Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH net-next v2 11/12] netfilter: nf_conntrack_l4proto_icmp cleanup, (continued)
  • [PATCH net-next v2 11/12] netfilter: nf_conntrack_l4proto_icmp cleanup, Gao feng
    • Re: [PATCH net-next v2 11/12] netfilter: nf_conntrack_l4proto_icmp cleanup, Pablo Neira Ayuso
      • Re: [PATCH net-next v2 11/12] netfilter: nf_conntrack_l4proto_icmp cleanup, Gao feng
  • [PATCH net-next v2 10/12] netfilter: nf_conntrack_l4proto_dccp[4,6] cleanup, Gao feng
  • [PATCH net-next v2 08/12] netfilter: merge sctpv[4,6]_net_init into sctp_net_init, Gao feng
  • [PATCH net-next v2 05/12] netfilter: merge tcpv[4,6]_net_init into tcp_net_init, Gao feng
    • Re: [PATCH net-next v2 05/12] netfilter: merge tcpv[4,6]_net_init into tcp_net_init, Pablo Neira Ayuso
  • [PATCH net-next v2 07/12] netfilter: nf_conntrack_l4proto_udplite[4,6] cleanup, Gao feng
  • [PATCH net-next v2 03/12] netfilter: add nf_ct_kfree_compat_sysctl_table to make codes clear, Gao feng
    • Re: [PATCH net-next v2 03/12] netfilter: add nf_ct_kfree_compat_sysctl_table to make codes clear, Pablo Neira Ayuso
  • [PATCH net-next v2 06/12] netfilter: merge udpv[4,6]_net_init into udp_net_init, Gao feng
    • Re: [PATCH net-next v2 06/12] netfilter: merge udpv[4,6]_net_init into udp_net_init, Pablo Neira Ayuso
      • Re: [PATCH net-next v2 06/12] netfilter: merge udpv[4,6]_net_init into udp_net_init, Gao feng
        • Re: [PATCH net-next v2 06/12] netfilter: merge udpv[4,6]_net_init into udp_net_init, Gao feng
        • Re: [PATCH net-next v2 06/12] netfilter: merge udpv[4,6]_net_init into udp_net_init, Pablo Neira Ayuso
  • [PATCH net-next v2 02/12] netfilter: add parameter proto for l4proto.init_net, Gao feng
  • [PATCH net-next v2 09/12] netfilter: nf_conntrack_l4proto_generic cleanup, Gao feng
    • Re: [PATCH net-next v2 09/12] netfilter: nf_conntrack_l4proto_generic cleanup, Pablo Neira Ayuso
  • [PATCH net-next v2 04/12] netfilter: regard users as refcount for l4proto's per-net data, Gao feng
    • Re: [PATCH net-next v2 04/12] netfilter: regard users as refcount for l4proto's per-net data, Pablo Neira Ayuso
  • Re: [PATCH net-next v2 01/12] netfilter: fix problem with proto register, Pablo Neira Ayuso
    • Re: [PATCH net-next v2 01/12] netfilter: fix problem with proto register, Gao feng
      • Re: [PATCH net-next v2 01/12] netfilter: fix problem with proto register, Pablo Neira Ayuso
• Netfilter Debugging tips, AFT
  • Re: Netfilter Debugging tips, Pablo Neira Ayuso
• [xt-addons][PATCH 0/4] psd match cleanup patches, Florian Westphal
  • [PATCH 1/4] psd: rip out scanlogd leftovers, Florian Westphal
  • [PATCH 2/4] psd: add basic validation of userspace matchinfo data, Florian Westphal
  • [PATCH 3/4] psd: reduce size of struct host, Florian Westphal
  • [PATCH 4/4] psd: move defines to user/kernelspace part where possible, Florian Westphal
  • Re: [xt-addons][PATCH 0/4] psd match cleanup patches, Jan Engelhardt
• Re[2]: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Hans Schillstrom
  • <Possible follow-ups>
  • Re[2]: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Hans Schillstrom
  • Re[2]: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Hans Schillstrom
    • Re[2]: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Jan Engelhardt
  • Re[3]: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Hans Schillstrom
    • Re[3]: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Jan Engelhardt
      • Re: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Florian Westphal
        • Re: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Jan Engelhardt
• [PATCH 01/10] netfilter: fix problem with proto register, Gao feng
  • [PATCH 03/10] netfilter: add nf_ct_kfree_compat_sysctl_table to make codes clear, Gao feng
    • Re: [PATCH 03/10] netfilter: add nf_ct_kfree_compat_sysctl_table to make codes clear, Pablo Neira Ayuso
      • Re: [PATCH 03/10] netfilter: add nf_ct_kfree_compat_sysctl_table to make codes clear, Gao feng
        • Re: [PATCH 03/10] netfilter: add nf_ct_kfree_compat_sysctl_table to make codes clear, Pablo Neira Ayuso
  • [PATCH 09/10] netfilter: nf_conntrack_l4proto_generic cleanup, Gao feng
  • [PATCH 10/10] netfilter: nf_conntrack_l4proto_dccp[4,6] cleanup, Gao feng
  • [PATCH 02/10] netfilter: add parameter proto for l4proto.init_net, Gao feng
    • Re: [PATCH 02/10] netfilter: add parameter proto for l4proto.init_net, Pablo Neira Ayuso
      • Re: [PATCH 02/10] netfilter: add parameter proto for l4proto.init_net, Gao feng
        • Re: [PATCH 02/10] netfilter: add parameter proto for l4proto.init_net, Pablo Neira Ayuso
          • Re: [PATCH 02/10] netfilter: add parameter proto for l4proto.init_net, Gao feng
  • [PATCH 04/10] netfilter: regard users as refcount for l4proto's per-net data, Gao feng
    • Re: [PATCH 04/10] netfilter: regard users as refcount for l4proto's per-net data, Pablo Neira Ayuso
  • [PATCH 08/10] netfilter: merge sctpv[4,6]_net_init into sctp_net_init, Gao feng
  • [PATCH 05/10] netfilter: merge tcpv[4,6]_net_init into tcp_net_init, Gao feng
    • Re: [PATCH 05/10] netfilter: merge tcpv[4,6]_net_init into tcp_net_init, Pablo Neira Ayuso
      • Re: [PATCH 05/10] netfilter: merge tcpv[4,6]_net_init into tcp_net_init, Gao feng
  • [PATCH 06/10] merge udpv[4,6]_net_init into udp_net_init, Gao feng
    • Re: [PATCH 06/10] merge udpv[4,6]_net_init into udp_net_init, Pablo Neira Ayuso
  • [PATCH 07/10] netfilter: nf_conntrack_l4proto_udplite[4,6] cleanup, Gao feng
    • Re: [PATCH 07/10] netfilter: nf_conntrack_l4proto_udplite[4,6] cleanup, Pablo Neira Ayuso
• Regarding connection mappings to module data structures, Deepak Jangid
  • Re: Regarding connection mappings to module data structures, Pablo Neira Ayuso
    • Re: Regarding connection mappings to module data structures, Deepak Jangid
• [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Hans Schillstrom
  • Re: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Pablo Neira Ayuso
    • Re: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Pablo Neira Ayuso
    • Re: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Florian Westphal
  • Re: [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options, Jan Engelhardt
• [PATCH 0/7] [RFCv2] new user-space connection tracking helper infrastructure, pablo
  • [PATCH 1/7] netfilter: nf_ct_helper: allocate 16 bytes for the helper and policy names, pablo
  • [PATCH 2/7] netfilter: nf_ct_ext: support variable length extensions, pablo
    • Re: [PATCH 2/7] netfilter: nf_ct_ext: support variable length extensions, David Miller
  • [PATCH 7/7] netfilter: add user-space connection tracking helper infrastructure, pablo
    • Re: [PATCH 7/7] netfilter: add user-space connection tracking helper infrastructure, David Miller
  • [PATCH 5/7] netfilter: nfnetlink_queue: add NAT TCP sequence adjustment if packet mangled, pablo
  • [PATCH 6/7] netfilter: ctnetlink: add CTA_HELP_INFO attribute, pablo
  • [PATCH 3/7] netfilter: nf_ct_helper: implement variable length helper private data, pablo
  • [PATCH 4/7] netfilter: add glue code to integrate nfnetlink_queue and ctnetlink, pablo
• Re: Having expectations live past the master connection's lifetime, Pablo Neira Ayuso
  • Re: Having expectations live past the master connection's lifetime, Kelvie Wong
• [PATCH 0/2] netfilter updates for net tree (3.5-rc2), pablo
  • [PATCH 1/2] netfilter: xt_HMARK: fix endianness and provide consistent hashing, pablo
  • [PATCH 2/2] netfilter: nf_ct_h323: fix bug in rtcp natting, pablo
  • Re: [PATCH 0/2] netfilter updates for net tree (3.5-rc2), David Miller
• [PATCH 00/25] netfilter updates from net-next (upcoming 3.6), pablo
  • [PATCH 02/25] netfilter: xt_connlimit: remove revision 0, pablo
  • [PATCH 06/25] netfilter: nf_ct_generic: add namespace support, pablo
  • [PATCH 05/25] netfilter: nf_conntrack: prepare namespace support for l3 protocol trackers, pablo
  • [PATCH 07/25] netfilter: nf_ct_tcp: add namespace support, pablo
  • [PATCH 11/25] netfilter: nf_ct_ipv4: add namespace support, pablo
  • [PATCH 14/25] netfilter: nf_ct_udplite: add namespace support, pablo
  • [PATCH 23/25] netfilter: ipv4, defrag: switch hook PFs to nfproto, pablo
  • [PATCH 17/25] netfilter: nf_conntrack: remove now unused sysctl for nf_conntrack_l[3|4]proto, pablo
  • [PATCH 21/25] netfilter: decnet: switch hook PFs to nfproto, pablo
  • [PATCH 24/25] netfilter: ipvs: switch hook PFs to nfproto, pablo
  • [PATCH 25/25] netfilter: selinux: switch hook PFs to nfproto, pablo
  • [PATCH 22/25] netfilter: bridge: switch hook PFs to nfproto, pablo
  • [PATCH 18/25] netfilter: nf_conntrack: add namespace support for cttimeout, pablo
  • [PATCH 13/25] netfilter: nf_ct_sctp: add namespace support, pablo
  • [PATCH 16/25] netfilter: nf_ct_gre: use new namespace support, pablo
  • [PATCH 20/25] netfilter: xt_recent: add address masking option, pablo
  • [PATCH 15/25] netfilter: nf_ct_dccp: use new namespace support, pablo
  • [PATCH 12/25] netfilter: nf_ct_ipv6: add namespace support, pablo
  • [PATCH 19/25] netfilter: NFQUEUE: don't xor src/dst ip address for load distribution, pablo
  • [PATCH 09/25] netfilter: nf_ct_icmp: add namespace support, pablo
  • [PATCH 10/25] netfilter: nf_ct_icmp: add namespace support, pablo
  • [PATCH 03/25] netfilter: Add fail-open support, pablo
  • [PATCH 08/25] netfilter: nf_ct_udp: add namespace support, pablo
  • [PATCH 04/25] netfilter: nf_conntrack: prepare namespace support for l4 protocol trackers, pablo
  • [PATCH 01/25] netfilter: remove include/linux/netfilter_ipv4/ipt_addrtype.h, pablo
  • Re: [PATCH 00/25] netfilter updates from net-next (upcoming 3.6), David Miller
• [GIT] heads up: rebase my Netfilter net-next tree, Pablo Neira Ayuso
• [PATCH] libnetfilter_queue: Implement API to set per-queue flags, Krishna Kumar
  • Re: [PATCH] libnetfilter_queue: Implement API to set per-queue flags, Pablo Neira Ayuso
• What happened to struct xt_match_param, Aft nix
  • Re: What happened to struct xt_match_param, Jan Engelhardt
    • Re: What happened to struct xt_match_param, Aft nix
• ulogd: build fixes, Jan Engelhardt
  • [PATCH 1/3] sqlite: resolve compiler warnings, Jan Engelhardt
  • [PATCH 3/3] pcap: resolve unreliable detection, Jan Engelhardt
  • [PATCH 2/3] nfacct: resolve build failure, Jan Engelhardt
  • Re: ulogd: build fixes, Pablo Neira Ayuso
• [PATCH next] netfilter: NFQUEUE: don't xor src/dst ip address, Florian Westphal
  • Re: [PATCH next] netfilter: NFQUEUE: don't xor src/dst ip address, Pablo Neira Ayuso
• status of ulogd2 package, Nikola Ciprich
  • Re: status of ulogd2 package, Pablo Neira Ayuso
    • Re: status of ulogd2 package, Nikola Ciprich
• [PATCH 0/7] [RFC] new user-space connection tracking helper infrastructure, pablo
  • [PATCH 2/7] netfilter: nf_ct_ext: support variable length extensions, pablo
  • [PATCH 1/7] netfilter: nf_ct_helper: allocate 16 bytes for the helper and policy names, pablo
  • [PATCH 5/7] netfilter: nfnl_queue: support NAT TCP sequence adjustment if packet mangled, pablo
  • [PATCH 3/7] netfilter: nf_ct_helper: implement variable length helper private data, pablo
    • Re: [PATCH 3/7] netfilter: nf_ct_helper: implement variable length helper private data, Jan Engelhardt
      • Re: [PATCH 3/7] netfilter: nf_ct_helper: implement variable length helper private data, Joe Perches
        • Re: [PATCH 3/7] netfilter: nf_ct_helper: implement variable length helper private data, Jan Engelhardt
  • [PATCH 6/7] netfilter: ctnetlink: add CTA_HELP_INFO attribute, pablo
  • [PATCH 7/7] netfilter: add user-space connection tracking helper infrastructure, pablo
    • Re: [PATCH 7/7] netfilter: add user-space connection tracking helper infrastructure, Jan Engelhardt
    • Re: [PATCH 7/7] netfilter: add user-space connection tracking helper infrastructure, Ferenc Wagner
  • [PATCH 4/7] netfilter: add glue code to integrate nfnetlink_queue and ctnetlink, pablo
    • Re: [PATCH 4/7] netfilter: add glue code to integrate nfnetlink_queue and ctnetlink, Jan Engelhardt
• [README] collecting netfilter updates for net-next, Pablo Neira Ayuso
• [README]: net-next is open..., David Miller
• Documentation for writing new nf_contrack module, Aft nix
  • RE: Documentation for writing new nf_contrack module, Jeff Haran
  • Re: Documentation for writing new nf_contrack module, Nazim Wahid Djafar
    • Re: Documentation for writing new nf_contrack module, Aft nix
• conntrack-tools: 1 pending fix, Jan Engelhardt
  • [PATCH] conntrackd: resolve a compiler error, Jan Engelhardt
    • Re: [PATCH] conntrackd: resolve a compiler error, Pablo Neira Ayuso
      • Re: [PATCH] conntrackd: resolve a compiler error, Florian Westphal
        • Re: [PATCH] conntrackd: resolve a compiler error, Jan Engelhardt
          • Re: [PATCH] conntrackd: resolve a compiler error, Pablo Neira Ayuso
• [News] Help for Heartache - May, 2012, How to Heal a Broken Heart
• filter IP protocol with ip6tables, Bernd Kohler
  • Re: filter IP protocol with ip6tables, Jan Engelhardt
  • <Possible follow-ups>
  • Re: filter IP protocol with ip6tables, Hans Schillstrom
    • Re: filter IP protocol with ip6tables, Bernd Kohler
      • Re: filter IP protocol with ip6tables, Bernd Kohler
        • Re: filter IP protocol with ip6tables, Jan Engelhardt
• netfilter bridging and enqueue_to_backlog, jay patel
• Ask an issue about how can I let netfilter-nat work normally, thanks, miao hongbing
• Redirect target for IPv6 inclusion, Steve (Telsat Broadband)
  • Re: Redirect target for IPv6 inclusion, Jan Engelhardt
    • RE: Redirect target for IPv6 inclusion, Steve (Telsat Broadband)
    • RE: Redirect target for IPv6 inclusion, Steve (Telsat Broadband)
      • RE: Redirect target for IPv6 inclusion, Jan Engelhardt
• [PATCH 00/15] netfilter: add namespace support for netfilter proto, Gao feng
  • [PATCH 11/15] netfilter: add namespace support for l4proto_udplite, Gao feng
  • [PATCH 10/15] netfilter: add namespace support for l4proto_sctp, Gao feng
  • [PATCH 01/15] netfilter: add namespace support for l4proto, Gao feng
    • Re: [PATCH 01/15] netfilter: add namespace support for l4proto, Pablo Neira Ayuso
      • Re: [PATCH 01/15] netfilter: add namespace support for l4proto, Gao feng
  • [PATCH 04/15] netfilter: add namespace support for l4proto_tcp, Gao feng
  • [PATCH 02/15] netfilter: add namespace support for l3proto, Gao feng
  • [PATCH 15/15] netfilter: add namespace support for cttimeout, Gao feng
  • [PATCH 14/15] netfilter: cleanup sysctl for l4proto and l3proto, Gao feng
  • [PATCH 03/15] netfilter: add namespace support for l4proto_generic, Gao feng
  • [PATCH 08/15] netfilter: add namespace support for l3proto_ipv4, Gao feng
  • [PATCH 05/15] netfilter: add namespace support for l4proto_udp, Gao feng
  • [PATCH 06/15] netfilter: add namespace support for l4proto_icmp, Gao feng
  • [PATCH 13/15] netfilter: adjust l4proto_gre4 to the nf_conntrack_l4proto_register, Gao feng
  • [PATCH 07/15] netfilter: add namespace support for l4proto_icmpv6, Gao feng
  • [PATCH 09/15] netfilter: add namespace support for l3proto_ipv6, Gao feng
  • [PATCH 12/15] netfilter: adjust l4proto_dccp to the nf_conntrack_l4proto_register, Gao feng
• [ANNOUNCE] libmnl 1.0.3 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] libmnl 1.0.3 release, Pablo Neira Ayuso
  • dun using l3tp, Hemant-vilas RAMDASI
• [ANNOUNCE] iptables 1.4.14 release, Pablo Neira Ayuso
• [ANNOUNCE] conntrack-tools 1.2.0 release, Pablo Neira Ayuso
  • Re: conntrack-tools 1.2.0 release, Jan Engelhardt
    • [PATCH 1/2] nfct-extensions/timeout: adjust for changed nfct_timeout_snprintf API, Jan Engelhardt
      • Re: [PATCH 1/2] nfct-extensions/timeout: adjust for changed nfct_timeout_snprintf API, Pablo Neira Ayuso
        • Re: [PATCH 1/2] nfct-extensions/timeout: adjust for changed nfct_timeout_snprintf API, spiro
    • [PATCH 2/2] Update .gitignore, Jan Engelhardt
      • Re: [PATCH 2/2] Update .gitignore, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_cttimeout 1.0.0 release, Pablo Neira Ayuso
• [v5 PATCH 0/1] netfilter: "fail-open" feature support for NFQUEUE, Krishna Kumar
  • [v5 PATCH 1/1] netfilter: Add fail-open support, Krishna Kumar
    • Re: [v5 PATCH 1/1] netfilter: Add fail-open support, Florian Westphal
    • Re: [v5 PATCH 1/1] netfilter: Add fail-open support, Pablo Neira Ayuso
• [v4 PATCH 0/1] netfilter: "fail-open" feature support for NFQUEUE, Krishna Kumar
  • [v4 PATCH 1/1] netfilter: Add fail-open support, Krishna Kumar
    • Re: [v4 PATCH 1/1] netfilter: Add fail-open support, Florian Westphal
      • Re: [v4 PATCH 1/1] netfilter: Add fail-open support, Krishna Kumar2
        • Re: [v4 PATCH 1/1] netfilter: Add fail-open support, Florian Westphal
    • Re: [v4 PATCH 1/1] netfilter: Add fail-open support, Pablo Neira Ayuso
      • Re: [v4 PATCH 1/1] netfilter: Add fail-open support, Pablo Neira Ayuso
        • Re: [v4 PATCH 1/1] netfilter: Add fail-open support, Krishna Kumar2
• reason that iptables mac module only has mac-source option, JieYue Ma
• [README] patches that did not reach net-next (upcoming 3.5), Pablo Neira Ayuso
• Using RELATED for a level4 protocol (MPTCP), Nicolas Maître
  • Re: Using RELATED for a level4 protocol (MPTCP), Jan Engelhardt
    • Re: Using RELATED for a level4 protocol (MPTCP), Nicolas Maître
  • Re: Using RELATED for a level4 protocol (MPTCP), Jozsef Kadlecsik
    • Re: Using RELATED for a level4 protocol (MPTCP), Nicolas Maître
• [README] Two merges pending..., David Miller
  • Re: [README] Two merges pending..., Pablo Neira Ayuso
• [v3 PATCH 0/1] netfilter: "fail-open" feature support for NFQUEUE, Krishna Kumar
  • [v3 PATCH 1/1] netfilter: Add fail-open support., Krishna Kumar
    • Re: [v3 PATCH 1/1] netfilter: Add fail-open support., Florian Westphal
      • Re: [v3 PATCH 1/1] netfilter: Add fail-open support., Krishna Kumar2
        • Re: [v3 PATCH 1/1] netfilter: Add fail-open support., Florian Westphal
          • Re: [v3 PATCH 1/1] netfilter: Add fail-open support., Krishna Kumar2
• [PATCH] netfilter conntrack helper: nf_ct_h323: fix bug in rtcp natting, Jagdish Motwani
  • Re: [PATCH] netfilter conntrack helper: nf_ct_h323: fix bug in rtcp natting, Eric Dumazet
    • Re: [PATCH] netfilter conntrack helper: nf_ct_h323: fix bug in rtcp natting, Jagdish Motwani
      • Re: [PATCH] netfilter conntrack helper: nf_ct_h323: fix bug in rtcp natting, Pablo Neira Ayuso
        • Re: [PATCH] netfilter conntrack helper: nf_ct_h323: fix bug in rtcp natting, Jagdish Motwani
• [README] net-next has been merged, David Miller
  • Re: [README] net-next has been merged, Joe Perches
    • Re: [README] net-next has been merged, David Miller
• libnetfilter_conntrack updates, Jan Engelhardt
  • [PATCH 3/4] build: remove unused -DLIBNETFILTER_CONNTRACK_DIR, Jan Engelhardt
  • [PATCH 4/4] Update .gitignore, Jan Engelhardt
  • [PATCH 1/4] build: remove unused LDFLAGS, Jan Engelhardt
  • [PATCH 2/4] qa: change an if to elseif, Jan Engelhardt
  • Re: libnetfilter_conntrack updates, Pablo Neira Ayuso
• [Resend PATCH 1/2] netfilter: remove include/linux/netfilter_ipv4/ipt_addrtype.h, Cong Wang
  • [Resend PATCH 2/2] netfilter: remove rev 0 of xt_connlimit, Cong Wang
    • Re: [Resend PATCH 2/2] netfilter: remove rev 0 of xt_connlimit, Pablo Neira Ayuso
  • Re: [Resend PATCH 1/2] netfilter: remove include/linux/netfilter_ipv4/ipt_addrtype.h, Pablo Neira Ayuso
• Sending packet bypassing iptables rules, Arif Hossain
• [PATCH][conntrack-tools] conntrack: flush stdout for each expectation event, too, Florian Westphal
  • Re: [PATCH][conntrack-tools] conntrack: flush stdout for each expectation event, too, Pablo Neira Ayuso
• [PATCH][libnetfilter_conntrack] snprintf: print conntrack helper name, too, Florian Westphal
  • Re: [PATCH][libnetfilter_conntrack] snprintf: print conntrack helper name, too, Pablo Neira Ayuso
• RTP stats explaination, Arif Hossain
  • RE: [Wireshark-users] RTP stats explaination, RUOFF, LARS (LARS)
• NAT66, Venkateswarlu Bandi
• [v2 PATCH] netfilter: xt_HMARK: fix endian bugs and warnings, Hans Schillstrom
  • Re: [v2 PATCH] netfilter: xt_HMARK: fix endian bugs and warnings, Pablo Neira Ayuso
• Questions about ebtables QUEUE/NFQUEUE target implementation, JieYue Ma
• [ANNOUNCE] libnetfilter_conntrack 1.0.1 release, Pablo Neira Ayuso
• [PATCH] iptables: xt_recent: Add optional mask option for xt_recent, Denys Fedoryshchenko
  • Re: [PATCH] iptables: xt_recent: Add optional mask option for xt_recent, Pablo Neira Ayuso
    • Re: [PATCH] iptables: xt_recent: Add optional mask option for xt_recent, Denys Fedoryshchenko
    • Re: [PATCH] iptables: xt_recent: Add optional mask option for xt_recent, Denys Fedoryshchenko
• [PATCH 1/2] extensions: libxt_rateest: output all options in save hook, Florian Westphal
  • [PATCH 2/2] tests: add rateest match rules, Florian Westphal
    • Re: [PATCH 2/2] tests: add rateest match rules, Pablo Neira Ayuso
      • Re: [PATCH 2/2] tests: add rateest match rules, Florian Westphal
        • Re: [PATCH 2/2] tests: add rateest match rules, Pablo Neira Ayuso
  • Re: [PATCH 1/2] extensions: libxt_rateest: output all options in save hook, Pablo Neira Ayuso
• Re[2]: [PATCH] netfilter: xt_HMARK: fix endian bugs and warnings, Hans Schillstrom
• [PATCH 0/7] netfilter updates for net-next (batch 3), pablo
  • [PATCH 1/7] netfilter: xt_hashlimit: use _ALL macro to reject unknown flag bits, pablo
  • [PATCH 3/7] netfilter: xt_HMARK: modulus is expensive for hash calculation, pablo
    • RE: [PATCH 3/7] netfilter: xt_HMARK: modulus is expensive for hash calculation, David Laight
      • RE: [PATCH 3/7] netfilter: xt_HMARK: modulus is expensive for hash calculation, Eric Dumazet
        • Re: [PATCH 3/7] netfilter: xt_HMARK: modulus is expensive for hash calculation, Pablo Neira Ayuso
  • [PATCH 2/7] netfilter: xt_HMARK: potential NULL dereference in get_inner_hdr(), pablo
  • [PATCH 7/7] netfilter: nf_ct_h323: fix usage of MODULE_ALIAS_NFCT_HELPER, pablo
  • [PATCH 4/7] netfilter: nf_ct_tcp: extend log message for invalid ignored packets, pablo
  • [PATCH 5/7] netfilter: ipset: fix timeout value overflow bug, pablo
  • [PATCH 6/7] netfilter: xt_CT: remove redundant header include, pablo
  • Re: [PATCH 0/7] netfilter updates for net-next (batch 3), David Miller
• [PATCH] netfilter: xt_HMARK: fix endian bugs and warnings, Hans Schillstrom
  • Re: [PATCH] netfilter: xt_HMARK: fix endian bugs and warnings, Pablo Neira Ayuso
• [PATCH] net/bridge/netfilter: Fix the randconfig warning, Devendra Naga
  • Re: [Bridge] [PATCH] net/bridge/netfilter: Fix the randconfig warning, Bart De Schuymer
• [PATCH] [RFC] netfilter: don't assume NFPROTO_* are like PF_*, Alban Crequy
  • Re: [PATCH] [RFC] netfilter: don't assume NFPROTO_* are like PF_*, Jan Engelhardt
    • Re: [PATCH] [RFC] netfilter: don't assume NFPROTO_* are like PF_*, Alban Crequy
    • Re: [PATCH] [RFC] netfilter: don't assume NFPROTO_* are like PF_*, Pablo Neira Ayuso
• [PATCH 1/6] netfilter: sanity checks on NFPROTO_NUMPROTO, Alban Crequy
  • [PATCH 3/6] netfilter: bridge: switch hook PFs to nfproto, Alban Crequy
    • Re: [PATCH 3/6] netfilter: bridge: switch hook PFs to nfproto, Pablo Neira Ayuso
  • [PATCH 5/6] netfilter: ipvs: switch hook PFs to nfproto, Alban Crequy
    • Re: [PATCH 5/6] netfilter: ipvs: switch hook PFs to nfproto, Pablo Neira Ayuso
  • [PATCH 2/6] netfilter: decnet: switch hook PFs to nfproto, Alban Crequy
    • RE: [PATCH 2/6] netfilter: decnet: switch hook PFs to nfproto, David Laight
      • Re: [PATCH 2/6] netfilter: decnet: switch hook PFs to nfproto, Florian Westphal
      • Re: [PATCH 2/6] netfilter: decnet: switch hook PFs to nfproto, Pablo Neira Ayuso
      • RE: [PATCH 2/6] netfilter: decnet: switch hook PFs to nfproto, Jan Engelhardt
    • Re: [PATCH 2/6] netfilter: decnet: switch hook PFs to nfproto, Pablo Neira Ayuso
    • Re: [PATCH 2/6] netfilter: decnet: switch hook PFs to nfproto, Pablo Neira Ayuso
  • [PATCH 6/6] netfilter: selinux: switch hook PFs to nfproto, Alban Crequy
    • Re: [PATCH 6/6] netfilter: selinux: switch hook PFs to nfproto, Pablo Neira Ayuso
  • [PATCH 4/6] netfilter: ipv4, defrag: switch hook PFs to nfproto, Alban Crequy
    • Re: [PATCH 4/6] netfilter: ipv4, defrag: switch hook PFs to nfproto, Pablo Neira Ayuso
  • Re: [PATCH 1/6] netfilter: sanity checks on NFPROTO_NUMPROTO, Pablo Neira Ayuso
    • Re: [PATCH 1/6] netfilter: sanity checks on NFPROTO_NUMPROTO, Alban Crequy
      • [PATCH v2 1/6] netfilter: sanity checks on NFPROTO_NUMPROTO, Alban Crequy
        • Re: [PATCH v2 1/6] netfilter: sanity checks on NFPROTO_NUMPROTO, Pablo Neira Ayuso
          • [PATCH v3 1/6] netfilter: sanity checks on NFPROTO_NUMPROTO, Alban Crequy
  • Re: [PATCH 1/6] netfilter: sanity checks on NFPROTO_NUMPROTO, Jan Engelhardt
• [PATCH] netfilter: xt_HMARK: endian bugs, Hans Schillstrom
  • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Jan Engelhardt
      • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Eric Dumazet
        • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Hans Schillstrom
          • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Eric Dumazet
            • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Hans Schillstrom
              • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Jan Engelhardt
              • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Eric Dumazet
              • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Jozsef Kadlecsik
                • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Pablo Neira Ayuso
                  • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Eric Dumazet
                    • RE: [PATCH] netfilter: xt_HMARK: endian bugs, Hans Schillström
        • RE: [PATCH] netfilter: xt_HMARK: endian bugs, Hans Schillström
    • Re: [PATCH] netfilter: xt_HMARK: endian bugs, Hans Schillstrom
  • <Possible follow-ups>
  • Re[2]: [PATCH] netfilter: xt_HMARK: endian bugs, Hans Schillstrom
• [PATCH] netfilter: nf_ct_tcp: extend log message for invalid ignored packets, pablo
  • Re: [PATCH] netfilter: nf_ct_tcp: extend log message for invalid ignored packets, Jozsef Kadlecsik
• [PATCH 0/4] netfilter fixes for 3.4-rc7, pablo
  • [PATCH 1/4] netfilter: ipset: fix timeout value overflow bug, pablo
    • RE: [PATCH 1/4] netfilter: ipset: fix timeout value overflow bug, David Laight
      • Re: [PATCH 1/4] netfilter: ipset: fix timeout value overflow bug, Pablo Neira Ayuso
        • Re: [PATCH 1/4] netfilter: ipset: fix timeout value overflow bug, Eric Dumazet
          • Re: [PATCH 1/4] netfilter: ipset: fix timeout value overflow bug, Jozsef Kadlecsik
            • Re: [PATCH 1/4] netfilter: ipset: fix timeout value overflow bug, Pablo Neira Ayuso
            • Re: [PATCH 1/4] netfilter: ipset: fix timeout value overflow bug, Pablo Neira Ayuso
              • Re: [PATCH 1/4] netfilter: ipset: fix timeout value overflow bug, Jozsef Kadlecsik
          • RE: [PATCH 1/4] netfilter: ipset: fix timeout value overflow bug, David Laight
  • [PATCH 2/4] netfilter: ipset: fix hash size checking in kernel, pablo
  • [PATCH 4/4] netfilter: nf_ct_h323: fix usage of MODULE_ALIAS_NFCT_HELPER, pablo
  • [PATCH 3/4] netfilter: xt_CT: remove redundant header include, pablo
  • Re: [PATCH 0/4] netfilter fixes for 3.4-rc7, David Miller
    • Re: [PATCH 0/4] netfilter fixes for 3.4-rc7, Pablo Neira Ayuso
    • Re: [PATCH 0/4] netfilter fixes for 3.4-rc7, Jozsef Kadlecsik
      • Re: [PATCH 0/4] netfilter fixes for 3.4-rc7, David Miller
        • Re: [PATCH 0/4] netfilter fixes for 3.4-rc7, Jozsef Kadlecsik
          • Re: [PATCH 0/4] netfilter fixes for 3.4-rc7, David Miller
            • Re: [PATCH 0/4] netfilter fixes for 3.4-rc7, Jozsef Kadlecsik
• [PATCH v3 00/17] netfilter: add namespace support for netfilter protos, Gao feng
  • [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Gao feng
    • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Pablo Neira Ayuso
      • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Gao feng
        • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Pablo Neira Ayuso
          • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Gao feng
            • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Pablo Neira Ayuso
              • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Gao feng
                • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Pablo Neira Ayuso
                  • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Gao feng
                    • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Gao feng
                      • Re: [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Pablo Neira Ayuso
  • [PATCH 04/17] netfilter: add namespace support for l4proto_generic, Gao feng
    • Re: [PATCH 04/17] netfilter: add namespace support for l4proto_generic, Pablo Neira Ayuso
      • Re: [PATCH 04/17] netfilter: add namespace support for l4proto_generic, Gao feng
        • Re: [PATCH 04/17] netfilter: add namespace support for l4proto_generic, Pablo Neira Ayuso
          • Re: [PATCH 04/17] netfilter: add namespace support for l4proto_generic, Gao feng
            • Re: [PATCH 04/17] netfilter: add namespace support for l4proto_generic, Pablo Neira Ayuso
              • Re: [PATCH 04/17] netfilter: add namespace support for l4proto_generic, Gao feng
                • Re: [PATCH 04/17] netfilter: add namespace support for l4proto_generic, Pablo Neira Ayuso
  • [PATCH 03/17] netfilter: add namespace support for l3proto, Gao feng
    • Re: [PATCH 03/17] netfilter: add namespace support for l3proto, Pablo Neira Ayuso
      • Re: [PATCH 03/17] netfilter: add namespace support for l3proto, Gao feng
        • Re: [PATCH 03/17] netfilter: add namespace support for l3proto, Pablo Neira Ayuso
          • Re: [PATCH 03/17] netfilter: add namespace support for l3proto, Gao feng
  • [PATCH 16/17] netfilter: add namespace support for cttimeout, Gao feng
    • Re: [PATCH 16/17] netfilter: add namespace support for cttimeout, Pablo Neira Ayuso
      • Re: [PATCH 16/17] netfilter: add namespace support for cttimeout, Gao feng
  • [PATCH 17/17] netfilter: cttimeout use pernet data of l4proto, Gao feng
  • [PATCH 14/17] netfilter: adjust l4proto_gre4 to the nf_conntrack_l4proto_register, Gao feng
  • [PATCH 15/17] netfilter: cleanup sysctl for l4proto and l3proto, Gao feng
    • Re: [PATCH 15/17] netfilter: cleanup sysctl for l4proto and l3proto, Pablo Neira Ayuso
      • Re: [PATCH 15/17] netfilter: cleanup sysctl for l4proto and l3proto, Gao feng
        • Re: [PATCH 15/17] netfilter: cleanup sysctl for l4proto and l3proto, Pablo Neira Ayuso
  • [PATCH 08/17] netfilter: add namespace support for l4proto_icmpv6, Gao feng
  • [PATCH 11/17] netfilter: add namespace support for l4proto_sctp, Gao feng
  • [PATCH 12/17] netfilter: add namespace support for l4proto_udplite, Gao feng
  • [PATCH 13/17] netfilter: adjust l4proto_dccp to the nf_conntrack_l4proto_register, Gao feng
  • [PATCH 10/17] netfilter: add namespace support for l3proto_ipv6, Gao feng
  • [PATCH 09/17] netfilter: add namespace support for l3proto_ipv4, Gao feng
  • [PATCH 07/17] netfilter: add namespace support for l4proto_icmp, Gao feng
  • [PATCH 05/17] netfilter: add namespace support for l4proto_tcp, Gao feng
    • Re: [PATCH 05/17] netfilter: add namespace support for l4proto_tcp, Pablo Neira Ayuso
      • Re: [PATCH 05/17] netfilter: add namespace support for l4proto_tcp, Gao feng
  • [PATCH 06/17] netfilter: add namespace support for l4proto_udp, Gao feng
  • [PATCH 02/17] netfilter: add namespace support for l4proto, Gao feng
    • Re: [PATCH 02/17] netfilter: add namespace support for l4proto, Pablo Neira Ayuso
      • Re: [PATCH 02/17] netfilter: add namespace support for l4proto, Gao feng
        • Re: [PATCH 02/17] netfilter: add namespace support for l4proto, Pablo Neira Ayuso
  • Re: [PATCH v3 00/17] netfilter: add namespace support for netfilter protos, Gao feng
  • Re: [PATCH v3 00/17] netfilter: add namespace support for netfilter protos, Pablo Neira Ayuso
• [PATCH] netfilter: nf_ct_h323: fix usage of MODULE_ALIAS_NFCT_HELPER, pablo
• [RFC net-next 0/2] net: Use net_<level>_ratelimit, Joe Perches
  • [RFC net-next 2/2] net: Convert net_ratelimit uses to net_<level>_ratelimited, Joe Perches
  • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, David Miller
    • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, Joe Perches
      • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, Johannes Berg
        • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, David Miller
          • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, Johannes Berg
            • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, David Miller
              • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, Johannes Berg
                • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, David Miller
      • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, David Miller
      • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, Johannes Berg
        • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, David Miller
          • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, Johannes Berg
            • Re: [RFC net-next 0/2] net: Use net_<level>_ratelimit, David Miller
• [ipset] fix typo in libipset, Neutron Soutmun
  • Re: [ipset] fix typo in libipset, Jozsef Kadlecsik
• [patch] netfilter: potential NULL dereference in get_inner_hdr(), Dan Carpenter
  • Re: [patch] netfilter: potential NULL dereference in get_inner_hdr(), Hans Schillstrom
    • Re: [patch] netfilter: potential NULL dereference in get_inner_hdr(), David Miller
      • Re: [patch] netfilter: potential NULL dereference in get_inner_hdr(), Eric Dumazet
        • Re: [patch] netfilter: potential NULL dereference in get_inner_hdr(), Hans Schillstrom
          • Re: [patch] netfilter: potential NULL dereference in get_inner_hdr(), Pablo Neira Ayuso
    • Re: [patch] netfilter: potential NULL dereference in get_inner_hdr(), Dan Carpenter
  • Re: [patch] netfilter: potential NULL dereference in get_inner_hdr(), Pablo Neira Ayuso
• [PATCH next] netfilter: xt_hashlimit: use _ALL macro to reject unknown flag bits, Florian Westphal
  • Re: [PATCH next] netfilter: xt_hashlimit: use _ALL macro to reject unknown flag bits, Pablo Neira Ayuso
• [ANNOUNCE] ipset 6.12.1 released, Jozsef Kadlecsik
• [PATCH 1/1] ip(6)tables-restore: make sure argv is NULL terminated, Florian Westphal
  • Re: [PATCH 1/1] ip(6)tables-restore: make sure argv is NULL terminated, Pablo Neira Ayuso
• [ANNOUNCE] ipset 6.12 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 6.12 released, Jan Engelhardt
    • Re: [ANNOUNCE] ipset 6.12 released, Jozsef Kadlecsik
      • Re: [ANNOUNCE] ipset 6.12 released, Jan Engelhardt
        • Re: [ANNOUNCE] ipset 6.12 released, Jozsef Kadlecsik
          • Re: [ANNOUNCE] ipset 6.12 released, Neutron Soutmun
            • Re: [ANNOUNCE] ipset 6.12 released, Neutron Soutmun
              • Re: [ANNOUNCE] ipset 6.12 released, Jozsef Kadlecsik
                • Re: [ANNOUNCE] ipset 6.12 released, Neutron Soutmun
                  • Re: [ANNOUNCE] ipset 6.12 released, Neutron Soutmun
                    • Re: [ANNOUNCE] ipset 6.12 released, Neutron Soutmun
                      • Re: [ANNOUNCE] ipset 6.12 released, Mr Dash Four
                        • Re: [ANNOUNCE] ipset 6.12 released, Neutron Soutmun
                          • Re: [ANNOUNCE] ipset 6.12 released, Mr Dash Four
                            • Re: [ANNOUNCE] ipset 6.12 released, Jozsef Kadlecsik
                              • Re: [ANNOUNCE] ipset 6.12 released, Mr Dash Four
                                • Re: [ANNOUNCE] ipset 6.12 released, Jan Engelhardt
                                  • Re: [ANNOUNCE] ipset 6.12 released, Mr Dash Four
                        • Re: [ANNOUNCE] ipset 6.12 released, Jozsef Kadlecsik
                          • Re: [ANNOUNCE] ipset 6.12 released, Neutron Soutmun
• [PATCH]iptables-save: fix don't show counters by default, Nicolas CARRIER
  • Re: [PATCH]iptables-save: fix don't show counters by default, Pablo Neira Ayuso
• Re[2]: [PATCH 0/5] netfilter updates for net-next (upcoming 3.5), batch 2, Hans Schillstrom
• [PATCH] netfilter/xt_CT.c: remove redundant header include, Eldad Zack
  • Re: [PATCH] netfilter/xt_CT.c: remove redundant header include, Pablo Neira Ayuso
• [PATCH 0/5] netfilter updates for net-next (upcoming 3.5), batch 2, pablo
  • [PATCH 2/5] netfilter: add xt_hmark target for hash-based skb marking, pablo
  • [PATCH 1/5] netfilter: ip6_tables: add flags parameter to ipv6_find_hdr(), pablo
  • [PATCH 3/5] netfilter: limit, hashlimit: avoid duplicated inline, pablo
  • [PATCH 5/5] netfilter: hashlimit: byte-based limit mode, pablo
  • [PATCH 4/5] netfilter: hashlimit: move rateinfo initialization to helper, pablo
  • Re: [PATCH 0/5] netfilter updates for net-next (upcoming 3.5), batch 2, Eric Dumazet
  • Re: [PATCH 0/5] netfilter updates for net-next (upcoming 3.5), batch 2, David Miller
    • Re: [PATCH 0/5] netfilter updates for net-next (upcoming 3.5), batch 2, Pablo Neira Ayuso
• [PATCH 00/13] net: Add and use ether_addr_equal, Joe Perches
  • [PATCH 10/13] netfilter: Convert compare_ether_addr to ether_addr_equal, Joe Perches
  • [PATCH 04/13] bridge: netfilter: Convert compare_ether_addr to ether_addr_equal, Joe Perches
    • Re: [PATCH 04/13] bridge: netfilter: Convert compare_ether_addr to ether_addr_equal, Stephen Hemminger
  • Re: [PATCH 00/13] net: Add and use ether_addr_equal, David Miller
    • Re: [PATCH 00/13] net: Add and use ether_addr_equal, Joe Perches
      • Re: [PATCH 00/13] net: Add and use ether_addr_equal, David Miller
    • Re: [PATCH 00/13] net: Add and use ether_addr_equal, Johannes Berg
      • Re: [PATCH 00/13] net: Add and use ether_addr_equal, Joe Perches
        • Re: [PATCH 00/13] net: Add and use ether_addr_equal, Johannes Berg
          • Re: [PATCH 00/13] net: Add and use ether_addr_equal, Emmanuel Grumbach
• iptables ulog-cprange, Gaurav Sinha
  • Re: iptables ulog-cprange, Pablo Neira Ayuso
    • Re: iptables ulog-cprange, Gaurav Sinha
• [PATCH] libxt_hashlimit: add support for byte-based operation, Florian Westphal
  • Re: [PATCH] libxt_hashlimit: add support for byte-based operation, Jan Engelhardt
    • Re: [PATCH] libxt_hashlimit: add support for byte-based operation, Florian Westphal
  • Re: [PATCH] libxt_hashlimit: add support for byte-based operation, Pablo Neira Ayuso
• SLUB warning in netfilter code on shutdown, Kirill A. Shutemov
  • Re: SLUB warning in netfilter code on shutdown, Kirill A. Shutemov
    • Re: SLUB warning in netfilter code on shutdown, Christoph Lameter
• [v2 PATCH 0/6] netfilter: "fail-open" feature support for NFQUEUE, Krishna Kumar
  • [v2 PATCH 1/6] netfilter: Add new netlink NFQA_CFG_FAIL_OPEN, Krishna Kumar
    • Re: [v2 PATCH 1/6] netfilter: Add new netlink NFQA_CFG_FAIL_OPEN, Pablo Neira Ayuso
  • [v2 PATCH 2/6] netfilter: Change enqueue handlers return values, Krishna Kumar
  • [v2 PATCH 4/6] netfilter: Add fail-open support to handler, Krishna Kumar
    • Re: [v2 PATCH 4/6] netfilter: Add fail-open support to handler, Pablo Neira Ayuso
  • [v2 PATCH 6/6] netfilter: Enable fail-open support., Krishna Kumar
  • [v2 PATCH 3/6] netfilter: Add support for per-queue fail-open, Krishna Kumar
  • [v2 PATCH 5/6] netfilter: GSO packet handling, Krishna Kumar
    • Re: [v2 PATCH 5/6] netfilter: GSO packet handling, Pablo Neira Ayuso
      • Re: [v2 PATCH 5/6] netfilter: GSO packet handling, Krishna Kumar2
• [PATCH 00/25] [v2] netfilter updates for net-next (upcoming 3.5), pablo
  • [PATCH 01/25] netfilter: nf_ct_ecache: refactor notifier registration, pablo
  • [PATCH 02/25] netfilter: nf_ct_helper: allow to disable automatic helper assignment, pablo
  • [PATCH 07/25] ipvs: DH scheduler does not need GFP_ATOMIC allocation, pablo
  • [PATCH 08/25] ipvs: WRR scheduler does not need GFP_ATOMIC allocation, pablo
  • [PATCH 11/25] ipvs: use GFP_KERNEL allocation where possible, pablo
  • [PATCH 10/25] ipvs: SH scheduler does not need GFP_ATOMIC allocation, pablo
  • [PATCH 25/25] netfilter: remove ip_queue support, pablo
  • [PATCH 18/25] ipvs: add support for sync threads, pablo
  • [PATCH 19/25] ipvs: optimize the use of flags in ip_vs_bind_dest, pablo
  • [PATCH 24/25] netfilter: nf_conntrack: fix explicit helper attachment and NAT, pablo
  • [PATCH 23/25] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, pablo
  • [PATCH 16/25] ipvs: wakeup master thread, pablo
  • [PATCH 20/25] ipvs: ip_vs_ftp: local functions should not be exposed globally, pablo
  • [PATCH 21/25] ipvs: ip_vs_proto: local functions should not be exposed globally, pablo
  • [PATCH 22/25] net: export sysctl_[r|w]mem_max symbols needed by ip_vs_sync, pablo
  • [PATCH 14/25] ipvs: fix ip_vs_try_bind_dest to rebind app and transmitter, pablo
  • [PATCH 15/25] ipvs: always update some of the flags bits in backup, pablo
  • [PATCH 12/25] ipvs: ignore IP_VS_CONN_F_NOOUTPUT in backup server, pablo
  • [PATCH 17/25] ipvs: reduce sync rate with time thresholds, pablo
  • [PATCH 13/25] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, pablo
  • [PATCH 05/25] ipvs: timeout tables do not need GFP_ATOMIC allocation, pablo
  • [PATCH 06/25] ipvs: LBLC scheduler does not need GFP_ATOMIC allocation on init, pablo
  • [PATCH 04/25] netfilter: bridge: optionally set indev to vlan, pablo
  • [PATCH 04/25] netfilter: bridge: optionally set indev to vlan, pablo
  • [PATCH 03/25] netfilter: nf_conntrack: use this_cpu_inc(), pablo
  • Re: [PATCH 00/25] [v2] netfilter updates for net-next (upcoming 3.5), David Miller
    • Re: [PATCH 00/25] [v2] netfilter updates for net-next (upcoming 3.5), Pablo Neira Ayuso
      • Re: [PATCH 00/25] [v2] netfilter updates for net-next (upcoming 3.5), David Miller
• [PATCH 00/25] netfilter updates for net-next (upcoming 3.5), pablo
  • [PATCH 02/25] netfilter: nf_ct_helper: allow to disable automatic helper assignment, pablo
    • Re: [PATCH 02/25] netfilter: nf_ct_helper: allow to disable automatic helper assignment, David Miller
      • Re: [PATCH 02/25] netfilter: nf_ct_helper: allow to disable automatic helper assignment, Pablo Neira Ayuso
  • [PATCH 11/25] ipvs: use GFP_KERNEL allocation where possible, pablo
  • [PATCH 12/25] ipvs: ignore IP_VS_CONN_F_NOOUTPUT in backup server, pablo
  • [PATCH 15/25] ipvs: always update some of the flags bits in backup, pablo
  • [PATCH 20/25] ipvs: ip_vs_ftp: local functions should not be exposed globally, pablo
  • [PATCH 25/25] netfilter: remove ip_queue support, pablo
  • [PATCH 24/25] netfilter: nf_conntrack: fix explicit helper attachment and NAT, pablo
  • [PATCH 21/25] ipvs: ip_vs_proto: local functions should not be exposed globally, pablo
  • [PATCH 19/25] ipvs: optimize the use of flags in ip_vs_bind_dest, pablo
  • [PATCH 23/25] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, pablo
  • [PATCH 18/25] ipvs: add support for sync threads, pablo
  • [PATCH 22/25] net: export sysctl_[r|w]mem_max symbols needed by ip_vs_sync, pablo
  • [PATCH 14/25] ipvs: fix ip_vs_try_bind_dest to rebind app and transmitter, pablo
  • [PATCH 16/25] ipvs: wakeup master thread, pablo
  • [PATCH 17/25] ipvs: reduce sync rate with time thresholds, pablo
  • [PATCH 13/25] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, pablo
    • Re: [PATCH 13/25] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, David Miller
      • Re: [PATCH 13/25] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, Simon Horman
        • Re: [PATCH 13/25] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, David Miller
          • Re: [PATCH 13/25] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, Simon Horman
            • Re: [PATCH 13/25] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, Pablo Neira Ayuso
      • Re: [PATCH 13/25] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, Jan Engelhardt
        • Re: [PATCH 13/25] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, David Miller
  • [PATCH 10/25] ipvs: SH scheduler does not need GFP_ATOMIC allocation, pablo
  • [PATCH 05/25] ipvs: timeout tables do not need GFP_ATOMIC allocation, pablo
  • [PATCH 08/25] ipvs: WRR scheduler does not need GFP_ATOMIC allocation, pablo
  • [PATCH 09/25] ipvs: LBLCR scheduler does not need GFP_ATOMIC allocation on init, pablo
  • [PATCH 06/25] ipvs: LBLC scheduler does not need GFP_ATOMIC allocation on init, pablo
  • [PATCH 07/25] ipvs: DH scheduler does not need GFP_ATOMIC allocation, pablo
  • [PATCH 03/25] netfilter: nf_conntrack: use this_cpu_inc(), pablo
  • [PATCH 01/25] netfilter: nf_ct_ecache: refactor notifier registration, pablo
  • [PATCH 04/25] netfilter: bridge: optionally set indev to vlan, pablo
• [PATCH next 1/3] netfilter: limit, hashlimit: avoid duplicated inline, Florian Westphal
  • [PATCH next 3/3] netfilter: hashlimit: byte-based limit mode, Florian Westphal
    • Re: [PATCH next 3/3] netfilter: hashlimit: byte-based limit mode, Pablo Neira Ayuso
  • [PATCH next 2/3] netfilter: hashlimit: move rateinfo initialization to helper, Florian Westphal
    • Re: [PATCH next 2/3] netfilter: hashlimit: move rateinfo initialization to helper, Pablo Neira Ayuso
  • Re: [PATCH next 1/3] netfilter: limit, hashlimit: avoid duplicated inline, Pablo Neira Ayuso
• Re[2]: [v12 PATCH 2/3] NETFILTER module xt_hmark, new target for HASH based fwmark, Hans Schillstrom
• [PATCH 0/2] ipset related bugfixes, Jozsef Kadlecsik
  • [PATCH 1/2] netfilter: ipset: Fix timeout value overflow bug, Jozsef Kadlecsik
  • [PATCH 2/2] netfilter: ipset: Fix hash size checking in kernel, Jozsef Kadlecsik
  • Re: [PATCH 0/2] ipset related bugfixes, Pablo Neira Ayuso
• [RFC] [PATCH 0/4] netfilter: "fail-open" feature support for NFQUEUE, Krishna Kumar
  • [RFC] [PATCH 1/4] netfilter: Define FAILOPEN flag, Krishna Kumar
  • [RFC] [PATCH 2/4] netfilter: Add new argument to enqueue handlers, Krishna Kumar
  • [RFC] [PATCH 3/4] netfilter: Add support for failopen in nf_queue(), Krishna Kumar
  • [RFC] [PATCH 4/4] netfilter: Enable fail-open, Krishna Kumar
    • Re: [RFC] [PATCH 4/4] netfilter: Enable fail-open, Florian Westphal
      • Re: [RFC] [PATCH 4/4] netfilter: Enable fail-open, Pablo Neira Ayuso
  • Re: [RFC] [PATCH 0/4] netfilter: "fail-open" feature support for NFQUEUE, Florian Westphal
    • Re: [RFC] [PATCH 0/4] netfilter: "fail-open" feature support for NFQUEUE, Pablo Neira Ayuso
    • Re: [RFC] [PATCH 0/4] netfilter: "fail-open" feature support for NFQUEUE, Krishna Kumar2
      • Re: [RFC] [PATCH 0/4] netfilter: "fail-open" feature support for NFQUEUE, Florian Westphal
• ICMP packet filter policy, Flo Wohlfart
• [PATCH] netfilter: nf_conntrack: fix explicit helper attachment and NAT, pablo
• facing problem with iptables nat rules and traffic flow scnerios, rahul shrivastava
  • Re: facing problem with iptables nat rules and traffic flow scnerios, Andrew Beverley
• [RFC] Patches to allow updates of timeouts in expectations, Kelvie Wong
  • [PATCH] expect: support NFCT_Q_CREATE_UPDATE in nfexp_query, Kelvie Wong
  • [PATCH] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, Kelvie Wong
    • Re: [PATCH] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, Kelvie Wong
        • Re: [PATCH] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, Kelvie Wong
        • Re: [PATCH] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, Kelvie Wong
            • Re: [PATCH] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, Kelvie Wong
              • Re: [PATCH] netfilter: nf_ct_expect: partially implement ctnetlink_change_expect, Pablo Neira Ayuso
• [PATCH net-next] netfilter: remove two dropwatch false positives, Eric Dumazet
  • Re: [PATCH net-next] netfilter: remove two dropwatch false positives, Pablo Neira Ayuso
    • Re: [PATCH net-next] netfilter: remove two dropwatch false positives, Eric Dumazet
• [PATCH] netfilter: Fix error in ipq_enqueue_packet, Krishna Kumar
• [GIT PULL net-next v2] IPVS, Simon Horman
  • [PATCH 04/18] ipvs: WRR scheduler does not need GFP_ATOMIC allocation, Simon Horman
  • [PATCH 03/18] ipvs: DH scheduler does not need GFP_ATOMIC allocation, Simon Horman
  • [PATCH 13/18] ipvs: reduce sync rate with time thresholds, Simon Horman
  • [PATCH 12/18] ipvs: wakeup master thread, Simon Horman
  • [PATCH 14/18] ipvs: add support for sync threads, Simon Horman
  • [PATCH 16/18] IPVS: ip_vs_ftp.c: local functions should not be exposed globally, Simon Horman
  • [PATCH 15/18] ipvs: optimize the use of flags in ip_vs_bind_dest, Simon Horman
  • [PATCH 17/18] IPVS: ip_vs_proto.c: local functions should not be exposed globally, Simon Horman
  • [PATCH 18/18] export sysctl symbols needed by ip_vs_sync, Simon Horman
    • Re: [PATCH 18/18] export sysctl symbols needed by ip_vs_sync, Pablo Neira Ayuso
      • Re: [PATCH 18/18] export sysctl symbols needed by ip_vs_sync, David Miller
  • [PATCH 02/18] ipvs: LBLC scheduler does not need GFP_ATOMIC allocation on init, Simon Horman
  • [PATCH 11/18] ipvs: always update some of the flags bits in backup, Simon Horman
  • [PATCH 09/18] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, Simon Horman
  • [PATCH 10/18] ipvs: fix ip_vs_try_bind_dest to rebind app and transmitter, Simon Horman
  • [PATCH 08/18] ipvs: ignore IP_VS_CONN_F_NOOUTPUT in backup server, Simon Horman
  • [PATCH 07/18] netfilter: ipvs: use GFP_KERNEL allocation where possible, Simon Horman
  • [PATCH 05/18] ipvs: LBLCR scheduler does not need GFP_ATOMIC allocation on init, Simon Horman
  • [PATCH 01/18] ipvs: timeout tables do not need GFP_ATOMIC allocation, Simon Horman
  • [PATCH 06/18] ipvs: SH scheduler does not need GFP_ATOMIC allocation, Simon Horman
  • Re: [GIT PULL net-next v2] IPVS, Pablo Neira Ayuso
• [GIT PULL next-net] IPVS, Simon Horman
  • [PATCH 04/17] ipvs: WRR scheduler does not need GFP_ATOMIC allocation, Simon Horman
  • [PATCH 03/17] ipvs: DH scheduler does not need GFP_ATOMIC allocation, Simon Horman
  • [PATCH 17/17] IPVS: ip_vs_proto.c: local functions should not be exposed globally, Simon Horman
  • [PATCH 14/17] ipvs: add support for sync threads, Simon Horman
  • [PATCH 15/17] ipvs: optimize the use of flags in ip_vs_bind_dest, Simon Horman
  • [PATCH 16/17] IPVS: ip_vs_ftp.c: local functions should not be exposed globally, Simon Horman
  • [PATCH 02/17] ipvs: LBLC scheduler does not need GFP_ATOMIC allocation on init, Simon Horman
  • [PATCH 09/17] ipvs: remove check for IP_VS_CONN_F_SYNC from ip_vs_bind_dest, Simon Horman
  • [PATCH 11/17] ipvs: always update some of the flags bits in backup, Simon Horman
  • [PATCH 12/17] ipvs: wakeup master thread, Simon Horman
  • [PATCH 13/17] ipvs: reduce sync rate with time thresholds, Simon Horman
  • [PATCH 10/17] ipvs: fix ip_vs_try_bind_dest to rebind app and transmitter, Simon Horman
  • [PATCH 06/17] ipvs: SH scheduler does not need GFP_ATOMIC allocation, Simon Horman
  • [PATCH 07/17] netfilter: ipvs: use GFP_KERNEL allocation where possible, Simon Horman
  • [PATCH 01/17] ipvs: timeout tables do not need GFP_ATOMIC allocation, Simon Horman
  • [PATCH 08/17] ipvs: ignore IP_VS_CONN_F_NOOUTPUT in backup server, Simon Horman
  • [PATCH 05/17] ipvs: LBLCR scheduler does not need GFP_ATOMIC allocation on init, Simon Horman
  • Re: [GIT PULL next-net] IPVS, Simon Horman
    • Re: [GIT PULL next-net] IPVS, Simon Horman
• [PATCH 0/8] netfilter updates for 3.4-rc5, pablo
  • [PATCH 2/8] ipvs: fix crash in ip_vs_control_net_cleanup on unload, pablo
  • [PATCH 3/8] ipvs: add check in ftp for initialized core, pablo
  • [PATCH 1/8] ipvs: Verify that IP_VS protocol has been registered, pablo
  • [PATCH 4/8] ipvs: reset ipvs pointer in netns, pablo
  • [PATCH 5/8] ipvs: null check of net->ipvs in lblc(r) shedulers, pablo
  • [PATCH 8/8] netfilter: xt_CT: fix wrong checking in the timeout assignment path, pablo
  • [PATCH 7/8] ipvs: kernel oops - do_ip_vs_get_ctl, pablo
  • [PATCH 6/8] ipvs: take care of return value from protocol init_netns, pablo
  • Re: [PATCH 0/8] netfilter updates for 3.4-rc5, David Miller
• [PATCH 1/1] export sysctl symbols needed by ip_vs_sync, Hans Schillstrom
  • Re: [PATCH 1/1] export sysctl symbols needed by ip_vs_sync, Julian Anastasov
• [PATCH RFC 1/2] netfilter: conntrack: remove RCU usage in conntrack notifier, Benjamin Poirier
  • [PATCH RFC 2/2] netfilter: conntrack: replace mutex with cmpxchg, Benjamin Poirier
    • Re: [PATCH RFC 2/2] netfilter: conntrack: replace mutex with cmpxchg, Pablo Neira Ayuso
  • Re: [PATCH RFC 1/2] netfilter: conntrack: remove RCU usage in conntrack notifier, Eric Dumazet
    • Re: [PATCH RFC 1/2] netfilter: conntrack: remove RCU usage in conntrack notifier, Benjamin Poirier
• [PATCH v2 00/17] netfilter: add namespace support for netfilter protos, Gao feng
  • [PATCH 01/17] netfilter: add struct nf_proto_net for register l4proto sysctl, Gao feng
  • [PATCH 06/17] netfilter: add namespace support for l4proto_udp, Gao feng
  • [PATCH 14/17] netfilter: adjust l4proto_gre4 to the nf_conntrack_l4proto_register, Gao feng
  • [PATCH 12/17] netfilter: add namespace support for l4proto_udplite, Gao feng
  • [PATCH 13/17] netfilter: adjust l4proto_dccp to the nf_conntrack_l4proto_register, Gao feng
  • [PATCH 16/17] netfilter: add namespace support for cttimeout, Gao feng
  • [PATCH 15/17] netfilter: cleanup sysctl for l4proto and l3proto, Gao feng
  • [PATCH 17/17] netfilter: cttimeout use pernet data of l4proto, Gao feng