Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [libnftnl PATCH v2 1/2] rule: Changed the print support for not having several attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] iptables: save: actually parse -M/--modprobe option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] iptables: save&restore: warn that -b/--binary isn't implemented
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 0/3] netfilter: connlimit: scalability improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: xt_CHAOS - PDE_DATA compilation error
  • From: "M.G." <mg887@xxxxxxxxx>
• Re: xt_CHAOS - PDE_DATA compilation error
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• xt_CHAOS - PDE_DATA compilation error
  • From: "M.G." <mg887@xxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Alexei Starovoitov <ast@xxxxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Alexei Starovoitov <ast@xxxxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Alexei Starovoitov <ast@xxxxxxxxxxxx>
• [nft RFC PATCH] mnl: Fix a potential buffer overflow
  • From: Yuxuan Shui <yshuiv7@xxxxxxxxx>
• [libnftnl RFC PATCH] set: Add nft_set_elems_nlmsg_build_payload_check
  • From: Yuxuan Shui <yshuiv7@xxxxxxxxx>
• [PATCH 2/2] iptables: save: actually parse -M/--modprobe option
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• [PATCH 1/2] iptables: save&restore: warn that -b/--binary isn't implemented
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• Re: [PATCH 3/3] iptables: save - fix getopt_long()'s optstring
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] iptables-restore(8): missing -T in synopsis
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] iptables-restore(8): file to read from can be specified as argument
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH v2 2/2] rule: Changed parser for being more flexible
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH v2 1/2] rule: Changed the print support for not having several attributes
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [PATCH] iptables: make 'iptables-save -M' actually work
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• [PATCH 3/3] iptables: save - fix getopt_long()'s optstring
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• [PATCH 1/3] iptables-restore(8): missing -T in synopsis
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• [PATCH 2/3] iptables-restore(8): file to read from can be specified as argument
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• Re: [PATCH 2/2] iptables: missing bracket in iptables-save(8)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] update FSF address in license text
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] ct: add support for setting ct mark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] iptables: missing bracket in iptables-save(8)
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• [PATCH 1/2] update FSF address in license text
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Alexei Starovoitov <ast@xxxxxxxxxxxx>
• [PATCH v2 3/3] netfilter: connlimit: use rbtree for per-host conntrack obj storage
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 2/3] netfilter: connlimit: make same_source_net signed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 1/3] netfilter: connlimit: use keyed locks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 0/3] netfilter: connlimit: scalability improvements
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] ct: add support for setting ct mark
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [nft PATCH] ct: add support for setting ct mark
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH net-next 0/6] net: Convert uses of __constant_<foo> to <foo>
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] src: fix expr_binary_error()-related compilation warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] src: fix expr_binary_error()-related compilation warnings
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH v5] netfilter: xtables: add quota support for nfacct
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• Re: [PATCH] iptables: make 'iptables-save -M' actually work
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables: make 'iptables-save -M' actually work
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• Re: [PATCH 0/7] netfilter: connlimit: scalability improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] userspace SSDP conntrack helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/5] netfilter: nf_tables: restore context during destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: some minor tweaks for building doc/man pages for nftables
  • From: "Robert P. J. Day" <rpjday@xxxxxxxxxxxxxx>
• Re: [PATCH v5] netfilter: xtables: add quota support for nfacct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 2/2] src/rule: Changed parser support for having consistent with the new print support
  • From: Álvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: some minor tweaks for building doc/man pages for nftables
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: some minor tweaks for building doc/man pages for nftables
  • From: "Robert P. J. Day" <rpjday@xxxxxxxxxxxxxx>
• Re: some minor tweaks for building doc/man pages for nftables
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• some minor tweaks for building doc/man pages for nftables
  • From: "Robert P. J. Day" <rpjday@xxxxxxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] conntrackd: claim lockfile ownership properly
  • From: Ansis Atteka <aatteka@xxxxxxxxxx>
• Re: [libnftnl PATCH 2/2] src/rule: Changed parser support for having consistent with the new print support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Alexei Starovoitov <ast@xxxxxxxxxxxx>
• Re: [PATCH v5] netfilter: xtables: add quota support for nfacct
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Andi Kleen <andi@xxxxxxxxxxxxxx>
• Re: [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• [PATCH RFC 2/9] net: filter: account filter length in bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 9/9] netfilter: nf_tables: add support for socket filtering
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 7/9] netfilter: nf_tables: move expression infrastructure to built-in core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 0/9] socket filtering using nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 8/9] netfilter: nf_tables: generalize verdict handling and introduce scopes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 5/9] netfilter: nf_tables: add nft_value_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 6/9] netfilter: nf_tables: rename nf_tables_core.c to nf_tables_nf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 3/9] net: filter: generalise sk_filter_release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 4/9] netfilter: nf_tables: move fast operations to header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC 1/9] net: rename fp->bpf_func to fp->run_filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] netfilter: xtables: add quota support for nfacct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] netfilter: xtables: add quota support for nfacct
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• Re: [iptables 0/3] ebtables patchset
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 5/7] netfilter: connlimit: use keyed locks
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 5/7] netfilter: connlimit: use keyed locks
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftnl PATCH 2/2] src/rule: Changed parser support for having consistent with the new print support
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [PATCH] userspace SSDP conntrack helper
  • From: Ash Hughes <ashley.hughes@xxxxxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2 3/3] example: removed printf rule function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH v2 1/3] example: fix the example for deleting rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] userspace SSDP conntrack helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] userspace SSDP conntrack helper
  • From: Ash Hughes <ashley.hughes@xxxxxxxxxxxxxxxx>
• [PATCH] userspace SSDP conntrack helper
  • From: Ash Hughes <ashley.hughes@xxxxxxxxxxxxxxxx>
• [libnftnl PATCH v2 3/3] example: removed printf rule function
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH v2 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH v2 1/3] example: fix the example for deleting rules
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [libnftnl PATCH 1/3] example: fix the example for deleting rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH 3/3] example: removed printf rule function
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• [libnftnl PATCH 1/3] example: fix the example for deleting rules
  • From: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx>
• Re: [libnetfilter_conntrack PATCH] conntrack: introduce clear and equal functions for bitmask object
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/8] ipfix: use nfct_bitmask
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libnetfilter_conntrack PATCH] conntrack: introduce clear and equal functions for bitmask object
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH 8/8] ipfix: build headers with template
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH 7/8] ipfix: print ipfix message
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH 6/8] ipfix: decide whether prepending template by send times
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH 5/8] ipfix: add function for ipfix message creation
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH 4/8] ipfix: add functions for ipfix dataset creation
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH 3/8] ipfix: some cleanups
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH 2/8] ipfix: fix enterprise bit handling
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [ulogd PATCH 0/8] make progress ulogd_output_IPFIX
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [ulogd PATCH] ulogd: fix logleve handling
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [iptables 3/3] nft-shared: make compare_matches as public
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.21.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [iptables 3/3] nft-shared: make compare_matches as public
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [iptables 2/3] Operations for bridge family
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [iptables 1/3] xtables: bootstrap xtables-eb for nftables
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [iptables 0/3] ebtables patchset
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH 5/5] netfilter: nft_nat: fix family validation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/5] netfilter: nft_ct: remove family from struct nft_ct
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/5] netfilter: nf_tables: restore context for expression destructors
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/5] netfilter: nf_tables: restore notifications for anonymous set destruction
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/5] netfilter: nf_tables: clean up nf_tables_trans_add() argument order
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/5] netfilter: nf_tables: restore context during destruction
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH iptables] update coreteam members from manpage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: fix version in iptables(8)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft-arp: wrong condition in parse_payload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft-arp: fix is_same_interfaces arguments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net: inetfilter: LLVMLinux: vlais-netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.21.1 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] iptables: fix version in iptables(8)
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [iptables PATCH] nft-arp: wrong condition in parse_payload
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 6/7] netfilter: connlimit: make same_source_net signed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 5/7] netfilter: connlimit: use keyed locks
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/7] netfilter: connlimit: move insertion of new element out of count function
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 4/7] netfilter: connlimit: use kmem_cache for conn objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 0/7] netfilter: connlimit: scalability improvements
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/7] netfilter: connlimit: improve packet-to-closed-connection logic
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/7] netfilter: connlimit: factor hlist search into new function
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] ipset 6.21.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v3] netfilter: nft_hash: bug fixes and resizing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/8] ipset patches for nf-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL nf-next 0/2] IPVS Updates for v3.15
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] nft-arp: fix is_same_interfaces arguments
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH] segtree: sort set elements before decomposition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] set: properly account set size when merging recursive set definitions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] parser: add grammatical distinction for verdict maps
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/2] netlink: use set location for IO errors
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/3] expr: add comparison function for singleton expressions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/3] set: abort on interval conflicts
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/3] expr: make expr_binary_error() usable outside of evaluation
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/3] nftables: fix segtree interval conflict reporting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ulogd PATCH] ulogd: fix logleve handling
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH nf-next 2/2] ipvs: Reduce checkpatch noise in ip_vs_lblc.c
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 1/2] sections, ipvs: Remove useless __read_mostly for ipvs genl_ops
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next 0/2] IPVS Updates for v3.15
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] net: inetfilter: LLVMLinux: vlais-netfilter
  • From: behanw@xxxxxxxxxxxxxxxxxx
• Re: [ANNOUNCE] ipset 6.21 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: ipset: add forceadd kernel support for hash set types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 6/8] netfilter: ipset: kernel: uapi: fix MARKMASK attr ABI breakage
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 5/8] netfilter: ipset: Prepare the kernel for create option flags when no extension is needed
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 7/8] netfilter: ipset: move registration message to init from net_init
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 4/8] netfilter: ipset: add markmask for hash:ip,mark data type
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 3/8] netfilter: ipset: add hash:ip,mark data type to ipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/8] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: ipset: Add hash: fix coccinelle warnings
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/8] netfilter: ipset: Follow manual page behavior for SET target on list:set
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH v2] xt_quota2: introduce support for network namespaces
  • From: Daniel Golle <dgolle@xxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.21 released
  • From: AllKind <AllKind@xxxxxxxxxx>
• Re: [BUG?] Null pointer dereference in nf_ct_delete_from_lists()
  • From: Namjae Jeon <linkinjeon@xxxxxxxxx>
• [ANNOUNCE] ipset 6.21 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] ip_set: remove extraneous log message
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v3 0/2] ipset: forceadd support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [RFC PATCH 1/2] netfilter: nf_tables: implement proper set selection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC PATCH 2/2] netfilter: nft_hash: use set global element counter instead of private one
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC PATCH 0/2] netfilter: nf_tables: set selection
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v3] netfilter: nft_hash: bug fixes and resizing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nf_tables] suggestion: system-wide sets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] parser: support reject unreach|reset
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] parser: support reject unreach|reset
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] parser: support reject unreach|reset
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] parser: support reject unreach|reset
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] parser: support reject unreach|reset
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] parser: support reject unreach|reset
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH nft] parser: support reject unreach|reset
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Mar 3 (netfilter: xt_socket)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [nf-next PATCH V3 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V3 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V3 3/5] netfilter: avoid race with exp->master ct
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V3 2/5] netfilter: conntrack: spinlock per cpu to protect special lists.
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V3 1/5] netfilter: trivial code cleanup and doc changes
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [nf_tables] suggestion: system-wide sets
  • From: Patrick Schaaf <netdev@xxxxxx>
• [BUG?] Null pointer dereference in nf_ct_delete_from_lists()
  • From: Namjae Jeon <linkinjeon@xxxxxxxxx>
• Re: [nf-next PATCH V2 0/5] netfilter: conntrack: optimization, remove central spinlock
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] ip_set: remove extraneous log message
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• [PATCH v3 1/2] ipset: add forceadd kernel support for hash set types
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v3 2/2] ipset: add userspace support for forceadd
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v3 0/2] ipset: forceadd support
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: [PATCH v2 2/2] ipset: add userspace support for forceadd
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: [PATCH v2 2/2] ipset: add userspace support for forceadd
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] ipset: add forceadd kernel support for hash set types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_hash: bug fixes and resizing
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• Re: [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_hash: bug fixes and resizing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 0/2] ipset: forceadd support
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_hash: bug fixes and resizing
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH v2] netfilter: nft_hash: bug fixes and resizing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2] netfilter: hash resizing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [nf-next PATCH V2 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V2 3/5] netfilter: avoid race with exp->master ct
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V2 2/5] netfilter: conntrack: spinlock per cpu to protect special lists.
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V2 1/5] netfilter: trivial code cleanup and doc changes
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH V2 0/5] netfilter: conntrack: optimization, remove central spinlock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [nf-next PATCH 3/5] netfilter: avoid race with exp->master ct
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [PATCH] netfilter: nft_hash: bug fixes and resizing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nf-next PATCH 0/5] (repost) netfilter: conntrack: optimization, remove central spinlock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [PATCH v2 2/2] ipset: add userspace support for forceadd
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 0/2] ipset: forceadd support
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [PATCH] xt_quota2: introduce support for netns
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [nf-next PATCH 0/5] (repost) netfilter: conntrack: optimization, remove central spinlock
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH v2 2/2] ipset: add userspace support for forceadd
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v2 1/2] ipset: add forceadd kernel support for hash set types
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• [PATCH v2 0/2] ipset: forceadd support
  • From: Josh Hunt <johunt@xxxxxxxxxx>
• Re: [nf-next PATCH 3/5] netfilter: avoid race with exp->master ct
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_hash: bug fixes and resizing
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
• [nf-next PATCH 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH 3/5] netfilter: avoid race with exp->master ct
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH 2/5] netfilter: conntrack: spinlock per cpu to protect special lists.
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH 1/5] netfilter: trivial code cleanup and doc changes
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [nf-next PATCH 0/5] (repost) netfilter: conntrack: optimization, remove central spinlock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [net-next PATCH 0/5] netfilter: conntrack: optimization, remove central spinlock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [net-next PATCH 0/5] netfilter: conntrack: optimization, remove central spinlock
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [PATCH] netfilter: nft_hash: bug fixes and resizing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_hash: bug fixes and resizing
  • From: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
• Re: [nf_tables] suggestion: system-wide sets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nft_hash: bug fixes and resizing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: hash resizing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nf_tables] suggestion: system-wide sets
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC PATCH v2 0/6] nft events reporting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nf_tables] suggestion: system-wide sets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [nf_tables] suggestion: system-wide sets
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH v2] netfilter: nf_tables: add optional user data area to rules
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [libnftnl PATCH] src: check if netlink parsing fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] netlink: fix chain attribute parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• custom ebtables module && skb manipulation && kernel panic
  • From: Marek Kierdelewicz <marek@xxxxxxxxx>
• Re: [PATCH v5] netfilter: xtables: add quota support for nfacct
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• [libnftnl PATCH] src: check if netlink parsing fails
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft PATCH] netlink: fix chain attribute parsing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC PATCH v2 6/6] src: add events reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC PATCH v2 6/6] src: add events reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH v2 6/6] src: add events reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH v2 6/6] src: add events reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC PATCH v2 4/6] netlink: add netlink_delinearize_chain() func
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH v2 1/6] rule: allow to print sets in plain format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH v2 6/6] src: add events reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC PATCH v2 5/6] netlink: add netlink_delinearize_table() func
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC PATCH v2 4/6] netlink: add netlink_delinearize_chain() func
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC PATCH v2 3/6] rule: generalize chain_print()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC PATCH v2 2/6] netlink: add netlink_delinearize_set() func
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC PATCH v2 1/6] rule: allow to print sets in plain format
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC PATCH v2 0/6] nft events reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH v2] netfilter: nf_tables: add optional user data area to rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: add optional user data area to rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: add optional user data area to rules
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: add optional user data area to rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: add support for rule human-readable comments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/7] src: fix wrong type in NFT_ATTR_*_FAMILY
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] rule: add NFT_RULE_ATTR_USERDATA support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] include: get linux/netfilter/nf_tables.h in sync with kernel header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] example: nft-rule-add: simplify example
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/7] src: add assertion infrastructure to validate attribute types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/7] src: add nft_*_attr_{set|get}_data interface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] src: early attribute type validation in nft_*_attr_set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] libnftnl updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] netfilter: xtables: add quota support for nfacct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] xt_quota2: introduce support for netns
  • From: Daniel Golle <dgolle@xxxxxxxxxxx>
• Re: [PATCH 2/2] xtables-events: prints arp rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] nft-arp: adds nft_arp_save_firewall
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] netfilter: minor cleanups and improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH next] netfilter: nfnetlink_log: remove unused code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] bridge: netfilter: Use ether_addr_copy
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH RESEND v5] netfilter: xtables: add quota support for nfacct
  • From: mathieu.poirier@xxxxxxxxxx
• Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• [libmnl] mmap patch review request
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [PATCH 2/2] bridge: netfilter: Use ether_addr_copy
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: BUG: ip6tables IPv6-REDIRECT over bridges
  • From: Florian Westphal <fw@xxxxxxxxx>
• BUG: ip6tables IPv6-REDIRECT over bridges
  • From: Artie Hamilton <artiemhamilton@xxxxxxxxx>
• Re: [PATCH 0/6] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: Nftables HOWTO documentation updates
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Nftables HOWTO documentation updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Nftables HOWTO documentation updates
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: Nftables HOWTO documentation updates
  • From: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
• [PATCH 2/2] xtables-events: prints arp rules
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH 1/2] nft-arp: adds nft_arp_save_firewall
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH 2/6] netfilter: nft_meta: fix typo "CONFIG_NET_CLS_ROUTE"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/6] netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: nf_nat_snmp_basic: fix duplicates in if/else branches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: ctnetlink: force null nat binding on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: nf_tables: fix nf_trace always-on with XT_TRACE=n
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] netfilter: nf_tables: check if payload length is a power of 2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/6] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 -next] netfilter: nft_ct: labels get support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipcomp: Convert struct xt_ipcomp spis into 16bits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: remove double colon
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH next] netfilter: nfnetlink_log: remove unused code
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 4/4] netfilter: nf_tables: accept QUEUE/DROP verdict parameters
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/4] netfilter: minor cleanups and improvements
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/4] netfilter: nfnetlink: add rcu_dereference_protected() helpers
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/4] netfilter: nf_tables: add nft_dereference() macro
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/4] netfilter: ip_set: rename nfnl_dereference()/nfnl_set()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v5] netfilter: xtables: add quota support for nfacct
  • From: mathieu.poirier@xxxxxxxxxx
• Re: [PATCH v2 -next] netfilter: nft_ct: labels get support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2 -next] netfilter: nft_ct: labels get support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Nftables HOWTO documentation updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 -next] netfilter: nft_ct: labels get support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• once again about crash in fins_appropriate_src()/same_src()
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 -next] netfilter: nft_ct: labels get support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 3/3 nft] ct: connlabel matching support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] netlink: meta: fix wrong type in attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 -next] netfilter: nft_ct: labels get support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/3 nft] ct: connlabel matching support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/3 libnftnl] expr: add conntrack label match support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/3 -next] netfilter: nft_ct: labels get support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft RFC PATCH 0/6] events
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft RFC PATCH 0/6] events
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft RFC PATCH 3/6] netlink: add netlink_delinearize_set() func
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC PATCH] netfilter: nft_hash: bug fixes and resizing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft RFC PATCH 3/6] netlink: add netlink_delinearize_set() func
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft RFC PATCH 3/6] netlink: add netlink_delinearize_set() func
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft RFC PATCH 2/6] rule: allow to print sets in plain format
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [nft RFC PATCH 0/6] events
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: nftables next-3.14 merged into master
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] ct: direction should be integer, not bitmask
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] netlink: meta: fix wrong type in attributes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft RFC PATCH 6/6] src: add events reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft RFC PATCH 0/6] events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft RFC PATCH 1/6] rule: make family2str() public
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft next-3.14 PATCH] netlink: delete unused function calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft RFC PATCH 6/6] src: add events reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft RFC PATCH 5/6] netlink: add netlink_delinearize_rule() func
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft RFC PATCH 4/6] rule: generalize chain_print()
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft RFC PATCH 3/6] netlink: add netlink_delinearize_set() func
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft RFC PATCH 2/6] rule: allow to print sets in plain format
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft RFC PATCH 1/6] rule: make family2str() public
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nft RFC PATCH 0/6] events
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nft] ct: direction should be integer, not bitmask
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] netlink: meta: fix wrong type in attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables next-3.14 merged into master
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH nft] ct: direction should be integer, not bitmask
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] netlink: meta: fix wrong type in attributes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl] src: compile queue expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables next-3.14 merged into master
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] netlink: meta: fix wrong type in attributes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] netlink: meta: fix wrong type in attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC PATCH] netfilter: nf_tables: extend payload to support writing data
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH nft] netlink: meta: fix wrong type in attributes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/4] nftables: bitmask and prefix fixes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/4] netlink_delinarize: convert *all* bitmask values into individual bit values
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/4] netlink: fix prefix expression handling
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/4] binop: take care of operator precedence when printing binop arguments
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/4] evaluate: use flagcmp for single RHS bitmask expression
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft] netlink: meta: fix wrong type in attributes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] src: proto: fixed a rreply symbol
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] src: proto: fixed a rreply symbol
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: nf_tables: check if payload length is a power of 2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] netlink_linearize: fix wrong comparison in netlink_gen_flagcmp()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH nft] netlink_linearize: fix wrong comparison in netlink_gen_flagcmp()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft next-3.14 PATCH] netlink: delete unused function calls
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nft] netlink_linearize: fix wrong comparison in netlink_gen_flagcmp()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH nft] netlink_linearize: fix wrong comparison in netlink_gen_flagcmp()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3] netfilter: nf_tables: check if payload length is a power of 2
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v3] netfilter: nf_tables: check if payload length is a power of 2
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: nf_tables: check if payload offset is a power of 2
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2] netfilter: nf_tables: check if payload offset is a power of 2
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: check if payload offset is a power of 2
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH V2] netfilter: ctnetlink: force null nat binding on insert
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n
  • From: Florian Westphal <fw@xxxxxxxxx>
• [RFC PATCH nft userspace] nft: connlabel matching support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/2] ipset: forceadd support
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: [PATCH 0/2] ipset: forceadd support
  • From: Bourne Without <blackhole@xxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• [RFC PATCH] netfilter: nf_tables: add new write expression
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_nat_snmp_basic: fix duplicates in if/else branches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_meta: fix typo "CONFIG_NET_CLS_ROUTE"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: force null nat binding on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] ipset: add forceadd userspace support for hash set types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/2] ipset: add forceadd userspace support for hash set types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] ipset: add forceadd kernel support for hash set types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Netfilter Extension Development Queries
  • From: Duncan Eastoe <duncaneastoe@xxxxxxxxx>
• How to forward a modified packet by using libnetfilter_queue
  • From: Daehee Kim <dahkim77@xxxxxxxxx>
• Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/2 nft] scanner: fix parsing of tc handle
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 nft] meta: remove line break when printing priority
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ipset 2/2] lib: don't segfault when ipset_data_get returns NULL
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset 1/2] lib: fix ifname 'physdev:' prefix parsing
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset 2/2] lib: don't segfault when ipset_data_get returns NULL
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ipset 1/2] lib: fix ifname 'physdev:' prefix parsing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ipset 2/2] lib: don't segfault when ipset_data_get returns NULL
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset 1/2] lib: fix ifname 'physdev:' prefix parsing
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Netfilter Extension Development Queries
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC libnetfilter_log][PATCH] configure: add --without-ipulog option to disable libipulog build
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Netfilter Extension Development Queries
  • From: Mart Frauenlob <mart.frauenlob@xxxxxxxxx>
• [PATCH] netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct
  • From: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
• Re: [RFC libnftnl PATCH 1/2] src: add mnlio API functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nft_meta: fix typo "CONFIG_NET_CLS_ROUTE"
  • From: Paul Bolle <pebolle@xxxxxxxxxx>
• [PATCH ipset 2/2] lib: don't segfault when ipset_data_get returns NULL
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH ipset 1/2] lib: fix ifname 'physdev:' prefix parsing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 0/5] Various fixes version 2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Netfilter Extension Development Queries
  • From: Duncan Eastoe <duncaneastoe@xxxxxxxxx>
• [libftnl PATCH] rule: Reformat the string to output so it breaks line relevantly
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 5/5] nft: Pass a line after printing out a debug message
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 4/5] nft: Remove useless error message
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 3/5] nft: Initialize a table only once
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 2/5] nft: A builtin chain might be created when restoring
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 1/5] nft: Add useful debug output when a builtin table is created
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 0/5] Various fixes version 2
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [ANNOUNCE] 10th Netfilter Workshop in Montpellier, France
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_nat_snmp_basic: fix duplicates in if/else branches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nf_nat_snmp_basic: fix duplicates in if/else branches
  • From: Francois-Xavier Le Bail <fx.lebail@xxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 8/8] nft: Initialize according to requested table, if any
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] nft-compat: fix wrong protocol context in initialization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 8/8] nft: Initialize according to requested table, if any
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 8/8] nft: Initialize according to requested table, if any
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] nft-shared: adds save_matches_and_target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] xtables-events: prints arp rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/8] chain: Break the line properly when printing out the chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/8] chain: Break the line properly when printing out the chain
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH libnftnl] chain: print usage counter for base chain via default output as well
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 4/8] xtables: Add backward compatibility with -w option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 5/8] nft: Fix error message to output proper origin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/8] chain: Break the line properly when printing out the chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 6/8] nft: Add useful debug output when a builtin table is created
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 7/8] nft: A builtin chain might be created when restoring
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 8/8] nft: Initialize according to requested table, if any
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 4/8] xtables: Add backward compatibility with -w option
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables (nft-compat) PATCH 5/8] nft: Fix error message to output proper origin
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [libnftnl PATCH 2/8] table: Break the line properly when printing out the table
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [libnftnl PATCH 1/8] chain: Break the line properly when printing out the chain
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [libnftnl/iptables PATCH 0/8] Various fixes
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH v4 2/2] netfilter: xtables: add quota support for nfacct
  • From: mathieu.poirier@xxxxxxxxxx
• [PATCH v4 1/2] netfilter: nfnetlink_acct: make shared objects SMP safe
  • From: mathieu.poirier@xxxxxxxxxx
• [PATCH v4 0/2] Add quota capabilities to nfacct
  • From: mathieu.poirier@xxxxxxxxxx
• [PATCH v2] xtables-events: prints arp rules
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH v2] nft-shared: adds save_matches_and_target
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [nftables RFC PATCH 0/1] implementing icmp code filtering
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [nftables RFC PATCH 0/1] implementing icmp code filtering
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables RFC PATCH] icmp: add code filtering with name
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH 00/18] Netfilter/nftables/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] netfilter: ctnetlink: force null nat binding on insert
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 12/13] net: Include appropriate header file in netfilter/nft_lookup.c
  • From: Rashika Kheria <rashika.kheria@xxxxxxxxx>
• Re: [PATCH 12/13] net: Include appropriate header file in netfilter/nft_lookup.c
  • From: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
• [PATCH 12/13] net: Include appropriate header file in netfilter/nft_lookup.c
  • From: Rashika Kheria <rashika.kheria@xxxxxxxxx>
• Re: [PATCH 3/3] xtables-events: prints arp rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] nft-arp: adds nft_arp_save_firewall
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/18] netfilter: nf_nat_h323: fix crash in nf_ct_unlink_expect_report()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/18] Netfilter/nftables/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/18] netfilter: nf_tables: fix overrun in nf_tables_set_alloc_name()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/18] netfilter: nft_ct: fix missing NFT_CT_L3PROTOCOL key in validity checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/18] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/18] netfilter: nf_tables: fix log/queue expressions for NFPROTO_INET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/18] netfilter: nf_tables: add reject module for NFPROTO_INET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/18] netfilter: nf_tables: add AF specific expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/18] netfilter: nf_tables: fix potential oops when dumping sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/18] netfilter: nf_tables: fix racy rule deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/18] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/18] netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_get
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/18] netfilter: nf_tables: do not allow NFT_SET_ELEM_INTERVAL_END flag and data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/18] netfilter: nf_tables: fix loop checking with end interval elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/18] netfilter: nft_rbtree: fix data handling of end interval elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/18] netfilter: nf_tables: unininline nft_trace_packet()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/18] netfilter: nf_tables: fix oops when deleting a chain with references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/18] ipvs: fix AF assignment in ip_vs_conn_new()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/18] netfilter: nft_ct: fix unconditional dump of 'dir' attr
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 v2] netfilter: nf_tables: fix oops when using gotos
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix oops when using gotos
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2 v2] netfilter: nf_tables: fix oops when using gotos
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 v2] netfilter: nf_tables: fix loop checking with end interval elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix oops when using gotos
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix oops when using gotos
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix loop checking with set element data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: fix oops when using gotos
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix loop checking with set element data
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix loop checking with set element data
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: fix loop checking with set element data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nft_rbtree: fix data handling of end interval elements
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] netfilter: nft_rbtree: fix data handling of end interval elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nf_tables: do not allow NFT_SET_ELEM_INTERVAL_END flag and data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_rbtree: fix chain use underflow with intervals and map
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_rbtree: fix chain use underflow with intervals and map
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_rbtree: fix chain use underflow with intervals and map
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: nft_rbtree: fix chain use underflow with intervals and map
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] xtables-events: prints arp rules
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH 2/3] nft-arp: adds nft_arp_save_firewall
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH 1/3] nft-shared: adds save_matches_and_target
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH 0/3] xtables-events segfault
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [PATCH 0/2] xtables-eb for the compatibility layer
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix log/queue expressions for NFPROTO_INET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: fix log/queue expressions for NFPROTO_INET
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 4/5] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/5] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 5/5] netfilter: nf_tables: add reject module for NFPROTO_INET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/5] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] xtables: bootstrap xtables-eb for nftables
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [PATCH 2/5] netfilter: nft_ct: fix missing NFT_CT_L3PROTOCOL key in validity checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/5] netfilter: nf_tables: fix potential oops when dumping sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/5] netfilter: nf_tables: add AF specific expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix racy rule deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL nf] IPVS Fixes for v3.14
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] xtables-eb for the compatibility layer
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• [PATCH] netlink: add netlink specific location
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC libnftnl PATCH 0/2] New mnlio functions
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC libnftnl PATCH 2/2] examples: use new mnlio API in nft-rule-add.c
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC libnftnl PATCH 1/2] src: add mnlio API functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC libnftnl PATCH 0/2] New mnlio functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH] cmd: initialize cmd list and use list_splice_tail() for adding to command list
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] Operations for bridge family
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH 1/2] xtables: bootstrap xtables-eb for nftables
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH 0/2] xtables-eb for the compatibility layer
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix racy rule deletion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix racy rule deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix racy rule deletion
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 5/5] netfilter: nf_tables: add reject module for NFPROTO_INET
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/5] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/5] netfilter: nf_tables: add AF specific expression support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/5] netfilter: nft_ct: fix missing NFT_CT_L3PROTOCOL key in validity checks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/5] netfilter: nf_tables: fix potential oops when dumping sets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/5] netfilter: nf_tables fixes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC libnetfilter_log][PATCH] configure: add --without-ipulog option to disable libipulog build
  • From: Matthieu Crapet <Matthieu.Crapet@xxxxxxxxxxxx>
• Re: netfilter: REJECT: separate reusable code
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter: REJECT: separate reusable code
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter: REJECT: separate reusable code
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: netfilter: REJECT: separate reusable code
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: netfilter: REJECT: separate reusable code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: REJECT: separate reusable code
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter: REJECT: separate reusable code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• netfilter: REJECT: separate reusable code
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/4] xtables: add xtables-compat-multi for the nftables compatibility layer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] xtables-restore: remove dependency with libip4tc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/4] configure: conditional dependencies for nftables-compat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/4] configure: rename --disable-xtables to --disable-nftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/4 iptables-nftables] compat updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt
  • From: Andrew Vagin <avagin@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] ipvs: fix AF assignment in ip_vs_conn_new()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf] IPVS Fixes for v3.14
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] parser: prohibit redefinitions of symbols and verify existance on use
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] ipvs: fix AF assignment in ip_vs_conn_new()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 8/8] tests: add two tests for error reporting
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 7/8] parser: evaluate commands immediately after parsing
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 6/8] parser: recover from errors in any block
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 5/8] parser: close scope when encountering an error in a table or chain block
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 4/8] erec: skip includes with INDESC_INTERNAL
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 3/8] scanner: update last_line in struct location
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/8] scanner: don't update location's line_offset for newlines
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 1/8] evaluate: determine implicit relational op before RHS constant checks
  • From: Patrick McHardy <kaber@xxxxxxxxx>