Linux Netfilter / IP Tables Devel

Date Index

[Prev Page][Next Page]

Re: [HELP] why the string match does not work in nat tables?, (continued)
how to use sk_run_filter() in the kernel?, Roc Bai
xtables-addons: pknock extension crashes the kernel, jp
- Re: xtables-addons: pknock extension crashes the kernel, Jan Engelhardt
[PATCH 1/1] Add IPv6 match debug print code, Thomas Jacob
- Re: [PATCH 1/1] Add IPv6 match debug print code, Patrick McHardy
[PATCH] netfilter: CONNMARK: support save the mark of the master connection, Changli Gao
- Re: [PATCH] netfilter: CONNMARK: support save the mark of the master connection, Patrick McHardy
  - Re: [PATCH] netfilter: CONNMARK: support save the mark of the master connection, Changli Gao
[PATCH 1/2] Typo in IPv4 match debug print code, Thomas Jacob
- [PATCH 2/2] Add IPv6 match debug print code, Thomas Jacob
  - Re: [PATCH 2/2] Add IPv6 match debug print code, Patrick McHardy
- Re: [PATCH 1/2] Typo in IPv4 match debug print code, Patrick McHardy
netfilter: xt_connlimit: pick right dstaddr in NAT scenario, Jan Engelhardt
- Re: netfilter: xt_connlimit: pick right dstaddr in NAT scenario, Patrick McHardy
tips for a starter, Adarsh Joshi
iptables MARK + ip rule fwmark NOT working with load balance, Davi Baldin Tavares
- Re: iptables MARK + ip rule fwmark NOT working with load balance, Eric Dumazet
  - Re: iptables MARK + ip rule fwmark NOT working with load balance, Davi Baldin Tavares
[GIT PULL nf-next-2.6] IPVS changes for 2.6.38-rc3, Simon Horman
- [PATCH 2/2] netfilter: ipvs: fix compiler warnings, Simon Horman
- [PATCH 1/2] IPVS netns BUG, register sysctl for root ns, Simon Horman
- Re: [GIT PULL nf-next-2.6] IPVS changes for 2.6.38-rc3, Patrick McHardy
  - Re: [GIT PULL nf-next-2.6] IPVS changes for 2.6.38-rc3, Simon Horman
    - Re: [GIT PULL nf-next-2.6] IPVS changes for 2.6.38-rc3, Patrick McHardy
Filter input traffic by uid, Glauco Junquera
- Re: Filter input traffic by uid, Patrick McHardy
  - Re: Filter input traffic by uid, Glauco Junquera
Module/Extension Tutorial, Srinivasa T N
- Re: Module/Extension Tutorial, Jan Engelhardt
[PATCH] [patch v2] IPVS: Remove unused pr_fmt #define, Simon Horman
[PATCH] IPVS: Remove unused pr_fmt #define, Simon Horman
- Re: [PATCH] IPVS: Remove unused pr_fmt #define, David Miller
  - Re: [PATCH] IPVS: Remove unused pr_fmt #define, Simon Horman
[patch 0/6] Ipset patches, Holger Eitzenberger
- [patch 1/6] ipset: turn Set name[] into a const pointer, Holger Eitzenberger
  - Re: [patch 1/6] ipset: turn Set name[] into a const pointer, Jozsef Kadlecsik
- [patch 2/6] ipset: fix the Netlink sequence number, Holger Eitzenberger
  - Re: [patch 2/6] ipset: fix the Netlink sequence number, Jozsef Kadlecsik
- [patch 4/6] ipset: avoid the unnecessary argv[] loop, Holger Eitzenberger
- [patch 3/6] ipset: pass ipset_arg argument pointer, Holger Eitzenberger
  - Re: [patch 3/6] ipset: pass ipset_arg argument pointer, Jozsef Kadlecsik
    - Re: [patch 3/6] ipset: pass ipset_arg argument pointer, Jozsef Kadlecsik
      - Re: [patch 3/6] ipset: pass ipset_arg argument pointer, Jozsef Kadlecsik
- [patch 5/6] ipset: improve command argument parsing, Holger Eitzenberger
- [patch 6/6] ipset: fix spelling error, Holger Eitzenberger
  - Re: [patch 6/6] ipset: fix spelling error, Jozsef Kadlecsik
  - Re: [patch 6/6] ipset: fix spelling error, Ferenc Wagner
    - Re: [patch 6/6] ipset: fix spelling error, Jozsef Kadlecsik
- <Possible follow-ups>
- [PATCH 0/6] ipset patches, Jozsef Kadlecsik
  - [PATCH 1/6] netfilter: ipset: Autoload set type modules safely, Jozsef Kadlecsik
    - Re: [PATCH 1/6] netfilter: ipset: Autoload set type modules safely, Patrick McHardy
  - [PATCH 2/6] netfilter: ipset: Dumping error could lead to kernel BUG, Jozsef Kadlecsik
    - Re: [PATCH 2/6] netfilter: ipset: Dumping error could lead to kernel BUG, Patrick McHardy
  - [PATCH 4/6] netfilter: ipset: avoid use of kernel-only types, Jozsef Kadlecsik
    - Re: [PATCH 4/6] netfilter: ipset: avoid use of kernel-only types, Patrick McHardy
  - [PATCH 6/6] netfilter: ipset: use NFPROTO_ constants, Jozsef Kadlecsik
    - Re: [PATCH 6/6] netfilter: ipset: use NFPROTO_ constants, Patrick McHardy
  - [PATCH 5/6] netfilter: ipset: expose userspace-relevant parts in ip_set.h, Jozsef Kadlecsik
    - Re: [PATCH 5/6] netfilter: ipset: expose userspace-relevant parts in ip_set.h, Patrick McHardy
  - [PATCH 3/6] netfilter: ipset: Remove unnecessary OOM logging messages, Jozsef Kadlecsik
    - Re: [PATCH 3/6] netfilter: ipset: Remove unnecessary OOM logging messages, Patrick McHardy
  - Re: [PATCH 0/6] ipset patches, Pablo Neira Ayuso
    - Re: [PATCH 0/6] ipset patches, Jozsef Kadlecsik
      - Re: [PATCH 0/6] ipset patches, Patrick McHardy
ebtables_nfqueue: missing structure afinfo, Pierre Chifflier
- Re: ebtables_nfqueue: missing structure afinfo, Patrick McHardy
  - Re: ebtables_nfqueue: missing structure afinfo, Pierre Chifflier
    - Re: ebtables_nfqueue: missing structure afinfo, Patrick McHardy
      - [PATCH 1/3] Make the afinfo structure optional in nf_queue and nf_reinject, Pierre Chifflier
        
        Re: [PATCH 1/3] Make the afinfo structure optional in nf_queue and nf_reinject, Patrick McHardy
        
        Re: [PATCH 1/3] Make the afinfo structure optional in nf_queue and nf_reinject, Pierre Chifflier
      - [PATCH 3/3] bridge: add new target NFQUEUE for ebtables, Pierre Chifflier
        
        Re: [PATCH 3/3] bridge: add new target NFQUEUE for ebtables, Patrick McHardy
        
        Re: [PATCH 3/3] bridge: add new target NFQUEUE for ebtables, Pierre Chifflier
        
        Re: [PATCH 3/3] bridge: add new target NFQUEUE for ebtables, Patrick McHardy
        
        Message not available
        
        Message not available
        
        Re: [RFH] bridge: add new target NFQUEUE for ebtables, Pierre Chifflier
        
        Re: [RFH] bridge: add new target NFQUEUE for ebtables, Patrick McHardy
        
        Re: [RFH] bridge: add new target NFQUEUE for ebtables, Pierre Chifflier
        
        Re: [RFH] bridge: add new target NFQUEUE for ebtables, Patrick McHardy
      - [PATCH 2/3] bridge: add support for the EBT_QUEUE target, Pierre Chifflier
      - WIP/RFC: add new module ebt_NFQUEUE for ebtables, Pierre Chifflier
        
        Re: WIP/RFC: add new module ebt_NFQUEUE for ebtables, Bart De Schuymer
        
        Re: WIP/RFC: add new module ebt_NFQUEUE for ebtables, Pierre Chifflier
        
        Re: WIP/RFC: add new module ebt_NFQUEUE for ebtables, Patrick McHardy
        
        Re: WIP/RFC: add new module ebt_NFQUEUE for ebtables, Pierre Chifflier
        
        Re: WIP/RFC: add new module ebt_NFQUEUE for ebtables, Patrick McHardy
[PATCH 1/1] IPVS netns BUG, register sysctl for root ns, Hans Schillstrom
- Re: [PATCH 1/1] IPVS netns BUG, register sysctl for root ns, Simon Horman
Incorrect xt_iprange boundary check for IPv6 (Variant 3), Thomas Jacob
- [PATCH] Incorrect xt_iprange boundary check for IPv6 (V3), Thomas Jacob
Incorrect xt_iprange boundary check for IPv6 (Variant 2), Thomas Jacob
- [PATCH] Incorrect xt_iprange boundary check for IPv6, Thomas Jacob
  - Re: [PATCH] Incorrect xt_iprange boundary check for IPv6, Patrick McHardy
[PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Pablo Neira Ayuso
- Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Eric Dumazet
  - Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Eric Dumazet
  - Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Pablo Neira Ayuso
    - Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Patrick McHardy
      - Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Eric Dumazet
        
        Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Pablo Neira Ayuso
        
        Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Eric Dumazet
        
        Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Pablo Neira Ayuso
        
        Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Patrick McHardy
        
        Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Eric Dumazet
        
        Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Patrick McHardy
        
        Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Eric Dumazet
        
        Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Patrick McHardy
- Re: [PATCH] netfilter: ctnetlink: fix (really) race condition between dump_table and destroy, Stephen Hemminger
  - [PATCH 1/2] netfilter: fix race in conntrack between dump_table and destroy, Stephen Hemminger
  - [PATCH 2/2] netfilter: ctnetlink: fix missing refcount increment during dumps, Stephen Hemminger
netfilter: marking IPv6 packets sends them to the wrong interface, Mario 'BitKoenig' Holbe
- Re: netfilter: marking IPv6 packets sends them to the wrong interface, Patrick McHardy
  - Re: netfilter: marking IPv6 packets sends them to the wrong interface, Mario 'BitKoenig' Holbe
    - Re: netfilter: marking IPv6 packets sends them to the wrong interface, Patrick McHardy
      - Re: netfilter: marking IPv6 packets sends them to the wrong interface, Mario 'BitKoenig' Holbe
        
        Re: netfilter: marking IPv6 packets sends them to the wrong interface, Patrick McHardy
Incorrect xt_iprange boundary check for IPv6, Thomas Jacob
- [PATCH] Incorrect xt_iprange boundary check for IPv6, Thomas Jacob
  - Re: [PATCH] Incorrect xt_iprange boundary check for IPv6, Jan Engelhardt
  - Re: [PATCH] Incorrect xt_iprange boundary check for IPv6, Jozsef Kadlecsik
    - Re: [PATCH] Incorrect xt_iprange boundary check for IPv6, Thomas Jacob
      - Re: [PATCH] Incorrect xt_iprange boundary check for IPv6, Jan Engelhardt
[GIT PULL nf-next-2.6] IPVS updates for v2.6.38-rc1, Simon Horman
- [PATCH 1/2] netfilter: ipvs: fix compiler warnings, Simon Horman
- [PATCH 2/2] IPVS: Change sock_create_kernel() to __sock_create(), Simon Horman
- Re: [GIT PULL nf-next-2.6] IPVS updates for v2.6.38-rc1, Patrick McHardy
[ANNOUNCE] ipset 5.4 released, Jozsef Kadlecsik
- Re: [ANNOUNCE] ipset 5.4 released, Jozsef Kadlecsik
ipt_ACCOUNT 1.16 released, Thomas Jarosch
[PATCH 00/13] ipset kernel patches v2, Jozsef Kadlecsik
- [PATCH 01/13] NFNL_SUBSYS_IPSET id and NLA_PUT_NET* macros, Jozsef Kadlecsik
  - [PATCH 02/13] IP set core support, Jozsef Kadlecsik
    - [PATCH 03/13] bitmap:ip set type support, Jozsef Kadlecsik
      - [PATCH 04/13] bitmap:ip,mac type support, Jozsef Kadlecsik
        
        [PATCH 05/13] bitmap:port set type support, Jozsef Kadlecsik
        
        [PATCH 06/13] hash:ip set type support, Jozsef Kadlecsik
        
        [PATCH 07/13] hash:ip,port set type support, Jozsef Kadlecsik
        
        [PATCH 08/13] hash:ip,port,ip set type support, Jozsef Kadlecsik
        
        [PATCH 09/13] hash:ip,port,net set type support, Jozsef Kadlecsik
        
        [PATCH 10/13] hash:net set type support, Jozsef Kadlecsik
        
        [PATCH 11/13] hash:net,port set type support, Jozsef Kadlecsik
        
        [PATCH 12/13] list:set set type support, Jozsef Kadlecsik
        
        [PATCH 13/13] "set" match and "SET" target support, Jozsef Kadlecsik
        
        Re: [PATCH 13/13] "set" match and "SET" target support, Patrick McHardy
        
        Re: [PATCH 13/13] "set" match and "SET" target support, Jozsef Kadlecsik
      - Re: [PATCH 03/13] bitmap:ip set type support, Patrick McHardy
        
        Re: [PATCH 03/13] bitmap:ip set type support, Jozsef Kadlecsik
        
        Re: [PATCH 03/13] bitmap:ip set type support, Jozsef Kadlecsik
        
        Re: [PATCH 03/13] bitmap:ip set type support, Patrick McHardy
    - Re: [PATCH 02/13] IP set core support, Jozsef Kadlecsik
      - Re: [PATCH 02/13] IP set core support, Patrick McHardy
        
        Re: [PATCH 02/13] IP set core support, Jozsef Kadlecsik
        
        Re: [PATCH 02/13] IP set core support, Patrick McHardy
        
        Re: [PATCH 02/13] IP set core support, Patrick McHardy
    - Re: [PATCH 02/13] IP set core support, Patrick McHardy
      - Re: [PATCH 02/13] IP set core support, Jozsef Kadlecsik
        
        Re: [PATCH 02/13] IP set core support, Jozsef Kadlecsik
- Re: [PATCH 00/13] ipset kernel patches v2, Patrick McHardy
  - Re: [PATCH 00/13] ipset kernel patches v2, Jozsef Kadlecsik
[PATCH] netfilter: ipvs: fix compiler warnings, Changli Gao
- Re: [PATCH] netfilter: ipvs: fix compiler warnings, Patrick McHardy
- Re: [PATCH] netfilter: ipvs: fix compiler warnings, Simon Horman
  - Re: [PATCH] netfilter: ipvs: fix compiler warnings, Changli Gao
    - Re: [PATCH] netfilter: ipvs: fix compiler warnings, Simon Horman
      - Re: [PATCH] netfilter: ipvs: fix compiler warnings, Simon Horman
- <Possible follow-ups>
- [PATCH] netfilter: ipvs: fix compiler warnings, Changli Gao
  - Re: [PATCH] netfilter: ipvs: fix compiler warnings, Simon Horman
    - Re: [PATCH] netfilter: ipvs: fix compiler warnings, Patrick McHardy
      - Re: [PATCH] netfilter: ipvs: fix compiler warnings, Simon Horman
        
        Re: [PATCH] netfilter: ipvs: fix compiler warnings, Simon Horman
        
        Re: [PATCH] netfilter: ipvs: fix compiler warnings, Julian Anastasov
        
        Re: [PATCH] netfilter: ipvs: fix compiler warnings, Patrick McHardy
  - Re: [PATCH] netfilter: ipvs: fix compiler warnings, Hans Schillstrom
[PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Richard Weinberger
- [PATCH 1/3] netfilter: add ruleid extension, Richard Weinberger
  - [PATCH 2/3] netfilter: add APPROVE target, Richard Weinberger
    - [PATCH 3/3] netfilter: implement ctnetlink_dump_ruleid(), Richard Weinberger
      - [PATCH] iptables: Add APPROVE target, Richard Weinberger
        
        [PATCH] conntrack: Implement ruleid support, Richard Weinberger
    - Re: [PATCH 2/3] netfilter: add APPROVE target, Jan Engelhardt
      - Re: [PATCH 2/3] netfilter: add APPROVE target, Richard Weinberger
        
        Re: [PATCH 2/3] netfilter: add APPROVE target, Jan Engelhardt
        
        Re: [PATCH 2/3] netfilter: add APPROVE target, Richard Weinberger
- Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Jan Engelhardt
  - Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Richard Weinberger
    - Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Pablo Neira Ayuso
      - Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Richard Weinberger
        
        Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Pablo Neira Ayuso
        
        Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Richard Weinberger
        
        Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Pablo Neira Ayuso
        
        Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Richard Weinberger
        
        Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Pablo Neira Ayuso
        
        Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Richard Weinberger
        
        Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Pablo Neira Ayuso
        
        Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Richard Weinberger
        
        Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Mr Dash Four
- Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Mr Dash Four
  - Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Richard Weinberger
    - Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Mr Dash Four
      - secctx support for conntrack-tools [was Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules], Pablo Neira Ayuso
  - Re: [PATCH 0/3][RFC] Relationship between conntrack and firewall rules, Pablo Neira Ayuso
[PATCH 0/7] netfilter: netfilter fixes for net-next, kaber
- [PATCH 1/7] netfilter: xtables: connlimit revision 1, kaber
- [PATCH 2/7] netfilter: do not omit re-route check on NF_QUEUE verdict, kaber
- [PATCH 3/7] netfilter: xtables: remove duplicate member, kaber
- [PATCH 4/7] netfilter: nf_nat: place conntrack in source hash after SNAT is done, kaber
- [PATCH 5/7] netfilter: xtables: add missing header inclusions for headers_check, kaber
- [PATCH 6/7] netfilter: nf_conntrack: fix linker error with NF_CONNTRACK_TIMESTAMP=n, kaber
- [PATCH 7/7] netfilter: add a missing include in nf_conntrack_reasm.c, kaber
- Re: [PATCH 0/7] netfilter: netfilter fixes for net-next, David Miller
[PATCH] netfilter: undefined reference to 'nf_conntrack_tstamp_*', John Fastabend
- Re: [PATCH] netfilter: undefined reference to 'nf_conntrack_tstamp_*', Patrick McHardy
  - Re: [PATCH] netfilter: undefined reference to 'nf_conntrack_tstamp_*', John Fastabend
    - Re: [PATCH] netfilter: undefined reference to 'nf_conntrack_tstamp_*', Patrick McHardy
[PATCH] netfilter: add a missing include in nf_conntrack_reasm.c, Eric Dumazet
- Re: [PATCH] netfilter: add a missing include in nf_conntrack_reasm.c, Patrick McHardy
  - Re: [PATCH] netfilter: add a missing include in nf_conntrack_reasm.c, Eric Dumazet
    - Re: [PATCH] netfilter: add a missing include in nf_conntrack_reasm.c, Patrick McHardy
Re: netfilter: xtables: use __uXX guarded types for userspace exports, Jan Engelhardt
- [PATCH] netfilter: xtables: add missing header inclusions for headers_check, Jan Engelhardt
- Re: netfilter: xtables: use __uXX guarded types for userspace exports, Patrick McHardy
iptables: connlimit rev1 addendum, Jan Engelhardt
- [PATCH] libxt_connlimit: remove duplicate member that caused size change, Jan Engelhardt
- Re: iptables: connlimit rev1 addendum, Patrick McHardy
xtables: connlimit rev1 addendum, Jan Engelhardt
- [PATCH] netfilter: xtables: remove duplicate member, Jan Engelhardt
- Re: xtables: connlimit rev1 addendum, Patrick McHardy
[PATCH 00/80] netfilter: netfilter update, kaber
- [PATCH] netfilter: xtables: remove extraneous header that slipped in, kaber
- Re: [PATCH 00/80] netfilter: netfilter update, David Miller
[patch 0/2] Ipset patches, holger
- [patch 2/2] ipset: remove unneeded argvloop, holger
- [patch 1/2] ipset: remove the unneeded argvloop, holger
- Re: [patch 0/2] Ipset patches, Jozsef Kadlecsik
- <Possible follow-ups>
- [PATCH 0/2] ipset patches, Jozsef Kadlecsik
  - [PATCH 2/2] netfilter: ipset: "Directory not empty" error message, Jozsef Kadlecsik
  - [PATCH 1/2] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
  - Re: [PATCH 0/2] ipset patches, Pablo Neira Ayuso
[PATCH 00/79] netfilter: netfilter update, kaber
- [PATCH 03/79] netfilter: xt_LOG: do print MAC header on FORWARD, kaber
- [PATCH 25/79] IPVS: Split ports[2] into src_port and dst_port, kaber
- [PATCH 64/79] netfilter: xtables: add missing aliases for autoloading via iptables, kaber
- [PATCH 75/79] netfilter: allow NFQUEUE bypass if no listener is available, kaber
- [PATCH 76/79] netfilter: ipt_CLUSTERIP: remove "no conntrack!", kaber
- [PATCH 77/79] netfilter: nf_conntrack: nf_conntrack snmp helper, kaber
- [PATCH 72/79] netfilter: nfnetlink_queue: return error number to caller, kaber
- [PATCH 74/79] netfilter: reduce NF_VERDICT_MASK to 0xff, kaber
- [PATCH 66/79] netfilter: xt_connlimit: use hotdrop jump mark, kaber
- [PATCH 73/79] netfilter: nfnetlink_queue: do not free skb on error, kaber
- [PATCH 79/79] netfilter: nf_conntrack: fix lifetime display for disabled connections, kaber
- [PATCH 78/79] netfilter: nf_conntrack_tstamp: add flow-based timestamp extension, kaber
- [PATCH 71/79] netfilter: Kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUE, kaber
- [PATCH 69/79] netfilter: nf_nat: fix conversion to non-atomic bit ops, kaber
- [PATCH 70/79] netfilter: nf_conntrack: remove an atomic bit operation, kaber
- [PATCH 68/79] netfilter: xtables: add missing header files to export list, kaber
- [PATCH 67/79] netfilter: xtables: use __uXX guarded types for userspace exports, kaber
- [PATCH 63/79] netfilter: create audit records for x_tables replaces, kaber
- [PATCH 65/79] audit: export symbol for use with xt_AUDIT, kaber
- [PATCH 60/79] netfilter: fix Kconfig dependencies, kaber
- [PATCH 48/79] IPVS: netns, ip_vs_stats and its procfs, kaber
- [PATCH 47/79] IPVS: netns awareness to ip_vs_sync, kaber
- [PATCH 61/79] netfilter: nf_conntrack: use is_vmalloc_addr(), kaber
- [PATCH 62/79] netfilter: audit target to record accepted/dropped packets, kaber
- [PATCH 45/79] IPVS: netns awareness to ip_vs_app, kaber
- [PATCH 59/79] netfilter: ebt_ip6: allow matching on ipv6-icmp types/codes, kaber
- [PATCH 57/79] netfilter: xt_conntrack: support matching on port ranges, kaber
- [PATCH 58/79] netfilter: x_table: speedup compat operations, kaber
- [PATCH 46/79] IPVS: netns awareness to ip_vs_est, kaber
- [PATCH 56/79] netfilter: xt_comment: drop unneeded unsigned qualifier, kaber
- [PATCH 55/79] IPVS: netns, final patch enabling network name space., kaber
- [PATCH 53/79] IPVS: netns, svc counters moved in ip_vs_ctl,c, kaber
- [PATCH 52/79] IPVS: netns, trash handling, kaber
- [PATCH 54/79] IPVS: netns, misc init_net removal in core., kaber
- [PATCH 51/79] IPVS: netns, defense work timer., kaber
- [PATCH 44/79] IPVS: netns, common protocol changes and use of appcnt., kaber
- [PATCH 49/79] IPVS: netns, connection hash got net as param., kaber
- [PATCH 50/79] IPVS: netns, ip_vs_ctl local vars moved to ipvs struct., kaber
- [PATCH 43/79] IPVS: netns, use ip_vs_proto_data as param., kaber
- [PATCH 29/79] IPVS: Backup, Adding Version 1 receive capability, kaber
- [PATCH 30/79] IPVS: Backup, Change sending to Version 1 format, kaber
- [PATCH 42/79] IPVS: netns preparation for proto_ah_esp, kaber
- [PATCH 31/79] IPVS: Backup, adding version 0 sending capabilities, kaber
- [PATCH 41/79] IPVS: netns preparation for proto_sctp, kaber
- [PATCH 38/79] IPVS: netns, prepare protocol, kaber
- [PATCH 40/79] IPVS: netns preparation for proto_udp, kaber
- [PATCH 39/79] IPVS: netns preparation for proto_tcp, kaber
- [PATCH 32/79] netfilter: xtables: use guarded types, kaber
- [PATCH 37/79] IPVS: netns awarness to lblc sheduler, kaber
- [PATCH 36/79] IPVS: netns awarness to lblcr sheduler, kaber
- [PATCH 34/79] IPVS: netns, add basic init per netns., kaber
- [PATCH 35/79] IPVS: netns to services part 1, kaber
- [PATCH 33/79] netfilter: fix compilation when conntrack is disabled but tproxy is enabled, kaber
- [PATCH 26/79] IPVS: skb defrag in L7 helpers, kaber
- [PATCH 19/79] IPVS: buffer argument to ip_vs_process_message() should not be const, kaber
- [PATCH 28/79] IPVS: Backup, Adding structs for new sync format, kaber
- [PATCH 27/79] IPVS: Handle Scheduling errors., kaber
- [PATCH 23/79] netfilter: nf_conntrack: one less atomic op in nf_ct_expect_insert(), kaber
- [PATCH 24/79] IPVS: Backup, Prepare for transferring firewall marks (fwmark) to the backup daemon., kaber
- [PATCH 22/79] ipvs: allow transmit of GRO aggregated skbs, kaber
- [PATCH 21/79] ipvs: remove shadow rt variable, kaber
- [PATCH 18/79] IPVS: Remove useless { } block from ip_vs_process_message(), kaber
  - Re: [PATCH 18/79] IPVS: Remove useless { } block from ip_vs_process_message(), Joe Perches
    - Re: [PATCH 18/79] IPVS: Remove useless { } block from ip_vs_process_message(), Simon Horman
      - Re: [PATCH 18/79] IPVS: Remove useless { } block from ip_vs_process_message(), Simon Horman
- [PATCH 14/79] netfilter: rcu sparse cleanups, kaber
- [PATCH 15/79] IPVS: Add persistence engine to connection entry, kaber
- [PATCH 20/79] ipvs: add static and read_mostly attributes, kaber
- [PATCH 16/79] IPVS: Only match pe_data created by the same pe, kaber
- [PATCH 17/79] IPVS: Make the cp argument to ip_vs_sync_conn() static, kaber
- [PATCH 01/79] netfilter: nf_conntrack: don't always initialize ct->proto, kaber
- [PATCH 09/79] netfilter: xt_CLASSIFY: add ARP support, allow CLASSIFY target on any table, kaber
- [PATCH 10/79] netfilter: add __rcu annotations, kaber
- [PATCH 11/79] netfilter: nf_ct_frag6_sysctl_table is static, kaber
- [PATCH 12/79] netfilter: add __rcu annotations, kaber
- [PATCH 13/79] netfilter: nf_nat_amanda: rename a variable, kaber
- [PATCH 08/79] netfilter: nf_nat: define nat_pptp_info as needed, kaber
- [PATCH 06/79] netfilter: nf_nat: don't use atomic bit operation, kaber
- [PATCH 07/79] netfilter: ct_extend: define NF_CT_EXT_* as needed, kaber
- [PATCH 05/79] netfilter: nf_conntrack: define ct_*_info as needed, kaber
- [PATCH 02/79] netfilter: xt_NFQUEUE: remove modulo operations, kaber
- [PATCH 04/79] netfilter: ct_extend: fix the wrong alloc_size, kaber
- Re: [PATCH 00/79] netfilter: netfilter update, David Miller
  - Re: [PATCH 00/79] netfilter: netfilter update, David Miller
    - Re: [PATCH 00/79] netfilter: netfilter update, Jan Engelhardt
    - Re: [PATCH 00/79] netfilter: netfilter update, Patrick McHardy
      - Re: [PATCH 00/79] netfilter: netfilter update, Jan Engelhardt
        
        Re: [PATCH 00/79] netfilter: netfilter update, Patrick McHardy
netfilter: nf_conntrack: fix lifetime display for disabled connections, Patrick McHardy
- Re: netfilter: nf_conntrack: fix lifetime display for disabled connections, Pablo Neira Ayuso
iptables: connlimit dstaddr support, Jan Engelhardt
- [PATCH 1/3] libxt_connlimit: reword help text to say prefix length, Jan Engelhardt
- [PATCH 2/3] libxt_connlimit: add a --connlimit-upto option, Jan Engelhardt
- [PATCH 3/3] libxt_connlimit: support for dstaddr-supporting revision 1, Jan Engelhardt
- Re: iptables: connlimit dstaddr support, Patrick McHardy
xtables: connlimit with dstaddr support, Jan Engelhardt
- [PATCH] netfilter: xtables: connlimit revision 1, Jan Engelhardt
- Re: xtables: connlimit with dstaddr support, Patrick McHardy
net-next-2.6 open for business..., David Miller
[ANNOUNCE] ipset 5.3 released, Jozsef Kadlecsik
[0/5] xtables: phase out case sensitivity, Jan Engelhardt
- [1/5] netfilter: xtables: avoid case-sensitive filenames (1/5), Jan Engelhardt
- [2/5] netfilter: xtables: case-sensitivity avoidance (2/5), Jan Engelhardt
- [3/5] netfilter: xtables: case-sensitivity avoidance (3/5), Jan Engelhardt
- [4/5] netfilter: xtables: case-sensitivity avoidance (4/5), Jan Engelhardt
- [5/5] netfilter: xtables: case-sensitivity avoidance (5/5), Jan Engelhardt
- Re: [0/5] xtables: phase out case sensitivity, Patrick McHardy
  - Re: [0/5] xtables: phase out case sensitivity, Sam Roberts
  - Re: [0/5] xtables: phase out case sensitivity, Jan Engelhardt
    - Re: [0/5] xtables: phase out case sensitivity, Eric Dumazet
      - Re: [0/5] xtables: phase out case sensitivity, Jan Engelhardt
    - Re: [0/5] xtables: phase out case sensitivity, Patrick McHardy
      - Re: [0/5] xtables: phase out case sensitivity, Jan Engelhardt
        
        Re: [0/5] xtables: phase out case sensitivity, Patrick McHardy
netfilter: audit fix, headers,, Jan Engelhardt
- [PATCH 1/5] netfilter: xtables: add missing aliases for autoloading via iptables, Jan Engelhardt
- [PATCH 2/5] audit: export symbol for use with xt_AUDIT, Jan Engelhardt
  - Re: [PATCH 2/5] audit: export symbol for use with xt_AUDIT, Eric Dumazet
- [PATCH 3/5] netfilter: xt_connlimit: use hotdrop jump mark, Jan Engelhardt
- [PATCH 4/5] netfilter: xtables: use __uXX guarded types for userspace exports, Jan Engelhardt
  - Re: [PATCH 4/5] netfilter: xtables: use __uXX guarded types for userspace exports, Patrick McHardy
- [PATCH 5/5] netfilter: xtables: add missing header files to export list, Jan Engelhardt
- Re: netfilter: audit fix, headers,, Patrick McHardy
[patch 0/4] Ipset fixes, holger
- [patch 1/4] ipset: show correct line numbers in restore output, holger
  - Re: [patch 1/4] ipset: show correct line numbers in restore output, Jozsef Kadlecsik
- [patch 4/4] ipset: fix build with NDEBUG defined, holger
  - Re: [patch 4/4] ipset: fix build with NDEBUG defined, Jozsef Kadlecsik
- [patch 2/4] ipset: make IPv4 and IPv6 address handling similar, holger
  - Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar, Jozsef Kadlecsik
    - Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar, Jan Engelhardt
      - Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar, Jozsef Kadlecsik
        
        Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar, Jan Engelhardt
        
        Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar, Jozsef Kadlecsik
        
        Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar, Holger Eitzenberger
        
        Re: [patch 2/4] ipset: make IPv4 and IPv6 address handling similar, Mr Dash Four
- [patch 3/4] ipset: do session initialization once, holger
  - Re: [patch 3/4] ipset: do session initialization once, Jozsef Kadlecsik
[PATCH] Use hotdrop jump mark., Richard Weinberger
- Re: [PATCH] Use hotdrop jump mark., Jan Engelhardt
[PATCH] libxt_AUDIT: add AUDIT target, Thomas Graf
- Re: [PATCH] libxt_AUDIT: add AUDIT target, Patrick McHardy
Re: iptables --string-replace, Jan Engelhardt
[PATCH] NFQUEUE: add v2 revision with --queue-bypass option, Florian Westphal
- Re: [PATCH] NFQUEUE: add v2 revision with --queue-bypass option, Patrick McHardy
[PATCH v2] NFQUEUE v2 target with 'queue bypass' support, Florian Westphal
- [PATCH 1/6] netfilter: kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUE, Florian Westphal
  - Re: [PATCH 1/6] netfilter: kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUE, Patrick McHardy
- [PATCH 2/6] netfilter: nfnetlink_queue: return error number to caller, Florian Westphal
  - Re: [PATCH 2/6] netfilter: nfnetlink_queue: return error number to caller, Patrick McHardy
- [PATCH 3/6] netfilter: nfnetlink_queue: do not free skb on error, Florian Westphal
  - Re: [PATCH 3/6] netfilter: nfnetlink_queue: do not free skb on error, Patrick McHardy
- [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff, Florian Westphal
  - Re: [PATCH 4/6] netfilter: reduce NF_VERDICT_MASK to 0xff, Patrick McHardy
- [PATCH 5/6] netfilter: allow NFQUEUE bypass if no listener is available, Florian Westphal
  - Re: [PATCH 5/6] netfilter: allow NFQUEUE bypass if no listener is available, Patrick McHardy
- [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict, Florian Westphal
  - Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict, Patrick McHardy
    - Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict, Florian Westphal
    - Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict, Florian Westphal
      - Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict, Patrick McHardy
  - Re: [PATCH 6/6] netfilter: do not omit re-route check on NF_QUEUE verdict, Patrick McHardy
[PATCH resend] netfilter: place in source hash after SNAT is done, Changli Gao
- [PATCH resend] netfilter: make rcu read section smaller, Changli Gao
- Re: [PATCH resend] netfilter: place in source hash after SNAT is done, Patrick McHardy
  - Re: [PATCH resend] netfilter: place in source hash after SNAT is done, Changli Gao
    - Re: [PATCH resend] netfilter: place in source hash after SNAT is done, Patrick McHardy
[PATCH v2 resend] netfilter: remove an atomic bit operation, Changli Gao
- Re: [PATCH v2 resend] netfilter: remove an atomic bit operation, Patrick McHardy
[PATCH resend] netfilter: change IPS_*_BIT to IPS_*, Changli Gao
- Re: [PATCH resend] netfilter: change IPS_*_BIT to IPS_*, Patrick McHardy
[PATCH 00/12] ipset kernel patches, Jozsef Kadlecsik
- [PATCH 01/12] IP set core support, Jozsef Kadlecsik
  - [PATCH 02/12] bitmap:ip set type support, Jozsef Kadlecsik
    - [PATCH 03/12] bitmap:ip,mac type support, Jozsef Kadlecsik
      - [PATCH 04/12] bitmap:port set type support, Jozsef Kadlecsik
        
        [PATCH 05/12] hash:ip set type support, Jozsef Kadlecsik
        
        [PATCH 06/12] hash:ip,port set type support, Jozsef Kadlecsik
        
        [PATCH 07/12] hash:ip,port,ip set type support, Jozsef Kadlecsik
        
        [PATCH 08/12] hash:ip,port,net set type support, Jozsef Kadlecsik
        
        [PATCH 09/12] hash:net set type support, Jozsef Kadlecsik
        
        [PATCH 10/12] hash:net,port set type support, Jozsef Kadlecsik
        
        [PATCH 11/12] list:set set type support, Jozsef Kadlecsik
        
        [PATCH 12/12] "set" match and "SET" target support, Jozsef Kadlecsik
  - Re: [PATCH 01/12] IP set core support, Patrick McHardy
    - Re: [PATCH 01/12] IP set core support, Jozsef Kadlecsik
      - Re: [PATCH 01/12] IP set core support, Patrick McHardy
        
        Re: [PATCH 01/12] IP set core support, Jozsef Kadlecsik
  - Re: [PATCH 01/12] IP set core support, Eric Dumazet
    - Re: [PATCH 01/12] IP set core support, Jozsef Kadlecsik
- Re: [PATCH 00/12] ipset kernel patches, Patrick McHardy
[PATCH] netfilter: create audit records for x_tables replaces, Thomas Graf
- Re: [PATCH] netfilter: create audit records for x_tables replaces, Patrick McHardy
netfilter: add a typedef for the recurring okfn use, Jan Engelhardt
- Re: netfilter: add a typedef for the recurring okfn use, Pablo Neira Ayuso
  - Re: netfilter: add a typedef for the recurring okfn use, Patrick McHardy
    - Re: netfilter: add a typedef for the recurring okfn use, Eric Dumazet
[RFC,PATCH] netfilter: SNMP conntrack module, Jiri Olsa
- Re: [RFC,PATCH] netfilter: SNMP conntrack module, Jan Engelhardt
- Re: [RFC,PATCH] netfilter: SNMP conntrack module, Patrick McHardy
  - [PATCH] netfilter: nf_conntrack snmp helper, Jiri Olsa
    - Re: [PATCH] netfilter: nf_conntrack snmp helper, Patrick McHardy
      - [PATCHv2] netfilter: nf_conntrack snmp helper, Jiri Olsa
        
        Re: [PATCHv2] netfilter: nf_conntrack snmp helper, Patrick McHardy
        
        Re: [PATCHv2] netfilter: nf_conntrack snmp helper, Jiri Olsa
[PATCH] netfilter: audit target to record accepted/dropped packets, Thomas Graf
- Re: [PATCH] netfilter: audit target to record accepted/dropped packets, Eric Paris
- Re: [PATCH] netfilter: audit target to record accepted/dropped packets, Jan Engelhardt
  - Re: [PATCH] netfilter: audit target to record accepted/dropped packets, Thomas Graf
- Re: [PATCH] netfilter: audit target to record accepted/dropped packets, Patrick McHardy
  - Re: [PATCH] netfilter: audit target to record accepted/dropped packets, Thomas Graf
    - Re: [PATCH] netfilter: audit target to record accepted/dropped packets, Jan Engelhardt
    - [PATCHv2] netfilter: audit target to record accepted/dropped packets, Thomas Graf
      - Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets, Jan Engelhardt
        
        Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets, Thomas Graf
        
        Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets, Michał Mirosław
        
        Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets, Jan Engelhardt
        
        Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets, Jan Engelhardt
        
        [PATCHv3] netfilter: audit target to record accepted/dropped packets, Thomas Graf
        
        [PATCHv4] netfilter: audit target to record accepted/dropped packets, Thomas Graf
        
        Re: [PATCHv4] netfilter: audit target to record accepted/dropped packets, Patrick McHardy
        
        Re: [PATCHv3] netfilter: audit target to record accepted/dropped packets, Patrick McHardy
      - Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets, Mr Dash Four
        
        Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets, Jan Engelhardt
        
        Re: [PATCHv2] netfilter: audit target to record accepted/dropped packets, Eric Paris
[PATCH]: netfilter: nf_conntrack: use is_vmalloc_addr(), Patrick McHardy
- Re: [PATCH]: netfilter: nf_conntrack: use is_vmalloc_addr(), Eric Dumazet
  - Re: [PATCH]: netfilter: nf_conntrack: use is_vmalloc_addr(), Patrick McHardy
[PATCH 1/1] netfilter: ctnetlink: fix loop in ctnetlink_get_conntrack(), pablo
[PATCH 0/1] Netfilter fixes for 2.6.37 (round 3), pablo
- Re: [PATCH 0/1] Netfilter fixes for 2.6.37 (round 3), David Miller
[PATCH] netfilter: ctnetlink: fix loop in ctnetlink_get_conntrack(), Florian Westphal
- Re: [PATCH] netfilter: ctnetlink: fix loop in ctnetlink_get_conntrack(), Pablo Neira Ayuso
[PATCH 00/22] ipvs namespaces v3.3, Simon Horman
- [PATCH 05/22] IPVS: netns, prepare protocol, Simon Horman
- [PATCH 09/22] IPVS: netns preparation for proto_ah_esp, Simon Horman
- [PATCH 19/22] IPVS: netns, trash handling, Simon Horman
- [PATCH 21/22] IPVS: netns, misc init_net removal in core., Simon Horman
- [PATCH 14/22] IPVS: netns awareness to ip_vs_sync, Simon Horman
- [PATCH 20/22] IPVS: netns, svc counters moved in ip_vs_ctl,c, Simon Horman
- [PATCH 17/22] IPVS: netns, ip_vs_ctl local vars moved to ipvs struct., Simon Horman
- [PATCH 15/22] IPVS: netns, ip_vs_stats and its procfs, Simon Horman
- [PATCH 13/22] IPVS: netns awareness to ip_vs_est, Simon Horman
- [PATCH 04/22] IPVS: netns awarness to lblc sheduler, Simon Horman
- [PATCH 18/22] IPVS: netns, defense work timer., Simon Horman
- [PATCH 16/22] IPVS: netns, connection hash got net as param., Simon Horman
- [PATCH 22/22] IPVS: netns, final patch enabling network name space., Simon Horman
- [PATCH 06/22] IPVS: netns preparation for proto_tcp, Simon Horman
- [PATCH 03/22] IPVS: netns awarness to lblcr sheduler, Simon Horman
- [PATCH 12/22] IPVS: netns awareness to ip_vs_app, Simon Horman
- [PATCH 11/22] IPVS: netns, common protocol changes and use of appcnt., Simon Horman
- [PATCH 10/22] IPVS: netns, use ip_vs_proto_data as param., Simon Horman
- [PATCH 08/22] IPVS: netns preparation for proto_sctp, Simon Horman
- [PATCH 07/22] IPVS: netns preparation for proto_udp, Simon Horman
- [PATCH 02/22] IPVS: netns to services part 1, Simon Horman
- [PATCH 01/22] IPVS: netns, add basic init per netns., Simon Horman
- Re: [PATCH 00/22] ipvs namespaces v3.3, Pablo Neira Ayuso
  - Re: [PATCH 00/22] ipvs namespaces v3.3, Patrick McHardy
    - Re: [PATCH 00/22] ipvs namespaces v3.3, Pablo Neira Ayuso
      - Re: [PATCH 00/22] ipvs namespaces v3.3, Patrick McHardy
  - Re: [PATCH 00/22] ipvs namespaces v3.3, Simon Horman
can libnetfilter_conntrack be used to write a userspace connection tracker?, Sam Roberts
- Re: can libnetfilter_conntrack be used to write a userspace connection tracker?, Pablo Neira Ayuso
  - Re: can libnetfilter_conntrack be used to write a userspace connection tracker?, Sam Roberts
    - Re: can libnetfilter_conntrack be used to write a userspace connection tracker?, Pablo Neira Ayuso
      - Re: can libnetfilter_conntrack be used to write a userspace connection tracker?, Sam Roberts
        
        Re: can libnetfilter_conntrack be used to write a userspace connection tracker?, Pablo Neira Ayuso
netfilter tree for 2.6.38 is open, Pablo Neira Ayuso
- [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!", Eric Dumazet
  - Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!", Pablo Neira Ayuso
    - Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!", Patrick McHardy
      - Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!", Pablo Neira Ayuso
      - Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!", Eric Dumazet
    - Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!", Eric Dumazet
      - Re: [PATCH] netfilter: ipt_CLUSTERIP: dont flood with "no conntrack!", Pablo Neira Ayuso
        
        [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!", Eric Dumazet
        
        Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!", Jan Engelhardt
        
        Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!", Eric Dumazet
        
        Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!", Pablo Neira Ayuso
        
        Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!", Pablo Neira Ayuso
        
        Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!", Eric Dumazet
        
        Re: [PATCH v4] netfilter: ipt_CLUSTERIP: remove "no conntrack!", Patrick McHardy
[PATCH] netfilter fixes for 2.6.37 (one leftover patch), pablo
- [PATCH] netfilter: fix compilation when conntrack is disabled but tproxy is enabled, pablo
- Re: [PATCH] netfilter fixes for 2.6.37 (one leftover patch), David Miller
- <Possible follow-ups>
- [PATCH] netfilter fixes for 2.6.37 (one leftover patch), KOVACS Krisztian
  - [PATCH] netfilter: fix compilation when conntrack is disabled but tproxy is enabled, KOVACS Krisztian
  - Re: [PATCH] netfilter fixes for 2.6.37 (one leftover patch), Pablo Neira Ayuso
XT_MATCH_REALM Kconfig whinge..., Valdis . Kletnieks
- Re: XT_MATCH_REALM Kconfig whinge..., Pablo Neira Ayuso
  - Re: XT_MATCH_REALM Kconfig whinge..., Jan Engelhardt
    - Re: XT_MATCH_REALM Kconfig whinge..., Pablo Neira Ayuso
      - Re: XT_MATCH_REALM Kconfig whinge..., Patrick McHardy
[GIT] Networking, David Miller
- <Possible follow-ups>
- [GIT] Networking, David Miller
- [GIT] Networking, David Miller
- Re: [GIT] Networking, Stephen Rothwell
  - Re: [GIT] Networking, Linus Torvalds
    - Re: [GIT] Networking, Pablo Neira Ayuso
      - Re: [GIT] Networking, David Miller
    - Re: [GIT] Networking, Stephen Rothwell
      - Re: [GIT] Networking, Linus Torvalds
        
        Re: [GIT] Networking, Stephen Rothwell
        
        Re: [GIT] Networking, David Miller
        
        Re: [GIT] Networking, Stephen Rothwell
[PATCH 0/3] netfilter fixes for 2.6.37, pablo
- [PATCH 1/3] netfilter: x_tables: dont block BH while reading counters, pablo
- [PATCH 2/3] netfilter: fix race in conntrack between dump_table and destroy, pablo
- [PATCH 3/3] netfilter: ebtables: make broute table work again, pablo
- Re: [PATCH 0/3] netfilter fixes for 2.6.37, David Miller
Idea for a new NFQUEUE module (ebtables) ?, Pierre Chifflier
[PATCH v2] netfilter: ebtables: make broute table work again, Florian Westphal
- Re: [PATCH v2] netfilter: ebtables: make broute table work again, Eric Dumazet
  - Re: [PATCH v2] netfilter: ebtables: make broute table work again, Pablo Neira Ayuso
How to redirect the package from eth0 to eth2, Roc Bai
GIT trees refreshed, David Miller
[PATCH][resend] netfilter: ebtables: make broute table work again, Florian Westphal
- Re: [PATCH][resend] netfilter: ebtables: make broute table work again, Eric Dumazet
  - Re: [PATCH][resend] netfilter: ebtables: make broute table work again, Florian Westphal
collecting netfilter bugfixes for 2.6.37, Pablo Neira Ayuso
- Re: collecting netfilter bugfixes for 2.6.37, Jan Engelhardt
  - Re: collecting netfilter bugfixes for 2.6.37, Pablo Neira Ayuso
- Re: collecting netfilter bugfixes for 2.6.37, Romain Francoise
  - Re: collecting netfilter bugfixes for 2.6.37, Pablo Neira Ayuso
iptables: accumulated bugfixes and annotations, Jan Engelhardt
- [PATCH 01/13] iptables-restore: resolve confusing policy error message, Jan Engelhardt
- [PATCH 02/13] src: const annotations, Jan Engelhardt
- [PATCH 04/13] src: use C99/POSIX types, Jan Engelhardt
- [PATCH 03/13] xt_comment: remove redundant cast, Jan Engelhardt
- [PATCH 05/13] iptables: abort on empty interface specification, Jan Engelhardt
- [PATCH 06/13] xtables: reorder num_old substraction for clarity, Jan Engelhardt
- [PATCH 07/13] ip[6]tables: only call match's parse function when option char is in range, Jan Engelhardt
- [PATCH 08/13] ip[6]tables: only call target's parse function when option char is in range, Jan Engelhardt
- [PATCH 11/13] libipt_CLUSTERIP: const annotations, Jan Engelhardt
- [PATCH 12/13] libxtables: do some option structure checking, Jan Engelhardt
- [PATCH 10/13] libxt_sctp: fix a typo, Jan Engelhardt
- [PATCH 09/13] extensions: remove no longer necessary default: cases, Jan Engelhardt
- [PATCH 13/13] libipt_REDIRECT: avoid dereference of uninitialized pointer, Jan Engelhardt
- Re: iptables: accumulated bugfixes and annotations, Pablo Neira Ayuso
ipset: unused parameter removal, Jan Engelhardt
- [PATCH] kernel: remove unused ctnl parameter from call_ad, Jan Engelhardt
- Re: ipset: unused parameter removal, Jozsef Kadlecsik
libmnl: genl patches, Jan Engelhardt
- [PATCH 2/2] examples/genl: support dumping the genl families, Jan Engelhardt
- [PATCH 1/2] examples/genl: fix newline imbalance, Jan Engelhardt
- Re: libmnl: genl patches, Pablo Neira Ayuso
Possible bug with ip6tables hl module., Steven Jan Springl
- Re: Possible bug with ip6tables hl module., Jan Engelhardt
  - Re: Possible bug with ip6tables hl module., Pablo Neira Ayuso
Why and when to use skb_make_writable()?, doug arro
Re: new netfilter target - DNETMAP, Jan Engelhardt
- Re: new netfilter target - DNETMAP, Marek Kierdelewicz
- Re: new netfilter target - DNETMAP, Marek Kierdelewicz
Re: tproxy for ipv6, Balazs Scheidler
[GIT PULL nf-next-2.6] ipvs namespaces, Simon Horman
- [PATCH 05/22] IPVS: netns, prepare protocol, Simon Horman
- [PATCH 02/22] IPVS: netns to services part 1, Simon Horman
- [PATCH 17/22] IPVS: netns, ip_vs_ctl local vars moved to ipvs struct., Simon Horman
- [PATCH 12/22] IPVS: netns awareness to ip_vs_app, Simon Horman
- [PATCH 22/22] IPVS: netns, final patch enabling network name space., Simon Horman
- [PATCH 19/22] IPVS: netns, trash handling, Simon Horman
- [PATCH 20/22] IPVS: netns, svc counters moved in ip_vs_ctl,c, Simon Horman
- [PATCH 15/22] IPVS: netns, ip_vs_stats and its procfs, Simon Horman
- [PATCH 18/22] IPVS: netns, defense work timer., Simon Horman
- [PATCH 13/22] IPVS: netns awareness to ip_vs_est, Simon Horman
- [PATCH 21/22] IPVS: netns, misc init_net removal in core., Simon Horman
- [PATCH 11/22] IPVS: netns, common protocol changes and use of appcnt., Simon Horman
- [PATCH 14/22] IPVS: netns awareness to ip_vs_sync, Simon Horman
- [PATCH 10/22] IPVS: netns, use ip_vs_proto_data as param., Simon Horman
- [PATCH 16/22] IPVS: netns, connection hash got net as param., Simon Horman
- [PATCH 09/22] IPVS: netns preparation for proto_ah_esp, Simon Horman
- [PATCH 07/22] IPVS: netns preparation for proto_udp, Simon Horman
- [PATCH 06/22] IPVS: netns preparation for proto_tcp, Simon Horman
- [PATCH 08/22] IPVS: netns preparation for proto_sctp, Simon Horman
- [PATCH 03/22] IPVS: netns awarness to lblcr sheduler, Simon Horman
- [PATCH 01/22] IPVS: netns, add basic init per netns., Simon Horman
- [PATCH 04/22] IPVS: netns awarness to lblc sheduler, Simon Horman
- Re: [GIT PULL nf-next-2.6] ipvs namespaces, Simon Horman
  - Re: [GIT PULL nf-next-2.6] ipvs namespaces, David Miller
    - Re: [GIT PULL nf-next-2.6] ipvs namespaces, Simon Horman
      - Re: [GIT PULL nf-next-2.6] ipvs namespaces, Pablo Neira Ayuso
        
        Re: [GIT PULL nf-next-2.6] ipvs namespaces, Simon Horman
- Re: [GIT PULL nf-next-2.6] ipvs namespaces, Pablo Neira Ayuso
  - Re: [GIT PULL nf-next-2.6] ipvs namespaces, Simon Horman
[PATCH] netfilter: fix export secctx error handling, Pablo Neira Ayuso
- Re: [PATCH] netfilter: fix export secctx error handling, David Miller
- <Possible follow-ups>
- [PATCH] netfilter: fix export secctx error handling, pablo
[PATCH v2] netfilter: fix the race when initializing nf_ct_expect_hash_rnd, Changli Gao
- Re: [PATCH v2] netfilter: fix the race when initializing nf_ct_expect_hash_rnd, Eric Dumazet
  - Re: [PATCH v2] netfilter: fix the race when initializing nf_ct_expect_hash_rnd, David Miller
  - Re: [PATCH v2] netfilter: fix the race when initializing nf_ct_expect_hash_rnd, David Miller
Xtables-addons 1.32/ipset-GENL 5.2, Jan Engelhardt
- Re: Xtables-addons 1.32/ipset-GENL 5.2, Jozsef Kadlecsik
  - Re: Xtables-addons 1.32/ipset-GENL 5.2, Jan Engelhardt
  - Re: Xtables-addons 1.32/ipset-GENL 5.2, Mr Dash Four
    - Re: Xtables-addons 1.32/ipset-GENL 5.2, Jozsef Kadlecsik
- Re: Xtables-addons 1.32/ipset-GENL 5.2, Pablo Neira Ayuso
  - Re: Xtables-addons 1.32/ipset-GENL 5.2, Jan Engelhardt
  - Re: Xtables-addons 1.32/ipset-GENL 5.2, Jozsef Kadlecsik
    - Re: Xtables-addons 1.32/ipset-GENL 5.2, Pablo Neira Ayuso
genetlink misinterprets NEW as GET, Jan Engelhardt
- Re: genetlink misinterprets NEW as GET, Pablo Neira Ayuso
  - Re: genetlink misinterprets NEW as GET, Jan Engelhardt
    - Re: genetlink misinterprets NEW as GET, Pablo Neira Ayuso
      - Re: genetlink misinterprets NEW as GET, Jan Engelhardt
  - Re: genetlink misinterprets NEW as GET, Ben Pfaff
    - Re: genetlink misinterprets NEW as GET, Pablo Neira Ayuso
      - Re: genetlink misinterprets NEW as GET, Jan Engelhardt
        
        Re: genetlink misinterprets NEW as GET, Pablo Neira Ayuso
      - [patch] Re: genetlink misinterprets NEW as GET, Jan Engelhardt
        
        Re: [patch] Re: genetlink misinterprets NEW as GET, Pablo Neira Ayuso
        
        Re: [patch] Re: genetlink misinterprets NEW as GET, David Miller
ipset-5: buildsys improvements, Jan Engelhardt
- [PATCH 1/2] build: use only AC_CANONICAL_HOST, Jan Engelhardt
- [PATCH 2/2] build: remove autogenerated files, Jan Engelhardt
- Re: ipset-5: buildsys improvements, Jozsef Kadlecsik
libmnl: build improvements, Jan Engelhardt
- [PATCH 1/2] build: use AM_CPPFLAGS, Jan Engelhardt
- [PATCH 2/2] build: use only AC_CANONICAL_HOST, Jan Engelhardt
- Re: libmnl: build improvements, Pablo Neira Ayuso
libnetfilter_queue: build improvements, Jan Engelhardt
- [PATCH 1/3] build: remove unused LIBTOOL_DEPS, Jan Engelhardt
- [PATCH 2/3] build: create a Make_global.am file, Jan Engelhardt
- [PATCH 3/3] build: use -Wall across the entire source, Jan Engelhardt
- Re: libnetfilter_queue: build improvements, Pablo Neira Ayuso
libnetfilter_log: build improvements, Jan Engelhardt

[Index of Archives] [LARTC] [Berkeley Packet Filter] [Bugtraq] [Yosemite Discussion]

Powered by Linux