Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH V4 3/7] ipvs: Use config macro IS_ENABLED(), (continued)
  • [PATCH V4 3/7] ipvs: Use config macro IS_ENABLED(), Jesper Dangaard Brouer
  • [PATCH V4 4/7] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
  • [PATCH V4 5/7] ipvs: Complete IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH V4 6/7] ipvs: API change to avoid rescan of IPv6 exthdr, Jesper Dangaard Brouer
  • [PATCH V4 7/7] ipvs: SIP fragment handling, Jesper Dangaard Brouer
    • Re: [PATCH V4 7/7] ipvs: SIP fragment handling, Simon Horman
  • Re: [PATCH V4 0/7] ipvs: IPv6 fragment handling for IPVS, Julian Anastasov
    • Re: [PATCH V4 0/7] ipvs: IPv6 fragment handling for IPVS, Simon Horman
  • Re: [PATCH V4 0/7] ipvs: IPv6 fragment handling for IPVS, Hans Schillstrom
• [patch v2 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
  • [patch v2 11/11] infiniband: pass rdma_cm module to netlink_dump_start, Gao feng
  • [patch v2 08/11] crypto: pass crypto_user module to netlink_dump_start, Gao feng
  • [patch v2 07/11] nfnetlink_cttimeout: pass nfnetlink_cttimeout module to netlink_dump_start, Gao feng
  • [patch v2 05/11] nfnetlink_acct: pass nfnetlink_acct module to netlink_dump_start, Gao feng
  • [patch v2 10/11] ipset: pass ipset module to netlink_dump_start, Gao feng
  • [patch v2 03/11] unix_diag: pass unix_diag module to netlink_dump_start, Gao feng
  • [patch v2 09/11] xfrm: pass xfrm_user module to netlink_dump_start, Gao feng
  • [patch v2 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Gao feng
  • [patch v2 06/11] nfnetlink_cthelper: pass nfnetlink_cthelper module to netlink_dump_start, Gao feng
  • [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
    • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
    • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Pablo Neira Ayuso
      • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
        • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Pablo Neira Ayuso
          • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
            • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Pablo Neira Ayuso
              • Re: [patch v2 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
• [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
  • [PATCH 03/11] unix_diag: pass unix_diag module to netlink_dump_start, Gao feng
  • [PATCH 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Gao feng
    • Re: [PATCH 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Stephen Hemminger
      • Re: [PATCH 02/11] inet_diag: pass inet_diag module to netlink_dump_start, Pablo Neira Ayuso
  • [PATCH 07/11] nfnetlink_cttimeout: pass nfnetlink_cttimeout module to netlink_dump_start, Gao feng
  • [PATCH 10/11] ipset: pass ipset module to netlink_dump_start, Gao feng
  • [PATCH 09/11] xfrm: pass xfrm_user module to netlink_dump_start, Gao feng
  • [PATCH 11/11] infiniband: pass rdma_cm module to netlink_dump_start, Gao feng
  • [PATCH 08/11] crypto: pass crypto_user module to netlink_dump_start, Gao feng
    • Re: [PATCH 08/11] crypto: pass crypto_user module to netlink_dump_start, Steffen Klassert
      • Re: [PATCH 08/11] crypto: pass crypto_user module to netlink_dump_start, Gao feng
  • [PATCH 06/11] nfnetlink_cthelper: pass nfnetlink_cthelper module to netlink_dump_start, Gao feng
  • [PATCH 04/11] nf_conntrack_netlink: pass nf_conntrack_netlink module to netlink_dump_start, Gao feng
  • [PATCH 05/11] nfnetlink_acct: pass nfnetlink_acct module to netlink_dump_start, Gao feng
  • Re: [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Steffen Klassert
    • Re: [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
  • Re: [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Eric Dumazet
    • Re: [PATCH 01/11] netlink: add reference of module in netlink_dump_start, Gao feng
• [PATCH] netfilter fix for 3.6-rc7, pablo
  • [PATCH] netfilter: xt_limit: have r->cost != 0 case work, pablo
  • Re: [PATCH] netfilter fix for 3.6-rc7, David Miller
• [PATCH 00/16] netfilter updates for net-next, pablo
  • [PATCH 01/16] netfilter: fix IPv6 NAT dependencies in Kconfig, pablo
  • [PATCH 04/16] netfilter: combine ipt_NETMAP and ip6t_NETMAP, pablo
  • [PATCH 08/16] netfilter: ipset: Rewrite cidr book keeping to handle /0, pablo
  • [PATCH 13/16] netfilter: xt_time: add support to ignore day transition, pablo
  • [PATCH 15/16] netfilter: nfnetlink_queue: fix maximum packet length to userspace, pablo
  • [PATCH 16/16] netfilter: nfnetlink_queue: add NFQA_CAP_LEN attribute, pablo
  • [PATCH 14/16] netfilter: nf_ct_ftp: add sequence tracking pickup facility for injected entries, pablo
  • [PATCH 12/16] netfilter: ipset: Support to match elements marked with "nomatch", pablo
  • [PATCH 09/16] netfilter: ipset: Add /0 network support to hash:net,iface type, pablo
  • [PATCH 07/16] netfilter: ipset: Check and reject crazy /0 input parameters, pablo
  • [PATCH 10/16] netfilter: ipset: Include supported revisions in module description, pablo
  • [PATCH 11/16] netfilter: ipset: Coding style fixes, pablo
  • [PATCH 02/16] netfilter: nf_nat: fix oops when unloading protocol modules, pablo
  • [PATCH 05/16] netfilter: combine ipt_REDIRECT and ip6t_REDIRECT, pablo
  • [PATCH 06/16] netfilter: ipset: Fix sparse warnings "incorrect type in assignment", pablo
  • [PATCH 03/16] netfilter: nf_nat: remove obsolete rcu_read_unlock call, pablo
  • Re: [PATCH 00/16] netfilter updates for net-next, David Miller
• [PATCH] nfnetlink: add a new subsystem to advertise tables update, Nicolas Dichtel
  • [RFC PATCH 0/1] xtables: allow to monitor table update event, Nicolas Dichtel
    • [RFC PATCH 1/1] xtables: allow to monitor table update event, Nicolas Dichtel
      • [RFC PATCH] includes: add definitions of nfnl_tables, Nicolas Dichtel
    • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Nicolas Dichtel
      • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Nicolas Dichtel
        • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Pablo Neira Ayuso
          • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Nicolas Dichtel
            • Re: [RFC PATCH 0/1] xtables: allow to monitor table update event, Pablo Neira Ayuso
• [PATCH 0/2] nfnetlink_queue updates, pablo
  • [PATCH 1/2] netfilter: nfnetlink_queue: fix maximum packet length to userspace, pablo
  • [PATCH 2/2] netfilter: nfnetlink_queue: add NFQA_CAP_LEN attribute, pablo
• no extension found for this protocol, Aft nix
  • Re: no extension found for this protocol, Jan Engelhardt
    • Re: no extension found for this protocol, Aft nix
      • Re: no extension found for this protocol, Jan Engelhardt
        • Re: no extension found for this protocol, Aft nix
          • Re: no extension found for this protocol, Jan Engelhardt
            • Re: no extension found for this protocol, Aft nix
              • Re: no extension found for this protocol, Jan Engelhardt
• Re: [PATCH 2/7][RFC] netfilter: add xt_qtaguid matching module, Pablo Neira Ayuso
• Re: nflog feature request, Patrick McHardy
• [PATCH 4/7] netfilter: ipset: Add /0 network support to hash:net,iface type, Jozsef Kadlecsik
• [PATCH 7/7] netfilter: ipset: Support to match elements marked with "nomatch", Jozsef Kadlecsik
• [PATCH 5/7] netfilter: ipset: Include supported revisions in module description, Jozsef Kadlecsik
• [PATCH 2/7] netfilter: ipset: Check and reject crazy /0 input parameters, Jozsef Kadlecsik
• [PATCH 3/7] netfilter: ipset: Rewrite cidr book keeping to handle /0, Jozsef Kadlecsik
• [PATCH 1/7] netfilter: ipset: Fix sparse warnings "incorrect type in assignment", Jozsef Kadlecsik
• [PATCH 6/7] netfilter: ipset: Coding style fixes, Jozsef Kadlecsik
• [PATCH 0/7] ipset patches for nf-next, v2, Jozsef Kadlecsik
  • Re: [PATCH 0/7] ipset patches for nf-next, v2, Pablo Neira Ayuso
• [PATCH] netfilter: nf_ct_ftp: add sequence tracking pickup facility for injected entries, pablo
• Re: Bug in limit_mt_check(), Jan Engelhardt
  • Re: Bug in limit_mt_check(), Jan Engelhardt
    • Re: Bug in limit_mt_check(), Jan Engelhardt
      • [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
        • Re: [PATCH] netfilter: have r->cost != 0 case work, Patrick McHardy
          • Re: [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
            • Re: [PATCH] netfilter: have r->cost != 0 case work, Patrick McHardy
          • Re: [PATCH] netfilter: have r->cost != 0 case work, Jim Robinson
            • Re: [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
        • Re: [PATCH] netfilter: have r->cost != 0 case work, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
            • Re: [PATCH] netfilter: have r->cost != 0 case work, Pablo Neira Ayuso
              • Re: [PATCH] netfilter: have r->cost != 0 case work, Jan Engelhardt
                • Re: [PATCH] netfilter: have r->cost != 0 case work, Pablo Neira Ayuso
• Start to developing, Giuseppe Longo
• [ANNOUNCE] ipset 6.14 released, Jozsef Kadlecsik
• [PATCH 4/4] netfilter: ipset: Support to match elements marked with "nomatch", Jozsef Kadlecsik
• [PATCH 2/4] netfilter: ipset: Include supported revisions in module description, Jozsef Kadlecsik
• [PATCH 3/4] netfilter: ipset: Coding style fixes, Jozsef Kadlecsik
• [PATCH 1/4] netfilter: ipset: Add /0 network support to hash:net,iface type, Jozsef Kadlecsik
• [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
  • <Possible follow-ups>
  • [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 1/4] netfilter: ipset: Removed invalid IPSET_ATTR_MARKMASK validation, Jozsef Kadlecsik
    • [PATCH 2/4] netfilter: ipset: netnet,netportnet: Fix value range support for IPv4, Jozsef Kadlecsik
    • [PATCH 4/4] netfilter: ipset: Fix warn: integer overflows 'sizeof(*map) + size * set->dsize', Jozsef Kadlecsik
    • [PATCH 3/4] netfilter: ipset: Resolve missing-field-initializer warnings, Jozsef Kadlecsik
    • Re: [PATCH 0/4] ipset patches for nf-next, Pablo Neira Ayuso
  • [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 2/4] netfilter: ipset: Fix sparse warnings, Jozsef Kadlecsik
    • [PATCH 1/4] netfilter: ipset: Compress return logic, Jozsef Kadlecsik
    • [PATCH 4/4] netfilter: ipset: ipset list may return wrong member count for set with timeout, Jozsef Kadlecsik
      • Re: [PATCH 4/4] netfilter: ipset: ipset list may return wrong member count for set with timeout, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: ipset: deduplicate prefixlen maps, Jozsef Kadlecsik
    • Re: [PATCH 0/4] ipset patches for nf-next, Pablo Neira Ayuso
      • Re: [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 2/4] netfilter: ipset: List timing out entries with "timeout 1" instead of zero, Jozsef Kadlecsik
    • [PATCH 4/4] netfilter: ipset: forbid family for hash:mac sets, Jozsef Kadlecsik
    • [PATCH 1/4] netfilter: xt_set: Check hook mask correctly, Jozsef Kadlecsik
    • [PATCH 3/4] netfilter: ipset: Limit max timeout value, Jozsef Kadlecsik
    • Re: [PATCH 0/4] ipset patches for nf-next, Pablo Neira Ayuso
      • Re: [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 0/4] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 1/4] netfilter: ipset: Update byte and packet counters regardless of whether they match, Jozsef Kadlecsik
      • Re: [PATCH 1/4] netfilter: ipset: Update byte and packet counters regardless of whether they match, Pablo Neira Ayuso
        • Re: [PATCH 1/4] netfilter: ipset: Update byte and packet counters regardless of whether they match, Jozsef Kadlecsik
    • [PATCH 3/4] netfilter: ipset: Add bucketsize parameter to all hash types, Jozsef Kadlecsik
    • [PATCH 2/4] netfilter: ipset: Support the -exist flag with the destroy command, Jozsef Kadlecsik
    • [PATCH 4/4] netfilter: ipset: Expose the initval hash parameter to userspace, Jozsef Kadlecsik
• [PATCH 3/3] netfilter: ipset: Fix cidr book keeping for hash:*net* types, Jozsef Kadlecsik
• [PATCH 1/3] netfilter: ipset: Fix sparse warnings "incorrect type in assignment", Jozsef Kadlecsik
• [PATCH 2/3] netfilter: ipset: Check and reject crazy /0 input parameters, Jozsef Kadlecsik
• [PATCH 0/3] ipset fixes, Jozsef Kadlecsik
  • Re: [PATCH 0/3] ipset fixes, Pablo Neira Ayuso
    • Re: [PATCH 0/3] ipset fixes, Jozsef Kadlecsik
      • Re: [PATCH 0/3] ipset fixes, Pablo Neira Ayuso
• [PATCH] mk: fix librairies dependencies, Nicolas Dichtel
  • Re: [PATCH] mk: fix librairies dependencies, Pablo Neira Ayuso
• [PATCH] Added OBSF_print(), aft
• How to add wildcard netmask to ipset?, İbrahim Ercan
  • Re: How to add wildcard netmask to ipset?, Jozsef Kadlecsik
  • Re: How to add wildcard netmask to ipset?, Aidas Kasparas
• [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Ulrich Weber
  • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Eric Dumazet
    • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Ulrich Weber
      • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Pablo Neira Ayuso
    • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Stephen Hemminger
    • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Stephen Hemminger
      • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Pablo Neira Ayuso
  • Re: [PATCH net-next] nat: remove obsolete rcu_read_unlock call, Pablo Neira Ayuso
• [PATCH v4 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
    • Re: [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Jesper Dangaard Brouer
      • Re: [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
  • [PATCH 3/4] ipv6: make ip6_frag_nqueues() and ip6_frag_mem() static inline, Cong Wang
  • [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
  • [PATCH 4/4] ipv6: unify fragment thresh handling code, Cong Wang
  • Re: [PATCH v4 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
• [RFC] Inter-match communication cache, Jozsef Kadlecsik
  • Re: [RFC] Inter-match communication cache, Jesper Dangaard Brouer
    • Re: [RFC] Inter-match communication cache, Jan Engelhardt
    • Re: [RFC] Inter-match communication cache, Jozsef Kadlecsik
  • Re: [RFC] Inter-match communication cache, Pablo Neira Ayuso
    • Re: [RFC] Inter-match communication cache, Jozsef Kadlecsik
• [pablo@xxxxxxxxxxxxx: Re: [netfilter-core] Patch for ULOGD], Pablo Neira Ayuso
  • Re: [pablo@xxxxxxxxxxxxx: Re: [netfilter-core] Patch for ULOGD], Jan Engelhardt
    • Re: [pablo@xxxxxxxxxxxxx: Re: [netfilter-core] Patch for ULOGD], Pablo Neira Ayuso
• Re: linux-next: Tree for Sept 18 (netfilter), Randy Dunlap
  • Re: linux-next: Tree for Sept 18 (netfilter), Pablo Neira Ayuso
• [PATCH 2/2] Added userspace plugin for xt_OBSF.c, aft
• [PATCH 1/2] 1) Changed to "one" ds 2) Added some consistancy checks, aft
• [PATCH v3 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • [PATCH 3/4] ipv6: make ip6_frag_nqueues() and ip6_frag_mem() static inline, Cong Wang
  • [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
    • Re: [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Pablo Neira Ayuso
      • Re: [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
  • [PATCH 4/4] ipv6: unify fragment thresh handling code, Cong Wang
  • [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
• [PATCH v2 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • [PATCH 3/4] ipv6: make ip6_frag_nqueues() and ip6_frag_mem() static inline, Cong Wang
  • [PATCH 4/4] ipv6: unify fragment thresh handling code, Cong Wang
  • [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
  • [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
    • Re: [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Pablo Neira Ayuso
      • Re: [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
  • Re: [PATCH v2 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
    • Re: [PATCH v2 net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
• [PATCH] New Target Extension OBSF, aft
  • Re: [PATCH] New Target Extension OBSF, Jan Engelhardt
    • Re: [PATCH] New Target Extension OBSF, Aft nix
      • Re: [PATCH] New Target Extension OBSF, Jan Engelhardt
        • Re: [PATCH] New Target Extension OBSF, Aft nix
• [PATCH v2 0/7][xt-addons] xt_psd: ipv6 support, Florian Westphal
  • [PATCH 1/7] xt_psd: remove unneeded variables, make hash unsigned, Florian Westphal
  • [PATCH 2/7] xt_psd: split struct host into generic and af-dependent structure, Florian Westphal
  • [PATCH 3/7] xt_psd: move table cleanup into helper, Florian Westphal
  • [PATCH 4/7] xt_psd: use tcph->dest directly, Florian Westphal
  • [PATCH 5/7] xt_psd: move l4 header fetching into helper, Florian Westphal
  • [PATCH 6/7] xt_psd: move ipv4 state locking responsibility to caller, Florian Westphal
  • [PATCH 7/7] psd: add ipv6 support, Florian Westphal
  • Re: [PATCH v2 0/7][xt-addons] xt_psd: ipv6 support, Jan Engelhardt
• Allocating and destroying connection-related data, Nicole
  • Re: Allocating and destroying connection-related data, Pablo Neira Ayuso
• [PATCH] libxt_time: add support to ignore day transition, Florian Westphal
  • [PATCH] netfilter: xt_time: add support to ignore day transition, Florian Westphal
    • Re: [PATCH] netfilter: xt_time: add support to ignore day transition, Jan Engelhardt
      • Re: [PATCH] netfilter: xt_time: add support to ignore day transition, Florian Westphal
    • Re: [PATCH] netfilter: xt_time: add support to ignore day transition, Pablo Neira Ayuso
  • Re: [PATCH] libxt_time: add support to ignore day transition, Pablo Neira Ayuso
• [PATCH 00/11][xt-addons] xt_psd: ipv6 support, Florian Westphal
  • [PATCH 01/11] xt_psd: consider protocol when searching port list, Florian Westphal
  • [PATCH 02/11] xt_psd: move parts of main match function to helpers, Florian Westphal
  • [PATCH 03/11] xt_psd: avoid if (c=h) do {..} while (c = c->next), Florian Westphal
  • [PATCH 05/11] xt_psd: remove unneeded variables, Florian Westphal
    • Re: [PATCH 05/11] xt_psd: remove unneeded variables, Jan Engelhardt
      • Re: [PATCH 05/11] xt_psd: remove unneeded variables, Florian Westphal
  • [PATCH 04/11] xt_psd: move match functionality to helpers, Florian Westphal
  • [PATCH 10/11] xt_psd: move ipv4 state locking responsibility to caller, Florian Westphal
  • [PATCH 11/11] psd: add ipv6 support, Florian Westphal
  • [PATCH 08/11] xt_psd: use tcph->dest directly, Florian Westphal
  • [PATCH 09/11] xt_psd: move l4 header fetching into helper, Florian Westphal
  • [PATCH 07/11] xt_psd: move table cleanup into helper, Florian Westphal
  • [PATCH 06/11] xt_psd: split struct host into generic and af-dependent structure, Florian Westphal
• Help parsing options with iptables extension, Aft nix
  • Re: Help parsing options with iptables extension, Jan Engelhardt
    • Re: Help parsing options with iptables extension, Aft nix
      • Re: Help parsing options with iptables extension, Jan Engelhardt
        • Re: Help parsing options with iptables extension, Aft nix
          • Re: Help parsing options with iptables extension, Jan Engelhardt
            • Re: Help parsing options with iptables extension, Aft nix
• Re: [PATCH V2] netfilter/iptables: Fix log-level processing, auto75914331
• conntrack tuple, Miguel Alejandro González
  • Re: conntrack tuple, Pablo Neira Ayuso
    • Re: conntrack tuple, Miguel Alejandro González
• [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Eric W. Biederman
  • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Cong Wang
  • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Patrick McHardy
    • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Eric Dumazet
        • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Pablo Neira Ayuso
• Combine two modules, Jan Engelhardt
  • [PATCH 1/2] net: netfilter: combine ipt_NETMAP and ip6t_NETMAP, Jan Engelhardt
    • Re: [PATCH 1/2] net: netfilter: combine ipt_NETMAP and ip6t_NETMAP, Patrick McHardy
    • Re: [PATCH 1/2] net: netfilter: combine ipt_NETMAP and ip6t_NETMAP, Pablo Neira Ayuso
  • [PATCH 2/2] net: netfilter: combine ipt_REDIRECT and ip6t_REDIRECT, Jan Engelhardt
    • Re: [PATCH 2/2] net: netfilter: combine ipt_REDIRECT and ip6t_REDIRECT, Patrick McHardy
    • Re: [PATCH 2/2] net: netfilter: combine ipt_REDIRECT and ip6t_REDIRECT, Pablo Neira Ayuso
• Ipset Problem, Lutfi ODUNCUOGLU
  • Re: Ipset Problem, Jozsef Kadlecsik
    • Re: Ipset Problem, hdemir
• [PATCH 0/5] Netfilter updates for net-next, pablo
  • [PATCH 2/5] netfilter: nf_nat: fix out-of-bounds access in address selection, pablo
  • [PATCH 1/5] netfilter: fix crash during boot if NAT has been compiled built-in, pablo
  • [PATCH 5/5] netfilter: ctnetlink: fix module auto-load in ctnetlink_parse_nat, pablo
  • [PATCH 4/5] ipvs: use list_del_init instead of list_del/INIT_LIST_HEAD, pablo
  • [PATCH 3/5] netfilter: nfnetlink_queue: remove pointless conditional before kfree_skb(), pablo
  • Re: [PATCH 0/5] Netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 0/5] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: ipv4: propagate routing errors from ip_route_me_harder(), Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: ipv6: propagate routing errors from ip6_route_me_harder(), Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: xt_rpfilter: depend on raw or mangle table, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nat: propagate errors from xfrm_me_harder(), Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter updates for net-next, David Miller
  • [PATCH 0/5] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 4/5] ipvs: allow rescheduling of new connections when port reuse is detected, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nft_compat: add support for arptables extensions, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: ipset: fix boolreturn.cocci warnings, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: Don't hide NETFILTER_XT_MATCH_ADDRTYPE behind NETFILTER_ADVANCED, Pablo Neira Ayuso
    • [PATCH 1/5] ipvs: use 64-bit rates in stats, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter updates for net-next, David Miller
• [PATCH 0/4] netfilter updates for 3.6-rc5, pablo
  • [PATCH 1/4] netfilter: take care of timewait sockets, pablo
  • [PATCH 4/4] netfilter: log: Fix log-level processing, pablo
  • [PATCH 3/4] netfilter: Validate the sequence number of dataless ACK packets as well, pablo
  • [PATCH 2/4] netfilter: Mark SYN/ACK packets as invalid from original direction, pablo
  • Re: [PATCH 0/4] netfilter updates for 3.6-rc5, David Miller
• xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Fengguang Wu
  • Re: xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Florian Westphal
    • Re: xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Pablo Neira Ayuso
  • Re: xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Eric Dumazet
    • Re: xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Fengguang Wu
• AW: ulogd syslogemu output garbage after kernel update (32 to 64bit), Fiedler Roman
  • Re: AW: ulogd syslogemu output garbage after kernel update (32 to 64bit), Jozsef Kadlecsik
  • Re: ulogd syslogemu output garbage after kernel update (32 to 64bit), Pablo Neira Ayuso
• Re[2]: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Hans Schillstrom
  • Re[2]: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Julian Anastasov
• [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
  • [PATCH 3/4] ipv6: make ip6_frag_nqueues() and ip6_frag_mem() static inline, Cong Wang
  • [PATCH 4/4] ipv6: unify fragment thresh handling code, Cong Wang
  • [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
  • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
    • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
      • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
        • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
          • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
            • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
              • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
• [PATCH] netfilter/iptables: Fix log-level processing, Joe Perches
  • Re: [PATCH] netfilter/iptables: Fix log-level processing, Eric Dumazet
    • [PATCH V2] netfilter/iptables: Fix log-level processing, Joe Perches
    • Re: [PATCH V2] netfilter/iptables: Fix log-level processing, Pablo Neira Ayuso
• help with conntrack, Miguel Alejandro González
  • Re: help with conntrack, Andrew Beverley
    • Re: help with conntrack, Pablo Neira Ayuso
• netfilter.org is down, Pablo Neira Ayuso
• [PATCH] netfilter: ctnetlink: fix module auto-load in ctnetlink_create_conntrack, pablo
• [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH V3 1/8] ipvs: Trivial changes, use compressed IPv6 address in output, Jesper Dangaard Brouer
  • [PATCH V3 3/8] ipvs: Use config macro IS_ENABLED(), Jesper Dangaard Brouer
  • [PATCH V3 2/8] ipvs: IPv6 extend ICMPv6 handling for future types, Jesper Dangaard Brouer
  • [PATCH V3 4/8] ipvs: Fix bug in IPv6 NAT mangling of ports inside ICMPv6 packets, Jesper Dangaard Brouer
  • [PATCH V3 5/8] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
  • [PATCH V3 6/8] ipvs: Complete IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH V3 7/8] ipvs: API change to avoid rescan of IPv6 exthdr, Jesper Dangaard Brouer
  • [PATCH V3 8/8] ipvs: SIP fragment handling, Jesper Dangaard Brouer
  • Re: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Julian Anastasov
    • Re: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
      • Re: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Julian Anastasov
• Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
  • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Florian Westphal
    • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
      • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
        • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
          • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
            • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
              • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
            • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
              • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
                • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
                  • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
                    • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
                      • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
                        • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
    • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
• [PATCHv2] conntrackd: make conntrackd namespace aware, Ansis Atteka
  • Re: [PATCHv2] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
    • Re: [PATCHv2] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
• [PATCH] netfilter: xt_LOG: avoid using old-style "<.>" printk prefix, Romain Francoise
  • Re: [PATCH] netfilter: xt_LOG: avoid using old-style "<.>" printk prefix, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: xt_LOG: avoid using old-style "<.>" printk prefix, Romain Francoise
      • Re: [PATCH] netfilter: xt_LOG: avoid using old-style "<.>" printk prefix, Pablo Neira Ayuso
• [PATCH] build: make clean removes .*.d and *.d, pablo
  • [PATCH] build: have `make clean` remove dep files too, Jan Engelhardt
    • Re: [PATCH] build: have `make clean` remove dep files too, Pablo Neira Ayuso
• ulogd syslogemu output garbage after kernel update (32 to 64bit), Fiedler Roman
• [PATCH 1/2] iptables: fix wrong error messages, pablo
  • [PATCH 2/2] extensions: libxt_addrtype: fix type in help message, pablo
    • Re: [PATCH 2/2] extensions: libxt_addrtype: fix type in help message, Jan Engelhardt
      • Re: [PATCH 2/2] extensions: libxt_addrtype: fix type in help message, Pablo Neira Ayuso
• [PATCH] ipvs: use list_del_init instead of list_del/INIT_LIST_HEAD, Wei Yongjun
  • Re: [PATCH] ipvs: use list_del_init instead of list_del/INIT_LIST_HEAD, Simon Horman
    • Re: [PATCH] ipvs: use list_del_init instead of list_del/INIT_LIST_HEAD, Pablo Neira Ayuso
• [PATCH] netfilter: fix out-of-bounds access in nat addr selection, Florian Westphal
  • Re: [PATCH] netfilter: fix out-of-bounds access in nat addr selection, Pablo Neira Ayuso
• [PATCH] netfilter: fix crash during boot if NAT has been compiled built-in, pablo
• NULL pointer dereference in xt_register_target(), Cong Wang
  • Re: NULL pointer dereference in xt_register_target(), Eric Dumazet
    • Re: NULL pointer dereference in xt_register_target(), Eric Dumazet
      • [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Eric Dumazet
        • Re: [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Pablo Neira Ayuso
          • Re: [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Eric Dumazet
        • Re: [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Patrick McHardy
          • Re: [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Eric Dumazet
    • Re: NULL pointer dereference in xt_register_target(), Pablo Neira Ayuso
      • Re: NULL pointer dereference in xt_register_target(), Cong Wang
        • Re: NULL pointer dereference in xt_register_target(), Pablo Neira Ayuso
• [PATCH] netfilter: take care of timewait sockets, Eric Dumazet
  • Re: [PATCH] netfilter: take care of timewait sockets, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: take care of timewait sockets, Eric Dumazet
      • Re: [PATCH] netfilter: take care of timewait sockets, Pablo Neira Ayuso
• [PATCH 00/25] Netfilter updates for net-next, pablo
  • [PATCH 01/25] ipvs: IPv6 MTU checking cleanup and bugfix, pablo
  • [PATCH 03/25] netfilter: nf_conntrack_ipv6: fix tracking of ICMPv6 error messages containing fragments, pablo
  • [PATCH 02/25] netfilter: nf_conntrack_ipv6: improve fragmentation handling, pablo
  • [PATCH 05/25] netfilter: nf_nat: add protoff argument to packet mangling functions, pablo
  • [PATCH 14/25] netfilter: nf_nat: support IPv6 in amanda NAT helper, pablo
  • [PATCH 17/25] netfilter: nf_nat: support IPv6 in TFTP NAT helper, pablo
  • [PATCH 18/25] netfilter: ip6tables: add stateless IPv6-to-IPv6 Network Prefix Translation target, pablo
  • [PATCH 25/25] netfilter: properly annotate ipv4_netfilter_{init,fini}(), pablo
  • [PATCH 23/25] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_iterate(), pablo
  • [PATCH 24/25] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_queue(), pablo
  • [PATCH 22/25] netfilter: remove xt_NOTRACK, pablo
  • [PATCH 20/25] netfilter: xt_CT: refactorize xt_ct_tg_check, pablo
  • [PATCH 21/25] netfilter: nf_conntrack: add nf_ct_timeout_lookup, pablo
  • [PATCH 19/25] netfilter: xt_socket: fix compilation warnings with gcc 4.7, pablo
  • [PATCH 15/25] netfilter: nf_nat: support IPv6 in SIP NAT helper, pablo
    • Re: [PATCH 15/25] netfilter: nf_nat: support IPv6 in SIP NAT helper, Eric W. Biederman
  • [PATCH 16/25] netfilter: nf_nat: support IPv6 in IRC NAT helper, pablo
  • [PATCH 06/25] netfilter: add protocol independent NAT core, pablo
  • [PATCH 13/25] netfilter: nf_nat: support IPv6 in FTP NAT helper, pablo
  • [PATCH 12/25] netfilter: ip6tables: add NETMAP target, pablo
  • [PATCH 09/25] netfilter: ipv6: add IPv6 NAT support, pablo
  • [PATCH 10/25] netfilter: ip6tables: add MASQUERADE target, pablo
  • [PATCH 11/25] netfilter: ip6tables: add REDIRECT target, pablo
  • [PATCH 08/25] net: core: add function for incremental IPv6 pseudo header checksum updates, pablo
  • [PATCH 07/25] netfilter: ipv6: expand skb head in ip6_route_me_harder after oif change, pablo
  • [PATCH 04/25] netfilter: nf_conntrack: restrict NAT helper invocation to IPv4, pablo
  • Re: [PATCH 00/25] Netfilter updates for net-next, David Miller
• URIs of Netfilter Git repos, Oliver
  • Re: URIs of Netfilter Git repos, Jan Engelhardt
• [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
  • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Eric Leblond
    • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
  • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Pablo Neira Ayuso
    • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
      • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Eric Leblond
        • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
          • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Eric Leblond
            • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
      • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Pablo Neira Ayuso
        • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
• [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
  • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
    • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
      • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
  • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
    • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
      • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
        • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
          • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
            • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
              • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
                • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
                • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
                  • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
                    • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
• [PATCH 0/2] TCP conntrack patches, Jozsef Kadlecsik
  • [PATCH 2/2] netfilter: Validate the sequence number of dataless ACK packets as well, Jozsef Kadlecsik
  • [PATCH 1/2] netfilter: Mark SYN/ACK packets as invalid from original direction, Jozsef Kadlecsik
  • Re: [PATCH 0/2] TCP conntrack patches, Pablo Neira Ayuso
• [PATCH 0/6] netfilter updates for 3.6-rc, pablo
  • [PATCH 3/6] netfilter: ctnetlink: fix error return code in init path, pablo
  • [PATCH 2/6] ipvs: fix error return code, pablo
  • [PATCH 4/6] netfilter: nfnetlink_log: fix error return code in init path, pablo
  • [PATCH 6/6] netfilter: nf_conntrack: fix racy timer handling with reliable events, pablo
  • [PATCH 5/6] netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP expectation, pablo
  • [PATCH 1/6] netfilter: nfnetlink_log: fix NLA_PUT macro removal bug, pablo
  • Re: [PATCH 0/6] netfilter updates for 3.6-rc, David Miller
• [PATCH] netfilter: xt_socket: fix compilation warnings with gcc 4.7, pablo
• [PATCH] netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP expectation, pablo
• [PATCH 7/7] net/netfilter/nf_conntrack_netlink.c: fix error return code, Julia Lawall
  • Re: [PATCH 7/7] net/netfilter/nf_conntrack_netlink.c: fix error return code, Pablo Neira Ayuso
• [PATCH 6/7] net/netfilter/nfnetlink_log.c: fix error return code, Julia Lawall
  • Re: [PATCH 6/7] net/netfilter/nfnetlink_log.c: fix error return code, Pablo Neira Ayuso
• [PATCH 1/7] ipvs: fix error return code, Julia Lawall
  • Re: [PATCH 1/7] ipvs: fix error return code, Simon Horman
  • Re: [PATCH 1/7] ipvs: fix error return code, Pablo Neira Ayuso
• Re[2]: Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Hans Schillstrom
  • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
    • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
      • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
  • <Possible follow-ups>
  • Re[2]: Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Hans Schillstrom
• [PATCH] netfilter: remove pointless conditional before kfree_skb(), Wei Yongjun
• [PATCH] netfilter: nfnetlink_queue: remove pointless conditional before kfree_skb(), Wei Yongjun
  • Re: [PATCH] netfilter: nfnetlink_queue: remove pointless conditional before kfree_skb(), Pablo Neira Ayuso
• [PATCH 1/2] netfilter: xt_CT: refactorize xt_ct_tg_check, pablo
  • [PATCH 2/2] netfilter: nf_conntrack: add nf_ct_timeout_lookup, pablo
• Re[2]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Hans Schillstrom
  • Re[2]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
  • <Possible follow-ups>
  • Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Hans Schillstrom
    • Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
      • Re: Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
        • Re: Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
          • [RFC PATCH 0/2] RFC: Caching IPv6 exthdr in skb->cb[], Jesper Dangaard Brouer
            • [RFC PATCH 1/2] net: Cache IPv6 extension header "skip" parsing, Jesper Dangaard Brouer
            • [RFC PATCH 2/2] netfilter: More users of ipv6_find_hdr_cb(), Jesper Dangaard Brouer
            • Re: [RFC PATCH 0/2] RFC: Caching IPv6 exthdr in skb->cb[], Julian Anastasov
• [PATCH] [RFC] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
• [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
  • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
    • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
      • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
        • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
          • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
            • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
  • Message not available
    • Message not available
      • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
        • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
          • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
            • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
            • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
              • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
                • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
                  • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
                    • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
• [Patch net-next] netfilter: remove xt_NOTRACK, Cong Wang
  • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Maciej Żenczykowski
    • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Jan Engelhardt
      • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Cong Wang
        • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Oliver
          • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Maciej Żenczykowski
        • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
          • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
            • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Maciej Żenczykowski
              • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Jan Engelhardt
                • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Maciej Żenczykowski
                  • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
                    • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Jan Engelhardt
                      • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
                • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
• [PATCH] tests: conntrackd: fix compile errors and warnings, Ansis Atteka
  • Re: [PATCH] tests: conntrackd: fix compile errors and warnings, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_iterate(), Michael Wang
  • Re: [PATCH 1/2] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_iterate(), Pablo Neira Ayuso
• [PATCH 2/2] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_queue(), Michael Wang
  • Re: [PATCH 2/2] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_queue(), Pablo Neira Ayuso
• [PATCH 0/2] netfilter: code refine for using new interface 'list_for_each_entry_continue_rcu', Michael Wang
• [PATCH 00/10] netfilter updates for net-next (batch 1), pablo
  • [PATCH 09/10] netfilter: replace list_for_each_continue_rcu with new interface, pablo
  • [PATCH 08/10] netfilter: nf_conntrack: remove unnecessary RTNL locking, pablo
  • [PATCH 04/10] ipvs: implement passive PMTUD for IPIP packets, pablo
  • [PATCH 01/10] ipvs: ip_vs_ftp depends on nf_conntrack_ftp helper, pablo
  • [PATCH 10/10] netfilter: remove unnecessary goto statement for error recovery, pablo
  • [PATCH 05/10] ipvs: add pmtu_disc option to disable IP DF for TUN packets, pablo
  • [PATCH 03/10] ipvs: fixed sparse warning, pablo
  • [PATCH 02/10] ipvs: generalize app registration in netns, pablo
  • [PATCH 06/10] netfilter: PTR_RET can be used, pablo
  • [PATCH 07/10] netfilter: sparse endian fixes, pablo
  • Re: [PATCH 00/10] netfilter updates for net-next (batch 1), David Miller
• [PATCH] ipvs: Fix GSO support for IPVS DR IPv6 mode, Jesper Dangaard Brouer
• Re[2]: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Hans Schillstrom
  • Re[2]: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Julian Anastasov
    • Re[2]: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Julian Anastasov
      • Re: Re[2]: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Jesper Dangaard Brouer
• [PATCH] libxt_tcp: print space before, not after "flags:", Andreas Schwab
  • Re: [PATCH] libxt_tcp: print space before, not after "flags:", Pablo Neira Ayuso
• [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH 1/3] ipvs: Trivial changes, use compressed IPv6 address in output, Jesper Dangaard Brouer
  • [PATCH 3/3] ipvs: Complete IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
    • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Julian Anastasov
      • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
        • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Julian Anastasov
    • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
      • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
  • Re: [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Simon Horman
    • Re: [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
      • Re: [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Simon Horman
  • <Possible follow-ups>
  • Re[2]: [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Hans Schillstrom
• [PATCH 00/11] netlink: memory mapped I/O, Patrick McHardy
  • [PATCH 01/11] netlink: add symbolic value for congested state, Patrick McHardy
  • [PATCH 04/11] netlink: add netlink_skb_set_owner_r(), Patrick McHardy
  • [PATCH 03/11] netlink: don't orphan skb in netlink_trim(), Patrick McHardy
  • [PATCH 05/11] netlink: mmaped netlink: ring setup, Patrick McHardy
  • [PATCH 10/11] netlink: add flow control for memory mapped I/O, Patrick McHardy
  • [PATCH 11/11] netlink: add documentation for memory mapped I/O, Patrick McHardy
    • Re: [PATCH 11/11] netlink: add documentation for memory mapped I/O, Jan Engelhardt
      • Re: [PATCH 11/11] netlink: add documentation for memory mapped I/O, Patrick McHardy
  • [PATCH 08/11] netlink: implement memory mapped recvmsg(), Patrick McHardy
  • [PATCH 07/11] netlink: implement memory mapped sendmsg(), Patrick McHardy
  • [PATCH 06/11] netlink: add mmap'ed netlink helper functions, Patrick McHardy
  • [PATCH 09/11] nfnetlink: add support for memory mapped netlink, Patrick McHardy
  • [PATCH 02/11] net: add function to allocate skbuff head without data area, Patrick McHardy
    • Re: [PATCH 02/11] net: add function to allocate skbuff head without data area, Eric Dumazet
      • Re: [PATCH 02/11] net: add function to allocate skbuff head without data area, Patrick McHardy
  • Re: [PATCH 00/11] netlink: memory mapped I/O, David Miller
• [PATCH 00/18] netfilter: IPv6 NAT, Patrick McHardy
  • [PATCH 01/18] ipv4: fix path MTU discovery with connection tracking, Patrick McHardy
    • Re: [PATCH 01/18] ipv4: fix path MTU discovery with connection tracking, Eric Dumazet
    • Re: [PATCH 01/18] ipv4: fix path MTU discovery with connection tracking, Jan Engelhardt
      • Re: [PATCH 01/18] ipv4: fix path MTU discovery with connection tracking, Patrick McHardy
  • [PATCH 07/18] netfilter: ipv6: expand skb head in ip6_route_me_harder after oif change, Patrick McHardy
  • [PATCH 05/18] netfilter: nf_nat: add protoff argument to packet mangling functions, Patrick McHardy
    • Re: [PATCH 05/18] netfilter: nf_nat: add protoff argument to packet mangling functions, Jan Engelhardt
      • Re: [PATCH 05/18] netfilter: nf_nat: add protoff argument to packet mangling functions, Patrick McHardy
  • [PATCH 02/18] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
  • [PATCH 04/18] netfilter: nf_conntrack: restrict NAT helper invocation to IPv4, Patrick McHardy
  • [PATCH 08/18] net: core: add function for incremental IPv6 pseudo header checksum updates, Patrick McHardy
    • Re: [PATCH 08/18] net: core: add function for incremental IPv6 pseudo header checksum updates, David Miller
  • [PATCH 09/18] netfilter: ipv6: add IPv6 NAT support, Patrick McHardy
    • Re: [PATCH 09/18] netfilter: ipv6: add IPv6 NAT support, Jan Engelhardt
      • Re: [PATCH 09/18] netfilter: ipv6: add IPv6 NAT support, Patrick McHardy
  • [PATCH 06/18] netfilter: add protocol independant NAT core, Patrick McHardy
    • Re: [PATCH 06/18] netfilter: add protocol independant NAT core, Jan Engelhardt
      • Re: [PATCH 06/18] netfilter: add protocol independant NAT core, Patrick McHardy
        • Re: [PATCH 06/18] netfilter: add protocol independant NAT core, Jan Engelhardt
  • [PATCH 03/18] netfilter: nf_conntrack_ipv6: fix tracking of ICMPv6 error messages containing fragments, Patrick McHardy
  • [PATCH 13/18] netfilter: nf_nat: support IPv6 in FTP NAT helper, Patrick McHardy
  • [PATCH 12/18] netfilter: ip6tables: add NETMAP target, Patrick McHardy
  • [PATCH 18/18] netfilter: ip6tables: add stateless IPv6-to-IPv6 Network Prefix Translation target, Patrick McHardy
  • [PATCH 17/18] netfilter: nf_nat: support IPv6 in TFTP NAT helper, Patrick McHardy
  • [PATCH 11/18] netfilter: ip6tables: add REDIRECT target, Patrick McHardy
  • [PATCH 15/18] netfilter: nf_nat: support IPv6 in SIP NAT helper, Patrick McHardy
  • [PATCH 14/18] netfilter: nf_nat: support IPv6 in amanda NAT helper, Patrick McHardy
  • [PATCH 16/18] netfilter: nf_nat: support IPv6 in IRC NAT helper, Patrick McHardy
  • [PATCH 10/18] netfilter: ip6tables: add MASQUERADE target, Patrick McHardy
  • Re: [PATCH 00/18] netfilter: IPv6 NAT, David Miller
    • Re: [PATCH 00/18] netfilter: IPv6 NAT, Patrick McHardy
      • Re: [PATCH 00/18] netfilter: IPv6 NAT, David Miller
        • Re: [PATCH 00/18] netfilter: IPv6 NAT, Patrick McHardy
        • Re: [PATCH 00/18] netfilter: IPv6 NAT, Pablo Neira Ayuso
  • Re: [PATCH 00/18] netfilter: IPv6 NAT, Pablo Neira Ayuso
• [PATCH net-next] ipv4/netfilter: remove unnecessary goto statement for error recovery, Jean Sacren
  • Re: [PATCH net-next] ipv4/netfilter: remove unnecessary goto statement for error recovery, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net-next] ipv4/netfilter: remove unnecessary goto statement for error recovery, Patrick McHardy
• [PATCH 0/3]: netfilter fixes, Patrick McHardy
  • [PATCH 1/3] netfilter: nfnetlink_log: fix NLA_PUT macro removal bug, Patrick McHardy
    • Re: [PATCH 1/3] netfilter: nfnetlink_log: fix NLA_PUT macro removal bug, Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: nf_conntrack: remove unnecessary RTNL locking, Patrick McHardy
    • Re: [PATCH 3/3] netfilter: nf_conntrack: remove unnecessary RTNL locking, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: sparse endian fixes, Patrick McHardy
    • Re: [PATCH 2/3] netfilter: sparse endian fixes, Pablo Neira Ayuso
• netfilter code question, Vasilis Bakellas
  • Re: netfilter code question, Jan Engelhardt
• [PATCH 0/5] netfilter fixes for 3.6-rc, pablo
  • [PATCH 1/5] netfilter: nf_ct_sip: fix helper name, pablo
  • [PATCH 2/5] netfilter: nf_ct_sip: fix IPv6 address parsing, pablo
  • [PATCH 3/5] netfilter: nf_nat_sip: fix via header translation with multiple parameters, pablo
  • [PATCH 5/5] netfilter: nf_ct_expect: fix possible access to uninitialized timer, pablo
  • [PATCH 4/5] netfilter: ctnetlink: fix missing locking while changing conntrack from nfqueue, pablo
  • Re: [PATCH 0/5] netfilter fixes for 3.6-rc, David Miller
• nfqueue max copy_range broken, how to fix/mitigate?, Florian Westphal
  • Re: nfqueue max copy_range broken, how to fix/mitigate?, Florian Westphal
• [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
  • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Michal Kubeček
    • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
      • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Michal Kubecek
        • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
        • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
• [PATCH 0/3] raid, kmemleak, netfilter: replace list_for_each_continue_rcu with new interface, Michael Wang
• [PATCH 3/3] netfilter: replace list_for_each_continue_rcu with new interface, Michael Wang
  • Re: [PATCH 3/3] netfilter: replace list_for_each_continue_rcu with new interface, Paul E. McKenney
  • Re: [PATCH 3/3] netfilter: replace list_for_each_continue_rcu with new interface, Pablo Neira Ayuso
• routerwired.com, John
• [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, pablo
  • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Patrick McHardy
    • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Patrick McHardy
        • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Patrick McHardy
• [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Florian Weimer
  • Re: [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Jan Engelhardt
  • Re: [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Pablo Neira Ayuso
    • Re: [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Florian Weimer
      • Re: [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Pablo Neira Ayuso
• Xtables-addons: man/SYSRQ sample script, Jan Krcmar
  • Re: Xtables-addons: man/SYSRQ sample script, Jan Engelhardt
• [PATCH] [NETFILTER] bridge: rcu_deref outside read-lock section, Denis Efremov
  • Re: [PATCH] [NETFILTER] bridge: rcu_deref outside read-lock section, Stephen Hemminger
    • Re: [PATCH] [NETFILTER] bridge: rcu_deref outside read-lock section, Denis
  • [PATCH v2] bridge: rcu_deref outside read-lock section, Denis Efremov
    • [PATCH] bridge: fix rcu dereference outside of rcu_read_lock, Stephen Hemminger
      • Re: [PATCH] bridge: fix rcu dereference outside of rcu_read_lock, David Miller
• nat not working as expected, Stephen Clark
  • Re: nat not working as expected, Stephen Clark
• ipset : ip range insertion to hash:net list does not work, İbrahim Ercan