Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH net 3/3] netfilter: flowtable: validate vlan header, (continued)
  • Re: [PATCH net 3/3] netfilter: flowtable: validate vlan header, Eric Dumazet
    • Re: [PATCH net 3/3] netfilter: flowtable: validate vlan header, Pablo Neira Ayuso
  • [PATCH net 0/3] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/3] netfilter: fib: check correct rtable in vrf setups, Pablo Neira Ayuso
    • [PATCH net 1/3] netfilter: xtables: avoid NFPROTO_UNSPEC where needed, Pablo Neira Ayuso
      • Re: [PATCH net 1/3] netfilter: xtables: avoid NFPROTO_UNSPEC where needed, patchwork-bot+netdevbpf
    • [PATCH net 3/3] selftests: netfilter: conntrack_vrf.sh: add fib test case, Pablo Neira Ayuso
  • [PATCH net 0/3] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/3] selftests: netfilter: Add missing gitignore file, Pablo Neira Ayuso
      • Re: [PATCH net 1/3] selftests: netfilter: Add missing gitignore file, patchwork-bot+netdevbpf
    • [PATCH net 2/3] selftests: netfilter: Fix missing return values in conntrack_dump_flush, Pablo Neira Ayuso
    • [PATCH net 3/3] netfilter: ipset: add missing range check in bitmap_ip_uadt, Pablo Neira Ayuso
    • Re: [PATCH net 0/3] Netfilter fixes for net, Paolo Abeni
      • Re: [PATCH net 0/3] Netfilter fixes for net, Pablo Neira Ayuso
        • Re: [PATCH net 0/3] Netfilter fixes for net, Paolo Abeni
          • Re: [PATCH net 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 0/3] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/3] netfilter: IDLETIMER: Fix for possible ABBA deadlock, Pablo Neira Ayuso
    • [PATCH net 1/3] selftests: netfilter: Stabilize rpath.sh, Pablo Neira Ayuso
      • Re: [PATCH net 1/3] selftests: netfilter: Stabilize rpath.sh, patchwork-bot+netdevbpf
    • [PATCH net 3/3] netfilter: nf_tables: do not defer rule destruction via call_rcu, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack] examples: check return value of nfct_nlmsg_build(), Eyal Birger
  • Re: [PATCH libnetfilter_conntrack] examples: check return value of nfct_nlmsg_build(), Pablo Neira Ayuso
• WARNING: suspicious RCU usage in xt_obj_to_user, syzbot
• Announcing Netdev 0x15, Jamal Hadi Salim
• [PATCH nf 1/2] netfilter: nft_dynset: report EOPNOTSUPP on missing set feature, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nftables: add set expression flags, Pablo Neira Ayuso
• stack corruption with EBT_ENTRY_ITERATE, sharathv
• [PATCH conntrack-tools] conntrackd: add ip netns test script, Pablo Neira Ayuso
  • Re: [PATCH conntrack-tools] conntrackd: add ip netns test script, Arturo Borrero Gonzalez
    • Re: [PATCH conntrack-tools] conntrackd: add ip netns test script, Pablo Neira Ayuso
• kernel BUG at lib/string.c:LINE! (6), syzbot
  • Re: kernel BUG at lib/string.c:LINE! (6), Linus Torvalds
    • Re: kernel BUG at lib/string.c:LINE! (6), Florian Westphal
      • Re: kernel BUG at lib/string.c:LINE! (6), Dmitry Vyukov
  • [PATCH nf] netfilter: xt_RATEEST: reject non-null terminated string from userspace, Florian Westphal
    • Re: [PATCH nf] netfilter: xt_RATEEST: reject non-null terminated string from userspace, Linus Torvalds
      • Re: [PATCH nf] netfilter: xt_RATEEST: reject non-null terminated string from userspace, Florian Westphal
    • Re: [PATCH nf] netfilter: xt_RATEEST: reject non-null terminated string from userspace, Pablo Neira Ayuso
• [PATCH ghak90 v10 00/11] audit: implement container identifier, Richard Guy Briggs
  • [PATCH ghak90 v10 01/11] audit: collect audit task parameters, Richard Guy Briggs
    • Re: [PATCH ghak90 v10 01/11] audit: collect audit task parameters, Paul Moore
      • Re: [PATCH ghak90 v10 01/11] audit: collect audit task parameters, Richard Guy Briggs
  • [PATCH ghak90 v10 02/11] audit: add container id, Richard Guy Briggs
  • [PATCH ghak90 v10 03/11] audit: log container info of syscalls, Richard Guy Briggs
  • [PATCH ghak90 v10 04/11] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
  • [PATCH ghak90 v10 06/11] audit: add containerid support for user records, Richard Guy Briggs
  • [PATCH ghak90 v10 05/11] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
  • [PATCH ghak90 v10 07/11] audit: add containerid filtering, Richard Guy Briggs
  • [PATCH ghak90 v10 08/11] audit: add support for containerid to network namespaces, Richard Guy Briggs
  • [PATCH ghak90 v10 09/11] audit: contid check descendancy and nesting, Richard Guy Briggs
  • [PATCH ghak90 v10 10/11] audit: track container nesting, Richard Guy Briggs
  • [PATCH ghak90 v10 11/11] audit: add capcontid to set contid outside init_user_ns, Richard Guy Briggs
• [ANNOUNCE] ipset 7.10 released, Jozsef Kadlecsik
• Re: INFO: rcu detected stall in tipc_release, syzbot
  • Re: INFO: rcu detected stall in tipc_release, Dmitry Vyukov
• [PATCH nft] tests: shell: set element multistatement support, Pablo Neira Ayuso
• [PATCH nft 1/2,v2] src: add support for multi-statement in dynamic sets and maps, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: add set element multi-statement support, Pablo Neira Ayuso
• [PATCH nft,v2] src: disallow burst 0 in ratelimits, Pablo Neira Ayuso
• [PATCH 1/3 libnftnl,v2] src: add NFTNL_SET_ELEM_EXPRESSIONS, Pablo Neira Ayuso
  • [PATCH 2/3 libnftnl,v2] src: add NFTNL_SET_EXPRESSIONS, Pablo Neira Ayuso
  • [PATCH 3/3 libnftnl,v2] src: add NFTNL_EXPR_DYNSET_EXPRESSIONS, Pablo Neira Ayuso
• [PATCH v2] netfilter: ipset: fix shift-out-of-bounds in htable_bits(), Vasily Averin
  • Re: [PATCH v2] netfilter: ipset: fix shift-out-of-bounds in htable_bits(), Jozsef Kadlecsik
  • Re: [PATCH v2] netfilter: ipset: fix shift-out-of-bounds in htable_bits(), Pablo Neira Ayuso
• [PATCH nf] parser_bison: disallow burst 0 in ratelimits, Pablo Neira Ayuso
• [PATCH nft 0/2] multi-statement support for set elements, Pablo Neira Ayuso
  • [PATCH nft 1/2] src: add support for multi-statement in dynamic sets and maps, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: add set element multi-statement support, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: fixes possible oops in mtype_resize, Vasily Averin
  • Re: [PATCH] netfilter: ipset: fixes possible oops in mtype_resize, Jozsef Kadlecsik
  • Re: [PATCH] netfilter: ipset: fixes possible oops in mtype_resize, Pablo Neira Ayuso
• [PATCH nf] netfilter: x_tables: Update remaining dereference to RCU, Subash Abhinov Kasiviswanathan
  • Re: [PATCH nf] netfilter: x_tables: Update remaining dereference to RCU, Florian Westphal
  • Re: [PATCH nf] netfilter: x_tables: Update remaining dereference to RCU, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrack: pretty-print the portid, Florian Westphal
• UBSAN: shift-out-of-bounds in hash_ipmark_create, syzbot
• WARNING: suspicious RCU usage in nf_ct_iterate_cleanup, syzbot
• [nft PATCH] tests: py: Fix for changed concatenated ranges output, Phil Sutter
• [PATCH][next] netfilter: nftables: fix incorrect increment of loop counter, Colin King
  • Re: [PATCH][next] netfilter: nftables: fix incorrect increment of loop counter, Pablo Neira Ayuso
    • Re: [PATCH][next] netfilter: nftables: fix incorrect increment of loop counter, Pablo Neira Ayuso
  • Re: [PATCH][next] netfilter: nftables: fix incorrect increment of loop counter, Pablo Neira Ayuso
• [libnftnl PATCH 1/2] set_elem: Use nftnl_data_reg_snprintf(), Phil Sutter
  • [libnftnl PATCH 2/2] set_elem: Include key_end data reg in print output, Phil Sutter
  • Re: [libnftnl PATCH 1/2] set_elem: Use nftnl_data_reg_snprintf(), Pablo Neira Ayuso
    • Re: [libnftnl PATCH 1/2] set_elem: Use nftnl_data_reg_snprintf(), Phil Sutter
• [PATCH nft] json: don't leave dangling pointers on hlist, Florian Westphal
• UBSAN: shift-out-of-bounds in hash_mac_create, syzbot
• [PATCH net-next 00/10] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 04/10] netfilter: nfnl_acct: remove data from struct net, Pablo Neira Ayuso
  • [PATCH net-next 09/10] netfilter: nftables: generalize set extension to support for several expressions, Pablo Neira Ayuso
  • [PATCH net-next 06/10] netfilter: ctnetlink: add timeout and protoinfo to destroy events, Pablo Neira Ayuso
  • [PATCH net-next 10/10] netfilter: nftables: netlink support for several set element expressions, Pablo Neira Ayuso
  • [PATCH net-next 07/10] netfilter: nftables: generalize set expressions support, Pablo Neira Ayuso
  • [PATCH net-next 05/10] netfilter: use actual socket sk for REJECT action, Pablo Neira Ayuso
  • [PATCH net-next 08/10] netfilter: nftables: move nft_expr before nft_set, Pablo Neira Ayuso
  • [PATCH net-next 01/10] netfilter: nft_reject_bridge: fix build errors due to code movement, Pablo Neira Ayuso
  • [PATCH net-next 03/10] netfilter: Remove unnecessary conversion to bool, Pablo Neira Ayuso
  • [PATCH net-next 02/10] ipvs: replace atomic_add_return(), Pablo Neira Ayuso
  • Re: [PATCH net-next 00/10] Netfilter/IPVS updates for net-next, Jakub Kicinski
• [PATCH libnftnl 1/3] src: add NFTNL_SET_ELEM_EXPRESSIONS, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3] src: add NFTNL_SET_EXPRESSIONS, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] src: add NFTNL_EXPR_DYNSET_EXPRESSIONS, Pablo Neira Ayuso
• [PATCH nft] nft: trace: print packet unconditionally, Florian Westphal
  • Re: [PATCH nft] nft: trace: print packet unconditionally, Florian Westphal
• [PATCH xtables-nft 0/3] xt-monitor fixes, Florian Westphal
  • [PATCH xtables-nft 1/3] xtables-monitor: fix rule printing, Florian Westphal
    • Re: [PATCH xtables-nft 1/3] xtables-monitor: fix rule printing, Phil Sutter
  • [PATCH xtables-nft 2/3] xtables-monitor: fix packet family protocol, Florian Westphal
  • [PATCH xtables-nft 3/3] xtables-monitor: print packet first, Florian Westphal
    • Re: [PATCH xtables-nft 3/3] xtables-monitor: print packet first, Phil Sutter
      • Re: [PATCH xtables-nft 3/3] xtables-monitor: print packet first, Florian Westphal
• [PATCH nf-next,v4 1/4] netfilter: nftables: generalize set expressions support, Pablo Neira Ayuso
  • [PATCH nf-next,v4 2/4] netfilter: nftables: move nft_expr before nft_set, Pablo Neira Ayuso
  • [PATCH nf-next,v4 3/4] netfilter: nftables: generalize set extension to support for several expressions, Pablo Neira Ayuso
  • [PATCH nf-next,v4 4/4] netfilter: nftables: netlink support for several set element expressions, Pablo Neira Ayuso
• [PATCH nf-next,v3] netfilter: ctnetlink: add timeout and protoinfo to destroy events, Pablo Neira Ayuso
• [PATCH nf-next,v3 1/4] netfilter: nftables: generalize set expressions support, Pablo Neira Ayuso
  • [PATCH nf-next,v3 4/4] netfilter: nftables: netlink support for several set element expressions, Pablo Neira Ayuso
  • [PATCH nf-next,v3 2/4] netfilter: nftables: move nft_expr before nft_set, Pablo Neira Ayuso
  • [PATCH nf-next,v3 3/4] netfilter: nftables: generalize set extension to support for several expressions, Pablo Neira Ayuso
• [PATCH nf-next v2 1/1] netfilter: ctnetlink: add timeout and protoinfo to destroy events, Florian Westphal
  • Re: [PATCH nf-next v2 1/1] netfilter: ctnetlink: add timeout and protoinfo to destroy events, Pablo Neira Ayuso
• [iptables PATCH v3 0/9] nft: Sorted chain listing et al., Phil Sutter
  • [iptables PATCH v3 7/9] nft: cache: Sort custom chains by name, Phil Sutter
  • [iptables PATCH v3 2/9] nft: cache: Introduce nft_cache_add_chain(), Phil Sutter
  • [iptables PATCH v3 6/9] nft: Introduce a dedicated base chain array, Phil Sutter
  • [iptables PATCH v3 8/9] tests: shell: Drop any dump sorting in place, Phil Sutter
  • [iptables PATCH v3 4/9] nft: cache: Move nft_chain_find() over, Phil Sutter
  • [iptables PATCH v3 3/9] nft: Implement nft_chain_foreach(), Phil Sutter
  • [iptables PATCH v3 5/9] nft: Introduce struct nft_chain, Phil Sutter
  • [iptables PATCH v3 1/9] nft: Fix selective chain compatibility checks, Phil Sutter
  • [iptables PATCH v3 9/9] nft: Avoid pointless table/chain creation, Phil Sutter
  • Re: [iptables PATCH v3 0/9] nft: Sorted chain listing et al., Phil Sutter
• [PATCH nf-next] netfilter: ctnetlink: always include remaining timeout, Florian Westphal
  • Re: [PATCH nf-next] netfilter: ctnetlink: always include remaining timeout, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: ctnetlink: always include remaining timeout, Florian Westphal
• [PATCH nft 0/10] nft: add automatic icmp/icmpv6 dependencies, Florian Westphal
  • [PATCH nft 01/10] exthdr: remove unused proto_key member from struct, Florian Westphal
  • [PATCH nft 03/10] src: add auto-dependencies for ipv4 icmp, Florian Westphal
  • [PATCH nft 04/10] tests: fix exepcted payload of icmp expressions, Florian Westphal
  • [PATCH nft 05/10] src: add auto-dependencies for ipv6 icmp6, Florian Westphal
  • [PATCH nft 07/10] payload: auto-remove simple icmp/icmpv6 dependency expressions, Florian Westphal
  • [PATCH nft 02/10] proto: reduce size of proto_desc structure, Florian Westphal
  • [PATCH nft 06/10] tests: fix exepcted payload of icmpv6 expressions, Florian Westphal
  • [PATCH nft 08/10] tests: icmp, icmpv6: avoid remaining warnings, Florian Westphal
  • [PATCH nft 10/10] tests: icmp, icmpv6: check we don't add second dependency, Florian Westphal
  • [PATCH nft 09/10] tests: ip: add one test case to cover both id and sequence, Florian Westphal
  • Re: [PATCH nft 0/10] nft: add automatic icmp/icmpv6 dependencies, Phil Sutter
• [PATCH 5/5 nf-next,v2] netfilter: nftables: netlink support for several set element expressions, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID, Brett Mastbergen
  • Re: [PATCH nf] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID, Pablo Neira Ayuso
• [PATCH net] net: sched: incorrect Kconfig dependencies on Netfilter modules, Pablo Neira Ayuso
  • Re: [PATCH net] net: sched: incorrect Kconfig dependencies on Netfilter modules, Jakub Kicinski
• [PATCH nf,v4] netfilter: nft_dynset: fix timeouts later than 23 days, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nf,v4] netfilter: nft_dynset: fix timeouts later than 23 days, Pablo Neira Ayuso
• [PATCH nft] tests: shell: timeouts later than 23 days, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nft] tests: shell: timeouts later than 23 days, Pablo Neira Ayuso
• [PATCH nf,v3] netfilter: nft_dynset: fix timeouts later than 23 days, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nft_dynset: fix timeouts later than 23 days, Pablo Neira Ayuso
• [PATCH nf] netfilter: nftables: comment indirect serialization of commit_mutex with rtnl_mutex, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nftables: comment indirect serialization of commit_mutex with rtnl_mutex, Vladimir Oltean
• [PATCH nf] netfilter: nft_dynset: fix timeouts layer than 23 days, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_dynset: fix timeouts layer than 23 days, kernel test robot
• [PATCH nf] netfilter: nftables: fix incorrect element timeout, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nftables: fix incorrect element timeout, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nftables: fix incorrect element timeout, kernel test robot
• [PATCH nft] parser_bison: double close_scope() call for implicit chains, Pablo Neira Ayuso
• [PATCH] Remove IP_NF_IPTABLES dependency for NET_ACT_CONNMARK, Andreas Sundstrom
  • Re: [PATCH] Remove IP_NF_IPTABLES dependency for NET_ACT_CONNMARK, Pablo Neira Ayuso
    • Re: [PATCH] Remove IP_NF_IPTABLES dependency for NET_ACT_CONNMARK, Andreas Sundstrom
      • Re: [PATCH] Remove IP_NF_IPTABLES dependency for NET_ACT_CONNMARK, Pablo Neira Ayuso
• [PATCH nf-next 0/5] support for several expression in set elements, Pablo Neira Ayuso
  • [PATCH nf-next 1/5] netfilter: nftables: generalize set expressions support, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nftables: add nft_expr_parse() helper function, Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nftables: move nft_expr before nft_set, Pablo Neira Ayuso
  • [PATCH nf-next 5/5] netfilter: nftables: netlink support for several set element expressions, Pablo Neira Ayuso
    • Re: [PATCH nf-next 5/5] netfilter: nftables: netlink support for several set element expressions, Florian Westphal
  • [PATCH nf-next 3/5] netfilter: nftables: generalize set extension to support for several expressions, Pablo Neira Ayuso
• [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Phil Sutter
  • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Nicolas Dichtel
    • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Phil Sutter
      • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Nicolas Dichtel
  • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Eyal Birger
    • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Phil Sutter
      • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Eyal Birger
        • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Nicolas Dichtel
          • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Eyal Birger
            • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Nicolas Dichtel
              • Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter, Phil Sutter
• [PATCH] xfrm: interface: Don't hide plain packets from netfilter, Phil Sutter
  • Re: [PATCH] xfrm: interface: Don't hide plain packets from netfilter, Steffen Klassert
• [PATCH nftables 1/2] monitor: add assignment check for json_echo, Jose M. Guisado Gomez
  • [PATCH nftables 2/2] monitor: fix formatting of if statements, Jose M. Guisado Gomez
    • Re: [PATCH nftables 2/2] monitor: fix formatting of if statements, Pablo Neira Ayuso
  • Re: [PATCH nftables 1/2] monitor: add assignment check for json_echo, Pablo Neira Ayuso
• [iptables PATCH] tests/shell: Test for fixed extension registration, Phil Sutter
• [conntrack-tools PATCH v2 1/2] .gitignore: add nano swap file, Arturo Borrero Gonzalez
  • [conntrack-tools PATCH v2 2/2] conntrackd: external_inject: report inject issues as warning, Arturo Borrero Gonzalez
    • Re: [conntrack-tools PATCH v2 2/2] conntrackd: external_inject: report inject issues as warning, Pablo Neira Ayuso
  • Re: [conntrack-tools PATCH v2 1/2] .gitignore: add nano swap file, Pablo Neira Ayuso
• [conntrack-tools PATCH 1/2] .gitignore: add nano swap file, Arturo Borrero Gonzalez
  • [conntrack-tools PATCH 2/2] conntrackd: external_inject: report inject issues as warning, Arturo Borrero Gonzalez
    • Re: [conntrack-tools PATCH 2/2] conntrackd: external_inject: report inject issues as warning, Jeremy Sowden
• [PATCH nft] src: report EPERM for non-root users, Pablo Neira Ayuso
  • Re: [PATCH nft] src: report EPERM for non-root users, Arturo Borrero Gonzalez
• [PATCH nft] mnl: reply netlink error message might be larger than MNL_SOCKET_BUFFER_SIZE, Pablo Neira Ayuso
• [iptables PATCH v3] extensions: dccp: Fix for DCCP type 'INVALID', Phil Sutter
• [nft PATCH] json: Fix seqnum_to_json() functionality, Phil Sutter
  • Re: [nft PATCH] json: Fix seqnum_to_json() functionality, Pablo Neira Ayuso
• [nft PATCH] doc: Document 'dccp type' match, Phil Sutter
• [iptables PATCH v2] extensions: dccp: Fix for DCCP type 'INVALID', Phil Sutter
• [PATCH nft] parser_bison: allow to restore limit from dynamic set, Pablo Neira Ayuso
• [iptables PATCH] extensions: dccp: Fix translation of --dccp-type, Phil Sutter
• System crash on Ubuntu 18, in netlink code when using iptables / netfilter, Yuri Lipnesh
  • Re: System crash on Ubuntu 18, in netlink code when using iptables / netfilter, Florian Westphal
    • Re: System crash on Ubuntu 18, in netlink code when using iptables / netfilter, Yuri Lipnesh
      • Re: System crash in netfilter 5.10.25, Yuri Lipnesh
        • Re: System crash in netfilter 5.10.25, Florian Westphal
• [PATCH libnetfilter_conntrack 1/2] build: use the right automake variables, Jan Engelhardt
  • [PATCH libnetfilter_conntrack 2/2] Update .gitignore, Jan Engelhardt
  • Re: [PATCH libnetfilter_conntrack 1/2] build: use the right automake variables, Pablo Neira Ayuso
• [PATCH libnetfilter_queue 1/2] build: choose right automake variables, Jan Engelhardt
  • [PATCH libnetfilter_queue 2/2] Update .gitignore, Jan Engelhardt
  • Re: [PATCH libnetfilter_queue 1/2] build: choose right automake variables, Pablo Neira Ayuso
• [PATCH libnetfilter_log] build: choose right automake variables, Jan Engelhardt
  • Re: [PATCH libnetfilter_log] build: choose right automake variables, Pablo Neira Ayuso
• [PATCH libnetfilter_log 0/2] build: a couple of `-lnfnetlink` fixes., Jeremy Sowden
  • [PATCH libnetfilter_log 1/2] build: remove duplicate `-lnfnetlink` from LDFLAGS., Jeremy Sowden
  • [PATCH libnetfilter_log 2/2] build: link libnetfilter_log_libipulog.so explicitly to libnfnetlink.so., Jeremy Sowden
  • Re: [PATCH libnetfilter_log 0/2] build: a couple of `-lnfnetlink` fixes., Florian Westphal
• WARNING: suspicious RCU usage in get_counters, syzbot
• [FYI] summary of Netfilter workshop 2020 virtual, Arturo Borrero Gonzalez
• [PATCH] netfilter: remove trailing semicolon in macro definition, trix
• [PATCH libftnl,RFC] src: add infrastructure to infer byteorder from keys, Pablo Neira Ayuso
  • Re: [PATCH libftnl,RFC] src: add infrastructure to infer byteorder from keys, Phil Sutter
    • Re: [PATCH libftnl,RFC] src: add infrastructure to infer byteorder from keys, Pablo Neira Ayuso
      • Re: [PATCH libftnl,RFC] src: add infrastructure to infer byteorder from keys, Pablo Neira Ayuso
• [HEADS UP] Rebasing nf tree, Pablo Neira Ayuso
• [PATCH nf v2] netfilter: x_tables: Switch synchronization to RCU, Subash Abhinov Kasiviswanathan
  • Re: [PATCH nf v2] netfilter: x_tables: Switch synchronization to RCU, Pablo Neira Ayuso
• XFRM interface and NF_INET_LOCAL_OUT hook, Phil Sutter
  • Re: XFRM interface and NF_INET_LOCAL_OUT hook, Steffen Klassert
    • Re: XFRM interface and NF_INET_LOCAL_OUT hook, Phil Sutter
      • Re: XFRM interface and NF_INET_LOCAL_OUT hook, Steffen Klassert
        • Re: XFRM interface and NF_INET_LOCAL_OUT hook, Phil Sutter
          • Re: XFRM interface and NF_INET_LOCAL_OUT hook, Steffen Klassert
            • Re: XFRM interface and NF_INET_LOCAL_OUT hook, Phil Sutter
            • Re: XFRM interface and NF_INET_LOCAL_OUT hook, Nicolas Dichtel
• [PATCH net v3] ipvs: fix possible memory leak in ip_vs_control_net_init, Wang Hai
  • Re: [PATCH net v3] ipvs: fix possible memory leak in ip_vs_control_net_init, Julian Anastasov
    • Re: [PATCH net v3] ipvs: fix possible memory leak in ip_vs_control_net_init, Pablo Neira Ayuso
• [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal, Antoine Tenart
  • Re: [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal, Florian Westphal
    • Re: [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal, Jakub Kicinski
      • Re: [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal, Florian Westphal
        • Re: [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal, Jakub Kicinski
• [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, Subash Abhinov Kasiviswanathan
  • Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, Florian Westphal
    • Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, subashab
      • Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, subashab
  • Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, kernel test robot
  • Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, kernel test robot
• [PATCH xtables-addons 0/4] geoip: script fixes, Jeremy Sowden
  • [PATCH xtables-addons 2/4] geoip: fix man-page typo'., Jeremy Sowden
    • Re: [PATCH xtables-addons 2/4] geoip: fix man-page typo'., Jan Engelhardt
  • [PATCH xtables-addons 1/4] geoip: remove superfluous xt_geoip_fetch_maxmind script., Jeremy Sowden
  • [PATCH xtables-addons 3/4] geoip: add man-pages for MaxMind scripts., Jeremy Sowden
  • [PATCH xtables-addons 4/4] geoip: use correct download URL for MaxMind DB's., Jeremy Sowden
  • Re: [PATCH xtables-addons 0/4] geoip: script fixes, Jan Engelhardt
    • Re: [PATCH xtables-addons 0/4] geoip: script fixes, Jeremy Sowden
      • Re: [PATCH xtables-addons 0/4] geoip: script fixes, Jan Engelhardt
• [RFC] MAINTAINERS tag for cleanup robot, trix
  • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
    • Re: [RFC] MAINTAINERS tag for cleanup robot, Tom Rix
      • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
        • Re: [RFC] MAINTAINERS tag for cleanup robot, Tom Rix
  • Re: [RFC] MAINTAINERS tag for cleanup robot, James Bottomley
    • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
    • Re: [RFC] MAINTAINERS tag for cleanup robot, Jani Nikula
      • Re: [RFC] MAINTAINERS tag for cleanup robot, Lukas Bulwahn
  • Re: [RFC] MAINTAINERS tag for cleanup robot, Matthew Wilcox
    • Re: [RFC] MAINTAINERS tag for cleanup robot, Tom Rix
      • Re: [RFC] MAINTAINERS tag for cleanup robot, Matthew Wilcox
        • Re: [RFC] MAINTAINERS tag for cleanup robot, Tom Rix
          • Re: [RFC] MAINTAINERS tag for cleanup robot, James Bottomley
            • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
              • Re: [RFC] MAINTAINERS tag for cleanup robot, Finn Thain
                • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
• [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 2/4] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
  • [PATCH net 1/4] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
    • Re: [PATCH net 1/4] netfilter: nftables_offload: set address type in control dissector, Jakub Kicinski
      • Re: [PATCH net 1/4] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
  • [PATCH net 4/4] netfilter: nf_tables: avoid false-postive lockdep splat, Pablo Neira Ayuso
  • [PATCH net 3/4] netfilter: ipset: prevent uninit-value in hash_ip6_add, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: x_tables: Switch synchronization to RCU, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nftables: comment indirect serialization of commit_mutex with rtnl_mutex, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: nft_dynset: fix timeouts later than 23 days, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID, Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net, David Miller
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: ipset: fix shift-out-of-bounds in htable_bits(), Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nftables: fix incorrect increment of loop counter, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nftables: fix incorrect increment of loop counter, patchwork-bot+netdevbpf
    • [PATCH net 3/4] netfilter: ipset: fixes possible oops in mtype_resize, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: x_tables: Update remaining dereference to RCU, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nftables: fix possible UAF over chains from packet path in netns, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: flowtable: fix tcp and udp header checksum update, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, patchwork-bot+netdevbpf
      • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
        • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Jozsef Kadlecsik
          • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
            • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
              • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Jozsef Kadlecsik
                • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
                  • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
                    • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
                  • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Jozsef Kadlecsik
            • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Jozsef Kadlecsik
    • [PATCH net 2/4] selftests: netfilter: fix current year, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/4] selftests: netfilter: switch to socat for tests using -q option, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), patchwork-bot+netdevbpf
    • [PATCH net 3/4] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: Update ip6_route_me_harder to consider L3 domain, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: flowtable: Remove the empty file, Pablo Neira Ayuso
    • [PATCH net 1/4] ipvs: correctly print the memory size of ip_vs_conn_tab, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] ipvs: correctly print the memory size of ip_vs_conn_tab, patchwork-bot+netdevbpf
    • [PATCH net 2/4] netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nfnetlink: fix warn in nfnetlink_unbind, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nfnetlink: fix warn in nfnetlink_unbind, patchwork-bot+netdevbpf
    • [PATCH net 4/4] netfilter: nf_tables: set element extended ACK reporting support, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: conntrack: re-fetch conntrack after insertion, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one, patchwork-bot+netdevbpf
    • [PATCH net 2/4] netfilter: flowtable_offload: fix using __this_cpu_add in preemptible, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: conntrack: fix using __this_cpu_add in preemptible, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE, patchwork-bot+netdevbpf
    • [PATCH net 4/4] netfilter: conntrack: unify established states for SCTP paths, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: conntrack: fix bug in for_each_sctp_chunk, Pablo Neira Ayuso
    • [PATCH net 3/4] Revert "netfilter: conntrack: add sctp DATA_SENT state", Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net: manual merge, Matthieu Baerts
      • RE: [PATCH net 0/4] Netfilter fixes for net: manual merge, Sriram Yagnaraman
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nft_nat: correct length for loading protocol registers, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nft_nat: correct length for loading protocol registers, patchwork-bot+netdevbpf
    • [PATCH net 2/4] netfilter: nft_masq: correct length for loading protocol registers, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nft_redir: correct length for loading protocol registers, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_redir: correct value of inet type `.maxattrs`, Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net, Jeremy Sowden
      • Re: [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nf_tables: reject destroy command to remove basechain hooks, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nf_tables: reject destroy command to remove basechain hooks, patchwork-bot+netdevbpf
    • [PATCH net 3/4] netfilter: nf_tables: skip netdev hook unregistration if table is dormant, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: nf_tables: reject table flag and netdev basechain updates, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: arptables: Select NETFILTER_FAMILY_ARP when building arp_tables.c, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED, patchwork-bot+netdevbpf
    • [PATCH net 2/4] selftests: netfilter: Fix nft_audit.sh for newer nft binaries, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nf_tables: prevent nf_skb_duplicated corruption, Pablo Neira Ayuso
    • [PATCH net 4/4] selftests: netfilter: Add missing return value, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] selftests: netfilter: remove unused parameter, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: Fix use-after-free in get_info(), Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_payload: sanitize offset and length before calling skb_checksum(), Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6(), Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net, patchwork-bot+netdevbpf
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level, Pablo Neira Ayuso
    • [PATCH net 1/4] ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init(), Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: x_tables: fix LED ID check in led_tg_check(), Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_inner: incorrect percpu area handling under softirq, Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
• [PATCH] netfilter: use actual socket sk for REJECT action, Jan Engelhardt
  • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Jan Engelhardt
      • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Jeremy Sowden
        • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Jan Engelhardt
• [PATCH v23 16/23] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v23 14/23] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v23 13/23] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v23 06/23] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v23 05/23] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• [nft PATCH] json: echo: Speedup seqnum_to_json(), Phil Sutter
  • Re: [nft PATCH] json: echo: Speedup seqnum_to_json(), Pablo Neira Ayuso
    • Re: [nft PATCH] json: echo: Speedup seqnum_to_json(), Phil Sutter
      • Re: [nft PATCH] json: echo: Speedup seqnum_to_json(), Jose M. Guisado
        • Re: [nft PATCH] json: echo: Speedup seqnum_to_json(), Pablo Neira Ayuso
• [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • [PATCH 015/141] netfilter: Fix fall-through warnings for Clang, Gustavo A. R. Silva
    • Re: [PATCH 015/141] netfilter: Fix fall-through warnings for Clang, Florian Westphal
      • Re: [PATCH 015/141] netfilter: Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • [PATCH 108/141] netfilter: ipt_REJECT: Fix fall-through warnings for Clang, Gustavo A. R. Silva
    • Re: [PATCH 108/141] netfilter: ipt_REJECT: Fix fall-through warnings for Clang, Florian Westphal
      • Re: [PATCH 108/141] netfilter: ipt_REJECT: Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Jakub Kicinski
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
      • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Jakub Kicinski
        • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
        • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
          • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
                  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                    • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
                      • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                        • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
                          • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                            • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                              • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                                • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                          • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                            • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Nick Desaulniers
                              • Message not available
                                • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                              • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                                • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Nick Desaulniers
                                  • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                                  • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                              • Message not available
                                • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Nick Desaulniers
                            • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Rafael J. Wysocki
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                      • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                        • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                          • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Edward Cree
                            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Geert Uytterhoeven
                                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Karol Herbst
                                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                        • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Andy Shevchenko
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Sean Young
              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
                      • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Sam Ravnborg
          • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Nick Desaulniers
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Edward Cree
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Dan Carpenter
          • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Dan Carpenter
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Jason Gunthorpe
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Message not available
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Martin K. Petersen
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Re: (subset) [PATCH 000/141] Fix fall-through warnings for Clang, Martin K. Petersen
• [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Phil Sutter
  • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Pablo Neira Ayuso
    • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Phil Sutter
      • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Pablo Neira Ayuso
        • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Phil Sutter
          • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Pablo Neira Ayuso
• [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • [PATCH net-next,v5 1/9] netfilter: flowtable: add hash offset field to tuple, Pablo Neira Ayuso
  • [PATCH net-next,v5 4/9] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
  • [PATCH net-next,v5 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
  • [PATCH net-next,v5 8/9] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
  • [PATCH net-next,v5 9/9] selftests: netfilter: flowtable bridge and VLAN support, Pablo Neira Ayuso
  • [PATCH net-next,v5 7/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
  • [PATCH net-next,v5 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
  • [PATCH net-next,v5 2/9] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
  • [PATCH net-next,v5 5/9] bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Alexander Lobakin
    • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Alexander Lobakin
    • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
    • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Alexander Lobakin
      • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
• [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, Wang Hai
  • Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, Julian Anastasov
    • Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, wanghai (M)
      • Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, Julian Anastasov
        • Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, wanghai (M)
• [ANNOUNCE] ipset 7.8 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 7.8 released, Jan Engelhardt
    • Re: [ANNOUNCE] ipset 7.8 released, Jozsef Kadlecsik
      • Re: [ANNOUNCE] ipset 7.8 released, Jan Engelhardt
        • Re: [ANNOUNCE] ipset 7.8 released, Neutron Soutmun
          • Re: [ANNOUNCE] ipset 7.8 released, Jozsef Kadlecsik
            • Re: [ANNOUNCE] ipset 7.8 released, Neutron Soutmun
  • Re: [ANNOUNCE] ipset 7.8 released, Ed W
    • Re: [ANNOUNCE] ipset 7.8 released, Jozsef Kadlecsik
      • Message not available
        • Re: ipset 7.9 compilation fix on kernel 4.14, Jozsef Kadlecsik
• [PATCH nf] netfilter: nf_tables: avoid false-postive lockdep splat, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: avoid false-postive lockdep splat, Pablo Neira Ayuso
• [PATCH net] ipvs: fix possible memory leak in ip_vs_control_net_init, Wang Hai
  • Re: [PATCH net] ipvs: fix possible memory leak in ip_vs_control_net_init, Julian Anastasov
    • Re: [PATCH net] ipvs: fix possible memory leak in ip_vs_control_net_init, wanghai (M)
• [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add, Eric Dumazet
  • Re: [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add, Florian Westphal
  • Re: [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add, Jozsef Kadlecsik
  • Re: [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add, Pablo Neira Ayuso
• [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Georg Kohmann
  • Re: [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Pablo Neira Ayuso
  • Re: [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Randy Dunlap
  • Re: [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, patchwork-bot+netdevbpf
• WARNING: net/mptcp/protocol.c:719 mptcp_reset_timer+0x40/0x50, Naresh Kamboju
  • Re: [MPTCP] WARNING: net/mptcp/protocol.c:719 mptcp_reset_timer+0x40/0x50, Matthieu Baerts
• [PATCH net] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Georg Kohmann
  • Re: [PATCH net] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Randy Dunlap
• [PATCH net-next,v4 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • [PATCH net-next,v4 1/9] netfilter: flowtable: add hash offset field to tuple, Pablo Neira Ayuso
  • [PATCH net-next,v4 2/9] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
    • Re: [PATCH net-next,v4 2/9] netfilter: flowtable: add xmit path types, Florian Westphal
  • [PATCH net-next,v4 4/9] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
  • [PATCH net-next,v4 7/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
  • [PATCH net-next,v4 5/9] bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
  • [PATCH net-next,v4 9/9] selftests: netfilter: flowtable bridge and VLAN support, Pablo Neira Ayuso
  • [PATCH net-next,v4 8/9] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
  • [PATCH net-next,v4 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
  • [PATCH net-next,v4 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
    • Re: [PATCH net-next,v4 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Florian Westphal
• Re: linux-next: Tree for Nov 18 (net/ipv6/netfilter/nf_conntrack_reasm.o), Randy Dunlap
• Re: [PATCH 5.9 000/255] 5.9.9-rc1 review, Naresh Kamboju
  • Re: [PATCH 5.9 000/255] 5.9.9-rc1 review, Greg Kroah-Hartman
• [iptables PATCH 1/2] iptables-test.py: Accept multiple test files on commandline, Phil Sutter
  • [iptables PATCH 2/2] iptables-test.py: Try to unshare netns by default, Phil Sutter
• [iptables PATCH] ebtables: Fix for broken chain renaming, Phil Sutter
  • Re: [iptables PATCH] ebtables: Fix for broken chain renaming, Florian Westphal
    • Re: [iptables PATCH] ebtables: Fix for broken chain renaming, Phil Sutter
• Issues w/ db-ip country database, Philip Prindeville
  • Re: Issues w/ db-ip country database, Jan Engelhardt
    • Re: Issues w/ db-ip country database, Philip Prindeville
      • Re: Issues w/ db-ip country database, Jan Engelhardt
        • Re: Issues w/ db-ip country database, Philip Prindeville
          • Re: Issues w/ db-ip country database, Philip Prindeville
            • Re: Issues w/ db-ip country database, Jan Engelhardt
• [iptables PATCH 0/3] Merge some common code, Phil Sutter
  • [iptables PATCH 2/3] xtables-arp: Don't use ARPT_INV_*, Phil Sutter
  • [iptables PATCH 1/3] libxtables: Extend MAC address printing/parsing support, Phil Sutter
  • [iptables PATCH 3/3] xshared: Merge some command option-related code, Phil Sutter
• [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack., nusiddiq
  • Re: [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack., Jakub Kicinski
    • Re: [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack., Florian Westphal
      • Re: [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack., Jakub Kicinski
• [PATCH] ipvs: replace atomic_add_return(), Yejune Deng
  • Re: [PATCH] ipvs: replace atomic_add_return(), Julian Anastasov
    • Re: [PATCH] ipvs: replace atomic_add_return(), Pablo Neira Ayuso
• [PATCH net-next] netfilter: nf_reject: bridge: fix build errors due to code movement, Randy Dunlap
  • Re: [PATCH net-next] netfilter: nf_reject: bridge: fix build errors due to code movement, Pablo Neira Ayuso
    • Re: [PATCH net-next] netfilter: nf_reject: bridge: fix build errors due to code movement, Randy Dunlap
• [PATCH] tests: py: update format of registers in bitwise payloads., Jeremy Sowden
  • Re: [PATCH] tests: py: update format of registers in bitwise payloads., Pablo Neira Ayuso
• [PATCH] netfilter: nfnl_acct: remove data from struct net, Wang Shanker
  • Re: [PATCH] netfilter: nfnl_acct: remove data from struct net, Pablo Neira Ayuso
    • [PATCH v2] netfilter: nfnl_acct: remove data from struct net, Wang Shanker
      • Re: [PATCH v2] netfilter: nfnl_acct: remove data from struct net, Pablo Neira Ayuso
• [PATCH libnftnl 0/1] Bitwise dump format fix., Jeremy Sowden
  • [PATCH libnftnl 1/1] bitwise: improve formatting of registers in bitwise dumps., Jeremy Sowden
    • Re: [PATCH libnftnl 1/1] bitwise: improve formatting of registers in bitwise dumps., Pablo Neira Ayuso
      • Re: [PATCH libnftnl 1/1] bitwise: improve formatting of registers in bitwise dumps., Jeremy Sowden
• [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Sean Tranchetti
  • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
    • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
      • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
        • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
          • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
            • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
              • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Will Deacon
                  • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                    • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Will Deacon
                      • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                        • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
                          • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                            • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
                              • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                              • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Peter Zijlstra
                                • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Peter Zijlstra
                                  • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                                    • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Peter Zijlstra
                                      • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
• [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
  • [PATCH nf,v2 2/2] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
    • [PATCH nf,v2 2/2] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
    • Re: [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Jakub Kicinski
      • Re: [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
        • Re: [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Jakub Kicinski
• [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • [PATCH net-next,v3 4/9] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
  • [PATCH net-next,v3 1/9] netfilter: flowtable: add hash offset field to tuple, Pablo Neira Ayuso
  • [PATCH net-next,v3 2/9] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
  • [PATCH net-next,v3 7/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
  • [PATCH net-next,v3 8/9] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
  • [PATCH net-next,v3 9/9] selftests: netfilter: flowtable bridge and VLAN support, Pablo Neira Ayuso
  • [PATCH net-next,v3 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
  • [PATCH net-next,v3 5/9] bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
    • Re: [PATCH net-next,v3 5/9] bridge: resolve forwarding path for bridge devices, Nikolay Aleksandrov
      • Re: [PATCH net-next,v3 5/9] bridge: resolve forwarding path for bridge devices, Nikolay Aleksandrov
  • [PATCH net-next,v3 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
    • Re: [PATCH net-next,v3 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Jakub Kicinski
      • Re: [PATCH net-next,v3 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
  • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
    • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
      • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Tobias Waldekranz
        • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
          • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
            • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
              • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
                  • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                    • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                      • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
                        • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                          • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
                            • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
        • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
• [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann
  • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
  • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Pablo Neira Ayuso
    • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
  • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Pablo Neira Ayuso
    • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann (geokohma)
• [iptables PATCH] tests/shell: Add test for bitwise avoidance fixes, Phil Sutter
• [nft PATCH] proto: Fix ARP header field ordering, Phil Sutter
• Re: [PATCH v22 06/23] LSM: Use lsmblob in security_secid_to_secctx, James Morris
• Re: [PATCH v22 05/23] LSM: Use lsmblob in security_secctx_to_secid, James Morris
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Jakub Kicinski
  • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
  • <Possible follow-ups>
  • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
    • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Florian Westphal
      • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
        • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Florian Westphal
          • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
• [PATCH v2 0/4] conntrack: accept commands from file + tests, Mikhail Sennikovsky
  • [PATCH v2 2/4] conntrack.8: man update for --load-file support, Mikhail Sennikovsky
  • [PATCH v2 3/4] tests: saving and loading ct entries, save format, Mikhail Sennikovsky
  • [PATCH v2 1/4] conntrack: accept commands from file, Mikhail Sennikovsky
  • [PATCH v2 4/4] tests: conntrack -L/-D ip family filtering, Mikhail Sennikovsky
• [PATCH] tests: py: remove duplicate payloads., Jeremy Sowden
  • Re: [PATCH] tests: py: remove duplicate payloads., Florian Westphal
• [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann