Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH nft v6] src: add support to command "destroy", Fernando Fernandez Mancera
  • Re: [PATCH nft v6] src: add support to command "destroy", Pablo Neira Ayuso
• [PATCH nf-next v4] netfilter: nf_tables: add support to destroy operation, Fernando Fernandez Mancera
• [PATCH] pcap: prevent crashes when output `FILE *` is null, Jeremy Sowden
  • [PATCH ulogd2 v2] pcap: prevent crashes when output `FILE *` is null, Jeremy Sowden
    • Re: [PATCH ulogd2 v2] pcap: prevent crashes when output `FILE *` is null, Florian Westphal
      • Re: [PATCH ulogd2 v2] pcap: prevent crashes when output `FILE *` is null, Jeremy Sowden
• [PATCH nf-next 0/3] netfilter: conntrack: cleanups, Florian Westphal
  • [PATCH nf-next 1/3] netfilter: conntrack: sctp: use nf log infrastructure for invalid packets, Florian Westphal
  • [PATCH nf-next 2/3] netfilter: conntrack: remove pr_debug calls, Florian Westphal
  • [PATCH nf-next 3/3] netfilter: conntrack: avoid reload of ct->status, Florian Westphal
• [ANNOUNCE] ipset 7.17 released, Jozsef Kadlecsik
• [PATCH xtables-addons 0/3] Add Linux 6.2 Support, Jeremy Sowden
  • [PATCH xtables-addons 1/3] build: replace obsolete `AC_PROG_LIBTOOL` macro with `LT_INIT`, Jeremy Sowden
  • [PATCH xtables-addons 3/3] build: support for Linux 6.2, Jeremy Sowden
  • [PATCH xtables-addons 2/3] build: replace `AC_DISABLE_STATIC` macro with an argument to `LT_INIT`, Jeremy Sowden
  • Re: [PATCH xtables-addons 0/3] Add Linux 6.2 Support, Jan Engelhardt
• [PATCH libmnl v2] doc: fix some non-native English usages, Jeremy Sowden
• [PATCH libmnl] doc: fix some non-native English usages, Jeremy Sowden
  • Re: [PATCH libmnl] doc: fix some non-native English usages, Pablo Neira Ayuso
    • Re: [PATCH libmnl] doc: fix some non-native English usages, Jeremy Sowden
• [PATCH libnetfilter_conntrack 1/2] conntrack: fix BPF code for filtering on big-endian architectures, Jeremy Sowden
  • [PATCH libnetfilter_conntrack 2/2] conntrack: simplify calculation of `struct sock_fprog` length, Jeremy Sowden
    • Re: [PATCH libnetfilter_conntrack 2/2] conntrack: simplify calculation of `struct sock_fprog` length, Pablo Neira Ayuso
  • Re: [PATCH libnetfilter_conntrack 1/2] conntrack: fix BPF code for filtering on big-endian architectures, Pablo Neira Ayuso
• [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`, Jeremy Sowden
  • Re: [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`, Pablo Neira Ayuso
    • Re: [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`, Florian Westphal
      • Re: [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`, Pablo Neira Ayuso
        • Re: [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`, Jeremy Sowden
• ipset bug (kernel hang), Марк Коренберг
  • Re: ipset bug (kernel hang), Jozsef Kadlecsik
• "nft list hooks" in older kernels?, Simon Kirby
• [iptables PATCH 1/3] gitignore: Ignore utils/nfsynproxy, Phil Sutter
  • [iptables PATCH 3/3] ebtables-translate: Install symlink, Phil Sutter
  • [iptables PATCH 2/3] gitignore: Ignore generated ip6tables man pages, Phil Sutter
  • Re: [iptables PATCH 1/3] gitignore: Ignore utils/nfsynproxy, Phil Sutter
• [iptables PATCH] nft: Reject tcp/udp extension without proper protocol match, Phil Sutter
  • Re: [iptables PATCH] nft: Reject tcp/udp extension without proper protocol match, Phil Sutter
• [PATCH nft 1/2,v2] evaluate: fix shift exponent underflow in concatenation evaluation, Pablo Neira Ayuso
  • [PATCH nft 2/2] ct: use inet_service_type for proto-src and proto-dst, Pablo Neira Ayuso
• [PATCH nft] evaluate: fix shift exponent underflow in concatenation evaluation, Pablo Neira Ayuso
• [PATCH nf 4/4,v6] netfilter: nf_tables: honor set timeout and garbage collection updates, Pablo Neira Ayuso
• [ANNOUNCE] nftables 1.0.6 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] nftables 1.0.6 release, Arturo Borrero Gonzalez
    • Re: [ANNOUNCE] nftables 1.0.6 release, Pablo Neira Ayuso
• [PATCH nft] owner: Fix potential array out of bounds access, Pablo Neira Ayuso
  • Re: [PATCH nft] owner: Fix potential array out of bounds access, Pablo Neira Ayuso
• [PATCH nf,v5 1/4] netfilter: nf_tables: consolidate set description, Pablo Neira Ayuso
  • [PATCH nf,v5 3/4] netfilter: nf_tables: perform type checking for existing sets, Pablo Neira Ayuso
  • [PATCH nf,v5 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates, Pablo Neira Ayuso
  • [PATCH nf,v5 2/4] netfilter: nf_tables: add function to create set stateful expressions, Pablo Neira Ayuso
• [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
  • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
    • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
      • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
        • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
          • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
            • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
              • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
                • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
                  • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
                    • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
                      • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
                        • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
                          • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
                            • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
                              • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
                                • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
                                  • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
                                    • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
                                      • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
                                        • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
                                          • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
                                            • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Pablo Neira Ayuso
                                              • Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR, Phil Sutter
• [PATCH] treewide: Convert del_timer*() to timer_shutdown*(), Steven Rostedt
  • Re: [PATCH] treewide: Convert del_timer*() to timer_shutdown*(), Pavel Machek
  • Re: [PATCH] treewide: Convert del_timer*() to timer_shutdown*(), Kalle Valo
  • Re: [PATCH] treewide: Convert del_timer*() to timer_shutdown*(), Paolo Abeni
  • Re: [PATCH] treewide: Convert del_timer*() to timer_shutdown*(), Steven Rostedt
• [PATCH nf,v4 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates, Pablo Neira Ayuso
• [conntrack-tools PATCH 0/4] Fix some minor bugs, Phil Sutter
  • [conntrack-tools PATCH 1/4] conntrack: Fix potential array out of bounds access, Phil Sutter
  • [conntrack-tools PATCH 3/4] conntrack: Fix for unused assignment in ct_save_snprintf(), Phil Sutter
  • [conntrack-tools PATCH 2/4] conntrack: Fix for unused assignment in do_command_ct(), Phil Sutter
  • [conntrack-tools PATCH 4/4] conntrack: Sanitize free_tmpl_objects(), Phil Sutter
  • Re: [conntrack-tools PATCH 0/4] Fix some minor bugs, Pablo Neira Ayuso
    • Re: [conntrack-tools PATCH 0/4] Fix some minor bugs, Phil Sutter
• [PATCH nf,v3 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates, Pablo Neira Ayuso
• [PATCH nf,v2 0/4] nf_tables: set updates type check, Pablo Neira Ayuso
  • [PATCH nf,v2 1/4] netfilter: nf_tables: consolidate set description, Pablo Neira Ayuso
  • [PATCH nf,v2 3/4] netfilter: nf_tables: perform type checking for existing sets, Pablo Neira Ayuso
  • [PATCH nf,v2 2/4] netfilter: nf_tables: add function to create set stateful expressions, Pablo Neira Ayuso
  • [PATCH nf,v2 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates, Pablo Neira Ayuso
    • Re: [PATCH nf,v2 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates, Pablo Neira Ayuso
• [PATCH nf,v1] netfilter: nf_tables: perform type checking for existing sets, Pablo Neira Ayuso
  • Re: [PATCH nf,v1] netfilter: nf_tables: perform type checking for existing sets, Florian Westphal
• [PATCH nft] scanner: treat invalid octal strings as strings, Jeremy Sowden
  • Re: [PATCH nft] scanner: treat invalid octal strings as strings, Pablo Neira Ayuso
    • Re: [PATCH nft] scanner: treat invalid octal strings as strings, Pablo Neira Ayuso
      • Re: [PATCH nft] scanner: treat invalid octal strings as strings, Jeremy Sowden
        • Re: [PATCH nft] scanner: treat invalid octal strings as strings, Pablo Neira Ayuso
• repeated nft set add ignores changed parameters, Florian Westphal
• [PATCH nf-next] netfilter: conntrack: move rcu read lock to nf_conntrack_find_get, Florian Westphal
• [nf-next PATCH] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS, Phil Sutter
  • Re: [nf-next PATCH] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS, Florian Westphal
    • Re: [nf-next PATCH] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS, Phil Sutter
      • Re: [nf-next PATCH] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS, Florian Westphal
• [PATCH] ipvs: use div_s64 for signed division, Arnd Bergmann
  • Re: [PATCH] ipvs: use div_s64 for signed division, Julian Anastasov
    • Re: [PATCH] ipvs: use div_s64 for signed division, Pablo Neira Ayuso
      • Re: [PATCH] ipvs: use div_s64 for signed division, Arnd Bergmann
• [iptables PATCH 0/4] Make rule parsing strict, Phil Sutter
  • [iptables PATCH 1/4] nft: Parse icmp header matches, Phil Sutter
  • [iptables PATCH 3/4] nft: Increase rule parser strictness, Phil Sutter
  • [iptables PATCH 2/4] arptables: Check the mandatory ar_pln match, Phil Sutter
  • [iptables PATCH 4/4] nft: Make rule parsing errors fatal, Phil Sutter
  • Re: [iptables PATCH 0/4] Make rule parsing strict, Phil Sutter
• [PATCH nf] netfilter: conntrack: fix ipv6 exthdr error check, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: fix ipv6 exthdr error check, Pablo Neira Ayuso
• [RFC net-next 05/15] netlink: add macro for checking dump ctx size, Jakub Kicinski
• [PATCH net 0/3] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH net 3/3] netfilter: conntrack: document sctp timeouts, Pablo Neira Ayuso
  • [PATCH net 1/3] netfilter: flowtable: really fix NAT IPv6 offload, Pablo Neira Ayuso
    • Re: [PATCH net 1/3] netfilter: flowtable: really fix NAT IPv6 offload, patchwork-bot+netdevbpf
  • [PATCH net 2/3] ipvs: add a 'default' case in do_ip_vs_set_ctl(), Pablo Neira Ayuso
• [PATCH nft] doc: add/update can be used with maps too, Florian Westphal
• [PATCH net-next] ipvs: fix type warning in do_div() on 32 bit, Jakub Kicinski
  • Re: [PATCH net-next] ipvs: fix type warning in do_div() on 32 bit, Pablo Neira Ayuso
• [PATCH] ipvs: use u64 to silence do_div warnings, Julian Anastasov
• [PATCH] netfilter: conntrack: document sctp timeouts, Sriram Yagnaraman
  • Re: [PATCH] netfilter: conntrack: document sctp timeouts, Pablo Neira Ayuso
    • RE: [PATCH] netfilter: conntrack: document sctp timeouts, Sriram Yagnaraman
• [PATCH nft 0/3] fix map update with concatenation and timeouts, Florian Westphal
  • [PATCH nft 1/3] netlink_delinearize: fix decoding of concat data element, Florian Westphal
  • [PATCH nft 2/3] netlink_linearize: fix timeout with map updates, Florian Westphal
    • Re: [PATCH nft 2/3] netlink_linearize: fix timeout with map updates, Pablo Neira Ayuso
      • Re: [PATCH nft 2/3] netlink_linearize: fix timeout with map updates, Florian Westphal
  • [PATCH nft 3/3] tests: add a test case for map update from packet path with concat, Florian Westphal
  • Re: [PATCH nft 0/3] fix map update with concatenation and timeouts, Pablo Neira Ayuso
    • Re: [PATCH nft 0/3] fix map update with concatenation and timeouts, Florian Westphal
• [PATCH nft] evaluate: fix compilation warning, Pablo Neira Ayuso
• [PATCH ulogd2] build: fix pgsql fall-back configuration of CFLAGS, Jeremy Sowden
  • [PATCH ulogd2 v2] build: fix pgsql fall-back configuration of CFLAGS, Jeremy Sowden
• [PATCH net-next 00/12] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 01/12] netfilter: nft_inner: fix IS_ERR() vs NULL check, Pablo Neira Ayuso
    • Re: [PATCH net-next 01/12] netfilter: nft_inner: fix IS_ERR() vs NULL check, patchwork-bot+netdevbpf
  • [PATCH net-next 03/12] netfilter: conntrack: merge ipv4+ipv6 confirm functions, Pablo Neira Ayuso
  • [PATCH net-next 02/12] netfilter: conntrack: add sctp DATA_SENT state, Pablo Neira Ayuso
  • [PATCH net-next 04/12] netfilter: ipset: Add support for new bitmask parameter, Pablo Neira Ayuso
  • [PATCH net-next 06/12] netfilter: flowtable: add a 'default' case to flowtable datapath, Pablo Neira Ayuso
  • [PATCH net-next 05/12] netfilter: conntrack: set icmpv6 redirects as RELATED, Pablo Neira Ayuso
    • Re: [PATCH net-next 05/12] netfilter: conntrack: set icmpv6 redirects as RELATED, Wang Hai
      • Re: [PATCH net-next 05/12] netfilter: conntrack: set icmpv6 redirects as RELATED, Wang Hai
  • [PATCH net-next 08/12] ipvs: use common functions for stats allocation, Pablo Neira Ayuso
  • [PATCH net-next 07/12] ipvs: add rcu protection to stats, Pablo Neira Ayuso
  • [PATCH net-next 11/12] ipvs: add est_cpulist and est_nice sysctl vars, Pablo Neira Ayuso
  • [PATCH net-next 09/12] ipvs: use u64_stats_t for the per-cpu counters, Pablo Neira Ayuso
  • [PATCH net-next 12/12] ipvs: run_estimation should control the kthread tasks, Pablo Neira Ayuso
  • [PATCH net-next 10/12] ipvs: use kthreads for stats estimation, Pablo Neira Ayuso
• [PATCH nft] scanner: match full comment line in case of tie, Pablo Neira Ayuso
• [PATCH nft 1/3] netlink: statify __netlink_gen_data(), Pablo Neira Ayuso
  • [PATCH nft 2/3] netlink: add function to generate set element key data, Pablo Neira Ayuso
  • [PATCH nft 3/3,v2] netlink: unfold function to generate concatenations for keys and data, Pablo Neira Ayuso
• [PATCH ulogd2 v2] src: keep IPv4 addresses internally in IPv4-in-IPv6 format, Jeremy Sowden
• [iptables PATCH v2 00/11] Support 'make dist' and 'make check', Phil Sutter
  • [iptables PATCH v2 08/11] Makefile: Generate .tar.xz archive with 'make dist', Phil Sutter
  • [iptables PATCH v2 07/11] Makefile: Fix for 'make distcheck', Phil Sutter
  • [iptables PATCH v2 02/11] Drop libiptc/linux_stddef.h, Phil Sutter
  • [iptables PATCH v2 03/11] Makefile: Generate ip6tables man pages on the fly, Phil Sutter
  • [iptables PATCH v2 04/11] extensions: Makefile: Merge initext targets, Phil Sutter
  • [iptables PATCH v2 05/11] iptables/Makefile: Reorg variable assignments, Phil Sutter
  • [iptables PATCH v2 06/11] iptables/Makefile: Split nft-variant man page list, Phil Sutter
  • [iptables PATCH v2 10/11] tests: Adjust testsuite return codes to automake guidelines, Phil Sutter
  • [iptables PATCH v2 11/11] Makefile.am: Integrate testsuites, Phil Sutter
  • [iptables PATCH v2 01/11] Drop INCOMPATIBILITIES file, Phil Sutter
  • [iptables PATCH v2 09/11] include/Makefile: xtables-version.h is generated, Phil Sutter
  • Re: [iptables PATCH v2 00/11] Support 'make dist' and 'make check', Phil Sutter
• [PATCH net] netfilter: flowtable: really fix NAT IPv6 offload, Qingfang DENG
  • Re: [PATCH net] netfilter: flowtable: really fix NAT IPv6 offload, Pablo Neira Ayuso
• [PATCH nft,v2] scanner: handle files with CRLF line terminators, Pablo Neira Ayuso
  • Re: [PATCH nft,v2] scanner: handle files with CRLF line terminators, Pablo Neira Ayuso
• [PATCH nft] evaluate: do not crash on runaway number of concatenation components, Pablo Neira Ayuso
  • [PATCH nft] netlink: unfold function to generate concatenations for keys and data, Pablo Neira Ayuso
    • Re: [PATCH nft] netlink: unfold function to generate concatenations for keys and data, Pablo Neira Ayuso
• [PATCH nft 2/2,v2] netlink: swap byteorder of value component in concatenation of intervals, Pablo Neira Ayuso
  • Re: [PATCH nft 2/2,v2] netlink: swap byteorder of value component in concatenation of intervals, Eric Garver
    • Re: [PATCH nft 2/2,v2] netlink: swap byteorder of value component in concatenation of intervals, Pablo Neira Ayuso
• [iptables PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
  • Re: [iptables PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [ulogd PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [ipset PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
  • Re: [ipset PATCH] Makefile: Create LZMA-compressed dist-files, Jozsef Kadlecsik
• [nfacct PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [libmnl PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
  • Re: [libmnl PATCH] Makefile: Create LZMA-compressed dist-files, Pablo Neira Ayuso
    • Re: [libmnl PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [libnetfilter_cthelper PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [conntrack-tools PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [libnetfilter_cttimeout PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [libnetfilter_conntrack PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [libnetfilter_queue PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [libnetfilter_log PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [libnetfilter_acct PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [libnfnetlink PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [libnftnl PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [nft PATCH] Makefile: Create LZMA-compressed dist-files, Phil Sutter
• [PATCH nft 1/2] tests: py: missing json for different byteorder selector with interval concatenation, Pablo Neira Ayuso
  • [PATCH nft 2/2] netlink: swap byteorder of value component in interval set with concatenation, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2] netlink: swap byteorder of value component in interval set with concatenation, Pablo Neira Ayuso
• [PATCH nft] scanner: handle files with CRLF line terminators, Pablo Neira Ayuso
• [iptables PATCH 00/11] Support 'make dist' and 'make check', Phil Sutter
  • [iptables PATCH 02/11] Drop libiptc/linux_stddef.h, Phil Sutter
  • [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist', Phil Sutter
    • Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist', Jan Engelhardt
      • Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist', Phil Sutter
        • Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist', Jan Engelhardt
          • Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist', Phil Sutter
            • Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist', Pablo Neira Ayuso
  • [iptables PATCH 10/11] tests: Adjust testsuite return codes to automake guidelines, Phil Sutter
  • [iptables PATCH 05/11] iptables/Makefile: Reorg variable assignments, Phil Sutter
  • [iptables PATCH 07/11] Makefile: Fix for 'make distcheck', Phil Sutter
  • [iptables PATCH 06/11] iptables/Makefile: Split nft-variant man page list, Phil Sutter
  • [iptables PATCH 03/11] Makefile: Generate ip6tables man pages on the fly, Phil Sutter
    • Re: [iptables PATCH 03/11] Makefile: Generate ip6tables man pages on the fly, Jan Engelhardt
      • Re: [iptables PATCH 03/11] Makefile: Generate ip6tables man pages on the fly, Phil Sutter
  • [iptables PATCH 04/11] extensions: Makefile: Merge initext targets, Phil Sutter
  • [iptables PATCH 09/11] include/Makefile: xtables-version.h is generated, Phil Sutter
  • [iptables PATCH 01/11] Drop INCOMPATIBILITIES file, Phil Sutter
  • [iptables PATCH 11/11] Makefile.am: Integrate testsuites, Phil Sutter
• [PATCH nft] src: Add GPLv2+ header to .c files of recent creation, Pablo Neira Ayuso
  • [PATCH nft] src: Update copyright header to GPLv2+ in socket.c, Máté Eckl
    • Re: [PATCH nft] src: Update copyright header to GPLv2+ in socket.c, Florian Westphal
  • Re: [PATCH nft] src: Add GPLv2+ header to .c files of recent creation, Pablo Neira Ayuso
• [PATCH nft,v2] scanner: munch full comment lines, Pablo Neira Ayuso
• [PATCH nft] doc: statements: fwd supports for sending packets via neighbouring layer, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nft] doc: statements: fwd supports for sending packets via neighbouring layer, Pablo Neira Ayuso
    • [PATCH nft] scanner: munch full comment lines, Pablo Neira Ayuso
• [PATCH] doc/payload-expression.txt: Mention that 'ih' exists, Harald Welte
  • Re: [PATCH] doc/payload-expression.txt: Mention that 'ih' exists, Pablo Neira Ayuso
• [PATCH ulogd2 0/4] Some bug-fixes, Jeremy Sowden
  • [PATCH ulogd2 1/4] ulogd: fix parse-error check, Jeremy Sowden
  • [PATCH ulogd2 3/4] JSON: remove incorrect config value check, Jeremy Sowden
  • [PATCH ulogd2 4/4] db: fix back-log capacity checks, Jeremy Sowden
  • [PATCH ulogd2 2/4] filter: fix buffer sizes in filter plug-ins, Jeremy Sowden
    • Re: [PATCH ulogd2 2/4] filter: fix buffer sizes in filter plug-ins, Pablo Neira Ayuso
      • Re: [PATCH ulogd2 2/4] filter: fix buffer sizes in filter plug-ins, Jeremy Sowden
  • Re: [PATCH ulogd2 0/4] Some bug-fixes, Pablo Neira Ayuso
• [PATCH] netfilter: nfnetlink: check 'skb->dev' pointer in nfulnl_log_packet(), Li Qiong
  • Re: [PATCH] netfilter: nfnetlink: check 'skb->dev' pointer in nfulnl_log_packet(), Dan Carpenter
  • Re: [PATCH] netfilter: nfnetlink: check 'skb->dev' pointer in nfulnl_log_packet(), Pablo Neira Ayuso
• [PATCH] netfilter: initialize 'ret' variable, Li Qiong
  • Re: [PATCH] netfilter: initialize 'ret' variable, Al Viro
    • Re: [PATCH] netfilter: initialize 'ret' variable, liqiong
    • Re: [PATCH] netfilter: initialize 'ret' variable, Jan Engelhardt
  • Re: [PATCH] netfilter: initialize 'ret' variable, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: initialize 'ret' variable, liqiong
  • [PATCH v2] netfilter: add a 'default' case to 'switch (tuplehash->tuple.xmit_type)', Li Qiong
    • Re: [PATCH v2] netfilter: add a 'default' case to 'switch (tuplehash->tuple.xmit_type)', Pablo Neira Ayuso
• [PATCH] json: fix 'add flowtable' command, Alex Forster
  • Re: [PATCH] json: fix 'add flowtable' command, Pablo Neira Ayuso
• [PATCH] ipvs: initialize 'ret' variable in do_ip_vs_set_ctl(), Li Qiong
  • Re: [PATCH] ipvs: initialize 'ret' variable in do_ip_vs_set_ctl(), Simon Horman
  • Re: [PATCH] ipvs: initialize 'ret' variable in do_ip_vs_set_ctl(), Dan Carpenter
    • Re: [PATCH] ipvs: initialize 'ret' variable in do_ip_vs_set_ctl(), liqiong
      • Re: [PATCH] ipvs: initialize 'ret' variable in do_ip_vs_set_ctl(), Dan Carpenter
        • Re: [PATCH] ipvs: initialize 'ret' variable in do_ip_vs_set_ctl(), Julian Anastasov
          • Re: [PATCH] ipvs: initialize 'ret' variable in do_ip_vs_set_ctl(), liqiong
            • [PATCH v2] ipvs: add a 'default' case in do_ip_vs_set_ctl(), Li Qiong
              • Re: [PATCH v2] ipvs: add a 'default' case in do_ip_vs_set_ctl(), Julian Anastasov
                • Re: [PATCH v2] ipvs: add a 'default' case in do_ip_vs_set_ctl(), Pablo Neira Ayuso
• [linux-next:master] BUILD REGRESSION 2934ceb4e967b9233d0f97732e47175574a11406, kernel test robot
• [iptables PATCH 0/7] tests: xlate: generic.txlate to pass replay test, Phil Sutter
  • [iptables PATCH 1/7] ebtables: Implement --check command, Phil Sutter
    • Re: [iptables PATCH 1/7] ebtables: Implement --check command, Pablo Neira Ayuso
      • Re: [iptables PATCH 1/7] ebtables: Implement --check command, Phil Sutter
        • Re: [iptables PATCH 1/7] ebtables: Implement --check command, Pablo Neira Ayuso
          • Re: [iptables PATCH 1/7] ebtables: Implement --check command, Phil Sutter
            • Re: [iptables PATCH 1/7] ebtables: Implement --check command, Pablo Neira Ayuso
  • [iptables PATCH 4/7] nft: Fix match generator for '! -i +', Phil Sutter
    • Re: [iptables PATCH 4/7] nft: Fix match generator for '! -i +', Pablo Neira Ayuso
      • Re: [iptables PATCH 4/7] nft: Fix match generator for '! -i +', Phil Sutter
        • Re: [iptables PATCH 4/7] nft: Fix match generator for '! -i +', Pablo Neira Ayuso
          • Re: [iptables PATCH 4/7] nft: Fix match generator for '! -i +', Phil Sutter
  • [iptables PATCH 7/7] ebtables: Fix MAC address match translation, Phil Sutter
  • [iptables PATCH 3/7] nft: Fix for comparing ifname matches against nft-generated ones, Phil Sutter
  • [iptables PATCH 6/7] xtables-translate: Fix for interfaces with asterisk mid-string, Phil Sutter
  • [iptables PATCH 5/7] nft: Recognize INVAL/D interface name, Phil Sutter
  • [iptables PATCH 2/7] tests: xlate: Use --check to verify replay, Phil Sutter
  • Re: [iptables PATCH 0/7] tests: xlate: generic.txlate to pass replay test, Phil Sutter
• Re: [PATCHv2 net-next 5/5] net: move the nat function to nf_nat_ovs for ovs and tc, Xin Long
• [PATCH iptables-nft] extensions: add xt_statistics random mode translation, Florian Westphal
  • Re: [PATCH iptables-nft] extensions: add xt_statistics random mode translation, Phil Sutter
    • Re: [PATCH iptables-nft] extensions: add xt_statistics random mode translation, Florian Westphal
      • Re: [PATCH iptables-nft] extensions: add xt_statistics random mode translation, Phil Sutter
• [iptables PATCH 0/9] Fix for shell testsuite '-V' option, Phil Sutter
  • [iptables PATCH 7/9] iptables: Properly clear iptables_command_state object, Phil Sutter
  • [iptables PATCH 5/9] iptables: Plug memleaks in print_firewall(), Phil Sutter
  • [iptables PATCH 8/9] xshared: Free data after printing help, Phil Sutter
  • [iptables PATCH 6/9] xtables: Introduce xtables_clear_iptables_command_state(), Phil Sutter
  • [iptables PATCH 3/9] iptables-xml: Free allocated chain strings, Phil Sutter
  • [iptables PATCH 9/9] libiptc: Eliminate garbage access, Phil Sutter
  • [iptables PATCH 1/9] tests: shell: Fix valgrind mode for 0008-unprivileged_0, Phil Sutter
  • [iptables PATCH 2/9] iptables-restore: Free handle with --test also, Phil Sutter
  • [iptables PATCH 4/9] nft: Plug memleak in nft_rule_zero_counters(), Phil Sutter
  • Re: [iptables PATCH 0/9] Fix for shell testsuite '-V' option, Phil Sutter
• [linux-next:master] BUILD REGRESSION 700e0cd3a5ce6a2cb90d9a2aab729b52f092a7d6, kernel test robot
• [RFC ebtables-nft] unify ether type and meta protocol decoding, Florian Westphal
  • Re: [RFC ebtables-nft] unify ether type and meta protocol decoding, Phil Sutter
    • Re: [RFC ebtables-nft] unify ether type and meta protocol decoding, Florian Westphal
      • Re: [RFC ebtables-nft] unify ether type and meta protocol decoding, Phil Sutter
  • [iptables RFC] ebtables: among: Embed meta protocol match into set lookup, Phil Sutter
• [PATCH ebtables-nft] nft-bridge: work around recent "among" decode breakage, Florian Westphal
  • Re: [PATCH ebtables-nft] nft-bridge: work around recent "among" decode breakage, Phil Sutter
• [PATCH v3 iptables-nft 0/3] remove escape_quotes support, Florian Westphal
  • [PATCH v3 iptables-nft 3/3] xlate-test: avoid shell entanglements, Florian Westphal
  • [PATCH v3 iptables-nft 1/3] xlate: get rid of escape_quotes, Florian Westphal
    • Re: [PATCH v3 iptables-nft 1/3] xlate: get rid of escape_quotes, Phil Sutter
  • [PATCH v3 iptables-nft 2/3] extensions: change expected output for new format, Florian Westphal
  • Re: [PATCH v3 iptables-nft 0/3] remove escape_quotes support, Phil Sutter
• [linux-next:master] BUILD REGRESSION 13ee7ef407cfcf63f4f047460ac5bb6ba5a3447d, kernel test robot
• [PATCH ulogd2 v2 v2 00/34] Refactor of the DB output plug-ins, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 01/34] ulogd: fix parse-error check, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 03/34] output: JSON: remove incorrect config value check, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 07/34] src: remove zero-valued config-key fields, Jeremy Sowden
    • Re: [PATCH ulogd2 v2 v2 07/34] src: remove zero-valued config-key fields, Jan Engelhardt
  • [PATCH ulogd2 v2 v2 08/34] src: parenthesize config-entry macro arguments, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 05/34] build: add checks to configure.ac, Jeremy Sowden
    • Re: [PATCH ulogd2 v2 v2 05/34] build: add checks to configure.ac, Jan Engelhardt
  • [PATCH ulogd2 v2 v2 02/34] filter: fix buffer sizes in filter plug-ins, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 09/34] src: define constructors and destructors consistently, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 04/34] db: fix back-log capacity checks, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 06/34] src: remove some trailing white space, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 18/34] db: open-code `_loop_reconnect_db`, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 21/34] db: refactor ring-buffer initialization, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 24/34] db: use `struct db_stmt` objects more widely, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 11/34] src: remove superfluous casts, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 16/34] db: use consistent integer return values to indicate errors, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 32/34] output: pgsql: tidy up `open_db_pgsql` and fix memory leak, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 28/34] db: add prep & exec support, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 20/34] db: refactor configuration, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 10/34] src: remove `TIME_ERR` macro, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 30/34] output: pgsql: remove a couple of struct members, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 27/34] db, IP2BIN: defer formatting of raw strings, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 22/34] db: refactor ring-buffer, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 25/34] db: synchronize access to ring-buffer, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 26/34] db: avoid cancelling ring-buffer thread, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 12/34] conffile: replace malloc+strcpy with strdup, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 33/34] output: pgsql: add prep & exec support, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 19/34] db: improve calculation of sql statement length, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 31/34] output: pgsql: remove variable-length arrays, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 14/34] output: de-duplicate allocation of input keys, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 29/34] output: mysql: add prep & exec support, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 34/34] output: sqlite3: reimplement using the common DB API, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 15/34] db: reorganize source, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 13/34] output: remove zero-initialized `struct ulogd_plugin` members, Jeremy Sowden
    • Re: [PATCH ulogd2 v2 v2 13/34] output: remove zero-initialized `struct ulogd_plugin` members, Jan Engelhardt
  • [PATCH ulogd2 v2 v2 23/34] db: refactor backlog, Jeremy Sowden
  • [PATCH ulogd2 v2 v2 17/34] db: change return type of two functions to `void`, Jeremy Sowden
  • Re: [PATCH ulogd2 v2 v2 00/34] Refactor of the DB output plug-ins, Pablo Neira Ayuso
    • Re: [PATCH ulogd2 v2 v2 00/34] Refactor of the DB output plug-ins, Jeremy Sowden
• [PATCH ulogd2] pgsql: correct `ulog2.ip_totlen` type, Jeremy Sowden
  • Re: [PATCH ulogd2] pgsql: correct `ulog2.ip_totlen` type, Pablo Neira Ayuso
• [iptables PATCH] tests: shell: Test selective ebtables flushing, Phil Sutter
  • Re: [iptables PATCH] tests: shell: Test selective ebtables flushing, Phil Sutter
• [PATCH v2 iptables-nft 0/3] remove escape_quotes support, Florian Westphal
  • [PATCH v2 iptables-nft 3/3] xlate-test: avoid shell entanglements, Florian Westphal
    • Re: [PATCH v2 iptables-nft 3/3] xlate-test: avoid shell entanglements, Phil Sutter
  • [PATCH v2 iptables-nft 1/3] xlate: get rid of escape_quotes, Florian Westphal
    • Re: [PATCH v2 iptables-nft 1/3] xlate: get rid of escape_quotes, Phil Sutter
      • Re: [PATCH v2 iptables-nft 1/3] xlate: get rid of escape_quotes, Florian Westphal
        • Re: [PATCH v2 iptables-nft 1/3] xlate: get rid of escape_quotes, Phil Sutter
  • [PATCH v2 iptables-nft 2/3] extensions: change expected output for new format, Florian Westphal
    • Re: [PATCH v2 iptables-nft 2/3] extensions: change expected output for new format, Phil Sutter
      • Re: [PATCH v2 iptables-nft 2/3] extensions: change expected output for new format, Florian Westphal
        • Re: [PATCH v2 iptables-nft 2/3] extensions: change expected output for new format, Phil Sutter
• [syzbot] INFO: task hung in nfnetlink_rcv_msg (3), syzbot
• [PATCH nf] netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark, Pablo Neira Ayuso
• [PATCH ulogd2 0/3] IP Address Formatting Fixes, Jeremy Sowden
  • [PATCH ulogd2 2/3] output: add missing support for int64_t values, Jeremy Sowden
    • Re: [PATCH ulogd2 2/3] output: add missing support for int64_t values, Pablo Neira Ayuso
  • [PATCH ulogd2 1/3] filter: IP2BIN: correct spelling of variable, Jeremy Sowden
    • Re: [PATCH ulogd2 1/3] filter: IP2BIN: correct spelling of variable, Pablo Neira Ayuso
  • [PATCH ulogd2 3/3] src: keep IPv4 addresses internally in IPv4-in-IPv6 format, Jeremy Sowden
    • Re: [PATCH ulogd2 3/3] src: keep IPv4 addresses internally in IPv4-in-IPv6 format, Pablo Neira Ayuso
• [linux-next:master] BUILD REGRESSION 9e46a79967326efb03c481ddfd58902475bd920d, kernel test robot
• [iptables PATCH 1/4] libxtables: xt_xlate_add() to take care of spacing, Phil Sutter
  • [iptables PATCH 4/4] extensions: xlate: Format sets consistently, Phil Sutter
  • [iptables PATCH 2/4] extensions: Leverage xlate auto-spacing, Phil Sutter
  • [iptables PATCH 3/4] extensions: libxt_conntrack: Drop extra whitespace in xlate, Phil Sutter
  • Re: [iptables PATCH 1/4] libxtables: xt_xlate_add() to take care of spacing, Phil Sutter
• [linux-next:master] BUILD REGRESSION c35bd4e428856ed8c1fae7f7dfa08a9141c153d1, kernel test robot
• [PATCH nf] netfilter: fix using __this_cpu_add in preemptible in nf_flow_table_offload, Xin Long
  • Re: [PATCH nf] netfilter: fix using __this_cpu_add in preemptible in nf_flow_table_offload, Pablo Neira Ayuso
• [PATCH nf] netfilter: fix using __this_cpu_add in preemptible in nf_conntrack_core, Xin Long
• [nft PATCH 0/4] xt: Rewrite unsupported compat expression dumping, Phil Sutter
  • [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping, Phil Sutter
    • Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping, Florian Westphal
      • Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping, Phil Sutter
        • Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping, Florian Westphal
    • Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping, Pablo Neira Ayuso
      • Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping, Phil Sutter
        • Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping, Pablo Neira Ayuso
  • [nft PATCH 1/4] xt: Delay libxtables access until translation, Phil Sutter
    • Re: [nft PATCH 1/4] xt: Delay libxtables access until translation, Pablo Neira Ayuso
      • Re: [nft PATCH 1/4] xt: Delay libxtables access until translation, Phil Sutter
        • Re: [nft PATCH 1/4] xt: Delay libxtables access until translation, Pablo Neira Ayuso
  • [nft PATCH 2/4] xt: Purify enum nft_xt_type, Phil Sutter
  • [nft PATCH 4/4] xt: Fall back to generic printing from translation, Phil Sutter
  • Re: [nft PATCH 0/4] xt: Rewrite unsupported compat expression dumping, Phil Sutter
• [PATCH iptables-nft 0/3] remove escape_quotes support, Florian Westphal
  • [PATCH iptables-nft 3/3] extensions: remove trailing spaces, Florian Westphal
    • Re: [PATCH iptables-nft 3/3] extensions: remove trailing spaces, Phil Sutter
      • Re: [PATCH iptables-nft 3/3] extensions: remove trailing spaces, Florian Westphal
  • [PATCH iptables-nft 2/3] extensions: change expected output for new format, Florian Westphal
  • [PATCH iptables-nft 1/3] xlate: get rid of escape_quotes, Florian Westphal
    • Re: [PATCH iptables-nft 1/3] xlate: get rid of escape_quotes, Phil Sutter
      • Re: [PATCH iptables-nft 1/3] xlate: get rid of escape_quotes, Florian Westphal
• [PATCH nf] nft_set_pipapo: Actually validate intervals in fields after the first one, Stefano Brivio
  • Re: [PATCH nf] nft_set_pipapo: Actually validate intervals in fields after the first one, Pablo Neira Ayuso
• [PATCH nft] src: support for selectors with different byteorder with interval concatenations, Pablo Neira Ayuso
  • Re: [PATCH nft] src: support for selectors with different byteorder with interval concatenations, Eric Garver
• [PATCH conntrackd 1/3] build: don't suppress various warnings, Pablo Neira Ayuso
  • [PATCH conntrackd 2/3] network: Fix -Wstrict-prototypes, Pablo Neira Ayuso
  • [PATCH conntrackd 3/3] Fix -Wimplicit-function-declaration, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH conntrackd 1/3] build: don't suppress various warnings, Pablo Neira Ayuso
    • [PATCH conntrack 2/2] conntrack: do not silence EEXIST error, use NLM_F_EXCL, Pablo Neira Ayuso
    • [PATCH conntrack 1/2] conntrack: do not ignore errors coming from the kernel, Pablo Neira Ayuso
    • [PATCH conntrackd 2/3] network: Fix -Wstrict-prototypes, Pablo Neira Ayuso
    • Re: [PATCH conntrackd 1/3] build: don't suppress various warnings, Pablo Neira Ayuso
• [iptables PATCH 00/13] Extensions: Review xlate callbacks, Phil Sutter
  • [iptables PATCH 01/13] extensions: libebt_mark: Fix mark target xlate, Phil Sutter
  • [iptables PATCH 07/13] extensions: TCPMSS: Use xlate callback for IPv6, too, Phil Sutter
  • [iptables PATCH 08/13] extensions: TOS: Fix v1 xlate callback, Phil Sutter
  • [iptables PATCH 11/13] extensions: libebt_log: Add comment to clarify xlate callback, Phil Sutter
  • [iptables PATCH 10/13] extensions: tcp: Translate TCP option match, Phil Sutter
  • [iptables PATCH 09/13] extensions: ecn: Sanitize xlate callback, Phil Sutter
  • [iptables PATCH 03/13] extensions: libebt_redirect: Fix xlate return code, Phil Sutter
  • [iptables PATCH 02/13] extensions: libebt_mark: Fix xlate test case, Phil Sutter
  • [iptables PATCH 12/13] extensions: frag: Add comment to clarify xlate callback, Phil Sutter
  • [iptables PATCH 06/13] extensions: MARK: Sanitize MARK_xlate(), Phil Sutter
  • [iptables PATCH 13/13] extensions: ipcomp: Add comment to clarify xlate callback, Phil Sutter
  • [iptables PATCH 05/13] extensions: CONNMARK: Fix xlate callback, Phil Sutter
  • [iptables PATCH 04/13] extensions: libipt_ttl: Sanitize xlate callback, Phil Sutter
  • Re: [iptables PATCH 00/13] Extensions: Review xlate callbacks, Florian Westphal
    • Re: [iptables PATCH 00/13] Extensions: Review xlate callbacks, Phil Sutter
• [PATCH iptables-nft] iptables-nft: exit nonzero when iptables-save cannot decode all expressions, Florian Westphal
  • Re: [PATCH iptables-nft] iptables-nft: exit nonzero when iptables-save cannot decode all expressions, Phil Sutter
• [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Florian Westphal
  • Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Eric Garver
  • Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, kernel test robot
  • Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Pablo Neira Ayuso
    • Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Florian Westphal
• [PATCH 6.0 306/314] netlink: Bounds-check struct nlmsgerr creation, Greg Kroah-Hartman
• [PATCH 0/1] ipset patch for the nf-next tree, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: ipset: Add support for new bitmask parameter, Jozsef Kadlecsik
• [PATCHv7 0/6] ipvs: Use kthreads for stats, Julian Anastasov
  • [PATCHv7 1/6] ipvs: add rcu protection to stats, Julian Anastasov
  • [PATCHv7 5/6] ipvs: add est_cpulist and est_nice sysctl vars, Julian Anastasov
  • [PATCHv7 6/6] ipvs: run_estimation should control the kthread tasks, Julian Anastasov
  • [PATCHv7 3/6] ipvs: use u64_stats_t for the per-cpu counters, Julian Anastasov
  • [PATCHv7 2/6] ipvs: use common functions for stats allocation, Julian Anastasov
  • [PATCHv7 4/6] ipvs: use kthreads for stats estimation, Julian Anastasov
  • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Pablo Neira Ayuso
    • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Pablo Neira Ayuso
      • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Julian Anastasov
        • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Pablo Neira Ayuso
          • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Julian Anastasov
• [PATCH ulogd2 00/34] Refactor of the DB output plug-ins, Jeremy Sowden
  • [PATCH ulogd2 08/34] src: parenthesize config-entry macro arguments, Jeremy Sowden
  • [PATCH ulogd2 06/34] src: remove some trailing white space, Jeremy Sowden
  • [PATCH ulogd2 01/34] ulogd: fix parse-error check, Jeremy Sowden
  • [PATCH ulogd2 03/34] output: JSON: remove incorrect config value check, Jeremy Sowden
  • [PATCH ulogd2 09/34] src: define constructors and destructors consistently, Jeremy Sowden
  • [PATCH ulogd2 02/34] filter: fix buffer overruns in filter plug-ins, Jeremy Sowden
  • [PATCH ulogd2 04/34] db: fix back-log capacity checks, Jeremy Sowden
  • [PATCH ulogd2 05/34] build: add checks to configure.ac, Jeremy Sowden
  • [PATCH ulogd2 07/34] src: remove zero-valued config-key fields, Jeremy Sowden
  • [PATCH ulogd2 11/34] src: remove superfluous casts, Jeremy Sowden
  • [PATCH ulogd2 22/34] db: refactor ring-buffer, Jeremy Sowden
  • [PATCH ulogd2 17/34] db: change return type of two functions to `void`, Jeremy Sowden
  • [PATCH ulogd2 15/34] db: reorganize source, Jeremy Sowden
  • [PATCH ulogd2 33/34] output: pgsql: add prep & exec support, Jeremy Sowden
  • [PATCH ulogd2 10/34] src: remove `TIME_ERR` macro, Jeremy Sowden
  • [PATCH ulogd2 26/34] db: avoid cancelling ring-buffer thread, Jeremy Sowden
  • [PATCH ulogd2 27/34] db, IP2BIN: defer formatting of raw strings, Jeremy Sowden
  • [PATCH ulogd2 23/34] db: refactor backlog, Jeremy Sowden
  • [PATCH ulogd2 31/34] output: pgsql: remove variable-length arrays, Jeremy Sowden
  • [PATCH ulogd2 32/34] output: pgsql: tidy up `open_db_pgsql` and fix memory leak, Jeremy Sowden
  • [PATCH ulogd2 19/34] db: improve calculation of sql statement length, Jeremy Sowden
  • [PATCH ulogd2 14/34] output: de-duplicate allocation of input keys, Jeremy Sowden
  • [PATCH ulogd2 29/34] output: mysql: add prep & exec support, Jeremy Sowden
  • [PATCH ulogd2 18/34] db: open-code `_loop_reconnect_db`, Jeremy Sowden
  • [PATCH ulogd2 34/34] output: sqlite3: reimplement using the common DB API, Jeremy Sowden
  • [PATCH ulogd2 20/34] db: refactor configuration, Jeremy Sowden
  • [PATCH ulogd2 13/34] output: remove zero-initialized `struct ulogd_plugin` members, Jeremy Sowden
  • [PATCH ulogd2 21/34] db: refactor ring-buffer initialization, Jeremy Sowden
  • [PATCH ulogd2 12/34] conffile: replace malloc+strcpy with strdup, Jeremy Sowden
  • [PATCH ulogd2 25/34] db: synchronize access to ring-buffer, Jeremy Sowden
  • [PATCH ulogd2 24/34] db: use `struct db_stmt` objects more widely, Jeremy Sowden
  • [PATCH ulogd2 30/34] output: pgsql: remove a couple of struct members, Jeremy Sowden
  • [PATCH ulogd2 28/34] db: add prep & exec support, Jeremy Sowden
  • [PATCH ulogd2 16/34] db: use consistent integer return values to indicate errors, Jeremy Sowden
• [ANNOUNCE] ipset 7.16 released, Jozsef Kadlecsik
• [PATCH] netfilter: nf_flow_table: add missing locking, Felix Fietkau
  • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Felix Fietkau
    • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Eric Dumazet
      • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Felix Fietkau
        • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Jakub Kicinski
          • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Felix Fietkau
  • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Pablo Neira Ayuso
• [iptables-nft RFC 0/5] update iptables-nft dissector, Florian Westphal
  • [iptables-nft RFC 2/5] iptables-nft: do not refuse to decode table with unsupported expressions, Florian Westphal
  • [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Florian Westphal
    • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Phil Sutter
      • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Florian Westphal
        • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Phil Sutter
          • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Florian Westphal
            • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Phil Sutter
  • [iptables-nft RFC 3/5] nft: check for unknown meta keys, Florian Westphal
  • [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Florian Westphal
    • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Phil Sutter
      • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Florian Westphal
        • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Phil Sutter
          • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Florian Westphal
            • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Phil Sutter
  • [iptables-nft RFC 5/5] generic.xlate: make one replay test case work, Florian Westphal
    • Re: [iptables-nft RFC 5/5] generic.xlate: make one replay test case work, Phil Sutter
• [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
  • [nft PATCH v2 2/4] xt: Implement dump and restore support, Phil Sutter
  • [nft PATCH v2 1/4] xt: Delay libxtables access until translation, Phil Sutter
  • [nft PATCH v2 3/4] xt: Put match/target translation into own functions, Phil Sutter
  • [nft PATCH v2 4/4] xt: Detect xlate callback failure, Phil Sutter
  • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Florian Westphal
    • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Pablo Neira Ayuso
      • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
    • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
      • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Pablo Neira Ayuso
        • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
          • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Florian Westphal
            • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
              • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Pablo Neira Ayuso
                • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
                  • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Florian Westphal
                    • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Pablo Neira Ayuso
                      • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
• netfilter bpf-jit patchset: test results, Florian Westphal
• Missing definition of struct "pkt_buff" for libnetfilter_queue, Shockedder
  • Re: Missing definition of struct "pkt_buff" for libnetfilter_queue, Jeremy Sowden
    • Message not available
      • Re: Missing definition of struct "pkt_buff" for libnetfilter_queue, Jeremy Sowden
• [iptables PATCH] extensions: mark: Test double bitwise in a rule, Phil Sutter
  • Re: [iptables PATCH] extensions: mark: Test double bitwise in a rule, Phil Sutter
• [PATCH net-next/netfilter] netfilter: nft_inner: fix IS_ERR() vs NULL check, Dan Carpenter
  • <Possible follow-ups>
  • [PATCH net-next/netfilter] netfilter: nft_inner: fix IS_ERR() vs NULL check, Dan Carpenter
    • Re: [PATCH net-next/netfilter] netfilter: nft_inner: fix IS_ERR() vs NULL check, Pablo Neira Ayuso
• [PATCH libnftnl] src: replace nftnl_*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr(), Pablo Neira Ayuso
• [PATCH net-next,v2 0/6] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 1/6] netfilter: nft_payload: use __be16 to store gre version, Pablo Neira Ayuso
    • Re: [PATCH net-next 1/6] netfilter: nft_payload: use __be16 to store gre version, patchwork-bot+netdevbpf
  • [PATCH net-next 2/6] netfilter: nft_inner: fix return value check in nft_inner_parse_l2l3(), Pablo Neira Ayuso
  • [PATCH net-next 4/6] netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET, Pablo Neira Ayuso
  • [PATCH net-next 3/6] netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters, Pablo Neira Ayuso
  • [PATCH net-next 6/6] netfilter: conntrack: use siphash_4u64, Pablo Neira Ayuso
  • [PATCH net-next 5/6] netfilter: rpfilter/fib: clean up some inconsistent indenting, Pablo Neira Ayuso
• [PATCH iptables] nft-shared: replace nftnl_expr_get_data() by nftnl_expr_get(), Pablo Neira Ayuso
  • Re: [PATCH iptables] nft-shared: replace nftnl_expr_get_data() by nftnl_expr_get(), Phil Sutter
• [PATCH iptables] nft: replace nftnl_.*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr(), Pablo Neira Ayuso
  • Re: [PATCH iptables] nft: replace nftnl_.*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr(), Phil Sutter
• [PATCH libnftnl] example: remove nftnl_batch_is_supported() call, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: add __force annotation to silence harmless warning, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: add __force annotation to silence harmless warning, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: do not set up extensions for end interval, Pablo Neira Ayuso
• [iptables PATCH] Drop extra newline from xtables_error() calls, Phil Sutter
  • Re: [iptables PATCH] Drop extra newline from xtables_error() calls, Phil Sutter
• [iptables PATCH 0/7] De-duplicate code here and there, Phil Sutter
  • [iptables PATCH 6/7] extensions: Collate ICMP types/codes in libxt_icmp.h, Phil Sutter
  • [iptables PATCH 3/7] extensions: libip*t_LOG: Merge extensions, Phil Sutter
  • [iptables PATCH 4/7] extensions: libebt_ip: Include kernel header, Phil Sutter
  • [iptables PATCH 7/7] extensions: Unify ICMP parser into libxt_icmp.h, Phil Sutter
  • [iptables PATCH 1/7] xshared: Share make_delete_mask() between ip{,6}tables, Phil Sutter
  • [iptables PATCH 2/7] nft-shared: Introduce port_match_single_to_range(), Phil Sutter
  • [iptables PATCH 5/7] extensions: libebt_arp, libebt_ip: Use xtables_ipparse_any(), Phil Sutter
  • Re: [iptables PATCH 0/7] De-duplicate code here and there, Phil Sutter
• [nft PATCH 0/3] xt: Implement dump and restore support, Phil Sutter
  • [nft PATCH 1/3] xt: Delay libxtables access until translation, Phil Sutter
  • [nft PATCH 2/3] xt: Implement dump and restore support, Phil Sutter
  • [nft PATCH 3/3] xt: Put match/target translation into own functions, Phil Sutter
• [PATCH nft] monitor: missing cache and set handle initialization, Pablo Neira Ayuso
• [linux-next:master] BUILD REGRESSION 382d2f9e739bc6f151c718b38537ae522ff848cd, kernel test robot
• [PATCH v3 0/6] netfilter: ipset: Add support for new bitmask parameter (userspace), Vishwanath Pai
  • [PATCH v3 1/6] netfilter: ipset: Add support for new bitmask parameter, Vishwanath Pai
  • [PATCH v3 2/6] netfilter: ipset: Add bitmask support to hash:ip, Vishwanath Pai
  • [PATCH v3 3/6] netfilter: ipset: Add bitmask support to hash:ipport, Vishwanath Pai
  • [PATCH v3 4/6] netfilter: ipset: Add bitmask support to hash:netnet, Vishwanath Pai
  • [PATCH v3 5/6] netfilter: ipset: Update the man page to include netmask/bitmask options, Vishwanath Pai
  • [PATCH v3 6/6] netfilter: ipset: add tests for the new bitmask feature, Vishwanath Pai
  • Re: [PATCH v3 0/6] netfilter: ipset: Add support for new bitmask parameter (userspace), Jozsef Kadlecsik
• [PATCH v3] netfilter: ipset: Add support for new bitmask parameter, Vishwanath Pai
• RE: PATCH ulogd2 filter BASE ARP packet IP addresses, Robert O'Brien
  • Re: PATCH ulogd2 filter BASE ARP packet IP addresses, Pablo Neira Ayuso
    • RE: PATCH ulogd2 filter BASE ARP packet IP addresses, Robert O'Brien
      • Re: PATCH ulogd2 filter BASE ARP packet IP addresses, Pablo Neira Ayuso
        • Re: PATCH ulogd2 filter BASE ARP packet IP addresses, Jeremy Sowden
          • Re: PATCH ulogd2 filter BASE ARP packet IP addresses, Jeremy Sowden
• Avoid race between tcp_packet packet processing and timeout set by a netfilter CTA_TIMEOUT message, Tula Kraiser
  • Re: Avoid race between tcp_packet packet processing and timeout set by a netfilter CTA_TIMEOUT message, Pablo Neira Ayuso
• [ANNOUNCE] libnftnl 1.2.4 release, Pablo Neira Ayuso
• [PATCH v2] netfilter: ctmark: Fix data-races around ctmark, Daniel Xu
  • Re: [PATCH v2] netfilter: ctmark: Fix data-races around ctmark, Pablo Neira Ayuso
• [PATCH] netfilter: ctmark: Fix data-races around ctmark, Daniel Xu
  • Re: [PATCH] netfilter: ctmark: Fix data-races around ctmark, Florian Westphal
• [PATCH nf-next] netfilter: merge ipv4+ipv6 confirm functions, Florian Westphal
  • Re: [PATCH nf-next] netfilter: merge ipv4+ipv6 confirm functions, Pablo Neira Ayuso
• [PATCH nft] doc: document a few reset commands supported by the parser, Pablo Neira Ayuso
• [nf PATCH] selftests: netfilter: Fix and review rpath.sh, Phil Sutter
  • Re: [nf PATCH] selftests: netfilter: Fix and review rpath.sh, Pablo Neira Ayuso
• [iptables PATCH 0/3] Extend xlate-test to replay results, Phil Sutter
  • [iptables PATCH 3/3] tests: xlate-test: Replay results for reverse direction testing, Phil Sutter
  • [iptables PATCH 2/3] tests: xlate-test.py: Introduce run_proc(), Phil Sutter
  • [iptables PATCH 1/3] tests: xlate-test: Cleanup file reading loop, Phil Sutter
  • Re: [iptables PATCH 0/3] Extend xlate-test to replay results, Phil Sutter
• [GIT PULL] treewide: timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • Re: [GIT PULL] treewide: timers: Use timer_shutdown*() before freeing timers, Thomas Gleixner
• [PATCH v6a 0/5] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
• [PATCH v3] netfilter: conntrack: add sctp DATA_SENT state, Sriram Yagnaraman
  • Re: [PATCH v3] netfilter: conntrack: add sctp DATA_SENT state, Pablo Neira Ayuso
    • Re: [PATCH v3] netfilter: conntrack: add sctp DATA_SENT state, Sriram Yagnaraman
• [PATCH ulogd2] doc: mysql: declare MAC protocol columns unsigned, Jeremy Sowden
  • Re: [PATCH ulogd2] doc: mysql: declare MAC protocol columns unsigned, Pablo Neira Ayuso
• [PATCH nft] optimize: handle prefix and range when merging into set + concatenation, Pablo Neira Ayuso
• [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • [PATCH v4a 17/38] timers: net: Use timer_shutdown_sync() before freeing timer, Steven Rostedt
  • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
    • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
    • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
      • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
      • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
        • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
        • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
      • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Jason A. Donenfeld
        • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
          • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
          • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
    • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
• [nf-next RFC] netfilter: nf_tables: Compatibility interface for nft_rule, Phil Sutter
  • Re: [nf-next RFC] netfilter: nf_tables: Compatibility interface for nft_rule, Pablo Neira Ayuso
    • Re: [nf-next RFC] netfilter: nf_tables: Compatibility interface for nft_rule, Phil Sutter
• [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • [RFC][PATCH v3 19/33] timers: net: Use timer_shutdown_sync() before freeing timer, Steven Rostedt
  • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
  • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
    • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
      • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
      • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
        • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
      • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
  • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
• [PATCH] netfilter: rpfilter/fib: clean up some inconsistent indenting, Jiapeng Chong
• [PATCH] netfilter: Cleanup nft_net->module_list from nf_tables_exit_net(), Shigeru Yoshida
  • Re: [PATCH] netfilter: Cleanup nft_net->module_list from nf_tables_exit_net(), Florian Westphal
• [iptables PATCH 0/6] Merge NAT extensions, Phil Sutter
  • [iptables PATCH 2/6] extensions: *NAT: Drop NF_NAT_RANGE_PROTO_RANDOM* flag checks, Phil Sutter