Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 40/47] netfilter: fix a few (harmless) sparse warnings, (continued)
  • [PATCH 40/47] netfilter: fix a few (harmless) sparse warnings, Pablo Neira Ayuso
  • [PATCH 41/47] netfilter: convert hook list to an array, Pablo Neira Ayuso
    • Re: [PATCH 41/47] netfilter: convert hook list to an array, Tariq Toukan
      • Re: [PATCH 41/47] netfilter: convert hook list to an array, Florian Westphal
        • Re: [PATCH 41/47] netfilter: convert hook list to an array, Tariq Toukan
  • [PATCH 45/47] netfilter: Remove NFDEBUG(), Pablo Neira Ayuso
  • [PATCH 44/47] netfilter: conntrack: don't log "invalid" icmpv6 connections, Pablo Neira Ayuso
  • [PATCH 42/47] netfilter: debug: check for sorted array, Pablo Neira Ayuso
  • [PATCH 43/47] netfilter: core: batch nf_unregister_net_hooks synchronize_net calls, Pablo Neira Ayuso
  • [PATCH 39/47] netfilter: ebtables: fix indent on if statements, Pablo Neira Ayuso
  • [PATCH 38/47] netfilter: conntrack: make protocol tracker pointers const, Pablo Neira Ayuso
• [PATCH 33/47] netfilter: conntrack: remove protocol name from l3proto struct, Pablo Neira Ayuso
  • [PATCH 34/47] netfilter: conntrack: remove protocol name from l4proto struct, Pablo Neira Ayuso
  • [PATCH 35/47] netfilter: conntrack: reduce size of l4protocol trackers, Pablo Neira Ayuso
• [PATCH 23/47] netfilter: constify nf_loginfo structures, Pablo Neira Ayuso
  • [PATCH 30/47] netfilter: rt: add support to fetch path mss, Pablo Neira Ayuso
  • [PATCH 32/47] netfilter: conntrack: compute l3proto nla size at compile time, Pablo Neira Ayuso
  • [PATCH 29/47] netfilter: exthdr: tcp option set support, Pablo Neira Ayuso
  • [PATCH 31/47] netfilter: nf_nat_h323: fix logical-not-parentheses warning, Pablo Neira Ayuso
  • [PATCH 27/47] netfilter: exthdr: factor out tcp option access, Pablo Neira Ayuso
  • [PATCH 26/47] netfilter: use audit_log(), Pablo Neira Ayuso
  • [PATCH 24/47] netfilter: connlimit: merge root4 and root6., Pablo Neira Ayuso
  • [PATCH 28/47] netfilter: exthdr: split netlink dump function, Pablo Neira Ayuso
  • [PATCH 25/47] netfilter: remove prototype of netfilter_queue_init, Pablo Neira Ayuso
• [PATCH 20/47] netfilter: conntrack: do not enable connection tracking unless needed, Pablo Neira Ayuso
  • [PATCH 22/47] netfilter: constify nf_conntrack_l3/4proto parameters, Pablo Neira Ayuso
  • [PATCH 21/47] netfilter: xtables: Remove unused variable in compat_copy_entry_from_user(), Pablo Neira Ayuso
• [PATCH 10/47] netfilter: conntrack: destroy functions need to free queued packets, Pablo Neira Ayuso
  • [PATCH 11/47] netfilter: nfnetlink_queue: don't queue dying conntracks to userspace, Pablo Neira Ayuso
  • [PATCH 17/47] netfilter: nf_tables: Allow set names of up to 255 chars, Pablo Neira Ayuso
  • [PATCH 19/47] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases, Pablo Neira Ayuso
  • [PATCH 18/47] netfilter: nf_tables: Allow object names of up to 255 chars, Pablo Neira Ayuso
  • [PATCH 15/47] netfilter: nf_tables: Allow table names of up to 255 chars, Pablo Neira Ayuso
  • [PATCH 16/47] netfilter: nf_tables: Allow chain name of up to 255 chars, Pablo Neira Ayuso
  • [PATCH 12/47] netfilter: nf_hook_ops structs can be const, Pablo Neira Ayuso
  • [PATCH 14/47] netlink: Introduce nla_strdup(), Pablo Neira Ayuso
  • [PATCH 13/47] netfilter: nf_tables: No need to check chain existence when tracing, Pablo Neira Ayuso
• [PATCH 00/47] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 02/47] netfilter: nf_tables: keep chain counters away from hot path, Pablo Neira Ayuso
  • [PATCH 09/47] netfilter: add and use nf_ct_unconfirmed_destroy, Pablo Neira Ayuso
  • [PATCH 07/47] netfilter: conntrack: Change to deferable work queue, Pablo Neira Ayuso
  • [PATCH 06/47] netfilter: nf_tables: add fib expression to the netdev family, Pablo Neira Ayuso
  • [PATCH 08/47] netfilter: expect: add and use nf_ct_expect_iterate helpers, Pablo Neira Ayuso
  • [PATCH 01/47] netfilter: expect: add to hash table after expect init, Pablo Neira Ayuso
  • [PATCH 04/47] netfilter: nf_tables: Attach process info to NFT_MSG_NEWGEN notifications, Pablo Neira Ayuso
  • [PATCH 03/47] netfilter: Remove duplicated rcu_read_lock., Pablo Neira Ayuso
  • [PATCH 05/47] netfilter: nf_tables: fib: use skb_header_pointer, Pablo Neira Ayuso
  • Re: [PATCH 00/47] Netfilter updates for net-next, David Miller
• [nft PATCH 0/2] libnftables preparation work, Eric Leblond
  • [nft PATCH 1/2] src: add flags fo nft_ctx_new, Eric Leblond
    • Re: [nft PATCH 1/2] src: add flags fo nft_ctx_new, Pablo Neira Ayuso
      • Re: [nft PATCH 1/2] src: add flags fo nft_ctx_new, Pablo Neira Ayuso
        • Re: [nft PATCH 1/2] src: add flags fo nft_ctx_new, Eric Leblond
  • [nft PATCH 2/2] src: get rid of printf, Eric Leblond
    • Re: [nft PATCH 2/2] src: get rid of printf, Pablo Neira Ayuso
      • Re: [nft PATCH 2/2] src: get rid of printf, Eric Leblond
      • [nft PATCH v2] libnftables preparation work, Eric Leblond
        • [nft PATCH v2 1/2] src: add flags fo nft_ctx_new, Eric Leblond
          • Re: [nft PATCH v2 1/2] src: add flags fo nft_ctx_new, Pablo Neira Ayuso
        • [nft PATCH v2 2/2] src: get rid of printf, Eric Leblond
          • Re: [nft PATCH v2 2/2] src: get rid of printf, Pablo Neira Ayuso
            • Re: [nft PATCH v2 2/2] src: get rid of printf, Pablo Neira Ayuso
              • Re: [nft PATCH v2 2/2] src: get rid of printf, Eric Leblond
                • Re: [nft PATCH v2 2/2] src: get rid of printf, Pablo Neira Ayuso
              • Re: [nft PATCH v2 2/2] src: get rid of printf, Phil Sutter
                • Re: [nft PATCH v2 2/2] src: get rid of printf, Florian Westphal
                  • Re: [nft PATCH v2 2/2] src: get rid of printf, Pablo Neira Ayuso
                    • Re: [nft PATCH v2 2/2] src: get rid of printf, Phil Sutter
                      • Re: [nft PATCH v2 2/2] src: get rid of printf, Florian Westphal
• [PATCH nf-next 3/5] netlink: add NLM_F_NONREC flag for deletion requests, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nf_tables: use NLM_F_NONREC for deletion requests, Pablo Neira Ayuso
  • [PATCH nf-next 5/5] netfilter: nf_tables: support for recursive chain deletion, Pablo Neira Ayuso
  • Re: [PATCH nf-next 3/5] netlink: add NLM_F_NONREC flag for deletion requests, David Miller
    • Re: [PATCH nf-next 3/5] netlink: add NLM_F_NONREC flag for deletion requests, Pablo Neira Ayuso
• [PATCH nf-next 1/5] netfilter: nf_tables: add nf_tables_updchain(), Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nf_tables: add nf_tables_addchain(), Pablo Neira Ayuso
• [PATCH V2] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted, Taehee Yoo
• [PATCH] netfilter: ipt_CLUSTERIP: Fix potential deadlock when CLUSTERIP target is inserted, Taehee Yoo
• [PATCH] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted, Taehee Yoo
  • Re: [PATCH] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted, Jan Engelhardt
    • Re: [PATCH] netfilter: xt_TEE: Fix potential deadlock when TEE target is inserted, Taehee Yoo
• On ulogd2, nfacct and sqlite3, DEXTER
• [nft PATCH V2] tests: shell: Add tests for json import, Shyam Saini
  • Re: [nft PATCH V2] tests: shell: Add tests for json import, Arturo Borrero Gonzalez
    • Re: [nft PATCH V2] tests: shell: Add tests for json import, Shyam Saini
      • Re: [nft PATCH V2] tests: shell: Add tests for json import, Arturo Borrero Gonzalez
        • Re: [nft PATCH V2] tests: shell: Add tests for json import, Shyam Saini
• [PATCH nf] netfilter: xtables: add scheduling opportunity in get_counters, Florian Westphal
  • Re: [PATCH nf] netfilter: xtables: add scheduling opportunity in get_counters, Eric Dumazet
  • Re: [PATCH nf] netfilter: xtables: add scheduling opportunity in get_counters, Pablo Neira Ayuso
• [PATCH nft 1/3] src: move nf_sock into nft_ctx structure, Pablo Neira Ayuso
  • [PATCH nft 2/3] netlink: remove nfsock_open(), Pablo Neira Ayuso
  • [PATCH nft 3/3] src: add nft_ctx_netlink_init(), Pablo Neira Ayuso
    • Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init(), Pablo Neira Ayuso
      • Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init(), Phil Sutter
        • Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init(), Pablo Neira Ayuso
          • Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init(), Phil Sutter
      • Re: [PATCH nft 3/3] src: add nft_ctx_netlink_init(), Florian Westphal
  • Re: [PATCH nft 1/3] src: move nf_sock into nft_ctx structure, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_nat: don't bug when mapping already exists, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_nat: don't bug when mapping already exists, Pablo Neira Ayuso
• hi, any update on bug id 1177, ulogd, export 'ct.zone' field?, Alex Guo
• [PATCH] netfilter: nat: constify rhashtable_params, Arvind Yadav
  • Re: [PATCH] netfilter: nat: constify rhashtable_params, Pablo Neira Ayuso
    • Re: [netfilter-core] [PATCH] netfilter: nat: constify rhashtable_params, Pablo Neira Ayuso
• [PATCH nf-next] net: Replace NF_CT_ASSERT() with WARN_ON()., Varsha Rao
  • [PATCH nf-next] net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros., Varsha Rao
• [PATCH] examples: Fix memory leaks detected by Valgrind, Shyam Saini
  • Re: [PATCH] examples: Fix memory leaks detected by Valgrind, Arturo Borrero Gonzalez
    • Re: [PATCH] examples: Fix memory leaks detected by Valgrind, Shyam Saini
  • Re: [PATCH] examples: Fix memory leaks detected by Valgrind, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: remove unused hooknum arg from packet functions, Florian Westphal
• [PATCH nft] tests: py: add tests for limit stateful object, Pablo M. Bermudo Garay
  • Re: [PATCH nft] tests: py: add tests for limit stateful object, Pablo Neira Ayuso
• [PATCH nft] evaluate: convert expr_rt byteorder when evaluating statment arg, Florian Westphal
  • Re: [PATCH nft] evaluate: convert expr_rt byteorder when evaluating statment arg, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: rt: account for tcp header size too, Florian Westphal
  • Re: [PATCH nf-next] netfilter: rt: account for tcp header size too, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_conntrack: remove unused code in nf_conntrack_proto_generic.c, Davide Caratti
  • Re: [PATCH nf-next] netfilter: nf_conntrack: remove unused code in nf_conntrack_proto_generic.c, Pablo Neira Ayuso
• libnetfilter_queue 1.0.3 docs, Oleg
• libnetfilter_queue 1.0.3, Oleg
• [PATCH nftables] netlink_linearize: skip set element expression in set statement key, Anders K. Pedersen | Cohaesio
  • <Possible follow-ups>
  • [PATCH nftables] netlink_linearize: skip set element expression in set statement key, Anders K. Pedersen | Cohaesio
    • Re: [PATCH nftables] netlink_linearize: skip set element expression in set statement key, Pablo Neira Ayuso
• NFQUEUE --queue-balance, Oleg
  • Re: NFQUEUE --queue-balance, Florian Westphal
    • Re: NFQUEUE --queue-balance, Oleg
• libnetfilter_queue & multithreading & 1 queue freezing, Oleg
  • Re: libnetfilter_queue & multithreading & 1 queue freezing, Florian Westphal
    • Re: libnetfilter_queue & multithreading & 1 queue freezing, Oleg
• [PATCH] netfilter: ipv6: nf_defrag: constify nf_hook_ops, Arvind Yadav
• [PATCH] netfilter: ipv4: nf_defrag: constify nf_hook_ops, Arvind Yadav
  • Re: [PATCH] netfilter: ipv4: nf_defrag: constify nf_hook_ops, Florian Westphal
• [PATCH 0/7] net: make some structures const, Bhumika Goyal
  • [PATCH 3/7] ieee802154: 6lowpan: make header_ops const, Bhumika Goyal
    • Re: [PATCH 3/7] ieee802154: 6lowpan: make header_ops const, Stefan Schmidt
    • Re: [PATCH 3/7] ieee802154: 6lowpan: make header_ops const, Marcel Holtmann
  • [PATCH 4/7] ipv4: make net_protocol const, Bhumika Goyal
    • Re: [PATCH 4/7] ipv4: make net_protocol const, David Miller
  • [PATCH 5/7] RDS: make rhashtable_params const, Bhumika Goyal
    • Re: [PATCH 5/7] RDS: make rhashtable_params const, Santosh Shilimkar
    • Re: [PATCH 5/7] RDS: make rhashtable_params const, David Miller
  • [PATCH 6/7] netfilter: nat: make rhashtable_params const, Bhumika Goyal
    • Re: [PATCH 6/7] netfilter: nat: make rhashtable_params const, Florian Westphal
  • [PATCH 7/7] SUNRPC: make kvec const, Bhumika Goyal
    • Re: [PATCH 7/7] SUNRPC: make kvec const, Jeff Layton
  • [PATCH 2/7] bridge: make ebt_table const, Bhumika Goyal
    • Re: [PATCH 2/7] bridge: make ebt_table const, David Miller
  • [PATCH 1/7] Bluetooth: 6lowpan: make header_ops const, Bhumika Goyal
• [nft PATCH] parser: Fix memleaks for STRING token (and derived ones), Phil Sutter
  • Re: [nft PATCH] parser: Fix memleaks for STRING token (and derived ones), Pablo Neira Ayuso
• [PATCH nf-next] net: netfilter: Remove NFDEBUG., Varsha Rao
  • Re: [PATCH nf-next] net: netfilter: Remove NFDEBUG., Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: don't log "invalid" icmpv6 connections, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: don't log "invalid" icmpv6 connections, Pablo Neira Ayuso
• [nft PATCH 0/4] Memleak fixes and some minor cleanups, Phil Sutter
  • [nft PATCH 4/4] parser: Fix for memleak when commands fail, Phil Sutter
  • [nft PATCH 1/4] scanner: Fix for memleak due to unclosed file pointer, Phil Sutter
  • [nft PATCH 2/4] scanner: Fix for wrong parameter type of scanner_destroy(), Phil Sutter
  • [nft PATCH 3/4] scanner: Make use of yylex_init_extra(), Phil Sutter
  • Re: [nft PATCH 0/4] Memleak fixes and some minor cleanups, Pablo Neira Ayuso
• [nft PATCH] Fix debug_proto_ctx(), Phil Sutter
  • Re: [nft PATCH] Fix debug_proto_ctx(), Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: remove unused hooknum arg from packet functions, Florian Westphal
• netfilter fixes for 4.12.y tree, Florian Westphal
  • Re: netfilter fixes for 4.12.y tree, Greg KH
• [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets, Michal Kubecek
  • Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets, Florian Westphal
    • Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets, Michal Kubecek
      • Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets, Davide Caratti
        • Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets, Florian Westphal
          • Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets, Michal Kubecek
            • Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets, Florian Westphal
              • Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets, Florian Westphal
        • Re: [PATCH nf-next] netfilter: xt_CHECKSUM: avoid bad offload warnings on GSO packets, Michal Kubecek
• [PATCH V2] tests: json: Add test cases for json format, Shyam Saini
  • Re: [PATCH V2] tests: json: Add test cases for json format, Arturo Borrero Gonzalez
    • Re: [PATCH V2] tests: json: Add test cases for json format, Shyam Saini
      • Re: [PATCH V2] tests: json: Add test cases for json format, Arturo Borrero Gonzalez
• [PATCH nft v2] files: add arp filter and add in/output to nat skeleton, Florian Westphal
• [PATCH nft 1/2] parser: fix typo, Pablo M. Bermudo Garay
  • [PATCH nft 2/2] src: limit stateful object support, Pablo M. Bermudo Garay
    • Re: [PATCH nft 2/2] src: limit stateful object support, Pablo M. Bermudo Garay
      • Re: [PATCH nft 2/2] src: limit stateful object support, Pablo Neira Ayuso
        • Re: [PATCH nft 2/2] src: limit stateful object support, Pablo M. Bermudo Garay
  • Re: [PATCH nft 1/2] parser: fix typo, Pablo Neira Ayuso
• [PATCH libnftnl] src: limit stateful object support, Pablo M. Bermudo Garay
  • Re: [PATCH libnftnl] src: limit stateful object support, Pablo Neira Ayuso
• [PATCH nf-next 1/3] netfilter: nf_tables: add select_ops for stateful objects, Pablo M. Bermudo Garay
  • [PATCH nf-next 3/3] netfilter: nft_limit: add stateful object type, Pablo M. Bermudo Garay
    • Re: [PATCH nf-next 3/3] netfilter: nft_limit: add stateful object type, Pablo Neira Ayuso
  • [PATCH nf-next 2/3] netfilter: nft_limit: replace pkt_bytes with bytes, Pablo M. Bermudo Garay
    • Re: [PATCH nf-next 2/3] netfilter: nft_limit: replace pkt_bytes with bytes, Pablo Neira Ayuso
  • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add select_ops for stateful objects, Pablo Neira Ayuso
• [PATCH nft] files: add arp filter and add in/output to nat skeleton, Florian Westphal
  • Re: [PATCH nft] files: add arp filter and add in/output to nat skeleton, Pablo Neira Ayuso
• [PATCH nf-next 0/3] netfilter: convert hook list to an array, Florian Westphal
  • [PATCH nf-next 1/3] netfilter: convert hook list to an array, Florian Westphal
    • Re: [PATCH nf-next 1/3] netfilter: convert hook list to an array, Eric Dumazet
      • Re: [PATCH nf-next 1/3] netfilter: convert hook list to an array, Aaron Conole
  • [PATCH nf-next 2/3] netfilter: debug: check for sorted array, Florian Westphal
  • [PATCH nf-next 3/3] netfilter: core: batch nf_unregister_net_hooks synchronize_net calls, Florian Westphal
  • [PATCH nf-next v2 1/3] netfilter: convert hook list to an array, Florian Westphal
  • Re: [PATCH nf-next 0/3] netfilter: convert hook list to an array, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrackd: cthelper: ssdp: fix build with musl, Stijn Tintel
  • Re: [PATCH conntrack-tools] conntrackd: cthelper: ssdp: fix build with musl, Pablo Neira Ayuso
• [PATCH nft 0/6] Remove more global variables, Pablo Neira Ayuso
  • [PATCH nft 1/6] src: add include_paths to struct nft_ctx, Pablo Neira Ayuso
  • [PATCH nft 2/6] src: add maximum number of parser errors to struct nft_ctx, Pablo Neira Ayuso
  • [PATCH nft 3/6] src: remove ifdef DEBUG pollution, Pablo Neira Ayuso
  • [PATCH nft 4/6] src: add struct mnl_ctx, Pablo Neira Ayuso
  • [PATCH nft 5/6] mnl: pass struct netlink_ctx to mnl_nft_socket_sendmsg(), Pablo Neira Ayuso
  • [PATCH nft 6/6] src: add debugging mask to context structure, Pablo Neira Ayuso
• [PATCH v2 nft 0/3] nftables: tcp option set support, Florian Westphal
  • [PATCH nft 3/3] tests: add tcp option set support / tcp mss mangling test cases, Florian Westphal
    • Re: [PATCH nft 3/3] tests: add tcp option set support / tcp mss mangling test cases, Pablo Neira Ayuso
  • [PATCH nft 2/3] rt: add path mtu support, Florian Westphal
    • Re: [PATCH nft 2/3] rt: add path mtu support, Pablo Neira Ayuso
  • [PATCH nft 1/3] src: add tcp options set support, Florian Westphal
    • Re: [PATCH nft 1/3] src: add tcp options set support, Pablo Neira Ayuso
• [nft PATCH] Keep cache in struct nft_ctx, Phil Sutter
  • Re: [nft PATCH] Keep cache in struct nft_ctx, Pablo Neira Ayuso
• [PATCH] tests: json: Add test cases for json format, Shyam Saini
  • Re: [PATCH] tests: json: Add test cases for json format, Arturo Borrero Gonzalez
    • Re: [PATCH] tests: json: Add test cases for json format, Shyam Saini
      • Re: [PATCH] tests: json: Add test cases for json format, Arturo Borrero Gonzalez
        • Re: [PATCH] tests: json: Add test cases for json format, Shyam Saini
• [patch nf] netfilter: nf_tables: Fix nft limit burst handling, Andy Zhou
  • Re: [patch nf] netfilter: nf_tables: Fix nft limit burst handling, Joe Stringer
    • Re: [patch nf] netfilter: nf_tables: Fix nft limit burst handling, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrack: Show multiple CPUs stats from proc, Chieh-Min Wang
  • Re: [PATCH conntrack-tools] conntrack: Show multiple CPUs stats from proc, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: fix a few (harmless) sparse warnings, Florian Westphal
  • Re: [PATCH nf-next] netfilter: fix a few (harmless) sparse warnings, Pablo Neira Ayuso
• [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule, Xin Long
  • [PATCH net 1/2] netfilter: ipvs: fix the issue that sctp_conn_schedule drops non-INIT packet, Xin Long
    • [PATCH net 2/2] netfilter: ipvs: do not create conn for ABORT packet in sctp_conn_schedule, Xin Long
  • Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule, Julian Anastasov
  • Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule, Pablo Neira Ayuso
    • Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule, Simon Horman
      • Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule, Pablo Neira Ayuso
• [PATCH nft] src: Initialize struct stmt in _match and _target functions., Varsha Rao
  • Re: [PATCH nft] src: Initialize struct stmt in _match and _target functions., Pablo Neira Ayuso
  • Re: [PATCH nft] src: Initialize struct stmt in _match and _target functions., Pablo Neira Ayuso
• [PATCH nft 0/7] tcp mss mangling support, Florian Westphal
  • [PATCH libnftnl 1/7] exthdr: tcp option set support, Florian Westphal
    • Re: [PATCH libnftnl 1/7] exthdr: tcp option set support, Pablo Neira Ayuso
  • [PATCH libnftnl 2/7] rt: tcpmss get support, Florian Westphal
    • Re: [PATCH libnftnl 2/7] rt: tcpmss get support, Pablo Neira Ayuso
  • [PATCH nft 3/7] exthdr: move print of tcp options to tcpopt.c, Florian Westphal
  • [PATCH nft 4/7] src: add tcp options set support, Florian Westphal
    • Re: [PATCH nft 4/7] src: add tcp options set support, Pablo Neira Ayuso
  • [PATCH nft 5/7] src: implement shortcut for tcp mss size mangling, Florian Westphal
    • Re: [PATCH nft 5/7] src: implement shortcut for tcp mss size mangling, Pablo Neira Ayuso
      • Re: [PATCH nft 5/7] src: implement shortcut for tcp mss size mangling, Florian Westphal
  • [PATCH nft 6/7] rt: add path mss support, Florian Westphal
    • Re: [PATCH nft 6/7] rt: add path mss support, Pablo Neira Ayuso
  • [PATCH nft 7/7] tests: add tcp option set support / tcp mss mangling test cases, Florian Westphal
    • Re: [PATCH nft 7/7] tests: add tcp option set support / tcp mss mangling test cases, Pablo Neira Ayuso
      • Re: [PATCH nft 7/7] tests: add tcp option set support / tcp mss mangling test cases, Florian Westphal
• How to contribute to documentation?, Jeff Klesky
• [PATCH nft v2 00/18] introducing libnftables, Eric Leblond
  • [PATH nft v2 02/18] erec: add function to free list, Eric Leblond
    • Re: [PATH nft v2 02/18] erec: add function to free list, Pablo Neira Ayuso
  • [PATH nft v2 01/18] mnl: fix error handling in mnl_batch_talk, Eric Leblond
    • Re: [PATH nft v2 01/18] mnl: fix error handling in mnl_batch_talk, Pablo Neira Ayuso
      • Re: [PATH nft v2 01/18] mnl: fix error handling in mnl_batch_talk, Eric Leblond
        • Re: [PATH nft v2 01/18] mnl: fix error handling in mnl_batch_talk, Pablo Neira Ayuso
  • [PATH nft v2 03/18] libnftables: introduce library, Eric Leblond
  • [PATH nft v2 04/18] libnftables: add context new and free, Eric Leblond
    • Re: [PATH nft v2 04/18] libnftables: add context new and free, Pablo Neira Ayuso
    • Re: [PATH nft v2 04/18] libnftables: add context new and free, Pablo Neira Ayuso
      • Re: [PATH nft v2 04/18] libnftables: add context new and free, Eric Leblond
  • [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Eric Leblond
    • Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Pablo Neira Ayuso
      • Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Pablo Neira Ayuso
        • Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Eric Leblond
          • Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Pablo Neira Ayuso
            • Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Eric Leblond
              • Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Pablo Neira Ayuso
                • Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Eric Leblond
    • Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Pablo Neira Ayuso
      • Re: [PATH nft v2 05/18] libnftables: add nft_run_command_from_buffer, Eric Leblond
  • [PATH nft v2 06/18] libnftables: add nft_run_command_from_filename, Eric Leblond
  • [PATH nft v2 07/18] libnftables: put nft_run in library, Eric Leblond
  • [PATH nft v2 08/18] libnftables: add missing variables to library, Eric Leblond
    • Re: [PATH nft v2 08/18] libnftables: add missing variables to library, Pablo Neira Ayuso
      • Re: [PATH nft v2 08/18] libnftables: add missing variables to library, Eric Leblond
  • [PATH nft v2 09/18] libnftables: add NFT_EXIT_* to library, Eric Leblond
  • [PATH nft v2 17/18] libnftables: suppress unused global variables, Eric Leblond
    • Re: [PATH nft v2 17/18] libnftables: suppress unused global variables, Pablo Neira Ayuso
  • [PATH nft v2 12/18] libnftables: get rid of printf, Eric Leblond
  • [PATH nft v2 16/18] libnftables: add error handling, Eric Leblond
  • [PATH nft v2 18/18] libnftables: doxygen documentation, Eric Leblond
  • [PATH nft v2 10/18] libnftables: add a nft_cache to nft_ctx, Eric Leblond
    • Re: [PATH nft v2 10/18] libnftables: add a nft_cache to nft_ctx, Pablo Neira Ayuso
  • [PATH nft v2 15/18] libnftables: set max_errors to 1 in library, Eric Leblond
    • Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library, Pablo Neira Ayuso
      • Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library, Eric Leblond
        • Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library, Phil Sutter
        • Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library, Pablo Neira Ayuso
          • Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library, Eric Leblond
            • Re: [PATH nft v2 15/18] libnftables: set max_errors to 1 in library, Pablo Neira Ayuso
  • [PATH nft v2 14/18] libnftables: transaction support, Eric Leblond
  • [PATH nft v2 11/18] libnftables: move iface_cache_release to deinit, Eric Leblond
    • Re: [PATH nft v2 11/18] libnftables: move iface_cache_release to deinit, Pablo Neira Ayuso
    • Re: [PATH nft v2 11/18] libnftables: move iface_cache_release to deinit, Pablo Neira Ayuso
  • [PATH nft v2 13/18] libnftables: add nft_context_set_print, Eric Leblond
    • Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print, Pablo Neira Ayuso
      • Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print, Eric Leblond
        • Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print, Pablo Neira Ayuso
          • Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print, Pablo Neira Ayuso
  • Re: [PATCH nft v2 00/18] introducing libnftables, Pablo Neira Ayuso
    • Re: [PATCH nft v2 00/18] introducing libnftables, Eric Leblond
      • Re: [PATCH nft v2 00/18] introducing libnftables, Pablo Neira Ayuso
  • Re: [PATCH nft v2 00/18] introducing libnftables, Phil Sutter
    • Re: [PATCH nft v2 00/18] introducing libnftables, Pablo Neira Ayuso
• [PATCH nft-sync] fix build, Pablo M. Bermudo Garay
  • Re: [PATCH nft-sync] fix build, Pablo Neira Ayuso
• [RFC PATCH] src: Add import command for json, Shyam Saini
  • Re: [RFC PATCH] src: Add import command for json, Shyam Saini
• [PATCH 2/2] netfilter/libxt_hashlimit: new feature/algorithm for xt_hashlimit, Vishwanath Pai
  • Re: [PATCH 2/2] netfilter/libxt_hashlimit: new feature/algorithm for xt_hashlimit, Pablo Neira Ayuso
• [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit, Vishwanath Pai
  • Re: [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit, Pablo Neira Ayuso
    • Re: [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit, Pablo Neira Ayuso
    • Re: [PATCH 1/2] netfilter/xt_hashlimit: new feature/algorithm for xt_hashlimit, Vishwanath Pai
• Finding the PID of a process from sk_buff, Hyunseok
• [nft PATCH 0/2] First attempt at synopsis fixup, Phil Sutter
  • [nft PATCH 1/2] nft.8: Fix and enhance synopsis section, Phil Sutter
    • Re: [nft PATCH 1/2] nft.8: Fix and enhance synopsis section, Pablo Neira Ayuso
      • Re: [nft PATCH 1/2] nft.8: Fix and enhance synopsis section, Phil Sutter
  • [nft PATCH RFC 2/2] nft.8: Make use of synopfragment in synopsis section, Phil Sutter
    • Re: [nft PATCH RFC 2/2] nft.8: Make use of synopfragment in synopsis section, Pablo Neira Ayuso
  • Re: [nft PATCH 0/2] First attempt at synopsis fixup, Phil Sutter
• [PATCH] netfilter: ipset: ipset list may return wrong member count for set with timeout, Vishwanath Pai
  • Re: [PATCH] netfilter: ipset: ipset list may return wrong member count for set with timeout, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: ipset list may return wrong member count for set with timeout, Vishwanath Pai
• [nft PATCH 0/16] introduce libnftables, Eric Leblond
  • [nft PATH 09/16] libnftables: move iface_cache_release to deinit, Eric Leblond
  • [nft PATH 15/16] libnftables: add error handling, Eric Leblond
    • Re: [nft PATH 15/16] libnftables: add error handling, Phil Sutter
      • Re: [nft PATH 15/16] libnftables: add error handling, Eric Leblond
  • [nft PATH 05/16] libnftables: put nft_run in library, Eric Leblond
  • [nft PATH 16/16] libnftables: basic doxygen documentation, Eric Leblond
  • [nft PATH 02/16] libnftables: add context new and free, Eric Leblond
    • Re: [nft PATH 02/16] libnftables: add context new and free, Phil Sutter
  • [nft PATH 14/16] erec: add function to free list, Eric Leblond
  • [nft PATH 04/16] libnftables: add nft_run_command_from_filename, Eric Leblond
  • [nft PATH 13/16] libnftables: set max_errors to 1 in library, Eric Leblond
  • [nft PATH 03/16] libnftables: add nft_run_command_from_buffer, Eric Leblond
    • Re: [nft PATH 03/16] libnftables: add nft_run_command_from_buffer, Phil Sutter
  • [nft PATH 01/16] libnftables: introduce library, Eric Leblond
    • Re: [nft PATH 01/16] libnftables: introduce library, Phil Sutter
      • Re: [nft PATH 01/16] libnftables: introduce library, Eric Leblond
        • Re: [nft PATH 01/16] libnftables: introduce library, Phil Sutter
          • Re: [nft PATH 01/16] libnftables: introduce library, Eric Leblond
            • Re: [nft PATH 01/16] libnftables: introduce library, Jan Engelhardt
              • Re: [nft PATH 01/16] libnftables: introduce library, Pablo Neira Ayuso
  • [nft PATH 07/16] libnftables: add NFT_EXIT_* to library, Eric Leblond
  • [nft PATH 11/16] libnftables: add nft_context_set_print, Eric Leblond
  • [nft PATH 08/16] libnftables: add a nft_cache to nft_ctx, Eric Leblond
    • Re: [nft PATH 08/16] libnftables: add a nft_cache to nft_ctx, Phil Sutter
  • [nft PATH 10/16] libnftables: get rid of printf, Eric Leblond
    • Re: [nft PATH 10/16] libnftables: get rid of printf, Phil Sutter
      • Re: [nft PATH 10/16] libnftables: get rid of printf, Eric Leblond
  • [nft PATH 06/16] libnftables: add missing variable to library, Eric Leblond
    • Re: [nft PATH 06/16] libnftables: add missing variable to library, Phil Sutter
      • Re: [nft PATH 06/16] libnftables: add missing variable to library, Eric Leblond
  • [nft PATH 12/16] libnftables: transaction support, Eric Leblond
    • Re: [nft PATH 12/16] libnftables: transaction support, Phil Sutter
  • Re: [nft PATCH 0/16] introduce libnftables, Arturo Borrero Gonzalez
    • Re: [nft PATCH 0/16] introduce libnftables, Eric Leblond
      • Re: [nft PATCH 0/16] introduce libnftables, Florian Westphal
    • Re: [nft PATCH 0/16] introduce libnftables, Phil Sutter
• [PATCH nft 1/2] evaluate: shift immediate value when adjusting size for csum fixup, Florian Westphal
  • [PATCH nft 2/2] tests: add test case for ttl/protocol set, Florian Westphal
    • Re: [PATCH nft 2/2] tests: add test case for ttl/protocol set, Pablo Neira Ayuso
  • Re: [PATCH nft 1/2] evaluate: shift immediate value when adjusting size for csum fixup, Pablo Neira Ayuso
• [PATCH nft 0/5] src: Removes unused functions., Varsha Rao
  • [PATCH nft 1/5] src: Remove xt_stmt_() functions., Varsha Rao
  • [PATCH nft 2/5] src: gmputil: Remove mpz_get_be64() function., Varsha Rao
  • [PATCH nft 3/5] src: cli: Remove cli_display() function., Varsha Rao
  • [PATCH nft 4/5] src: netlink: Remove unused functions., Varsha Rao
  • [PATCH nft 5/5] src: mnl: Remove unused functions., Varsha Rao
  • Re: [PATCH nft 0/5] src: Removes unused functions., Pablo Neira Ayuso
• [conntrack-tools PATCH] tests: don't fail on modprobe since the driver might be built-in, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] tests: don't fail on modprobe since the driver might be built-in, Pablo Neira Ayuso
• [PATCH nft] src: make netlink sequence number non-static, Pablo Neira Ayuso
• [nft PATCH v2] echo: Fix for added delays in rule updates, Phil Sutter
  • Re: [nft PATCH v2] echo: Fix for added delays in rule updates, Pablo Neira Ayuso
• [PATCH][V2] netfilter: fix indent on if statements, Colin King
  • Re: [PATCH][V2] netfilter: fix indent on if statements, Pablo Neira Ayuso
• [PATCH] netfilter: fix indent on in statements, Colin King
  • Re: [PATCH] netfilter: fix indent on in statements, walter harms
  • Re: [PATCH] netfilter: fix indent on in statements, Sergei Shtylyov
    • Re: [PATCH] netfilter: fix indent on in statements, Colin Ian King
• [nft PATCH 0/4] A bunch of fixes for echo output, Phil Sutter
  • [nft PATCH 3/4] echo: Fix for added delays in rule updates, Phil Sutter
    • Re: [nft PATCH 3/4] echo: Fix for added delays in rule updates, Pablo Neira Ayuso
      • Re: [nft PATCH 3/4] echo: Fix for added delays in rule updates, Phil Sutter
        • Re: [nft PATCH 3/4] echo: Fix for added delays in rule updates, Phil Sutter
          • Re: [nft PATCH 3/4] echo: Fix for added delays in rule updates, Pablo Neira Ayuso
  • [nft PATCH 1/4] mnl: Drop --echo support for non-batch calls, Phil Sutter
    • Re: [nft PATCH 1/4] mnl: Drop --echo support for non-batch calls, Pablo Neira Ayuso
      • Re: [nft PATCH 1/4] mnl: Drop --echo support for non-batch calls, Phil Sutter
        • Re: [nft PATCH 1/4] mnl: Drop --echo support for non-batch calls, Pablo Neira Ayuso
  • [nft PATCH 2/4] netlink: Fix segfault when using --echo flag, Phil Sutter
    • Re: [nft PATCH 2/4] netlink: Fix segfault when using --echo flag, Pablo Neira Ayuso
  • [nft PATCH 4/4] tests: Merge monitor and echo test suites, Phil Sutter
    • Re: [nft PATCH 4/4] tests: Merge monitor and echo test suites, Pablo Neira Ayuso
• [PATCH] man: use https for wiki link, Daniel Kahn Gillmor
  • Re: [PATCH] man: use https for wiki link, Pablo Neira Ayuso
• [PATCH nft] src: rule: Remove variable cache_initialized., Varsha Rao
  • Re: [PATCH nft] src: rule: Remove variable cache_initialized., Pablo Neira Ayuso
• [PATCH nf-next 0/7] netfilter: conntrack: constify protocol trackers, part 1, Florian Westphal
  • [PATCH nf-next 2/7] netfilter: conntrack: remove protocol name from l3proto struct, Florian Westphal
  • [PATCH nf-next 1/7] netfilter: conntrack: compute l3proto nla size at compile time, Florian Westphal
  • [PATCH nf-next 5/7] netfilter: conntrack: place print_tuple in procfs part, Florian Westphal
  • [PATCH nf-next 6/7] netfilter: conntrack: print_conntrack only needed if CONFIG_NF_CONNTRACK_PROCFS, Florian Westphal
  • [PATCH nf-next 4/7] netfilter: conntrack: reduce size of l4protocol trackers, Florian Westphal
  • [PATCH nf-next 3/7] netfilter: conntrack: remove protocol name from l4proto struct, Florian Westphal
  • [PATCH nf-next 7/7] netfilter: conntrack: make protocol tracker pointers const, Florian Westphal
  • Re: [PATCH nf-next 0/7] netfilter: conntrack: constify protocol trackers, part 1, Pablo Neira Ayuso
• RFC: Synopsis syntax change in nft.8, Phil Sutter
  • Re: RFC: Synopsis syntax change in nft.8, Florian Westphal
    • Re: RFC: Synopsis syntax change in nft.8, Phil Sutter
  • Re: RFC: Synopsis syntax change in nft.8, Jan Engelhardt
    • Re: RFC: Synopsis syntax change in nft.8, Jan Engelhardt
    • Re: RFC: Synopsis syntax change in nft.8, Phil Sutter
• [nft PATCH 0/6] A bunch of man page enhancements, Phil Sutter
  • [nft PATCH 4/6] nft.8: Add note about supported hooks for bridge family, Phil Sutter
  • [nft PATCH 6/6] nft.8: Complete short description of arp family, Phil Sutter
  • [nft PATCH 3/6] nft.8: Review reject statement description, Phil Sutter
  • [nft PATCH 1/6] nft.8: Document operations on ruleset, Phil Sutter
  • [nft PATCH 5/6] nft.8: Describe base chain details, Phil Sutter
  • [nft PATCH 2/6] nft.8: Describe conntrack types, Phil Sutter
• [PATCH nft] src: place object cache in context structure, Pablo Neira Ayuso
• [PATCH net] netfilter: check for seqadj ext existence before adding it in nf_nat_setup_info, Xin Long
  • Re: [PATCH net] netfilter: check for seqadj ext existence before adding it in nf_nat_setup_info, Pablo Neira Ayuso
• [conntrack-tools PATCH] conntrackd: remove warning for -S, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] conntrackd: remove warning for -S, Pablo Neira Ayuso
• [nft PATCH v4 0/3] Implement --echo option, Phil Sutter
  • [nft PATCH v4 3/3] tests: Add a simple test suite for --echo option, Phil Sutter
  • [nft PATCH v4 2/3] Implement --echo option, Phil Sutter
    • Re: [nft PATCH v4 2/3] Implement --echo option, Pablo Neira Ayuso
  • [nft PATCH v4 1/3] netlink: Pass nlmsg flags from rule.c, Phil Sutter
  • Re: [nft PATCH v4 0/3] Implement --echo option, Pablo Neira Ayuso
    • Re: [nft PATCH v4 0/3] Implement --echo option, Phil Sutter
      • Re: [nft PATCH v4 0/3] Implement --echo option, Pablo Neira Ayuso
        • Re: [nft PATCH v4 0/3] Implement --echo option, Phil Sutter
          • Re: [nft PATCH v4 0/3] Implement --echo option, Pablo Neira Ayuso
• [PATCH] netfilter: xt_NFLOG: use nf_log_packet instead of nfulnl_log_packet., Taehee Yoo
  • Re: [PATCH] netfilter: xt_NFLOG: use nf_log_packet instead of nfulnl_log_packet., Pablo Neira Ayuso
• [PATCH iptables 1/2] xtables-compat-restore: fix several memory leaks, Pablo M. Bermudo Garay
  • [PATCH iptables 2/2] xtables-compat: fix memory leak when listing, Pablo M. Bermudo Garay
    • Re: [PATCH iptables 2/2] xtables-compat: fix memory leak when listing, Pablo Neira Ayuso
  • Re: [PATCH iptables 1/2] xtables-compat-restore: fix several memory leaks, Pablo Neira Ayuso
• [PATCH nf-next 0/4] netfilter: nftables: tcp mss mangling support, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: exthdr: factor out tcp option access, Florian Westphal
  • [PATCH nf-next 2/4] netfilter: exthdr: split netlink dump function, Florian Westphal
  • [PATCH nf-next 3/4] netfilter: exthdr: tcp option set support, Florian Westphal
  • [PATCH nf-next 4/4] netfilter: rt: add support to fetch path mss, Florian Westphal
    • Re: [PATCH nf-next 4/4] netfilter: rt: add support to fetch path mss, Eric Dumazet
      • Re: [PATCH nf-next 4/4] netfilter: rt: add support to fetch path mss, Florian Westphal
  • [PATCH v2 nf-next 4/4] netfilter: rt: add support to fetch path mss, Florian Westphal
  • Re: [PATCH nf-next 0/4] netfilter: nftables: tcp mss mangling support, Pablo Neira Ayuso
• Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Cong Wang
  • Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Xin Long
    • Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Cong Wang
      • Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Xin Long
        • Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Cong Wang
          • Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Xin Long
        • Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Pablo Neira Ayuso
          • Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Pablo Neira Ayuso
            • Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Xin Long
              • Re: [PATCH net] net: sched: fix NULL pointer dereference when action calls some targets, Pablo Neira Ayuso
• [PATCH] netfilter: ebtables: use audit_log(), Geliang Tang
  • Re: [PATCH] netfilter: ebtables: use audit_log(), Pablo Neira Ayuso
• [PATCH] netfilter: xtables: use audit_log(), Geliang Tang
  • Re: [PATCH] netfilter: xtables: use audit_log(), Pablo Neira Ayuso
• [PATCH nft] man: Fix typo., Varsha Rao
  • Re: [PATCH nft] man: Fix typo., Pablo Neira Ayuso
• nftables: Testcase crashes the kernel, Phil Sutter
  • <Possible follow-ups>
  • Re: nftables: Testcase crashes the kernel, Florian Westphal
• net/netfilter/nf_tables_api.c: BUG_ON(ctx->table->use > 0), Michael Tirado
• libnetfilter_queue & nfq_errno, Oleg
• libnetfilter_queue new versions, Oleg
• [PATCH] netfilter: remove prototype of netfilter_queue_init, Taehee Yoo
  • Re: [PATCH] netfilter: remove prototype of netfilter_queue_init, Pablo Neira Ayuso
• [PATCH nft 1/2] src: handle rule tracing as an monitor object, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups., Pablo Neira Ayuso
• [PATCH] netfilter: connlimit: merge root4 and root6., Taehee Yoo
  • Re: [PATCH] netfilter: connlimit: merge root4 and root6., Pablo Neira Ayuso
• [PATCH nf-next] netfilter: constify nf_loginfo structures, Julia Lawall
  • Re: [PATCH nf-next] netfilter: constify nf_loginfo structures, Pablo Neira Ayuso
• [PATCH 0/1 v3 nf-next] constify nf_conntrack_l3/4proto parameters, Julia Lawall
  • [PATCH 1/1 v3 nf-next] netfilter: constify nf_conntrack_l3/4proto parameters, Julia Lawall
    • Re: [PATCH 1/1 v3 nf-next] netfilter: constify nf_conntrack_l3/4proto parameters, Pablo Neira Ayuso
• [PATCH nft v4] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups., Varsha Rao
• [PATCH v2 tip/core/rcu 02/10] net/netfilter/nf_conntrack_core: Fix net_conntrack_lock(), Paul E. McKenney
• [PATCH] netfilter: nf_nat_h323: fix logical-not-parentheses warning, Nick Desaulniers
  • Re: [PATCH] netfilter: nf_nat_h323: fix logical-not-parentheses warning, Nick Desaulniers
  • Re: [PATCH] netfilter: nf_nat_h323: fix logical-not-parentheses warning, Pablo Neira Ayuso
    • [PATCH v2] netfilter: nf_nat_h323: fix logical-not-parentheses warning, Nick Desaulniers
      • Re: [PATCH v2] netfilter: nf_nat_h323: fix logical-not-parentheses warning, Nick Desaulniers
        • Re: [PATCH v2] netfilter: nf_nat_h323: fix logical-not-parentheses warning, Nick Desaulniers
        • Re: [PATCH v2] netfilter: nf_nat_h323: fix logical-not-parentheses warning, Pablo Neira Ayuso
• [PATCH] netfilter: fix stringop-overflow warning with UBSAN, Arnd Bergmann
  • RE: [PATCH] netfilter: fix stringop-overflow warning with UBSAN, David Laight
    • RE: [PATCH] netfilter: fix stringop-overflow warning with UBSAN, Jozsef Kadlecsik
• [PATCH 0/1 v2] constify nf_conntrack_l3/4proto parameters, Julia Lawall
  • [PATCH 1/1 v2] netfilter: constify nf_conntrack_l3/4proto parameters, Julia Lawall
    • Re: [PATCH 1/1 v2] netfilter: constify nf_conntrack_l3/4proto parameters, Pablo Neira Ayuso
• [PATCH nft] man: Document nft monitor ruleset., Varsha Rao
  • Re: [PATCH nft] man: Document nft monitor ruleset., Pablo Neira Ayuso
• [PATCH nft v3] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups., Varsha Rao
  • Re: [PATCH nft v3] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups., Pablo Neira Ayuso
• [PATCH] netfilter: ipvs: Fix space before '[' error., Arvind Yadav
  • Re: [PATCH] netfilter: ipvs: Fix space before '[' error., Simon Horman
• [PATCH 0/1] constify nf_conntrack_l3/4proto parameters, Julia Lawall
  • [PATCH 1/1] netfilter: constify nf_conntrack_l3/4proto parameters, Julia Lawall
    • Re: [PATCH 1/1] netfilter: constify nf_conntrack_l3/4proto parameters, Florian Westphal
      • Re: [PATCH 1/1] netfilter: constify nf_conntrack_l3/4proto parameters, Julia Lawall
        • Re: [PATCH 1/1] netfilter: constify nf_conntrack_l3/4proto parameters, Florian Westphal
• [PATCH] netfilter: xtables: Remove unused variable in compat_copy_entry_from_user(), Taehee Yoo
  • Re: [PATCH] netfilter: xtables: Remove unused variable in compat_copy_entry_from_user(), Pablo Neira Ayuso
• [PATCH] netfilter: xt_ecn: Add missing hotdrop mark., Taehee Yoo
  • Re: [PATCH] netfilter: xt_ecn: Add missing hotdrop mark., Pablo Neira Ayuso
    • Re: [PATCH] netfilter: xt_ecn: Add missing hotdrop mark., Taehee Yoo
• [PATCH 0/2] constify nf_hook_ops structures, Julia Lawall
  • [PATCH 1/2] decnet: dn_rtmsg: constify nf_hook_ops structures, Julia Lawall
  • [PATCH 2/2] netfilter: ipt_CLUSTERIP: constify nf_hook_ops structures, Julia Lawall
  • Re: [PATCH 0/2] constify nf_hook_ops structures, Florian Westphal
    • Re: [PATCH 0/2] constify nf_hook_ops structures, Julia Lawall
      • Re: [PATCH 0/2] constify nf_hook_ops structures, Florian Westphal
        • Re: [PATCH 0/2] constify nf_hook_ops structures, Julia Lawall
          • Re: [PATCH 0/2] constify nf_hook_ops structures, Florian Westphal
            • Re: [PATCH 0/2] constify nf_hook_ops structures, Julia Lawall
• [nft PATCH v3 0/4] Implement --echo option, Phil Sutter
  • [nft PATCH v3 4/4] tests: Add a simple test suite for --echo option, Phil Sutter
  • [nft PATCH v3 3/4] Implement --echo option, Phil Sutter
    • Re: [nft PATCH v3 3/4] Implement --echo option, Pablo Neira Ayuso
      • Re: [nft PATCH v3 3/4] Implement --echo option, Pablo Neira Ayuso
        • Re: [nft PATCH v3 3/4] Implement --echo option, Phil Sutter
  • [nft PATCH v3 2/4] netlink: Pass nlmsg flags from rule.c, Phil Sutter
    • Re: [nft PATCH v3 2/4] netlink: Pass nlmsg flags from rule.c, Pablo Neira Ayuso
      • Re: [nft PATCH v3 2/4] netlink: Pass nlmsg flags from rule.c, Pablo Neira Ayuso
        • Re: [nft PATCH v3 2/4] netlink: Pass nlmsg flags from rule.c, Phil Sutter
  • [nft PATCH v3 1/4] mnl: Consolidate mnl_batch_talk() parameters, Phil Sutter
    • Re: [nft PATCH v3 1/4] mnl: Consolidate mnl_batch_talk() parameters, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: do not enable connection tracking unless needed, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: do not enable connection tracking unless needed, Pablo Neira Ayuso
• [PATCH v3 nf-next] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases, Florian Westphal
  • Re: [PATCH v3 nf-next] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases, Pablo Neira Ayuso
• [PATCH] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook, Lin Zhang
  • Re: [PATCH] netfilter: SYNPROXY: fix process non tcp packet bug in {ipv4,ipv6}_synproxy_hook, Pablo Neira Ayuso
• [PATCH nft v2] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups., Varsha Rao
  • Re: [PATCH nft v2] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups., Pablo Neira Ayuso
• [PATCH nft] src: nft monitor ruleset, Varsha Rao
  • Re: [PATCH nft] src: nft monitor ruleset, Pablo Neira Ayuso
• [nft PATCH RFC v2 0/4] Implement --echo option, Phil Sutter
  • [nft PATCH RFC v2 3/4] Implement --echo option, Phil Sutter
    • Re: [nft PATCH RFC v2 3/4] Implement --echo option, Pablo Neira Ayuso
      • Re: [nft PATCH RFC v2 3/4] Implement --echo option, Phil Sutter
        • Re: [nft PATCH RFC v2 3/4] Implement --echo option, Pablo Neira Ayuso
          • Re: [nft PATCH RFC v2 3/4] Implement --echo option, Phil Sutter
  • [nft PATCH RFC v2 2/4] netlink: Pass nlmsg flags from rule.c, Phil Sutter
  • [nft PATCH RFC v2 4/4] tests: Add a simple test suite for --echo option, Phil Sutter
  • [nft PATCH RFC v2 1/4] mnl: Consolidate mnl_batch_talk() parameters, Phil Sutter
• [nf-next PATCH v3 0/6] netfilter: nf_tables: Kill name length restrictions, Phil Sutter
  • [nf-next PATCH v3 3/6] netfilter: nf_tables: Allow table names of up to 255 chars, Phil Sutter
  • [nf-next PATCH v3 6/6] netfilter: nf_tables: Allow object names of up to 255 chars, Phil Sutter
  • [nf-next PATCH v3 2/6] networking: Introduce nla_strdup(), Phil Sutter
  • [nf-next PATCH v3 5/6] netfilter: nf_tables: Allow set names of up to 255 chars, Phil Sutter
  • [nf-next PATCH v3 1/6] netfilter: nf_tables: No need to check chain existence when tracing, Phil Sutter
  • [nf-next PATCH v3 4/6] netfilter: nf_tables: Allow chain name of up to 255 chars, Phil Sutter
  • Re: [nf-next PATCH v3 0/6] netfilter: nf_tables: Kill name length restrictions, Pablo Neira Ayuso
• [nft PATCH RFC 0/4] Implement --echo option, Phil Sutter
  • [nft PATCH RFC 3/4] Implement --echo option, Phil Sutter
  • [nft PATCH RFC 2/4] netlink: Pass nlmsg flags from rule.c, Phil Sutter
  • [nft PATCH RFC 1/4] mnl: Consolidate mnl_batch_talk() parameters, Phil Sutter
  • [nft PATCH RFC 4/4] tests: Add a simple test suite for --echo option, Phil Sutter
  • Re: [nft PATCH RFC 0/4] Implement --echo option, Phil Sutter
• libnetfilter_queue & "dropping packets", Oleg
  • Re: libnetfilter_queue & "dropping packets", Florian Westphal
• [PATCH V3] netfilter: x_tables: Fix use-after-free in ipt_do_table., Taehee Yoo
  • Re: [PATCH V3] netfilter: x_tables: Fix use-after-free in ipt_do_table., Pablo Neira Ayuso
• [nft PATCH] mnl: Remove dead code, Phil Sutter
  • Re: [nft PATCH] mnl: Remove dead code, Pablo Neira Ayuso
    • Re: [nft PATCH] mnl: Remove dead code, Pablo M. Bermudo Garay
• [PATCH v2 nf-next] netfilter: nft_set: use sequence count to avoid read lock in most cases, Florian Westphal
• [PATCH nf-next] netfilter: nf_hook_ops structs can be const, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_hook_ops structs can be const, Pablo Neira Ayuso
• [PATCH V2] netfilter: x_tables: Fix use-after-free in ipt_do_table., Taehee Yoo
  • Re: [PATCH V2] netfilter: x_tables: Fix use-after-free in ipt_do_table., Florian Westphal
    • Re: [PATCH V2] netfilter: x_tables: Fix use-after-free in ipt_do_table., Pablo Neira Ayuso
      • Re: [PATCH V2] netfilter: x_tables: Fix use-after-free in ipt_do_table., Taehee Yoo
• [PATCH] netfilter: x_tables: Fix use-after-free in ipt_do_table., Taehee Yoo
• [PATCH nf-next] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases, Eric Dumazet
    • Re: [PATCH nf-next] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: nft_set_rbtree: use seqcount to avoid lock in most cases, Pablo Neira Ayuso
• [PATCH nf-next v2 0/4] netfilter: handle race w. module removal and nfqueue, Florian Westphal
  • [PATCH nf-next v2 1/4] netfilter: expect: add and use nf_ct_expect_iterate helpers, Florian Westphal
  • [PATCH nf-next v2 2/4] netfilter: add and use nf_ct_unconfirmed_destroy, Florian Westphal
  • [PATCH nf-next v2 4/4] netfilter: nfnetlink_queue: don't queue dying conntracks to userspace, Florian Westphal
  • [PATCH nf-next v2 3/4] netfilter: conntrack: destroy functions need to free queued packets, Florian Westphal
  • Re: [PATCH nf-next v2 0/4] netfilter: handle race w. module removal and nfqueue, Pablo Neira Ayuso
• [nft PATCH v2 0/3] monitor: Some fixes and improvements, Phil Sutter
  • [nft PATCH v2 3/3] tests/monitor: Clear ruleset after testing, Phil Sutter
  • [nft PATCH v2 2/3] tests/monitor: Simplify testcases, Phil Sutter
  • [nft PATCH v2 1/3] monitor: Fix printing of set declarations, Phil Sutter
  • Re: [nft PATCH v2 0/3] monitor: Some fixes and improvements, Pablo Neira Ayuso
• [nft PATCH 0/6] monitor: Some fixes and improvements, Phil Sutter
  • [nft PATCH 4/6] monitor: Print space after semicolon, Phil Sutter
    • Re: [nft PATCH 4/6] monitor: Print space after semicolon, Pablo Neira Ayuso
  • [nft PATCH 1/6] tests/monitor: Ignore newgen messages in output, Phil Sutter
    • Re: [nft PATCH 1/6] tests/monitor: Ignore newgen messages in output, Pablo Neira Ayuso
  • [nft PATCH 2/6] monitor: Fix printing of set declarations, Phil Sutter
    • Re: [nft PATCH 2/6] monitor: Fix printing of set declarations, Pablo Neira Ayuso
      • Re: [nft PATCH 2/6] monitor: Fix printing of set declarations, Phil Sutter
        • Re: [nft PATCH 2/6] monitor: Fix printing of set declarations, Pablo Neira Ayuso
          • Re: [nft PATCH 2/6] monitor: Fix printing of set declarations, Phil Sutter
  • [nft PATCH 6/6] tests/monitor: Add a small README, Phil Sutter
    • Re: [nft PATCH 6/6] tests/monitor: Add a small README, Pablo Neira Ayuso
  • [nft PATCH 5/6] tests/monitor: Clear ruleset after testing, Phil Sutter
    • Re: [nft PATCH 5/6] tests/monitor: Clear ruleset after testing, Pablo Neira Ayuso
  • [nft PATCH 3/6] tests/monitor: Simplify testcases, Phil Sutter
    • Re: [nft PATCH 3/6] tests/monitor: Simplify testcases, Pablo Neira Ayuso
      • Re: [nft PATCH 3/6] tests/monitor: Simplify testcases, Pablo Neira Ayuso
• [PATCH nft] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups., Varsha Rao
  • Re: [PATCH nft] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups., Pablo Neira Ayuso
• [PATCH] conntrack: labels: Avoid crash when labels file is not installed, Marcos Paulo de Souza
  • Re: [PATCH] conntrack: labels: Avoid crash when labels file is not installed, Florian Westphal
• [PATCH tip/core/rcu 1/9] net/netfilter/nf_conntrack_core: Fix net_conntrack_lock(), Paul E. McKenney
• [nf-next PATCH v2 0/5] netfilter: nf_tables: Kill name length restrictions, Phil Sutter
  • [nf-next PATCH v2 4/5] netfilter: nf_tables: Unlimit set name length, Phil Sutter
  • [nf-next PATCH v2 3/5] netfilter: nf_tables: Unlimit chain name length, Phil Sutter
  • [nf-next PATCH v2 2/5] netfilter: nf_tables: Unlimit table name length, Phil Sutter
    • Re: [nf-next PATCH v2 2/5] netfilter: nf_tables: Unlimit table name length, Pablo Neira Ayuso
      • Re: [nf-next PATCH v2 2/5] netfilter: nf_tables: Unlimit table name length, Phil Sutter
        • Re: [nf-next PATCH v2 2/5] netfilter: nf_tables: Unlimit table name length, Pablo Neira Ayuso
  • [nf-next PATCH v2 1/5] networking: Introduce nla_strdup(), Phil Sutter
  • [nf-next PATCH v2 5/5] netfilter: nf_tables: Unlimit object name length, Phil Sutter
• [nft PATCH v2] monitor: Print NEWGEN events, Phil Sutter
  • Re: [nft PATCH v2] monitor: Print NEWGEN events, Pablo Neira Ayuso
• [PATCH net-next 0/6] network related warning fixes, Stephen Hemminger
  • [PATCH net-next 1/6] bnxt: fix unsigned comparsion with 0, Stephen Hemminger
    • Re: [PATCH net-next 1/6] bnxt: fix unsigned comparsion with 0, Michael Chan
  • [PATCH net-next 2/6] bnxt: fix unused variable warnings, Stephen Hemminger
    • Re: [PATCH net-next 2/6] bnxt: fix unused variable warnings, Michael Chan
  • [PATCH net-next 3/6] benet: fix set but not used warning, Stephen Hemminger
  • [PATCH net-next 4/6] netfilter: remove unused variable, Stephen Hemminger
  • [PATCH net-next 5/6] socket: fix set not used warning, Stephen Hemminger
  • [PATCH net-next 6/6] 6lowpan: fix set not used warning, Stephen Hemminger
    • Re: [PATCH net-next 6/6] 6lowpan: fix set not used warning, Luiz Augusto von Dentz
  • Re: [PATCH net-next 0/6] network related warning fixes, David Miller
• [PATCH nf-next 0/4] netfilter: handle race w. module removal and nfqueue, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: expect: add and use nf_ct_expect_iterate helpers, Florian Westphal
  • [PATCH nf-next 2/4] netfilter: add and use nf_ct_unconfirmed_destroy, Florian Westphal
  • [PATCH nf-next 3/4] netfilter: conntrack: destroy functions need to free queued packets, Florian Westphal
  • [PATCH nf-next 4/4] netfilter: nfnetlink_queue: don't queue dying conntracks to userspace, Florian Westphal
    • Re: [PATCH nf-next 4/4] netfilter: nfnetlink_queue: don't queue dying conntracks to userspace, kbuild test robot