Linux Netfilter / IP Tables Devel

• Date Index

• [nft PATCH 2/2] tests/py: Support JSON validation, (continued)
  • [nft PATCH 2/2] tests/py: Support JSON validation, Phil Sutter
  • [nft PATCH 1/2] py: Implement JSON validation in nftables module, Phil Sutter
• [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
  • [PATCH nft v3 2/2] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
  • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Pablo Neira Ayuso
    • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
      • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Pablo Neira Ayuso
      • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
        • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
          • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Pablo Neira Ayuso
            • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Phil Sutter
• [PATCH nft] src: update cache if cmd is more specific, Eric Garver
• [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_fib: Fix existence check support, Phil Sutter
  • Re: [PATCH nf] netfilter: nft_fib: Fix existence check support, Pablo Neira Ayuso
• [PATCH 1/2 nft v2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
  • [PATCH 2/2 nft v2] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
• [PATCH] ipvs: Fix use-after-free in ip_vs_in, YueHaibing
  • Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in, Julian Anastasov
  • Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in, Julian Anastasov
    • Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in, YueHaibing
    • [PATCH v2] ipvs: Fix use-after-free in ip_vs_in, YueHaibing
      • Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in, Julian Anastasov
        • Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in, Simon Horman
      • Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in, Pablo Neira Ayuso
• [PATCH nft] tests: py: fix python3., Shekhar Sharma
  • Re: [PATCH nft] tests: py: fix python3., Eric Garver
  • <Possible follow-ups>
  • [PATCH nft] tests: py: fix python3., Shekhar Sharma
    • Re: [PATCH nft] tests: py: fix python3., Eric Garver
• [PATCH v2] selftests: netfilter: missing error check when setting up veth interface, Jeffrin Jose T
  • Re: [PATCH v2] selftests: netfilter: missing error check when setting up veth interface, Pablo Neira Ayuso
    • Re: [PATCH v2] selftests: netfilter: missing error check when setting up veth interface, Jeffrin Thalakkottoor
• [PATCH 1/2 nft] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
  • [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Pablo Neira Ayuso
    • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
      • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
      • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
        • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Pablo Neira Ayuso
          • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
            • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Pablo Neira Ayuso
              • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
                • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
                  • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
                    • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
                      • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Pablo Neira Ayuso
                        • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
  • Re: [PATCH 1/2 nft] jump: Introduce chain_expr in jump and goto statements, Pablo Neira Ayuso
• [PATCH 1/2 nft WIP v2] jump: Introduce chain_expr in jump statements, Fernando Fernandez Mancera
  • [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
      • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Phil Sutter
        • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
          • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Phil Sutter
            • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
• [PATCH iptables] man: refer to iptables-translate and ip6tables, Pablo Neira Ayuso
• [iptables PATCH] tests: Fix ipt-restore/0004-restore-race_0 testcase, Phil Sutter
  • Re: [iptables PATCH] tests: Fix ipt-restore/0004-restore-race_0 testcase, Pablo Neira Ayuso
• [iptables PATCH] xtables: Fix typo in nft_rebuild_cache(), Phil Sutter
  • Re: [iptables PATCH] xtables: Fix typo in nft_rebuild_cache(), Phil Sutter
• [PATCH net v3] netfilter: nf_queue:fix reinject verdict handling, Jagdish Motwani
  • Re: [PATCH net v3] netfilter: nf_queue:fix reinject verdict handling, Pablo Neira Ayuso
• [PATCH net v2] netfilter: nf_queue:fix reinject verdict handling, Jagdish Motwani
• [iptables PATCH] xtables: Don't leak iter in error path of __nft_chain_zero_counters(), Phil Sutter
  • Re: [iptables PATCH] xtables: Don't leak iter in error path of __nft_chain_zero_counters(), Pablo Neira Ayuso
• [libnftnl PATCH] include: Remove redundant declaration of nftnl_gen_nlmsg_parse(), Phil Sutter
  • Re: [libnftnl PATCH] include: Remove redundant declaration of nftnl_gen_nlmsg_parse(), Pablo Neira Ayuso
• [iptables PATCH] xtables: Fix for explicit rule flushes, Phil Sutter
• [PATCH nf] netfilter: nf_tables: incorrect definition for NFT_LOGLEVEL_MAX, Pablo Neira Ayuso
• [PATCH nft] src: use definitions in include/linux/netfilter/nf_tables.h, Pablo Neira Ayuso
  • Re: [PATCH nft] src: use definitions in include/linux/netfilter/nf_tables.h, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value, Pablo Neira Ayuso
• Undefined reference?, Stéphane Veyret
  • Re: Undefined reference?, Florian Westphal
    • Re: Undefined reference?, Stéphane Veyret
      • Re: Undefined reference?, Fernando Fernandez Mancera
        • Re: Undefined reference?, Stéphane Veyret
      • Re: Undefined reference?, Jan Engelhardt
        • Re: Undefined reference?, Stéphane Veyret
• [ebtables PATCH] Fix incorrect IPv6 prefix formatting, Phil Sutter
  • Re: [ebtables PATCH] Fix incorrect IPv6 prefix formatting, Pablo Neira Ayuso
• [PATCH libnftnl,v1 1/2] src: add ct expectation support, Stéphane Veyret
  • [PATCH libnftnl,v1 2/2] examples: add ct expectation examples, Stéphane Veyret
• [PATCH nft v2] py: fix missing decode/encode of strings, Eric Garver
  • Re: [PATCH nft v2] py: fix missing decode/encode of strings, Phil Sutter
  • Re: [PATCH nft v2] py: fix missing decode/encode of strings, Pablo Neira Ayuso
• [PATCH v3] extensions: libxt_owner: Add supplementary groups option, Lukasz Pawelczyk
• [PATCH v3] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
  • Re: [PATCH v3] netfilter: xt_owner: Add supplementary groups option, Pablo Neira Ayuso
• linux-next: manual merge of the netfilter tree with Linus' tree, Stephen Rothwell
• [conntrack-tools PATCH] sync-mode: Also cancel flush timer in ALL_FLUSH_CACHE, Simon Kirby
  • Re: [conntrack-tools PATCH] sync-mode: Also cancel flush timer in ALL_FLUSH_CACHE, Pablo Neira Ayuso
• [PATCH net-next,RFC 0/2] netfilter: add hardware offload infrastructure, Pablo Neira Ayuso
  • [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API, Pablo Neira Ayuso
    • Re: [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API, Jiri Pirko
      • Re: [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API, Pablo Neira Ayuso
  • [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Pablo Neira Ayuso
    • Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Jiri Pirko
      • Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Pablo Neira Ayuso
        • Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Pablo Neira Ayuso
          • Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Jiri Pirko
  • Re: [PATCH net-next,RFC 0/2] netfilter: add hardware offload infrastructure, Jakub Kicinski
• [nft PATCH 0/9] Testsuite-indicated fixes for JSON, Phil Sutter
  • [nft PATCH 2/9] parser_json: Fix igmp support, Phil Sutter
  • [nft PATCH 9/9] tests/py: Fix JSON expected output for icmpv6 code values, Phil Sutter
  • [nft PATCH 3/9] netlink: Fix printing of zero-length prefixes, Phil Sutter
  • [nft PATCH 5/9] json: Fix tproxy support regarding latest changes, Phil Sutter
  • [nft PATCH 4/9] tests/py: Fix JSON equivalents of osf tests, Phil Sutter
  • [nft PATCH 1/9] json: Support nat in inet family, Phil Sutter
  • [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le", Phil Sutter
    • Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le", Pablo Neira Ayuso
      • Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le", Pablo Neira Ayuso
        • Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le", Phil Sutter
  • [nft PATCH 8/9] tests/py: Fix JSON expexted output after expr merge change, Phil Sutter
  • [nft PATCH 6/9] parser_json: Fix ct timeout object support, Phil Sutter
  • Re: [nft PATCH 0/9] Testsuite-indicated fixes for JSON, Pablo Neira Ayuso
• [PATCH nft WIP] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
  • Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files, Pablo Neira Ayuso
    • Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
      • Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files, Pablo Neira Ayuso
• [PATCH net] netfilter: nf_queue:fix reinject verdict handling, Jagdish Motwani
  • Re: [PATCH net] netfilter: nf_queue:fix reinject verdict handling, Pablo Neira Ayuso
    • RE: [PATCH net] netfilter: nf_queue:fix reinject verdict handling, Jagdish Motwani
      • Re: [PATCH net] netfilter: nf_queue:fix reinject verdict handling, Pablo Neira Ayuso
• [PATCH v2] extensions: libxt_owner: Add supplementary groups option, Lukasz Pawelczyk
• [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
  • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Eric Dumazet
    • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
      • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Eric Dumazet
        • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
          • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Eric Dumazet
            • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
              • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Jan Engelhardt
              • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Eric Dumazet
                • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
• [PATCH nf] netfilter: nf_tables: remove NFT_CT_TIMEOUT, Pablo Neira Ayuso
• [nft PATCH] doc: Review man page synopses, Phil Sutter
• [nft PATCH] py: Fix gitignore of lib/ directory, Phil Sutter
• [PATCH AUTOSEL 5.0 64/99] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook(), Sasha Levin
• [PATCH AUTOSEL 5.0 63/99] netfilter: ctnetlink: don't use conntrack/expect object addresses as id, Sasha Levin
• [PATCH AUTOSEL 5.0 62/99] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
• [PATCH AUTOSEL 5.0 65/99] netfilter: nat: fix icmp id randomization, Sasha Levin
• [PATCH AUTOSEL 5.0 75/99] netfilter: fix nf_l4proto_log_invalid to log invalid packets, Sasha Levin
• [PATCH AUTOSEL 5.0 74/99] netfilter: never get/set skb->tstamp, Sasha Levin
• [PATCH AUTOSEL 4.19 46/81] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook(), Sasha Levin
• [PATCH AUTOSEL 4.19 45/81] netfilter: ctnetlink: don't use conntrack/expect object addresses as id, Sasha Levin
• [PATCH AUTOSEL 4.19 44/81] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
• [PATCH AUTOSEL 4.19 52/81] netfilter: fix nf_l4proto_log_invalid to log invalid packets, Sasha Levin
• [PATCH AUTOSEL 4.19 71/81] netfilter: nf_tables: add missing ->release_ops() in error path of newrule(), Sasha Levin
• [PATCH AUTOSEL 4.19 70/81] netfilter: nf_tables: use-after-free in dynamic operations, Sasha Levin
• [PATCH AUTOSEL 4.14 24/95] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
• [PATCH AUTOSEL 4.14 25/95] netfilter: ctnetlink: don't use conntrack/expect object addresses as id, Sasha Levin
• [PATCH AUTOSEL 4.14 81/95] netfilter: nf_tables: warn when expr implements only one of activate/deactivate, Sasha Levin
• [PATCH AUTOSEL 4.9 17/25] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
• [PATCH AUTOSEL 4.4 11/14] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
• Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach, hujunwei
  • Re: Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach, Julian Anastasov
    • Re: Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach, hujunwei
• [PATCH nft v2] evaluate: force full cache update on rule index translation, Eric Garver
  • Re: [PATCH nft v2] evaluate: force full cache update on rule index translation, Eric Garver
• linux-next: Fixes tag needs some work in the netfilter tree, Stephen Rothwell
  • <Possible follow-ups>
  • linux-next: Fixes tag needs some work in the netfilter tree, Stephen Rothwell
  • linux-next: Fixes tag needs some work in the netfilter tree, Stephen Rothwell
  • linux-next: Fixes tag needs some work in the netfilter tree, Stephen Rothwell
    • Re: linux-next: Fixes tag needs some work in the netfilter tree, Jozsef Kadlecsik
• [PATCH libmnl 1/1] examples: Add rtnl-addr-add.c, Petr Vorel
  • Re: [PATCH libmnl 1/1] examples: Add rtnl-addr-add.c, Pablo Neira Ayuso
• [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule, Florian Westphal
  • Re: [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule, Pablo Neira Ayuso
• [PATCHv2 net-next 0/3] Add UDP tunnel support for ICMP errors in IPVS, Julian Anastasov
  • [PATCHv2 net-next 3/3] ipvs: strip udp tunnel headers from icmp errors, Julian Anastasov
  • [PATCHv2 net-next 2/3] ipvs: add function to find tunnels, Julian Anastasov
  • [PATCHv2 net-next 1/3] ipvs: allow rs_table to contain different real server types, Julian Anastasov
  • Re: [PATCHv2 net-next 0/3] Add UDP tunnel support for ICMP errors in IPVS, Simon Horman
    • Re: [PATCHv2 net-next 0/3] Add UDP tunnel support for ICMP errors in IPVS, Pablo Neira Ayuso
• [PATCH] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
  • Re: [PATCH] netfilter: nft_ct: add ct expectations support, Jeremy Sowden
    • Re: [PATCH] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
  • <Possible follow-ups>
  • [PATCH] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
    • Re: [PATCH] netfilter: nft_ct: add ct expectations support, Florian Westphal
    • Re: [PATCH] netfilter: nft_ct: add ct expectations support, Pablo Neira Ayuso
      • [PATCH nf-next,v2] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
      • Re: [PATCH] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
        • Re: [PATCH] netfilter: nft_ct: add ct expectations support, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
            • Re: [PATCH] netfilter: nft_ct: add ct expectations support, Pablo Neira Ayuso
• [PATCH] gmputil.h: Add missing header for va_list, Rosen Penev
  • Re: [PATCH] gmputil.h: Add missing header for va_list, Pablo Neira Ayuso
• [PATCH nf v2] netfilter: nf_conntrack_h323: Remove deprecated config check, Subash Abhinov Kasiviswanathan
  • Re: [PATCH nf v2] netfilter: nf_conntrack_h323: Remove deprecated config check, Florian Westphal
  • Re: [PATCH nf v2] netfilter: nf_conntrack_h323: Remove deprecated config check, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack] conntrack: api: use libmnl API to build the netlink headers, Pablo Neira Ayuso
• [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Kristian Evensen
  • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Nicolas Dichtel
    • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Kristian Evensen
  • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Nicolas Dichtel
      • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Nicolas Dichtel
          • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Pablo Neira Ayuso
            • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Nicolas Dichtel
              • Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Greg KH
• [PATCH iptables] extensions: SYNPROXY: should not be needed anymore on current kernels, Florian Westphal
• [PATCH nf] netfilter: nf_conntrack_h323: Remove deprecated config check, Subash Abhinov Kasiviswanathan
  • Re: [PATCH nf] netfilter: nf_conntrack_h323: Remove deprecated config check, Florian Westphal
    • Re: [PATCH nf] netfilter: nf_conntrack_h323: Remove deprecated config check, Florian Westphal
• [PATCH nf] netfilter: nf_flow_table: fix missing err check for rhashtable_insert_fast, Taehee Yoo
  • Re: [PATCH nf] netfilter: nf_flow_table: fix missing err check for rhashtable_insert_fast, Pablo Neira Ayuso
• [PATCH nft] parser_json: default to unspecified l3proto for ct helper/timeout, Eric Garver
  • Re: [PATCH nft] parser_json: default to unspecified l3proto for ct helper/timeout, Phil Sutter
  • Re: [PATCH nft] parser_json: default to unspecified l3proto for ct helper/timeout, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack 4/3] src: replace old libnfnetlink builder, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack 1/3] src: introduce abi_breakage(), Pablo Neira Ayuso
  • [PATCH libnetfilter_conntrack 2/3] expect: add missing handling for CTA_EXPECT_* attributes, Pablo Neira Ayuso
  • [PATCH libnetfilter_conntrack 3/3] src: replace old libnfnetlink parser, Pablo Neira Ayuso
• [PATCH][next] netfilter: xt_hashlimit: use struct_size() helper, Gustavo A. R. Silva
  • Re: [PATCH][next] netfilter: xt_hashlimit: use struct_size() helper, Pablo Neira Ayuso
• [PATCH nft] evaluate: force full cache update on rule index translation, Eric Garver
  • Re: [PATCH nft] evaluate: force full cache update on rule index translation, Pablo Neira Ayuso
    • Re: [PATCH nft] evaluate: force full cache update on rule index translation, Eric Garver
• [PATCH nft] py: fix missing decode/encode of strings, Eric Garver
  • Re: [PATCH nft] py: fix missing decode/encode of strings, Phil Sutter
    • Re: [PATCH nft] py: fix missing decode/encode of strings, Eric Garver
• [PATCH nft] parser_json: fix crash on add rule to bad references, Eric Garver
  • Re: [PATCH nft] parser_json: fix crash on add rule to bad references, Phil Sutter
  • Re: [PATCH nft] parser_json: fix crash on add rule to bad references, Pablo Neira Ayuso
• [PATCH nft] parser_json: fix off by one index on rule add/replace, Eric Garver
  • Re: [PATCH nft] parser_json: fix off by one index on rule add/replace, Phil Sutter
  • Re: [PATCH nft] parser_json: fix off by one index on rule add/replace, Pablo Neira Ayuso
• [nftables,v2] proto: support for draft-ietf-tsvwg-le-phb-10.txt, Loganaden Velvindron
  • Re: [nftables,v2] proto: support for draft-ietf-tsvwg-le-phb-10.txt, Pablo Neira Ayuso
• Debian 9 vs Xtables-addons 3.3 and GeoLite2, Patrick Adam
• Problem in libnetfilter_conntrack library, Mojtaba
• [PATCH v3 nf] netfilter: nf_flow_table: do not use deleted CT's flow offload, Taehee Yoo
  • Re: [PATCH v3 nf] netfilter: nf_flow_table: do not use deleted CT's flow offload, Pablo Neira Ayuso
    • Re: [PATCH v3 nf] netfilter: nf_flow_table: do not use deleted CT's flow offload, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix oops during rule dump, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: fix oops during rule dump, Taehee Yoo
  • Re: [PATCH nf] netfilter: nf_tables: fix oops during rule dump, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix base chain stat rcu_dereference usage, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: fix base chain stat rcu_dereference usage, Pablo Neira Ayuso
• [PATCH iptables,v2] xshared: check for maximum buffer length in add_param_to_argv(), Pablo Neira Ayuso
• Re: [PATCH] selftests : netfilter: Wrote a error and exit code for a command which needed veth kernel module., Pablo Neira Ayuso
• [PATCH 0/9 net-next,v2] connection tracking support for bridge, Pablo Neira Ayuso
  • [PATCH 2/9 net-next,v2] net: ipv6: add skbuff fraglist splitter, Pablo Neira Ayuso
  • [PATCH 8/9 net-next,v2] netfilter: nf_conntrack_bridge: add support for IPv6, Pablo Neira Ayuso
  • [PATCH 9/9 net-next,v2] netfilter: nf_conntrack_bridge: register inet conntrack for bridge, Pablo Neira Ayuso
  • [PATCH 7/9 net-next,v2] netfilter: bridge: add connection tracking system, Pablo Neira Ayuso
    • Re: [PATCH 7/9 net-next,v2] netfilter: bridge: add connection tracking system, Nikolay Aleksandrov
  • [PATCH 3/9 net-next,v2] net: ipv4: split skbuff into fragments transformer, Pablo Neira Ayuso
  • [PATCH 5/9 net-next,v2] net: ipv4: place cb handling away from fragmentation iterators, Pablo Neira Ayuso
  • [PATCH 4/9 net-next,v2] net: ipv6: split skbuff into fragments transformer, Pablo Neira Ayuso
  • [PATCH 6/9 net-next,v2] netfilter: nf_conntrack: allow to register bridge support, Pablo Neira Ayuso
  • [PATCH 1/9 net-next,v2] net: ipv4: add skbuff fraglist splitter, Pablo Neira Ayuso
• [PATCH nf v2 3/3] netfilter: nf_flow_table: do not use deleted CT's flow offload, Taehee Yoo
  • Re: [PATCH nf v2 3/3] netfilter: nf_flow_table: do not use deleted CT's flow offload, Pablo Neira Ayuso
    • Re: [PATCH nf v2 3/3] netfilter: nf_flow_table: do not use deleted CT's flow offload, Taehee Yoo
• [PATCH nf v2 2/3] netfilter: nf_flow_table: check ttl value in flow offload data path, Taehee Yoo
• [PATCH nf v2 1/3] netfilter: nf_flow_table: fix netdev refcnt leak, Taehee Yoo
• [PATCH nf v2 0/3] netfilter: nf_flow_table: fix several flowtable bugs, Taehee Yoo
  • Re: [PATCH nf v2 0/3] netfilter: nf_flow_table: fix several flowtable bugs, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_flow_offload: add entry to flowtable after confirmation, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_flow_offload: add entry to flowtable after confirmation, Pablo Neira Ayuso
• Netlink socket protocol NETLINK_NFLOG, Vijay Pasapuleti
• [PATCH][nf-next] netfilter: slightly optimize nf_inet_addr_mask, Li RongQing
  • Re: [PATCH][nf-next] netfilter: slightly optimize nf_inet_addr_mask, Pablo Neira Ayuso
• Netfilter fixes for 4.19 -stable, Pablo Neira Ayuso
  • Re: Netfilter fixes for 4.19 -stable, Sasha Levin
• [PATCH nf 4/4] netfilter: nf_flow_table: do not use deleted CT's flow offload, Taehee Yoo
  • Re: [PATCH nf 4/4] netfilter: nf_flow_table: do not use deleted CT's flow offload, Pablo Neira Ayuso
    • Re: [PATCH nf 4/4] netfilter: nf_flow_table: do not use deleted CT's flow offload, Taehee Yoo
• [PATCH nf 3/4] netfilter: nf_flow_table: check ttl value in flow offload data path, Taehee Yoo
• [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session., Taehee Yoo
  • Re: [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session., Pablo Neira Ayuso
    • Re: [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session., Taehee Yoo
      • Re: [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session., Pablo Neira Ayuso
        • Re: [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session., Taehee Yoo
• [PATCH nf 1/4] netfilter: nf_flow_table: fix netdev refcnt leak, Taehee Yoo
• [PATCH nf 0/4] netfilter: nf_flow_table: fix several flowtable bugs, Taehee Yoo
• [PATCH] extensions: libxt_owner: Add complementary groups option, Lukasz Pawelczyk
  • Re: [PATCH] extensions: libxt_owner: Add complementary groups option, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_owner: Add complementary groups option, Lukasz Pawelczyk
      • Re: [PATCH] extensions: libxt_owner: Add complementary groups option, Florian Westphal
• [PATCH] netfilter: xt_owner: Add complementary groups option, Lukasz Pawelczyk
• [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Michal Kubecek
  • [PATCH net-next 3/3] net: fix two coding style issues, Michal Kubecek
  • [PATCH net-next 2/3] ipset: drop ipset_nest_start() and ipset_nest_end(), Michal Kubecek
    • Re: [PATCH net-next 2/3] ipset: drop ipset_nest_start() and ipset_nest_end(), Jozsef Kadlecsik
  • [PATCH net-next 1/3] netlink: make nla_nest_start() add NLA_F_NESTED flag, Michal Kubecek
    • Re: [PATCH net-next 1/3] netlink: make nla_nest_start() add NLA_F_NESTED flag, Jiri Pirko
    • Re: [PATCH net-next 1/3] netlink: make nla_nest_start() add NLA_F_NESTED flag, David Ahern
  • Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Johannes Berg
    • Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Michal Kubecek
      • Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Johannes Berg
        • Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Michal Kubecek
          • Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Johannes Berg
            • Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, David Ahern
              • Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Johannes Berg
                • Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Michal Kubecek
  • Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, David Miller
• [PATCH ulogd2,v2 1/2] IPFIX: Add IPFIX output plugin, a
  • [PATCH ulogd2,v2 2/2] IPFIX: Introduce template record support, a
    • Re: [PATCH ulogd2,v2 2/2] IPFIX: Introduce template record support, Pablo Neira Ayuso
  • Re: [PATCH ulogd2,v2 1/2] IPFIX: Add IPFIX output plugin, Pablo Neira Ayuso
• [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter, Pablo Neira Ayuso
  • [PATCH net-next,RFC 5/9] net: sched: add release callback to struct tcf_block_cb, Pablo Neira Ayuso
  • [PATCH net-next,RFC 9/9] net: cls_api: do not expose tcf_block to drivers, Pablo Neira Ayuso
  • [PATCH net-next,RFC 8/9] net: cls_api: do not expose tcf_block to drivers, Pablo Neira Ayuso
  • [PATCH net-next,RFC 7/9] net: use tcf_block_setup() infrastructure, Pablo Neira Ayuso
    • Re: [PATCH net-next,RFC 7/9] net: use tcf_block_setup() infrastructure, Jiri Pirko
      • Re: [PATCH net-next,RFC 7/9] net: use tcf_block_setup() infrastructure, Pablo Neira Ayuso
  • [PATCH net-next,RFC 4/9] net: sched: add tcf_block_setup(), Pablo Neira Ayuso
  • [PATCH net-next,RFC 8/9] net: sched: remove tcf_block_cb_{register,unregister}(), Pablo Neira Ayuso
  • [PATCH net-next,RFC 6/9] net: sched: add tcf_setup_block_offload(), Pablo Neira Ayuso
  • [PATCH net-next,RFC 3/9] net: sched: add tcf_block_cb_free(), Pablo Neira Ayuso
  • [PATCH net-next,RFC 1/9] net: sched: move tcf_block_cb before indr_block, Pablo Neira Ayuso
  • [PATCH net-next,RFC 2/9] net: sched: add tcf_block_cb_alloc(), Pablo Neira Ayuso
  • Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter, Jiri Pirko
    • Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter, Pablo Neira Ayuso
      • Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter, Jakub Kicinski
        • Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter, Pablo Neira Ayuso
          • Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter, Jakub Kicinski
            • Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter, Pablo Neira Ayuso
              • Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter, Pablo Neira Ayuso
• [PATCH net] netfilter: nf_ct_h323: restore boundary check correctness, Jakub Jankowski
  • Re: [PATCH net] netfilter: nf_ct_h323: restore boundary check correctness, Pablo Neira Ayuso
• [nft PATCH RFC 0/2] JSON schema for nftables.py, Phil Sutter
  • [nft PATCH RFC 1/2] py: Implement JSON validation in nftables module, Phil Sutter
  • [nft PATCH RFC 2/2] tests/py: Support JSON validation, Phil Sutter
  • Re: [nft PATCH RFC 0/2] JSON schema for nftables.py, Eric Garver
    • Re: [nft PATCH RFC 0/2] JSON schema for nftables.py, Phil Sutter
• [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake, linmiaohe
  • Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake, David Ahern
  • Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake, Pablo Neira Ayuso
    • Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake, linmiaohe
  • 答复: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake, linmiaohe
  • Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake, Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake, linmiaohe
    • Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake, Pablo Neira Ayuso
  • Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake, linmiaohe
• [nft PATCH 0/4] Misc minor fixes, Phil Sutter
  • [nft PATCH 4/4] parser_json: Fix parser for list maps command, Phil Sutter
  • [nft PATCH 2/4] tests/py: Fix error messages in chain_delete(), Phil Sutter
  • [nft PATCH 3/4] parser_json: Fix typo in ct timeout policy parser, Phil Sutter
  • [nft PATCH 1/4] tests: monitor: Adjust to changed events ordering, Phil Sutter
  • Re: [nft PATCH 0/4] Misc minor fixes, Pablo Neira Ayuso
• [nft PATCH] use UDATA defines from libnftnl, Phil Sutter
  • Re: [nft PATCH] use UDATA defines from libnftnl, Pablo Neira Ayuso
• Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba Esfandiari
  • <Possible follow-ups>
  • Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba
    • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba
      • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Pablo Neira Ayuso
        • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba
        • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba
          • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Pablo Neira Ayuso
            • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba
              • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba
                • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Pablo Neira Ayuso
                  • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba
                    • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba
                      • Re: Issue related to conntrack while insert new rule with conntrack command in linux, Mojtaba
• [RFC PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Michal Kubecek
  • [RFC PATCH net-next 1/3] netlink: make nla_nest_start() add NLA_F_NESTED flag, Michal Kubecek
  • [RFC PATCH net-next 3/3] net: fix two coding style issues, Michal Kubecek
  • [RFC PATCH net-next 2/3] ipset: drop ipset_nest_start() and ipset_nest_end(), Michal Kubecek
  • Re: [RFC PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag, Jiri Pirko
• [PATCH v2] netfilter: nft_ct: Add ct id support, Brett Mastbergen
  • Re: [PATCH v2] netfilter: nft_ct: Add ct id support, Florian Westphal
  • Re: [PATCH v2] netfilter: nft_ct: Add ct id support, Pablo Neira Ayuso
• [PATCH v2] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake, linmiaohe
  • Re: [PATCH v2] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake, David Ahern
    • Re: [PATCH v2] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake, linmiaohe
• [PATCH] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake, linmiaohe
  • Re: [PATCH] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake, Florian Westphal
    • Re: [PATCH] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake, linmiaohe
• [PATCH nft] ct: Add support for the 'id' key, Brett Mastbergen
  • Re: [PATCH nft] ct: Add support for the 'id' key, Florian Westphal
    • Re: [PATCH nft] ct: Add support for the 'id' key, Brett Mastbergen
  • <Possible follow-ups>
  • [PATCH nft] ct: Add support for the 'id' key, Brett Mastbergen
    • Re: [PATCH nft] ct: Add support for the 'id' key, Pablo Neira Ayuso
• [PATCH libnftnl] src: Add ct id support, Brett Mastbergen
• [PATCH] netfilter: nft_ct: Add ct id support, Brett Mastbergen
  • Re: [PATCH] netfilter: nft_ct: Add ct id support, Florian Westphal
• [PATCH xtables-nft 0/6] handle parallel restore case, Florian Westphal
  • [PATCH xtables-nft 1/6] xtables: unify user chain add/flush for restore case, Florian Westphal
  • [PATCH xtables-nft 2/6] xtables: add skip flag to objects, Florian Westphal
  • [PATCH xtables-nft 3/6] xtables: add and use nft_build_cache, Florian Westphal
  • [PATCH xtables-nft 4/6] xtables: add and set "implict" flag on transaction objects, Florian Westphal
  • [PATCH xtables-nft 5/6] xtables: handle concurrent ruleset modifications, Florian Westphal
  • [PATCH xtables-nft 6/6] tests: add test script for race-free restore, Florian Westphal
  • Re: [PATCH xtables-nft 0/6] handle parallel restore case, Pablo Neira Ayuso
• [PATCH nft] src: fix double free on xt stmt destruction, Florian Westphal
  • Re: [PATCH nft] src: fix double free on xt stmt destruction, Pablo Neira Ayuso
• [PATCH iptables] xshared: check for maximum buffer length in dd_param_to_argv(), Pablo Neira Ayuso
• [PATCH AUTOSEL 5.0 16/98] netfilter: nft_set_rbtree: check for inactive element after flag mismatch, Sasha Levin
• [PATCH AUTOSEL 5.0 17/98] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING, Sasha Levin
• [PATCH AUTOSEL 5.0 19/98] netfilter: ip6t_srh: fix NULL pointer dereferences, Sasha Levin
• [PATCH AUTOSEL 5.0 20/98] netfilter: nf_tables: bogus EBUSY in helper removal from transaction, Sasha Levin
• [PATCH AUTOSEL 5.0 18/98] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies, Sasha Levin
• [PATCH AUTOSEL 4.19 10/68] netfilter: nft_set_rbtree: check for inactive element after flag mismatch, Sasha Levin
• [PATCH AUTOSEL 4.19 11/68] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING, Sasha Levin
• [PATCH AUTOSEL 4.19 12/68] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies, Sasha Levin
• [PATCH AUTOSEL 4.14 04/43] netfilter: nft_set_rbtree: check for inactive element after flag mismatch, Sasha Levin
• [PATCH AUTOSEL 4.14 05/43] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING, Sasha Levin
• [PATCH AUTOSEL 4.9 05/29] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING, Sasha Levin
• [PATCH AUTOSEL 4.9 04/29] netfilter: nft_set_rbtree: check for inactive element after flag mismatch, Sasha Levin
• [PATCH AUTOSEL 4.4 02/21] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING, Sasha Levin
• [PATCH AUTOSEL 4.19 13/68] netfilter: ip6t_srh: fix NULL pointer dereferences, Sasha Levin
• [PATCH v2 61/79] docs: leds: convert to ReST, Mauro Carvalho Chehab
  • Re: [PATCH v2 61/79] docs: leds: convert to ReST, Jacek Anaszewski
• Re: [PATCH v2] ipvs:set sock send/receive buffer correctly, Julian Anastasov
  • Re: [PATCH v2] ipvs:set sock send/receive buffer correctly, linmiaohe
• standalone fuzzing tool to debug net/netfilter, Reindl Harald
• [PATCH] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking", Colin King
  • Re: [PATCH] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking", Mukesh Ojha
  • Re: [PATCH] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking", Pablo Neira Ayuso
• [tip:core/rcu] net/ipv4/netfilter: Update comment from call_rcu_bh() to call_rcu(), tip-bot for Paul E. McKenney
• [PATCH] netfilter: fix nf_l4proto_log_invalid to log invalid packets, Andrei Vagin
  • Re: [PATCH] netfilter: fix nf_l4proto_log_invalid to log invalid packets, Florian Westphal
  • Re: [PATCH] netfilter: fix nf_l4proto_log_invalid to log invalid packets, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: fix nf_l4proto_log_invalid to log invalid packets, Dexuan-Linux Cui
• [PATCH net-next v3 0/4] openvswitch: load and reference the NAT helper, Flavio Leitner
  • [PATCH net-next v3 1/4] netfilter: use macros to create module aliases., Flavio Leitner
  • [PATCH net-next v3 2/4] netfilter: add API to manage NAT helpers., Flavio Leitner
  • [PATCH net-next v3 3/4] netfilter: nf_nat: register NAT helpers., Flavio Leitner
  • [PATCH net-next v3 4/4] openvswitch: load and reference the NAT helper., Flavio Leitner
  • Re: [PATCH net-next v3 0/4] openvswitch: load and reference the NAT helper, David Miller
    • Re: [PATCH net-next v3 0/4] openvswitch: load and reference the NAT helper, Pablo Neira Ayuso
  • Re: [PATCH net-next v3 0/4] openvswitch: load and reference the NAT helper, Pablo Neira Ayuso
• [PATCH] ipvs:set sock send/receive buffer correctly, linmiaohe
  • Re: [PATCH] ipvs:set sock send/receive buffer correctly, Eric Dumazet
    • Re: [PATCH] ipvs:set sock send/receive buffer correctly, linmiaohe
      • Re: [PATCH] ipvs:set sock send/receive buffer correctly, Eric Dumazet
        • Re: [PATCH] ipvs:set sock send/receive buffer correctly, linmiaohe
• RFC: NAT's default behavior of forwarding un-NATed packets, Xiaozhou Liu
  • Re: RFC: NAT's default behavior of forwarding un-NATed packets, Jan Engelhardt
    • Re: [External Email] Re: RFC: NAT's default behavior of forwarding un-NATed packets, Xiaozhou Liu
      • Re: [External Email] Re: RFC: NAT's default behavior of forwarding un-NATed packets, Jan Engelhardt
  • Re: RFC: NAT's default behavior of forwarding un-NATed packets, Pablo Neira Ayuso
• ulogd2 question - meaning of flow.start.sec when hash_mode == 0 (NCFT input, JSON output), Michal Soltys
  • Re: ulogd2 question - meaning of flow.start.sec when hash_mode == 0 (NFCT input, JSON output), Michal Soltys
  • [PATCH nf] netfilter: never get/set skb->tstamp, Florian Westphal
    • Re: [PATCH nf] netfilter: never get/set skb->tstamp, Eric Dumazet
    • Re: [PATCH nf] netfilter: never get/set skb->tstamp, Michal Soltys
    • Re: [PATCH nf] netfilter: never get/set skb->tstamp, Pablo Neira Ayuso
• [PATCH net-next 00/10] connection tracking support for bridge, Pablo Neira Ayuso
  • [PATCH net-next 01/10] net: ipv4: add skbuff fraglist split iterator, Pablo Neira Ayuso
  • [PATCH net-next 08/10] netfilter: bridge: add support for conntrack support, Pablo Neira Ayuso
    • Re: [PATCH net-next 08/10] netfilter: bridge: add support for conntrack support, Nikolay Aleksandrov
  • [PATCH net-next 10/10] netfilter: nf_conntrack_bridge: register inet conntrack for bridge, Pablo Neira Ayuso
  • [PATCH net-next 09/10] netfilter: nf_conntrack_bridge: add support for IPv6, Pablo Neira Ayuso
  • [PATCH net-next 06/10] net: ipv4: place cb handling away from fragment transformer, Pablo Neira Ayuso
  • [PATCH net-next 07/10] netfilter: nf_conntrack: allow to register bridge support, Pablo Neira Ayuso
  • [PATCH net-next 05/10] net: ipv4: place cb handling away from fraglist iterator, Pablo Neira Ayuso
  • [PATCH net-next 03/10] net: ipv4: split skbuff into fragments transformer, Pablo Neira Ayuso
  • [PATCH net-next 02/10] net: ipv6: add skbuff fraglist split iterator, Pablo Neira Ayuso
  • [PATCH net-next 04/10] net: ipv6: split skbuff into fragments transformer, Pablo Neira Ayuso
    • Re: [PATCH net-next 04/10] net: ipv6: split skbuff into fragments transformer, David Miller
• [PATCH -next 0/3] netfilter: header cleanup, Paul Gortmaker
  • [PATCH -next 1/3] netfilter: nf_tables: relocate header content to consumer, Paul Gortmaker
  • [PATCH -next 2/3] netfilter: nf_tables: fix implicit include of module.h, Paul Gortmaker
  • [PATCH -next 3/3] netfilter: nf_tables: drop include of module.h from nf_tables.h, Paul Gortmaker
  • Re: [PATCH -next 0/3] netfilter: header cleanup, Pablo Neira Ayuso
• [PATCH] [NETFILTER]: nf_conntrack_h323: fix spelling mistake "authenticaton" -> "authentication", Colin King
  • Re: [PATCH] [NETFILTER]: nf_conntrack_h323: fix spelling mistake "authenticaton" -> "authentication", Mukesh Ojha
    • Re: [PATCH] [NETFILTER]: nf_conntrack_h323: fix spelling mistake "authenticaton" -> "authentication", Florian Westphal
      • Re: [PATCH] [NETFILTER]: nf_conntrack_h323: fix spelling mistake "authenticaton" -> "authentication", Colin Ian King
• [nf-next:nft-bridge8 8/8] net/netfilter/nf_conntrack_proto.c:557 nf_ct_netns_do_put() error: we previously assumed 'nf_ct_bridge_info' could be null (see line 552), Dan Carpenter
• linux-next: manual merge of the netfilter-next tree with the netfiler tree, Stephen Rothwell
  • Re: linux-next: manual merge of the netfilter-next tree with the netfiler tree, Stephen Rothwell
• [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON, Florian Westphal
  • Re: [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON, Pablo Neira Ayuso
• linux-next: build warning after merge of the netfilter tree, Stephen Rothwell
• [PATCH net-next v2 0/8] openvswitch: load and reference the NAT helper, Flavio Leitner
  • [PATCH net-next v2 1/8] netfilter: use macros to create module aliases., Flavio Leitner
  • [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers., Flavio Leitner
    • Re: [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers., Pablo Neira Ayuso
      • Re: [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers., Flavio Leitner
    • Re: [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers., Pablo Neira Ayuso
      • Re: [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers., Flavio Leitner
  • [PATCH net-next v2 3/8] netfilter: nf_nat: register amanda NAT helper., Flavio Leitner
  • [PATCH net-next v2 4/8] netfilter: nf_nat: register ftp NAT helper., Flavio Leitner
  • [PATCH net-next v2 5/8] netfilter: nf_nat: register irc NAT helper., Flavio Leitner
  • [PATCH net-next v2 6/8] netfilter: nf_nat: register sip NAT helper., Flavio Leitner
  • [PATCH net-next v2 7/8] netfilter: nf_nat: register tftp NAT helper., Flavio Leitner
  • [PATCH net-next v2 8/8] openvswitch: load and reference the NAT helper., Flavio Leitner
• [PATCH v5 5/5] net: Replace CONFIG_DEBUG_KERNEL with CONFIG_DEBUG_MISC, Sinan Kaya
• [PATCH nf] netfilter: conntrack: fix build on 32bit arches, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: fix build on 32bit arches, Pablo Neira Ayuso
• [PATCH nf] netfilter: nat: fix icmp id endianness when protocol mapping was given, Florian Westphal
  • Re: [PATCH nf] netfilter: nat: fix icmp id endianness when protocol mapping was given, Pablo Neira Ayuso
• Re: iptables: undefined symbol: xtables_find_target_revision, Neal P. Murphy
• [nf:master 7/7] net/netfilter/nf_nat_core.c:422:29: sparse: incorrect type in assignment (different base types), kbuild test robot
• [nf:master 5/7] net//netfilter/nf_conntrack_core.c:483:54: error: passing argument 3 of 'hsiphash' from incompatible pointer type, kbuild test robot
• [PATCH netfilter-next] bridge: only include nf_queue.h if needed, Stephen Rothwell
• [PATCH nf] netfilter: nf_tables: delay chain policy update until transaction is complete, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: delay chain policy update until transaction is complete, Pablo Neira Ayuso
• [nf-next:master 20/21] include/net/netfilter/nf_queue.h:16:23: error: field 'state' has incomplete type, kbuild test robot
• [PATCH v4 5/5] net: Replace CONFIG_DEBUG_KERNEL with CONFIG_DEBUG_MISC, Sinan Kaya
  • Re: [PATCH v4 5/5] net: Replace CONFIG_DEBUG_KERNEL with CONFIG_DEBUG_MISC, Florian Westphal
• [PATCH nf-next 0/4] netfilter: bridge: remove broute hook, Florian Westphal
  • [PATCH nf-next 1/4] selftests: netfilter: add ebtables broute test case, Florian Westphal
  • [PATCH nf-next 2/4] bridge: reduce size of input cb to 16 bytes, Florian Westphal
  • [PATCH nf-next 3/4] bridge: netfilter: unroll NF_HOOK helper in bridge input path, Florian Westphal
  • [PATCH nf-next 4/4] bridge: broute: make broute a real ebtables table, Florian Westphal
  • Re: [PATCH nf-next 0/4] netfilter: bridge: remove broute hook, David Miller
  • Re: [PATCH nf-next 0/4] netfilter: bridge: remove broute hook, Nikolay Aleksandrov
  • Re: [PATCH nf-next 0/4] netfilter: bridge: remove broute hook, Pablo Neira Ayuso
• [nft PATCH] parser_json: Disallow ct helper as type to map to, Phil Sutter
  • Re: [nft PATCH] parser_json: Disallow ct helper as type to map to, Pablo Neira Ayuso
• [PATCH nft] parser_json: fix segfault in translating string to nft object, Laura Garcia Liebana
  • Re: [PATCH nft] parser_json: fix segfault in translating string to nft object, Florian Westphal
    • Re: [PATCH nft] parser_json: fix segfault in translating string to nft object, Phil Sutter
• ESTABLISHED tcp conntrack timeout, Naruto Nguyen
  • Re: ESTABLISHED tcp conntrack timeout, Pablo Neira Ayuso
    • Re: ESTABLISHED tcp conntrack timeout, Naruto Nguyen
• [PATCH nft] segtree: fix memleak in interval_map_decompose(), Pablo Neira Ayuso
• [PATCH nft] src: memleak in expressions, Pablo Neira Ayuso
• [PATCH nf] netfilter: nat: fix icmp id randomization, Florian Westphal
  • Re: [PATCH nf] netfilter: nat: fix icmp id randomization, Pablo Neira Ayuso
• [ebtables PATCH] Fix segfault with missing lockfile directory, Phil Sutter
  • Re: [ebtables PATCH] Fix segfault with missing lockfile directory, Florian Westphal
• [PATCH nft] evaluate: disallow anonymous set with empty elements, Pablo Neira Ayuso
  • Re: [PATCH nft] evaluate: disallow anonymous set with empty elements, Pablo Neira Ayuso
  • Re: [PATCH nft] evaluate: disallow anonymous set with empty elements, Phil Sutter
    • Re: [PATCH nft] evaluate: disallow anonymous set with empty elements, Florian Westphal
      • Re: [PATCH nft] evaluate: disallow anonymous set with empty elements, Pablo Neira Ayuso
        • Re: [PATCH nft] evaluate: disallow anonymous set with empty elements, Phil Sutter
• netfilter fixes for 5.0.7 stable, Pablo Neira Ayuso
  • Re: netfilter fixes for 5.0.7 stable, Pablo Neira Ayuso
• [PATCH nf-next 0/3] netfilter: masquerade: unify ip/ip6 notifier registration, Florian Westphal
  • [PATCH nf-next 1/3] netfilter: nf_nat: merge ip/ip6 masquerade headers, Florian Westphal
  • [PATCH nf-next 2/3] netfilter: x_tables: merge ip and ipv6 masquerade modules, Florian Westphal
  • [PATCH nf-next 3/3] netfilter: nf_nat_masquerade: unify ipv4/6 notifier registration, Florian Westphal
  • Re: [PATCH nf-next 0/3] netfilter: masquerade: unify ip/ip6 notifier registration, Pablo Neira Ayuso
• [PATCH] netfilter: fix dangling pointer access of fake_rtable, Rundong Ge
  • Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable, Rundong Ge
  • Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable, Rundong Ge
      • Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable, Florian Westphal
        • Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable, Rundong Ge
          • Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable, Rundong Ge
• [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
  • [PATCH ghak90 V6 01/10] audit: collect audit task parameters, Richard Guy Briggs
  • [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 02/10] audit: add container id, Tycho Andersen
      • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Tycho Andersen
          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Tycho Andersen
              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                • Re: [PATCH ghak90 V6 02/10] audit: add container id, Serge E. Hallyn
                  • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                    • Re: [PATCH ghak90 V6 02/10] audit: add container id, Tycho Andersen
                      • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Steve Grubb
                              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                                • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                                • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                    • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                      • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
                              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
                                • Re: [PATCH ghak90 V6 02/10] audit: add container id, Eric W. Biederman
                                  • Re: [PATCH ghak90 V6 02/10] audit: add container id, James Bottomley
                              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Eric W. Biederman
        • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
          • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
            • Re: [PATCH ghak90 V6 02/10] audit: add container id, Richard Guy Briggs
              • Re: [PATCH ghak90 V6 02/10] audit: add container id, Paul Moore
    • Re: [PATCH ghak90 V6 02/10] audit: add container id, Eric W. Biederman
  • [PATCH ghak90 V6 03/10] audit: read container ID of a process, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 03/10] audit: read container ID of a process, Eric W. Biederman
      • Re: [PATCH ghak90 V6 03/10] audit: read container ID of a process, Richard Guy Briggs
  • [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Paul Moore
      • Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Ondrej Mosnacek
        • Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Richard Guy Briggs
          • Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls, Paul Moore
  • [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Ondrej Mosnacek
      • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Paul Moore
        • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Neil Horman
          • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Ondrej Mosnacek
          • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Paul Moore
        • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
          • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Paul Moore
      • Re: [PATCH ghak90 V6 05/10] audit: add contid support for signalling the audit daemon, Neil Horman
  • [PATCH ghak90 V6 06/10] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
  • [PATCH ghak90 V6 10/10] audit: NETFILTER_PKT: record each container ID associated with a netNS, Richard Guy Briggs
  • [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces, Paul Moore
      • Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces, Richard Guy Briggs
        • Re: [PATCH ghak90 V6 09/10] audit: add support for containerid to network namespaces, Paul Moore
  • [PATCH ghak90 V6 08/10] audit: add containerid filtering, Richard Guy Briggs
    • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Paul Moore
      • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Richard Guy Briggs
        • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Paul Moore
          • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Richard Guy Briggs
            • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Paul Moore
              • Re: [PATCH ghak90 V6 08/10] audit: add containerid filtering, Richard Guy Briggs
  • [PATCH ghak90 V6 07/10] audit: add containerid support for user records, Richard Guy Briggs
  • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
  • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Neil Horman
    • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
      • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Neil Horman
      • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Daniel Walsh
        • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
        • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
          • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Steve Grubb
            • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
              • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Daniel Walsh
                • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
                  • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Daniel Walsh
                    • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
              • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
      • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
        • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Steve Grubb
          • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Paul Moore
            • Re: [PATCH ghak90 V6 00/10] audit: implement container identifier, Richard Guy Briggs
• 5.0.7: WARNING: CPU: 1 PID: 169 at net/netfilter/nft_compat.c:82 and genreal protection fault, Frederik Himpe
  • Re: 5.0.7: WARNING: CPU: 1 PID: 169 at net/netfilter/nft_compat.c:82 and genreal protection fault, Florian Westphal
    • Re: 5.0.7: WARNING: CPU: 1 PID: 169 at net/netfilter/nft_compat.c:82 and genreal protection fault, Frederik Himpe
• [PATCH nf-next] netfilter: nf_conntrack: restrict conntrack_buckets value, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_conntrack: restrict conntrack_buckets value, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nf_conntrack: restrict conntrack_buckets value, Taehee Yoo
• [PATCH nft v2] doc: update nft list plural form parameters, Fernando Fernandez Mancera
  • Re: [PATCH nft v2] doc: update nft list plural form parameters, Pablo Neira Ayuso
• [PATCH nft] src: missing destroy function in statement definitions, Pablo Neira Ayuso
• [PATCH nft] parser_bison: type_identifier string memleak, Pablo Neira Ayuso
• nft - Extracting the value from a variable_expr, Fernando Fernandez Mancera
• [PATCH nft] doc: update nft list plural form parameters, Fernando Fernandez Mancera
  • Re: [PATCH nft] doc: update nft list plural form parameters, Pablo Neira Ayuso
    • Re: [PATCH nft] doc: update nft list plural form parameters, Fernando Fernandez Mancera
      • Re: [PATCH nft] doc: update nft list plural form parameters, Pablo Neira Ayuso
    • Re: [PATCH nft] doc: update nft list plural form parameters, Duncan Roe
      • Re: [PATCH nft] doc: update nft list plural form parameters, Pablo Neira Ayuso
• [PATCH nft 1/2,v2] parser_bison: missing tproxy syntax with port only for inet family, Pablo Neira Ayuso
  • [PATCH nft 2/2] evaluate: improve error reporting in tproxy with inet family, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: make two functions static, Florian Westphal
  • Re: [PATCH nf-next] netfilter: make two functions static, Pablo Neira Ayuso
• [PATCH nft] parser_bison: missing tproxy syntax with port only for inet family, Pablo Neira Ayuso
• [PATCH net-next,RFC 0/8] connection tracking support for bridge, Pablo Neira Ayuso
  • [PATCH net-next,RFC 2/8] net: ipv4: add skbuff fraglist split iterator, Pablo Neira Ayuso
  • [PATCH net-next,RFC 3/8] net: ipv6: add skbuff fraglist split iterator, Pablo Neira Ayuso
  • [PATCH net-next,RFC 8/8] netfilter: bridge: add basic conntrack support, Pablo Neira Ayuso
  • [PATCH net-next,RFC 6/8] net: ipv4: place cb handling away from fraglist iterator, Pablo Neira Ayuso
  • [PATCH net-next,RFC 7/8] net: ipv4: place cb handling away from fragment transformer, Pablo Neira Ayuso
  • [PATCH net-next,RFC 4/8] net: ipv4: split skbuff into fragments transformer, Pablo Neira Ayuso
  • [PATCH net-next,RFC 5/8] net: ipv6: split skbuff into fragments transformer, Pablo Neira Ayuso
  • [PATCH net-next,RFC 1/8] net: use kfree_skb_list() from ip_do_fragment(), Pablo Neira Ayuso
    • Re: [PATCH net-next,RFC 1/8] net: use kfree_skb_list() from ip_do_fragment(), Florian Westphal
• [no subject], H Craig