Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH 4/5] netfilter: nft_hash: restore struct nft_hash
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/5] netfilter: nft_hash: restore struct nft_hash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/5] netfilter: nft_hash: restore struct nft_hash
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nft_meta: use raw_smp_processor_id()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_tables: nft_queue does not depend on x_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2 -next] netfilter: Use LOGLEVEL_<FOO> defines
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/5] netfilter: nft_hash: restore struct nft_hash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/5] netfilter: nf_tables: move struct net pointer to base chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2] ipvs: disable inline net_ipvs function with CONFIG_IP_VS not being set
  • From: Rafał Miłecki <zajec5@xxxxxxxxx>
• Re: [PATCH V2] ipvs: disable inline net_ipvs function with CONFIG_IP_VS not being set
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH V2] ipvs: disable inline net_ipvs function with CONFIG_IP_VS not being set
  • From: Rafał Miłecki <zajec5@xxxxxxxxx>
• Re: [PATCH] ipvs: fix header inline net_ipvs function to work without CONFIG_IP_VS
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH] ipvs: fix header inline net_ipvs function to work without CONFIG_IP_VS
  • From: Rafał Miłecki <zajec5@xxxxxxxxx>
• Re: [PATCH] nft-test: don't use colors if output is not a tty
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCHv3 4/4] netfilter: bridge: rename br_parse_ip_options
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/2] netfilter: nft_meta: use raw_smp_processor_id()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/2] netfilter: nf_tables: nft_queue does not depend on x_tables
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCHv3 4/4] netfilter: bridge: rename br_parse_ip_options
  • From: Bernhard Thaler <bernhard.thaler@xxxxxxxx>
• [PATCH] nft-test: don't use colors if output is not a tty
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH V2 4/4] Add --and-mark and --or-mark
  • From: Zhang Chunyu <zhangcy@xxxxxxxxxxxxxx>
• [PATCH V2 2/4] Add MARK target for arptables
  • From: Zhang Chunyu <zhangcy@xxxxxxxxxxxxxx>
• [PATCH V2 3/4] Update the manpage for MARK target
  • From: Zhang Chunyu <zhangcy@xxxxxxxxxxxxxx>
• [PATCH V2 1/4] Add revision field for xt_entry_target
  • From: Zhang Chunyu <zhangcy@xxxxxxxxxxxxxx>
• [PATCH V2 0/4] add mark target for arptables
  • From: Zhang Chunyu <zhangcy@xxxxxxxxxxxxxx>
• Re: #include <net/ip_vs.h> without CONFIG_IP_VS (error: 'struct net' has no member named 'ipvs')
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• #include <net/ip_vs.h> without CONFIG_IP_VS (error: 'struct net' has no member named 'ipvs')
  • From: Rafał Miłecki <zajec5@xxxxxxxxx>
• Re: [PATCH nf-next 0/2] xt_cgroups fix
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/2] xt_cgroups fix
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: x_tables: refactor lookup helpers from xt_socket
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: x_tables: fix cgroup's NF_INET_LOCAL_IN sk lookups
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH nf-next 0/2] xt_cgroups fix
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCHv2 4/4] netfilter: bridge: rename br_parse_ip_options and delete unneeded code
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/8] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nft] set_elem: convert flag value to inclusive-OR binops during delinearize
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCHv2 4/4] netfilter: bridge: rename br_parse_ip_options and delete unneeded code
  • From: Bernhard Thaler <bernhard.thaler@xxxxxxxx>
• Re: [PATCH 0/2] netfilter: preparatory patches for set extensions
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH V2 -next] netfilter: Use LOGLEVEL_<FOO> defines
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Laurent Bercot <ska-devel@xxxxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Laurent Bercot <ska-devel@xxxxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Laurent Bercot <ska-devel@xxxxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Laurent Bercot <ska-devel@xxxxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/4] netfilter: bridge: rename br_parse_ip_options and delete unneeded code
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCHv2 1/4] bridge: detect NAT66 correctly and change MAC address
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2 1/4] bridge: detect NAT66 correctly and change MAC address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] src: restore static array with expression operations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH libnftnl] src: restore static array with expression operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/8] netfilter: nf_tables: consolidate error path of nf_tables_newtable()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/8] netfilter: bridge: query conntrack about skb dnat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/8] netfilter: bridge: kill nf_bridge_pad
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/8] netfilter: nf_tables: reject NFT_SET_ELEM_INTERVAL_END flag for non-interval sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/8] netfilter: nft_rbtree: fix locking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: ip6t_REJECT: check for IP6T_F_PROTO
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: bridge: remove BRNF_STATE_BRIDGED flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/8] netfilter: Remove uses of seq_<foo> return values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/8] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Strange behaviour when adding rules with libiptc
  • From: Юрий Пухальский <aikipooh@xxxxxxxxx>
• Re: [PATCH 0/6] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: nft 0.4, crash on list
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nft 0.4, crash on list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/5] netfilter: nf_tables: assorted patches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: bridge: kill nf_bridge_pad
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: restore rule tracing via nfnetlink_log
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] netfilter: xt_TPROXY: fix invflags check in tproxy_tg6_check()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/6] netfilter: Fix potential crash in nft_hash walker
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: nf_tables: allow to change chain policy without hook if it exists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/6] netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/6] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] rhashtable: provide len to obj_hashfn
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: nft 0.4, crash on list
  • From: Denys Fedoryshchenko <nuclearcat@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2] rhashtable: provide len to obj_hashfn
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/2] rhashtable: provide len to obj_hashfn
  • From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
• Re: nft 0.4, crash on list
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/2] netfilter: preparatory patches for set extensions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/2] rhashtable: provide len to obj_hashfn
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/2] rhashtable: provide len to obj_hashfn
  • From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/2] netfilter: preparatory patches for set extensions
  • From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ip6t_REJECT: check for IP6T_F_PROTO
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• 11th Netfilter Workshop coming up soon
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: ip6t_REJECT: check for IP6T_F_PROTO
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf] netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] add systemd service file
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] netfilter: nft_hash: convert to use rhashtable callbacks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/2] rhashtable: provide len to obj_hashfn
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/2] netfilter: preparatory patches for set extensions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 5/5] netfilter: nft_hash: indent rhashtable parameters
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/5] netfilter: nft_hash: restore struct nft_hash
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/5] netfilter: nf_tables: reject NFT_SET_ELEM_INTERVAL_END flag for non-interval sets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/5] netfilter: nf_tables: move struct net pointer to base chain
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/5] netfilter: nft_rbtree: fix locking
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/5] netfilter: nf_tables: assorted patches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf] netfilter: xt_TPROXY: fix invflags check in tproxy_tg6_check()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] add systemd service file
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH nf] netfilter: restore rule tracing via nfnetlink_log
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] add systemd service file
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH v2] add systemd service file
  • From: Jörg Thalheim <joerg@xxxxxxxxxxxxx>
• [PATCH v2] add systemd service file
  • From: Jörg Thalheim <joerg@xxxxxxxxxxxxx>
• [PATCH V2] Add element count to hash headers
  • From: Eric B Munson <emunson@xxxxxxxxxx>
• Re: [PATCH RESEND] Add element count to hash headers
  • From: Eric B Munson <emunson@xxxxxxxxxx>
• Re: [nft PATCH] rule: fix chain details align indentations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] rule: fix chain details align indentations
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft PATCH v2] rule: delete extra space in rule indentation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/4] netfilter: bridge: rename br_parse_ip_options and delete unneeded code
  • From: Bernhard Thaler <bernhard.thaler@xxxxxxxx>
• [PATCH 3/4] netfilter: bridge: add mtu size reduction to ip6_fragment()
  • From: Bernhard Thaler <bernhard.thaler@xxxxxxxx>
• [PATCH 2/4] bridge: forward IPv6 fragmented packets when passing netfilter
  • From: Bernhard Thaler <bernhard.thaler@xxxxxxxx>
• [PATCHv2 1/4] bridge: detect NAT66 correctly and change MAC address
  • From: Bernhard Thaler <bernhard.thaler@xxxxxxxx>
• Re: Can't link C++ program to libipset
  • From: Pavel Odintsov <pavel.odintsov@xxxxxxxxx>
• Re: Can't link C++ program to libipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset: Proposed improvements to the kernel code
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: bridge: kill nf_bridge_pad
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2] rule: delete extra space in rule indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink: fix crash when adding new non-base chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: Remove uses of seq_<foo> return values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Can't link C++ program to libipset
  • From: Pavel Odintsov <pavel.odintsov@xxxxxxxxx>
• Re: Can't link C++ program to libipset
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Can't link C++ program to libipset
  • From: Pavel Odintsov <pavel.odintsov@xxxxxxxxx>
• Can't link C++ program to libipset
  • From: Pavel Odintsov <pavel.odintsov@xxxxxxxxx>
• [nft PATCH v2] rule: delete extra space in rule indentation
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: Re: [PATCH 1/3] Add revision field for xt_entry_target
  • From: "Zhang, Chunyu" <zhangcy@xxxxxxxxxxxxxx>
• Re: [nft PATCH] rule: delete extra space in rule indentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Re: [PATCH 1/3] Add revision field for xt_entry_target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Re: [PATCH 1/3] Add revision field for xt_entry_target
  • From: "Zhang, Chunyu" <zhangcy@xxxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: consolidate error path of nf_tables_newtable()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] Add revision field for xt_entry_target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] Add revision field for xt_entry_target
  • From: "Zhang, Chunyu" <zhangcy@xxxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next 1/6] net: untangle ip_fragment and bridge netfilter
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [nft PATCH] rule: delete extra space in rule indentation
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH v2 nf-next 1/6] net: untangle ip_fragment and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ipset: Proposed improvements to the kernel code
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• Re: [PATCH v2 nf-next 1/6] net: untangle ip_fragment and bridge netfilter
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: missing break; in str2hooknum()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Use stdlib uint* instead of u_int*
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v2] src: allow to specify the default policy for base chains
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset: Proposed improvements to the kernel code
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset: Proposed improvements to the kernel code
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• Re: [PATCH nft 2/3] parser: allow to reorder chain options
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: allow to change chain policy without hook if it exists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset: Proposed improvements to the kernel code
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nft 2/3] parser: allow to reorder chain options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/3] parser: allow to reorder chain options
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft 3/3] src: allow to specify the default policy for base chains
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] src: expose table flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] parser: allow to reorder chain options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/3] parser: Add operation not supported error message
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/3] rule: export the ruleset using the new node "add"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next 1/6] net: untangle ip_fragment and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] Use stdlib uint* instead of u_int*
  • From: Nathan McSween <nwmcsween@xxxxxxxxx>
• [PATCH] Use stdlib uint* instead of u_int*
  • From: Nathan McSween <nwmcsween@xxxxxxxxx>
• Re: ipset: Proposed improvements to the kernel code
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• Re: [PATCH v2 nf-next 1/6] net: untangle ip_fragment and bridge netfilter
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next 1/6] net: untangle ip_fragment and bridge netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next,resend] netfilter: bridge: remove BRNF_STATE_BRIDGED flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next v2] netfilter: bridge: query conntrack about skb dnat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables at scale
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: netfilter: ipset: Properly calculate extensions offsets and total length
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset: Proposed improvements to the kernel code
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH net-next] netfilter: Remove uses of seq_<foo> return values
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH] libxt_tcp: manpage correction
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] libxt_tcp: manpage correction
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• netfilter: ipset: Reset flags on private copy on set resize
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• [libnftnl PATCH 1/3] parser: Add operation not supported error message
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [nft PATCH 3/3 v5] src: add import command
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [nft PATCH 2/3] rule: export the ruleset using the new node "add"
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• ipset: small series of fixes
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• netfilter: ipset: Remove expired entries on set resize
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• netfilter: ipset: Destroy extensions before moving non-last entry
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• ipset: Proposed improvements to the kernel code
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• netfilter: ipset: Fix double free of comment string when adding element
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• netfilter: ipset: Properly calculate extensions offsets and total length
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• netfilter: ipset: Use first timed out entry when no matching entry exists
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• Re: [PATCH 4/4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Using kernel ip_tables headers in C++
  • From: Philipp Kerling <philipp.kerling@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipset: propose rewording in manpage
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 4/4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Richard Weinberger <richard@xxxxxx>
• Re: [PATCH 4/4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Richard Weinberger <richard@xxxxxx>
• Re: [PATCH lnf-ct 0/2] add mark event filter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 3/4] netfilter: Fix portid types
  • From: Richard Weinberger <richard@xxxxxx>
• Re: [PATCH lnf-ct 0/2] add mark event filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/4] netfilter: Fix portid types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/4] netlink: Fix portid type in netlink_notify
  • From: Richard Weinberger <richard@xxxxxx>
• net: portid signedness and format string fixes
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 4/4] netfilter: Fix format string of nfnetlink_queue proc file
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 3/4] netfilter: Fix portid types
  • From: Richard Weinberger <richard@xxxxxx>
• [PATCH 2/4] nfc: Fix portid type in urelease_work
  • From: Richard Weinberger <richard@xxxxxx>
• Re: [iptables PATCH 2/2] ebtables-compat: fix rule deleting with -D in rules with no target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 1/2] ebtables-compat: add a bridge-specific exit_error function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] ebtables-compat: add support for limit extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: Fix potential crash in nft_hash walker
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ipset: propose rewording in manpage
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH v2 nf-next 1/6] net: untangle ip_fragment and bridge netfilter
  • From: Andy Zhou <azhou@xxxxxxxxxx>
• [PATCH lnf-ct 2/2] qa: add test for mark event filter
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH lnf-ct 1/2] conntrack: add mark event filter
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH lnf-ct 0/2] add mark event filter
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH v2 nf-next 3/6] netfilter: bridge: use skb->cb to track otherhost mangling
  • From: Oliver Hartkopp <socketcan@xxxxxxxxxxxx>
• Re: [PATCH v2 nf-next 3/6] netfilter: bridge: use skb->cb to track otherhost mangling
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 nf-next 3/6] netfilter: bridge: use skb->cb to track otherhost mangling
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 nf-next 3/6] netfilter: bridge: use skb->cb to track otherhost mangling
  • From: Oliver Hartkopp <socketcan@xxxxxxxxxxxx>
• [PATCH v2 nf-next 3/6] netfilter: bridge: use skb->cb to track otherhost mangling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 2/6] netfilter: bridge: don't use nf_bridge_info to store mac header
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 4/6] netfilter: bridge: don't use nf_bridge_info to store proto value
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 5/6] netfilter: bridge: replace remaining flags with state enum
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 6/6] netfilter: bridge: don't use nf_bridge storage during neigh resolution
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 1/6] net: untangle ip_fragment and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf-next 0/6] more bridge netfilter refactoring
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH 2/2 v4] src: add import command
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH 1/2 v2] ruleset: add nft_ruleset_ctx_free
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [PATCH] netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
  • From: Ian Wilson <iwilson@xxxxxxxxxxx>
• [PATCH 02/22] netfilter: %pF is only for function pointers
  • From: Scott Wood <scottwood@xxxxxxxxxxxxx>
• RE: iptables at scale
  • From: Glen Miner <shaggie76@xxxxxxxxxxx>
• RE: iptables at scale
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• RE: iptables at scale
  • From: Glen Miner <shaggie76@xxxxxxxxxxx>
• Re: [PATCH] netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
  • From: Stephen Hemminger <shemming@xxxxxxxxxxx>
• [PATCH] netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
  • From: Ian Wilson <iwilson@xxxxxxxxxxx>
• RE: iptables at scale
  • From: Glen Miner <shaggie76@xxxxxxxxxxx>
• Re: iptables at scale
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH RESEND] Add element count to hash headers
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• iptables at scale
  • From: Glen Miner <shaggie76@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: make ip_set_get_ip*_port to use skb_network_offset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [iptables PATCH 2/2] ebtables-compat: fix rule deleting with -D in rules with no target
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [iptables PATCH 1/2] ebtables-compat: add a bridge-specific exit_error function
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [iptables PATCH] ebtables-compat: add support for limit extension
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 43/45] include/uapi/linux/netfilter_bridge.h: include if.h
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• Re: [PATCH nf-next] netfilter: bridge: use rcu hook to resolve br_netfilter dependency
  • From: Simon Horman <simon.horman@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 2/2] src: add import command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 2/2] src: add import command
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [nft PATCH v3 2/2] src: add import command
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [PATCH 0/2] Netfilter fixes for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [nft PATCH] src: add tee statement support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/2] netfilter: fix sparse warnings in reject handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] Netfilter fixes for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: bridge: use rcu hook to resolve br_netfilter dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH next] netfilter: fix sparse warnings in reject handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] src: add tee statement support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft PATCH] src: add tee statement support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: bridge: use rcu hook to resolve br_netfilter dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 2/2] src: add import command
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft PATCH] src: add tee statement support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft PATCH v3 2/2] src: add import command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/2] src: add nft_ruleset_ctx_free
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v3 2/2] src: add import command
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH 1/2] src: add nft_ruleset_ctx_free
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [PATCH 12/12] netfilter: bridge: move DNAT helper to br_netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -next,resend] netfilter: bridge: remove BRNF_STATE_BRIDGED flag
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 12/12] netfilter: bridge: move DNAT helper to br_netfilter
  • From: Simon Horman <simon.horman@xxxxxxxxxxxxx>
• [PATCH -next v2] netfilter: bridge: query conntrack about skb dnat
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH next] netfilter: fix sparse warnings in reject handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 00/12] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxx>
• [nft PATCH] src: add tee statement support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: David Miller <davem@xxxxxxxxxx>
• Re: [PATCH RESEND] Add element count to hash headers
  • From: Eric B Munson <emunson@xxxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: David Miller <davem@xxxxxxxxxx>
• [PATCH 01/12] netfilter: reject: don't send icmp error if csum is invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/12] netfilter: ipt_CLUSTERIP: deprecate it in favour of xt_cluster
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/12] netfilter: nf_tables: minor tracing cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/12] netfilter: bridge: rework reject handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/12] netfilter: nf_tables: cleanup nf_tables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/12] netfilter: nf_tables: consolidate tracing invocations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/12] netfilter: nf_tables: limit maximum table name length to 32 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: bridge: refactor conditional in br_nf_dev_queue_xmit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: bridge: move DNAT helper to br_netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/12] netfilter: bridge: move nf_bridge_update_protocol to where its used
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/12] bridge: move mac header copying into br_netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/12] netfilter: nf_tables: consolidate Kconfig options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/12] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND] Add element count to hash headers
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: don't output error message redundantly
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: don't output error message redundantly
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: ipset: make ip_set_get_ip*_port to use skb_network_offset
  • From: Alexander Drozdov <al.drozdov@xxxxxxxxx>
• Re: Unique items
  • From: "Ceraon Co.,Ltd" <info@xxxxxxxxxxx>
• Re: [PATCH 0/7] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Help with appending data to packets and the best way to create a message nonce for cryptography
  • From: Sebastian Gomez <segomez@xxxxxxxxxx>
• Re: [PATCH 0/3] netfilter: nf_tables cleanups
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/3] netfilter: nf_tables cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v10] example: : add nft-ruleset-parse-file.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 2/2] arptables-compat: delete extra space in target printing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 1/2] arptables-compat: add support for the CLASSIFY target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] ebtables-compat: support nflog extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: nf_tables: fix transaction race condition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/7] ipvs: add missing ip_vs_pe_put in sync code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] netfilter: nft_compat: don't truncate ethernet protocol type to u8
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] netfilter: nf_tables: check for overflow of rule dlen field
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] netfilter: nf_tables: fix error handling of rule replacement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] netfilter: nf_tables: fix userdata length overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/7] netfilter: nf_tables: fix addition/deletion of elements from commit/abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/3] netfilter: nf_tables fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v2 2/2] arptables-compat: delete extra space in target printing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [iptables PATCH v2 1/2] arptables-compat: add support for the CLASSIFY target
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: limit maximum table name length to 32 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: limit maximum table name length to 32 bytes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: limit maximum table name length to 32 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: limit maximum table name length to 32 bytes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH net-next] netfilter: nf_tables: limit maximum table name length to 32 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: consolidate Kconfig options
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH net-next] netfilter: nf_tables: consolidate Kconfig options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/8] netfilter: bridge: move nf_bridge_update_protocol to where its used
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/8] bridge: move mac header copying into br_netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/8] netfilter: brige: move DNAT helper to where its used
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 7/8] netfilter: bridge: don't use nf_bridge_info data to store mac header
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/8] netfilter: bridge: refactor conditional in br_nf_dev_queue_xmit
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 8/8] netfilter: bridge: rename nf_bridge_info->data to dnat_orig_mac
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 6/8] netfilter: bridge: query conntrack about skb dnat
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 5/8] net: untangle ip_fragment and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it.
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] netfilter: nf_tables: fix transaction race condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/3] netfilter: nf_tables: fix transaction race condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/3] netfilter: nf_tables: fix transaction race condition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] netfilter: nf_tables: fix transaction race condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/3] netfilter: nf_tables: fix transaction race condition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] arptables-compat: add support for the CLASSIFY target
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 1/3] netfilter: nf_tables: fix transaction race condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/3] netfilter: nf_tables: fix transaction race condition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND] Add element count to hash headers
  • From: Eric B Munson <emunson@xxxxxxxxxx>
• Re: [PATCH RESEND] Add element count to hash headers
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 2/3] netfilter: nf_tables: consolidate tracing invocations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/3] netfilter: nf_tables: cleanup nf_tables.h
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/3] netfilter: nf_tables: minor tracing cleanups
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/3] netfilter: nf_tables cleanups
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/3] netfilter: nf_tables: fix userdata length overflow
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/3] netfilter: nf_tables: fix transaction race condition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/3] netfilter: nf_tables fixes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [iptables PATCH] ebtables-compat: support nflog extension
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it.
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [PATCH -next] netfilter: bridge: rework reject handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2] src: add import command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] ruleset: crash in path error when we build the xml tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v2] src: add import command
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it.
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [PATCH 0/5] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [libnftnl PATCH v10] example: : add nft-ruleset-parse-file.
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH v2] ruleset: crash in path error when we build the xml tree
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [PATCH nf-next v3] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next v2] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: ipt_CLUSTERIP: deprecate it in favour of xt_cluster
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables transaction semantics
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nftables transaction semantics
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables transaction semantics
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables transaction semantics
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables transaction semantics
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/5] ipvs: use 64-bit rates in stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: Don't hide NETFILTER_XT_MATCH_ADDRTYPE behind NETFILTER_ADVANCED
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/5] netfilter: ipset: fix boolreturn.cocci warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL nf-next] IPVS Enhancements for v4.1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5] netfilter: nft_compat: add support for arptables extensions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/5] ipvs: allow rescheduling of new connections when port reuse is detected
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/5] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_compat: add support for arptables extensions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Add kernel headers needed from v3.16
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] header: use sysconf() instead of getpagesize()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC] nft trace
  • From: Markus Koetter <koetter@xxxxxxxxxxxxxxxxxxxx>
• [PATCH nf-next] ipvs: allow rescheduling of new connections when port reuse is detected
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next] IPVS Enhancements for v4.1
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• NFLOG and Namespaces
  • From: nfnty <arch@xxxxxxxx>
• Re: [RFC] nft trace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nfnetlink_log and trace problems [was Re: [RFC] nft trace]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC] nft trace
  • From: Markus Kötter <koetter@xxxxxxxxxxxxxxxxxxxx>
• [PATCH] Add kernel headers needed from v3.16
  • From: Pedro Alvarez <pedro.alvarez@xxxxxxxxxxxxxxx>
• [PATCHv3] ebtables: Add kernel headers needed from v3.16
  • From: Pedro Alvarez <pedro.alvarez@xxxxxxxxxxxxxxx>
• Re: [PATCHv2] ebtables: Cache a copy of the v3.16 kernel headers in the ebtables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv2] ebtables: Cache a copy of the v3.16 kernel headers in the ebtables tree
  • From: Pedro Alvarez <pedro.alvarez@xxxxxxxxxxxxxxx>
• Re: [PATCH] ebtables: Cache a copy of the v3.16 kernel headers in the ebtables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ebtables: Cache a copy of the v3.16 kernel headers in the ebtables tree
  • From: Pedro Alvarez <pedro.alvarez@xxxxxxxxxxxxxxx>
• [bug report] ct_sip_parse_numerical_param() error handling
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• [PATCH] header: use sysconf() instead of getpagesize()
  • From: Markus Teich <markus.teich@xxxxxxxxxxxxx>
• Re: [libmnl] portability of getpagesize() in libmnl.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/3] netlink_delinearize: fix postprocessing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [nft PATCH 2/3] regression: add test on counter related issue
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH 0/3] fix a delinearization issue
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH 1/3] regression: fix typo in README
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH 3/3] netlink_delinearize: fix postprocessing
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [libmnl] portability of getpagesize() in libmnl.h
  • From: Markus Teich <teichm@xxxxxxxxx>
• Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] main: display errors through stderr
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft v2] main: display errors through stderr
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: nft_compat: don't truncate ethernet protocol type to u8
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: josh@xxxxxxxxxxxxxxxx
• Re: [GIT PULL] Second Round of IPVS Fixes for v3.20
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] main: display errors through stderr
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: josh@xxxxxxxxxxxxxxxx
• [PATCH nft v2] main: display errors through stderr
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v4 1/2] nft_hash: define max_shift rhashtable parameter
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/2] src: complete meta priority support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft 2/2] main: display errors and debugging through stderr
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v4 0/2] nft hash resize fixes
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v4 1/2] nft_hash: define max_shift rhashtable parameter
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v4 2/2] rhashtable: require max_shift if grow_decision defined
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH nft 2/2] main: display errors and debugging through stderr
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: complete meta priority support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH v3 0/2] nft hash resize fixes
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: [PATCH v3 0/2] nft hash resize fixes
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH v3 0/2] nft hash resize fixes
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v3 2/2] nft_hash: define max_shift rhashtable parameter
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v3 1/2] rhashtable: require max_shift if grow_decision defined
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2 2/2] nft_hash: define max_shift rhashtable parameter
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2 2/2] nft_hash: define max_shift rhashtable parameter
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v2 0/2] nft hash resize fixes
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v2 2/2] nft_hash: define max_shift rhashtable parameter
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v3] ruleset: fix crash if we free sets included in the set_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] ruleset: crash in path error when we build the xml tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_conntrack API is not working
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• libnetfilter_conntrack API is not working
  • From: Sourabh Rudrawar <sourabh.rudrawar@xxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• RE: Ottawa and slow hash-table resize
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Thomas Graf <tgraf@xxxxxxx>
• [libnftnl PATCH] ruleset: crash in path error when we build the xml tree
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH v3] ruleset: fix crash if we free sets included in the set_list
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: Ottawa and slow hash-table resize
  • From: josh@xxxxxxxxxxxxxxxx
• Ottawa and slow hash-table resize
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: [iptables PATCH] libxt_quota: fix _save() invert syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] libxt_quota: fix _save() invert syntax
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [GIT PULL] Second Round of IPVS Fixes for v3.20
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] ipvs: add missing ip_vs_pe_put in sync code
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH v2] net: Remove state argument from skb_find_text()
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH v3] netfilter: nft_compat: don't truncate ethernet protocol type to u8
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/4] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] net: Remove state argument from skb_find_text()
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v2] iptables-compat: unset context flags in netlink delinearize step
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] tests: regression: any/meta: revisit meta tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] tests: regression: any/meta: revisit meta tests
  • From: Ana Rey Botello <anarey@xxxxxxxxx>
• [PATCH 4/4] netfilter: xt_socket: fix a stack corruption bug
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/4] ipvs: fix inability to remove a mixed-family RS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: xt_recent: don't reject rule if new hitcount exceeds table max
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: nft_compat: fix module refcount underflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/4] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables: add more test cases and minor bug fixes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/7] extensions: remove MIRROR
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables: add more test cases and minor bug fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 7/7] extensions: libip6t_dst: make inversion work
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 7/7] extensions: libip6t_dst: make inversion work
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/7] extensions: remove MIRROR
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 7/7] extensions: libip6t_dst: make inversion work
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 1/7] extensions: remove MIRROR
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 7/7] extensions: libip6t_dst: make inversion work
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 6/7] extensions/libxt_recent.t: add test case for 3.19 regression
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 4/7] extensions: add more test cases for iptables-test.py
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 5/7] extensions: SNPT,DNPT: fix save/print output
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/7] extensions: remove 'unclean' match
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/7] extensions: remove SAME target
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/7] extensions: remove MIRROR
  • From: Florian Westphal <fw@xxxxxxxxx>
• iptables: add more test cases and minor bug fixes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] net: Remove state argument from skb_find_text()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_compat: fix sparse warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrackd refuses to work on interface with '_' in it's name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: xt_socket: fix a stack corruption bug
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_recent: don't reject rule if new hitcount exceeds table max
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v9] example: Parse and create netlink message using the new parsing functions.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] iptables-compat: unset context flags in netlink delinearize step
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables-compat: unset context flags in netlink delinearize step
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] arpt-compat: mangle extension support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND] Add element count to bitmap and hash headers
  • From: Eric B Munson <emunson@xxxxxxxxxx>
• [PATCH RESEND] Add element count to hash headers
  • From: Eric B Munson <emunson@xxxxxxxxxx>
• nft & notrack
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: [PATCH RESEND] Add element count to bitmap and hash headers
  • From: Eric B Munson <emunson@xxxxxxxxxx>
• almost(?) hole in nf_conntrack_sip
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• Re: [v4 nf 0/5] Named counter objects support in nft
  • From: Ana Rey <ana@xxxxxxxxx>
• Re: [PATCH RESEND] Add element count to bitmap and hash headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: nf_tables: don't uninitialize element from core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nf_tables: fix refcount leak when jump to chain is used
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] rule: fix object ordering via nft -f
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: Remove uses of return value of seq_printf/puts/putc
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: Remove uses of return value of seq_printf/puts/putc
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: conntrackd refuses to work on interface with '_' in it's name
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Re: [PATCH RESEND] Add element count to bitmap and hash headers
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH libnftnl] src: split internal.h is smaller files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [v4 nf 0/5] Named counter objects support in nft
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RESEND] Add element count to bitmap and hash headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RESEND] Add element count to bitmap and hash headers
  • From: Eric B Munson <emunson@xxxxxxxxxx>
• Re: [libnftnl PATCH v2] ruleset: fix crash if we free sets included in the set_list
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [libnftnl PATCH v2] ruleset: fix crash if we free sets included in the set_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] ruleset: fix crash if we free sets included in the set_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH v2] ruleset: fix crash if we free sets included in the set_list
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• conntrackd refuses to work on interface with '_' in it's name
  • From: AZ <ak47izatool@xxxxxxxxx>
• [PATCH net-next] netfilter: Remove uses of return value of seq_printf/puts/putc
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 43/45] include/uapi/linux/netfilter_bridge.h: include if.h
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 36/45] include/uapi/linux/netfilter.h: include in.h and in6.h
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• [PATCH 44/45] nf_conntrack_tuple_common.h: include linux/types.h and linux/netfilter.h
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• [PATCH 43/45] include/uapi/linux/netfilter_bridge.h: include if.h
  • From: Mikko Rapeli <mikko.rapeli@xxxxxx>
• [PATCH iptables] xtables-compat: remove unused fields from bridge and arp families
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] ruleset: fix crash if we free sets included in the set_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH v9] example: Parse and create netlink message using the new parsing functions.
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH] ruleset: fix crash if we free sets included in the set_list
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [PATCH -next] netfilter: bridge: rework reject handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] arpt-compat: mangle extension support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH] netfilter: nft_compat: add support for arptables extensions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH net] netfilter: xt_socket: fix a stack corruption bug
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: softlockups when trying to restore an nft set of 1M entries
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: softlockups when trying to restore an nft set of 1M entries
  • From: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
• Some help to fix 'ipac-ng', a iptables-based accounting software...
  • From: Marco Gaiarin <gaio@xxxxxxxxx>
• Re: [libnftnl PATCH v2] ruleset: fix a leak when we use the set lists
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [libnftnl PATCH v2] ruleset: fix a leak when we use the set lists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2] rule: don't release the tree parameter in the function nft_jansson_parse_rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: xt_recent: don't reject rule if new hitcount exceeds table max
  • From: Florian Westphal <fw@xxxxxxxxx>
• softlockups when trying to restore an nft set of 1M entries
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [arpt-compat PATCH] arptables-compat: add mangle target extension
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: xt_recent fails with kernel 3.19.0
  • From: Chris Vine <chris@xxxxxxxxxxxxxxxxxxxxx>
• Re: xt_recent fails with kernel 3.19.0
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: xt_recent fails with kernel 3.19.0
  • From: Chris Vine <chris@xxxxxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: nft_compat: fix module refcount underflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: nft_compat: fix sparse warning
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: xt_recent fails with kernel 3.19.0
  • From: Chris Vine <chris@xxxxxxxxxxxxxxxxxxxxx>
• Re: xt_recent fails with kernel 3.19.0
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_compat: fix sparse warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v2] ebtables-compat: parser cleanups
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_compat: fix sparse warning
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_compat: fix sparse warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] ebtables-compat: parser cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: xt_recent fails with kernel 3.19.0
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: xt_recent fails with kernel 3.19.0
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: xt_recent broken in kernel 3.19.0 + PATCH
  • From: Chris Vine <chris@xxxxxxxxxxxxxxxxxxxxx>
• Re: xt_recent fails with kernel 3.19.0
  • From: Chris Vine <chris@xxxxxxxxxxxxxxxxxxxxx>
• Re: xt_recent broken in kernel 3.19.0 + PATCH
  • From: Chris Vine <chris@xxxxxxxxxxxxxxxxxxxxx>
• Re: xt_recent fails with kernel 3.19.0
  • From: Chris Vine <chris@xxxxxxxxxxxxxxxxxxxxx>
• [iptables PATCH] ebtables-compat: parser cleanups
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: xt_recent broken in kernel 3.19.0 + PATCH
  • From: Chris Vine <chris@xxxxxxxxxxxxxxxxxxxxx>
• xt_recent fails with kernel 3.19.0
  • From: Chris Vine <chris@xxxxxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: nft_compat: fix sparse warning
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: xt_recent broken in kernel 3.19.0 + PATCH
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: xt_recent broken in kernel 3.19.0 + PATCH
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: [GIT PULL nf-next] IPVS Enhancements for v3.20
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 0/2] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [libnftnl PATCH v2] ruleset: fix a leak when we use the set lists
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH v2] rule: don't release the tree parameter in the function nft_jansson_parse_rule
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [libnftnl PATCH] rule: don't release the tree parameter in the function nft_jansson_parse_rule
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [RFC PATCH] src/expr: add new nft_tee expression
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC PATCH 2/2] netfilter: nf_tables: add nft_tee expression
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC PATCH 1/2] netfilter: refactor xt_TEE code
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [ANNOUNCE] 11th Netfilter Workshop in Budapest, Hungary
  • From: Pablo Neira Ayuso <pneira@xxxxx>
• Re: [PATCH 1/3] Add revision field for xt_entry_target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH next] netfilter: reject: don't send icmp error if packet has invalid checksum
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [ebtables-compat PATCH 1/2] ebtables-compat: add watchers support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Don't hide NETFILTER_XT_MATCH_ADDRTYPE behind NETFILTER_ADVANCED
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL nf-next] IPVS Enhancements for v3.20
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH next] netfilter: reject: don't send icmp error if packet has invalid checksum
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: ipset: fix boolreturn.cocci warnings
  • From: kbuild test robot <fengguang.wu@xxxxxxxxx>
• Re: [PATCH 2/3] Add MARK target for arptables
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [libnftnl PATCH] rule: don't release the tree parameter in the function nft_jansson_parse_rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] ruleset: fix a leak when we use the set lists
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] Add MARK target for arptables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] rhashtable: require max_shift definition
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: [PATCH 1/3] rhashtable: require max_shift definition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/3] rhashtable: require max_shift definition
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH 1/3] rhashtable: require max_shift definition
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [libnftnl PATCH] ruleset: fix a leak when we use the set lists
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH] rule: don't release the tree parameter in the function nft_jansson_parse_rule
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [nft PATCH] src: add import operation
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [PATCH 1/3] rhashtable: require max_shift definition
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• NetDev 0.1 online registration deadline Feb 12 (Thursday)
  • From: Richard Guy Briggs <rgb@xxxxxxxxxxxx>
• [nft PATCH] src: add import operation
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [PATCH 1/3] rhashtable: require max_shift definition
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH nf-next] ipvs: use 64-bit rates in stats
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next] IPVS Enhancements for v3.20
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [GIT PULL nf] IPVS Fixes for v3.20
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nft_compat: add ebtables support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: nft_lookup: add missing attribute validation for NFTA_LOOKUP_SET_ID
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL nf] IPVS Fixes for v3.20
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] rhashtable: require max_shift definition
  • From: Thomas Graf <tgraf@xxxxxxx>
• [PATCH 3/3] nft_hash: introduce init_size set parameter
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 0/3] nft hash set expansion fixes
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 2/3] nft_hash: define max_shift rhashtable param
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH 1/3] rhashtable: require max_shift definition
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [libnftnl PATCH 4/4 v8] test: update json/xml tests to the new syntax
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH 3/4 v8] example: Parse and create netlink message using the new parsing functions.
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH 2/4 v8] src: add support to import json/xml with the new command syntax
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH 1/4 v8] src: add command tag in json/xml export support
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH] buffer: fix a bug in nft_buf_close passing the tag to close the xml elements.
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: nft hash set expansion problem
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: nft hash set expansion problem
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: nft hash set expansion problem
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [ebtables-compat PATCH 2/2] ebtables-compat: add log watcher extension
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [ebtables-compat PATCH 1/2] ebtables-compat: add watchers support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [GIT PULL nf] IPVS Fixes for v3.20
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf] ipvs: fix inability to remove a mixed-family RS
  • From: Simon Horman <horms@xxxxxxxxxxxx>