Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH v2 0/9] Remove spin_unlock_wait(), (continued)
  • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Ingo Molnar
    • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Paul E. McKenney
  • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Manfred Spraul
    • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Ingo Molnar
      • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Paul E. McKenney
        • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Ingo Molnar
          • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Paul E. McKenney
          • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Alan Stern
            • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Manfred Spraul
  • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Ingo Molnar
    • Re: [PATCH v2 0/9] Remove spin_unlock_wait(), Ingo Molnar
  • [PATCH v3 0/9] Remove spin_unlock_wait(), Paul E. McKenney
    • [PATCH v3 1/9] net/netfilter/nf_conntrack_core: Fix net_conntrack_lock(), Paul E. McKenney
    • [PATCH v3 5/9] exit: Replace spin_unlock_wait() with lock/unlock pair, Paul E. McKenney
    • [PATCH v3 7/9] drivers/ata: Replace spin_unlock_wait() with lock/unlock pair, Paul E. McKenney
    • [PATCH v3 4/9] completion: Replace spin_unlock_wait() with lock/unlock pair, Paul E. McKenney
    • [PATCH v3 8/9] locking: Remove spin_unlock_wait() generic definitions, Paul E. McKenney
    • [PATCH v3 2/9] task_work: Replace spin_unlock_wait() with lock/unlock pair, Paul E. McKenney
    • [PATCH v3 6/9] ipc: Replace spin_unlock_wait() with lock/unlock pair, Paul E. McKenney
    • [PATCH v3 3/9] sched: Replace spin_unlock_wait() with lock/unlock pair, Paul E. McKenney
    • [PATCH v3 9/9] arch: Remove spin_unlock_wait() arch-specific definitions, Paul E. McKenney
• [4.9.y,netfilter] please, cherry-pick 2638fd0f92d4, Pablo Neira Ayuso
  • Re: [4.9.y,netfilter] please, cherry-pick 2638fd0f92d4, Greg KH
• [4.11.y,netfilter] please, cherry-pick 87e94dbc210a, Pablo Neira Ayuso
  • Re: [4.11.y,netfilter] please, cherry-pick 87e94dbc210a, Greg KH
• [RFC 0/2] nftables iptables nat co-existence patches, Florian Westphal
  • [RFC PATCH 1/2] netfilter: add nf_nat_netns_get infrasstructure, Florian Westphal
  • [RFC PATCH 2/2] nefilter: nf_nat: split nat rewriting from do_chain logic, Florian Westphal
• [nft crap] ct original ip saddr ... handling, Florian Westphal
  • [PATCH 01/17] rename struct ct to ct_helper, Florian Westphal
    • Re: [PATCH 01/17] rename struct ct to ct_helper, Pablo Neira Ayuso
  • [PATCH 02/17] src: prepare for future ct timeout policy support, Florian Westphal
  • [PATCH 03/17] parser: use scanner tokens again for ct key handling, Florian Westphal
  • [PATCH 04/17] parser: compact list of rhs keyword expressions, Florian Westphal
  • [PATCH 05/17] bison: permit 'label' on rhs side of expression, Florian Westphal
  • [PATCH 06/17] bison: permit keywords in list_stmt_expressions, Florian Westphal
  • [PATCH 07/17] tests: ct: remove unsupported syntax, Florian Westphal
  • [PATCH 08/17] src: add alternate syntax for ct saddr, Florian Westphal
  • [PATCH 09/17] src: ct: store proto base of ct key, if any, Florian Westphal
  • [PATCH 10/17] src: ct: add eval part to inject dependencies for ct saddr/daddr, Florian Westphal
  • [PATCH 11/17] src: unifiy meta and ct postprocessing, Florian Westphal
    • [PATCH 13/17] src: ct: print nfproto name for some header fields, Florian Westphal
    • [PATCH 12/17] tests: update inet/bridge icmp test case, Florian Westphal
    • [PATCH 14/17] tests: ct: adjust test case commands, Florian Westphal
    • [PATCH 16/17] tests: rt: fix test cases, Florian Westphal
    • [PATCH 17/17] doc: update man page, Florian Westphal
    • [PATCH 15/17] src: rt: add keyword distinction for nexthop vs nexthop6, Florian Westphal
  • Re: [nft crap] ct original ip saddr ... handling, Pablo Neira Ayuso
    • Re: [nft crap] ct original ip saddr ... handling, Florian Westphal
      • Re: [nft crap] ct original ip saddr ... handling, Florian Westphal
• [PATCH] man: add include statement documentation., Ismo Puustinen
  • Re: [PATCH] man: add include statement documentation., Pablo Neira Ayuso
• [PATCH 1/2] scanner: support for wildcards in include statements., Ismo Puustinen
  • [PATCH 2/2] tests: update include directory tests to support wildcard syntax., Ismo Puustinen
    • Re: [PATCH 2/2] tests: update include directory tests to support wildcard syntax., Pablo Neira Ayuso
  • Re: [PATCH 1/2] scanner: support for wildcards in include statements., Pablo Neira Ayuso
    • Re: [PATCH 1/2] scanner: support for wildcards in include statements., Pablo Neira Ayuso
• [PATCH] netfilter: ip_tables: remove useless variable assignment in get_info(), Gustavo A. R. Silva
  • Re: [PATCH] netfilter: ip_tables: remove useless variable assignment in get_info(), Joe Perches
    • Re: [PATCH] netfilter: ip_tables: remove useless variable assignment in get_info(), Gustavo A. R. Silva
• [PATCH] libnetfilter_queue: Add information about retrieving UID/GID/SECCTX fields, Piotr Sawicki
  • Re: [PATCH] libnetfilter_queue: Add information about retrieving UID/GID/SECCTX fields, Pablo Neira Ayuso
• Bug on nfacct xml output, Marcelo S Mota
• [PATCH net-next] netfilter: conntrack: add a new NF_CT_EXT_EXPAND extension, Lin Zhang
  • Re: [PATCH net-next] netfilter: conntrack: add a new NF_CT_EXT_EXPAND extension, kbuild test robot
  • Re: [PATCH net-next] netfilter: conntrack: add a new NF_CT_EXT_EXPAND extension, Pablo Neira Ayuso
  • Re: [PATCH net-next] netfilter: conntrack: add a new NF_CT_EXT_EXPAND extension, Florian Westphal
    • Re: [PATCH net-next] netfilter: conntrack: add a new NF_CT_EXT_EXPAND extension, Pablo Neira Ayuso
  • Re: [PATCH net-next] netfilter: conntrack: add a new NF_CT_EXT_EXPAND extension, kbuild test robot
• Re: [netfilter-core] Heap overflow in xt_geoip.c, Jan Engelhardt
  • Re: [netfilter-core] Heap overflow in xt_geoip.c, Loic
    • Re: [netfilter-core] Heap overflow in xt_geoip.c, Loic
      • Re: [netfilter-core] Heap overflow in xt_geoip.c, Loic
• [PATCH nft] include: Remove __init macro definition., Varsha Rao
• [PATCH nft 1/2] src: add new generic context structure nft_ctx, Pablo M. Bermudo Garay
  • [PATCH nft 2/2] src: add --check option flag, Pablo M. Bermudo Garay
    • Re: [PATCH nft 2/2] src: add --check option flag, Pablo Neira Ayuso
  • Re: [PATCH nft 1/2] src: add new generic context structure nft_ctx, Pablo Neira Ayuso
• [PATCH 1/2] tests: shell: Add test for incomplete set add set command, Shyam Saini
  • [PATCH 2/2] tests: shell: Test input descriptors for included files, Shyam Saini
    • Re: [PATCH 2/2] tests: shell: Test input descriptors for included files, Pablo Neira Ayuso
  • Re: [PATCH 1/2] tests: shell: Add test for incomplete set add set command, Pablo Neira Ayuso
    • Re: [PATCH 1/2] tests: shell: Add test for incomplete set add set command, Shyam Saini
      • Re: [PATCH 1/2] tests: shell: Add test for incomplete set add set command, Pablo Neira Ayuso
        • Re: [PATCH 1/2] tests: shell: Add test for incomplete set add set command, Shyam Saini
          • Re: [PATCH 1/2] tests: shell: Add test for incomplete set add set command, Pablo Neira Ayuso
            • Re: [PATCH 1/2] tests: shell: Add test for incomplete set add set command, Shyam Saini
• [PATCH] bump version to 1.0.3, Richard Weinberger
  • Re: [PATCH] bump version to 1.0.3, Richard Weinberger
    • Re: [PATCH] bump version to 1.0.3, Pablo Neira Ayuso
  • Re: [PATCH] bump version to 1.0.3, Pablo Neira Ayuso
• [PATCH] nft: make raw payloads work, Laurent Fasnacht
  • Re: [PATCH] nft: make raw payloads work, Pablo Neira Ayuso
• [PATCH] tests: py: Fail test forcefully when bug is not fixed, Shyam Saini
  • Re: [PATCH] tests: py: Fail test forcefully when bug is not fixed, Pablo Neira Ayuso
• [4.11.y netfilter] 4.11 iptables regression fix, Florian Westphal
  • Re: [4.11.y netfilter] 4.11 iptables regression fix, Greg KH
• [PATCH lnf-queue] src: prepare for new release, Florian Westphal
  • Re: [PATCH lnf-queue] src: prepare for new release, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nfnetlink: extended ACK reporting, Pablo Neira Ayuso
• [PATCH nft] evaluate: Better error reporting for bad set references, Pablo Neira Ayuso
• [PATCH nft] evaluate: merge nested set flags, Pablo Neira Ayuso
• [PATCH nf] netfilter: ebt_nflog: fix unexpected truncated packet, Liping Zhang
  • Re: [PATCH nf] netfilter: ebt_nflog: fix unexpected truncated packet, Pablo Neira Ayuso
• [NFQUEUE] lack of UID/GID fields in fragmented packets, Piotr Sawicki
  • Re: [NFQUEUE] lack of UID/GID fields in fragmented packets, Florian Westphal
• [PATCH nft 0/4] restrict meta nfproto to inet family, Florian Westphal
  • [PATCH 1/4] tests: restrict ct saddr test to inet family, Florian Westphal
  • [PATCH 2/4] tests: remove two non-sensical rules, Florian Westphal
  • [PATCH 3/4] tests: restrict meta nfproto test cases to inet family, Florian Westphal
  • [PATCH 4/4] evaluate: reject meta nfproto outside of inet family, Florian Westphal
    • Re: [PATCH 4/4] evaluate: reject meta nfproto outside of inet family, Pablo Neira Ayuso
  • Re: [PATCH nft 0/4] restrict meta nfproto to inet family, Pablo Neira Ayuso
• [PATCHv3] tests: py: Add test for ambiguity while setting the value, Shyam Saini
  • Re: [PATCHv3] tests: py: Add test for ambiguity while setting the value, Pablo Neira Ayuso
    • Re: [PATCHv3] tests: py: Add test for ambiguity while setting the value, Pablo Neira Ayuso
      • Re: [PATCHv3] tests: py: Add test for ambiguity while setting the value, Shyam Saini
    • Re: [PATCHv3] tests: py: Add test for ambiguity while setting the value, Pablo Neira Ayuso
      • Re: [PATCHv3] tests: py: Add test for ambiguity while setting the value, Shyam Saini
    • Re: [PATCHv3] tests: py: Add test for ambiguity while setting the value, Shyam Saini
• [PATCH nft] src: error reporting for nested ruleset representation, Pablo Neira Ayuso
• [PATCH nft v3] src: Pass stateless, numeric, ip2name and handle variables as structure members., Varsha Rao
  • Re: [PATCH nft v3] src: Pass stateless, numeric, ip2name and handle variables as structure members., Pablo Neira Ayuso
• [PATCH nft v2] src: Pass stateless, numeric, ip2name and handle variables as structure members., Varsha Rao
  • Re: [PATCH nft v2] src: Pass stateless, numeric, ip2name and handle variables as structure members., Pablo Neira Ayuso
• [PATCH nft] src: Pass stateless, numeric, ip2name and handle variables as structure members., Varsha Rao
  • Re: [PATCH nft] src: Pass stateless, numeric, ip2name and handle variables as structure members., Pablo Neira Ayuso
    • Re: [PATCH nft] src: Pass stateless, numeric, ip2name and handle variables as structure members., Varsha Rao
      • Re: [PATCH nft] src: Pass stateless, numeric, ip2name and handle variables as structure members., Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: use NFPROTO_MAX to size array, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: use NFPROTO_MAX to size array, Pablo Neira Ayuso
• [PATCH nf-next] nf_tables: reduce chain type table size, Florian Westphal
  • Re: [PATCH nf-next] nf_tables: reduce chain type table size, Pablo Neira Ayuso
• using nft & iptables nat in parallel, Florian Westphal
  • Re: using nft & iptables nat in parallel, Arturo Borrero Gonzalez
    • Re: using nft & iptables nat in parallel, Florian Westphal
      • Re: using nft & iptables nat in parallel, Pablo Neira Ayuso
        • Re: using nft & iptables nat in parallel, Florian Westphal
          • Re: using nft & iptables nat in parallel, Pablo Neira Ayuso
            • Re: using nft & iptables nat in parallel, Florian Westphal
              • Re: using nft & iptables nat in parallel, Pablo Neira Ayuso
                • Re: using nft & iptables nat in parallel, Pablo Neira Ayuso
                • Re: using nft & iptables nat in parallel, Florian Westphal
      • Re: using nft & iptables nat in parallel, Arturo Borrero Gonzalez
• [PATCH] netfilter: conntrack: fix clash resolution in nat, Haishuang Yan
  • Re: [PATCH] netfilter: conntrack: fix clash resolution in nat, Pablo Neira Ayuso
• [conntrack-tools PATCH v2] conntrackd: make the daemon run in RT mode by default, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH v2] conntrackd: make the daemon run in RT mode by default, Pablo Neira Ayuso
• [PATCHv2] tests: shell: Add test for ambguity while setting the value, Shyam Saini
  • Re: [PATCHv2] tests: shell: Add test for ambguity while setting the value, Pablo Neira Ayuso
    • Re: [PATCHv2] tests: shell: Add test for ambguity while setting the value, Shyam Saini
      • Re: [PATCHv2] tests: shell: Add test for ambguity while setting the value, Pablo Neira Ayuso
        • Re: [PATCHv2] tests: shell: Add test for ambguity while setting the value, Shyam Saini
  • Re: [PATCHv2] tests: shell: Add test for ambguity while setting the value, Pablo Neira Ayuso
    • Re: [PATCHv2] tests: shell: Add test for ambguity while setting the value, Shyam Saini
• [conntrack-tools PATCH v2] In order to prevent netlink buffer overrun, conntrackd is recommended to run, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH v2] In order to prevent netlink buffer overrun, conntrackd is recommended to run, Arturo Borrero Gonzalez
• [PATCH] tests: shell: Add test for ambguity while setting the value, Shyam Saini
  • Re: [PATCH] tests: shell: Add test for ambguity while setting the value, Arturo Borrero Gonzalez
    • Re: [PATCH] tests: shell: Add test for ambguity while setting the value, Shyam Saini
• [PATCH] netfilter: ctnetlink: move CTA_TIMEOUT case to outside, Haishuang Yan
  • Re: [PATCH] netfilter: ctnetlink: move CTA_TIMEOUT case to outside, Pablo Neira Ayuso
• nfqueue accepted packet is disappeared, Oleg
• [PATCH nft] netlink_delinearize: prefer ct event set foo,bar over 'set foo|bar', Florian Westphal
  • Re: [PATCH nft] netlink_delinearize: prefer ct event set foo,bar over 'set foo|bar', Pablo Neira Ayuso
• [PATCH] decnet: dn_rtmsg: Improve input length sanitization in dnrmg_receive_user_skb, Mateusz Jurczyk
  • [PATCH v2] decnet: dn_rtmsg: Improve input length sanitization in dnrmg_receive_user_skb, Mateusz Jurczyk
    • Re: [PATCH v2] decnet: dn_rtmsg: Improve input length sanitization in dnrmg_receive_user_skb, Florian Westphal
      • Re: [PATCH v2] decnet: dn_rtmsg: Improve input length sanitization in dnrmg_receive_user_skb, Mateusz Jurczyk
        • Re: [PATCH v2] decnet: dn_rtmsg: Improve input length sanitization in dnrmg_receive_user_skb, David Miller
• [PATCH] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Mateusz Jurczyk
  • Re: [PATCH] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Eric Dumazet
    • [PATCH v2] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Mateusz Jurczyk
      • Re: [PATCH v2] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Pablo Neira Ayuso
        • Re: [PATCH v2] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Pablo Neira Ayuso
          • Re: [PATCH v2] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Pablo Neira Ayuso
            • Re: [PATCH v2] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Mateusz Jurczyk
            • Re: [netfilter-core] [PATCH v2] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Pablo Neira Ayuso
• [PATCH nft 1/2] doc: nft: describe -I override behaviour when path starts by ./ and /, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: display default directory for file inclusion in -h/--help, Pablo Neira Ayuso
• [PATCH nft 1/2] parser: allow ct eventmask set new,related, Florian Westphal
  • [PATCH nft 2/2] src: rename ct eventmask to event, Florian Westphal
    • Re: [PATCH nft 2/2] src: rename ct eventmask to event, Pablo Neira Ayuso
      • Re: [PATCH nft 2/2] src: rename ct eventmask to event, Pablo Neira Ayuso
      • Re: [PATCH nft 2/2] src: rename ct eventmask to event, Florian Westphal
        • Re: [PATCH nft 2/2] src: rename ct eventmask to event, Pablo Neira Ayuso
          • Re: [PATCH nft 2/2] src: rename ct eventmask to event, Florian Westphal
  • Re: [PATCH nft 1/2] parser: allow ct eventmask set new,related, Pablo Neira Ayuso
• [PATCH 1/3] scanner: add files in include dirs in alphabetical order., Ismo Puustinen
  • [PATCH 3/3] tests: added tests for ordering files in include dirs., Ismo Puustinen
  • [PATCH 2/3] man: add include directory documentation., Ismo Puustinen
    • Re: [PATCH 2/3] man: add include directory documentation., Pablo Neira Ayuso
  • Re: [PATCH 1/3] scanner: add files in include dirs in alphabetical order., Pablo Neira Ayuso
  • Re: [PATCH 1/3] scanner: add files in include dirs in alphabetical order., Arturo Borrero Gonzalez
    • Re: [PATCH 1/3] scanner: add files in include dirs in alphabetical order., Pablo Neira Ayuso
      • Re: [PATCH 1/3] scanner: add files in include dirs in alphabetical order., Arturo Borrero Gonzalez
        • Re: [PATCH 1/3] scanner: add files in include dirs in alphabetical order., Pablo Neira Ayuso
• [PATCH v3 1/2] scanner: add support for include directories, Ismo Puustinen
  • [PATCH v3 2/2] tests: test include directories, Ismo Puustinen
    • Re: [PATCH v3 2/2] tests: test include directories, Pablo Neira Ayuso
  • Re: [PATCH v3 1/2] scanner: add support for include directories, Pablo Neira Ayuso
    • Re: [PATCH v3 1/2] scanner: add support for include directories, Pablo Neira Ayuso
• [conntrack-tools PATCH 1/4] conntrackd: evaluate configuration earlier, Arturo Borrero Gonzalez
  • [conntrack-tools PATCH 2/4] conntrackd: make the daemon run in RT mode by default, Arturo Borrero Gonzalez
    • Re: [conntrack-tools PATCH 2/4] conntrackd: make the daemon run in RT mode by default, Pablo Neira Ayuso
      • Re: [conntrack-tools PATCH 2/4] conntrackd: make the daemon run in RT mode by default, Arturo Borrero Gonzalez
        • Re: [conntrack-tools PATCH 2/4] conntrackd: make the daemon run in RT mode by default, Pablo Neira Ayuso
  • [conntrack-tools PATCH 3/4] conntrackd: cleanup if failed forking, Arturo Borrero Gonzalez
    • Re: [conntrack-tools PATCH 3/4] conntrackd: cleanup if failed forking, Pablo Neira Ayuso
  • [conntrack-tools PATCH 4/4] conntrackd: deprecate unix backlog configuration, Arturo Borrero Gonzalez
    • Re: [conntrack-tools PATCH 4/4] conntrackd: deprecate unix backlog configuration, Pablo Neira Ayuso
      • Re: [conntrack-tools PATCH 4/4] conntrackd: deprecate unix backlog configuration, Pablo Neira Ayuso
    • Re: [conntrack-tools PATCH 4/4] conntrackd: deprecate unix backlog configuration, Pablo Neira Ayuso
  • Re: [conntrack-tools PATCH 1/4] conntrackd: evaluate configuration earlier, Pablo Neira Ayuso
• [PATCH] src: Remove expire information from list stateless ruleset., Varsha Rao
  • Re: [PATCH] src: Remove expire information from list stateless ruleset., Pablo Neira Ayuso
• [PATCH iptables 1/3] tests: xlate: generalize owner, Pablo M. Bermudo Garay
  • [PATCH iptables 3/3] xtables-translate: fix double space before comment, Pablo M. Bermudo Garay
    • Re: [PATCH iptables 3/3] xtables-translate: fix double space before comment, Pablo Neira Ayuso
  • [PATCH iptables 2/3] libip6t_icmp6: xlate: remove leftover space, Pablo M. Bermudo Garay
    • Re: [PATCH iptables 2/3] libip6t_icmp6: xlate: remove leftover space, Pablo Neira Ayuso
  • Re: [PATCH iptables 1/3] tests: xlate: generalize owner, Pablo Neira Ayuso
• [PATCH V2] netfilter: Remove duplicated rcu_read_lock., Taehee Yoo
  • Re: [PATCH V2] netfilter: Remove duplicated rcu_read_lock., Julian Anastasov
  • Re: [PATCH V2] netfilter: Remove duplicated rcu_read_lock., Pablo Neira Ayuso
    • Re: [PATCH V2] netfilter: Remove duplicated rcu_read_lock., Taehee Yoo
  • Re: [PATCH V2] netfilter: Remove duplicated rcu_read_lock., Pablo Neira Ayuso
• [PATCH v2 1/2] scanner: add support for include directories, Ismo Puustinen
  • [PATCH v2 2/2] tests: test include directories, Ismo Puustinen
    • Re: [PATCH v2 2/2] tests: test include directories, Pablo Neira Ayuso
  • Re: [PATCH v2 1/2] scanner: add support for include directories, Pablo Neira Ayuso
• [PATCH nf-next RFC 0/5] netfilter: add net namespace support for cthelper, Liping Zhang
  • [PATCH nf-next RFC 1/5] netfilter: use nf_conntrack_helpers_register when possible, Liping Zhang
    • Re: [PATCH nf-next RFC 1/5] netfilter: use nf_conntrack_helpers_register when possible, Florian Westphal
    • Re: [PATCH nf-next RFC 1/5] netfilter: use nf_conntrack_helpers_register when possible, Pablo Neira Ayuso
  • [PATCH nf-next RFC 2/5] netfilter: make nf_conntrack_helper_register become per-net, Liping Zhang
  • [PATCH nf-next RFC 3/5] netfilter: make each ct helper belong to a specific netns, Liping Zhang
  • [PATCH nf-next RFC 4/5] netfilter: complete the netns support for the user cthelpers, Liping Zhang
  • [PATCH nf-next RFC 5/5] netfilter: complete the netns support for the kernel built-in cthelpers, Liping Zhang
  • Re: [PATCH nf-next RFC 0/5] netfilter: add net namespace support for cthelper, Florian Westphal
    • Re: [PATCH nf-next RFC 0/5] netfilter: add net namespace support for cthelper, Pablo Neira Ayuso
    • Re: [PATCH nf-next RFC 0/5] netfilter: add net namespace support for cthelper, Liping Zhang
      • Re: [PATCH nf-next RFC 0/5] netfilter: add net namespace support for cthelper, Pablo Neira Ayuso
        • Re: [PATCH nf-next RFC 0/5] netfilter: add net namespace support for cthelper, Liping Zhang
• [PATCH nf] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup, Liping Zhang
  • Re: [PATCH nf] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup, Davide Caratti
  • Re: [PATCH nf] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup, Pablo Neira Ayuso
  • Re: [nf] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup, Andrei Vagin
    • Re: [nf] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup, Pablo Neira Ayuso
• [PATCH 1/1] iptables-xml: Fix segfault on jump without a target, Oliver Ford
  • Re: [PATCH 1/1] iptables-xml: Fix segfault on jump without a target, Pablo Neira Ayuso
• [PATCH] netfilter, kbuild: use canonical method to specify objs., Jike Song
  • Re: [PATCH] netfilter, kbuild: use canonical method to specify objs., Pablo Neira Ayuso
• [PATCH v2 nf-next] netfilter: ebt: Use new helper ebt_invalid_target to check target, gfree . wind
  • Re: [PATCH v2 nf-next] netfilter: ebt: Use new helper ebt_invalid_target to check target, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: ebt: Use ebt_invalid_target instead of INVALID_TARGET, gfree . wind
  • Re: [PATCH nf-next] netfilter: ebt: Use ebt_invalid_target instead of INVALID_TARGET, Pablo Neira Ayuso
• [PATCH] ipset: Fix ipset command replacement in runtest.sh, Neutron Soutmun
  • Re: [PATCH] ipset: Fix ipset command replacement in runtest.sh, Jozsef Kadlecsik
• [PATCH nf-next] netns: add and use net_ns_barrier, Florian Westphal
  • Re: [PATCH nf-next] netns: add and use net_ns_barrier, David Miller
    • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Eric W. Biederman
  • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Eric W. Biederman
    • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Joe Stringer
    • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Florian Westphal
      • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Cong Wang
        • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Florian Westphal
          • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Cong Wang
            • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Florian Westphal
              • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Joe Stringer
              • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Cong Wang
            • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Pablo Neira Ayuso
              • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Eric W. Biederman
    • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Pablo Neira Ayuso
  • RE: [PATCH nf-next] netns: add and use net_ns_barrier, David Laight
    • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Florian Westphal
  • Re: [PATCH nf-next] netns: add and use net_ns_barrier, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: move table iteration out of netns exit paths, Florian Westphal
  • Re: [PATCH nf-next] netfilter: move table iteration out of netns exit paths, Pablo Neira Ayuso
• [PATCHv2] extensions: libxt_cluster: Add translation to nft, Shyam Saini
  • Re: [PATCHv2] extensions: libxt_cluster: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCHv2] extensions: libxt_cluster: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCHv2] extensions: libxt_cluster: Add translation to nft, Shyam Saini
        • Re: [PATCHv2] extensions: libxt_cluster: Add translation to nft, Pablo Neira Ayuso
• [PATCH nft] src: remove global nftnl_batch structure in mnl layer, Pablo Neira Ayuso
• [PATCH nft] meta: permit meta nfproto ip in ip family, Florian Westphal
  • [PATCH nft] ct: fix inet/bridge/netdev family handling for saddr/daddr, Florian Westphal
    • Re: [PATCH nft] ct: fix inet/bridge/netdev family handling for saddr/daddr, Pablo Neira Ayuso
  • Re: [PATCH nft] meta: permit meta nfproto ip in ip family, Pablo Neira Ayuso
  • Re: [PATCH nft] meta: permit meta nfproto ip in ip family, Florian Westphal
    • Re: [PATCH nft] meta: permit meta nfproto ip in ip family, Pablo Neira Ayuso
• [PATCH conntrack-tools] ipv6: remove use of HAVE_INET_PTON_IPV6, Nicolas Dichtel
  • Re: [PATCH conntrack-tools] ipv6: remove use of HAVE_INET_PTON_IPV6, Pablo Neira Ayuso
    • Re: [PATCH conntrack-tools] ipv6: remove use of HAVE_INET_PTON_IPV6, Nicolas Dichtel
    • [PATCH conntrack-tools v2] ipv6: remove use of HAVE_INET_PTON_IPV6, Nicolas Dichtel
      • Re: [PATCH conntrack-tools v2] ipv6: remove use of HAVE_INET_PTON_IPV6, Pablo Neira Ayuso
• [4.9.y,netfilter] please, cherry-pick da2f27e9e615, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [4.9.y,netfilter] please, cherry-pick da2f27e9e615, Pablo Neira Ayuso
    • Re: [4.9.y,netfilter] please, cherry-pick da2f27e9e615, Greg KH
• [PATCH nf-next V2] netfilter: cttimeout: use nf_ct_iterate_cleanup_net to unlink timeout objs, Liping Zhang
  • Re: [PATCH nf-next V2] netfilter: cttimeout: use nf_ct_iterate_cleanup_net to unlink timeout objs, kbuild test robot
    • Re: [PATCH nf-next V2] netfilter: cttimeout: use nf_ct_iterate_cleanup_net to unlink timeout objs, Liping Zhang
  • Re: [PATCH nf-next V2] netfilter: cttimeout: use nf_ct_iterate_cleanup_net to unlink timeout objs, Pablo Neira Ayuso
• [PATCH nf-next V2] netfilter: nf_ct_helper: use nf_ct_iterate_destroy to unlink helper objs, Liping Zhang
  • Re: [PATCH nf-next V2] netfilter: nf_ct_helper: use nf_ct_iterate_destroy to unlink helper objs, kbuild test robot
  • Re: [PATCH nf-next V2] netfilter: nf_ct_helper: use nf_ct_iterate_destroy to unlink helper objs, Pablo Neira Ayuso
• [PATCH nft 1/2] expression: don't trim off unary expression on delinearization, Pablo Neira Ayuso
  • [PATCH nft 2/2] tests: py: flush stdout on each test run, Pablo Neira Ayuso
• [PATCH 1/1] iptables: Add file output option to iptables-save, Oliver Ford
  • Re: [PATCH 1/1] iptables: Add file output option to iptables-save, Pablo Neira Ayuso
    • Re: [PATCH 1/1] iptables: Add file output option to iptables-save, Oliver Ford
      • Re: [PATCH 1/1] iptables: Add file output option to iptables-save, Pablo Neira Ayuso
  • Re: [PATCH 1/1] iptables: Add file output option to iptables-save, Pablo Neira Ayuso
• [nft PATCH v2] evaluate: avoid reference to multiple src data in statements which set values, Arturo Borrero Gonzalez
  • Re: [nft PATCH v2] evaluate: avoid reference to multiple src data in statements which set values, Pablo Neira Ayuso
• NFQUEUE and TRPOXY, Pavel Vajarov
• [PATCH] Fix typo in documentation of nft, Bertrand Bonnefoy-Claudet
  • Re: [PATCH] Fix typo in documentation of nft, Pablo Neira Ayuso
• [PATCH nf-next 8/9,v2] netfilter: nft_set_hash: add non-resizable hashtable implementation, Pablo Neira Ayuso
  • [PATCH nf-next 9/9,v2] netfilter: nft_set_hash: add lookup variant for fixed size hashtable, Pablo Neira Ayuso
• [PATCHv2 net] netfilter: do not hold dev in ipt_CLUSTERIP, Xin Long
• [nft PATCH] evaluate: prevent using sets in payload statements, Arturo Borrero Gonzalez
  • Re: [nft PATCH] evaluate: prevent using sets in payload statements, Pablo Neira Ayuso
    • Re: [nft PATCH] evaluate: prevent using sets in payload statements, Pablo Neira Ayuso
• [PATCH 1/1] extensions: libxt_cluster: Add translation to nft, Shyam Saini
  • Re: [PATCH 1/1] extensions: libxt_cluster: Add translation to nft, Florian Westphal
    • Re: [PATCH 1/1] extensions: libxt_cluster: Add translation to nft, Shyam Saini
  • Re: [PATCH 1/1] extensions: libxt_cluster: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH 1/1] extensions: libxt_cluster: Add translation to nft, Florian Westphal
      • Re: [PATCH 1/1] extensions: libxt_cluster: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH 1/1] extensions: libxt_cluster: Add translation to nft, Shyam Saini
• [PATCH nft 1/3] rule: adjust set expression size accordingly with intervals, Pablo Neira Ayuso
  • [PATCH nft 2/3] segtree: reset element size counter before adding intervals to set, Pablo Neira Ayuso
  • [PATCH nft 3/3] netlink: add size description for constant sets, Pablo Neira Ayuso
• [PATCH nf-next 0/9] nf_tables set updates, Pablo Neira Ayuso
  • [PATCH nf-next 6/9] netfilter: nft_set_hash: add nft_hash_buckets(), Pablo Neira Ayuso
  • [PATCH nf-next 3/9] netfilter: nft_set_hash: use nft_rhash prefix for resizable set backend, Pablo Neira Ayuso
  • [PATCH nf-next 2/9] netfilter: nf_tables: no size estimation if number of set elements is unknown, Pablo Neira Ayuso
  • [PATCH nf-next 1/9] netfilter: nft_set_hash: unnecessary forward declaration, Pablo Neira Ayuso
  • [PATCH nf-next 4/9] netfilter: nf_tables: select set backend flavour depending on description, Pablo Neira Ayuso
  • [PATCH nf-next 8/9] netfilter: nft_set_hash: add non-resizable hashtable implementation, Pablo Neira Ayuso
    • Re: [PATCH nf-next 8/9] netfilter: nft_set_hash: add non-resizable hashtable implementation, Pablo Neira Ayuso
  • [PATCH nf-next 5/9] netfilter: nf_tables: pass set description to ->privsize, Pablo Neira Ayuso
  • [PATCH nf-next 7/9] netfilter: nf_tables: allow large allocations for new sets, Pablo Neira Ayuso
    • Re: [PATCH nf-next 7/9] netfilter: nf_tables: allow large allocations for new sets, Liping Zhang
      • Re: [PATCH nf-next 7/9] netfilter: nf_tables: allow large allocations for new sets, Pablo Neira Ayuso
        • Re: [PATCH nf-next 7/9] netfilter: nf_tables: allow large allocations for new sets, Liping Zhang
  • [PATCH nf-next 9/9] netfilter: nft_set_hash: add lookup variant for fixed size hashtable, Pablo Neira Ayuso
• [PATCH v3] extensions: libxt_hashlimit: fix uint64_t printf formats, Alin Nastac
  • Re: [PATCH v3] extensions: libxt_hashlimit: fix uint64_t printf formats, Pablo Neira Ayuso
    • Re: [PATCH v3] extensions: libxt_hashlimit: fix uint64_t printf formats, Alin Năstac
      • Re: [PATCH v3] extensions: libxt_hashlimit: fix uint64_t printf formats, Pablo Neira Ayuso
    • Re: [PATCH v3] extensions: libxt_hashlimit: fix uint64_t printf formats, Alin Năstac
      • Re: [PATCH v3] extensions: libxt_hashlimit: fix uint64_t printf formats, Pablo Neira Ayuso
• [nft PATCH 0/4 RFC] Support IPv6 AH header matches, Phil Sutter
  • [nft PATCH 2/4 RFC] exthdr: Align max templates count with payload expr, Phil Sutter
  • [nft PATCH 1/4 RFC] payload: Carry template number around for internal use, Phil Sutter
  • [nft PATCH 4/4 RFC] payload: Convert AH header expression to exthdr for IPv6, Phil Sutter
  • [nft PATCH 3/4 RFC] exthdr: Define AH header description, Phil Sutter
  • Re: [nft PATCH 0/4 RFC] Support IPv6 AH header matches, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_rbtree: handle re-addition element after deletion, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_set_rbtree: handle re-addition element after deletion, Wolfgang Bumiller
• [PATCH nf] netfilter: nat: use atomic bit op to clear the _SRC_NAT_DONE_BIT, Liping Zhang
  • Re: [PATCH nf] netfilter: nat: use atomic bit op to clear the _SRC_NAT_DONE_BIT, Florian Westphal
  • Re: [PATCH nf] netfilter: nat: use atomic bit op to clear the _SRC_NAT_DONE_BIT, Pablo Neira Ayuso
• [PATCH nf-next 0/5] netfilter: conntrack: rework nf_ct_iterate, part 1., Florian Westphal
  • [PATCH nf-next 1/5] netfilter: conntrack: rename nf_ct_iterate_cleanup, Florian Westphal
  • [PATCH nf-next 2/5] netfilter: conntrack: don't call iter for non-confirmed conntracks, Florian Westphal
  • [PATCH nf-next 3/5] netfilter: conntrack: add nf_ct_iterate_destroy, Florian Westphal
  • [PATCH nf-next 4/5] netfilter: conntrack: restart iteration on resize, Florian Westphal
  • [PATCH nf-next 5/5] netfilter: nat: destroy nat mappings on module exit path only, Florian Westphal
  • Re: [PATCH nf-next 0/5] netfilter: conntrack: rework nf_ct_iterate, part 1., Pablo Neira Ayuso
• [PATCH nf-next 0/3] netfilter: handle hash resize situation in nf_ct_iterate_cleanup, Liping Zhang
  • [PATCH nf-next 1/3] netfilter: restart nf ct cleanup if hash resize happen, Liping Zhang
    • Re: [PATCH nf-next 1/3] netfilter: restart nf ct cleanup if hash resize happen, Florian Westphal
  • [PATCH nf-next 3/3] netfilter: cttimeout: use nf_ct_iterate_cleanup to unlink timeout objs, Liping Zhang
  • [PATCH nf-next 2/3] netfilter: nf_ct_helper: use nf_ct_iterate_cleanup to unlink helper objs, Liping Zhang
    • Re: [PATCH nf-next 2/3] netfilter: nf_ct_helper: use nf_ct_iterate_cleanup to unlink helper objs, Florian Westphal
      • Re: [PATCH nf-next 2/3] netfilter: nf_ct_helper: use nf_ct_iterate_cleanup to unlink helper objs, Liping Zhang
        • Re: [PATCH nf-next 2/3] netfilter: nf_ct_helper: use nf_ct_iterate_cleanup to unlink helper objs, Florian Westphal
          • Re: [PATCH nf-next 2/3] netfilter: nf_ct_helper: use nf_ct_iterate_cleanup to unlink helper objs, Liping Zhang
            • Re: [PATCH nf-next 2/3] netfilter: nf_ct_helper: use nf_ct_iterate_cleanup to unlink helper objs, Florian Westphal
  • Re: [PATCH nf-next 0/3] netfilter: handle hash resize situation in nf_ct_iterate_cleanup, Florian Westphal
• [PATCH nf] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Liping Zhang
  • Re: [PATCH nf] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Florian Westphal
    • Re: [PATCH nf] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Liping Zhang
      • Re: [PATCH nf] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Pablo Neira Ayuso
        • Re: [PATCH nf] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Florian Westphal
          • Re: [PATCH nf] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Liping Zhang
            • Re: [PATCH nf] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Florian Westphal
  • Re: [PATCH nf] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Pablo Neira Ayuso
• [PATCH net] netfilter: do not hold dev in ipt_CLUSTERIP, Xin Long
  • Re: [PATCH net] netfilter: do not hold dev in ipt_CLUSTERIP, Pablo Neira Ayuso
    • Re: [PATCH net] netfilter: do not hold dev in ipt_CLUSTERIP, Xin Long
  • Re: [PATCH net] netfilter: do not hold dev in ipt_CLUSTERIP, Pablo Neira Ayuso
• [PATCH nft v3 0/7] switch l4 dependency to meta l4proto, Florian Westphal
  • [PATCH nft 1/7] payload: split ll proto dependency into helper, Florian Westphal
  • [PATCH nft v3 2/7] src: allow update of net base w. meta l4proto icmpv6, Florian Westphal
  • [PATCH nft v3 3/7] src: ipv6: switch implicit dependencies to meta l4proto, Florian Westphal
  • [PATCH nft 4/7] payload: enforce ip/ip6 protocol depending on icmp or icmpv6, Florian Westphal
  • [PATCH nft v3 5/7] tests: fix up meta l4proto change for ip6 family, Florian Westphal
  • [PATCH nft v3 6/7] src: ip: switch implicit dependencies to meta l4proto too, Florian Westphal
  • [PATCH nft v3 7/7] tests: fix up meta l4proto change for ip family, Florian Westphal
  • Re: [PATCH nft v3 0/7] switch l4 dependency to meta l4proto, Pablo Neira Ayuso
• [PATCH net-next 1/2] netfilter: resolve warnings about missing prototypes, Stephen Hemminger
  • [PATCH net-next 2/2] netfilter: nf_tables: make local functions static, Stephen Hemminger
    • Re: [PATCH net-next 2/2] netfilter: nf_tables: make local functions static, Pablo Neira Ayuso
  • Re: [PATCH net-next 1/2] netfilter: resolve warnings about missing prototypes, Pablo Neira Ayuso
• [PATCH v5 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
  • Re: [PATCH v5 1/1] iptables: Fix crash on malformed iptables-restore, Pablo Neira Ayuso
• [nft PATCH v3] List handles of added rules if requested, Phil Sutter
  • Re: [nft PATCH v3] List handles of added rules if requested, Pablo Neira Ayuso
  • Re: [nft PATCH v3] List handles of added rules if requested, Pablo Neira Ayuso
• [PATCH v4 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
• [PATCH v3 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
  • Re: [PATCH v3 1/1] iptables: Fix crash on malformed iptables-restore, Florian Westphal
    • Re: [PATCH v3 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
      • Re: [PATCH v3 1/1] iptables: Fix crash on malformed iptables-restore, Florian Westphal
        • Re: [PATCH v3 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
        • Re: [PATCH v3 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
          • Re: [PATCH v3 1/1] iptables: Fix crash on malformed iptables-restore, Florian Westphal
            • Re: [PATCH v3 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
• [PATCH 00/12] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH 01/12] ipvs: SNAT packet replies only for NATed connections, Pablo Neira Ayuso
  • [PATCH 10/12] netfilter: nf_tables: revisit chain/object refcounting from elements, Pablo Neira Ayuso
  • [PATCH 12/12] netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPAT, Pablo Neira Ayuso
  • [PATCH 11/12] ebtables: arpreply: Add the standard target sanity check, Pablo Neira Ayuso
  • [PATCH 03/12] netfilter: don't setup nat info for confirmed ct, Pablo Neira Ayuso
  • [PATCH 09/12] netfilter: nf_tables: missing sanitization in data from userspace, Pablo Neira Ayuso
  • [PATCH 05/12] netfilter: nfnl_cthelper: reject del request if helper obj is in use, Pablo Neira Ayuso
  • [PATCH 08/12] netfilter: nf_tables: can't assume lock is acquired when dumping set elems, Pablo Neira Ayuso
  • [PATCH 07/12] netfilter: synproxy: fix conntrackd interaction, Pablo Neira Ayuso
  • [PATCH 04/12] netfilter: introduce nf_conntrack_helper_put helper function, Pablo Neira Ayuso
  • [PATCH 02/12] netfilter: ctnetlink: Make some parameters integer to avoid enum mismatch, Pablo Neira Ayuso
  • [PATCH 06/12] netfilter: xtables: zero padding in data_to_user, Pablo Neira Ayuso
  • Re: [PATCH 00/12] Netfilter/IPVS fixes for net, David Miller
    • Re: [PATCH 00/12] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
      • Re: [PATCH 00/12] Netfilter/IPVS fixes for net, David Miller
        • Re: [PATCH 00/12] Netfilter/IPVS fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 00/12] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: xt_socket: Restore mark from full sockets only, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1', Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hook, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user, Pablo Neira Ayuso
    • [PATCH 08/12] netfilter: nf_tables: Release memory obtained by kasprintf, Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: ebtables: fix race condition in frame_filter_net_init(), Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: ipset: Fix race between dump and swap, Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: nf_tables: do not dump chain counters if not enabled, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: nf_tables: fix update chain error, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: ipset: pernet ops must be unregistered last, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter/IPVS fixes for net, David Miller
  • [PATCH 00/12] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: ebtables: don't attempt to allocate 0-sized compat array, Pablo Neira Ayuso
      • Re: [PATCH 03/12] netfilter: ebtables: don't attempt to allocate 0-sized compat array, Sergei Shtylyov
    • [PATCH 01/12] netfilter: nf_conntrack_sip: allow duplicate SDP expectations, Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: nf_tables: can't fail after linking rule into active rule list, Pablo Neira Ayuso
    • [PATCH 08/12] netfilter: nf_tables: free set name in error path, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: fix CONFIG_NF_REJECT_IPV6=m link error, Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: conntrack: include kmemleak.h for kmemleak_not_leak(), Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: xt_connmark: Add bit mapping for bit-shift operation., Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: nf_tables: NAT chain and extensions require NF_TABLES, Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_update, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: xt_connmark: do not cast xt_connmark_tginfo1 to xt_connmark_tginfo2, Pablo Neira Ayuso
    • [PATCH 02/12] ipvs: fix rtnl_lock lockups caused by start_sync_thread, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: conntrack: silent a memory leak warning, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter/IPVS fixes for net, David Miller
• [PATCH] iptables: insist that the lock is held., Lorenzo Colitti
  • Re: [PATCH] iptables: insist that the lock is held., Pablo Neira Ayuso
• [PATCH 0/6 RFC] Address NETFILTER_CFG issues, Richard Guy Briggs
  • [PATCH 1/6 RFC] netfilter: normalize x_table function declarations, Richard Guy Briggs
    • Re: [PATCH 1/6 RFC] netfilter: normalize x_table function declarations, Pablo Neira Ayuso
      • Re: [PATCH 1/6 RFC] netfilter: normalize x_table function declarations, Richard Guy Briggs
  • [PATCH 2/6 RFC] netfilter: normalize ebtables function declarations, Richard Guy Briggs
  • [PATCH 3/6 RFC] netfilter: audit only on xtables and ebtables syscall rule or standalone, Richard Guy Briggs
    • Re: [PATCH 3/6 RFC] netfilter: audit only on xtables and ebtables syscall rule or standalone, Pablo Neira Ayuso
      • Re: [PATCH 3/6 RFC] netfilter: audit only on xtables and ebtables syscall rule or standalone, Richard Guy Briggs
        • Re: [PATCH 3/6 RFC] netfilter: audit only on xtables and ebtables syscall rule or standalone, Paul Moore
  • [PATCH 4/6 RFC] netfilter: ebtables: audit table registration, Richard Guy Briggs
    • Re: [PATCH 4/6 RFC] netfilter: ebtables: audit table registration, Paul Moore
  • [PATCH 5/6 RFC] netfilter: add audit operation field, Richard Guy Briggs
    • Re: [PATCH 5/6 RFC] netfilter: add audit operation field, Paul Moore
  • [PATCH 6/6 RFC] netfilter: add audit netns ID, Richard Guy Briggs
    • Re: [PATCH 6/6 RFC] netfilter: add audit netns ID, Pablo Neira Ayuso
      • Re: [PATCH 6/6 RFC] netfilter: add audit netns ID, Richard Guy Briggs
        • Re: [PATCH 6/6 RFC] netfilter: add audit netns ID, Eric W. Biederman
          • Re: [PATCH 6/6 RFC] netfilter: add audit netns ID, Paul Moore
• [PATCH nf] netfilter: conntrack: fix false CRC32c mismatch using paged skb, Davide Caratti
  • Re: [PATCH nf] netfilter: conntrack: fix false CRC32c mismatch using paged skb, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: conntrack: fix false CRC32c mismatch using paged skb, Davide Caratti
      • Re: [PATCH nf] netfilter: conntrack: fix false CRC32c mismatch using paged skb, Davide Caratti
        • Re: [PATCH nf] netfilter: conntrack: fix false CRC32c mismatch using paged skb, Pablo Neira Ayuso
          • Re: [PATCH nf] netfilter: conntrack: fix false CRC32c mismatch using paged skb, Pablo Neira Ayuso
• [PATCH v2 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
  • Re: [PATCH v2 1/1] iptables: Fix crash on malformed iptables-restore, Florian Westphal
    • Message not available
      • Message not available
        • Re: [PATCH v2 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
          • Re: [PATCH v2 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
  • <Possible follow-ups>
  • Re: [PATCH v2 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
• [PATCH v2] extensions: libxt_hashlimit: fix 64-bit printf formats, Alin Nastac
  • Re: [PATCH v2] extensions: libxt_hashlimit: fix 64-bit printf formats, Pablo Neira Ayuso
• [PATCH] extensions: libxt_hashlimit: fix 64-bit printf format, Alin Nastac
  • Re: [PATCH] extensions: libxt_hashlimit: fix 64-bit printf format, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_hashlimit: fix 64-bit printf format, Pablo Neira Ayuso
• [PATCH 1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
  • Re: [1/1] iptables: Fix crash on malformed iptables-restore, Florian Westphal
    • Re: [1/1] iptables: Fix crash on malformed iptables-restore, Oliver Ford
      • Re: [1/1] iptables: Fix crash on malformed iptables-restore, Florian Westphal
• [PATCH nf] xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPAT, Willem de Bruijn
  • Re: [PATCH nf] xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPAT, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: clusterip: switch to nf_register_net_hook, Florian Westphal
  • Re: [PATCH nf-next] netfilter: clusterip: switch to nf_register_net_hook, Pablo Neira Ayuso
• linux-next: build failure after merge of the netfilter tree, Stephen Rothwell
  • Re: linux-next: build failure after merge of the netfilter tree, Willem de Bruijn
    • Re: linux-next: build failure after merge of the netfilter tree, Willem de Bruijn
      • Re: linux-next: build failure after merge of the netfilter tree, Stephen Rothwell
  • <Possible follow-ups>
  • linux-next: build failure after merge of the netfilter tree, Stephen Rothwell
    • Re: linux-next: build failure after merge of the netfilter tree, Cong Wang
      • Re: linux-next: build failure after merge of the netfilter tree, Pablo Neira Ayuso
  • linux-next: build failure after merge of the netfilter tree, Stephen Rothwell
• [PATCH nf v2] ebtables: arpreply: Add the standard target sanity check, gfree . wind
  • Re: [PATCH nf v2] ebtables: arpreply: Add the standard target sanity check, Pablo Neira Ayuso
    • Re: [PATCH nf v2] ebtables: arpreply: Add the standard target sanity check, Pablo Neira Ayuso
      • Re:Re: [PATCH nf v2] ebtables: arpreply: Add the standard target sanity check, Gao Feng
        • Re: Re: [PATCH nf v2] ebtables: arpreply: Add the standard target sanity check, Pablo Neira Ayuso
• [PATCH nf 1/2] netfilter: nf_tables: missing sanitization in data from userspace, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nf_tables: revisit chain/object refcounting from elements, Pablo Neira Ayuso
• [nft PATCH 0/2] monitor: Support printing processes which caused the event, Phil Sutter
  • [nft PATCH 2/2] monitor: Support printing processes which caused the event, Phil Sutter
  • [nft PATCH 1/2] include: Add proc_info symbols to nf_tables.h, Phil Sutter
• [nf-next PATCH] netfilter: nf_tables: Report transactions' process info to user space, Phil Sutter
  • Re: [nf-next PATCH] netfilter: nf_tables: Report transactions' process info to user space, Pablo Neira Ayuso
    • Re: [nf-next PATCH] netfilter: nf_tables: Report transactions' process info to user space, Phil Sutter
      • Re: [nf-next PATCH] netfilter: nf_tables: Report transactions' process info to user space, Pablo Neira Ayuso
        • Re: [nf-next PATCH] netfilter: nf_tables: Report transactions' process info to user space, Phil Sutter
          • Re: [nf-next PATCH] netfilter: nf_tables: Report transactions' process info to user space, Pablo Neira Ayuso
            • Re: [nf-next PATCH] netfilter: nf_tables: Report transactions' process info to user space, Phil Sutter
              • Re: [nf-next PATCH] netfilter: nf_tables: Report transactions' process info to user space, Pablo Neira Ayuso
              • Re: [nf-next PATCH] netfilter: nf_tables: Report transactions' process info to user space, Pablo Neira Ayuso
• Re: [Bug 1145] nft 0.7: expression.c:966: range_expr_value_low: Assertion '0' failed., Florian Westphal
  • Re: [Bug 1145] nft 0.7: expression.c:966: range_expr_value_low: Assertion '0' failed., Phil Sutter
• [PATCH xtables-addons] build: support for Linux 4.12, Ralph Sennhauser
  • Re: [PATCH xtables-addons] build: support for Linux 4.12, Jan Engelhardt
• [PATCH nf] netfilter: nf_tables: can't assume lock is acquired when dumping set elems, Liping Zhang
  • Re: [PATCH nf] netfilter: nf_tables: can't assume lock is acquired when dumping set elems, Pablo Neira Ayuso
• [PATCH nft] src: delete the old cache when dumping is interrupted, Liping Zhang
  • Re: [PATCH nft] src: delete the old cache when dumping is interrupted, Pablo Neira Ayuso
• [PATCH] netfilter: Remove duplicated rcu_read_lock., Taehee Yoo
  • <Possible follow-ups>
  • Re: [PATCH] netfilter: Remove duplicated rcu_read_lock., Julian Anastasov
    • Re: [PATCH] netfilter: Remove duplicated rcu_read_lock., Pablo Neira Ayuso
    • Re: [PATCH] netfilter: Remove duplicated rcu_read_lock., Taehee Yoo
• [PATCH nf] ebtables: arpreply: Add the standard target sanity check, gfree . wind
  • Re: [PATCH nf] ebtables: arpreply: Add the standard target sanity check, Pablo Neira Ayuso
    • Re: [PATCH nf] ebtables: arpreply: Add the standard target sanity check, Pablo Neira Ayuso
      • Re:Re: [PATCH nf] ebtables: arpreply: Add the standard target sanity check, Gao Feng
• [PATCH] net: netfilter: netlink: delete extra spaces, linzhang
  • Re: [PATCH] net: netfilter: netlink: delete extra spaces, Pablo Neira Ayuso
• [PATCH] netfilter: synproxy: fix conntrackd interaction, Eric Leblond
  • Re: [PATCH] netfilter: synproxy: fix conntrackd interaction, Jesper Dangaard Brouer
    • [PATCH] netfilter: synproxy: fix conntrackd interaction, Eric Leblond
      • Re: [PATCH] netfilter: synproxy: fix conntrackd interaction, Pablo Neira Ayuso
        • Message not available
          • Re: [PATCH] netfilter: synproxy: fix conntrackd interaction, Pablo Neira Ayuso
            • Re: [PATCH] netfilter: synproxy: fix conntrackd interaction, Eric Leblond
• RFC: Ideas about possible solutions for nfbz#949, Phil Sutter
  • Re: RFC: Ideas about possible solutions for nfbz#949, Pablo Neira Ayuso
    • Re: RFC: Ideas about possible solutions for nfbz#949, Phil Sutter
      • Re: RFC: Ideas about possible solutions for nfbz#949, Pablo Neira Ayuso
        • Re: RFC: Ideas about possible solutions for nfbz#949, Phil Sutter
• [nft PATCH RFC] monitor: Support printing processes which caused the event, Phil Sutter
  • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Florian Westphal
    • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Pablo Neira Ayuso
      • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Florian Westphal
        • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Phil Sutter
          • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Florian Westphal
            • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Phil Sutter
              • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Florian Westphal
                • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Pablo Neira Ayuso
                  • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Florian Westphal
                    • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Phil Sutter
                      • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Pablo Neira Ayuso
                    • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Pablo Neira Ayuso
  • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Pablo Neira Ayuso
  • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Arturo Borrero Gonzalez
    • Re: [nft PATCH RFC] monitor: Support printing processes which caused the event, Phil Sutter
• [PATCH nf] xtables: zero padding in data_to_user, Willem de Bruijn
  • Re: [PATCH nf] xtables: zero padding in data_to_user, Pablo Neira Ayuso
• [PATCH nft 00/10] switch l4 dependency to meta l4proto, Florian Westphal
  • [PATCH nft 01/10] src: allow update of net base w. meta l4proto icmpv6, Florian Westphal
    • Re: [PATCH nft 01/10] src: allow update of net base w. meta l4proto icmpv6, Pablo Neira Ayuso
  • [PATCH nft 05/10] tests: meta: add icmpv6 test case, Florian Westphal
  • [PATCH nft 06/10] netlink_delinearize: reject: remove dependency for tcp-resets, Florian Westphal
  • [PATCH nft 02/10] src: ipv6: switch implicit dependencies to meta l4proto, Florian Westphal
    • Re: [PATCH nft 02/10] src: ipv6: switch implicit dependencies to meta l4proto, Pablo Neira Ayuso
  • [PATCH nft 07/10] tests: add ip reject with tcp and check for mark too, Florian Westphal
    • Re: [PATCH nft 07/10] tests: add ip reject with tcp and check for mark too, Pablo Neira Ayuso
      • Re: [PATCH nft 07/10] tests: add ip reject with tcp and check for mark too, Florian Westphal
  • [PATCH nft 03/10] src: treat ip6 nexthdr as a protocol, Florian Westphal
    • Re: [PATCH nft 03/10] src: treat ip6 nexthdr as a protocol, Pablo Neira Ayuso
  • [PATCH nft 08/10] src: add a comment wrt. reject dependency insertion, Florian Westphal
  • [PATCH nft 10/10] tests: fix up meta l4proto change for ip family, Florian Westphal
  • [PATCH nft 09/10] src: ip: switch implicit dependencies to meta l4proto too, Florian Westphal
    • Re: [PATCH nft 09/10] src: ip: switch implicit dependencies to meta l4proto too, Pablo Neira Ayuso
  • [PATCH nft 04/10] tests: fix up meta l4proto change for ip6 family, Florian Westphal
    • Re: [PATCH nft 04/10] tests: fix up meta l4proto change for ip6 family, Pablo Neira Ayuso
      • Re: [PATCH nft 04/10] tests: fix up meta l4proto change for ip6 family, Florian Westphal
        • Re: [PATCH nft 04/10] tests: fix up meta l4proto change for ip6 family, Pablo Neira Ayuso
          • Re: [PATCH nft 04/10] tests: fix up meta l4proto change for ip6 family, Florian Westphal
            • Re: [PATCH nft 04/10] tests: fix up meta l4proto change for ip6 family, Pablo Neira Ayuso
              • Re: [PATCH nft 04/10] tests: fix up meta l4proto change for ip6 family, Florian Westphal
• [PATCH nft] netlink_delink_delinearize: don't store dependency unless relop checks is eq check, Florian Westphal
  • Re: [PATCH nft] netlink_delink_delinearize: don't store dependency unless relop checks is eq check, Pablo Neira Ayuso
• [conntrack-tools PATCH 1/2] conntrackd: consolidate more code to use resync_send(), Arturo Borrero Gonzalez
  • [conntrack-tools PATCH 2/2] conntrackd: request resync at startup, Arturo Borrero Gonzalez
    • Re: [conntrack-tools PATCH 2/2] conntrackd: request resync at startup, Pablo Neira Ayuso
  • Re: [conntrack-tools PATCH 1/2] conntrackd: consolidate more code to use resync_send(), Pablo Neira Ayuso
• Changing destination ip and port of TEE'ed udp, Sergey Yermakov
  • Re: Changing destination ip and port of TEE'ed udp, Jan Engelhardt
  • Message not available
    • Re: Changing destination ip and port of TEE'ed udp, Sergey Yermakov
• [GIT PULL 0/1] IPVS Fixes for v4.12, Simon Horman
  • [PATCH] ipvs: SNAT packet replies only for NATed connections, Simon Horman
  • Re: [GIT PULL 0/1] IPVS Fixes for v4.12, Pablo Neira Ayuso
• [PATCH nft] netlink_delinearize: don't kill dependencies accross statements, Florian Westphal
  • Re: [PATCH nft] netlink_delinearize: don't kill dependencies accross statements, Pablo Neira Ayuso
    • Re: [PATCH nft] netlink_delinearize: don't kill dependencies accross statements, Florian Westphal
• .config for iptables icmp rule delete failure, Richard Guy Briggs
  • Re: .config for iptables icmp rule delete failure, Florian Westphal
    • Re: .config for iptables icmp rule delete failure, Willem de Bruijn
      • Re: .config for iptables icmp rule delete failure, Florian Westphal
      • Re: .config for iptables icmp rule delete failure, Willem de Bruijn
        • Re: .config for iptables icmp rule delete failure, Willem de Bruijn
• [PATCH nf V2 0/2] netfilter: reject cthelper del request if it is in use, Liping Zhang
  • [PATCH nf V2 1/2] netfilter: introduce nf_conntrack_helper_put helper function, Liping Zhang
    • Re: [PATCH nf V2 1/2] netfilter: introduce nf_conntrack_helper_put helper function, Pablo Neira Ayuso
  • [PATCH nf V2 2/2] netfilter: nfnl_cthelper: reject del request if helper obj is in use, Liping Zhang
    • Re: [PATCH nf V2 2/2] netfilter: nfnl_cthelper: reject del request if helper obj is in use, Pablo Neira Ayuso
• How to reinject a packet (skb) at some later point in time, Pavel Vajarov
  • Re: How to reinject a packet (skb) at some later point in time, Florian Westphal
    • Re: How to reinject a packet (skb) at some later point in time, Pavel Vajarov
• [PATCH nf] netfilter: don't setup nat info for confirmed ct, Liping Zhang
  • Re: [PATCH nf] netfilter: don't setup nat info for confirmed ct, Florian Westphal
  • Re: [PATCH nf] netfilter: don't setup nat info for confirmed ct, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: don't setup nat info for confirmed ct, Pablo Neira Ayuso
• [nft PATCH v2] List handles of added rules if requested, Phil Sutter
  • Re: [nft PATCH v2] List handles of added rules if requested, Pablo Neira Ayuso
    • Re: [nft PATCH v2] List handles of added rules if requested, Phil Sutter
• [PATCH 1/1] libxtables: Display weird character warning for wildcards, Oliver Ford
  • Re: [PATCH 1/1] libxtables: Display weird character warning for wildcards, Pablo Neira Ayuso
• [PATCH nf v6 1/3] netfilter: helper: Rename struct nf_ct_helper_expectfn to nf_ct_nat_helper, gfree . wind
  • [PATCH nf v6 2/3] netfilter: nat_helper: Register one nf_ct_nat_helper each proto nat module, gfree . wind
    • Re: [PATCH nf v6 2/3] netfilter: nat_helper: Register one nf_ct_nat_helper each proto nat module, Pablo Neira Ayuso
  • [PATCH nf v6 3/3] netfilter: nat_helper: Remove the expectations when its module is unloaded, gfree . wind
    • Re: [PATCH nf v6 3/3] netfilter: nat_helper: Remove the expectations when its module is unloaded, Liping Zhang
      • Re:Re: [PATCH nf v6 3/3] netfilter: nat_helper: Remove the expectations when its module is unloaded, Gao Feng
• [PATCH nft] parser: allow listing sets in one table, Florian Westphal
  • Re: [PATCH nft] parser: allow listing sets in one table, Pablo Neira Ayuso
• [nft PATCH] List handles of added rules if requested, Phil Sutter
  • Re: [nft PATCH] List handles of added rules if requested, Pablo Neira Ayuso
    • Re: [nft PATCH] List handles of added rules if requested, Florian Westphal
      • Re: [nft PATCH] List handles of added rules if requested, Pablo Neira Ayuso
        • Re: [nft PATCH] List handles of added rules if requested, Phil Sutter
          • Re: [nft PATCH] List handles of added rules if requested, Pablo Neira Ayuso
            • Re: [nft PATCH] List handles of added rules if requested, Puustinen, Ismo
              • Re: [nft PATCH] List handles of added rules if requested, Pablo Neira Ayuso
            • Re: [nft PATCH] List handles of added rules if requested, Florian Westphal
      • Re: [nft PATCH] List handles of added rules if requested, Thomas Woerner