Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH 3/3] build: use automake and pkgconfig
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• nftables: use automake & pkgconfig
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 1/3] build: remove unused checks
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 1/2] build: resolve automake 1.12 warning
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 2/2] build: resolve build errors in dependent programs
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• libnftables: build fixes
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] build: fix incorrect library versioning
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH net 2/3] ipv6: fill rt6i_gateway with nexthop address
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net 0/3] ipv6: use rt6i_gateway as nexthop
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net 3/3] netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helper
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net 1/3] ipv6: always prefer rt6i_gateway if present
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [RFC PATCH nft] src: add support for interface wildcard name
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 03/17] netfilter: add nftables
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: linux-next: Tree for Oct 18 (netdev: nf_tables_bridge.c)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH] netfilter: fix ordering of jumpstack allocation and table update
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] netfilter: fix ordering of jumpstack allocation and table update
  • From: Will Deacon <will.deacon@xxxxxxx>
• [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• Re: [PATCH] netfilter: fix ordering of jumpstack allocation and table update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] net: sched: Use dev_net() instead of the direct access to ->nd_net
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 2/3] net: sched: Use dev_net() instead of the direct access to ->nd_net
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: ipset: Use netlink callback dump args only
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: ipset: The unnamed union initialization may lead to compilation error
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/3] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [nftables-kernel PATCH] netfilter: nftables: Fix sparse endianness issue on nft_nat.c
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: ip{,6}tables-save misleading return code
  • From: mancha <mancha1@xxxxxxxx>
• Re: [PATCH 00/17] netfilter updates: nf_tables pull request
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix ordering of jumpstack allocation and table update
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH iptables-nftables] nft: fix interface wildcard matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: fix ordering of jumpstack allocation and table update
  • From: Will Deacon <will.deacon@xxxxxxx>
• Re: [libnftables PATCH] src: add fprintf functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH iptables-nftables] nft: fix interface wildcard matching
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [PATCH RFC 3/3] acct: add input and output interface index
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [PATCH RFC 3/3] acct: add input and output interface index
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• No more PHYSIN in iptables INPUT rules in kernel 3.11.3
  • From: Rolf Fokkens <rolf@xxxxxxxxxxxxxx>
• Re: [libnftables PATCH] src: add fprintf functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix configure failure when --with-kmod=no
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [nftables PATCH v2] src: fix return code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/6] Add net namespace support for ipt_CLUSTERIP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables-nftables] nft: fix interface wildcard matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ip{,6}tables-save misleading return code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables-nftables] nft: fix interface wildcard matching
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [PATCH] nft: arp: fix STRING_OVERFLOW
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] ipvs: avoid rcu_barrier during netns cleanup
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: xt_socket: use sock_gen_put()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] ipvs: avoid rcu_barrier during netns cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH] json: remove space in Json output support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] ipvs: avoid rcu_barrier during netns cleanup
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 2/3] ipvs: avoid rcu_barrier during netns cleanup
  • From: Julian Anastasov <ja@xxxxxx>
• [RFC PATCH nf_conntrack_extend] new extensions without changes kernel source
  • From: "Vitaly E. Lavrov" <lve@xxxxxxx>
• [libnftables PATCH] src: add fprintf functions
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [PATCH iptables-nftables] nft: fix interface wildcard matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft] src: add support for interface wildcard name
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [RFC PATCH nft] src: add support for interface wildcard name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft] src: add support for interface wildcard name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft] src: add support for interface wildcard name
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [RFC PATCH nft] src: add support for interface wildcard name
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/3] ipvs: avoid rcu_barrier during netns cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH nft] src: add support for interface wildcard name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH nft] src: add support for interface wildcard name
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrackd: Don't hardcode libs dir path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] ipvs: improved SH fallback strategy
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL] IPVS updates for v3.13
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/3] ipvs: fix the IPVS_CMD_ATTR_MAX definition
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/3] ipvs: avoid rcu_barrier during netns cleanup
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrackd: Don't hardcode libs dir path
  • From: Hani Benhabiles <kroosec@xxxxxxxxx>
• ip{,6}tables-save misleading return code
  • From: "mancha" <mancha1@xxxxxxxx>
• [PATCH 00/17] netfilter updates: nf_tables pull request
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/17] netfilter: pass hook ops to hookfn
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/17] netfilter: nf_nat: move alloc_null_binding to nf_nat_core.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/17] netfilter: nf_tables: add netlink set API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/17] netfilter: nf_tables: expression ops overloading
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/17] netfilter: nf_tables: add optimized data comparison for small values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/17] netfilter: nf_tables: nft_payload: fix transport header base
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/17] netfilter: nf_tables: convert built-in tables/chains to chain types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/17] netfilter: nft_payload: add optimized payload implementation for small loads
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/17] netfilter: nf_tables: add support for dormant tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/17] netfilter: nf_tables: Add support for IPv6 NAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/17] netfilter: nf_tables: add insert operation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/17] netfilter: nf_tables: complete net namespace support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/17] netfilter: nfnetlink: add batch support and use it from nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/17] netfilter: nf_tables: add trace support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/17] netfilter: nf_tables: add ARP filtering support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/17] netfilter: add nftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/17] netfilter: nf_tables: add compatibility layer for x_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables-kernel PATCH 0/7] API minor fixes and improvement proposals
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [OOPS PATCH 0/1] netfilter/sip: fix OOPS in flush_expectations()
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [nftables-kernel PATCH 0/7] API minor fixes and improvement proposals
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nftables-kernel PATCH 7/7] netfilter: nf_tables: Improve payload expression for an extra offset
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables-kernel PATCH 6/7] netfilter: nf_tables: Add left and right shifts to bitwise expression
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables-kernel PATCH 5/7] netfilter: nf_tables: Add a meta key to get the device address length
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables-kernel PATCH 4/7] netfilter: nf_tables: Use a semantically relevant name on chain's refs
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables-kernel PATCH 3/7] netfilter: nf_tables: Expose the table's chain usage to the netlink API
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables-kernel PATCH 2/7] netfilter: nf_tables: Use byteorder operands length relevantly
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables-kernel PATCH 1/7] netfilter: nf_tables: Fix API documentation on a missing part
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables-kernel PATCH 0/7] API minor fixes and improvement proposals
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH] nft: arp: fix STRING_OVERFLOW
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [libnftables PATCH] json: remove space in Json output support
  • From: Alvaro Neira <alvaroneay@xxxxxxxxx>
• Re: [OOPS PATCH 0/1] netfilter/sip: fix OOPS in flush_expectations()
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [PATCH] nft: arp: fix STRING_OVERFLOW
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [OOPS PATCH 0/1] netfilter/sip: fix OOPS in flush_expectations()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [OOPS PATCH 0/1] netfilter/sip: fix OOPS in flush_expectations()
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] nfct: Fix use-after-free / double-free
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [OOPS PATCH 0/1] netfilter/sip: fix OOPS in flush_expectations()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] nfct: Fix use-after-free / double-free
  • From: Hani Benhabiles <kroosec@xxxxxxxxx>
• [PATCH net-next] netfilter: xt_socket: use sock_gen_put()
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [OOPS PATCH 1/1] netfilter: fix OOPS in flush_expectations()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [OOPS PATCH 1/1] netfilter: fix OOPS in flush_expectations()
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [PATCH] netfilter: ipset: Fix configure failure when --with-kmod=no
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: ipset: Fix configure failure when --with-kmod=no
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [OOPS PATCH 1/1] netfilter: fix OOPS in flush_expectations()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [OOPS PATCH 0/1] netfilter/sip: fix OOPS in flush_expectations()
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [OOPS PATCH 1/1] netfilter: fix OOPS in flush_expectations()
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [nftables PATCH] src: error if listing nonexistent table
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] iptables-nftables nft: Removes if_nametoindex ,NFT_META_OIF for outiface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nftables PATCH v2] src: fix return code
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] iptables-nftables nft: Removes if_nametoindex ,NFT_META_OIF for outiface
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [PATCH] iptables-nftables nft: Removes if_nametoindex ,NFT_META_OIF for outiface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables-nftables nft: Removes if_nametoindex ,NFT_META_OIF for outiface
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [nftables kernel - PATCH 1/2] netfilter: nf_tables: Update uapi nftables netlink header documentation
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: ipt_ULOG: fix info leaks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ebt_ulog: fix info leaks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libmnl PATCH] debug: don't colorize output on non tty
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables kernel - PATCH 2/2] netfilter: nf_tables: Fix the netlink attributes policy for chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables kernel - PATCH 1/2] netfilter: nf_tables: Update uapi nftables netlink header documentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables PATCH] src: fix return code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables PATCH] src: error if listing nonexistent table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables-nftables nft: Removes if_nametoindex ,NFT_META_OIF for outiface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables-nftables nft: Removes NFT_META_IIF ,NFT_META_OIF
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• [PATCH] iptables-nftables nft: Removes if_nametoindex ,NFT_META_IIF, iniface
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• [PATCH] iptables-nftables nft: Removes if_nametoindex ,NFT_META_OIF for outiface
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <borkmann@xxxxxxxxxxxxx>
• [nftables PATCH] src: error if listing nonexistent table
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nftables PATCH] src: fix return code
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nftables PATCH] src: fix return code
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nftables tool PATCH v2] src: add support for listing the entire ruleset
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• extension module 'owner' enhancement
  • From: Adam Kubicki <akubicki@xxxxxxxxx>
• [nftables tool PATCH] src: add support for listing the entire ruleset
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Tejun Heo <tj@xxxxxxxxxx>
• [libnftables PATCH 2/2] examples: nft-set-get: retrieve all sets
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 1/2] examples: add nft-ruleset-get
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: iptables-nftables mnl_nft_batch_talk:: Invalid argument
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• Re: iptables-nftables mnl_nft_batch_talk:: Invalid argument
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables-nftables mnl_nft_batch_talk:: Invalid argument
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH] nfnetlink: use rcu_assign_pointer in nfnetlink_subsys_unregister
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [PATCH] nft: arp: add parse_target to nft_family_ops_arp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] iptables: spurious error in load_extension
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [PATCH] iptables: improve chain name validation
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [PATCH] nfnetlink: use rcu_assign_pointer in nfnetlink_subsys_unregister
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• iptables-nftables mnl_nft_batch_talk:: Invalid argument
  • From: Anand Raj Manickam <anandrm@xxxxxxxxx>
• [PATCH iptables-nftables] nft: fix bad length when comparing extension data area
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] nfnetlink: use rcu_assign_pointer in nfnetlink_subsys_unregister
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [iptables-nftables 1/2] xtables: fix missing ipt_entry for MASQUERADE target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• iptables automated tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables 1/2] xtables: fix missing ipt_entry for MASQUERADE target
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables 1/2] xtables: fix missing ipt_entry for MASQUERADE target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables-nftables 2/2] nft: pass ipt_entry to ->save_firewall hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• Re: Creation of a custom netfilter/iptables target module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Creation of a custom netfilter/iptables target module
  • From: "Steve \(Telsat Broadband\)" <steve@xxxxxxxxxxx>
• [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: John Stultz <john.stultz@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Tejun Heo <tj@xxxxxxxxxx>
• Re: [PATCH] iptables: improve chain name validation
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [nftables kernel - PATCH 2/2] netfilter: nf_tables: Fix the netlink attributes policy for chain
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables kernel - PATCH 1/2] netfilter: nf_tables: Update uapi nftables netlink header documentation
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables kernel - PATCH 0/2] Minor API fixes (mostly documentation)
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH] man: update the manpage for cluster match
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [PATCH] man: update the manpage for cluster match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• [PATCH] man: update the manpage for cluster match
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [PATCH] nft: arp: add parse_target to nft_family_ops_arp
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH] nft: arp: add parse_target to nft_family_ops_arp
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [PATCH] nftables: operational limit match
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH] iptables: improve chain name validation
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH iptables] iptables: add libxt_cgroup frontend
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• [PATCH nf-next] netfilter: xtables: lightweight process control group matching
  • From: Daniel Borkmann <dborkman@xxxxxxxxxx>
• Re: [PATCH 00/33] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/6] Add net namespace support for ipt_CLUSTERIP
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH 12/33] netfilter: ipset: Introduce new operation to get both setname and family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/33] netfilter: ipset: Fix sparse warnings due to missing rcu annotations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/33] netfilter: ipset: Sparse warning about shadowed variable fixed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/33] netfilter: ipset: Fix "may be used uninitialized" warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/33] netfilter: ipset: Prepare ipset to support multiple networks for hash types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/33] netfilter: ipset: list:set: make sure all elements are checked by the gc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/33] netfilter: ipset: Generalize extensions support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/33] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 24/33] netfilter: ipset: Support comments in hash-type ipsets.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 25/33] netfilter: ipset: Fix hash resizing with comments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 26/33] netfilter: ipset: For set:list types, replaced elements must be zeroed out
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 31/33] netfilter: nfnetlink_log: use proper net to allocate skb
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 23/33] netfilter: ipset: Support comments in the list-type ipset.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/33] netfilter: ipset: Support comments for ipset entries in the core.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/33] netfilter: ipset: Move extension data to set structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 28/33] netfiler: ipset: Add net namespace for ipset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/33] netfilter: ipset: Rename simple macro names to avoid namespace issues.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 33/33] netfilter: cttimeout: allow to set/get default protocol timeouts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/33] netfilter: ipset: Support package fragments for IPv4 protos without ports
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 32/33] netfilter: nf_ct_sip: consolidate NAT hook functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 27/33] netfilter: ipset: Use a common function at listing the extensions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/33] netfilter: ipset: Kconfig: ipset needs NETFILTER_NETLINK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/33] netfilter: ipset: Support comments in bitmap-type ipsets.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/33] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/33] netfilter: xt_TCPMSS: Get mtu only if clamp-mss-to-pmtu is specified
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 29/33] netfilter: ipset: Add hash:net,port,net module to kernel.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 30/33] netfilter: nfnetlink_queue: use proper net namespace to allocate skb
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/33] netfilter: ipset: order matches and targets separatedly in xt_set.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/33] netfilter: ipset: Rename extension offset ids to extension ids
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/33] netfilter: ipset: Support extensions which need a per data destroy function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/33] netfilter: ipset: Use fix sized type for timeout in the extension part
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/33] netfilter: xt_TCPMSS: lookup route from proper net namespace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/33] netfilter: ipset: Don't call ip_nest_end needlessly in the error path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/33] netfilter: nf_ct_sip: extend RCU read lock in set_expected_rtp_rtcp()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables PATCH] netlink: use build_id to lower message size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH] nft: initialize flags in nft_arp_parse_meta
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH] nft: Calculate properly the target size when parsing it back
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables-nftables PATCH] nft: initialize flags in nft_arp_parse_meta
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [iptables-nftables PATCH] nft: Calculate properly the target size when parsing it back
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH v2] xtables: arp: Parse properly target's options
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH] xtables: arp: Parse properly target's options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH] nft: Header inclusion missing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH] lixtables: Fixes option issues in libxt_mangle.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables-nftables PATCH] xtables: arp: Parse properly target's options
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 2/3] libxtables: Port libarptc mangle target into libxtables
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH] nft: Header inclusion missing
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH] lixtables: Fixes option issues in libxt_mangle.c
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nftables PATCH 0/4] fix rule flush operation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 2/3] libxtables: Port libarptc mangle target into libxtables
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 3/3] xtables: arp: Do not add a useless prefix for afinfo_arp
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 3/3] xtables: arp: Do not add a useless prefix for afinfo_arp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 2/3] libxtables: Port libarptc mangle target into libxtables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 2/3] libxtables: Port libarptc mangle target into libxtables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 1/3] xtables: arp: Store target entry properly and compare them relevantly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables-nftables PATCH 3/3] xtables: arp: Do not add a useless prefix for afinfo_arp
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH 2/3] libxtables: Port libarptc mangle target into libxtables
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH 1/3] xtables: arp: Store target entry properly and compare them relevantly
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH 0/3] xtables-arp fixes + libxt_mangle addition
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 0/3] NFPROTO_ARP and arp mangle target support (+ one minor fix)
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 0/3] NFPROTO_ARP and arp mangle target support (+ one minor fix)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 0/3] NFPROTO_ARP and arp mangle target support (+ one minor fix)
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables PATCH] netlink: use build_id to lower message size
  • From: Eric Leblond <eric@xxxxxxxxx>
• [libnftables PATCH] src: add function nft_rule_nlmsg_build_id
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables RFC PATCH]limit netlink message size during delete operation
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 3/4] netlink: only flush asked table/chain
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 4/4] netlink: fix nft flush operation
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 2/4] netlink: suppress useless variable
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 1/4] mnl: fix typo in comment
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 0/4] fix rule flush operation
  • From: Eric Leblond <eric@xxxxxxxxx>
• [ANNOUNCE] ipset package kernel support changes
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.20 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next] net:drivers/net: Miscellaneous conversions to ETH_ALEN
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [nftables PATCH] netfilter: nf_tables: allow to dump sets with NFPROTO_UNSPEC
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libmnl PATCH] debug: don't colorize output on non tty
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [libmnl PATCH] debug: don't colorize output on non tty
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] Error: STRING_OVERFLOW
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• [PATCH 1/2] Error: STRING_NULL
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• [PATCH 0/2] [arptables] Fixes for problems found by static analysis.
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• Re: [PATCH net-next] net:drivers/net: Miscellaneous conversions to ETH_ALEN
  • From: "Arend van Spriel" <arend@xxxxxxxxxxxx>
• [PATCH net-next] net:drivers/net: Miscellaneous conversions to ETH_ALEN
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 00/26] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 6/6] sched, wait: Make the __wait_event*() interface more friendly
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 6/6] sched, wait: Make the __wait_event*() interface more friendly
  • From: Oleg Nesterov <oleg@xxxxxxxxxx>
• Re: [PATCH 0/6] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/6] Add net namespace support for ipt_CLUSTERIP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 net-next 1/1] sip: introduce nf_nat_sip_hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/26] ipset patches for nf-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/6] ipvs: make the service replacement more robust
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 2] src: add low-level ruleset API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] ipvs: do not use dest after ip_vs_dest_put in LBLCR
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 2] src: add low-level ruleset API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] ipvs: stats should not depend on CPU 0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/6] ipvs: fix overflow on dest weight multiply
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] ipvs: do not use dest after ip_vs_dest_put in LBLC
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 2] src: add low-level ruleset API
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftables PATCH 1/3] tests: fix error reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 2/3] table: json: fix json style
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/6] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] sched, wait: Make the __wait_event*() interface more friendly
  • From: Julian Anastasov <ja@xxxxxx>
• Is there anyway for Netfilter_queue to provide only control packets.
  • From: gaurav sharma <reach2gaurav@xxxxxxxxx>
• [libnftables PATCH 2] src: add low-level ruleset API
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftables PATCH 1/3] tests: fix error reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftables PATCH 2/3] table: json: fix json style
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libmnl PATCH] debug: don't colorize output on non tty
  • From: Eric Leblond <eric@xxxxxxxxx>
• [PATCH 0/2] netlink heap info leak fixes
  • From: Mathias Krause <minipli@xxxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: ipt_ULOG: fix info leaks
  • From: Mathias Krause <minipli@xxxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: ebt_ulog: fix info leaks
  • From: Mathias Krause <minipli@xxxxxxxxxxxxxx>
• [PATCH 12/26] netfilter: ipset: Move extension data to set structure
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 04/26] netfilter: ipset: Rename simple macro names to avoid namespace issues.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 03/26] netfilter: ipset: Fix sparse warnings due to missing rcu annotations
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 10/26] netfilter: ipset: Prepare ipset to support multiple networks for hash types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 11/26] netfilter: ipset: Rename extension offset ids to extension ids
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 15/26] netfilter: ipset: list:set: make sure all elements are checked by the gc
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 06/26] netfilter: ipset: Use fix sized type for timeout in the extension part
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 18/26] netfilter: ipset: Support comments for ipset entries in the core.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 13/26] netfilter: ipset: Generalize extensions support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 19/26] netfilter: ipset: Support comments in bitmap-type ipsets.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 14/26] netfilter: ipset: Support extensions which need a per data destroy function
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 07/26] netfilter: ipset: Support package fragments for IPv4 protos without ports
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 16/26] netfilter: ipset: Kconfig: ipset needs NETFILTER_NETLINK
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 22/26] netfilter: ipset: Fix hash resizing with comments
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 26/26] netfilter: ipset: Add hash:net,port,net module to kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 24/26] netfilter: ipset: Use a common function at listing the extensions
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 23/26] netfilter: ipset: For set:list types, replaced elements must be zeroed out
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 25/26] netfiler: ipset: Add net namespace for ipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 17/26] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 08/26] netfilter: ipset: order matches and targets separatedly in xt_set.c
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 21/26] netfilter: ipset: Support comments in hash-type ipsets.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 20/26] netfilter: ipset: Support comments in the list-type ipset.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 05/26] netfilter: ipset: Fix "may be used uninitialized" warnings
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 00/26] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 01/26] netfilter: ipset: Don't call ip_nest_end needlessly in the error path
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 09/26] netfilter: ipset: Introduce new operation to get both setname and family
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 02/26] netfilter: ipset: Sparse warning about shadowed variable fixed
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/3 - GIT PULL] include/linux: Remove externs from networking function prototypes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 2/3] table: json: fix json style
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] ipset: Add userspace code to support hash:net,port,net kernel module.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ipset: Add hash:net,port,net module to kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [libnftables PATCH 2/3] table: json: fix json style
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• Re: [libnftables PATCH 3/3] src: add low-level ruleset API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 2/3] table: json: fix json style
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 1/3] tests: fix error reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] nfct: timeout: add support for default protocol timeout tuning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: cttimeout: allow to set/get default protocol timeouts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 1/1] sip: introduce nf_nat_sip_hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH v2 net-next 1/1] sip: introduce nf_nat_sip_hooks
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [PATCH v2 net-next 0/1] sip: introduce nf_nat_sip_hooks
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [libnftables PATCH 3/3] src: add low-level ruleset API
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 2/3] table: json: fix json style
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 1/3] tests: fix error reporting
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH net-next 1/1] sip: introduce nf_nat_sip_hooks
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 1/1] sip: introduce nf_nat_sip_hooks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH net-next 1/1] sip: introduce nf_nat_sip_hooks
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [PATCH net-next 0/1] sip: introduce nf_nat_sip_hooks
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packets
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [nftables PATCH 2/2] Add support for IPv6 NAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables PATCH 1/2] fix IPv6 prefix computation.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables tool - PATCH] include: Add proper nfnetlink header to fix compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nftables tool - PATCH] include: Add proper nfnetlink header to fix compilation error
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [PATCH] netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [nftables PATCH 2/2] Add support for IPv6 NAT
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 1/2] fix IPv6 prefix computation.
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 0/2] IPv6 improvements
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH 11/12] netfilter: Remove extern from function prototypes
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 1/2] netfilter: ipset: Add hash:net,port,net module to kernel.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ipset: Add hash:net,port,net module to kernel.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: ipset: Add hash:net,port,net module to kernel.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 2/2] ipset: Add userspace code to support hash:net,port,net kernel module.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/1] ipset: Add net namespace for ipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 6/6] sched, wait: Make the __wait_event*() interface more friendly
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• Re: [PATCH v2] iptables: extensions/GNUMakefile.in use CPPFLAGS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] docs: use generic syslog reference in libxt_LOG.man
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] iptables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] nfnetlink_log: use proper net to allocate skb
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] nfnetlink_queue: use proper net to allocate skb
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] xt_TCPMSS: lookup route in proper net namesapce
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] xt_TCPMSS：Get reserve mtu only when specifing option clamp-mss-to-pmtu
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [FIX V2] sip: add missing RCU reader lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 2/2] src: snprintf: fix buffer lengths
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH 1/2] set_elem: xml: avoid code duplication
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 1/1] ipset: Add net namespace for ipset
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: Ingo Molnar <mingo@xxxxxxxxxx>
• Using libiptc to programmatically modify iptables rules
  • From: Michael Kopreski <michaelkopreski@xxxxxxxxx>
• [PATCH 1/3] netfilter: Remove extern from function prototypes
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH 0/3 - GIT PULL] include/linux: Remove externs from networking function prototypes
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: John Stultz <john.stultz@xxxxxxxxxx>
• Re: [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: John Stultz <john.stultz@xxxxxxxxxx>
• Re: [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 1/4] [RFC] net: Explicitly initialize u64_stats_sync structures for lockdep
  • From: John Stultz <john.stultz@xxxxxxxxxx>
• [PATCH 0/4][RFC] Lockdep enablement for seqcount/seqlocks
  • From: John Stultz <john.stultz@xxxxxxxxxx>
• [PATCH] iptables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH RFC 2/3] ctnetlink: account both directions in one step
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [PATCH RFC 1/3] acct: introduce nf_conn_acct
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [PATCH RFC 3/3] acct: add input and output interface index
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [PATCH RFC 0/3] conntrack: add interface information to accounting extend
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [PATCH 1/1] ipset: Add net namespace for ipset
  • From: Vitaly Lavrov <vel21ripn@xxxxxxxxx>
• [PATCH 2/2] xt_TCPMSS: lookup route in proper net namesapce
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH 1/2] xt_TCPMSS：Get reserve mtu only when specifing option clamp-mss-to-pmtu
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [libnftables PATCH 2/2] src: snprintf: fix buffer lengths
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH 1/2] set_elem: xml: avoid code duplication
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftables PATCH v2 2/2] This patch adds a ruleset object API to libnftables.
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftables PATCH v2 2/2] This patch adds a ruleset object API to libnftables.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH v2 1/2] rule: json: Fixed wrong offset return
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/6] ipt_CLUSTERIP: make clusterip_list per net namespace
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH nf-next 3/6] ipt_CLUSTERIP: make clusterip_lock per net namespace
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH nf-next 5/6] ipt_CLUSTERIP: create proc entry under proper ipt_CLUSTERIP directory
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH nf-next 6/6] ipt_CLUSTERIP: use proper net namespace to operate CLUSTERIP
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH nf-next 0/6] Add net namespace support for ipt_CLUSTERIP
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH nf-next 4/6] ipt_CLUSTERIP: add parameter net in clusterip_config_find_get
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH nf-next 1/6] ipt_CLUSTERIP: make proc directory per net namespace
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [libnftables PATCH v2 2/2] This patch adds a ruleset object API to libnftables.
  • From: Alvaro Neira <alvaroneay@xxxxxxxxx>
• [libnftables PATCH v2 1/2] rule: json: Fixed wrong offset return
  • From: Alvaro Neira <alvaroneay@xxxxxxxxx>
• Re: [iptables-nftables PATCH 2/2] xtables: arp: zeroing chain counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 1/2] xtables: arp: add delete operation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] meta: iif/oifname should be host byte order
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [NOTICE] nftables rebased upon 3.11 and rule batching update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: fix basechain release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: Remove extern from function prototypes
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: Developing own utils based on libipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Developing own utils based on libipset
  • From: Daniel Fiala <danfiala@xxxxxxxx>
• Re: [PATCH 7/7] ipset: Add new userspace set revisions for comment support
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 6/7] ipset: Support comments in the userspace library.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 5/7] ipset: Rework the "fake" argument parsing for ipset restore.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/7] netfilter: ipset: Support comments in hash-type ipsets.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/7] netfilter: ipset: Support comments for ipset entries in the core.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/2] nfnetlink_log: use proper net to allocate skb
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH 1/2] nfnetlink_queue: use proper net to allocate skb
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• [PATCH 7/7] ipset: Add new userspace set revisions for comment support
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 6/7] ipset: Support comments in the userspace library.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 5/7] ipset: Rework the "fake" argument parsing for ipset restore.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 3/7] netfilter: ipset: Support comments in bitmap-type ipsets.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: ipset: Support comments in the list-type ipset.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 2/7] netfilter: ipset: Support comments in hash-type ipsets.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 1/7] netfilter: ipset: Support comments for ipset entries in the core.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH -nft] src: add rule batching support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 0/7] Add new comments extension to ipset.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [iptables-nftables PATCH 2/2] xtables: arp: zeroing chain counters
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• [iptables-nftables PATCH 1/2] xtables: arp: add delete operation
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [PATCH v2 1/7] netfilter: ipset: Support comments for ipset entries in the core.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 6/7] ipset: Support comments in the userspace library.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 5/7] ipset: Rework the "fake" argument parsing for ipset restore.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 2/7] netfilter: ipset: Support comments in hash-type ipsets.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 2/7] netfilter: ipset: Support comments in hash-type ipsets.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 1/7] netfilter: ipset: Support comments for ipset entries in the core.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [FIX V2] sip: add missing RCU reader lock
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [PATCH v2 2/2] ipset: Add userspace code to support hash:net,net kernel module.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [FIX 1/1] sip: add missing RCU reader lock
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [FIX 1/1] sip: add missing RCU reader lock
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• net-next is now OPEN
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [FIX 1/1] sip: add missing RCU reader lock
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [FIX 0/1] sip: add missing RCU reader lock in set_expected_rtp_rtcp()
  • From: Holger Eitzenberger <holger@xxxxxxxxxxxxxxxx>
• [PATCH nftables] meta: iif/oifname should be host byte order
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [GIT PULL 0/5] IPVS fixes for v3.12
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 7/7] ipset: Add new userspace set revisions for comment support
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 6/7] ipset: Support comments in the userspace library.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 5/7] ipset: Rework the "fake" argument parsing for ipset restore.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 4/7] netfilter: ipset: Support comments in the list-type ipset.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 2/7] netfilter: ipset: Support comments in hash-type ipsets.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 3/7] netfilter: ipset: Support comments in bitmap-type ipsets.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 1/7] netfilter: ipset: Support comments for ipset entries in the core.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 0/7] Add new comments extension to ipset.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 2/2] ipset: Add userspace code to support hash:net,net kernel module.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 1/2] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 0/2] Add new hash:net,net type to ipset.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 5/6] ipset: Support comments in the userspace library.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH -nftables 3/3] netfilter: fix missing dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -nftables 2/3] netfilter: nf_tables: nft_meta: fix socket uid,gid handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -nftables 1/3] netfilter: nf_tables: allow to dump all existing sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 5/6] ipset: Support comments in the userspace library.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 4/6] ipset: Rework the "fake" argument parsing for ipset restore.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 5/6] ipset: Support comments in the userspace library.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: Problem compiling nftables kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Problem compiling nftables kernel
  • From: Bjørnar Ness <bjornar.ness@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 1/5] ipvs: fix overflow on dest weight multiply
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/5] ipvs: make the service replacement more robust
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 5/5] ipvs: stats should not depend on CPU 0
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 3/5] ipvs: do not use dest after ip_vs_dest_put in LBLC
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 4/5] ipvs: do not use dest after ip_vs_dest_put in LBLCR
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL 0/5] IPVS fixes for v3.12
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 1/1] ipset: Add net namespace for ipset
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 5/6] ipset: Support comments in the userspace library.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 5/6] ipset: Support comments in the userspace library.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 4/6] ipset: Rework the "fake" argument parsing for ipset restore.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/6] netfilter: ipset: Support comments in hash-type ipsets.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/6] netfilter: ipset: Support comments for ipset entries in the core.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/2] ipset: Add userspace code to support hash:net,net kernel module.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Conntrack events using SMP
  • From: Sébastien LAVEZE <slaveze@xxxxxxxxx>
• Re: [PATCH 0/7] netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 0/7] netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: nf_tables: do not allow deletion/replacement of stale rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nf_tables: attach replacement rule after stale one
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -nftables v3 4/4] netfilter: nf_tables: all rule updates are transactional
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -nftables v3 1/4] netfilter: nf_tables: get rid of per rule list_head for commits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: ipset: Consistent userspace testing with nomatch flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] netfilter: ipset: Validate the set family and not the set type family at swapping
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/7] netfilter: nf_nat_proto_icmpv6:: fix wrong comparison in icmpv6_manip_pkt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] netfilter: nfnetlink_queue: use network skb for sequence adjustment
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] netfilter: nf_conntrack: use RCU safe kfree for conntrack extensions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/7] netfilter: ipset: Skip really non-first fragments for IPv6 when getting port/protocol
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• ip6_finish_output2 change broke netfilter xt_TEE target
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH 1/1] ipset: Add net namespace for ipset
  • From: "V. Lavrov" <lve@xxxxxxx>
• [PATCH 6/6] ipset: Add new userspace set revisions for comment support
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 5/6] ipset: Support comments in the userspace library.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 4/6] ipset: Rework the "fake" argument parsing for ipset restore.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: ipset: Support comments in bitmap-type ipsets.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 2/6] netfilter: ipset: Support comments in hash-type ipsets.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 1/6] netfilter: ipset: Support comments for ipset entries in the core.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 0/6] Add new comments extension to ipset.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 0/2] Add new hash:net,net type to ipset.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 2/2] ipset: Add userspace code to support hash:net,net kernel module.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [nftables 0/4] misc improvements and cleaning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libmnl PATCH] configure: uclinux is also linux
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nfnetlink_queue: shouldn't it be entry->skb?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] ipset patches for nf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -nftables v2 4/4] netfilter: nf_tables: all rule updates are transactional
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -nftables v2 3/4] netfilter: nfnetlink: add batch support and use it from nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -nftables v2 2/4] netfilter: nf_tables: use per netns commit list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -nftables v2 1/4] netfilter: nf_tables: get rid of per rule list_head for commits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/4 -nftables v2] nf_tables atomic rule-set update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nfnetlink_queue: shouldn't it be entry->skb?
  • From: Gao feng <gaofeng@xxxxxxxxxxxxxx>
• Re: [nftables PATCH 3/4] Update chain creation format.
  • From: Eric Leblond <eric@xxxxxxxxx>
• [libnftables PATCH] examples: add nft-ruleset-get
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [ANNOUNCE] 10th Netfilter Workshop in Montpellier, France
  • From: Eric Leblond <eric@xxxxxxxxx>
• [libnftables PATCH] src: add ruleset API
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftables PATCH] build: fix build error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH] src: xml: refactor XML parsing code
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables PATCH 3/4] Update chain creation format.
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/4] netfilter: ipset: Skip really non-first fragments for IPv6 when getting port/protocol
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: ipset: Consistent userspace testing with nomatch flag
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/4] ipset patches for nf
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 4/4] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: ipset: Validate the set family and not the set type family at swapping
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [libnftables PATCH] src: xml: refactor XML parsing code
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [libnftables PATCH] build: fix build error
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• [nftables PATCH 3/4] Update chain creation format.
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables 0/4] misc improvements and cleaning
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 2/4] Suppress non working examples.
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 1/4] nat: add mandatory family attribute
  • From: Eric Leblond <eric@xxxxxxxxx>
• [nftables PATCH 4/4] display family in table listing.
  • From: Eric Leblond <eric@xxxxxxxxx>
• Re: [PATCH v5] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v5] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [PATCH v5] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ipset PATCH] configure: uclinux is also linux
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipv6: icmpv6_manip_pkt comparing codes to types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 3/3] log: s/threshold/queue-threshold/
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftables 2/3] expr: log: use real length when fetching attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables kernel 1/3] netfilter: nft_log: group is u16, snaplen u32
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v5] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nftables 3/3] log: s/threshold/queue-threshold/
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nftables kernel 1/3] netfilter: nft_log: group is u16, snaplen u32
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftables 2/3] expr: log: use real length when fetching attributes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [arptables] please include license file in tarball
  • From: Jiri Popelka <jpopelka@xxxxxxxxxx>
• [PATCH] netfilter: ipv6: icmpv6_manip_pkt comparing codes to types
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• [PATCH v4] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [nfacct PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• [libnetfilter_queue PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• [libnetfilter_cttimeout PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• [libnetfilter_cthelper PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• [libnetfilter_log PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• [libnetfilter_conntrack PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• [libnfnetlink PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• [libnetfilter_acct PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• [ipset PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• [libmnl PATCH] configure: uclinux is also linux
  • From: Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: BUG: kernel 3.10 + ipset + NET_NS
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• BUG: kernel 3.10 + ipset + NET_NS
  • From: "V. Lavrov" <lve@xxxxxxx>
• Re: [iptables PATCH] build: add DESTDIR to vx_bin_links
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• added new hash:ip,net ipset type
  • From: David Gervais <dgervais@xxxxxxxxx>
• netfilter: active obj WARN when cleaning up
  • From: Sasha Levin <sasha.levin@xxxxxxxxxx>
• Re: [iptables PATCH] build: add DESTDIR to vx_bin_links
  • From: "Laurence J. Lane" <ljlane@xxxxxxxxxx>
• Re: [iptables PATCH] build: add DESTDIR to vx_bin_links
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [iptables PATCH] docs: use generic syslog reference in libxt_LOG.man
  • From: "Laurence J. Lane" <ljlane@xxxxxxxxxx>
• [iptables PATCH] build: add DESTDIR to vx_bin_links
  • From: "Laurence J. Lane" <ljlane@xxxxxxxxxx>
• Fwd: tproxy and NAT incompatible?
  • From: umesh sirsiwal <umesh31@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [iptables-nftables PATCH 3/3] libxtables: Port libarptc mangle target into libxtables
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH 2/3] libxtables: Add NFPROTO_ARP support for libarpt_* prefixed extensions
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH 1/3] nft: Fix a minor compilation warning
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [iptables-nftables PATCH 0/3] NFPROTO_ARP and arp mangle target support (+ one minor fix)
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: linux-next: Tree for Sep 5 (netfilter: xt_socket.c)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Sep 5 (netfilter: xt_socket.c)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Sep 5 (netfilter: xt_socket.c)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications
  • From: Valentina Giusti <valentina.giusti@xxxxxxxxxxxxxxxx>
• Re: xt_recent.c bug - and cleanup
  • From: Valentijn Sessink <valentyn@xxxxxxxx>
• [PATCH 2/3] conntrack: support add/delete of conntrack labels
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/3] conntrack: do not exit when update returns an error
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/3] conntrack: support multiple -l options
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [libnftables PATCH] set: xml: fix key_type parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables tool v2 PATCH 2/4] src: Ensure given base chain type is a valid one
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftables PATCH] set: xml: fix key_type parsing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [libnftables PATCH] set: xml: fix key_type parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/4] libnetfilter-acct: Introduce support for notifications
  • From: Valentina Giusti <valentina.giusti@xxxxxxxxxxxxxxxx>
• Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications
  • From: Valentina Giusti <valentina.giusti@xxxxxxxxxxxxxxxx>
• [libnftables PATCH] src: xml: get rid of mxml parsing flags
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: linux-next: Tree for Sep 4 (netfilter: xt_TPROXY)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: merge window warning
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Sep 4 (netfilter: xt_TPROXY)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: merge window warning
  • From: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• merge window warning
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack
  • From: Phil Oester <kernel@xxxxxxxxxxxx>
• Re: [PATCH 0/4] netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [libnftables PATCH] set: xml: fix key_type parsing
  • From: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
• Re: [PATCH] xt_owner: enable xt_owner on INPUT chain
  • From: Valentina Giusti <valentina.giusti@xxxxxxxxxxxxxxxx>
• Re: [libnftables PATCH] chain: xml: optional attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: synproxy_core: fix warning in __nf_ct_ext_add_length()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: SYNPROXY: let unrelated packets continue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/4] netfilter: xt_TCPMSS: correct return value in tcpmss_mangle_packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/4] netfilter: more strict TCP flag matching in SYNPROXY
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/4] netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_TCPMSS: correct return value in tcpmss_mangle_packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: SYNPROXY core: fix warning in __nf_ct_ext_add_length()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: SYNPROXY core: fix warning in __nf_ct_ext_add_length()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH] netfilter: SYNPROXY let unrelated packets continue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH 1/1 v4] nft: refactoring parse operations for more genericity
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/4] libnetfilter-acct: Introduce support for notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables-nftables PATCH 1/1 v4] nft: refactoring parse operations for more genericity
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [PATCH] xt_owner: enable xt_owner on INPUT chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] nfacct: Add 'notify' commands for notifications
  • From: valentina.giusti@xxxxxxxxxxxx
• [PATCH 1/4] nfnetlink_acct: Traffic-based and periodic notifications
  • From: valentina.giusti@xxxxxxxxxxxx
• [PATCH 2/4] libnetfilter-acct: Introduce support for notifications
  • From: valentina.giusti@xxxxxxxxxxxx
• [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications
  • From: valentina.giusti@xxxxxxxxxxxx
• [PATCH 4/4] nfacct: Add man page section for the 'notify' commands
  • From: valentina.giusti@xxxxxxxxxxxx
• Re: [nftables-kernel PATCH] netfilter: nf_tables: Fixes how a table is checked to be in use
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nftables tool v2 PATCH 2/4] src: Ensure given base chain type is a valid one
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [nftables-kernel PATCH] netfilter: nf_tables: Fixes how a table is checked to be in use
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables tool v2 PATCH 4/4] tests: Update bate chain creation according to latest syntax changes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables tool v2 PATCH 3/4] src: Add priority keyword on base chain description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables tool v2 PATCH 2/4] src: Ensure given base chain type is a valid one
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables tool v2 PATCH 1/4] src: Wrap netfilter hooks around human readable strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nftables tool v2 PATCH 4/4] tests: Update bate chain creation according to latest syntax changes
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables tool v2 PATCH 3/4] src: Add priority keyword on base chain description
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables tool v2 PATCH 2/4] src: Ensure given base chain type is a valid one
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables tool v2 PATCH 1/4] src: Wrap netfilter hooks around human readable strings
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• [nftables tool v2 PATCH 0/4] Easier base chain declaration
  • From: Tomasz Bursztyka <tomasz.bursztyka@xxxxxxxxxxxxxxx>
• Re: [iptables-nftables PATCH v3] nft: refactoring parse operations for more genericity
  • From: Giuseppe Longo <giuseppelng@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/3] conntrack: favor multiple -l options over -l foo,bar
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays.
  • From: Oliver <oliver@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>