Linux Netfilter / IP Tables Devel

• Date Index

• Re: git.netfilter.org:git is closed - intentionally?, (continued)
  • Re: git.netfilter.org:git is closed - intentionally?, Pablo Neira Ayuso
• FINAL Reminder: Linux Plumbers Networking Track CFP, David Miller
• [PATCH nf-next v6] netfilter: nft_ct: add ct timeout support, Harsha Sharma
  • Re: [PATCH nf-next v6] netfilter: nft_ct: add ct timeout support, kbuild test robot
  • Re: [PATCH nf-next v6] netfilter: nft_ct: add ct timeout support, Pablo Neira Ayuso
• [PATCH 4.14.y] netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj(), Florian Westphal
  • Re: [PATCH 4.14.y] netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj(), Greg KH
• [PATCH nf-next v5] netfilter: nft_ct: add ct timeout support, Harsha Sharma
  • Re: [PATCH nf-next v5] netfilter: nft_ct: add ct timeout support, Pablo Neira Ayuso
  • Re: [PATCH nf-next v5] netfilter: nft_ct: add ct timeout support, kbuild test robot
• [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
  • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
      • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
        • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
          • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
            • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
              • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
                • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
                  • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
                    • Re: [PATCH] netfilter: ipset: export indexes via netlink, Florent Fourcot
                      • Re: [PATCH] netfilter: ipset: export indexes via netlink, Jozsef Kadlecsik
• [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Florian Westphal
      • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Pablo Neira Ayuso
        • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Florian Westphal
          • Re: [PATCH nf] netfilter: nft_compat: explicitly reject builtin targets, Pablo Neira Ayuso
• [PATCH v2 nf] netfilter: x_tables: set module owner for icmp(6) matches, Florian Westphal
  • Re: [PATCH v2 nf] netfilter: x_tables: set module owner for icmp(6) matches, Pablo Neira Ayuso
• [PATCH nft] rule: limit: don't print default burst value, Florian Westphal
  • Re: [PATCH nft] rule: limit: don't print default burst value, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: handle meta/lookup with direct call, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: handle meta/lookup with direct call, Pablo Neira Ayuso
• [PATCH nft] doc: update manpage to document --literal option, Pablo Neira Ayuso
• [PATCH nft] src: display service name with -NN, Pablo Neira Ayuso
  • Re: [PATCH nft] src: display service name with -NN, Florian Westphal
    • Re: [PATCH nft] src: display service name with -NN, Pablo Neira Ayuso
• [PATCH RFC nft] src: meta: always prefix 'meta' for all tokens, Florian Westphal
  • Re: [PATCH RFC nft] src: meta: always prefix 'meta' for all tokens, Máté Eckl
  • Re: [PATCH RFC nft] src: meta: always prefix 'meta' for all tokens, Pablo Neira Ayuso
• [PATCH nft] src: services: remove more exotic protocol names, Florian Westphal
• [PATCH libnftnl] include: missing C++ linkage in headers, Pablo Neira Ayuso
• [PATCH nf-next 0/6] netfilter: nf_conncount: optimize nf_conncount performance, Yi-Hung Wei
  • [PATCH nf-next 1/6] netfilter: nf_conncount: Early exit for garbage collection, Yi-Hung Wei
  • [PATCH nf-next 2/6] netfilter: nf_conncount: Switch to plain list, Yi-Hung Wei
  • [PATCH nf-next 3/6] netfilter: nf_conncount: Early exit in nf_conncount_lookup() and cleanup, Yi-Hung Wei
  • [PATCH nf-next 4/6] netfilter: nf_conncount: Move locking into count_tree(), Yi-Hung Wei
  • [PATCH nf-next 5/6] netfilter: nf_conncount: Split insert and traversal, Yi-Hung Wei
  • [PATCH nf-next 6/6] netfilter: nf_conncount: Add list lock and gc worker, and RCU for init tree search, Yi-Hung Wei
  • Re: [PATCH nf-next 0/6] netfilter: nf_conncount: optimize nf_conncount performance, Pablo Neira Ayuso
• [PATCH] netfilter: ipvs: Fix invalid bytes in IP_VS_MH_TAB_INDEX help text, Ben Hutchings
  • Re: [PATCH] netfilter: ipvs: Fix invalid bytes in IP_VS_MH_TAB_INDEX help text, Julian Anastasov
• [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
  • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
    • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
      • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
        • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
          • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
            • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Florian Westphal
              • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
              • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
  • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
    • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
      • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
        • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
          • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
            • Re: [PATCH v2] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
• [PATCH] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
  • Re: [PATCH] netfilter: nf_conntrack: resolve clash for matching conntracks, Florian Westphal
    • Re: [PATCH] netfilter: nf_conntrack: resolve clash for matching conntracks, Martynas Pumputis
• Reminder: Linux Plumbers Networking Track CFP, David Miller
• [PATCH xtables] ebtables-nft: add stp match, Florian Westphal
• [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Taehee Yoo
  • Re: [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Pablo Neira Ayuso
    • Re: [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Taehee Yoo
      • Re: [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Pablo Neira Ayuso
        • Re: [PATCH nf 3/4] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Taehee Yoo
• [PATCH nf 4/4] netfilter: nf_tables: check set->size before decreasing set->nelems, Taehee Yoo
  • Re: [PATCH nf 4/4] netfilter: nf_tables: check set->size before decreasing set->nelems, Florian Westphal
    • Re: [PATCH nf 4/4] netfilter: nf_tables: check set->size before decreasing set->nelems, Taehee Yoo
      • Re: [PATCH nf 4/4] netfilter: nf_tables: check set->size before decreasing set->nelems, Florian Westphal
• [PATCH nf 2/4] netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy(), Taehee Yoo
• [PATCH nf 1/4] netfilter: nft_set_hash: fix panic when destroying set, Taehee Yoo
  • Re: [PATCH nf 1/4] netfilter: nft_set_hash: fix panic when destroying set, Florian Westphal
    • Re: [PATCH nf 1/4] netfilter: nft_set_hash: fix panic when destroying set, Taehee Yoo
• [PATCH nf 0/4] netfilter: nf_tables: fix set destroying bugs, Taehee Yoo
  • Re: [PATCH nf 0/4] netfilter: nf_tables: fix set destroying bugs, Pablo Neira Ayuso
    • Re: [PATCH nf 0/4] netfilter: nf_tables: fix set destroying bugs, Taehee Yoo
• [PATCH] nftables: tests: shell: Replace "%" with "#" or "$", Arushi Singhal
  • Re: [PATCH] nftables: tests: shell: Replace "%" with "#" or "$", Florian Westphal
• [PATCH xtables] tests: add script that mimics firewalld startup, Florian Westphal
• [PATCH xtables] xtables: display legacy/nf_tables flavor in error messages, too, Florian Westphal
• [PATCH v2 nf-next 0/8] netfilter: conntrack: move ipv4/v6 trackers into core, Florian Westphal
  • [PATCH v2 nf-next 1/8] netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackers, Florian Westphal
  • [PATCH v2 nf-next 2/8] netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackers, Florian Westphal
  • [PATCH v2 nf-next 3/8] netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackers, Florian Westphal
  • [PATCH v2 nf-next 4/8] netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackers, Florian Westphal
  • [PATCH v2 nf-next 5/8] netfilter: conntrack: avoid calls to l4proto invert_tuple, Florian Westphal
  • [PATCH v2 nf-next 6/8] netfilter: conntrack: avoid l4proto pkt_to_tuple calls, Florian Westphal
  • [PATCH v2 nf-next 7/8] netfilter: conntrack: remove get_timeout() indirection, Florian Westphal
  • [PATCH v2 nf-next 8/8] netfilter: conntrack: remove l3proto abstraction, Florian Westphal
  • Re: [PATCH v2 nf-next 0/8] netfilter: conntrack: move ipv4/v6 trackers into core, Pablo Neira Ayuso
• [PATCH xtables 1/4] ebtables-nft: don't crash on ebtables -X, Florian Westphal
  • [PATCH xtables 2/4] ebtables-nft: remove exec_style, Florian Westphal
  • [PATCH xtables 3/4] ebtables-nft: make -L, -X CHAINNAME work, Florian Westphal
  • [PATCH xtables 4/4] tests: add a few simple tests for list/new/delete, Florian Westphal
  • Re: [PATCH xtables 1/4] ebtables-nft: don't crash on ebtables -X, Pablo Neira Ayuso
• [PATCH nf-next 0/8] netfilter: conntrack: move ipv4/v6 trackers into core, Florian Westphal
  • [PATCH nf-next 1/8] netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 2/8] netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 3/8] netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 4/8] netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 5/8] netfilter: conntrack: avoid calls to l4proto invert_tuple, Florian Westphal
  • [PATCH nf-next 6/8] netfilter: conntrack: avoid l4proto pkt_to_tuple calls, Florian Westphal
    • Re: [PATCH nf-next 6/8] netfilter: conntrack: avoid l4proto pkt_to_tuple calls, kbuild test robot
  • [PATCH nf-next 7/8] netfilter: conntrack: remove get_timeout() indirection, Florian Westphal
  • [PATCH nf-next 8/8] netfilter: conntrack: remove l3proto abstraction, Florian Westphal
    • Re: [PATCH nf-next 8/8] netfilter: conntrack: remove l3proto abstraction, kbuild test robot
• [PATCH nf-next v6] net: netfilter: nf_tables_api: Use id allocation, Varsha Rao
  • Re: [PATCH nf-next v6] net: netfilter: nf_tables_api: Use id allocation, Pablo Neira Ayuso
• [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Florian Westphal
  • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Florian Westphal
        • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Pablo Neira Ayuso
          • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Florian Westphal
            • Re: [PATCH nf] netfilter: x_tables: set module owner for builtin matches/targets, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
  • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
      • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Stefano Brivio
          • Re: [PATCH] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Jozsef Kadlecsik
• [PATCH 1/2] iptables: tests: shell: Add README, Arushi Singhal
  • [PATCH 2/2] iptables: tests: shell: Add testcase and update shell test-suite, Arushi Singhal
  • Re: [PATCH 1/2] iptables: tests: shell: Add README, Florian Westphal
  • Re: [PATCH 1/2] iptables: tests: shell: Add README, Jan Engelhardt
• [PATCH nft] src: allow ifname use in concatenated named sets, Florian Westphal
• [PATCH] doc: fix some spellos and the dash escape, Jan Engelhardt
  • Re: [PATCH] doc: fix some spellos and the dash escape, Florian Westphal
• [PATCH libnftnl WIP] expr: add osf support, Fernando Fernandez Mancera
  • [PATCH nf-next WIP] netfilter: implement Passive OS fingerprint module in nft_osf, Fernando Fernandez Mancera
    • Re: [PATCH nf-next WIP] netfilter: implement Passive OS fingerprint module in nft_osf, Pablo Neira Ayuso
      • Re: [PATCH nf-next WIP] netfilter: implement Passive OS fingerprint module in nft_osf, Fernando Fernandez Mancera
• [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Flavio Leitner
  • [PATCH v2 net-next 1/2] netfilter: check if the socket netns is correct., Flavio Leitner
    • Re: [PATCH v2 net-next 1/2] netfilter: check if the socket netns is correct., Florian Westphal
  • [PATCH v2 net-next 2/2] skbuff: preserve sock reference when scrubbing the skb., Flavio Leitner
    • Re: [PATCH v2 net-next 2/2] skbuff: preserve sock reference when scrubbing the skb., Eric Dumazet
  • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Cong Wang
    • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., David Miller
      • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Cong Wang
        • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., David Miller
    • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Cong Wang
      • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., David Miller
        • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., Cong Wang
  • Re: [PATCH v2 net-next 0/2] net: preserve sock reference when scrubbing the skb., David Miller
• [PATCH xtables 1/3] xtables: rename xt-multi binaries to -nft, -legacy, Florian Westphal
  • [PATCH xtables 2/3] tests: adapt test suite to run with legacy+nftables based binaries, Florian Westphal
  • [PATCH xtables 3/3] tests: add initial save/restore test cases, Florian Westphal
  • Re: [PATCH xtables 1/3] xtables: rename xt-multi binaries to -nft, -legacy, Jan Engelhardt
    • Re: [PATCH xtables 1/3] xtables: rename xt-multi binaries to -nft, -legacy, Florian Westphal
  • Re: [PATCH xtables 1/3] xtables: rename xt-multi binaries to -nft, -legacy, Florian Westphal
• ebtables: modernize build, Jan Engelhardt
  • [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
    • Re: [PATCH 2/6] build: rename sed source files to .in, Florian Westphal
      • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
        • Re: [PATCH 2/6] build: rename sed source files to .in, Pablo Neira Ayuso
          • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
            • Re: [PATCH 2/6] build: rename sed source files to .in, Pablo Neira Ayuso
              • Re: [PATCH 2/6] build: rename sed source files to .in, Florian Westphal
                • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
                  • Re: [PATCH 2/6] build: rename sed source files to .in, Pablo Neira Ayuso
                    • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
                      • Re: [PATCH 2/6] build: rename sed source files to .in, Florian Westphal
                        • Re: [PATCH 2/6] build: rename sed source files to .in, Duncan Roe
                        • Re: [PATCH 2/6] build: rename sed source files to .in, Florian Westphal
                        • Re: [PATCH 2/6] build: rename sed source files to .in, Jan Engelhardt
                    • Re: [PATCH 2/6] build: rename sed source files to .in, Duncan Roe
  • [PATCH 1/6] build: drop install -o/-g root, Jan Engelhardt
    • Re: [PATCH 1/6] build: drop install -o/-g root, Florian Westphal
  • [PATCH 4/6] extensions: use __attribute__((constructor)) for autoregistration, Jan Engelhardt
  • [PATCH 5/6] Add .gitignore, Jan Engelhardt
  • [PATCH 3/6] build: use autoconf-style placeholders in sed-ed files, Jan Engelhardt
  • [PATCH 6/6] build: move to automake, Jan Engelhardt
  • Re: ebtables: modernize build, Florian Westphal
    • Re: ebtables: modernize build, Jan Engelhardt
• [PATCH xtables] xtables-restore: init table before processing policies, Florian Westphal
• [PATCH] ebtables: abandon KERNEL_INCLUDES and use double quotes, Duncan Roe
• [PATCH] build: abandon KERNEL_INCLUDES variable, Jan Engelhardt
  • Re: [PATCH] build: abandon KERNEL_INCLUDES variable, Phil Sutter
  • Re: [PATCH] build: abandon KERNEL_INCLUDES variable, Máté Eckl
    • Re: [PATCH] build: abandon KERNEL_INCLUDES variable, Jan Engelhardt
  • Re: [PATCH] build: abandon KERNEL_INCLUDES variable, Duncan Roe
• [PATCH] netfilter: nf_flow_table: add conntrack accounting, John Crispin
  • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, kbuild test robot
  • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, Florian Westphal
    • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, John Crispin
      • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_flow_table: add conntrack accounting, kbuild test robot
• stable request: don't set F_IFACE on ipv6 fib lookups and followup fix, Florian Westphal
  • Re: stable request: don't set F_IFACE on ipv6 fib lookups and followup fix, Greg KH
• [PATCH nf-next v2] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Florian Westphal
  • Re: [PATCH nf-next v2] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Pravin Shelar
    • Re: [PATCH nf-next v2] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Pablo Neira Ayuso
• [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
  • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
    • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
      • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
        • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
          • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
      • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
        • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
          • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
            • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
              • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
                  • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                    • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
                      • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                        • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Flavio Leitner
                          • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
            • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
              • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
                  • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
                    • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Eric Dumazet
                      • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
  • Re: [PATCH net-next] net: preserve sock reference when scrubbing the skb., Cong Wang
• [PATCH nf-next v2] netfilter: utils: move nf_ip6_checksum* from ipv6 to utils, Florian Westphal
  • Re: [PATCH nf-next v2] netfilter: utils: move nf_ip6_checksum* from ipv6 to utils, Pablo Neira Ayuso
• [PATCH nf-next v2] netfilter: utils: move nf_ip_checksum* from ipv4 to utils, Florian Westphal
  • Re: [PATCH nf-next v2] netfilter: utils: move nf_ip_checksum* from ipv4 to utils, Pablo Neira Ayuso
• [PATCH iptables] doc: Fix spelling error in hashlimit section, Major Hayden
• [PATCH net] netfilter: nf_log: don't hold nf_log_mutex during user access, Jann Horn
  • Re: [PATCH net] netfilter: nf_log: don't hold nf_log_mutex during user access, Pablo Neira Ayuso
• [PATCH] ebtables: Use double quotes in #include statements for local headers, Duncan Roe
  • Re: [PATCH] ebtables: Use double quotes in #include statements for local headers, Jan Engelhardt
  • Re: [PATCH] ebtables: Use double quotes in #include statements for local headers, Jan Engelhardt
• [libnftnl PATCH 0/3] Fixes for JSON parsing on big endian, Phil Sutter
  • [libnftnl PATCH 1/3] utils: Fix nftnl_get_value() on big endian, Phil Sutter
  • [libnftnl PATCH 2/3] expr/data_reg: Fix JSON parsing on big endian, Phil Sutter
  • [libnftnl PATCH 3/3] expr/exthdr: Fix JSON parsing on big endian, Phil Sutter
• [PATCH nft] tests/py: fix import when run from other directory, Eric Leblond
  • Re: [PATCH nft] tests/py: fix import when run from other directory, Pablo Neira Ayuso
• [nft PATCH] netlink_delinearize: Refactor meta_may_dependency_kill(), Phil Sutter
• [PATCH nf v2] netfilter: nf_conncount: fix garbage collection confirm race, Florian Westphal
  • Re: [PATCH nf v2] netfilter: nf_conncount: fix garbage collection confirm race, Yi-Hung Wei
  • Re: [PATCH nf v2] netfilter: nf_conncount: fix garbage collection confirm race, Pablo Neira Ayuso
• [PATCH nft] src: trace: fix policy printing, Florian Westphal
• [PATCH net] netfilter: nf_log: fix uninit read in nf_log_proc_dostring, Jann Horn
  • Re: [PATCH net] netfilter: nf_log: fix uninit read in nf_log_proc_dostring, Pablo Neira Ayuso
• Re: nft 0.8.2 - icmp missing verdict, Florian Westphal
  • Re: nft 0.8.2 - icmp missing verdict, Florian Westphal
• [arptables PATCH] arptables: legacy renaming, Arturo Borrero Gonzalez
• [PATCH] xtables: warn in case old-style (set/getsockopt) tables exist, Florian Westphal
• [PATCH nft v2] tests: shell: Add test case for multiple sets, Varsha Rao
• [PATCH nf-next v5] net: netfilter: nf_tables_api: Use id allocation, Varsha Rao
  • Re: [PATCH nf-next v5] net: netfilter: nf_tables_api: Use id allocation, Pablo Neira Ayuso
• [PATCH v2] nftables: Fix typos/Grammatical Errors, Arushi Singhal
  • Re: [PATCH v2] nftables: Fix typos/Grammatical Errors, Duncan Roe
  • Re: [PATCH v2] nftables: Fix typos/Grammatical Errors, Florian Westphal
• [PATCH nf-next] netfilter: Move nf_tproxy_assign_sock to nf_tproxy.h, Máté Eckl
  • Re: [PATCH nf-next] netfilter: Move nf_tproxy_assign_sock to nf_tproxy.h, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Máté Eckl
  • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Florian Westphal
      • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Pablo Neira Ayuso
        • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Máté Eckl
          • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Florian Westphal
        • Re: [PATCH nf-next] netfilter: Configuration fixes for ip/nftables socket matching, Máté Eckl
  • [PATCH nf-next] netfilter: Kconfig: Change select dependencies from IPV6 to NF_TABLES_IPV6 and IP6_NF_IPTABLES, Máté Eckl
    • Re: [PATCH nf-next] netfilter: Kconfig: Change select dependencies from IPV6 to NF_TABLES_IPV6 and IP6_NF_IPTABLES, Pablo Neira Ayuso
  • [PATCH nf-next] netfilter: Kconfig: Make NETFILTER_XT_MATCH_SOCKET select NF_SOCKET_IPV4/6 instead of dependinf on it, Máté Eckl
    • Re: [PATCH nf-next] netfilter: Kconfig: Make NETFILTER_XT_MATCH_SOCKET select NF_SOCKET_IPV4/6 instead of dependinf on it, Pablo Neira Ayuso
• [PATCH nft 0/8] python install and build fixes, Eric Leblond
  • [PATCH nft 8/8] doc: fix make distcheck, Eric Leblond
    • Re: [PATCH nft 8/8] doc: fix make distcheck, Jan Engelhardt
      • Re: [PATCH nft 8/8] doc: fix make distcheck, Phil Sutter
  • [PATCH nft 6/8] python: change author info, Eric Leblond
  • [PATCH nft 3/8] python: installation of binding via make install, Eric Leblond
    • Re: [PATCH nft 3/8] python: installation of binding via make install, Eric Leblond
      • [PATCH nft v2 0/7] python install and build fixes, Eric Leblond
        • [PATCH nft v2 7/7] tests/py: minor cleaning, Eric Leblond
          • Re: [PATCH nft v2 7/7] tests/py: minor cleaning, Phil Sutter
            • Re: [PATCH nft v2 7/7] tests/py: minor cleaning, Pablo Neira Ayuso
              • Re: [PATCH nft v2 7/7] tests/py: minor cleaning, Phil Sutter
        • [PATCH nft v2 4/7] python: installation of binding via make install, Eric Leblond
        • [PATCH nft v2 5/7] python: set license and author in nftables.py, Eric Leblond
        • [PATCH nft v2 6/7] doc: fix make distcheck, Eric Leblond
        • [PATCH nft v2 1/7] configure.ac: better message when a2x is missing, Eric Leblond
        • [PATCH nft v2 2/7] configure.ac: remove useless braces in messages, Eric Leblond
        • [PATCH nft v2 3/7] configure.ac: docbook2man invalid syntax error, Eric Leblond
  • [PATCH nft 2/8] configure.ac: remove useless braces in messages, Eric Leblond
  • [PATCH nft 1/8] configure.ac: better message when a2x is missing, Eric Leblond
  • [PATCH nft 4/8] python: set license and author in nftables.py, Eric Leblond
  • [PATCH nft 5/8] python: add build system file to .gitignore, Eric Leblond
  • [PATCH nft 7/8] tests/py: minor cleaning, Eric Leblond
• [PATCH xtables] xtables: add nf_tables vs. legacy postfix to version strings, Florian Westphal
  • Re: [PATCH xtables] xtables: add nf_tables vs. legacy postfix to version strings, Arturo Borrero Gonzalez
• [PATCH nft] configure.ac: docbook2man invalid syntax error, Eric Leblond
  • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Máté Eckl
    • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Eric Leblond
      • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Máté Eckl
        • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Florian Westphal
          • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Pablo Neira Ayuso
            • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Máté Eckl
              • Re: [PATCH nft] configure.ac: docbook2man invalid syntax error, Duncan Roe
• [PATCH xtables v2] xtables: add xtables-monitor, Florian Westphal
• [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
  • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
    • [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
      • Re: [PATCH nft] evaluate: Detect address family in inet context, Florian Westphal
  • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
    • Re: [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
      • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
        • Re: [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
          • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
            • Re: [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
        • Re: [PATCH nft] evaluate: Detect address family in inet context, Máté Eckl
          • Re: [PATCH nft] evaluate: Detect address family in inet context, Pablo Neira Ayuso
• [RFC nf-next 0/7] netfilter: nf_conncount: optimize nf_conncount performance, Yi-Hung Wei
  • [RFC nf-next 3/7] netfilter: nf_conncount: Early exit in nf_conncount_lookup() and cleanup, Yi-Hung Wei
  • [RFC nf-next 4/7] netfilter: nf_conncount: Move locking into count_tree(), Yi-Hung Wei
  • [RFC nf-next 7/7] netfilter: nf_conncount: Add garbage collection worker, Yi-Hung Wei
  • [RFC nf-next 5/7] netfilter: nf_conncount: Split insert and traversal, Yi-Hung Wei
  • [RFC nf-next 6/7] netfilter: nf_conncount: Add list lock and use RCU for init tree search, Yi-Hung Wei
    • Re: [RFC nf-next 6/7] netfilter: nf_conncount: Add list lock and use RCU for init tree search, Florian Westphal
  • [RFC nf-next 2/7] netfilter: nf_conncount: Switch to plain list, Yi-Hung Wei
  • [RFC nf-next 1/7] netfilter: nf_conncount: Early exit for garbage collection, Yi-Hung Wei
    • Re: [RFC nf-next 1/7] netfilter: nf_conncount: Early exit for garbage collection, Pablo Neira Ayuso
      • Re: [RFC nf-next 1/7] netfilter: nf_conncount: Early exit for garbage collection, Pablo Neira Ayuso
  • Re: [RFC nf-next 0/7] netfilter: nf_conncount: optimize nf_conncount performance, Florian Westphal
    • Re: [RFC nf-next 0/7] netfilter: nf_conncount: optimize nf_conncount performance, Yi-Hung Wei
• [nft PATCH 0/3] libnftables: A few fixes and cleanups, Phil Sutter
  • [nft PATCH 2/3] doc: libnftables-json: Review asciidoc syntax, Phil Sutter
  • Re: [nft PATCH 0/3] libnftables: A few fixes and cleanups, Pablo Neira Ayuso
  • [nft PATCH 3/3] libnftables: Fix exit_cookie(), Phil Sutter
  • [nft PATCH 1/3] scanner: Do not convert tabs into spaces, Phil Sutter
• [PATCH nf] netfilter: nf_conncount: fix garbage collection confirm race, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_conncount: fix garbage collection confirm race, Yi-Hung Wei
• [nft PATCH] Makefile: Introduce Make_global.am, Phil Sutter
  • Re: [nft PATCH] Makefile: Introduce Make_global.am, Jan Engelhardt
    • Re: [nft PATCH] Makefile: Introduce Make_global.am, Phil Sutter
      • Re: [nft PATCH] Makefile: Introduce Make_global.am, Jan Engelhardt
        • Re: [nft PATCH] Makefile: Introduce Make_global.am, Phil Sutter
          • Re: [nft PATCH] Makefile: Introduce Make_global.am, Jan Engelhardt
            • Re: [nft PATCH] Makefile: Introduce Make_global.am, Phil Sutter
              • Re: [nft PATCH] Makefile: Introduce Make_global.am, Jan Engelhardt
  • Re: [nft PATCH] Makefile: Introduce Make_global.am, Arturo Borrero Gonzalez
• [nft PATCH v2] libnftables: Simplify nft_run_cmd_from_buffer footprint, Phil Sutter
  • Re: [nft PATCH v2] libnftables: Simplify nft_run_cmd_from_buffer footprint, Pablo Neira Ayuso
• [PATCH xtables 1/3] include: update kernel netfilter header files, Florian Westphal
  • [PATCH xtables 2/3] xtables: translate nft meta trace set 1 to -j TRACE, Florian Westphal
  • [PATCH xtables 3/3] xtables: add xtables-monitor, Florian Westphal
• [nft PATCH] libnftables: Simplify nft_run_cmd_from_buffer footprint, Phil Sutter
  • Re: [nft PATCH] libnftables: Simplify nft_run_cmd_from_buffer footprint, Arturo Borrero Gonzalez
    • Re: [nft PATCH] libnftables: Simplify nft_run_cmd_from_buffer footprint, Arturo Borrero Gonzalez
  • Re: [nft PATCH] libnftables: Simplify nft_run_cmd_from_buffer footprint, Pablo Neira Ayuso
• [nft PATCH] doc: Fix typo in Makefile.am, Phil Sutter
  • Re: [nft PATCH] doc: Fix typo in Makefile.am, Florian Westphal
• [PATCH nf-next] netfilter: flowtables: use fixed renew timeout on teardown, Florian Westphal
  • Re: [PATCH nf-next] netfilter: flowtables: use fixed renew timeout on teardown, Pablo Neira Ayuso
• [PATCH] nftables: Fix typos/Grammatical Errors, Arushi Singhal
  • Re: [PATCH] nftables: Fix typos/Grammatical Errors, Duncan Roe
• [PATCH] extensions: ebt_string: take action if snprintf discards data, Duncan Roe
  • Re: [PATCH] extensions: ebt_string: take action if snprintf discards data, Pablo Neira Ayuso
    • Re: [PATCH] extensions: ebt_string: take action if snprintf discards data, Duncan Roe
      • Re: [PATCH] extensions: ebt_string: take action if snprintf discards data, Pablo Neira Ayuso
• [PATCH net-next,RFC 00/13] New fast forwarding path, Pablo Neira Ayuso
  • [PATCH net-next,RFC 01/13] net: Add a helper to get the packet offload callbacks by priority., Pablo Neira Ayuso
  • [PATCH net-next,RFC 04/13] net: Use one bit of NAPI_GRO_CB for the netfilter fastpath., Pablo Neira Ayuso
  • [PATCH net-next,RFC 02/13] net: Change priority of ipv4 and ipv6 packet offloads., Pablo Neira Ayuso
  • [PATCH net-next,RFC 13/13] netfilter: nft_flow_offload: make sure route is not stale, Pablo Neira Ayuso
  • [PATCH net-next,RFC 03/13] net: Add a GSO feature bit for the netfilter forward fastpath., Pablo Neira Ayuso
  • [PATCH net-next,RFC 09/13] netfilter: nf_flow_table: add hooknum to flowtable type, Pablo Neira Ayuso
  • [PATCH net-next,RFC 12/13] netfilter: nft_flow_offload: remove secpath check, Pablo Neira Ayuso
  • [PATCH net-next,RFC 08/13] netfilter: nft_chain_filter: add support for early ingress, Pablo Neira Ayuso
  • [PATCH net-next,RFC 11/13] netfilter: nft_flow_offload: enable offload after second packet is seen, Pablo Neira Ayuso
  • [PATCH net-next,RFC 06/13] netfilter: add early ingress support for IPv6, Pablo Neira Ayuso
  • [PATCH net-next,RFC 05/13] netfilter: add early ingress hook for IPv4, Pablo Neira Ayuso
  • [PATCH net-next,RFC 10/13] netfilter: nf_flow_table: add flowtable for early ingress hook, Pablo Neira Ayuso
  • [PATCH net-next,RFC 07/13] netfilter: add ESP support for early ingress, Pablo Neira Ayuso
  • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Willem de Bruijn
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
  • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Eric Dumazet
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Eric Dumazet
  • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, David Miller
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Florian Fainelli
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, David Miller
        • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Andrew Collins
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Daniel Borkmann
        • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
          • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Daniel Borkmann
  • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Tom Herbert
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, David Miller
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
        • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Edward Cree
      • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Tom Herbert
    • Re: [PATCH net-next,RFC 00/13] New fast forwarding path, Steffen Klassert
• [nft PATCH] doc: Add libnftables man page, Phil Sutter
  • Re: [nft PATCH] doc: Add libnftables man page, Pablo Neira Ayuso
• [PATCH WIP nftables] src: add ct timeout support, Harsha Sharma
  • Re: [PATCH WIP nftables] src: add ct timeout support, Harsha Sharma
  • Re: [PATCH WIP nftables] src: add ct timeout support, Harsha Sharma
• [PATCH nf-next 0/7] netfilter: preparation work to remove l3 trackers, Florian Westphal
  • [PATCH nf-next 1/7] netfilter: utils: move nf_ip_checksum* from ipv4 to utils, Florian Westphal
  • [PATCH nf-next 2/7] netfilter: utils: move nf_ip6_checksum* from ipv6 to utils, Florian Westphal
  • [PATCH nf-next 3/7] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Florian Westphal
  • [PATCH nf-next 4/7] netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 5/7] netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 7/7] netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackers, Florian Westphal
    • Re: [PATCH nf-next 7/7] netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackers, Florian Westphal
  • [PATCH nf-next 6/7] netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackers, Florian Westphal
• [nft PATCH] libnftables: Fix exit_cookie(), Phil Sutter
  • Re: [nft PATCH] libnftables: Fix exit_cookie(), Pablo Neira Ayuso
• [PATCH net] netfilter: ipv6: nf_defrag: reduce struct net memory waste, Eric Dumazet
  • Re: [PATCH net] netfilter: ipv6: nf_defrag: reduce struct net memory waste, Pablo Neira Ayuso
• [PATCH nf-next v4] net: netfilter: nf_tables_api: Use id allocation., Varsha Rao
  • Re: [PATCH nf-next v4] net: netfilter: nf_tables_api: Use id allocation., Dan Carpenter
• [PATCH net] netfilter: nf_queue: augment nfqa_cfg_policy, Eric Dumazet
  • Re: [PATCH net] netfilter: nf_queue: augment nfqa_cfg_policy, Pablo Neira Ayuso
• [PATCH nf] netfilter: helper: Fix possible panic after nf_conntrack_helper_unregister, gfree . wind
  • Re: [PATCH nf] netfilter: helper: Fix possible panic after nf_conntrack_helper_unregister, Pablo Neira Ayuso
• [PATCH nf] netfilter: Fix nf_conncount garbage collection, Yi-Hung Wei
  • Re: [PATCH nf] netfilter: Fix nf_conncount garbage collection, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: Fix nf_conncount garbage collection, Pablo Neira Ayuso
• [PATCH nf] netfilter: xt_connmark: fix list corruption on rmmod, Florian Westphal
  • Re: [PATCH nf] netfilter: xt_connmark: fix list corruption on rmmod, Pablo Neira Ayuso
• [PATCH] src: Fix another build warning / error, Duncan Roe
  • Re: [PATCH] src: Fix another build warning / error, Duncan Roe
  • Re: [PATCH] src: Fix another build warning / error, Pablo Neira Ayuso
    • Re: [PATCH] src: Fix another build warning / error, Duncan Roe
• [PATCH libnftnl v2 3/3] examples: Add test for assigning timeout objects via rule, Harsha Sharma
• [PATCH libnftnl v2 2/3] examples: add nft-ct-timeout-{add,del,get}, Harsha Sharma
• [PATCH libnftnl v2 1/3] src: add ct timeout support, Harsha Sharma
• [PATCH libnftnl v2 0/3] Add ct timeout support, Harsha Sharma
• [PATCH nf-next v4] netfilter: nft_ct: add ct timeout support, Harsha Sharma
  • Re: [PATCH nf-next v4] netfilter: nft_ct: add ct timeout support, Harsha Sharma
  • Re: [PATCH nf-next v4] netfilter: nft_ct: add ct timeout support, kbuild test robot
  • Re: [PATCH nf-next v4] netfilter: nft_ct: add ct timeout support, kbuild test robot
  • Re: [PATCH nf-next v4] netfilter: nft_ct: add ct timeout support, Florian Westphal
    • Re: [PATCH nf-next v4] netfilter: nft_ct: add ct timeout support, Pablo Neira Ayuso
      • Re: [PATCH nf-next v4] netfilter: nft_ct: add ct timeout support, Florian Westphal
      • Re: [PATCH nf-next v4] netfilter: nft_ct: add ct timeout support, Harsha Sharma
• [PATCH nf] netfilter: ctnetlink: avoid null pointer dereference, Florian Westphal
  • Re: [PATCH nf] netfilter: ctnetlink: avoid null pointer dereference, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_reject_bridge: remove unnecessary ttl set, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nft_reject_bridge: remove unnecessary ttl set, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: nft_reject_bridge: remove unnecessary ttl set, Taehee Yoo
• [PATCH nft] rule: do not print default burst for objects, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nft] rule: do not print default burst for objects, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL, Pablo Neira Ayuso
• [PATCH nft] src: add dynamic flag and use it, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain(), Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain(), Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain(), Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: fix jumpstack depth validation, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_tables: fix jumpstack depth validation, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nf_tables: fix jumpstack depth validation, Taehee Yoo
  • Re: [PATCH nf-next] netfilter: nf_tables: fix jumpstack depth validation, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: nf_tables: fix jumpstack depth validation, Taehee Yoo
• [PATCH nf 1/2] netfilter: nf_tables: fix module unload race, Florian Westphal
  • [PATCH nf 2/2] netfilter: nf_tables: close race between netns exit and rmmod, Florian Westphal
    • Re: [PATCH nf 2/2] netfilter: nf_tables: close race between netns exit and rmmod, Pablo Neira Ayuso
  • Re: [PATCH nf 1/2] netfilter: nf_tables: fix module unload race, Pablo Neira Ayuso
• BUG: unable to handle kernel paging request in ebt_do_table, syzbot
  • Re: BUG: unable to handle kernel paging request in ebt_do_table, Florian Westphal
• [PATCH v2] iptables: tests: shell: add shell test-suite, Arushi Singhal
  • Re: [PATCH v2] iptables: tests: shell: add shell test-suite, Pablo Neira Ayuso
• [ANNOUNCE] nftables 0.9.0 release, Florian Westphal
• [ANNOUNCE] libnftnl 1.1.1 release, Florian Westphal
• [nft PATCH 0/7] JSON: Some fixes and documentation, Phil Sutter
  • [nft PATCH 4/7] JSON: Add support for socket expression, Phil Sutter
  • [nft PATCH 2/7] tests/py: Fix JSON for flowtable tests, Phil Sutter
  • [nft PATCH 7/7] doc: Add JSON schema documentation, Phil Sutter
  • [nft PATCH 6/7] JSON: Support latest enhancements of fwd statement, Phil Sutter
  • [nft PATCH 1/7] JSON: Call verdict maps 'vmap' in JSON as well, Phil Sutter
  • [nft PATCH 5/7] JSON: Add support for connlimit statement, Phil Sutter
  • [nft PATCH 3/7] JSON: Don't print burst if equal to 5, Phil Sutter
  • Re: [nft PATCH 0/7] JSON: Some fixes and documentation, Pablo Neira Ayuso
• Tproxy matching syntax, Máté Eckl
  • Re: Tproxy matching syntax, Florian Westphal
  • [PATCH nf_tables] Introduce TPROXY support, Máté Eckl
    • [PATCH libnftnl] Add tproxy support, Máté Eckl
      • [PATCH v2 libnftnl] Add tproxy support, Máté Eckl
        • Re: [PATCH v2 libnftnl] Add tproxy support, Pablo Neira Ayuso
    • [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
      • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Florian Westphal
        • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
          • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Florian Westphal
            • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
              • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Florian Westphal
                • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
        • [PATCH nf|nf-next] netfilter: Refactor nf_tproxy_get_sock_v{4,6}, Máté Eckl
          • Re: [PATCH nf|nf-next] netfilter: Refactor nf_tproxy_get_sock_v{4,6}, Pablo Neira Ayuso
            • Re: [PATCH nf|nf-next] netfilter: Refactor nf_tproxy_get_sock_v{4,6}, Máté Eckl
              • Re: [PATCH nf|nf-next] netfilter: Refactor nf_tproxy_get_sock_v{4,6}, Pablo Neira Ayuso
          • [PATCH v2 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Máté Eckl
            • Re: [PATCH v2 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Pablo Neira Ayuso
              • Re: [PATCH v2 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Pablo Neira Ayuso
                • Re: [PATCH v2 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Florian Westphal
                  • Re: [PATCH v2 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Máté Eckl
          • [PATCH v3 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Máté Eckl
            • Re: [PATCH v3 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Pablo Neira Ayuso
          • [PATCH v4 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Máté Eckl
            • Re: [PATCH v4 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Pablo Neira Ayuso
              • Re: [PATCH v4 nf] netfilter: nf_tproxy: fix possible non-linear access to transport header, Máté Eckl
      • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
        • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Florian Westphal
          • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
        • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
      • Re: [PATCH nf-next] netfilter: Add native tproxy support for nf_tables, kbuild test robot
      • [PATCH v2 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
        • Re: [PATCH v2 nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
          • Re: [PATCH v2 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
            • Re: [PATCH v2 nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
              • Re: [PATCH v2 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
                • Re: [PATCH v2 nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
                  • Re: [PATCH v2 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
                    • Re: [PATCH v2 nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
              • Re: [PATCH v2 nf-next] netfilter: Add native tproxy support for nf_tables, Florian Westphal
      • [PATCH v3 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
        • Re: [PATCH v3 nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
      • [PATCH v4 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
        • Re: [PATCH v4 nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
          • Re: [PATCH v4 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
            • Re: [PATCH v4 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
              • Re: [PATCH v4 nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
                • Re: [PATCH v4 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
      • [PATCH v5 nf-next] netfilter: Add native tproxy support for nf_tables, Máté Eckl
        • Re: [PATCH v5 nf-next] netfilter: Add native tproxy support for nf_tables, Pablo Neira Ayuso
    • [PATCH nft] Add tproxy support, Máté Eckl
      • Re: [PATCH nft] Add tproxy support, Florian Westphal
        • Re: [PATCH nft] Add tproxy support, Máté Eckl
          • Re: [PATCH nft] Add tproxy support, Florian Westphal
            • Re: [PATCH nft] Add tproxy support, Máté Eckl
      • Re: [PATCH nft] Add tproxy support, Máté Eckl
        • Re: [PATCH nft] Add tproxy support, Florian Westphal
      • [PATCH v2 nft] Add tproxy support, Máté Eckl
        • Re: [PATCH v2 nft] Add tproxy support, Máté Eckl
        • Re: [PATCH v2 nft] Add tproxy support, Florian Westphal
      • [PATCH v3 nft] Add tproxy support, Máté Eckl
        • Re: [PATCH v3 nft] Add tproxy support, Pablo Neira Ayuso
    • [PATCH nft] Add test cases for tproxy support, Máté Eckl
      • [PATCH v2 nft] test: Add test cases for tproxy support, Máté Eckl
      • [PATCH v2 nft] tests: py: Add test cases for tproxy support, Máté Eckl
        • Re: [PATCH v2 nft] tests: py: Add test cases for tproxy support, Máté Eckl
      • [PATCH v3 nft] tests: py: Add test cases for tproxy support, Máté Eckl
        • Re: [PATCH v3 nft] tests: py: Add test cases for tproxy support, Pablo Neira Ayuso
  • [PATCH nft] doc: Add tproxy statement to man page, Máté Eckl
    • [PATCH v2 nft] doc: Add tproxy statement to man page, Máté Eckl
      • Re: [PATCH v2 nft] doc: Add tproxy statement to man page, Pablo Neira Ayuso
• [PATCH] iptables: tests: shell: add shell test-suite, Arushi Singhal
  • Re: [PATCH] iptables: tests: shell: add shell test-suite, Pablo Neira Ayuso
    • Re: [PATCH] iptables: tests: shell: add shell test-suite, Florian Westphal
• [PATCH] netfilter: remove include/net/netfilter/nft_dup.h, Corentin Labbe
  • Re: [PATCH] netfilter: remove include/net/netfilter/nft_dup.h, Pablo Neira Ayuso
• KMSAN: uninit-value in ebt_stp_mt_check (2), syzbot
  • Re: KMSAN: uninit-value in ebt_stp_mt_check (2), Dmitry Vyukov
  • [PATCH nf] netfilter: x_tables: initialise match/target check parameter struct, Florian Westphal
    • Re: [PATCH nf] netfilter: x_tables: initialise match/target check parameter struct, Pablo Neira Ayuso
  • Re: KMSAN: uninit-value in ebt_stp_mt_check (2), syzbot
• [PATCH nf] netfilter: nft_socket: fix module autoload, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_socket: fix module autoload, Máté Eckl
• [PATCH nft] src: do not reset generation ID on ruleset flush, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_conntrack: Increase __IPS_MAX_BIT with new bit IPS_OFFLOAD_BIT, gfree . wind
  • Re: [PATCH nf-next] netfilter: nf_conntrack: Increase __IPS_MAX_BIT with new bit IPS_OFFLOAD_BIT, Pablo Neira Ayuso
• [PATCH nft] expr: extend fwd statement to support address and family, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_rbtree: fix parameter of __nft_rbtree_lookup(), Taehee Yoo
  • Re: [PATCH nf] netfilter: nft_set_rbtree: fix parameter of __nft_rbtree_lookup(), Pablo Neira Ayuso
• [PATCH libnftnl] expr: extend fwd to support address and protocol, Pablo Neira Ayuso
• [PATCH nft] src: connlimit support, Pablo Neira Ayuso
• [PATCH libnfnl] expr: add connlimit support, Pablo Neira Ayuso
• [PATCH] build: update ebtables.h from kernel and drop local unused copy, Jan Engelhardt
  • Re: [PATCH] build: update ebtables.h from kernel and drop local unused copy, Pablo Neira Ayuso
    • Re: [PATCH] build: update ebtables.h from kernel and drop local unused copy, Jan Engelhardt
  • Re: [PATCH] build: update ebtables.h from kernel and drop local unused copy, Florian Westphal
• [nft PATCH] Explicitly deny concatenated types in interval sets, Phil Sutter
  • Re: [nft PATCH] Explicitly deny concatenated types in interval sets, Florian Westphal
• [PATCH nft] nat: Eliminate misuse of AF_*, Máté Eckl
  • Re: [PATCH nft] nat: Eliminate misuse of AF_*, Pablo Neira Ayuso
• [nft PATCH] nft.8: Fix reject statement documentation, Phil Sutter
  • Re: [nft PATCH] nft.8: Fix reject statement documentation, Florian Westphal
• WARNING in ebt_do_table, syzbot
  • [PATCH nf] netfilter: ebtables: reject non-bridge targets, Florian Westphal
  • [PATCH v2 nf] netfilter: ebtables: reject non-bridge targets, Florian Westphal
    • Re: [PATCH v2 nf] netfilter: ebtables: reject non-bridge targets, Pablo Neira Ayuso
• [RFC PATCH ghak86 V1] audit: eliminate audit_enabled magic number comparison, Richard Guy Briggs
  • Re: [RFC PATCH ghak86 V1] audit: eliminate audit_enabled magic number comparison, Paul Moore
    • Re: [RFC PATCH ghak86 V1] audit: eliminate audit_enabled magic number comparison, Richard Guy Briggs
  • Re: [RFC PATCH ghak86 V1] audit: eliminate audit_enabled magic number comparison, Paul Moore
• [PATCH] iptables src: Use double quotes in #includes for local headers, Duncan Roe
  • Re: [PATCH] iptables src: Use double quotes in #includes for local headers, Jan Engelhardt
    • Re: [PATCH] iptables src: Use double quotes in #includes for local headers, Duncan Roe
      • Re: [PATCH] iptables src: Use double quotes in #includes for local headers, Jan Engelhardt
        • Re: [PATCH] iptables src: Use double quotes in #includes for local headers, Duncan Roe
• [PATCH] libnftnl src: Use double quotes in #includes for non-system headers, Duncan Roe
• [PATCH v2 0/4] Added support for per-file variable scopes and global variables, David Fabian
  • [PATCH v2 3/4] Refactoring of indesc hierarchy., David Fabian
  • [PATCH v2 4/4] Added tests for nested file-based scopes, David Fabian
  • [PATCH v2 2/4] Added support for global variable definitions., David Fabian
  • [PATCH v2 1/4] Added implicit variable scope to each include command to support local variables, David Fabian
  • Re: [PATCH v2 0/4] Added support for per-file variable scopes and global variables, David Fabian
    • Re: [PATCH v2 0/4] Added support for per-file variable scopes and global variables, Pablo Neira Ayuso
      • Re: [PATCH v2 0/4] Added support for per-file variable scopes and global variables, David Fabian
• [PATCH nftables] configure.ac: fix a typo in docbook2x error message., Fernando Fernandez Mancera
  • Re: [PATCH nftables] configure.ac: fix a typo in docbook2x error message., Florian Westphal
• [PATCH] nftables src: Use double quotes in #includes for non-system headers, Duncan Roe
• [PATCH v2] libmnl src: Use double quotes in #includes for non-system headers, Duncan Roe
  • Re: [PATCH v2] libmnl src: Use double quotes in #includes for non-system headers, Jan Engelhardt
    • Re: [PATCH v2] libmnl src: Use double quotes in #includes for non-system headers, Duncan Roe
• [PATCH v1] libmnl src: Use double quotes in #includes for non-system headers, Duncan Roe
• issues with shaping cake to 60 gbits or in unlimited mode at 100gbps, Dave Taht
• [PATCH] netfilter: ipset: forbid family for hash:mac sets, Florent Fourcot
  • Re: [PATCH] netfilter: ipset: forbid family for hash:mac sets, Jozsef Kadlecsik
• [RFC PATCH nft] parser: Set base chain prios with textual names, Máté Eckl
  • Re: [RFC PATCH nft] parser: Set base chain prios with textual names, Arturo Borrero Gonzalez
    • Re: [RFC PATCH nft] parser: Set base chain prios with textual names, Pablo Neira Ayuso
      • Re: [RFC PATCH nft] parser: Set base chain prios with textual names, Máté Eckl
  • Re: [RFC PATCH nft] parser: Set base chain prios with textual names, Pablo Neira Ayuso
    • Re: [RFC PATCH nft] parser: Set base chain prios with textual names, Máté Eckl
  • [PATCH v2 nft] Set/print base chain prios with textual names, Máté Eckl
    • Re: [PATCH v2 nft] Set/print base chain prios with textual names, Pablo Neira Ayuso
      • Re: [PATCH v2 nft] Set/print base chain prios with textual names, Máté Eckl
        • Re: [PATCH v2 nft] Set/print base chain prios with textual names, Pablo Neira Ayuso
  • [PATCH v3 nft] Set/print standard chain priorities with textual names, Máté Eckl
    • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Pablo Neira Ayuso
      • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Máté Eckl
    • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Phil Sutter
      • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Máté Eckl
        • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Phil Sutter
          • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Pablo Neira Ayuso
            • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Máté Eckl
              • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Pablo Neira Ayuso
            • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Máté Eckl
              • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Pablo Neira Ayuso
                • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Máté Eckl
                  • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Pablo Neira Ayuso
                    • Re: [PATCH v3 nft] Set/print standard chain priorities with textual names, Pablo Neira Ayuso
  • [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
    • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Pablo Neira Ayuso
      • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
        • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Pablo Neira Ayuso
        • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
          • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Pablo Neira Ayuso
            • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Florian Westphal
              • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Pablo Neira Ayuso
                • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
                  • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Florian Westphal
                    • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
                      • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
                        • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Pablo Neira Ayuso
      • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
        • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
          • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Pablo Neira Ayuso
            • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
              • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Máté Eckl
                • Re: [PATCH v4 nft] Set/print standard chain prios with textual names, Pablo Neira Ayuso
• [PATCH nft] include: update linux/netfilter_ipv4.h, Máté Eckl
  • Re: [PATCH nft] include: update linux/netfilter_ipv4.h, Pablo Neira Ayuso
• Re: [PATCH net-next] netfilter: fix null-ptr-deref in nf_nat_decode_session, Prashant Bhole