Linux TCP/IP Netfilter Devel
[Prev Page][Next Page]
- Re: nftables error compile current git
- From: Giorgio <giorgio.nicole@xxxxxxxx>
- Re: x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 24
- From: Jan Engelhardt <jengelh@xxxxxxx>
- Re: [PATCH nf 2/2] bridge: set the pktinfo for IPv4/IPv6 traffic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH] buffer: include stdarg header
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: fix renaming of chains
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/2] netfilter: nfnetlink: fix insufficient validation in nfnetlink_bind
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/2] bridge: fix netfilter/NF_BR_LOCAL_OUT for own, locally generated queries
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/2] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [libnftnl PATCH] buffer: include stdarg header
- From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
- Re: [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: fix renaming of chains
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: user-defined chains default policy is always RETURN
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: user-defined chains default policy is always RETURN
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- RE: nftables error compile current git
- From: Marco Berizzi <pupilla@xxxxxxxxxxx>
- Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- Re: [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls
- From: Simon Horman <horms@xxxxxxxxxxxx>
- Re: [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls
- From: Julian Anastasov <ja@xxxxxx>
- Re: nftables error compile current git
- From: Giorgio <giorgio.nicole@xxxxxxxx>
- Re: [PATCH] build: add and use a symbol version map
- From: Jan Engelhardt <jengelh@xxxxxxx>
- nftables error compile current git
- From: Marco Berizzi <pupilla@xxxxxxxxxxx>
- Re: [PATCH] build: add and use a symbol version map
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] use NF_BR_PRI_BRNF in NF_HOOK_THRESH
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: user-defined chains default policy is always RETURN
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: adjust policy in user-defined chains
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: adjust policy in user-defined chains
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH v2] netfilter: bridge: unshare bridge info before change it
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- [PATCH] use NF_BR_PRI_BRNF in NF_HOOK_THRESH
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls
- From: SF Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
- Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: adjust policy in user-defined chains
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [Repost] Fix userspace compilation of ip_tables.h/ip6_tables.h in C++ mode
- From: Matthew Weber <matthew.weber@xxxxxxxxxxxxxxxxxxx>
- Re: nftables in network name spaces breaks networking
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: adjust policy in user-defined chains
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [ebtables-compat PATCH] build ebtables extensions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat-experimental5 PATCH] ebtables-compat: include /etc/ethertypes in tarball
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat-experimental5 PATCH] iptables/xtables-eb.c: delete extra 'policy' printf
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] [netfileter] nf_conntrack_h323: lookup route from proper net namespace
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH -next] netfilter: xt_connlimit: honor conntrack zone if available
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH RFC] bridge: fix netfilter/NF_BR_LOCAL_OUT for own, locally generated queries
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH RFC] bridge: fix netfilter/NF_BR_LOCAL_OUT for own, locally generated queries
- From: Linus Lüssing <linus.luessing@xxxxxxxxx>
- [PATCH RFC 0/1] bridge: fix netfilter/NF_BR_LOCAL_OUT for own, locally generated queries
- From: Linus Lüssing <linus.luessing@xxxxxxxxx>
- [ebtables-compat-experimental5 PATCH] iptables/xtables-eb.c: delete extra 'policy' printf
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [libnftnl PATCH] examples: nft-rule-parse-add: fix wrong buffer usage when building rule header
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [libnftnl PATCH] examples: nft-rule-parse-add: fix wrong buffer usage when building rule header
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [BUG] index is out of range for nfnl_group2type[]
- From: Andrey Ryabinin <a.ryabinin@xxxxxxxxxxx>
- [PATCH RESEND] netfilter: bridge: unshare bridge info before change it
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- [BUG] libnftnl examples/nft-rule-parse-add.c hangs
- From: Ian Bishop <ian@xxxxxxxxx>
- Re: [PATCH 0/8] Netfilter/IPVS fixes for net
- From: David Miller <davem@xxxxxxxxxxxxx>
- [ebtables-compat-experimental5 PATCH] ebtables-compat: include /etc/ethertypes in tarball
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [BUG] index is out of range for nfnl_group2type[]
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] netlink: don't bug on unknown events
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/8] netfilter: nft_masq: fix uninitialized range in nft_masq_{ipv4, ipv6}_eval
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/8] netfilter: ipset: small potential read beyond the end of buffer
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 4/8] netfilter: nft_compat: use current net namespace
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 5/8] netfilter: nft_compat: relax chain type validation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 8/8] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 3/8] ipvs: Keep skb->sk when allocating headroom on tunnel xmit
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 7/8] netfilter: nf_tables: restore synchronous object release from commit/abort
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 6/8] netfilter: nft_compat: use the match->table to validate dependencies
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/8] Netfilter/IPVS fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/8] Netfilter/IPVS fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat PATCH] build ebtables extensions
- From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
- [PATCH -next] netfilter: xt_connlimit: honor conntrack zone if available
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf 2/2] bridge: set the pktinfo for IPv4/IPv6 traffic
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [PATCH nf 1/2] bridge: export nft_reject_ip*hdr_validate functions
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [GIT PULL nf] Second Round of IPVS Fixes for v3.18
- From: Simon Horman <horms@xxxxxxxxxxxx>
- Re: arm64 allmodconfig failures in nft_reject_bridge.c
- From: Mark Brown <broonie@xxxxxxxxxx>
- Re: arm64 allmodconfig failures in nft_reject_bridge.c
- From: David Miller <davem@xxxxxxxxxxxxx>
- Re: [RFC PATCH 00/16] Replace smp_read_barrier_depends() with lockless_derefrence()
- From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
- Re: arm64 allmodconfig failures in nft_reject_bridge.c
- From: Mark Brown <broonie@xxxxxxxxxx>
- Re: arm64 allmodconfig failures in nft_reject_bridge.c
- From: David Miller <davem@xxxxxxxxxxxxx>
- [RFC PATCH 00/16] Replace smp_read_barrier_depends() with lockless_derefrence()
- From: Pranith Kumar <bobby.prani@xxxxxxxxx>
- [PATCH 15/16] netfilter: Replace smp_read_barrier_depends() with lockless_dereference()
- From: Pranith Kumar <bobby.prani@xxxxxxxxx>
- Re: x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 24
- From: Ronny Janssen <ronny.janssen@xxxxxxxxx>
- Re: x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 24
- From: Jan Engelhardt <jengelh@xxxxxxx>
- Aw: Re: [libnftnl PATCH 1/1] Correctly define the header 'Requires:' in the file 'libnftnl.pc'.
- From: giorgio.nicole@xxxxxxxx
- Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse
- From: Jörg Marx <joerg.marx@xxxxxxxxxxx>
- x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 24
- From: Ronny Janssen <ronny.janssen@xxxxxxxxx>
- Re: [PATCH] netfilter: bridge: unshare bridge info before change it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: arm64 allmodconfig failures in nft_reject_bridge.c
- From: Mark Brown <broonie@xxxxxxxxxx>
- Re: [libnftnl PATCH 1/1] Correctly define the header 'Requires:' in the file 'libnftnl.pc'.
- From: Jan Engelhardt <jengelh@xxxxxxx>
- [libnftnl PATCH 1/1] Correctly define the header 'Requires:' in the file 'libnftnl.pc'.
- From: Giorgio Dal Molin <giorgio.nicole@xxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] [netfileter] nf_conntrack_h323: lookup route from proper net namespace
- From: Vasily Averin <vvs@xxxxxxxxxxxxx>
- Re: arm64 allmodconfig failures in nft_reject_bridge.c
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat PATCH] build ebtables extensions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [GIT PULL nf] Second Round of IPVS Fixes for v3.18
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: arm64 allmodconfig failures in nft_reject_bridge.c
- From: Mark Brown <broonie@xxxxxxxxxx>
- Re: [ebtables-compat-experimental5 PATCH] iptables/nft-bridge.c: fix inversion of builtin matches
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/1] netfilter: fix various sparse warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/1] netfilter: fix various sparse warnings
- From: Florian Westphal <fw@xxxxxxxxx>
- [BUG] index is out of range for nfnl_group2type[]
- From: Andrey Ryabinin <a.ryabinin@xxxxxxxxxxx>
- Re: [PATCH 3/3] autotools conversion: added autotools support for the 'files' subdir.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 2/3] autotools conversion: added autotools support for the 'doc' subdir.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/3] autotools conversion: added a missing 'Makefile.am' under 'include/linux/netfilter/'.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/3] autotools conversion: added autotools support for the 'doc' subdir.
- From: Giorgio Dal Molin <giorgio.nicole@xxxxxxxx>
- [PATCH 3/3] autotools conversion: added autotools support for the 'files' subdir.
- From: Giorgio Dal Molin <giorgio.nicole@xxxxxxxx>
- [PATCH 1/3] autotools conversion: added a missing 'Makefile.am' under 'include/linux/netfilter/'.
- From: Giorgio Dal Molin <giorgio.nicole@xxxxxxxx>
- [PATCH 0/3] autotools conversion: forgotten Makefile.am, 'doc' and 'files'
- From: Giorgio Dal Molin <giorgio.nicole@xxxxxxxx>
- Aw: Re: [PATCH 1/1] autotools conversion fixups
- From: giorgio.nicole@xxxxxxxx
- [ebtables-compat-experimental5 PATCH] iptables/nft-bridge.c: fix inversion of builtin matches
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH -next 2/2] seq_putc: Convert to return void and convert uses too.
- From: Corey Minyard <minyard@xxxxxxx>
- Re: [RFC nft PATCH] src: add import operation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] build: add and use a symbol version map
- From: Jan Engelhardt <jengelh@xxxxxxx>
- Re: [iptables PATCH v2] iptables/nft-shared.c: kill add_*() invflags parameter
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH v2] iptables/nft-shared.c: kill add_*() invflags parameter
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH -next 2/2] seq_putc: Convert to return void and convert uses too.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH v2] iptables/nft-shared.c: kill add_*() invflags parameter
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/1] autotools conversion: added autotools support for the 'files' subdir.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/1] autotools conversion: added autotools support for the 'doc' subdir.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: nft_redir: fix sparse warnings: cast to restricted __be32
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [iptables PATCH v2] iptables/nft-shared.c: kill add_*() invflags parameter
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH 1/1] autotools conversion fixups
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] arptables: remove dead dynamic hooks code
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: nft_redir: fix sparse warnings: cast to restricted __be32
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] netfilter: nft_redir: fix sparse warnings: cast to restricted __be32
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [PATCH nf-next 2/2] netfilter: nft_redir: fix sparse warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 1/2] netfilter: fix unmet dependencies in NETFILTER_XT_TARGET_REDIRECT
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse
- From: Jörg Marx <joerg.marx@xxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse
- From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
- Re: [GIT PULL nf] IPVS Fixes for v3.18
- From: Simon Horman <horms@xxxxxxxxxxxx>
- [PATCH nf] ipvs: Keep skb->sk when allocating headroom on tunnel xmit
- From: Simon Horman <horms@xxxxxxxxxxxx>
- [GIT PULL nf] Second Round of IPVS Fixes for v3.18
- From: Simon Horman <horms@xxxxxxxxxxxx>
- Re: [iptables PATCH] iptables/nft-shared.c: kill add_*() invflags parameter
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [iptables PATCH] iptables/nft-shared.c: kill add_*() invflags parameter
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH -next 2/2] seq_putc: Convert to return void and convert uses too.
- From: Petr Mladek <pmladek@xxxxxxx>
- [PATCH 3/3] netfilter: nf_tables: restore synchronous object release from commit/abort
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/3] netfilter: nft_compat: relax chain type validation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/3] netfilter: nft_compat: use the match->table to validate dependencies
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] arptables: remove dead dynamic hooks code
- From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
- Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [PATCH -nf] nft: masq: fix uninitialized range in nft_masq_{ipv4,ipv6}_eval
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [ebtables-compat PATCH] build ebtables extensions
- From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
- [PATCH -next 2/2] seq_putc: Convert to return void and convert uses too.
- From: Joe Perches <joe@xxxxxxxxxxx>
- [PATCH -next 0/2] seq: Convert seq_puts and seq_putc to return void
- From: Joe Perches <joe@xxxxxxxxxxx>
- Re: [PATCH] arptables: disable dlfcn.h include
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat-experimental3 PATCH 2/2] nft-bridge: fix printing of inverted protocols, addresses
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH] nft-arp: fix inversion of matches
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat-experimental3 PATCH 1/2] nft-bridge: fix inversion of matches
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 3/3] parser: allow both nat_flags and port specification in redirect
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 2/3] tests/regression: redirect: fix invalid syntax
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 1/3] tests/regression: masquerade: fix invalid syntax
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] From fryasu: Trim kernel struct to allow deletion for TEE targets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] iptables-compat: homogenize error messages with 'R' option
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnf PATCH] expr: meta: Add cgroup support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH] src: Add cgroup support in meta expresion
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: nft_meta: add cgroup support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/1] autotools conversion: added autotools support for the 'files' subdir.
- From: Giorgio Dal Molin <giorgio.dal.molin@xxxxxxxxxxx>
- [PATCH 0/1] autotools conversion: added autotools support for the 'files' subdir.
- From: Giorgio Dal Molin <giorgio.dal.molin@xxxxxxxxxxx>
- [PATCH 1/1] autotools conversion: added autotools support for the 'doc' subdir.
- From: Giorgio Dal Molin <giorgio.dal.molin@xxxxxxxxxxx>
- [PATCH 0/1] autotools conversion: added autotools support for the 'doc' subdir.
- From: Giorgio Dal Molin <giorgio.dal.molin@xxxxxxxxxxx>
- [PATCH 0/1] autotools conversion: added autotools support for the 'doc' subdir.
- From: Giorgio Dal Molin <giorgio.dal.molin@xxxxxxxxxxx>
- Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 3/3] expr: data_reg: use 'reg' instead of 'data_reg'
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 2/3 v2] src: consolidate XML/JSON exportation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 1/3] expr: nat: use 'nat_type' instead of 'type' in the parser
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH libnftnl] src: consolidate XML/JSON exportation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl] src: consolidate XML/JSON exportation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/1] autotools conversion fixups
- From: giorgio.nicole@xxxxxxxx
- [PATCH] From fryasu: Trim kernel struct to allow deletion for TEE targets
- From: Loganaden Velvindron <logan@xxxxxxxxxxxx>
- How to debug libiptc and mechanism for exchanging information between user space and kernel space
- From: Nguyen Duong Tuan <hoang.su.tk@xxxxxxxxx>
- [ebtables-compat-experimental3 PATCH 2/2] nft-bridge: fix printing of inverted protocols, addresses
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [ebtables-compat-experimental3 PATCH 1/2] nft-bridge: fix inversion of matches
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [iptables PATCH] nft-arp: fix inversion of matches
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [PATCH] arptables: disable dlfcn.h include
- From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
- Re: [PATCH nft 5/5] build: autotools conversion
- From: Giorgio <giorgio.nicole@xxxxxxxx>
- [PATCH] netfilter: nft_compat: use current net namespace
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -nf] nft: masq: fix uninitialized range in nft_masq_{ipv4,ipv6}_eval
- From: Daniel Borkmann <dborkman@xxxxxxxxxx>
- [nft PATCH 3/3] parser: allow both nat_flags and port specification in redirect
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nft PATCH 1/3] tests/regression: masquerade: fix invalid syntax
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nft PATCH 2/3] tests/regression: redirect: fix invalid syntax
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse
- From: "Bill Bonaparte" <programme110@xxxxxxxxx>
- [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [PATCH nft 5/5] build: autotools conversion
- From: Jan Engelhardt <jengelh@xxxxxxx>
- [PATCH nft 0/5] autotools conversion
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 5/5] build: autotools conversion
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 4/5] include: add cli.h
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 3/5] rename parser.y to parser_bison.y
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 1/5] build: use PKG_CHECK_MODULES to check for libmnl and libnftnl
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 2/5] build: use AC_PROG_YACC and AM_PROG_LEX
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 2/3] netfilter: nfnetlink_log: improve error handling on __build_packet_message()
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse
- From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
- Re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse
- From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
- Re: [nft PATCH v2] nft: don't resolve hostnames by default
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [PATCH 3/3] netfilter: nfnetlink_log: Make use of pr_fmt where applicable
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/3] netfilter: nfnetlink_log: improve error handling on __build_packet_message()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/3] netfilter: nfnetlink_log: remove unnecessary error messages
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH v2] nft: don't resolve hostnames by default
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nft PATCH v2] nft: don't resolve hostnames by default
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 3/8] netfilter: Convert print_tuple functions to return void
- From: Joe Perches <joe@xxxxxxxxxxx>
- Re: [PATCH 3/8] netfilter: Convert print_tuple functions to return void
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 4/8] netfilter: Remove checks of seq_printf() return values
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- [PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- [PATCH 3/8] netfilter: Convert print_tuple functions to return void
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- [PATCH] iptables-compat: homogenize error messages with 'R' option
- From: Ana Rey <anarey@xxxxxxxxx>
- Re: [PATCH] netfilter: bridge: unshare bridge info before change it
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- Re: [PATCH] netfilter: bridge: unshare bridge info before change it
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- Re: recent module
- From: Sven-Haegar Koch <haegar@xxxxxxxxx>
- Re: [PATCH] Make_global.am: Don't include host headers
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: bridge: unshare bridge info before change it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [Repost] Fix userspace compilation of ip_tables.h/ip6_tables.h in C++ mode
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [GIT PULL nf] IPVS Fixes for v3.18
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH v4 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH v4 3/3] Make use of pr_fmt where applicable
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH v2] src: add redirect support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [nft PATCH v2] src: add redirect support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH v2] src: add redirect support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [RFA][PATCH 3/8] netfilter: Convert print_tuple functions to return void
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Joe Perches <joe@xxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH v2] src: add redirect support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [nft PATCH v2] src: add redirect support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH] extensions: devgroup: fix showing and saving of dst-group
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH v2] src: add redirect support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] utils: indicate file and line on memory allocation errors
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [RFA][PATCH 4/8] netfilter: Remove checks of seq_printf() return values
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [RFA][PATCH 3/8] netfilter: Convert print_tuple functions to return void
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- [Repost] Fix userspace compilation of ip_tables.h/ip6_tables.h in C++ mode
- From: Matthew Weber <matthew.weber@xxxxxxxxxxxxxxxxxxx>
- Re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse
- From: "billbonaparte" <programme110@xxxxxxxxx>
- Re: [PATCH] netfilter: bridge: unshare bridge info before change it
- From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
- [nft PATCH v2] src: add redirect support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [nft PATCH v2] src: add redirect support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nft PATCH] src: Add cgroup support in meta expresion
- From: Ana Rey <anarey@xxxxxxxxx>
- [PATCH] netfilter: nft_meta: add cgroup support
- From: Ana Rey <anarey@xxxxxxxxx>
- [libnftnf PATCH] expr: meta: Add cgroup support
- From: Ana Rey <anarey@xxxxxxxxx>
- recent module
- From: Pietro Paolini <pulsarpietro@xxxxxxx>
- Re: [PATCH] netfilter: nft_reject_bridge: Fix powerpc build error
- From: David Miller <davem@xxxxxxxxxxxxx>
- [PATCH] netfilter: nft_reject_bridge: fix missing declaration of csum_ipv6_magic
- From: Jeff Mahoney <jeffm@xxxxxxxx>
- [PATCH] netfilter: nft_reject_bridge: Fix powerpc build error
- From: Guenter Roeck <linux@xxxxxxxxxxxx>
- Re: bug report: use after free bug leading to kernel panic
- From: Mathias Krause <minipli@xxxxxxxxxxxxxx>
- Re: iptables/ipset "-m set" alignment problem 64bit kernel 32bit userspace
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: iptables/ipset "-m set" alignment problem 64bit kernel 32bit userspace
- From: Jan Engelhardt <jengelh@xxxxxxx>
- Re: iptables/ipset "-m set" alignment problem 64bit kernel 32bit userspace
- From: Florian Westphal <fw@xxxxxxxxx>
- iptables/ipset "-m set" alignment problem 64bit kernel 32bit userspace
- From: Sven-Haegar Koch <haegar@xxxxxxxxx>
- Re: bug report: use after free bug leading to kernel panic
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: bug report: use after free bug leading to kernel panic
- From: Mathias Krause <minipli@xxxxxxxxxxxxxx>
- Re: bug report: use after free bug leading to kernel panic
- From: eric gisse <jowr.pi@xxxxxxxxx>
- Re: bug report: use after free bug leading to kernel panic
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 0/6] netfilter/ipvs fixes for net
- From: David Miller <davem@xxxxxxxxxxxxx>
- bug report: use after free bug leading to kernel panic
- From: eric gisse <jowr.pi@xxxxxxxxx>
- [PATCH 2/6] netfilter: nf_tables_bridge: update hook_mask to allow {pre,post}routing
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 6/6] netfilter: nft_reject_bridge: restrict reject to prerouting and input
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 4/6] netfilter: nf_reject_ipv6: split nf_send_reset6() in smaller functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 3/6] netfilter: nf_reject_ipv4: split nf_send_reset() in smaller functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 5/6] netfilter: nft_reject_bridge: don't use IP stack to reject traffic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/6] ipvs: Avoid null-pointer deref in debug code
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/6] netfilter/ipvs fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [GIT PULL nf] IPVS Fixes for v3.18
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] netfilter: nf_log: fix sparse warning in nf_logger_find_get()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] iptables-compat: homogenize error messages
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ebtables-compat PATCH 1/2] nft-shared: rework inversion of matches
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next] netfilter: fix spelling errors
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH v2] src: add redirect support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v4 1/3] netfilter: log: protect nf_log_register against double registering
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2] Introduce nft_log_dereference() macro
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [GIT PULL nf-next] IPVS Updates for v3.19
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH v3] src: add support for nft_redir expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH v2] src: add support for nft_redir expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf_tables PATCH v3 2/2] netfilter: nf_tables: add new expression nft_redir
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf_tables PATCH v3 1/2] netfilter: refactor NAT redirect IPv6 code to use it from nf_tables
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf_tables PATCH v2 1/3] netfilter: refactor NAT redirect IPv4 to use it from nf_tables
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] extensions: devgroup: fix showing and saving of dst-group
- From: Ana Rey <anarey@xxxxxxxxx>
- Re: [nft PATCH v2] src: add redirect support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] iptables-compat: homogenize error messages
- From: Ana Rey <anarey@xxxxxxxxx>
- [PATCH net-next] netfilter: fix spelling errors
- From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Florian Westphal <fw@xxxxxxxxx>
- [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- [RFA][PATCH 3/8] netfilter: Convert print_tuple functions to return void
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- [RFA][PATCH 4/8] netfilter: Remove checks of seq_printf() return values
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- Re: nf_reject_ipv4: module license 'unspecified' taints kernel
- From: Benjamin Tissoires <benjamin.tissoires@xxxxxxxxx>
- Re: [ebtables-compat PATCH] extensions: libebt_log
- From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
- [ebtables-compat PATCH] extensions: libebt_log
- From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
- [ebtables-compat PATCH] build ebtables extensions
- From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
- Re: [PATCH v3 2/3] Do error handling if __build_packet_message fails
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH v4 2/3] Do error handling if __build_packet_message fails
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH v4 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH v4 1/3] netfilter: log: protect nf_log_register against double registering
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH v3 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH v3 2/3] Do error handling if __build_packet_message fails
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH v2] Introduce nft_log_dereference() macro
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH v3 1/3] netfilter: log: protect nf_log_register against double registering
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- nftables in network name spaces breaks networking
- From: Ed Tomlinson <edt@xxxxxx>
- Re: [PATCH v2 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH v2 3/3] Make use of pr_fmt where applicable
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH] Make_global.am: Don't include host headers
- From: Baruch Siach <baruch@xxxxxxxxxx>
- Re: [PATCH v2] add missing ipset_parse_tcp_udp_port to libipset.map
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [PATCH] libipset: Bump lib version and update map file
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [ebtables-compat PATCH 1/2] nft-shared: rework inversion of matches
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [ebtables-compat PATCH 2/2] nft-bridge: fix printing of inverted protocols, addresses
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH 0/7] seq_printf cleanups
- From: Joe Perches <joe@xxxxxxxxxxx>
- Re: [PATCH 0/7] seq_printf cleanups
- From: Steven Rostedt <rostedt@xxxxxxxxxxx>
- [PATCH 3/5] netfilter: nf_reject_ipv6: split nf_send_reset6() in smaller functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 5/5] netfilter: nft_reject_bridge: restrict reject to prerouting and input
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/5] netfilter: nf_tables_bridge: update hook_mask to allow {pre,post}routing
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 4/5] netfilter: nft_reject_bridge: don't use IP stack to reject traffic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/5] netfilter: nf_reject_ipv4: split nf_send_reset() in smaller functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/5] bridge reject fixes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH v2 2/3] netfilter: log: protect nf_log_register against double registering
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH 1/3] Introduce nft_log_dereference() macro
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse
- From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
- Re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse
- From: Florian Westphal <fw@xxxxxxxxx>
- netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse
- From: "billbonaparte" <programme110@xxxxxxxxx>
- netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse
- From: "billbonaparte" <programme110@xxxxxxxxx>
- [PATCH nf] ipvs: Avoid null-pointer deref in debug code
- From: Simon Horman <horms@xxxxxxxxxxxx>
- [GIT PULL nf] IPVS Fixes for v3.18
- From: Simon Horman <horms@xxxxxxxxxxxx>
- [PATCH nf-next] ipvs: remove unnecessary assignment in __ip_vs_get_out_rt
- From: Simon Horman <horms@xxxxxxxxxxxx>
- [GIT PULL nf-next] IPVS Updates for v3.19
- From: Simon Horman <horms@xxxxxxxxxxxx>
- Re: [PATCH 0/8] Netfilter fixes for net
- From: David Miller <davem@xxxxxxxxxxxxx>
- Re: [PATCH v2 3/3] Make use of pr_fmt where applicable
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2 2/3] netfilter: log: protect nf_log_register against double registering
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/3] Introduce nft_log_dereference() macro
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/8] netfilter: ipset: off by one in ip_set_nfnl_get_byindex()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 5/8] netfilter: nf_log: account for size of NLMSG_DONE attribute
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 7/8] netfilter: nf_log: release skbuff on nlmsg put failure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 8/8] netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 4/8] bridge: Do not compile options in br_parse_ip_options
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 3/8] netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats allocation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 6/8] netfilter: nfnetlink_log: fix maximum packet length logged to userspace
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/8] netfilter: nf_conntrack: allow server to become a client in TW handling
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/8] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf_tables PATCH] netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1)
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [RFC PATCH netfilter] Fix Unknown symbols in nf_reject_ipvX modules
- From: Li Zhong <zhong@xxxxxxxxxxxxxxxxxx>
- Re: [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1)
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1)
- From: Thomas Graf <tgraf@xxxxxxx>
- Re: [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1)
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [nf_tables PATCH] netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops()
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1)
- From: Kim N <spam1@xxxxxxxxxx>
- iptables doesn't match udp rule
- From: "Ralf Schwarzmaier" <ralf@xxxxxxxxxxxxx>
- Re: [PATCH] add missing ipset_parse_tcp_udp_port to libipset.map
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH v2] add missing ipset_parse_tcp_udp_port to libipset.map
- From: Thomas Backlund <tmb@xxxxxxxxxx>
- Re: [PATCH] add missing ipset_parse_tcp_udp_port to libipset.map
- From: Jan Engelhardt <jengelh@xxxxxxx>
- [PATCH] add missing ipset_parse_tcp_udp_port to libipset.map
- From: Thomas Backlund <tmb@xxxxxxxxxx>
- [PATCH v2 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH 1/3] netfilter: nf_log: account for size of NLMSG_DONE attribute
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 3/3] Make use of pr_fmt where applicable
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH v2 2/3] netfilter: log: protect nf_log_register against double registering
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [PATCH 1/3] Introduce nft_log_dereference() macro
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH 3/3] netfilter: nf_log: release skbuff on nlmsg put failure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 2/3] netfilter: nfnetlink_log: fix maximum packet length logged to userspace
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/3] netfilter: nf_log: account for size of NLMSG_DONE attribute
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: bridge: Do not compile options in br_parse_ip_options
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: bridge: Do not compile options in br_parse_ip_options
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [nftables PATCH] meta: Add support for datatype devgroup
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 2/2 v3] evaluate: reject: check in bridge and inet the network context in reject
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 1/2 v3] evaluate: reject: accept a reject reason with incorrect network context
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 2/2 v2] evaluate: reject: enhance the error support throwing message with more details
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 1/2 v2] evaluate: reject: check the context in reject without reason for bridge and inet tables
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH] mnl: delete useless parameter nf_sock in batch functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH] ruleset: deconstify _get interface
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [RFC PATCH netfilter] Fix Unknown symbols in nf_reject_ipvX modules
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] libipset: Add missing ipset_parse_uint16 to map file
- From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
- [PATCH] libipset: Bump lib version and update map file
- From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
- Re: [PATCHv3 1/1 lnf-ct] qa: build unshared nfct environment
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 1/3] iptables-compat: fix chain policy reset with iptables -L -n
- From: Ana Rey <anarey@xxxxxxxxx>
- [RFC PATCH netfilter] Fix Unknown symbols in nf_reject_ipvX modules
- From: Li Zhong <zhong@xxxxxxxxxxxxxxxxxx>
- netfilter: NAT: do the optimization for getting curr_tuple in function nf_nat_setup_info
- From: "billbonaparte" <programme110@xxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: vDev <vijaypas@xxxxxxxxx>
- [nft PATCH 2/2 v2] evaluate: reject: enhance the error support throwing message with more details
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 1/2 v2] evaluate: reject: check the context in reject without reason for bridge and inet tables
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 1/2] evaluate: reject: check the context in reject without reason for bridge and inet tables
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 2/2] evaluate: reject: enhance the error support throwing messages with more details
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nftables PATCH] meta: Add support for datatype devgroup
- From: Ana Rey <anarey@xxxxxxxxx>
- [PATCH] iptables-compat: fix empty chains after first invocation of iptables-compat -L
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/3] iptables-compat: fix chain policy reset with iptables -L -n
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/3] iptables-compat: statify unused built-in table/chain functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 3/3] iptables-compat: assume chain policy NF_ACCEPT when creating built-in chains
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 3/3] netfilter: nf_log: release skbuff on nlmsg put failure
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 2/3] netfilter: nfnetlink_log: fix maximum packet length logged to userspace
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 1/3] netfilter: nf_log: account for size of NLMSG_DONE attribute
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 0/3] netfilter: nf_log: nlmsg size fixes
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: vDev <vijaypas@xxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: vDev <vijaypas@xxxxxxxxx>
- Xtables Getting Started Question
- From: Daniel Martin <danmartinjoseph@xxxxxxxxx>
- Re: [PATCH] libipset: Add missing ipset_parse_uint16 to map file
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [PATCH] netfilter: log: protect nf_log_register against double registering
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH v3] utils: fix arp family number
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nft PATCH 2/2 v3] evaluate: reject: check in bridge and inet the network context in reject
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 1/2 v3] evaluate: reject: accept a reject reason with incorrect network context
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [PATCH] netfilter: log: protect nf_log_register against double registering
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH] nf_conntrack_proto_tcp: allow server to become a client in TW handling
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf v2] netfilter: conntrack: disable generic tracking for known protocols
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [patch] netfilter: ipset: off by one in ip_set_nfnl_get_byindex()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats allocation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf v2] netfilter: conntrack: disable generic tracking for known protocols
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: log: protect nf_log_register against double registering
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: xt_hashlimit: Enhance the xt_hashlimit to avoid duplicated codes
- From: Feng Gao <gfree.wind@xxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: vDev <vijaypas@xxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: vDev <vijaypas@xxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: vDev <vijaypas@xxxxxxxxx>
- Re: [PATCH] netfilter: xt_hashlimit: Enhance the xt_hashlimit to avoid duplicated codes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nft PATCH 4/4 v4] test: update and add the reject tests for ip, ip6, bridge and inet.
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 2/4 v2] evaluate: accept a reject reason with incorrect network context
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 3/4 v2] evaluate: check in bridge and inet the network context in reject
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 1/4 v2] evaluate: refactor function to check the reject family in inet and bridge
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [PATCH] netfilter: Fix wastful cleanup check for unconfirmed conn in get_next_corpse
- From: Feng Gao <gfree.wind@xxxxxxxxx>
- Re: [nft PATCH 3/4] evaluate: no check the network context in reject with tcp reset reason
- From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [nft PATCH 4/4 v3] evaluate: fix a crash if we check the transport protocol is tcp
- From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [RFC nft PATCH] src: add import operation
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [libnftnl PATCH v3] utils: fix arp family number
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH v3] utils: fix arp family number
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [patch] netfilter: ipset: off by one in ip_set_nfnl_get_byindex()
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [nft PATCH] mnl: delete useless parameter nf_sock in batch functions
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats allocation
- From: Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
- Re: [libnftnl PATCH v3] utils: fix arp family number
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [nft PATCH 1/4] evaluate: refactor function to check the reject family in inet and bridge
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [patch] netfilter: ipset: off by one in ip_set_nfnl_get_byindex()
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [nft PATCH 4/4 v3] evaluate: fix a crash if we check the transport protocol is tcp
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH v3] evaluate: fix a crash if we specify ether type or meta nfproto in reject
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH v3] utils: fix arp family number
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 3/4] evaluate: no check the network context in reject with tcp reset reason
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: TCP LAST ACK incorrectly treated as invalid
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [PATCH] netfilter: Fix wastful cleanup check for unconfirmed conn in get_next_corpse
- From: Feng Gao <gfree.wind@xxxxxxxxx>
- [nft PATCH 4/4 v3] evaluate: fix a crash if we check the transport protocol is tcp
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 2/4] evaluate: accept a reject reason with incorrect network context
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 3/4] evaluate: no check the network context in reject with tcp reset reason
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 1/4] evaluate: refactor function to check the reject family in inet and bridge
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [PATCH] netfilter: log: protect nf_log_register against double registering
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- TCP LAST ACK incorrectly treated as invalid
- From: vDev <vijaypas@xxxxxxxxx>
- Re: NAT dropping FIN ACK from remote server
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: NAT dropping FIN ACK from remote server
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- [libnftnl PATCH] ruleset: deconstify _get interface
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH 0/7] netfilter fixes for net
- From: David Miller <davem@xxxxxxxxxxxxx>
- [nft PATCH v3] evaluate: fix a crash if we specify ether type or meta nfproto in reject
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [libnftnl PATCH v3] utils: fix arp family number
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [libnftnl PATCH v2] utils: fix arp family number
- From: Jan Engelhardt <jengelh@xxxxxxx>
- Re: [PATCH 1/7] netfilter: missing module license in the nf_reject_ipvX modules
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [libnftnl PATCH v2] utils: fix arp family number
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH 1/7] netfilter: missing module license in the nf_reject_ipvX modules
- From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
- Re: [libnftnl PATCH] utils: fix arp family number
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [libnftnl PATCH] utils: fix arp family number
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [nft PATCH 2/4 v2] evaluate: fix a crash if we check the transport protocol
- From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [nft PATCH 2/4 v2] evaluate: fix a crash if we check the transport protocol
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 2/4 v2] evaluate: fix a crash if we check the transport protocol
- From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [iptables-compat PATCH 1/3] ebtables-compat: fix print_header
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables-compat PATCH 3/3] nft-ipv46: replace offset var with ctx->payload.offset
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables-compat PATCH 2/3] nft: fix syntax error
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables-compat PATCH 1/3] ebtables-compat: fix print_header
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 2/4 v2] evaluate: fix a crash if we check the transport protocol
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/7] netfilter: missing module license in the nf_reject_ipvX modules
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 4/7] netfilter: nft_compat: validate chain type in match/target
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 5/7] netfilter: nft_nat: insufficient attribute validation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 3/7] netfilter: nft_compat: fix hook validation for non-base chains
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/7] netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 6/7] netfilter: nft_nat: NFTA_NAT_REG_ADDR_MAX depends on NFTA_NAT_REG_ADDR_MIN
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 7/7] netfilter: nft_nat: dump attributes if they are set
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/7] netfilter: nf_tables: restrict nat/masq expressions to nat chain type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nft PATCH] nft: don't resolve hostnames by default
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH] ipset: Adjust the maximum timeout jiffies of set timeout extension
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [nft PATCH] tests: add tests for masquerade
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 1/4 v2] evaluate: fix a crash if we specify ether type or meta nfproto in reject
- From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [nft PATCH 1/4 v2] evaluate: fix a crash if we specify ether type or meta nfproto in reject
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nft PATCH 4/4 v3] test: update and add the reject tests for ip, ip6, bridge and inet.
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [nft PATCH 1/4 v2] evaluate: fix a crash if we specify ether type or meta nfproto in reject
- From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [nft PATCH 3/4 v2] delinearize: list the icmpx reason with the string associated
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 1/4 v2] evaluate: fix a crash if we specify ether type or meta nfproto in reject
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nft PATCH 4/4 v2] test: update and add the reject tests for ip, ip6, bridge and inet.
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 3/4 v2] delinearize: list the icmpx reason with the string associated
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 2/4 v2] evaluate: fix a crash if we check the transport protocol
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 1/4 v2] evaluate: fix a crash if we specify ether type or meta nfproto in reject
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [libnftnl PATCH v3] src: add support for nft_redir expression
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nf_tables PATCH v3 2/2] netfilter: nf_tables: add new expression nft_redir
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nf_tables PATCH v3 1/2] netfilter: refactor NAT redirect IPv6 code to use it from nf_tables
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [PATCH] libipset: Add missing ipset_parse_uint16 to map file
- From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
- [PATCH] ipset: Adjust the maximum timeout jiffies of set timeout extension
- From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
- NAT dropping FIN ACK from remote server
- From: vDev <vijaypas@xxxxxxxxx>
- [iptables-compat PATCH 3/3] nft-ipv46: replace offset var with ctx->payload.offset
- From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
- [iptables-compat PATCH 2/3] nft: fix syntax error
- From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
- [iptables-compat PATCH 1/3] ebtables-compat: fix print_header
- From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
- [PATCH nf 3/3] netfilter: nft_nat: dump attributes if they are set
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 1/3] netfilter: nft_nat: insufficient attribute validation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 2/3] netfilter: nft_nat: NFTA_NAT_REG_ADDR_MAX depends on NFTA_NAT_REG_ADDR_MIN
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf_tables PATCH v2 3/3] netfilter: nf_tables: add new expression nft_redir
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf_tables PATCH v2 2/3] netfilter: refactor NAT redirect IPv6 code to use it from nf_tables
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf_tables PATCH v2 3/3] netfilter: nf_tables: add new expression nft_redir
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH v2] src: add support for nft_redir expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nft PATCH v2] src: add redirect support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [libnftnl PATCH v2] src: add support for nft_redir expression
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nf_tables PATCH v2 3/3] netfilter: nf_tables: add new expression nft_redir
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nf_tables PATCH v2 2/3] netfilter: refactor NAT redirect IPv6 code to use it from nf_tables
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nf_tables PATCH v2 1/3] netfilter: refactor NAT redirect IPv4 to use it from nf_tables
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: queuing to userspace for the bridge family, using nftables
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf_tables PATCH 3/3] netfilter: nf_tables: add new expression nft_redir
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH] src: add redirect support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: ipset: bad timeout assignments
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [nf_tables PATCH 3/3] netfilter: nf_tables: add new expression nft_redir
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [nft PATCH] src: add redirect support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [nf_tables PATCH 3/3] netfilter: nf_tables: add new expression nft_redir
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [nf_tables PATCH 3/3] netfilter: nf_tables: add new expression nft_redir
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH] src: add redirect support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: ipset: bad timeout assignments
- From: Vitezslav Samel <vitezslav@xxxxxxxx>
- [nft PATCH] tests: add tests for masquerade
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [nf_tables PATCH 1/3] netfilter: refactor NAT's redirect IPv4 code
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: ipset: bad timeout assignments
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [nft PATCH] src: add redirect support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH] nf_conntrack_proto_tcp: allow server to become a client in TW handling
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [libnftnl PATCH 2/2] tests: add tests for nft_redir expression
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [libnftnl PATCH 1/2] src: add support for nft_redir expression
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH v2] netfilter: release skbuf when nlmsg put fail
- From: Florian Westphal <fw@xxxxxxxxx>
- [nf_tables PATCH 3/3] netfilter: nf_tables: add new expression nft_redir
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nf_tables PATCH 2/3] netfilter: refactor NAT's redirect IPv6 code
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nf_tables PATCH 1/3] netfilter: refactor NAT's redirect IPv4 code
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH v2] netfilter: release skbuf when nlmsg put fail
- From: Houcheng Lin <houcheng@xxxxxxxxx>
- [PATCH 2/2 nf] netfilter: nft_compat: validate chain type in match/target
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/2 nf] netfilter: nft_compat: fix hook validation for non-base chains
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2] netfilter: release skbuf when nlmsg put fail
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v2] netfilter: release skbuf when nlmsg put fail
- From: Houcheng Lin <houcheng@xxxxxxxxx>
- Re: [PATCH] netfilter: release skbuf when nlmsg put fail
- From: Houcheng Lin <houcheng@xxxxxxxxx>
- Re: nf_reject_ipv4: module license 'unspecified' taints kernel
- From: Dave Young <dyoung@xxxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: restrict nat/masq expressions to nat chain type
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/2] netfilter: kill nf_send_reset6() from include/net/netfilter/ipv6/nf_reject.h
- From: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
- [PATCH] nf_conntrack_proto_tcp: allow server to become a client in TW handling
- From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
- Re: [PATCH 1/2] netfilter: kill nf_send_reset6() from include/net/netfilter/ipv6/nf_reject.h
- From: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
- Re: [PATCH 1/2] netfilter: kill nf_send_reset6() from include/net/netfilter/ipv6/nf_reject.h
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 1/2] netfilter: kill nf_send_reset6() from include/net/netfilter/ipv6/nf_reject.h
- From: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
- Re: [PATCH] netfilter: release skbuf when nlmsg put fail
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH] netfilter: release skbuf when nlmsg put fail
- From: Houcheng Lin <houcheng@xxxxxxxxx>
- [nft PATCH 3/3] test: update and add the reject tests for ip, ip6, bridge and inet.
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 2/3] delinearize: list the icmpx reason with the string associated
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [nft PATCH 1/3] evaluate: fix a crash if we specify ether type or meta nfproto in reject
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- Re: [libnftnl PATCH] src: cleanup in mxml and jansson regarding set_id parsing
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- queuing to userspace for the bridge family, using nftables
- From: stéphane bryant <stephane.ml.bryant@xxxxxxxxx>
- Re: ipset: bad timeout assignments
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [libnftnl PATCH] src: cleanup in mxml and jansson regarding set_id parsing
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH 0/2] Netfilter fixes for net-next
- From: David Miller <davem@xxxxxxxxxxxxx>
- Re: ipset: bad timeout assignments
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- Re: [nft PATCH] build: remove unnecessary libintl.h check
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: ipset: bad timeout assignments
- From: Vitezslav Samel <vitezslav@xxxxxxxx>
- Re: ipset: bad timeout assignments
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
- [nft PATCH] build: remove unnecessary libintl.h check
- From: Steven Barth <cyrus@xxxxxxxxxxx>
- Re: [nft PATCHv2] build: allow disabling libreadline-support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: nf_reject_ipv4: module license 'unspecified' taints kernel
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- ipset: bad timeout assignments
- From: Vitezslav Samel <vitezslav@xxxxxxxx>
- [nft PATCHv2] build: allow disabling libreadline-support
- From: Steven Barth <cyrus@xxxxxxxxxxx>
- [PATCH 1/2] netfilter: kill nf_send_reset6() from include/net/netfilter/ipv6/nf_reject.h
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/2] netfilter: fix wrong arithmetics regarding NFT_REJECT_ICMPX_MAX
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/2] Netfilter fixes for net-next
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- More work on ebtables-compat
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] tests: regression: nft-test.py: Delete an unnecessary whitespace in an output messages.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] tests: regression: Delete all reference to wlan0 in test files.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH 2/2] src: internal set id allocation from nft_ruleset_parse*()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH 1/2] ruleset: add the set_id to the parsed sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH v2] src: add masquerade support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH] build: allow disabling libreadline-support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH] build: allow disabling libreadline-support
- From: Steven Barth <cyrus@xxxxxxxxxxx>
- Re: [nft PATCH] build: allow disabling libreadline-support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 1/2] src: add nat persistent and random options
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 4/4 v5] nft: complete reject support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH arptables-compat] arptables-compat: remove save code
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH xtables-compat] arptables-compat: get output in sync with arptables -L -n --line-numbers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH xtables-compat 3/4] arptables-compat: fix missing error reporting
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH xtables-compat 4/4] arptables-compat: allow to not specify a target
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH xtables-compat 1/4] iptables-compat: nft: fix user chain addition, deletion and rename
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH xtables-compat 2/4] iptables-compat: nft: fix error reporting
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] tests: regression: nft-test.py: Delete an unnecessary whitespace in an output messages.
- From: Ana Rey <anarey@xxxxxxxxx>
- [PATCH] tests: regression: Delete all reference to wlan0 in test files.
- From: Ana Rey <anarey@xxxxxxxxx>
- Re: bridge: Save frag_max_size between PRE_ROUTING and POST_ROUTING
- From: David Miller <davem@xxxxxxxxxxxxx>
- Re: [PATCH 1/2] netfilter: kill nf_send_reset6() from include/net/netfilter/ipv6/nf_reject.h
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [PATCH 2/2] netfilter: fix wrong arithmetics regarding NFT_REJECT_ICMPX_MAX
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/2] netfilter: kill nf_send_reset6() from include/net/netfilter/ipv6/nf_reject.h
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 2/9] netfilter: move nf_send_resetX() code to nf_reject_ipvX modules
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- re: netfilter: nft_reject: introduce icmp code abstraction for inet and bridge
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- [PATCHv3 1/1 lnf-ct] qa: build unshared nfct environment
- From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
- [PATCHv3 0/1 lnf-ct] qa: build unshared nfct environment
- From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
- net-next is CLOSED...
- From: David Miller <davem@xxxxxxxxxxxxx>
- [nft PATCH v2] src: add masquerade support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [PATCH nft 1/2] src: interpret the event type from the evaluation step
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 2/2] netlink: use switch whenever possible in the monitor code
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- queuing to userspace for the bridge family, using nftables
- From: stéphane bryant <stephane.ml.bryant@xxxxxxxxx>
- Re: bridge: Do not compile options in br_parse_ip_options
- From: David Miller <davem@xxxxxxxxxxxxx>
- Re: [PATCH 0/9] Netfilter/IPVS updates for net-next
- From: David Miller <davem@xxxxxxxxxxxxx>
- Re: bridge: Respect call-iptables sysctls everywhere
- From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
- Re: bridge: Respect call-iptables sysctls everywhere
- From: Florian Westphal <fw@xxxxxxxxx>
- bridge: Save frag_max_size between PRE_ROUTING and POST_ROUTING
- From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
- bridge: Respect call-iptables sysctls everywhere
- From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
- Re: bridge: Do not compile options in br_parse_ip_options
- From: Florian Westphal <fw@xxxxxxxxx>
- bridge: Do not compile options in br_parse_ip_options
- From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
- [PATCHv2 lnfct] qa: build unshared nfct environment
- From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
- Re: [PATCH nf next 0/3] bridge: netfilter: fix handling of ipv4 packets w. options
- From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
- Re: [PATCH nf next 0/3] bridge: netfilter: fix handling of ipv4 packets w. options
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf next 0/3] bridge: netfilter: fix handling of ipv4 packets w. options
- From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
- [PATCH nf next 0/3] bridge: netfilter: fix handling of ipv4 packets w. options
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 3/3] netfilter: bridge: don't mangle ipv4 header options
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf next 1/3] bridge: prepend inet_skb_param dummy to bridge cb
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf next 2/3] netfilter: bridge: don't parse ip headers in fwd and output path
- From: Florian Westphal <fw@xxxxxxxxx>
- [libnftnl PATCH 2/2] src: internal set id allocation from nft_ruleset_parse*()
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [libnftnl PATCH 1/2] ruleset: add the set_id to the parsed sets
- From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
- [PATCH 5/9] netfilter: nft_compat: remove incomplete 32/64 bits arch compat code
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 6/9] netfilter: nf_tables: allow to filter from prerouting and postrouting
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 7/9] netfilter: explicit module dependency between br_netfilter and physdev
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 9/9] netfilter: nft_masq: register/unregister notifiers on module init/exit
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 8/9] ipvs: Clean up comment style in ip_vs.h
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/9] netfilter: move nf_send_resetX() code to nf_reject_ipvX modules
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 3/9] netfilter: use IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 4/9] netfilter: nf_tables: wait for call_rcu completion on module removal
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/9] netfilter: nft_reject: introduce icmp code abstraction for inet and bridge
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 0/9] Netfilter/IPVS updates for net-next
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- How to generate statistics for a TCP flow using netfilter conntrack?
- From: Phuong Cao <phuong.m.cao@xxxxxxxxx>
- Re: [nf-next PATCH] netfilter: nft_masq: fix register/unregister notifier on module _init and _exit
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 2/2] src: add masquerade support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nft PATCH 2/2] src: add masquerade support
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nft PATCH 1/2] src: add nat persistent and random options
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [nf-next PATCH] netfilter: nft_masq: fix register/unregister notifier on module _init and _exit
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [libnftnl PATCH 3/3] tests: also test nat's flags attribute
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH 2/3] tests: add tests for the masq expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH 1/3] expr: masq: optional printing of flags attr in snprintf_default
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/1] bridge: Fix NAT66ed IPv6 packets not being bridged correctly
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] ipvs: Clean up comment style in ip_vs.h
- From: Simon Horman <horms@xxxxxxxxxxxx>
- Re: [PATCH] ipvs: Clean up comment style in ip_vs.h
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2] netfilter: explicit module dependency between br_netfilter and physdev
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v2] netfilter: explicit module dependency between br_netfilter and physdev
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Migrating an established TCP connection to a different port
- From: Anuradha Ratnaweera <anuradha@xxxxxxxxxxxxx>
- [libnftnl PATCH 3/3] tests: also test nat's flags attribute
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [libnftnl PATCH 2/3] tests: add tests for the masq expression
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- [libnftnl PATCH 1/3] expr: masq: optional printing of flags attr in snprintf_default
- From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
- Re: [PATCH] netfilter: explicit module dependency between br_netfilter and physdev
- From: Patrick McHardy <kaber@xxxxxxxxx>
- Re: [PATCH] netfilter: explicit module dependency between br_netfilter and physdev
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 4/4] netfilter: nf_tables: allow to filter from prerouting and postrouting
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 3/4] netfilter: nft_compat: remove incomplete 32/64 bits arch compat code
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/4] netfilter: nf_tables: wait for call_rcu completion on module removal
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 1/4] netfilter: use IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] netfilter: explicit module dependency between br_netfilter and physdev
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nft PATCH] build: allow disabling libreadline-support
- From: Steven Barth <cyrus@xxxxxxxxxxx>
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite News]
[Samba]