Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 1/4] Add configure flag to disable NFACCT build, (continued)
  • [PATCH 1/4] Add configure flag to disable NFACCT build, Eric Leblond
    • Re: [PATCH 1/4] Add configure flag to disable NFACCT build, Jan Engelhardt
      • Re: [PATCH 1/4] Add configure flag to disable NFACCT build, Eric Leblond
        • Re: [PATCH 1/4] Add configure flag to disable NFACCT build, Jan Engelhardt
  • [PATCH 4/4] configure: display info about build plugins, Eric Leblond
  • [PATCH 2/4] Add configure flag to disable NFCT build, Eric Leblond
• ebtables wish list item!, Andrew Lennard
• [PATCH RFC v2] netfilter: add connlabel conntrack extension, Florian Westphal
  • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Florian Westphal
    • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
      • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Florian Westphal
        • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
          • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Florian Westphal
            • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
  • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
    • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Florian Westphal
      • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
        • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Florian Westphal
          • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
        • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Stephen Clark
          • Re: [PATCH RFC v2] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
• RFC on xt2 code 20121102, Jan Engelhardt
  • [PATCH 04/11] netfilter: xtables2: chain renaming support, Jan Engelhardt
  • [PATCH 01/11] netfilter: xtables2: initial table skeletal functions, Jan Engelhardt
  • [PATCH 11/11] netfilter: xtables2: table dump support, Jan Engelhardt
  • [PATCH 09/11] netfilter: xtables2: supply a revision number, Jan Engelhardt
  • [PATCH 03/11] netfilter: xtables2: chain creation and deletion, Jan Engelhardt
  • [PATCH 02/11] netfilter: xtables2: initial Netlink interface, Jan Engelhardt
  • [PATCH 10/11] netfilter: xtables2: chain dump support, Jan Engelhardt
  • [PATCH 05/11] netfilter: xtables2: transaction commit operation, Jan Engelhardt
  • [PATCH 07/11] netfilter: xtables2: transaction abort support, Jan Engelhardt
  • [PATCH 08/11] netfilter: xtables2: redirect writes into transaction buffer, Jan Engelhardt
  • [PATCH 06/11] netfilter: xtables2: (atomic) table replace support, Jan Engelhardt
• [PATCH 0/2] [RFC] nf_tables: speed up rule addition and deletion, pablo
  • [PATCH 1/2] netfilter: nf_tables: use 64-bits rule handle instead of 16-bits, pablo
  • [PATCH 2/2] netfilter: nf_tables: improve deletion performance, pablo
    • Re: [PATCH 2/2] netfilter: nf_tables: improve deletion performance, Tomasz Bursztyka
      • Re: [PATCH 2/2] netfilter: nf_tables: improve deletion performance, Pablo Neira Ayuso
        • Re: [PATCH 2/2] netfilter: nf_tables: improve deletion performance, Tomasz Bursztyka
• [libnftables - v2 PATCH 0/2] Fixed chain name and add support for NFTA_CHAIN_NEW_NAME attribute, Tomasz Bursztyka
  • [libnftables - v2 PATCH 2/2] chain: Add support for NFTA_CHAIN_NEW_NAME attribute, Tomasz Bursztyka
  • [libnftables - v2 PATCH 1/2] chain: Handle fixed sized name, Tomasz Bursztyka
  • Re: [libnftables - v2 PATCH 0/2] Fixed chain name and add support for NFTA_CHAIN_NEW_NAME attribute, Pablo Neira Ayuso
• [nf-next/nf_tables-experiments - v2 PATCH 0/4] fixed chain name, chain rename and rule replacement, Tomasz Bursztyka
  • [nf-next/nf_tables-experiments - v2 PATCH 1/4] nf_tables: Change chain's name to be fixed sized, Tomasz Bursztyka
  • [nf-next/nf_tables-experiments - v2 PATCH 2/4] nf_tables: Add missing policy for NFTA_CHAIN_USE, Tomasz Bursztyka
  • [nf-next/nf_tables-experiments - v2 PATCH 3/4] nf_tables: Add support for changing users chain's name, Tomasz Bursztyka
  • [nf-next/nf_tables-experiments - v2 PATCH 4/4] nf_tables: Add support for replacing a rule by another one., Tomasz Bursztyka
  • Re: [nf-next/nf_tables-experiments - v2 PATCH 0/4] fixed chain name, chain rename and rule replacement, Pablo Neira Ayuso
• no power and backlogged, David Miller
• ipset restore behavior with newer glibc, Josh Hunt
  • Re: ipset restore behavior with newer glibc, Jan Engelhardt
    • Re: ipset restore behavior with newer glibc, Jozsef Kadlecsik
      • Re: ipset restore behavior with newer glibc, Jozsef Kadlecsik
        • Re: ipset restore behavior with newer glibc, Josh Hunt
          • Re: ipset restore behavior with newer glibc, Jozsef Kadlecsik
            • Re: ipset restore behavior with newer glibc, Josh Hunt
      • Re: ipset restore behavior with newer glibc, Josh Hunt
• [iptables-nftables - PATCH 0/5] Support for -E and -R options., Tomasz Bursztyka
  • [iptables-nftables - PATCH 1/5] headers: Make nf_tables.h up to date, Tomasz Bursztyka
  • [iptables-nftables - PATCH 2/5] nft: Add support for chain rename options (-E), Tomasz Bursztyka
  • [iptables-nftables - PATCH 3/5] iptables: nft: Fix -D chain rulenum option, Tomasz Bursztyka
  • [iptables-nftables - PATCH 4/5] iptables: nft: Refactor __nft_rule_check to return rule handle when relevant, Tomasz Bursztyka
  • [iptables-nftables - PATCH 5/5] iptables: nft: Add support for -R option, Tomasz Bursztyka
  • Re: [iptables-nftables - PATCH 0/5] Support for -E and -R options., Pablo Neira Ayuso
• [libnftables - PATCH] chain: Add support for NFTA_CHAIN_NEW_NAME attribute, Tomasz Bursztyka
• [libnftables - PATCH] build: Add autogen.sh script, Tomasz Bursztyka
• [nf-next/nf_tables-experiments - PATCH 0/2] chain rename and rule replacement, Tomasz Bursztyka
  • [nf-next/nf_tables-experiments - PATCH 1/2] nf_tables: Add support for changing users chain's name, Tomasz Bursztyka
    • Re: [nf-next/nf_tables-experiments - PATCH 1/2] nf_tables: Add support for changing users chain's name, Pablo Neira Ayuso
      • Re: [nf-next/nf_tables-experiments - PATCH 1/2] nf_tables: Add support for changing users chain's name, Tomasz Bursztyka
        • Re: [nf-next/nf_tables-experiments - PATCH 1/2] nf_tables: Add support for changing users chain's name, Pablo Neira Ayuso
  • [nf-next/nf_tables-experiments - PATCH 2/2] nf_tables: Add support for replacing a rule by another one., Tomasz Bursztyka
• [PATCH V2 0/3] Removing the use of VLAIS from USB Gadget and netfilter, Behan Webster
  • [PATCH V2 1/3] Helper macros used for replacing the use of VLAIS, Behan Webster
  • [PATCH V2 3/3] Remove VLAIS usage from netfilter, Behan Webster
  • [PATCH V2 2/3] Remove VLAIS usage from gadget code, Behan Webster
    • Re: [PATCH V2 2/3] Remove VLAIS usage from gadget code, Felipe Balbi
      • Re: [PATCH V2 2/3] Remove VLAIS usage from gadget code, Behan Webster
        • Re: [PATCH V2 2/3] Remove VLAIS usage from gadget code, Felipe Balbi
          • Re: [PATCH V2 2/3] Remove VLAIS usage from gadget code, David Miller
          • Re: [PATCH V2 2/3] Remove VLAIS usage from gadget code, Sebastian Andrzej Siewior
            • Re: [PATCH V2 2/3] Remove VLAIS usage from gadget code, Behan Webster
              • Re: [PATCH V2 2/3] Remove VLAIS usage from gadget code, Sebastian Andrzej Siewior
                • Re: [PATCH V2 2/3] Remove VLAIS usage from gadget code, Behan Webster
                • Re: [llvmlinux] [PATCH V2 2/3] Remove VLAIS usage from gadget code, Bryce Lelbach
  • Re: [PATCH V2 0/3] Removing the use of VLAIS from USB Gadget and netfilter, David Miller
• [ANNOUNCE] New ulogd2 maintainer: Eric Leblond, Pablo Neira Ayuso
  • Re: [ANNOUNCE] New ulogd2 maintainer: Eric Leblond, Mr Dash Four
    • Re: [ANNOUNCE] New ulogd2 maintainer: Eric Leblond, Jan Engelhardt
      • Re: [ANNOUNCE] New ulogd2 maintainer: Eric Leblond, Mr Dash Four
• [PATCH 0/2] Removing the use of VLAIS from netfilter, Behan Webster
  • [PATCH 1/2] Helper macros used for replacing the use of VLAIS, Behan Webster
  • [PATCH 2/2] Remove VLAIS usage from netfilter, Behan Webster
• [PATCH next] netfilter: ipv6: add getsockopt to retrieve origdst, Florian Westphal
  • Re: [PATCH next] netfilter: ipv6: add getsockopt to retrieve origdst, Nick Jones
    • Re: [PATCH next] netfilter: ipv6: add getsockopt to retrieve origdst, Florian Westphal
      • Re: [PATCH next] netfilter: ipv6: add getsockopt to retrieve origdst, Amos Jeffries
  • Re: [PATCH next] netfilter: ipv6: add getsockopt to retrieve origdst, Pablo Neira Ayuso
• [PATCH 0/3] netfilter updates for the net tree, pablo
  • [PATCH 2/3] netfilter: nf_nat: don't check for port change on ICMP tuples, pablo
  • [PATCH 3/3] netfilter: nf_defrag_ipv6: solve section mismatch in nf_conntrack_reasm, pablo
  • [PATCH 1/3] netfilter: nf_conntrack: fix rt_gateway checks for H.323 helper, pablo
  • Re: [PATCH 0/3] netfilter updates for the net tree, David Miller
• [PATCH] netfilter: use PTR_RET, Fengguang Wu
  • [PATCH] netfilter: ipv6: use PTR_RET, Fengguang Wu
  • Re: [PATCH] netfilter: use PTR_RET, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: use PTR_RET, Fengguang Wu
• [nf-next:nf_tables7 3/3] net/netfilter/nf_tables_api.c:1299:1: warning: the frame size of 1184 bytes is larger than 1024 bytes, Fengguang Wu
  • Re: [nf-next:nf_tables7 3/3] net/netfilter/nf_tables_api.c:1299:1: warning: the frame size of 1184 bytes is larger than 1024 bytes, Pablo Neira Ayuso
• [PATCH] net/ipv6/netfilter: solve section mismatch in nf_conntrack_reasm, Hein Tibosch
  • Re: [PATCH] net/ipv6/netfilter: solve section mismatch in nf_conntrack_reasm, Cong Wang
    • Re: [PATCH] net/ipv6/netfilter: solve section mismatch in nf_conntrack_reasm, Pablo Neira Ayuso
• Re: H.239 support in the H.323 helper?, Tamas Csillag
• [PATCH] netfilter: remove silly double assignment, Alan Cox
  • Re: [PATCH] netfilter: remove silly double assignment, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: remove silly double assignment, Simon Horman
• [PATCH 0/8] IPVS updates for net-next tree, pablo
  • [PATCH 1/8] ipvs: Trivial changes, use compressed IPv6 address in output, pablo
  • [PATCH 4/8] ipvs: Fix faulty IPv6 extension header handling in IPVS, pablo
  • [PATCH 5/8] ipvs: Complete IPv6 fragment handling for IPVS, pablo
  • [PATCH 6/8] ipvs: API change to avoid rescan of IPv6 exthdr, pablo
  • [PATCH 7/8] ipvs: SIP fragment handling, pablo
  • [PATCH 8/8] ipvs: fix build errors related to config option combinations, pablo
  • [PATCH 3/8] ipvs: Use config macro IS_ENABLED(), pablo
  • [PATCH 2/8] ipvs: IPv6 extend ICMPv6 handling for future types, pablo
  • Re: [PATCH 0/8] IPVS updates for net-next tree, David Miller
• kernel Panic on function tcp_manip_pkt+0x3c/0x11c in linux 2.6.31, Ramesh M
• [no subject], Ramesh M
  • [no subject], David Miller
• [RFC] back on nf_tables (plus compatibility layer), Pablo Neira Ayuso
  • Re: [RFC] back on nf_tables (plus compatibility layer), Jan Engelhardt
    • Re: [RFC] back on nf_tables (plus compatibility layer), Pablo Neira Ayuso
      • Re: [RFC] back on nf_tables (plus compatibility layer), Jan Engelhardt
        • Re: [RFC] back on nf_tables (plus compatibility layer), Pablo Neira Ayuso
          • Re: [RFC] back on nf_tables (plus compatibility layer), Jan Engelhardt
• [ANNOUNCE] Netfilter coreteam updates, Pablo Neira Ayuso
• [GIT PULL nf-next] IPVS for 3.8, Simon Horman
  • [PATCH] ipvs: fix build errors related to config option combinations, Simon Horman
  • Re: [GIT PULL nf-next] IPVS for 3.8, Pablo Neira Ayuso
• [nf-next PATCH v2] ipvs: fix build errors related to config option combinations, Jesper Dangaard Brouer
  • Re: [nf-next PATCH v2] ipvs: fix build errors related to config option combinations, Simon Horman
    • Re: [nf-next PATCH v2] ipvs: fix build errors related to config option combinations, Pablo Neira Ayuso
      • Re: [nf-next PATCH v2] ipvs: fix build errors related to config option combinations, Pablo Neira Ayuso
• [nf-next PATCH] ipvs: fix build error when CONFIG_IP_VS_IPV6 is disabled, Jesper Dangaard Brouer
  • Re: [nf-next PATCH] ipvs: fix build error when CONFIG_IP_VS_IPV6 is disabled, Jesper Dangaard Brouer
    • Re: [nf-next PATCH] ipvs: fix build error when CONFIG_IP_VS_IPV6 is disabled, Pablo Neira Ayuso
      • Re: [nf-next PATCH] ipvs: fix build error when CONFIG_IP_VS_IPV6 is disabled, Jesper Dangaard Brouer
• netfilter hooks context?, Iain Fraser
  • Re: netfilter hooks context?, Iain Fraser
    • Re: netfilter hooks context?, Atle Solbakken
    • Re: netfilter hooks context?, Jan Engelhardt
• [PATCH net-next 00/21] treewide: Use consistent api style for address testing, Joe Perches
• net-next is open, David Miller
  • <Possible follow-ups>
  • net-next is OPEN, David Miller
    • nf-next is OPEN [was Re: net-next is OPEN], Pablo Neira Ayuso
  • net-next is OPEN, David Miller
  • net-next is OPEN, David Miller
  • net-next is OPEN, David Miller
  • net-next is OPEN, David Miller
  • net-next is OPEN, David Miller
• [RFC PATCH] netfilter: add connlabel conntrack extension, Florian Westphal
  • Re: [RFC PATCH] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
    • Re: [RFC PATCH] netfilter: add connlabel conntrack extension, Florian Westphal
      • Re: [RFC PATCH] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
        • Re: [RFC PATCH] netfilter: add connlabel conntrack extension, Florian Westphal
          • Re: [RFC PATCH] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
            • Re: [RFC PATCH] netfilter: add connlabel conntrack extension, Florian Westphal
            • Re: [RFC PATCH] netfilter: add connlabel conntrack extension, Ed W
• [ANNOUNCE] iptables 1.4.16.3 release, Pablo Neira Ayuso
• a problem with netfilter, Bozeanu Andrei
  • Re: a problem with netfilter, U.Mutlu
  • <Possible follow-ups>
  • Re[2]: a problem with netfilter, Hans Schillstrom
• [PATCH 1/4] ipvs: initialize returned data in do_ip_vs_get_ctl, pablo
  • [PATCH 2/4] netfilter: xt_CT: fix timeout setting with IPv6, pablo
  • [PATCH 3/4] netfilter: xt_nat: fix incorrect hooks for SNAT and DNAT targets, pablo
  • [PATCH 4/4] netfilter: xt_TEE: don't use destination address found in header, pablo
• [PATCH] Netfilter/IPVS updates for your net tree (3.7), pablo
  • Re: [PATCH] Netfilter/IPVS updates for your net tree (3.7), David Miller
• TEE broken in 3.6, Torsten Luettgert
  • Re: TEE broken in 3.6, Eric Dumazet
    • Re: TEE broken in 3.6, Torsten Luettgert
      • Re: TEE broken in 3.6, Eric Dumazet
        • Re: TEE broken in 3.6, Pablo Neira Ayuso
          • [PATCH] netfilter: xt_TEE: dont use destination address found in header, Eric Dumazet
        • Re: TEE broken in 3.6, Pablo Neira Ayuso
          • Re: TEE broken in 3.6, Eric Dumazet
• [PATCH] netfilter: xt_CT: fix timeout setting with IPv6, pablo
• [xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix), U.Mutlu
  • Re: [xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix), Jan Engelhardt
    • Re: [xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix), U.Mutlu
      • Re: [xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix), U.Mutlu
      • Re: [xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix), Jan Engelhardt
• [PATCH 1/1] netfilter : fix hooks for SNAT and DNAT targets, Elison Niven
  • Re: [PATCH 1/1] netfilter : fix hooks for SNAT and DNAT targets, Pablo Neira Ayuso
• [RFC] Multi-namespace support (Request for comments), Ansis Atteka
  • Re: [RFC] Multi-namespace support (Request for comments), Pablo Neira Ayuso
• libnetfilter_acct: ancient systems, Jan Engelhardt
  • [PATCH 2/2] build: resolve compile abort on RHEL5 #2, Jan Engelhardt
  • [PATCH 1/2] build: resolve compile abort on RHEL5 #1, Jan Engelhardt
  • Re: libnetfilter_acct: ancient systems, Pablo Neira Ayuso
• ipsec nat issue, Stephen Clark
  • Re: ipsec nat issue, Jan Engelhardt
    • Re: ipsec nat issue, Stephen Clark
      • Re: ipsec nat issue, Stephen Clark
• Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!, Borislav Petkov
  • Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!, Pablo Neira Ayuso
    • Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!, Pablo Neira Ayuso
      • Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!, Ian Applegate
• [PATCH] Netfilter updates for stable 3.5, pablo
  • [PATCH 1/1] netfilter: nfnetlink_log: fix NLA_PUT macro removal bug, pablo
  • Re: [PATCH] Netfilter updates for stable 3.5, David Miller
  • <Possible follow-ups>
  • [PATCH] Netfilter updates for stable 3.5, pablo
    • [PATCH 1/1] netfilter: nfnetlink_log: fix NLA_PUT macro removal bug, pablo
    • Re: [PATCH] Netfilter updates for stable 3.5, David Miller
    • Re: [PATCH] Netfilter updates for stable 3.5, Greg KH
• [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, pablo
  • [PATCH 2/3] netfilter: nf_conntrack: fix racy timer handling with reliable events, pablo
  • [PATCH 1/3] ipvs: fix oops in ip_vs_dst_event on rmmod, pablo
  • [PATCH 3/3] netfilter: ipset: timeout fixing bug broke SET target special timeout value, pablo
  • Re: [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, David Miller
  • <Possible follow-ups>
  • [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, pablo
    • [PATCH 1/3] ipvs: fix oops in ip_vs_dst_event on rmmod, pablo
    • [PATCH 2/3] netfilter: nf_conntrack: fix racy timer handling with reliable events, pablo
    • [PATCH 3/3] netfilter: ipset: timeout fixing bug broke SET target special timeout value, pablo
      • Re: [PATCH 3/3] netfilter: ipset: timeout fixing bug broke SET target special timeout value, Greg KH
        • Re: [PATCH 3/3] netfilter: ipset: timeout fixing bug broke SET target special timeout value, Greg KH
          • Re: [PATCH 3/3] netfilter: ipset: timeout fixing bug broke SET target special timeout value, Greg KH
            • Re: [PATCH 3/3] netfilter: ipset: timeout fixing bug broke SET target special timeout value, Pablo Neira Ayuso
              • Re: [PATCH 3/3] netfilter: ipset: timeout fixing bug broke SET target special timeout value, Greg KH
              • Re: [PATCH 3/3] netfilter: ipset: timeout fixing bug broke SET target special timeout value, Ben Hutchings
    • Re: [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, David Miller
      • Re: [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, Greg KH
    • Re: [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, Greg KH
      • Re: [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, Pablo Neira Ayuso
        • Re: [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, Pablo Neira Ayuso
          • Re: [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, Greg KH
            • Re: [PATCH] Netfilter/IPVS updates for stable 3.4 onwards, Pablo Neira Ayuso
• [PATCH] Netfilter/IPVS updates for stable 3.0 onwards, pablo
  • [PATCH 1/6] netfilter: nf_ct_ipv4: packets with wrong ihl are invalid, pablo
  • [PATCH 6/6] netfilter: xt_limit: have r->cost != 0 case work, pablo
  • [PATCH 2/6] netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP expectation, pablo
  • [PATCH 3/6] netfilter: nf_nat_sip: fix via header translation with multiple parameters, pablo
  • [PATCH 5/6] ipvs: fix oops on NAT reply in br_nf context, pablo
  • [PATCH 4/6] netfilter: nf_ct_expect: fix possible access to uninitialized timer, pablo
  • Re: [PATCH] Netfilter/IPVS updates for stable 3.0 onwards, David Miller
    • Re: [PATCH] Netfilter/IPVS updates for stable 3.0 onwards, David Miller
      • Re: [PATCH] Netfilter/IPVS updates for stable 3.0 onwards, Pablo Neira Ayuso
        • Re: [PATCH] Netfilter/IPVS updates for stable 3.0 onwards, David Miller
  • <Possible follow-ups>
  • [PATCH] Netfilter/IPVS updates for stable 3.0 onwards, pablo
    • [PATCH 2/6] netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP expectation, pablo
    • [PATCH 1/6] netfilter: nf_ct_ipv4: packets with wrong ihl are invalid, pablo
    • [PATCH 3/6] netfilter: nf_nat_sip: fix via header translation with multiple parameters, pablo
    • [PATCH 6/6] netfilter: xt_limit: have r->cost != 0 case work, pablo
    • [PATCH 5/6] ipvs: fix oops on NAT reply in br_nf context, pablo
    • [PATCH 4/6] netfilter: nf_ct_expect: fix possible access to uninitialized timer, pablo
    • Re: [PATCH] Netfilter/IPVS updates for stable 3.0 onwards, David Miller
    • Re: [PATCH] Netfilter/IPVS updates for stable 3.0 onwards, Ben Hutchings
    • Re: [PATCH] Netfilter/IPVS updates for stable 3.0 onwards, Greg KH
• Documentation fixes to iptables, Jan Engelhardt
  • [PATCH 4/9] doc: document iptables-restore's -t option, Jan Engelhardt
  • [PATCH 3/9] doc: fixup omissions in ip6tables-restore.8, Jan Engelhardt
    • Re: [PATCH 3/9] doc: fixup omissions in ip6tables-restore.8, Pablo Neira Ayuso
  • [PATCH 2/9] doc: add package version to all manpages, Jan Engelhardt
  • [PATCH 1/9] doc: rename .8.in files to .8in, Jan Engelhardt
    • Re: [PATCH 1/9] doc: rename .8.in files to .8in, Pablo Neira Ayuso
  • [PATCH 6/9] doc: document iptables-restore's -M option, Jan Engelhardt
  • [PATCH 7/9] doc: document iptables-restore's -h option, Jan Engelhardt
  • [PATCH 8/9] doc: name the supported log levels for ipt_LOG, Jan Engelhardt
  • [PATCH 9/9] src: remove faulty deprecated marker in libipt_LOG source, Jan Engelhardt
  • [PATCH 5/9] doc: document iptables-restore's -v option, Jan Engelhardt
  • Re: Documentation fixes to iptables, Pablo Neira Ayuso
    • Re: Documentation fixes to iptables, Jan Engelhardt
• iptables -stable patches, Jan Engelhardt
  • [PATCH 2/2] build: resolve compile abort in libxt_limit on RHEL5, Jan Engelhardt
    • Re: [PATCH 2/2] build: resolve compile abort in libxt_limit on RHEL5, Pablo Neira Ayuso
  • [PATCH 1/2] build: remove symlink-only extensions from static object list, Jan Engelhardt
    • Re: [PATCH 1/2] build: remove symlink-only extensions from static object list, Pablo Neira Ayuso
• [PATCH net] netfilter: nf_conntrack: fix rt_gateway checks for h323, Julian Anastasov
  • Re: [PATCH net] netfilter: nf_conntrack: fix rt_gateway checks for h323, Pablo Neira Ayuso
    • Re: [PATCH net] netfilter: nf_conntrack: fix rt_gateway checks for h323, Julian Anastasov
      • Re: [PATCH net] netfilter: nf_conntrack: fix rt_gateway checks for h323, Pablo Neira Ayuso
        • Re: [PATCH net] netfilter: nf_conntrack: fix rt_gateway checks for h323, Julian Anastasov
• [PATCH] autoconf/ulogd: fix broken libpcap AM_CONDITIONAL, Gustavo Zacarias
  • Re: [PATCH] autoconf/ulogd: fix broken libpcap AM_CONDITIONAL, Pablo Neira Ayuso
• [GIT PULL nf] IPVS fix for 3.7, Simon Horman
  • [PATCH] ipvs: initialize returned data in do_ip_vs_get_ctl, Simon Horman
  • Re: [GIT PULL nf] IPVS fix for 3.7, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_acct 1.0.1 release, Pablo Neira Ayuso
• static build breakage - 1.4.16.2., Maciej Żenczykowski
  • Re: static build breakage - 1.4.16.2., Maciej Żenczykowski
  • Re: static build breakage - 1.4.16.2., Jan Engelhardt
    • Re: static build breakage - 1.4.16.2., Maciej Żenczykowski
      • Re: static build breakage - 1.4.16.2., Jan Engelhardt
      • Re: static build breakage - 1.4.16.2., Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_cthelper 1.0.0 release, Pablo Neira Ayuso
• iptables-dev Source Example, Katia Sarsempagieva
  • Re: iptables-dev Source Example, Pablo Neira Ayuso
    • Re: iptables-dev Source Example, Maciej Żenczykowski
      • Re: iptables-dev Source Example, Katia S.
        • Re: iptables-dev Source Example, Jan Engelhardt
          • Re: iptables-dev Source Example, Katia S.
            • Re: iptables-dev Source Example, Jan Engelhardt
            • Message not available
              • Re: iptables-dev Source Example, Katia S.
    • Re: iptables-dev Source Example, Giuseppe Longo
• libnetfilter_queue patches, Jan Engelhardt
  • [PATCH] build: resolve automake-1.12 warnings, Jan Engelhardt
    • Re: [PATCH] build: resolve automake-1.12 warnings, Pablo Neira Ayuso
      • Re: [PATCH] build: resolve automake-1.12 warnings, Jan Engelhardt
• libnetfilter_log patches, Jan Engelhardt
  • [PATCH] build: resolve automake-1.12 warnings, Jan Engelhardt
• libnetfilter_cttimeout patches, Jan Engelhardt
  • [PATCH] build: resolve automake-1.12 warnings, Jan Engelhardt
• libnetfilter_conntrack patches, Jan Engelhardt
  • [PATCH] build: resolve automake-1.12 warnings, Jan Engelhardt
• libnetfilter_acct patches, Jan Engelhardt
  • [PATCH] build: resolve automake-1.12 warnings, Jan Engelhardt
• libnetfilter_cthelper patches, Jan Engelhardt
  • [PATCH 1/2] build: resolve automake-1.12 warnings, Jan Engelhardt
  • [PATCH 2/2] Update .gitignore, Jan Engelhardt
  • Re: libnetfilter_cthelper patches, Pablo Neira Ayuso
• [ANNOUNCE] ulogd 2.0.1 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] ulogd 2.0.1 release, Jan Engelhardt
• [ANNOUNCE] conntrack-tools 1.4.0 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] conntrack-tools 1.4.0 release, Jan Engelhardt
• [ANNOUNCE] libnetfilter_conntrack 1.0.2 release, Pablo Neira Ayuso
  • [ANNOUNCE] libnetfilter_queue 1.0.2 release, Pablo Neira Ayuso
• [ANNOUNCE] libnfnetlink 1.0.1 release, Pablo Neira Ayuso
• [ANNOUNCE] iptables 1.4.16.2 release, Pablo Neira Ayuso
• [ANNOUNCE] iptables 1.4.16.1 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] iptables 1.4.16.1 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] iptables 1.4.16.1 release, Jan Engelhardt
    • [PATCH] iptables: restore NOTRACK functionality, target aliasing, Jan Engelhardt
      • Re: [PATCH] iptables: restore NOTRACK functionality, target aliasing, Pablo Neira Ayuso
        • Re: [PATCH] iptables: restore NOTRACK functionality, target aliasing, Jan Engelhardt
• [ANNOUNCE] iptables 1.4.16 release, Pablo Neira Ayuso
• [PATCH 08/16] ipvs: fix ip_vs_set_timeout debug messages, Arnd Bergmann
  • Re: [PATCH 08/16] ipvs: fix ip_vs_set_timeout debug messages, Julian Anastasov
    • Re: [PATCH 08/16] ipvs: fix ip_vs_set_timeout debug messages, Arnd Bergmann
      • Re: [PATCH 08/16] ipvs: fix ip_vs_set_timeout debug messages, Julian Anastasov
        • Re: [PATCH 08/16] ipvs: fix ip_vs_set_timeout debug messages, Arnd Bergmann
          • Re: [PATCH 08/16] ipvs: fix ip_vs_set_timeout debug messages, Simon Horman
• [patch v3 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
  • [patch v3 07/11] nfnetlink_cttimeout: pass nfnetlink_cttimeout module to netlink_dump_start, Gao feng
  • [patch v3 06/11] nfnetlink_cthelper: pass nfnetlink_cthelper module to netlink_dump_start, Gao feng
  • [patch v3 10/11] ipset: pass ipset module to netlink_dump_start, Gao feng
  • [patch v3 09/11] xfrm: pass xfrm_user module to netlink_dump_start, Gao feng
  • [patch v3 11/11] infiniband: pass rdma_cm module to netlink_dump_start, Gao feng
  • [patch v3 08/11] crypto: pass crypto_user module to netlink_dump_start, Gao feng
  • [patch v3 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
  • [patch v3 03/11] unix_diag: pass unix_diag module to netlink_dump_start, Gao feng
  • [patch v3 05/11] nfnetlink_acct: pass nfnetlink_acct module to netlink_dump_start, Gao feng
  • [patch v3 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Gao feng
    • Re: [patch v3 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Eric Dumazet
      • Re: [patch v3 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Gao feng
  • Re: [patch v3 01/11] netlink: add reference of module in netlink_dump_start, Ben Hutchings
    • Re: [patch v3 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
• [PATCHv3] conntrackd: make conntrackd namespace aware, Ansis Atteka
  • Re: [PATCHv3] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
    • Re: [PATCHv3] conntrackd: make conntrackd namespace aware, Ansis Atteka
      • Re: [PATCHv3] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
• kernel panic in icmp_error, Miguel Alejandro González
  • Re: kernel panic in icmp_error, Pablo Neira Ayuso
• Conntrackd Segmentation fault due to nfexp_get_attr returning NULL, Gutholm, James
  • Re: Conntrackd Segmentation fault due to nfexp_get_attr returning NULL, Pablo Neira Ayuso
    • Re: Conntrackd Segmentation fault due to nfexp_get_attr returning NULL, Gutholm, James
• How to access conntrack connection expiration in a netfilter module?, Ed W
  • Re: How to access conntrack connection expiration in a netfilter module?, Ed W
  • Re: How to access conntrack connection expiration in a netfilter module?, Pablo Neira Ayuso
    • Re: How to access conntrack connection expiration in a netfilter module?, Ed W
      • Re: How to access conntrack connection expiration in a netfilter module?, Pablo Neira Ayuso
        • Re: How to access conntrack connection expiration in a netfilter module?, Aidan McGurn
• How to make netfilter modules communicate?, Ed W
• [PATCH] Fix userspace compilation of ip_tables.h/ip6_tables.h in C++ mode, Jason Gunthorpe
• [README] Merge window has openned, David Miller
• Mostly documentation fixes, Jan Engelhardt
  • [PATCH 04/17] doc: have NOTRACK manpage point to CT instead, Jan Engelhardt
  • [PATCH 03/17] doc: trim "state" manpage and reference conntrack instead, Jan Engelhardt
  • [PATCH 01/17] doc: clean up interpunction in state list for xt_conntrack, Jan Engelhardt
  • [PATCH 05/17] doc: mention iptables-apply in the SEE ALSO sections, Jan Engelhardt
  • [PATCH 08/17] iptables-restore: kill unused -b option, Jan Engelhardt
  • [PATCH 07/17] iptables: implement --line-numbers for iptables -S, Jan Engelhardt
  • [PATCH 02/17] doc: deduplicate extension descriptions into a new manpage, Jan Engelhardt
  • [PATCH 06/17] iptables: fix order of internal commands list, Jan Engelhardt
    • Re: [PATCH 06/17] iptables: fix order of internal commands list, Pablo Neira Ayuso
      • Re: [PATCH 06/17] iptables: fix order of internal commands list, Jan Engelhardt
        • Re: [PATCH 06/17] iptables: fix order of internal commands list, Pablo Neira Ayuso
  • [PATCH 16/17] doc: name the supported log levels for ipt_LOG, Jan Engelhardt
  • [PATCH 14/17] doc: document iptables-restore's -M option, Jan Engelhardt
  • [PATCH 13/17] doc: document iptables-restore's -v option, Jan Engelhardt
  • [PATCH 17/17] src: remove faulty deprecated marker in libipt_LOG source, Jan Engelhardt
  • [PATCH 15/17] doc: document iptables-restore's -h option, Jan Engelhardt
  • [PATCH 12/17] doc: document iptables-restore's -t option, Jan Engelhardt
  • [PATCH 11/17] doc: fixup omissions in ip6tables-restore.8, Jan Engelhardt
  • [PATCH 09/17] doc: rename .8.in files to .8in, Jan Engelhardt
  • [PATCH 10/17] doc: add package version to all manpages, Jan Engelhardt
  • Re: Mostly documentation fixes, Pablo Neira Ayuso
• Increasing XT_EXTENSION_MAXNAMELEN to 32, Cong Wang
  • Re: Increasing XT_EXTENSION_MAXNAMELEN to 32, Jan Engelhardt
    • Re: Increasing XT_EXTENSION_MAXNAMELEN to 32, Pablo Neira Ayuso
      • Re: Increasing XT_EXTENSION_MAXNAMELEN to 32, Cong Wang
• [GIT PULL nf-next] IPVS for 3.7 #2, Simon Horman
  • [PATCH 3/7] ipvs: Use config macro IS_ENABLED(), Simon Horman
  • [PATCH 2/7] ipvs: IPv6 extend ICMPv6 handling for future types, Simon Horman
  • [PATCH 5/7] ipvs: Complete IPv6 fragment handling for IPVS, Simon Horman
  • [PATCH 6/7] ipvs: API change to avoid rescan of IPv6 exthdr, Simon Horman
  • [PATCH 7/7] ipvs: SIP fragment handling, Simon Horman
  • [PATCH 1/7] ipvs: Trivial changes, use compressed IPv6 address in output, Simon Horman
  • [PATCH 4/7] ipvs: Fix faulty IPv6 extension header handling in IPVS, Simon Horman
  • Re: [GIT PULL nf-next] IPVS for 3.7 #2, Jesper Dangaard Brouer
    • Re: [GIT PULL nf-next] IPVS for 3.7 #2, Pablo Neira Ayuso
      • Re: [GIT PULL nf-next] IPVS for 3.7 #2, Simon Horman
  • Re: [GIT PULL nf-next] IPVS for 3.7 #2, Pablo Neira Ayuso
    • Re: [GIT PULL nf-next] IPVS for 3.7 #2, Jesper Dangaard Brouer
• Extension alias support, Jan Engelhardt
  • [PATCH 1/7] build: support for automake-1.12, Jan Engelhardt
  • [PATCH 3/7] libxtables: consolidate preference logic, Jan Engelhardt
  • [PATCH 7/7] libxt_state: replace as an alias to xt_conntrack, Jan Engelhardt
  • [PATCH 4/7] iptables: support for target aliases, Jan Engelhardt
  • [PATCH 5/7] libxt_NOTRACK: replace as an alias to CT --notrack, Jan Engelhardt
  • [PATCH 6/7] iptables: support for match aliases, Jan Engelhardt
  • [PATCH 2/7] build: separate AC variable replacements from xtables.h, Jan Engelhardt
• searching tuples in conntrack, Miguel Alejandro González
  • Re: searching tuples in conntrack, Jan Engelhardt
    • Re: searching tuples in conntrack, Miguel Alejandro González
    • Message not available
      • Re: searching tuples in conntrack, Jan Engelhardt
• [PATCH V4 0/7] ipvs: IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH V4 1/7] ipvs: Trivial changes, use compressed IPv6 address in output, Jesper Dangaard Brouer
  • [PATCH V4 2/7] ipvs: IPv6 extend ICMPv6 handling for future types, Jesper Dangaard Brouer
  • [PATCH V4 3/7] ipvs: Use config macro IS_ENABLED(), Jesper Dangaard Brouer
  • [PATCH V4 4/7] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
  • [PATCH V4 5/7] ipvs: Complete IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH V4 6/7] ipvs: API change to avoid rescan of IPv6 exthdr, Jesper Dangaard Brouer
  • [PATCH V4 7/7] ipvs: SIP fragment handling, Jesper Dangaard Brouer
    • Re: [PATCH V4 7/7] ipvs: SIP fragment handling, Simon Horman
  • Re: [PATCH V4 0/7] ipvs: IPv6 fragment handling for IPVS, Julian Anastasov
    • Re: [PATCH V4 0/7] ipvs: IPv6 fragment handling for IPVS, Simon Horman
  • <Possible follow-ups>
  • Re: [PATCH V4 0/7] ipvs: IPv6 fragment handling for IPVS, Hans Schillstrom
• [patch v2 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
  • [patch v2 11/11] infiniband: pass rdma_cm module to netlink_dump_start, Gao feng
  • [patch v2 08/11] crypto: pass crypto_user module to netlink_dump_start, Gao feng
  • [patch v2 07/11] nfnetlink_cttimeout: pass nfnetlink_cttimeout module to netlink_dump_start, Gao feng
  • [patch v2 05/11] nfnetlink_acct: pass nfnetlink_acct module to netlink_dump_start, Gao feng
  • [patch v2 10/11] ipset: pass ipset module to netlink_dump_start, Gao feng
  • [patch v2 03/11] unix_diag: pass unix_diag module to netlink_dump_start, Gao feng
  • [patch v2 09/11] xfrm: pass xfrm_user module to netlink_dump_start, Gao feng
  • [patch v2 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Gao feng
  • [patch v2 06/11] nfnetlink_cthelper: pass nfnetlink_cthelper module to netlink_dump_start, Gao feng
  • [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
    • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
    • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Pablo Neira Ayuso
      • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
        • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Pablo Neira Ayuso
          • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
            • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Pablo Neira Ayuso
              • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
• [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
  • [PATCH 03/11] unix_diag: pass unix_diag module to netlink_dump_start, Gao feng
  • [PATCH 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Gao feng
    • Re: [PATCH 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Stephen Hemminger
      • Re: [PATCH 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Pablo Neira Ayuso
  • [PATCH 07/11] nfnetlink_cttimeout: pass nfnetlink_cttimeout module to netlink_dump_start, Gao feng
  • [PATCH 10/11] ipset: pass ipset module to netlink_dump_start, Gao feng
  • [PATCH 09/11] xfrm: pass xfrm_user module to netlink_dump_start, Gao feng
  • [PATCH 11/11] infiniband: pass rdma_cm module to netlink_dump_start, Gao feng
  • [PATCH 08/11] crypto: pass crypto_user module to netlink_dump_start, Gao feng
    • Re: [PATCH 08/11] crypto: pass crypto_user module to netlink_dump_start, Steffen Klassert
      • Re: [PATCH 08/11] crypto: pass crypto_user module to netlink_dump_start, Gao feng
  • [PATCH 06/11] nfnetlink_cthelper: pass nfnetlink_cthelper module to netlink_dump_start, Gao feng
  • [PATCH 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
  • [PATCH 05/11] nfnetlink_acct: pass nfnetlink_acct module to netlink_dump_start, Gao feng
  • Re: [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Steffen Klassert
    • Re: [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
  • Re: [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Eric Dumazet
    • Re: [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
• [PATCH] netfilter fix for 3.6-rc7, pablo
  • [PATCH] netfilter: xt_limit: have r->cost != 0 case work, pablo
  • Re: [PATCH] netfilter fix for 3.6-rc7, David Miller
• [PATCH 00/16] netfilter updates for net-next, pablo
  • [PATCH 01/16] netfilter: fix IPv6 NAT dependencies in Kconfig, pablo
  • [PATCH 04/16] netfilter: combine ipt_NETMAP and ip6t_NETMAP, pablo
  • [PATCH 08/16] netfilter: ipset: Rewrite cidr book keeping to handle /0, pablo
  • [PATCH 13/16] netfilter: xt_time: add support to ignore day transition, pablo
  • [PATCH 15/16] netfilter: nfnetlink_queue: fix maximum packet length to userspace, pablo
  • [PATCH 16/16] netfilter: nfnetlink_queue: add NFQA_CAP_LEN attribute, pablo
  • [PATCH 14/16] netfilter: nf_ct_ftp: add sequence tracking pickup facility for injected entries, pablo
  • [PATCH 12/16] netfilter: ipset: Support to match elements marked with "nomatch", pablo
  • [PATCH 09/16] netfilter: ipset: Add /0 network support to hash:net,iface type, pablo
  • [PATCH 07/16] netfilter: ipset: Check and reject crazy /0 input parameters, pablo
  • [PATCH 10/16] netfilter: ipset: Include supported revisions in module description, pablo
  • [PATCH 11/16] netfilter: ipset: Coding style fixes, pablo
  • [PATCH 02/16] netfilter: nf_nat: fix oops when unloading protocol modules, pablo
  • [PATCH 05/16] netfilter: combine ipt_REDIRECT and ip6t_REDIRECT, pablo
  • [PATCH 06/16] netfilter: ipset: Fix sparse warnings "incorrect type in assignment", pablo
  • [PATCH 03/16] netfilter: nf_nat: remove obsolete rcu_read_unlock call, pablo
  • Re: [PATCH 00/16] netfilter updates for net-next, David Miller
• [PATCH] nfnetlink: add a new subsystem to advertise tables update, Nicolas Dichtel
  • [RFC PATCH 0/1] xtables: allow to monitor table update event, Nicolas Dichtel
    • [RFC PATCH 1/1] xtables: allow to monitor table update event, Nicolas Dichtel
      • [RFC PATCH] includes: add definitions of nfnl_tables, Nicolas Dichtel
    • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Nicolas Dichtel
      • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Nicolas Dichtel
        • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Pablo Neira Ayuso
          • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Nicolas Dichtel
            • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Pablo Neira Ayuso
• [PATCH 0/2] nfnetlink_queue updates, pablo
  • [PATCH 1/2] netfilter: nfnetlink_queue: fix maximum packet length to userspace, pablo
  • [PATCH 2/2] netfilter: nfnetlink_queue: add NFQA_CAP_LEN attribute, pablo
• no extension found for this protocol, Aft nix
  • Re: no extension found for this protocol, Jan Engelhardt
    • Re: no extension found for this protocol, Aft nix
      • Re: no extension found for this protocol, Jan Engelhardt
        • Re: no extension found for this protocol, Aft nix
          • Re: no extension found for this protocol, Jan Engelhardt
            • Re: no extension found for this protocol, Aft nix
              • Re: no extension found for this protocol, Jan Engelhardt
• Re: [PATCH 2/7][RFC] netfilter: add xt_qtaguid matching module, Pablo Neira Ayuso
• Re: nflog feature request, Patrick McHardy
• [PATCH 4/7] netfilter: ipset: Add /0 network support to hash:net,iface type, Jozsef Kadlecsik
• [PATCH 7/7] netfilter: ipset: Support to match elements marked with "nomatch", Jozsef Kadlecsik
• [PATCH 5/7] netfilter: ipset: Include supported revisions in module description, Jozsef Kadlecsik
• [PATCH 2/7] netfilter: ipset: Check and reject crazy /0 input parameters, Jozsef Kadlecsik
• [PATCH 3/7] netfilter: ipset: Rewrite cidr book keeping to handle /0, Jozsef Kadlecsik
• [PATCH 1/7] netfilter: ipset: Fix sparse warnings "incorrect type in assignment", Jozsef Kadlecsik
• [PATCH 6/7] netfilter: ipset: Coding style fixes, Jozsef Kadlecsik
• [PATCH 0/7] ipset patches for nf-next, v2, Jozsef Kadlecsik
  • Re: [PATCH 0/7] ipset patches for nf-next, v2, Pablo Neira Ayuso
• [PATCH] netfilter: nf_ct_ftp: add sequence tracking pickup facility for injected entries, pablo
• Re: Bug in limit_mt_check(), Jan Engelhardt
  • Re: Bug in limit_mt_check(), Jan Engelhardt
    • Re: Bug in limit_mt_check(), Jan Engelhardt
      • [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
        • Re: [PATCH] netfilter: have r->cost != 0 case work, Patrick McHardy
          • Re: [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
            • Re: [PATCH] netfilter: have r->cost != 0 case work, Patrick McHardy
          • Re: [PATCH] netfilter: have r->cost != 0 case work, Jim Robinson
            • Re: [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
        • Re: [PATCH] netfilter: have r->cost != 0 case work, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
            • Re: [PATCH] netfilter: have r->cost != 0 case work, Pablo Neira Ayuso
              • Re: [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
                • Re: [PATCH] netfilter: have r->cost != 0 case work, Pablo Neira Ayuso
• Start to developing, Giuseppe Longo
• [ANNOUNCE] ipset 6.14 released, Jozsef Kadlecsik
• [PATCH 4/4] netfilter: ipset: Support to match elements marked with "nomatch", Jozsef Kadlecsik
• [PATCH 2/4] netfilter: ipset: Include supported revisions in module description, Jozsef Kadlecsik
• [PATCH 3/4] netfilter: ipset: Coding style fixes, Jozsef Kadlecsik
• [PATCH 1/4] netfilter: ipset: Add /0 network support to hash:net,iface type, Jozsef Kadlecsik
• [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
  • <Possible follow-ups>
  • [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 1/4] netfilter: ipset: Removed invalid IPSET_ATTR_MARKMASK validation, Jozsef Kadlecsik
    • [PATCH 2/4] netfilter: ipset: netnet,netportnet: Fix value range support for IPv4, Jozsef Kadlecsik
    • [PATCH 4/4] netfilter: ipset: Fix warn: integer overflows 'sizeof(*map) + size * set->dsize', Jozsef Kadlecsik
    • [PATCH 3/4] netfilter: ipset: Resolve missing-field-initializer warnings, Jozsef Kadlecsik
    • Re: [PATCH 0/4] ipset patches for nf-next, Pablo Neira Ayuso
  • [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 2/4] netfilter: ipset: Fix sparse warnings, Jozsef Kadlecsik
    • [PATCH 1/4] netfilter: ipset: Compress return logic, Jozsef Kadlecsik
    • [PATCH 4/4] netfilter: ipset: ipset list may return wrong member count for set with timeout, Jozsef Kadlecsik
      • Re: [PATCH 4/4] netfilter: ipset: ipset list may return wrong member count for set with timeout, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: ipset: deduplicate prefixlen maps, Jozsef Kadlecsik
    • Re: [PATCH 0/4] ipset patches for nf-next, Pablo Neira Ayuso
      • Re: [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 2/4] netfilter: ipset: List timing out entries with "timeout 1" instead of zero, Jozsef Kadlecsik
    • [PATCH 4/4] netfilter: ipset: forbid family for hash:mac sets, Jozsef Kadlecsik
    • [PATCH 1/4] netfilter: xt_set: Check hook mask correctly, Jozsef Kadlecsik
    • [PATCH 3/4] netfilter: ipset: Limit max timeout value, Jozsef Kadlecsik
    • Re: [PATCH 0/4] ipset patches for nf-next, Pablo Neira Ayuso
      • Re: [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 1/4] netfilter: ipset: Update byte and packet counters regardless of whether they match, Jozsef Kadlecsik
      • Re: [PATCH 1/4] netfilter: ipset: Update byte and packet counters regardless of whether they match, Pablo Neira Ayuso
        • Re: [PATCH 1/4] netfilter: ipset: Update byte and packet counters regardless of whether they match, Jozsef Kadlecsik
    • [PATCH 3/4] netfilter: ipset: Add bucketsize parameter to all hash types, Jozsef Kadlecsik
    • [PATCH 2/4] netfilter: ipset: Support the -exist flag with the destroy command, Jozsef Kadlecsik
    • [PATCH 4/4] netfilter: ipset: Expose the initval hash parameter to userspace, Jozsef Kadlecsik
• [PATCH 3/3] netfilter: ipset: Fix cidr book keeping for hash:*net* types, Jozsef Kadlecsik
• [PATCH 1/3] netfilter: ipset: Fix sparse warnings "incorrect type in assignment", Jozsef Kadlecsik
• [PATCH 2/3] netfilter: ipset: Check and reject crazy /0 input parameters, Jozsef Kadlecsik
• [PATCH 0/3] ipset fixes, Jozsef Kadlecsik
  • Re: [PATCH 0/3] ipset fixes, Pablo Neira Ayuso
    • Re: [PATCH 0/3] ipset fixes, Jozsef Kadlecsik
      • Re: [PATCH 0/3] ipset fixes, Pablo Neira Ayuso
• [PATCH] mk: fix librairies dependencies, Nicolas Dichtel
  • Re: [PATCH] mk: fix librairies dependencies, Pablo Neira Ayuso
• [PATCH] Added OBSF_print(), aft
• How to add wildcard netmask to ipset?, İbrahim Ercan
  • Re: How to add wildcard netmask to ipset?, Jozsef Kadlecsik
  • Re: How to add wildcard netmask to ipset?, Aidas Kasparas
• [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Ulrich Weber
  • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Eric Dumazet
    • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Ulrich Weber
      • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Pablo Neira Ayuso
    • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Stephen Hemminger
    • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Stephen Hemminger
      • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Pablo Neira Ayuso
  • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Pablo Neira Ayuso
• [PATCH v4 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
    • Re: [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Jesper Dangaard Brouer
      • Re: [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
  • [PATCH 3/4] ipv6: make ip6_frag_nqueues() and ip6_frag_mem() static inline, Cong Wang
  • [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
  • [PATCH 4/4] ipv6: unify fragment thresh handling code, Cong Wang
  • Re: [PATCH v4 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
• [RFC] Inter-match communication cache, Jozsef Kadlecsik
  • Re: [RFC] Inter-match communication cache, Jesper Dangaard Brouer
    • Re: [RFC] Inter-match communication cache, Jan Engelhardt
    • Re: [RFC] Inter-match communication cache, Jozsef Kadlecsik
  • Re: [RFC] Inter-match communication cache, Pablo Neira Ayuso
    • Re: [RFC] Inter-match communication cache, Jozsef Kadlecsik
• [pablo@xxxxxxxxxxxxx: Re: [netfilter-core] Patch for ULOGD], Pablo Neira Ayuso
  • Re: [pablo@xxxxxxxxxxxxx: Re: [netfilter-core] Patch for ULOGD], Jan Engelhardt
    • Re: [pablo@xxxxxxxxxxxxx: Re: [netfilter-core] Patch for ULOGD], Pablo Neira Ayuso
• Re: linux-next: Tree for Sept 18 (netfilter), Randy Dunlap
  • Re: linux-next: Tree for Sept 18 (netfilter), Pablo Neira Ayuso
• [PATCH 2/2] Added userspace plugin for xt_OBSF.c, aft
• [PATCH 1/2] 1) Changed to "one" ds 2) Added some consistancy checks, aft
• [PATCH v3 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • [PATCH 3/4] ipv6: make ip6_frag_nqueues() and ip6_frag_mem() static inline, Cong Wang
  • [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
    • Re: [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Pablo Neira Ayuso
      • Re: [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
  • [PATCH 4/4] ipv6: unify fragment thresh handling code, Cong Wang
  • [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
• [PATCH v2 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • [PATCH 3/4] ipv6: make ip6_frag_nqueues() and ip6_frag_mem() static inline, Cong Wang
  • [PATCH 4/4] ipv6: unify fragment thresh handling code, Cong Wang
  • [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
  • [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
    • Re: [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Pablo Neira Ayuso
      • Re: [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
  • Re: [PATCH v2 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
    • Re: [PATCH v2 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
• [PATCH] New Target Extension OBSF, aft
  • Re: [PATCH] New Target Extension OBSF, Jan Engelhardt
    • Re: [PATCH] New Target Extension OBSF, Aft nix
      • Re: [PATCH] New Target Extension OBSF, Jan Engelhardt
        • Re: [PATCH] New Target Extension OBSF, Aft nix
• [PATCH v2 0/7][xt-addons] xt_psd: ipv6 support, Florian Westphal
  • [PATCH 1/7] xt_psd: remove unneeded variables, make hash unsigned, Florian Westphal
  • [PATCH 2/7] xt_psd: split struct host into generic and af-dependent structure, Florian Westphal
  • [PATCH 3/7] xt_psd: move table cleanup into helper, Florian Westphal
  • [PATCH 4/7] xt_psd: use tcph->dest directly, Florian Westphal
  • [PATCH 5/7] xt_psd: move l4 header fetching into helper, Florian Westphal
  • [PATCH 6/7] xt_psd: move ipv4 state locking responsibility to caller, Florian Westphal
  • [PATCH 7/7] psd: add ipv6 support, Florian Westphal
  • Re: [PATCH v2 0/7][xt-addons] xt_psd: ipv6 support, Jan Engelhardt
• Allocating and destroying connection-related data, Nicole
  • Re: Allocating and destroying connection-related data, Pablo Neira Ayuso
• [PATCH] libxt_time: add support to ignore day transition, Florian Westphal
  • [PATCH] netfilter: xt_time: add support to ignore day transition, Florian Westphal
    • Re: [PATCH] netfilter: xt_time: add support to ignore day transition, Jan Engelhardt
      • Re: [PATCH] netfilter: xt_time: add support to ignore day transition, Florian Westphal
    • Re: [PATCH] netfilter: xt_time: add support to ignore day transition, Pablo Neira Ayuso
  • Re: [PATCH] libxt_time: add support to ignore day transition, Pablo Neira Ayuso
• [PATCH 00/11][xt-addons] xt_psd: ipv6 support, Florian Westphal
  • [PATCH 01/11] xt_psd: consider protocol when searching port list, Florian Westphal
  • [PATCH 02/11] xt_psd: move parts of main match function to helpers, Florian Westphal
  • [PATCH 03/11] xt_psd: avoid if (c=h) do {..} while (c = c->next), Florian Westphal
  • [PATCH 05/11] xt_psd: remove unneeded variables, Florian Westphal
    • Re: [PATCH 05/11] xt_psd: remove unneeded variables, Jan Engelhardt
      • Re: [PATCH 05/11] xt_psd: remove unneeded variables, Florian Westphal
  • [PATCH 04/11] xt_psd: move match functionality to helpers, Florian Westphal
  • [PATCH 10/11] xt_psd: move ipv4 state locking responsibility to caller, Florian Westphal