Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH 14/21] netfilter: ipset: Improve preprocessor macros checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/21] netfilter: ipset: Properly calculate extensions offsets and total length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: Use correct return for seq_show functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: Fix kernel panic in nfulnl_rcv_nl_event
  • From: fruggeri@xxxxxxxxxxxxxxxxxx (Francesco Ruggeri)
• Re: cthelper's and default QueueLen -- bug?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 2/4] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/4] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [GIT PULL nf] IPVS Fixes for v4.1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: restore rule tracing via nfnetlink_log
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nft_rbtree: fix locking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nf_tables: allow to change chain policy without hook if it exists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nf_tables: check for overflow of rule dlen field
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable] netfilter: nf_tables: fix error handling of rule replacement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/4] netfilter: nf_tables: fix bogus warning in nft_data_uninit()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/4] ipvs: fix memory leak in ip_vs_ctl.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ulogd2 PATCHv2] ulogd: Use /dev/null as dummy logfile when logging to syslog
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• Re: [ulogd2 PATCH 3/4] ulogd: Use (FILE *)(-1) as dummy logfile when logging to syslog
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• Re: [ulogd2 PATCH 3/4] ulogd: Use (FILE *)(-1) as dummy logfile when logging to syslog
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [ulogd2 PATCH 4/4] Define _GNU_SOURCE to get members of tcphdr
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [ulogd2 PATCH 3/4] ulogd: Use (FILE *)(-1) as dummy logfile when logging to syslog
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [ulogd2 PATCH 2/4] Use stdint types everywhere
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [ulogd2 PATCH 1/4] Sync with kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [nfacct PATCH] Sync with kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnfnetlink PATCH 3/3] Use stdint types everywhere
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnfnetlink PATCH 2/3] Convert kernel to userspace types
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnfnetlink PATCH 1/3] Sync with kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_queue PATCH 4/4] tcp.c udp.c: Define _GNU_SOURCE to get members of tcphdr&ucphdr
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_queue PATCH 3/4] Use stdint types everywhere
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_queue PATCH 2/4] Convert kernel to userspace types
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_queue PATCH 1/4] Sync with kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_log PATCH 3/3] Use stdint types everywhere
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_log PATCH 2/3] Convert kernel to stdint types
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_log PATCH 1/3] Sync with current kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_cthelper PATCH] Sync with kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_conntrack PATCH 2/2] Use stdint types everywhere
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_conntrack PATCH 1/2] Sync with kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libnetfilter_acct PATCH] Sync with kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libmnl PATCH 2/2] examples/netfilter: Include <endian.h> for be64toh
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [libmnl PATCH 1/2] examples/netfilter: Use stdint types
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [ebtables PATCH 2/2] ethernetdb.h: Remove C++ specific compiler hint macro _THROW
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [ebtables PATCH 1/2] extensions: Use stdint types
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [conntrack-tools PATCH 6/6] src/netlink: Use <fcntl.h> instead of legacy synonym <sys/fcntl.h>
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [conntrack-tools PATCH 5/6] Define _GNU_SOURCE to get members of tcphdr&ucphdr
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [conntrack-tools PATCH 4/6] Include <sys/select.h> for fd_set
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [conntrack-tools PATCH 3/6] include: Use stdint types
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [conntrack-tools PATCH 2/6] Sync with kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [conntrack-tools PATCH 1/6] configure: Add AM_PROG_AR to silence automake warning
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [arptables PATCH 2/2] Remove support for libc5
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [arptables PATCH 1/2] Use stdint types
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• Re: [PATCH] configure.ac: Add --without-{mysql,pgsql}
  • From: Eric Leblond <eric@xxxxxxxxx>
• [libnetfilter_cttimeout PATCH] Sync with kernel headers
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• Re: libnetfilter_*: Use uint*_t instead of u_int*_t
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• Re: [PATCH] netfilter: ipset: deinline ip_set_put_extensions()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] nf_tables: fix bogus warning in nft_data_uninit()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 10/34] netfilter: ipset: Missing rcu protection in mtype_list() fixed
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf] nf_tables: fix bogus warning in nft_data_uninit()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_*: Use uint*_t instead of u_int*_t
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• libnetfilter_*: Use uint*_t instead of u_int*_t
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• Re: [PATCH nf] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnetfilter_log PATCH] Make it possible to build libipulog
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• Re: [PATCH libnetfilter_log] Add include needed for integer type definition.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL nf] IPVS Fixes for v4.1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Add arpt_MARK to xt_mark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: deinline ip_set_put_extensions()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: bridge: free nf_bridge info on xmit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: bridge: neigh_head and physoutdev can't be used at same time
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/5] netfilter: add netfilter ingress hook after handle_ing() under unique static key
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/5 net-next] Netfilter ingress support (v4)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 5/5] netfilter: add netfilter ingress hook after handle_ing() under unique static key
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH 5/5] netfilter: add netfilter ingress hook after handle_ing() under unique static key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/5] netfilter: add netfilter ingress hook after handle_ing() under unique static key
  • From: Alexei Starovoitov <ast@xxxxxxxxxxxx>
• Re: [PATCH 4/5] net: add CONFIG_NET_INGRESS to enable ingress filtering
  • From: Alexei Starovoitov <ast@xxxxxxxxxxxx>
• Re: [PATCH 10/34] netfilter: ipset: Missing rcu protection in mtype_list() fixed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: cleanup struct nf_hook_ops indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/5] net: add CONFIG_NET_INGRESS to enable ingress filtering
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5] netfilter: add netfilter ingress hook after handle_ing() under unique static key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/5] netfilter: add nf_hook_list_active()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: add hook list to nf_hook_state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/5 net-next] Netfilter ingress support (v4)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net: deinline netif_tx_stop_all_queues(), remove WARN_ON in netif_tx_stop_queue()
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH net-next] netfilter: Use correct return for seq_show functions
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Kernel panic with skb_alloc during post_routing
  • From: Praveen Kumar <praveenkr.cs@xxxxxxxxx>
• Re: [PATCH] net: deinline netif_tx_stop_all_queues(), remove WARN_ON in netif_tx_stop_queue()
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: Probably bug in netfilter hashlimit extension
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Probably bug in netfilter hashlimit extension
  • From: Klaus Ethgen <Klaus+lkml@xxxxxxxxx>
• [PATCH] net: deinline netif_tx_stop_all_queues(), remove WARN_ON in netif_tx_stop_queue()
  • From: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
• Re: Probably bug in netfilter hashlimit extension
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: Probably bug in netfilter hashlimit extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• Probably bug in netfilter hashlimit extension
  • From: Klaus Ethgen <Klaus+lkml@xxxxxxxxx>
• Re: [PATCH nf] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ulogd 2.0.5
  • From: Chris Boot <bootc@xxxxxxxxx>
• [ANNOUNCE] ulogd 2.0.5 release
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: ulogd 2.0.5
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ulogd 2.0.5
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: ulogd 2.0.5
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ulogd 2.0.5
  • From: Chris Boot <bootc@xxxxxxxxx>
• Re: [PATCH] net: deinline netif_tx_stop_queue() and netif_tx_stop_all_queues()
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 10/34] netfilter: ipset: Missing rcu protection in mtype_list() fixed
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 04/34] netfilter: ipset: Introduce RCU locking in hash:* types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 02/34] netfilter: ipset: Prepare the ipset core to use RCU at set level
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 03/34] netfilter: ipset: Introduce RCU locking in bitmap:* types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 10/34] netfilter: ipset: Missing rcu protection in mtype_list() fixed
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] net: deinline netif_tx_stop_queue() and netif_tx_stop_all_queues()
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH] net: deinline netif_tx_stop_queue() and netif_tx_stop_all_queues()
  • From: Alexander Duyck <alexander.duyck@xxxxxxxxx>
• Re: [iptables PATCH 2/2 RFC] Remove Libc5 support code
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] net: deinline netif_tx_stop_queue() and netif_tx_stop_all_queues()
  • From: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH nf] ipvs: fix memory leak in ip_vs_ctl.c
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf] IPVS Fixes for v4.1
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 10/34] netfilter: ipset: Missing rcu protection in mtype_list() fixed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 04/34] netfilter: ipset: Introduce RCU locking in hash:* types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 02/34] netfilter: ipset: Prepare the ipset core to use RCU at set level
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 03/34] netfilter: ipset: Introduce RCU locking in bitmap:* types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: fix memory leak in ip_vs_ctl.c
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH] net: deinline netif_tx_stop_queue() and netif_tx_stop_all_queues()
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 10/34] netfilter: ipset: Missing rcu protection in mtype_list() fixed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net: deinline netif_tx_stop_queue() and netif_tx_stop_all_queues()
  • From: Alexander Duyck <alexander.duyck@xxxxxxxxx>
• cthelper's and default QueueLen -- bug?
  • From: Chas Williams III <Charles.Williams@xxxxxxxxxxx>
• [PATCH nf] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [PATCH] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] ipvs: fix memory leak in ip_vs_ctl.c
  • From: Tommi Rantala <tt.rantala@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH] net: deinline netif_tx_stop_queue() and netif_tx_stop_all_queues()
  • From: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH] netfilter: ipset: deinline ip_set_put_extensions()
  • From: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Q on contribution to Netfilter
  • From: Ravi Kerur <rkerur@xxxxxxxxx>
• Re: [PATCH 0/4] Netfilter ingress support (v3)
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH 0/4] Netfilter ingress support (v3)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] Netfilter ingress support (v3)
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 0/4] Netfilter ingress support (v3)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/4] Netfilter ingress support (v3)
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH 0/4] Netfilter ingress support (v3)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/4] Netfilter ingress support (v3)
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH 0/4] Netfilter ingress support (v3)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: fix dependency issues between IPv6 defragmentation and ip6tables
  • From: liusdu <liusdu@xxxxxxx>
• Re: [PATCH 0/4] Netfilter ingress support (v3)
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [iptables PATCH 2/2 RFC] Remove Libc5 support code
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [iptables PATCH 2/2 RFC] Remove Libc5 support code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/4] Netfilter ingress support (v3)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 2/2 RFC] Remove Libc5 support code
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/4] net: add minimalistic ingress filter hook and port sch_ingress on top of it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: cleanup struct nf_hook_ops indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: add hook list to nf_hook_state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/4] net: add netfilter ingress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] libxt_CT: add support for flextuples
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] libxt_CT: add support for flextuples
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: add support for flextuples
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 3.19 176/177] netfilter: x_tables: fix cgroup matching on non-full sks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix dependency issues between IPv6 defragmentation and ip6tables
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next] netfilter: bridge: free nf_bridge info on xmit
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next] netfilter: bridge: neigh_head and physoutdev can't be used at same time
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] configure.ac: Add --without-{mysql,pgsql}
  • From: Harald Welte <laforge@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix dependency issues between IPv6 defragmentation and ip6tables
  • From: liusdu <liusdu@xxxxxxx>
• Re: [PATCH] netfilter: fix dependency issues between IPv6 defragmentation and ip6tables
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: fix dependency issues between IPv6 defragmentation and ip6tables
  • From: Liu Hua <sdu.liu@xxxxxxxxxx>
• Re: [iptables PATCH 1/2] Consistently use <errno.h>
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [iptables PATCH 2/2 RFC] Remove Libc5 support code
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• Re: [iptables PATCH 1/2] Consistently use <errno.h>
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH 1/2] Consistently use <errno.h>
  • From: Felix Janda <felix.janda@xxxxxxxxx>
• [PATCH 24/34] netfilter: ipset: Make sure we always return line number on batch
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 25/34] netfilter: ipset: Check CIDR value only when attribute is given
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 34/34] netfilter: ipset: Use better include files in xt_set.c
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 33/34] netfilter: ipset: Fix coding styles reported by checkpatch.pl
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 00/34] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 04/34] netfilter: ipset: Introduce RCU locking in hash:* types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 12/34] netfilter: ipset: make ip_set_get_ip*_port to use skb_network_offset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 13/34] netfilter: ipset: Fix cidr handling for hash:*net* types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 19/34] netfilter: ipset: Use SET_WITH_*() helpers to test set extensions
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 17/34] netfilter: ipset: Preprocessor directices cleanup
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 20/34] netfilter: ipset: Check extensions attributes before getting extensions.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 28/34] netfilter: ipset: Fix ext_*() macros
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 22/34] netfilter: ipset: Use HOST_MASK literal to represent host address CIDR len
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 31/34] netfilter: ipset: Make sure dumping can't grab set being just destroyed
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 32/34] netfilter: ipset: RCU safe comment extension handling
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 30/34] netfilter: ipset: Improve preprocessor macros checks
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 29/34] netfilter: ipset: Fix hashing for ipv6 sets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 26/34] netfilter: ipset: Return bool values instead of int
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 21/34] netfilter: ipset: Check IPSET_ATTR_PORT only once
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 18/34] netfilter: ipset: Return ipset error instead of bool
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 27/34] netfilter: ipset: Check for comment netlink attribute length
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 23/34] netfilter: ipset: Permit CIDR equal to the host address CIDR in IPv6
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 15/34] netfilter: ipset: Make sure bit operations are not reordered
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 16/34] netfilter: ipset: No need to make nomatch bitfield
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 11/34] netfilter: ipset: Make sure listing doesn't grab a set which is just being destroyed.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 14/34] netfilter: ipset: Properly calculate extensions offsets and total length
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 03/34] netfilter: ipset: Introduce RCU locking in bitmap:* types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 01/34] netfilter: ipset: Remove rbtree from hash:net,iface
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 09/34] netfilter: ipset: Give a better name to a macro in ip_set_core.c
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 07/34] netfilter: ipset: Fix sparse warning
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 08/34] netfilter: ipset: Use MSEC_PER_SEC consistently
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 05/34] netfilter: ipset: Introduce RCU locking in list type
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 06/34] netfilter: ipset: Fix parallel resizing and listing of the same set
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 02/34] netfilter: ipset: Prepare the ipset core to use RCU at set level
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 10/34] netfilter: ipset: Missing rcu protection in mtype_list() fixed
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Matching MLD with ip6tables
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• Re: Matching MLD with ip6tables
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Matching MLD with ip6tables
  • From: Linus Lüssing <linus.luessing@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: roadmap of the nftables development
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 4/6] netfilter: move generic hook infrastructure into net/core/hooks.c
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
• net-next is now OPEN
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH 0/6 RFC] Netfilter ingress support (v2)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: move generic hook infrastructure into net/core/hooks.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/6] netfilter: add hook list to nf_hook_state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] net: add netfilter ingress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] net: move qdisc ingress filtering on top of netfilter ingress hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/6] netfilter: cleanup struct nf_hook_ops indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: add nf_hook_list_active()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Q on contribution to Netfilter
  • From: Ravi Kerur <rkerur@xxxxxxxxx>
• [PATCH] nf_tables: silence needless warning on element delete
  • From: Miroslav Kratochvil <exa.exa@xxxxxxxxx>
• [PATCH nft] datatype: fix packet mark type name
  • From: Miroslav Kratochvil <exa.exa@xxxxxxxxx>
• [PATCH libnetfilter_log] Add include needed for integer type definition.
  • From: Natanael Copa <ncopa@xxxxxxxxxxxxxxx>
• Re: [PATCH 0/2] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: bridge: fix NULL deref in physin/out ifindex helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nf_tables: fix wrong length for jump/goto verdicts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter; Add some missing default cases to switch statements in nft_reject.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] Allow use of 'socket' match in OUTPUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: nf_tables: fix wrong length for jump/goto verdicts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: bridge: fix NULL deref in physin/out ifindex helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 0/6] ipv6: netfilter - coding style improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• roadmap of the nftables development
  • From: Nikita Klimov <nikita@xxxxxxxxx>
• [PATCH nf] netfilter: bridge: fix NULL deref in physin/out ifindex helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] Allow use of 'socket' match in OUTPUT
  • From: Daniel Collins <daniel.collins@xxxxxxxxxxxxxx>
• [PATCH] Add arpt_MARK to xt_mark
  • From: Zhang Chunyu <zhangcy@xxxxxxxxxxxxxx>
• Re: Re: [PATCH] Add NFPROTO_ARP for mark
  • From: "Zhang, Chunyu" <zhangcy@xxxxxxxxxxxxxx>
• Re: Re: [PATCH] Add NFPROTO_ARP for mark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/7] net: refactor __netif_receive_skb_core
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Re: [PATCH] Add NFPROTO_ARP for mark
  • From: "Zhang, Chunyu" <zhangcy@xxxxxxxxxxxxxx>
• Re: Re: [PATCH] Add NFPROTO_ARP for mark
  • From: "Zhang, Chunyu" <zhangcy@xxxxxxxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 1/7] net: refactor __netif_receive_skb_core
  • From: Jesper Dangaard Brouer <netdev@xxxxxxxxxx>
• Re: [PATCH 1/7] net: refactor __netif_receive_skb_core
  • From: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
• RE: [PATCH 1/7] net: refactor __netif_receive_skb_core
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: John Fastabend <john.fastabend@xxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [PATCH nft] mnl: use new libnftnl batch API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/2] src: add batch abstraction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: John Fastabend <john.r.fastabend@xxxxxxxxx>
• [PATCH -next] netfilter: nf_tables: fix wrong length for jump/goto verdicts
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables: oob crash w. verdict maps & jumps
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nftables: oob crash w. verdict maps & jumps
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables: oob crash w. verdict maps & jumps
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• nftables: oob crash w. verdict maps & jumps
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Thomas Graf <tgraf@xxxxxxx>
• [PATCH libnftnl 5/5] dynset: support expression templates
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH libnftnl 4/5] set_elem: support expressions attached to set elements
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH libnftnl 3/5] expr: seperate expression parsing and building functions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH libnftnl 2/5] data: increase maximum possible data size
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH libnftnl 1/5] headers: resync headers for new register definitions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH libnftnl 0/5] concatenation and dynamic expression instantiation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/21] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 1/5 v4] netlink: Fix portid type in netlink_notify
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 2/5 v4] nfc: Fix portid type in urelease_work
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 3/5 v4] netfilter: Fix portid types
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 4/5 v4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 5/5 v4] netfilter: Fix format string of nfnetlink_log proc file
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 00/21] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/21] netfilter: nf_tables: get rid of NFT_REG_VERDICT usage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/21] netfilter: nft_lookup: use nft_validate_register_store() to validate types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/21] netfilter: nf_tables: kill nft_data_cmp()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/21] netfilter: nf_tables: rename nft_validate_data_load()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/21] netfilter: nf_tables: convert sets to u32 data pointers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/21] netfilter: nf_tables: use struct nft_verdict within struct nft_data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/21] uapi: ebtables: don't include linux/if.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/21] netfilter: nf_tables: convert expressions to u32 register pointers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/21] netfilter: nf_tables: switch registers to 32 bit addressing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/21] netfilter: nf_tables: support variable sized data in nft_data_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/21] netfilter: nf_tables: add register parsing/dumping helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/21] netfilter: nf_tables: variable sized set element keys / data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/21] netfilter: nf_tables: add flag to indicate set contains expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/21] netfilter: nf_tables: prepare for expressions associated to set elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/21] netfilter: nft_dynset: dynamic stateful expression instantiation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/21] netfilter: nf_tables: add helper functions for expression handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/21] netfilter: nf_tables: mark stateful expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/21] netfilter: nf_tables: get rid of the expression example code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/21] netfilter: nf_tables: kill nft_validate_output_register()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/21] netfilter: nf_tables: introduce nft_validate_register_load()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/21] netfilter: nf_tables: validate len in nft_validate_data_load()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] expr: dynset: fix json/xml parsing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [libnftnl PATCH v2] expr: dynset: fix json/xml parsing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftnl PATCH] expr: dynset: fix json/xml parsing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 6/5] netfilter: nft_dynset: make sure expr extension exists before using it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/5] netfilter: nf_tables: dynamic stateful expression instantiation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/5 v4] netfilter: Fix portid types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/5 v4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/5 v4] netfilter: Fix format string of nfnetlink_log proc file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: get rid of the expression example code
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: get rid of the expression example code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Looking for extensible kernel database format
  • From: "Luis R. Rodriguez" <mcgrof@xxxxxxxx>
• Re: [kernel PATCH] uapi: ebtables: don't include linux/if.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/14] netfilter: nf_tables: concatenation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 3/5 v4] netfilter: Fix portid types
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 2/5 v4] nfc: Fix portid type in urelease_work
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 4/5 v4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 5/5 v4] netfilter: Fix format string of nfnetlink_log proc file
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 1/5 v4] netlink: Fix portid type in netlink_notify
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 6/5] netfilter: nft_dynset: make sure expr extension exists before using it
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/3] dynset: support expression templates
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/3] set_elem: support expressions attached to set elements
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/3] expr: seperate expression parsing and building functions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/3] libnftnl: dynset dynamic expression instantiation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/3] expr: add support for the dynset expr
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/3] set_elem: add support for userdata
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/3] set: print set elem timeout information
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/3] libnfnl: support for new set features
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 10/10] nftables: add set statement
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 09/10] setelem: add support for attaching comments to set elements
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 08/10] setelem: add timeout support for set elements
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 07/10] set: add timeout support for sets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 06/10] expr: add set_elem_expr as container for set element attributes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 04/10] parser: add a time_spec rule
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 05/10] parser: fix inconsistencies in set expression rules
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 03/10] datatype: seperate time parsing/printing from time_type
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 02/10] datatype: less strict time parsing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 01/10] datatype: fix parsing of time type
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 00/10] nftables: set timeouts and dynamic updates
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netlink: kill non-batch compat code
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RFC 0/2] nftables: fix time parsing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] src: restore interface to index cache
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RFC 0/2] nftables: fix time parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] src: restore interface to index cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: restore interface to index cache
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft v4] src: restore interface to index cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] datatype: less strict time parsing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/2] datatype: fix parsing of time type
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH RFC 0/2] nftables: fix time parsing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/14] netfilter: nf_tables: concatenation support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 05/20] netfilter: nft_hash: add support for timeouts
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/14] netfilter: nf_tables: concatenation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 05/20] netfilter: nft_hash: add support for timeouts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/7] net: add netfilter ingress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3] src: restore interface to index cache
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft v3] src: restore interface to index cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/7] net: add netfilter ingress hook
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 5/7] net: add netfilter ingress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5] netfilter: nft_dynset: dynamic stateful expression instantiation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/5] netfilter: nf_tables: add flag to indicate set contains expressions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/5] netfilter: nf_tables: add helper functions for expression handling
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/5] netfilter: nf_tables: mark stateful expressions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/5] netfilter: nf_tables: prepare for expressions associated to set elements
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/5] netfilter: nf_tables: dynamic stateful expression instantiation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 14/14] netfilter: nf_tables: variable sized set element keys / data
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 13/14] netfilter: nf_tables: support variable sized data in nft_data_init()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 12/14] netfilter: nf_tables: switch registers to 32 bit addressing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 11/14] netfilter: nf_tables: add register parsing/dumping helpers
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 10/14] netfilter: nf_tables: convert sets to u32 data pointers
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 09/14] netfilter: nf_tables: kill nft_data_cmp()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 08/14] netfilter: nf_tables: convert expressions to u32 register pointers
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 07/14] netfilter: nf_tables: use struct nft_verdict within struct nft_data
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 06/14] netfilter: nf_tables: get rid of NFT_REG_VERDICT usage
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 05/14] netfilter: nf_tables: introduce nft_validate_register_load()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 04/14] netfilter: nf_tables: kill nft_validate_output_register()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 03/14] netfilter: nft_lookup: use nft_validate_register_store() to validate types
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 02/14] netfilter: nf_tables: rename nft_validate_data_load()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 01/14] netfilter: nf_tables: validate len in nft_validate_data_load()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 00/14] netfilter: nf_tables: concatenation support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 5/7] net: add netfilter ingress hook
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 5/7] net: add netfilter ingress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/7] net: add netfilter ingress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/7] net: refactor __netif_receive_skb_core
  • From: Alexander Duyck <alexander.duyck@xxxxxxxxx>
• Re: [PATCH 5/5 v2] netfilter: Fix format string of nfnetlink_log proc file
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 5/7] net: add netfilter ingress hook
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH 1/7] net: refactor __netif_receive_skb_core
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH 5/7] net: add netfilter ingress hook
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/7] netfilter: cleanup struct nf_hook_ops struct indentation
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: cleanup struct nf_hook_ops struct indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] netfilter: nf_tables: allow to bind table to net_device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] net: add netfilter ingress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] netfilter: nf_tables: add netdev table to filter from ingress
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/7] netfilter: add hook list to nf_hook_state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/7] netfilter: add nf_hook_list_active()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7 RFC] Netfilter/nf_tables ingress support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] net: refactor __netif_receive_skb_core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Namespaces and NFLOG
  • From: nfnty <arch@xxxxxxxx>
• Re: [PATCH 5/5 v2] netfilter: Fix format string of nfnetlink_log proc file
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH v3] netfilter: Fix format string of nfnetlink_log proc file
  • From: Richard Weinberger <richard@xxxxxx>
• Re: nft parser and names for constants (was [PATCH v2] parser: add kludges for "param-problem" and "redirect")
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Looking for extensible kernel database format
  • From: "Luis R. Rodriguez" <mcgrof@xxxxxxxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/5 v2] netfilter: Fix format string of nfnetlink_log proc file
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH 5/5 v2] netfilter: Fix format string of nfnetlink_log proc file
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5 v2] nfc: Fix portid type in urelease_work
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 5/5 v2] netfilter: Fix format string of nfnetlink_log proc file
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 4/5 v2] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 3/5 v2] netfilter: Fix portid types
  • From: Richard Weinberger <richard@xxxxxx>
• Re: [PATCH 4/4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 1/5 v2] netlink: Fix portid type in netlink_notify
  • From: Richard Weinberger <richard@xxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] src: add xt compat support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• RE: [PATCH 05/20] netfilter: nft_hash: add support for timeouts
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: nft parser and names for constants (was [PATCH v2] parser: add kludges for "param-problem" and "redirect")
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 00/20] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: nft parser and names for constants (was [PATCH v2] parser: add kludges for "param-problem" and "redirect")
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: [iptables PATCH] libxtables: extensions find based also on family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v2 1/3] include: cache ip_tables.h, ip6_tables.h, arp_tables.h and ebtables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v2 3/3] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v2 2/3] src: expose delinearize/linearize structures and stmt_error()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/4] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 4/4] tests: regression: add xt compat tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/4] src: add xt compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v2] src: restore interface to index cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/20] netfilter: x_tables: don't extract flow keys on early demuxed sks in socket match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/20] netfilter: bridge: really save frag_max_size between PRE and POST_ROUTING
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/20] netfilter: nft_hash: add support for timeouts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/20] netfilter: nf_tables: add set garbage collection helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/20] netfilter: nf_tables: add GC synchronization helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/20] netfilter: nft_meta: fix cgroup matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/20] netfilter: nf_tables: add set element timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/20] netfilter: bridge: don't use nf_bridge_info data to store mac header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/20] netfilter: x_tables: fix cgroup matching on non-full sks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/20] netfilter: bridge: make BRNF_PKT_TYPE flag a bool
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/20] netfilter: nf_tables: prepare set element accounting for async updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/20] netfilter: nf_tables: support different set binding types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/20] netfilter: bridge: add and use nf_bridge_info_get helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/20] netfilter: physdev: use helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/20] netfilter: nf_tables: add support for dynamic set updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/20] netfilter: nf_tables: fix set selection when timeouts are requested
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/20] netfilter: bridge: add helpers for fetching physin/outdev
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/20] netfilter: nf_tables: support optional userdata for set elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/20] netfilter: bridge: start splitting mask into public/private chunks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/20] netfilter: nf_tables: add set timeout API support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/20] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft parser and names for constants (was [PATCH v2] parser: add kludges for "param-problem" and "redirect")
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• nft parser and names for constants (was [PATCH v2] parser: add kludges for "param-problem" and "redirect")
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: [iptables PATCH] list: fix prefetch dummy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Re: [PATCH] Add NFPROTO_ARP for mark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/4] include: cache a copy of kernel ebtables.h
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: Re: [PATCH] Add NFPROTO_ARP for mark
  • From: "Zhang, Chunyu" <zhangcy@xxxxxxxxxxxxxx>
• Re: [nft PATCH 1/4] include: cache a copy of kernel ebtables.h
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• Re: [iptables PATCH] list: fix prefetch dummy
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Fix switch statement warnings with recent gcc.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [kernel PATCH] uapi: ebtables: don't include linux/if.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Use stdlib uint* instead of u_int*
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 1/4] include: cache a copy of kernel ebtables.h
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 4/4] tests: regression: add xt compat tests
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 3/4] src: add xt compat support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 2/4] src: expose delinearize/linearize structures and stmt_error()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] Add NFPROTO_ARP for mark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] libxtables: extensions find based also on family
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [kernel PATCH] uapi: ebtables: don't include linux/if.h
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH v2 nf-next 0/6] netfilter: prepare for skb->nf_bridge removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -iptables] cgroup, man: improve man-page bits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] monitor: fix missing space after chain name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] list: fix prefetch dummy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] ebtables-compat: fix misplaced function attribute on ebt_print_error()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: support per element userdata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: don't extract flow keys on early demuxed sks in socket match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] netfilter: nf_tables: dynamic set updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next 0/6] netfilter: prepare for skb->nf_bridge removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Fix switch statement warnings with recent gcc.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: Fix switch statement warnings with recent gcc.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [iptables PATCH] list: fix prefetch dummy
  • From: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
• Re: [PATCH 3/4] netfilter: Pass socket pointer down through okfn().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 3/4] netfilter: Pass socket pointer down through okfn().
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().
  • From: Tom Herbert <tom@xxxxxxxxxxxxxxx>
• Re: [iptables PATCH] list: fix prefetch dummy
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [iptables PATCH] list: fix prefetch dummy
  • From: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
• Re: [PATCH 1/4] netfilter: Add nf_hook_state initializer function.
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 3/4] netfilter: Pass socket pointer down through okfn().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 3/4] netfilter: Pass socket pointer down through okfn().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] netfilter: Add nf_hook_state initializer function.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 3/4] netfilter: Pass socket pointer down through okfn().
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] monitor: fix missing space after chain name
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 3/4] netfilter: Pass socket pointer down through okfn().
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• RE: [PATCH 1/9] netfilter: Create and use nf_hook_state.
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH 1/4] netfilter: Add nf_hook_state initializer function.
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [iptables PATCH] list: fix prefetch dummy
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: Wilco Baan Hofman <wilco@xxxxxxxxxxxxx>
• Re: [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().
  • From: Tom Herbert <tom@xxxxxxxxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: Tom Herbert <tom@xxxxxxxxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] Add NFPROTO_ARP for mark target
  • From: Zhang Chunyu <zhangcy@xxxxxxxxxxxxxx>
• [PATCH] Add NFPROTO_ARP for mark
  • From: Zhang Chunyu <zhangcy@xxxxxxxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: Tom Herbert <tom@xxxxxxxxxxxxxxx>
• Re: [iptables PATCH] list: fix prefetch dummy
  • From: Alexander Duyck <alexander.duyck@xxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [iptables PATCH] list: fix prefetch dummy
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [iptables PATCH] ebtables-compat: fix misplaced function attribute on ebt_print_error()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: Tom Herbert <tom@xxxxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] src: restore interface to index cache
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft 2/2] src: restore interface to index cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] src: restore interface to index cache
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft 2/2] src: restore interface to index cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: introduce netlink_init_error()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: Pass socket pointer down through okfn().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: Add socket pointer to nf_hook_state.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 1/4] netfilter: Add nf_hook_state initializer function.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: SYNPROXY module with bridge
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: support optional userdata for set elements
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: support per element userdata
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/4] netfilter: nf_tables: add support for dynamic set updates
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/4] netfilter: nf_tables: support different set binding types
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/4] netfilter: nf_tables: prepare set element accounting for async updates
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/4] netfilter: nf_tables: fix set selection when timeouts are requested
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/4] netfilter: nf_tables: dynamic set updates
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/9] netfilter: Compress hook function signatures.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/9] netfilter: Compress hook function signatures.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: [PATCH] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• [PATCH] Use stdlib uint* instead of u_int*
  • From: Nathan McSween <nwmcsween@xxxxxxxxx>
• [PATCH 9/9] netfilter: Pass nf_hook_state through arpt_do_table().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 8/9] netfilter: Pass nf_hook_state through nft_set_pktinfo*().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 7/9] netfilter: Pass nf_hook_state through ip6t_do_table().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 5/9] netfilter: Pass nf_hook_state through ipt_do_table().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 6/9] netfilter: Pass nf_hook_state through nf_nat_ipv6_{in,out,fn,local_fn}().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 4/9] netfilter: Pass nf_hook_state through nf_nat_ipv4_{in,out,fn,local_fn}().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 3/9] netfilter: Make nf_hookfn use nf_hook_state.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 2/9] netfilter: Use nf_hook_state in nf_queue_entry.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 1/9] netfilter: Create and use nf_hook_state.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 0/9] netfilter: Compress hook function signatures.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 4/9 net-next] ipv6: replace if/BUG by BUG_ON
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• Re: [PATCH] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• [PATCH] parser: add kludges for "param-problem" and "redirect"
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: x_tables: don't bail out on mismatching revision
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Re: [PATCH V4 0/3] Add mark target
  • From: "Zhang, Chunyu" <zhangcy@xxxxxxxxxxxxxx>
• ulogd2 memory bug?
  • From: Peter Sagerson <psagers@xxxxxxxxxxxx>
• [PATCH v2 nf-next 1/6] netfilter: bridge: don't use nf_bridge_info data to store mac header
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 0/6] netfilter: prepare for skb->nf_bridge removal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 4/6] netfilter: bridge: add and use nf_bridge_info_get helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 3/6] netfilter: physdev: use helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 2/6] netfilter: bridge: add helpers for fetching physin/outdev
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 6/6] netfilter: bridge: make BRNF_PKT_TYPE flag a bool
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 5/6] netfilter: bridge: start splitting mask into public/private chunks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: x_tables: don't extract flow keys on early demuxed sks in socket match
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 02/14] net: untangle ip_fragment and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Re: [PATCH V4 0/3] Add mark target
  • From: "Zhang, Chunyu" <zhangcy@xxxxxxxxxxxxxx>
• Re: [PATCH 0/5] netfilter: nf_tables: set timeout support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH V4 0/3] Add mark target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -nf] netfilter: x_tables: fix cgroup matching on non-full sks
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 01/14] netfilter: bridge: really save frag_max_size between PRE and POST_ROUTING
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 01/14] netfilter: bridge: really save frag_max_size between PRE and POST_ROUTING
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -nf] netfilter: x_tables: fix cgroup matching on non-full sks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/5] netfilter: nf_tables: set timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH arptables 2/2] src: fix compilation warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH arptables 1/2] src: cache in tree and use x_tables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 02/14] net: untangle ip_fragment and bridge netfilter
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nf-next 03/14] netfilter: bridge: don't use nf_bridge_info data to store mac header
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 02/14] net: untangle ip_fragment and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 04/14] netfilter: bridge: start splitting mask into public/private chunks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 06/14] netfilter: bridge: rename and resize 'data' field
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 05/14] netfilter: bridge: make BRNF_PKT_TYPE flag a bool
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 09/14] netfilter: bridge: add and use nf_bridge_info_get helper
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 10/14] netfilter: bridge: move bridge netfilter state into sk_buff
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 07/14] netfilter: bridge: add helpers for fetching physin/outdev
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 08/14] netfilter: physdev: use helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 12/14] netfilter: bridge: discard nf_bridge info on xmit
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 11/14] netfilter: bridge: remove skb->nf_bridge
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 14/14] netfilter: bridge: hold physinport ref during neigh resolution
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 13/14] netfilter: bridge: neigh_head and physoutdev can't be used at same time
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 01/14] netfilter: bridge: really save frag_max_size between PRE and POST_ROUTING
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 00/14] get rid of skb->nf_bridge pointer
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nft parser and problems with icmp type names (redirect and param-problem)
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• nft parser and problems with icmp type names (redirect and param-problem)
  • From: Alexander Holler <holler@xxxxxxxxxxxxx>
• Re: [PATCH 23/25] netfilter: Use bool function return values of true/false not 1/0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/9 net-next] ipv6: replace if/BUG by BUG_ON
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 4/9 net-next] ipv6: replace if/BUG by BUG_ON
  • From: YOSHIFUJI Hideaki <hideaki.yoshifuji@xxxxxxxxxxxxxxxx>