 v3] libnftnl: Implement new buffer of TLV objects.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/4 v3] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf MIME-Version: 1.0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/4 v3] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [BUG] kernel crash in br_netfilter
  • From: Felix Fietkau <nbd@xxxxxxxxxxx>
• Re: [BUG] kernel crash in br_netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCHv3] extensions: libipt_icmp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv3] extensions: libip6t_icmp6: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/4 v3] libnftnl: Implement new buffer of TLV objects.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/10] netfilter: xtables: prepare for on-demand hook register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/10] netfilter: bridge: register hooks only when bridge interface is added
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/10] netfilter: don't call hooks unless needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/10] netfilter: nft_masq: support port range
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/10] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/10] netfilter: ipvs: avoid unused variable warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/10] netfilter: xt_osf: remove unused variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/10] netfilter: xtables: don't hook tables by default
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/10] netfilter: meta: add PRANDOM support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/10] netfilter: ipvs: Remove noisy debug print from ip_vs_del_service
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/10] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCHv3] extensions: libip6t_icmp6: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCHv3] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] extensions: libip6t_icmp6: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCHv2] extensions: libip6t_icmp6: Add translation to nft
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [PATCH] configure: Show support for connlabel
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] doc: nft: Fixed a typo and added/changed punctuation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [PATCH] extensions: libip6t_rt.c: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] configure: Show support for connlabel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] configure: Show support for connlabel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [BUG] kernel crash in br_netfilter
  • From: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
• Re: [PATCH] configure: Show support for connlabel
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] extensions: libip6t_icmp6: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] libnftnl: test: Actualize test to check new nftnl_udata features of nftnl_rule
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 2/4 v3] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 1/4 v3] libnftnl: Implement new buffer of TLV objects
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 4/4 v3] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf MIME-Version: 1.0
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_dccp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_dccp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] doc: nft: Fixed a typo and added/changed punctuation
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_dccp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libipt_icmp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] configure: Show support for connlabel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_connlabel: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_connlabel: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_connlabel: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_connlabel: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_connlabel: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: Seeking help for implementing CT HELPER in nftables
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_connlabel: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nft] tests/py: enable tests for dccp types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 nft] parser: remove 'reset' as reserve keyword
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] trace: fix multiple copy and paste errors
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl] trace: fix multiple copy and paste errors
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] configure: Show support for connlabel
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH 3/4] ipvs: allow rescheduling after RST
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 4/4] ipvs: correct initial offset of Call-ID header search in SIP persistence engine
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/4] ipvs: drop first packet to redirect conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/4] ipvs: handle ip_vs_fill_iph_skb_off failure
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL v2 0/4] IPVS Fixes for v4.5
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCHv2] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCHv2] extensions: libip6t_icmp6: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [PATCH] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia <nevola@xxxxxxxxx>
• [PATCH libmnl] Move declaration of visibility attributes before definition.
  • From: Peter Foley <pefoley2@xxxxxxxxxxx>
• [PATCH] extensions: libip6t_rt.c: Add translation to nft
  • From: Janani Ravichandran <janani.rvchndrn@xxxxxxxxx>
• Re: [PATCH] extensions: libipt_icmp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_connlabel: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] extensions: libxt_connlabel: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libipt_icmp: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [PATCH] extensions: libip6t_icmp6: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [PATCH nf-next v3 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace
  • From: stéphane bryant <stephane.ml.bryant@xxxxxxxxx>
• Reading rules from multiple files
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST
  • From: Julian Anastasov <ja@xxxxxx>
• Re: extensions: libxt_multiport: Multiport translations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: using connlabel match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Seeking help for implementing CT HELPER in nftables
  • From: christophe leroy <christophe.leroy@xxxxxx>
• Nftables issues with modular rulesets
  • From: "Puustinen, Ismo" <ismo.puustinen@xxxxxxxxx>
• Re: [PATCH nft 0/1] Proposal: include directories for rulesets
  • From: "Puustinen, Ismo" <ismo.puustinen@xxxxxxxxx>
• Re: [PATCH nft 3/4] meta: add probability matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/4] meta: add probability matching
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nft 3/4] meta: add probability matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/1] Proposal: include directories for rulesets
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nft] rule: simplify ("rule: delete extra space in sets printing")
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH nft] rule: simplify ("rule: delete extra space in sets printing")
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3] extensions: libxt_dccp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v2] extensions: libxt_dccp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft 3/4] meta: add probability matching
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nft 3/4] meta: add probability matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 3/4] meta: add probability matching
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [nft PATCH v2] tests/listing: add some listing tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests/shell: add first `nft -f' tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2] rule: delete extra space in sets printing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• extensions: libxt_multiport: Multiport translations
  • From: Piyush Pangtey <gokuvsvegita@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_dccp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] src: proto: Add missing packet type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/4] meta: add tests for probability matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/4] meta: add probability matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] expression: add helper to decide if operator needs to be shown
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/2] iptables: utils: Add bash completion
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_sctp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_owner: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] extensions: libxt_sctp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 1/2] iptables: utils: Add bash completion
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• [PATCH v2] extensions: libxt_owner: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: xtables: don't register hooks by default
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] extensions: libip6t_mh: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] iptables: nft-ipv6: Use meta l4proto instead of nexthdr
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_sctp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_sctp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_sctp: Add translation to nft
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] extensions: libxt_sctp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] extensions: libip6t_hbh: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/2] iptables: utils: Add bash completion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] iptables: utils: Add bash completion
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• [PATCH nft 1/1] scanner: add support for include directories
  • From: Ismo Puustinen <ismo.puustinen@xxxxxxxxx>
• [PATCH nft 0/1] Proposal: include directories for rulesets
  • From: Ismo Puustinen <ismo.puustinen@xxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/2] iptables: utils: Add bash completion
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nft 00/10] nft: exthdr fixes and improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_sctp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libip6t_MASQUERADE: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libipt_MASQUERADE: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libip6t_hbh: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_sctp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_owner: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] iptables: utils: Add bash completion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] extensions: libip6t_MASQUERADE: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v2] extensions: libipt_MASQUERADE: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libip6t_hbh: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_sctp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v3] extensions: libxt_statistic: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libxt_owner: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft] evaluate: reject set references in set elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libip6t_MASQUERADE: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v3] src: Add support for masquerade port selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] expr: masq: Add support for port selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2] netfilter: nft_masq: support port range
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libip6t_MASQUERADE: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libipt_MASQUERADE: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] iptables: extensions: iptables-translate prints extra "nft" after printing any error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft
  • From: Laura Garcia <nevola@xxxxxxxxx>
• [PATCH nft 10/10] netlink_delinearize: handle extension header templates with odd sizes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 09/10] netlink_delinearize: prepare binop_postprocess for exthdr demux
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 08/10] exthdr: store offset for later use
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 07/10] exthdr: remove implicit dependencies
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 06/10] tests: add/fix inet+exthdr tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 05/10] exthdr: generate dependencies for inet/bridge/netdev family
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 04/10] payload: move payload_gen_dependency generic part to helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 03/10] netlink: add and use netlink_gen_exthdr_mask
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 02/10] netlink: split generic part of netlink_gen_payload_mask into helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 01/10] evaluate: enforce ip6 proto with exthdr expression
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 00/10] nft: exthdr fixes and improvements
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] src: proto: Add missing packet type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] src: proto: Add missing packet type
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] src: proto: Add missing packet type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v2] src: Add support for masquerade port selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libxt_dccp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] src: proto: Add missing packet type
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_statistic: Add translation to nft
  • From: Laura Garcia Liebana <nevola@xxxxxxxxx>
• [ANNOUNCE] NetDev 1.1 slides now available
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: reject set references in set elements
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• RE: batch netlink messages - performance improvement
  • From: "Yigal Reiss (yreiss)" <yreiss@xxxxxxxxx>
• Re: [PATCH] Fix musl compatibility
  • From: "Loganaden Velvindron" <logan@xxxxxxxxxx>
• Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_osf: remove unused variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: meta: add PRANDOM support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Fix musl compatibility
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [BUG] kernel crash in br_netfilter
  • From: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
• Re: [PATCH nf-next v3 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] comment: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: unused code in net/netfilter/ipset/ip_set_bitmap_ipmac.c
  • From: Julia Lawall <julia.lawall@xxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Add JSON output formatting to nfacct utility
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] add JSON output format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: unused code in net/netfilter/ipset/ip_set_bitmap_ipmac.c
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• unused code in net/netfilter/ipset/ip_set_bitmap_ipmac.c
  • From: Julia Lawall <julia.lawall@xxxxxxx>
• Re: [PATCH] src: netlink_delinearize: Fix datatype for len
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] src: netlink_delinearize: Fix datatype for len
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] src: netlink_delinearize: Fix datatype for len
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: batch netlink messages - performance improvement
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• batch netlink messages - performance improvement
  • From: "Yigal Reiss (yreiss)" <yreiss@xxxxxxxxx>
• [PATCH 0/2] iptables: utils: Add bash completion
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• [PATCH ipset] Add bash completion to the install routine.
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• [PATCH 2/2] iptables: Add bash completion to build routine
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• [PATCH 1/2] iptables: utils: Add bash completion
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• [PATCH v4 nf-next 3/4] netfilter: bridge: register hooks only when bridge interface is added
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v4 nf-next 4/4] netfilter: don't call hooks unless needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v4 nf-next 2/4] netfilter: xtables: don't hook tables by default
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/4] netfilter: xtables: prepare for on-demand hook register
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/4] netfilter: xtables: don't register hooks by default
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters
  • From: Phil Turnbull <phil.turnbull@xxxxxxxxxx>
• [PATCH 0/1] ipset patch for nf
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] comment: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] netfilter: xt_osf: remove unused variable
  • From: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
• netfilter: warning at net/ipv4/netfilter/nf_nat_l3proto_ipv4.c:275 nf_nat_ipv4_fn
  • From: Sasha Levin <sasha.levin@xxxxxxxxxx>
• [PATCH] Fix musl compatibility
  • From: Loganaden Velvindron <logan@xxxxxxxxxx>
• [PATCH] Add JSON output formatting to nfacct utility
  • From: Harald Welte <laforge@xxxxxxxxxxxx>
• [PATCH] add JSON output format
  • From: Harald Welte <laforge@xxxxxxxxxxxx>
• [PATCH 2/2] extensions: libip6t_mh: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH 1/2] iptables: nft-ipv6: Use meta l4proto instead of nexthdr
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH 2/2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 1/2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH] libnftnl: Implement new buffer of TLV objects.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH V7] netfilter: h323: avoid potential attack
  • From: Zhouyi Zhou <zhouzhouyi@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v3 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR
  • From: Stephane Bryant <stephane.ml.bryant@xxxxxxxxx>
• [PATCH nf-next v3 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace
  • From: Stephane Bryant <stephane.ml.bryant@xxxxxxxxx>
• [PATCH nf-next v3 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace
  • From: Stephane Bryant <stephane.ml.bryant@xxxxxxxxx>
• Re: [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrackd: Disable runtime systemd support by default
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrackd: Disable runtime systemd support by default
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH nf 1/3] netfilter: ipvs: drop first packet to redirect conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf 3/3] netfilter: ipvs: handle ip_vs_fill_iph_skb_off failure
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf 0/3] IPVS Fixes for v4.5
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next 0/2] IPVS Updates for v4.6
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: ipvs: Remove noisy debug print from ip_vs_del_service
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: ipvs: avoid unused variable warnings
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [ovs-dev] [PATCH nf-next v7 6/7] openvswitch: Delay conntrack helper call for new connections.
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [PATCH nf-next v7 4/7] openvswitch: Find existing conntrack entry after upcall.
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [PATCH nf-next v7 4/7] openvswitch: Find existing conntrack entry after upcall.
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Joe Stringer <joe@xxxxxxx>
• Re: [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] conntrackd: Disable runtime systemd support by default
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrackd] conntrackd: Disable systemd support by default
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7] fix IS_ERR_VALUE usage
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH 1/7] netfilter: fix IS_ERR_VALUE usage
  • From: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
• Re: [PATCH conntrackd] conntrackd: Disable systemd support by default
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 0/6] Namespacify various ip sysctl knobs
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• Re: [PATCH 0/6] Namespacify various ip sysctl knobs
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 1/7] netfilter: fix IS_ERR_VALUE usage
  • From: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/6] Namespacify various ip sysctl knobs
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [RESEND PATCH -stable,4.3.y] netfilter: xt_TEE: fix NULL dereference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RESEND PATCH -stable,4.x.y] netfilter: nf_nat_redirect: add missing NULL pointer check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrackd] conntrackd: Disable systemd support by default
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Merging iptables-translate branch into master
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] meta: fix error checks in tc handle parser
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack 4/4] tests: conntrack: add tests for CIDR notation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack 3/4 v2] conntrack: add support for CIDR notation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack 2/4 v2] conntrack: extend parse_addr() with CIDR support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack 1/4] conntrack: split up nfct_set_addr_from_opt()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack 5/5 v2] tests: conntrack: add netmask tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/6] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 1/6] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/6] netfilter: nfnetlink: use original skbuff when acking batches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: nft_counter: fix erroneous return values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] netfilter: tee: select NF_DUP_IPV6 unconditionally
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: nfnetlink: correctly validate length of batch messages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/6] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/3] meta: add prandom matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nftables PATCH] nft: add bash completion script
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v2] netfilter: meta: add PRANDOM support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: meta: add PRANDOM support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: meta: add PRANDOM support
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: meta: add PRANDOM support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC nftables PATCH] nft: add bash completion script
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: meta: add PRANDOM support
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: meta: add PRANDOM support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/3] meta: add prandom matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/3] meta: add prandom matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_tos: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] comment: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] comment: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH V6] netfilter: h323: avoid potential attack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nftables PATCH] nft: add bash completion script
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] extensions: libxt_NFQUEUE: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: nft-ipv6: Fix ipv6 flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nfnetlink: correctly validate length of batch messages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_counter: fix erroneous return values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: tee: select NF_DUP_IPV6 unconditionally
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] fix IS_ERR_VALUE usage
  • From: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
• [PATCH 1/7] netfilter: fix IS_ERR_VALUE usage
  • From: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
• Re: [PATCH nft 2/3] meta: add prandom matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/6] ipv4: Namespacify ip_dynaddr sysctl knob
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 1/6] ipv4: Namespaceify ip_default_ttl sysctl knob
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 2/6] igmp: net: Move igmp namespace init to correct file
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 5/6] ipv4: namespacify ip fragment max dist sysctl knob
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 6/6] net: Export ip fragment sysctl to unprivileged users
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 4/6] ipv4: namespacify ip_early_demux sysctl knob
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 0/6] Namespacify various ip sysctl knobs
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 4/6] ipv4: namespacify ip_early_demux sysctl knob
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 6/6] net: Export ip fragment sysctl to unprivileged users
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 5/6] ipv4: namespacify ip fragment max dist sysctl knob
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 2/6] igmp: net: Move igmp namespace init to correct file
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 3/6] ipv4: Namespacify ip_dynaddr sysctl knob
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 0/6] Namespacify various ip sysctl knobs
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH 1/6] ipv4: Namespaceify ip_default_ttl sysctl knob
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH] extensions: libxt_tos: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nf-next v2 1/2] netfilter: bridge: add nf_afinfo to enable queuing to userspace
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v2 2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 8/8] netfilter: implement xt_cgroup cgroup2 path match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 8/8] netfilter: implement xt_cgroup cgroup2 path match
  • From: Alban Crequy <alban.crequy@xxxxxxxxx>
• [PATCH nf-next v2 2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace
  • From: stephane.ml.bryant@xxxxxxxxx
• [PATCH nf-next v2 1/2] netfilter: bridge: add nf_afinfo to enable queuing to userspace
  • From: stephane.ml.bryant@xxxxxxxxx
• [PATCH nf-next v2 0/2] netfilter: bridge: add queuing to userspace for AF_
  • From: stephane.ml.bryant@xxxxxxxxx
• kernel BUG at net/netfilter/nf_nat_core.c:395
  • From: Oleksandr Natalenko <oleksandr@xxxxxxxxxxxxxx>
• [PATCH] iptables: nft-ipv6: Fix ipv6 flags
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH ulogd 7/7] nflow9: introduce new NetFlow v9 output plugin
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH ulogd 6/7] ulogd: update calling stop callback condition
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH ulogd 5/7] filter: add new filter for IPFIX time
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH ulogd 4/7] filter: add new filter for Netflow ICMP_TYPE
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH ulogd 3/7] nfct/ipfix: introduce NAT entries
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH ulogd 2/7] nfct/ipfix: introduce new vendor id
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH ulogd 1/7] ipfix: add flowDirection IE
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [RFC] a software based on ulogd
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>