Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 11/11] psd: add ipv6 support, (continued)
  • [PATCH 11/11] psd: add ipv6 support, Florian Westphal
  • [PATCH 08/11] xt_psd: use tcph->dest directly, Florian Westphal
  • [PATCH 09/11] xt_psd: move l4 header fetching into helper, Florian Westphal
  • [PATCH 07/11] xt_psd: move table cleanup into helper, Florian Westphal
  • [PATCH 06/11] xt_psd: split struct host into generic and af-dependent structure, Florian Westphal
• Help parsing options with iptables extension, Aft nix
  • Re: Help parsing options with iptables extension, Jan Engelhardt
    • Re: Help parsing options with iptables extension, Aft nix
      • Re: Help parsing options with iptables extension, Jan Engelhardt
        • Re: Help parsing options with iptables extension, Aft nix
          • Re: Help parsing options with iptables extension, Jan Engelhardt
            • Re: Help parsing options with iptables extension, Aft nix
• Re: [PATCH V2] netfilter/iptables: Fix log-level processing, auto75914331
• conntrack tuple, Miguel Alejandro González
  • Re: conntrack tuple, Pablo Neira Ayuso
    • Re: conntrack tuple, Miguel Alejandro González
• [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Eric W. Biederman
  • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Cong Wang
  • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Patrick McHardy
    • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Eric Dumazet
        • Re: [PATCH] netfilter: Allow xt_nat.c and x_tables.c to compiled in, Pablo Neira Ayuso
• Combine two modules, Jan Engelhardt
  • [PATCH 1/2] net: netfilter: combine ipt_NETMAP and ip6t_NETMAP, Jan Engelhardt
    • Re: [PATCH 1/2] net: netfilter: combine ipt_NETMAP and ip6t_NETMAP, Patrick McHardy
    • Re: [PATCH 1/2] net: netfilter: combine ipt_NETMAP and ip6t_NETMAP, Pablo Neira Ayuso
  • [PATCH 2/2] net: netfilter: combine ipt_REDIRECT and ip6t_REDIRECT, Jan Engelhardt
    • Re: [PATCH 2/2] net: netfilter: combine ipt_REDIRECT and ip6t_REDIRECT, Patrick McHardy
    • Re: [PATCH 2/2] net: netfilter: combine ipt_REDIRECT and ip6t_REDIRECT, Pablo Neira Ayuso
• Ipset Problem, Lutfi ODUNCUOGLU
  • Re: Ipset Problem, Jozsef Kadlecsik
    • Re: Ipset Problem, hdemir
• [PATCH 0/5] Netfilter updates for net-next, pablo
  • [PATCH 2/5] netfilter: nf_nat: fix out-of-bounds access in address selection, pablo
  • [PATCH 1/5] netfilter: fix crash during boot if NAT has been compiled built-in, pablo
  • [PATCH 5/5] netfilter: ctnetlink: fix module auto-load in ctnetlink_parse_nat, pablo
  • [PATCH 4/5] ipvs: use list_del_init instead of list_del/INIT_LIST_HEAD, pablo
  • [PATCH 3/5] netfilter: nfnetlink_queue: remove pointless conditional before kfree_skb(), pablo
  • Re: [PATCH 0/5] Netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 0/5] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: ipv4: propagate routing errors from ip_route_me_harder(), Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: ipv6: propagate routing errors from ip6_route_me_harder(), Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: xt_rpfilter: depend on raw or mangle table, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nat: propagate errors from xfrm_me_harder(), Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter updates for net-next, David Miller
  • [PATCH 0/5] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 4/5] ipvs: allow rescheduling of new connections when port reuse is detected, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nft_compat: add support for arptables extensions, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: ipset: fix boolreturn.cocci warnings, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: Don't hide NETFILTER_XT_MATCH_ADDRTYPE behind NETFILTER_ADVANCED, Pablo Neira Ayuso
    • [PATCH 1/5] ipvs: use 64-bit rates in stats, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter updates for net-next, David Miller
• [PATCH 0/4] netfilter updates for 3.6-rc5, pablo
  • [PATCH 1/4] netfilter: take care of timewait sockets, pablo
  • [PATCH 4/4] netfilter: log: Fix log-level processing, pablo
  • [PATCH 3/4] netfilter: Validate the sequence number of dataless ACK packets as well, pablo
  • [PATCH 2/4] netfilter: Mark SYN/ACK packets as invalid from original direction, pablo
  • Re: [PATCH 0/4] netfilter updates for 3.6-rc5, David Miller
• xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Fengguang Wu
  • Re: xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Florian Westphal
    • Re: xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Pablo Neira Ayuso
  • Re: xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Eric Dumazet
    • Re: xt_nat_init: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0, Fengguang Wu
• AW: ulogd syslogemu output garbage after kernel update (32 to 64bit), Fiedler Roman
  • Re: AW: ulogd syslogemu output garbage after kernel update (32 to 64bit), Jozsef Kadlecsik
  • Re: ulogd syslogemu output garbage after kernel update (32 to 64bit), Pablo Neira Ayuso
• Re[2]: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Hans Schillstrom
  • Re[2]: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Julian Anastasov
• [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • [PATCH 1/4] ipv6: add a new namespace for nf_conntrack_reasm, Cong Wang
  • [PATCH 3/4] ipv6: make ip6_frag_nqueues() and ip6_frag_mem() static inline, Cong Wang
  • [PATCH 4/4] ipv6: unify fragment thresh handling code, Cong Wang
  • [PATCH 2/4] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
  • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
  • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
    • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
      • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
        • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
          • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
            • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, David Miller
              • Re: [PATCH net-next 0/4] ipv6: fix the reassembly expire code in nf_conntrack, Cong Wang
• [PATCH] netfilter/iptables: Fix log-level processing, Joe Perches
  • Re: [PATCH] netfilter/iptables: Fix log-level processing, Eric Dumazet
    • [PATCH V2] netfilter/iptables: Fix log-level processing, Joe Perches
    • Re: [PATCH V2] netfilter/iptables: Fix log-level processing, Pablo Neira Ayuso
• help with conntrack, Miguel Alejandro González
  • Re: help with conntrack, Andrew Beverley
    • Re: help with conntrack, Pablo Neira Ayuso
• netfilter.org is down, Pablo Neira Ayuso
• [PATCH] netfilter: ctnetlink: fix module auto-load in ctnetlink_create_conntrack, pablo
• [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH V3 1/8] ipvs: Trivial changes, use compressed IPv6 address in output, Jesper Dangaard Brouer
  • [PATCH V3 3/8] ipvs: Use config macro IS_ENABLED(), Jesper Dangaard Brouer
  • [PATCH V3 2/8] ipvs: IPv6 extend ICMPv6 handling for future types, Jesper Dangaard Brouer
  • [PATCH V3 4/8] ipvs: Fix bug in IPv6 NAT mangling of ports inside ICMPv6 packets, Jesper Dangaard Brouer
  • [PATCH V3 5/8] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
  • [PATCH V3 6/8] ipvs: Complete IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH V3 7/8] ipvs: API change to avoid rescan of IPv6 exthdr, Jesper Dangaard Brouer
  • [PATCH V3 8/8] ipvs: SIP fragment handling, Jesper Dangaard Brouer
  • Re: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Julian Anastasov
    • Re: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
      • Re: [PATCH V3 0/8] ipvs: IPv6 fragment handling for IPVS, Julian Anastasov
• Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
  • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Florian Westphal
    • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
      • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
        • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
          • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
            • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
              • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
            • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
              • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
                • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Patrick McHardy
                  • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
                    • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
                      • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
                        • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Pablo Neira Ayuso
    • Re: Oops with latest (netfilter) nf-next tree, when unloading iptable_nat, Jesper Dangaard Brouer
• [PATCHv2] conntrackd: make conntrackd namespace aware, Ansis Atteka
  • Re: [PATCHv2] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
    • Re: [PATCHv2] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
• [PATCH] netfilter: xt_LOG: avoid using old-style "<.>" printk prefix, Romain Francoise
  • Re: [PATCH] netfilter: xt_LOG: avoid using old-style "<.>" printk prefix, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: xt_LOG: avoid using old-style "<.>" printk prefix, Romain Francoise
      • Re: [PATCH] netfilter: xt_LOG: avoid using old-style "<.>" printk prefix, Pablo Neira Ayuso
• [PATCH] build: make clean removes .*.d and *.d, pablo
  • [PATCH] build: have `make clean` remove dep files too, Jan Engelhardt
    • Re: [PATCH] build: have `make clean` remove dep files too, Pablo Neira Ayuso
• ulogd syslogemu output garbage after kernel update (32 to 64bit), Fiedler Roman
• [PATCH 1/2] iptables: fix wrong error messages, pablo
  • [PATCH 2/2] extensions: libxt_addrtype: fix type in help message, pablo
    • Re: [PATCH 2/2] extensions: libxt_addrtype: fix type in help message, Jan Engelhardt
      • Re: [PATCH 2/2] extensions: libxt_addrtype: fix type in help message, Pablo Neira Ayuso
• [PATCH] ipvs: use list_del_init instead of list_del/INIT_LIST_HEAD, Wei Yongjun
  • Re: [PATCH] ipvs: use list_del_init instead of list_del/INIT_LIST_HEAD, Simon Horman
    • Re: [PATCH] ipvs: use list_del_init instead of list_del/INIT_LIST_HEAD, Pablo Neira Ayuso
• [PATCH] netfilter: fix out-of-bounds access in nat addr selection, Florian Westphal
  • Re: [PATCH] netfilter: fix out-of-bounds access in nat addr selection, Pablo Neira Ayuso
• [PATCH] netfilter: fix crash during boot if NAT has been compiled built-in, pablo
• NULL pointer dereference in xt_register_target(), Cong Wang
  • Re: NULL pointer dereference in xt_register_target(), Eric Dumazet
    • Re: NULL pointer dereference in xt_register_target(), Eric Dumazet
      • [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Eric Dumazet
        • Re: [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Pablo Neira Ayuso
          • Re: [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Eric Dumazet
        • Re: [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Patrick McHardy
          • Re: [PATCH net-next] netfilter: x_tables: xt_init() should run earlier, Eric Dumazet
    • Re: NULL pointer dereference in xt_register_target(), Pablo Neira Ayuso
      • Re: NULL pointer dereference in xt_register_target(), Cong Wang
        • Re: NULL pointer dereference in xt_register_target(), Pablo Neira Ayuso
• [PATCH] netfilter: take care of timewait sockets, Eric Dumazet
  • Re: [PATCH] netfilter: take care of timewait sockets, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: take care of timewait sockets, Eric Dumazet
      • Re: [PATCH] netfilter: take care of timewait sockets, Pablo Neira Ayuso
• [PATCH 00/25] Netfilter updates for net-next, pablo
  • [PATCH 01/25] ipvs: IPv6 MTU checking cleanup and bugfix, pablo
  • [PATCH 03/25] netfilter: nf_conntrack_ipv6: fix tracking of ICMPv6 error messages containing fragments, pablo
  • [PATCH 02/25] netfilter: nf_conntrack_ipv6: improve fragmentation handling, pablo
  • [PATCH 05/25] netfilter: nf_nat: add protoff argument to packet mangling functions, pablo
  • [PATCH 14/25] netfilter: nf_nat: support IPv6 in amanda NAT helper, pablo
  • [PATCH 17/25] netfilter: nf_nat: support IPv6 in TFTP NAT helper, pablo
  • [PATCH 18/25] netfilter: ip6tables: add stateless IPv6-to-IPv6 Network Prefix Translation target, pablo
  • [PATCH 25/25] netfilter: properly annotate ipv4_netfilter_{init,fini}(), pablo
  • [PATCH 23/25] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_iterate(), pablo
  • [PATCH 24/25] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_queue(), pablo
  • [PATCH 22/25] netfilter: remove xt_NOTRACK, pablo
  • [PATCH 20/25] netfilter: xt_CT: refactorize xt_ct_tg_check, pablo
  • [PATCH 21/25] netfilter: nf_conntrack: add nf_ct_timeout_lookup, pablo
  • [PATCH 19/25] netfilter: xt_socket: fix compilation warnings with gcc 4.7, pablo
  • [PATCH 15/25] netfilter: nf_nat: support IPv6 in SIP NAT helper, pablo
    • Re: [PATCH 15/25] netfilter: nf_nat: support IPv6 in SIP NAT helper, Eric W. Biederman
  • [PATCH 16/25] netfilter: nf_nat: support IPv6 in IRC NAT helper, pablo
  • [PATCH 06/25] netfilter: add protocol independent NAT core, pablo
  • [PATCH 13/25] netfilter: nf_nat: support IPv6 in FTP NAT helper, pablo
  • [PATCH 12/25] netfilter: ip6tables: add NETMAP target, pablo
  • [PATCH 09/25] netfilter: ipv6: add IPv6 NAT support, pablo
  • [PATCH 10/25] netfilter: ip6tables: add MASQUERADE target, pablo
  • [PATCH 11/25] netfilter: ip6tables: add REDIRECT target, pablo
  • [PATCH 08/25] net: core: add function for incremental IPv6 pseudo header checksum updates, pablo
  • [PATCH 07/25] netfilter: ipv6: expand skb head in ip6_route_me_harder after oif change, pablo
  • [PATCH 04/25] netfilter: nf_conntrack: restrict NAT helper invocation to IPv4, pablo
  • Re: [PATCH 00/25] Netfilter updates for net-next, David Miller
• URIs of Netfilter Git repos, Oliver
  • Re: URIs of Netfilter Git repos, Jan Engelhardt
• [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
  • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Eric Leblond
    • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
  • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Pablo Neira Ayuso
    • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
      • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Eric Leblond
        • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
          • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Eric Leblond
            • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
      • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Pablo Neira Ayuso
        • Re: [PATCH] pgsql: add SSL connection implementation to PGSQL plugin, Mr Dash Four
• [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
  • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
    • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
      • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
  • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
    • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
      • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
        • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
          • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
            • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
              • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
                • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
                • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
                  • Re: [PATCH] conntrackd: make conntrackd namespace aware, Pablo Neira Ayuso
                    • Re: [PATCH] conntrackd: make conntrackd namespace aware, Ansis Atteka
• [PATCH 0/2] TCP conntrack patches, Jozsef Kadlecsik
  • [PATCH 2/2] netfilter: Validate the sequence number of dataless ACK packets as well, Jozsef Kadlecsik
  • [PATCH 1/2] netfilter: Mark SYN/ACK packets as invalid from original direction, Jozsef Kadlecsik
  • Re: [PATCH 0/2] TCP conntrack patches, Pablo Neira Ayuso
• [PATCH 0/6] netfilter updates for 3.6-rc, pablo
  • [PATCH 3/6] netfilter: ctnetlink: fix error return code in init path, pablo
  • [PATCH 2/6] ipvs: fix error return code, pablo
  • [PATCH 4/6] netfilter: nfnetlink_log: fix error return code in init path, pablo
  • [PATCH 6/6] netfilter: nf_conntrack: fix racy timer handling with reliable events, pablo
  • [PATCH 5/6] netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP expectation, pablo
  • [PATCH 1/6] netfilter: nfnetlink_log: fix NLA_PUT macro removal bug, pablo
  • Re: [PATCH 0/6] netfilter updates for 3.6-rc, David Miller
• [PATCH] netfilter: xt_socket: fix compilation warnings with gcc 4.7, pablo
• [PATCH] netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP expectation, pablo
• [PATCH 7/7] net/netfilter/nf_conntrack_netlink.c: fix error return code, Julia Lawall
  • Re: [PATCH 7/7] net/netfilter/nf_conntrack_netlink.c: fix error return code, Pablo Neira Ayuso
• [PATCH 6/7] net/netfilter/nfnetlink_log.c: fix error return code, Julia Lawall
  • Re: [PATCH 6/7] net/netfilter/nfnetlink_log.c: fix error return code, Pablo Neira Ayuso
• [PATCH 1/7] ipvs: fix error return code, Julia Lawall
  • Re: [PATCH 1/7] ipvs: fix error return code, Simon Horman
  • Re: [PATCH 1/7] ipvs: fix error return code, Pablo Neira Ayuso
• Re[2]: Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Hans Schillstrom
  • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
    • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
      • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
  • <Possible follow-ups>
  • Re[2]: Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Hans Schillstrom
• [PATCH] netfilter: remove pointless conditional before kfree_skb(), Wei Yongjun
• [PATCH] netfilter: nfnetlink_queue: remove pointless conditional before kfree_skb(), Wei Yongjun
  • Re: [PATCH] netfilter: nfnetlink_queue: remove pointless conditional before kfree_skb(), Pablo Neira Ayuso
• [PATCH 1/2] netfilter: xt_CT: refactorize xt_ct_tg_check, pablo
  • [PATCH 2/2] netfilter: nf_conntrack: add nf_ct_timeout_lookup, pablo
• Re[2]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Hans Schillstrom
  • Re[2]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
  • <Possible follow-ups>
  • Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Hans Schillstrom
    • Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
      • Re: Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
        • Re: Re[3]: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
          • [RFC PATCH 0/2] RFC: Caching IPv6 exthdr in skb->cb[], Jesper Dangaard Brouer
            • [RFC PATCH 1/2] net: Cache IPv6 extension header "skip" parsing, Jesper Dangaard Brouer
            • [RFC PATCH 2/2] netfilter: More users of ipv6_find_hdr_cb(), Jesper Dangaard Brouer
            • Re: [RFC PATCH 0/2] RFC: Caching IPv6 exthdr in skb->cb[], Julian Anastasov
• [PATCH] [RFC] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
• [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
  • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
    • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
      • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
        • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
          • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
            • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
  • Message not available
    • Message not available
      • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
        • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
          • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
            • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
            • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
              • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
                • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
                  • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Oliver
                    • Re: [PATCH] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack, Pablo Neira Ayuso
• [Patch net-next] netfilter: remove xt_NOTRACK, Cong Wang
  • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Maciej Żenczykowski
    • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Jan Engelhardt
      • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Cong Wang
        • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Oliver
          • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Maciej Żenczykowski
        • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
          • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
            • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Maciej Żenczykowski
              • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Jan Engelhardt
                • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Maciej Żenczykowski
                  • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
                    • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Jan Engelhardt
                      • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
                • Re: [Patch net-next] netfilter: remove xt_NOTRACK, Pablo Neira Ayuso
• [PATCH] tests: conntrackd: fix compile errors and warnings, Ansis Atteka
  • Re: [PATCH] tests: conntrackd: fix compile errors and warnings, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_iterate(), Michael Wang
  • Re: [PATCH 1/2] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_iterate(), Pablo Neira Ayuso
• [PATCH 2/2] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_queue(), Michael Wang
  • Re: [PATCH 2/2] netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_queue(), Pablo Neira Ayuso
• [PATCH 0/2] netfilter: code refine for using new interface 'list_for_each_entry_continue_rcu', Michael Wang
• [PATCH 00/10] netfilter updates for net-next (batch 1), pablo
  • [PATCH 09/10] netfilter: replace list_for_each_continue_rcu with new interface, pablo
  • [PATCH 08/10] netfilter: nf_conntrack: remove unnecessary RTNL locking, pablo
  • [PATCH 04/10] ipvs: implement passive PMTUD for IPIP packets, pablo
  • [PATCH 01/10] ipvs: ip_vs_ftp depends on nf_conntrack_ftp helper, pablo
  • [PATCH 10/10] netfilter: remove unnecessary goto statement for error recovery, pablo
  • [PATCH 05/10] ipvs: add pmtu_disc option to disable IP DF for TUN packets, pablo
  • [PATCH 03/10] ipvs: fixed sparse warning, pablo
  • [PATCH 02/10] ipvs: generalize app registration in netns, pablo
  • [PATCH 06/10] netfilter: PTR_RET can be used, pablo
  • [PATCH 07/10] netfilter: sparse endian fixes, pablo
  • Re: [PATCH 00/10] netfilter updates for net-next (batch 1), David Miller
• [PATCH] ipvs: Fix GSO support for IPVS DR IPv6 mode, Jesper Dangaard Brouer
• Re[2]: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Hans Schillstrom
  • Re[2]: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Julian Anastasov
    • Re[2]: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Julian Anastasov
      • Re: Re[2]: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Jesper Dangaard Brouer
• [PATCH] libxt_tcp: print space before, not after "flags:", Andreas Schwab
  • Re: [PATCH] libxt_tcp: print space before, not after "flags:", Pablo Neira Ayuso
• [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH 1/3] ipvs: Trivial changes, use compressed IPv6 address in output, Jesper Dangaard Brouer
  • [PATCH 3/3] ipvs: Complete IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
  • [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
    • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Julian Anastasov
      • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
        • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Julian Anastasov
    • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Patrick McHardy
      • Re: [PATCH 2/3] ipvs: Fix faulty IPv6 extension header handling in IPVS, Jesper Dangaard Brouer
  • Re: [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Simon Horman
    • Re: [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Jesper Dangaard Brouer
      • Re: [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Simon Horman
  • <Possible follow-ups>
  • Re[2]: [PATCH 0/3] ipvs: IPv6 fragment handling for IPVS, Hans Schillstrom
• [PATCH 00/11] netlink: memory mapped I/O, Patrick McHardy
  • [PATCH 01/11] netlink: add symbolic value for congested state, Patrick McHardy
  • [PATCH 04/11] netlink: add netlink_skb_set_owner_r(), Patrick McHardy
  • [PATCH 03/11] netlink: don't orphan skb in netlink_trim(), Patrick McHardy
  • [PATCH 05/11] netlink: mmaped netlink: ring setup, Patrick McHardy
  • [PATCH 10/11] netlink: add flow control for memory mapped I/O, Patrick McHardy
  • [PATCH 11/11] netlink: add documentation for memory mapped I/O, Patrick McHardy
    • Re: [PATCH 11/11] netlink: add documentation for memory mapped I/O, Jan Engelhardt
      • Re: [PATCH 11/11] netlink: add documentation for memory mapped I/O, Patrick McHardy
  • [PATCH 08/11] netlink: implement memory mapped recvmsg(), Patrick McHardy
  • [PATCH 07/11] netlink: implement memory mapped sendmsg(), Patrick McHardy
  • [PATCH 06/11] netlink: add mmap'ed netlink helper functions, Patrick McHardy
  • [PATCH 09/11] nfnetlink: add support for memory mapped netlink, Patrick McHardy
  • [PATCH 02/11] net: add function to allocate skbuff head without data area, Patrick McHardy
    • Re: [PATCH 02/11] net: add function to allocate skbuff head without data area, Eric Dumazet
      • Re: [PATCH 02/11] net: add function to allocate skbuff head without data area, Patrick McHardy
  • Re: [PATCH 00/11] netlink: memory mapped I/O, David Miller
• [PATCH 00/18] netfilter: IPv6 NAT, Patrick McHardy
  • [PATCH 01/18] ipv4: fix path MTU discovery with connection tracking, Patrick McHardy
    • Re: [PATCH 01/18] ipv4: fix path MTU discovery with connection tracking, Eric Dumazet
    • Re: [PATCH 01/18] ipv4: fix path MTU discovery with connection tracking, Jan Engelhardt
      • Re: [PATCH 01/18] ipv4: fix path MTU discovery with connection tracking, Patrick McHardy
  • [PATCH 07/18] netfilter: ipv6: expand skb head in ip6_route_me_harder after oif change, Patrick McHardy
  • [PATCH 05/18] netfilter: nf_nat: add protoff argument to packet mangling functions, Patrick McHardy
    • Re: [PATCH 05/18] netfilter: nf_nat: add protoff argument to packet mangling functions, Jan Engelhardt
      • Re: [PATCH 05/18] netfilter: nf_nat: add protoff argument to packet mangling functions, Patrick McHardy
  • [PATCH 02/18] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
  • [PATCH 04/18] netfilter: nf_conntrack: restrict NAT helper invocation to IPv4, Patrick McHardy
  • [PATCH 08/18] net: core: add function for incremental IPv6 pseudo header checksum updates, Patrick McHardy
    • Re: [PATCH 08/18] net: core: add function for incremental IPv6 pseudo header checksum updates, David Miller
  • [PATCH 09/18] netfilter: ipv6: add IPv6 NAT support, Patrick McHardy
    • Re: [PATCH 09/18] netfilter: ipv6: add IPv6 NAT support, Jan Engelhardt
      • Re: [PATCH 09/18] netfilter: ipv6: add IPv6 NAT support, Patrick McHardy
  • [PATCH 06/18] netfilter: add protocol independant NAT core, Patrick McHardy
    • Re: [PATCH 06/18] netfilter: add protocol independant NAT core, Jan Engelhardt
      • Re: [PATCH 06/18] netfilter: add protocol independant NAT core, Patrick McHardy
        • Re: [PATCH 06/18] netfilter: add protocol independant NAT core, Jan Engelhardt
  • [PATCH 03/18] netfilter: nf_conntrack_ipv6: fix tracking of ICMPv6 error messages containing fragments, Patrick McHardy
  • [PATCH 13/18] netfilter: nf_nat: support IPv6 in FTP NAT helper, Patrick McHardy
  • [PATCH 12/18] netfilter: ip6tables: add NETMAP target, Patrick McHardy
  • [PATCH 18/18] netfilter: ip6tables: add stateless IPv6-to-IPv6 Network Prefix Translation target, Patrick McHardy
  • [PATCH 17/18] netfilter: nf_nat: support IPv6 in TFTP NAT helper, Patrick McHardy
  • [PATCH 11/18] netfilter: ip6tables: add REDIRECT target, Patrick McHardy
  • [PATCH 15/18] netfilter: nf_nat: support IPv6 in SIP NAT helper, Patrick McHardy
  • [PATCH 14/18] netfilter: nf_nat: support IPv6 in amanda NAT helper, Patrick McHardy
  • [PATCH 16/18] netfilter: nf_nat: support IPv6 in IRC NAT helper, Patrick McHardy
  • [PATCH 10/18] netfilter: ip6tables: add MASQUERADE target, Patrick McHardy
  • Re: [PATCH 00/18] netfilter: IPv6 NAT, David Miller
    • Re: [PATCH 00/18] netfilter: IPv6 NAT, Patrick McHardy
      • Re: [PATCH 00/18] netfilter: IPv6 NAT, David Miller
        • Re: [PATCH 00/18] netfilter: IPv6 NAT, Patrick McHardy
        • Re: [PATCH 00/18] netfilter: IPv6 NAT, Pablo Neira Ayuso
  • Re: [PATCH 00/18] netfilter: IPv6 NAT, Pablo Neira Ayuso
• [PATCH net-next] ipv4/netfilter: remove unnecessary goto statement for error recovery, Jean Sacren
  • Re: [PATCH net-next] ipv4/netfilter: remove unnecessary goto statement for error recovery, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net-next] ipv4/netfilter: remove unnecessary goto statement for error recovery, Patrick McHardy
• [PATCH 0/3]: netfilter fixes, Patrick McHardy
  • [PATCH 1/3] netfilter: nfnetlink_log: fix NLA_PUT macro removal bug, Patrick McHardy
    • Re: [PATCH 1/3] netfilter: nfnetlink_log: fix NLA_PUT macro removal bug, Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: nf_conntrack: remove unnecessary RTNL locking, Patrick McHardy
    • Re: [PATCH 3/3] netfilter: nf_conntrack: remove unnecessary RTNL locking, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: sparse endian fixes, Patrick McHardy
    • Re: [PATCH 2/3] netfilter: sparse endian fixes, Pablo Neira Ayuso
• netfilter code question, Vasilis Bakellas
  • Re: netfilter code question, Jan Engelhardt
• [PATCH 0/5] netfilter fixes for 3.6-rc, pablo
  • [PATCH 1/5] netfilter: nf_ct_sip: fix helper name, pablo
  • [PATCH 2/5] netfilter: nf_ct_sip: fix IPv6 address parsing, pablo
  • [PATCH 3/5] netfilter: nf_nat_sip: fix via header translation with multiple parameters, pablo
  • [PATCH 5/5] netfilter: nf_ct_expect: fix possible access to uninitialized timer, pablo
  • [PATCH 4/5] netfilter: ctnetlink: fix missing locking while changing conntrack from nfqueue, pablo
  • Re: [PATCH 0/5] netfilter fixes for 3.6-rc, David Miller
• nfqueue max copy_range broken, how to fix/mitigate?, Florian Westphal
  • Re: nfqueue max copy_range broken, how to fix/mitigate?, Florian Westphal
• [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
  • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Michal Kubeček
    • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
      • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Michal Kubecek
        • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
        • Re: [RFC Patch net-next] ipv6: unify conntrack reassembly expire code with standard one, Cong Wang
• [PATCH 0/3] raid, kmemleak, netfilter: replace list_for_each_continue_rcu with new interface, Michael Wang
• [PATCH 3/3] netfilter: replace list_for_each_continue_rcu with new interface, Michael Wang
  • Re: [PATCH 3/3] netfilter: replace list_for_each_continue_rcu with new interface, Paul E. McKenney
  • Re: [PATCH 3/3] netfilter: replace list_for_each_continue_rcu with new interface, Pablo Neira Ayuso
• routerwired.com, John
• [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, pablo
  • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Patrick McHardy
    • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Patrick McHardy
        • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_ct_expect: fix possible access to uninitialized timer, Patrick McHardy
• [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Florian Weimer
  • Re: [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Jan Engelhardt
  • Re: [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Pablo Neira Ayuso
    • Re: [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Florian Weimer
      • Re: [PATCH] mnl_attr_get_str: document that the result is not NUL-terminated, Pablo Neira Ayuso
• Xtables-addons: man/SYSRQ sample script, Jan Krcmar
  • Re: Xtables-addons: man/SYSRQ sample script, Jan Engelhardt
• [PATCH] [NETFILTER] bridge: rcu_deref outside read-lock section, Denis Efremov
  • Re: [PATCH] [NETFILTER] bridge: rcu_deref outside read-lock section, Stephen Hemminger
    • Re: [PATCH] [NETFILTER] bridge: rcu_deref outside read-lock section, Denis
  • [PATCH v2] bridge: rcu_deref outside read-lock section, Denis Efremov
    • [PATCH] bridge: fix rcu dereference outside of rcu_read_lock, Stephen Hemminger
      • Re: [PATCH] bridge: fix rcu dereference outside of rcu_read_lock, David Miller
• nat not working as expected, Stephen Clark
  • Re: nat not working as expected, Stephen Clark
• ipset : ip range insertion to hash:net list does not work, İbrahim Ercan
  • Re: ipset : ip range insertion to hash:net list does not work, Jozsef Kadlecsik
    • Re: ipset : ip range insertion to hash:net list does not work, Jozsef Kadlecsik
      • Re: ipset : ip range insertion to hash:net list does not work, İbrahim Ercan
        • Re: ipset : ip range insertion to hash:net list does not work, Jozsef Kadlecsik
• [PATCH 0/2] fixes for conntrack expectation, pablo
  • [PATCH 1/2] netfilter: nf_ct_expect: fix re-insertion in expect list if timer refresh fails, pablo
    • Re: [PATCH 1/2] netfilter: nf_ct_expect: fix re-insertion in expect list if timer refresh fails, Patrick McHardy
      • Re: [PATCH 1/2] netfilter: nf_ct_expect: fix re-insertion in expect list if timer refresh fails, Pablo Neira Ayuso
        • Re: [PATCH 1/2] netfilter: nf_ct_expect: fix re-insertion in expect list if timer refresh fails, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: nf_ct_expect: fix possible invalid dereference while event reporting, pablo
    • Re: [PATCH 2/2] netfilter: nf_ct_expect: fix possible invalid dereference while event reporting, Patrick McHardy
• [PATCH 0/7] extensions: add IPv6 NAT support, kaber
  • [PATCH 7/7] extensions: add NPT extension, kaber
  • [PATCH 5/7] extensions: add IPv6 REDIRECT extension, kaber
  • [PATCH 6/7] extensions: add IPv6 NETMAP extension, kaber
  • [PATCH 1/7] extensions: convert NAT target to use nf_nat.h, kaber
  • [PATCH 2/7] extensions: add IPv6 MASQUERADE extension, kaber
    • Re: [PATCH 2/7] extensions: add IPv6 MASQUERADE extension, Jan Engelhardt
      • Re: [PATCH 2/7] extensions: add IPv6 MASQUERADE extension, Patrick McHardy
        • Re: [PATCH 2/7] extensions: add IPv6 MASQUERADE extension, Jan Engelhardt
          • Re: [PATCH 2/7] extensions: add IPv6 MASQUERADE extension, Patrick McHardy
  • [PATCH 3/7] extensions: add IPv6 SNAT extension, kaber
    • Re: [PATCH 3/7] extensions: add IPv6 SNAT extension, Jan Engelhardt
      • Re: [PATCH 3/7] extensions: add IPv6 SNAT extension, Patrick McHardy
  • [PATCH 4/7] extensions: add IPv6 DNAT target, kaber
• [PATCH 00/19] netfilter: IPv6 NAT, kaber
  • [PATCH 03/19] netfilter: nf_nat_sip: fix via header translation with multiple parameters, kaber
    • Re: [PATCH 03/19] netfilter: nf_nat_sip: fix via header translation with multiple parameters, Pablo Neira Ayuso
      • Re: [PATCH 03/19] netfilter: nf_nat_sip: fix via header translation with multiple parameters, Patrick McHardy
  • [PATCH 08/19] netfilter: nf_nat: add protoff argument to packet mangling functions, kaber
  • [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, kaber
    • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Jesper Dangaard Brouer
      • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
        • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Jesper Dangaard Brouer
          • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
            • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Jesper Dangaard Brouer
              • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
            • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Jesper Dangaard Brouer
              • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
                • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Jesper Dangaard Brouer
                  • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
                    • [PATCH 0/2] net: ipvs and netfilter IPv6 defrag MTU handling, Jesper Dangaard Brouer
                      • [PATCH 1/2] ipvs: IPv6 MTU checking cleanup and bugfix, Jesper Dangaard Brouer
                      • [PATCH 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Jesper Dangaard Brouer
                        • Re: [PATCH 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Julian Anastasov
                          • Re: [PATCH 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Patrick McHardy
                            • Re: [PATCH 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Simon Horman
                            • [PATCH V2 0/2] net: ipvs and netfilter IPv6 defrag MTU handling, Jesper Dangaard Brouer
                              • [PATCH V2 1/2] ipvs: IPv6 MTU checking cleanup and bugfix, Jesper Dangaard Brouer
                                • Re: [PATCH V2 1/2] ipvs: IPv6 MTU checking cleanup and bugfix, Patrick McHardy
                              • [PATCH V2 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Jesper Dangaard Brouer
                                • Re: [PATCH V2 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Eric Dumazet
                                  • Re: [PATCH V2 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Jesper Dangaard Brouer
                                    • Re: [PATCH V2 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Eric Dumazet
                                      • Re: [PATCH V2 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Jesper Dangaard Brouer
                                • Re: [PATCH V2 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Patrick McHardy
                          • Re: [PATCH 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Jesper Dangaard Brouer
                            • Re: [PATCH 2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes, Julian Anastasov
    • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Pablo Neira Ayuso
      • Re: [PATCH 05/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
  • [PATCH 02/19] netfilter: nf_ct_sip: fix IPv6 address parsing, kaber
    • Re: [PATCH 02/19] netfilter: nf_ct_sip: fix IPv6 address parsing, Pablo Neira Ayuso
  • [PATCH 09/19] netfilter: add protocol independant NAT core, kaber
  • [PATCH 12/19] netfilter: ipv6: add IPv6 NAT support, kaber
  • [PATCH 04/19] ipv4: fix path MTU discovery with connection tracking, kaber
  • [PATCH 01/19] netfilter: nf_ct_sip: fix helper name, kaber
    • Re: [PATCH 01/19] netfilter: nf_ct_sip: fix helper name, Pablo Neira Ayuso
  • [PATCH 14/19] netfilter: ip6tables: add REDIRECT target, kaber
  • [PATCH 07/19] netfilter: nf_conntrack: restrict NAT helper invocation to IPv4, kaber
  • [PATCH 06/19] netfilter: nf_conntrack_ipv6: fix tracking of ICMPv6 error messages containing fragments, kaber
  • [PATCH 13/19] netfilter: ip6tables: add MASQUERADE target, kaber
    • Re: [PATCH 13/19] netfilter: ip6tables: add MASQUERADE target, Pablo Neira Ayuso
      • Re: [PATCH 13/19] netfilter: ip6tables: add MASQUERADE target, Patrick McHardy
  • [PATCH 11/19] net: core: add function for incremental IPv6 pseudo header checksum updates, kaber
  • [PATCH 10/19] netfilter: ipv6: expand skb head in ip6_route_me_harder after oif change, kaber
  • [PATCH 17/19] netfilter: nf_nat: support IPv6 in amanda NAT helper, kaber
  • [PATCH 16/19] netfilter: nf_nat: support IPv6 in FTP NAT helper, kaber
  • [PATCH 15/19] netfilter: ip6tables: add NETMAP target, kaber
  • [PATCH 18/19] netfilter: nf_nat: support IPv6 in SIP NAT helper, kaber
  • [PATCH 19/19] netfilter: ip6tables: add stateless IPv6-to-IPv6 Network Prefix Translation target, kaber
    • Re: [PATCH 19/19] netfilter: ip6tables: add stateless IPv6-to-IPv6 Network Prefix Translation target, Jan Engelhardt
      • Re: [PATCH 19/19] netfilter: ip6tables: add stateless IPv6-to-IPv6 Network Prefix Translation target, Patrick McHardy
  • Re: [PATCH 00/19] netfilter: IPv6 NAT, Eric W. Biederman
    • Re: [PATCH 00/19] netfilter: IPv6 NAT, Patrick McHardy
  • Re: [PATCH 00/19] netfilter: IPv6 NAT, Pablo Neira Ayuso
    • Re: [PATCH 00/19] netfilter: IPv6 NAT, Patrick McHardy
  • Re: [PATCH 00/19] netfilter: IPv6 NAT, Pablo Neira Ayuso
    • Re: [PATCH 00/19] netfilter: IPv6 NAT, Patrick McHardy
  • Re: [PATCH 00/19] netfilter: IPv6 NAT, Andre Tomt
    • Re: [PATCH 00/19] netfilter: IPv6 NAT, Andre Tomt
      • Re: [PATCH 00/19] netfilter: IPv6 NAT, Patrick McHardy
    • Re: [PATCH 00/19] netfilter: IPv6 NAT, Florian Weimer
  • <Possible follow-ups>
  • [PATCH 00/19] netfilter: IPv6 NAT, Patrick McHardy
    • [PATCH 02/19] Cleaning up the IPv6 MTU checking in the IPVS xmit code, by using a common helper function __mtu_check_toobig_v6()., Patrick McHardy
      • Re: [PATCH 02/19] Cleaning up the IPv6 MTU checking in the IPVS xmit code, by using a common helper function __mtu_check_toobig_v6()., Jesper Dangaard Brouer
        • Re: [PATCH 02/19] Cleaning up the IPv6 MTU checking in the IPVS xmit code, by using a common helper function __mtu_check_toobig_v6()., Patrick McHardy
          • Re: [PATCH 02/19] Cleaning up the IPv6 MTU checking in the IPVS xmit code, by using a common helper function __mtu_check_toobig_v6()., Pablo Neira Ayuso
    • [PATCH 05/19] netfilter: nf_conntrack: restrict NAT helper invocation to IPv4, Patrick McHardy
    • [PATCH 08/19] netfilter: ipv6: expand skb head in ip6_route_me_harder after oif change, Patrick McHardy
    • [PATCH 19/19] netfilter: ip6tables: add stateless IPv6-to-IPv6 Network Prefix Translation target, Patrick McHardy
    • [PATCH 09/19] net: core: add function for incremental IPv6 pseudo header checksum updates, Patrick McHardy
    • [PATCH 18/19] netfilter: nf_nat: support IPv6 in TFTP NAT helper, Patrick McHardy
    • [PATCH 06/19] netfilter: nf_nat: add protoff argument to packet mangling functions, Patrick McHardy
    • [PATCH 17/19] netfilter: nf_nat: support IPv6 in IRC NAT helper, Patrick McHardy
    • [PATCH 13/19] netfilter: ip6tables: add NETMAP target, Patrick McHardy
    • [PATCH 14/19] netfilter: nf_nat: support IPv6 in FTP NAT helper, Patrick McHardy
    • [PATCH 15/19] netfilter: nf_nat: support IPv6 in amanda NAT helper, Patrick McHardy
    • [PATCH 16/19] netfilter: nf_nat: support IPv6 in SIP NAT helper, Patrick McHardy
    • [PATCH 12/19] netfilter: ip6tables: add REDIRECT target, Patrick McHardy
    • [PATCH 07/19] netfilter: add protocol independent NAT core, Patrick McHardy
    • [PATCH 10/19] netfilter: ipv6: add IPv6 NAT support, Patrick McHardy
    • [PATCH 11/19] netfilter: ip6tables: add MASQUERADE target, Patrick McHardy
    • [PATCH 01/19] ipv4: fix path MTU discovery with connection tracking, Patrick McHardy
    • [PATCH 03/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
      • Re: [PATCH 03/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Jesper Dangaard Brouer
        • Re: [PATCH 03/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
          • Re: [PATCH 03/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Pablo Neira Ayuso
            • Re: [PATCH 03/19] netfilter: nf_conntrack_ipv6: improve fragmentation handling, Patrick McHardy
    • [PATCH 04/19] netfilter: nf_conntrack_ipv6: fix tracking of ICMPv6 error messages containing fragments, Patrick McHardy
• CRYPT target patch for newer kernel ?, Arif Hossain
  • Re: CRYPT target patch for newer kernel ?, Jan Engelhardt
    • Re: CRYPT target patch for newer kernel ?, Arif Hossain
      • Re: CRYPT target patch for newer kernel ?, Jan Engelhardt
        • Re: CRYPT target patch for newer kernel ?, Arif Hossain
          • Re: CRYPT target patch for newer kernel ?, Jan Engelhardt
            • Re: CRYPT target patch for newer kernel ?, Arif Hossain
              • Re: CRYPT target patch for newer kernel ?, Jan Engelhardt
• skb_* function to get pointer to udp payload, Arif Hossain
  • Re: skb_* function to get pointer to udp payload, Jan Engelhardt
• [iptables PATCH] libip6t_frag: match any frag id by default, Michal Kubecek
  • Re: [iptables PATCH] libip6t_frag: match any frag id by default, Jan Engelhardt
• Building xt_LOGMARK from xtables-addons fails, Arif Hossain
  • Re: Building xt_LOGMARK from xtables-addons fails, Arif Hossain
  • Re: Building xt_LOGMARK from xtables-addons fails, Jan Engelhardt
• [PATCH] conntrackd: don't resync expectations if such sync has been disabled, Vincent Bernat
  • Re: [PATCH] conntrackd: don't resync expectations if such sync has been disabled, Pablo Neira Ayuso
• [PATCH] fixed configure.ac. Now autogen.sh will work, Arif Hossain
  • Re: [PATCH] fixed configure.ac. Now autogen.sh will work, Jan Engelhardt
• Local port forwarding and IP_NF_NAT_LOCAL, Fergal Meath
  • Re: Local port forwarding and IP_NF_NAT_LOCAL, Jan Engelhardt
• [PATCH 0/4] [nftables] Various compilation error fixes, Tomasz Bursztyka
  • [PATCH 1/4] netlink: Use the right datatype for verdict, Tomasz Bursztyka
  • [PATCH 2/4] evaluate: Remove useless variable in expr_evaluate_bitwise(), Tomasz Bursztyka
  • [PATCH 3/4] erec: Handle returned value properly in erec_print, Tomasz Bursztyka
  • [PATCH 4/4] expression: Differentiate expr among anonymous structures in struct expr, Tomasz Bursztyka
  • Re: [PATCH 0/4] [nftables] Various compilation error fixes, Pablo Neira Ayuso
• [PATCH] TARPIT: fix memory leak when tarpit_generic() fails, Josh Hunt
  • Re: [PATCH] TARPIT: fix memory leak when tarpit_generic() fails, Jan Engelhardt
• [RFC ulogd patch 0/1] Implement conntrack event filter in NFCT input, Eric Leblond
  • [RFC ulogd PATCH] nfct: implement src and dst filter, Eric Leblond
    • Re: [RFC ulogd PATCH] nfct: implement src and dst filter, Pablo Neira Ayuso
  • Re: [RFC ulogd patch 0/1] Implement conntrack event filter in NFCT input, Pablo Neira Ayuso
    • Re: [RFC ulogd patch 0/1] Implement conntrack event filter in NFCT input, Eric Leblond
• [ulogd patch 0/5] nfacct and pgsql update, Eric Leblond
  • [PATCH 1/5] nfacct: add variable to not zero counter after read, Eric Leblond
    • Re: [PATCH 1/5] nfacct: add variable to not zero counter after read, Pablo Neira Ayuso
  • [PATCH 2/5] pgsql schema: add nfacct table, Eric Leblond
    • Re: [PATCH 2/5] pgsql schema: add nfacct table, Pablo Neira Ayuso
  • [PATCH 3/5] pgsql schema: fix timestamp default value, Eric Leblond
    • Re: [PATCH 3/5] pgsql schema: fix timestamp default value, Pablo Neira Ayuso
  • [PATCH 4/5] pgsql: only disable key if it starts with underscore, Eric Leblond
    • Re: [PATCH 4/5] pgsql: only disable key if it starts with underscore, Pablo Neira Ayuso
  • [PATCH 5/5] nfacct: add timestamp option, Eric Leblond
    • Re: [PATCH 5/5] nfacct: add timestamp option, Pablo Neira Ayuso
      • Re: [PATCH 5/5] nfacct: add timestamp option, Eric Leblond
        • Re: [PATCH 5/5] nfacct: add timestamp option, Pablo Neira Ayuso
          • Re: [PATCH 5/5] nfacct: add timestamp option, Pablo Neira Ayuso
      • Re: [PATCH 5/5] nfacct: add timestamp option, Mr Dash Four
        • Re: [PATCH 5/5] nfacct: add timestamp option, Mr Dash Four
• skb_warn_bad_offload with kernel 3.5 (maybe gso/bridge related ?), Yann Dupont
  • Re: skb_warn_bad_offload with kernel 3.5 (maybe gso/bridge related ?), Yann Dupont
  • Re: skb_warn_bad_offload with kernel 3.5 (maybe gso/bridge related ?), Yann Dupont
• ulogd - maximum polling time interval - without risk of losing data, Gomathivinayagam Muthuvinayagam
• ulogd - long living connections, Gomathivinayagam Muthuvinayagam
  • Re: ulogd - long living connections, Pablo Neira Ayuso
    • Re: ulogd - long living connections, Gomathivinayagam Muthuvinayagam
      • Re: ulogd - long living connections, Pablo Neira Ayuso
• ulogd - NACCT data - only download data, Gomathivinayagam Muthuvinayagam
  • Re: ulogd - NACCT data - only download data, Pablo Neira Ayuso
• [ANNOUNCE] iptables 1.4.15 release, Pablo Neira Ayuso
  • Message not available
    • Re: [ANNOUNCE] iptables 1.4.15 release, Pablo Neira Ayuso
      • Re: [ANNOUNCE] iptables 1.4.15 release, Jan Engelhardt
• [ANNOUNCE] conntrack-tools 1.2.2 release, Pablo Neira Ayuso
• replace nf_nat_seqofs_lock with spin_lock of nf_conn, rajesh
• ulogd - polling handler - code clarification, Gomathivinayagam Muthuvinayagam
  • Re: ulogd - polling handler - code clarification, Pablo Neira Ayuso
• Building iptables from source with kernel source, Arif Hossain
  • Re: Building iptables from source with kernel source, Jan Engelhardt
    • Re: Building iptables from source with kernel source, Arif Hossain
      • Re: Building iptables from source with kernel source, Jan Engelhardt
• [PATCH] netfilter: PTR_RET can be used, Fengguang Wu
  • Re: [PATCH] netfilter: PTR_RET can be used, walter harms
    • Re: [PATCH] netfilter: PTR_RET can be used, Fengguang Wu
      • Re: [PATCH] netfilter: PTR_RET can be used, Pablo Neira Ayuso
• iptables: Mostly Parser Fixes, Jan Engelhardt
  • [PATCH 2/7] doc: grammatical updates to libxt_SET, Jan Engelhardt
  • [PATCH 3/7] libxt_u32: do bounds checking for @'s operands, Jan Engelhardt
  • [PATCH 1/7] iptables-restore: warn about -t in rule lines, Jan Engelhardt
    • Re: [PATCH 1/7] iptables-restore: warn about -t in rule lines, Pablo Neira Ayuso
      • Re: [PATCH 1/7] iptables-restore: warn about -t in rule lines, Jan Engelhardt
  • [PATCH 5/7] libxt_devgroup: guard against negative numbers, Jan Engelhardt
  • [PATCH 7/7] libxt_*limit: avoid division by zero, Jan Engelhardt
  • [PATCH 4/7] libxt_devgroup: consolidate devgroup specification parsing, Jan Engelhardt
  • [PATCH 6/7] libxt_LED: guard against negative numbers, Jan Engelhardt
  • Re: iptables: Mostly Parser Fixes, Pablo Neira Ayuso
• ulogd - does it work with ip_conntrack_netlink?, Gomathivinayagam Muthuvinayagam
  • Re: ulogd - does it work with ip_conntrack_netlink?, Gomathivinayagam Muthuvinayagam
• ulogd - cpu usage statistics measurement, Gomathivinayagam Muthuvinayagam
• net-next closed, David Miller
• KGDB over ethernet, Arif Hossain
  • Re: KGDB over ethernet, Pablo Neira Ayuso
    • Re: KGDB over ethernet, Arif
• nf_conntrack and nf_conntrack_ipv4 for RHEL5, Gomathivinayagam Muthuvinayagam
  • Re: nf_conntrack and nf_conntrack_ipv4 for RHEL5, Gomathivinayagam Muthuvinayagam
  • Re: nf_conntrack and nf_conntrack_ipv4 for RHEL5, Pablo Neira Ayuso
• [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), pablo
  • Re: [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), Eric Dumazet
    • Re: [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), Eric Dumazet
      • Re: [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), Pablo Neira Ayuso
      • Re: [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), Pablo Neira Ayuso
        • Re: [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), Pablo Neira Ayuso
        • Re: [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), Jan Engelhardt
          • Re: [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), Pablo Neira Ayuso
  • Re: [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), Jan Engelhardt
    • Re: [PATCH] iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7), Pablo Neira Ayuso
• Hash table implementation, Arif Hossain
  • <Possible follow-ups>
  • Re: Hash table implementation, Hans Schillstrom
    • Re: Hash table implementation, Arif
• ulogd - will there be a network latency?, Gomathivinayagam Muthuvinayagam
• ipv6 address comparison, Arif Hossain
• netfilter,rcu: hang in nf_conntrack_net_exit, Sasha Levin
• nf_conntrack and nf_conntrack_ipv4 modules are missing, Gomathivinayagam Muthuvinayagam
• Problem with iptables accounting in Ubuntu Precise 12.04 LTS, John Tran
  • Re: Problem with iptables accounting in Ubuntu Precise 12.04 LTS, Jan Engelhardt
    • Re: Problem with iptables accounting in Ubuntu Precise 12.04 LTS, John Tran
      • Re: Problem with iptables accounting in Ubuntu Precise 12.04 LTS, Jan Engelhardt
• [PATCH][xt-addons] extensions: fix ipv6_find_hdr upstream change fallout, Florian Westphal