Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 1/2 nft v3] src: allow variables in the chain priority specification, (continued)
  • [PATCH 1/2 nft v3] src: allow variables in the chain priority specification, Fernando Fernandez Mancera
    • Re: [PATCH 1/2 nft v3] src: allow variables in the chain priority specification, Fernando Fernandez Mancera
  • [PATCH 2/2 nft v3] src: allow variable in chain policy, Fernando Fernandez Mancera
• [PATCH] meta: Introduce new conditions 'time', 'day' and 'hour', Ander Juaristi
  • Re: [PATCH] meta: Introduce new conditions 'time', 'day' and 'hour', Pablo Neira Ayuso
• [PATCH v3] netfilter: nft_meta: support for time matching, Ander Juaristi
  • Re: [PATCH v3] netfilter: nft_meta: support for time matching, Ander Juaristi
    • Re: [PATCH v3] netfilter: nft_meta: support for time matching, Florian Westphal
  • Re: [PATCH v3] netfilter: nft_meta: support for time matching, kbuild test robot
  • Re: [PATCH v3] netfilter: nft_meta: support for time matching, kbuild test robot
  • Re: [PATCH v3] netfilter: nft_meta: support for time matching, kbuild test robot
  • Re: [PATCH v3] netfilter: nft_meta: support for time matching, Pablo Neira Ayuso
• [PATCH v6] meta: Introduce new conditions 'time', 'day' and 'hour', Ander Juaristi
  • Re: [PATCH v6] meta: Introduce new conditions 'time', 'day' and 'hour', Florian Westphal
  • Re: [PATCH v6] meta: Introduce new conditions 'time', 'day' and 'hour', Florian Westphal
    • Re: [PATCH v6] meta: Introduce new conditions 'time', 'day' and 'hour', Ander Juaristi
• [PATCH] expr: allow export of notrack expr, Ivan Babrou
  • Re: [PATCH] expr: allow export of notrack expr, Florian Westphal
    • Re: [PATCH] expr: allow export of notrack expr, Ivan Babrou
• [PATCH nf-next v3 0/9] netfilter: nf_tables_offload: support more expr and obj offload, wenxu
  • [PATCH nf-next v3 3/9] netfilter: nft_fwd_netdev: add fw_netdev action support, wenxu
    • Re: [PATCH nf-next v3 3/9] netfilter: nft_fwd_netdev: add fw_netdev action support, kbuild test robot
      • Re: [PATCH nf-next v3 3/9] netfilter: nft_fwd_netdev: add fw_netdev action support, wenxu
  • [PATCH nf-next v3 2/9] netfilter: nf_tables_offload: add offload_actions callback, wenxu
  • [PATCH nf-next v3 8/9] netfilter: nft_objref: add nft_objref_type offload, wenxu
  • [PATCH nf-next v3 6/9] netfilter: nft_tunnel: support tunnel meta match offload, wenxu
  • [PATCH nf-next v3 4/9] netfilter: nft_payload: add nft_set_payload offload support, wenxu
    • Re: [PATCH nf-next v3 4/9] netfilter: nft_payload: add nft_set_payload offload support, kbuild test robot
      • Re: [PATCH nf-next v3 4/9] netfilter: nft_payload: add nft_set_payload offload support, wenxu
  • [PATCH nf-next v3 5/9] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, wenxu
    • Re: [PATCH nf-next v3 5/9] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, Pablo Neira Ayuso
      • Re: [PATCH nf-next v3 5/9] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, wenxu
        • Re: [PATCH nf-next v3 5/9] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, Pablo Neira Ayuso
          • Re: [PATCH nf-next v3 5/9] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, Pablo Neira Ayuso
            • Re: [PATCH nf-next v3 5/9] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, wenxu
              • Re: [PATCH nf-next v3 5/9] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, Pablo Neira Ayuso
          • Re: [PATCH nf-next v3 5/9] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, wenxu
  • [PATCH nf-next v3 1/9] netfilter: nf_flow_offload: add net in offload_ctx, wenxu
  • [PATCH nf-next v3 7/9] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action, wenxu
  • [PATCH nf-next v3 9/9] netfilter: nft_tunnel: support nft_tunnel_obj offload, wenxu
  • Re: [PATCH nf-next v3 0/9] netfilter: nf_tables_offload: support more expr and obj offload, wenxu
• [PATCH nf-next] netfilter: nf_tables: store data in offload context registers, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nf_tables: store data in offload context registers, kbuild test robot
• [iptables PATCH] nft: Drop stale include directive, Phil Sutter
  • Re: [iptables PATCH] nft: Drop stale include directive, Pablo Neira Ayuso
• [PATCH net 0/2] flow_offload hardware priority fixes, Pablo Neira Ayuso
  • [PATCH net 1/2] net: sched: use major priority number as hardware priority, Pablo Neira Ayuso
  • [PATCH net 2/2,v3] netfilter: nf_tables: map basechain priority to hardware priority, Pablo Neira Ayuso
  • Re: [PATCH net 0/2] flow_offload hardware priority fixes, Jakub Kicinski
    • Re: [PATCH net 0/2] flow_offload hardware priority fixes, Pablo Neira Ayuso
      • Re: [PATCH net 0/2] flow_offload hardware priority fixes, Jakub Kicinski
        • Re: [PATCH net 0/2] flow_offload hardware priority fixes, Pablo Neira Ayuso
          • Re: [PATCH net 0/2] flow_offload hardware priority fixes, Jakub Kicinski
            • Re: [PATCH net 0/2] flow_offload hardware priority fixes, Pablo Neira Ayuso
              • Re: [PATCH net 0/2] flow_offload hardware priority fixes, Jakub Kicinski
                • Re: [PATCH net 0/2] flow_offload hardware priority fixes, Pablo Neira Ayuso
• [PATCH net-next v5 0/6] flow_offload: add indr-block in nf_table_offload, wenxu
  • [PATCH net-next v5 2/6] cls_api: replace block with flow_block in tc_indr_block_dev, wenxu
  • [PATCH net-next v5 4/6] flow_offload: move tc indirect block to flow offload, wenxu
  • [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, wenxu
    • Re: [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, Jakub Kicinski
      • Re: [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, wenxu
        • Re: [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, Jakub Kicinski
      • Re: [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, wenxu
        • Re: [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, wenxu
          • Re: [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, Jakub Kicinski
            • Re: [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, wenxu
              • Re: [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, Jakub Kicinski
                • Re: [PATCH net-next v5 5/6] flow_offload: support get flow_block immediately, wenxu
  • [PATCH net-next 3/6] cls_api: add flow_indr_block_call function, wenxu
    • Re: [PATCH net-next 3/6] cls_api: add flow_indr_block_call function, Jiri Pirko
      • Re: [PATCH net-next 3/6] cls_api: add flow_indr_block_call function, wenxu
  • [PATCH net-next v5 6/6] netfilter: nf_tables_offload: support indr block call, wenxu
    • Re: [PATCH net-next v5 6/6] netfilter: nf_tables_offload: support indr block call, Yunsheng Lin
      • Re: [PATCH net-next v5 6/6] netfilter: nf_tables_offload: support indr block call, wenxu
  • [PATCH net-next v5 1/6] cls_api: modify the tc_indr_block_ing_cmd parameters., wenxu
• [iptables PATCH 0/5] xtables-monitor enhancements, Phil Sutter
  • [iptables PATCH 5/5] xtables-monitor: Add family-specific aliases, Phil Sutter
    • Re: [iptables PATCH 5/5] xtables-monitor: Add family-specific aliases, Phil Sutter
  • [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Phil Sutter
    • Re: [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Pablo Neira Ayuso
      • Re: [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Phil Sutter
        • Re: [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Pablo Neira Ayuso
          • Re: [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Pablo Neira Ayuso
          • Re: [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Phil Sutter
            • Re: [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Pablo Neira Ayuso
              • Re: [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Phil Sutter
                • Re: [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Pablo Neira Ayuso
                  • Re: [iptables PATCH 4/5] xtables-monitor: Support ARP and bridge families, Phil Sutter
  • [iptables PATCH 2/5] doc: Fix xtables-monitor man page, Phil Sutter
  • [iptables PATCH 1/5] doc: Clean generated *-restore-translate man pages, Phil Sutter
  • [iptables PATCH 3/5] xtables-monitor: Improve error messages, Phil Sutter
• [PATCH nf,v2] netfilter: nf_tables: map basechain priority to hardware priority, Pablo Neira Ayuso
  • Re: [PATCH nf,v2] netfilter: nf_tables: map basechain priority to hardware priority, Jakub Kicinski
• [PATCH nft,v2] cache: incorrect flush flag for table/chain, Pablo Neira Ayuso
• [PATCH net-next 0/6] flow_offload: add indr-block in nf_table_offload, wenxu
  • [PATCH net-next 3/6] cls_api: add flow_indr_block_call function, wenxu
  • [PATCH net-next 6/6] netfilter: nf_tables_offload: support indr block call, wenxu
  • [PATCH net-next 2/6] cls_api: replace block with flow_block in tc_indr_block_dev, wenxu
  • [PATCH net-next 4/6] flow_offload: move tc indirect block to flow offload, wenxu
  • [PATCH net-next 1/6] cls_api: modify the tc_indr_block_ing_cmd parameters., wenxu
  • [PATCH net-next 5/6] flow_offload: support get flow_block immediately, wenxu
  • Re: [PATCH net-next 0/6] flow_offload: add indr-block in nf_table_offload, Jiri Pirko
• [FINAL REMINDER!!] LPC 2019 Networking Track CFP, David Miller
• [RFC 0/2] typeof keyword, alternate patch, Florian Westphal
  • [PATCH 1/2] src: store expr, not dtype to track data in sets, Florian Westphal
    • Re: [PATCH 1/2] src: store expr, not dtype to track data in sets, Pablo Neira Ayuso
      • Re: [PATCH 1/2] src: store expr, not dtype to track data in sets, Florian Westphal
  • [PATCH 2/2] typeof keyword, Florian Westphal
• [PATCH nft,RFC,PoC 0/2] typeof support for set / map, Pablo Neira Ayuso
  • [PATCH nft,RFC,PoC 1/2] parser: add typeof keyword for declarations, Pablo Neira Ayuso
  • [PATCH nft,RFC,PoC 2/2] src: restore typeof datatype when listing set definition, Pablo Neira Ayuso
    • Re: [PATCH nft,RFC,PoC 2/2] src: restore typeof datatype when listing set definition, Florian Westphal
      • Re: [PATCH nft,RFC,PoC 2/2] src: restore typeof datatype when listing set definition, Pablo Neira Ayuso
        • Re: [PATCH nft,RFC,PoC 2/2] src: restore typeof datatype when listing set definition, Florian Westphal
• [PATCH nft] src: fix flush chain cache flag, Laura Garcia Liebana
• [PATCH nf 1/2] selftests: netfilter: extend flowtable test script for ipsec, Florian Westphal
  • [PATCH nf 2/2] netfilter: nf_flow_table: fix offload for flows that are subject to xfrm, Florian Westphal
    • Re: [PATCH nf 2/2] netfilter: nf_flow_table: fix offload for flows that are subject to xfrm, Pablo Neira Ayuso
  • Re: [PATCH nf 1/2] selftests: netfilter: extend flowtable test script for ipsec, Pablo Neira Ayuso
• [PATCH nft v2] src: Support maps as left side expressions, Brett Mastbergen
  • Re: [PATCH nft v2] src: Support maps as left side expressions, Pablo Neira Ayuso
    • Re: [PATCH nft v2] src: Support maps as left side expressions, Brett Mastbergen
• [PATCH] bridge:fragmented packets dropped by bridge, Rundong Ge
  • Re: [PATCH] bridge:fragmented packets dropped by bridge, Florian Westphal
    • Re: [PATCH] bridge:fragmented packets dropped by bridge, Rundong Ge
    • Re: [PATCH] bridge:fragmented packets dropped by bridge, Jan Engelhardt
      • Re: [PATCH] bridge:fragmented packets dropped by bridge, Rundong Ge
  • Re: [PATCH] bridge:fragmented packets dropped by bridge, Nikolay Aleksandrov
    • Re: [PATCH] bridge:fragmented packets dropped by bridge, Rundong Ge
    • Re: [PATCH] bridge:fragmented packets dropped by bridge, Rundong Ge
• [PATCH nf-next] netfilter: nft_bitwise: add offload support, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: map basechain priority to hardware priority, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: map basechain priority to hardware priority, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nf_tables: map basechain priority to hardware priority, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: map basechain priority to hardware priority, Marcelo Ricardo Leitner
  • Re: [PATCH nf] netfilter: nf_tables: map basechain priority to hardware priority, Jakub Kicinski
• [PATCH 0/3] ipset patches for the nf tree, Jozsef Kadlecsik
  • [PATCH 1/3] netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too, Jozsef Kadlecsik
  • [PATCH 2/3] netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets, Jozsef Kadlecsik
  • [PATCH 3/3] netfilter: ipset: Fix rename concurrency with listing, Jozsef Kadlecsik
  • Re: [PATCH 0/3] ipset patches for the nf tree, Pablo Neira Ayuso
• [ANNOUNCE] ipset 7.3 released, Jozsef Kadlecsik
• [PATCH nft] src: Support maps as left side expressions, Brett Mastbergen
  • Re: [PATCH nft] src: Support maps as left side expressions, Florian Westphal
• [PATCH] netfilter: nfacct: Fix alignment mismatch in xt_nfacct_match_info, Juliana Rodrigueiro
  • Re: [PATCH] netfilter: nfacct: Fix alignment mismatch in xt_nfacct_match_info, Florian Westphal
• Re: memory leak in bio_copy_user_iov, syzbot
  • Re: memory leak in bio_copy_user_iov, Bob Liu
• [PATCH] netfilter: add include guard to xt_connlabel.h, Masahiro Yamada
  • Re: [PATCH] netfilter: add include guard to xt_connlabel.h, Florian Westphal
  • Re: [PATCH] netfilter: add include guard to xt_connlabel.h, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: add include guard to xt_connlabel.h, Masahiro Yamada
• Re: memory leak in fdb_create, syzbot
  • Re: memory leak in fdb_create, Nikolay Aleksandrov
• [PATCH net-next v4 0/3] flow_offload: add indr-block in nf_table_offload, wenxu
  • [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately, wenxu
    • Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately, Jakub Kicinski
      • Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately, wenxu
        • Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately, Jakub Kicinski
          • Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately, wenxu
            • Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately, Jakub Kicinski
          • Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately, wenxu
            • Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately, Jakub Kicinski
              • Re: [PATCH net-next v4 2/3] flow_offload: Support get default block from tc immediately, wenxu
  • [PATCH net-next v4 3/3] netfilter: nf_tables_offload: support indr block call, wenxu
  • [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload, wenxu
    • Re: [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload, Jiri Pirko
      • Re: [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload, wenxu
        • Re: [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload, Jiri Pirko
    • Re: [PATCH net-next v4 1/3] flow_offload: move tc indirect block to flow offload, Jiri Pirko
• [PATCH net-next v3 0/3] flow_offload: add indr-block in nf_table_offload, wenxu
  • [PATCH net-next v3 2/3] flow_offload: support get tcf block immediately, wenxu
    • Re: [PATCH net-next v3 2/3] flow_offload: support get tcf block immediately, Jakub Kicinski
      • Re: [PATCH net-next v3 2/3] flow_offload: support get tcf block immediately, wenxu
  • [PATCH net-next v3 3/3] netfilter: nf_tables_offload: support indr block call, wenxu
  • [PATCH net-next v3 1/3] flow_offload: move tc indirect block to flow offload, wenxu
    • Re: [PATCH net-next v3 1/3] flow_offload: move tc indirect block to flow offload, Jakub Kicinski
      • Re: [PATCH net-next v3 1/3] flow_offload: move tc indirect block to flow offload, wenxu
• [PATCH iptables v2]: restore legacy behaviour of iptables-restore when rules start with -4/-6, Adel Belhouane
  • Re: [PATCH iptables v2]: restore legacy behaviour of iptables-restore when rules start with -4/-6, Florian Westphal
• [PATCH net-next v2 0/3] flow_offload: add indr-block in nf_table_offload, wenxu
  • [PATCH net-next v2 3/3] netfilter: nf_tables_offload: support indr block call, wenxu
  • [PATCH net-next v2 2/3] flow_offload: Support get tcf block immediately, wenxu
  • [PATCH net-next v2 1/3] flow_offload: move tc indirect block to flow offload, wenxu
    • Re: [PATCH net-next v2 1/3] flow_offload: move tc indirect block to flow offload, Vlad Buslov
• Re: memory leak in dma_buf_ioctl, syzbot
  • Re: memory leak in dma_buf_ioctl, Steven Rostedt
• [iptables PATCH 1/2] nft: Set errno in nft_rule_flush(), Phil Sutter
  • [iptables PATCH 2/2] xtables: Drop support for /etc/xtables.conf, Phil Sutter
    • Re: [iptables PATCH 2/2] xtables: Drop support for /etc/xtables.conf, Pablo Neira Ayuso
  • Re: [iptables PATCH 1/2] nft: Set errno in nft_rule_flush(), Pablo Neira Ayuso
• [PATCH nf-next v2 10/11] netfilter: nft_objref: add nft_objref_type offload, wenxu
  • [PATCH nf-next v2 11/11] netfilter: nft_tunnel: support nft_tunnel_obj offload, wenxu
• [PATCH nf-next v2 00/11] netfilter: nf_tables_offload: support more expr and obj offload, wenxu
  • [PATCH nf-next v2 04/11] netfilter: nft_immediate: add offload support for actions, wenxu
  • [PATCH nf-next v2 01/11] netfilter: nf_flow_offload: add net in offload_ctx, wenxu
  • [PATCH nf-next v2 02/11] netfilter: nf_tables_offload: add offload_actions callback, wenxu
  • [PATCH nf-next v2 07/11] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, wenxu
  • [PATCH nf-next v2 08/11] netfilter: nft_tunnel: support tunnel meta match offload, wenxu
  • [PATCH nf-next v2 09/11] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action, wenxu
  • [PATCH nf-next v2 05/11] netfilter: nft_fwd_netdev: add fw_netdev action support, wenxu
  • [PATCH nf-next v2 06/11] netfilter: nft_payload: add nft_set_payload offload support, wenxu
  • [PATCH nf-next v2 03/11] netfilter: nf_tables_offload: split nft_offload_reg to match and action type, wenxu
    • Re: [PATCH nf-next v2 03/11] netfilter: nf_tables_offload: split nft_offload_reg to match and action type, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 03/11] netfilter: nf_tables_offload: split nft_offload_reg to match and action type, wenxu
• [PATCH nf-next v6 0/8] netfilter: nf_flow_offload: support bridge family offload for both ipv4 and ipv6, wenxu
  • [PATCH nf-next v6 2/8] netfilter:nf_flow_table_core: Separate inet operation to single function, wenxu
  • [PATCH nf-next v6 1/8] netfilter:nf_flow_table: Refactor flow_offload_tuple to destination, wenxu
  • [PATCH nf-next v6 4/8] bridge: add br_vlan_get_info_rcu(), wenxu
  • [PATCH nf-next v6 7/8] netfilter:nft_flow_offload: Support bridge family flow offload, wenxu
  • [PATCH nf-next v6 5/8] netfilter:nf_flow_table_core: Support bridge family flow offload, wenxu
  • [PATCH nf-next v6 6/8] netfilter:nf_flow_table_ip: Support bridge family flow offload, wenxu
  • [PATCH nf-next v6 8/8] netfilter: Support the bridge family in flow table, wenxu
    • Re: [PATCH nf-next v6 8/8] netfilter: Support the bridge family in flow table, wenxu
  • [PATCH nf-next v6 3/8] netfilter:nf_flow_table_ip: Separate inet operation to single function, wenxu
  • Re: [PATCH nf-next v6 0/8] netfilter: nf_flow_offload: support bridge family offload for both ipv4 and ipv6, wenxu
  • Re: [PATCH nf-next v6 0/8] netfilter: nf_flow_offload: support bridge family offload for both ipv4 and ipv6, wenxu
    • Re: [PATCH nf-next v6 0/8] netfilter: nf_flow_offload: support bridge family offload for both ipv4 and ipv6, Pablo Neira Ayuso
• vrf and flowtable problems, Pablo Neira Ayuso
  • Re: vrf and flowtable problems, wenxu
  • Re: vrf and flowtable problems, wenxu
• [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload, wenxu
  • [PATCH net-next 2/3] flow_offload: Support get tcf block immediately, wenxu
    • Re: [PATCH net-next 2/3] flow_offload: Support get tcf block immediately, Florian Westphal
      • Re: [PATCH net-next 2/3] flow_offload: Support get tcf block immediately, wenxu
  • [PATCH net-next 3/3] netfilter: nf_tables_offload: support indr block call, wenxu
  • Re: [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload, Pablo Neira Ayuso
  • Re: [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload, Florian Westphal
    • Re: [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload, wenxu
  • Re: [PATCH net-next 1/3] flow_offload: move tc indirect block to flow offload, Jakub Kicinski
• [PATCH nf-next v2 0/5] sipport nft_tunnel offload, wenxu
  • [PATCH nf-next v2 1/5] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, wenxu
  • [PATCH nf-next v2 5/5] netfilter: nft_tunnel: support nft_tunnel_obj offload, wenxu
  • [PATCH nf-next v2 2/5] netfilter: nft_tunnel: support tunnel meta match offload, wenxu
  • [PATCH nf-next v2 4/5] netfilter: nft_objref: add nft_objref_type offload, wenxu
  • [PATCH nf-next v2 3/5] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action, wenxu
  • Re: [PATCH nf-next v2 0/5] sipport nft_tunnel offload, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2 0/5] sipport nft_tunnel offload, wenxu
  • Re: [PATCH nf-next v2 0/5] sipport nft_tunnel offload, Florian Westphal
• [PATCH nft,v1 1/2] src: add tunnel support, Pablo Neira Ayuso
  • [PATCH nft,v1 2/2] src: add tunnel expression support, Pablo Neira Ayuso
    • Re: [PATCH nft,v1 2/2] src: add tunnel expression support, Jeremy Sowden
• [PATCH nf v2] netfilter: nft_tunnel: Fix don't convert tun id to host endian, wenxu
  • Re: [PATCH nf v2] netfilter: nft_tunnel: Fix don't convert tun id to host endian, Pablo Neira Ayuso
    • Re: [PATCH nf v2] netfilter: nft_tunnel: Fix don't convert tun id to host endian, wenxu
• [PATCH nf-next 0/5] sipport nft_tunnel offload, wenxu
  • [PATCH nf-next 1/5] netfilter: nft_tunnel: support NFT_TUNNEL_SRC/DST_IP match, wenxu
  • [PATCH nf-next 5/5] netfilter: nft_tunnel: support nft_tunnel_obj offload, wenxu
  • [PATCH nf-next 2/5] netfilter: nft_tunnel: support tunnel meta match offload, wenxu
  • [PATCH nf-next 4/5] netfilter: nft_objref: add nft_objref_type offload, wenxu
  • [PATCH nf-next 3/5] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action, wenxu
    • Re: [PATCH nf-next 3/5] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action, Pablo Neira Ayuso
      • Re: [PATCH nf-next 3/5] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action, wenxu
• [PATCH iptables]: restore legacy behaviour of iptables-restore when rules start with -4/-6, Adel Belhouane
  • Re: [PATCH iptables]: restore legacy behaviour of iptables-restore when rules start with -4/-6, Phil Sutter
    • Re: [PATCH iptables]: restore legacy behaviour of iptables-restore when rules start with -4/-6, Florian Westphal
    • Re: [PATCH iptables]: restore legacy behaviour of iptables-restore when rules start with -4/-6, Adel Belhouane
• [PATCH] netfilter: trivial: remove extraneous space from message, Rui Salvaterra
  • Re: [PATCH] netfilter: trivial: remove extraneous space from message, Rui Salvaterra
• [PATCH nf] netfilter: nft_tunnel: Fix convert tunnel id to host endian, wenxu
  • Re: [PATCH nf] netfilter: nft_tunnel: Fix convert tunnel id to host endian, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nft_tunnel: Fix convert tunnel id to host endian, wenxu
• [PATCH iptables v2] nfnl_osf: fix snprintf -Wformat-truncation warning, Fernando Fernandez Mancera
  • Re: [PATCH iptables v2] nfnl_osf: fix snprintf -Wformat-truncation warning, Pablo Neira Ayuso
• [PATCH nft] src: Sync comments with current expr definition, Brett Mastbergen
  • Re: [PATCH nft] src: Sync comments with current expr definition, Pablo Neira Ayuso
• [iptables PATCH 1/2] doc: Install nft-variant man pages only if enabled, Phil Sutter
  • [iptables PATCH 2/2] doc: Install ip{6,}tables-restore-translate.8 man pages, Phil Sutter
• Re: ct state vmap (nft noob question), Neal P. Murphy
• [PATCH nft] cache: add NFT_CACHE_UPDATE and NFT_CACHE_FLUSHED flags, Pablo Neira Ayuso
• [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust, Phil Sutter
  • [PATCH v3 2/2] net: netfilter: nft_meta_bridge: Eliminate 'out' label, Phil Sutter
    • Re: [PATCH v3 2/2] net: netfilter: nft_meta_bridge: Eliminate 'out' label, Pablo Neira Ayuso
  • Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
    • Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust, Florian Westphal
      • Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust, Florian Westphal
      • Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
  • Re: [PATCH v3 1/2] net: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
• [nft PATCH v2 0/2] parser_bison: Get rid of (most) bison compiler warnings, Phil Sutter
  • [nft PATCH v2 2/2] src: Call bison with -Wno-yacc to silence warnings, Phil Sutter
  • [nft PATCH v2 1/2] parser_bison: Fix for deprecated statements, Phil Sutter
  • Re: [nft PATCH v2 0/2] parser_bison: Get rid of (most) bison compiler warnings, Pablo Neira Ayuso
    • Re: [nft PATCH v2 0/2] parser_bison: Get rid of (most) bison compiler warnings, Phil Sutter
      • Re: [nft PATCH v2 0/2] parser_bison: Get rid of (most) bison compiler warnings, Pablo Neira Ayuso
        • Re: [nft PATCH v2 0/2] parser_bison: Get rid of (most) bison compiler warnings, Phil Sutter
• [PATCH nf-next 0/7] netfilter: nf_tables_offload: support more actions, wenxu
  • [PATCH nf-next 2/7] netfilter: nf_tables_offload: add offload_actions callback, wenxu
    • Re: [PATCH nf-next 2/7] netfilter: nf_tables_offload: add offload_actions callback, Pablo Neira Ayuso
      • Re: [PATCH nf-next 2/7] netfilter: nf_tables_offload: add offload_actions callback, wenxu
  • [PATCH nf-next 3/7] netfilter: nft_table_offload: Add rtnl for chain and rule operations, wenxu
    • Re: [PATCH nf-next 3/7] netfilter: nft_table_offload: Add rtnl for chain and rule operations, Pablo Neira Ayuso
      • Re: [PATCH nf-next 3/7] netfilter: nft_table_offload: Add rtnl for chain and rule operations, Florian Westphal
        • Re: [PATCH nf-next 3/7] netfilter: nft_table_offload: Add rtnl for chain and rule operations, wenxu
  • [PATCH nf-next 4/7] netfilter: nf_tables_offload: split nft_offload_reg to match and action type, wenxu
  • [PATCH nf-next 7/7] netfilter: nft_payload: add nft_set_payload offload support, wenxu
  • [PATCH nf-next 5/7] netfilter: nft_immediate: add offload support for actions, wenxu
  • [PATCH nf-next 1/7] netfilter: nf_flow_offload: add net in offload_ctx, wenxu
  • [PATCH nf-next 6/7] netfilter: nft_fwd_netdev: add fw_netdev action support, wenxu
• [PATCH net-next] netfilter: conntrack: use shared sysctl constants, Matteo Croce
  • Re: [PATCH net-next] netfilter: conntrack: use shared sysctl constants, Matteo Croce
  • Re: [PATCH net-next] netfilter: conntrack: use shared sysctl constants, Pablo Neira Ayuso
• nftables feature request: modify set element timeout, Fran Fitzpatrick
  • Re: nftables feature request: modify set element timeout, Laura Garcia
    • Re: nftables feature request: modify set element timeout, Fran Fitzpatrick
      • Re: nftables feature request: modify set element timeout, Laura Garcia
• [PATCH 0/2 nft v2] Introduce variables in chain priority and policy, Fernando Fernandez Mancera
  • [PATCH 1/2 nft v2] src: allow variables in the chain priority specification, Fernando Fernandez Mancera
  • [PATCH 2/2 nft v2] src: allow variable in chain policy, Fernando Fernandez Mancera
• [PATCH nft v3] src: osf: fix snprintf -Wformat-truncation warning, Fernando Fernandez Mancera
  • Re: [PATCH nft v3] src: osf: fix snprintf -Wformat-truncation warning, Florian Westphal
• memleak when using "nft -f", Fernando Fernandez Mancera
  • Re: memleak when using "nft -f", Fernando Fernandez Mancera
  • Re: memleak when using "nft -f", Phil Sutter
• [PATCH 0/2 nft] Introduce variables in chain priority and policy, Fernando Fernandez Mancera
  • [PATCH 1/2 nft] src: allow variables in the chain priority specification, Fernando Fernandez Mancera
    • Re: [PATCH 1/2 nft] src: allow variables in the chain priority specification, Pablo Neira Ayuso
      • Re: [PATCH 1/2 nft] src: allow variables in the chain priority specification, Fernando Fernandez Mancera
  • [PATCH 2/2 nft] src: allow variable in chain policy, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft] src: allow variable in chain policy, Pablo Neira Ayuso
      • Re: [PATCH 2/2 nft] src: allow variable in chain policy, Fernando Fernandez Mancera
• [PATCH nft] evaluate: missing location for chain nested in table definition, Pablo Neira Ayuso
  • Re: [PATCH nft] evaluate: missing location for chain nested in table definition, Florian Westphal
• [PATCH] [v2 net-next] ipvs: reduce kernel stack usage, Arnd Bergmann
  • Re: [PATCH] [v2 net-next] ipvs: reduce kernel stack usage, Julian Anastasov
• [iptables PATCH v2 00/11] Larger xtables-save review, Phil Sutter
  • [iptables PATCH v2 04/11] xtables-save: Fix table compatibility check, Phil Sutter
  • [iptables PATCH v2 08/11] xtables-save: Make COMMIT line optional, Phil Sutter
  • [iptables PATCH v2 01/11] ebtables: Fix error message for invalid parameters, Phil Sutter
  • [iptables PATCH v2 07/11] xtables-save: Pass optstring/longopts to xtables_save_main(), Phil Sutter
  • [iptables PATCH v2 02/11] ebtables-save: Fix counter formatting, Phil Sutter
  • [iptables PATCH v2 11/11] ebtables-save: Merge into xtables_save_main(), Phil Sutter
  • [iptables PATCH v2 03/11] xtables-save: Unify *-save header/footer comments, Phil Sutter
  • [iptables PATCH v2 10/11] arptables-save: Merge into xtables_save_main(), Phil Sutter
  • [iptables PATCH v2 06/11] xtables-save: Avoid mixed code and declarations, Phil Sutter
  • [iptables PATCH v2 09/11] xtables-save: Pass format flags to do_output(), Phil Sutter
  • [iptables PATCH v2 05/11] nft: Make nft_for_each_table() more versatile, Phil Sutter
  • Re: [iptables PATCH v2 00/11] Larger xtables-save review, Florian Westphal
  • Re: [iptables PATCH v2 00/11] Larger xtables-save review, Pablo Neira Ayuso
• [PATCH nft v2] src: evaluate: support prefix expression in statements, Florian Westphal
  • Re: [PATCH nft v2] src: evaluate: support prefix expression in statements, Pablo Neira Ayuso
    • Re: [PATCH nft v2] src: evaluate: support prefix expression in statements, Florian Westphal
• [PATCH iptables] nfnl_osf: fix snprintf -Wformat-truncation warning, Fernando Fernandez Mancera
  • Re: [PATCH iptables] nfnl_osf: fix snprintf -Wformat-truncation warning, Pablo Neira Ayuso
    • Re: [PATCH iptables] nfnl_osf: fix snprintf -Wformat-truncation warning, Fernando Fernandez Mancera
• [PATCH nft v2] src: osf: fix snprintf -Wformat-truncation warning, Fernando Fernandez Mancera
• [PATCH nft] src: evaluate: support prefix expression in statements, Florian Westphal
  • Re: [PATCH nft] src: evaluate: support prefix expression in statements, Pablo Neira Ayuso
• [PATCH nft] doc: fib: explain example in more detail, Florian Westphal
  • Re: [PATCH nft] doc: fib: explain example in more detail, Jones Desougi
  • Re: [PATCH nft] doc: fib: explain example in more detail, Pablo Neira Ayuso
    • Re: [PATCH nft] doc: fib: explain example in more detail, Florian Westphal
      • Re: [PATCH nft] doc: fib: explain example in more detail, Phil Sutter
        • Re: [PATCH nft] doc: fib: explain example in more detail, Florian Westphal
          • Re: [PATCH nft] doc: fib: explain example in more detail, Phil Sutter
            • Re: [PATCH nft] doc: fib: explain example in more detail, Florian Westphal
              • Re: [PATCH nft] doc: fib: explain example in more detail, Phil Sutter
                • Re: [PATCH nft] doc: fib: explain example in more detail, Florian Westphal
                  • Re: [PATCH nft] doc: fib: explain example in more detail, Phil Sutter
                • Re: [PATCH nft] doc: fib: explain example in more detail, Pablo Neira Ayuso
      • Re: [PATCH nft] doc: fib: explain example in more detail, Pablo Neira Ayuso
        • Re: [PATCH nft] doc: fib: explain example in more detail, Florian Westphal
  • Re: [PATCH nft] doc: fib: explain example in more detail, Pablo Neira Ayuso
• [PATCH nft] scanner: don't rely on fseek for input stream repositioning, Florian Westphal
  • Re: [PATCH nft] scanner: don't rely on fseek for input stream repositioning, Pablo Neira Ayuso
• [PATCH nft 0/3] fix crash bug during rule restore, Florian Westphal
  • [PATCH nft 1/3] src: erec: fall back to internal location if its null, Florian Westphal
    • Re: [PATCH nft 1/3] src: erec: fall back to internal location if its null, Pablo Neira Ayuso
      • Re: [PATCH nft 1/3] src: erec: fall back to internal location if its null, Florian Westphal
    • Re: [PATCH nft 1/3] src: erec: fall back to internal location if its null, Pablo Neira Ayuso
  • [PATCH nft 2/3] src: evaluate: don't rely on global chain ctx for error reporting, Florian Westphal
  • [PATCH nft 3/3] src: evaluate: return immediately if no op was requested, Florian Westphal
    • Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested, Pablo Neira Ayuso
      • Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested, Florian Westphal
        • Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested, Pablo Neira Ayuso
          • Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested, Phil Sutter
            • Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested, Pablo Neira Ayuso
    • Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested, Pablo Neira Ayuso
      • Re: [PATCH nft 3/3] src: evaluate: return immediately if no op was requested, Florian Westphal
• [nft PATCH 1/2] parser_bison: Get rid of (most) bison compiler warnings, Phil Sutter
  • [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings, Phil Sutter
    • Re: [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings, Florian Westphal
      • Re: [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings, Phil Sutter
    • Re: [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings, Fernando Fernandez Mancera
      • Re: [nft PATCH 2/2] nfnl_osf: Silence string truncation gcc warnings, Phil Sutter
  • Re: [nft PATCH 1/2] parser_bison: Get rid of (most) bison compiler warnings, Florian Westphal
    • Re: [nft PATCH 1/2] parser_bison: Get rid of (most) bison compiler warnings, Phil Sutter
• [iptables PATCH 00/12] Larger xtables-save review, Phil Sutter
  • [iptables PATCH 05/12] xtables-save: Fix table compatibility check, Phil Sutter
  • [iptables PATCH 09/12] xtables-save: Make COMMIT line optional, Phil Sutter
    • Re: [iptables PATCH 09/12] xtables-save: Make COMMIT line optional, Florian Westphal
      • Re: [iptables PATCH 09/12] xtables-save: Make COMMIT line optional, Phil Sutter
        • Re: [iptables PATCH 09/12] xtables-save: Make COMMIT line optional, Florian Westphal
          • Re: [iptables PATCH 09/12] xtables-save: Make COMMIT line optional, Phil Sutter
  • [iptables PATCH 03/12] xtables-save: Use argv[0] as program name, Phil Sutter
    • Re: [iptables PATCH 03/12] xtables-save: Use argv[0] as program name, Phil Sutter
      • Re: [iptables PATCH 03/12] xtables-save: Use argv[0] as program name, Pablo Neira Ayuso
  • [iptables PATCH 06/12] nft: Make nft_for_each_table() more versatile, Phil Sutter
  • [iptables PATCH 11/12] arptables-save: Merge into xtables_save_main(), Phil Sutter
  • [iptables PATCH 07/12] xtables-save: Avoid mixed code and declarations, Phil Sutter
  • [iptables PATCH 10/12] xtables-save: Pass format flags to do_output(), Phil Sutter
  • [iptables PATCH 01/12] ebtables: Fix error message for invalid parameters, Phil Sutter
  • [iptables PATCH 08/12] xtables-save: Pass optstring/longopts to xtables_save_main(), Phil Sutter
  • [iptables PATCH 04/12] xtables-save: Unify *-save header/footer comments, Phil Sutter
  • [iptables PATCH 02/12] ebtables-save: Fix counter formatting, Phil Sutter
  • [iptables PATCH 12/12] ebtables-save: Merge into xtables_save_main(), Phil Sutter
  • Re: [iptables PATCH 00/12] Larger xtables-save review, Florian Westphal
  • Re: [iptables PATCH 00/12] Larger xtables-save review, Pablo Neira Ayuso
• [PATCH] netfilter: ebtables: compat: fix a memory leak bug, Wenwen Wang
  • Re: [PATCH] netfilter: ebtables: compat: fix a memory leak bug, Florian Westphal
  • Re: [PATCH] netfilter: ebtables: compat: fix a memory leak bug, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: ebtables: compat: fix a memory leak bug, Liam R. Howlett
    • Re: [PATCH] netfilter: ebtables: compat: fix a memory leak bug, Wenwen Wang
• [PATCH 10/14] netfilter: nf_tables: Support auto-loading for inet nat, Pablo Neira Ayuso
  • [PATCH 11/14] netfilter: synproxy: fix rst sequence number mismatch, Pablo Neira Ayuso
  • [PATCH 12/14] netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a module, Pablo Neira Ayuso
  • [PATCH 13/14] netfilter: bridge: NF_CONNTRACK_BRIDGE does not depend on NF_TABLES_BRIDGE, Pablo Neira Ayuso
  • [PATCH 14/14] netfilter: bridge: make NF_TABLES_BRIDGE tristate, Pablo Neira Ayuso
• [PATCH nf,v5 0/4] flow_offload fixes, Pablo Neira Ayuso
  • [PATCH nf,v5 1/4] net: openvswitch: rename flow_stats to sw_flow_stats, Pablo Neira Ayuso
  • [PATCH nf,v5 2/4] net: flow_offload: remove netns parameter from flow_block_cb_alloc(), Pablo Neira Ayuso
  • [PATCH nf,v5 3/4] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t, Pablo Neira Ayuso
  • [PATCH nf,v5 4/4] net: flow_offload: add flow_block structure and use it, Pablo Neira Ayuso
  • Re: [PATCH nf,v5 0/4] flow_offload fixes, David Miller
• [PATCH nft] src: allow variables in the chain priority specification, Fernando Fernandez Mancera
• [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust, Phil Sutter
  • [PATCH 2/2] net: netfilter: nft_meta_bridge: Eliminate 'out' label, Phil Sutter
  • Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
    • Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust, Phil Sutter
      • Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
        • Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust, Phil Sutter
          • Re: [nf PATCH v2 1/2] net: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrackd: cthelper: Add new SLP helper, Michal Kubecek
  • Re: [PATCH conntrack-tools] conntrackd: cthelper: Add new SLP helper, Pablo Neira Ayuso
• [PATCH nf 1/2] netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a module, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: bridge: NF_CONNTRACK_BRIDGE does not depend on NF_TABLES_BRIDGE, Pablo Neira Ayuso
• [PATCH net,v4 0/4] flow_offload fixes, Pablo Neira Ayuso
  • [PATCH net,v4 1/4] net: openvswitch: rename flow_stats to sw_flow_stats, Pablo Neira Ayuso
    • Re: [PATCH net,v4 1/4] net: openvswitch: rename flow_stats to sw_flow_stats, Jiri Pirko
  • [PATCH net,v4 2/4] net: flow_offload: remove netns parameter from flow_block_cb_alloc(), Pablo Neira Ayuso
  • [PATCH net,v4 3/4] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t, Pablo Neira Ayuso
  • [PATCH net,v4 4/4] net: flow_offload: add flow_block structure and use it, Pablo Neira Ayuso
    • Re: [PATCH net,v4 4/4] net: flow_offload: add flow_block structure and use it, Jiri Pirko
  • Re: [PATCH net,v4 0/4] flow_offload fixes, David Miller
    • Re: [PATCH net,v4 0/4] flow_offload fixes, David Miller
• [nft PATCH] json: Fix memleak in timeout_policy_json(), Phil Sutter
  • Re: [nft PATCH] json: Fix memleak in timeout_policy_json(), Pablo Neira Ayuso
• [iptables PATCH] xtables-save: Use argv[0] as program name, Phil Sutter
  • Re: [iptables PATCH] xtables-save: Use argv[0] as program name, Pablo Neira Ayuso
    • Re: [iptables PATCH] xtables-save: Use argv[0] as program name, Phil Sutter
      • Re: [iptables PATCH] xtables-save: Use argv[0] as program name, Pablo Neira Ayuso
• [PATCH nft] src: osf: fix snprintf -Wformat-truncation warning, Fernando Fernandez Mancera
  • Re: [PATCH nft] src: osf: fix snprintf -Wformat-truncation warning, Phil Sutter
    • Re: [PATCH nft] src: osf: fix snprintf -Wformat-truncation warning, Fernando Fernandez Mancera
      • Re: [PATCH nft] src: osf: fix snprintf -Wformat-truncation warning, Phil Sutter
• [RFC net] net: generate icmp redirects after netfilter forward hook, Florian Westphal
• [PATCH nft] include: json: add missing synproxy stmt print stub, Fernando Fernandez Mancera
  • Re: [PATCH nft] include: json: add missing synproxy stmt print stub, Pablo Neira Ayuso
    • Re: [PATCH nft] include: json: add missing synproxy stmt print stub, Fernando Fernandez Mancera
• userspace conntrack helper and confirming the master conntrack, Michal Kubecek
  • Re: userspace conntrack helper and confirming the master conntrack, Florian Westphal
    • Re: userspace conntrack helper and confirming the master conntrack, Michal Kubecek
      • Re: userspace conntrack helper and confirming the master conntrack, Pablo Neira Ayuso
        • Re: userspace conntrack helper and confirming the master conntrack, Michal Kubecek
          • Re: userspace conntrack helper and confirming the master conntrack, Pablo Neira Ayuso
            • Re: userspace conntrack helper and confirming the master conntrack, Michal Kubecek
              • Re: userspace conntrack helper and confirming the master conntrack, Jacob Rasmussen
                • Re: userspace conntrack helper and confirming the master conntrack, Florian Westphal
                  • [PATCH nf] netfilter: make conntrack userspace helpers work again, Florian Westphal
                  • Re: userspace conntrack helper and confirming the master conntrack, Michal Kubecek
• [PATCH v2] netfilter: nft_dynset: support for element deletion, Ander Juaristi
  • Re: [PATCH v2] netfilter: nft_dynset: support for element deletion, Florian Westphal
• [nft PATCH 1/3] meta: Reject zero ifindex values, Phil Sutter
  • [nft PATCH 2/3] meta: Reject nfproto value 0xffff, Phil Sutter
  • [nft PATCH 3/3] tests/py: Add missing meta tests, Phil Sutter
• [libnftnl PATCH] expr: meta: Make NFT_META_{I,O}IFKIND known, Phil Sutter
  • Re: [libnftnl PATCH] expr: meta: Make NFT_META_{I,O}IFKIND known, Pablo Neira Ayuso
• [nf PATCH] net: nf_tables: Make nft_meta expression more robust, Phil Sutter
  • Re: [nf PATCH] net: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
    • Re: [nf PATCH] net: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
• [PATCH net,v3 1/4] net: openvswitch: rename flow_stats to sw_flow_stats, Pablo Neira Ayuso
  • [PATCH net,v3 2/4] net: flow_offload: remove netns parameter from flow_block_cb_alloc(), Pablo Neira Ayuso
  • [PATCH net,v3 3/4] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t, Pablo Neira Ayuso
  • [PATCH net,v3 4/4] net: flow_offload: add flow_block structure and use it, Pablo Neira Ayuso
  • Re: [PATCH net,v3 1/4] net: openvswitch: rename flow_stats to sw_flow_stats, David Miller
• [nf PATCH] net: nf_tables: Support auto-loading for inet nat, Phil Sutter
  • Re: [nf PATCH] net: nf_tables: Support auto-loading for inet nat, Pablo Neira Ayuso
• [nf PATCH RFC] net: nf_tables: Support auto-loading inet family nat chain, Phil Sutter
  • Re: [nf PATCH RFC] net: nf_tables: Support auto-loading inet family nat chain, Pablo Neira Ayuso
    • Re: [nf PATCH RFC] net: nf_tables: Support auto-loading inet family nat chain, Phil Sutter
• [PATCH 1/2 nft] src: json: fix synproxy flag parser typo, Fernando Fernandez Mancera
  • [PATCH 2/2 nft] tests: py: add missing json outputs, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft] tests: py: add missing json outputs, Pablo Neira Ayuso
  • Re: [PATCH 1/2 nft] src: json: fix synproxy flag parser typo, Pablo Neira Ayuso
• [PATCH nft] evaluate: missing basic evaluation of expectations, Pablo Neira Ayuso
• rebasing nf.git, Pablo Neira Ayuso
• json_cmd_assoc and cmd, Pablo Neira Ayuso
  • Re: json_cmd_assoc and cmd, Phil Sutter
    • Re: json_cmd_assoc and cmd, Pablo Neira Ayuso
      • Re: json_cmd_assoc and cmd, Jeremy Sowden
        • Re: json_cmd_assoc and cmd, Phil Sutter
        • Re: json_cmd_assoc and cmd, Pablo Neira Ayuso
          • Re: json_cmd_assoc and cmd, Jeremy Sowden
          • [PATCH nft] libnftables: got rid of repeated initialization of netlink_ctx variable in loop., Jeremy Sowden
            • Re: [PATCH nft] libnftables: got rid of repeated initialization of netlink_ctx variable in loop., Phil Sutter
              • [PATCH nft v2 0/2] netlink_ctx initialization fixes., Jeremy Sowden
                • [PATCH nft v2 1/2] libnftables: got rid of repeated initialization of netlink_ctx variable in loop., Jeremy Sowden
                  • Re: [PATCH nft v2 1/2] libnftables: got rid of repeated initialization of netlink_ctx variable in loop., Phil Sutter
                • [PATCH nft v2 2/2] rule: removed duplicate member initializer., Jeremy Sowden
                  • Re: [PATCH nft v2 2/2] rule: removed duplicate member initializer., Phil Sutter
                • Re: [PATCH nft v2 0/2] netlink_ctx initialization fixes., Pablo Neira Ayuso
• [PATCH nft,v2] evaluate: bogus error when refering to existing non-base chain, Pablo Neira Ayuso
• [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Pablo Neira Ayuso
  • Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Phil Sutter
    • Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Fernando Fernandez Mancera
      • Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Florian Westphal
        • Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Pablo Neira Ayuso
          • Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Pablo Neira Ayuso
            • Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Florian Westphal
              • Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Fernando Fernandez Mancera
          • Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Fernando Fernandez Mancera
  • Re: [PATCH nft] evaluate: bogus error when refering to existing non-base chain, Phil Sutter
• [PATCH nft 1/5] src: add set_is_datamap(), set_is_objmap() and set_is_map() helpers, Pablo Neira Ayuso
  • [PATCH nft 4/5] evaluate: honor NFT_SET_OBJECT flag, Pablo Neira Ayuso
  • [PATCH nft 3/5] src: use set_is_anonymous(), Pablo Neira Ayuso
  • [PATCH nft 2/5] evaluate: missing object maps handling in list and flush commands, Pablo Neira Ayuso
  • [PATCH nft 5/5] cache: incorrect cache flags for create commands, Pablo Neira Ayuso
• [PATCH 0/2 nft WIP] Using variables in chain priority, Fernando Fernandez Mancera
  • [PATCH 1/2 nft WIP] src: introduce prio_expr in chain priority, Fernando Fernandez Mancera
    • Re: [PATCH 1/2 nft WIP] src: introduce prio_expr in chain priority, Pablo Neira Ayuso
      • Re: [PATCH 1/2 nft WIP] src: introduce prio_expr in chain priority, Fernando Fernandez Mancera
  • [PATCH 2/2 nft WIP] src: allow variables in chain priority, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft WIP] src: allow variables in chain priority, Pablo Neira Ayuso
• [PATCH nf-next v5 0/8] netfilter: nf_flow_offload: support bridge family offload for both, wenxu
  • [PATCH nf-next v5 4/8] bridge: add br_vlan_get_info_rcu(), wenxu
  • [PATCH nf-next v5 3/8] netfilter:nf_flow_table_ip: Separate inet operation to single function, wenxu
  • [PATCH nf-next v5 1/8] netfilter:nf_flow_table: Refactor flow_offload_tuple to destination, wenxu
  • [PATCH nf-next v5 8/8] netfilter: Support the bridge family in flow table, wenxu
  • [PATCH nf-next v5 7/8] netfilter:nft_flow_offload: Support bridge family flow offload, wenxu
  • [PATCH nf-next v5 5/8] netfilter:nf_flow_table_core: Support bridge family flow offload, wenxu
  • [PATCH nf-next v5 6/8] netfilter:nf_flow_table_ip: Support bridge family flow offload, wenxu
  • [PATCH nf-next v5 2/8] netfilter:nf_flow_table_core: Separate inet operation to single function, wenxu
  • Re: [PATCH nf-next v5 0/8] netfilter: nf_flow_offload: support bridge family offload for both, Florian Westphal
    • Pre-patch of nftables for nft_tunnel, wenxu
• [PATCH nf v3] netfilter: synproxy: fix rst sequence number mismatch, Fernando Fernandez Mancera
  • Re: [PATCH nf v3] netfilter: synproxy: fix rst sequence number mismatch, Pablo Neira Ayuso
• Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload), Laura Garcia
  • Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload), Pablo Neira Ayuso
    • Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload), Masahiro Yamada
      • Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload), Pablo Neira Ayuso
        • Re: linux-next: Tree for Jul 15 (HEADERS_TEST w/ netfilter tables offload), Masahiro Yamada
• [PATCHv2] Fix dumping vlan rules, michael-dev
  • Re: [PATCHv2] Fix dumping vlan rules, Pablo Neira Ayuso
    • Re: [PATCHv2] Fix dumping vlan rules, michael-dev
      • Re: [PATCHv2] Fix dumping vlan rules, Pablo Neira Ayuso
• [PATCH libiptc] libip6tc.h: Add extern "C" wrapping for C++ linking., Chris PeBenito
  • Re: [PATCH libiptc] libip6tc.h: Add extern "C" wrapping for C++ linking., Pablo Neira Ayuso
• [PATCH AUTOSEL 5.2 080/249] netfilter: ipset: fix a missing check of nla_parse, Sasha Levin
• [PATCH AUTOSEL 5.2 081/249] ipset: Fix memory accounting for hash types on resize, Sasha Levin
• [PATCH AUTOSEL 5.2 174/249] netfilter: ctnetlink: Fix regression in conntrack entry deletion, Sasha Levin
• [PATCH AUTOSEL 5.1 070/219] ipset: Fix memory accounting for hash types on resize, Sasha Levin
• [PATCH AUTOSEL 5.1 143/219] ipvs: fix tinfo memory leak in start_sync_thread, Sasha Levin
• [PATCH AUTOSEL 5.1 183/219] netfilter: Fix remainder of pseudo-header protocol 0, Sasha Levin
• [PATCH AUTOSEL 4.19 091/158] ipvs: defer hook registration to avoid leaks, Sasha Levin
• [PATCH AUTOSEL 4.19 107/158] ipvs: fix tinfo memory leak in start_sync_thread, Sasha Levin
• [PATCH AUTOSEL 4.14 039/105] ipset: Fix memory accounting for hash types on resize, Sasha Levin
• [PATCH net] ipvs: Improve robustness to the ipvs sysctl, hujunwei
  • Re: [PATCH net] ipvs: Improve robustness to the ipvs sysctl, Florian Westphal
    • Re: [PATCH net] ipvs: Improve robustness to the ipvs sysctl, hujunwei
    • Re: [PATCH net] ipvs: Improve robustness to the ipvs sysctl, Julian Anastasov
      • Re: [PATCH net] ipvs: Improve robustness to the ipvs sysctl, hujunwei
  • [PATCH net v2] ipvs: Improve robustness to the ipvs sysctl, hujunwei
    • Re: [PATCH net v2] ipvs: Improve robustness to the ipvs sysctl, Julian Anastasov
      • Re: [PATCH net v2] ipvs: Improve robustness to the ipvs sysctl, hujunwei
    • [PATCH net v3] ipvs: Improve robustness to the ipvs sysctl, hujunwei
      • Re: [PATCH net v3] ipvs: Improve robustness to the ipvs sysctl, Julian Anastasov
        • Re: [PATCH net v3] ipvs: Improve robustness to the ipvs sysctl, Pablo Neira Ayuso
• [PATCH AUTOSEL 4.14 060/105] ipvs: defer hook registration to avoid leaks, Sasha Levin
• [PATCH AUTOSEL 4.14 075/105] ipvs: fix tinfo memory leak in start_sync_thread, Sasha Levin
• [PATCH AUTOSEL 4.19 051/158] ipset: Fix memory accounting for hash types on resize, Sasha Levin
• [PATCH AUTOSEL 5.1 153/219] netfilter: ctnetlink: Fix regression in conntrack entry deletion, Sasha Levin
• [PATCH AUTOSEL 5.1 125/219] ipvs: defer hook registration to avoid leaks, Sasha Levin
• [PATCH AUTOSEL 5.2 210/249] netfilter: Fix remainder of pseudo-header protocol 0, Sasha Levin
• [PATCH AUTOSEL 5.2 161/249] ipvs: fix tinfo memory leak in start_sync_thread, Sasha Levin
• [PATCH AUTOSEL 5.2 143/249] ipvs: defer hook registration to avoid leaks, Sasha Levin
• [PATCH nf] netfilter: fix symhash with modulus one, Laura Garcia Liebana
  • Re: [PATCH nf] netfilter: fix symhash with modulus one, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrackd: use correct max unix path length, Michal Kubecek
  • Re: [PATCH conntrack-tools] conntrackd: use correct max unix path length, Pablo Neira Ayuso
• [ANNOUNCE] New Netfilter core team member: Phil Sutter, Arturo Borrero Gonzalez
• [PATCH xtables] nft: exit in case we can't fetch current genid, Florian Westphal
  • Re: [PATCH xtables] nft: exit in case we can't fetch current genid, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: don't fail when updating base chain policy, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: don't fail when updating base chain policy, Pablo Neira Ayuso
• Re: [PATCH] Fix dumping vlan rules, Laura Garcia
  • <Possible follow-ups>
  • Re: [PATCH] Fix dumping vlan rules, Florian Westphal
• [sparc64] nft bus error, Anatoly Pugachev
  • Message not available
    • Re: [sparc64] nft bus error, Anatoly Pugachev
• [PATCH nft] proto: add pseudo th protocol to match d/sport in generic way, Florian Westphal
  • Re: [PATCH nft] proto: add pseudo th protocol to match d/sport in generic way, Pablo Neira Ayuso
• [PATCH] netfilter: support for element deletion, Ander Juaristi
  • Re: [PATCH] netfilter: support for element deletion, Florian Westphal
• [PATCH] netfilter: nft_dynset: support for element deletion, Ander Juaristi
  • Re: [PATCH] netfilter: nft_dynset: support for element deletion, Florian Westphal
    • Re: [PATCH] netfilter: nft_dynset: support for element deletion, Ander Juaristi
      • Re: [PATCH] netfilter: nft_dynset: support for element deletion, Florian Westphal
  • Re: [PATCH] netfilter: nft_dynset: support for element deletion, kbuild test robot
• [net-next 0/2] ipvs: speedup ipvs netns dismantle, Haishuang Yan
  • [net-next 1/2] ipvs: batch __ip_vs_cleanup, Haishuang Yan
    • Re: [net-next 1/2] ipvs: batch __ip_vs_cleanup, Julian Anastasov
      • Re: [net-next 1/2] ipvs: batch __ip_vs_cleanup, Haishuang Yan
        • Re: [net-next 1/2] ipvs: batch __ip_vs_cleanup, Julian Anastasov
  • [net-next 2/2] ipvs: batch __ip_vs_dev_cleanup, Haishuang Yan
• LPC 2019 Networking Track CFP (reminder), David Miller
• [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch, Fernando Fernandez Mancera
  • Re: [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch, Florian Westphal
    • Re: [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch, Fernando Fernandez Mancera
      • Re: [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch, Fernando Fernandez Mancera
        • Re: [PATCH nf v2] netfilter: synproxy: fix rst sequence number mismatch, Florian Westphal
• [PATCH nft] src/ct: provide fixed data lengh sizes for ip/ip6 keys, Florian Westphal
  • Re: [PATCH nft] src/ct: provide fixed data lengh sizes for ip/ip6 keys, Pablo Neira Ayuso
    • Re: [PATCH nft] src/ct: provide fixed data lengh sizes for ip/ip6 keys, Florian Westphal
• [PATCH nf-next] netfilter: synproxy: fix rst sequence number mismatch, Fernando Fernandez Mancera
• [PATCH nf] netfilter: conntrack: always store window size un-scaled, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: always store window size un-scaled, Jozsef Kadlecsik
    • Re: [PATCH nf] netfilter: conntrack: always store window size un-scaled, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: conntrack: always store window size un-scaled, Reindl Harald
  • Re: [PATCH nf] netfilter: conntrack: always store window size un-scaled, Thomas Jarosch
• [PATCH net-next,v2 1/3] net: flow_offload: remove netns parameter from flow_block_cb_alloc(), Pablo Neira Ayuso
  • [PATCH net-next,v2 2/3] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t, Pablo Neira Ayuso
    • Re: [PATCH net-next,v2 2/3] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t, kbuild test robot
  • [PATCH net-next,v2 3/3] net: flow_offload: add flow_block structure and use it, Pablo Neira Ayuso
    • Re: [PATCH net-next,v2 3/3] net: flow_offload: add flow_block structure and use it, Jiri Pirko
• [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload, wenxu
  • Re: [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload, Marcelo Ricardo Leitner
    • Re: [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload, wenxu
      • Re: [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload, Marcelo Ricardo Leitner
        • Re: [PATCH net-next] netfilter: nf_table_offload: Fix zero prio of flow_cls_common_offload, wenxu
• [PATCH net-next 1/3] net: flow_offload: remove netns parameter from flow_block_cb_alloc(), Pablo Neira Ayuso
  • [PATCH net-next 2/3] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t, Pablo Neira Ayuso
    • Re: [PATCH net-next 2/3] net: flow_offload: rename tc_setup_cb_t to flow_setup_cb_t, Jiri Pirko
  • [PATCH net-next 3/3] net: flow_offload: add flow_block structure and use it, Pablo Neira Ayuso
    • Re: [PATCH net-next 3/3] net: flow_offload: add flow_block structure and use it, Jiri Pirko
      • Re: [PATCH net-next 3/3] net: flow_offload: add flow_block structure and use it, Pablo Neira Ayuso
        • Re: [PATCH net-next 3/3] net: flow_offload: add flow_block structure and use it, Jiri Pirko
  • Re: [PATCH net-next 1/3] net: flow_offload: remove netns parameter from flow_block_cb_alloc(), Jiri Pirko
• [PATCH 1/1] netfilter: nf_tables: fix module autoload for redir, Christian Hesse
  • Re: [PATCH 1/1] netfilter: nf_tables: fix module autoload for redir, Pablo Neira Ayuso
• [PATCH net-next] net/sched: Fix kernel NULL pointer dereference, wenxu
  • Re: [PATCH net-next] net/sched: Fix kernel NULL pointer dereference, Pablo Neira Ayuso
    • Re: [PATCH net-next] net/sched: Fix kernel NULL pointer dereference, Pablo Neira Ayuso
• [PATCH] ipv6: Use ipv6_authlen for len, yangxingwu
  • Re: [PATCH] ipv6: Use ipv6_authlen for len, David Miller
• Re: 3-way handshake sets conntrack timeout to max_retrans, Jozsef Kadlecsik
  • Re: 3-way handshake sets conntrack timeout to max_retrans, Jakub Jankowski
    • Re: 3-way handshake sets conntrack timeout to max_retrans, Jozsef Kadlecsik
      • Re: 3-way handshake sets conntrack timeout to max_retrans, Jakub Jankowski
        • Re: 3-way handshake sets conntrack timeout to max_retrans, Florian Westphal
          • Re: 3-way handshake sets conntrack timeout to max_retrans, Jakub Jankowski
• [PATCH 0/2 nf-next] Fix mss value announced to the client, Fernando Fernandez Mancera
  • [PATCH 1/2 nf-next] netfilter: synproxy: fix erroneous tcp mss option, Fernando Fernandez Mancera
    • Re: [PATCH 1/2 nf-next] netfilter: synproxy: fix erroneous tcp mss option, Pablo Neira Ayuso
  • [PATCH 2/2 nf-next] netfilter: synproxy: rename mss synproxy_options field, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nf-next] netfilter: synproxy: rename mss synproxy_options field, Pablo Neira Ayuso
      • Re: [PATCH 2/2 nf-next] netfilter: synproxy: rename mss synproxy_options field, Pablo Neira Ayuso
• [PATCH] [net-next] netfilter: bridge: make NF_TABLES_BRIDGE tristate, Arnd Bergmann