Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH xtables] extensions: libebt_ip: fix tos negation, Florian Westphal
• [PATCH xtables] extensions: libebt_ip6: fix ip6-dport negation, Florian Westphal
• [PATCH xtables] xtables-nft: make -Z option work, Florian Westphal
  • Re: [PATCH xtables] xtables-nft: make -Z option work, Pablo Neira Ayuso
    • Re: [PATCH xtables] xtables-nft: make -Z option work, Florian Westphal
      • Re: [PATCH xtables] xtables-nft: make -Z option work, Florian Westphal
        • Re: [PATCH xtables] xtables-nft: make -Z option work, Pablo Neira Ayuso
    • Re: [PATCH xtables] xtables-nft: make -Z option work, Jan Engelhardt
• [PATCH nf v3 4/4] netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set, Taehee Yoo
• [PATCH nf v3 3/4] netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in clusterip_config_entry_put(), Taehee Yoo
• [PATCH nf v3 2/4] netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine, Taehee Yoo
• [PATCH nf v3 1/4] netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine, Taehee Yoo
• [PATCH nf v3 0/4] netfilter: ipt_CLUSTERIP: fix bugs in ipt_CLUSTERIP, Taehee Yoo
  • Re: [PATCH nf v3 0/4] netfilter: ipt_CLUSTERIP: fix bugs in ipt_CLUSTERIP, Pablo Neira Ayuso
• [PATCH nft] documentation: try to clarify iif vs. iifname., Florian Westphal
  • Re: [PATCH nft] documentation: try to clarify iif vs. iifname., Pablo Neira Ayuso
• [PATCH nf v2 3/3] netfilter: nf_conncount: fix unexpected permanent node of list., Taehee Yoo
• [PATCH nf v2 2/3] netfilter: nf_conncount: fix list_del corruption in conn_free, Taehee Yoo
• [PATCH nf v2 1/3] netfilter: nf_conncount: use spin_lock_bh instead of spin_lock, Taehee Yoo
• [PATCH nf v2 0/3] netfilter: nf_conncount: fix bugs in conn_free, Taehee Yoo
  • Re: [PATCH nf v2 0/3] netfilter: nf_conncount: fix bugs in conn_free, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: don't use position attribute on rule replacement, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: don't use position attribute on rule replacement, Pablo Neira Ayuso
• [PATCH] doc: libnftables.adoc misc cleanups, Duncan Roe
  • Re: [PATCH] doc: libnftables.adoc misc cleanups, Pablo Neira Ayuso
    • Re: [PATCH] doc: libnftables.adoc misc cleanups, Duncan Roe
• [PATCH xtables] libxtables: add and use mac print helpers, Florian Westphal
• [PATCH iptables] iptables-tests: add % to run iptables commands, Pablo Neira Ayuso
• [PATCH iptables] iptables-tests: do not append xtables-multi to external commands, Pablo Neira Ayuso
  • Re: [PATCH iptables] iptables-tests: do not append xtables-multi to external commands, Pablo Neira Ayuso
• Rebasing nf.git ahead, Pablo Neira Ayuso
• [PATCH iptables 0/6] misc. ebtables-nft improvements, Florian Westphal
  • [PATCH iptables 1/6] tests: add basic ebtables test support, Florian Westphal
  • [PATCH iptables 2/6] ebtables: fix -j CONTINUE handling for add/delete, Florian Westphal
  • [PATCH iptables 3/6] ebtables: relax -t table restriction, add snat/dnat test cases, Florian Westphal
  • [PATCH iptables 4/6] ebtables: add test cases, Florian Westphal
  • [PATCH iptables 5/6] ebtables: add redirect test case, Florian Westphal
  • [PATCH iptables 6/6] ebtables-nft: add arpreply target, Florian Westphal
  • Re: [PATCH iptables 0/6] misc. ebtables-nft improvements, Pablo Neira Ayuso
• [PATCH nf,v2 1/2] netfilter: conntrack: add nf_{tcp,udp,sctp,icmp,dccp,icmpv6,generic}_pernet(), Pablo Neira Ayuso
  • [PATCH nf,v2 2/2] netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_compat: ebtables 'nat' table is normal chain type, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_compat: ebtables 'nat' table is normal chain type, Pablo Neira Ayuso
• [PATCH xtables] iptables-nft: fix bogus handling of zero saddr/daddr, Florian Westphal
  • Re: [PATCH xtables] iptables-nft: fix bogus handling of zero saddr/daddr, Florian Westphal
• [PATCH nf 1/2] netfilter: add nf_{tcp,udp,sctp,icmp,dccp,icmpv6,generic}_pernet(), Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr, Pablo Neira Ayuso
    • Re: [PATCH nf 2/2] netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr, kbuild test robot
    • Re: [PATCH nf 2/2] netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr, kbuild test robot
  • Re: [PATCH nf 1/2] netfilter: add nf_{tcp,udp,sctp,icmp,dccp,icmpv6,generic}_pernet(), kbuild test robot
  • Re: [PATCH nf 1/2] netfilter: add nf_{tcp,udp,sctp,icmp,dccp,icmpv6,generic}_pernet(), kbuild test robot
• [PATCH iptables] iptables: iptables-test: fix netns test, Taehee Yoo
  • Re: [PATCH iptables] iptables: iptables-test: fix netns test, Pablo Neira Ayuso
• [PATCH] netfilter: ctnetlink: always honor CTA_MARK_MASK, Andreas Jaggi
  • Re: [PATCH] netfilter: ctnetlink: always honor CTA_MARK_MASK, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: ctnetlink: always honor CTA_MARK_MASK, Pablo Neira Ayuso
• [nft PATCH] doc: Fix for make distcheck, Phil Sutter
  • Re: [nft PATCH] doc: Fix for make distcheck, Pablo Neira Ayuso
• [iptables PATCH v2] xtables: Fix for matching rules with wildcard interfaces, Phil Sutter
  • Re: [iptables PATCH v2] xtables: Fix for matching rules with wildcard interfaces, Pablo Neira Ayuso
• [PATCH nf 0/2] netfilter: nf_tables: don't skip inactive chains during update, Florian Westphal
  • [PATCH nf 1/2] netfilter: nf_tables: don't skip inactive chains during update, Florian Westphal
  • [PATCH nf 2/2] selftests: add script to stress-test nft packet path vs. control plane, Florian Westphal
  • Re: [PATCH nf 0/2] netfilter: nf_tables: don't skip inactive chains during update, Pablo Neira Ayuso
• [nft PATCH] py: Adjust Nftables class to output flags changes, Phil Sutter
  • Re: [nft PATCH] py: Adjust Nftables class to output flags changes, Pablo Neira Ayuso
• [PATCH nft] json: fix json_events_cb() declaration when libjansson is not present, Laura Garcia Liebana
  • Re: [PATCH nft] json: fix json_events_cb() declaration when libjansson is not present, Pablo Neira Ayuso
  • Re: [PATCH nft] json: fix json_events_cb() declaration when libjansson is not present, Phil Sutter
• Segmentation fault when using ebtables, Dmitry Vinokurov
• [PATCH v2] netfilter: ipset: Fix calling ip_set() macro at dumping, Jozsef Kadlecsik
  • Re: [PATCH v2] netfilter: ipset: Fix calling ip_set() macro at dumping, Pablo Neira Ayuso
• [iptables PATCH] xtables: Fix for matching rules with wildcard interfaces, Phil Sutter
  • Re: [iptables PATCH] xtables: Fix for matching rules with wildcard interfaces, Pablo Neira Ayuso
    • Re: [iptables PATCH] xtables: Fix for matching rules with wildcard interfaces, Phil Sutter
      • Re: [iptables PATCH] xtables: Fix for matching rules with wildcard interfaces, Pablo Neira Ayuso
• [PATCH 1/3 nft,v3] src: get rid of nft_ctx_output_{get,set}_numeric(), Pablo Neira Ayuso
  • [PATCH 2/3 nft,v3] src: add -p to print layer 4 protocol numerically, Pablo Neira Ayuso
    • Re: [PATCH 2/3 nft,v3] src: add -p to print layer 4 protocol numerically, Phil Sutter
  • [PATCH 3/3 nft,v2] expression: always print range expression numerically, Pablo Neira Ayuso
    • Re: [PATCH 3/3 nft,v2] expression: always print range expression numerically, Phil Sutter
  • Re: [PATCH 1/3 nft,v3] src: get rid of nft_ctx_output_{get,set}_numeric(), Phil Sutter
• [PATCH nft 1/2,v2] src: get rid of nft_ctx_output_{get,set}_numeric(), Pablo Neira Ayuso
  • [PATCH nft 2/2] expression: always print range expression numerically, Pablo Neira Ayuso
• [PATCH nft] expression: always print range expression numerically, Pablo Neira Ayuso
• [PATCH nft] src: get rid of nft_ctx_output_{get,set}_numeric(), Pablo Neira Ayuso
  • Re: [PATCH nft] src: get rid of nft_ctx_output_{get,set}_numeric(), Pablo Neira Ayuso
    • Re: [PATCH nft] src: get rid of nft_ctx_output_{get,set}_numeric(), Phil Sutter
      • Re: [PATCH nft] src: get rid of nft_ctx_output_{get,set}_numeric(), Pablo Neira Ayuso
• [PATCH nft 1/2,v2] src: add NFT_CTX_OUTPUT_NUMERIC_PROTO, Pablo Neira Ayuso
  • [PATCH nft 2/2,v2] src: add -y to priority base chain nummerically, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2,v2] src: add -y to priority base chain nummerically, Phil Sutter
  • Re: [PATCH nft 1/2,v2] src: add NFT_CTX_OUTPUT_NUMERIC_PROTO, Phil Sutter
• [PATCH 1/2 nft,v2] src: add -p to print layer 4 protocol numerically, Pablo Neira Ayuso
  • [PATCH 2/2] src: add -y to priority base chain nummerically, Pablo Neira Ayuso
  • Re: [PATCH 1/2 nft,v2] src: add -p to print layer 4 protocol numerically, Pablo Neira Ayuso
    • Re: [PATCH 1/2 nft,v2] src: add -p to print layer 4 protocol numerically, Pablo Neira Ayuso
• [PATCH nft] src: add -p to print layer 4 protocol numerically, Pablo Neira Ayuso
  • Re: [PATCH nft] src: add -p to print layer 4 protocol numerically, Phil Sutter
    • Re: [PATCH nft] src: add -p to print layer 4 protocol numerically, Pablo Neira Ayuso
      • Re: [PATCH nft] src: add -p to print layer 4 protocol numerically, Pablo Neira Ayuso
    • Re: [PATCH nft] src: add -p to print layer 4 protocol numerically, Pablo Neira Ayuso
• [PATCH nft 4/5,v3] src: add nft_ctx_output_{get,set}_json() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
  • Re: [PATCH nft 4/5,v3] src: add nft_ctx_output_{get,set}_json() to nft_ctx_output_{get,set}_flags, Phil Sutter
• [PATCH nft,v3 2/5] src: add nft_ctx_output_{get,set}_stateless() to nft_ctx_output_{get,flags}_flags, Pablo Neira Ayuso
  • Re: [PATCH nft,v3 2/5] src: add nft_ctx_output_{get,set}_stateless() to nft_ctx_output_{get,flags}_flags, Phil Sutter
    • Re: [PATCH nft,v3 2/5] src: add nft_ctx_output_{get,set}_stateless() to nft_ctx_output_{get,flags}_flags, Pablo Neira Ayuso
• [PATCH] src: default to numeric UID and GID listing, Pablo Neira Ayuso
  • Re: [PATCH] src: default to numeric UID and GID listing, Phil Sutter
    • Re: [PATCH] src: default to numeric UID and GID listing, Pablo Neira Ayuso
• [PATCH nft 1/5,v4] src: Revert --literal, add -S/--service, Pablo Neira Ayuso
  • [PATCH nft 2/5,v2] src: add nft_ctx_output_{get,set}_stateless() to nft_ctx_output_{get,flags}_flags, Pablo Neira Ayuso
    • Re: [PATCH nft 2/5,v2] src: add nft_ctx_output_{get,set}_stateless() to nft_ctx_output_{get,flags}_flags, Phil Sutter
      • Re: [PATCH nft 2/5,v2] src: add nft_ctx_output_{get,set}_stateless() to nft_ctx_output_{get,flags}_flags, Pablo Neira Ayuso
  • [PATCH nft 3/5,v2] src: add nft_ctx_output_{get,set}_handle() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
    • Re: [PATCH nft 3/5,v2] src: add nft_ctx_output_{get,set}_handle() to nft_ctx_output_{get,set}_flags, Phil Sutter
      • Re: [PATCH nft 3/5,v2] src: add nft_ctx_output_{get,set}_handle() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
  • [PATCH nft 5/5,v2] src: add nft_ctx_output_{get,set}_echo() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
    • Re: [PATCH nft 5/5,v2] src: add nft_ctx_output_{get,set}_echo() to nft_ctx_output_{get,set}_flags, Phil Sutter
  • [PATCH nft 4/5,v2] src: add nft_ctx_output_{get,set}_json() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
    • Re: [PATCH nft 4/5,v2] src: add nft_ctx_output_{get,set}_json() to nft_ctx_output_{get,set}_flags, Phil Sutter
      • Re: [PATCH nft 4/5,v2] src: add nft_ctx_output_{get,set}_json() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
        • Re: [PATCH nft 4/5,v2] src: add nft_ctx_output_{get,set}_json() to nft_ctx_output_{get,set}_flags, Phil Sutter
    • Re: [PATCH nft 4/5,v2] src: add nft_ctx_output_{get,set}_json() to nft_ctx_output_{get,set}_flags, Duncan Roe
      • Re: [PATCH nft 4/5,v2] src: add nft_ctx_output_{get,set}_json() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
  • Re: [PATCH nft 1/5,v4] src: Revert --literal, add -S/--service, Phil Sutter
• [PATCH] ulogd2: fix build with musl libc, Cameron Norman
  • Re: [PATCH] ulogd2: fix build with musl libc, Pablo Neira Ayuso
    • Re: [PATCH] ulogd2: fix build with musl libc, Cameron Norman
      • Re: [PATCH] ulogd2: fix build with musl libc, Pablo Neira Ayuso
• [ANNOUNCE] ipset 7.0 released, Jozsef Kadlecsik
• [PATCH 0/5] ipset patches for nf, Jozsef Kadlecsik
  • [PATCH 4/5] netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment(), Jozsef Kadlecsik
  • [PATCH 3/5] netfilter: ipset: fix ip_set_list allocation failure, Jozsef Kadlecsik
  • [PATCH 1/5] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
  • [PATCH 5/5] netfilter: ipset: Fix calling ip_set() macro at dumping, Jozsef Kadlecsik
    • Re: [PATCH 5/5] netfilter: ipset: Fix calling ip_set() macro at dumping, Pablo Neira Ayuso
      • Re: [PATCH 5/5] netfilter: ipset: Fix calling ip_set() macro at dumping, Jozsef Kadlecsik
  • [PATCH 2/5] netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net, Jozsef Kadlecsik
  • Re: [PATCH 0/5] ipset patches for nf, Pablo Neira Ayuso
• [PATCH nft 1/5,v3] src: Revert --literal, add -S/--services, Pablo Neira Ayuso
  • [PATCH nft 3/5] src: add nft_ctx_output_{get,set}_handle() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
  • [PATCH nft 5/5] src: add nft_ctx_output_{get,set}_echo() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
  • [PATCH nft 4/5] src: add nft_ctx_output_{get,set}_json() to nft_ctx_output_{get,set}_flags, Pablo Neira Ayuso
  • [PATCH nft 2/5] src: add nft_ctx_output_{get,set}_stateless() to nft_ctx_output_{get,flags}_flags, Pablo Neira Ayuso
• [nft PATCH] nft.8: Document log level audit, Phil Sutter
  • Re: [nft PATCH] nft.8: Document log level audit, Pablo Neira Ayuso
• [nft PATCH] JSON: Add support for echo option, Phil Sutter
  • Re: [nft PATCH] JSON: Add support for echo option, Pablo Neira Ayuso
    • Re: [nft PATCH] JSON: Add support for echo option, Phil Sutter
      • Re: [nft PATCH] JSON: Add support for echo option, Pablo Neira Ayuso
• [nft PATCH] tests/shell: Add testcase for cache update problems, Phil Sutter
  • Re: [nft PATCH] tests/shell: Add testcase for cache update problems, Pablo Neira Ayuso
    • Re: [nft PATCH] tests/shell: Add testcase for cache update problems, Phil Sutter
• [PATCH nf] Revert "netfilter: nft_numgen: add map lookups for numgen random operations", Pablo Neira Ayuso
• [PATCH v2] netfilter: conntrack: fix calculation of next bucket number in early_drop, Vasily Khoruzhick
  • Re: [PATCH v2] netfilter: conntrack: fix calculation of next bucket number in early_drop, Pablo Neira Ayuso
• [PATCH nft 1/2] evaluate: do not pass EXPR_SET_ELEM to stmt_evaluate_arg() for set/map evaluation, Pablo Neira Ayuso
  • [PATCH nft 2/2] evaluate: stmt_evaluate_map() needs right hand side evaluation too, Pablo Neira Ayuso
• [PATCH nf 2/2] netfilter: nf_conncount: fix list_del corruption in conn_free, Taehee Yoo
  • Re: [PATCH nf 2/2] netfilter: nf_conncount: fix list_del corruption in conn_free, Yi-Hung Wei
• [PATCH nf 1/2] netfilter: nf_conncount: use spin_lock_bh instead of spin_lock, Taehee Yoo
  • Re: [PATCH nf 1/2] netfilter: nf_conncount: use spin_lock_bh instead of spin_lock, Yi-Hung Wei
  • Re: [PATCH nf 1/2] netfilter: nf_conncount: use spin_lock_bh instead of spin_lock, Pablo Neira Ayuso
    • Re: [PATCH nf 1/2] netfilter: nf_conncount: use spin_lock_bh instead of spin_lock, Florian Westphal
      • Re: [PATCH nf 1/2] netfilter: nf_conncount: use spin_lock_bh instead of spin_lock, Taehee Yoo
• [PATCH nf 0/2] netfilter: nf_conncount: fix bugs in conn_free, Taehee Yoo
  • Re: [PATCH nf 0/2] netfilter: nf_conncount: fix bugs in conn_free, Pablo Neira Ayuso
• [PATCH] netfilter: conntrack: fix calculation of next bucket number in early_drop, Vasily Khoruzhick
  • Re: [PATCH] netfilter: conntrack: fix calculation of next bucket number in early_drop, Dmitry Safonov
    • Re: [PATCH] netfilter: conntrack: fix calculation of next bucket number in early_drop, Vasiliy Khoruzhick
• [nft PATCH] json: Work around segfault when encountering xt stmt, Phil Sutter
  • Re: [nft PATCH] json: Work around segfault when encountering xt stmt, Pablo Neira Ayuso
• [RFC] [PATCH] netfilter: Fix kmemleak false positive reports, zhe.he
• [PATCH libnftnl] src: remove nftnl_rule_cmp() and nftnl_expr_cmp(), Pablo Neira Ayuso
• [PATCH nft] netlink: remove netlink_batch_send(), Pablo Neira Ayuso
• [PATCH nft] mnl: remove alloc_nftnl_flowtable(), Pablo Neira Ayuso
• [nft PATCH] mnl: Improve error checking in mnl_nft_event_listener(), Phil Sutter
  • Re: [nft PATCH] mnl: Improve error checking in mnl_nft_event_listener(), Pablo Neira Ayuso
    • Re: [nft PATCH] mnl: Improve error checking in mnl_nft_event_listener(), Phil Sutter
      • Re: [nft PATCH] mnl: Improve error checking in mnl_nft_event_listener(), Pablo Neira Ayuso
• [PATCH nft,v2] src: Revert --literal, add -S/--services, Pablo Neira Ayuso
• [PATCH nft] src: Revert --literal, add --service, Pablo Neira Ayuso
• [PATCH] netfilter: bridge: define INT_MIN & INT_MAX in userspace, Jiri Slaby
  • Re: [PATCH] netfilter: bridge: define INT_MIN & INT_MAX in userspace, Máté Eckl
  • Re: [PATCH] netfilter: bridge: define INT_MIN & INT_MAX in userspace, Pablo Neira Ayuso
• [PATCH iptables] old patch from Debian for iptables-apply, Arturo Borrero Gonzalez
• [nft PATCH] evaluate: Convert ranges of N-N to N, Phil Sutter
  • Re: [nft PATCH] evaluate: Convert ranges of N-N to N, Pablo Neira Ayuso
• [nft PATCH 0/3] Fix JSON API after recent other changes, Phil Sutter
  • [nft PATCH 2/3] json: Fix osf ttl support, Phil Sutter
    • Re: [nft PATCH 2/3] json: Fix osf ttl support, Fernando Fernandez Mancera
  • [nft PATCH 3/3] json: Fix for recent changes to context structs, Phil Sutter
  • [nft PATCH 1/3] include: Fix comment for struct eval_ctx, Phil Sutter
  • Re: [nft PATCH 0/3] Fix JSON API after recent other changes, Pablo Neira Ayuso
• stable regression: revert request for netfilter ipv6 defrag bug, Florian Westphal
  • Re: stable regression: revert request for netfilter ipv6 defrag bug, Sasha Levin
• iptables-1.8.1: cannot build without libnftnl, Lars Wendler
  • Re: iptables-1.8.1: cannot build without libnftnl, Florian Westphal
    • Re: iptables-1.8.1: cannot build without libnftnl, Florian Westphal
• [PATCH nf-next] netfilter: remove unused headers., Weongyo Jeong
• [PATCH nft 1/3] src: move socket open and reopen to mnl.c, Pablo Neira Ayuso
  • [PATCH nft 3/3] mnl: use either name or handle to refer to objects, Pablo Neira Ayuso
  • [PATCH nft 2/3] mnl: remove alloc_nftnl_obj(), Pablo Neira Ayuso
• [PATCH nft v3] src: osf: add ttl option support, Fernando Fernandez Mancera
  • Re: [PATCH nft v3] src: osf: add ttl option support, Pablo Neira Ayuso
• [iptables PATCH] xtables: Fix for spurious errors from iptables-translate, Phil Sutter
  • Re: [iptables PATCH] xtables: Fix for spurious errors from iptables-translate, Pablo Neira Ayuso
• [PATCH nf] netfilter: ipv6: fix oops when defragmenting locally generated fragments, Florian Westphal
  • Re: [PATCH nf] netfilter: ipv6: fix oops when defragmenting locally generated fragments, Eric Dumazet
  • Re: [PATCH nf] netfilter: ipv6: fix oops when defragmenting locally generated fragments, Maciej Żenczykowski
    • Re: [PATCH nf] netfilter: ipv6: fix oops when defragmenting locally generated fragments, Florian Westphal
  • Re: [PATCH nf] netfilter: ipv6: fix oops when defragmenting locally generated fragments, Pablo Neira Ayuso
• [ANNOUNCE] iptables 1.8.1 release, Florian Westphal
• [PATCH 1/2 nft v3 preview] src: osf: add ttl option support, Fernando Fernandez Mancera
  • [PATCH 2/2 nft v3] doc: osf: add ttl option to man page, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft v3] doc: osf: add ttl option to man page, Pablo Neira Ayuso
  • Re: [PATCH 1/2 nft v3 preview] src: osf: add ttl option support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_osf: check if attribute is present, Pablo Neira Ayuso
• [PATCH nft 1/3] src: pass struct nft_ctx through struct eval_ctx, Pablo Neira Ayuso
  • [PATCH nft 3/3] netlink: reset mnl_socket field in struct nft_ctx on EINTR, Pablo Neira Ayuso
  • [PATCH nft 2/3] src: pass struct nft_ctx through struct netlink_ctx, Pablo Neira Ayuso
• [PATCH iptables] configure: bump versions for 1.8.1 release, Florian Westphal
  • Re: [PATCH iptables] configure: bump versions for 1.8.1 release, Pablo Neira Ayuso
• [nft PATCH] tests: shell: Extend get element test, Phil Sutter
  • Re: [nft PATCH] tests: shell: Extend get element test, Pablo Neira Ayuso
    • Re: [nft PATCH] tests: shell: Extend get element test, Phil Sutter
      • Re: [nft PATCH] tests: shell: Extend get element test, Pablo Neira Ayuso
        • Re: [nft PATCH] tests: shell: Extend get element test, Phil Sutter
          • Re: [nft PATCH] tests: shell: Extend get element test, Pablo Neira Ayuso
• [PATCH nf] netfilter: xt_IDLETIMER: add sysfs filename checking routine, Taehee Yoo
  • Re: [PATCH nf] netfilter: xt_IDLETIMER: add sysfs filename checking routine, Pablo Neira Ayuso
• [nft PATCH] make cache persistent if local entries were added, Phil Sutter
  • Re: [nft PATCH] make cache persistent if local entries were added, Pablo Neira Ayuso
    • Re: [nft PATCH] make cache persistent if local entries were added, Phil Sutter
• [PATCH 00/10] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 01/10] netfilter: Replace spin_is_locked() with lockdep, Pablo Neira Ayuso
  • [PATCH 04/10] netfilter: nft_xfrm: use state family, not hook one, Pablo Neira Ayuso
  • [PATCH 06/10] netfilter: nf_nat_snmp_basic: add missing helper alias name, Pablo Neira Ayuso
  • [PATCH 09/10] netfilter: nfnetlink_log: remove empty nfnetlink_log.h header file, Pablo Neira Ayuso
  • [PATCH 10/10] Revert "netfilter: xt_quota: fix the behavior of xt_quota module", Pablo Neira Ayuso
  • [PATCH 08/10] netfilter: remove two unused variables., Pablo Neira Ayuso
  • [PATCH 07/10] netfilter: nf_flow_table: remove unnecessary parameter of nf_flow_table_cleanup(), Pablo Neira Ayuso
  • [PATCH 05/10] netfilter: xt_osf: simplify xt_osf_match_packet(), Pablo Neira Ayuso
  • [PATCH 02/10] netfilter: cttimeout: remove set but not used variable 'l3num', Pablo Neira Ayuso
  • [PATCH 03/10] netfilter: nft_osf: Add ttl option support, Pablo Neira Ayuso
  • Re: [PATCH 00/10] Netfilter updates for net-next, David Miller
• [PATCH iptables] libxtables: expose new etherdb lookup function through libxtables API, Pablo Neira Ayuso
  • Re: [PATCH iptables] libxtables: expose new etherdb lookup function through libxtables API, Phil Sutter
• [PATCH iptables] libxtables: prefix exported new functions for etherdb lookups, Pablo Neira Ayuso
  • Re: [PATCH iptables] libxtables: prefix exported new functions for etherdb lookups, Phil Sutter
• [PATCH nf-next] Revert "netfilter: xt_quota: fix the behavior of xt_quota module", Pablo Neira Ayuso
  • Re: [PATCH nf-next] Revert "netfilter: xt_quota: fix the behavior of xt_quota module", Maciej Żenczykowski
• [PATCH iptables,v2] iptables-test: add -N option to exercise netns removal path, Pablo Neira Ayuso
• [PATCH iptables] iptables-test: add -N option to exercise netns removal path, Pablo Neira Ayuso
  • Re: [PATCH iptables] iptables-test: add -N option to exercise netns removal path, Phil Sutter
    • Re: [PATCH iptables] iptables-test: add -N option to exercise netns removal path, Pablo Neira Ayuso
      • Re: [PATCH iptables] iptables-test: add -N option to exercise netns removal path, Phil Sutter
        • Re: [PATCH iptables] iptables-test: add -N option to exercise netns removal path, Pablo Neira Ayuso
          • Re: [PATCH iptables] iptables-test: add -N option to exercise netns removal path, Phil Sutter
            • Re: [PATCH iptables] iptables-test: add -N option to exercise netns removal path, Pablo Neira Ayuso
• [PATCH nft v2] doc: Document ct timeout support, Harsha Sharma
  • Re: [PATCH nft v2] doc: Document ct timeout support, Pablo Neira Ayuso
• [PATCH nf] netfilter: xt_RATEEST: remove netns exit routine, Taehee Yoo
  • Re: [PATCH nf] netfilter: xt_RATEEST: remove netns exit routine, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: xt_RATEEST: remove netns exit routine, Taehee Yoo
      • Re: [PATCH nf] netfilter: xt_RATEEST: remove netns exit routine, Pablo Neira Ayuso
        • Re: [PATCH nf] netfilter: xt_RATEEST: remove netns exit routine, Taehee Yoo
  • Re: [PATCH nf] netfilter: xt_RATEEST: remove netns exit routine, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nfnetlink_log: remove empty nfnetlink_log.h header file, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nfnetlink_log: remove empty nfnetlink_log.h header file, Pablo Neira Ayuso
• [PATCH] netfilter: add grev6 conntrack support, Alin Nastac
  • Re: [PATCH] netfilter: add grev6 conntrack support, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: add grev6 conntrack support, Alin Năstac
• [PATCH] netfilter: conntrack: fix cloned skb __nf_conntrack_confirm race, Chieh-Min Wang
  • [PATCH] netfilter: conntrack: fix cloned skb __nf_conntrack_confirm race, chiehminw
    • Re: [PATCH] netfilter: conntrack: fix cloned skb __nf_conntrack_confirm race, Chieh-Min Wang
      • [PATCH] netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrack_confirm, Chieh-Min Wang
        • Re: [PATCH] netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrack_confirm, Chieh-Min Wang
          • [PATCH] netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrack_confirm, Chieh-Min Wang
            • Re: [PATCH] netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrack_confirm, Pablo Neira Ayuso
              • [PATCH] netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrack_confirm, Chieh-Min Wang
• [PATCH libnftnl 1/4] tests: Execute nft-flowtable-test in test-script.sh, Matt Turner
  • [PATCH libnftnl 2/4] tests: Run regression tests from make check, Matt Turner
    • Re: [PATCH libnftnl 2/4] tests: Run regression tests from make check, Pablo Neira Ayuso
  • [PATCH libnftnl 3/4] tests: Remove test-script.sh, Matt Turner
    • Re: [PATCH libnftnl 3/4] tests: Remove test-script.sh, Pablo Neira Ayuso
  • [PATCH libnftnl 4/4] src: Use memcpy() to handle potentially unaligned data, Matt Turner
    • Re: [PATCH libnftnl 4/4] src: Use memcpy() to handle potentially unaligned data, Pablo Neira Ayuso
      • Re: [PATCH libnftnl 4/4] src: Use memcpy() to handle potentially unaligned data, Matt Turner
    • Re: [PATCH libnftnl 4/4] src: Use memcpy() to handle potentially unaligned data, Pablo Neira Ayuso
      • Re: [PATCH libnftnl 4/4] src: Use memcpy() to handle potentially unaligned data, Matt Turner
        • Re: [PATCH libnftnl 4/4] src: Use memcpy() to handle potentially unaligned data, Matt Turner
          • Re: [PATCH libnftnl 4/4] src: Use memcpy() to handle potentially unaligned data, Pablo Neira Ayuso
            • Re: [PATCH libnftnl 4/4] src: Use memcpy() to handle potentially unaligned data, Matt Turner
              • Re: [PATCH libnftnl 4/4] src: Use memcpy() to handle potentially unaligned data, Pablo Neira Ayuso
  • Re: [PATCH libnftnl 1/4] tests: Execute nft-flowtable-test in test-script.sh, Pablo Neira Ayuso
• netfilter request for -stable 4.9.x inclusion, Pablo Neira Ayuso
  • Re: netfilter request for -stable 4.9.x inclusion, Greg Kroah-Hartman
• [PATCH nf-next] netfilter: remove unused udp.h header., Weongyo Jeong
  • Re: [PATCH nf-next] netfilter: remove unused udp.h header., Pablo Neira Ayuso
• [PATCH nf-next] netfilter: remove two unused variables., Weongyo Jeong
  • Re: [PATCH nf-next] netfilter: remove two unused variables., Pablo Neira Ayuso
• [PATCH nf-next] netfilter: x_tables: add missing comments, Hyejeong Jang
• [PATCH nft,v2] evaluate: bogus bail out with raw expression from dynamic sets, Pablo Neira Ayuso
• [PATCH nft] evaluate: bogus bail out with raw expression from dynamic sets, Pablo Neira Ayuso
• [PATCH nft] src: remove opts field from struct xt_stmt, Pablo Neira Ayuso
  • Re: [PATCH nft] src: remove opts field from struct xt_stmt, Phil Sutter
• [PATCH nf-next] netfilter: xt_quota: simplify quota logic, account for consumed bytes, Pablo Neira Ayuso
• [PATCH net] netfilter: fix DNAT target for shifted portmap ranges, Paolo Abeni
  • Re: [PATCH net] netfilter: fix DNAT target for shifted portmap ranges, Pablo Neira Ayuso
• [nf-next:master 1/7] net/ipv4/netfilter/ipt_ECN.c:58:28: error: 'IPT_ECN_OP_SET_ECE' undeclared; did you mean 'IPT_ECN_OP_MATCH_ECE'?, kbuild test robot
• [PATCH libnftables] src: remove json support, Pablo Neira Ayuso
  • Re: [PATCH libnftables] src: remove json support, Phil Sutter
    • Re: [PATCH libnftables] src: remove json support, Pablo Neira Ayuso
      • Re: [PATCH libnftables] src: remove json support, Pablo Neira Ayuso
        • Re: [PATCH libnftables] src: remove json support, Phil Sutter
          • Re: [PATCH libnftables] src: remove json support, Pablo Neira Ayuso
• [PATCH nf v2 3/3] netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in clusterip_config_entry_put(), Taehee Yoo
• [PATCH nf v2 2/3] netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine, Taehee Yoo
• [PATCH nf v2 1/3] netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine, Taehee Yoo
• [PATCH nf v2 0/3] netfilter: ipt_CLUSTERIP: fix bugs in ipt_CLUSTERIP, Taehee Yoo
• [PATCH] netfilter: x_tables: fix missing unlock if table init fails, Omar Sandoval
  • Re: [PATCH] netfilter: x_tables: fix missing unlock if table init fails, Omar Sandoval
• [nft PATCH] xt: Fix for covscan warning in xt_stmt_xlate(), Phil Sutter
• [nft PATCH] json: Fix memleak in dup_stmt_json(), Phil Sutter
  • Re: [nft PATCH] json: Fix memleak in dup_stmt_json(), Pablo Neira Ayuso
• [nft PATCH] parser_json: Fix for ineffective family value checks, Phil Sutter
  • Re: [nft PATCH] parser_json: Fix for ineffective family value checks, Pablo Neira Ayuso
• [nft PATCH] libnftables: Fix memleak in nft_parse_bison_filename(), Phil Sutter
  • Re: [nft PATCH] libnftables: Fix memleak in nft_parse_bison_filename(), Pablo Neira Ayuso
• [nft PATCH] Fix memleak in netlink_parse_fwd() error path, Phil Sutter
  • Re: [nft PATCH] Fix memleak in netlink_parse_fwd() error path, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_flow_offload: remove secpath check, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nft_flow_offload: remove secpath check, Steffen Klassert
• [PATCH nf v2] netfilter: nf_flow_table: do not remove offload when other netns's interface is down, Taehee Yoo
  • Re: [PATCH nf v2] netfilter: nf_flow_table: do not remove offload when other netns's interface is down, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary parameter of nf_flow_table_cleanup(), Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary parameter of nf_flow_table_cleanup(), Pablo Neira Ayuso
• [nft PATCH 0/8] monitor: Use libnftables for JSON output, Phil Sutter
  • [nft PATCH 3/8] json: Add ct timeout support, Phil Sutter
  • [nft PATCH 5/8] monitor: Drop 'update table' and 'update chain' cases, Phil Sutter
  • [nft PATCH 8/8] tests: monitor: Test JSON output as well, Phil Sutter
  • [nft PATCH 2/8] json: Drop unused symbolic_constant_json() stub, Phil Sutter
  • [nft PATCH 6/8] monitor: Fix printing of ct objects, Phil Sutter
  • [nft PATCH 1/8] tests/py: Add missing JSON bits for inet/meta.t, Phil Sutter
  • [nft PATCH 4/8] monitor: Drop fake XML support, Phil Sutter
  • [nft PATCH 7/8] monitor: Use libnftables JSON output, Phil Sutter
  • Re: [nft PATCH 0/8] monitor: Use libnftables for JSON output, Pablo Neira Ayuso
• spinlock'ing of "struct nf_conn"->custom_buffer_ptr within xt_match.match callback, Oleh Danilovskyi
  • Re: spinlock'ing of "struct nf_conn"->custom_buffer_ptr within xt_match.match callback, Florian Westphal
• [iptables PATCH] xtables: Remove target_maxnamelen field, Phil Sutter
  • Re: [iptables PATCH] xtables: Remove target_maxnamelen field, Pablo Neira Ayuso
• [PATCH nf-next,v2] netfilter: nft_compat: do not dump private area, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: xt_osf: simplify xt_osf_match_packet(), Pablo Neira Ayuso
• [PATCH nft] segtree: set proper error cause on existing elements, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: xfrm: use state family, not hook one, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: xfrm: use state family, not hook one, Pablo Neira Ayuso
• [PATCH nft] segtree: incorrect handling of last element in get_set_decompose(), Pablo Neira Ayuso
• [PATCH nft 1/3] mnl: remove alloc_nftnl_set(), Pablo Neira Ayuso
  • [PATCH nft 2/3] src: remove netlink_flush_table(), Pablo Neira Ayuso
  • [PATCH nft 3/3] src: remove netlink_flush_chain(), Pablo Neira Ayuso
• [PATCH nft] mnl: remove alloc_nftnl_rule(), Pablo Neira Ayuso
• [PATCH nf-next v4] nft_osf: Add ttl option support, Fernando Fernandez Mancera
  • Re: [PATCH nf-next v4] nft_osf: Add ttl option support, Pablo Neira Ayuso
  • Re: [PATCH nf-next v4] nft_osf: Add ttl option support, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_osf: output hook is not valid anymore, Fernando Fernandez Mancera
• [PATCH net-next] netfilter: cttimeout: remove set but not used variable 'l3num', YueHaibing
  • Re: [PATCH net-next] netfilter: cttimeout: remove set but not used variable 'l3num', Pablo Neira Ayuso
• [iptables] extensions: Add tests and description for xt_quota module, Chenbo Feng
  • Re: [iptables] extensions: Add tests and description for xt_quota module, Maciej Żenczykowski
    • Re: [iptables] extensions: Add tests and description for xt_quota module, Pablo Neira Ayuso
  • Re: [iptables] extensions: Add tests and description for xt_quota module, Pablo Neira Ayuso
• [PATCH net-next 0/3] ip_tunnel: specify tunnel type via template, Pablo Neira Ayuso
  • [PATCH net-next 3/3] netfilter: nft_tunnel: support for tunnel type, Pablo Neira Ayuso
  • [PATCH net-next 1/3] ip_tunnel: add type field to struct ip_tunnel_info, Pablo Neira Ayuso
  • [PATCH net-next 2/3] net: act_tunnel_key: support for tunnel type, Pablo Neira Ayuso
  • Re: [PATCH net-next 0/3] ip_tunnel: specify tunnel type via template, David Miller
    • Re: [PATCH net-next 0/3] ip_tunnel: specify tunnel type via template, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_compat: do not dump private area, Pablo Neira Ayuso
• [PATCH iptables] extensions: cgroup: fix option parsing for v2, Pablo Neira Ayuso
• iptables (nf_tables) error when negating an interface and using protocol port - works fine with classic iptables, Pedretti Fabio
  • Re: iptables (nf_tables) error when negating an interface and using protocol port - works fine with classic iptables, Florian Westphal
    • Re: iptables (nf_tables) error when negating an interface and using protocol port - works fine with classic iptables, Pedretti Fabio
• [PATCH 00/31] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 02/31] netfilter: nf_tables: split set destruction in deactivate and destroy phase, Pablo Neira Ayuso
  • [PATCH 06/31] netfilter: nf_tables: add xfrm expression, Pablo Neira Ayuso
    • Re: [PATCH 06/31] netfilter: nf_tables: add xfrm expression, Eyal Birger
      • Re: [PATCH 06/31] netfilter: nf_tables: add xfrm expression, Florian Westphal
  • [PATCH 16/31] netfilter: conntrack: deconstify packet callback skb pointer, Pablo Neira Ayuso
  • [PATCH 26/31] netfilter: nf_tables: add SECMARK support, Pablo Neira Ayuso
  • [PATCH 25/31] netfilter: masquerade: don't flush all conntracks if only one address deleted on device, Pablo Neira Ayuso
  • [PATCH 28/31] netfilter: nf_flow_table: remove unnecessary nat flag check code, Pablo Neira Ayuso
  • [PATCH 30/31] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
  • [PATCH 31/31] netfilter: xt_quota: Don't use aligned attribute in sizeof, Pablo Neira Ayuso
  • [PATCH 27/31] netfilter: nf_tables: add requirements for connsecmark support, Pablo Neira Ayuso
  • [PATCH 29/31] netfilter: nf_tables: use rhashtable_lookup() instead of rhashtable_lookup_fast(), Pablo Neira Ayuso
  • [PATCH 20/31] netfilter: conntrack: remove l3->l4 mapping information, Pablo Neira Ayuso
  • [PATCH 24/31] netfilter: ctnetlink: must check mark attributes vs NULL, Pablo Neira Ayuso
  • [PATCH 19/31] netfilter: conntrack: remove unused proto arg from netns init functions, Pablo Neira Ayuso
  • [PATCH 21/31] netfilter: conntrack: clamp l4proto array size at largers supported protocol, Pablo Neira Ayuso
  • [PATCH 23/31] netfilter: nf_tables: use rhashtable_walk_enter instead of rhashtable_walk_init, Pablo Neira Ayuso
  • [PATCH 22/31] netfilter: nat: remove duplicate skb_is_nonlinear() in __nf_nat_mangle_tcp_packet(), Pablo Neira Ayuso
  • [PATCH 14/31] netfilter: conntrack: pass nf_hook_state to packet and error handlers, Pablo Neira Ayuso
  • [PATCH 17/31] netfilter: conntrack: avoid using ->error callback if possible, Pablo Neira Ayuso
  • [PATCH 18/31] netfilter: conntrack: remove error callback and handle icmp from core, Pablo Neira Ayuso
  • [PATCH 11/31] netfilter: nf_nat_ipv4: remove obsolete EXPORT_SYMBOL, Pablo Neira Ayuso
  • [PATCH 15/31] netfilter: conntrack: remove the l4proto->new() function, Pablo Neira Ayuso
  • [PATCH 04/31] netfilter: nf_tables: asynchronous release, Pablo Neira Ayuso
  • [PATCH 09/31] netfilter: nf_tables: avoid BUG_ON usage, Pablo Neira Ayuso
  • [PATCH 13/31] netfilter: nat: remove unnecessary rcu_read_lock in nf_nat_redirect_ipv{4/6}, Pablo Neira Ayuso
  • [PATCH 12/31] netfilter: cttimeout: remove superfluous check on layer 4 netlink functions, Pablo Neira Ayuso
    • Re: [PATCH 12/31] netfilter: cttimeout: remove superfluous check on layer 4 netlink functions, Eric Dumazet
      • Re: [PATCH 12/31] netfilter: cttimeout: remove superfluous check on layer 4 netlink functions, Pablo Neira Ayuso
  • [PATCH 10/31] netfilter: xtables: avoid BUG_ON, Pablo Neira Ayuso
  • [PATCH 08/31] netfilter: xt_cgroup: shrink size of v2 path, Pablo Neira Ayuso
  • [PATCH 03/31] netfilter: nf_tables: warn when expr implements only one of activate/deactivate, Pablo Neira Ayuso
  • [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Pablo Neira Ayuso
    • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Nicolas Dichtel
      • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Nicolas Dichtel
        • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Pablo Neira Ayuso
          • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Nicolas Dichtel
            • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Pablo Neira Ayuso
              • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Nicolas Dichtel
      • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Kristian Evensen
        • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Nicolas Dichtel
          • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Florian Westphal
            • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Kristian Evensen
            • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Nicolas Dichtel
            • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Pablo Neira Ayuso
              • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Nicolas Dichtel
                • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Pablo Neira Ayuso
                  • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Nicolas Dichtel
                    • Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush, Kristian Evensen
  • [PATCH 05/31] netfilter: remove obsolete need_conntrack stub, Pablo Neira Ayuso
  • [PATCH 01/31] netfilter: nf_tables: rt: allow checking if dst has xfrm attached, Pablo Neira Ayuso
  • Re: [PATCH 00/31] Netfilter updates for net-next, David Miller
• [PATCH nf] netfilter: nf_flow_table: do not remove offload when other netns's interface is down, Taehee Yoo
  • Re: [PATCH nf] netfilter: nf_flow_table: do not remove offload when other netns's interface is down, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nf_flow_table: do not remove offload when other netns's interface is down, Taehee Yoo
• [PATCH] netfilter: xt_quota: Don't use aligned attribute in sizeof, Nathan Chancellor
  • Re: [PATCH] netfilter: xt_quota: Don't use aligned attribute in sizeof, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_nat_snmp_basic: add missing helper alias name, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_nat_snmp_basic: add missing helper alias name, Pablo Neira Ayuso
• [PATCH nf 2/2] netfilter: xt_TEE: add missing code to get interface index in checkentry., Taehee Yoo
  • Re: [PATCH nf 2/2] netfilter: xt_TEE: add missing code to get interface index in checkentry., Pablo Neira Ayuso
    • Re: [PATCH nf 2/2] netfilter: xt_TEE: add missing code to get interface index in checkentry., Pablo Neira Ayuso
      • Re: [PATCH nf 2/2] netfilter: xt_TEE: add missing code to get interface index in checkentry., Taehee Yoo
• [PATCH nf 1/2] netfilter: xt_TEE: fix wrong interface selection, Taehee Yoo
  • Re: [PATCH nf 1/2] netfilter: xt_TEE: fix wrong interface selection, Pablo Neira Ayuso
• [PATCH nf 0/2] netfilter: xt_TEE: fix bugs in xt_TEE, Taehee Yoo
• [PATCH nf 2/2] netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine, Taehee Yoo
• [PATCH nf 1/2] netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine, Taehee Yoo
  • Re: [PATCH nf 1/2] netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine, Pablo Neira Ayuso
    • Re: [PATCH nf 1/2] netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine, Taehee Yoo
• [PATCH nf 0/2] netfilter: ipt_CLUSTERIP: fix bugs in ipt_CLUSTERIP, Taehee Yoo
• [PATCH nf-next v3] nft_osf: Add ttl option support, Fernando Fernandez Mancera
  • Re: [PATCH nf-next v3] nft_osf: Add ttl option support, Pablo Neira Ayuso
    • Re: [PATCH nf-next v3] nft_osf: Add ttl option support, Fernando Fernandez Mancera
      • Re: [PATCH nf-next v3] nft_osf: Add ttl option support, Pablo Neira Ayuso
• [PATCH RFC,net-next 0/3] ip_tunnel: specify tunnel type via template, Pablo Neira Ayuso
  • [PATCH RFC,net-next 1/3] ip_tunnel: add type field to struct ip_tunnel_info, Pablo Neira Ayuso
    • Re: [PATCH RFC,net-next 1/3] ip_tunnel: add type field to struct ip_tunnel_info, Daniel Borkmann
      • Re: [PATCH RFC,net-next 1/3] ip_tunnel: add type field to struct ip_tunnel_info, Pablo Neira Ayuso
        • Re: [PATCH RFC,net-next 1/3] ip_tunnel: add type field to struct ip_tunnel_info, Daniel Borkmann
  • [PATCH RFC,net-next 2/3] net: act_tunnel_key: support for tunnel type, Pablo Neira Ayuso
  • [PATCH RFC,net-next 3/3] netfilter: nft_tunnel: support for tunnel type, Pablo Neira Ayuso
  • Re: [PATCH RFC,net-next 0/3] ip_tunnel: specify tunnel type via template, Jakub Kicinski
    • Re: [PATCH RFC,net-next 0/3] ip_tunnel: specify tunnel type via template, Pablo Neira Ayuso
      • Re: [PATCH RFC,net-next 0/3] ip_tunnel: specify tunnel type via template, Or Gerlitz
        • Re: [PATCH RFC,net-next 0/3] ip_tunnel: specify tunnel type via template, Pablo Neira Ayuso
          • Re: [PATCH RFC,net-next 0/3] ip_tunnel: specify tunnel type via template, Or Gerlitz
            • Re: [PATCH RFC,net-next 0/3] ip_tunnel: specify tunnel type via template, Pablo Neira Ayuso
• [PATCH nft 0/4] assorted updates, Pablo Neira Ayuso
  • [PATCH nft 3/4] mnl: remove alloc_nftnl_table(), Pablo Neira Ayuso
  • [PATCH nft 1/4] netlink: remove markup json parsing code, Pablo Neira Ayuso
  • [PATCH nft 2/4] src: get rid of netlink_genid_get(), Pablo Neira Ayuso
  • [PATCH nft 4/4] mnl: remove alloc_nftnl_chain(), Pablo Neira Ayuso
• [PATCH nft] segtree: stop iteration on existing elements in case closing range is found, Pablo Neira Ayuso
• [PATCH nft] rule: fix memleak in do_get_setelems(), Pablo Neira Ayuso
• [PATCH nft] segtree: memleak in get_set_decompose(), Pablo Neira Ayuso
• [PATCH nft] segtree: disantangle get_set_interval_end(), Pablo Neira Ayuso
• [PATCH 14/16] netfilter: Replace spin_is_locked() with lockdep, Lance Roy
  • Re: [PATCH 14/16] netfilter: Replace spin_is_locked() with lockdep, Jozsef Kadlecsik
• [PATCH net-next iptables] Rework the xt_quota module, Chenbo Feng
  • [PATCH iptables] extensions: libxt_quota: Allow setting the remaining quota, Chenbo Feng
    • Re: [PATCH iptables] extensions: libxt_quota: Allow setting the remaining quota, Pablo Neira Ayuso
  • [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Chenbo Feng
    • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
      • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Maciej Żenczykowski
        • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Maciej Żenczykowski
        • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
          • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
            • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Maciej Żenczykowski
              • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
                • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
                • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Chenbo Feng
                  • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
                    • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Chenbo Feng
                      • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
                        • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Maciej Żenczykowski
    • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
      • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Maciej Żenczykowski
        • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
    • Re: [PATCH net-next] netfilter: xt_quota: fix the behavior of xt_quota module, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_flow_table: remove flowtable hook flush routine in netns exit routine, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_flow_table: remove flowtable hook flush routine in netns exit routine, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: nf_flow_table: remove flowtable hook flush routine in netns exit routine, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_flow_table: remove flowtable hook flush routine in netns exit routine, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_rbtree: allow loose matching of closing intervals, Pablo Neira Ayuso
• [PATCH nft] segtree: bogus range via get set element on existing elements, Pablo Neira Ayuso
• [PATCH nft] include: add missing xfrm.h to Makefile.am, Fernando Fernandez Mancera
  • Re: [PATCH nft] include: add missing xfrm.h to Makefile.am, Florian Westphal
• __nf_register_net_hook jump label splat, Borislav Petkov
  • Re: __nf_register_net_hook jump label splat, Florian Westphal
    • Re: __nf_register_net_hook jump label splat, Borislav Petkov
      • Re: __nf_register_net_hook jump label splat, Borislav Petkov
• [PATCH nf-next v2] nft_osf: Add ttl option support, Fernando Fernandez Mancera
  • Re: [PATCH nf-next v2] nft_osf: Add ttl option support, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2] nft_osf: Add ttl option support, Fernando Fernandez Mancera
      • Re: [PATCH nf-next v2] nft_osf: Add ttl option support, Pablo Neira Ayuso
• [PATCH 1/2 nft v2] src: osf: add ttl option support, Fernando Fernandez Mancera
  • [PATCH 2/2 nft] doc: osf: add ttl option to man page, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 nft] doc: osf: add ttl option to man page, Fernando Fernandez Mancera
  • Re: [PATCH 1/2 nft v2] src: osf: add ttl option support, Pablo Neira Ayuso
    • Re: [PATCH 1/2 nft v2] src: osf: add ttl option support, Fernando Fernandez Mancera
    • Re: [PATCH 1/2 nft v2] src: osf: add ttl option support, Fernando Fernandez Mancera
      • Re: [PATCH 1/2 nft v2] src: osf: add ttl option support, Pablo Neira Ayuso
        • Re: [PATCH 1/2 nft v2] src: osf: add ttl option support, Fernando Fernandez Mancera
          • Re: [PATCH 1/2 nft v2] src: osf: add ttl option support, Pablo Neira Ayuso
• [PATCH] Revert "openvswitch: Fix template leak in error cases.", Flavio Leitner
  • Re: [PATCH] Revert "openvswitch: Fix template leak in error cases.", Joe Stringer
  • Re: [PATCH] Revert "openvswitch: Fix template leak in error cases.", David Miller
• [PATCH] openvswitch: load NAT helper, Flavio Leitner
  • Re: [PATCH] openvswitch: load NAT helper, David Miller
• [nft PATCH] tests: shell: Test 'get element' command, Phil Sutter
  • Re: [nft PATCH] tests: shell: Test 'get element' command, Pablo Neira Ayuso
• Re: [PATCH] netfilter: check if the socket netns is correct., Guenter Roeck
  • Re: [PATCH] netfilter: check if the socket netns is correct., Flavio Leitner
    • Re: [PATCH] netfilter: check if the socket netns is correct., Guenter Roeck
    • Re: [PATCH] netfilter: check if the socket netns is correct., Pablo Neira Ayuso
• nft: Dubious code in get_set_decompose() of src/segtree.c, Phil Sutter
  • Re: nft: Dubious code in get_set_decompose() of src/segtree.c, Pablo Neira Ayuso
    • Re: nft: Dubious code in get_set_decompose() of src/segtree.c, Pablo Neira Ayuso
• [nft PATCH 0/5] Fix and improve for 0021prio_0 in tests/shell, Phil Sutter
  • [nft PATCH 3/5] tests: shell: Drop one-time use variables in 0021prio_0, Phil Sutter
  • [nft PATCH 4/5] tests: shell: Improve gen_chains() in 0021prio_0, Phil Sutter
  • [nft PATCH 5/5] tests: shell: Improve performance of 0021prio_0, Phil Sutter
  • [nft PATCH 1/5] parser_bison: Fix for chain prio name 'out', Phil Sutter
  • [nft PATCH 2/5] tests: shell: Fix indenting in 0021prio_0, Phil Sutter
  • Re: [nft PATCH 0/5] Fix and improve for 0021prio_0 in tests/shell, Florian Westphal
• Contribution of a GRE Module, Alexandre Connat
  • Re: Contribution of a GRE Module, Florian Westphal
• [libnftnl PATCH] expr: xfrm: Fix for unused variable warning, Phil Sutter
  • Re: [libnftnl PATCH] expr: xfrm: Fix for unused variable warning, Florian Westphal
    • Re: [libnftnl PATCH] expr: xfrm: Fix for unused variable warning, Phil Sutter
      • Re: [libnftnl PATCH] expr: xfrm: Fix for unused variable warning, Florian Westphal
        • Re: [libnftnl PATCH] expr: xfrm: Fix for unused variable warning, Máté Eckl
• [iptables PATCH 0/6] Follow-up to covscan fixes, Phil Sutter
  • [iptables PATCH 3/6] Combine command_match() implementations, Phil Sutter
  • [iptables PATCH 4/6] Combine parse_target() and command_jump() implementations, Phil Sutter
  • [iptables PATCH 5/6] arptables: Use the shared nft_ipv46_parse_target(), Phil Sutter
  • [iptables PATCH 2/6] libiptc: NULL-terminate errorname, Phil Sutter
  • [iptables PATCH 6/6] nft-shared: Use xtables_calloc(), Phil Sutter
  • [iptables PATCH 1/6] libxtables: Check extension real_name length, Phil Sutter
• [PATCH nf-next] netfilter: nf_tables: use rhashtable_lookup() instead of rhashtable_lookup_fast(), Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_tables: use rhashtable_lookup() instead of rhashtable_lookup_fast(), Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary nat flag check code, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary nat flag check code, Pablo Neira Ayuso
• [PATCH nf] netfilter: avoid erronous array bounds warning, Florian Westphal
  • Re: [PATCH nf] netfilter: avoid erronous array bounds warning, David Ahern
  • Re: [PATCH nf] netfilter: avoid erronous array bounds warning, Pablo Neira Ayuso
• [PATCH v3 1/2] netfilter: nf_tables: add SECMARK support, Christian Göttsche
  • [PATCH v3 2/2] netfilter: nf_tables: add requirements for connsecmark support, Christian Göttsche
    • Re: [PATCH v3 2/2] netfilter: nf_tables: add requirements for connsecmark support, Pablo Neira Ayuso
  • Re: [PATCH v3 1/2] netfilter: nf_tables: add SECMARK support, Pablo Neira Ayuso
• [PATCH v2 1/2] netfilter: nf_tables: add SECMARK support, Christian Göttsche
  • [PATCH 2/2] netfilter: nf_tables: add requirements for connsecmark support, Christian Göttsche
    • Re: [PATCH 2/2] netfilter: nf_tables: add requirements for connsecmark support, Florian Westphal
    • Re: [PATCH 2/2] netfilter: nf_tables: add requirements for connsecmark support, kbuild test robot
    • Re: [PATCH 2/2] netfilter: nf_tables: add requirements for connsecmark support, kbuild test robot
  • Re: [PATCH v2 1/2] netfilter: nf_tables: add SECMARK support, Florian Westphal
    • Re: [PATCH v2 1/2] netfilter: nf_tables: add SECMARK support, Christian Göttsche
      • Re: [PATCH v2 1/2] netfilter: nf_tables: add SECMARK support, Florian Westphal
• change netfilter packet flow, morteza1131@xxxxxxxxx
  • Re: change netfilter packet flow, Máté Eckl
• How to contribute to netfilter.org/documentation?, Phil Sutter
• [PATCH] doc: Re-work RULES:add/insert/replace to read better., Duncan Roe
  • Re: [PATCH] doc: Re-work RULES:add/insert/replace to read better., Phil Sutter
  • Re: [PATCH] doc: Re-work RULES:add/insert/replace to read better., Pablo Neira Ayuso
• general protection fault in ctnetlink_alloc_filter, syzbot
  • [PATCH nf-next] netfilter: ctnetlink: must check mark attributes vs NULL, Florian Westphal
    • Re: [PATCH nf-next] netfilter: ctnetlink: must check mark attributes vs NULL, Pablo Neira Ayuso
      • Re: [PATCH nf-next] netfilter: ctnetlink: must check mark attributes vs NULL, Kristian Evensen
• [PATCH net-next 0/3] net: wean netfilter from fib_nh, dsahern
  • [PATCH net-next 1/3] net/ipv4: Move device validation to helper, dsahern
  • [PATCH net-next 3/3] netfilter: nft_fib: Convert nft_fib4_eval to new dev helper, dsahern
  • [PATCH net-next 2/3] netfilter: rpfilter: Convert rpfilter_lookup_reverse to new dev helper, dsahern
  • Re: [PATCH net-next 0/3] net: wean netfilter from fib_nh, Florian Westphal
  • Re: [PATCH net-next 0/3] net: wean netfilter from fib_nh, David Miller
• [PATCH] nftables: add support for setting secmark, Christian Göttsche
  • Re: [PATCH] nftables: add support for setting secmark, Pablo Neira Ayuso
  • Re: [PATCH] nftables: add support for setting secmark, Pablo Neira Ayuso
• [PATCH] libnftnl: add support for new secmark object, Christian Göttsche
• [PATCH] netfilter: nf_tables: add SECMARK support, Christian Göttsche
  • Re: [PATCH] netfilter: nf_tables: add SECMARK support, Casey Schaufler
    • Re: [PATCH] netfilter: nf_tables: add SECMARK support, Christian Göttsche
      • Re: [PATCH] netfilter: nf_tables: add SECMARK support, Casey Schaufler
    • Re: [PATCH] netfilter: nf_tables: add SECMARK support, Florian Westphal
      • Re: [PATCH] netfilter: nf_tables: add SECMARK support, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_tables: add SECMARK support, Christian Göttsche
        • Re: [PATCH] netfilter: nf_tables: add SECMARK support, Florian Westphal
• [iptables PATCH 0/3] Merge legacy save and restore implementations, Phil Sutter
  • [iptables PATCH 3/3] ip6tables-save: Merge into iptables-save.c, Phil Sutter
  • [iptables PATCH 1/3] libiptc: Extend struct xtc_ops, Phil Sutter
  • [iptables PATCH 2/3] ip6tables-restore: Merge into iptables-restore.c, Phil Sutter
• [iptables PATCH 00/28] Another round of covscan fixes, Phil Sutter
  • [iptables PATCH 19/28] iptables: Use print_ifaces() from xtables, Phil Sutter
  • [iptables PATCH 11/28] libxt_time: Drop initialization of variable 'year', Phil Sutter
  • [iptables PATCH 22/28] extensions: libebt_ip{,6}: Drop pointless error checking, Phil Sutter
  • [iptables PATCH 02/28] xtables: Fix for wrong assert() in __nft_table_flush(), Phil Sutter
  • [iptables PATCH 14/28] libxtables: Don't read garbage in xtables_strtoui(), Phil Sutter
  • [iptables PATCH 28/28] iptables: Gitignore xtables-{legacy,nft}-multi scripts, Phil Sutter
  • [iptables PATCH 17/28] iptables-apply: Replace signal numbers by names, Phil Sutter
  • [iptables PATCH 24/28] libxtables: Use posix_spawn() instead of vfork(), Phil Sutter
  • [iptables PATCH 15/28] nfnl_osf: Replace deprecated nfnl_talk() by nfnl_query(), Phil Sutter
  • [iptables PATCH 04/28] Mark fall through cases in switch() statements, Phil Sutter
  • [iptables PATCH 10/28] libxt_ipvs: Avoid potential buffer overrun, Phil Sutter
  • [iptables PATCH 23/28] Fix a few cases of pointless assignments, Phil Sutter
  • [iptables PATCH 06/28] xtables: Remove unused variable in nft_is_table_compatible(), Phil Sutter
  • [iptables PATCH 13/28] libxtables: Avoid calling memcpy() with NULL source, Phil Sutter
  • [iptables PATCH 03/28] libxtables: Integrate getethertype.c from xtables core, Phil Sutter
  • [iptables PATCH 16/28] iptables-apply: Quote strings passed to echo, Phil Sutter
  • [iptables PATCH 18/28] Share print_ipv{4,6}_addr() from xtables, Phil Sutter
  • [iptables PATCH 01/28] nfnl_osf: Drop pointless check in xt_osf_strchr(), Phil Sutter
  • [iptables PATCH 21/28] nft-arp: Drop ineffective conditional, Phil Sutter
  • [iptables PATCH 07/28] libxt_LED: Avoid string overrun while parsing led-trigger-id, Phil Sutter
  • [iptables PATCH 20/28] Sanitize calls to strcpy(), Phil Sutter
    • Re: [iptables PATCH 20/28] Sanitize calls to strcpy(), Florian Westphal
      • Re: [iptables PATCH 20/28] Sanitize calls to strcpy(), Phil Sutter
        • Re: [iptables PATCH 20/28] Sanitize calls to strcpy(), Florian Westphal
  • [iptables PATCH 26/28] arptables: Fix incorrect strcmp() in nft_arp_rule_find(), Phil Sutter
  • [iptables PATCH 09/28] libxt_conntrack: Avoid potential buffer overrun, Phil Sutter
  • [iptables PATCH 25/28] xtables: Don't read garbage in nft_ipv4_parse_payload(), Phil Sutter
  • [iptables PATCH 05/28] ip{,6}tables-restore: Fix for uninitialized array 'curtable', Phil Sutter
  • [iptables PATCH 12/28] libiptc: Simplify alloc_handle() function signature, Phil Sutter
  • [iptables PATCH 08/28] libxt_conntrack: Version 0 does not support XT_CONNTRACK_DIRECTION, Phil Sutter
  • [iptables PATCH 27/28] xtables: Drop pointless check, Phil Sutter
• [PATCH] netfilter: conntrack: get rid of double sizeof, zhong jiang
  • Re: [PATCH] netfilter: conntrack: get rid of double sizeof, Florian Westphal
  • Re: [PATCH] netfilter: conntrack: get rid of double sizeof, Pablo Neira Ayuso
• Re: bpfilter breaks IPT_SO_GET_INFO, Michal Kubecek
  • Re: bpfilter breaks IPT_SO_GET_INFO, Dmitry Vyukov
    • Re: bpfilter breaks IPT_SO_GET_INFO, Dmitry Vyukov
• [PATCH libnftnl v2] obj: ct_timeout: fix error in building tests, Harsha Sharma
  • Re: [PATCH libnftnl v2] obj: ct_timeout: fix error in building tests, Pablo Neira Ayuso
• Announcing Netdev 0x13 conference, Jamal Hadi Salim
• [PATCH] netfilter: nft_osf: use enum nft_data_types for nft_validate_register_store, Stefan Agner
  • Re: [PATCH] netfilter: nft_osf: use enum nft_data_types for nft_validate_register_store, Pablo Neira Ayuso
• [PATCH 4.14 095/126] inet: frags: Convert timers to use timer_setup(), Greg Kroah-Hartman
• [PATCH net] netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev, dsahern
  • Re: [PATCH net] netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev, Pablo Neira Ayuso
• [iptables PATCH] libxt_string: Fix array out of bounds check, Phil Sutter
  • Re: [iptables PATCH] libxt_string: Fix array out of bounds check, Pablo Neira Ayuso
• [PATCH nft] src: osf: add ttl option support, Fernando Fernandez Mancera
  • Re: [PATCH nft] src: osf: add ttl option support, Fernando Fernandez Mancera