Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH 2/2] netfilter: add IPv6 IPComp extension match support
  • From: Fan Du <fan.du@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: add IPv4 IPComp extension match support
  • From: Fan Du <fan.du@xxxxxxxxxxxxx>
• [PATCH net-next 0/2] netfilter: IPv4/v6 IPcomp match support
  • From: Fan Du <fan.du@xxxxxxxxxxxxx>
• [iptables-nftables PATCH] include: Update nftables API header in sync with kernel's one
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [libnftables PATCH 1/2] include: Update API documentation in sync with kernel's one
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [libnftables PATCH 1/2] include: Update API documentation in sync with kernel's one
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: Kill unreplied conntracks by ICMP errors
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH v4] netfilter: introduce l2tp match extension
  • From: James Chapman <jchapman@xxxxxxxxxxx>
• [libnftables PATCH v2 2/2] table: Add support for NFTA_TABLE_USE nftables attribute
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [libnftables PATCH 2/2] table: Add support for NFTA_TABLE_USE nftables attribute
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [libnftables PATCH 2/2] table: Add support for NFTA_TABLE_USE nftables attribute
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 2/2] table: Add support for NFTA_TABLE_USE nftables attribute
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [libnftables PATCH 1/2] include: Update API documentation in sync with kernel's one
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables-kernel PATCH] netfilter: nf_tables: Expose the table's chain usage to the netlink API
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables PATCH] Expose tables's chain usage and handle it.
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nftables kernel PATCH v2] netfilter: nf_tables: fix nft_meta_target module
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nftables kernel PATCH v2] netfilter: nf_tables: fix nft_meta_target module
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables kernel PATCH v2] netfilter: nf_tables: fix nft_meta_target module
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: Merging iptables-nftables into iptables
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft: fix endianness in dump function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nft: reject support for IPv6 and TCP reset
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nft: reject support for IPv6 and TCP reset
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nft: reject support for IPv6 and TCP reset
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH] netfilter: nft: fix endianness in dump function
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH for 3.13 0/1] nft: reject: fix endianess
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH 2/2] netfilter: nft: reject support for IPv6 and TCP reset
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH 1/2] netfilter: REJECT: separate reusable code
  • From: Eric Leblond <eric@xxxxxxxxx>
• [RFC PATCH 0/2] nft: finish reject support
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH -next 0/2] seq_file/netfilter: Start removing returns from seq_<foo>
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH -next 2/2] netfilter: Convert print_tuple functions to return void
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH 1/1] netfilter: xtables: add quota support to nfacct
  • From: mathieu.poirier@xxxxxxxxxx
• [PATCH 0/1] Add quota capabilities to nfacct
  • From: mathieu.poirier@xxxxxxxxxx
• why counters in nf_conntrack not set in centos 6.x?
  • From: "medialy" <medialy@xxxxxxxxx>
• Re: ipt_SYNPROXY: kernel panic caused by nullpointer dereference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next 3/3] netfilter: Use seq_overflow
  • From: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH ulogd] ulogd: use AC_SEARCH_LIBS for libpthread
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH -next 0/3] seq_printf/puts/putc: Start to convert to return void
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH -next 0/3] seq_printf/puts/putc: Start to convert to return void
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH -next 3/3] netfilter: Use seq_overflow
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH ulogd] ulogd: use AC_SEARCH_LIBS for libpthread
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• Re: [PATCH ulogd] ulogd: use AC_SEARCH_LIBS for libpthread
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH 2/2] netfilter: nft: reject support for IPv6 and TCP reset
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH 1/2] netfilter: REJECT: separate reusable code
  • From: Eric Leblond <eric@xxxxxxxxx>
• [RFC PATCH 0/2] nft: improve reject support
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH libnftables] examples: nft-rule-add: use existing batch infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftables PATCH] examples: delete compat stuff in nft-rule-add.c
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH ulogd] ulogd: use AC_SEARCH_LIBS for libpthread
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• Re: [PATCHv4 0/3] add nft_queue module
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [libnftables PATCH 1/2] expr: add support for nfnetlink queue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/3] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH iptables] libxtables: Call ipaddr_to_network before ipaddr_to_host.
  • From: Hani Benhabiles <kroosec@xxxxxxxxx>
• Re: ipt_SYNPROXY: kernel panic caused by nullpointer dereference
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: ipt_SYNPROXY: kernel panic caused by nullpointer dereference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: ipset: fix incorret comparison in hash_netnet4_data_equal()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipt_SYNPROXY: kernel panic caused by nullpointer dereference
  • From: "Nicki P." <xastx@xxxxxx>
• Re: [PATCH net-next] netfilter: add IPComp extension match support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: introduce l2tp match extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3] netfilter: xt_hashlimit: fix proc entry leak in netns destroy path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: nf_tables: fix missing rules flushing per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: ipset: fix incorret comparison in hash_netnet4_data_equal()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv4 0/3] add nft_queue module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv4 2/3] netfilter: xt_NFQUEUE: separate reusable code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: fix missing rules flushing per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: xt_hashlimit: fix proc entry leak in netns destroy path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: ipset: fix incorret comparison in hash_netnet4_data_equal()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: ipset: fix incorret comparison in hash_netnet4_data_equal()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nft] mnl: don't set NLM_F_ACK flag in mnl_nft_rule_batch_[add|del]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libmnl PATCH 9/9] examples: add for mnl_nlmsg_batch_reset_buffer
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libmnl PATCH 8/9] batch: introduce mnl_nlmsg_batch_reset_buffer for mmap
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libmnl PATCH 7/9] examples: add for mmap nonmin2
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libmnl PATCH 6/9] mmap: add more helper - nonmin2
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libmnl PATCH 5/9] examples: add for mmap nonmin1
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libmnl PATCH 4/9] mmap: add helper - nonmin1
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libmnl PATCH 3/9] examples: add for min mmap
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libmnl PATCH 2/9] mmap: initial
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libmnl PATCH 1/9] headers: update netlink.h to 3.12
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• [libmnl PATCH 0/9] mmaped netlink
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: netfilter: ipset: fix incorret comparison in hash_netnet4_data_equal()
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: libmnl [PATCH 4/8] document: mnl_socket_open
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: libmnl [PATCH 0/8] some cleanups and minor fixes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] libmnl: docs were wrong
  • From: Florian Westphal <fw@xxxxxxxxx>
• libmnl [PATCH 8/8] examples: use mnl_socket_setsockopt
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 7/8] examples: fix display condition
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 6/8] examples: made sub functions the same
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 5/8] attr: validate MNL_TYPE_MSEC same as MNL_TYPE_U64
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 4/8] document: mnl_socket_open
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 3/8] examples: use mnl_nlmsg_get_payload()
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 2/8] examples: fix trivial error message
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 1/8] examples: set attr table
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 0/8] some cleanups and minor fixes
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: xtables-addons compiling warning/error Kernels below 3.7 not supported on ubuntu running mainline kernel
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: xtables-addons compiling warning/error Kernels below 3.7 not supported on ubuntu running mainline kernel
  • From: Vincent Li <vincent.mc.li@xxxxxxxxx>
• Re: xtables-addons compiling warning/error Kernels below 3.7 not supported on ubuntu running mainline kernel
  • From: Vincent Li <vincent.mc.li@xxxxxxxxx>
• Re: xtables-addons compiling warning/error Kernels below 3.7 not supported on ubuntu running mainline kernel
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: xtables-addons compiling warning/error Kernels below 3.7 not supported on ubuntu running mainline kernel
  • From: Vincent Li <vincent.mc.li@xxxxxxxxx>
• Re: [PATCH 3/3] build: use automake and pkgconfig
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: xtables-addons compiling warning/error Kernels below 3.7 not supported on ubuntu running mainline kernel
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH nft] src: fix rule flushing atomically
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: fix missing rules flushing per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: add IPComp extension match support
  • From: Fan Du <fan.du@xxxxxxxxxxxxx>
• netfilter: xt_hashlimit: fix proc entry leak in netns destroy path
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• xtables-addons compiling warning/error Kernels below 3.7 not supported on ubuntu running mainline kernel
  • From: Vincent Li <vincent.mc.li@xxxxxxxxx>
• [PATCHv4 3/3] netfilter: nft: add queue module
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCHv4 2/3] netfilter: xt_NFQUEUE: separate reusable code
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCHv4 1/3] netfilter: nft: fix issue with verdict support
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCHv4 0/3] add nft_queue module
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: libmnl [PATCH 2/5] examples: fix trivial error message
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: Merging iptables-nftables into iptables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv3 2/3] netfilter: xt_NFQUEUE: separate reusable code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv3 3/3] netfilter: nft: add queue module
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCHv3 2/3] netfilter: xt_NFQUEUE: separate reusable code
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCHv3 1/3] netfilter: nft: fix issue with verdict support
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCHv3 0/3] add nft_queue module
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: Merging iptables-nftables into iptables
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: netfilter: xt_hashlimit: fix proc entry leak in netns destroy path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: add IPComp extension match support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: nft: add queue module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libmnl [PATCH 2/5] examples: fix trivial error message
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: libmnl [PATCH 1/5] examples: set attr table
  • From: Florian Westphal <fw@xxxxxxxxx>
• libmnl [PATCH 5/5] attr: validate MNL_TYPE_MSEC same as MNL_TYPE_U64
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 4/5] document: mnl_socket_open
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 3/5] examples: use mnl_nlmsg_get_payload()
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 2/5] examples: fix trivial error message
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 1/5] examples: set attr table
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• libmnl [PATCH 0/5] some clean ups and minor fixes
  • From: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
• Re: [PATCH] netlink: do not SIGSEGV when socket() fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Merging iptables-nftables into iptables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netlink: do not SIGSEGV when socket() fails
  • From: Shawn Landden <shawn@xxxxxxxxxxxxxxx>
• Re: [nftables PATCH] netlink: do not SIGSEGV when socket() fails
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nftables PATCH] netlink: do not SIGSEGV when socket() fails
  • From: Shawn Landden <shawn@xxxxxxxxxxxxxxx>
• Re: [PATCH] netlink: do not SIGSEGV when socket() fails
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH] libmnl: docs were wrong
  • From: Shawn Landden <shawn@xxxxxxxxxxxxxxx>
• [PATCH] netlink: do not SIGSEGV when socket() fails
  • From: Shawn Landden <shawn@xxxxxxxxxxxxxxx>
• Re: [RFC][PATCH] nftables: add slash to chain syntax
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: Merging iptables-nftables into iptables
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC nftables kernel PATCH] netfilter: nf_tables: fix nft_meta_target module
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC][PATCH] nftables: add slash to chain syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nftables kernel PATCH] netfilter: nf_tables: fix nft_meta_target module
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [RFC nftables kernel PATCH] netfilter: nf_tables: fix nft_meta_target module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: nft: add queue module
  • From: Eric Leblond <eric@xxxxxxxxx>
• Merging iptables-nftables into iptables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: nft: add queue module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: nft: add queue module
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] iptables: nft: fix memory leaks in nft_fini
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: fixed memory leaks in nft_xtables_config_load
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] xtables-standalone: call nft_fini in the error path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] mnl: fix name of called build_hdr functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv2] netfilter: nft: add queue module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] add hash:ip,mark data type to ipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] xtables: fix memory leak in command_jump
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Christoph Lameter <cl@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Greg KH <greg@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Christoph Lameter <cl@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Greg KH <greg@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Christoph Lameter <cl@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Christoph Lameter <cl@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Greg KH <greg@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Christoph Lameter <cl@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Greg KH <greg@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Christoph Lameter <cl@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Greg KH <greg@xxxxxxxxx>
• [nft PATCH] mnl: fix name of called build_hdr functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH v2] nft: fixed memory leaks in nft_xtables_config_load
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nft: add queue module
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH] iptables: nft: fix memory leaks in nft_fini
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH] nft: fixed memory leaks in nft_xtables_config_load
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH] xtables: fix memory leak in command_jump
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH] xtables-standalone: call nft_fini in the error path
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nft: add queue module
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nft: add queue module
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [RFC][PATCH] nftables: add slash to chain syntax
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [RFC][PATCH] nftables: add slash to chain syntax
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [libnftables PATCH 1/2] tests: fix deprecation warning xt_LOG
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 2/2] tests: extend test-script to also tests parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nftables: add 'delete map' syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nftables: missing set cleanup in do_command_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nftables: adjust example file for new chain type syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nftables: segfault in top scope define
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] nftables: add 'delete map' syntax
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH] nftables: missing set cleanup in do_command_list
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCHv2] netfilter: nft: add queue module
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: nft: add queue module
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH] Add support for queue target
  • From: Eric Leblond <eric@xxxxxxxxx>
• [libnftables PATCH 2/2] test: add tests for expr queue
  • From: Eric Leblond <eric@xxxxxxxxx>
• [libnftables PATCH 1/2] expr: add support for nfnetlink queue
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH 2/2] netfilter: nft: add queue module
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH 1/2] netfilter: nft: fix issue with verdict support
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nft PATCH] add support for queue target
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH] nftables: adjust example file for new chain type syntax
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH] nftables: segfault in top scope define
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Strange behaviour when listing in interactive mode
  • From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
• [PATCH nft 2/2] meta: relax restriction on UID/GID parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] meta: fix endianness in UID/GID
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: /proc and/or /sys file to know if ip_tables is there?
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [RFC nftables kernel PATCH] netfilter: nf_tables: fix nft_meta_target module
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH iptables] iptables/ip(6)tables-save.c: remove dlfcn.h include
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: /proc and/or /sys file to know if ip_tables is there?
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [RFC nftables kernel PATCH] netfilter: nf_tables: fix nft_meta_target module
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC nftables kernel PATCH] netfilter: nf_tables: fix nft_meta_target module
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [RFC nftables kernel PATCH] netfilter: nf_tables: fix nft_meta_target module
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC nftables kernel PATCH] netfilter: nf_tables: fix nft_meta_target module
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [libnftables PATCH 1/2] tests: fix deprecation warning xt_LOG
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 2/2] tests: extend test-script to also tests parsing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC libnftables PATCH 1/2] src: add expr meta_target
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC libnftables PATCH 2/2] tests: add tests for expr meta_target
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [RFC nftables kernel PATCH] netfilter: nf_tables: fix nft_meta_target module
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• /proc and/or /sys file to know if ip_tables is there?
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH net-next] netfilter: add IPComp extension match support
  • From: Fan Du <fan.du@xxxxxxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Greg KH <greg@xxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Russell King - ARM Linux <linux@xxxxxxxxxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Russell King - ARM Linux <linux@xxxxxxxxxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
• [PATCH iptables] iptables/ip(6)tables-save.c: remove dlfcn.h include
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• Re: [PATCH iptables] iptables/Makefile.am: fix more static linking issues
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• Re: [PATCH iptables] iptables/Makefile.am: fix more static linking issues
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables] iptables/Makefile.am: fix more static linking issues
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Russell King - ARM Linux <linux@xxxxxxxxxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
• netfilter: xt_hashlimit: fix proc entry leak in netns destroy path
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Sasha Levin <sasha.levin@xxxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: ip_set_hash_netnet.c:62: possible typo ?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: netfilter: active obj WARN when cleaning up
  • From: Sasha Levin <sasha.levin@xxxxxxxxxx>
• [PATCH v3] netfilter: introduce l2tp match extension
  • From: James Chapman <jchapman@xxxxxxxxxxx>
• [PATCH iptables-nftables] nft: fix out of bound memory copy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: ip_set_hash_netnet.c:62: possible typo ?
  • From: David Binderman <dcb314@xxxxxxxxxxx>
• Re: netfilter: ipset: fix incorret comparison in hash_netnet4_data_equal()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ip_set_hash_netnet.c:62: possible typo ?
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: ip_set_hash_netnet.c:62: possible typo ?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ip_set_hash_netnet.c:62: possible typo ?
  • From: David Binderman <dcb314@xxxxxxxxxxx>
• [PATCH nftables 2/2] netlink: improve rule deletion per chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables 1/2] datatype: fix missing nul-terminator in string_type_print
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftables 2/2] src: consolidate netlink build header function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftables 1/2] include: fix possible clash in ifdef namespace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.4.21 release
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.4.21 release
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• Re: [PATCH 3/7] netfilter: synproxy: correct wscale option passing
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH 4/7] netfilter: fix wrong byte order in nf_ct_seqadj_set internal information
  • From: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ulogd 2.0.3 release
  • From: Eric Leblond <eric@xxxxxxxxx>
• [ANNOUNCE] iptables 1.4.21 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/7] netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 2/7] netfilter: synproxy: send mss option to backend
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/7] netfilter: synproxy: correct wscale option passing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] netfilter: nft_compat: fix error path in nft_parse_compat()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] netfilter: nf_conntrack: decrement global counter after object release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] netfilter: ebt_ip6: fix source and destination matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: fix wrong byte order in nf_ct_seqadj_set internal information
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] netfilter: fix connlimit Kconfig prompt string
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH v4] tests: tests for libnftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] include: table: chain: added set and get for u8 values in chain and table.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipv6 fragmentation-related panic in netfilter
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] add hash:ip,mark data type to ipset
  • From: Vytas Dauksa <vytas.dauksa@xxxxxxxxxxxxxx>
• Re: [PATCH 3/3] build: use automake and pkgconfig
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] add hash:ip,mark data type to ipset
  • From: Vytas Dauksa <vytas.dauksa@xxxxxxxxxxxxxx>
• Re: [PATCH 3/3] build: use automake and pkgconfig
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] build: rename conflicting parser.h instances
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] build: use automake and pkgconfig
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftables PATCH v4] tests: tests for libnftables
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: [PATCH 3/3] build: use automake and pkgconfig
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH 3/3] build: use automake and pkgconfig
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 2/3] build: rename conflicting parser.h instances
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: ipv6 fragmentation-related panic in netfilter
  • From: Wolfgang Walter <linux@xxxxxxx>
• Re: [nftables PATCH] listing: only display wanted chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] build: use automake and pkgconfig
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] build: rename conflicting parser.h instances
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] build: remove unused checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables PATCh 0/3] Fix jump operation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] src: expr: target: fixed error in nft_rule_expr_target_parse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] src: expr: log: fixed error in nft_rule_expr_log_build
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] expr: log: fixed error in nft_rule_expr_parse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] expr: log: fixed error in nft_rule_expr_parse
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH] src: expr: target: fixed error in nft_rule_expr_target_parse
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH] src: expr: log: fixed error in nft_rule_expr_log_build
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: bugfix: fix regression bug in ebt_ip6 which resulted in ebtables IPv6 src/dst fields not being zeroed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: byte order issue in nf_ct_seqadj_set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: synproxy: correct wscale option passing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: synproxy: send mss option to backend
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipv6 fragmentation-related panic in netfilter
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• [PATCH] include: table: chain: added set and get for u8 values in chain and table.
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH] expr: log: fixed error in nft_rule_expr_parse
  • From: Ana Rey <anarey@xxxxxxxxx>
• Re: ipv6 fragmentation-related panic in netfilter
  • From: Wolfgang Walter <linux@xxxxxxx>
• Re: [nftables PATCH] listing: only display wanted chain
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] ulogd: ulogd_inppkt_NFLOG: close nflog handle after unbinding
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: bugfix: fix regression bug in ebt_ip6 which resulted in ebtables IPv6 src/dst fields not being zeroed
  • From: Bart De Schuymer <bdschuym@xxxxxxxxxx>
• Re: linux-next: Tree for Nov 18 (netfilter: xt_PROXY)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH iptables v2] utils: nfsynproxy: fix error while compiling the BPF filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] utils: nfsynproxy: fix error while compiling the BPF filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftables] expr: log: release prefix
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] nftables: delete debian/
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: decrement global counter after object release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nft_compat: fix error path in nft_parse_compat()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables-nftables] nft: fix inversion of built-in selectors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ulogd: ulogd_inppkt_NFLOG: close nflog handle after unbinding
  • From: Chris Boot <bootc@xxxxxxxxx>
• Re: linux 3.12 regression - snat problem with ftp helper
  • From: "Dawid Stawiarski - nazwa.pl" <dawid.stawiarski@xxxxxxxxx>
• [nftables PATCH] listing: only display wanted chain
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCh 0/3] Fix jump operation
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 3/3] verdict: fix delinearize in case of jump
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 2/3] jump: fix logic in netlink linearize.
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 1/3] expression: fix indent
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: nftables: use automake & pkgconfig
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 0/9] genetlink: reduce ops size and complexity (v2)
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH] netfilter: byte order issue in nf_ct_seqadj_set
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: linux 3.12 regression - snat problem with ftp helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/9] genetlink: reduce ops size and complexity (v2)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/9] genetlink: reduce ops size and complexity (v2)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux 3.12 regression - snat problem with ftp helper
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [RFC PATCH net-next] net: reorder struct netns_ct for better cache-line usage
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [RFC PATCH net-next] net: reorder struct netns_ct for better cache-line usage
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [PATCH 0/9] genetlink: reduce ops size and complexity (v2)
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH] build: fix make distcheck
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] expr: match: fix wrong flag setting in nft_rule_expr_match_parse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• linux 3.12 regression - snat problem with ftp helper
  • From: "Dawid Stawiarski - nazwa.pl" <dawid.stawiarski@xxxxxxxxx>
• linux 3.12 - snat problem with ftp helper
  • From: "Dawid Stawiarski - nazwa.pl" <dawid.stawiarski@xxxxxxxxx>
• Re: [PATCH 0/9] genetlink: reduce ops size and complexity (v2)
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH 0/9] genetlink: reduce ops size and complexity (v2)
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 2/2 nft] build: relax compilation not to break on warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2 nft] parser: fix warning on deprecated directive in bison
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftables] expr: fix leak in target and match expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/9] genetlink: reduce ops size and complexity (v2)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH v3] tests: tests for libnftables
  • From: Ana Rey <anarey@xxxxxxxxx>
• [PATCH 2/9] hsr: use genl_register_family_with_ops()
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 7/9] genetlink: allow making ops const
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 3/9] ieee802154: use genl_register_family_with_ops()
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 4/9] wimax: use genl_register_family_with_ops()
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 5/9] genetlink: remove genl_register_ops/genl_unregister_ops
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 6/9] genetlink: register family ops as array
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 8/9] genetlink: make all genl_ops users const
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 0/9] genetlink: reduce ops size and complexity (v2)
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 9/9] genetlink: make genl_ops flags a u8 and move to end
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH 1/9] taskstats: use genl_register_family_with_ops()
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [nft PATCH] nftables: delete debian/
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH 2/2] netfilter: synproxy: correct wscale option passing
  • From: Martin Topholm <mph@xxxxxxx>
• [PATCH 1/2] netfilter: synproxy: send mss option to backend
  • From: Martin Topholm <mph@xxxxxxx>
• [PATCH 0/2] Netfilter SYNPROXY mss and wscale bugfix
  • From: Martin Topholm <mph@xxxxxxx>
• Re: [PATCH 0/2] Netfilter SYNPROXY mss and wscale bugfix
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [PATCH] arptables: Add man pages for arptables-{save,restore}
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• [PATCH V2] arptables: Add man pages for arptables-{save,restore}
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [PATCH] arptables: Add man pages for arptables-{save,restore}
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [libnftables PATCH 2/2] json: Refactor of exporting and parsing support flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 1/2] json: remove the rule flags in ruleset file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix connlimit Kconfig prompt string
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Fix the format of /proc/net/nf_conntrack_expect
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 v2] Fix all set output from list/save when set with counters in use.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: Fix the format of /proc/net/nf_conntrack_expect
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH 1/3 v2] Fix all set output from list/save when set with counters in use.
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• Re: [PATCH] add hash:ip,mark data type to ipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 3/3] ipset: Follow manual page behavior for SET target on list:set
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/3] ipset: Fix malformed output from list/save for ICMP types in port field.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/3] Fix all set output from list/save when set with counters in use.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/1] ipset: fix timeout data type size
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] add hash:ip,mark data type to ipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [GIT] Networking
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [libnftables PATCH 2/2] json: Refactor of exporting and parsing support flags
  • From: Alvaro Neira <alvaroneay@xxxxxxxxx>
• [libnftables PATCH 1/2] json: remove the rule flags in ruleset file
  • From: Alvaro Neira <alvaroneay@xxxxxxxxx>
• Re: [PATCH v2] tests: tests for libnftables
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH v2] tests: tests for libnftables
  • From: Ana Rey <anarey@xxxxxxxxx>
• [nftables kernel PATCH v2] netfilter: nf_tables: allow to dump sets using NFPROTO_UNSPEC
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: TOS target mask - leave alone the ECN bits
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [patch net-next 0/2] netfilter: push reasm skb through instead of original frag skbs
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [patch net-next 1/2] ip6_output: fragment outgoing reassembled skb properly
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] tests: tests for libnftables
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] tests: tests for libnftables
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH] tests: tests for libnftables
  • From: Ana Rey <anarey@xxxxxxxxx>
• TOS target mask - leave alone the ECN bits
  • From: Patrick Schaaf <netdev@xxxxxx>
• Re: [PATCH v2] netfilter: introduce l2tp match extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Panic on 3.10.18 in nf_conntrack_sip with IPv6
  • From: Chris Boot <bootc@xxxxxxxxx>
• Re: [patch net-next 1/2] ip6_output: fragment outgoing reassembled skb properly
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next 1/2] ip6_output: fragment outgoing reassembled skb properly
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [patch net-next 1/2] ip6_output: fragment outgoing reassembled skb properly
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] nft-bridge: translating ebt to ip flags and viceversa
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH] nft-bridge: translating ebt to ip flags and viceversa
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [patch net-next 1/2] ip6_output: fragment outgoing reassembled skb properly
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [libnftables PATCH] tests: fix undefined symbol
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables v2 PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] ipset: fix timeout data type size
  • From: Nikolay Martynov <mar.kolya@xxxxxxxxx>
• Re: [patch net-next 1/2] ip6_output: fragment outgoing reassembled skb properly
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [patch net-next 2/2] netfilter: push reasm skb through instead of original frag skbs
  • From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
• [PATCH 3/3] ipset: Follow manual page behavior for SET target on list:set
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• [PATCH 2/3] ipset: Fix malformed output from list/save for ICMP types in port field.
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• [PATCH 1/3] Fix all set output from list/save when set with counters in use.
  • From: Sergey Popovich <popovich_sergei@xxxxxxx>
• [libnftables PATCH] tests: fix undefined symbol
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [iptables-nftables v2 PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH] netfilter: fix connlimit Kconfig prompt string
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH v2 04/11] net ipset: use rbtree postorder iteration instead of opencoding
  • From: Cody P Schafer <cody@xxxxxxxxxxxxxxxxxx>
• Re: [patch net-next 2/2] netfilter: push reasm skb through instead of original frag skbs
  • From: Julian Anastasov <ja@xxxxxx>
• bugfix: fix regression bug in ebt_ip6 which resulted in ebtables IPv6 src/dst fields not being zeroed
  • From: Luis Fernando Cornachioni Estrozi <lestrozi@xxxxxxxxxx>
• Re: [PATCH 3/4] build: avoid inclusion of stdbool.h in C++
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH iptables] extensions: libxt_cluster: add note on arptables-jf
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [patch net-next 2/2] netfilter: push reasm skb through instead of original frag skbs
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [patch net-next 1/2] ip6_output: fragment outgoing reassembled skb properly
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [patch net-next 0/2] netfilter: push reasm skb through instead of original frag skbs
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [iptables-nftables PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables-nftables PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH] nft: arp: Fix a compilation warning
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [patch net-next 1/3] move skb_nfct_reasm into skbuff.h
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next 3/3] fix skb_morph to preserve skb->sk and skb->destructor pointers
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log
  • From: Arnaldo Carvalho de Melo <acme@xxxxxxxxxxxxxxxxxx>
• Re: [patch net-next 3/3] fix skb_morph to preserve skb->sk and skb->destructor pointers
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• Re: [PATCH iptables 2/3] android: Don't include conflicting headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/4] build: avoid inclusion of stdbool.h in C++
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/4] build: resolve build errors in dependent programs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] build: resolve automake 1.12 warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
• Re: [patch net-next 3/3] fix skb_morph to preserve skb->sk and skb->destructor pointers
  • From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
• Re: [patch net-next 1/3] move skb_nfct_reasm into skbuff.h
  • From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
• [patch net-next 1/3] move skb_nfct_reasm into skbuff.h
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [patch net-next 3/3] fix skb_morph to preserve skb->sk and skb->destructor pointers
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [patch net-next 2/3] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [patch net-next 0/3] couple of reasm fixes
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [libnftables PATCH] src: Fix a build issue on header inclusion in internal.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftables PATCH] src: Fix a build issue on header inclusion in internal.h
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH v2] iptables: add support for l2tp match
  • From: James Chapman <jchapman@xxxxxxxxxxx>
• [PATCH v2] netfilter: introduce l2tp match extension
  • From: James Chapman <jchapman@xxxxxxxxxxx>
• Re: [PATCH 0/5] nf_tables updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 00/20] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 5/5] netfilter: nft_compat: use _safe version of list_for_each
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/5] netfilter: bridge: nf_tables: add filter chain type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: nft_nat: Fix endianness issue reported by sparse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/5] nf_tables updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: bridge: fix nf_tables bridge dependencies with main core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/5] netfilter: nf_tables: remove duplicated include from nf_tables_ipv4.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/20] netfilter: ipt_CLUSTERIP: make proc directory per net namespace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/20] ipvs: improved SH fallback strategy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/20] netfilter: ipt_CLUSTERIP: make clusterip_lock per net namespace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/20] netfilter: ipt_CLUSTERIP: make clusterip_list per net namespace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/20] ipvs: avoid rcu_barrier during netns cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/20] netfilter: ipt_CLUSTERIP: use proper net namespace to operate CLUSTERIP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/20] netfilter: ipt_CLUSTERIP: add parameter net in clusterip_config_find_get
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/20] netfilter: ctnetlink: account both directions in one step
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/20] netfilter: introduce nf_conn_acct structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/20] net: ipvs: sctp: do not recalc sctp csum when ports didn't change
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/20] netfilter: ipset: The unnamed union initialization may lead to compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/20] netfilter: ipset: Use netlink callback dump args only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/20] netfilter: ipset: remove duplicate define
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/20] netfilter: ipt_CLUSTERIP: create proc entry under proper ipt_CLUSTERIP directory
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/20] net: ipvs: sctp: add missing verdict assignments in sctp_conn_schedule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/20] bridge: netfilter: orphan skb before invoking ip netfilter hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/20] netfilter: ip6t_REJECT: skip checksum verification for outgoing ipv6 packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/20] netfilter:ipset: Fix memory allocation for bitmap:port
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/20] netfilter: xt_socket: use sock_gen_put()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/20] ipvs: fix the IPVS_CMD_ATTR_MAX definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/20] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables: add support for l2tp match
  • From: James Chapman <jchapman@xxxxxxxxxxx>
• Re: [PATCH] netfilter: introduce l2tp match extension
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: introduce l2tp match extension
  • From: James Chapman <jchapman@xxxxxxxxxxx>
• Re: [patch net-next RFC] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [patch] netfilter: nf_tables: use _safe version of list_for_each
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• re: netfilter: nf_tables: add compatibility layer for x_tables
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [PATCH iptables] extensions: libxt_cluster: add note on arptables-jf
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [PATCH iptables] extensions: libxt_cluster: add note on arptables-jf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: improve chain name validation
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [PATCH iptables 3/3] android: build: Blacklist TCPOPTSTRIP on systems that lack TCPOPT_*
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] ip6tables: Use consistent exit code for EAGAIN
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 4/6] test: report errors building XML tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: nf_tables: remove duplicated include from nf_tables_ipv4.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL] Second Round of IPVS updates for v3.13
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 6/6] test: report compilation without support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 5/6] test: style cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 3/6] test: use constants for coloured strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 2/6] test: fix memleak in XML testing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 1/6] test: return EXIT_FAILURE if some error was found
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH v2] src: add fprintf API functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 1/2] ruleset: factorize json/xml tagging
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 3/3] acct: add input and output interface index
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: spurious error in load_extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: improve chain name validation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] payload: fix ethernet type protocol matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables: tar packages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables: tar packages
  • From: Xose Vazquez Perez <xose.vazquez@xxxxxxxxx>
• Re: [RFC PATCH nf_conntrack_extend] new extensions without changes kernel source
  • From: "Vitaly E. Lavrov" <lve@xxxxxxx>
• [PATCH iptables] ip6tables: Use consistent exit code for EAGAIN
  • From: Kevin Cernekee <cernekee@xxxxxxxxx>
• [PATCH 1/8] net ipset: use rbtree postorder iteration instead of opencoding
  • From: Cody P Schafer <cody@xxxxxxxxxxxxxxxxxx>
• Re: ipv6 fragmentation-related panic in netfilter
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: ipv6 fragmentation-related panic in netfilter
  • From: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
• [PATCH] iptables: add --line-numbers short option
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH] add hash:ip,mark data type to ipset
  • From: Vytas Dauksa <vytas.dauksa@xxxxxxxxxxxxxx>
• [libnftables PATCH 6/6] test: report compilation without support
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 5/6] test: style cleanup
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 4/6] test: report errors building XML tree
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 3/6] test: use constants for coloured strings
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 1/6] test: return EXIT_FAILURE if some error was found
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 2/6] test: fix memleak in XML testing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [RFC PATCH nf_conntrack_extend] new extensions without changes kernel source
  • From: Dirk <biecie547@xxxxxxxxx>
• [PATCH 1/1] ipset: fix timeout data type size
  • From: Nikolay Martynov <mar.kolya@xxxxxxxxx>
• Re: [BUG 3.12.rc4] Oops: unable to handle kernel paging request during shutdown
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC nft] flush/delete ruleset
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH] add hash:ip,mark data type to ipset
  • From: Vytas Dauksa <vytas.dauksa@xxxxxxxxxxxxxx>
• Re: [patch net-next RFC] netfilter: ip6_tables: use reasm skb for matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [patch net-next RFC] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [patch net-next RFC] netfilter: ip6_tables: use reasm skb for matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [patch net-next RFC] netfilter: ip6_tables: use reasm skb for matching
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH -next] netfilter: nf_tables: remove duplicated include from nf_tables_ipv4.c
  • From: Wei Yongjun <weiyj.lk@xxxxxxxxx>
• [PATCH nf-next 2/2] net: ipvs: sctp: do not recalc sctp csum when ports didn't change
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL] Second Round of IPVS updates for v3.13
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH nf-next 1/2] net: ipvs: sctp: add missing verdict assignments in sctp_conn_schedule
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: ipv6 fragmentation-related panic in netfilter
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [libnftables PATCH v2] src: add fprintf API functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• ipv6 fragmentation-related panic in netfilter
  • From: Tomas Hlavacek <tmshlvck@xxxxxxxxx>
• Re: [PATCH] netfilter fix for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: IPV6 nf defrag does not work
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [nft tool PATCH] src: include <stdio.h>
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nf_conntrack_extend] new extensions without changes kernel source
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: xt_NFQUEUE: fix --queue-bypass regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter fix for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: IPV6 nf defrag does not work
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH FIX] NFQUEUE: fix --queue-bypass regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: IPV6 nf defrag does not work
  • From: Florian Westphal <fw@xxxxxxxxx>
• IPV6 nf defrag does not work
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [nft tool PATCH] src: include <stdio.h>
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH nf_tables] netfilter: bridge: nf_tables: add filter chain type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables-kernel PATCH v2] netfilter: nftables: Fix sparse endianness issue on nft_nat.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH FIX] NFQUEUE: fix --queue-bypass regression
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [libnftables PATCH] test: xml: fix truncated ruleset testfile
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH 0/2 nf_tables] 32/64/128-bits word addressing in nf_tables
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [RFC PATCH nft] src: finish concatenation support using the set infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH 1/2 nf_tables] netfilter: nf_tables: allow 32/64/128-bits register addressing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH 2/2 nf_tables] netfilter: nf_tables: round to 32 bits in payload operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH 0/2 nf_tables] 32/64/128-bits word addressing in nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables 1/3] android: libiptc: Fix socklen_t type mismatch on Android
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 3/4] build: avoid inclusion of stdbool.h in C++
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 2/4] build: resolve build errors in dependent programs
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 4/4] build: use C++11 headers if available
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 1/4] build: resolve automake 1.12 warning
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• libnftables header includes fixups
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 2/2] build: resolve build errors in dependent programs
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [libnftables PATCH 2/2] src: add fprintf API functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 1/2] ruleset: factorize json/xml tagging
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH] test: xml: fix truncated ruleset testfile
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nftables-kernel PATCH v2] netfilter: nftables: Fix sparse endianness issue on nft_nat.c
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nftables-kernel PATCH] netfilter: nftables: Fix sparse endianness issue on nft_nat.c
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nftables-kernel PATCH] netfilter: nftables: Fix sparse endianness issue on nft_nat.c
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [libnftables PATCH] test: xml: fix malformed ruleset testfile
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH] test: xml: fix malformed ruleset testfile
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [nftables-kernel PATCH] netfilter: nftables: Fix sparse endianness issue on nft_nat.c
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix library interface version
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH net 0/3] ipv6: use rt6i_gateway as nexthop
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] nft: nft_set_attr_get_u32 null pointer deref
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: linux-next: Tree for Oct 18 (netdev: nf_tables_bridge.c)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] build: resolve build errors in dependent programs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] bridge: netfilter: orphan skb before invoking ip netfilter hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [BUG 3.12.rc4] Oops: unable to handle kernel paging request during shutdown
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] nft: nft_set_attr_get_u32 null pointer deref
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [BUG] libnftables: NULL pointer dereference in nft_expr_ops_lookup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH] test: update to fit latest limit changes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH] test: xml: fix malformed ruleset testfile
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/2] ipset patches for nf-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: WGH <wgh@xxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.20.1 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 0/2] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: ipset: remove duplicate define
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/2] netfilter:ipset: Fix memory allocation for bitmap:port
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: WGH <wgh@xxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix library interface version
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] build: fix incorrect library versioning
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: remove duplicate define
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset 6.20 compile failure on <3.8
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: conntrack, idle TCP connection and keep-alives
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH libmnl] socket: Enable specifying receiver of a netlink messages
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• conntrack, idle TCP connection and keep-alives
  • From: WGH <wgh@xxxxxxxxx>
• [PATCH iptables 3/3] android: build: Blacklist TCPOPTSTRIP on systems that lack TCPOPT_*
  • From: Kevin Cernekee <cernekee@xxxxxxxxx>
• [PATCH iptables 2/3] android: Don't include conflicting headers
  • From: Kevin Cernekee <cernekee@xxxxxxxxx>
• [PATCH iptables 1/3] android: libiptc: Fix socklen_t type mismatch on Android
  • From: Kevin Cernekee <cernekee@xxxxxxxxx>
• [PATCH iptables 0/3] Fix build errors on Android
  • From: Kevin Cernekee <cernekee@xxxxxxxxx>
• [PATCH] netfilter: ipset: Fix library interface version
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• [PATCH] nft: nft_set_attr_get_u32 null pointer deref
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [BUG] libnftables: NULL pointer dereference in nft_expr_ops_lookup
  • From: Jiri Benc <jbenc@xxxxxxxxxx>
• Re: [BUG] libnftables: NULL pointer dereference in nft_expr_ops_lookup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_queue/libnetfilter_conntrack: TCP packet reordering
  • From: Florian Westphal <fw@xxxxxxxxx>
• libnetfilter_queue/libnetfilter_conntrack: TCP packet reordering
  • From: Christian Priebe <chr.priebe@xxxxxxxxxxxxxx>
• [BUG] libnftables: NULL pointer dereference in nft_expr_ops_lookup
  • From: Jiri Benc <jbenc@xxxxxxxxxx>
• [PATCH libnftables] rule: remove NFT_RULE_ATTR_FLAGS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] bridge: netfilter: orphan skb before invoking ip netfilter hooks
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] bridge: netfilter: orphan skb before invoking ip netfilter hooks
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] bridge: netfilter: orphan skb before invoking ip netfilter hooks
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag causes behavioural change in userspace?
  • From: Florian Westphal <fw@xxxxxxxxx>
• [libnftables PATCH] test: xml: fix malformed ruleset testfile
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag causes behavioural change in userspace?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag causes behavioural change in userspace?
  • From: Pekka Pietikäinen <pp@xxxxxxxxxx>
• Re: netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag causes behavioural change in userspace?
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag causes behavioural change in userspace?
  • From: Pekka Pietikäinen <pp@xxxxxxxxxx>
• Re: netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag causes behavioural change in userspace?
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag causes behavioural change in userspace?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag causes behavioural change in userspace?
  • From: Jari Turkia <jmjt@xxxxxx>
• Re: [PATCH net-next 0/3] initialize fragment hash secrets with net_get_random_once
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/3] netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: John Stultz <john.stultz@xxxxxxxxxx>
• Re: [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update
  • From: Will Deacon <will.deacon@xxxxxxx>
• RE: [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] netfilter: ipset: remove duplicate define
  • From: Michael Opdenacker <michael.opdenacker@xxxxxxxxxxxxxxxxxx>
• RE: [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update
  • From: "David Laight" <David.Laight@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: skip checksum verification for outgoing rejected ipv6 packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: ebt_ulog: fix info leaks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3] netfilter: ipt_ULOG: fix info leaks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/3] netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 3/3] inet: remove old fragmentation hash initializing
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• [PATCH net-next 2/3] ipv6: split inet6_hash_frag for netfilter and initialize secrets with net_get_random_once
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• [PATCH net-next 1/3] ipv4: initialize ip4_frags hash secret as late as possible
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• [PATCH net-next 0/3] initialize fragment hash secrets with net_get_random_once
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• [libnftables PATCH] test: update to fit latest limit changes
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag causes behavioural change in userspace?
  • From: Pekka Pietikäinen <pp@xxxxxxxxxx>
• Re: [PATCH nft] statement: avoid huge rodata array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] statement: avoid huge rodata array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] statement: avoid huge rodata array
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] netfilter: skip checksum verification for outgoing rejected ipv6 packets
  • From: Stanislav Fomichev <stfomichev@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: skip checksum verification for outgoing rejected ipv6 packets
  • From: Stanislav Fomichev <stfomichev@xxxxxxxxxxxxxx>
• [PATCH nft] statement: avoid huge rodata array
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: skip checksum verification for outgoing rejected ipv6 packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] nftables: operational limit match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: skip checksum verification for outgoing rejected ipv6 packets
  • From: Stanislav Fomichev <stfomichev@xxxxxxxxxxxxxx>
• Re: [PATCH 3/3] netfilter: ipset: The unnamed union initialization may lead to compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] net: sched: Use dev_net() instead of the direct access to ->nd_net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] netfilter: ipset: Use netlink callback dump args only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix ordering of jumpstack allocation and table update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Wagner <wagi@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Wagner <wagi@xxxxxxxxx>
• RE: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: "Ni, Xun" <xun.ni@xxxxxxxxx>
• ipset 6.20 compile failure on <3.8
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH net 2/3] ipv6: fill rt6i_gateway with nexthop address
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net 0/3] ipv6: use rt6i_gateway as nexthop
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net 0/3] ipv6: use rt6i_gateway as nexthop
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Wagner <wagi@xxxxxxxxx>
• [PATCH libnftables] set_elem: fix access after free in case of parsing errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix ordering of jumpstack allocation and table update
  • From: Will Deacon <will.deacon@xxxxxxx>
• Re: [PATCH net 0/3] ipv6: use rt6i_gateway as nexthop
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net 2/3] ipv6: fill rt6i_gateway with nexthop address
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH net 3/3] netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helper
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net 2/3] ipv6: fill rt6i_gateway with nexthop address
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net 1/3] ipv6: always prefer rt6i_gateway if present
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net 2/3] ipv6: fill rt6i_gateway with nexthop address
  • From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
• [PATCH 2/3] build: rename conflicting parser.h instances
  • From: Jan Engelhardt <jengelh@xxxxxxx>