Linux TCP/IP Netfilter Devel

• Thread Index

• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: [PATCH 0/4] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [ovs-dev] [RFC PATCH 1/5] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [RFC PATCH 5/5] openvswitch: Interface with NAT.
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [RFC PATCH 2/5] netfilter: Factor out nf_ct_get_info().
  • From: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Ani Sinha <ani@xxxxxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH 5/5] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
• Re: [RFC PATCH 3/5] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
• Re: [ovs-dev] [RFC PATCH 1/5] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Ani Sinha <ani@xxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: Joe Stringer <joestringer@xxxxxxxxxx>
• [PATCH 1/1] netfilter: Add nf_conntrack_helpers_register to fix one kernel panic
  • From: Feng Gao <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH 4/5] openvswitch: conntrack netlink API updates.
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [RFC PATCH 5/5] openvswitch: Interface with NAT.
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [RFC PATCH 2/5] netfilter: Factor out nf_ct_get_info().
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH 3/5] netfilter: Allow calling into nat helper without skb_dst.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH 4/5] openvswitch: conntrack netlink API updates.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ovs-dev] [RFC PATCH 2/5] netfilter: Factor out nf_ct_get_info().
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: 答复: 答复: [PATCH]: netfilter: ftp/irc/sane/sip/tftp: Fix the kernel panic when load these modules with duplicated ports
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ovs-dev] [RFC PATCH 1/5] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: Joe Stringer <joestringer@xxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/4] netfilter: ipv6: in-place replacement of last skb
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: Joe Stringer <joestringer@xxxxxxxxxx>
• Re: [PATCH nf-next 3/4] netfilter: ipv6: in-place replacement of last skb
  • From: Joe Stringer <joestringer@xxxxxxxxxx>
• Re: [PATCH net] netfilter: xt_TEE: fix NULL dereference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 4/4] netfilter: ipv6: avoid nf_iterate recursion
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 4/4] netfilter: ipv6: avoid nf_iterate recursion
  • From: Joe Stringer <joestringer@xxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: Joe Stringer <joestringer@xxxxxxxxxx>
• [PATCH net] netfilter: xt_TEE: fix NULL dereference
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Ani Sinha <ani@xxxxxxxxxx>
• Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg
  • From: Akemi Yagi <amyagi@xxxxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Ani Sinha <ani@xxxxxxxxxx>
• [PATCH 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/4] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: sync with packet rx also after removing queue entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/4] netfilter: fix Kconfig dependencies for nf_dup_ipv{4,6}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [conntrackd PATCH v2] conntrackd: add basic systemd notification support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: xtables-addons 64-bit counter patch
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: [PATCH 00/35] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [RFC conntrackd PATCH] conntrackd: add basic systemd notification support
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [RFC conntrackd PATCH] conntrackd: add basic systemd notification support
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Ani Sinha <ani@xxxxxxxxxx>
• Re: [PATCH nft] src: add interface wildcard matching
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] src: add interface wildcard matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: add interface wildcard matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: add interface wildcard matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: add interface wildcard matching
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] src: add interface wildcard matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: add interface wildcard matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Ani Sinha <ani@xxxxxxxxxx>
• [PATCH nf-next 2/4] inet: kill obsolete skb_free op
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/4] netfilter: ipv6: in-place replacement of last skb
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/4] netfilter: ipv6: avoid nf_iterate recursion
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/4] netfilter: ipv6: remove extra clone/free operations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/4] netfilter: rework netfilter ipv6 defrag
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 00/35] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/35] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/35] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Need net-next in nf-next for netfilter ipv6 frag patchset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/35] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/35] netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/35] netfilter: remove dead code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/35] netfilter: nfnetlink_queue: use y2038 safe timestamp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/35] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/35] netfilter: nfnetlink_log: allow to attach conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/35] netfilter: ctnetlink: add const qualifier to nfnl_hook.get_ct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/35] netfilter: Kconfig rename QUEUE_CT to GLUE_CT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/35] netfilter: xt_CT: don't put back reference to timeout policy object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/35] netfilter: conntrack: fix crash on timeout object removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/35] ipvs: Remove possibly unused variables from ip_vs_conn_net_{init,cleanup}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/35] netfilter: nfnetlink_log: autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix Kconfig dependencies for nft_dup_ipv{4,6}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/35] netfilter: bridge: avoid unused label warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/35] netfilter: nfqueue: don't use prev pointer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/35] netfilter: ip6_tables: function definition layout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/35] netfilter: ip6_tables: improve if statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/35] netfilter: ip6_tables: label placement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/35] netfilter: ipv6: whitespace around operators
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 25/35] netfilter: nfnetlink_log: consolidate check for instance in nfulnl_recv_config()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 24/35] netfilter: ipv6: pointer cast layout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/35] netfilter: ip6_tables: ternary operator layout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 26/35] netfilter: nfnetlink_log: validate dependencies to avoid breaking atomicity
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/35] netfilter: ipv6: code indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 29/35] netfilter: nf_queue: remove rcu_read_lock calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 27/35] netfilter: remove hook owner refcounting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 28/35] netfilter: make nf_queue_entry_get_refs return void
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 32/35] netfilter: ipv4: ternary operator layout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 34/35] netfilter: ipv4: code indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 33/35] netfilter: ipv4: function definition layout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 31/35] netfilter: ipv4: label placement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 35/35] netfilter: ipv4: whitespace around operators
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 30/35] netfilter: turn NF_HOOK into an inline function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/35] nfnetlink_cttimeout: add rcu_barrier() on module removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/35] ipvs: Remove possibly unused variable from ip_vs_out
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/35] netfilter: nfnetlink_queue: rename related to nfqueue attaching conntrack info
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/35] ipvs: Don't protect ip_vs_addr_is_unicast with CONFIG_SYSCTL
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Need net-next in nf-next for netfilter ipv6 frag patchset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC conntrackd PATCH] conntrackd: add basic systemd notification support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Need net-next in nf-next for netfilter ipv6 frag patchset
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC conntrackd PATCH] conntrackd: add basic systemd notification support
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] netfilter: fix Kconfig dependencies for nft_dup_ipv{4,6}
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [RFC conntrackd PATCH] conntrackd: add basic systemd notification support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter-ipv4: Line layout whitespace fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/6] coding style improvements: netfilter-ipv4
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nfnetlink_log: autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: turn NF_HOOK into an inline function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/3] netfilter: remove hook owner refcounting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC conntrackd PATCH] conntrackd: add basic systemd notification support
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [RFC conntrackd PATCH] conntrackd: add basic systemd notification support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH v3] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Nikolay Borisov <n.borisov@xxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Patch series for netfilter still missing in 4.2
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Patch series for netfilter still missing in 4.2
  • From: "Thomas D." <whissi@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH v2] netfilter: ipset: Fix sleeping memory allocation in atomic context
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• Re: [PATCH] Fix sleeping memory allocation in atomic context
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] Fix sleeping memory allocation in atomic context
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] Fix sleeping memory allocation in atomic context
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
• [PATCH] Fix sleeping memory allocation in atomic context
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• [PATCH v4 52/79] include/uapi/netfilter/*.h: fix include files for compilation
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH lnf-log 3/3] utils: nf-log: attaching a conntrack information
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH nf-next 2/2] netfilter: nfnetlink_log: validate dependencies to avoid breaking atomicity
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH nf-next 6/6] netfilter-ipv4: whitespace around operators
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 4/6] netfilter-ipv4: function definition layout
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 5/6] netfilter-ipv4: code indentation
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 0/6] coding style improvements: netfilter-ipv4
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 3/6] netfilter-ipv4: ternary operator layout
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 2/6] netfilter-ipv4: label placement
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 1/6] netfilter-ipv4: Line layout whitespace fixes
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/7] coding style improvements for netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/2] ipvs: Remove possibly unused variable from ip_vs_out
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: nf_queue: remove rcu_read_lock calls
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: make nf_queue_entry_get_refs return void
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: remove hook owner refcounting
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: remove hook owner refcounting
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: sync with packet rx also after removing queue entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nfnetlink_log: validate dependencies to avoid breaking atomicity
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nfnetlink_log: consolidate check for instance in nfulnl_recv_config()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] chain: fix segfault in 'device' XML parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: nfqueue: don't use prev pointer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] chain: fix segfault in 'device' XML parsing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftnl PATCH] chain: fix segfault in 'device' XML parsing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH net-next 0/3] net: Pass net into defragmentation
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] Fix nft-table-upd example
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 3/3] ipv6: Pass struct net into nf_ct_frag6_gather
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 2/3] ipv4: Pass struct net into ip_defrag and ip_check_defrag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nfnetlink_log: autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/7] listing command updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nfnetlink_log: autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] Fix compilation with JSON and XML parsing enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] expr: dup: Fix json parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/2] ipvs: Remove possibly unused variable from ip_vs_out
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] bridge/netfilter: avoid unused label warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH lnf-log 1/3] include: Sync with kernel headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH lnf-log 3/3] utils: nf-log: attaching a conntrack information
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH lnf-log 2/3] nlmsg: Add NFULA_CT and NFULA_CT_INFO attributes support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/3] netfilter: conntrack: fix crash on timeout object removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libmnl 1/2] socket: introduce mnl_socket_open2()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 0/3] net: Pass net into defragmentation
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH nf-next 2/7] netfilter-ipv6: function definition layout
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 3/7] netfilter-ipv6: code indentation
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 7/7] netfilter-ipv6: pointer cast layout
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 1/7] netfilter-ipv6: label placement
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 0/7] coding style improvements for netfilter
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 4/7] netfilter-ipv6: whitespace around operators
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 6/7] netfilter-ipv6: improve if statements
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• [PATCH nf-next 5/7] netfilter-ipv6: ternary operator layout
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• Re: [PATCH libnftnl] Fix compilation with JSON and XML parsing enabled
  • From: Vijay Subramanian <subramanian.vijay@xxxxxxxxx>
• [PATCH libnftnl] Fix nft-table-upd example
  • From: Vijay Subramanian <subramanian.vijay@xxxxxxxxx>
• Re: [PATCH libnftnl] Fix compilation with JSON and XML parsing enabled
  • From: Aaron Conole <aconole@xxxxxxxxxx>
• Re: [PATCH libnftnl] Fix compilation with JSON and XML parsing enabled
  • From: Aaron Conole <aconole@xxxxxxxxxx>
• [PATCH libnftnl] Fix compilation with JSON and XML parsing enabled
  • From: Vijay Subramanian <subramanian.vijay@xxxxxxxxx>
• [PATCH net-next 3/3] ipv6: Pass struct net into nf_ct_frag6_gather
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 1/3] ipv4: Only compute net once in ip_call_ra_chain
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 2/3] ipv4: Pass struct net into ip_defrag and ip_check_defrag
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 0/3] net: Pass net into defragmentation
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH v2] netfilter: turn NF_HOOK into an inline function
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH] netfilter: turn NF_HOOK into an inline function
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH] netfilter: turn NF_HOOK into an inline function
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [RFC nft PATCH 1/3] tests: add operations test-suite
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC nft PATCH 3/3] tests/operations: add tests for handles and comments
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC nft PATCH 0/3] new test suite
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC nft PATCH 2/3] tests/operations: add maps tests cases
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] netfilter: turn NF_HOOK into an inline function
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [nft] regarding sets names length
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: turn NF_HOOK into an inline function
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH] netfilter: turn NF_HOOK into an inline function
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [RFC nft PATCH 0/3] new test suite
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft] regarding sets names length
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [nft] regarding sets names length
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH -next] netfilter: nfqueue: don't use prev pointer
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft] possible several bugs in maps
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft] possible several bugs in maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft] possible several bugs in maps
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nft 0/7] listing command updates
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH v2] netfilter: fix bad checksum on IPv6 when NAT is performed
  • From: Tom Herbert <tom@xxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: sync with packet rx also after removing queue entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: fix bad checksum on IPv6 when NAT is performed
  • From: Maxime Bizon <mbizon@xxxxxxxxxx>
• [PATCH libnftnl] expr: dup: Fix json parsing
  • From: Aaron Conole <aconole@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: fix bad checksum on IPv6 when NAT is performed
  • From: Tom Herbert <tom@xxxxxxxxxxxxxxx>
• [PATCH nft 7/7] parser_bison: show all sets via list sets with no family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 6/7] rule: rework list chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/7] rule: `list sets' only displays declaration, not definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/7] evaluate: check if set exists before listing it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/7] rule: display table when listing one set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/7] src: add `list chains' command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/7] rule: display table when listing sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/7] listing command updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: fix bad checksum on IPv6 when NAT is performed
  • From: Maxime Bizon <mbizon@xxxxxxxxxx>
• Re: [PATCH] netfilter: fix bad checksum on IPv6 when NAT is performed
  • From: Maxime Bizon <mbizon@xxxxxxxxxx>
• Re: [nft] regarding sets names length
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft PATCH] rule: fix printing of rule comments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH 1/1] netfilter: ftp: Check data size before copy them into FTP buffer
  • From: Feng Gao <gfree.wind@xxxxxxxxxxx>
• Re: [nft] regarding sets names length
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] bridge/netfilter: avoid unused label warning
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
• [PATCH v2] bridge/netfilter: avoid unused label warning
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [nft] regarding sets names length
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [nft] regarding sets names length
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH net-next 00/16] net: Pass net through the output path v2
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [nft PATCH] rule: fix printing of rule comments
  • From: Arturo Borrero Gonzalez <aborrero@xxxxxxx>
• Re: [PATCH net-next 00/16] net: Pass net through the output path v2
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH net-next 06/15] ipv4: Merge ip_local_out and ip_local_out_sk
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH net-next 16/16] dst: Pass net into dst->output
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 13/16] ipvlan: Cache net in ipvlan_process_v4_outbound and ipvlan_process_v6_outbound
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 14/16] ipv4,ipv6: Pass net into __ip_local_out and __ip6_local_out
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 11/16] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 15/16] ipv4,ipv6: Pass net into ip_local_out and ip6_local_out
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 12/16] ppp: Cache net in pptp_xmit
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 02/16] ipv4: Fix ip_queue_xmit to pass sk into ip_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 04/16] net: Pass net into dst_output and remove dst_output_okfn
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 06/16] ipv4: Merge __ip_local_out and __ip_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 09/16] ipv6: Merge ip6_local_out and ip6_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 07/16] ipv4: Merge ip_local_out and ip_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 08/16] ipv6: Merge __ip6_local_out and __ip6_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 10/16] ipv4: Cache net in iptunnel_xmit
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 05/16] dst: Pass a sk into .local_out
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 03/16] xfrm: Only compute net once in xfrm_policy_queue_process
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 01/16] ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 00/16] net: Pass net through the output path v2
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH net-next 06/15] ipv4: Merge ip_local_out and ip_local_out_sk
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• linux 3.4.43 : kernel crash at __nf_conntrack_confirm
  • From: Ani Sinha <ani@xxxxxxxxxx>
• Re: [PATCH net-next 06/15] ipv4: Merge ip_local_out and ip_local_out_sk
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH net-next 01/15] ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [Help needed] Kernel level, OSI layers 2-3 Network driver developments, anyone in Northwest US region ?
  • From: "John D Allen, Leveridge Systems INC" <john.allen@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/2] ipvs: Remove possibly unused variable from ip_vs_out
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 01/15] ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• [PATCH nf-next 1/2] ipvs: Remove possibly unused variable from ip_vs_out
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 2/2] ipvs: Remove possibly unused variables from ip_vs_conn_net_{init,cleanup}
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next 0/2] Fourth Round of IPVS Updates for v4.4
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_conntrack_netlink: fix locks around helper module loading
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_conntrack_netlink: fix nf-nat module loaded checking
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH nf-next] netfilter: nfnetlink_log: autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config flag
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCHv3 nf-next] netfilter: nfnetlink_queue: check NFQA_CFG_F_CONNTRACK config flag
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCHv2 nf-next 1/1] netfilter: nfnetlink_queue: check NFQA_CFG_F_CONNTRACK config flag
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH net-next 10/15] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH net-next 10/15] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH net-next 12/15] ipvlan: Cache net in ipvlan_process_v4_outbound and ipvlan_process_v6_outbound
  • From: Mahesh Bandewar <maheshb@xxxxxxxxxx>
• Re: [PATCH net-next 12/15] ipvlan: Cache net in ipvlan_process_v4_outbound and ipvlan_process_v6_outbound
  • From: Mahesh Bandewar <maheshb@xxxxxxxxxx>
• Re: [PATCH] ipvs: Remove possibly unused net variable from ip_vs_out
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] ipvs: Remove possibly unused net variable from ip_vs_out
  • From: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 10/15] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH net-next 11/15] ppp: Cache net in pptp_xmit
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 12/15] ipvlan: Cache net in ipvlan_process_v4_outbound and ipvlan_process_v6_outbound
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 13/15] ipv4,ipv6: Pass net into __ip_local_out and __ip6_local_out
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 14/15] ipv4,ipv6: Pass net into ip_local_out and ip6_local_out
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 15/15] dst: Pass net into dst->output
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 03/15] net: Pass net into dst_output and remove dst_output_okfn
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 04/15] dst: Pass a sk into .local_out
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 05/15] ipv4: Merge __ip_local_out and __ip_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 06/15] ipv4: Merge ip_local_out and ip_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 09/15] ipv4: Cache net in iptunnel_xmit
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 08/15] ipv6: Merge ip6_local_out and ip6_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 10/15] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 07/15] ipv6: Merge __ip6_local_out and __ip6_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 02/15] xfrm: Only compute net once in xfrm_policy_queue_process
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 01/15] ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 00/15] net: Pass net through the output path
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH] ipvs: Remove possibly unused net variable from ip_vs_out
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] netfilter: fix bad checksum on IPv6 when NAT is performed
  • From: Maxime Bizon <mbizon@xxxxxxxxxx>
• Re: [PATCH net] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• Re: [PATCH nft 2/2] rule: don't reorder protocol payload expressions when merging
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft] segfault in expr_clone()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCHv2 nf-next 1/1] netfilter: nfnetlink_queue: check NFQA_CFG_F_CONNTRACK config flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] expression: provide clone operation for set element ops
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft] segfault in expr_clone()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] expression: provide clone operation for set element ops
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft] segfault in expr_clone()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft] segfault in expr_clone()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH] ipvs: Remove possibly unused net variable from ip_vs_out
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] ipvs: Remove possibly unused variables from ip_vs_conn_net_{init,cleanup}
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] ipvs: Remove unused net variable from ip_vs_out
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] ipvs: Remove unused net variable from ip_vs_out
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv2 nf-next 1/1] netfilter: nfnetlink_queue: check NFQA_CFG_F_CONNTRACK config flag
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCHv2 nf-next 0/1] netfilter: nfnetlink_queue: check NFQA_CFG_F_CONNTRACK config flag
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH v3] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH libmnl 1/2] socket: introduce mnl_socket_open2()
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v3] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH libmnl 1/2] socket: introduce mnl_socket_open2()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH libmnl 1/2] socket: introduce mnl_socket_open2()
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• Re: [PATCH libmnl 1/2] socket: introduce mnl_socket_open2()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• [PATCH v3] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH libmnl 1/2] socket: introduce mnl_socket_open2()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH libmnl 1/2] socket: introduce mnl_socket_open2()
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• [PATCH nf-next] netfilter: bridge: fix 2 compiler warnings
  • From: Nikolay Aleksandrov <razor@xxxxxxxxxxxxx>
• Re: [PATCH v2] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libmnl 1/2] socket: introduce mnl_socket_open2()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [lnf-queue PATCH] nlmsg: add lacking attributes validation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2 nf-next 0/4] netfilter: nfnetlink_log attach conntrack information
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: remove dead code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2 nf-next 4/4] netfilter: nfnetlink_log: allow to attach conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/3] netfilter: conntrack: fix crash on timeout object removal
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nf 3/3] netfilter: xt_CT: don't put back reference to timeout policy object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/3] netfilter: conntrack: fix crash on timeout object removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/3] nfnetlink_cttimeout: add rcu_barrier() on module removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 0/6] net: Pass net through ip fragmention
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 00/12] net: assorted y2038 changes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ftp: Check data size before copy them into FTP buffer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv2 nf-next 4/4] netfilter: nfnetlink_log: allow to attach conntrack
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCHv2 nf-next 3/4] netfilter: nf_conntrack_netlink: add const qualifier to nfnl_hook.get_ct
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCHv2 nf-next 2/4] netfilter: Kconfig rename QUEUE_CT to GLUE_CT
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCHv2 nf-next 1/4] netfilter: nfnetlink_queue: rename related to nfqueue attaching conntrack info
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCHv2 nf-next 0/4] netfilter: nfnetlink_log attach conntrack information
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH nf-next,v2] netfilter: ctnetlink: remove function inline declaration
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ftp: Check data size before copy them into FTP buffer
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 1/1] netfilter: ftp: Check data size before copy them into FTP buffer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next 4/8] netfilter: xtables: don't register table hooks in namespace at init time
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next,v2] netfilter: ctnetlink: remove function inline declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next,v2] netfilter: ctnetlink: remove function inline declaration
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nf-next,v2] netfilter: ctnetlink: remove function inline declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: remove function inline declaration
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH] netfilter: ctnetlink: remove function inline declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nfnetlink_queue: use y2038 safe timestamp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next 2/8] netfilter: add and use nf_ct_netns_get/put
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 08/12] nfnetlink: use y2038 safe timestamp
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [PATCH libmnl 2/2] examples: use mnl_socket_open2()
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• [PATCH libmnl 1/2] socket: introduce mnl_socket_open2()
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• [PATCH libmnl 0/2] Introduce mnl_socket_open2()
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• Re: [PATCH 08/12] nfnetlink: use y2038 safe timestamp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -next 6/8] netfilter: nat: depend on conntrack module
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next 7/8] netfilter: bridge: register hooks only when bridge interface is added
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next 8/8] netfilter: don't call nf_hook_state_init/_hook_slow unless needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next 5/8] netfilter: defrag: only register defrag functionality if needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next 4/8] netfilter: xtables: don't register table hooks in namespace at init time
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next 3/8] netfilter: conntrack: register hooks in netns when needed by ruleset
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next 2/8] netfilter: add and use nf_ct_netns_get/put
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next 1/8] netfilter: ingress: don't use nf_hook_list_active
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next 0/8] netfilter: don't copy init ns hooks to new namespaces
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: Line layout whitespace fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• [PATCH v2] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• [PATCH nf-next] ipvs: Don't protect ip_vs_addr_is_unicast with CONFIG_SYSCTL
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next] Third Round of IPVS Updates for v4.4
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] ipvs: Remove unused net variable from ip_vs_out
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH] ipvs: Remove unused net variable from ip_vs_out
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: Line layout whitespace fixes
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 2/6] openvswitch: Pass net into ovs_fragment
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• Re: [libmnl] Creating netlink socket with SOCK_CLOEXEC flag
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• [PATCH 2/2 v3] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 v3] netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrackd] allowing DisableExternalCache in alarm mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• [PATCH net-next 7/6] ipv6: Add missing newline to __xfrm6_output_finish
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libmnl] Creating netlink socket with SOCK_CLOEXEC flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libmnl] Creating netlink socket with SOCK_CLOEXEC flag
  • From: Guillaume Nault <g.nault@xxxxxxxxxxxx>
• Re: [PATCH net-next 2/6] openvswitch: Pass net into ovs_fragment
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH nf-next v2 2/2] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 2/2] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nf-next v2 2/2] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v2 1/2] netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] libmnl: Failed to build with clang, incompatible EXPORT_SYMBOL(x) macro
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• [PATCH] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH] libmnl: Failed to build with clang, incompatible EXPORT_SYMBOL(x) macro
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH] libmnl: Failed to build with clang, incompatible EXPORT_SYMBOL(x) macro
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] libmnl: Failed to build with clang, incompatible EXPORT_SYMBOL(x) macro
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH] libmnl: Failed to build with clang, incompatible EXPORT_SYMBOL(x) macro
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• Re: [PATCH net-next 0/6] net: Pass net through ip fragmention
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH net-next 1/6] openvswitch: Pass net into ovs_vport_output
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH net-next 2/6] openvswitch: Pass net into ovs_fragment
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH net-next 4/6] ipv6: Pass struct net through ip6_fragment
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH] libmnl: Failed to build with clang, incompatible EXPORT_SYMBOL(x) macro
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• [PATCH nft] expression: provide clone operation for set element ops
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/2 nf-next] netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: Line layout whitespace fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf-next] netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH 1/2 nf-next] netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH] libmnl: Failed to build with clang, incompatible EXPORT_SYMBOL(x) macro
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/3] netfilter: nfnetlink_log: allow to attach conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nfnetlink_queue: rename related to nfqueue attaching conntrack info
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nf-next] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 nf-next] netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 1/6] openvswitch: Pass net into ovs_vport_output
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 5/6] bridge: Remove br_nf_push_frag_xmit_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 6/6] openvswitch: Remove ovs_vport_output_sk
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 4/6] ipv6: Pass struct net through ip6_fragment
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 3/6] ipv4: Pass struct net through ip_fragment
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 2/6] openvswitch: Pass net into ovs_fragment
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH net-next 0/6] net: Pass net through ip fragmention
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH] netfilter: remove dead code
  • From: Flavio Leitner <fbl@xxxxxxxxxxxx>
• [PATCH 00/12] net: assorted y2038 changes
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [PATCH 08/12] nfnetlink: use y2038 safe timestamp
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• Re: [PATCH 00/90] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 00/90] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: fix Kconfig dependencies for nf_dup_ipv{4,6}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrack: add zone direction support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 1/7] netfilter: add socket to struct nft_pktinfo
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH libnetfilter_conntrack] conntrack: add zone attribute to tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables v2] libxt_CT: add support for recently introduced zone options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 iptables] added missing icmpv6 codes in REJECT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] bridge: Pass net into br_validate_ipv4 and br_validate_ipv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH next 0/5] netfilter: Pass net into ip_route_me_harder
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] tests: add tests for dup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: add dup statement support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] expr: dup: fix missing space in text output
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 2/7] netfilter: nft_meta: look at pkt->sk rather than skb->sk
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH RFC 3/7] netfilter: add NF_INET_LOCAL_SOCKET_IN chain type
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• [PATCH RFC 4/7] net: tcp_ipv4, udp_ipv4: hook up LOCAL_SOCKET_IN netfilter chains
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• [PATCH RFC 6/7] net: sctp: hook up LOCAL_SOCKET_IN netfilter chains
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• [PATCH RFC 5/7] net: tcp_ipv6, udp_ipv6: hook up LOCAL_SOCKET_IN netfilter chains
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• [PATCH RFC 7/7] net: dccp: hook up LOCAL_SOCKET_IN netfilter chains
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• [PATCH RFC 2/7] netfilter: nft_meta: look at pkt->sk rather than skb->sk
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• [PATCH RFC 1/7] netfilter: add socket to struct nft_pktinfo
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• [PATCH RFC 0/7] netfilter: introduce new chain type for local socket input
  • From: Daniel Mack <daniel@xxxxxxxxxx>
• [PATCH 1/1] netfilter: ftp: Check data size before copy them into FTP buffer
  • From: Feng Gao <gfree.wind@xxxxxxxxxxx>
• Re: [PATCH] ipvs: Don't protect ip_vs_addr_is_unicast with CONFIG_SYSCTL
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] ipvs: Don't protect ip_vs_addr_is_unicast with CONFIG_SYSCTL
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] ipvs: Don't protect ip_vs_addr_is_unicast with CONFIG_SYSCTL
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH next 0/5] netfilter: Pass net into ip_route_me_harder
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH nft 2/2] rule: don't reorder protocol payload expressions when merging
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/2] src: allow filtering on L2 header in inet family
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] bridge: Pass net into br_validate_ipv4 and br_validate_ipv6
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• [PATCH next 4/5] ipv4: Pass struct net into ip_route_me_harder
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 5/5] ipv6: Pass struct net into ip6_route_me_harder
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 3/5] netfilter: ipt_SYNPROXY: Pass snet into synproxy_send_tcp
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 2/5] netfilter: Push struct net down into nf_afinfo.reroute
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 1/5] ipv4: Push struct net down into nf_send_reset
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 0/5] netfilter: Pass net into ip_route_me_harder
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: Fetching interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrackd] allowing DisableExternalCache in alarm mode
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: 答复: [PATCH]: netfilter: ftp/irc/sane/sip/tftp: Fix the kernel panic when load these modules with duplicated ports
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Fetching interface name
  • From: Vikas <vikas.c.kumar@xxxxxxxxxx>
• Re: Fetching interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH]: netfilter: ftp/irc/sane/sip/tftp: Fix the kernel panic when load these modules with duplicated ports
  • From: Feng Gao <gfree.wind@xxxxxxxxxxx>
• [PATCH] libmnl: Failed to build with clang, incompatible EXPORT_SYMBOL(x) macro
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• NFQUEUE filtering strategy
  • From: Eugene Strulyov <eugene.strulyov@xxxxxxxxx>
• Re: [GIT PULL nf-next 00/84] Second Round of IPVS Updates for v4.4
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: NFQUEUE parallelization
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: NFQUEUE parallelization
  • From: Eugene Strulyov <eugene.strulyov@xxxxxxxxx>
• Re: NFQUEUE parallelization
  • From: Florian Westphal <fw@xxxxxxxxx>
• NFQUEUE parallelization
  • From: Eugene Strulyov <eugene.strulyov@xxxxxxxxx>
• Re: SIP messages with no/invalid CSeq are dropped by nf_ct_sip, 400 Bad Request is expected instead
  • From: Christophe Leroy <christophe.leroy@xxxxxx>
• Re: SIP messages with no/invalid CSeq are dropped by nf_ct_sip, 400 Bad Request is expected instead
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next] netfilter: Line layout whitespace fixes
  • From: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
• Re: 答复: [PATCH Resolved UMA issue] netfilter: icmp: Enhance the return value check of nf_nat_icmp(v6)_reply_translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• SIP messages with no/invalid CSeq are dropped by nf_ct_sip, 400 Bad Request is expected instead
  • From: Christophe Leroy <christophe.leroy@xxxxxx>
• Re: [PATCH next 02/84] ipvs: Don't use current in proc_do_defense_mode
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 02/84] ipvs: Don't use current in proc_do_defense_mode
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 20/84] ipvs: Pass ipvs not net to ip_vs_flush
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 21/84] ipvs: Pass ipvs not net to ip_vs_service_net_cleanup
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 03/84] ipvs: Use state->net in the ipvs forward functions
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 22/84] ipvs: Pass ipvs not net to ip_vs_zero_all
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 04/84] ipvs: Store ipvs not net in struct ip_vs_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 23/84] ipvs: Cache ipvs in ip_vs_in_icmp and ip_vs_in_icmp_v6
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 05/84] ipvs: Store ipvs not net in struct ip_vs_conn_param
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 06/84] ipvs: Pass ipvs not net to ip_vs_fill_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 24/84] ipvs: Pass ipvs not net to ip_vs_proto_data_get
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 08/84] ipvs: Pass ipvs not net to ip_vs_svc_fwm_hashkey
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 25/84] ipvs: Pass ipvs not net to ip_vs_set_timeout
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 07/84] ipvs: Store ipvs not net in struct ip_vs_service
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 26/84] ipvs: Pass ipvs not net to __ip_vs_get_service_entries
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 09/84] ipvs: Pass ipvs not net to __ip_vs_svc_fwm_find
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 27/84] ipvs: Pass ipvs not net to __ip_vs_get_dest_entries
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 10/84] ipvs: Pass ipvs not net to ip_vs_svc_hashkey
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 11/84] ipvs: Pass ipvs not net to __ip_vs_service_find
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 28/84] ipvs: Pass ipvs not net to __ip_vs_get_timeouts
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 12/84] ipvs: Pass ipvs not net to ip_vs_service_find
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 16/84] ipvs: Pass ipvs not net to __ip_vs_del_dest
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 29/84] ipvs: Pass ipvs not net to ip_vs_genl_parse_service
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 15/84] ipvs: Pass ipvs not net to ip_vs_trash_cleanup
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 13/84] ipvs: Pass ipvs not net to ip_vs_has_real_service
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 31/84] ipvs: Pass ipvs not net to ip_vs_genl_new_daemon
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 18/84] ipvs: Cache ipvs in ip_vs_genl_set_cmd
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 19/84] ipvs: Pass ipvs not net to ip_vs_add_service
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 17/84] ipvs: Pass ipvs not net to ip_vs_dest_trash_expire
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 30/84] ipvs: Pass ipvs not net to ip_vs_genl_find_service
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 32/84] ipvs: Pass ipvs not net to ip_vs_genl_del_daemon
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 33/84] ipvs: Pass ipvs not net to start_sync_thread
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 35/84] ipvs: Pass ipvs not net to make_send_sock
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 34/84] ipvs: Pass ipvs not net to stop_sync_thread
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 37/84] ipvs: Store ipvs not net in struct ip_vs_sync_thread_data
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 36/84] ipvs: Pass ipvs not net to make_receive_sock
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 39/84] ipvs: Pass ipvs not net to ip_vs_sync_conn_v0
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 41/84] ipvs: Pass ipvs not net to ip_vs_proc_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 45/84] ipvs: Pass ipvs not net to ip_vs_genl_set_config
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 43/84] ipvs: Pass ipvs not net to ip_vs_sync_net_init
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 44/84] ipvs: Pass ipvs not net to ip_vs_sync_net_cleanup
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 46/84] ipvs: Pass ipvs not net to ip_vs_start_estimator aned ip_vs_stop_estimator
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 47/84] ipvs: Pass ipvs not net to ip_vs_random_drop_entry
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 48/84] ipvs: Pass ipvs not net to ip_vs_control_net_(init|cleanup)_sysctl
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 51/84] ipvs: Pass ipvs not net to ip_vs_estimator_net_init and ip_vs_estimator_cleanup
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 49/84] ipvs: Pass ipvs not net into ip_vs_control_net_(init|cleanup)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 52/84] ipvs: Pass ipvs not net into register_app and unregister_app
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 50/84] ipvs: Pass ipvs not net to estimation_timer
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 55/84] ipvs: Pass ipvs not net to register_ip_vs_app and unregister_ip_vs_app
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 53/84] ipvs: Pass ipvs not net into ip_vs_app_inc_new
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 61/84] ipvs: Pass ipvs into .conn_in_get and ip_vs_conn_in_get_proto
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 60/84] ipvs: Pass ipvs into ip_vs_conn_fill_param_proto
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 57/84] ipvs: Pass ipvs not net into ip_vs_app_net_init and ip_vs_app_net_cleanup
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 62/84] ipvs: Pass ipvs into conn_out_get
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 63/84] ipvs: Pass ipvs not net to ip_vs_conn_hashkey
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 59/84] ipvs: Pass ipvs not net into init_netns and exit_netns
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 58/84] ipvs: Pass ipvs not net into [un]register_ip_vs_proto_netns
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 65/84] ipvs: Pass ipvs not net into ip_vs_conn_net_init and ip_vs_conn_net_cleanup
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 64/84] ipvs: Pass ipvs not net into ip_vs_conn_net_flush
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 66/84] ipvs: Pass ipvs into .conn_schedule and ip_vs_try_to_schedule
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 67/84] ipvs: Better derivation of ipvs in ip_vs_tunnel_xmit
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 69/84] ipvs: Pass ipvs into __ip_vs_get_out_rt_v6
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 70/84] ipvs: Pass ipvs into ensure_mtu_is adequate
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 68/84] ipvs: Pass ipvs into __ip_vs_get_out_rt
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 72/84] ipvs: Wrap sysctl_cache_bypass and remove ifdefs in ip_vs_leave
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 74/84] ipvs: Pass ipvs not net into sysctl_nat_icmp_send
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 75/84] ipvs: Pass ipvs into ip_vs_out
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 73/84] ipvs: Simplify ipvs and net access in ip_vs_leave
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 76/84] ipvs: Pass ipvs into ip_vs_in
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 77/84] ipvs: Pass ipvs into ip_vs_in_icmp and ip_vs_in_icmp_v6
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 78/84] ipvs: Pass ipvs into ip_vs_out_icmp and ip_vs_out_icmp_v6
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 79/84] ipvs: Pass ipvs through ip_vs_route_me_harder into sysctl_snat_reroute
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 81/84] ipvs: Pass ipvs not net to ip_vs_protocol_net_(init|cleanup)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 80/84] ipvs: Remove net argument from ip_vs_tcp_conn_listen
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 83/84] ipvs: Remove skb_sknet
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 82/84] ipvs: Remove skb_net
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 84/84] ipvs: Pass ipvs into ip_vs_gather_frags
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 71/84] ipvs: Better derivation of ipvs in ip_vs_in_stats and ip_vs_out_stats
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 56/84] ipvs: Pass ipvs not net into ip_vs_app_inc_release
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 54/84] ipvs: Pass ipvs not net to register_ip_vs_app_inc
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 42/84] ipvs: Pass ipvs not net to ip_vs_proc_sync_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 40/84] ipvs: Pass ipvs not net to ip_vs_sync_conn
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 38/84] ipvs: Pass ipvs not net to ip_vs_process_message
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 14/84] ipvs: Pass ipvs not net to ip_vs_find_dest
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 01/84] ipvs: Hoist computation of ipvs earlier in sctp_conn_schedule
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next 00/84] Second Round of IPVS Updates for v4.4
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: linux-next: Tree for Sep 23 (netfilter)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: [nft] all chains of a table are listed
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft] all chains of a table are listed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH next 00/84] ipvs: Stop guessing the network namespace (take 2)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH next 02/84] ipvs: Don't use current in proc_do_defense_mode
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH next 02/84] ipvs: Don't use current in proc_do_defense_mode
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH next 00/84] ipvs: Stop guessing the network namespace (take 2)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nft 2/2] parser: show all tables via list tables with no family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft] strange behaviour
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] rule: filter out tables depending on family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/30] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [nft] strange behaviour
  • From: littlesmilingcloud@xxxxxxxxx
• Re: [nft] all chains of a table are listed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft] all chains of a table are listed
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH nft 3/3] tests: limit: extend them to validate new bytes/second and burst parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] src: add per-bytes limit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] src: add burst parameter to limit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/30] ipvs: Handle inverse and icmp headers in ip_vs_leave
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/30] ipvs: Make ip_vs_schedule aware of inverse iph'es
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/30] ipvs: drop inverse argument to conn_{in,out}_get
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/30] ipvs: Use outer header in ip_vs_bypass_xmit_v6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/30] ipvs: Add hdr_flags to iphdr
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/30] ipvs: add schedule_icmp sysctl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/30] ipvs: sh: support scheduling icmp/inverse packets consistently
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/30] ipvs: ensure that ICMP cannot be sent in reply to ICMP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/30] netfilter: nf_tables: kill nft_pktinfo.ops
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/30] inet netfilter: Prefer state->hook to ops->hooknum
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/30] inet netfilter: Remove hook from ip6t_do_table, arp_do_table, ipt_do_table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/30] ipvs: attempt to schedule icmp packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/30] ipvs: support scheduling inverse and icmp UDP packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/30] netfilter: x_tables: Pass struct net in xt_action_param
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/30] netfilter: x_tables: Use par->net instead of computing from the passed net devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/30] ipvs: add sysctl to ignore tunneled packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 24/30] netfilter: Pass net to nf_dup_ipv4 and nf_dup_ipv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/30] netfilter: nf_tables: Use pkt->net instead of computing net from the passed net_devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 30/30] netfilter: Use nf_ct_net instead of dev_net(out) in nf_nat_masquerade_ipv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 29/30] netfilter: Pass net into nf_xfrm_me_harder
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 27/30] ipvs: Read hooknum from state rather than ops->hooknum
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 26/30] netfilter: nf_conntrack: Add a struct net parameter to l4_pkt_to_tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 28/30] netfilter: Pass priv instead of nf_hook_ops to netfilter hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 25/30] act_connmark: Remember the struct net instead of guessing it.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/30] netfilter: nf_tables: Pass struct net in nft_pktinfo
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/30] netfilter: ebtables: Simplify the arguments to ebt_do_table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/30] ipvs: support scheduling inverse and icmp SCTP packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/30] ipvs: support scheduling inverse and icmp TCP packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/30] ipvs: pull out ip_vs_try_to_schedule function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/30] ipvs: replace ip_vs_fill_ip4hdr with ip_vs_fill_iph_skb_off
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/30] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH next 00/84] ipvs: Stop guessing the network namespace (take 2)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH next 00/84] ipvs: Stop guessing the network namespace (take 2)
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH RFC 0/3] Allow postponed netfilter handling for socket matches
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH next 45/84] ipvs: Pass ipvs not net to ip_vs_genl_set_config
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 12/84] ipvs: Pass ipvs not net to ip_vs_service_find
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 60/84] ipvs: Pass ipvs into ip_vs_conn_fill_param_proto
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 53/84] ipvs: Pass ipvs not net into ip_vs_app_inc_new
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 30/84] ipvs: Pass ipvs not net to ip_vs_genl_find_service
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 35/84] ipvs: Pass ipvs not net to make_send_sock
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 23/84] ipvs: Cache ipvs in ip_vs_in_icmp and ip_vs_in_icmp_v6
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 70/84] ipvs: Pass ipvs into ensure_mtu_is adequate
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 61/84] ipvs: Pass ipvs into .conn_in_get and ip_vs_conn_in_get_proto
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 14/84] ipvs: Pass ipvs not net to ip_vs_find_dest
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 62/84] ipvs: Pass ipvs into conn_out_get
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 15/84] ipvs: Pass ipvs not net to ip_vs_trash_cleanup
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 33/84] ipvs: Pass ipvs not net to start_sync_thread
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 36/84] ipvs: Pass ipvs not net to make_receive_sock
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 54/84] ipvs: Pass ipvs not net to register_ip_vs_app_inc
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 17/84] ipvs: Pass ipvs not net to ip_vs_dest_trash_expire
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 40/84] ipvs: Pass ipvs not net to ip_vs_sync_conn
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 38/84] ipvs: Pass ipvs not net to ip_vs_process_message
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 80/84] ipvs: Remove net argument from ip_vs_tcp_conn_listen
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 56/84] ipvs: Pass ipvs not net into ip_vs_app_inc_release
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 73/84] ipvs: Simplify ipvs and net access in ip_vs_leave
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 79/84] ipvs: Pass ipvs through ip_vs_route_me_harder into sysctl_snat_reroute
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 67/84] ipvs: Better derivation of ipvs in ip_vs_tunnel_xmit
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 25/84] ipvs: Pass ipvs not net to ip_vs_set_timeout
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 46/84] ipvs: Pass ipvs not net to ip_vs_start_estimator aned ip_vs_stop_estimator
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 11/84] ipvs: Pass ipvs not net to __ip_vs_service_find
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 48/84] ipvs: Pass ipvs not net to ip_vs_control_net_(init|cleanup)_sysctl
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 57/84] ipvs: Pass ipvs not net into ip_vs_app_net_init and ip_vs_app_net_cleanup
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 81/84] ipvs: Pass ipvs not net to ip_vs_protocol_net_(init|cleanup)
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 66/84] ipvs: Pass ipvs into .conn_schedule and ip_vs_try_to_schedule
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 65/84] ipvs: Pass ipvs not net into ip_vs_conn_net_init and ip_vs_conn_net_cleanup
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 83/84] ipvs: Remove skb_sknet
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 69/84] ipvs: Pass ipvs into __ip_vs_get_out_rt_v6
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 41/84] ipvs: Pass ipvs not net to ip_vs_proc_conn
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 55/84] ipvs: Pass ipvs not net to register_ip_vs_app and unregister_ip_vs_app
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 22/84] ipvs: Pass ipvs not net to ip_vs_zero_all
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 63/84] ipvs: Pass ipvs not net to ip_vs_conn_hashkey
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH next 37/84] ipvs: Store ipvs not net in struct ip_vs_sync_thread_data
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>