Linux Netfilter / IP Tables Devel

• Date Index

• Re: [nft PATCH] parser_bison: Fix 'exists' keyword on Big Endian, (continued)
  • Re: [nft PATCH] parser_bison: Fix 'exists' keyword on Big Endian, Phil Sutter
• [PATCH nft] json: fix type mismatch on "ct expect" json exporting, Fernando Fernandez Mancera
  • Re: [PATCH nft] json: fix type mismatch on "ct expect" json exporting, Pablo Neira Ayuso
    • Re: [PATCH nft] json: fix type mismatch on "ct expect" json exporting, Stéphane Veyret
• [PATCH nf-next v3 00/18] Remove config option checks from netfilter headers., Jeremy Sowden
  • [PATCH nf-next v3 07/18] netfilter: move inline function to a more appropriate header., Jeremy Sowden
  • [PATCH nf-next v3 08/18] netfilter: move code between synproxy headers., Jeremy Sowden
  • [PATCH nf-next v3 05/18] netfilter: update include directives., Jeremy Sowden
  • [PATCH nf-next v3 04/18] netfilter: inline three headers., Jeremy Sowden
  • [PATCH nf-next v3 03/18] netfilter: remove unused function declarations., Jeremy Sowden
  • [PATCH nf-next v3 02/18] netfilter: fix coding-style errors., Jeremy Sowden
  • [PATCH nf-next v3 09/18] netfilter: move struct definition function to a more appropriate header., Jeremy Sowden
  • [PATCH nf-next v3 01/18] netfilter: fix include guards., Jeremy Sowden
  • [PATCH nf-next v3 06/18] netfilter: remove nf_conntrack_icmpv6.h header., Jeremy Sowden
  • [PATCH nf-next v3 18/18] netfilter: remove two unused functions from nf_conntrack_timestamp.h., Jeremy Sowden
  • [PATCH nf-next v3 13/18] netfilter: update stub br_nf_pre_routing_ipv6 parameter to `void *priv`., Jeremy Sowden
  • [PATCH nf-next v3 17/18] netfilter: remove CONFIG_NF_CONNTRACK checks from nf_conntrack_zones.h., Jeremy Sowden
  • [PATCH nf-next v3 16/18] netfilter: remove CONFIG_NETFILTER checks from headers., Jeremy Sowden
  • [PATCH nf-next v3 15/18] netfilter: remove CONFIG_NF_CONNTRACK check from nf_conntrack_acct.h., Jeremy Sowden
  • [PATCH nf-next v3 11/18] netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENABLED(CONFIG...)., Jeremy Sowden
  • [PATCH nf-next v3 14/18] netfilter: move nf_conntrack code to linux/nf_conntrack_common.h., Jeremy Sowden
    • Re: [PATCH nf-next v3 14/18] netfilter: move nf_conntrack code to linux/nf_conntrack_common.h., Pablo Neira Ayuso
      • Re: [PATCH nf-next v3 14/18] netfilter: move nf_conntrack code to linux/nf_conntrack_common.h., Pablo Neira Ayuso
  • [PATCH nf-next v3 10/18] netfilter: use consistent style when defining inline functions in nf_conntrack_ecache.h., Jeremy Sowden
  • [PATCH nf-next v3 12/18] netfilter: wrap two inline functions in config checks., Jeremy Sowden
  • Re: [PATCH nf-next v3 00/18] Remove config option checks from netfilter headers., Pablo Neira Ayuso
  • Re: [PATCH nf-next v3 00/18] Remove config option checks from netfilter headers., Pablo Neira Ayuso
• [PATCH nft v5] src: add synproxy stateful object support, Fernando Fernandez Mancera
  • Re: [PATCH nft v5] src: add synproxy stateful object support, Pablo Neira Ayuso
• [PATCH nft v4] src: add synproxy stateful object support, Fernando Fernandez Mancera
  • Re: [PATCH nft v4] src: add synproxy stateful object support, Fernando Fernandez Mancera
• [PATCH nft] libnftables: use-after-free in exit path, Pablo Neira Ayuso
• [PATCH nf-next v6 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
  • [PATCH nf-next v6 3/4] netfilter: nf_offload: refactor the nft_flow_offload_rule function, wenxu
  • [PATCH nf-next v6 2/4] netfilter: nf_offload: refactor the nft_flow_offload_chain function, wenxu
  • [PATCH nf-next v6 1/4] netfilter: nf_tables_offload: add __nft_offload_get_chain function, wenxu
  • [PATCH nf-next v6 4/4] netfilter: nf_offload: clean offload things when the device unregister, wenxu
  • Re: [PATCH nf-next v6 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, Pablo Neira Ayuso
• [PATCH ebtables-nft] ebtables: fix over-eager -o checks on custom chains, Florian Westphal
  • Re: [PATCH ebtables-nft] ebtables: fix over-eager -o checks on custom chains, Pablo Neira Ayuso
• [PATCH iptables] netfilter: hashlimit: prefer PRIu64 to avoid warnings on 32bit platforms, Florian Westphal
  • Re: [PATCH iptables] netfilter: hashlimit: prefer PRIu64 to avoid warnings on 32bit platforms, Pablo Neira Ayuso
• iptables release, Fabio Pedretti
  • Re: iptables release, Fabio Pedretti
• [PATCH nft] parser_json: fix crash on insert rule to bad references, Eric Garver
  • Re: [PATCH nft] parser_json: fix crash on insert rule to bad references, Phil Sutter
• [PATCH nft 1/3] tests: shell: verify huge transaction returns expected number of rules, Eric Garver
  • [PATCH nft 2/3] tests: shell: add huge JSON transaction, Eric Garver
  • [PATCH nft 3/3] tests: shell: add huge transaction from firewalld, Eric Garver
  • Re: [PATCH nft 1/3] tests: shell: verify huge transaction returns expected number of rules, Phil Sutter
• [conntrack-tools PATCH] nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size, Phil Sutter
  • Re: [conntrack-tools PATCH] nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size, Pablo Neira Ayuso
• [PATCH nft] src: mnl: fix --echo buffer size -- again, Florian Westphal
  • Re: [PATCH nft] src: mnl: fix --echo buffer size -- again, Pablo Neira Ayuso
    • Re: [PATCH nft] src: mnl: fix --echo buffer size -- again, Florian Westphal
      • Re: [PATCH nft] src: mnl: fix --echo buffer size -- again, Pablo Neira Ayuso
        • Re: [PATCH nft] src: mnl: fix --echo buffer size -- again, Florian Westphal
          • Re: [PATCH nft] src: mnl: fix --echo buffer size -- again, Eric Garver
• [PATCH nft] netlink_delinearize: fix wrong conversion to "list" in ct mark, Fernando Fernandez Mancera
  • Re: [PATCH nft] netlink_delinearize: fix wrong conversion to "list" in ct mark, Pablo Neira Ayuso
• [PATCH nf-next v5 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
  • [PATCH nf-next v5 1/4] netfilter: nf_tables_offload: add __nft_offload_get_chain function, wenxu
  • [PATCH nf-next v5 3/4] netfilter: nf_offload: refactor the nft_flow_offload_rule function, wenxu
    • Re: [PATCH nf-next v5 3/4] netfilter: nf_offload: refactor the nft_flow_offload_rule function, Pablo Neira Ayuso
  • [PATCH nf-next v5 2/4] netfilter: nf_offload: refactor the nft_flow_offload_chain function, wenxu
    • Re: [PATCH nf-next v5 2/4] netfilter: nf_offload: refactor the nft_flow_offload_chain function, Pablo Neira Ayuso
  • [PATCH nf-next v5 4/4] netfilter: nf_offload: clean offload things when the device unregister, wenxu
  • Re: [PATCH nf-next v5 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, Pablo Neira Ayuso
    • Re: [PATCH nf-next v5 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, Pablo Neira Ayuso
      • Re: [PATCH nf-next v5 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
• [PATCH nft v3] src: add synproxy stateful object support, Fernando Fernandez Mancera
  • Re: [PATCH nft v3] src: add synproxy stateful object support, Pablo Neira Ayuso
    • Re: [PATCH nft v3] src: add synproxy stateful object support, Fernando Fernandez Mancera
• [PATCH nf-next] netfilter: nft_{fwd,dup}_netdev: add offload support, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nft_{fwd,dup}_netdev: add offload support, wenxu
• [PATCH nf-next v6 0/8] netfilter: nf_tables_offload: support tunnel offload, wenxu
  • [PATCH nf-next v6 4/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP6_SRC/DST match, wenxu
  • [PATCH nf-next v6 6/8] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action, wenxu
  • [PATCH nf-next v6 3/8] netfilter: nft_tunnel: add ipv6 check in nft_tunnel_mode_validate, wenxu
  • [PATCH nf-next v6 2/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP_SRC/DST match, wenxu
  • [PATCH nf-next v6 8/8] netfilter: nft_tunnel: support nft_tunnel_obj offload, wenxu
  • [PATCH nf-next v6 1/8] netfilter: nft_tunnel: add nft_tunnel_mode_validate function, wenxu
  • [PATCH nf-next v6 5/8] netfilter: nft_tunnel: support tunnel meta match offload, wenxu
  • [PATCH nf-next v6 7/8] netfilter: nft_objref: add nft_objref_type offload, wenxu
  • Re: [PATCH nf-next v6 0/8] netfilter: nf_tables_offload: support tunnel offload, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nf-next v6 0/8] netfilter: nf_tables_offload: support tunnel offload, wenxu
    • [PATCH nf-next v6 4/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP6_SRC/DST match, wenxu
    • [PATCH nf-next v6 3/8] netfilter: nft_tunnel: add ipv6 check in nft_tunnel_mode_validate, wenxu
    • [PATCH nf-next v6 1/8] netfilter: nft_tunnel: add nft_tunnel_mode_validate function, wenxu
    • [PATCH nf-next v6 2/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP_SRC/DST match, wenxu
    • [PATCH nf-next v6 8/8] netfilter: nft_tunnel: support nft_tunnel_obj offload, wenxu
    • [PATCH nf-next v6 7/8] netfilter: nft_objref: add nft_objref_type offload, wenxu
    • [PATCH nf-next v6 6/8] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action, wenxu
    • [PATCH nf-next v6 5/8] netfilter: nft_tunnel: support tunnel meta match offload, wenxu
    • Re: [PATCH nf-next v6 0/8] netfilter: nf_tables_offload: support tunnel offload, wenxu
      • Re: [PATCH nf-next v6 0/8] netfilter: nf_tables_offload: support tunnel offload, Pablo Neira Ayuso
        • Re: [PATCH nf-next v6 0/8] netfilter: nf_tables_offload: support tunnel offload, wenxu
    • Re: [PATCH nf-next v6 0/8] netfilter: nf_tables_offload: support tunnel offload, wenxu
• [PATCH nf-next v4 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
  • [PATCH nf-next v4 3/4] netfilter: nf_tables_offload: add __nft_offload_get_chain function, wenxu
  • [PATCH nf-next v4 1/4] netfilter: nf_offload: refactor the nft_flow_offload_chain function, wenxu
  • [PATCH nf-next v4 2/4] netfilter: nf_offload: refactor the nft_flow_offload_rule function, wenxu
  • [PATCH nf-next v4 4/4] netfilter: nf_offload: clean offload things when the device unregister, wenxu
    • Re: [PATCH nf-next v4 4/4] netfilter: nf_offload: clean offload things when the device unregister, Pablo Neira Ayuso
      • Re: [PATCH nf-next v4 4/4] netfilter: nf_offload: clean offload things when the device unregister, wenxu
        • Re: [PATCH nf-next v4 4/4] netfilter: nf_offload: clean offload things when the device unregister, Pablo Neira Ayuso
• [PATCH] src: Enable doxygen to generate Function Documentation, Duncan Roe
  • Re: [PATCH] src: Enable doxygen to generate Function Documentation, Duncan Roe
    • Re: [PATCH] src: Enable doxygen to generate Function Documentation, Duncan Roe
      • Re: [PATCH] src: Enable doxygen to generate Function Documentation, Pablo Neira Ayuso
        • Re: [PATCH] src: Enable doxygen to generate Function Documentation, Duncan Roe
• [PATCH nft v2] src: add synproxy stateful object support, Fernando Fernandez Mancera
  • Re: [PATCH nft v2] src: add synproxy stateful object support, Pablo Neira Ayuso
    • Re: [PATCH nft v2] src: add synproxy stateful object support, Fernando Fernandez Mancera
      • Re: [PATCH nft v2] src: add synproxy stateful object support, Pablo Neira Ayuso
• [PATCH nft] src: add synproxy stateful object support, Fernando Fernandez Mancera
• [PATCH libnftnl] src: synproxy stateful object support, Fernando Fernandez Mancera
  • Re: [PATCH libnftnl] src: synproxy stateful object support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_synproxy: add synproxy stateful object support, Fernando Fernandez Mancera
  • Re: [PATCH nf-next] netfilter: nft_synproxy: add synproxy stateful object support, Pablo Neira Ayuso
• [PATCH net-next] netfilter: nf_tables: avoid excessive stack usage, Arnd Bergmann
  • Re: [PATCH net-next] netfilter: nf_tables: avoid excessive stack usage, Pablo Neira Ayuso
    • Re: [PATCH net-next] netfilter: nf_tables: avoid excessive stack usage, Arnd Bergmann
      • Re: [PATCH net-next] netfilter: nf_tables: avoid excessive stack usage, Pablo Neira Ayuso
• [PATCH nft] evaluate: flag fwd and queue statements as terminal, Florian Westphal
  • Re: [PATCH nft] evaluate: flag fwd and queue statements as terminal, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: Fix an Oops in nf_tables_updobj() error handling, Dan Carpenter
  • Re: [PATCH] netfilter: nf_tables: Fix an Oops in nf_tables_updobj() error handling, Fernando Fernandez Mancera
  • Re: [PATCH] netfilter: nf_tables: Fix an Oops in nf_tables_updobj() error handling, Pablo Neira Ayuso
• [PATCH 1/2] cache: fix --echo with index/position, Eric Garver
  • [PATCH 2/2] tests: shell: check that rule add with index works with echo, Eric Garver
    • Re: [PATCH 2/2] tests: shell: check that rule add with index works with echo, Pablo Neira Ayuso
  • Re: [PATCH 1/2] cache: fix --echo with index/position, Pablo Neira Ayuso
• [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
  • [PATCH net-next,v3 1/4] net: flow_offload: flip mangle action mask, Pablo Neira Ayuso
  • [PATCH net-next,v3 2/4] net: flow_offload: bitwise AND on mangle action value field, Pablo Neira Ayuso
  • [PATCH net-next,v3 3/4] net: flow_offload: mangle action at byte level, Pablo Neira Ayuso
  • [PATCH net-next,v3 4/4] netfilter: nft_payload: packet mangling offload support, Pablo Neira Ayuso
  • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Edward Cree
    • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
      • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Edward Cree
        • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
          • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Edward Cree
            • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
              • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Edward Cree
                • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
                  • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Edward Cree
                    • Re: [PATCH net-next,v3 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
• [PATCH nft] cache: fix --echo with index/position, Pablo Neira Ayuso
  • Re: [PATCH nft] cache: fix --echo with index/position, Eric Garver
    • Re: [PATCH nft] cache: fix --echo with index/position, Pablo Neira Ayuso
• [PATCH nf-next v3 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
  • [PATCH nf-next v3 3/4] netfilter: nf_tables_offload: add nft_offload_netdev_iterate function, wenxu
    • Re: [PATCH nf-next v3 3/4] netfilter: nf_tables_offload: add nft_offload_netdev_iterate function, Pablo Neira Ayuso
      • Re: [PATCH nf-next v3 3/4] netfilter: nf_tables_offload: add nft_offload_netdev_iterate function, wenxu
  • [PATCH nf-next v3 2/4] netfilter: nf_tables_offload: refactor the nft_flow_offload_rule function, wenxu
  • [PATCH nf-next v3 1/4] netfilter: nf_tables_offload: refactor the nft_flow_offload_chain function, wenxu
  • [PATCH nf-next v3 4/4] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
  • Re: [PATCH nf-next v3 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, Pablo Neira Ayuso
    • Re: [PATCH nf-next v3 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
• [PATCH AUTOSEL 5.2 24/94] netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info, Sasha Levin
• [PATCH AUTOSEL 5.2 78/94] netfilter: nf_flow_table: clear skb tstamp before xmit, Sasha Levin
• [PATCH AUTOSEL 4.19 16/52] netfilter: ebtables: Fix argument order to ADD_COUNTER, Sasha Levin
• [PATCH AUTOSEL 4.19 32/52] netfilter: nf_conntrack_ftp: Fix debug output, Sasha Levin
• [PATCH AUTOSEL 4.14 08/36] netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info, Sasha Levin
• [PATCH AUTOSEL 4.4 10/20] netfilter: nf_conntrack_ftp: Fix debug output, Sasha Levin
• [PATCH AUTOSEL 4.9 15/27] netfilter: nf_conntrack_ftp: Fix debug output, Sasha Levin
• [PATCH AUTOSEL 4.14 19/36] netfilter: nf_conntrack_ftp: Fix debug output, Sasha Levin
• [PATCH AUTOSEL 4.19 31/52] netfilter: xt_physdev: Fix spurious error message in physdev_mt_check, Sasha Levin
• [PATCH AUTOSEL 4.19 18/52] netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info, Sasha Levin
• [PATCH AUTOSEL 4.19 17/52] netfilter: nft_flow_offload: missing netlink attribute policy, Sasha Levin
• [PATCH AUTOSEL 5.2 77/94] netfilter: nf_flow_table: fix offload for flows that are subject to xfrm, Sasha Levin
• [PATCH AUTOSEL 5.2 57/94] netfilter: conntrack: make sysctls per-namespace again, Sasha Levin
• [PATCH AUTOSEL 5.2 52/94] netfilter: nf_conntrack_ftp: Fix debug output, Sasha Levin
• [PATCH AUTOSEL 5.2 51/94] netfilter: xt_physdev: Fix spurious error message in physdev_mt_check, Sasha Levin
• [PATCH AUTOSEL 5.2 23/94] netfilter: nft_flow_offload: missing netlink attribute policy, Sasha Levin
• [PATCH AUTOSEL 5.2 22/94] netfilter: ebtables: Fix argument order to ADD_COUNTER, Sasha Levin
• [PATCH nf-next v2] netfilter: nf_tables: fix possible null-pointer dereference in object update, Fernando Fernandez Mancera
  • Re: [PATCH nf-next v2] netfilter: nf_tables: fix possible null-pointer dereference in object update, Pablo Neira Ayuso
  • Re: [PATCH nf-next v2] netfilter: nf_tables: fix possible null-pointer dereference in object update, Eric Garver
    • Re: [PATCH nf-next v2] netfilter: nf_tables: fix possible null-pointer dereference in object update, Fernando Fernández Mancera
      • Re: [PATCH nf-next v2] netfilter: nf_tables: fix possible null-pointer dereference in object update, Eric Garver
        • Re: [PATCH nf-next v2] netfilter: nf_tables: fix possible null-pointer dereference in object update, Fernando Fernández Mancera
• [conntrack-tools PATCH v2] conntrack: Fix CIDR to mask conversion on Big Endian, Phil Sutter
  • Re: [conntrack-tools PATCH v2] conntrack: Fix CIDR to mask conversion on Big Endian, Pablo Neira Ayuso
• [PATCH nf-next v2 0/3] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
  • [PATCH nf-next v2 1/3] netfilter: nf_offload: refactor the nft_flow_offload_chain function, wenxu
  • [PATCH nf-next v2 2/3] netfilter: nf_offload: refactor the nft_flow_offload_rule function, wenxu
  • [PATCH nf-next v2 3/3] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
    • Re: [PATCH nf-next v2 3/3] netfilter: nf_tables_offload: clean offload things when the device unregister, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 3/3] netfilter: nf_tables_offload: clean offload things when the device unregister, wenxu
• [PATCH nf-next] netfilter: nf_table_offload: Fix check the offload flags in nft_indr_block_cb, wenxu
• [PATCH nft] tests: shell: check that rule add with index works with echo, Eric Garver
  • Re: [PATCH nft] tests: shell: check that rule add with index works with echo, Phil Sutter
    • Re: [PATCH nft] tests: shell: check that rule add with index works with echo, Pablo Neira Ayuso
      • Re: [PATCH nft] tests: shell: check that rule add with index works with echo, Pablo Neira Ayuso
  • Re: [PATCH nft] tests: shell: check that rule add with index works with echo, Pablo Neira Ayuso
    • Re: [PATCH nft] tests: shell: check that rule add with index works with echo, Eric Garver
      • Re: [PATCH nft] tests: shell: check that rule add with index works with echo, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix possible null-pointer dereference in object update, Fernando Fernandez Mancera
  • Re: [PATCH nf] netfilter: nf_tables: fix possible null-pointer dereference in object update, Phil Sutter
    • Re: [PATCH nf] netfilter: nf_tables: fix possible null-pointer dereference in object update, Fernando Fernandez Mancera
  • Re: [PATCH nf] netfilter: nf_tables: fix possible null-pointer dereference in object update, Pablo Neira Ayuso
• [PATCH net-next,v2 0/4] flow_offload: update mangle action representation, Pablo Neira Ayuso
  • [PATCH net-next,v2 1/4] net: flow_offload: flip mangle action mask, Pablo Neira Ayuso
  • [PATCH net-next,v2 2/4] net: flow_offload: bitwise AND on mangle action value field, Pablo Neira Ayuso
  • [PATCH net-next,v2 3/4] net: flow_offload: mangle action at byte level, Pablo Neira Ayuso
    • Re: [PATCH net-next,v2 3/4] net: flow_offload: mangle action at byte level, Vlad Buslov
  • [PATCH net-next,v2 4/4] netfilter: nft_payload: packet mangling offload support, Pablo Neira Ayuso
• [PATCH nf-next v3] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_cb, wenxu
  • Re: [PATCH nf-next v3] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_cb, Pablo Neira Ayuso
  • Re: [PATCH nf-next v3] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_cb, Pablo Neira Ayuso
    • Re: [PATCH nf-next v3] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_cb, wenxu
• [PATCH nf-next v2 00/30] Add config option checks to netfilter headers., Jeremy Sowden
  • [PATCH nf-next v2 07/30] netfilter: remove stray semicolons., Jeremy Sowden
  • [PATCH nf-next v2 01/30] netfilter: add include guard to nf_conntrack_h323_types.h, Jeremy Sowden
  • [PATCH nf-next v2 02/30] netfilter: add include guard to nf_conntrack_labels.h., Jeremy Sowden
  • [PATCH nf-next v2 09/30] netfilter: remove unused includes., Jeremy Sowden
  • [PATCH nf-next v2 08/30] netfilter: remove unused function declarations., Jeremy Sowden
  • [PATCH nf-next v2 05/30] netfilter: remove trailing white-space., Jeremy Sowden
  • [PATCH nf-next v2 03/30] netfilter: fix include guard comment., Jeremy Sowden
  • [PATCH nf-next v2 04/30] netfilter: add GPL-2.0 SPDX ID's to a couple of headers., Jeremy Sowden
  • [PATCH nf-next v2 06/30] netfilter: fix Kconfig formatting error., Jeremy Sowden
  • [PATCH nf-next v2 13/30] netfilter: inline three headers., Jeremy Sowden
  • [PATCH nf-next v2 26/30] netfilter: add CONFIG_NETFILTER check to linux/netfilter.h., Jeremy Sowden
  • [PATCH nf-next v2 16/30] netfilter: move code between synproxy headers., Jeremy Sowden
  • [PATCH nf-next v2 28/30] netfilter: add IP_SET_BITMAP config option., Jeremy Sowden
  • [PATCH nf-next v2 30/30] netfilter: wrap headers in CONFIG checks., Jeremy Sowden
    • Re: [PATCH nf-next v2 30/30] netfilter: wrap headers in CONFIG checks., kbuild test robot
  • [PATCH nf-next v2 19/30] netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENABLED(CONFIG...)., Jeremy Sowden
  • [PATCH nf-next v2 11/30] netfilter: fix inclusions of <linux/netfilter/nf_nat.h>., Jeremy Sowden
  • [PATCH nf-next v2 29/30] netfilter: add IP_SET_HASH config option., Jeremy Sowden
  • [PATCH nf-next v2 15/30] netfilter: move inline function to a more appropriate header., Jeremy Sowden
  • [PATCH nf-next v2 21/30] netfilter: wrap inline synproxy function in CONFIG_NETFILTER_SYNPROXY check., Jeremy Sowden
  • [PATCH nf-next v2 17/30] netfilter: move struct definition function to a more appropriate header., Jeremy Sowden
  • [PATCH nf-next v2 14/30] netfilter: remove superfluous header., Jeremy Sowden
  • [PATCH nf-next v2 12/30] netfilter: added missing includes., Jeremy Sowden
  • [PATCH nf-next v2 25/30] netfilter: wrap some conntrack code in a CONFIG_NF_CONNTRACK check., Jeremy Sowden
  • [PATCH nf-next v2 24/30] netfilter: wrap some ipv6 tables code in a CONFIG_NF_TABLES_IPV6 check., Jeremy Sowden
  • [PATCH nf-next v2 22/30] netfilter: wrap inline timeout function in CONFIG_NETFILTER_TIMEOUT check., Jeremy Sowden
  • [PATCH nf-next v2 27/30] netfilter: add NF_TPROXY config option., Jeremy Sowden
  • [PATCH nf-next v2 18/30] netfilter: use consistent style when defining inline functions in nf_conntrack_ecache.h., Jeremy Sowden
  • [PATCH nf-next v2 10/30] netfilter: include the right header in nf_conntrack_zones.h., Jeremy Sowden
  • [PATCH nf-next v2 20/30] netfilter: wrap union nf_conntrack_proto members in CONFIG_NF_CT_PROTO_* check., Jeremy Sowden
  • [PATCH nf-next v2 23/30] netfilter: wrap some nat-related conntrack code in a CONFIG_NF_NAT check., Jeremy Sowden
  • Re: [PATCH nf-next v2 00/30] Add config option checks to netfilter headers., Pablo Neira Ayuso
    • Re: [PATCH nf-next v2 00/30] Add config option checks to netfilter headers., Jeremy Sowden
      • Re: [PATCH nf-next v2 00/30] Add config option checks to netfilter headers., Pablo Neira Ayuso
• [PATCH nf-next 1/2] netfilter: nf_tables_offload: move indirect flow_block callback logic to core, Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: nf_tables_offload: save one indent level in nft_indr_block_cb(), Pablo Neira Ayuso
  • Re: [PATCH nf-next 1/2] netfilter: nf_tables_offload: move indirect flow_block callback logic to core, Pablo Neira Ayuso
• [PATCH nf 1/2] netfilter: ctnetlink: honor IPS_OFFLOAD flag, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nf_flow_table: set default timeout after successful insertion, Pablo Neira Ayuso
• [conntrack-tools PATCH] conntrack: Fix CIDR to mask conversion on Big Endian, Phil Sutter
  • Re: [conntrack-tools PATCH] conntrack: Fix CIDR to mask conversion on Big Endian, Pablo Neira Ayuso
    • Re: [conntrack-tools PATCH] conntrack: Fix CIDR to mask conversion on Big Endian, Phil Sutter
      • Re: [conntrack-tools PATCH] conntrack: Fix CIDR to mask conversion on Big Endian, Florian Westphal
        • Re: [conntrack-tools PATCH] conntrack: Fix CIDR to mask conversion on Big Endian, Phil Sutter
• [PATCH nf-next 00/29] Add config option checks to netfilter headers., Jeremy Sowden
  • [PATCH nf-next 09/29] netfilter: remove unused includes., Jeremy Sowden
  • [PATCH nf-next 01/29] netfilter: add include guard to nf_conntrack_h323_types.h, Jeremy Sowden
  • [PATCH nf-next 06/29] netfilter: fix Kconfig formatting error., Jeremy Sowden
  • [PATCH nf-next 03/29] netfilter: fix include guard comment., Jeremy Sowden
  • [PATCH nf-next 08/29] netfilter: remove unused function declarations., Jeremy Sowden
  • [PATCH nf-next 05/29] netfilter: remove trailing white-space., Jeremy Sowden
  • [PATCH nf-next 07/29] netfilter: remove stray semicolons., Jeremy Sowden
  • [PATCH nf-next 04/29] netfilter: add GPL-2.0 SPDX ID's to a couple of headers., Jeremy Sowden
  • [PATCH nf-next 02/29] netfilter: add include guard to nf_conntrack_labels.h., Jeremy Sowden
  • [PATCH nf-next 12/29] netfilter: inline three headers., Jeremy Sowden
  • [PATCH nf-next 25/29] netfilter: add CONFIG_NETFILTER check to linux/netfilter.h., Jeremy Sowden
  • [PATCH nf-next 15/29] netfilter: move code between synproxy headers., Jeremy Sowden
  • [PATCH nf-next 24/29] netfilter: wrap some conntrack code in a CONFIG_NF_CONNTRACK check., Jeremy Sowden
  • [PATCH nf-next 11/29] netfilter: added missing includes., Jeremy Sowden
  • [PATCH nf-next 22/29] netfilter: wrap some nat-related conntrack code in a CONFIG_NF_NAT check., Jeremy Sowden
  • [PATCH nf-next 27/29] netfilter: add IP_SET_BITMAP config option., Jeremy Sowden
  • [PATCH nf-next 10/29] netfilter: include the right header in nf_conntrack_zones.h., Jeremy Sowden
  • [PATCH nf-next 23/29] netfilter: wrap some ipv6 tables code in a CONFIG_NF_TABLES_IPV6 check., Jeremy Sowden
  • [PATCH nf-next 17/29] netfilter: use consistent style when defining inline functions in nf_conntrack_ecache.h., Jeremy Sowden
  • [PATCH nf-next 19/29] netfilter: wrap union nf_conntrack_proto members in CONFIG_NF_CT_PROTO_* check., Jeremy Sowden
  • [PATCH nf-next 21/29] netfilter: wrap inline timeout function in CONFIG_NETFILTER_TIMEOUT check., Jeremy Sowden
  • [PATCH nf-next 28/29] netfilter: add IP_SET_HASH config option., Jeremy Sowden
  • [PATCH nf-next 16/29] netfilter: move struct definition function to a more appropriate header., Jeremy Sowden
  • [PATCH nf-next 29/29] netfilter: wrap headers in CONFIG checks., Jeremy Sowden
    • Re: [PATCH nf-next 29/29] netfilter: wrap headers in CONFIG checks., kbuild test robot
    • Re: [PATCH nf-next 29/29] netfilter: wrap headers in CONFIG checks., kbuild test robot
  • [PATCH nf-next 26/29] netfilter: add NF_TPROXY config option., Jeremy Sowden
  • [PATCH nf-next 14/29] netfilter: move inline function to a more appropriate header., Jeremy Sowden
  • [PATCH nf-next 20/29] netfilter: wrap inline synproxy function in CONFIG_NETFILTER_SYNPROXY check., Jeremy Sowden
  • [PATCH nf-next 18/29] netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENABLED(CONFIG...)., Jeremy Sowden
  • [PATCH nf-next 13/29] netfilter: remove superfluous header., Jeremy Sowden
• [PATCH nf-next v2] netfilter: nft_socket: fix erroneous socket assignment, Fernando Fernandez Mancera
  • Re: [PATCH nf-next v2] netfilter: nft_socket: fix erroneous socket assignment, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_socket: fix erroneous socket assignment, Fernando Fernandez Mancera
  • Re: [PATCH nf-next] netfilter: nft_socket: fix erroneous socket assignment, Fernando Fernandez Mancera
  • Re: [PATCH nf-next] netfilter: nft_socket: fix erroneous socket assignment, Florian Westphal
• [PATCH v5 1/1] net: br_netfiler_hooks: Drops IPv6 packets if IPv6 module is not loaded, Leonardo Bras
  • Re: [PATCH v5 1/1] net: br_netfiler_hooks: Drops IPv6 packets if IPv6 module is not loaded, Florian Westphal
  • Re: [PATCH v5 1/1] net: br_netfiler_hooks: Drops IPv6 packets if IPv6 module is not loaded, Pablo Neira Ayuso
• [PATCH v4 0/2] Drop IPV6 packets if IPv6 is disabled on boot, Leonardo Bras
  • [PATCH v4 2/2] net: br_netfiler_hooks: Drops IPv6 packets if IPv6 module is not loaded, Leonardo Bras
    • Re: [PATCH v4 2/2] net: br_netfiler_hooks: Drops IPv6 packets if IPv6 module is not loaded, Florian Westphal
      • Re: [PATCH v4 2/2] net: br_netfiler_hooks: Drops IPv6 packets if IPv6 module is not loaded, Leonardo Bras
        • Re: [PATCH v4 2/2] net: br_netfiler_hooks: Drops IPv6 packets if IPv6 module is not loaded, Florian Westphal
  • [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Leonardo Bras
    • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Florian Westphal
      • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Leonardo Bras
        • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Pablo Neira Ayuso
          • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Leonardo Bras
          • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Florian Westphal
            • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Pablo Neira Ayuso
              • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Florian Westphal
                • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Pablo Neira Ayuso
                  • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Florian Westphal
                    • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Pablo Neira Ayuso
    • Re: [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Pablo Neira Ayuso
• [PATCH nf-next v7 0/8] netfilter: Support the bridge family in flow table, wenxu
  • [PATCH nf-next v7 4/8] bridge: add br_vlan_get_info_rcu(), wenxu
  • [PATCH nf-next v7 2/8] netfilter:nf_flow_table_core: Separate inet operation to single function, wenxu
  • [PATCH nf-next v7 5/8] netfilter:nf_flow_table_core: Support bridge family flow offload, wenxu
    • Re: [PATCH nf-next v7 5/8] netfilter:nf_flow_table_core: Support bridge family flow offload, kbuild test robot
  • [PATCH nf-next v7 6/8] netfilter:nf_flow_table_ip: Support bridge family flow offload, wenxu
    • Re: [PATCH nf-next v7 6/8] netfilter:nf_flow_table_ip: Support bridge family flow offload, kbuild test robot
  • [PATCH nf-next v7 7/8] netfilter:nft_flow_offload: Support bridge family flow offload, wenxu
  • [PATCH nf-next v7 3/8] netfilter:nf_flow_table_ip: Separate inet operation to single function, wenxu
  • [PATCH nf-next v7 8/8] netfilter: Support the bridge family in flow table, wenxu
  • [PATCH nf-next v7 1/8] netfilter:nf_flow_table: Refactor flow_offload_tuple to destination, wenxu
• [PATCH nft v6] meta: add ibrpvid and ibrvproto support, wenxu
  • Re: [PATCH nft v6] meta: add ibrpvid and ibrvproto support, Pablo Neira Ayuso
• [PATCH 0/4 net-next] flow_offload: update mangle action representation, Pablo Neira Ayuso
  • [PATCH net-next 2/4] net: flow_offload: bitwise AND on mangle action value field, Pablo Neira Ayuso
  • [PATCH net-next 1/4] net: flow_offload: flip mangle action mask, Pablo Neira Ayuso
  • [PATCH net-next 4/4] netfilter: nft_payload: packet mangling offload support, Pablo Neira Ayuso
  • [PATCH net-next 3/4] net: flow_offload: mangle action at byte level, Pablo Neira Ayuso
    • Re: [PATCH net-next 3/4] net: flow_offload: mangle action at byte level, Vlad Buslov
  • Re: [PATCH 0/4 net-next] flow_offload: update mangle action representation, Jakub Kicinski
    • Re: [PATCH 0/4 net-next] flow_offload: update mangle action representation, Pablo Neira Ayuso
      • Re: [PATCH 0/4 net-next] flow_offload: update mangle action representation, Jakub Kicinski
        • Re: [PATCH 0/4 net-next] flow_offload: update mangle action representation, Pablo Neira Ayuso
          • Re: [PATCH 0/4 net-next] flow_offload: update mangle action representation, Jakub Kicinski
            • Re: [PATCH 0/4 net-next] flow_offload: update mangle action representation, Pablo Neira Ayuso
• [PATCH AUTOSEL 5.2 04/76] netfilter: nf_flow_table: fix offload for flows that are subject to xfrm, Sasha Levin
• [PATCH AUTOSEL 5.2 11/76] netfilter: nf_flow_table: conntrack picks up expired flows, Sasha Levin
• [PATCH AUTOSEL 5.2 12/76] netfilter: nf_flow_table: teardown flow timeout race, Sasha Levin
• [PATCH AUTOSEL 5.2 10/76] netfilter: nf_tables: use-after-free in failing rule with bound set, Sasha Levin
• [PATCH AUTOSEL 5.2 24/76] netfilter: nft_flow_offload: skip tcp rst and fin packets, Sasha Levin
• [PATCH AUTOSEL 4.19 02/45] netfilter: nf_tables: use-after-free in failing rule with bound set, Sasha Levin
• [PATCH AUTOSEL 4.19 11/45] netfilter: nft_flow_offload: skip tcp rst and fin packets, Sasha Levin
• [PATCH] netfilter: reject: fix ICMP csum verification, Alin Nastac
  • Re: [PATCH] netfilter: reject: fix ICMP csum verification, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: reject: fix ICMP csum verification, Alin Năstac
• [PATCH nft 0/4] meta: introduce time/day/hour matching, Florian Westphal
  • [PATCH nft 1/4] evaluate: New internal helper __expr_evaluate_range, Florian Westphal
  • [PATCH nft 2/4] meta: Introduce new conditions 'time', 'day' and 'hour', Florian Westphal
  • [PATCH nft 3/4] tests: add meta time test cases, Florian Westphal
    • Re: [PATCH nft 3/4] tests: add meta time test cases, Phil Sutter
      • Re: [PATCH nft 3/4] tests: add meta time test cases, Florian Westphal
        • Re: [PATCH nft 3/4] tests: add meta time test cases, Phil Sutter
          • Re: [PATCH nft 3/4] tests: add meta time test cases, Phil Sutter
  • [PATCH nft 4/4] src: evaluate: catch invalid 'meta day' values in eval step, Florian Westphal
• [PATCH AUTOSEL 4.19 15/29] netfilter: nf_tables: use-after-free in failing rule with bound set, Sasha Levin
• [PATCH AUTOSEL 4.19 22/29] netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets, Sasha Levin
• [PATCH AUTOSEL 4.19 21/29] netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too, Sasha Levin
• [PATCH nft] src: json: add support for element deletion, Florian Westphal
  • Re: [PATCH nft] src: json: add support for element deletion, Phil Sutter
• [PATCH nf] netfilter: nft_meta_bridge: Fix get NFT_META_BRI_IIFVPROTO in network byteorder, wenxu
  • Re: [PATCH nf] netfilter: nft_meta_bridge: Fix get NFT_META_BRI_IIFVPROTO in network byteorder, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_flow_table: clear skb tstamp before xmit, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_flow_table: clear skb tstamp before xmit, Pablo Neira Ayuso
• [PATCH v3 1/1] netfilter: nf_tables: fib: Drop IPV6 packets if IPv6 is disabled on boot, Leonardo Bras
• [PATCH nf] netfilter: conntrack: make sysctls per-namespace again, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: make sysctls per-namespace again, Shmulik Ladkani
  • Re: [PATCH nf] netfilter: conntrack: make sysctls per-namespace again, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: conntrack: make sysctls per-namespace again, Shmulik Ladkani
• [PATCH 1/2 nf-next v3] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
  • [PATCH 2/2 nf-next v3] netfilter: nft_quota: add quota object update support, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nf-next v3] netfilter: nft_quota: add quota object update support, Pablo Neira Ayuso
  • Re: [PATCH 1/2 nf-next v3] netfilter: nf_tables: Introduce stateful object update operation, Pablo Neira Ayuso
• Feature request: Add support for linenoise as alternative to readline, Priebe, Sebastian
  • [PATCH RFC nftables 0/4] Add Linenoise support to the CLI., Jeremy Sowden
    • [PATCH RFC nftables 2/4] cli: remove unused declaration., Jeremy Sowden
      • Re: [PATCH RFC nftables 2/4] cli: remove unused declaration., Pablo Neira Ayuso
    • [PATCH RFC nftables 4/4] cli: add linenoise CLI implementation., Jeremy Sowden
      • Re: [PATCH RFC nftables 4/4] cli: add linenoise CLI implementation., Pablo Neira Ayuso
        • Re: [PATCH RFC nftables 4/4] cli: add linenoise CLI implementation., Jeremy Sowden
    • [PATCH RFC nftables 1/4] configure: remove unused AC_SUBST macros., Jeremy Sowden
      • Re: [PATCH RFC nftables 1/4] configure: remove unused AC_SUBST macros., Pablo Neira Ayuso
    • [PATCH RFC nftables 3/4] cli: add upstream linenoise source., Jeremy Sowden
    • Re: [PATCH RFC nftables 0/4] Add Linenoise support to the CLI., Pablo Neira Ayuso
      • Re: [PATCH RFC nftables 0/4] Add Linenoise support to the CLI., Jeremy Sowden
• [PATCH nft v9 1/2] evaluate: New internal helper __expr_evaluate_range, Ander Juaristi
  • [PATCH nft v9 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Ander Juaristi
    • Re: [PATCH nft v9 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Florian Westphal
• [PATCH nft v5] meta: add ibrpvid and ibrvproto support, wenxu
  • Re: [PATCH nft v5] meta: add ibrpvid and ibrvproto support, Pablo Neira Ayuso
    • Re: [PATCH nft v5] meta: add ibrpvid and ibrvproto support, wenxu
      • Re: [PATCH nft v5] meta: add ibrpvid and ibrvproto support, Pablo Neira Ayuso
        • Re: [PATCH nft v5] meta: add ibrpvid and ibrvproto support, wenxu
          • Re: [PATCH nft v5] meta: add ibrpvid and ibrvproto support, Pablo Neira Ayuso
• [PATCH] netfilter: not mark a spinlock as __read_mostly, Li RongQing
  • Re: [PATCH] netfilter: not mark a spinlock as __read_mostly, Pablo Neira Ayuso
• [PATCH 1/2 nf-next v2] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
  • [PATCH 2/2 nf-next v2] netfilter: nft_quota: add quota object update support, Fernando Fernandez Mancera
  • Re: [PATCH 1/2 nf-next v2] netfilter: nf_tables: Introduce stateful object update operation, Pablo Neira Ayuso
    • Re: [PATCH 1/2 nf-next v2] netfilter: nf_tables: Introduce stateful object update operation, Pablo Neira Ayuso
      • Re: [PATCH 1/2 nf-next v2] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
        • Re: [PATCH 1/2 nf-next v2] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
          • Re: [PATCH 1/2 nf-next v2] netfilter: nf_tables: Introduce stateful object update operation, Pablo Neira Ayuso
            • Re: [PATCH 1/2 nf-next v2] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
              • Re: [PATCH 1/2 nf-next v2] netfilter: nf_tables: Introduce stateful object update operation, Pablo Neira Ayuso
                • Re: [PATCH 1/2 nf-next v2] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
• nft equivalent of iptables command, Serguei Bezverkhi (sbezverk)
  • Re: nft equivalent of iptables command, Florian Westphal
    • Re: nft equivalent of iptables command, Dan Williams
      • Re: nft equivalent of iptables command, Serguei Bezverkhi (sbezverk)
        • Re: nft equivalent of iptables command, Florian Westphal
          • Re: nft equivalent of iptables command, Serguei Bezverkhi (sbezverk)
    • Re: nft equivalent of iptables command, Serguei Bezverkhi (sbezverk)
• [PATCH 0/3] rework netlink skb allocation, Jan Dakinevich
  • [PATCH 1/3] skbuff: use kvfree() to deallocate head, Jan Dakinevich
  • [PATCH 2/3] netlink: always use vmapped memory for skb data, Jan Dakinevich
  • [PATCH 3/3] netlink: use generic skb_set_owner_r(), Jan Dakinevich
  • Re: [PATCH 0/3] rework netlink skb allocation, David Miller
• [PATCH nft v1]files: add script to generate geoip.nft file, Shekhar Sharma
  • Re: [PATCH nft v1]files: add script to generate geoip.nft file, Pablo Neira Ayuso
• nftables matching gratuitous arp, michael-dev
  • Re: nftables matching gratuitous arp, Florian Westphal
• [PATCH] netfilter: xt_physdev: Fix spurious error message in physdev_mt_check, Todd Seidelmann
  • Re: [PATCH] netfilter: xt_physdev: Fix spurious error message in physdev_mt_check, Florian Westphal
  • Re: [PATCH] netfilter: xt_physdev: Fix spurious error message in physdev_mt_check, Pablo Neira Ayuso
• [PATCH nft v8 1/2] evaluate: New internal helper __expr_evaluate_range, Ander Juaristi
  • [PATCH nft v8 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Ander Juaristi
    • Re: [PATCH nft v8 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Florian Westphal
      • Re: [PATCH nft v8 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Pablo Neira Ayuso
        • Re: [PATCH nft v8 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Florian Westphal
          • Re: [PATCH nft v8 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Ander Juaristi
            • Re: [PATCH nft v8 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Pablo Neira Ayuso
              • Re: [PATCH nft v8 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Ander Juaristi
• [PATCH] netfilter: nf_conntrack_ftp: Fix debug output, Thomas Jarosch
  • Re: [PATCH] netfilter: nf_conntrack_ftp: Fix debug output, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_conntrack_ftp: Fix debug output, Thomas Jarosch
      • Re: [PATCH] netfilter: nf_conntrack_ftp: Fix debug output, Thomas Jarosch
  • Re: [PATCH] netfilter: nf_conntrack_ftp: Fix debug output, Pablo Neira Ayuso
• [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
  • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Pablo Neira Ayuso
    • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
      • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Pablo Neira Ayuso
        • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
      • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, David Miller
        • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Florian Westphal
          • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Pablo Neira Ayuso
            • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Florian Westphal
  • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
    • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Florian Westphal
    • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
      • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Florian Westphal
        • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
        • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
          • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Florian Westphal
        • Re: [PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
• [PATCH nft v4] meta: add ibrpvid and ibrvproto support, wenxu
  • Re: [PATCH nft v4] meta: add ibrpvid and ibrvproto support, Pablo Neira Ayuso
• [PATCH 1/2 nf-next] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
  • [PATCH 2/2 nf-next] netfilter: nft_quota: add quota object update support, Fernando Fernandez Mancera
  • Re: [PATCH 1/2 nf-next] netfilter: nf_tables: Introduce stateful object update operation, Florian Westphal
    • Re: [PATCH 1/2 nf-next] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
      • Re: [PATCH 1/2 nf-next] netfilter: nf_tables: Introduce stateful object update operation, Florian Westphal
        • Re: [PATCH 1/2 nf-next] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
• [iptables PATCH 00/14] Implement among match support, Phil Sutter
  • [iptables PATCH 04/14] nft: Eliminate pointless calls to nft_family_ops_lookup(), Phil Sutter
    • Re: [iptables PATCH 04/14] nft: Eliminate pointless calls to nft_family_ops_lookup(), Pablo Neira Ayuso
  • [iptables PATCH 07/14] nft: family_ops: Pass nft_handle to 'add' callback, Phil Sutter
  • [iptables PATCH 10/14] nft: family_ops: Pass nft_handle to 'rule_to_cs' callback, Phil Sutter
  • [iptables PATCH 01/14] nft: Fix typo in nft_parse_limit() error message, Phil Sutter
    • Re: [iptables PATCH 01/14] nft: Fix typo in nft_parse_limit() error message, Pablo Neira Ayuso
  • [iptables PATCH 08/14] nft: family_ops: Pass nft_handle to 'rule_find' callback, Phil Sutter
  • [iptables PATCH 05/14] nft: Fetch sets when updating rule cache, Phil Sutter
    • Re: [iptables PATCH 05/14] nft: Fetch sets when updating rule cache, Pablo Neira Ayuso
  • [iptables PATCH 11/14] nft: Bore up nft_parse_payload(), Phil Sutter
    • Re: [iptables PATCH 11/14] nft: Bore up nft_parse_payload(), Pablo Neira Ayuso
      • Re: [iptables PATCH 11/14] nft: Bore up nft_parse_payload(), Pablo Neira Ayuso
  • [iptables PATCH 02/14] nft: Get rid of NFT_COMPAT_EXPR_MAX define, Phil Sutter
    • Re: [iptables PATCH 02/14] nft: Get rid of NFT_COMPAT_EXPR_MAX define, Pablo Neira Ayuso
  • [iptables PATCH 03/14] nft: Keep nft_handle pointer in nft_xt_ctx, Phil Sutter
    • Re: [iptables PATCH 03/14] nft: Keep nft_handle pointer in nft_xt_ctx, Pablo Neira Ayuso
      • Re: [iptables PATCH 03/14] nft: Keep nft_handle pointer in nft_xt_ctx, Phil Sutter
  • [iptables PATCH 14/14] nft: bridge: Rudimental among extension support, Phil Sutter
    • Re: [iptables PATCH 14/14] nft: bridge: Rudimental among extension support, Pablo Neira Ayuso
      • Re: [iptables PATCH 14/14] nft: bridge: Rudimental among extension support, Phil Sutter
        • Re: [iptables PATCH 14/14] nft: bridge: Rudimental among extension support, Pablo Neira Ayuso
    • Re: [iptables PATCH 14/14] nft: bridge: Rudimental among extension support, Pablo Neira Ayuso
      • Re: [iptables PATCH 14/14] nft: bridge: Rudimental among extension support, Phil Sutter
        • Re: [iptables PATCH 14/14] nft: bridge: Rudimental among extension support, Pablo Neira Ayuso
          • Re: [iptables PATCH 14/14] nft: bridge: Rudimental among extension support, Pablo Neira Ayuso
  • [iptables PATCH 09/14] nft: family_ops: Pass nft_handle to 'print_rule' callback, Phil Sutter
  • [iptables PATCH 06/14] nft: Support NFT_COMPAT_SET_ADD, Phil Sutter
  • [iptables PATCH 13/14] nft: Support parsing lookup expression, Phil Sutter
  • [iptables PATCH 12/14] nft: Embed rule's table name in nft_xt_ctx, Phil Sutter
• [RFC 0/1] avoid busy loop in __nft_build_cache, Christian Ehrhardt
  • [RFC 1/1] nft: abort cache creation if mnl_genid_get fails, Christian Ehrhardt
    • Re: [RFC 1/1] nft: abort cache creation if mnl_genid_get fails, Florian Westphal
      • Re: [RFC 1/1] nft: abort cache creation if mnl_genid_get fails, Christian Ehrhardt
• [PATCH] netfilter: ipset: Fix an error code in ip_set_sockfn_get(), Dan Carpenter
  • Re: [PATCH] netfilter: ipset: Fix an error code in ip_set_sockfn_get(), Kadlecsik József
    • Re: [PATCH] netfilter: ipset: Fix an error code in ip_set_sockfn_get(), Dan Carpenter
    • [PATCH v2] netfilter: ipset: Fix an error code in ip_set_sockfn_get(), Dan Carpenter
      • Re: [PATCH v2] netfilter: ipset: Fix an error code in ip_set_sockfn_get(), Kadlecsik József
• [PATCH nf-next v5 0/8] netfilter: nf_tables_offload: support tunnel offload, wenxu
  • [PATCH nf-next v5 4/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP6_SRC/DST match, wenxu
  • [PATCH nf-next v5 3/8] netfilter: nft_tunnel: add ipv6 check in nft_tunnel_mode_validate, wenxu
  • [PATCH nf-next v5 2/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP_SRC/DST match, wenxu
  • [PATCH nf-next v5 8/8] netfilter: nft_tunnel: support nft_tunnel_obj offload, wenxu
  • [PATCH nf-next v5 1/8] netfilter: nft_tunnel: add nft_tunnel_mode_validate function, wenxu
  • [PATCH nf-next v5 5/8] netfilter: nft_tunnel: support tunnel meta match offload, wenxu
  • [PATCH nf-next v5 6/8] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action, wenxu
  • [PATCH nf-next v5 7/8] netfilter: nft_objref: add nft_objref_type offload, wenxu
  • Re: [PATCH nf-next v5 0/8] netfilter: nf_tables_offload: support tunnel offload, wenxu
• [PATCH nf-next v5 0/2] netfilter: nf_tables_offload: support fwd_netdev offload, wenxu
  • [PATCH nf-next v5 1/2] netfilter: nf_flow_offload: add net in offload_ctx, wenxu
    • Re: [PATCH nf-next v5 1/2] netfilter: nf_flow_offload: add net in offload_ctx, wenxu
  • [PATCH nf-next v5 2/2] netfilter: nft_fwd_netdev: add fw_netdev action support, wenxu
• [PATCH iptables] doc: Note REDIRECT case of no IP address, Joseph C. Sible
  • Re: [PATCH iptables] doc: Note REDIRECT case of no IP address, Pablo Neira Ayuso
• [PATCH] src: add vlan_id type, Michael Braun
  • Re: [PATCH] src: add vlan_id type, Pablo Neira Ayuso
• [PATCH nft 2/2] src: secmark: fix missing quotes in selctx strings output, Eric Jallot
  • Re: [PATCH nft 2/2] src: secmark: fix missing quotes in selctx strings output, Florian Westphal
• [PATCH nft 1/2] src: secmark: fix brace indentation in object output, Eric Jallot
• [PATCHv3] netfilter: nfnetlink_log:add support for VLAN information, Michael Braun
  • Re: [PATCHv3] netfilter: nfnetlink_log:add support for VLAN information, Florian Westphal
  • Re: [PATCHv3] netfilter: nfnetlink_log:add support for VLAN information, Pablo Neira Ayuso
• [PATCH iptables] extensions: nfacct: Fix alignment mismatch in xt_nfacct_match_info, Juliana Rodrigueiro
  • Re: [PATCH iptables] extensions: nfacct: Fix alignment mismatch in xt_nfacct_match_info, Pablo Neira Ayuso
• [PATCHv2] netfilter: nfnetlink_log:add support for VLAN information, Michael Braun
  • Re: [PATCHv2] netfilter: nfnetlink_log:add support for VLAN information, Pablo Neira Ayuso
  • Re: [PATCHv2] netfilter: nfnetlink_log:add support for VLAN information, Florian Westphal
• [PATCH net-next 1/2] net: flow_offload: mangle 128-bit packet field with one action, Pablo Neira Ayuso
  • [PATCH net-next 2/2] netfilter: nft_payload: packet mangling offload support, Pablo Neira Ayuso
  • Re: [PATCH net-next 1/2] net: flow_offload: mangle 128-bit packet field with one action, Edward Cree
    • Re: [PATCH net-next 1/2] net: flow_offload: mangle 128-bit packet field with one action, Pablo Neira Ayuso
      • Re: [PATCH net-next 1/2] net: flow_offload: mangle 128-bit packet field with one action, Edward Cree
        • Re: [PATCH net-next 1/2] net: flow_offload: mangle 128-bit packet field with one action, Pablo Neira Ayuso
          • Re: [PATCH net-next 1/2] net: flow_offload: mangle 128-bit packet field with one action, Edward Cree
            • Re: [PATCH net-next 1/2] net: flow_offload: mangle 128-bit packet field with one action, Pablo Neira Ayuso
              • Re: [PATCH net-next 1/2] net: flow_offload: mangle 128-bit packet field with one action, Edward Cree
• [PATCH net-next 0/2] netfilter: payload mangling offload support, Pablo Neira Ayuso
  • Re: [PATCH net-next 0/2] netfilter: payload mangling offload support, Jakub Kicinski
• [PATCH 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
  • Re: [PATCH 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Florian Westphal
    • Re: [PATCH 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
      • Re: [PATCH 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Pablo Neira Ayuso
        • Re: [PATCH 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
        • Re: [PATCH 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot, Leonardo Bras
• [PATCH nf-next v2] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd, wenxu
  • Re: [PATCH nf-next v2] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd, wenxu
  • Re: [PATCH nf-next v2] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd, wenxu
    • Re: [PATCH nf-next v2] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd, Pablo Neira Ayuso
• [ANNOUNCE] nftables 0.9.2 release, Pablo Neira Ayuso
• [PATCH WIP nf-next] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
  • Re: [PATCH WIP nf-next] netfilter: nf_tables: Introduce stateful object update operation, Florian Westphal
    • Re: [PATCH WIP nf-next] netfilter: nf_tables: Introduce stateful object update operation, Fernando Fernandez Mancera
• [ANNOUNCE] libnftnl 1.1.4 release, Pablo Neira Ayuso
  • [ANNOUNCE] libnftnl 1.1.5 release, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd, wenxu
  • Re: [PATCH nf-next] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd, wenxu
      • Re: [PATCH nf-next] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd, Florian Westphal
• [PATCH nf-next 1/3] netfilter: nf_offload: Make nft_flow_offload_chain public, wenxu
  • [PATCH nf-next 3/3] netfilter: nf_offload: clear offload things in __nft_release_basechain, wenxu
  • [PATCH nf-next 2/3] netfilter: nf_offload: Make nft_flow_offload_rule public, wenxu
  • Re: [PATCH nf-next 1/3] netfilter: nf_offload: Make nft_flow_offload_chain public, wenxu
  • Re: [PATCH nf-next 1/3] netfilter: nf_offload: Make nft_flow_offload_chain public, Pablo Neira Ayuso
• [PATCH] netfilter: add include guard to nf_conntrack_h323_types.h, Masahiro Yamada
  • Re: [PATCH] netfilter: add include guard to nf_conntrack_h323_types.h, Pablo Neira Ayuso
• Re: meter in 0.9.1 (nft noob question), Duncan Roe
  • Re: meter in 0.9.1 (nft noob question), Laura Garcia
    • Re: meter in 0.9.1 (nft noob question), Duncan Roe
• [PATCH nft v7 1/2] evaluate: New internal helper __expr_evaluate_range, Ander Juaristi
  • [PATCH nft v7 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Ander Juaristi
    • Re: [PATCH nft v7 2/2] meta: Introduce new conditions 'time', 'day' and 'hour', Florian Westphal
  • Re: [PATCH nft v7 1/2] evaluate: New internal helper __expr_evaluate_range, Florian Westphal
• git pull has stopped working, Duncan Roe
• [PATCH libnftnl v2 1/2] expr: meta: Make NFT_META_TIME_{NS,DAY,HOUR} known, Ander Juaristi
  • [PATCH libnftnl v2 2/2] expr: meta: Make NFT_DYNSET_OP_DELETE known, Ander Juaristi
    • Re: [PATCH libnftnl v2 2/2] expr: meta: Make NFT_DYNSET_OP_DELETE known, Pablo Neira Ayuso
  • Re: [PATCH libnftnl v2 1/2] expr: meta: Make NFT_META_TIME_{NS,DAY,HOUR} known, Pablo Neira Ayuso
• [PATCH v4] netfilter: nft_dynset: support for element deletion, Ander Juaristi
  • Re: [PATCH v4] netfilter: nft_dynset: support for element deletion, Pablo Neira Ayuso
• [PATCH v5 1/2] netfilter: Introduce new 64-bit helper functions, Ander Juaristi
  • [PATCH v5 2/2] netfilter: nft_meta: support for time matching, Ander Juaristi
    • Re: [PATCH v5 2/2] netfilter: nft_meta: support for time matching, Jones Desougi
      • Re: [PATCH v5 2/2] netfilter: nft_meta: support for time matching, Ander Juaristi
        • Re: [PATCH v5 2/2] netfilter: nft_meta: support for time matching, Jones Desougi
          • Re: [PATCH v5 2/2] netfilter: nft_meta: support for time matching, Florian Westphal
            • Re: [PATCH v5 2/2] netfilter: nft_meta: support for time matching, Jones Desougi
    • Re: [PATCH v5 2/2] netfilter: nft_meta: support for time matching, Pablo Neira Ayuso
  • Re: [PATCH v5 1/2] netfilter: Introduce new 64-bit helper functions, Pablo Neira Ayuso
• [PATCH v2] netfilter: nfacct: Fix alignment mismatch in xt_nfacct_match_info, Juliana Rodrigueiro
  • Re: [PATCH v2] netfilter: nfacct: Fix alignment mismatch in xt_nfacct_match_info, Juliana Rodrigueiro
    • Re: [PATCH v2] netfilter: nfacct: Fix alignment mismatch in xt_nfacct_match_info, Pablo Neira Ayuso
  • Re: [PATCH v2] netfilter: nfacct: Fix alignment mismatch in xt_nfacct_match_info, Florian Westphal
  • Re: [PATCH v2] netfilter: nfacct: Fix alignment mismatch in xt_nfacct_match_info, Pablo Neira Ayuso
• [PATCH nftables 0/8] add typeof keyword, Florian Westphal
  • [PATCH nftables 1/8] src: libnftnl: run single-initcalls only once, Florian Westphal
  • [PATCH nftables 2/8] src: libnftnl: split nft_ctx_new/free, Florian Westphal
  • [PATCH nftables 3/8] src: store expr, not dtype to track data in sets, Florian Westphal
  • [PATCH nftables 4/8] src: parser: add syntax to provide bitsize for non-spcific types, Florian Westphal
  • [PATCH nftables 5/8] src: add "typeof" keyword, Florian Westphal
  • [PATCH nftables 6/8] src: add "typeof" print support, Florian Westphal
  • [PATCH nftables 7/8] src: netlink: remove assertion, Florian Westphal
  • [PATCH nftables 8/8] tests: add typeof test cases, Florian Westphal
  • Re: [PATCH nftables 0/8] add typeof keyword, Pablo Neira Ayuso
    • Re: [PATCH nftables 0/8] add typeof keyword, Pablo Neira Ayuso
      • Re: [PATCH nftables 0/8] add typeof keyword, Florian Westphal
    • Re: [PATCH nftables 0/8] add typeof keyword, Florian Westphal
      • Re: [PATCH nftables 0/8] add typeof keyword, Arturo Borrero Gonzalez
        • Re: [PATCH nftables 0/8] add typeof keyword, Pablo Neira Ayuso
• [PATCH nft v3] meta: add ibrpvid and ibrvproto support, wenxu
  • Re: [PATCH nft v3] meta: add ibrpvid and ibrvproto support, Pablo Neira Ayuso
• Unable to create htb tc classes more than 64K, Akshat Kakkar
  • Re: Unable to create htb tc classes more than 64K, Cong Wang
    • Re: Unable to create htb tc classes more than 64K, Akshat Kakkar
      • Re: Unable to create htb tc classes more than 64K, Cong Wang
        • Re: Unable to create htb tc classes more than 64K, Akshat Kakkar
          • Re: Unable to create htb tc classes more than 64K, Akshat Kakkar
          • Re: Unable to create htb tc classes more than 64K, Cong Wang
            • Re: Unable to create htb tc classes more than 64K, Akshat Kakkar
              • Re: Unable to create htb tc classes more than 64K, Cong Wang
                • Re: Unable to create htb tc classes more than 64K, Eric Dumazet
                  • Re: Unable to create htb tc classes more than 64K, Toke Høiland-Jørgensen
                  • Re: Unable to create htb tc classes more than 64K, Dave Taht
                    • Re: Unable to create htb tc classes more than 64K, Eric Dumazet
                      • Re: Unable to create htb tc classes more than 64K, Dave Taht
                  • Re: Unable to create htb tc classes more than 64K, Akshat Kakkar
          • Re: Unable to create htb tc classes more than 64K, Jesper Dangaard Brouer
• [PATCH conntrack-tools] src: fix strncpy -Wstringop-truncation warnings, Jose M. Guisado Gomez
  • Re: [PATCH conntrack-tools] src: fix strncpy -Wstringop-truncation warnings, Duncan Roe
    • Re: [PATCH conntrack-tools] src: fix strncpy -Wstringop-truncation warnings, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_flow_offload: missing netlink attribute policy, Pablo Neira Ayuso
• [PATCH net,v5 0/2] flow_offload hardware priority fixes, Pablo Neira Ayuso
  • [PATCH net,v5 2/2] netfilter: nf_tables: map basechain priority to hardware priority, Pablo Neira Ayuso
    • Re: [PATCH net,v5 2/2] netfilter: nf_tables: map basechain priority to hardware priority, Jakub Kicinski
  • [PATCH net,v5 1/2] net: sched: use major priority number as hardware priority, Pablo Neira Ayuso
  • Re: [PATCH net,v5 0/2] flow_offload hardware priority fixes, David Miller
• [nft PATCH] doc: don't check asciidoc output with xmllint, Arturo Borrero Gonzalez
  • Re: [nft PATCH] doc: don't check asciidoc output with xmllint, Pablo Neira Ayuso
• [PATCH nft v2] meta: add ibrpvid and ibrvproto support, wenxu
  • Re: [PATCH nft v2] meta: add ibrpvid and ibrvproto support, Pablo Neira Ayuso
• [PATCH] netfilter: nft_bitwise: Adjust parentheses to fix memcmp size argument, Nathan Chancellor
  • Re: [PATCH] netfilter: nft_bitwise: Adjust parentheses to fix memcmp size argument, Nick Desaulniers
  • Re: [PATCH] netfilter: nft_bitwise: Adjust parentheses to fix memcmp size argument, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nft_bitwise: Adjust parentheses to fix memcmp size argument, Joe Perches
• fallout from net-next netfilter changes, David Miller
  • Re: fallout from net-next netfilter changes, Florian Westphal
  • Re: fallout from net-next netfilter changes, Pablo Neira Ayuso
    • Re: fallout from net-next netfilter changes, Pablo Neira Ayuso
• [PATCH nftables] src: json: fix constant parsing on bigendian, Florian Westphal
  • Re: [PATCH nftables] src: json: fix constant parsing on bigendian, Pablo Neira Ayuso
• [PATCH nftables] src: json: support json restore for "th" pseudoheader, Florian Westphal
  • Re: [PATCH nftables] src: json: support json restore for "th" pseudoheader, Pablo Neira Ayuso
• [PATCH nf-next v4 00/12] netfilter: nf_tables_offload: support more expr and obj offload, wenxu
  • [PATCH nf-next v4 03/12] netfilter: nft_fwd_netdev: add fw_netdev action support, wenxu
  • [PATCH nf-next v4 01/12] netfilter: nf_flow_offload: add net in offload_ctx, wenxu
  • [PATCH nf-next v4 04/12] netfilter: nft_payload: add nft_set_payload offload support, wenxu
  • [PATCH nf-next v4 02/12] netfilter: nf_tables_offload: add offload_actions callback, wenxu
  • [PATCH nf-next v4 05/12] netfilter: nft_tunnel: add nft_tunnel_mode_validate function, wenxu