Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH] ipset: Fix ethernet address parser
  • From: Janeks Jaunups <th3n3x@xxxxxxxxx>
• Re: [PATCH next] net: netfilter: add helper for adding nat extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: don't add null bindings if no nat requested
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• [PATCH next] net: netfilter: add helper for adding nat extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: ctnetlink: don't add null bindings if no nat requested
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt()
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt()
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] mnl: split talk() and recv() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] mnl: split talk() and recv() functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/8] nft event monitor
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] common: fix unconditional output of event wrapping stuff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipt_CLUSTERIP: Add network device notifier
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnetfilter_acct] src: fix broken output handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [ulogd PATCH 13/13] ipfix: add debug symbol for yafscii
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 11/13] nfct/ipfix: introduce new vendor id
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 10/13] nfct: fix ipfix field_id of flow.end.usec
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 9/13] ipfix: build headers with template
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 8/13] ipfix: print ipfix message
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 7/13] ipfix: decide whether prepending template by send times
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 6/13] ipfix: add function for ipfix message creation
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 5/13] ipfix: add functions for ipfix dataset creation
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 4/13] ipfix: some cleanups
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 3/13] ipfix: fix enterprise bit handling
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 2/13] ipfix: use nfct_bitmask
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libnetfilter_conntrack PATCH 1/13] conntrack: introduce clear and equal functions for bitmask object
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 0/13] make progress ulogd_output_IPFIX
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libnftnl PATCH] common: fix unconditional output of event wrapping stuff
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RESEND PATCH 1/2] Extend accounting capabilities to support quotas
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RESEND PATCH v2] netfilter: nfnetlink_acct: Adding quota support to accounting framework
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Iptables udp ports advice
  • From: Dmitry Korzhevin <dmitry.korzhevin@xxxxxxxxxx>
• Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RESEND PATCH v2] netfilter: nfnetlink_acct: Adding quota support to accounting framework
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• keepalived scripts
  • From: Paul Robert Marino <prmarino1@xxxxxxxxx>
• Re: tests/test-script.sh missing from 1.0.1 tar.bz2?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2 2/2] examples: nft-events: use new events wrappers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2 1/2] src: add flag to add event wrapping in output functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] examples: nft-events: add option how to format the printed events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: tests/test-script.sh missing from 1.0.1 tar.bz2?
  • From: Kevin Fenzi <kevin@xxxxxxxxx>
• Re: tests/test-script.sh missing from 1.0.1 tar.bz2?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• tests/test-script.sh missing from 1.0.1 tar.bz2?
  • From: Kevin Fenzi <kevin@xxxxxxxxx>
• Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH lnf-queue] src: PF_BIND/UNBIND is ignored in 3.8 and later
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH lnf-queue] src: PF_BIND/UNBIND is ignored in 3.8 and later
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH lnf-queue] src: PF_BIND/UNBIND is ignored in 3.8 and later
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [GIT PULL nf-next] IPVS Updates for v3.16
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [iptables PATCH] extensions: udp: add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/5] netfilter: Fix format string mismatch in nf_conntrack_sip_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/5] netfilter: Fix format string mismatch in nf_conntrack_irc_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/5] netfilter: Fix format string mismatch in _conntrack_tftp_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL nf-next] IPVS Updates for v3.16
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Luis Henriques <luis.henriques@xxxxxxxxxxxxx>
• Re: [PATCH 2/6] netlink: have netlink per-protocol bind function return an error code.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 1/2] Make column type for oob_protocol in mysql smallint(5)
  • From: Bob Hockney <zeus@xxxxxxxxxxxxx>
• [PATCH 2/2] Connection parameters other than connstring are ignored
  • From: Bob Hockney <zeus@xxxxxxxxxxxxx>
• [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
• Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
• Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 1/8 resend] ipfix: use nfct_bitmask
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd RFC PATCH 0/2 resend] introduce new string output plugin
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [ ulogd PATCH 0/2 ] two small fixes for ulogd
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: ipset suggestion, idle-timeout
  • From: Shannon Wynter <freman@xxxxxxxxxxx>
• [ ulogd PATCH 1/2 ] fix oob_protocol field for mysql
  • From: Bob Hockney <zeus@xxxxxxxxxxxxx>
• [ ulogd PATCH 2/2 ] fix to allow not using connstring parameter in pgsql plugin
  • From: Bob Hockney <zeus@xxxxxxxxxxxxx>
• [ ulogd PATCH 0/2 ] two small fixes for ulogd
  • From: Bob Hockney <zeus@xxxxxxxxxxxxx>
• Re: ipset suggestion, idle-timeout
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Luis Henriques <luis.henriques@xxxxxxxxxxxxx>
• Re: [ulogd RFC PATCH 0/2] introduce new string output plugin
  • From: Eric Leblond <eric@xxxxxxxxx>
• ipset suggestion, idle-timeout
  • From: Shannon Wynter <freman@xxxxxxxxxxx>
• [RESEND PATCH 2/2] nfacct: adding quota capabilities
  • From: mathieu.poirier@xxxxxxxxxx
• [RESEND PATCH 1/2] Extend accounting capabilities to support quotas
  • From: mathieu.poirier@xxxxxxxxxx
• [RESEND PATCH v2] netfilter: nfnetlink_acct: Adding quota support to accounting framework
  • From: mathieu.poirier@xxxxxxxxxx
• [PATCH nf-next] netfilter: Fix format string mismatch in ip_vs_proto_name()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next] IPVS Updates for v3.16
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: additional conntrack feature
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH 4/6] audit: add netlink audit protocol bind to check capabilities on multicast join
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH 1/6] netlink: simplify nfnetlink_bind
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH 5/6] audit: add netlink multicast group for log read
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH 2/6] netlink: have netlink per-protocol bind function return an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH 6/6] audit: send multicast messages only if there are listeners
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH 0/6] audit: implement multicast socket for journald
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH v2] xt_quota2: introduce support for network namespaces
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: ip_tables: limit match: invalid size 40 != 48
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] build: delete useless characters
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [ANNOUNCE]: Release of nftables 0.2
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v4] net: netfilter: LLVMLinux: vlais-netfilter
  • From: Behan Webster <behanw@xxxxxxxxxxxxxxxxxx>
• additional conntrack feature
  • From: Donovan <doohara@xxxxxxxxx>
• [ANNOUNCE] libnftnl 1.0.1 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] set-elem: fix a memory leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] lookup: Fix an invalid read
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 8/8] src: add events reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 8/8] src: add events reporting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] build: delete useless characters
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [nft PATCH v2 8/8] src: add events reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] build: delete useless characters
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] build: delete useless characters
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] build: delete useless characters
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• nftables v0.2 doesn't build with libnftnl v1.0.0
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [iptables PATCH] extensions: udp: add translation to nft
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH v2 2/2] examples: nft-events: use new events wrappers
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftnl PATCH v2 1/2] src: add flag to add event wrapping in output functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt()
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/2] src: add flag to add event wrapping in output functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/2] src: add flag to add event wrapping in output functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH 2/2] examples: nft-events: use new events wrappers
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftnl PATCH 1/2] src: add flag to add event wrapping in output functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnetfilter_conntrack PATCH 1/3 resend] conntrack: add mark event filter
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libnftnl PATCH] set-elem: fix a memory leak
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH] lookup: Fix an invalid read
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [libnftnl PATCH 1/2] common: add wrapper to represent events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH 2/2] examples: nft-events: use new events wrappers
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftnl PATCH 1/2] common: add wrapper to represent events
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftnl PATCH] set: add helper to get the first set_elem
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftnl PATCH] set: add helper to get the first set_elem
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] set: add helper to get the first set_elem
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [libnftnl PATCH] set: add helper to get the first set_elem
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [ANNOUNCE] ulogd 2.0.4 release
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH 0/3] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3] netfilter: nf_conntrack: initialize net.ct.generation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: nf_conntrack: flush net_gre->keymap_list only from gre helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ebtables printing of ipv6 masks
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: [libnftnl PATCH v2] target, match: Fix an invalid read
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd PATCH 2/3] add mark event filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnetfilter_conntrack PATCH 1/3] conntrack: add mark event filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5] meta: Add support for input and output bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH v4 0/5] Add suport for bridge if dev name meta expression keys
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nft PATCH 0/8] nft event monitor
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft PATCH 0/8] nft event monitor
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 8/8] src: add events reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [ANNOUNCE]: Release of nftables 0.2
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5] extensions: libxt_state: add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/5] nft: xtables: add the infrastructure to translate from iptables to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/5] extensions: libxt_tcp: add translation to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5] nft: xtables-restore: add generic parsing infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/5] nft: xtables: add generic parsing infrastructure to interpret commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH 0/5] translations from iptables to nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 8/8] src: add events reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 7/8] netlink: add socket error reporting helper function
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 6/8] netlink: refactorize set_elem conversion from netlink
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 5/8] netlink: add netlink_delinearize_table() func
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 4/8] netlink: add netlink_delinearize_chain() func
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 3/8] rule: generalize chain_print()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 2/8] netlink: add netlink_delinearize_set() func
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 0/8] nft event monitor
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH 1/8] rule: allow to print sets in plain format
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: cannot stat 'doc/nftables.8': No such file or directory
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: cannot stat 'doc/nftables.8': No such file or directory
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [libnftnl PATCH v2] target, match: Fix an invalid read
  • From: Ana Rey <anarey@xxxxxxxxx>
• cannot stat 'doc/nftables.8': No such file or directory
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [PATCH 0/2] netfilter: nf_tables: set selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] netfilter: nf_tables: set selection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [libnftnl PATCH] xml: json: Delete an immediatedate label in xml and json file.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] xml: json: Delete a cmpdata label in xml and json file.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] tests: Fix a memory leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2 0/2] New features in nft-parsing-test
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: initialize net.ct.generation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] netfilter: nf_tables: set selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables documentation update
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] datatypes: rename some types for more consistency
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netlink: fix length value of concat data
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/2] netfilter: nf_tables: set selection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] nfacct: adding quota capabilities
  • From: mathieu.poirier@xxxxxxxxxx
• [PATCH 1/2] Extend accounting capabilities to support quotas
  • From: mathieu.poirier@xxxxxxxxxx
• [PATCH v2] netfilter: nfnetlink_acct: Adding quota support to accounting framework
  • From: mathieu.poirier@xxxxxxxxxx
• Re: [libnftnl PATCH] target: Fix an invalid read.
  • From: Florian Westphal <fw@xxxxxxxxx>
• [libnftnl PATCH] tests: Fix a memory leak
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH] target: Fix an invalid read.
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: nftables data type names
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nftables data type names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables data type names
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: initialize net.ct.generation
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/1] netfilter: nf_tables: fix big endian problems
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 1/1] netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/1] netfilter: nf_tables: fix big endian problems
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nftables data type names
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nftables data type names
  • From: Florian Westphal <fw@xxxxxxxxx>
• nftables data type names
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft PATCH] expression: Fix inconsistent output in set
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] gmputil: use MSF/LSF in import/export functions dependant on host byte order
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/2] expression: fix constant expression allocation on big endian
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/2] nftables: fix big endian bugs
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: conntrack: initialize net.ct.generation
  • From: Andrey Vagin <avagin@xxxxxxxxxx>
• [PATCH RFC] expression: fix constant expression allocation on big endian
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] parser: fix ether keyword clash
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] ebtables printing of ipv6 masks
  • From: Mariusz Mazur <mmazur@xxxxxxxxx>
• [nft PATCH] expression: Fix inconsistent output in set
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: NETFILTER_XT_TARGET_NOTRACK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC] netfilter: nf_tables: defer all object release via rcu
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• NETFILTER_XT_TARGET_NOTRACK
  • From: Jean Delvare <jdelvare@xxxxxxx>
• Re: [PATCH RFC] netfilter: nf_tables: defer all object release via rcu
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH RFC] netfilter: nf_tables: defer all object release via rcu
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables-20140407 compilation error
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables-20140407 compilation error
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nftables-20140407 compilation error
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables-20140407 compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/11] netfilter: nf_tables: use new transaction infrastructure to handle sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/11] netfilter: nf_tables: use new transaction infrastructure to handle table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/11] netfilter: nf_tables: use new transaction infrastructure to handle chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/11] netfilter: nf_tables: generalise transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/11] netfilter: nf_tables: pass context to nf_tables_uptable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/11] netfilter: nf_tables: use new transaction infrastructure to handle elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/11] netfilter: nf_tables: disabling table hooks always succeeds
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/11] netfilter: nf_tables: refactor chain statistic routines
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/11] netfilter: nf_tables: relocate commit and abort routines in the source file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/11] netfilter: nf_tables: add message type to transactions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/11] netfilter: nf_tables: deconstify table and chain in context structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/11] new transaction infrastructure for nf_tables (v4)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables-20140407 compilation error
  • From: Florian Westphal <fw@xxxxxxxxx>
• [libnftnl PATCH v2 1/2] tests: New tools to uptade xml and json testfiles.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH v2 2/2] tests: Add support to check a json or xml testfile.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH v2 0/2] New features in nft-parsing-test
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset.
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH] utils: fix -Wcast-align warnings on sparc
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [libnftnl PATCH] xml: json: Delete an immediatedate label in xml and json file.
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: nftables-20140407 compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables-20140407 compilation error
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset.
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: nftables-20140407 compilation error
  • From: Florian Westphal <fw@xxxxxxxxx>
• nftables-20140407 compilation error
  • From: Nazim Wahid Djafar <nwd.dev@xxxxxxxxx>
• [libnftnl PATCH] xml: json: Delete an immediatedate label in xml and json file.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH] xml: json: Delete a cmpdata label in xml and json file.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH 2/3] tests: New tools to uptade xml and json testfiles.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH 3/3] tests: Add support to check a json or xml testfile.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [libnftnl PATCH 0/3] New features in nft-parsing-test
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH v3 0/5] Add suport for bridge if dev name meta exepression keys
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 5/5] meta: Add support for input and output bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [ulogd PATCH 3/3] add mark dump filter
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 2/3] add mark event filter
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libnetfilter_conntrack PATCH 1/3] conntrack: add mark event filter
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libnetfilter_conntrack/ulogd PATCH 0/3] add mark filter
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nf_tables PATCH v2] Subject: netfilter: nf_tables: add set_elem notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables PATCH v2] src: rule: fix crash in set listing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables PATCH v2] src: rule: fix crash in set listing
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables PATCH] src: rule: Fix list of set: Add a forgotten 'return'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nftables PATCH] src: rule: Fix list of set: Add a forgotten 'return'
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre
  • From: Andrew Vagin <avagin@xxxxxxxxxxxxx>
• Re: [PATCH] ipset: Pass IPSET_BIN to test scripts to change binary location
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipset: Fix grammar error in manpage
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipset: Fix printf format warning
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to accounting framework
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to accounting framework
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ipt_CLUSTERIP: Add network device notifier
  • From: Kirill Tkhai <ktkhai@xxxxxxxxxxxxx>
• [PATCH --smtp-server=mail.sw.ru] ipt_CLUSTERIP: Add network device notifier
  • From: Kirill Tkhai <ktkhai@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] examples: complete nft-events example
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] set_elem: parse family from Netlink message
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] libnftnl: tests: Use getopt_long to parse the command-line arguments.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Apr 1 (netfilter)
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• Re: linux-next: Tree for Apr 1 (netfilter)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Apr 1 (netfilter)
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• [PATCH libnftnl] src: fix bogus assertion for unset attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH] set_elem: parse family from Netlink message
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 0/8] netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/8] netfilter: nf_tables: set names cannot be larger than 15 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: Can't fail and free after table replacement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/8] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/8] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/8] netfilter: Add {ipt,ip6t}_osf aliases for xt_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/8] netfilter: nf_tables: fix wrong format in request_module()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/8] netfilter: connlimit: fix UP build
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/8] netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: connlimit: move lock array out of struct connlimit_data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Can't fail and free after table replacement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: Can't fail and free after table replacement
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] src: add table netlink messages to the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] src: add chain netlink messages to the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] src: add set netlink message to the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 2/2] set: add set ID support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/2] include: synchronize nf_tables.h with nftables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/10] netfilter: nf_tables: use new transaction infrastructure to handle chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/10] netfilter: nf_tables: pass context to nf_tables_uptable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/10] netfilter: nf_tables: add message type to transactions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/10] netfilter: nf_tables: use new transaction infrastructure to handle sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/10] netfilter: nf_tables: relocate commit and abort routines in the source file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/10] netfilter: nf_tables: use new transaction infrastructure to handle table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/10] netfilter: nf_tables: use new transaction infrastructure to handle elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/10] netfilter: nf_tables: disabling table hooks always succeeds
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/10] netfilter: nf_tables: generalise transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/10] netfilter: nf_tables: deconstify table and chain in context structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/10] new transaction infrastructure for nf_tables (v3)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nftables] testing at sparc
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH nftables 5/5] meta: Add support for input and output bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH v2 0/4] Add suport for bridge if dev name meta exepression keys
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3] libnftnl: tests: Use getopt_long to parse the command-line arguments.
  • From: Ana Rey <anarey@xxxxxxxxx>
• ip_tables: limit match: invalid size 40 != 48
  • From: Ronny Janssen <ronny.janssen@xxxxxxxxx>
• Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Can't fail and free after table replacement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ipset: Pass IPSET_BIN to test scripts to change binary location
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH] netfilter: disallow builtin socket/tproxy with modular ipv6 defrag
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: disallow builtin socket/tproxy with modular ipv6 defrag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Can't fail and free after table replacement
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: Can't fail and free after table replacement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf_tables PATCH v2] Subject: netfilter: nf_tables: add set_elem notifications
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH v2] libnftnl: tests: Use getopt_long to parse the command-line arguments.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] libnftnl: tests: Use getopt_long to parse the command-line arguments.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH] libnftnl: tests: Use getopt_long to parse the command-line arguments.
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nftables] testing at sparc
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH] netfilter: Can't fail and free after table replacement
  • From: Thomas Graf <tgraf@xxxxxxx>
• Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/3] netfilter: nft_meta: split nft_meta_init() into two functions for get/set
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [ulogd RFC PATCH 0/2] introduce new string output plugin
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH 2/2] Extend accounting capabilities to support quotas
  • From: mathieu.poirier@xxxxxxxxxx
• [PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to accounting framework
  • From: mathieu.poirier@xxxxxxxxxx
• Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Apr 1 (netfilter)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Apr 1 (netfilter)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH 1/3] netlink: simplify nfnetlink_bind
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH 2/3][v7] netlink: have netlink per-protocol bind function return an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH 3/3] netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftnl PATCH] examples: complete nft-events example
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nf_tables PATCH] netfilter: nft_hash: fix inclusion of linux/vmalloc.h
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH] ipset: Fix grammar error in manpage
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• [PATCH] ipset: Fix printf format warning
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• net-next is closed [was Re: no new feature patches please]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• netfilter: NULL ptr deref on boot in xt_register_table
  • From: Sasha Levin <sasha.levin@xxxxxxxxxx>
• Re: [ulogd RFC PATCH 1/2] sprint: introduce new output plugin
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [ulogd RFC PATCH 0/2] introduce new string output plugin
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [ulogd RFC PATCH 2/2] ip2str: introduce changable address separator
  • From: Eric Leblond <eric@xxxxxxxxx>
• no new feature patches please
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Mar 31 (netfilter)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len()
  • From: Masanari Iida <standby24x7@xxxxxxxxx>
• [PATCH 3/5] netfilter: Fix format string mismatch in _conntrack_tftp_init()
  • From: Masanari Iida <standby24x7@xxxxxxxxx>
• [PATCH 4/5] netfilter: Fix format string mismatch in nf_conntrack_irc_init()
  • From: Masanari Iida <standby24x7@xxxxxxxxx>
• [PATCH 5/5] netfilter: Fix format string mismatch in nf_conntrack_sip_init()
  • From: Masanari Iida <standby24x7@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: relax string validation of NFTA_CHAIN_TYPE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings
  • From: Thomas Graf <tgraf@xxxxxxx>
• [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre
  • From: Andrey Vagin <avagin@xxxxxxxxxx>
• Re: [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] netfilter: nft_meta: split nft_meta_init() into two functions for get/set
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] netfilter: nf_tables: set selection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3] netfilter: nf_tables: fix wrong format in request_module()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: nf_tables: set names cannot be larger than 15 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter
  • From: mathieu.poirier@xxxxxxxxxx
• [RFC PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to nf_acct objects
  • From: mathieu.poirier@xxxxxxxxxx
• [RFC PATCH 0/2] netfilter: Adding quota capabilities to nfnetlink
  • From: mathieu.poirier@xxxxxxxxxx
• [PATCH 8/8] netfilter: nf_tables: move table handling to the transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/8] netfilter: nf_tables: disabling table hooks always succeeds
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/8] netfilter: nf_tables: move set handling to the transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/8] netfilter: nf_tables: move chain handling to the transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/8] netfilter: nf_tables: pass context to nf_tables_uptable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/8] netfilter: nf_tables: add message type to transactions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/8] netfilter: nf_tables: generalise transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: nf_tables: relocate commit and abort routines in the source file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/8] new transaction infrastructure for nf_tables (v2)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/3] netfilter: nf_tables: cleanup and a bugfix
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v3)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Add {ipt,ip6t}_osf aliases for xt_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: nft_ct: split nft_ct_init() into two functions for get/set
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/3] netfilter: nft_meta: split nft_meta_init() into two functions for get/set
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/3] netfilter: nft_ct: add missing ifdef for NFT_MARK setting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/3] netfilter: nf_tables: cleanup and a bugfix
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ulogd RFC PATCH 2/2] ip2str: introduce changable address separator
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd RFC PATCH 1/2] sprint: introduce new output plugin
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd RFC PATCH 0/2] introduce new string output plugin
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• The same nf_ct_gre_keymap is deleted from list twice
  • From: Andrey Wagin <avagin@xxxxxxxxx>
• Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/7] netfilter: nf_tables: deconstify table and chain in context structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 7/7] netfilter: nf_tables: move table handling to the transaction infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/7] netfilter: nf_tables: move chain handling to the transaction infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 5/7] netfilter: nf_tables: move set handling to the transaction infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/7] netfilter: nf_tables: better encapsulation for the rule transaction code
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/7] netfilter: nf_tables: generalise transaction infrastructure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/7] netfilter: nf_tables: deconstify table and chain in context structure
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2] nftables: Fix list of sets by family
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH v2] nftables: Fix list of sets by family
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [PATCH] nftables: Fix list of sets by family
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] nftables: Fix list of sets by family
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nftables: Fix list of sets by family
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] netfilter: nft_hash: use set global element counter instead of private one
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/2] netfilter: nf_tables: implement proper set selection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/2] netfilter: nf_tables: set selection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v3)
  • From: Andrey Vagin <avagin@xxxxxxxxxx>
• [PATCH] nftables: Fix list of sets by family
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH 1/3 nft] src: add set netlink message to the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3 nft] src: add table netlink messages to the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3 nft] src: add chain netlink messages to the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] set: add set ID support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] netfilter: nf_tables: move set handling to the transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: nf_tables: better encapsulation for the rule transaction code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] netfilter: nf_tables: move table handling to the transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] netfilter: nf_tables: move chain handling to the transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/7] netfilter: nf_tables: relocate commit and abort routines in the source file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/7] netfilter: nf_tables: generalise transaction infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] new transaction infrastructure for nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] netfilter: nf_tables: deconstify table and chain in context structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v2)
  • From: Andrey Vagin <avagin@xxxxxxxxxx>
• Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH -next] netfilter: conntrack: remove timer from ecache extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: NULL pointer dereference in nf_nat_setup_info
  • From: Andrey Wagin <avagin@xxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len
  • From: Andrey Vagin <avagin@xxxxxxxxxx>
• Re: [PATCH 0/5] Add suport for bridge if dev name meta exepression keys
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH 0/5] Add suport for bridge if dev name meta exepression keys
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nftables 5/5] meta: Add support for input and output bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH 0/5] Add suport for bridge if dev name meta exepression keys
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [RFC 3/3] netfilter: nftables: Return preferably given family expression if any
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [RFC 3/3] netfilter: nftables: Return preferably given family expression if any
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC 3/3] netfilter: nftables: Return preferably given family expression if any
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [RFC 1/3] netfilter: nf_tables: Make public core function of META expression
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [RFC 0/3] Add support for meta keys, bridge family specific
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• NULL pointer dereference in nf_nat_setup_info
  • From: Andrey Wagin <avagin@xxxxxxxxx>
• Re: [PATCH][v6] netlink: have netlink per-protocol bind function return an error code.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [helper PATCH] Preserve conntrack helper bound through CT rule
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: [PATCH][v6] netlink: have netlink per-protocol bind function return an error code.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: David Miller <davem@xxxxxxxxxxxxx>
• v6 superceded it [was: Re: [PATCH][v5] netlink: have netlink per-protocol bind function return an error code.]
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH][v5] netlink: have netlink per-protocol bind function return an error code.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] set_elems: delete void EXPORT_SYMBOL
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [helper PATCH] Preserve conntrack helper bound through CT rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [helper PATCH] Preserve conntrack helper bound through CT rule
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [helper PATCH] Preserve conntrack helper bound through CT rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [helper PATCH] Preserve conntrack helper bound through CT rule
  • From: Alin Năstac <alin.nastac@xxxxxxxxx>
• [ulogd PATCH 8/8] ipfix: build headers with template
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 7/8] ipfix: print ipfix message
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 6/8] ipfix: decide whether prepending template by send times
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 5/8] ipfix: add function for ipfix message creation
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 4/8] ipfix: add functions for ipfix dataset creation
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ulogd PATCH 3/8] ipfix: some cleanups
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 2/8] ipfix: fix enterprise bit handling
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 1/8] ipfix: use nfct_bitmask
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: Add {ipt,ip6t}_osf aliases for xt_osf
  • From: Kirill Tkhai <ktkhai@xxxxxxxxxxxxx>
• Re: some minor tweaks for building doc/man pages for nftables
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] conntrackd: claim lockfile ownership properly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrackd: claim lockfile ownership properly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC nft 2/2] src: add set netlink message to the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH][v6] netlink: have netlink per-protocol bind function return an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• unbind [was: Re: [PATCH] netlink: have netlink per-protocol bind function return] an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [iptables 0/3] ebtables patchset
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nft PATCH] src: check if the set name is too long
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] src: check if the set name is too long
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables 0/3] ebtables patchset
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nft PATCH] src: check if the set name is too long
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH][v5] netlink: have netlink per-protocol bind function return an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH][v4] netlink: have netlink per-protocol bind function return an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH][v3] netlink: have netlink per-protocol bind function return an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH] netlink: have netlink per-protocol bind function return an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH] conntrackd: claim lockfile ownership properly
  • From: Ansis Atteka <aatteka@xxxxxxxxxx>
• Re: [iptables 0/3] ebtables patchset
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [iptables 0/3] ebtables patchset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] src: check if the set name is too long
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nftables: fix length of set name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netlink: have netlink per-protocol bind function return an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netlink: simplify nfnetlink_bind
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH] netlink: simplify nfnetlink_bind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH next] netfilter: connlimit: move lock array out of struct connlimit_data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: replace nft_rule_attr_get_u8
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] nft: replace nft_rule_attr_get_u8
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [PATCH 5/8] ipfix: add function for ipfix message creation
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH 1/8] ipfix: use nfct_bitmask
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH v4] net: netfilter: LLVMLinux: vlais-netfilter
  • From: behanw@xxxxxxxxxxxxxxxxxx
• Re: [PATCH] netlink: have netlink per-protocol bind function return an error code.
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] netfilter: disallow builtin socket/tproxy with modular ipv6 defrag
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] nftables: fix length of set name
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [nft PATCH] src: check if the set name is too long
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH] netlink: simplify nfnetlink_bind
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH] netlink: have netlink per-protocol bind function return an error code.
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Thomas Graf <tgraf@xxxxxxxxxx>
• Re: [nft PATCH] src: check if the set name is too long
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [nft PATCH] src: check if the set name is too long
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] src: check if the set name is too long
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Thomas Graf <tgraf@xxxxxxxxxx>
• Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [nft PATCH] src: check if the set name is too long
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Thomas Graf <tgraf@xxxxxxxxxx>
• Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Thomas Graf <tgraf@xxxxxxxxxx>
• [PATCH next] netfilter: connlimit: move lock array out of struct connlimit_data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Thomas Graf <tgraf@xxxxxxxxxx>
• Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter
  • From: Mark Charlebois <charlebm@xxxxxxxxx>
• [libnftnl PATCH] set_elems: delete void EXPORT_SYMBOL
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• RE: [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks
  • From: Alexey Perevalov <a.perevalov@xxxxxxxxxxx>
• [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter
  • From: behanw@xxxxxxxxxxxxxxxxxx
• [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors
  • From: Zoltan Kiss <zoltan.kiss@xxxxxxxxxx>
• Re: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter
  • From: Behan Webster <behanw@xxxxxxxxxxxxxxxxxx>
• RE: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter
  • From: Behan Webster <behanw@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH 36/38] netfilter: connlimit: use keyed locks
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 36/38] netfilter: connlimit: use keyed locks
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• RE: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH -next] netfilter: connlimit: fix UP build
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter
  • From: behanw@xxxxxxxxxxxxxxxxxx
• [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH -next] netfilter: connlimit: fix UP build
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 00/38] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• RE: [PATCH 36/38] netfilter: connlimit: use keyed locks
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH 36/38] netfilter: connlimit: use keyed locks
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 36/38] netfilter: connlimit: use keyed locks
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 36/38] netfilter: connlimit: use keyed locks
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: xt_CHAOS - PDE_DATA compilation error
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• RE: [PATCH 36/38] netfilter: connlimit: use keyed locks
  • From: David Laight <David.Laight@xxxxxxxxxx>
• [PATCH 01/38] netfilter: remove double colon
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/38] netfilter: nf_tables: add nft_dereference() macro
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/38] netfilter: xt_ipcomp: Use ntohs to ease sparse warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/38] netfilter: nft_ct: labels get support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/38] netfilter: ip_set: rename nfnl_dereference()/nfnl_set()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/38] netfilter: nfnetlink: add rcu_dereference_protected() helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/38] netfilter: nfnetlink_log: remove unused code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/38] netfilter: ipset: add hash:ip,mark data type to ipset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: xt_CHAOS - PDE_DATA compilation error
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [PATCH 09/38] netfilter: nf_tables: add optional user data area to rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/38] netfilter: ipset: add markmask for hash:ip,mark data type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/38] netfilter: trivial code cleanup and doc changes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/38] netfilter: ipset: kernel: uapi: fix MARKMASK attr ABI breakage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/38] netfilter: nf_tables: accept QUEUE/DROP verdict parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/38] netfilter: ipset: move registration message to init from net_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/38] netfilter: avoid race with exp->master ct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/38] netfilter: conntrack: spinlock per cpu to protect special lists.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/38] netfilter: ipset: add forceadd kernel support for hash set types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/38] netfilter: conntrack: seperate expect locking from nf_conntrack_lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/38] ipvs: Reduce checkpatch noise in ip_vs_lblc.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/38] netfilter: ipset: Add hash: fix coccinelle warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 24/38] netfilter: conntrack: remove central spinlock nf_conntrack_lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 26/38] netfilter: nf_tables: clean up nf_tables_trans_add() argument order
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 25/38] netfilter: nft_hash: bug fixes and resizing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/38] netfilter: ipset: Follow manual page behavior for SET target on list:set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 29/38] netfilter: nft_ct: remove family from struct nft_ct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 27/38] netfilter: nf_tables: restore context for expression destructors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/38] sections, ipvs: Remove useless __read_mostly for ipvs genl_ops
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 33/38] netfilter: connlimit: move insertion of new element out of count function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 31/38] netfilter: connlimit: factor hlist search into new function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 32/38] netfilter: connlimit: improve packet-to-closed-connection logic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 30/38] netfilter: nft_nat: fix family validation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 35/38] netfilter: Convert uses of __constant_<foo> to <foo>
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 28/38] netfilter: nf_tables: restore notifications for anonymous set destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 36/38] netfilter: connlimit: use keyed locks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 38/38] netfilter: connlimit: use rbtree for per-host conntrack obj storage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 37/38] netfilter: connlimit: make same_source_net signed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 34/38] netfilter: connlimit: use kmem_cache for conn objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/38] netfilter: ipset: Prepare the kernel for create option flags when no extension is needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/38] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2 2/2] rule: Changed parser for being more flexible
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>