Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH 19/23] netfilter: cttimeout: add netns support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/23] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/23] netfilter: nf_tables: remove unused struct members
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/23] nfnetlink: add nfnl_dereference_protected helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/23] netfilter: implement xt_cgroup cgroup2 path match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/23] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/23] netfilter: ipv6: avoid nf_iterate recursion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/23] netfilter: Set /proc/net entries owner to root in namespace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/23] netfilter-bridge: Cleanse indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/23] netfilter: fix include files for compilation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/23] netfilter: ebtables: use __u64 from linux/types.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/23] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nft] ct expr: make directional keys work
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.6.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.6.0 release
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [ANNOUNCE] iptables 1.6.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ila: add NETFILTER dependency
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] ila: add NETFILTER dependency
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ila: add NETFILTER dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nft] ct expr: make directional keys work
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] ila: add NETFILTER dependency
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH nf] netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL key
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/5] new testsuite for nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf-next 0/12] netfilter: don't copy init ns hooks to new namespaces
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf-next 09/12] nfnetlink: add nfnl_dereference_protected helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH nft] netlink_delinearize: add previous statement to rule_pp_ctx
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [PATCH net-next v5 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next v5 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [RFC nft] ct expr: make directional keys work
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC nft] ct expr: make directional keys work
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC nft] ct expr: make directional keys work
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next v4 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 3/8] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 6/8] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 5/8] openvswitch: Find existing conntrack entry after upcall.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v5 0/8] openvswitch: NAT support.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH nft] netlink_delinearize: add previous statement to rule_pp_ctx
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH 1/5] tests/: rearrange tests directory
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: use skb->protocol instead of assuming ethernet header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• [PATCH 4/5,nf-next] netfilter: nfnetlink: pass down netns pointer to call() and call_rcu()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5,nf-next] netfilter: nfnetlink: pass down netns pointer to commit() and abort() callbacks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5,nf-next] netfilter: nf_tables: destroy basechain and rules on netdevice removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/5,nf-next] netfilter: nf_tables: remove check against removal of inactive objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/5 nf,v3] netfilter: nf_tables: release objects on netns destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• IPTables connection mark rule stops working
  • From: Justin Michael Schwartzbeck <justinmschw@xxxxxxxxx>
• RE: [PATCH net-next] net, cgroup: cgroup_sk_updat_lock was missing initializer
  • From: Dexuan Cui <decui@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] Another round of NetDev 1.1 updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: ctnetlink: put back references to master ct and expect objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] tests: add *.got files to .gitignore
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 8/8] netfilter: implement xt_cgroup cgroup2 path match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 7/8] netfilter: prepare xt_cgroup for multi revisions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] net, cgroup: cgroup_sk_updat_lock was missing initializer
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/7,v2] src: fix sub-byte protocol header definitions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Caroline Tice <cmtice@xxxxxxxxxx>
• Re: [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Caroline Tice <cmtice@xxxxxxxxxx>
• Re: [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -stable] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse
  • From: Luis Henriques <luis.henriques@xxxxxxxxxxxxx>
• [PATCH net-next] net, cgroup: cgroup_sk_updat_lock was missing initializer
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 0/6] netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCHSET v4] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Dexuan Cui <decui@xxxxxxxxxxxxx>
• Re: [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable-*] netfilter: nf_conntrack: Support expectations in different zones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable-3.18] netfilter: nft_compat: fix module refcount underflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nf_tables: fix bogus warning in nft_data_uninit()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nf_log: don't zap all loggers on unregister
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/6] netfilter: nfnetlink_queue: avoid harmless unnitialized variable warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/6] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: nf_tables: use reverse traversal commit_list in nf_tables_abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] netfilter: nf_dup: add missing dependencies with NF_CONNTRACK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: nfnetlink: avoid recurrent netns lookups in call_batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/6] netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <Luuk.Paulussen@xxxxxxxxxxxxxxxxxxx>
• rebasing nf tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v2] netfilter: nf_tables: release objects on netns destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Dâniel Fraga <fragabr@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Noel Kuntze <noel@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Remzi AKYÜZ <linuxliste@xxxxxxxxx>
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 4/5] tests/shell: add tests for handles and comments
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5] tests/: add shell test-suite
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 5/5] tests/shell: add test case for cache bug
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 1/5] tests/: rearrange tests directory
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 4/5] tests/shell: add tests for handles and comments
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 3/5] tests/shell: add maps tests cases
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 0/5] new testsuite for nft
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf,v2] netfilter: nf_tables: release objects on netns destruction
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH net-next v4 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH net-next v4 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v4 8/8] openvswitch: Interface with NAT.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] tests: add *.got files to .gitignore
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: fix nf_log_trace based tracing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH V2 nf-next] netfilter: meta: add support for setting skb->pkttype
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Jiri Kosina <jikos@xxxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Christoph Hellwig <hch@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Jens Axboe <axboe@xxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
• Re: [PATCH 1/4] list: introduce list_is_first()
  • From: Jens Axboe <axboe@xxxxxxxxx>
• [PATCH 4/4] elevator: use list_is_{first,last}
  • From: Geliang Tang <geliangtang@xxxxxxx>
• [PATCH 1/4] list: introduce list_is_first()
  • From: Geliang Tang <geliangtang@xxxxxxx>
• [PATCH 2/4] livepatch: use list_is_first()
  • From: Geliang Tang <geliangtang@xxxxxxx>
• [PATCH 3/4] netfilter: ipset: use list_is_first()
  • From: Geliang Tang <geliangtang@xxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH nf 2/2] nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/2] nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nfnetlink: avoid recurrent netns lookups in call_batch
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH -next] netfilter: meta: add support for setting skb->pkttype
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH -next] netfilter: meta: add support for setting skb->pkttype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: undefined reference to `nf_conntrack_untracked'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_dup: add missing dependencies with NF_CONNTRACK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: release objects on netns destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: resched in nf_ct_iterate_cleanup
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• Re: [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: fix nf_log_trace based tracing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3 libnftnl 1/3] src: add trace infrastructure support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nftables: Change the return type of nfulnl_set_timeout() and nfulnl_set_qthresh() to be void.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 libnftnl 1/3] src: add trace infrastructure support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nftables: Change the return type of nfulnl_set_timeout() and nfulnl_set_qthresh() to be void.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Initialize local variables to NULL, to prevent using them when uninitialized.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [netfilter-core] [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v4 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next v4 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ipv6: nf_defrag: fix NULL deref panic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: cttimeout: add netns support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: Link libext_arpt to static build
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf_conntrack_count is increasing
  • From: Гаврилов Игорь <iggorok@xxxxxxxxx>
• Re: [PATCH v4 nf-next 2/2] netfilter: nf_tables: wrap tracing with a static key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 nf-next 1/2] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nfnetlink: avoid recurrent netns lookups in call_batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nf_conntrack_count is increasing
  • From: Florian Westphal <fw@xxxxxxxxx>
• nf_conntrack_count is increasing
  • From: Гаврилов Игорь <iggorok@xxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCHSET v4] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: next-20151207 - crash in IPv6 code
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH net-next v4 5/8] openvswitch: Find existing conntrack entry after upcall.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 3/8] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 0/8] openvswitch: NAT support.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 6/8] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v4 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: libnetfilter_conntrack: set_attr_dnat_ipv4
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: ipv6: nf_defrag: fix NULL deref panic
  • From: Florian Westphal <fw@xxxxxxxxx>
• libnetfilter_conntrack: set_attr_dnat_ipv4
  • From: Sargun Dhillon <sargun@xxxxxxxxx>
• Re: next-20151207 - crash in IPv6 code
  • From: Valdis.Kletnieks@xxxxxx
• [PATCH xtables-addons] make xt_ACCOUNT network namespace aware
  • From: Andreas Schultz <aschultz@xxxxxxxx>
• [PATCH] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: next-20151207 - crash in IPv6 code
  • From: Florian Westphal <fw@xxxxxxxxx>
• next-20151207 - crash in IPv6 code
  • From: Valdis Kletnieks <Valdis.Kletnieks@xxxxxx>
• [PATCH nf-next] netfilter: nftables: Change the return type of nfulnl_set_timeout() and nfulnl_set_qthresh() to be void.
  • From: Rami Rosen <rami.rosen@xxxxxxxxx>
• [PATCH 1/8] cgroup: record ancestor IDs and reimplement cgroup_is_descendant() using it
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCHSET v4] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 3/8] cgroup: implement cgroup_get_from_path() and expose cgroup_put()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 2/8] kernfs: implement kernfs_walk_and_get()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 6/8] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 4/8] netprio_cgroup: limit the maximum css->id to USHRT_MAX
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 7/8] netfilter: prepare xt_cgroup for multi revisions
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 8/8] netfilter: implement xt_cgroup cgroup2 path match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 5/8] net: wrap sock->sk_cgrp_prioidx and ->sk_classid inside a struct
  • From: Tejun Heo <tj@xxxxxxxxxx>
• nf_conntrack_ipv4: UDP packets are spuriously dropped on parallel send via loopback device on SMP machines
  • From: Matthias Gerstner <Matthias.Gerstner@xxxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: nftables: add connlabel set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: labels: don't emit ct event if labels are unchanged
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: connlabels: move helpers to xt_connlabel
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: nftables: add set support for conntrack labels
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] nftables: use list_for_each_entry_safe_reverse to traversal commit_list in nf_tables_abort
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
  • From: Nikolay Borisov <kernel@xxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <Luuk.Paulussen@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <Luuk.Paulussen@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <Luuk.Paulussen@xxxxxxxxxxxxxxxxxxx>
• [PATCH v2] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 7/7] src: move payload sub-byte matching to the evaluation step
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/7,v2] src: fix sub-byte protocol header definitions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/7] evaluate: transfer right shifts to constant side
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/7] evaluate: transfer right shifts to range side
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 6/7] evaluate: transfer right shifts to set reference side
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/7,v2] tests: vlan pcp and cfi are located in the first byte
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/7] netlink_delinearize: postprocess expression before range merge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] extensions: libxt_mark: Add translation to nft
  • From: Shivani Bhardwaj <shivanib134@xxxxxxxxx>
• [PATCH] netfilter: Initialize local variables to NULL, to prevent using them when uninitialized.
  • From: Tomer Barletz <barletz@xxxxxxxxx>
• Re: [ovs-dev] [PATCH net-next v3 3/8] netfilter: Allow calling into nat helper without skb_dst.g
  • From: Pravin Shelar <pshelar@xxxxxxxxxx>
• Re: [PATCH nft 2/2] src: fix sub-bytes protocol header definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] Add tcindex to conntrack and add netfilter target/matches
  • From: Luuk Paulussen <luuk.paulussen@xxxxxxxxxxxxxxxxxxx>
• Support marking/matching tc_index in netfilter
  • From: Luuk Paulussen <luuk.paulussen@xxxxxxxxxxxxxxxxxxx>
• [PATCH -next] netfilter: meta: add support for setting skb->pkttype
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft] bug in sets cache
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH v3 nf-next 01/12] netfilter: add and use nf_ct_netns_get/put
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 0/12] netfilter: don't copy init ns hooks to new namespaces
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 12/12] netfilter: inform ctnetlink about new l3 protocol trackers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 11/12] netfilter: hook up nfnetlink log/queue to register conntrack hooks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 10/12] netfilter: ctnetlink: make ctnetlink bind register conntrack hooks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 09/12] nfnetlink: add nfnl_dereference_protected helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 08/12] nftables: add conntrack dependencies for nat/masq/redir expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 05/12] netfilter: nat: add dependencies on conntrack module
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 07/12] netfilter: don't call nf_hook_state_init/_hook_slow unless needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 06/12] netfilter: bridge: register hooks only when bridge interface is added
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 04/12] netfilter: defrag: only register defrag functionality if needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 03/12] netfilter: xtables: don't register table hooks in namespace at init time
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next 02/12] netfilter: conntrack: register hooks in netns when needed by ruleset
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: fix sub-bytes protocol header definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Bug#806130: linux: netlink_sock_destruct() crash in netns
  • From: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
• [PATCH nft 3/3] tests: fix crash when rule test is malformed
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 2/3] tests: remove useless logic
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 1/3] tests: add *.got files to .gitignore
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• Re: [PATCH net-next v3 3/8] netfilter: Allow calling into nat helper without skb_dst.g
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] NetDev 1.1 updates (Seville, Spain February 10-12)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: fix sub-bytes protocol header definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] tests: vlan pcp and cfi are located in the first byte
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipvs: avoid unused variable warning
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [ovs-dev] [PATCH net-next v3 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH] netfilter: ipvs: avoid unused variable warning
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [ovs-dev] [PATCH net-next v3 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: kernel crash in netlink_sock_destruct()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH] netfilter: ipvs: avoid unused variable warning
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: release objects on netns destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Bug#806130: linux: netlink_sock_destruct() crash in netns
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v4 nf-next 2/2] netfilter: nf_tables: wrap tracing with a static key
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v4 nf-next 1/2] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: perform sub-byte length matching from the evaluation step
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: perform sub-byte length matching from the evaluation step
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft] src: perform sub-byte length matching from the evaluation step
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next 2/3] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] null pointer exception
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft] null pointer exception
  • From: Linmujia <linmujia@xxxxxxxxxx>
• Re: GIT: [PATCH v3 0/3] netfilter trace infrastructure support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v3 nf-next 3/3] netfilter: nf_tables: wrap tracing with a static key
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 2/3] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 libnftnl 1/3] src: add trace infrastructure support
  • From: Florian Westphal <fw@xxxxxxxxx>
• GIT: [PATCH v3 0/3] netfilter trace infrastructure support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] netlink: fix up indentation damage
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: kernel crash in netlink_sock_destruct()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC PATCH nft] datatype: add scaled integer types
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC PATCH nft] parser: add typeof keyword for declarations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft,v2] netlink_delinearize: fix use-after-free
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] netlink_delinearize: fix use-after-free
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft] netlink_delinearize: fix use-after-free
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] proto: fix VLAN header definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft]evaluate function should have a explicitly return value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next 2/3] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft]evaluate function should have a explicitly return value
  • From: Linmujia <linmujia@xxxxxxxxxx>
• [PATCH nft] proto: fix VLAN header definition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 nf-next 2/3] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 0/3] src: trace infrastructure support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 nf-next 2/3] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 nf-next 2/3] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 nf-next 2/3] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Bug#806130: linux: netlink_sock_destruct() crash in netns
  • From: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 libnftnl 1/3] src: add trace infrastructure support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 nf-next 3/3] netfilter: nf_tables: wrap tracing with a static key
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 0/3] src: trace infrastructure support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2 nf-next 3/3] netfilter: nf_tables: wrap tracing with a static key
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 2/3] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 libnftnl 1/3] src: add trace infrastructure support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 0/3] src: trace infrastructure support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: Add new function nf_ct_helper_init to init ct helper easily
  • From: Gao <fgao@xxxxxxxxxx>
• [PATCH 2/2] netfilter: Add nf_conntrack_helpers_register to fix one panic
  • From: Gao <fgao@xxxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH nft] proto: add missing fields for ARP with IPv4/Ethernet
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• [RFC PATCH nft] proto: add missing fields for ARP with IPv4/Ethernet
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft] add default branch for code integrality
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft patch]add default branch for code integrality
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: Link libext_arpt to static build
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [ovs-dev] [PATCH net-next v3 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Simon Horman <simon.horman@xxxxxxxxxxxxx>
• Re: [ovs-dev] [PATCH net-next v3 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Simon Horman <simon.horman@xxxxxxxxxxxxx>
• Re: [PATCH net-next v3 8/8] openvswitch: Interface with NAT.
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [nft] add default branch for code integrality
  • From: Linmujia <linmujia@xxxxxxxxxx>
• Re: [PATCH net-next v3 8/8] openvswitch: Interface with NAT.
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH net-next v3 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v3 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v3 3/8] netfilter: Allow calling into nat helper without skb_dst.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v3 5/8] openvswitch: Find existing conntrack entry after upcall.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v3 0/8] openvswitch: NAT support.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v3 2/8] netfilter: Factor out nf_ct_get_info().
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v3 6/8] openvswitch: Handle NF_REPEAT in conntrack action.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v3 8/8] openvswitch: Interface with NAT.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• [PATCH net-next v3 7/8] openvswitch: Delay conntrack helper call for new connections.
  • From: Jarno Rajahalme <jarno@xxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: add ecn support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft 1/2] src: add dscp support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] iptables: Link libext_arpt to static build
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: add dscp support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: add ecn support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH -next] netfilter: nf_ct_sctp: validate vtag for new conntrack entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] proto: fix arpop symbol table endianess
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: Add new function nf_ct_helper_init to init ct helper easily
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nftables] goto vs jump documentation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nftables] goto vs jump documentation
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 1/1] netfilter: Add new function nf_ct_helper_init to init ct helper easily
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft]: fix some bugs of return value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] Set /proc/net entries owner to root in namespace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_payload: add packet mangling support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: nf_tables: remove unused struct members
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nf-next] netfilter: nf_tables: add fwd expression to the netdev family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 nf-next] netfilter: nf_tables: add packet duplication to the netdev family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH net] ipv6: distinguish frag queues by device for multicast and link-local packets
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net] ipv6: distinguish frag queues by device for multicast and link-local packets
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [nftables] goto vs jump documentation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: kernel crash in netlink_sock_destruct()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nftables] goto vs jump documentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnftnl 5/6] src: add trace infrastructure support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH net] ipv6: distinguish frag queues by device for multicast and link-local packets
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [PATCH v2 nft 2/2] payload: add payload statement
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2 nft 1/2] proto: add checksum key information to struct proto_desc
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2 nft 0/2] payload mangling support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH libnftnl] payload: add payload mangling support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2 libnftnl] payload mangling support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH libnftnl 5/6] src: add trace infrastructure support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next 0/9] netfilter: don't copy initns hooks to new namespaces
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 2/6] netfilter: nf_tables: wrap tracing with a static key
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 nf-next 0/9] netfilter: don't copy initns hooks to new namespaces
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 2/6] netfilter: nf_tables: wrap tracing with a static key
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 2/6] netfilter: nf_tables: wrap tracing with a static key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next 2/6] netfilter: nf_tables: wrap tracing with a static key
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH libnftnl 4/6] src: rename EXPORT_SYMBOL to EXPORT_SYMBOL_ALIAS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables 6/6] src: add trace support to nft monitor mode
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 5/6] src: add trace infrastructure support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 4/6] src: rename EXPORT_SYMBOL to EXPORT_SYMBOL_ALIAS
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/6] netfilter: nf_tables: disable old tracing if listener is present
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/6] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/6] netfilter: nf_tables: wrap tracing with a static key
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 0/6] nftables trace support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] netfilter: nft_payload: add packet mangling support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2] netfilter: payload mangling
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [nft]: fix some bugs of return value
  • From: Linmujia <linmujia@xxxxxxxxxx>
• [PATCH -next] netfilter: nf_tables: remove unused struct members
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCHSET v3] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCHSET v3] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCHSET v3] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• RE: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• RE: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH nf-next 0/2] netfilter: simplify nf_defrag_ipv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: remove duplicate include
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_ct_sctp: move ip_ct_sctp away from UAPI
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 52/79] include/uapi/netfilter/*.h: fix include files for compilation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: bridge coding style
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHSET v3] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [PATCHSET v3] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 7/9] sock, cgroup: add sock->sk_cgroup
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [PATCH 7/9] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH] conntrack-tools: add conntrackd.conf(5) manpage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] src: fix build with musl libc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] src: fix build with musl libc
  • From: Rodrigo Rebello <rprebello@xxxxxxxxx>
• Re: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 7/9] sock, cgroup: add sock->sk_cgroup
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [PATCH 8/9] netfilter: prepare xt_cgroup for multi revisions
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [RFC PATCH nf-next 1/1] netfilter: nft_payload: add packet mangling support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [RFC PATCH nf-next 1/1] netfilter: nft_payload: add packet mangling support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• New Netfilter core team PGP key (0x26D292E4)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] src: fix build with musl libc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nfnetlink warnings
  • From: Michael Wang <yun.wang@xxxxxxxxxxxxxxxx>
• Re: nfnetlink warnings
  • From: Borislav Petkov <bp@xxxxxxxxx>
• Re: nfnetlink warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables: Link libext_arpt to static build
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: avoid harmless unnitialized variable warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nfnetlink warnings
  • From: Michael Wang <yun.wang@xxxxxxxxxxxxxxxx>
• Re: nfnetlink warnings
  • From: Borislav Petkov <bp@xxxxxxxxx>
• Re: nfnetlink warnings
  • From: Michael Wang <yun.wang@xxxxxxxxxxxxxxxx>
• nfnetlink warnings
  • From: Borislav Petkov <bp@xxxxxxxxx>
• Re: [PATCHSET v3] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [PATCHSET v3] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• [PATCH conntrack-tools] src: fix build with musl libc
  • From: Rodrigo Rebello <rprebello@xxxxxxxxx>
• Re: [PATCH 1/2 iptables] libxt_cgroup: prepare for multi revisions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 iptables] libxt_cgroup: prepare for multi revisions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3] Set /proc/net entries owner to root in namespace
  • From: Philip Whineray <phil@xxxxxxxxxxx>
• Re: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/2 iptables] libxt_cgroup: add support for cgroup2 path matching
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 1/2 iptables] libxt_cgroup: prepare for multi revisions
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 4/9] cgroups: Allow dynamically changing net_classid
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 1/9] cgroup: record ancestor IDs and reimplement cgroup_is_descendant() using it
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 5/9] netprio_cgroup: limit the maximum css->id to USHRT_MAX
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCHSET v3] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 7/9] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 9/9] netfilter: implement xt_cgroup cgroup2 path match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 6/9] net: wrap sock->sk_cgrp_prioidx and ->sk_classid inside a struct
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 8/9] netfilter: prepare xt_cgroup for multi revisions
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 3/9] cgroup: implement cgroup_get_from_path() and expose cgroup_put()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 2/9] kernfs: implement kernfs_walk_and_get()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCHSET v3] netfilter, cgroup: implement cgroup2 path match in xt_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 2/7] kernfs: implement kernfs_walk_and_get()
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/7] kernfs: implement kernfs_walk_and_get()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCHSET v2] netfilter, cgroup: implement xt_cgroup2 match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCHSET v2] netfilter, cgroup: implement xt_cgroup2 match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHSET v2] netfilter, cgroup: implement xt_cgroup2 match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/7] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCHSET v2] netfilter, cgroup: implement xt_cgroup2 match
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [nftables] goto vs jump documentation
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 6/7] sock, cgroup: add sock->sk_cgroup
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [PATCH 4/7] netprio_cgroup: limit the maximum css->id to USHRT_MAX
  • From: Daniel Wagner <daniel.wagner@xxxxxxxxxxxx>
• Re: [PATCH 2/7] kernfs: implement kernfs_walk_and_get()
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: Extending connmark to 64 bits
  • From: Matt Bennett <Matt.Bennett@xxxxxxxxxxxxxxxxxxx>
• Re: WARN due to local_bh_disable called with interrupts disabled
  • From: subashab@xxxxxxxxxxxxxx
• Re: [PATCH nft 2/2] tests: regression: allow to run tests from anywhere
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Extending connmark to 64 bits
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables] libxt_cgroup: improve wording in the man page
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH v2 iptables] libxt_cgroup2: add support for cgroup2 path matching
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCHSET v2] netfilter, cgroup: implement xt_cgroup2 match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 1/7] cgroup: record ancestor IDs and reimplement cgroup_is_descendant() using it
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 3/7] cgroup: implement cgroup_get_from_path() and expose cgroup_put()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 2/7] kernfs: implement kernfs_walk_and_get()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 6/7] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 7/7] netfilter: implement xt_cgroup2 match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 4/7] netprio_cgroup: limit the maximum css->id to USHRT_MAX
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 5/7] net: wrap sock->sk_cgrp_prioidx and ->sk_classid inside a struct
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH nft 2/2] tests: regression: allow to run tests from anywhere
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH nft 1/2] tests: regression: homogenize indentation style
  • From: "Pablo M. Bermudo Garay" <pablombg@xxxxxxxxx>
• [PATCH] netfilter: avoid harmless unnitialized variable warnings
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• [PATCH] conntrack-tools: add conntrackd.conf(5) manpage
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: WARN due to local_bh_disable called with interrupts disabled
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: WARN due to local_bh_disable called with interrupts disabled
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: Extending connmark to 64 bits
  • From: Matt Bennett <Matt.Bennett@xxxxxxxxxxxxxxxxxxx>
• Re: Extending connmark to 64 bits
  • From: Florian Westphal <fw@xxxxxxxxx>
• WARN due to local_bh_disable called with interrupts disabled
  • From: subashab@xxxxxxxxxxxxxx
• [PATCH nf-next 1/2] netfilter: ipv6: nf_defrag: avoid/free clone operations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: ipv6: avoid nf_iterate recursion
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/2] netfilter: simplify nf_defrag_ipv6
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] Root in namespace owns x_tables /proc entries
  • From: Phil Whineray <phil@xxxxxxxxxxx>
• Re: [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH v2] Root in namespace owns x_tables /proc entries
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH v2] Root in namespace owns x_tables /proc entries
  • From: Phil Whineray <phil@xxxxxxxxxxx>
• libxt_set.man - iptables build 20151116 - some suggestions
  • From: Martin Kratochvíl <martin.kratochvil@xxxxxxxxx>
• Extending connmark to 64 bits
  • From: Matt Bennett <Matt.Bennett@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH iptables] libxt_cgroup2: add support for cgroup2 path matching
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 1/5] cgroup: record ancestor IDs and reimplement cgroup_is_descendant() using it
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH iptables] libxt_cgroup2: add support for cgroup2 path matching
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 5/5] netfilter: implement xt_cgroup2 match
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 1/5] cgroup: record ancestor IDs and reimplement cgroup_is_descendant() using it
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 2/5] kernfs: implement kernfs_walk_and_get()
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 4/5] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 4/5] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 4/5] sock, cgroup: add sock->sk_cgroup
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 4/5] sock, cgroup: add sock->sk_cgroup
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 4/5] sock, cgroup: add sock->sk_cgroup
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] netfilter: remove duplicate include
  • From: Stephen Hemminger <shemming@xxxxxxxxxxx>
• Re: [PATCH 4/5] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 4/5] sock, cgroup: add sock->sk_cgroup
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 2/5] kernfs: implement kernfs_walk_and_get()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH 2/5] kernfs: implement kernfs_walk_and_get()
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: "notification events for routing changes" patch
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCHSET] netfilter, cgroup: implement xt_cgroup2 match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 1/5] cgroup: record ancestor IDs and reimplement cgroup_is_descendant() using it
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 3/5] cgroup: implement cgroup_get_from_path() and expose cgroup_put()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 2/5] kernfs: implement kernfs_walk_and_get()
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH iptables] libxt_cgroup2: add support for cgroup2 path matching
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 4/5] sock, cgroup: add sock->sk_cgroup
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [PATCH 5/5] netfilter: implement xt_cgroup2 match
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: "notification events for routing changes" patch
  • From: Murat Sezgin <msezgin@xxxxxxxxxxxxxx>
• kernel crash in netlink_sock_destruct()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH RFC] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: "notification events for routing changes" patch
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• "notification events for routing changes" patch
  • From: Murat Sezgin <msezgin@xxxxxxxxxxxxxx>
• Re: [PATCH RFC] netfilter: nf_tables: extend tracing infrastructure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] Root in namespace owns x_tables /proc entries
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH v2] Root in namespace owns x_tables /proc entries
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH RFC] netfilter: nf_tables: extend tracing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nft] rule: move comment out of handle
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft 0/6] flow statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] Root in namespace owns x_tables /proc entries
  • From: Phil Whineray <phil@xxxxxxxxxxx>
• Re: [PATCH v2] Root in namespace owns x_tables /proc entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,4.3.y] netfilter: xt_TEE: fix NULL dereference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,4.x.y] netfilter: nf_nat_redirect: add missing NULL pointer check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH net] ipvs: use skb_to_full_sk() helper
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2] Root in namespace owns x_tables /proc entries
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nft] rule: move comment out of handle
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: net-ipv6: Delete unnecessary checks before the function call "kfree_skb"
  • From: SF Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] net-ipv6: Delete unnecessary checks before the function call "kfree_skb"
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] net-ipv6: Delete unnecessary checks before the function call "kfree_skb"
  • From: SF Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH RFC] netfilter: nf_tables: extend tracing infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Read-only fields in libnetfilter_conntrack ct_conntrack structure
  • From: Daniel Collins <solemnwarning@xxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH -stable,3.4.y] netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_get
  • From: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
• Re: [PATCH net] ipvs: use skb_to_full_sk() helper
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH net] ipvs: use skb_to_full_sk() helper
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH v2] Root in namespace owns x_tables /proc entries
  • From: Philip Whineray <phil@xxxxxxxxxxx>
• Re: [PATCH v4] libmnl: Drop the EXPORT_SYMBOL() tags
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH 00/10] Netfilter fixes for net
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: linux-next: Tree for Nov 13 (netfilter)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: [PATCH 00/10] Netfilter fixes for net
  • From: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
• Re: [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [conntrackd PATCH v3] conntrackd: add systemd support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [linux-4.4-mw] BUG: unable to handle kernel paging request ip_vs_out.constprop
  • From: Ido Schimmel <idosch@xxxxxxxxxxxx>
• Re: [PATCH 00/10] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [linux-4.4-mw] BUG: unable to handle kernel paging request ip_vs_out.constprop
  • From: Sander Eikelenboom <linux@xxxxxxxxxxxxxx>
• [PATCH net] ipvs: use skb_to_full_sk() helper
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [linux-4.4-mw] BUG: unable to handle kernel paging request ip_vs_out.constprop
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>