Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH net-next v1 1/1] br_netfilter: namespace bridge netfilter sysctls, (continued)
  • Re: [PATCH net-next v1 1/1] br_netfilter: namespace bridge netfilter sysctls, Christian Brauner
• [iptables PATCH] xtables-restore: Fix program names in help texts, Phil Sutter
  • Re: [iptables PATCH] xtables-restore: Fix program names in help texts, Pablo Neira Ayuso
• [PATCH AUTOSEL 5.1 09/70] netfilter: nf_tables: fix oops during rule dump, Sasha Levin
• [PATCH AUTOSEL 5.1 12/70] netfilter: nft_fib: Fix existence check support, Sasha Levin
• [PATCH AUTOSEL 5.1 13/70] ipvs: Fix use-after-free in ip_vs_in, Sasha Levin
• [PATCH AUTOSEL 5.1 15/70] netfilter: nat: fix udp checksum corruption, Sasha Levin
• [PATCH AUTOSEL 4.14 03/31] netfilter: nf_queue: fix reinject verdict handling, Sasha Levin
• [PATCH AUTOSEL 4.14 04/31] ipvs: Fix use-after-free in ip_vs_in, Sasha Levin
• [PATCH AUTOSEL 4.19 05/49] netfilter: nf_queue: fix reinject verdict handling, Sasha Levin
• [PATCH AUTOSEL 4.19 06/49] ipvs: Fix use-after-free in ip_vs_in, Sasha Levin
• [PATCH AUTOSEL 5.1 11/70] netfilter: nf_queue: fix reinject verdict handling, Sasha Levin
• [nft PATCH 0/4] Some fixes and minor improvements in tests/, Phil Sutter
  • [nft PATCH 2/4] tests/py: Add missing arp.t JSON equivalents, Phil Sutter
  • [nft PATCH 1/4] tests/py: Fix JSON equivalents, Phil Sutter
  • [nft PATCH 4/4] tests/shell: Print unified diffs in dump errors, Phil Sutter
  • [nft PATCH 3/4] tests/shell: Fix warning from awk call, Phil Sutter
  • Re: [nft PATCH 0/4] Some fixes and minor improvements in tests/, Pablo Neira Ayuso
• [nft PATCH v6 0/5] Support intra-transaction rule references, Phil Sutter
  • [nft PATCH v6 4/5] src: Make cache_is_complete() public, Phil Sutter
  • [nft PATCH v6 1/5] cache: Fix evaluation for rules with index reference, Phil Sutter
  • [nft PATCH v6 3/5] rule: Introduce rule_lookup_by_index(), Phil Sutter
  • [nft PATCH v6 2/5] tests/json_echo: Drop needless workaround, Phil Sutter
  • [nft PATCH v6 5/5] src: Support intra-transaction rule references, Phil Sutter
  • Re: [nft PATCH v6 0/5] Support intra-transaction rule references, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: xt_owner: bail out with EINVAL in case of unsupported flags, Pablo Neira Ayuso
• [PATCH nft] libnftables: check for errors after evaluations, Pablo Neira Ayuso
• [PATCH nft] libnftables: keep evaluating until parser_max_errors, Pablo Neira Ayuso
• [PATCH nft] evaluate: use-after-free in implicit set, Pablo Neira Ayuso
• [PATCH nft 1/2] src: generation ID is 32-bit long, Pablo Neira Ayuso
  • [PATCH nft 2/2,v2] rule: ensure cache consistency, Pablo Neira Ayuso
• [PATCH nf-next v4 0/3] Extract SYNPROXY infrastructure, Fernando Fernandez Mancera
  • [PATCH nf-next v4 1/3] netfilter: synproxy: add common uapi for SYNPROXY infrastructure, Fernando Fernandez Mancera
  • [PATCH nf-next v4 2/3] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, Fernando Fernandez Mancera
  • [PATCH nf-next v4 3/3] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY, Fernando Fernandez Mancera
  • Re: [PATCH nf-next v4 0/3] Extract SYNPROXY infrastructure, Pablo Neira Ayuso
• Re: How to use concatenation ipv4_addr . inet_proto . inet_service, Florian Westphal
  • Re: How to use concatenation ipv4_addr . inet_proto . inet_service, Vladimir Khailenko
• [PATCH iptables v1] iptables-test: fix python3, Shekhar Sharma
  • Re: [PATCH iptables v1] iptables-test: fix python3, Eric Garver
    • Re: [PATCH iptables v1] iptables-test: fix python3, shekhar sharma
      • Re: [PATCH iptables v1] iptables-test: fix python3, Eric Garver
• [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again, Guillaume Nault
  • Re: [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again, Florian Westphal
    • Re: [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again, Guillaume Nault
      • Re: [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again, Florian Westphal
  • Re: [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again, Pablo Neira Ayuso
• [PATCH nft] rule: ensure cache consistency, Pablo Neira Ayuso
• [PATCH RESEND net-next 0/2] br_netfilter: enable in non-initial netns, Christian Brauner
  • [PATCH RESEND net-next 2/2] br_netfilter: namespace bridge netfilter sysctls, Christian Brauner
  • [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf, Christian Brauner
    • Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf, Stephen Hemminger
      • Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf, Christian Brauner
        • Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf, Pablo Neira Ayuso
          • Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf, Christian Brauner
            • Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf, Pablo Neira Ayuso
              • Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf, Pablo Neira Ayuso
                • Re: [PATCH RESEND net-next 1/2] br_netfilter: add struct netns_brnf, Christian Brauner
• [PATCH nft 4/4,v2] src: single cache_update() call to build cache before evaluation, Pablo Neira Ayuso
• [PATCH nft] mnl: bogus error when running monitor mode, Pablo Neira Ayuso
  • Re: [PATCH nft] mnl: bogus error when running monitor mode, Phil Sutter
    • Re: [PATCH nft] mnl: bogus error when running monitor mode, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers, Igor Ryzhov
  • Re: [PATCH] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers, Igor Ryzhov
      • Re: [PATCH] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers, Pablo Neira Ayuso
• [PATCH nftables v4 0/1] add ct expectation support, Stéphane Veyret
  • [PATCH nftables v4 1/1] add ct expectations support, Stéphane Veyret
    • Re: [PATCH nftables v4 1/1] add ct expectations support, Pablo Neira Ayuso
      • Re: [PATCH nftables v4 1/1] add ct expectations support, Stéphane Veyret
      • Re: [PATCH nftables v4 1/1] add ct expectations support, Stéphane Veyret
        • Re: [PATCH nftables v4 1/1] add ct expectations support, Pablo Neira Ayuso
  • Re: [PATCH nftables v4 0/1] add ct expectation support, Stéphane Veyret
• [PATCH nft 0/4] split parse and evaluation phase to simplify cache logic, Pablo Neira Ayuso
  • [PATCH nft 1/4] src: dynamic input_descriptor allocation, Pablo Neira Ayuso
  • [PATCH nft 2/4] src: perform evaluation after parsing, Pablo Neira Ayuso
  • [PATCH nft 4/4] src: single cache_update() call to build cache before evaluation, Pablo Neira Ayuso
    • Re: [PATCH nft 4/4] src: single cache_update() call to build cache before evaluation, Phil Sutter
  • [PATCH nft 3/4] src: Display parser and evaluate errors in one shot, Pablo Neira Ayuso
  • Re: [PATCH nft 0/4] split parse and evaluation phase to simplify cache logic, Pablo Neira Ayuso
• [PATCH net] ipvs: defer hook registration to avoid leaks, Julian Anastasov
  • Re: [PATCH net] ipvs: defer hook registration to avoid leaks, Simon Horman
    • Re: [PATCH net] ipvs: defer hook registration to avoid leaks, Pablo Neira Ayuso
    • Re: [PATCH net] ipvs: defer hook registration to avoid leaks, Pablo Neira Ayuso
• LPC 2019 Networking Track CFP, David Miller
• [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references, Phil Sutter
  • [nft PATCH v5 09/10] include: Collect __stmt_binary_error() wrapper macros, Phil Sutter
  • [nft PATCH v5 01/10] src: Fix cache_flush() in cache_needs_more() logic, Phil Sutter
    • Re: [nft PATCH v5 01/10] src: Fix cache_flush() in cache_needs_more() logic, Pablo Neira Ayuso
  • [nft PATCH v5 05/10] src: Make {table,chain}_not_found() public, Phil Sutter
  • [nft PATCH v5 08/10] src: Make cache_is_complete() public, Phil Sutter
  • [nft PATCH v5 07/10] rule: Introduce rule_lookup_by_index(), Phil Sutter
  • [nft PATCH v5 10/10] src: Support intra-transaction rule references, Phil Sutter
  • [nft PATCH v5 04/10] libnftables: Keep list of commands in nft context, Phil Sutter
  • [nft PATCH v5 03/10] libnftables: Drop cache in error case, Phil Sutter
    • Re: [nft PATCH v5 03/10] libnftables: Drop cache in error case, Pablo Neira Ayuso
  • [nft PATCH v5 02/10] src: Utilize CMD_FLUSH for cache->cmd, Phil Sutter
  • [nft PATCH v5 06/10] src: Restore local entries after cache update, Phil Sutter
  • Re: [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references, Pablo Neira Ayuso
    • Re: [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references, Phil Sutter
      • Re: [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references, Pablo Neira Ayuso
        • Re: [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: small conntrack lookup optimization, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: small conntrack lookup optimization, Pablo Neira Ayuso
• memory leak in nf_hook_entries_grow, syzbot
  • Re: memory leak in nf_hook_entries_grow, Julian Anastasov
• WARNING: suspicious RCU usage in in_dev_dump_addr, syzbot
• [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather, wenxu
  • Re: [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather, Pablo Neira Ayuso
    • Re: [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather, Pablo Neira Ayuso
      • Re: [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather, wenxu
  • Re: [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather, Pablo Neira Ayuso
• [PATCH] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather, wenxu
• [PATCH net] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments, Guillaume Nault
  • Re: [PATCH net] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments, Pablo Neira Ayuso
    • Re: [PATCH net] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments, Guillaume Nault
      • Re: [PATCH net] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments, Pablo Neira Ayuso
• [PATCH 00/15] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH 01/15] ipvs: allow rs_table to contain different real server types, Pablo Neira Ayuso
  • [PATCH 04/15] netfilter: xt_owner: Add supplementary groups option, Pablo Neira Ayuso
  • [PATCH 12/15] netfilter: xt_HL: prefer skb_ensure_writable, Pablo Neira Ayuso
  • [PATCH 09/15] netfilter: conntrack, nat: prefer skb_ensure_writable, Pablo Neira Ayuso
  • [PATCH 14/15] netfilter: replace skb_make_writable with skb_ensure_writable, Pablo Neira Ayuso
  • [PATCH 15/15] ipvs: add checksum support for gue encapsulation, Pablo Neira Ayuso
  • [PATCH 13/15] netfilter: tcpmss, optstrip: prefer skb_ensure_writable, Pablo Neira Ayuso
  • [PATCH 11/15] netfilter: nf_tables: prefer skb_ensure_writable, Pablo Neira Ayuso
  • [PATCH 10/15] netfilter: ipv4: prefer skb_ensure_writable, Pablo Neira Ayuso
  • [PATCH 03/15] ipvs: strip udp tunnel headers from icmp errors, Pablo Neira Ayuso
  • [PATCH 06/15] netfilter: nf_tables: free base chain counters from worker, Pablo Neira Ayuso
  • [PATCH 02/15] ipvs: add function to find tunnels, Pablo Neira Ayuso
  • [PATCH 05/15] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple, Pablo Neira Ayuso
  • [PATCH 08/15] netfilter: ipvs: prefer skb_ensure_writable, Pablo Neira Ayuso
  • [PATCH 07/15] netfilter: bridge: convert skb_make_writable to skb_ensure_writable, Pablo Neira Ayuso
  • Re: [PATCH 00/15] Netfilter/IPVS updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/15] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/15] netfilter: rename nf_SYNPROXY.h to nf_synproxy.h, Pablo Neira Ayuso
    • [PATCH 03/15] netfilter: nf_queue: remove unused hook entries pointer, Pablo Neira Ayuso
    • [PATCH 06/15] ipvs: strip gre tunnel headers from icmp errors, Pablo Neira Ayuso
    • [PATCH 15/15] netfilter: nf_tables: force module load in case select_ops() returns -EAGAIN, Pablo Neira Ayuso
    • [PATCH 07/15] netfilter: nft_meta: move bridge meta keys into nft_meta_bridge, Pablo Neira Ayuso
    • [PATCH 10/15] netfilter: nft_meta_bridge: add NFT_META_BRI_IIFPVID support, Pablo Neira Ayuso
    • [PATCH 14/15] netfilter: nf_tables: __nft_expr_type_get() selects specific family type, Pablo Neira Ayuso
    • [PATCH 13/15] netfilter: nf_tables: add nft_expr_type_request_module(), Pablo Neira Ayuso
    • [PATCH 11/15] bridge: add br_vlan_get_proto(), Pablo Neira Ayuso
    • [PATCH 12/15] netfilter: nft_meta_bridge: Add NFT_META_BRI_IIFVPROTO support, Pablo Neira Ayuso
    • [PATCH 09/15] bridge: add br_vlan_get_pvid_rcu(), Pablo Neira Ayuso
    • [PATCH 05/15] netfilter: nf_tables: Add synproxy support, Pablo Neira Ayuso
    • [PATCH 08/15] netfilter: nft_meta_bridge: Remove the br_private.h header, Pablo Neira Ayuso
    • [PATCH 04/15] ipvs: allow tunneling with gre encapsulation, Pablo Neira Ayuso
    • [PATCH 02/15] netfilter: nf_log: Replace a seq_printf() call by seq_puts() in seq_show(), Pablo Neira Ayuso
    • Re: [PATCH 00/15] Netfilter/IPVS updates for net-next, David Miller
• [PATCH AUTOSEL 5.1 070/186] netfilter: nf_conntrack_h323: restore boundary check correctness, Sasha Levin
• [PATCH AUTOSEL 5.1 069/186] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast, Sasha Levin
• [PATCH AUTOSEL 5.1 066/186] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Sasha Levin
• [PATCH AUTOSEL 5.0 061/173] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Sasha Levin
• [PATCH AUTOSEL 5.0 064/173] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast, Sasha Levin
• [PATCH AUTOSEL 5.0 065/173] netfilter: nf_conntrack_h323: restore boundary check correctness, Sasha Levin
• [PATCH AUTOSEL 5.0 067/173] netfilter: nf_tables: fix base chain stat rcu_dereference usage, Sasha Levin
• [PATCH AUTOSEL 4.19 051/141] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast, Sasha Levin
• [PATCH AUTOSEL 4.19 054/141] netfilter: nf_tables: fix base chain stat rcu_dereference usage, Sasha Levin
• [PATCH AUTOSEL 4.19 052/141] netfilter: nf_conntrack_h323: restore boundary check correctness, Sasha Levin
• [PATCH AUTOSEL 5.1 072/186] netfilter: nf_tables: fix base chain stat rcu_dereference usage, Sasha Levin
• Kernel compilation error, Fernando Fernandez Mancera
  • Re: Kernel compilation error, Pablo Neira Ayuso
• [PATCH ghak90 V6] fixup! audit: add containerid filtering, Richard Guy Briggs
  • Re: [PATCH ghak90 V6] fixup! audit: add containerid filtering, Paul Moore
• [PATCH libnftnl v4 0/2] add ct expectation support, Stéphane Veyret
  • [PATCH libnftnl v4 1/2] src: add ct expectation support, Stéphane Veyret
  • [PATCH libnftnl v4 2/2] examples: add ct expectation examples, Stéphane Veyret
  • Re: [PATCH libnftnl v4 0/2] add ct expectation support, Stéphane Veyret
    • Re: [PATCH libnftnl v4 0/2] add ct expectation support, Pablo Neira Ayuso
      • Re: [PATCH libnftnl v4 0/2] add ct expectation support, Stéphane Veyret
  • Re: [PATCH libnftnl v4 0/2] add ct expectation support, Pablo Neira Ayuso
• [nft PATCH 0/2] Fix and simplify mnl_batch_talk(), Phil Sutter
  • [nft PATCH 2/2] mnl: Simplify mnl_batch_talk(), Phil Sutter
  • [nft PATCH 1/2] mnl: Initialize fd_set before select(), not after, Phil Sutter
  • Re: [nft PATCH 0/2] Fix and simplify mnl_batch_talk(), Pablo Neira Ayuso
• [PATCH nft 2/7,v4] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small, Pablo Neira Ayuso
• [PATCH net-next,v2] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y, Pablo Neira Ayuso
  • Re: [PATCH net-next,v2] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y, wenxu
• [PATCH] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y, David Miller
• [PATCH net-next] netfilter: ipv6: fix compile err unknown field br_defrag and br_fragment, wenxu
  • Re: [PATCH net-next] netfilter: ipv6: fix compile err unknown field br_defrag and br_fragment, Pablo Neira Ayuso
• [PATCH net-next] netfilter: missing #include for nf_ct_frag6_gather declaration, Pablo Neira Ayuso
  • Re: [PATCH net-next] netfilter: missing #include for nf_ct_frag6_gather declaration, Pablo Neira Ayuso
• [PATCH] build: avoid unnecessary rebuild of iptables when rerunning configure, Jan Engelhardt
  • Re: [PATCH] build: avoid unnecessary rebuild of iptables when rerunning configure, Florian Westphal
• [PATCH net-next] netfilter: nf_conntrack_bridge: Fix build error without IPV6, YueHaibing
  • Re: [PATCH net-next] netfilter: nf_conntrack_bridge: Fix build error without IPV6, Yuehaibing
    • Re: [PATCH net-next] netfilter: nf_conntrack_bridge: Fix build error without IPV6, Pablo Neira Ayuso
      • Re: [PATCH net-next] netfilter: nf_conntrack_bridge: Fix build error without IPV6, Yuehaibing
• [PATCH v2] conntrackd: Use strdup in lexer, Ash Hughes
• [PATCH nft,v4 5/7] mnl: estimate receiver buffer size, Pablo Neira Ayuso
• [PATCH nft,v3 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small, Pablo Neira Ayuso
  • Re: [PATCH nft,v3 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small, Phil Sutter
    • Re: [PATCH nft,v3 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small, Pablo Neira Ayuso
• [PATCH nft,v2 1/7] mnl: add mnl_set_rcvbuffer() and use it, Pablo Neira Ayuso
  • [PATCH nft,v2 3/7] mnl: call mnl_set_sndbuffer() from mnl_batch_talk(), Pablo Neira Ayuso
  • [PATCH nft,v2 4/7] mnl: add mnl_nft_batch_to_msg(), Pablo Neira Ayuso
  • [PATCH nft,v2 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small, Pablo Neira Ayuso
  • [PATCH nft,v2 5/7] mnl: estimate receiver buffer size, Pablo Neira Ayuso
    • Re: [PATCH nft,v2 5/7] mnl: estimate receiver buffer size, Eric Garver
      • Re: [PATCH nft,v2 5/7] mnl: estimate receiver buffer size, Pablo Neira Ayuso
  • [PATCH nft,v2 7/7] erec: remove double \n on error when internal_netlink is used, Pablo Neira Ayuso
  • [PATCH nft,v2 6/7] mnl: mnl_batch_talk() returns -1 on internal netlink errors, Pablo Neira Ayuso
• [PATCH v4] ipvs: add checksum support for gue encapsulation, Jacky Hu
  • Re: [PATCH v4] ipvs: add checksum support for gue encapsulation, Julian Anastasov
    • Re: [PATCH v4] ipvs: add checksum support for gue encapsulation, Simon Horman
      • Re: [PATCH v4] ipvs: add checksum support for gue encapsulation, Pablo Neira Ayuso
• [PATCH nft 1/3] mnl: add mnl_set_rcvbuffer() and use it, Pablo Neira Ayuso
  • [PATCH nft 2/3] mnl: call mnl_set_sndbuffer() from mnl_batch_talk(), Pablo Neira Ayuso
  • [PATCH nft 3/3] mnl: estimate receiver buffer size based on the number of commands, Pablo Neira Ayuso
• [nft PATCH 0/4] Fix ENOBUFS error in large transactions with --echo, Phil Sutter
  • [nft PATCH 2/4] mnl: Increase receive buffer in mnl_batch_talk(), Phil Sutter
    • Re: [nft PATCH 2/4] mnl: Increase receive buffer in mnl_batch_talk(), Pablo Neira Ayuso
    • Re: [nft PATCH 2/4] mnl: Increase receive buffer in mnl_batch_talk(), Pablo Neira Ayuso
  • [nft PATCH 3/4] mnl: Fix and simplify mnl_batch_talk(), Phil Sutter
    • Re: [nft PATCH 3/4] mnl: Fix and simplify mnl_batch_talk(), Pablo Neira Ayuso
  • [nft PATCH 1/4] mnl: Maximize socket receive buffer by default, Phil Sutter
  • [nft PATCH 4/4] tests/shell: Test large transaction with echo output, Phil Sutter
    • Re: [nft PATCH 4/4] tests/shell: Test large transaction with echo output, Pablo Neira Ayuso
  • Re: [nft PATCH 0/4] Fix ENOBUFS error in large transactions with --echo, Pablo Neira Ayuso
• nftables release, Nicolas Dichtel
  • Re: nftables release, Stephen Suryaputra
  • Re: nftables release, Florian Westphal
    • Re: nftables release, Nicolas Dichtel
    • Re: nftables release, Phil Sutter
• [PATCH net-next,v3 0/9] connection tracking support for bridge, Pablo Neira Ayuso
  • [PATCH net-next,v3 2/9] net: ipv6: add skbuff fraglist splitter, Pablo Neira Ayuso
  • [PATCH net-next,v3 3/9] net: ipv4: split skbuff into fragments transformer, Pablo Neira Ayuso
  • [PATCH net-next,v3 7/9] netfilter: bridge: add connection tracking system, Pablo Neira Ayuso
  • [PATCH net-next,v3 4/9] net: ipv6: split skbuff into fragments transformer, Pablo Neira Ayuso
  • [PATCH net-next,v3 8/9] netfilter: nf_conntrack_bridge: add support for IPv6, Pablo Neira Ayuso
  • [PATCH net-next,v3 9/9] netfilter: nf_conntrack_bridge: register inet conntrack for bridge, Pablo Neira Ayuso
  • [PATCH net-next,v3 6/9] netfilter: nf_conntrack: allow to register bridge support, Pablo Neira Ayuso
  • [PATCH net-next,v3 1/9] net: ipv4: add skbuff fraglist splitter, Pablo Neira Ayuso
  • [PATCH net-next,v3 5/9] net: ipv4: place control buffer handling away from fragmentation iterators, Pablo Neira Ayuso
  • Re: [PATCH net-next,v3 0/9] connection tracking support for bridge, David Miller
• [PATCH v3] ipvs: add checksum support for gue encapsulation, Jacky Hu
  • Re: [PATCH v3] ipvs: add checksum support for gue encapsulation, Julian Anastasov
• Announcing Netdev 0x14, Jamal Hadi Salim
• [nft PATCH v4 0/7] Cache update fix && intra-transaction rule references, Phil Sutter
  • [nft PATCH v4 4/7] src: Restore local entries after cache update, Phil Sutter
  • [nft PATCH v4 7/7] src: Support intra-transaction rule references, Phil Sutter
    • Re: [nft PATCH v4 7/7] src: Support intra-transaction rule references, Eric Garver
      • Re: [nft PATCH v4 7/7] src: Support intra-transaction rule references, Pablo Neira Ayuso
        • Re: [nft PATCH v4 7/7] src: Support intra-transaction rule references, Phil Sutter
  • [nft PATCH v4 1/7] src: Fix cache_flush() in cache_needs_more() logic, Phil Sutter
    • Re: [nft PATCH v4 1/7] src: Fix cache_flush() in cache_needs_more() logic, Eric Garver
      • Re: [nft PATCH v4 1/7] src: Fix cache_flush() in cache_needs_more() logic, Phil Sutter
  • [nft PATCH v4 5/7] rule: Introduce rule_lookup_by_index(), Phil Sutter
  • [nft PATCH v4 2/7] libnftables: Keep list of commands in nft context, Phil Sutter
  • [nft PATCH v4 3/7] src: Make {table,chain}_not_found() public, Phil Sutter
  • [nft PATCH v4 6/7] src: Make cache_is_complete() public, Phil Sutter
• memory leak in start_sync_thread, syzbot
  • Re: memory leak in start_sync_thread, Eric Biggers
    • Re: memory leak in start_sync_thread, Julian Anastasov
• Avoid unnecessary rebuilds of iptables, Jan Engelhardt
  • [PATCH 1/2] src: replace IPTABLES_VERSION by PACKAGE_VERSION, Jan Engelhardt
  • [PATCH 2/2] build: avoid unnecessary rebuild of iptables when rerunning configure, Jan Engelhardt
    • Re: [PATCH 2/2] build: avoid unnecessary rebuild of iptables when rerunning configure, Florian Westphal
  • Re: Avoid unnecessary rebuilds of iptables, Florian Westphal
• [PATCH] Apply userspace filter on resync with internal cache disabled, Robin Geuze
  • Re: [PATCH] Apply userspace filter on resync with internal cache disabled, Pablo Neira Ayuso
• [PATCH] build: remove -Wl,--no-as-needed and libiptc.so, Jan Engelhardt
  • [PATCH] build: remove -Wl,--no-as-needed and libiptc.so, Jan Engelhardt
    • Re: [PATCH] build: remove -Wl,--no-as-needed and libiptc.so, Florian Westphal
• [PATCH] conntrackd: Fix "Address Accept" filter case, Robin Geuze
  • Re: [PATCH] conntrackd: Fix "Address Accept" filter case, Pablo Neira Ayuso
    • Re: [PATCH] conntrackd: Fix "Address Accept" filter case, Robin Geuze
• [PATCH nft v2]tests: json_echo: convert to py3, Shekhar Sharma
  • Re: [PATCH nft v2]tests: json_echo: convert to py3, Phil Sutter
    • Re: [PATCH nft v2]tests: json_echo: convert to py3, shekhar sharma
  • Re: [PATCH nft v2]tests: json_echo: convert to py3, Pablo Neira Ayuso
  • Message not available
    • Re: [PATCH nft v2]tests: json_echo: convert to py3, Pablo Neira Ayuso
      • Re: [PATCH nft v2]tests: json_echo: convert to py3, shekhar sharma
• [PATCH nft v3]tests: py: add netns feature, Shekhar Sharma
  • Re: [PATCH nft v3]tests: py: add netns feature, Phil Sutter
    • Re: [PATCH nft v3]tests: py: add netns feature, Phil Sutter
    • Re: [PATCH nft v3]tests: py: add netns feature, shekhar sharma
      • Re: [PATCH nft v3]tests: py: add netns feature, shekhar sharma
• [PATCH nft v5] tests: py: fix python3, Shekhar Sharma
  • Re: [PATCH nft v5] tests: py: fix python3, Shivani Bhardwaj
    • Re: [PATCH nft v5] tests: py: fix python3, shekhar sharma
    • Re: [PATCH nft v5] tests: py: fix python3, Eric Garver
• [PATCH] conntrackd: Use strdup in lexer, Ash Hughes
  • Re: [PATCH] conntrackd: Use strdup in lexer, Pablo Neira Ayuso
• [PATCH] conntrackd: search for RPC headers, Ash Hughes
  • Re: [PATCH] conntrackd: search for RPC headers, Pablo Neira Ayuso
• [ANNOUNCE] iptables 1.8.3 release, Pablo Neira Ayuso
• [ANNOUNCE] libnftnl 1.1.3 release, Pablo Neira Ayuso
• [nft PATCH] parser_json: Fix and simplify verdict expression parsing, Phil Sutter
  • Re: [nft PATCH] parser_json: Fix and simplify verdict expression parsing, Pablo Neira Ayuso
• [nft PATCH v4 0/2] JSON schema for nftables.py, Phil Sutter
  • [nft PATCH v4 2/2] tests/py: Support JSON validation, Phil Sutter
  • [nft PATCH v4 1/2] py: Implement JSON validation in nftables module, Phil Sutter
  • Re: [nft PATCH v4 0/2] JSON schema for nftables.py, Pablo Neira Ayuso
• [PATCH] ipset: Fix memory accounting for hash types on resize, Stefano Brivio
  • Re: [PATCH] ipset: Fix memory accounting for hash types on resize, Jozsef Kadlecsik
• [PATCH v2] ipvs: add checksum support for gue encapsulation, Jacky Hu
  • Re: [PATCH v2] ipvs: add checksum support for gue encapsulation, Julian Anastasov
• [PATCH nf-next v5] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
  • Re: [PATCH nf-next v5] netfilter: nft_ct: add ct expectations support, Pablo Neira Ayuso
  • Re: [PATCH nf-next v5] netfilter: nft_ct: add ct expectations support, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix module autoload with inet family, Pablo Neira Ayuso
• [PATCH iptables v1] iptables-test.py: fix python3, Shekhar Sharma
  • Re: [PATCH iptables v1] iptables-test.py: fix python3, Phil Sutter
    • Re: [PATCH iptables v1] iptables-test.py: fix python3, shekhar sharma
• [PATCH nft] tests: replace single element sets, Pablo Neira Ayuso
• [PATCH nft v1 ] py: nftables.py: fix python3, Shekhar Sharma
  • Re: [PATCH nft v1 ] py: nftables.py: fix python3, Eric Garver
    • Re: [PATCH nft v1 ] py: nftables.py: fix python3, shekhar sharma
• [PATCH nft] src: add cache_is_complete() and cache_is_updated(), Pablo Neira Ayuso
  • Re: [PATCH nft] src: add cache_is_complete() and cache_is_updated(), Phil Sutter
• [PATCH nft v1] tests: json_echo: fix python3, Shekhar Sharma
  • Re: [PATCH nft v1] tests: json_echo: fix python3, Phil Sutter
    • Re: [PATCH nft v1] tests: json_echo: fix python3, shekhar sharma
• [PATCH nf-next v3 0/4] Extract SYNPROXY infrastructure, Fernando Fernandez Mancera
  • [PATCH nf-next v3 1/4] netfilter: synproxy: add common uapi for SYNPROXY infrastructure, Fernando Fernandez Mancera
  • [PATCH nf-next v3 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, Fernando Fernandez Mancera
    • Re: [PATCH nf-next v3 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, Florian Westphal
  • [PATCH nf-next v3 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY, Fernando Fernandez Mancera
    • Re: [PATCH nf-next v3 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY, Florian Westphal
  • [PATCH nf-next v3 4/4] netfilter: add NF_SYNPROXY symbol, Fernando Fernandez Mancera
    • Re: [PATCH nf-next v3 4/4] netfilter: add NF_SYNPROXY symbol, Florian Westphal
    • Re: [PATCH nf-next v3 4/4] netfilter: add NF_SYNPROXY symbol, Florian Westphal
• [PATCH nft v4 1/2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
  • [PATCH nft v4 2/2] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
    • Re: [PATCH nft v4 2/2] jump: Allow goto and jump to a variable using nft input files, Pablo Neira Ayuso
  • Re: [PATCH nft v4 1/2] jump: Introduce chain_expr in jump and goto statements, Pablo Neira Ayuso
• [PATCH v1] ipvs: add checksum support for gue encapsulation, Jacky Hu
  • Re: [PATCH v1] ipvs: add checksum support for gue encapsulation, Julian Anastasov
• [PATCH 00/11] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH 02/11] netfilter: nf_queue: fix reinject verdict handling, Pablo Neira Ayuso
  • [PATCH 03/11] netfilter: nft_fib: Fix existence check support, Pablo Neira Ayuso
  • [PATCH 07/11] netfilter: nf_flow_table: ignore DF bit setting, Pablo Neira Ayuso
  • [PATCH 08/11] netfilter: nft_flow_offload: set liberal tracking mode for tcp, Pablo Neira Ayuso
  • [PATCH 06/11] netfilter: nat: fix udp checksum corruption, Pablo Neira Ayuso
  • [PATCH 10/11] netfilter: nft_flow_offload: IPCB is only valid for ipv4 family, Pablo Neira Ayuso
  • [PATCH 11/11] selftests: netfilter: add flowtable test script, Pablo Neira Ayuso
  • [PATCH 09/11] netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment, Pablo Neira Ayuso
  • [PATCH 05/11] selftests: netfilter: missing error check when setting up veth interface, Pablo Neira Ayuso
  • [PATCH 04/11] ipvs: Fix use-after-free in ip_vs_in, Pablo Neira Ayuso
  • [PATCH 01/11] netfilter: nf_tables: fix oops during rule dump, Pablo Neira Ayuso
  • Re: [PATCH 00/11] Netfilter/IPVS fixes for net, David Miller
• [PATCH nf-next v4 0/1] add ct expectation support, Stéphane Veyret
  • [PATCH nf-next v4 1/1] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
    • Re: [PATCH nf-next v4 1/1] netfilter: nft_ct: add ct expectations support, Pablo Neira Ayuso
• [PATCH nft v2] tests: py: Add netns feature, Shekhar Sharma
• [PATCH nft v4] tests: py: fix python3, Shekhar Sharma
  • Re: [PATCH nft v4] tests: py: fix python3, Eric Garver
  • Re: [PATCH nft v4] tests: py: fix python3, Pablo Neira Ayuso
    • Re: [PATCH nft v4] tests: py: fix python3, Pablo Neira Ayuso
      • Re: [PATCH nft v4] tests: py: fix python3, Eric Garver
        • Re: [PATCH nft v4] tests: py: fix python3, Eric Garver
          • Re: [PATCH nft v4] tests: py: fix python3, shekhar sharma
        • Re: [PATCH nft v4] tests: py: fix python3, Pablo Neira Ayuso
          • Re: [PATCH nft v4] tests: py: fix python3, Eric Garver
• [PATCH nf-next 0/8] netfilter: remove skb_make_writable helper, Florian Westphal
  • [PATCH nf-next 1/8] netfilter: bridge: convert skb_make_writable to skb_ensure_writable, Florian Westphal
  • [PATCH nf-next 2/8] netfilter: ipvs: prefer skb_ensure_writable, Florian Westphal
    • Re: [PATCH nf-next 2/8] netfilter: ipvs: prefer skb_ensure_writable, Simon Horman
  • [PATCH nf-next 3/8] netfilter: conntrack, nat: prefer skb_ensure_writable, Florian Westphal
  • [PATCH nf-next 4/8] netfilter: ipv4: prefer skb_ensure_writable, Florian Westphal
  • [PATCH nf-next 5/8] netfilter: nf_tables: prefer skb_ensure_writable, Florian Westphal
  • [PATCH nf-next 6/8] netfilter: xt_HL: prefer skb_ensure_writable, Florian Westphal
  • [PATCH nf-next 7/8] netfilter: tcpmss, optstrip: prefer skb_ensure_writable, Florian Westphal
  • [PATCH nf-next 8/8] netfilter: replace skb_make_writable with skb_ensure_writable, Florian Westphal
  • Re: [PATCH nf-next 0/8] netfilter: remove skb_make_writable helper, Pablo Neira Ayuso
• [PATCH nftables] exthdr: doc: add support for matching IPv4 options, Stephen Suryaputra
• [PATCH libnftnl] src: libnftnl: add support for matching IPv4 options, Stephen Suryaputra
• [PATCH nf-next] netfilter: add support for matching IPv4 options, Stephen Suryaputra
  • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Stephen Suryaputra
      • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Pablo Neira Ayuso
        • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Florian Westphal
          • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Pablo Neira Ayuso
            • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Florian Westphal
        • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Stephen Suryaputra
          • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Pablo Neira Ayuso
            • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Stephen Suryaputra
              • Re: [PATCH nf-next] netfilter: add support for matching IPv4 options, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: free base chain counters from worker, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: free base chain counters from worker, Pablo Neira Ayuso
• [PATCH nft] src: support for arp sender and target ethernet and IPv4 addresses, Pablo Neira Ayuso
  • Re: [PATCH nft] src: support for arp sender and target ethernet and IPv4 addresses, Florian Westphal
• [nft PATCH v2 0/3] Resolve cache update woes, Phil Sutter
  • [nft PATCH v2 2/3] libnftables: Keep list of commands in nft context, Phil Sutter
    • Re: [nft PATCH v2 2/3] libnftables: Keep list of commands in nft context, Eric Garver
  • [nft PATCH v2 1/3] src: update cache if cmd is more specific, Phil Sutter
    • Re: [nft PATCH v2 1/3] src: update cache if cmd is more specific, Pablo Neira Ayuso
  • [nft PATCH v2 3/3] src: Restore local entries after cache update, Phil Sutter
    • Re: [nft PATCH v2 3/3] src: Restore local entries after cache update, Eric Garver
• [nft PATCH v3 0/2] JSON schema for nftables.py, Phil Sutter
  • [nft PATCH v3 1/2] py: Implement JSON validation in nftables module, Phil Sutter
    • Re: [nft PATCH v3 1/2] py: Implement JSON validation in nftables module, Eric Garver
  • [nft PATCH v3 2/2] tests/py: Support JSON validation, Phil Sutter
    • Re: [nft PATCH v3 2/2] tests/py: Support JSON validation, Eric Garver
  • Re: [nft PATCH v3 0/2] JSON schema for nftables.py, Pablo Neira Ayuso
    • Re: [nft PATCH v3 0/2] JSON schema for nftables.py, Phil Sutter
      • Re: [nft PATCH v3 0/2] JSON schema for nftables.py, Pablo Neira Ayuso
        • Re: [nft PATCH v3 0/2] JSON schema for nftables.py, Phil Sutter
• [nft PATCH 0/3] Support intra-transaction rule references, Phil Sutter
  • [nft PATCH 3/3] src: Support intra-transaction rule references, Phil Sutter
    • Re: [nft PATCH 3/3] src: Support intra-transaction rule references, Pablo Neira Ayuso
    • Re: [nft PATCH 3/3] src: Support intra-transaction rule references, Pablo Neira Ayuso
  • [nft PATCH 2/3] rule: Introduce rule_lookup_by_index(), Phil Sutter
  • [nft PATCH 1/3] src: Fix cache_flush() in cache_needs_more() logic, Phil Sutter
  • Re: [nft PATCH 0/3] Support intra-transaction rule references, Pablo Neira Ayuso
• [PATCH nft v3]tests: py: fix python3., Shekhar Sharma
  • Re: [PATCH nft v3]tests: py: fix python3., Pablo Neira Ayuso
  • Re: [PATCH nft v3]tests: py: fix python3., Shivani Bhardwaj
  • <Possible follow-ups>
  • Re: [PATCH nft v3]tests: py: fix python3., Shekhar Sharma
• progress on connection tracking for bridge family, M. Schröder
• [PATCH nf 0/5] netfilter: flow table fixes, Florian Westphal
  • [PATCH nf 1/5] netfilter: nf_flow_table: ignore DF bit setting, Florian Westphal
  • [PATCH nf 2/5] netfilter: nft_flow_offload: set liberal tracking mode for tcp, Florian Westphal
  • [PATCH nf 3/5] netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment, Florian Westphal
  • [PATCH nf 4/5] netfilter: nft_flow_offload: IPCB is only valid for ipv4 family, Florian Westphal
  • [PATCH nf 5/5] selftests: netfilter: add flowtable test script, Florian Westphal
  • Re: [PATCH nf 0/5] netfilter: flow table fixes, Pablo Neira Ayuso
• [PATCH iptables 0/6] ERESTART fixes, Pablo Neira Ayuso
  • [PATCH iptables 1/6] nft: keep original cache in case of ERESTART, Pablo Neira Ayuso
  • [PATCH iptables 4/6] nft: don't care about previous state in ERESTART, Pablo Neira Ayuso
  • [PATCH iptables 6/6] nft: reset netlink sender buffer size of socket restart, Pablo Neira Ayuso
  • [PATCH iptables 2/6] xtables: Fix for explicit rule flushes, Pablo Neira Ayuso
  • [PATCH iptables 3/6] nft: don't skip table addition from ERESTART, Pablo Neira Ayuso
  • [PATCH iptables 5/6] nft: do not retry on EINTR, Pablo Neira Ayuso
• [PATCH iptables RFC 0/4] revisit RESTART log, Pablo Neira Ayuso
  • [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART, Pablo Neira Ayuso
    • Re: [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART, Pablo Neira Ayuso
      • Re: [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART, Pablo Neira Ayuso
      • Re: [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART, Pablo Neira Ayuso
        • Re: [PATCH iptables RFC 4/4] nft: don't care about previous state in RESTART, Florian Westphal
  • [PATCH iptables RFC 3/4] nft: don't skip table addition from ERESTART, Pablo Neira Ayuso
  • [PATCH iptables RFC 1/4] nft: don't check for table existence from __nft_table_flush(), Pablo Neira Ayuso
  • [PATCH iptables RFC 2/4] nft: keep original cache in case of ERESTART, Pablo Neira Ayuso
• [PATCH iptables 0/6] cache rework, Pablo Neira Ayuso
  • [PATCH iptables 1/6] nft: add struct nft_cache, Pablo Neira Ayuso
  • [PATCH iptables 3/6] nft: add __nft_table_builtin_find(), Pablo Neira Ayuso
  • [PATCH iptables 6/6] nft: ensure cache consistency, Pablo Neira Ayuso
  • [PATCH iptables 5/6] nft: cache table list, Pablo Neira Ayuso
  • [PATCH iptables 4/6] nft: add flush_cache(), Pablo Neira Ayuso
  • [PATCH iptables 2/6] nft: statify nft_rebuild_cache(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nat: fix udp checksum corruption, Florian Westphal
  • Re: [PATCH nf] netfilter: nat: fix udp checksum corruption, Pablo Neira Ayuso
• [iptables PATCH] Drop release.sh, Phil Sutter
  • Re: [iptables PATCH] Drop release.sh, Pablo Neira Ayuso
• [iptables PATCH] Revert "build: don't include tests in released tarball", Phil Sutter
  • Re: [iptables PATCH] Revert "build: don't include tests in released tarball", Pablo Neira Ayuso
• iptables: Testsuites in release tarballs?, Phil Sutter
  • Re: iptables: Testsuites in release tarballs?, Florian Westphal
    • Re: iptables: Testsuites in release tarballs?, Phil Sutter
• [PATCH nf-next v2 0/4] Extract SYNPROXY infrastructure, Fernando Fernandez Mancera
  • [PATCH nf-next v2 1/4] netfilter: synproxy: add common uapi for SYNPROXY infrastructure, Fernando Fernandez Mancera
  • [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, Fernando Fernandez Mancera
    • Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, Florian Westphal
      • Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, Fernando Fernandez Mancera
        • Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, Florian Westphal
          • Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, Fernando Fernandez Mancera
    • Re: [PATCH nf-next v2 2/4] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, kbuild test robot
  • [PATCH nf-next v2 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY, Fernando Fernandez Mancera
    • Re: [PATCH nf-next v2 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY, Florian Westphal
      • Re: [PATCH nf-next v2 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY, Fernando Fernandez Mancera
    • Re: [PATCH nf-next v2 3/4] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt,ip6t}_SYNPROXY, kbuild test robot
  • [PATCH nf-next v2 4/4] netfilter: add NF_SYNPROXY symbol, Fernando Fernandez Mancera
    • Re: [PATCH nf-next v2 4/4] netfilter: add NF_SYNPROXY symbol, kbuild test robot
    • Re: [PATCH nf-next v2 4/4] netfilter: add NF_SYNPROXY symbol, Dan Carpenter
• [PATCH iptables 1/4] nft: add struct nft_cache, Pablo Neira Ayuso
  • [PATCH iptables 2/4] nft: statify nft_rebuild_cache(), Pablo Neira Ayuso
  • [PATCH iptables 3/4] nft: add flush_cache(), Pablo Neira Ayuso
  • [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART, Pablo Neira Ayuso
    • Re: [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART, Phil Sutter
      • Re: [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART, Phil Sutter
        • Re: [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART, Florian Westphal
          • Re: [PATCH iptables 4/4] nft: keep old cache around until batch is refreshed in case of ERESTART, Phil Sutter
• [PATCH nft] evaluate: kill anon sets with one element, Florian Westphal
  • Re: [PATCH nft] evaluate: kill anon sets with one element, Pablo Neira Ayuso
    • Re: [PATCH nft] evaluate: kill anon sets with one element, Florian Westphal
      • Re: [PATCH nft] evaluate: kill anon sets with one element, Pablo Neira Ayuso
        • Re: [PATCH nft] evaluate: kill anon sets with one element, Pablo Neira Ayuso
        • Re: [PATCH nft] evaluate: kill anon sets with one element, Florian Westphal
• [PATCH nft v1] tests: py: Add netns feature, Shekhar Sharma
  • <Possible follow-ups>
  • [PATCH nft v1] tests: py: Add netns feature, Shekhar Sharma
  • [PATCH nft v1] tests: py: Add netns feature, Shekhar Sharma
• [PATCH nft v2] tests: py: fix python3., Shekhar Sharma
  • Re: [PATCH nft v2] tests: py: fix python3., Eric Garver
• [PATCH 0/5] Extract SYNPROXY infrastructure, Fernando Fernandez Mancera
  • [PATCH 1/5 nf-next] netfilter: synproxy: add common uapi for SYNPROXY infrastructure, Fernando Fernandez Mancera
  • [PATCH 2/5 nf-next] netfilter: synproxy: extract IPv4 SYNPROXY infrastructure from ipt_SYNPROXY, Fernando Fernandez Mancera
  • [PATCH 3/5 nf-next] netfilter: add NF_SYNPROXY_IPV4 symbol, Fernando Fernandez Mancera
  • [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY, Fernando Fernandez Mancera
    • Re: [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY, Florian Westphal
      • Re: [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY, Fernando Fernandez Mancera
        • Re: [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY, Florian Westphal
  • [PATCH 5/5 nf-next] netfilter: add NF_SYNPROXY_IPV6 symbol, Fernando Fernandez Mancera
  • Re: [PATCH 0/5] Extract SYNPROXY infrastructure, Jan Engelhardt
    • Re: [PATCH 0/5] Extract SYNPROXY infrastructure, Fernando Fernandez Mancera
• Expectations, Stéphane Veyret
  • Re: Expectations, Florian Westphal
    • Re: Expectations, Stéphane Veyret
      • Re: Expectations, Florian Westphal
        • Re: Expectations, Stéphane Veyret
• Refcounts in libnftnl?, Phil Sutter
• [nft PATCH 0/3] Resolve cache update woes, Phil Sutter
  • [nft PATCH 3/3] src: Restore local entries after cache update, Phil Sutter
  • [nft PATCH 2/3] libnftables: Keep list of commands in nft context, Phil Sutter
  • [nft PATCH 1/3] src: Improve cache_needs_more() algorithm, Phil Sutter
    • Re: [nft PATCH 1/3] src: Improve cache_needs_more() algorithm, Eric Garver
  • Re: [nft PATCH 0/3] Resolve cache update woes, Pablo Neira Ayuso
  • Re: [nft PATCH 0/3] Resolve cache update woes, Eric Garver
    • Re: [nft PATCH 0/3] Resolve cache update woes, Eric Garver
• [nft PATCH v2 0/2] JSON schema for nftables.py, Phil Sutter
  • [nft PATCH v2 2/2] tests/py: Support JSON validation, Phil Sutter
  • [nft PATCH v2 1/2] py: Implement JSON validation in nftables module, Phil Sutter
    • Re: [nft PATCH v2 1/2] py: Implement JSON validation in nftables module, Eric Garver
  • Re: [nft PATCH v2 0/2] JSON schema for nftables.py, Pablo Neira Ayuso
• [PATCH nftables,v3] add ct expectations support, Stéphane Veyret
  • [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
    • Re: [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support, Pablo Neira Ayuso
      • Re: [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support, Stéphane Veyret
        • Re: [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support, Pablo Neira Ayuso
  • [PATCH libnftnl,v3 1/2] src: add ct expectation support, Stéphane Veyret
  • [PATCH libnftnl,v3 2/2] examples: add ct expectation examples, Stéphane Veyret
• nftables flow offload possible mtu handling issue, marcmicalizzi
  • Re: nftables flow offload possible mtu handling issue, Florian Westphal
  • Re: nftables flow offload possible mtu handling issue, Florian Westphal
• oops in netfilter, David Howells
• [nft PATCH 0/2] JSON schema for nftables.py, Phil Sutter
  • [nft PATCH 2/2] tests/py: Support JSON validation, Phil Sutter
  • [nft PATCH 1/2] py: Implement JSON validation in nftables module, Phil Sutter
• [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
  • [PATCH nft v3 2/2] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
  • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Pablo Neira Ayuso
    • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
      • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Pablo Neira Ayuso
      • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
        • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
          • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Pablo Neira Ayuso
            • Re: [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements, Phil Sutter
• [PATCH nft] src: update cache if cmd is more specific, Eric Garver
• [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_fib: Fix existence check support, Phil Sutter
  • Re: [PATCH nf] netfilter: nft_fib: Fix existence check support, Pablo Neira Ayuso
• [PATCH 1/2 nft v2] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
  • [PATCH 2/2 nft v2] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
• [PATCH] ipvs: Fix use-after-free in ip_vs_in, YueHaibing
  • Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in, Julian Anastasov
  • Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in, Julian Anastasov
    • Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in, YueHaibing
    • [PATCH v2] ipvs: Fix use-after-free in ip_vs_in, YueHaibing
      • Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in, Julian Anastasov
        • Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in, Simon Horman
      • Re: [PATCH v2] ipvs: Fix use-after-free in ip_vs_in, Pablo Neira Ayuso
• [PATCH nft] tests: py: fix python3., Shekhar Sharma
  • Re: [PATCH nft] tests: py: fix python3., Eric Garver
  • <Possible follow-ups>
  • [PATCH nft] tests: py: fix python3., Shekhar Sharma
    • Re: [PATCH nft] tests: py: fix python3., Eric Garver
• [PATCH v2] selftests: netfilter: missing error check when setting up veth interface, Jeffrin Jose T
  • Re: [PATCH v2] selftests: netfilter: missing error check when setting up veth interface, Pablo Neira Ayuso
    • Re: [PATCH v2] selftests: netfilter: missing error check when setting up veth interface, Jeffrin Thalakkottoor
• [PATCH 1/2 nft] jump: Introduce chain_expr in jump and goto statements, Fernando Fernandez Mancera
  • [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Pablo Neira Ayuso
    • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
      • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
      • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
        • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Pablo Neira Ayuso
          • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
            • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Pablo Neira Ayuso
              • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
                • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
                  • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Phil Sutter
                    • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
                      • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Pablo Neira Ayuso
                        • Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files, Fernando Fernandez Mancera
  • Re: [PATCH 1/2 nft] jump: Introduce chain_expr in jump and goto statements, Pablo Neira Ayuso
• [PATCH 1/2 nft WIP v2] jump: Introduce chain_expr in jump statements, Fernando Fernandez Mancera
  • [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
      • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Phil Sutter
        • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
          • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Phil Sutter
            • Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
• [PATCH iptables] man: refer to iptables-translate and ip6tables, Pablo Neira Ayuso
• [iptables PATCH] tests: Fix ipt-restore/0004-restore-race_0 testcase, Phil Sutter
  • Re: [iptables PATCH] tests: Fix ipt-restore/0004-restore-race_0 testcase, Pablo Neira Ayuso
• [iptables PATCH] xtables: Fix typo in nft_rebuild_cache(), Phil Sutter
  • Re: [iptables PATCH] xtables: Fix typo in nft_rebuild_cache(), Phil Sutter
• [PATCH net v3] netfilter: nf_queue:fix reinject verdict handling, Jagdish Motwani
  • Re: [PATCH net v3] netfilter: nf_queue:fix reinject verdict handling, Pablo Neira Ayuso
• [PATCH net v2] netfilter: nf_queue:fix reinject verdict handling, Jagdish Motwani
• [iptables PATCH] xtables: Don't leak iter in error path of __nft_chain_zero_counters(), Phil Sutter
  • Re: [iptables PATCH] xtables: Don't leak iter in error path of __nft_chain_zero_counters(), Pablo Neira Ayuso
• [libnftnl PATCH] include: Remove redundant declaration of nftnl_gen_nlmsg_parse(), Phil Sutter
  • Re: [libnftnl PATCH] include: Remove redundant declaration of nftnl_gen_nlmsg_parse(), Pablo Neira Ayuso
• [iptables PATCH] xtables: Fix for explicit rule flushes, Phil Sutter
• [PATCH nf] netfilter: nf_tables: incorrect definition for NFT_LOGLEVEL_MAX, Pablo Neira Ayuso
• [PATCH nft] src: use definitions in include/linux/netfilter/nf_tables.h, Pablo Neira Ayuso
  • Re: [PATCH nft] src: use definitions in include/linux/netfilter/nf_tables.h, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value, Pablo Neira Ayuso
• Undefined reference?, Stéphane Veyret
  • Re: Undefined reference?, Florian Westphal
    • Re: Undefined reference?, Stéphane Veyret
      • Re: Undefined reference?, Fernando Fernandez Mancera
        • Re: Undefined reference?, Stéphane Veyret
      • Re: Undefined reference?, Jan Engelhardt
        • Re: Undefined reference?, Stéphane Veyret
• [ebtables PATCH] Fix incorrect IPv6 prefix formatting, Phil Sutter
  • Re: [ebtables PATCH] Fix incorrect IPv6 prefix formatting, Pablo Neira Ayuso
• [PATCH libnftnl,v1 1/2] src: add ct expectation support, Stéphane Veyret
  • [PATCH libnftnl,v1 2/2] examples: add ct expectation examples, Stéphane Veyret
• [PATCH nft v2] py: fix missing decode/encode of strings, Eric Garver
  • Re: [PATCH nft v2] py: fix missing decode/encode of strings, Phil Sutter
  • Re: [PATCH nft v2] py: fix missing decode/encode of strings, Pablo Neira Ayuso
• [PATCH v3] extensions: libxt_owner: Add supplementary groups option, Lukasz Pawelczyk
• [PATCH v3] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
  • Re: [PATCH v3] netfilter: xt_owner: Add supplementary groups option, Pablo Neira Ayuso
• linux-next: manual merge of the netfilter tree with Linus' tree, Stephen Rothwell
• [conntrack-tools PATCH] sync-mode: Also cancel flush timer in ALL_FLUSH_CACHE, Simon Kirby
  • Re: [conntrack-tools PATCH] sync-mode: Also cancel flush timer in ALL_FLUSH_CACHE, Pablo Neira Ayuso
• [PATCH net-next,RFC 0/2] netfilter: add hardware offload infrastructure, Pablo Neira Ayuso
  • [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API, Pablo Neira Ayuso
    • Re: [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API, Jiri Pirko
      • Re: [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API, Pablo Neira Ayuso
  • [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Pablo Neira Ayuso
    • Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Jiri Pirko
      • Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Pablo Neira Ayuso
        • Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Pablo Neira Ayuso
          • Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support, Jiri Pirko
  • Re: [PATCH net-next,RFC 0/2] netfilter: add hardware offload infrastructure, Jakub Kicinski
• [nft PATCH 0/9] Testsuite-indicated fixes for JSON, Phil Sutter
  • [nft PATCH 2/9] parser_json: Fix igmp support, Phil Sutter
  • [nft PATCH 9/9] tests/py: Fix JSON expected output for icmpv6 code values, Phil Sutter
  • [nft PATCH 3/9] netlink: Fix printing of zero-length prefixes, Phil Sutter
  • [nft PATCH 5/9] json: Fix tproxy support regarding latest changes, Phil Sutter
  • [nft PATCH 4/9] tests/py: Fix JSON equivalents of osf tests, Phil Sutter
  • [nft PATCH 1/9] json: Support nat in inet family, Phil Sutter
  • [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le", Phil Sutter
    • Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le", Pablo Neira Ayuso
      • Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le", Pablo Neira Ayuso
        • Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le", Phil Sutter
  • [nft PATCH 8/9] tests/py: Fix JSON expexted output after expr merge change, Phil Sutter
  • [nft PATCH 6/9] parser_json: Fix ct timeout object support, Phil Sutter
  • Re: [nft PATCH 0/9] Testsuite-indicated fixes for JSON, Pablo Neira Ayuso
• [PATCH nft WIP] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
  • Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files, Pablo Neira Ayuso
    • Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files, Fernando Fernandez Mancera
      • Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files, Pablo Neira Ayuso
• [PATCH net] netfilter: nf_queue:fix reinject verdict handling, Jagdish Motwani
  • Re: [PATCH net] netfilter: nf_queue:fix reinject verdict handling, Pablo Neira Ayuso
    • RE: [PATCH net] netfilter: nf_queue:fix reinject verdict handling, Jagdish Motwani
      • Re: [PATCH net] netfilter: nf_queue:fix reinject verdict handling, Pablo Neira Ayuso
• [PATCH v2] extensions: libxt_owner: Add supplementary groups option, Lukasz Pawelczyk
• [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
  • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Eric Dumazet
    • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
      • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Eric Dumazet
        • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk
          • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Eric Dumazet
            • Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option, Lukasz Pawelczyk