Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH nf] netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state, (continued)
  • [PATCH nf] netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state, Florian Westphal
    • Re: [PATCH nf] netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state, Pablo Neira Ayuso
• [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, dsahern
  • [PATCH RFC/RFT net-next 15/17] net/ipv6: Convert neighbor table to per-namespace, dsahern
  • [PATCH RFC/RFT net-next 16/17] net/decnet: Move neighbor table to per-namespace, dsahern
  • [PATCH RFC/RFT net-next 17/17] net/neighbor: Remove neigh_tables and NEIGH enum, dsahern
  • [PATCH RFC/RFT net-next 14/17] net/ipv4: Convert arp table to per namespace, dsahern
  • [PATCH RFC/RFT net-next 12/17] net/neigh: Change neigh_xmit to take an address family, dsahern
  • [PATCH RFC/RFT net-next 10/17] net: Add key_len to neighbor constructor, dsahern
  • [PATCH RFC/RFT net-next 13/17] net/neighbor: Convert internal functions away from neigh_tables, dsahern
  • [PATCH RFC/RFT net-next 11/17] net: Change neigh_table_init and neigh_table_clear signature, dsahern
  • [PATCH RFC/RFT net-next 08/17] net: Remove nd_tbl from ipv6 stub, dsahern
  • [PATCH RFC/RFT net-next 09/17] net: Remove arp_tbl and nd_tbl from headers, dsahern
  • [PATCH RFC/RFT net-next 06/17] net/ipv6: Remove open coded use of neighbor table, dsahern
  • [PATCH RFC/RFT net-next 07/17] drivers/net: remove open coding of neighbor tables, dsahern
  • [PATCH RFC/RFT net-next 05/17] net/ipv6: wrappers for neighbor table references, dsahern
  • [PATCH RFC/RFT net-next 03/17] net/ipv4: wrappers for arp table references, dsahern
  • [PATCH RFC/RFT net-next 04/17] net/ipv4: Remove open coded use of arp table, dsahern
  • [PATCH RFC/RFT net-next 02/17] net/neigh: export neigh_find_table, dsahern
  • [PATCH RFC/RFT net-next 01/17] net/ipv4: rename ipv4_neigh_lookup to ipv4_dst_neigh_lookup, dsahern
  • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Cong Wang
    • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Ahern
      • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Cong Wang
        • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Ahern
          • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Cong Wang
          • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Miller
            • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Ahern
              • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Cong Wang
                • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Ahern
                  • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Miller
                    • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Ahern
                  • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Cong Wang
                    • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Eric W. Biederman
                      • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Ahern
                        • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Eric W. Biederman
                          • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Ahern
                            • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Eric W. Biederman
                              • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Ahern
                                • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Eric W. Biederman
                          • RE: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Laight
                            • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Eric W. Biederman
  • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, Michael Richardson
    • Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace, David Ahern
  • Re: [RFC/RFT, net-next, 00/17] net: Convert neighbor tables to per-namespace, Vasily Averin
    • Re: [RFC/RFT, net-next, 00/17] net: Convert neighbor tables to per-namespace, David Ahern
• Failed to run nft script with ingress hook for netdev family, Rosysong
  • Re: Failed to run nft script with ingress hook for netdev family, Pablo Neira Ayuso
    • Re: Failed to run nft script with ingress hook for netdev family, Rosysong
• [PATCH nf 0/4] netfilter: nf_tables: fix resource leaks, Florian Westphal
  • [PATCH nf 1/4] netfilter: nf_tables: use dev->name directly, Florian Westphal
  • [PATCH nf 2/4] netfilter: nf_tables: free flow table struct too, Florian Westphal
  • [PATCH nf 3/4] netfilter: nf_tables: fix memory leaks on chain rename, Florian Westphal
  • [PATCH nf 4/4] netfilter: nf_tables: don't allow to rename to already-pending name, Florian Westphal
  • Re: [PATCH nf 0/4] netfilter: nf_tables: fix resource leaks, Pablo Neira Ayuso
• [PATCH nft] tests: add test case for rename-to-same-name, Florian Westphal
• [next-20180713][NET] linux-next kernel panics when booting powerpc, Abdul Haleem
• [PATCH v3] ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
  • Re: [PATCH v3] ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
    • Re: [PATCH v3] ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
      • Re: [PATCH v3] ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
• Re: [PATCH 3/3 nf-next] netfilter: add netlink support for osf module, Fernando Fernandez Mancera
• [PATCH 1/3 nf-next] netfilter: add missing definitions in nf_osf.h, Fernando Fernandez Mancera
  • [PATCH 2/3 WIP nf-next] netfilter: implement Passive OS fingerprint module in nft_osf, Fernando Fernandez Mancera
    • Re: [PATCH 2/3 WIP nf-next] netfilter: implement Passive OS fingerprint module in nft_osf, Fernando Fernandez Mancera
      • Re: [PATCH 2/3 WIP nf-next] netfilter: implement Passive OS fingerprint module in nft_osf, Pablo Neira Ayuso
  • [PATCH 3/3 nf-next] netfilter: add netlink support for osf module, Fernando Fernandez Mancera
    • Re: [PATCH 3/3 nf-next] netfilter: add netlink support for osf module, Pablo Neira Ayuso
      • Re: [PATCH 3/3 nf-next] netfilter: add netlink support for osf module, Pablo Neira Ayuso
        • Re: [PATCH 3/3 nf-next] netfilter: add netlink support for osf module, Fernando Fernandez Mancera
      • Re: [PATCH 3/3 nf-next] netfilter: add netlink support for osf module, Fernando Fernandez Mancera
        • Re: [PATCH 3/3 nf-next] netfilter: add netlink support for osf module, Pablo Neira Ayuso
  • Re: [PATCH 1/3 nf-next] netfilter: add missing definitions in nf_osf.h, Fernando Fernandez Mancera
  • Re: [PATCH 1/3 nf-next] netfilter: add missing definitions in nf_osf.h, Pablo Neira Ayuso
• [PATCH v3 nf-next 1/2] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, Florian Westphal
  • Re: [PATCH v3 nf-next 1/2] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, Harsha Sharma
  • Re: [PATCH nf-next] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, kbuild test robot
  • Re: [PATCH nf-next] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, kbuild test robot
  • Re: [PATCH nf-next] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, Pablo Neira Ayuso
      • Re: [PATCH nf-next] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, Harsha Sharma
        • Re: [PATCH nf-next] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, Pablo Neira Ayuso
          • Re: [PATCH nf-next] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, Harsha Sharma
            • Re: [PATCH nf-next] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, Pablo Neira Ayuso
• [PATCH nf-next v7] netfilter: nft_ct: add ct timeout support, Harsha Sharma
  • Re: [PATCH nf-next v7] netfilter: nft_ct: add ct timeout support, kbuild test robot
  • Re: [PATCH nf-next v7] netfilter: nft_ct: add ct timeout support, kbuild test robot
• [PATCH v2 nf-next 1/2] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, Florian Westphal
  • [PATCH v2 nf-next 2/2] netfilter: fix IPV6=m CONNTRACK=y link failure, Florian Westphal
    • Re: [PATCH v2 nf-next 2/2] netfilter: fix IPV6=m CONNTRACK=y link failure, Pablo Neira Ayuso
  • Re: [PATCH v2 nf-next 1/2] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, kbuild test robot
  • Re: [PATCH v2 nf-next 1/2] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, kbuild test robot
• [PATCH nf-next 1/3] netfilter: nf_osf: add nf_osf_match_one(), Pablo Neira Ayuso
  • [PATCH nf-next 3/3] netfilter: nf_osf: add nf_osf_find(), Pablo Neira Ayuso
    • Re: [PATCH nf-next 3/3] netfilter: nf_osf: add nf_osf_find(), kbuild test robot
    • Re: [PATCH nf-next 3/3] netfilter: nf_osf: add nf_osf_find(), Fernando Fernandez Mancera
  • [PATCH nf-next 2/3] netfilter: nf_osf: add struct nf_osf_hdr_ctx, Pablo Neira Ayuso
• [PATCH V2 nf] netfilter: nf_tables: fix jumpstack depth validation, Taehee Yoo
• [PATCH nf-next 1/2] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, Florian Westphal
  • [PATCH nf-next 2/2] netfilter: fix IPV6=m CONNTRACK=y link failure, Florian Westphal
  • Re: [PATCH nf-next 1/2] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, kbuild test robot
  • Re: [PATCH nf-next 1/2] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, kbuild test robot
  • Re: [PATCH nf-next 1/2] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, kbuild test robot
• Re: [PATCH 2/2 WIP nf-next] nft: implement the nf_tables_api changes to add osf signatures in nft, Fernando Fernandez Mancera
• [PATCH WIP libnftnl] expr: add osf support, Fernando Fernandez Mancera
• [PATCH 1/2 WIP nf-next] netfilter: implement Passive OS fingerprint module in nft_osf, Fernando Fernandez Mancera
  • [PATCH 2/2 WIP nf-next] nft: implement the nf_tables_api changes to add osf signatures in nft, Fernando Fernandez Mancera
    • Re: [PATCH 2/2 WIP nf-next] nft: implement the nf_tables_api changes to add osf signatures in nft, Florian Westphal
      • Message not available
        • Message not available
          • Re: [PATCH 2/2 WIP nf-next] nft: implement the nf_tables_api changes to add osf signatures in nft, Fernando Fernandez Mancera
      • Re: [PATCH 2/2 WIP nf-next] nft: implement the nf_tables_api changes to add osf signatures in nft, Pablo Neira Ayuso
        • Re: [PATCH 2/2 WIP nf-next] nft: implement the nf_tables_api changes to add osf signatures in nft, Florian Westphal
          • Re: [PATCH 2/2 WIP nf-next] nft: implement the nf_tables_api changes to add osf signatures in nft, Florian Westphal
    • Re: [PATCH 2/2 WIP nf-next] nft: implement the nf_tables_api changes to add osf signatures in nft, Pablo Neira Ayuso
      • Re: [PATCH 2/2 WIP nf-next] nft: implement the nf_tables_api changes to add osf signatures in nft, Pablo Neira Ayuso
  • Re: [PATCH 1/2 WIP nf-next] netfilter: implement Passive OS fingerprint module in nft_osf, Florian Westphal
    • Re: [PATCH 1/2 WIP nf-next] netfilter: implement Passive OS fingerprint module in nft_osf, Fernando Fernandez Mancera
  • Re: [PATCH 1/2 WIP nf-next] netfilter: implement Passive OS fingerprint module in nft_osf, kbuild test robot
• [PATCH net] netfilter: nf_conntrack: prevent uninit-value in gc_worker, Eric Dumazet
  • Re: [PATCH net] netfilter: nf_conntrack: prevent uninit-value in gc_worker, Florian Westphal
    • Re: [PATCH net] netfilter: nf_conntrack: prevent uninit-value in gc_worker, Eric Dumazet
      • Re: [PATCH net] netfilter: nf_conntrack: prevent uninit-value in gc_worker, Dmitry Vyukov
        • Re: [PATCH net] netfilter: nf_conntrack: prevent uninit-value in gc_worker, Florian Westphal
          • Re: [PATCH net] netfilter: nf_conntrack: prevent uninit-value in gc_worker, Dmitry Vyukov
            • Re: [PATCH net] netfilter: nf_conntrack: prevent uninit-value in gc_worker, Dmitry Vyukov
          • Re: [PATCH net] netfilter: nf_conntrack: prevent uninit-value in gc_worker, Florian Westphal
• [PATCH] iptables-restore: free the table lock when skipping a table, Joel Goguen
  • Re: [PATCH] iptables-restore: free the table lock when skipping a table, Florian Westphal
    • Re: [PATCH] iptables-restore: free the table lock when skipping a table, Joel Goguen
• nf_tables: Expose socket mark, Máté Eckl
  • [PATCH nft] Expose socket mark via socket expression, Máté Eckl
    • [PATCH v2 nft] Expose socket mark via socket expression, Máté Eckl
    • [PATCH v3 nft] Expose socket mark via socket expression, Máté Eckl
      • Re: [PATCH v3 nft] Expose socket mark via socket expression, Pablo Neira Ayuso
  • [PATCH libnftnl] Expose socket mark via socket expression, Máté Eckl
    • Re: [PATCH libnftnl] Expose socket mark via socket expression, Pablo Neira Ayuso
  • [PATCH nf-next] netfilter: nf_tables: Expose socket mark, Máté Eckl
    • Re: [PATCH nf-next] netfilter: nf_tables: Expose socket mark, Florian Westphal
      • Re: [PATCH nf-next] netfilter: nf_tables: Expose socket mark, Máté Eckl
    • Re: [PATCH nf-next] netfilter: nf_tables: Expose socket mark, Pablo Neira Ayuso
      • Re: [PATCH nf-next] netfilter: nf_tables: Expose socket mark, Máté Eckl
      • [PATCH nf-next] netfilter: nft_socket: Break evaluation if no socket found, Máté Eckl
        • Re: [PATCH nf-next] netfilter: nft_socket: Break evaluation if no socket found, Pablo Neira Ayuso
    • [PATCH v2 nf-next] netfilter: nft_socket: Expose socket mark, Máté Eckl
      • Re: [PATCH v2 nf-next] netfilter: nft_socket: Expose socket mark, Pablo Neira Ayuso
  • Re: nf_tables: Expose socket mark, Florian Westphal
• [PATCH nf-next 0/5] netfilter: nf_tables: per-netns transactions, Florian Westphal
  • [PATCH nf-next 1/5] netfilter: nf_tables: add and use helper for module autoload, Florian Westphal
  • [PATCH nf-next 2/5] netfilter: nf_tables: make valid_genid callback mandatory, Florian Westphal
  • [PATCH nf-next 3/5] netfilter: nf_tables: take module reference when starting a batch, Florian Westphal
  • [PATCH nf-next 4/5] netfilter: nf_tables: avoid global info storage, Florian Westphal
  • [PATCH nf-next 5/5] netfilter: nf_tables: use dedicated mutex to guard transactions, Florian Westphal
  • Re: [PATCH nf-next 0/5] netfilter: nf_tables: per-netns transactions, Pablo Neira Ayuso
• [iptables PATCH] xtables: Support nft suffix for arptables and ebtables, Phil Sutter
  • Re: [iptables PATCH] xtables: Support nft suffix for arptables and ebtables, Florian Westphal
• [PATCH nft] tests: shell: add tests for listing objects, Harsha Sharma
  • Re: [PATCH nft] tests: shell: add tests for listing objects, Pablo Neira Ayuso
• [PATCH V2 nf 3/3] netfilter: nf_tables: add default set size, Taehee Yoo
  • Re: [PATCH V2 nf 3/3] netfilter: nf_tables: add default set size, Pablo Neira Ayuso
    • Re: [PATCH V2 nf 3/3] netfilter: nf_tables: add default set size, Florian Westphal
    • Re: [PATCH V2 nf 3/3] netfilter: nf_tables: add default set size, Taehee Yoo
• [PATCH V2 nf 2/3] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Taehee Yoo
  • Re: [PATCH V2 nf 2/3] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Pablo Neira Ayuso
    • Re: [PATCH V2 nf 2/3] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Taehee Yoo
      • Re: [PATCH V2 nf 2/3] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Pablo Neira Ayuso
• [PATCH V2 nf 1/3] netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy(), Taehee Yoo
• [PATCH V2 nf 0/3] netfilter: nf_tables: fix set destroying bugs, Taehee Yoo
  • Re: [PATCH V2 nf 0/3] netfilter: nf_tables: fix set destroying bugs, Pablo Neira Ayuso
• [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Arnd Bergmann
  • Re: [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Máté Eckl
    • Re: [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Máté Eckl
      • Re: [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Arnd Bergmann
        • Re: [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Máté Eckl
        • Re: [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Máté Eckl
            • Re: [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Pablo Neira Ayuso
              • Re: [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Máté Eckl
                • Re: [PATCH] netfilter: NFT_SOCKET don't use NF_SOCKET_IPV6 without NF_TABLES_IPV6, Pablo Neira Ayuso
          • [PATCH v2 nf-next] netfilter: Kconfig: Change select dependencies from IPV6 to NF_TABLES_IPV6 and IP6_NF_IPTABLES, Máté Eckl
            • Re: [PATCH v2 nf-next] netfilter: Kconfig: Change select dependencies from IPV6 to NF_TABLES_IPV6 and IP6_NF_IPTABLES, Pablo Neira Ayuso
• [PATCH] netfilter: xt_tee: fix calling nf_dup_ipv6, Arnd Bergmann
• [PATCH xtables] extensions: don't bother to build libebt/libarp extensions if nft backend was disabled, Florian Westphal
  • Re: [PATCH xtables] extensions: don't bother to build libebt/libarp extensions if nft backend was disabled, Thomas Deutschmann
• iptables-1.8.0: Cannot build without libnftnl, Thomas Deutschmann
  • Re: iptables-1.8.0: Cannot build without libnftnly, Florian Westphal
• [PATCH nf] netfilter: ipv6: nf_defrag: drop skb dst before queueing, Florian Westphal
  • Re: [PATCH nf] netfilter: ipv6: nf_defrag: drop skb dst before queueing, Eric Dumazet
    • Re: [PATCH nf] netfilter: ipv6: nf_defrag: drop skb dst before queueing, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: Remove useless param helper of nf_ct_helper_ext_add, gfree . wind
  • Re: [PATCH nf-next] netfilter: Remove useless param helper of nf_ct_helper_ext_add, Pablo Neira Ayuso
• [PATCH] iptables: tests: add test for iptables-save and iptables-restore, Arushi Singhal
  • Re: [PATCH] iptables: tests: add test for iptables-save and iptables-restore, Pablo Neira Ayuso
• [PATCH nft] tests: py: add ct timeout tests, Harsha Sharma
• [PATCH] rule: obj: list only the table containing object, Harsha Sharma
  • Re: [PATCH] rule: obj: list only the table containing object, Pablo Neira Ayuso
• [PATCH v2] ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
  • Re: [PATCH v2] ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
    • Re: [PATCH v2] ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
      • Re: [PATCH v2] ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
  • Re: [PATCH v2] ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
    • Re: [PATCH v2] ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
    • Re: [PATCH v2] ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
• [PATCH libnftnl v3 3/3] examples: Add test for assigning timeout objects via rule, Harsha Sharma
• [PATCH libnftnl v3 2/3] examples: add nft-ct-timeout-{add,del,get}, Harsha Sharma
• [PATCH libnftnl v3 1/3] src: add ct timeout support, Harsha Sharma
• [PATCH libnftnl v3 0/3] Add ct timeout support, Harsha Sharma
• [PATCH nft v2] src: add ct timeout support, Harsha Sharma
  • Re: [PATCH nft v2] src: add ct timeout support, Harsha Sharma
• [PATCH] iptables: tests: shell: Add README, Arushi Singhal
  • Re: [PATCH] iptables: tests: shell: Add README, Florian Westphal
• KASAN: stack-out-of-bounds Read in vmalloc_fault, syzbot
  • Re: KASAN: stack-out-of-bounds Read in vmalloc_fault, Dmitry Vyukov
• [PATCH nft] nft: set: print dynamic flag when set, Florian Westphal
• [PATCH nft] doc: describe dynamic flag and caveats for packet-path updates, Florian Westphal
• [PATCH nft] evaluate: skip evaluation of datatype concatenations, Pablo Neira Ayuso
• [PATCH v2 nf] netfilter: nft_compat: explicitly reject ERROR and standard target, Florian Westphal
  • Re: [PATCH v2 nf] netfilter: nft_compat: explicitly reject ERROR and standard target, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: place all set backends in one single module, Pablo Neira Ayuso
• [PATCH nft 1/2] src: add --literal option, Pablo Neira Ayuso
  • [PATCH nft 2/2] doc: update manpage to document --literal option, Pablo Neira Ayuso
• [PATCH net-next v19 0/8] sched: Add Common Applications Kept Enhanced (cake) qdisc, Toke Høiland-Jørgensen
  • [PATCH net-next v19 5/8] sch_cake: Add NAT awareness to packet classifier, Toke Høiland-Jørgensen
  • [PATCH net-next v19 4/8] netfilter: Add nf_ct_get_tuple_skb global lookup function, Toke Høiland-Jørgensen
  • Re: [PATCH net-next v19 0/8] sched: Add Common Applications Kept Enhanced (cake) qdisc, David Miller
    • Re: [PATCH net-next v19 0/8] sched: Add Common Applications Kept Enhanced (cake) qdisc, Toke Høiland-Jørgensen
• [PATCH] nf_conntrack: Fix possible possible crash on module loading., Andrey Ryabinin
  • Re: [PATCH] nf_conntrack: Fix possible possible crash on module loading., Pablo Neira Ayuso
• [PATCH] netfilter: conntrack: add weak IPV6 dependency, Arnd Bergmann
  • Re: [PATCH] netfilter: conntrack: add weak IPV6 dependency, Florian Westphal
    • Re: [PATCH] netfilter: conntrack: add weak IPV6 dependency, Arnd Bergmann
      • Re: [PATCH] netfilter: conntrack: add weak IPV6 dependency, Florian Westphal
        • Re: [PATCH] netfilter: conntrack: add weak IPV6 dependency, Arnd Bergmann
        • Re: [PATCH] netfilter: conntrack: add weak IPV6 dependency, Florian Westphal
          • Re: [PATCH] netfilter: conntrack: add weak IPV6 dependency, Pablo Neira Ayuso
            • Re: [PATCH] netfilter: conntrack: add weak IPV6 dependency, Florian Westphal
• [PATCH net-next] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies, Arnd Bergmann
  • Re: [PATCH net-next] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies, Pablo Neira Ayuso
    • Re: [PATCH net-next] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies, Pablo Neira Ayuso
      • Re: [PATCH net-next] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies, Arnd Bergmann
        • Re: [PATCH net-next] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies, Pablo Neira Ayuso
          • Re: [PATCH net-next] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies, Arnd Bergmann
• [ANNOUNCE] iptables 1.8.0 release, Florian Westphal
  • Re: [ANNOUNCE] iptables 1.8.0 release, Jan Engelhardt
    • Re: [ANNOUNCE] iptables 1.8.0 release, Florian Westphal
• [bug report] net: ipv4: listified version of ip_rcv, Dan Carpenter
  • Re: [bug report] net: ipv4: listified version of ip_rcv, Edward Cree
• [PATCHv2 net-next 0/3] Drop IPVS conn templates under attack, Julian Anastasov
  • [PATCHv2 net-next 2/3] ipvs: add assured state for conn templates, Julian Anastasov
  • [PATCHv2 net-next 3/3] ipvs: drop conn templates under attack, Julian Anastasov
  • [PATCHv2 net-next 1/3] ipvs: provide just conn to ip_vs_state_name, Julian Anastasov
  • Re: [PATCHv2 net-next 0/3] Drop IPVS conn templates under attack, Simon Horman
    • Re: [PATCHv2 net-next 0/3] Drop IPVS conn templates under attack, Pablo Neira Ayuso
  • Re: [PATCHv2 net-next 0/3] Drop IPVS conn templates under attack, Pablo Neira Ayuso
    • Re: [PATCHv2 net-next 0/3] Drop IPVS conn templates under attack, Simon Horman
• git.netfilter.org:git is closed - intentionally?, Duncan Roe
  • Re: git.netfilter.org:git is closed - intentionally?, Duncan Roe
    • Re: git.netfilter.org:git is closed - intentionally?, Pablo Neira Ayuso
    • Re: git.netfilter.org:git is closed - intentionally?, Pablo Neira Ayuso
• FINAL Reminder: Linux Plumbers Networking Track CFP, David Miller
• [PATCH nf-next v6] netfilter: nft_ct: add ct timeout support, Harsha Sharma
  • Re: [PATCH nf-next v6] netfilter: nft_ct: add ct timeout support, kbuild test robot
  • Re: [PATCH nf-next v6] netfilter: nft_ct: add ct timeout support, Pablo Neira Ayuso
• [PATCH 4.14.y] netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj(), Florian Westphal
  • Re: [PATCH 4.14.y] netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj(), Greg KH
• [PATCH nf-next v5] netfilter: nft_ct: add ct timeout support, Harsha Sharma
  • Re: [PATCH nf-next v5] netfilter: nft_ct: add ct timeout support, Pablo Neira Ayuso
  • Re: [PATCH nf-next v5] netfilter: nft_ct: add ct timeout support, kbuild test robot
• [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
  • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
      • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
        • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
          • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
            • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
              • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
                • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
                  • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
                    • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
                      • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
• [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Florian Westphal
      • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Pablo Neira Ayuso
        • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Florian Westphal
          • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Pablo Neira Ayuso
• [PATCH v2 nf] netfilter: x_tables: set module owner for icmp(6) matches, Florian Westphal
  • Re: [PATCH v2 nf] netfilter: x_tables: set module owner for icmp(6) matches, Pablo Neira Ayuso
• [PATCH nft] rule: limit: don't print default burst value, Florian Westphal
  • Re: [PATCH nft] rule: limit: don't print default burst value, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: handle meta/lookup with direct call, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: handle meta/lookup with direct call, Pablo Neira Ayuso
• [PATCH nft] doc: update manpage to document --literal option, Pablo Neira Ayuso
• [PATCH nft] src: display service name with -NN, Pablo Neira Ayuso
  • Re: [PATCH nft] src: display service name with -NN, Florian Westphal
    • Re: [PATCH nft] src: display service name with -NN, Pablo Neira Ayuso
• [PATCH RFC nft] src: meta: always prefix 'meta' for all tokens, Florian Westphal
  • Re: [PATCH RFC nft] src: meta: always prefix 'meta' for all tokens, Máté Eckl
  • Re: [PATCH RFC nft] src: meta: always prefix 'meta' for all tokens, Pablo Neira Ayuso
• [PATCH nft] src: services: remove more exotic protocol names, Florian Westphal
• [PATCH libnftnl] include: missing C++ linkage in headers, Pablo Neira Ayuso
• [PATCH nf-next 0/6] netfilter: nf_conncount: optimize nf_conncount performance, Yi-Hung Wei
  • [PATCH nf-next 1/6] netfilter: nf_conncount: Early exit for garbage collection, Yi-Hung Wei
  • [PATCH nf-next 2/6] netfilter: nf_conncount: Switch to plain list, Yi-Hung Wei
  • [PATCH nf-next 3/6] netfilter: nf_conncount: Early exit in nf_conncount_lookup() and cleanup, Yi-Hung Wei
  • [PATCH nf-next 4/6] netfilter: nf_conncount: Move locking into count_tree(), Yi-Hung Wei
  • [PATCH nf-next 5/6] netfilter: nf_conncount: Split insert and traversal, Yi-Hung Wei
  • [PATCH nf-next 6/6] netfilter: nf_conncount: Add list lock and gc worker, and RCU for init tree search, Yi-Hung Wei
  • Re: [PATCH nf-next 0/6] netfilter: nf_conncount: optimize nf_conncount performance, Pablo Neira Ayuso
• [PATCH] netfilter: ipvs: Fix invalid bytes in IP_VS_MH_TAB_INDEX help text, Ben Hutchings
  • Re: [PATCH] netfilter: ipvs: Fix invalid bytes in IP_VS_MH_TAB_INDEX help text, Julian Anastasov
• [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
  • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
    • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
      • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
        • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
          • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
            • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Florian Westphal
              • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
              • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
  • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
    • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
      • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
        • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
          • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
            • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
• [PATCH] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
  • Re: [PATCH] netfilter: nf_conntrack: resolve clash for matching conntracks, Florian Westphal
    • Re: [PATCH] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
• Reminder: Linux Plumbers Networking Track CFP, David Miller
• [PATCH xtables] ebtables-nft: add stp match, Florian Westphal
• [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Taehee Yoo
  • Re: [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Pablo Neira Ayuso
    • Re: [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Taehee Yoo
      • Re: [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Pablo Neira Ayuso
        • Re: [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Taehee Yoo
• [PATCH nf 4/4] netfilter: nf_tables: check set->size before decreasing set->nelems, Taehee Yoo
  • Re: [PATCH nf 4/4] netfilter: nf_tables: check set->size before decreasing set->nelems, Florian Westphal
    • Re: [PATCH nf 4/4] netfilter: nf_tables: check set->size before decreasing set->nelems, Taehee Yoo
      • Re: [PATCH nf 4/4] netfilter: nf_tables: check set->size before decreasing set->nelems, Florian Westphal
• [PATCH nf 2/4] netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy(), Taehee Yoo
• [PATCH nf 1/4] netfilter: nft_set_hash: fix panic when destroying set, Taehee Yoo
  • Re: [PATCH nf 1/4] netfilter: nft_set_hash: fix panic when destroying set, Florian Westphal
    • Re: [PATCH nf 1/4] netfilter: nft_set_hash: fix panic when destroying set, Taehee Yoo
• [PATCH nf 0/4] netfilter: nf_tables: fix set destroying bugs, Taehee Yoo
  • Re: [PATCH nf 0/4] netfilter: nf_tables: fix set destroying bugs, Pablo Neira Ayuso
    • Re: [PATCH nf 0/4] netfilter: nf_tables: fix set destroying bugs, Taehee Yoo
• [PATCH] nftables: tests: shell: Replace "%" with "#" or "$", Arushi Singhal
  • Re: [PATCH] nftables: tests: shell: Replace "%" with "#" or "$", Florian Westphal
• [PATCH xtables] tests: add script that mimics firewalld startup, Florian Westphal
• [PATCH xtables] xtables: display legacy/nf_tables flavor in error messages, too, Florian Westphal
• [PATCH v2 nf-next 0/8] netfilter: conntrack: move ipv4/v6 trackers into core, Florian Westphal
  • [PATCH v2 nf-next 1/8] netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackers, Florian Westphal
  • [PATCH v2 nf-next 2/8] netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackers, Florian Westphal
  • [PATCH v2 nf-next 3/8] netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackers, Florian Westphal
  • [PATCH v2 nf-next 4/8] netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackers, Florian Westphal
  • [PATCH v2 nf-next 5/8] netfilter: conntrack: avoid calls to l4proto invert_tuple, Florian Westphal
  • [PATCH v2 nf-next 6/8] netfilter: conntrack: avoid l4proto pkt_to_tuple calls, Florian Westphal
  • [PATCH v2 nf-next 7/8] netfilter: conntrack: remove get_timeout() indirection, Florian Westphal
  • [PATCH v2 nf-next 8/8] netfilter: conntrack: remove l3proto abstraction, Florian Westphal
  • Re: [PATCH v2 nf-next 0/8] netfilter: conntrack: move ipv4/v6 trackers into core, Pablo Neira Ayuso
• [PATCH xtables 1/4] ebtables-nft: don't crash on ebtables -X, Florian Westphal
  • [PATCH xtables 2/4] ebtables-nft: remove exec_style, Florian Westphal
  • [PATCH xtables 3/4] ebtables-nft: make -L, -X CHAINNAME work, Florian Westphal
  • [PATCH xtables 4/4] tests: add a few simple tests for list/new/delete, Florian Westphal
  • Re: [PATCH xtables 1/4] ebtables-nft: don't crash on ebtables -X, Pablo Neira Ayuso
• [PATCH nf-next 0/8] netfilter: conntrack: move ipv4/v6 trackers into core, Florian Westphal
  • [PATCH nf-next 1/8] netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 2/8] netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 3/8] netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 4/8] netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 5/8] netfilter: conntrack: avoid calls to l4proto invert_tuple, Florian Westphal
  • [PATCH nf-next 6/8] netfilter: conntrack: avoid l4proto pkt_to_tuple calls, Florian Westphal
    • Re: [PATCH nf-next 6/8] netfilter: conntrack: avoid l4proto pkt_to_tuple calls, kbuild test robot
  • [PATCH nf-next 7/8] netfilter: conntrack: remove get_timeout() indirection, Florian Westphal
  • [PATCH nf-next 8/8] netfilter: conntrack: remove l3proto abstraction, Florian Westphal
    • Re: [PATCH nf-next 8/8] netfilter: conntrack: remove l3proto abstraction, kbuild test robot
• [PATCH nf-next v6] net: netfilter: nf_tables_api: Use id allocation, Varsha Rao
  • Re: [PATCH nf-next v6] net: netfilter: nf_tables_api: Use id allocation, Pablo Neira Ayuso
• [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Florian Westphal
  • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Florian Westphal
        • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Pablo Neira Ayuso
          • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Florian Westphal
            • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
  • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
      • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
          • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
• [PATCH 1/2] iptables: tests: shell: Add README, Arushi Singhal
  • [PATCH 2/2] iptables: tests: shell: Add testcase and update shell test-suite, Arushi Singhal
  • Re: [PATCH 1/2] iptables: tests: shell: Add README, Florian Westphal
  • Re: [PATCH 1/2] iptables: tests: shell: Add README, Jan Engelhardt
• [PATCH nft] src: allow ifname use in concatenated named sets, Florian Westphal
• [PATCH] doc: fix some spellos and the dash escape, Jan Engelhardt
  • Re: [PATCH] doc: fix some spellos and the dash escape, Florian Westphal
• [PATCH libnftnl WIP] expr: add osf support, Fernando Fernandez Mancera
  • [PATCH nf-next WIP] netfilter: implement Passive OS fingerprint module in nft_osf, Fernando Fernandez Mancera
    • Re: [PATCH nf-next WIP] netfilter: implement Passive OS fingerprint module in nft_osf, Pablo Neira Ayuso
      • Re: [PATCH nf-next WIP] netfilter: implement Passive OS fingerprint module in nft_osf, Fernando Fernandez Mancera
• [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Flavio Leitner
  • [PATCH v2 net-next 1/2] netfilter: check if the socket netns is correct., Flavio Leitner
    • Re: [PATCH v2 net-next 1/2] netfilter: check if the socket netns is correct., Florian Westphal
  • [PATCH v2 net-next 2/2] skbuff: preserve sock reference when scrubbing the skb., Flavio Leitner
    • Re: [PATCH v2 net-next 2/2] skbuff: preserve sock reference when scrubbing the skb., Eric Dumazet
  • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Cong Wang
    • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., David Miller
      • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Cong Wang
        • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., David Miller
    • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Cong Wang
      • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., David Miller
        • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Cong Wang
  • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., David Miller
• [PATCH xtables 1/3] xtables: rename xt-multi binaries to -nft, -legacy, Florian Westphal
  • [PATCH xtables 2/3] tests: adapt test suite to run with legacy+nftables based binaries, Florian Westphal
  • [PATCH xtables 3/3] tests: add initial save/restore test cases, Florian Westphal
  • Re: [PATCH xtables 1/3] xtables: rename xt-multi binaries to -nft, -legacy, Jan Engelhardt
    • Re: [PATCH xtables 1/3] xtables: rename xt-multi binaries to -nft, -legacy, Florian Westphal
  • Re: [PATCH xtables 1/3] xtables: rename xt-multi binaries to -nft, -legacy, Florian Westphal
• ebtables: modernize build, Jan Engelhardt
  • [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
    • Re: [PATCH 2/6] build: rename sed source files to .in, Florian Westphal
      • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
        • Re: [PATCH 2/6] build: rename sed source files to .in, Pablo Neira Ayuso
          • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
            • Re: [PATCH 2/6] build: rename sed source files to .in, Pablo Neira Ayuso
              • Re: [PATCH 2/6] build: rename sed source files to .in, Florian Westphal
                • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
                  • Re: [PATCH 2/6] build: rename sed source files to .in, Pablo Neira Ayuso
                    • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
                      • Re: [PATCH 2/6] build: rename sed source files to .in, Florian Westphal
                        • Re: [PATCH 2/6] build: rename sed source files to .in, Duncan Roe
                        • Re: [PATCH 2/6] build: rename sed source files to .in, Florian Westphal
                        • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
                    • Re: [PATCH 2/6] build: rename sed source files to .in, Duncan Roe
  • [PATCH 1/6] build: drop install -o/-g root, Jan Engelhardt
    • Re: [PATCH 1/6] build: drop install -o/-g root, Florian Westphal
  • [PATCH 4/6] extensions: use __attribute__((constructor)) for autoregistration, Jan Engelhardt
  • [PATCH 5/6] Add .gitignore, Jan Engelhardt
  • [PATCH 3/6] build: use autoconf-style placeholders in sed-ed files, Jan Engelhardt
  • [PATCH 6/6] build: move to automake, Jan Engelhardt
  • Re: ebtables: modernize build, Florian Westphal
    • Re: ebtables: modernize build, Jan Engelhardt
• [PATCH xtables] xtables-restore: init table before processing policies, Florian Westphal
• [PATCH] ebtables: abandon KERNEL_INCLUDES and use double quotes, Duncan Roe
• [PATCH] build: abandon KERNEL_INCLUDES variable, Jan Engelhardt
  • Re: [PATCH] build: abandon KERNEL_INCLUDES variable, Phil Sutter
  • Re: [PATCH] build: abandon KERNEL_INCLUDES variable, Máté Eckl
    • Re: [PATCH] build: abandon KERNEL_INCLUDES variable, Jan Engelhardt
  • Re: [PATCH] build: abandon KERNEL_INCLUDES variable, Duncan Roe
• [PATCH] netfilter: nf_flow_table: add conntrack accounting, John Crispin
  • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, kbuild test robot
  • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, Florian Westphal
    • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, John Crispin
      • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, kbuild test robot
• stable request: don't set F_IFACE on ipv6 fib lookups and followup fix, Florian Westphal
  • Re: stable request: don't set F_IFACE on ipv6 fib lookups and followup fix, Greg KH
• [PATCH nf-next v2] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Florian Westphal
  • Re: [PATCH nf-next v2] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Pravin Shelar
    • Re: [PATCH nf-next v2] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Pablo Neira Ayuso
• [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
  • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
    • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
      • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
        • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
          • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
      • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
        • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
          • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
            • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
              • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
                  • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                    • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
                      • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                        • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
                          • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
            • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
              • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
                  • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                    • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
                      • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
  • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
• [PATCH nf-next v2] netfilter: utils: move nf_ip6_checksum* from ipv6 to utils, Florian Westphal
  • Re: [PATCH nf-next v2] netfilter: utils: move nf_ip6_checksum* from ipv6 to utils, Pablo Neira Ayuso
• [PATCH nf-next v2] netfilter: utils: move nf_ip_checksum* from ipv4 to utils, Florian Westphal
  • Re: [PATCH nf-next v2] netfilter: utils: move nf_ip_checksum* from ipv4 to utils, Pablo Neira Ayuso
• [PATCH iptables] doc: Fix spelling error in hashlimit section, Major Hayden
• [PATCH net] netfilter: nf_log: don't hold nf_log_mutex during user access, Jann Horn
  • Re: [PATCH net] netfilter: nf_log: don't hold nf_log_mutex during user access, Pablo Neira Ayuso
• [PATCH] ebtables: Use double quotes in #include statements for local headers, Duncan Roe
  • Re: [PATCH] ebtables: Use double quotes in #include statements for local headers, Jan Engelhardt
  • Re: [PATCH] ebtables: Use double quotes in #include statements for local headers, Jan Engelhardt
• [libnftnl PATCH 0/3] Fixes for JSON parsing on big endian, Phil Sutter
  • [libnftnl PATCH 1/3] utils: Fix nftnl_get_value() on big endian, Phil Sutter
  • [libnftnl PATCH 2/3] expr/data_reg: Fix JSON parsing on big endian, Phil Sutter
  • [libnftnl PATCH 3/3] expr/exthdr: Fix JSON parsing on big endian, Phil Sutter
• [PATCH nft] tests/py: fix import when run from other directory, Eric Leblond
  • Re: [PATCH nft] tests/py: fix import when run from other directory, Pablo Neira Ayuso
• [nft PATCH] netlink_delinearize: Refactor meta_may_dependency_kill(), Phil Sutter
• [PATCH nf v2] netfilter: nf_conncount: fix garbage collection confirm race, Florian Westphal
  • Re: [PATCH nf v2] netfilter: nf_conncount: fix garbage collection confirm race, Yi-Hung Wei
  • Re: [PATCH nf v2] netfilter: nf_conncount: fix garbage collection confirm race, Pablo Neira Ayuso
• [PATCH nft] src: trace: fix policy printing, Florian Westphal
• [PATCH net] netfilter: nf_log: fix uninit read in nf_log_proc_dostring, Jann Horn
  • Re: [PATCH net] netfilter: nf_log: fix uninit read in nf_log_proc_dostring, Pablo Neira Ayuso
• Re: nft 0.8.2 - icmp missing verdict, Florian Westphal
  • Re: nft 0.8.2 - icmp missing verdict, Florian Westphal
• [arptables PATCH] arptables: legacy renaming, Arturo Borrero Gonzalez
• [PATCH] xtables: warn in case old-style (set/getsockopt) tables exist, Florian Westphal
• [PATCH nft v2] tests: shell: Add test case for multiple sets, Varsha Rao
• [PATCH nf-next v5] net: netfilter: nf_tables_api: Use id allocation, Varsha Rao
  • Re: [PATCH nf-next v5] net: netfilter: nf_tables_api: Use id allocation, Pablo Neira Ayuso
• [PATCH v2] nftables: Fix typos/Grammatical Errors, Arushi Singhal
  • Re: [PATCH v2] nftables: Fix typos/Grammatical Errors, Duncan Roe
  • Re: [PATCH v2] nftables: Fix typos/Grammatical Errors, Florian Westphal
• [PATCH nf-next] netfilter: Move nf_tproxy_assign_sock to nf_tproxy.h, Máté Eckl
  • Re: [PATCH nf-next] netfilter: Move nf_tproxy_assign_sock to nf_tproxy.h, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Máté Eckl
  • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Florian Westphal
      • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Pablo Neira Ayuso
        • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Máté Eckl
          • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Florian Westphal
        • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Máté Eckl
  • [PATCH nf-next] netfilter: Kconfig: Change select dependencies from IPV6 to NF_TABLES_IPV6 and IP6_NF_IPTABLES, Máté Eckl
    • Re: [PATCH nf-next] netfilter: Kconfig: Change select dependencies from IPV6 to NF_TABLES_IPV6 and IP6_NF_IPTABLES, Pablo Neira Ayuso
  • [PATCH nf-next] netfilter: Kconfig: Make NETFILTER_XT_MATCH_SOCKET select NF_SOCKET_IPV4/6 instead of dependinf on it, Máté Eckl
    • Re: [PATCH nf-next] netfilter: Kconfig: Make NETFILTER_XT_MATCH_SOCKET select NF_SOCKET_IPV4/6 instead of dependinf on it, Pablo Neira Ayuso
• [PATCH nft 0/8] python install and build fixes, Eric Leblond
  • [PATCH nft 8/8] doc: fix make distcheck, Eric Leblond
    • Re: [PATCH nft 8/8] doc: fix make distcheck, Jan Engelhardt
      • Re: [PATCH nft 8/8] doc: fix make distcheck, Phil Sutter
  • [PATCH nft 6/8] python: change author info, Eric Leblond
  • [PATCH nft 3/8] python: installation of binding via make install, Eric Leblond
    • Re: [PATCH nft 3/8] python: installation of binding via make install, Eric Leblond
      • [PATCH nft v2 0/7] python install and build fixes, Eric Leblond
        • [PATCH nft v2 7/7] tests/py: minor cleaning, Eric Leblond
          • Re: [PATCH nft v2 7/7] tests/py: minor cleaning, Phil Sutter
            • Re: [PATCH nft v2 7/7] tests/py: minor cleaning, Pablo Neira Ayuso
              • Re: [PATCH nft v2 7/7] tests/py: minor cleaning, Phil Sutter
        • [PATCH nft v2 4/7] python: installation of binding via make install, Eric Leblond
        • [PATCH nft v2 5/7] python: set license and author in nftables.py, Eric Leblond
        • [PATCH nft v2 6/7] doc: fix make distcheck, Eric Leblond
        • [PATCH nft v2 1/7] configure.ac: better message when a2x is missing, Eric Leblond
        • [PATCH nft v2 2/7] configure.ac: remove useless braces in messages, Eric Leblond
        • [PATCH nft v2 3/7] configure.ac: docbook2man invalid syntax error, Eric Leblond
  • [PATCH nft 2/8] configure.ac: remove useless braces in messages, Eric Leblond
  • [PATCH nft 1/8] configure.ac: better message when a2x is missing, Eric Leblond
  • [PATCH nft 4/8] python: set license and author in nftables.py, Eric Leblond
  • [PATCH nft 5/8] python: add build system file to .gitignore, Eric Leblond
  • [PATCH nft 7/8] tests/py: minor cleaning, Eric Leblond
• [PATCH xtables] xtables: add nf_tables vs. legacy postfix to version strings, Florian Westphal
  • Re: [PATCH xtables] xtables: add nf_tables vs. legacy postfix to version strings, Arturo Borrero Gonzalez
• [PATCH nft] configure.ac: docbook2man invalid syntax error, Eric Leblond
  • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Máté Eckl
    • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Eric Leblond
      • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Máté Eckl
        • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Florian Westphal
          • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Pablo Neira Ayuso
            • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Máté Eckl
              • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Duncan Roe
• [PATCH xtables v2] xtables: add xtables-monitor, Florian Westphal
• [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
  • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
    • [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
      • Re: [PATCH nft] evaluate: Detect address family in inet context, Florian Westphal
  • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
    • Re: [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
      • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
        • Re: [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
          • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
            • Re: [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
        • Re: [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
          • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
• [RFC nf-next 0/7] netfilter: nf_conncount: optimize nf_conncount performance, Yi-Hung Wei
  • [RFC nf-next 3/7] netfilter: nf_conncount: Early exit in nf_conncount_lookup() and cleanup, Yi-Hung Wei
  • [RFC nf-next 4/7] netfilter: nf_conncount: Move locking into count_tree(), Yi-Hung Wei
  • [RFC nf-next 7/7] netfilter: nf_conncount: Add garbage collection worker, Yi-Hung Wei
  • [RFC nf-next 5/7] netfilter: nf_conncount: Split insert and traversal, Yi-Hung Wei
  • [RFC nf-next 6/7] netfilter: nf_conncount: Add list lock and use RCU for init tree search, Yi-Hung Wei
    • Re: [RFC nf-next 6/7] netfilter: nf_conncount: Add list lock and use RCU for init tree search, Florian Westphal
  • [RFC nf-next 2/7] netfilter: nf_conncount: Switch to plain list, Yi-Hung Wei
  • [RFC nf-next 1/7] netfilter: nf_conncount: Early exit for garbage collection, Yi-Hung Wei
    • Re: [RFC nf-next 1/7] netfilter: nf_conncount: Early exit for garbage collection, Pablo Neira Ayuso
      • Re: [RFC nf-next 1/7] netfilter: nf_conncount: Early exit for garbage collection, Pablo Neira Ayuso
  • Re: [RFC nf-next 0/7] netfilter: nf_conncount: optimize nf_conncount performance, Florian Westphal
    • Re: [RFC nf-next 0/7] netfilter: nf_conncount: optimize nf_conncount performance, Yi-Hung Wei
• [nft PATCH 0/3] libnftables: A few fixes and cleanups, Phil Sutter
  • [nft PATCH 2/3] doc: libnftables-json: Review asciidoc syntax, Phil Sutter
  • Re: [nft PATCH 0/3] libnftables: A few fixes and cleanups, Pablo Neira Ayuso
  • [nft PATCH 3/3] libnftables: Fix exit_cookie(), Phil Sutter
  • [nft PATCH 1/3] scanner: Do not convert tabs into spaces, Phil Sutter
• [PATCH nf] netfilter: nf_conncount: fix garbage collection confirm race, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_conncount: fix garbage collection confirm race, Yi-Hung Wei
• [nft PATCH] Makefile: Introduce Make_global.am, Phil Sutter
  • Re: [nft PATCH] Makefile: Introduce Make_global.am, Jan Engelhardt
    • Re: [nft PATCH] Makefile: Introduce Make_global.am, Phil Sutter
      • Re: [nft PATCH] Makefile: Introduce Make_global.am, Jan Engelhardt
        • Re: [nft PATCH] Makefile: Introduce Make_global.am, Phil Sutter
          • Re: [nft PATCH] Makefile: Introduce Make_global.am, Jan Engelhardt
            • Re: [nft PATCH] Makefile: Introduce Make_global.am, Phil Sutter
              • Re: [nft PATCH] Makefile: Introduce Make_global.am, Jan Engelhardt
  • Re: [nft PATCH] Makefile: Introduce Make_global.am, Arturo Borrero Gonzalez
• [nft PATCH v2] libnftables: Simplify nft_run_cmd_from_buffer footprint, Phil Sutter
  • Re: [nft PATCH v2] libnftables: Simplify nft_run_cmd_from_buffer footprint, Pablo Neira Ayuso
• [PATCH xtables 1/3] include: update kernel netfilter header files, Florian Westphal
  • [PATCH xtables 2/3] xtables: translate nft meta trace set 1 to -j TRACE, Florian Westphal
  • [PATCH xtables 3/3] xtables: add xtables-monitor, Florian Westphal
• [nft PATCH] libnftables: Simplify nft_run_cmd_from_buffer footprint, Phil Sutter
  • Re: [nft PATCH] libnftables: Simplify nft_run_cmd_from_buffer footprint, Arturo Borrero Gonzalez
    • Re: [nft PATCH] libnftables: Simplify nft_run_cmd_from_buffer footprint, Arturo Borrero Gonzalez
  • Re: [nft PATCH] libnftables: Simplify nft_run_cmd_from_buffer footprint, Pablo Neira Ayuso
• [nft PATCH] doc: Fix typo in Makefile.am, Phil Sutter
  • Re: [nft PATCH] doc: Fix typo in Makefile.am, Florian Westphal
• [PATCH nf-next] netfilter: flowtables: use fixed renew timeout on teardown, Florian Westphal
  • Re: [PATCH nf-next] netfilter: flowtables: use fixed renew timeout on teardown, Pablo Neira Ayuso
• [PATCH] nftables: Fix typos/Grammatical Errors, Arushi Singhal
  • Re: [PATCH] nftables: Fix typos/Grammatical Errors, Duncan Roe
• [PATCH] extensions: ebt_string: take action if snprintf discards data, Duncan Roe
  • Re: [PATCH] extensions: ebt_string: take action if snprintf discards data, Pablo Neira Ayuso
    • Re: [PATCH] extensions: ebt_string: take action if snprintf discards data, Duncan Roe
      • Re: [PATCH] extensions: ebt_string: take action if snprintf discards data, Pablo Neira Ayuso
• [PATCH net-next,RFC 00/13] New fast forwarding path, Pablo Neira Ayuso
  • [PATCH net-next,RFC 01/13] net: Add a helper to get the packet offload callbacks by priority., Pablo Neira Ayuso
  • [PATCH net-next,RFC 04/13] net: Use one bit of NAPI_GRO_CB for the netfilter fastpath., Pablo Neira Ayuso
  • [PATCH net-next,RFC 02/13] net: Change priority of ipv4 and ipv6 packet offloads., Pablo Neira Ayuso
  • [PATCH net-next,RFC 13/13] netfilter: nft_flow_offload: make sure route is not stale, Pablo Neira Ayuso
  • [PATCH net-next,RFC 03/13] net: Add a GSO feature bit for the netfilter forward fastpath., Pablo Neira Ayuso
  • [PATCH net-next,RFC 09/13] netfilter: nf_flow_table: add hooknum to flowtable type, Pablo Neira Ayuso
  • [PATCH net-next,RFC 12/13] netfilter: nft_flow_offload: remove secpath check, Pablo Neira Ayuso
  • [PATCH net-next,RFC 08/13] netfilter: nft_chain_filter: add support for early ingress, Pablo Neira Ayuso
  • [PATCH net-next,RFC 11/13] netfilter: nft_flow_offload: enable offload after second packet is seen, Pablo Neira Ayuso
  • [PATCH net-next,RFC 06/13] netfilter: add early ingress support for IPv6, Pablo Neira Ayuso
  • [PATCH net-next,RFC 05/13] netfilter: add early ingress hook for IPv4, Pablo Neira Ayuso
  • [PATCH net-next,RFC 10/13] netfilter: nf_flow_table: add flowtable for early ingress hook, Pablo Neira Ayuso
  • [PATCH net-next,RFC 07/13] netfilter: add ESP support for early ingress, Pablo Neira Ayuso
  • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Willem de Bruijn
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
  • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Eric Dumazet
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Eric Dumazet
  • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, David Miller
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Florian Fainelli
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, David Miller
        • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Andrew Collins
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Daniel Borkmann
        • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
          • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Daniel Borkmann
  • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Tom Herbert
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, David Miller
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
        • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Edward Cree
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Tom Herbert
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
• [nft PATCH] doc: Add libnftables man page, Phil Sutter
  • Re: [nft PATCH] doc: Add libnftables man page, Pablo Neira Ayuso
• [PATCH WIP nftables] src: add ct timeout support, Harsha Sharma
  • Re: [PATCH WIP nftables] src: add ct timeout support, Harsha Sharma
  • Re: [PATCH WIP nftables] src: add ct timeout support, Harsha Sharma
• [PATCH nf-next 0/7] netfilter: preparation work to remove l3 trackers, Florian Westphal