Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, (continued)
  • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
    • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
      • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Tobias Waldekranz
        • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
          • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
            • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
              • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
                  • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                    • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                      • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
                        • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                          • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
                            • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
        • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
• [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann
  • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
  • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Pablo Neira Ayuso
    • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
  • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Pablo Neira Ayuso
    • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann (geokohma)
• [iptables PATCH] tests/shell: Add test for bitwise avoidance fixes, Phil Sutter
• [nft PATCH] proto: Fix ARP header field ordering, Phil Sutter
• Re: [PATCH v22 06/23] LSM: Use lsmblob in security_secid_to_secctx, James Morris
• Re: [PATCH v22 05/23] LSM: Use lsmblob in security_secctx_to_secid, James Morris
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Jakub Kicinski
  • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
  • <Possible follow-ups>
  • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
    • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Florian Westphal
      • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
        • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Florian Westphal
          • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
• [PATCH v2 0/4] conntrack: accept commands from file + tests, Mikhail Sennikovsky
  • [PATCH v2 2/4] conntrack.8: man update for --load-file support, Mikhail Sennikovsky
  • [PATCH v2 3/4] tests: saving and loading ct entries, save format, Mikhail Sennikovsky
  • [PATCH v2 1/4] conntrack: accept commands from file, Mikhail Sennikovsky
  • [PATCH v2 4/4] tests: conntrack -L/-D ip family filtering, Mikhail Sennikovsky
• [PATCH] tests: py: remove duplicate payloads., Jeremy Sowden
  • Re: [PATCH] tests: py: remove duplicate payloads., Florian Westphal
• [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann
  • Re: [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
    • Re: [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann (geokohma)
      • Re: [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
• [PATCH] MAINTAINERS: rectify file patterns for NETFILTER, Lukas Bulwahn
  • Re: [PATCH] MAINTAINERS: rectify file patterns for NETFILTER, Pablo Neira Ayuso
  • Re: [PATCH] MAINTAINERS: rectify file patterns for NETFILTER, Joe Perches
    • Re: [PATCH] MAINTAINERS: rectify file patterns for NETFILTER, Pablo Neira Ayuso
• [PATCH] netfilter: conntrack: fix -Wformat, Nick Desaulniers
  • Re: [PATCH] netfilter: conntrack: fix -Wformat, Joe Perches
    • Re: [PATCH] netfilter: conntrack: fix -Wformat, Lukas Bulwahn
      • Re: [PATCH] netfilter: conntrack: fix -Wformat, Joe Perches
    • Re: [PATCH] netfilter: conntrack: fix -Wformat, Nick Desaulniers
      • Re: [PATCH] netfilter: conntrack: fix -Wformat, Joe Perches
        • Re: [PATCH] netfilter: conntrack: fix -Wformat, Nick Desaulniers
        • Re: [PATCH] netfilter: conntrack: fix -Wformat, Nick Desaulniers
          • Re: [PATCH] netfilter: conntrack: fix -Wformat, Tom Rix
          • Re: [PATCH] netfilter: conntrack: fix -Wformat, Tom Rix
            • Re: [PATCH] netfilter: conntrack: fix -Wformat, Joe Perches
              • Re: [PATCH] netfilter: conntrack: fix -Wformat, Tom Rix
  • Re: [PATCH] netfilter: conntrack: fix -Wformat, Jakub Kicinski
  • Re: [PATCH] netfilter: conntrack: fix -Wformat, kernel test robot
• [PATCH] netfilter: nf_nat: Support fullcone NAT, Paul Menzel
  • Re: [PATCH] netfilter: nf_nat: Support fullcone NAT, Florian Westphal
• [PATCH net v2] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann
  • Re: [PATCH net v2] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
    • Re: [PATCH net v2] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann (geokohma)
• [PATCH] netfilter: remove unused macro DUMP_INIT to tame gcc, Alex Shi
• [PATCH] netfilter: Remove unnecessary conversion to bool, xiakaixu1987
  • Re: [PATCH] netfilter: Remove unnecessary conversion to bool, Pablo Neira Ayuso
• [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Martin Willi
  • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Jakub Kicinski
    • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, David Ahern
  • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Pablo Neira Ayuso
    • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Martin Willi
      • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Pablo Neira Ayuso
        • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Jakub Kicinski
• [PATCH nft 0/7] rework tcp option handling, Florian Westphal
  • [PATCH nft 1/7] parser: merge sack-perm/sack-permitted and maxseg/mss, Florian Westphal
    • Re: [PATCH nft 1/7] parser: merge sack-perm/sack-permitted and maxseg/mss, Jeremy Sowden
      • Re: [PATCH nft 1/7] parser: merge sack-perm/sack-permitted and maxseg/mss, Florian Westphal
  • [PATCH nft 2/7] tcpopts: clean up parser -> tcpopt.c plumbing, Florian Westphal
  • [PATCH nft 3/7] tcpopt: rename noop to nop, Florian Westphal
  • [PATCH nft 4/7] tcpopt: split tcpopt_hdr_fields into per-option enum, Florian Westphal
  • [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Florian Westphal
    • Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Jeremy Sowden
      • Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Jeremy Sowden
        • Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Florian Westphal
          • Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Jeremy Sowden
  • [PATCH nft 6/7] tcp: add raw tcp option match support, Florian Westphal
  • [PATCH nft 7/7] json: tcp: add raw tcp option match support, Florian Westphal
• [PATCH v22 16/23] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
  • Re: [PATCH v22 16/23] LSM: security_secid_to_secctx in netlink netfilter, Pablo Neira Ayuso
    • Re: [PATCH v22 16/23] LSM: security_secid_to_secctx in netlink netfilter, James Morris
• [PATCH net-next 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 3/8] netfilter: nft_reject: add reject verdict support for netdev, Pablo Neira Ayuso
  • [PATCH net-next 7/8] netfilter: nftables: Add __printf() attribute, Pablo Neira Ayuso
  • [PATCH net-next 4/8] netfilter: ipset: Support the -exist flag with the destroy command, Pablo Neira Ayuso
  • [PATCH net-next 5/8] netfilter: ipset: Add bucketsize parameter to all hash types, Pablo Neira Ayuso
  • [PATCH net-next 8/8] netfilter: nft_reject_inet: allow to use reject from inet ingress, Pablo Neira Ayuso
  • [PATCH net-next 6/8] netfilter: ipset: Expose the initval hash parameter to userspace, Pablo Neira Ayuso
  • [PATCH net-next 1/8] netfilter: nf_reject: add reject skbuff creation helpers, Pablo Neira Ayuso
  • [PATCH net-next 2/8] netfilter: nft_reject: unify reject init and dump into nft_reject, Pablo Neira Ayuso
  • Re: [PATCH net-next 0/8] Netfilter updates for net-next, Jakub Kicinski
  • <Possible follow-ups>
  • [PATCH net-next 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH net-next 2/8] netfilter: ecache: remove another indent level, Pablo Neira Ayuso
    • [PATCH net-next 1/8] netfilter: ecache: remove one indent level, Pablo Neira Ayuso
      • Re: [PATCH net-next 1/8] netfilter: ecache: remove one indent level, patchwork-bot+netdevbpf
    • [PATCH net-next 4/8] netfilter: ecache: prepare for event notifier merge, Pablo Neira Ayuso
    • [PATCH net-next 5/8] netfilter: ecache: remove nf_exp_event_notifier structure, Pablo Neira Ayuso
    • [PATCH net-next 8/8] netfilter: add netfilter hooks to SRv6 data plane, Pablo Neira Ayuso
    • [PATCH net-next 6/8] netfilter: ctnetlink: missing counters and timestamp in nfnetlink_{log,queue}, Pablo Neira Ayuso
    • [PATCH net-next 7/8] netfilter: x_tables: handle xt_register_template() returning an error value, Pablo Neira Ayuso
    • [PATCH net-next 3/8] netfilter: ecache: add common helper for nf_conntrack_eventmask_report, Pablo Neira Ayuso
  • [PATCH net-next 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH net-next 1/8] netfilter: nf_tables: Pass const set to nft_get_set_elem, Pablo Neira Ayuso
    • [PATCH net-next 2/8] netfilter: nf_tables: Introduce nft_set_dump_ctx_init(), Pablo Neira Ayuso
    • [PATCH net-next 3/8] netfilter: nf_tables: Add locking for NFT_MSG_GETSETELEM_RESET requests, Pablo Neira Ayuso
    • [PATCH net-next 4/8] netfilter: nft_set_pipapo: prefer gfp_kernel allocation, Pablo Neira Ayuso
    • [PATCH net-next 5/8] netfilter: flowtable: reorder nf_flowtable struct members, Pablo Neira Ayuso
    • [PATCH net-next 6/8] netfilter: nf_tables: mark newset as dead on transaction abort, Pablo Neira Ayuso
    • [PATCH net-next 8/8] netfilter: nf_tables: validate chain type update if available, Pablo Neira Ayuso
    • [PATCH net-next 7/8] netfilter: ctnetlink: support filtering by zone, Pablo Neira Ayuso
• [PATCH net] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann
  • Re: [PATCH net] ipv6/netfilter: Discard first fragment not including all headers, Pablo Neira Ayuso
    • Re: [PATCH net] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann (geokohma)
• [PATCH nf 0/2] fixes for nftables offload, Pablo Neira Ayuso
  • [PATCH nf 1/2] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
    • Re: [PATCH nf 2/2] netfilter: nftables_offload: build mask based from the matching bytes, kernel test robot
• [PATCH nft 0/3] json: resolve multiple test case failures, Florian Westphal
  • [PATCH nft 1/3] tests: json: add missing test case output, Florian Westphal
  • [PATCH nft 2/3] tests: avoid warning and add missing json test cases, Florian Westphal
  • [PATCH nft 3/3] json: add missing nat_type flag and netmap nat flag, Florian Westphal
  • Re: [PATCH nft 0/3] json: resolve multiple test case failures, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: do not allow to update offload status bits, Pablo Neira Ayuso
  • Re: [PATCH conntrack] conntrack: do not allow to update offload status bits, Pablo Neira Ayuso
• ipset 7.7 modules fail to build on kernel 4.19.152, Oskar Berggren
  • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Jozsef Kadlecsik
    • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Oskar Berggren
      • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Jozsef Kadlecsik
        • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Oskar Berggren
          • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Jozsef Kadlecsik
            • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Jozsef Kadlecsik
              • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Oskar Berggren
• [PATCH] doc: correct chain name in example of adding a rule., Jeremy Sowden
  • Re: [PATCH] doc: correct chain name in example of adding a rule., Florian Westphal
• [PATCH nf-next,v2] netfilter: nft_reject_inet: allow to use reject from inet ingress, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nf-next,v2] netfilter: nft_reject_inet: allow to use reject from inet ingress, Pablo Neira Ayuso
• [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 1/5] netfilter: nftables: fix netlink report logic in flowtable and genid, Pablo Neira Ayuso
  • [PATCH net 2/5] wireguard: selftests: check that route_me_harder packets use the right sk, Pablo Neira Ayuso
  • [PATCH net 3/5] netfilter: use actual socket sk rather than skb sk when routing harder, Pablo Neira Ayuso
  • [PATCH net 5/5] netfilter: ipset: Update byte and packet counters regardless of whether they match, Pablo Neira Ayuso
  • [PATCH net 4/5] netfilter: nf_tables: missing validation from the abort path, Pablo Neira Ayuso
  • Re: [PATCH net 0/5] Netfilter fixes for net, Jakub Kicinski
  • <Possible follow-ups>
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: avoid false-postive lockdep splat, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
    • [PATCH net 3/5] ipvs: fix possible memory leak in ip_vs_control_net_init, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: ipset: prevent uninit-value in hash_ip6_add, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
    • Re: [PATCH net 0/5] Netfilter fixes for net, Jakub Kicinski
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex, patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: conntrack: sanitize table size default settings, Pablo Neira Ayuso
      • Re: [PATCH net 2/5] netfilter: conntrack: sanitize table size default settings, Vincent Pelletier
        • Re: [PATCH net 2/5] netfilter: conntrack: sanitize table size default settings, Florian Westphal
    • [PATCH net 3/5] netfilter: conntrack: switch to siphash, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: socket: icmp6: fix use-after-scope, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: refuse insertion if chain has grown too large, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
      • Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, Jakub Kicinski
        • Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
        • Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, David Miller
          • Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nft_dynset: relax superfluous check on set updates, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nf_tables: reverse order in rule replacement expansion, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_conntrack_netbios_ns: fix helper module alias, patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: nf_tables: remove unused variable, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nf_tables: set last expression in register tracking area, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: conntrack: don't increment invalid counter on NF_REPEAT, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: hold mutex on netns pre_exit path, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: sanitize nft_set_desc_concat_parse(), Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: sanitize nft_set_desc_concat_parse(), patchwork-bot+netdevbpf
    • [PATCH net 5/5] netfilter: flowtable: fix nft_flow_route source address for nat case, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nf_tables: double hook unregistration in netns path, Pablo Neira Ayuso
      • Re: [PATCH net 3/5] netfilter: nf_tables: double hook unregistration in netns path, Jakub Kicinski
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: use get_random_u32 instead of prandom, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: use get_random_u32 instead of prandom, patchwork-bot+netdevbpf
    • [PATCH net 4/5] netfilter: nf_dup_netdev: do not push mac header a second time, Pablo Neira Ayuso
    • [PATCH net 3/5] selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_dup_netdev: add and use recursion counter, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: Modify nla_memdup's flag to GFP_KERNEL_ACCOUNT, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: br_netfilter: fix recent physdev match breakage, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: br_netfilter: fix recent physdev match breakage, patchwork-bot+netdevbpf
    • [PATCH net 3/5] netfilter: nf_tables: fix ifdef to also consider nf_tables=m, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nf_tables: validate catch-all set elements, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: tighten netlink attribute requirements for catch-all elements, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: out-of-bound check in chain blob, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: Add null check for nla_nest_start_noflag() in nft_dump_basechain_hook(), Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: Add null check for nla_nest_start_noflag() in nft_dump_basechain_hook(), patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: nft_bitwise: fix register tracking, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: ipset: Add schedule point in call_ad()., Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nf_tables: adapt set backend to use GC transaction API, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: remove busy mark and gc batch API, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: GC transaction API to avoid race with control plane, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: don't skip expired elements during walk, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: don't skip expired elements during walk, patchwork-bot+netdevbpf
    • Re: [PATCH net 0/5] Netfilter fixes for net, Greg KH
      • Re: [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • Re: [PATCH net 0/5] Netfilter fixes for net, Jakub Kicinski
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nft_exthdr: Fix non-linear header modification, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nft_exthdr: Fix non-linear header modification, patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: xt_sctp: validate the flag_info count, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nf_tables: Audit log setelem reset, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: Audit log rule reset, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: xt_u32: validate user space input, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: remove catchall element in GC sync path, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: add missing module descriptions, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: add missing module descriptions, patchwork-bot+netdevbpf
    • [PATCH net 4/5] netfilter: xt_recent: fix (increase) ipv6 literal buffer length, Pablo Neira Ayuso
    • [PATCH net 3/5] ipvs: add missing module descriptions, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nft_flow_offload: reset dst in route object after setting up flow, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nft_flow_offload: release dst in case direct xmit path is used, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nf_tables: register hooks last when adding new chain/flowtable, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: set dormant flag on hook register failure, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: set dormant flag on hook register failure, patchwork-bot+netdevbpf
    • [PATCH net 5/5] netfilter: nf_tables: use kzalloc for hook allocation, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: disallow anonymous set with timeout flag, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: disallow anonymous set with timeout flag, patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: nf_tables: reject constant set with timeout, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nft_ct: fix l3num expectations with inet pseudo family, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_conntrack_h323: Add protection for bmp length out of range, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: ipset: Fix suspicious rcu_dereference_protected(), Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: ipset: Fix suspicious rcu_dereference_protected(), patchwork-bot+netdevbpf
    • [PATCH net 3/5] netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter core, Pablo Neira Ayuso
    • [PATCH net 4/5] selftests: add selftest for the SRv6 End.DX4 behavior with netfilter, Pablo Neira Ayuso
      • Re: [PATCH net 4/5] selftests: add selftest for the SRv6 End.DX4 behavior with netfilter, Paolo Abeni
    • [PATCH net 2/5] seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors, Pablo Neira Ayuso
    • [PATCH net 5/5] selftests: add selftest for the SRv6 End.DX6 behavior with netfilter, Pablo Neira Ayuso
• [ANNOUNCE] iptables 1.8.6 release, Phil Sutter
• [PATCH nf-next] netfilter: nft_reject_inet: allow to use reject from inet ingress, Pablo Neira Ayuso
• [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations, Cezar Sa Espinola
  • Re: [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations, Julian Anastasov
    • Re: [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations, Cezar Sá Espinola
      • Re: [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations, Julian Anastasov
        • [PATCH RFC v2] ipvs: add genetlink cmd to dump all services and destinations, Cezar Sa Espinola
          • Re: [PATCH RFC v2] ipvs: add genetlink cmd to dump all services and destinations, Julian Anastasov
            • [PATCH RFC v3] ipvs: add genetlink cmd to dump all services and destinations, Cezar Sa Espinola
              • Re: [PATCH RFC v3] ipvs: add genetlink cmd to dump all services and destinations, Julian Anastasov
• [PATCH nft] tests: shell: exercise validate with nft -c, Pablo Neira Ayuso
• Re: [PATCH] raw2packet: fix comma instead of semicolon, Pablo Neira Ayuso
• [iptables PATCH v2 1/2] nft: Optimize class-based IP prefix matches, Phil Sutter
  • [iptables PATCH 2/2] ebtables: Optimize masked MAC address matches, Phil Sutter
    • Re: [iptables PATCH 2/2] ebtables: Optimize masked MAC address matches, Pablo Neira Ayuso
  • Re: [iptables PATCH v2 1/2] nft: Optimize class-based IP prefix matches, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: missing validation from the abort path, Pablo Neira Ayuso
• [nft PATCH] tests/shell: Improve fix in sets/0036add_set_element_expiration_0, Phil Sutter
• [PATCH v2 0/2] conntrack: save output format, Mikhail Sennikovsky
  • [PATCH v2 1/2] conntrack: implement save output format, Mikhail Sennikovsky
    • Re: [PATCH v2 1/2] conntrack: implement save output format, Pablo Neira Ayuso
  • [PATCH v2 2/2] conntrack.8: man update for opts format support, Mikhail Sennikovsky
    • Re: [PATCH v2 2/2] conntrack.8: man update for opts format support, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack] conntrack: add flush filter command, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH libnetfilter_conntrack] conntrack: add flush filter command, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrack: allow to flush per family, Pablo Neira Ayuso
• [PATCH nf 0/2] route_me_harder routing loop with tunnels, Jason A. Donenfeld
  • [PATCH nf 1/2] wireguard: selftests: check that route_me_harder packets use the right sk, Jason A. Donenfeld
  • [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder, Jason A. Donenfeld
    • Re: [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder, Florian Westphal
    • Re: [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder, Jason A. Donenfeld
      • Re: [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder, Jason A. Donenfeld
  • Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels, Pablo Neira Ayuso
    • Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels, Jason A. Donenfeld
      • Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels, Pablo Neira Ayuso
        • Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels, Pablo Neira Ayuso
• [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0, Phil Sutter
  • Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0, Pablo Neira Ayuso
    • Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0, Pablo Neira Ayuso
      • Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0, Phil Sutter
        • Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: allow to filter event by family, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH conntrack] conntrack: allow to filter event by family, Pablo Neira Ayuso
• [nft PATCH 0/2] src: Optimize prefix matches on byte-boundaries, Phil Sutter
  • [nft PATCH 1/2] src: Support odd-sized payload matches, Phil Sutter
  • [nft PATCH 2/2] src: Optimize prefix matches on byte-boundaries, Phil Sutter
  • Re: [nft PATCH 0/2] src: Optimize prefix matches on byte-boundaries, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: default to unspec family for dualstack setups, Pablo Neira Ayuso
• [ANNOUNCE] nftables 0.9.7 release, Pablo Neira Ayuso
• [ANNOUNCE] libnftnl 1.1.8 release, Pablo Neira Ayuso
• [UPDATES] Renewing Netfilter coreteam PGP keys, Pablo Neira Ayuso
• [iptables PATCH] tests: shell: Improve concurrent noflush restore test a bit, Phil Sutter
• Re: [PATCH v3 1/1] uapi: Move constants from <linux/kernel.h> to <linux/const.h>, Petr Vorel
• [PATCH xtables-addons] pnock: pknlusr: mention the group ID command-line paramater in the man-page., Jeremy Sowden
  • Re: [PATCH xtables-addons] pnock: pknlusr: mention the group ID command-line paramater in the man-page., Jan Engelhardt
• [PATCH xtables-addons v2 00/13] pknlusr improvements, Jeremy Sowden
  • [PATCH xtables-addons v2 01/13] pknock: pknlusr: ensure man-page is included by `make dist`., Jeremy Sowden
  • [PATCH xtables-addons v2 00/13] pknlusr improvements, Jeremy Sowden
  • [PATCH xtables-addons v2 04/13] pknock: pknlusr: tidy up initialization of local address., Jeremy Sowden
  • [PATCH xtables-addons v2 06/13] pknock: pknlusr: use macro to define inet_ntop buffer size., Jeremy Sowden
  • [PATCH xtables-addons v2 05/13] pknock: pknlusr: use NLMSG macros and proper types, rather than arithmetic on char pointers., Jeremy Sowden
  • [PATCH xtables-addons v2 07/13] pknock: pknlusr: don't treat recv return value of zero as an error., Jeremy Sowden
  • [PATCH xtables-addons v2 08/13] pknock: pknlusr: always close socket., Jeremy Sowden
  • [PATCH xtables-addons v2 03/13] pknock: pknlusr: tighten up variable scopes., Jeremy Sowden
  • [PATCH xtables-addons v2 02/13] pknock: pknlusr: remove dest_addr and rename src_addr., Jeremy Sowden
  • [PATCH xtables-addons v2 12/13] pknock: xt_pknock: use `pr_err`., Jeremy Sowden
  • [PATCH xtables-addons v2 13/13] pknock: xt_pknock: remove DEBUG definition and disable debug output., Jeremy Sowden
  • [PATCH xtables-addons v2 11/13] pknock: xt_pknock: use kzalloc., Jeremy Sowden
  • [PATCH xtables-addons v2 10/13] pknock: xt_pknock: use IS_ENABLED., Jeremy Sowden
  • [PATCH xtables-addons v2 09/13] pknock: pknlusr: fix hard-coded netlink multicast group ID., Jeremy Sowden
  • Re: [PATCH xtables-addons v2 00/13] pknlusr improvements, Jan Engelhardt
• [PATCH nft] Revert "monitor: do not print generation ID with --echo", Pablo Neira Ayuso
• [PATCH nf] netfilter: nftables: fix netlink report logic in flowtable and genid, Pablo Neira Ayuso
• [PATCH 0/5] add support for reject verdict in netdev, Jose M. Guisado Gomez
  • [PATCH nf-next 1/5] net: netfilter: add reject skbuff creation helpers, Jose M. Guisado Gomez
  • [PATCH nf-next 2/5] net: netfilter: unify reject init and dump into nft_reject, Jose M. Guisado Gomez
  • [PATCH nf-next 3/5] net: netfilter: add reject verdict support for netdev, Jose M. Guisado Gomez
  • [PATCH nftables 4/5] evaluate: add netdev support for reject default, Jose M. Guisado Gomez
    • Re: [PATCH nftables 4/5] evaluate: add netdev support for reject default, Pablo Neira Ayuso
  • [PATCH nftables 5/5] tests: py: add netdev folder and reject.t icmp cases, Jose M. Guisado Gomez
    • Re: [PATCH nftables 5/5] tests: py: add netdev folder and reject.t icmp cases, Pablo Neira Ayuso
  • Re: [PATCH 0/5] add support for reject verdict in netdev, Pablo Neira Ayuso
• [PATCH xtables-addons 0/3] pknlusr improvements, Jeremy Sowden
  • [PATCH xtables-addons 1/3] pknock: pknlusr: fix formatting., Jeremy Sowden
  • [PATCH xtables-addons 2/3] pknock: pknlusr: fix hard-coded netlink multicast group ID., Jeremy Sowden
    • Re: [PATCH xtables-addons 2/3] pknock: pknlusr: fix hard-coded netlink multicast group ID., Jan Engelhardt
      • Re: [PATCH xtables-addons 2/3] pknock: pknlusr: fix hard-coded netlink multicast group ID., Jeremy Sowden
  • [PATCH xtables-addons 3/3] pknock: pknlusr: add man-page., Jeremy Sowden
    • Re: [PATCH xtables-addons 3/3] pknock: pknlusr: add man-page., Jan Engelhardt
      • Re: [PATCH xtables-addons 3/3] pknock: pknlusr: add man-page., Jeremy Sowden
• [PATCH nf,v3] netfilter: nf_fwd_netdev: clear timestamp in forwarding path, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_dup_netdev: clear timestamp in forwarding path, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_dup_netdev: clear timestamp in forwarding path, Pablo Neira Ayuso
• [PATCH nft] monitor: do not print generation ID with --echo, Pablo Neira Ayuso
• Network namespace, ipvlan and IPVS source NAT, Damien Claisse
  • Re: Network namespace, ipvlan and IPVS source NAT, Julian Anastasov
    • Re: Network namespace, ipvlan and IPVS source NAT, Mahesh Bandewar (महेश बंडेवार)
• [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, saeed . mirzamohammadi
  • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Pablo Neira Ayuso
    • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Saeed Mirzamohammadi
      • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Saeed Mirzamohammadi
        • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Saeed Mirzamohammadi
          • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Greg KH
            • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Florian Westphal
              • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Greg KH
            • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Pablo Neira Ayuso
              • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Greg KH
                • Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create, Pablo Neira Ayuso
• [PATCH nft 1/2] rule: larger number of error locations, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: improve rule error reporting, Pablo Neira Ayuso
• [PATCH libnftnl] expr: add nftnl_rule_del_expr(), Pablo Neira Ayuso
• [PATCH] conntrack: fix zone sync issue, yang_y_yi
  • Re: [PATCH] conntrack: fix zone sync issue, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] conntrack: fix zone sync issue, yang_y_yi
    • Re: [ovs-dev] [PATCH] conntrack: fix zone sync issue, Flavio Leitner
      • Re: [ovs-dev] [PATCH] conntrack: fix zone sync issue, Florian Westphal
      • Re: [ovs-dev] [PATCH] conntrack: fix zone sync issue, Pablo Neira Ayuso
• [PATCH AUTOSEL 5.8 086/101] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Sasha Levin
• [PATCH AUTOSEL 5.4 69/80] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Sasha Levin
• [PATCH AUTOSEL 4.19 50/56] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Sasha Levin
• [PATCH AUTOSEL 4.14 46/52] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Sasha Levin
• [PATCH AUTOSEL 4.4 29/33] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Sasha Levin
• [PATCH AUTOSEL 4.9 37/41] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Sasha Levin
• [PATCH AUTOSEL 5.9 092/111] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Sasha Levin
• [PATCH] docs: nf_flowtable: fix typo., Jeremy Sowden
  • Re: [PATCH] docs: nf_flowtable: fix typo., Jeremy Sowden
  • Re: [PATCH] docs: nf_flowtable: fix typo., Pablo Neira Ayuso
• [PATCH libnfnl] expr: expose nftnl_expr_build_payload(), Pablo Neira Ayuso
• [bugreport] [5.10] warning at net/netfilter/nf_tables_api.c:622, Mikhail Gavrilov
  • Re: [bugreport] [5.10] warning at net/netfilter/nf_tables_api.c:622, Mikhail Gavrilov
• [nft] Bug 1444 - Segfault, Gopal Yadav
• Re: bpf-next test error: BUG: program execution failed: executor 0: exit status 67, Dmitry Vyukov
  • Re: bpf-next test error: BUG: program execution failed: executor 0: exit status 67, Jakub Kicinski
    • Re: bpf-next test error: BUG: program execution failed: executor 0: exit status 67, Jakub Kicinski
      • Re: bpf-next test error: BUG: program execution failed: executor 0: exit status 67, Dmitry Vyukov
• [PATCH net-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements, Pablo Neira Ayuso
  • Re: [PATCH net-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements, Jakub Kicinski
  • Re: [PATCH net-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements, patchwork-bot+netdevbpf
• [PATCH net-next,v2 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • [PATCH net-next,v2 1/9] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
  • [PATCH net-next,v2 3/9] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
  • [PATCH net-next,v2 2/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
  • [PATCH net-next,v2 4/9] bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
    • Re: [PATCH net-next,v2 4/9] bridge: resolve forwarding path for bridge devices, Nikolay Aleksandrov
  • [PATCH net-next,v2 8/9] netfilter: flowtable: bridge port support, Pablo Neira Ayuso
    • Re: [PATCH net-next,v2 8/9] netfilter: flowtable: bridge port support, Jeremy Sowden
  • [PATCH net-next,v2 9/9] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
  • [PATCH net-next,v2 5/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
  • [PATCH net-next,v2 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
    • Re: [PATCH net-next,v2 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Jeremy Sowden
  • [PATCH net-next,v2 7/9] netfilter: flowtable: add direct xmit path, Pablo Neira Ayuso
  • Re: [PATCH net-next,v2 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
    • Re: [PATCH net-next,v2 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements, Pablo Neira Ayuso
• [PATCH nft] segtree: copy expr data to closing element, Florian Westphal
• [PATCH] netfilter: conntrack: Fix kmemleak false positive reports, Kavana Ravindra
  • Re: [PATCH] netfilter: conntrack: Fix kmemleak false positive reports, Florian Westphal
• [PATCH net-next 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • [PATCH net-next 1/9] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
  • [PATCH net-next 2/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
  • [PATCH net-next 4/9] bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
  • [PATCH net-next 8/9] netfilter: flowtable: bridge port support, Pablo Neira Ayuso
  • [PATCH net-next 7/9] netfilter: flowtable: add direct xmit path, Pablo Neira Ayuso
  • [PATCH net-next 9/9] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
    • Re: [PATCH net-next 9/9] netfilter: flowtable: add vlan support, Jakub Kicinski
      • Re: [PATCH net-next 9/9] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
  • [PATCH net-next 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
  • [PATCH net-next 5/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
  • [PATCH net-next 3/9] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
    • Re: [PATCH net-next 3/9] net: 8021q: resolve forwarding path for vlan devices, kernel test robot
• [PATCH net-next] netfilter: restore NF_INET_NUMHOOKS, Pablo Neira Ayuso
  • Re: [PATCH net-next] netfilter: restore NF_INET_NUMHOOKS, Jakub Kicinski
• [PATCH nf-next] netfilter: restore NF_INET_NUMHOOKS, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: restore NF_INET_NUMHOOKS, Jason A. Donenfeld
• iptables userspace API broken due to added value in nf_inet_hooks, Jason A. Donenfeld
  • Re: iptables userspace API broken due to added value in nf_inet_hooks, Pablo Neira Ayuso
    • Re: iptables userspace API broken due to added value in nf_inet_hooks, Pablo Neira Ayuso
• [PATCH] Fixes dropping of small packets in bridge nat, timothee.cocault
  • Re: [PATCH] Fixes dropping of small packets in bridge nat, Florian Westphal
  • Re: [PATCH] Fixes dropping of small packets in bridge nat, Pablo Neira Ayuso
• selftests: netfilter: nft_nat.sh: /dev/stdin:2:9-15: Error: syntax error, unexpected counter, Naresh Kamboju
  • Re: selftests: netfilter: nft_nat.sh: /dev/stdin:2:9-15: Error: syntax error, unexpected counter, Pablo Neira Ayuso
    • Re: selftests: netfilter: nft_nat.sh: /dev/stdin:2:9-15: Error: syntax error, unexpected counter, Naresh Kamboju
      • Re: selftests: netfilter: nft_nat.sh: /dev/stdin:2:9-15: Error: syntax error, unexpected counter, Pablo Neira Ayuso
• Bug: ebtables snat drops small packets, timothee.cocault
  • Re: Bug: ebtables snat drops small packets, Florian Westphal
• WARNING: at net/netfilter/nf_tables_api.c:622 lockdep_nfnl_nft_mutex_not_held+0x28/0x38 [nf_tables], Naresh Kamboju
  • Re: WARNING: at net/netfilter/nf_tables_api.c:622 lockdep_nfnl_nft_mutex_not_held+0x28/0x38 [nf_tables], Naresh Kamboju
• [PATCH net V2] netfilter: Drop fragmented ndisc packets assembled in netfilter, Georg Kohmann
  • Re: [PATCH net V2] netfilter: Drop fragmented ndisc packets assembled in netfilter, Pablo Neira Ayuso
• [PATCH nft] src: ingress inet support, Pablo Neira Ayuso
  • Re: [PATCH nft] src: ingress inet support, Arturo Borrero Gonzalez
    • Re: [PATCH nft] src: ingress inet support, Pablo Neira Ayuso
      • Re: [PATCH nft] src: ingress inet support, Pablo Neira Ayuso
        • Re: [PATCH nft] src: ingress inet support, Arturo Borrero Gonzalez
• [PATCH nf] netfilter: nf_log: missing vlan offload tag and proto, Pablo Neira Ayuso
  • [PATCH nf] netfilter: nftables: extend error reporting for chain updates, Pablo Neira Ayuso
• [PATCH v21 16/23] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• Re: [PATCH net] netfilter: Drop fragmented ndisc packets assembled in netfilter, Pablo Neira Ayuso
  • Re: [PATCH net] netfilter: Drop fragmented ndisc packets assembled in netfilter, Georg Kohmann (geokohma)
• [PATCH 0/6] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH 1/6] ipvs: inspect reply packets from DR/TUN real servers, Pablo Neira Ayuso
  • [PATCH 5/6] netfilter: nf_tables: add inet ingress support, Pablo Neira Ayuso
  • [PATCH 3/6] netfilter: add nf_ingress_hook() helper function, Pablo Neira Ayuso
  • [PATCH 4/6] netfilter: add inet ingress support, Pablo Neira Ayuso
  • [PATCH 2/6] netfilter: add nf_static_key_{inc,dec}, Pablo Neira Ayuso
  • [PATCH 6/6] netfilter: flowtable: reduce calls to pskb_may_pull(), Pablo Neira Ayuso
  • Re: [PATCH 0/6] Netfilter/IPVS updates for net-next, Jakub Kicinski
• [PATCH nf-next] netfilter: flowtable: reduce calls to pskb_may_pull(), Pablo Neira Ayuso
• [PATCH nft 0/3] tests: py: fixes for failing JSON tests, Jeremy Sowden
  • [PATCH nft 1/3] tests: py: add missing JSON output for ct test., Jeremy Sowden
  • [PATCH nft 2/3] tests: py: correct order of set elements in test JSON output., Jeremy Sowden
  • [PATCH nft 3/3] tests: py: add missing test JSON output for TCP flag tests., Jeremy Sowden
  • Re: [PATCH nft 0/3] tests: py: fixes for failing JSON tests, Pablo Neira Ayuso
• [ulogd2] Problem while running, Amiq Nahas
• [PATCH net] ipvs: clear skb->tstamp in forwarding path, Julian Anastasov
  • Re: [PATCH net] ipvs: clear skb->tstamp in forwarding path, Simon Horman
  • Re: [PATCH net] ipvs: clear skb->tstamp in forwarding path, Pablo Neira Ayuso
• 0x14: Videos posted, Jamal Hadi Salim
• [PATCH nf v2] selftests: netfilter: extend nfqueue test case, Florian Westphal
  • Re: [PATCH nf v2] selftests: netfilter: extend nfqueue test case, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack_sip: Fix inconsistent of format with argument type in nf_nat_sip., Ye Bin
  • Re: [PATCH] netfilter: nf_conntrack_sip: Fix inconsistent of format with argument type in nf_nat_sip., Pablo Neira Ayuso
• [nft PATCH] json: Fix memleak in set_dtype_json(), Phil Sutter
  • Re: [nft PATCH] json: Fix memleak in set_dtype_json(), Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: extend nfqueue test case, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: extend nfqueue test case, Florian Westphal
• [iptables PATCH] libiptc: Avoid gcc-10 zero-length array warning, Phil Sutter
  • Re: [iptables PATCH] libiptc: Avoid gcc-10 zero-length array warning, Jan Engelhardt
    • Re: [iptables PATCH] libiptc: Avoid gcc-10 zero-length array warning, Phil Sutter
      • Re: [iptables PATCH] libiptc: Avoid gcc-10 zero-length array warning, Jan Engelhardt
        • Re: [iptables PATCH] libiptc: Avoid gcc-10 zero-length array warning, Phil Sutter
          • Re: [iptables PATCH] libiptc: Avoid gcc-10 zero-length array warning, Jan Engelhardt
            • Re: [iptables PATCH] libiptc: Avoid gcc-10 zero-length array warning, Phil Sutter
              • Re: [iptables PATCH] libiptc: Avoid gcc-10 zero-length array warning, Jan Engelhardt
• [PATCH nf-next 0/4] Add nf_tables ingress hook for the inet family, Pablo Neira Ayuso
  • [PATCH nf-next 1/4] netfilter: add nf_static_key_{inc,dec}, Pablo Neira Ayuso
  • [PATCH nf-next 2/4] netfilter: add nf_ingress_hook() helper function, Pablo Neira Ayuso
  • [PATCH nf-next 3/4] netfilter: add inet ingress support, Pablo Neira Ayuso
    • Re: [PATCH nf-next 3/4] netfilter: add inet ingress support, kernel test robot
    • Re: [PATCH nf-next 3/4] netfilter: add inet ingress support, kernel test robot
  • [PATCH nf-next 4/4] netfilter: nf_tables: add inet ingress support, Pablo Neira Ayuso
  • Re: [PATCH nf-next 0/4] Add nf_tables ingress hook for the inet family, Pablo Neira Ayuso
• [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Francesco Ruggeri
  • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Francesco Ruggeri
    • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Jozsef Kadlecsik
      • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Florian Westphal
        • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Jozsef Kadlecsik
          • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Florian Westphal
            • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Jozsef Kadlecsik
              • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Francesco Ruggeri
              • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Florian Westphal
                • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Pablo Neira Ayuso
                  • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Pablo Neira Ayuso
                  • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Florian Westphal
                    • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Francesco Ruggeri
                      • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Florian Westphal
  • Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register, Pablo Neira Ayuso
• [PATCH v2] Solves Bug 1462 - `nft -j list set` does not show counters, Gopal Yadav
  • Re: [PATCH v2] Solves Bug 1462 - `nft -j list set` does not show counters, Phil Sutter
    • Re: [PATCH v2] Solves Bug 1462 - `nft -j list set` does not show counters, Gopal Yadav
      • Re: [PATCH v2] Solves Bug 1462 - `nft -j list set` does not show counters, Phil Sutter
• [iptables PATCH] extensions: libipt_icmp: Fix translation of type 'any', Phil Sutter
  • Re: [iptables PATCH] extensions: libipt_icmp: Fix translation of type 'any', Florian Westphal
• [PATCH] Solves Bug 1462 - `nft -j list set` does not show counters, Gopal Yadav
• Re: WARNING in ieee80211_check_rate_mask, syzbot
• INFO: task hung in hub_port_init, syzbot
  • Re: INFO: task hung in hub_port_init, Oliver Neukum
    • Re: INFO: task hung in hub_port_init, Andrey Konovalov
• INFO: task hung in usb_get_descriptor, syzbot
  • Re: [syzbot] INFO: task hung in usb_get_descriptor, syzbot
    • Re: [syzbot] INFO: task hung in usb_get_descriptor, Dmitry Vyukov
• [PATCH nf] netfilter: conntrack: connection timeout after re-register, Francesco Ruggeri
• [PATCH v8 net-next] ipvs: inspect reply packets from DR/TUN real servers, Julian Anastasov
  • Re: [PATCH v8 net-next] ipvs: inspect reply packets from DR/TUN real servers, Pablo Neira Ayuso
• [iptables PATCH 0/3] nft: Fix transaction refreshing, Phil Sutter
  • [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls, Phil Sutter
    • Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls, Pablo Neira Ayuso
      • Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls, Phil Sutter
        • Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls, Pablo Neira Ayuso
          • Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls, Phil Sutter
            • Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls, Pablo Neira Ayuso
              • Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls, Phil Sutter
                • Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls, Pablo Neira Ayuso
  • [iptables PATCH 1/3] nft: Make batch_add_chain() return the added batch object, Phil Sutter
    • Re: [iptables PATCH 1/3] nft: Make batch_add_chain() return the added batch object, Florian Westphal
  • [iptables PATCH 2/3] nft: Fix error reporting for refreshed transactions, Phil Sutter
    • Re: [iptables PATCH 2/3] nft: Fix error reporting for refreshed transactions, Florian Westphal
• [PATCH 00/11] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 03/11] ipvs: Remove unused macros, Pablo Neira Ayuso
  • [PATCH 04/11] netfilter: nf_tables: fix userdata memleak, Pablo Neira Ayuso
  • [PATCH 07/11] netfilter: nf_tables_offload: Remove unused macro FLOW_SETUP_BLOCK, Pablo Neira Ayuso
  • [PATCH 08/11] netfilter: ipset: enable memory accounting for ipset allocations, Pablo Neira Ayuso
  • [PATCH 06/11] netfilter: nf_tables: add userdata attributes to nft_chain, Pablo Neira Ayuso
  • [PATCH 05/11] netfilter: nf_tables: use nla_memdup to copy udata, Pablo Neira Ayuso
  • [PATCH 01/11] netfilter: conntrack: proc: rename stat column, Pablo Neira Ayuso
  • [PATCH 02/11] netfilter: nf_tables: Remove ununsed function nft_data_debug, Pablo Neira Ayuso
  • [PATCH 11/11] netfilter: nf_tables: Implement fast bitwise expression, Pablo Neira Ayuso
  • [PATCH 09/11] netfilter: nfnetlink: place subsys mutexes in distinct lockdep classes, Pablo Neira Ayuso
  • [PATCH 10/11] netfilter: nf_tables: Enable fast nft_cmp for inverted matches, Pablo Neira Ayuso
  • Re: [PATCH 00/11] Netfilter updates for net-next, David Miller
• [PATCH 1/1] Solves Bug 1462 - `nft -j list set` does not show counters, Gopal Yadav
  • Re: [PATCH 1/1] Solves Bug 1462 - `nft -j list set` does not show counters, Jose M. Guisado
    • Re: [PATCH 1/1] Solves Bug 1462 - `nft -j list set` does not show counters, Gopal Yadav
      • Re: [PATCH 1/1] Solves Bug 1462 - `nft -j list set` does not show counters, Jose M. Guisado
        • Re: [PATCH 1/1] Solves Bug 1462 - `nft -j list set` does not show counters, Gopal Yadav
• [PATCH nf-next] netfilter: nfnetlink: place subsys mutexes in distinct lockdep classes, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nfnetlink: place subsys mutexes in distinct lockdep classes, Pablo Neira Ayuso
• [iptables PATCH] iptables-nft: fix basechain policy configuration, Arturo Borrero Gonzalez
  • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Phil Sutter
    • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Pablo Neira Ayuso
      • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Phil Sutter
        • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Pablo Neira Ayuso
          • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Phil Sutter
            • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Pablo Neira Ayuso
  • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Pablo Neira Ayuso
    • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Phil Sutter
      • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Pablo Neira Ayuso
        • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Phil Sutter
          • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Reindl Harald
            • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Phil Sutter
              • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Reindl Harald
          • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Jozsef Kadlecsik
            • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Phil Sutter
              • Re: [iptables PATCH] iptables-nft: fix basechain policy configuration, Jozsef Kadlecsik
• [iptables PATCH] nft: Optimize class-based IP prefix matches, Phil Sutter
  • Re: [iptables PATCH] nft: Optimize class-based IP prefix matches, Arturo Borrero Gonzalez
    • Re: [iptables PATCH] nft: Optimize class-based IP prefix matches, Phil Sutter
  • Re: [iptables PATCH] nft: Optimize class-based IP prefix matches, Pablo Neira Ayuso
    • Re: [iptables PATCH] nft: Optimize class-based IP prefix matches, Phil Sutter
      • Re: [iptables PATCH] nft: Optimize class-based IP prefix matches, Pablo Neira Ayuso
        • Re: [iptables PATCH] nft: Optimize class-based IP prefix matches, Phil Sutter
• [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches, Phil Sutter
  • [net-next PATCH 1/2] net: netfilter: Enable fast nft_cmp for inverted matches, Phil Sutter
    • [net-next PATCH 1/2 v2] net: netfilter: Enable fast nft_cmp for inverted matches, Phil Sutter
      • Re: [net-next PATCH 1/2 v2] net: netfilter: Enable fast nft_cmp for inverted matches, Pablo Neira Ayuso
  • [net-next PATCH 2/2] net: netfilter: Implement fast bitwise expression, Phil Sutter
    • Re: [net-next PATCH 2/2] net: netfilter: Implement fast bitwise expression, Pablo Neira Ayuso
  • Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches, Florian Westphal
    • Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches, Phil Sutter
      • Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches, Pablo Neira Ayuso
        • Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches, Pablo Neira Ayuso
          • Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches, Phil Sutter
• [PATCH] nft: migrate man page examples with `meter` directive to sets, Devin Bayer
  • Re: [PATCH] nft: migrate man page examples with `meter` directive to sets, Pablo Neira Ayuso
    • Re: [PATCH] nft: migrate man page examples with `meter` directive to sets, Devin Bayer
• iptables-nft-restore issue, Arturo Borrero Gonzalez
  • Re: iptables-nft-restore issue, Florian Westphal
    • Re: iptables-nft-restore issue, Pablo Neira Ayuso
      • Re: iptables-nft-restore issue, Pablo Neira Ayuso
        • Re: iptables-nft-restore issue, Arturo Borrero Gonzalez
          • Re: iptables-nft-restore issue, Pablo Neira Ayuso
  • Re: iptables-nft-restore issue, Phil Sutter
• [PATCH libnetfilter_queue] doc: build: Reduce size of doxygen.cfg and doxygen build o/p, Duncan Roe
• [PATCH libnetfilter_queue] src: doc: Fix doxygen warning, Duncan Roe
• nftables bug?? Maybe, Evgeniy Yakubov
• [PATCH] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, longguang.yue
  • Re: [PATCH] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, yue longguang
  • [PATCH v2] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, longguang.yue
    • Re: [PATCH v2] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, Jakub Kicinski
      • [PATCH v3] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, longguang.yue
        • Re: [PATCH v3] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, Julian Anastasov
          • [PATCH v4] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, longguang.yue
            • Re: [PATCH v4] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, Julian Anastasov
              • [PATCH v5] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, longguang.yue
                • Re: [PATCH v5] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode, Julian Anastasov
                  • [PATCH v6] ipvs: inspect reply packets from DR/TUN real servers, longguang.yue
• Re: general protection fault in strncasecmp, syzbot
• [iptables PATCH] nft: Fix for broken address mask match detection, Phil Sutter
  • Re: [iptables PATCH] nft: Fix for broken address mask match detection, Pablo Neira Ayuso
• [PATCH v4 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain, Jose M. Guisado Gomez
  • Re: [PATCH v4 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: use nla_memdup to copy udata, Jose M. Guisado Gomez
  • Re: [PATCH nf-next] netfilter: nf_tables: use nla_memdup to copy udata, Pablo Neira Ayuso
• KASAN: use-after-free Read in tcf_action_init, syzbot
  • Re: KASAN: use-after-free Read in tcf_action_init, Cong Wang
• [nftables] counter not working on kernel 5.6, Gopal Yadav
  • Re: [nftables] counter not working on kernel 5.6, Pablo Neira Ayuso
• [PATCH v4] ipvs: adjust the debug info in function set_tcp_state, longguang.yue
  • Re: [PATCH v4] ipvs: adjust the debug info in function set_tcp_state, Julian Anastasov
    • [PATCH v5] ipvs: adjust the debug info in function set_tcp_state, longguang.yue
      • Re: [PATCH v5] ipvs: adjust the debug info in function set_tcp_state, yue longguang
      • Re: [PATCH v5] ipvs: adjust the debug info in function set_tcp_state, Julian Anastasov
        • Re: [PATCH v5] ipvs: adjust the debug info in function set_tcp_state, yue longguang
        • [PATCH v6] ipvs: adjust the debug info in function set_tcp_state, longguang.yue
        • Re: [PATCH v5] ipvs: adjust the debug info in function set_tcp_state, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: fix userdata memleak, Jose M. Guisado Gomez
  • Re: [PATCH nf-next] netfilter: nf_tables: fix userdata memleak, Pablo Neira Ayuso
• BUG: unable to handle kernel paging request in dqput, syzbot
  • Re: BUG: unable to handle kernel paging request in dqput, Takashi Iwai
    • Re: BUG: unable to handle kernel paging request in dqput, Jan Kara
• [PATCH 0/8] Fast bulk transfers of large sets of ct entries, Mikhail Sennikovsky
  • [PATCH 8/8] tests: dumping ct entries in opts format, Mikhail Sennikovsky
  • [PATCH 1/8] tests: icmp entry create/delete, Mikhail Sennikovsky
    • Re: [PATCH 1/8] tests: icmp entry create/delete, Pablo Neira Ayuso
  • [PATCH 4/8] conntrack.8: man update for stdin params support, Mikhail Sennikovsky
  • [PATCH 7/8] conntrack.8: man update for opts format support, Mikhail Sennikovsky
  • [PATCH 6/8] conntrack: implement options output format, Mikhail Sennikovsky
    • Re: [PATCH 6/8] conntrack: implement options output format, Pablo Neira Ayuso
      • Re: [PATCH 6/8] conntrack: implement options output format, Pablo Neira Ayuso
        • Re: [PATCH 6/8] conntrack: implement options output format, Mikhail Sennikovsky
  • [PATCH 5/8] tests: conntrack parameters from stdin, Mikhail Sennikovsky