Linux TCP/IP Netfilter Devel

• Thread Index

• [nft PATCH v2] tests/listing: add some listing tests
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH] tests/shell: add first `nft -f' tests
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH v2] rule: delete extra space in sets printing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: mark nft_ct_get_eval_counter __maybe_unused
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_ct: keep counters away from CONFIG_NF_CONNTRACK_LABELS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: mark nft_ct_get_eval_counter __maybe_unused
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet
  • From: Alin Nastac <alin.nastac@xxxxxxxxx>
• Re: [PATCH] sqlite3: Remove unused "buffer" option.
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH] netfilter: nft_ct: mark nft_ct_get_eval_counter __maybe_unused
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet
  • From: Alin Nastac <alin.nastac@xxxxxxxxx>
• Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] nftables: byteorder: avoid uneeded le/be conversion steps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/6] add support for conntrack counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: support limit rate over value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3 1/6] tests/py: remove unused variables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nft] tests/py: don't test log statement from protocol match
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/3 nft] tests/py: don't test log statement from protocol match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nft] tests/py: don't test log statement from protocol match
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] parser_bison: initializer_expr must use rhs_expr
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/3 nft] tests/py: don't test log statement from protocol match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3 nft] tests/py: netdev family with ingress chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3 nft] tests/py: test udp from ip and ip6 families
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: net-next is CLOSED
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] extensions: libip6t_REDIRECT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libipt_REDIRECT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH nf] ipset: allow a 0 netmask with hash_netiface type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] extensions: libip6t_hl: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft] parser_bison: initializer_expr must use rhs_expr
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: parser regression: '/' symbol
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: initializer_expr must use rhs_expr
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• parser regression: '/' symbol
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: net-next is CLOSED
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH nft v3 6/6] tests/py: update test files syntax
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v3 5/6] tests/py: modify supported test file syntax
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v3 4/6] tests/py: convert chains and tables to objects
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v3 2/6] tests/py: fix style
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v3 3/6] tests/py: simplify use of globals
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v3 1/6] tests/py: remove unused variables
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nf-next] nftables: byteorder: avoid uneeded le/be conversion steps
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next v6 0/7] openvswitch: NAT support.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_cgroup: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libip6t_hl: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v6 0/7] openvswitch: NAT support.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] expr: add forward expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] expr: limit: add support for flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• net-next is CLOSED
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nft] scanner: disable most rules when we expect literal symbol
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ipset tool: Fix link with libtool >= 2.4.4
  • From: Kadlecsik József <kadlecsik.jozsef@xxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: nf_ct_helper: Use unidimensional helper array instead of bidimensional ones
  • From: fgao@xxxxxxxxxx
• [PATCH 2/3] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register()
  • From: fgao@xxxxxxxxxx
• [PATCH 1/3] netfilter: nf_ct_helper: Add new function nf_ct_helper_init()
  • From: fgao@xxxxxxxxxx
• Re: 答复: 答复: 答复: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/17] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 3/4 v3] libnftnl: set: Implement new buffer of TLV objects.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH nft v2 6/6] tests/py: update test files syntax
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v2 1/6] tests/py: remove unused variables
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v2 4/6] tests/py: convert chains and tables to objects
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v2 5/6] tests/py: modify supported test file syntax
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v2 2/6] tests/py: fix style
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft v2 3/6] tests/py: simplify use of globals
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH] extensions: libxt_cgroup: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH net-next v6 2/7] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v6 1/7] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v6 0/7] openvswitch: NAT support.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v6 5/7] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v6 3/7] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v6 7/7] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v6 6/7] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v6 4/7] openvswitch: Find existing conntrack entry after upcall.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH v2] extensions: libip6t_REJECT: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Network card
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Network card
  • From: Corcodel Marian <asd@xxxxxxxxxxxxxxxx>
• Re: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion
  • From: David Laight <David.Laight@xxxxxxxxxx>
• [PATCH 07/17] netfilter: nf_tables: add packet duplication to the netdev family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/17] netfilter: nfnetlink: pass down netns pointer to commit() and abort() callbacks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/17] netfilter: nft_limit: allow to invert matching criteria
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/17] netfilter: nfnetlink_log: just returns error for unknown command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/17] netfilter: nfnetlink_queue: just returns error for unknown command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/17] netfilter: nfnetlink_queue: autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/17] netfilter: nf_ct_helper: define pr_fmt()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/17] netfilter: nfnetlink_queue: don't handle options after unbind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/17] netfilter: nf_tables: Add new attributes into nft_set to store user data.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/17] netfilter: nft_ct: add byte/packet counter support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/17] netfilter: nfnetlink_queue: validate dependencies to avoid breaking atomicity
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/17] netfilter: nf_tables: add forward expression to the netdev family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/17] netfilter: nfnetlink: pass down netns pointer to call() and call_rcu()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/17] netfilter: nf_tables: destroy basechain and rules on netdevice removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/17] netfilter: nf_tables: remove check against removal of inactive objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/17] netfilter: nf_tables: release objects on netns destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/17] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/4 v2] libnftnl: set: Implement new buffer of TLV objects.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] nftables: ct: add byte/packet counter support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] nftables: ct: add byte/packet counter support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] nftables: byteorder: provide 64bit le/be conversion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: 答复: 答复: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/6] ct regression tests for bytes, packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 6/6] tests: ct: remove BUG cases that work with current master
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/6] netlink_linearize: use u64 conversion for 64bit quantities
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/6] ct: add packet/byte counter support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/6] nft: swap key and direction in ct_dir syntax
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 1/6] src: ct: add packet and byte counter support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/6] add support for conntrack counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next] nftables: byteorder: provide 64bit le/be conversion
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 4/4,nf-next] netfilter: nf_ct_helper: Use unidimensional helper array instead of bidimensional ones
  • From: Gao Feng <fgao@xxxxxxxxxx>
• [PATCH 4/4,nf-next] netfilter: nf_ct_helper: Use unidimensional helper
  • From: Gao Feng <fgao@xxxxxxxxxx>
• Re: [PATCH nf-next] nftables: ct: add byte/packet counter support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] nftables: ct: add byte/packet counter support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] nftables: ct: add byte/packet counter support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] nftables: ct: add byte/packet counter support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h
  • From: Stephen Hemminger <shemming@xxxxxxxxxxx>
• Re: [nft] syntax for retrieving ct byte/packet counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft] syntax for retrieving ct byte/packet counters
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ipset tool: Fix link with libtool >= 2.4.4
  • From: Olivier Blin <dev@xxxxxxxxx>
• [PATCH] extensions: libip6t_hl: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] ipset tool: Fix link with libtool >= 2.4.4
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• [PATCH] ipset tool: Fix link with libtool >= 2.4.4
  • From: Olivier Blin <dev@xxxxxxxxx>
• [PATCH] Fix link with libtool >= 2.4.4
  • From: Olivier Blin <dev@xxxxxxxxx>
• Re: [PATCH nft 2/6] tests/py: fix style
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• header conflict introduced by change to netfilter_ipv4/ip_tables.h
  • From: Stephen Hemminger <shemming@xxxxxxxxxxx>
• [PATCH] extensions: libip6t_LOG: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libipt_LOG: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v2] extensions: libip6t_REJECT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libip6t_REJECT: Add translation to nft
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 3/4 v2] libnftnl: set: Implement new buffer of TLV objects.
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/4 v2] nf: netfilter: nf_tables_api: Add new attributes into nft_set to store user data.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 3/4 v2] libnftnl: set: Implement new buffer of TLV objects.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: [PATCH] extensions: libip6t_REJECT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v2] src: datatype: Modify symbol table for icmpv6 packet types
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [nft PATCH 4/4] tests/operations: add some listing tests
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft PATCH 2/4] rule: when listing all sets, don't print empty tables
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft PATCH 2/4] rule: when listing all sets, don't print empty tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [nft PATCH 3/4] rule: delete extra space in sets printing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft PATCH 2/4] rule: when listing all sets, don't print empty tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] scanner: disable most rules when we expect literal symbol
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] extensions: libip6t_REJECT: Add translation to nft
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft PATCH 3/4] rule: delete extra space in sets printing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/4] rule: when listing all sets, don't print empty tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/4] rule: don't list anonymous sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libipt_ttl: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 5/5] netfilter: nfnetlink_log: just returns error for unknown command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] nf: netfilter: nf_tables_api: Add new attributes into nft_set to store user data.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libip6t_REJECT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] src: datatype: Modify symbol table for icmpv6 packet types
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets
  • From: Sasha Levin <sasha.levin@xxxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: nfnetlink_log: just returns error for unknown command
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: nfnetlink_queue: autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config flag
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH nf-next 3/5] netfilter: nfnetlink_queue: just returns error for unknown command
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: nfnetlink_queue: not handle options after unbind
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: nfnetlink_queue: validate dependencies to avoid breaking atomicity
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nfnetlink_queue: remove duplicated obsolete commands handling
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH 1/3 nft] parser: get rid of multiton_expr from lhs relational expression
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft 1/5] ct: add support for directional keys
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] extensions: libipt_ttl: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 0/2] Add support for ttl translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] Add support for ttl translation
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 0/2] Add support for ttl translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] NetDev 1.1 is approaching...
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] extensions: libipt_ttl: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH 1/2] iptables: nft-ipv4: Add ip ttl to the buffer
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH 0/2] Add support for ttl translation
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: 答复: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: update meta and ct expression keyword lists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: 答复: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] nf: netfilter: nf_tables_api: Add new attributes into nft_set to store user data.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [nft PATCH 4/4] tests/operations: add some listing tests
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 3/4] rule: delete extra space in sets printing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 2/4] rule: when listing all sets, don't print empty tables
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 1/4] rule: don't list anonymous sets
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 3/4] libnftnl: set: Implement new buffer of TLV objects.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register()
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3 nf-next] netfilter: nf_ct_helper: Add new function nf_ct_helper_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3 nf-next] netfilter: nf_ct_helper: define pr_fmt()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/6] tests/py: fix style
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 6/6] tests/py: update test files syntax
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 4/6] tests/py: convert chains and tables to objects
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 5/6] tests/py: modify supported test file syntax
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 2/6] tests/py: fix style
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 3/6] tests/py: simplify use of globals
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 1/6] tests/py: remove unused variables
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [PATCH] iptables: add xtables-config-parser.h to BUILT_SOURCES
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_length: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libip6t_ah: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libip6t_SNAT: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libip6t_DNAT: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] iptables: nft-ipv6: Replace ip with ip6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libipt_SNAT: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libipt_DNAT: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] extensions: libxt_cgroup: add unit test
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/4] libnftnl: examples: Modify the example to allow add TLV objects as user data.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 3/4] libnftnl: set: Implement new buffer of TLV objects.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 2/4] libnftnl: set: Add new attribute into 'set' to store an arbitrary length user data.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 1/4] nf: netfilter: nf_tables_api: Add new attributes into nft_set to store user data.
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• Re: ipset v6.24: Comment string is too long!
  • From: Drunkard Zhang <gongfan193@xxxxxxxxx>
• [PATCH nft] scanner: disable most rules when we expect literal symbol
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ipset v6.24: Comment string is too long!
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] sqlite3: Remove unused "buffer" option.
  • From: Alex Xu <alex_y_xu@xxxxxxxx>
• Re: ulogd's SQLITE3 "buffer" option
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH] extensions: libip6t_ah: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: nf_unregister_net_hook: hook not found!
  • From: Sander Eikelenboom <linux@xxxxxxxxxxxxxx>
• [PATCH] iptables: add xtables-config-parser.h to BUILT_SOURCES
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• [PATCH] extensions: libip6t_SNAT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libip6t_DNAT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v2] iptables: nft-ipv6: Replace ip with ip6
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: nf_unregister_net_hook: hook not found!
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• ipset v6.24: Comment string is too long!
  • From: Drunkard Zhang <gongfan193@xxxxxxxxx>
• Re: ulogd's SQLITE3 "buffer" option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf_unregister_net_hook: hook not found!
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/5] ct: add support for directional keys
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft] parser: re-try unexpected tokens as symbol expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH nft] parser: re-try unexpected tokens as symbol expression
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/3 nft] parser: restore bitwise operations from the rhs of relational expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3 nft] parser: get rid of multiton_expr from lhs relational expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3 nft] parser: rename multiton_expr to multiton_rhs_expr
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] extensions: libxt_length: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] iptables: nft-ipv6: Replace ip with ip6
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_length: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH iptables] extensions: libxt_cgroup: add unit test
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH nft] doc: update meta and ct expression keyword lists
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] extensions: libipt_DNAT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH nf-next] netfilter: nft_limit: allow to invert matching criteria
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] libxt_cgroup2: add support for cgroup2 path matching
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH] extensions: libipt_SNAT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libipt_SNAT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libipt_SNAT: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libipt_REJECT: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_pkttype: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_connmark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3 nft] src: add new netdev protocol description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3 nft] parser: restrict relational rhs expression recursion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3 nft] parser: add redirect constant to rhs_expr rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libipt_REJECT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libipt_DNAT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 2/2] extensions: libxt_comment: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libipt_SNAT: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v2] extensions: libxt_pkttype: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_connmark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_pkttype: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 2/2] libxt_cgroup2: add support for cgroup2 path matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] libxt_cgroup2: add support for cgroup2 path matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] libxt_cgroup: prepare for multi revisions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v5 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests/shell: add tests for handles and comments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libipt_realm: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_pkttype: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_MARK: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_connmark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libipt_ah: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_cpu: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] extensions: libxt_devgroup: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Fix inversion code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_limit: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] include: xtables: Add enum for better nft translation code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libipt_realm: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libipt_ah: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_MARK: Add translation to nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] extensions: libxt_pkttype: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_cpu: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_MARK: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_MARK: Add translation to nft
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] extensions: libxt_MARK: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_MARK: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] include: xtables: Add enum for better nft translation code
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v4] extensions: libxt_devgroup: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v3] extensions: libxt_connmark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] include: xtables: Add enum for better nft translation code
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v2] extensions: libxt_mark: Fix inversion code
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [nft PATCH] tests/shell: add tests for handles and comments
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_NFLOG: Add group_info and remove multiple keywords
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_NFLOG: Add group_info and remove multiple keywords
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_helper: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_mark: Fix inversion code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] extensions: libxt_helper: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_helper: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_helper: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libxt_helper: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v2] extensions: libxt_limit: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v2] net-next: Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <luuk.paulussen@xxxxxxxxxxxxxxxxxxx>
• [no subject]
  • From: Luuk Paulussen <luuk.paulussen@xxxxxxxxxxxxxxxxxxx>
• [PATCH] extensions: libxt_mark: Fix inversion code
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v3] extensions: libxt_connmark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v3] extensions: libxt_devgroup: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_devgroup: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_connmark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_NFQUEUE: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] extensions: libxt_connmark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_NFLOG: Add group_info and remove multiple keywords
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 0/2] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_NFQUEUE: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_devgroup: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH 2/2] libxt_cgroup2: add support for cgroup2 path matching
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 1/2] libxt_cgroup: prepare for multi revisions
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: prepare xt_cgroup for multi revisions
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: prepare xt_cgroup for multi revisions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/8] cgroup: implement cgroup_get_from_path() and expose cgroup_put()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 3/3,libnftnl] examples: Modify the example 'nft-set-add' to
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 2/3,libnftnl] set: Add new attribute into 'set' to store an
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 1/3,nf] netfilter: nf_tables_api: Add new attributes into
  • From: Carlos Falgueras García <carlosfg@xxxxxxxxxx>
• [PATCH 2/2] netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nf_tables: use skb->protocol instead of assuming ethernet header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_devgroup: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_devgroup: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 2/2] extensions: libxt_comment: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_NFLOG: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• New xlate3 branch in iptables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_devgroup: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_mac: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_connmark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_limit: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_iprange: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_NFLOG: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_NFQUEUE: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_esp: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_NFLOG: Add translation to nft
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_NFLOG: Add translation to nft
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH] extensions: libxt_mac: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_connmark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH 2/2] extensions: libxt_comment: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH 1/2] iptables: nft-ipv4: Remove suffix counter for comment module
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH 0/2] Add syntax and translation for comment module
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_limit: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_iprange: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 3/8] cgroup: implement cgroup_get_from_path() and expose cgroup_put()
  • From: "Serge E. Hallyn" <serge.hallyn@xxxxxxxxxx>
• [PATCH 2/2] netfilter: implement xt_cgroup cgroup2 path match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 1/2] netfilter: prepare xt_cgroup for multi revisions
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH] extensions: libxt_NFLOG: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_NFQUEUE: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Syn proxy causes vcenter traffic not working properly
  • From: İbrahim Ercan <ibrahim.metu@xxxxxxxxx>
• Re: [PATCH v3 nf-next 0/12] netfilter: don't copy init ns hooks to new namespaces
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] extensions: libxt_esp: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] extensions: libxt_devgroup: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: Support of different targets in nftables
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: Support of different targets in nftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Support of different targets in nftables
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• About a bug reported
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v4] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: nftables symbols
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: nftables symbols
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables symbols
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: nftables symbols
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• nftables symbols
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH v3] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/5] netlink: only drop mask if it matches left known-size operand
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/5] src: ct: make ct l3proto work
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 5/5] tests: add ct tests for ip family
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/5] netlink: don't handle lhs zero-length expression as concat type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/5] ct: add support for directional keys
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/5] ct: add support for directional keys
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 00/23] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] ila: add NETFILTER dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/23] netfilter-bridge: brace placement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/23] netfilter: nf_ct_sctp: move ip_ct_sctp away from UAPI
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/23] netfilter-bridge: use netdev style comments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/23] netfilter-bridge: layout of if statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/23] netfilter: remove duplicate include
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/23] netfilter: ipv6: nf_defrag: avoid/free clone operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/23] netfilter: nf_tables: wrap tracing with a static key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/23] netfilter: nfnetlink_log: Change setter functions to be void
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/23] netfilter: nft_payload: add packet mangling support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/23] netfilter: prepare xt_cgroup for multi revisions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/23] netfilter: nf_tables: fix nf_log_trace based tracing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/23] netfilter: ipv6: nf_defrag: fix NULL deref panic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/23] netfilter: cttimeout: add netns support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/23] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/23] netfilter: nf_tables: remove unused struct members
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/23] nfnetlink: add nfnl_dereference_protected helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/23] netfilter: implement xt_cgroup cgroup2 path match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/23] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/23] netfilter: ipv6: avoid nf_iterate recursion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/23] netfilter: Set /proc/net entries owner to root in namespace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/23] netfilter-bridge: Cleanse indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/23] netfilter: fix include files for compilation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/23] netfilter: ebtables: use __u64 from linux/types.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/23] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nft] ct expr: make directional keys work
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.6.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.6.0 release
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [ANNOUNCE] iptables 1.6.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ila: add NETFILTER dependency
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] ila: add NETFILTER dependency
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ila: add NETFILTER dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nft] ct expr: make directional keys work
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] ila: add NETFILTER dependency
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH nf] netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL key
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/5] new testsuite for nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf-next 0/12] netfilter: don't copy init ns hooks to new namespaces
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf-next 09/12] nfnetlink: add nfnl_dereference_protected helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft] netlink_delinearize: add previous statement to rule_pp_ctx
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [PATCH net-next v5 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next v5 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [RFC nft] ct expr: make directional keys work
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC nft] ct expr: make directional keys work
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC nft] ct expr: make directional keys work
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next v4 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 3/8] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 6/8] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 5/8] openvswitch: Find existing conntrack entry after upcall.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 0/8] openvswitch: NAT support.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nft] netlink_delinearize: add previous statement to rule_pp_ctx
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 1/5] tests/: rearrange tests directory
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: use skb->protocol instead of assuming ethernet header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• [PATCH 4/5,nf-next] netfilter: nfnetlink: pass down netns pointer to call() and call_rcu()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5,nf-next] netfilter: nfnetlink: pass down netns pointer to commit() and abort() callbacks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5,nf-next] netfilter: nf_tables: destroy basechain and rules on netdevice removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/5,nf-next] netfilter: nf_tables: remove check against removal of inactive objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/5 nf,v3] netfilter: nf_tables: release objects on netns destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• IPTables connection mark rule stops working
  • From: Justin Michael Schwartzbeck <justinmschw@xxxxxxxxx>
• RE: [PATCH net-next] net, cgroup: cgroup_sk_updat_lock was missing initializer
  • From: Dexuan Cui <decui@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] Another round of NetDev 1.1 updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: ctnetlink: put back references to master ct and expect objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] tests: add *.got files to .gitignore
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 8/8] netfilter: implement xt_cgroup cgroup2 path match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 7/8] netfilter: prepare xt_cgroup for multi revisions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] net, cgroup: cgroup_sk_updat_lock was missing initializer
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/7,v2] src: fix sub-byte protocol header definitions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Caroline Tice <cmtice@xxxxxxxxxx>
• Re: [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Caroline Tice <cmtice@xxxxxxxxxx>
• Re: [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -stable] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse
  • From: Luis Henriques <luis.henriques@xxxxxxxxxxxxx>
• [PATCH net-next] net, cgroup: cgroup_sk_updat_lock was missing initializer
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 0/6] netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCHSET v4] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Dexuan Cui <decui@xxxxxxxxxxxxx>
• Re: [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable-*] netfilter: nf_conntrack: Support expectations in different zones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable-3.18] netfilter: nft_compat: fix module refcount underflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nf_tables: fix bogus warning in nft_data_uninit()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nf_log: don't zap all loggers on unregister
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/6] netfilter: nfnetlink_queue: avoid harmless unnitialized variable warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/6] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: nf_tables: use reverse traversal commit_list in nf_tables_abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] netfilter: nf_dup: add missing dependencies with NF_CONNTRACK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: nfnetlink: avoid recurrent netns lookups in call_batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/6] netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <Luuk.Paulussen@xxxxxxxxxxxxxxxxxxx>
• rebasing nf tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v2] netfilter: nf_tables: release objects on netns destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Remzi AKYÜZ <linuxliste@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 4/5] tests/shell: add tests for handles and comments
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5] tests/: add shell test-suite
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 5/5] tests/shell: add test case for cache bug
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 1/5] tests/: rearrange tests directory
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 4/5] tests/shell: add tests for handles and comments
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 3/5] tests/shell: add maps tests cases
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 0/5] new testsuite for nft
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf,v2] netfilter: nf_tables: release objects on netns destruction
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH net-next v4 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH net-next v4 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v4 8/8] openvswitch: Interface with NAT.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] tests: add *.got files to .gitignore
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: fix nf_log_trace based tracing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Jiri Kosina <jikos@xxxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Christoph Hellwig <hch@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Jens Axboe <axboe@xxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Jens Axboe <axboe@xxxxxxxxx>
• [PATCH 4/4] elevator: use list_is_{first,last}
  • From: Geliang Tang <geliangtang@xxxxxxx>
• [PATCH 1/4] list: introduce list_is_first()
  • From: Geliang Tang <geliangtang@xxxxxxx>
• [PATCH 2/4] livepatch: use list_is_first()
  • From: Geliang Tang <geliangtang@xxxxxxx>
• [PATCH 3/4] netfilter: ipset: use list_is_first()
  • From: Geliang Tang <geliangtang@xxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH nf 2/2] nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/2] nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nfnetlink: avoid recurrent netns lookups in call_batch
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH -next] netfilter: meta: add support for setting skb->pkttype
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH -next] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: undefined reference to `nf_conntrack_untracked'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_dup: add missing dependencies with NF_CONNTRACK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: release objects on netns destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• Re: [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: fix nf_log_trace based tracing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3 libnftnl 1/3] src: add trace infrastructure support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nftables: Change the return type of nfulnl_set_timeout() and nfulnl_set_qthresh() to be void.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 libnftnl 1/3] src: add trace infrastructure support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nftables: Change the return type of nfulnl_set_timeout() and nfulnl_set_qthresh() to be void.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Initialize local variables to NULL, to prevent using them when uninitialized.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [netfilter-core] [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v4 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next v4 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ipv6: nf_defrag: fix NULL deref panic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: cttimeout: add netns support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: Link libext_arpt to static build
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf_conntrack_count is increasing
  • From: Гаврилов Игорь <iggorok@xxxxxxxxx>
• Re: [PATCH v4 nf-next 2/2] netfilter: nf_tables: wrap tracing with a static key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 nf-next 1/2] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nfnetlink: avoid recurrent netns lookups in call_batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf_conntrack_count is increasing
  • From: Florian Westphal <fw@xxxxxxxxx>
• nf_conntrack_count is increasing
  • From: Гаврилов Игорь <iggorok@xxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCHSET v4] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: next-20151207 - crash in IPv6 code
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH net-next v4 5/8] openvswitch: Find existing conntrack entry after upcall.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 3/8] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 0/8] openvswitch: NAT support.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 6/8] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: libnetfilter_conntrack: set_attr_dnat_ipv4
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: ipv6: nf_defrag: fix NULL deref panic
  • From: Florian Westphal <fw@xxxxxxxxx>
• libnetfilter_conntrack: set_attr_dnat_ipv4
  • From: Sargun Dhillon <sargun@xxxxxxxxx>
• Re: next-20151207 - crash in IPv6 code
  • From: Valdis.Kletnieks@xxxxxx
• [PATCH xtables-addons] make xt_ACCOUNT network namespace aware
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: next-20151207 - crash in IPv6 code
  • From: Florian Westphal <fw@xxxxxxxxx>
• next-20151207 - crash in IPv6 code
  • From: Valdis Kletnieks <Valdis.Kletnieks@xxxxxx>
• [PATCH nf-next] netfilter: nftables: Change the return type of nfulnl_set_timeout() and nfulnl_set_qthresh() to be void.
  • From: Rami Rosen <rami.rosen@xxxxxxxxx>
• [PATCH 1/8] cgroup: record ancestor IDs and reimplement cgroup_is_descendant() using it
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCHSET v4] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 3/8] cgroup: implement cgroup_get_from_path() and expose cgroup_put()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 2/8] kernfs: implement kernfs_walk_and_get()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 6/8] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 4/8] netprio_cgroup: limit the maximum css->id to USHRT_MAX
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 7/8] netfilter: prepare xt_cgroup for multi revisions
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 8/8] netfilter: implement xt_cgroup cgroup2 path match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 5/8] net: wrap sock->sk_cgrp_prioidx and ->sk_classid inside a struct
  • From: Tejun Heo <tj@xxxxxxxxxx>
• nf_conntrack_ipv4: UDP packets are spuriously dropped on parallel send via loopback device on SMP machines
  • From: Matthias Gerstner <Matthias.Gerstner@xxxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: nftables: add connlabel set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: labels: don't emit ct event if labels are unchanged
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: connlabels: move helpers to xt_connlabel
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: nftables: add set support for conntrack labels
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <Luuk.Paulussen@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <Luuk.Paulussen@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <Luuk.Paulussen@xxxxxxxxxxxxxxxxxxx>
• [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 7/7] src: move payload sub-byte matching to the evaluation step
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/7,v2] src: fix sub-byte protocol header definitions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/7] evaluate: transfer right shifts to constant side
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/7] evaluate: transfer right shifts to range side
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 6/7] evaluate: transfer right shifts to set reference side
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/7,v2] tests: vlan pcp and cfi are located in the first byte
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/7] netlink_delinearize: postprocess expression before range merge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] netfilter: Initialize local variables to NULL, to prevent using them when uninitialized.
  • From: Tomer Barletz <barletz@xxxxxxxxx>
• Re: [ovs-dev] [PATCH net-next v3 3/8] netfilter: Allow calling into nat helper without skb_dst.g
  • From: Pravin Shelar <pshelar@xxxxxxxxxx>
• Re: [PATCH nft 2/2] src: fix sub-bytes protocol header definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <luuk.paulussen@xxxxxxxxxxxxxxxxxxx>
• Support marking/matching tc_index in netfilter
  • From: Luuk Paulussen <luuk.paulussen@xxxxxxxxxxxxxxxxxxx>
• [PATCH -next] netfilter: meta: add support for setting skb->pkttype
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft] bug in sets cache
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH v3 nf-next 01/12] netfilter: add and use nf_ct_netns_get/put
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 0/12] netfilter: don't copy init ns hooks to new namespaces
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 12/12] netfilter: inform ctnetlink about new l3 protocol trackers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 11/12] netfilter: hook up nfnetlink log/queue to register conntrack hooks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 10/12] netfilter: ctnetlink: make ctnetlink bind register conntrack hooks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 09/12] nfnetlink: add nfnl_dereference_protected helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 08/12] nftables: add conntrack dependencies for nat/masq/redir expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 05/12] netfilter: nat: add dependencies on conntrack module
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 07/12] netfilter: don't call nf_hook_state_init/_hook_slow unless needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 06/12] netfilter: bridge: register hooks only when bridge interface is added
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 04/12] netfilter: defrag: only register defrag functionality if needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 03/12] netfilter: xtables: don't register table hooks in namespace at init time
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 02/12] netfilter: conntrack: register hooks in netns when needed by ruleset
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: fix sub-bytes protocol header definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Bug#806130: linux: netlink_sock_destruct() crash in netns
  • From: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
• [PATCH nft 3/3] tests: fix crash when rule test is malformed
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 2/3] tests: remove useless logic
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 1/3] tests: add *.got files to .gitignore
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [PATCH net-next v3 3/8] netfilter: Allow calling into nat helper without skb_dst.g
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] NetDev 1.1 updates (Seville, Spain February 10-12)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: fix sub-bytes protocol header definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] tests: vlan pcp and cfi are located in the first byte
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipvs: avoid unused variable warning
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [ovs-dev] [PATCH net-next v3 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>