Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 23/31] netfilter: nf_tables_offload: add nft_flow_block_chain(), (continued)
  • [PATCH 23/31] netfilter: nf_tables_offload: add nft_flow_block_chain(), Pablo Neira Ayuso
  • [PATCH 22/31] netfilter: nf_tables: increase maximum devices number per flowtable, Pablo Neira Ayuso
  • [PATCH 21/31] netfilter: nf_tables: allow netdevice to be used only once per flowtable, Pablo Neira Ayuso
  • [PATCH 19/31] netfilter: nf_flow_table: move priority to struct nf_flowtable, Pablo Neira Ayuso
  • [PATCH 16/31] netfilter: conntrack: free extension area immediately, Pablo Neira Ayuso
  • [PATCH 11/31] selftests: netfilter: add ipvs test script, Pablo Neira Ayuso
  • [PATCH 12/31] selftests: netfilter: add ipvs nat test case, Pablo Neira Ayuso
  • [PATCH 10/31] ipvs: batch __ip_vs_dev_cleanup, Pablo Neira Ayuso
  • [PATCH 08/31] ipvs: no need to update skb route entry for local destination packets., Pablo Neira Ayuso
  • [PATCH 04/31] netfilter: ipset: move functions to ip_set_core.c., Pablo Neira Ayuso
  • [PATCH 02/31] netfilter: ipset: remove inline from static functions in .c files., Pablo Neira Ayuso
  • [PATCH 06/31] netfilter: ipset: move function to ip_set_bitmap_ip.c., Pablo Neira Ayuso
  • Re: [PATCH 00/31] Netfilter/IPVS updates for net-next, David Miller
• [PATCH nft] mnl: remove artifical cap on 8 devices per flowtable, Pablo Neira Ayuso
• [PATCH nft,v3] src: add multidevice support for netdev chain, Pablo Neira Ayuso
• [PATCH nft,v2] src: add multidevice support for netdev chain, Pablo Neira Ayuso
  • Re: [PATCH nft,v2] src: add multidevice support for netdev chain, Pablo Neira Ayuso
• [PATCH libnftnl,v2] chain: multi-device support, Pablo Neira Ayuso
• [PATCH libnftnl,v2] flowtable: device array dynamic allocation, Pablo Neira Ayuso
• [iptables PATCH] xtables-arp: Use xtables_ipparse_multiple(), Phil Sutter
  • Re: [iptables PATCH] xtables-arp: Use xtables_ipparse_multiple(), Florian Westphal
• [PATCH AUTOSEL 5.3 11/33] netfilter: conntrack: avoid possible false sharing, Sasha Levin
• [PATCH AUTOSEL 5.3 16/33] netfilter: connlabels: prefer static lock initialiser, Sasha Levin
• [GIT PULL] IPVS fixes for v5.4, Simon Horman
  • [PATCH 1/2] ipvs: don't ignore errors in case refcounting ip_vs module fails, Simon Horman
  • [PATCH 2/2] ipvs: move old_secure_tcp into struct netns_ipvs, Simon Horman
  • Re: [GIT PULL] IPVS fixes for v5.4, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables_offload: support offload iif types meta offload, wenxu
  • Re: [PATCH nf-next] netfilter: nf_tables_offload: support offload iif types meta offload, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: nf_tables_offload: support offload iif types meta offload, wenxu
      • Re: [PATCH nf-next] netfilter: nf_tables_offload: support offload iif types meta offload, Pablo Neira Ayuso
• [iptables PATCH v3 0/7] Improve xtables-restore performance, Phil Sutter
  • [iptables PATCH v3 1/7] xtables-restore: Integrate restore callbacks into struct nft_xt_restore_parse, Phil Sutter
  • [iptables PATCH v3 5/7] xtables-restore: Allow lines without trailing newline character, Phil Sutter
  • [iptables PATCH v3 4/7] xtables-restore: Remove some pointless linebreaks, Phil Sutter
  • [iptables PATCH v3 2/7] xtables-restore: Introduce struct nft_xt_restore_state, Phil Sutter
  • [iptables PATCH v3 6/7] xtables-restore: Improve performance of --noflush operation, Phil Sutter
  • [iptables PATCH v3 7/7] tests: shell: Add ipt-restore/0007-flush-noflush_0, Phil Sutter
  • [iptables PATCH v3 3/7] xtables-restore: Introduce line parsing function, Phil Sutter
  • Re: [iptables PATCH v3 0/7] Improve xtables-restore performance, Pablo Neira Ayuso
    • Re: [iptables PATCH v3 0/7] Improve xtables-restore performance, Phil Sutter
      • Re: [iptables PATCH v3 0/7] Improve xtables-restore performance, Pablo Neira Ayuso
        • Re: [iptables PATCH v3 0/7] Improve xtables-restore performance, Phil Sutter
• [PATCH trivial] net: Fix various misspellings of "connect", Geert Uytterhoeven
  • Re: [PATCH trivial] net: Fix various misspellings of "connect", Kalle Valo
  • Re: [PATCH trivial] net: Fix various misspellings of "connect", Simon Horman
  • Re: [PATCH trivial] net: Fix various misspellings of "connect", David Miller
• [PATCH nf-next 0/5] netfilter: nft_tunnel: support tunnel match expr offload, wenxu
  • [PATCH nf-next 1/5] netfilter: nft_tunnel: add nft_tunnel_mode_validate function, wenxu
    • Re: [PATCH nf-next 1/5] netfilter: nft_tunnel: add nft_tunnel_mode_validate function, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nft_tunnel: support NFT_TUNNEL_IPV6_SRC/DST match, wenxu
    • Re: [PATCH nf-next 4/5] netfilter: nft_tunnel: support NFT_TUNNEL_IPV6_SRC/DST match, Pablo Neira Ayuso
  • [PATCH nf-next 3/5] netfilter: nft_tunnel: add inet type check in nft_tunnel_mode_validate, wenxu
    • Re: [PATCH nf-next 3/5] netfilter: nft_tunnel: add inet type check in nft_tunnel_mode_validate, Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nft_tunnel: support NFT_TUNNEL_IPV4_SRC/DST match, wenxu
    • Re: [PATCH nf-next 2/5] netfilter: nft_tunnel: support NFT_TUNNEL_IPV4_SRC/DST match, kbuild test robot
  • [PATCH nf-next 5/5] netfilter: nft_tunnel: add nft_tunnel_get_offload support, wenxu
• [PATCH nf-next 1/3] netfilter: nf_tables_offload: add nft_chain_offload_cmd(), Pablo Neira Ayuso
  • [PATCH nf-next 3/3] netfilter: nf_tables_offload: unbind if multi-device binding fails, Pablo Neira Ayuso
  • [PATCH nf-next 2/3] netfilter: nf_tables_offload: add nft_flow_block_offload_init(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_payload: fix check the match len for offload to hw, wenxu
  • Re: [PATCH nf] netfilter: nft_payload: fix check the match len for offload to hw, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables_offload: Fix unbind devices when subsequent device bind failed, wenxu
  • Re: [PATCH nf-next] netfilter: nf_tables_offload: Fix unbind devices when subsequent device bind failed, Pablo Neira Ayuso
• [nft PATCH] Revert "main: Fix for misleading error with negative chain priority", Phil Sutter
• [PATCH net-next] netfilter: nf_conntrack: introduce conntrack limit per-zone, xiangxia . m . yue
  • Re: [PATCH net-next] netfilter: nf_conntrack: introduce conntrack limit per-zone, Florian Westphal
    • Re: [PATCH net-next] netfilter: nf_conntrack: introduce conntrack limit per-zone, Tonghao Zhang
      • Re: [PATCH net-next] netfilter: nf_conntrack: introduce conntrack limit per-zone, Florian Westphal
• [PATCH nft 0/4] Output Flag Fixes, Jeremy Sowden
  • [PATCH nft 2/4] py: add missing output flags., Jeremy Sowden
    • Re: [PATCH nft 2/4] py: add missing output flags., Pablo Neira Ayuso
      • Re: [PATCH nft 2/4] py: add missing output flags., Phil Sutter
        • Re: [PATCH nft 2/4] py: add missing output flags., Pablo Neira Ayuso
          • Re: [PATCH nft 2/4] py: add missing output flags., Phil Sutter
            • Re: [PATCH nft 2/4] py: add missing output flags., Pablo Neira Ayuso
    • Re: [PATCH nft 2/4] py: add missing output flags., Phil Sutter
  • [PATCH nft 3/4] main: add missing `OPT_NUMERIC_PROTO` long option., Jeremy Sowden
    • Re: [PATCH nft 3/4] main: add missing `OPT_NUMERIC_PROTO` long option., Pablo Neira Ayuso
  • [PATCH nft 4/4] main: remove duplicate output flag assignment., Jeremy Sowden
    • Re: [PATCH nft 4/4] main: remove duplicate output flag assignment., Pablo Neira Ayuso
  • [PATCH nft 1/4] doc: add missing output flag documentation., Jeremy Sowden
    • Re: [PATCH nft 1/4] doc: add missing output flag documentation., Pablo Neira Ayuso
• [PATCH tip/core/rcu 08/10] net/netfilter: Replace rcu_swap_protected() with rcu_replace(), paulmck
• [PATCH nf-next] netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks, Florian Westphal
  • Re: [PATCH nf-next] netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks, Florian Westphal
• nftables: secmark support, Christian Göttsche
  • Re: nftables: secmark support, Pablo Neira Ayuso
    • Re: nftables: secmark support, Christian Göttsche
      • Re: nftables: secmark support, Christian Göttsche
        • Re: nftables: secmark support, Pablo Neira Ayuso
          • Re: nftables: secmark support, Pablo Neira Ayuso
            • Re: nftables: secmark support, Christian Göttsche
              • Re: nftables: secmark support, Pablo Neira Ayuso
• [PATCH nf-next,RFC 0/2] nf_tables encapsulation/decapsulation support, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 2/2] netfilter: nf_tables: add encapsulation support, Pablo Neira Ayuso
    • Re: [PATCH nf-next,RFC 2/2] netfilter: nf_tables: add encapsulation support, wenxu
  • [PATCH nf-next,RFC 1/2] netfilter: nf_tables: add decapsulation support, Pablo Neira Ayuso
  • Re: [PATCH nf-next,RFC 0/2] nf_tables encapsulation/decapsulation support, wenxu
    • Re: [PATCH nf-next,RFC 0/2] nf_tables encapsulation/decapsulation support, Pablo Neira Ayuso
      • Re: [PATCH nf-next,RFC 0/2] nf_tables encapsulation/decapsulation support, wenxu
      • Re: [PATCH nf-next,RFC 0/2] nf_tables encapsulation/decapsulation support, wenxu
• KASAN: use-after-free Read in nf_ct_deliver_cached_events, syzbot
  • Re: KASAN: use-after-free Read in nf_ct_deliver_cached_events, syzbot
  • Re: KASAN: use-after-free Read in nf_ct_deliver_cached_events, syzbot
    • Re: KASAN: use-after-free Read in nf_ct_deliver_cached_events, Florian Westphal
• How to implement transparent proxy in bridge through nftables, Ttttabcd
  • Re: How to implement transparent proxy in bridge through nftables, Florian Westphal
    • Re: How to implement transparent proxy in bridge through nftables, Ttttabcd
      • Re: How to implement transparent proxy in bridge through nftables, Florian Westphal
• [iptables PATCH] xtables-restore: Unbreak *tables-restore, Phil Sutter
  • Re: [iptables PATCH] xtables-restore: Unbreak *tables-restore, Pablo Neira Ayuso
• [PATCH nft v3 0/2] Add option to omit sets elements from listings., Jeremy Sowden
  • [PATCH nft v3 2/2] src: add --terse to suppress output of set elements., Jeremy Sowden
  • [PATCH nft v3 1/2] src: use `-T` as the short option for `--numeric-time`., Jeremy Sowden
  • Re: [PATCH nft v3 0/2] Add option to omit sets elements from listings., Pablo Neira Ayuso
    • Re: [PATCH nft v3 0/2] Add option to omit sets elements from listings., Jeremy Sowden
• [nft PATCH] main: Fix for misleading error with negative chain priority, Phil Sutter
  • Re: [nft PATCH] main: Fix for misleading error with negative chain priority, Pablo Neira Ayuso
• [PATCH nft v2] src: extend --stateless to suppress output of non-dynamic set elements., Jeremy Sowden
  • Re: [PATCH nft v2] src: extend --stateless to suppress output of non-dynamic set elements., Pablo Neira Ayuso
• [PATCH nft] main: misleading error reporting in chain definitions, Pablo Neira Ayuso
  • Re: [PATCH nft] main: misleading error reporting in chain definitions, Phil Sutter
    • Re: [PATCH nft] main: misleading error reporting in chain definitions, Pablo Neira Ayuso
• [nft PATCH] parser_json: Fix checking of parse_policy() return code, Phil Sutter
  • Re: [nft PATCH] parser_json: Fix checking of parse_policy() return code, Pablo Neira Ayuso
• [nft PATCH] tproxy: Add missing error checking when parsing from netlink, Phil Sutter
  • Re: [nft PATCH] tproxy: Add missing error checking when parsing from netlink, Pablo Neira Ayuso
• [iptables PATCH v2] xtables-restore: Fix --table parameter check, Phil Sutter
  • Re: [iptables PATCH v2] xtables-restore: Fix --table parameter check, Florian Westphal
• [PATCH nft] src: extend --stateless to suppress output of non-dynamic set elements., Jeremy Sowden
  • Re: [PATCH nft] src: extend --stateless to suppress output of non-dynamic set elements., Jeremy Sowden
• CFS for Netdev 0x14 open!, Jamal Hadi Salim
• xtables-addons akmods Builds Failing on Linux Kernel 5.3.6 - Log Sample - xt_DHCPMAC.c, Matt Olson
  • Re: xtables-addons akmods Builds Failing on Linux Kernel 5.3.6 - Log Sample - xt_DHCPMAC.c, Jeremy Sowden
• [PATCH nf-next,v2 5/5] netfilter: nf_tables: support for multiple devices per netdev hook, Pablo Neira Ayuso
• [PATCH nf v2] ipvs: don't ignore errors in case refcounting ip_vs module fails, Davide Caratti
  • Re: [PATCH nf v2] ipvs: don't ignore errors in case refcounting ip_vs module fails, Julian Anastasov
• [PATCH AUTOSEL 4.19 016/100] netfilter: ipset: Make invalid MAC address checks consistent, Sasha Levin
• [iptables PATCH 1/2] iptables-xml: Use add_param_to_argv(), Phil Sutter
  • [iptables PATCH 2/2] xshared: Introduce struct argv_store, Phil Sutter
    • Re: [iptables PATCH 2/2] xshared: Introduce struct argv_store, Pablo Neira Ayuso
  • Re: [iptables PATCH 1/2] iptables-xml: Use add_param_to_argv(), Pablo Neira Ayuso
• [iptables PATCH] nft: Use ARRAY_SIZE() macro in nft_strerror(), Phil Sutter
  • Re: [iptables PATCH] nft: Use ARRAY_SIZE() macro in nft_strerror(), Pablo Neira Ayuso
    • Re: [iptables PATCH] nft: Use ARRAY_SIZE() macro in nft_strerror(), Pablo Neira Ayuso
      • Re: [iptables PATCH] nft: Use ARRAY_SIZE() macro in nft_strerror(), Phil Sutter
        • Re: [iptables PATCH] nft: Use ARRAY_SIZE() macro in nft_strerror(), Pablo Neira Ayuso
          • Re: [iptables PATCH] nft: Use ARRAY_SIZE() macro in nft_strerror(), Phil Sutter
            • Re: [iptables PATCH] nft: Use ARRAY_SIZE() macro in nft_strerror(), Pablo Neira Ayuso
              • Re: [iptables PATCH] nft: Use ARRAY_SIZE() macro in nft_strerror(), Phil Sutter
                • Re: [iptables PATCH] nft: Use ARRAY_SIZE() macro in nft_strerror(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables_offload: restore basechain deletion, Pablo Neira Ayuso
• [PATCH nf-next v2] netfilter: nf_tables: add vlan support, wenxu
  • Re: [PATCH nf-next v2] netfilter: nf_tables: add vlan support, Florian Westphal
• [PATCH nf-next] netfilter: nf_tables: add vlan support, wenxu
  • Re: [PATCH nf-next] netfilter: nf_tables: add vlan support, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nf_tables: add vlan support, wenxu
      • Re: [PATCH nf-next] netfilter: nf_tables: add vlan support, Florian Westphal
• [PATCH nft] src: add multidevice support for netdev chain, Pablo Neira Ayuso
• [PATCH libnftnl 1/2] flowtable: device array dynamic allocation, Pablo Neira Ayuso
  • [PATCH libnftnl 2/2] chain: multi-device support, Pablo Neira Ayuso
• [iptables PATCH 0/8] A bit of *tables-restore review fallout, Phil Sutter
  • [iptables PATCH 2/8] xtables-restore: Use xt_params->program_name, Phil Sutter
    • Re: [iptables PATCH 2/8] xtables-restore: Use xt_params->program_name, Pablo Neira Ayuso
  • [iptables PATCH 6/8] xtables-restore: Drop pointless newargc reset, Phil Sutter
    • Re: [iptables PATCH 6/8] xtables-restore: Drop pointless newargc reset, Pablo Neira Ayuso
      • Re: [iptables PATCH 6/8] xtables-restore: Drop pointless newargc reset, Phil Sutter
  • [iptables PATCH 7/8] xtables-restore: Drop local xtc_ops instance, Phil Sutter
    • Re: [iptables PATCH 7/8] xtables-restore: Drop local xtc_ops instance, Pablo Neira Ayuso
  • [iptables PATCH 4/8] xtables-restore: Constify struct nft_xt_restore_cb, Phil Sutter
    • Re: [iptables PATCH 4/8] xtables-restore: Constify struct nft_xt_restore_cb, Pablo Neira Ayuso
  • [iptables PATCH 5/8] iptables-restore: Constify struct iptables_restore_cb, Phil Sutter
    • Re: [iptables PATCH 5/8] iptables-restore: Constify struct iptables_restore_cb, Pablo Neira Ayuso
  • [iptables PATCH 8/8] xtables-restore: Drop chain_list callback, Phil Sutter
    • Re: [iptables PATCH 8/8] xtables-restore: Drop chain_list callback, Pablo Neira Ayuso
  • [iptables PATCH 3/8] xtables-restore: Introduce rule counter tokenizer function, Phil Sutter
    • Re: [iptables PATCH 3/8] xtables-restore: Introduce rule counter tokenizer function, Pablo Neira Ayuso
      • Re: [iptables PATCH 3/8] xtables-restore: Introduce rule counter tokenizer function, Phil Sutter
        • Re: [iptables PATCH 3/8] xtables-restore: Introduce rule counter tokenizer function, Pablo Neira Ayuso
  • [iptables PATCH 1/8] xtables-restore: Treat struct nft_xt_restore_parse as const, Phil Sutter
    • Re: [iptables PATCH 1/8] xtables-restore: Treat struct nft_xt_restore_parse as const, Pablo Neira Ayuso
• [PATCH nft,v2] src: restore --echo with anonymous sets, Pablo Neira Ayuso
  • Re: [PATCH nft,v2] src: restore --echo with anonymous sets, Phil Sutter
• [PATCH nft] src: restore --echo with anonymous sets, Pablo Neira Ayuso
  • Re: [PATCH nft] src: restore --echo with anonymous sets, Phil Sutter
• [PATCH nft 1/2] src: define flowtable device compound as a list, Pablo Neira Ayuso
  • [PATCH nft 2/2,v2] flowtable: fix memleak in exit path, Pablo Neira Ayuso
• [nft PATCH 0/4] A bunch of fixes for --echo option, Phil Sutter
  • [nft PATCH 3/4] tests/monitor: Fix for changed ct timeout format, Phil Sutter
    • Re: [nft PATCH 3/4] tests/monitor: Fix for changed ct timeout format, Florian Westphal
    • Re: [nft PATCH 3/4] tests/monitor: Fix for changed ct timeout format, Pablo Neira Ayuso
  • [nft PATCH 2/4] Revert "monitor: fix double cache update with --echo", Phil Sutter
    • Re: [nft PATCH 2/4] Revert "monitor: fix double cache update with --echo", Florian Westphal
    • Re: [nft PATCH 2/4] Revert "monitor: fix double cache update with --echo", Pablo Neira Ayuso
      • Re: [nft PATCH 2/4] Revert "monitor: fix double cache update with --echo", Pablo Neira Ayuso
        • Re: [nft PATCH 2/4] Revert "monitor: fix double cache update with --echo", Phil Sutter
          • Re: [nft PATCH 2/4] Revert "monitor: fix double cache update with --echo", Pablo Neira Ayuso
            • Re: [nft PATCH 2/4] Revert "monitor: fix double cache update with --echo", Phil Sutter
          • Re: [nft PATCH 2/4] Revert "monitor: fix double cache update with --echo", Pablo Neira Ayuso
            • Re: [nft PATCH 2/4] Revert "monitor: fix double cache update with --echo", Phil Sutter
  • [nft PATCH 1/4] monitor: Add missing newline to error message, Phil Sutter
    • Re: [nft PATCH 1/4] monitor: Add missing newline to error message, Florian Westphal
    • Re: [nft PATCH 1/4] monitor: Add missing newline to error message, Pablo Neira Ayuso
  • [nft PATCH 4/4] rule: Fix for single line ct timeout printing, Phil Sutter
    • Re: [nft PATCH 4/4] rule: Fix for single line ct timeout printing, Florian Westphal
    • Re: [nft PATCH 4/4] rule: Fix for single line ct timeout printing, Pablo Neira Ayuso
      • Re: [nft PATCH 4/4] rule: Fix for single line ct timeout printing, Phil Sutter
        • Re: [nft PATCH 4/4] rule: Fix for single line ct timeout printing, Pablo Neira Ayuso
    • Re: [nft PATCH 4/4] rule: Fix for single line ct timeout printing, Pablo Neira Ayuso
• [libnftnl PATCH] obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser, Phil Sutter
  • Re: [libnftnl PATCH] obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser, Pablo Neira Ayuso
• feature request, way to check specific IP/port/protocol/etc, Dmitri Seletski
• [PATCH nf-next 0/5] Hook multiple netdevices to basechain, Pablo Neira Ayuso
  • [PATCH nf-next 1/5] netfilter: nf_tables_offload: add nft_flow_block_chain(), Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nf_tables_offload: Pass callback list to nft_setup_cb_call(), Pablo Neira Ayuso
  • [PATCH nf-next 3/5] netfilter: nf_tables_offload: add nft_flow_cls_offload_setup(), Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nf_tables_offload: remove rules on unregistered device only, Pablo Neira Ayuso
  • [PATCH nf-next 5/5] netfilter: nf_tables: support for multiple devices per netdev hook, Pablo Neira Ayuso
• [PATCH nf-next 0/4] flowtable updates, Pablo Neira Ayuso
  • [PATCH nf-next 1/4] netfilter: nf_flow_table: move priority to struct nf_flowtable, Pablo Neira Ayuso
  • [PATCH nf-next 3/4] netfilter: nf_tables: allow only one netdev per flowtable, Pablo Neira Ayuso
  • [PATCH nf-next 4/4] netfilter: nf_tables: increase maximum devices number per flowtable, Pablo Neira Ayuso
  • [PATCH nf-next 2/4] netfilter: nf_tables: dynamically allocate hooks per net_device in flowtables, Pablo Neira Ayuso
• [PATCH] nfnetlink_cthelper: make userspace conntrack helpers with priv data work again, a_hungrig
• [libnftnl PATCH v2] set_elem: Validate nftnl_set_elem_set() parameters, Phil Sutter
  • Re: [libnftnl PATCH v2] set_elem: Validate nftnl_set_elem_set() parameters, Pablo Neira Ayuso
• [nft PATCH] mnl: Don't use nftnl_set_set(), Phil Sutter
  • Re: [nft PATCH] mnl: Don't use nftnl_set_set(), Pablo Neira Ayuso
• [libnftnl PATCH 0/6] A series of covscan-indicated fixes, Phil Sutter
  • [libnftnl PATCH 3/6] set_elem: Validate nftnl_set_elem_set() parameters, Phil Sutter
    • Re: [libnftnl PATCH 3/6] set_elem: Validate nftnl_set_elem_set() parameters, Pablo Neira Ayuso
      • Re: [libnftnl PATCH 3/6] set_elem: Validate nftnl_set_elem_set() parameters, Phil Sutter
        • Re: [libnftnl PATCH 3/6] set_elem: Validate nftnl_set_elem_set() parameters, Pablo Neira Ayuso
          • Re: [libnftnl PATCH 3/6] set_elem: Validate nftnl_set_elem_set() parameters, Phil Sutter
            • Re: [libnftnl PATCH 3/6] set_elem: Validate nftnl_set_elem_set() parameters, Pablo Neira Ayuso
  • [libnftnl PATCH 5/6] obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data(), Phil Sutter
    • Re: [libnftnl PATCH 5/6] obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data(), Pablo Neira Ayuso
      • Re: [libnftnl PATCH 5/6] obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data(), Phil Sutter
        • Re: [libnftnl PATCH 5/6] obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data(), Pablo Neira Ayuso
          • Re: [libnftnl PATCH 5/6] obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data(), Phil Sutter
            • Re: [libnftnl PATCH 5/6] obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data(), Pablo Neira Ayuso
              • Re: [libnftnl PATCH 5/6] obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data(), Phil Sutter
                • Re: [libnftnl PATCH 5/6] obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data(), Pablo Neira Ayuso
  • [libnftnl PATCH 1/6] obj: ct_timeout: Check return code of mnl_attr_parse_nested(), Phil Sutter
    • Re: [libnftnl PATCH 1/6] obj: ct_timeout: Check return code of mnl_attr_parse_nested(), Pablo Neira Ayuso
  • [libnftnl PATCH 4/6] set: Don't bypass checks in nftnl_set_set_u{32,64}(), Phil Sutter
    • Re: [libnftnl PATCH 4/6] set: Don't bypass checks in nftnl_set_set_u{32,64}(), Pablo Neira Ayuso
      • Re: [libnftnl PATCH 4/6] set: Don't bypass checks in nftnl_set_set_u{32,64}(), Phil Sutter
        • Re: [libnftnl PATCH 4/6] set: Don't bypass checks in nftnl_set_set_u{32,64}(), Pablo Neira Ayuso
          • Re: [libnftnl PATCH 4/6] set: Don't bypass checks in nftnl_set_set_u{32,64}(), Phil Sutter
            • Re: [libnftnl PATCH 4/6] set: Don't bypass checks in nftnl_set_set_u{32,64}(), Pablo Neira Ayuso
  • [libnftnl PATCH 2/6] set_elem: Fix return code of nftnl_set_elem_set(), Phil Sutter
    • Re: [libnftnl PATCH 2/6] set_elem: Fix return code of nftnl_set_elem_set(), Pablo Neira Ayuso
  • [libnftnl PATCH 6/6] obj/tunnel: Fix for undefined behaviour, Phil Sutter
    • Re: [libnftnl PATCH 6/6] obj/tunnel: Fix for undefined behaviour, Pablo Neira Ayuso
• [PATCH nft] flowtable: fix memleak in exit path, Eric Jallot
• [PATCH nft] rule: fix flowtable memleaks, Pablo Neira Ayuso
• [PATCH v2 nf-next 0/2] netfilter: conntrack: free extension area immediately, Florian Westphal
  • [PATCH v2 nf-next 1/2] netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks, Florian Westphal
  • [PATCH nf-next 2/2] netfilter: conntrack: free extension area immediately, Florian Westphal
  • Re: [PATCH v2 nf-next 0/2] netfilter: conntrack: free extension area immediately, Pablo Neira Ayuso
• [iptables PATCH v4 0/8] Improve iptables-nft performance with large rulesets, Phil Sutter
  • [iptables PATCH v4 4/8] nft-cache: Support partial cache per table, Phil Sutter
  • [iptables PATCH v4 6/8] nft: Reduce cache overhead of nft_chain_builtin_init(), Phil Sutter
  • [iptables PATCH v4 5/8] nft-cache: Support partial rule cache per chain, Phil Sutter
  • [iptables PATCH v4 2/8] nft-cache: Fetch only chains in nft_chain_list_get(), Phil Sutter
  • [iptables PATCH v4 3/8] nft-cache: Cover for multiple fetcher invocation, Phil Sutter
  • [iptables PATCH v4 7/8] nft: Support nft_is_table_compatible() per chain, Phil Sutter
  • [iptables PATCH v4 8/8] nft: Optimize flushing all chains of a table, Phil Sutter
  • [iptables PATCH v4 1/8] nft-cache: Introduce cache levels, Phil Sutter
    • Re: [iptables PATCH v4 1/8] nft-cache: Introduce cache levels, Pablo Neira Ayuso
  • Re: [iptables PATCH v4 0/8] Improve iptables-nft performance with large rulesets, Pablo Neira Ayuso
    • Re: [iptables PATCH v4 0/8] Improve iptables-nft performance with large rulesets, Pablo Neira Ayuso
      • Re: [iptables PATCH v4 0/8] Improve iptables-nft performance with large rulesets, Phil Sutter
        • Re: [iptables PATCH v4 0/8] Improve iptables-nft performance with large rulesets, Pablo Neira Ayuso
    • Re: [iptables PATCH v4 0/8] Improve iptables-nft performance with large rulesets, Phil Sutter
• [PATCH 0/6] [GIT PULL ipvs-next] IPVS updates for v5.5, Simon Horman
  • [PATCH 1/6] ipvs: no need to update skb route entry for local destination packets., Simon Horman
  • [PATCH 4/6] selftests: netfilter: add ipvs test script, Simon Horman
  • [PATCH 3/6] ipvs: batch __ip_vs_dev_cleanup, Simon Horman
  • [PATCH 2/6] ipvs: batch __ip_vs_cleanup, Simon Horman
  • [PATCH 5/6] selftests: netfilter: add ipvs nat test case, Simon Horman
  • [PATCH 6/6] selftests: netfilter: add ipvs tunnel test case, Simon Horman
  • Re: [PATCH 0/6] [GIT PULL ipvs-next] IPVS updates for v5.5, Pablo Neira Ayuso
• [PATCH net-next,v5 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
  • [PATCH net-next,v5 1/4] net: flow_offload: flip mangle action mask, Pablo Neira Ayuso
    • Re: [PATCH net-next,v5 1/4] net: flow_offload: flip mangle action mask, Jiri Pirko
  • [PATCH net-next,v5 2/4] net: flow_offload: bitwise AND on mangle action value field, Pablo Neira Ayuso
    • Re: [PATCH net-next,v5 2/4] net: flow_offload: bitwise AND on mangle action value field, Jiri Pirko
  • [PATCH net-next,v5 4/4] netfilter: nft_payload: packet mangling offload support, Pablo Neira Ayuso
  • [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, Pablo Neira Ayuso
    • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, kbuild test robot
    • [RFC PATCH] net: flow_offload: tc_proto_udp_hdr[] can be static, kbuild test robot
    • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, Jakub Kicinski
      • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, Pablo Neira Ayuso
        • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, Pablo Neira Ayuso
          • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, Edward Cree
            • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, David Miller
        • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, Jakub Kicinski
          • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, Pablo Neira Ayuso
            • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, Edward Cree
              • Re: [PATCH net-next,v5 3/4] net: flow_offload: mangle action at byte level, David Miller
• [PATCH net-next,v4 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
  • [PATCH net-next,v4 1/4] net: flow_offload: bitwise AND on mangle action value field, Pablo Neira Ayuso
  • [PATCH net-next,v4 3/4] netfilter: nft_payload: packet mangling offload support, Pablo Neira Ayuso
  • [PATCH net-next,v4 4/4] net: flow_offload: add flow_rule_print(), Pablo Neira Ayuso
  • [PATCH net-next,v4 2/4] net: flow_offload: mangle action at byte level, Pablo Neira Ayuso
  • Re: [PATCH net-next,v4 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
• First Contribution, UDAY MEWADA
  • Re: First Contribution, Phil Sutter
  • Re: First Contribution, Arturo Borrero Gonzalez
• xtables-addons GEOIP not matching chain, Marco Sommella
• [PATCH nf-next] netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks, Florian Westphal
  • Re: [PATCH nf-next] netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks, kbuild test robot
  • Re: [PATCH nf-next] netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks, kbuild test robot
  • Re: [PATCH nf-next] netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks, kbuild test robot
  • Re: [PATCH nf-next] netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks, Dan Carpenter
  • Re: [PATCH nf-next] netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks, Jeremy Sowden
    • Re: [PATCH nf-next] netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks, Florian Westphal
      • Re: [PATCH nf-next] netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks, Jeremy Sowden
• [PATCH libmnl] include: add MNL_SOCKET_DUMP_SIZE definition, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_flow_table: set timeout before insertion into hashes, Pablo Neira Ayuso
• [PATCH libnfnetlink 0/1] Minimally resurrect doxygen documentation, Duncan Roe
  • [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Duncan Roe
    • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Pablo Neira Ayuso
      • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Duncan Roe
        • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Jeremy Sowden
        • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Pablo Neira Ayuso
      • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Duncan Roe
        • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Pablo Neira Ayuso
          • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Duncan Roe
          • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Duncan Roe
            • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Pablo Neira Ayuso
      • Re: [PATCH libnfnetlink 1/1] src: Minimally resurrect doxygen documentation, Duncan Roe
        • [PATCH libnfnetlink v2 0/2] Minimally resurrect doxygen documentation, Duncan Roe
        • [PATCH libnfnetlink v2 1/2] Minimally resurrect doxygen documentation, Duncan Roe
        • [PATCH libnfnetlink v2 2/2] Make it clear that this library is deprecated, Duncan Roe
        • [PATCH libnfnetlink v3 2/2] Make it clear that this library is deprecated, Duncan Roe
          • Re: [PATCH libnfnetlink v3 2/2] Make it clear that this library is deprecated, Pablo Neira Ayuso
        • [PATCH libnfnetlink v3 1/2] Minimally resurrect doxygen documentation, Duncan Roe
          • Re: [PATCH libnfnetlink v3 1/2] Minimally resurrect doxygen documentation, Pablo Neira Ayuso
        • [PATCH libnfnetlink v3 0/2] Minimally resurrect doxygen documentation, Duncan Roe
  • Re: [PATCH libnfnetlink 0/1] Minimally resurrect doxygen documentation, Duncan Roe
• [PATCH nf-next] netfilter: ecache: document extension area access rules, Florian Westphal
  • Re: [PATCH nf-next] netfilter: ecache: document extension area access rules, Pablo Neira Ayuso
• [PATCH trivial] netfilter: nft_tproxy: Fix typo in IPv6 module description., Norman Rasmussen
  • Re: [PATCH trivial] netfilter: nft_tproxy: Fix typo in IPv6 module description., Pablo Neira Ayuso
• [PATCH nft] expression: extend 'nft describe' to allow listing data types, Florian Westphal
  • Re: [PATCH nft] expression: extend 'nft describe' to allow listing data types, Pablo Neira Ayuso
• [PATCH nf] ipvs: don't ignore errors in case refcounting ip_vs module fails, Davide Caratti
  • Re: [PATCH nf] ipvs: don't ignore errors in case refcounting ip_vs module fails, Julian Anastasov
• [PATCH v2 nf-next] netfilter: add and use nf_hook_slow_list(), Florian Westphal
  • Re: [PATCH v2 nf-next] netfilter: add and use nf_hook_slow_list(), Edward Cree
    • Re: [PATCH v2 nf-next] netfilter: add and use nf_hook_slow_list(), Florian Westphal
      • Re: [PATCH v2 nf-next] netfilter: add and use nf_hook_slow_list(), Pablo Neira Ayuso
        • Re: [PATCH v2 nf-next] netfilter: add and use nf_hook_slow_list(), Edward Cree
  • Re: [PATCH v2 nf-next] netfilter: add and use nf_hook_slow_list(), Pablo Neira Ayuso
• [PATCH] ipset: Copy the right MAC address in hash:ip,mac IPv6 sets, Stefano Brivio
  • Re: [PATCH] ipset: Copy the right MAC address in hash:ip,mac IPv6 sets, Kadlecsik József
• [PATCH v6 0/3] selftests: netfilter: introduce test cases for ipvs, Haishuang Yan
  • [PATCH v6 1/3] selftests: netfilter: add ipvs test script, Haishuang Yan
  • [PATCH v6 2/3] selftests: netfilter: add ipvs nat test case, Haishuang Yan
  • [PATCH v6 3/3] selftests: netfilter: add ipvs tunnel test case, Haishuang Yan
  • Re: [PATCH v6 0/3] selftests: netfilter: introduce test cases for ipvs, Simon Horman
• [PATCH nft,v2] datatype: display description for header field < 8 bits, Pablo Neira Ayuso
• [PATCH nft] datatype: display description for header field < 8 bits, Pablo Neira Ayuso
• [PATCH AUTOSEL 4.19 18/26] netfilter: nft_connlimit: disable bh on garbage collection, Sasha Levin
• [PATCH net] netfilter: conntrack: avoid possible false sharing, Eric Dumazet
  • Re: [PATCH net] netfilter: conntrack: avoid possible false sharing, Pablo Neira Ayuso
  • Re: [PATCH net] netfilter: conntrack: avoid possible false sharing, Jakub Kicinski
    • Re: [PATCH net] netfilter: conntrack: avoid possible false sharing, Eric Dumazet
• [PATCH nf-next] netfilter: add and use nf_hook_slow_list(), Florian Westphal
  • Re: [PATCH nf-next] netfilter: add and use nf_hook_slow_list(), Edward Cree
    • Re: [PATCH nf-next] netfilter: add and use nf_hook_slow_list(), Florian Westphal
• [PATCH v5 0/3] selftests: netfilter: introduce test cases for ipvs, Haishuang Yan
  • [PATCH v5 2/3] selftests: netfilter: add ipvs nat test case, Haishuang Yan
  • [PATCH v5 3/3] selftests: netfilter: add ipvs tunnel test case, Haishuang Yan
  • [PATCH v5 1/3] selftests: netfilter: add ipvs test script, Haishuang Yan
    • Re: [PATCH v5 1/3] selftests: netfilter: add ipvs test script, Simon Horman
• [PATCH nft] segtree: always close interval in non-anonymous sets, Pablo Neira Ayuso
• [libnftnl PATCH v2] set: Export nftnl_set_list_lookup_byname(), Phil Sutter
  • Re: [libnftnl PATCH v2] set: Export nftnl_set_list_lookup_byname(), Pablo Neira Ayuso
• [PATCH nft] tests: shell: fix failed tests due to missing quotes, Eric Jallot
  • Re: [PATCH nft] tests: shell: fix failed tests due to missing quotes, Phil Sutter
• [iptables PATCH v3 00/11] Improve iptables-nft performance with large rulesets, Phil Sutter
  • [iptables PATCH v3 02/11] nft: Avoid nested cache fetching, Phil Sutter
    • Re: [iptables PATCH v3 02/11] nft: Avoid nested cache fetching, Pablo Neira Ayuso
  • [iptables PATCH v3 05/11] nft-cache: Fetch only chains in nft_chain_list_get(), Phil Sutter
  • [iptables PATCH v3 04/11] nft-cache: Introduce cache levels, Phil Sutter
    • Re: [iptables PATCH v3 04/11] nft-cache: Introduce cache levels, Pablo Neira Ayuso
      • Re: [iptables PATCH v3 04/11] nft-cache: Introduce cache levels, Pablo Neira Ayuso
        • Re: [iptables PATCH v3 04/11] nft-cache: Introduce cache levels, Phil Sutter
          • Re: [iptables PATCH v3 04/11] nft-cache: Introduce cache levels, Pablo Neira Ayuso
            • Re: [iptables PATCH v3 04/11] nft-cache: Introduce cache levels, Phil Sutter
              • Re: [iptables PATCH v3 04/11] nft-cache: Introduce cache levels, Pablo Neira Ayuso
          • Re: [iptables PATCH v3 04/11] nft-cache: Introduce cache levels, Pablo Neira Ayuso
  • [iptables PATCH v3 08/11] nft-cache: Support partial rule cache per chain, Phil Sutter
  • [iptables PATCH v3 10/11] nft: Support nft_is_table_compatible() per chain, Phil Sutter
  • [iptables PATCH v3 07/11] nft-cache: Support partial cache per table, Phil Sutter
  • [iptables PATCH v3 09/11] nft: Reduce cache overhead of nft_chain_builtin_init(), Phil Sutter
  • [iptables PATCH v3 11/11] nft: Optimize flushing all chains of a table, Phil Sutter
  • [iptables PATCH v3 01/11] nft: Pass nft_handle to flush_cache(), Phil Sutter
    • Re: [iptables PATCH v3 01/11] nft: Pass nft_handle to flush_cache(), Pablo Neira Ayuso
  • [iptables PATCH v3 06/11] nft-cache: Cover for multiple fetcher invocation, Phil Sutter
  • [iptables PATCH v3 03/11] nft: Extract cache routines into nft-cache.c, Phil Sutter
    • Re: [iptables PATCH v3 03/11] nft: Extract cache routines into nft-cache.c, Pablo Neira Ayuso
• [PATCH nft] src: obj: fix memleak in parser_bison.y, Eric Jallot
  • Re: [PATCH nft] src: obj: fix memleak in parser_bison.y, Pablo Neira Ayuso
• [PATCH] checksum: Fix TCP/UDP checksum computation on big endian arches, Alin Nastac
  • Re: [PATCH] checksum: Fix TCP/UDP checksum computation on big endian arches, Pablo Neira Ayuso
• [PATCH libnetfilter_queue 0/5] clang and documentation updates, Duncan Roe
  • [PATCH libnetfilter_queue 4/5] src: Fix invalid conversion specifier, Duncan Roe
  • [PATCH libnetfilter_queue 3/5] doxygen: remove EXPORT_SYMBOL from the output, Duncan Roe
  • [PATCH libnetfilter_queue 5/5] src: doc: Minor fix, Duncan Roe
  • [PATCH libnetfilter_queue 1/5] src: doc: Miscellaneous updates, Duncan Roe
  • [PATCH libnetfilter_queue 2/5] src: Enable clang build, Duncan Roe
  • Re: [PATCH libnetfilter_queue 0/5] clang and documentation updates, Pablo Neira Ayuso
• [PATCH] libmnl: doxygen: remove EXPORT_SYMBOL from the output, Pablo Neira Ayuso
  • Re: [PATCH] libmnl: doxygen: remove EXPORT_SYMBOL from the output, Duncan Roe
• [PATCH v4 0/3] selftests: netfilter: introduce test cases for ipvs, Haishuang Yan
  • [PATCH v4 3/3] selftests: netfilter: add ipvs tunnel test case, Haishuang Yan
  • [PATCH v4 1/3] selftests: netfilter: add ipvs test script, Haishuang Yan
    • Re: [PATCH v4 1/3] selftests: netfilter: add ipvs test script, Simon Horman
  • [PATCH v4 2/3] selftests: netfilter: add ipvs nat test case, Haishuang Yan
• [PATCH net-next] net, uapi: fix -Wpointer-arith warnings, Alexey Dobriyan
  • Re: [PATCH net-next] net, uapi: fix -Wpointer-arith warnings, David Miller
• [PATCH nf-next 0/7] ipset: remove static inline functions, Jeremy Sowden
  • [PATCH nf-next 7/7] netfilter: ipset: move ip_set_get_ip_port() to ip_set_bitmap_port.c., Jeremy Sowden
  • [PATCH nf-next 5/7] netfilter: ipset: make ip_set_put_flags extern., Jeremy Sowden
  • [PATCH nf-next 4/7] netfilter: ipset: move functions to ip_set_core.c., Jeremy Sowden
  • [PATCH nf-next 6/7] netfilter: ipset: move function to ip_set_bitmap_ip.c., Jeremy Sowden
  • [PATCH nf-next 3/7] netfilter: ipset: move ip_set_comment functions from ip_set.h to ip_set_core.c., Jeremy Sowden
  • [PATCH nf-next 1/7] netfilter: ipset: add a coding-style fix to ip_set_ext_destroy., Jeremy Sowden
  • [PATCH nf-next 2/7] netfilter: ipset: remove inline from static functions in .c files., Jeremy Sowden
  • Re: [PATCH nf-next 0/7] ipset: remove static inline functions, Kadlecsik József
    • Re: [PATCH nf-next 0/7] ipset: remove static inline functions, Pablo Neira Ayuso
• [PATCH tip/core/rcu 8/9] net/netfilter: Replace rcu_swap_protected() with rcu_replace(), paulmck
  • Re: [PATCH tip/core/rcu 8/9] net/netfilter: Replace rcu_swap_protected() with rcu_replace(), Pablo Neira Ayuso
    • Re: [PATCH tip/core/rcu 8/9] net/netfilter: Replace rcu_swap_protected() with rcu_replace(), Paul E. McKenney
• [PATCH nf] ipvs: more robust refcounting when sync thread starts, Davide Caratti
  • Re: [PATCH nf] ipvs: more robust refcounting when sync thread starts, Julian Anastasov
    • Re: [PATCH nf] ipvs: more robust refcounting when sync thread starts, Davide Caratti
      • Re: [PATCH nf] ipvs: more robust refcounting when sync thread starts, Julian Anastasov
• [PATCH] Fix a missing doxygen section trailer in nlmsg.c, Duncan Roe
  • Re: [PATCH] Fix a missing doxygen section trailer in nlmsg.c, Duncan Roe
    • Re: [PATCH] Fix a missing doxygen section trailer in nlmsg.c, Pablo Neira Ayuso
• [PATCH AUTOSEL 5.2 17/63] netfilter: nf_tables: allow lookups in dynamic sets, Sasha Levin
• [PATCH AUTOSEL 4.19 12/43] netfilter: nf_tables: allow lookups in dynamic sets, Sasha Levin
• [PATCH AUTOSEL 4.14 09/29] netfilter: nf_tables: allow lookups in dynamic sets, Sasha Levin
• [PATCH AUTOSEL 5.3 18/71] netfilter: nf_tables: allow lookups in dynamic sets, Sasha Levin
• [PATCH v3 0/3] selftests: netfilter: introduce test cases for ipvs, Haishuang Yan
  • [PATCH v3 3/3] selftests: netfilter: add ipvs tunnel test case, Haishuang Yan
  • [PATCH v3 1/3] selftests: netfilter: add ipvs test script, Haishuang Yan
  • [PATCH v3 2/3] selftests: netfilter: add ipvs nat test case, Haishuang Yan
  • Re: [PATCH v3 0/3] selftests: netfilter: introduce test cases for ipvs, Julian Anastasov
    • Re: [PATCH v3 0/3] selftests: netfilter: introduce test cases for ipvs, Duncan Roe
      • Re: [PATCH v3 0/3] selftests: netfilter: introduce test cases for ipvs, Simon Horman
      • Message not available
        • Re: [PATCH v3 0/3] selftests: netfilter: introduce test cases for ipvs, Duncan Roe
          • Re: [PATCH v3 0/3] selftests: netfilter: introduce test cases for ipvs, Haishuang Yan
• [PATCH] netfilter:get_next_corpse():No need to double check the *bucket, wh_bin
  • Re: [PATCH] netfilter:get_next_corpse():No need to double check the *bucket, Florian Westphal
• [PATCH iptables] extensions: add libxt_SYNPROXY xlate method, Jose M. Guisado Gomez
  • Re: [PATCH iptables] extensions: add libxt_SYNPROXY xlate method, Pablo Neira Ayuso
• Re: [PATCH] ipvs: no need to update skb route entry for local destination packets., Julian Anastasov
  • Re: [PATCH] ipvs: no need to update skb route entry for local destination packets., Simon Horman
• [PATCH libnetfilter_queue] checksum: Fix UDP checksum calculation, Pablo Neira Ayuso
  • Re: [PATCH libnetfilter_queue] checksum: Fix UDP checksum calculation, Alin Năstac
• [PATCH nf] netfilter: nft_connlimit: disable bh on garbage collection, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_connlimit: disable bh on garbage collection, Laura Garcia
• [PATCH nft] src: obj: fix memleak in handle_free(), Eric Jallot
  • Re: [PATCH nft] src: obj: fix memleak in handle_free(), Pablo Neira Ayuso
• [PATCH net] netfilter: drop bridge nf reset from nf_reset, Florian Westphal
  • Re: [PATCH net] netfilter: drop bridge nf reset from nf_reset, Pablo Neira Ayuso
• Please add Bridge NAT in nftables, Ttttabcd
  • Re: Please add Bridge NAT in nftables, Florian Westphal
    • Re: Please add Bridge NAT in nftables, Ttttabcd
• [iptables PATCH v2 00/12] Implement among match support, Phil Sutter
  • [iptables PATCH v2 04/12] nft: family_ops: Pass nft_handle to 'rule_to_cs' callback, Phil Sutter
  • [iptables PATCH v2 03/12] nft: family_ops: Pass nft_handle to 'print_rule' callback, Phil Sutter
  • [iptables PATCH v2 06/12] nft: Eliminate pointless calls to nft_family_ops_lookup(), Phil Sutter
  • [iptables PATCH v2 07/12] nft: Fetch sets when updating rule cache, Phil Sutter
  • [iptables PATCH v2 11/12] nft: Support parsing lookup expression, Phil Sutter
  • [iptables PATCH v2 08/12] nft: Support NFT_COMPAT_SET_ADD, Phil Sutter
  • [iptables PATCH v2 10/12] nft: Embed rule's table name in nft_xt_ctx, Phil Sutter
  • [iptables PATCH v2 02/12] nft: family_ops: Pass nft_handle to 'rule_find' callback, Phil Sutter
  • [iptables PATCH v2 01/12] nft: family_ops: Pass nft_handle to 'add' callback, Phil Sutter
  • [iptables PATCH v2 05/12] nft: Keep nft_handle pointer in nft_xt_ctx, Phil Sutter
  • [iptables PATCH v2 09/12] nft: Bore up nft_parse_payload(), Phil Sutter
  • [iptables PATCH v2 12/12] nft: bridge: Rudimental among extension support, Phil Sutter
• [iptables PATCH] iptables-test: Run tests in lexical order, Phil Sutter
  • Re: [iptables PATCH] iptables-test: Run tests in lexical order, Pablo Neira Ayuso
• [PATCH libnetfilter_queue] BUG: src: Update UDP header length field after mangling, Duncan Roe
  • Re: [PATCH libnetfilter_queue] BUG: src: Update UDP header length field after mangling, Duncan Roe
    • Re: [PATCH libnetfilter_queue] BUG: src: Update UDP header length field after mangling, Pablo Neira Ayuso
• [libnftnl PATCH] set: Export nftnl_set_list_lookup_byname(), Phil Sutter
  • Re: [libnftnl PATCH] set: Export nftnl_set_list_lookup_byname(), Pablo Neira Ayuso
• [PATCH libnetfilter_queue] BUG: src: Fix UDP checksum calculation, Duncan Roe
  • Re: [PATCH libnetfilter_queue] BUG: src: Fix UDP checksum calculation, Pablo Neira Ayuso
    • Re: [PATCH libnetfilter_queue] BUG: src: Fix UDP checksum calculation, Duncan Roe
• [PATCH nft,v2] libnftables: memleak when list of commands is empty, Pablo Neira Ayuso
  • Re: [PATCH nft,v2] libnftables: memleak when list of commands is empty, Jeremy Sowden
• [PATCH nft] libnftables: memleak when no batch commands in list, Pablo Neira Ayuso
• [PATCH v2 0/3] selftests: netfilter: introduce test cases for ipvs, Haishuang Yan
  • [PATCH v2 3/3] selftests: netfilter: add ipvs tunnel test case, Haishuang Yan
  • [PATCH v2 2/3] selftests: netfilter: add ipvs nat test case, Haishuang Yan
  • [PATCH v2 1/3] selftests: netfilter: add ipvs test script, Haishuang Yan
    • Re: [PATCH v2 1/3] selftests: netfilter: add ipvs test script, Simon Horman
      • Re: [PATCH v2 1/3] selftests: netfilter: add ipvs test script, Duncan Roe
  • Re: [PATCH v2 0/3] selftests: netfilter: introduce test cases for ipvs, Julian Anastasov
• [PATCH v2 0/2] ipvs: speedup ipvs netns dismantle, Haishuang Yan
  • [PATCH v2 1/2] ipvs: batch __ip_vs_cleanup, Haishuang Yan
  • [PATCH v2 2/2] ipvs: batch __ip_vs_dev_cleanup, Haishuang Yan
  • Re: [PATCH v2 0/2] ipvs: speedup ipvs netns dismantle, Julian Anastasov
    • Re: [PATCH v2 0/2] ipvs: speedup ipvs netns dismantle, Simon Horman
• [PATCH] ipset: Add wildcard support to net,iface, Kristian Evensen
  • Re: [PATCH] ipset: Add wildcard support to net,iface, Kadlecsik József
    • Re: [PATCH] ipset: Add wildcard support to net,iface, Kristian Evensen
    • Re: [PATCH] ipset: Add wildcard support to net,iface, Kristian Evensen
      • Re: [PATCH] ipset: Add wildcard support to net,iface, Kadlecsik József
        • Re: [PATCH] ipset: Add wildcard support to net,iface, Kristian Evensen
• [iptables PATCH v2 00/24] Improve iptables-nft performance with large rulesets, Phil Sutter
  • [iptables PATCH v2 13/24] nft: Reduce cache overhead of nft_chain_builtin_init(), Phil Sutter
  • [iptables PATCH v2 15/24] nft: Optimize flushing all chains of a table, Phil Sutter
  • [iptables PATCH v2 11/24] nft: Support nft_chain_list_get() per chain, Phil Sutter
  • [iptables PATCH v2 17/24] xtables-restore: Carry in_table in struct nft_xt_restore_parse, Phil Sutter
    • Re: [iptables PATCH v2 17/24] xtables-restore: Carry in_table in struct nft_xt_restore_parse, Pablo Neira Ayuso
      • Re: [iptables PATCH v2 17/24] xtables-restore: Carry in_table in struct nft_xt_restore_parse, Pablo Neira Ayuso
  • [iptables PATCH v2 22/24] xtables-restore: Remove some pointless linebreaks, Phil Sutter
  • [iptables PATCH v2 24/24] xtables-restore: Improve performance of --noflush operation, Phil Sutter
  • [iptables PATCH v2 08/24] nft: Fetch only chains in nft_chain_list_get(), Phil Sutter
    • Re: [iptables PATCH v2 08/24] nft: Fetch only chains in nft_chain_list_get(), Pablo Neira Ayuso
    • Re: [iptables PATCH v2 08/24] nft: Fetch only chains in nft_chain_list_get(), Pablo Neira Ayuso
  • [iptables PATCH v2 05/24] nft: Make nftnl_table_list_get() fetch only tables, Phil Sutter
    • Re: [iptables PATCH v2 05/24] nft: Make nftnl_table_list_get() fetch only tables, Florian Westphal
  • [iptables PATCH v2 18/24] xtables-restore: Use xt_params->program_name, Phil Sutter
  • [iptables PATCH v2 12/24] nft: Reduce cache overhead of adding a custom chain, Phil Sutter
  • [iptables PATCH v2 14/24] nft: Support nft_is_table_compatible() per chain, Phil Sutter
  • [iptables PATCH v2 07/24] nft: Support fetch_rule_cache() per chain, Phil Sutter
  • [iptables PATCH v2 09/24] nft: Support fetch_chain_cache() per table, Phil Sutter
  • [iptables PATCH v2 10/24] nft: Support fetch_chain_cache() per chain, Phil Sutter
  • [iptables PATCH v2 01/24] xtables_error() does not return, Phil Sutter
    • Re: [iptables PATCH v2 01/24] xtables_error() does not return, Florian Westphal
      • Re: [iptables PATCH v2 01/24] xtables_error() does not return, Phil Sutter
  • [iptables PATCH v2 04/24] nft: Fix for add and delete of same rule in single batch, Phil Sutter
    • Re: [iptables PATCH v2 04/24] nft: Fix for add and delete of same rule in single batch, Florian Westphal
      • Re: [iptables PATCH v2 04/24] nft: Fix for add and delete of same rule in single batch, Pablo Neira Ayuso
  • [iptables PATCH v2 23/24] xtables-restore: Allow lines without trailing newline character, Phil Sutter
  • [iptables PATCH v2 16/24] xtables-restore: Introduce rule counter tokenizer function, Phil Sutter
  • [iptables PATCH v2 02/24] tests/shell: Speed up ipt-restore/0004-restore-race_0, Phil Sutter
    • Re: [iptables PATCH v2 02/24] tests/shell: Speed up ipt-restore/0004-restore-race_0, Florian Westphal
  • [iptables PATCH v2 21/24] tests: shell: Add ipt-restore/0007-flush-noflush_0, Phil Sutter
  • [iptables PATCH v2 03/24] tests: shell: Support running for legacy/nft only, Phil Sutter
    • Re: [iptables PATCH v2 03/24] tests: shell: Support running for legacy/nft only, Florian Westphal
      • Re: [iptables PATCH v2 03/24] tests: shell: Support running for legacy/nft only, Pablo Neira Ayuso
  • [iptables PATCH v2 06/24] xtables-restore: Minimize caching when flushing, Phil Sutter
    • Re: [iptables PATCH v2 06/24] xtables-restore: Minimize caching when flushing, Florian Westphal
  • [iptables PATCH v2 20/24] xtables-restore: Introduce line parsing function, Phil Sutter
  • [iptables PATCH v2 19/24] xtables-restore: Carry curtable in struct nft_xt_restore_parse, Phil Sutter
• [PATCH libmnl] src: fix doxygen function documentation, Fernando Fernandez Mancera
  • Re: [PATCH libmnl] src: fix doxygen function documentation, Duncan Roe
    • Re: [PATCH libmnl] src: fix doxygen function documentation, Pablo Neira Ayuso
  • Re: [PATCH libmnl] src: fix doxygen function documentation, Pablo Neira Ayuso
    • Re: [PATCH libmnl] src: fix doxygen function documentation, Duncan Roe
      • Re: [PATCH libmnl] src: fix doxygen function documentation, Pablo Neira Ayuso
• [PATCH nft] tests: shell: delete flowtable after flush chain, Pablo Neira Ayuso
• [RFC] ipset: Add wildcard support to net,iface, Kristian Evensen
  • Re: [RFC] ipset: Add wildcard support to net,iface, Kristian Evensen
  • Re: [RFC] ipset: Add wildcard support to net,iface, Kadlecsik József
• [PATCH v2 nf] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush, Laura Garcia Liebana
  • Re: [PATCH v2 nf] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush, Laura Garcia Liebana
• [PATCH nftables v2 0/2] Add Linenoise support to the CLI., Jeremy Sowden
  • [PATCH nftables v2 2/2] main: add more information to `nft -v`., Jeremy Sowden
  • [PATCH nftables v2 1/2] cli: add linenoise CLI implementation., Jeremy Sowden
    • Re: [PATCH nftables v2 1/2] cli: add linenoise CLI implementation., Pablo Neira Ayuso
      • Re: [PATCH nftables v2 1/2] cli: add linenoise CLI implementation., Jeremy Sowden
        • Re: [PATCH nftables v2 1/2] cli: add linenoise CLI implementation., Pablo Neira Ayuso
          • Re: [PATCH nftables v2 1/2] cli: add linenoise CLI implementation., Jeremy Sowden
  • Re: [PATCH nftables v2 0/2] Add Linenoise support to the CLI., Phil Sutter
  • AW: [PATCH nftables v2 0/2] Add Linenoise support to the CLI., Priebe, Sebastian
• [PATCH v2] netfilter: use __u8 instead of uint8_t in uapi header, Masahiro Yamada
  • Re: [PATCH v2] netfilter: use __u8 instead of uint8_t in uapi header, Pablo Neira Ayuso
• [PATCH trivial 1/2] net: Fix Kconfig indentation, Krzysztof Kozlowski
  • [PATCH trivial 2/2] drivers: net: Fix Kconfig indentation, Krzysztof Kozlowski
    • Re: [PATCH trivial 2/2] drivers: net: Fix Kconfig indentation, Kalle Valo
    • Re: [PATCH trivial 2/2] drivers: net: Fix Kconfig indentation, Leon Romanovsky
  • Re: [PATCH trivial 1/2] net: Fix Kconfig indentation, Sven Eckelmann
  • Re: [PATCH trivial 1/2] net: Fix Kconfig indentation, David Miller
• [PATCH nft,v2] mnl: do not cache sender buffer size, Pablo Neira Ayuso
• [PATCH libnetfilter_queue] src: Enable clang build, Duncan Roe
  • Re: [PATCH libnetfilter_queue] src: Enable clang build, Jeremy Sowden
    • Re: [PATCH libnetfilter_queue] src: Enable clang build, Duncan Roe
      • Re: [PATCH libnetfilter_queue] src: Enable clang build, Duncan Roe
        • Re: [PATCH libnetfilter_queue] src: Enable clang build, Duncan Roe
• [PATCH] netfilter: use __u8 instead of uint8_t in uapi header, Masahiro Yamada
  • Re: [PATCH] netfilter: use __u8 instead of uint8_t in uapi header, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: use __u8 instead of uint8_t in uapi header, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: use __u8 instead of uint8_t in uapi header, Masahiro Yamada
        • Re: [PATCH] netfilter: use __u8 instead of uint8_t in uapi header, Pablo Neira Ayuso
• [PATCH nftables 0/3] Add Linenoise support to the CLI., Jeremy Sowden
  • [PATCH nftables 3/3] main: add more information to `nft -v`., Jeremy Sowden
  • [PATCH nftables 2/3] cli: add linenoise CLI implementation., Jeremy Sowden
  • [PATCH nftables 1/3] src, include: add upstream linenoise source., Jeremy Sowden
    • Re: [PATCH nftables 1/3] src, include: add upstream linenoise source., Jan Engelhardt
      • Re: [PATCH nftables 1/3] src, include: add upstream linenoise source., Pablo Neira Ayuso
        • Re: [PATCH nftables 1/3] src, include: add upstream linenoise source., Jeremy Sowden
          • Re: [PATCH nftables 1/3] src, include: add upstream linenoise source., Jeremy Sowden
        • Re: [PATCH nftables 1/3] src, include: add upstream linenoise source., Jan Engelhardt
          • Re: [PATCH nftables 1/3] src, include: add upstream linenoise source., Pablo Neira Ayuso
            • Re: [PATCH nftables 1/3] src, include: add upstream linenoise source., Jeremy Sowden
              • AW: [PATCH nftables 1/3] src, include: add upstream linenoise source., Priebe, Sebastian
  • <Possible follow-ups>
  • [PATCH nftables 0/3] Add Linenoise support to the CLI., Jeremy Sowden
    • [PATCH nftables 3/3] main: add more information to `nft -v`., Jeremy Sowden
    • [PATCH nftables 2/3] cli: add linenoise CLI implementation., Jeremy Sowden
    • [PATCH nftables 1/3] src, include: add upstream linenoise source., Jeremy Sowden
    • Re: [PATCH nftables 0/3] Add Linenoise support to the CLI., Jeremy Sowden
• [PATCH 0/1] netfilter: bridge: build fix for 5.3, Jeremy Sowden
  • [PATCH 1/1] netfilter: add missing IS_ENABLED(CONFIG_NF_TABLES) check to header-file., Jeremy Sowden
  • Re: [PATCH 0/1] netfilter: bridge: build fix for 5.3, Greg KH
• [PATCH libmnl, v3] Enable doxygen to generate Function Documentation, Duncan Roe
• [PATCH libmnl, v2] Enable doxygen to generate Function Documentation, Duncan Roe
• [iptables PATCH] xtables-restore: Fix --table parameter check, Phil Sutter
  • Re: [iptables PATCH] xtables-restore: Fix --table parameter check, Phil Sutter
  • Re: [iptables PATCH] xtables-restore: Fix --table parameter check, Florian Westphal
    • Re: [iptables PATCH] xtables-restore: Fix --table parameter check, Phil Sutter
      • Re: [iptables PATCH] xtables-restore: Fix --table parameter check, Florian Westphal
        • Re: [iptables PATCH] xtables-restore: Fix --table parameter check, Phil Sutter
          • Re: [iptables PATCH] xtables-restore: Fix --table parameter check, Florian Westphal
• [PATCH nft] mnl: do not cache sender buffer size, Pablo Neira Ayuso
  • Re: [PATCH nft] mnl: do not cache sender buffer size, Florian Westphal
• [PATCH conntrack-tools,v2 1/2] conntrackd: Fix "Address Accept" filter case, Pablo Neira Ayuso
  • [PATCH conntrack-tools,v2 2/2] conntrackd: incorrect filtering of Address with cidr /0, Pablo Neira Ayuso
• [PATCH conntrack-tools 1/2] conntrackd: Fix "Address Accept" filter case, Pablo Neira Ayuso
  • [PATCH conntrack-tools 2/2] conntrackd: incorrect filtering of Address with cidr /0, Pablo Neira Ayuso
• [iptables PATCH] nft: Fix add_bitwise_u16() on Big Endian, Phil Sutter
  • Re: [iptables PATCH] nft: Fix add_bitwise_u16() on Big Endian, Pablo Neira Ayuso
• [BUG] nft: "XT target TCPMSS not found" when TCPMSS clamp to PMTU rule is added for *both* ip and ip6, Timo Sigurdsson
• netfilter.org HTTPS certificate expired today (Sept 19), Dan Williams
• [PATCH nf] netfilter: nf_tables: allow lookups in dynamic sets, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: allow lookups in dynamic sets, Pablo Neira Ayuso
• Contributing to the Netfilter Project., Wambui Karuga
  • Re: Contributing to the Netfilter Project., Florian Westphal
• [PATCH nft] src: meter: avoid double-space in list ruleset output, Florian Westphal
  • Re: [PATCH nft] src: meter: avoid double-space in list ruleset output, Pablo Neira Ayuso
• [PATCH ghak90 V7 00/21] audit: implement container identifier, Richard Guy Briggs
  • [PATCH ghak90 V7 01/21] audit: collect audit task parameters, Richard Guy Briggs
  • [PATCH ghak90 V7 02/21] audit: add container id, Richard Guy Briggs
  • [PATCH ghak90 V7 03/21] audit: read container ID of a process, Richard Guy Briggs
  • [PATCH ghak90 V7 04/21] audit: convert to contid list to check for orch/engine ownership, Richard Guy Briggs
    • Re: [PATCH ghak90 V7 04/21] audit: convert to contid list to check for orch/engine ownership, Neil Horman
      • Re: [PATCH ghak90 V7 04/21] audit: convert to contid list to check for orch/engine ownership, Richard Guy Briggs
        • Re: [PATCH ghak90 V7 04/21] audit: convert to contid list to check for orch/engine ownership, Neil Horman
    • Re: [PATCH ghak90 V7 04/21] audit: convert to contid list to check for orch/engine ownership, Paul Moore
      • Re: [PATCH ghak90 V7 04/21] audit: convert to contid list to check for orch/engine ownership, Richard Guy Briggs
        • Re: [PATCH ghak90 V7 04/21] audit: convert to contid list to check for orch/engine ownership, Paul Moore
  • [PATCH ghak90 V7 05/21] audit: log drop of contid on exit of last task, Richard Guy Briggs
    • Re: [PATCH ghak90 V7 05/21] audit: log drop of contid on exit of last task, Paul Moore
      • Re: [PATCH ghak90 V7 05/21] audit: log drop of contid on exit of last task, Richard Guy Briggs
  • [PATCH ghak90 V7 06/21] audit: contid limit of 32k imposed to avoid DoS, Richard Guy Briggs
    • Re: [PATCH ghak90 V7 06/21] audit: contid limit of 32k imposed to avoid DoS, Neil Horman
      • Re: [PATCH ghak90 V7 06/21] audit: contid limit of 32k imposed to avoid DoS, Paul Moore
        • Re: [PATCH ghak90 V7 06/21] audit: contid limit of 32k imposed to avoid DoS, Richard Guy Briggs
          • Re: [PATCH ghak90 V7 06/21] audit: contid limit of 32k imposed to avoid DoS, Paul Moore
            • Re: [PATCH ghak90 V7 06/21] audit: contid limit of 32k imposed to avoid DoS, Richard Guy Briggs