Linux Netfilter / IP Tables Devel

Date Index

[Prev Page][Next Page]

Re: net: suspicious RCU usage in nf_hook, (continued)
- Re: net: suspicious RCU usage in nf_hook, Cong Wang
  - Re: net: suspicious RCU usage in nf_hook, Cong Wang
- Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
  - Re: net: suspicious RCU usage in nf_hook, Cong Wang
    - Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
      - Re: net: suspicious RCU usage in nf_hook, Cong Wang
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Cong Wang
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Cong Wang
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Cong Wang
[ANNOUNCE] iptables 1.6.1 release, Pablo Neira Ayuso
[PATCH 1/2 conntrack-tools] conntrackd: cthelper: Free pktb after use, Kevin Cernekee
- [PATCH 2/2 conntrack-tools] conntrackd: config: Free strdup()ed tokens, Kevin Cernekee
  - Re: [PATCH 2/2 conntrack-tools] conntrackd: config: Free strdup()ed tokens, Pablo Neira Ayuso
- Re: [PATCH 1/2 conntrack-tools] conntrackd: cthelper: Free pktb after use, Pablo Neira Ayuso
[RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
- Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Steve Grubb
  - Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
    - Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
      - Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Steve Grubb
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Paul Moore
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Steve Grubb
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Paul Moore
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Paul Moore
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Paul Moore
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
[PATCH conntrack-tools] conntrackd: cthelper: Don't leak nat_tuple, Kevin Cernekee
- Re: [PATCH conntrack-tools] conntrackd: cthelper: Don't leak nat_tuple, Pablo Neira Ayuso
[PATCH V2 1/2] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Kevin Cernekee
- [PATCH V2 2/2] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Kevin Cernekee
  - Re: [PATCH V2 2/2] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Pablo Neira Ayuso
- Re: [PATCH V2 1/2] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Pablo Neira Ayuso
[PATCH net] tcp: don't annotate mark on control socket from tcp_v6_send_response(), Pablo Neira Ayuso
- Re: [PATCH net] tcp: don't annotate mark on control socket from tcp_v6_send_response(), David Miller
[PATCH nft v3 6/6] tests: py: Add tests for stateful objects, Elise Lennion
[PATCH nft v3 4/6] src: Allow list stateful objects in a table, Elise Lennion
[PATCH nft v3 5/6] tests: py: Add suport for stateful objects in python tests, Elise Lennion
[PATCH nft v3 3/6] evaluate: Evaluate table name before reset stateful objects in a table, Elise Lennion
[PATCH nft v3 2/6] src: Allow list single stateful object, Elise Lennion
[PATCH nft v3 1/6] src: Allow reset single stateful object, Elise Lennion
- Re: [PATCH nft v3 1/6] src: Allow reset single stateful object, Pablo Neira Ayuso
Re: ip_rcv_finish() NULL pointer kernel panic, Eric Dumazet
- Re: ip_rcv_finish() NULL pointer kernel panic, Florian Westphal
  - Re: ip_rcv_finish() NULL pointer kernel panic, David Miller
    - Re: ip_rcv_finish() NULL pointer kernel panic, Dan Streetman
      - Re: ip_rcv_finish() NULL pointer kernel panic, Florian Westphal
  - Re: ip_rcv_finish() NULL pointer kernel panic, Eric Dumazet
    - Re: ip_rcv_finish() NULL pointer kernel panic, Eric Dumazet
- Re: ip_rcv_finish() NULL pointer kernel panic, Roy Keene
[PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, David Windsor
- Re: [PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, Julian Anastasov
  - Re: [PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, Simon Horman
    - Re: [PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, Pablo Neira Ayuso
      - Re: [PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, Simon Horman
[PATCH] iptables: fix the wrong appending of jump verdict after the comment., Shyam Saini
- Re: [PATCH] iptables: fix the wrong appending of jump verdict after the comment., Shivani Bhardwaj
- Re: [PATCH] iptables: fix the wrong appending of jump verdict after the comment., Shivani Bhardwaj
  - Re: [PATCH] iptables: fix the wrong appending of jump verdict after the comment., Pablo Neira Ayuso
[nft PATCH v2] payload: explicit network ctx assignation for icmp/icmp6 in special families, Arturo Borrero Gonzalez
- Re: [nft PATCH v2] payload: explicit network ctx assignation for icmp/icmp6 in special families, Pablo Neira Ayuso
[PATCH nf,v2 1/3] netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCL, Pablo Neira Ayuso
- [PATCH nf,v2 2/3] netfilter: nf_tables: deconstify walk callback function, Pablo Neira Ayuso
- [PATCH nf,v2 3/3] netfilter: nf_tables: bump set->ndeact on set flush, Pablo Neira Ayuso
[PATCH nft v2 2/2] src: Allow list single stateful object, Elise Lennion
[PATCH nft v2 1/2] src: Allow reset single stateful object, Elise Lennion
- Re: [PATCH nft v2 1/2] src: Allow reset single stateful object, Pablo Neira Ayuso
  - Re: [PATCH nft v2 1/2] src: Allow reset single stateful object, Elise Lennion
[RFC PATCH 0/2] restore original default of nf_conntrack_helper sysctl, Jiri Kosina
- Re: [RFC PATCH 0/2] restore original default of nf_conntrack_helper sysctl, Linus Torvalds
  - Re: [RFC PATCH 0/2] restore original default of nf_conntrack_helper sysctl, Pablo Neira Ayuso
    - [PATCH] netfilter: nf_ct_helper: warn when not applying default helper assignment (was Re: [RFC PATCH 0/2] restore original default of nf_conntrack_helper sysctl), Jiri Kosina
      - [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Jiri Kosina
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Linus Torvalds
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Jiri Kosina
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Joe Perches
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Pablo Neira Ayuso
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Jiri Kosina
        
        [PATCH v3] netfilter: nf_ct_helper: warn when not applying default helper assignment, Jiri Kosina
        
        Re: [PATCH v3] netfilter: nf_ct_helper: warn when not applying default helper assignment, Pablo Neira Ayuso
[PATCH 2/2] Revert "netfilter: fix nf_conntrack_helper documentation", Jiri Kosina
[PATCH 1/2] Revert "netfilter: nf_ct_helper: disable automatic helper assignment", Jiri Kosina
[PATCH nft] tests: shell: Add test for flush bug on sets with size, Elise Lennion
- Re: [PATCH nft] tests: shell: Add test for flush bug on sets with size, Pablo Neira Ayuso
[PATCH nft 2/2] src: Allow list single stateful object, Elise Lennion
[PATCH nft 1/2] src: Allow reset single stateful object, Elise Lennion
[PATCH nf-next v4 0/7] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Florian Westphal
- [PATCH v4 nf-next 1/7] netfilter: conntrack: no need to pass ctinfo to error handler, Florian Westphal
- [PATCH v4 nf-next 2/7] netfilter: reset netfilter state when duplicating packet, Florian Westphal
- [PATCH v4 nf-next 3/7] netfilter: reduce direct skb->nfct usage, Florian Westphal
- [PATCH v4 nf-next 4/7] skbuff: add and use skb_nfct helper, Florian Westphal
- [PATCH v4 nf-next 5/7] netfilter: add and use nf_ct_set helper, Florian Westphal
- [PATCH v4 nf-next 6/7] netfilter: guarantee 8 byte minalign for template addresses, Florian Westphal
- [PATCH v4 nf-next 7/7] netfilter: merge ctinfo into nfct pointer storage area, Florian Westphal
- Re: [PATCH nf-next v4 0/7] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Pablo Neira Ayuso
[PATCH nft] rule: check for EINTR error from cache_init_objects() for stateful objects, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH nft] rule: check for EINTR error from cache_init_objects() for stateful objects, Pablo Neira Ayuso
  - [PATCH nft] tests: shell: validate set size, Pablo Neira Ayuso
[PATCH nf-next v3 0/7] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Florian Westphal
- [PATCH v3 nf-next 1/7] netfilter: conntrack: no need to pass ctinfo to error handler, Florian Westphal
- [PATCH v3 nf-next 2/7] netfilter: reset netfilter state when duplicating packet, Florian Westphal
- [PATCH v3 nf-next 3/7] netfilter: reduce direct skb->nfct usage, Florian Westphal
- [PATCH v3 nf-next 4/7] skbuff: add and use skb_nfct helper, Florian Westphal
- [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Florian Westphal
  - Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Pablo Neira Ayuso
    - Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Florian Westphal
      - Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Jozsef Kadlecsik
        
        Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Florian Westphal
        
        Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Jozsef Kadlecsik
- [PATCH v3 nf-next 6/7] netfilter: guarantee 8 byte minalign for template addresses, Florian Westphal
- [PATCH v3 nf-next 7/7] netfilter: merge ctinfo into nfct pointer storage area, Florian Westphal
EPOLLERR on memory mapped netlink socket, prashantkumar dhotre
- Re: EPOLLERR on memory mapped netlink socket, prashantkumar dhotre
  - Re: EPOLLERR on memory mapped netlink socket, Patrick PIGNOL
- Re: EPOLLERR on memory mapped netlink socket, Pablo Neira Ayuso
[PATCH nf] netfilter: nft_log: restrict the log prefix length to 127, Liping Zhang
- Re: [PATCH nf] netfilter: nft_log: restrict the log prefix length to 127, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: nft_log: restrict the log prefix length to 127, Pablo Neira Ayuso
[PATCH nf-next v4 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, fgao
- Re: [PATCH nf-next v4 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Pablo Neira Ayuso
[PATCH 1/2 nf] netfilter: nf_tables: deconstify walk callback function, Pablo Neira Ayuso
- [PATCH 2/2 nf] netfilter: nf_tables: bump set->ndeact on set flush, Pablo Neira Ayuso
[PATCH nf V2] netfilter: nf_tables: validate the name size when possible, Liping Zhang
- Re: [PATCH nf V2] netfilter: nf_tables: validate the name size when possible, Pablo Neira Ayuso
[nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Arturo Borrero Gonzalez
- Re: [nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Pablo Neira Ayuso
  - Re: [nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Pablo Neira Ayuso
- <Possible follow-ups>
- [nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Arturo Borrero Gonzalez
  - Re: [nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Arturo Borrero Gonzalez
[PATCH nf-next v3 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, fgao
[PATCH nft] netlink: don't bail out on dump errors, Pablo Neira Ayuso
[PATCH nft] tests: shell: Add test for set element leak bug, Elise Lennion
- Re: [PATCH nft] tests: shell: Add test for set element leak bug, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Liping Zhang
- Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Liping Zhang
    - Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Patrick PIGNOL
    - Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Florian Westphal
    - Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Patrick PIGNOL
[PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, fgao
- Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Feng Gao
  - Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Liping Zhang
    - Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Feng Gao
      - Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Feng Gao
[nf-next:fw 18/18] net/netfilter/nf_conntrack_standalone.c:647:2: error: call to '__compiletime_assert_647' declared with attribute error: BUILD_BUG_ON failed: NFCT_INFOMASK >= ARCH_KMALLOC_MINALIGN, kbuild test robot
[PATCH nft] src: Honor obligatory stateless printing of flow tables, Elise Lennion
- Re: [PATCH nft] src: Honor obligatory stateless printing of flow tables, Pablo Neira Ayuso
[PATCH nf-next 0/7] nf_tables set enhancements, Pablo Neira Ayuso
- [PATCH nf-next 2/7] netfilter: nf_tables: use struct nft_set_iter in set element flush, Pablo Neira Ayuso
- [PATCH nf-next 1/7] netfilter: nf_tables: pass netns to set->ops->remove(), Pablo Neira Ayuso
- [PATCH nf-next 4/7] netfilter: nf_tables: add flush field to struct nft_set_iter, Pablo Neira Ayuso
- [PATCH nf-next 3/7] netfilter: nf_tables: rename deactivate_one() to flush(), Pablo Neira Ayuso
- [PATCH nf-next 6/7] netfilter: nf_tables: add space notation to sets, Pablo Neira Ayuso
- [PATCH nf-next 5/7] netfilter: nf_tables: rename struct nft_set_estimate class field, Pablo Neira Ayuso
- [PATCH nf-next 7/7] netfilter: nf_tables: add bitmap set type, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: fix set->nelem leak, Pablo Neira Ayuso
[PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Florian Westphal
- Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Pablo Neira Ayuso
  - Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Florian Westphal
    - Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Pablo Neira Ayuso
      - Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Florian Westphal
      - Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Victor Julien
[PATCH] iptables-save: Exit with error if unable to open proc file, Thomas Habets
- Re: [PATCH] iptables-save: Exit with error if unable to open proc file, Florian Westphal
- <Possible follow-ups>
- Re: [PATCH] iptables-save: Exit with error if unable to open proc file, thomas
  - Re: [PATCH] iptables-save: Exit with error if unable to open proc file, Florian Westphal
- Re: [PATCH] iptables-save: Exit with error if unable to open proc file, thomas
[PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Florian Westphal
- Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Denys Fedoryshchenko
- Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Nicolas Dichtel
- Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Denys Fedoryshchenko
  - Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Pablo Neira Ayuso
[nft PATCH 0/3] Boolean comparison and exthdr existence match support, Phil Sutter
- [nft PATCH 2/3] exthdr: Add support for exthdr specific flags, Phil Sutter
- [nft PATCH 3/3] exthdr: Implement exthdr existence check, Phil Sutter
- [nft PATCH 1/3] Implement boolean comparison in relational expression, Phil Sutter
- Re: [nft PATCH 0/3] Boolean comparison and exthdr existence match support, Pablo Neira Ayuso
  - Re: [nft PATCH 0/3] Boolean comparison and exthdr existence match support, Phil Sutter
    - Re: [nft PATCH 0/3] Boolean comparison and exthdr existence match support, Pablo Neira Ayuso
      - Re: [nft PATCH 0/3] Boolean comparison and exthdr existence match support, Phil Sutter
[nf-next PATCH] netfilter: nf_tables: exthdr: Add support for existence check, Phil Sutter
- Re: [nf-next PATCH] netfilter: nf_tables: exthdr: Add support for existence check, Pablo Neira Ayuso
[libnftnl PATCH] exthdr: Add support for exthdr flags, Phil Sutter
[nf-next PATCH] netfilter: nf_tables: cmp: support boolean operation, Phil Sutter
tcp state in conntrack destroy events, Victor Julien
- Re: tcp state in conntrack destroy events, Florian Westphal
  - Re: tcp state in conntrack destroy events, Victor Julien
  - Re: tcp state in conntrack destroy events, Jarno Rajahalme
    - Re: tcp state in conntrack destroy events, Florian Westphal
[PATCH nft 2/2] tests: py: Use stateless option on tests, Elise Lennion
- Re: [PATCH nft 2/2] tests: py: Use stateless option on tests, Pablo Neira Ayuso
  - Re: [PATCH nft 2/2] tests: py: Use stateless option on tests, Pablo Neira Ayuso
[PATCH nft 1/2] doc: Include stateless option, Elise Lennion
- Re: [PATCH nft 1/2] doc: Include stateless option, Pablo Neira Ayuso
AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
- Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
  - Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
    - Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
      - Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
    - Re: AUDIT_NETFILTER_PKT message format, Paul Moore
      - Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Patrick PIGNOL
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Patrick PIGNOL
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Pablo Neira Ayuso
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
[RFC/PATCH 0/3] Fix ctnetlink regressions, Kevin Cernekee
- [RFC/PATCH 3/3] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Kevin Cernekee
  - Re: [RFC/PATCH 3/3] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Doug Anderson
- [RFC/PATCH 2/3] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Kevin Cernekee
  - Re: [RFC/PATCH 2/3] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Doug Anderson
- [RFC/PATCH 1/3] netfilter: ctnetlink: Fix regression in CTA_TIMEOUT processing, Kevin Cernekee
  - Re: [RFC/PATCH 1/3] netfilter: ctnetlink: Fix regression in CTA_TIMEOUT processing, Doug Anderson
- Re: [RFC/PATCH 0/3] Fix ctnetlink regressions, Pablo Neira Ayuso
[PATCH nft v2] src: Allow to list ruleset without stateful information, Elise Lennion
- Re: [PATCH nft v2] src: Allow to list ruleset without stateful information, Pablo Neira Ayuso
  - Re: [PATCH nft v2] src: Allow to list ruleset without stateful information, Pablo Neira Ayuso
[stable] bridge: netfilter: Fix dropping packets that moving through bridge interface, Artur Molchanov
- Re: [stable] bridge: netfilter: Fix dropping packets that moving through bridge interface, Pablo Neira Ayuso
  - Re: [stable] bridge: netfilter: Fix dropping packets that moving through bridge interface, Greg Kroah-Hartman
[PATCH nf] netfilter: conntrack: remove GC_MAX_EVICTS break, Florian Westphal
- Re: [PATCH nf] netfilter: conntrack: remove GC_MAX_EVICTS break, Nicolas Dichtel
  - Re: [PATCH nf] netfilter: conntrack: remove GC_MAX_EVICTS break, Pablo Neira Ayuso
ANNOUNCE: Netdev 2.1 Call For Proposals Opened!, Jamal Hadi Salim
[PATCH nf-next v2 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, fgao
- Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, Pablo Neira Ayuso
[PATCH nft] evaluate: fix export length and data corruption, Florian Westphal
- Re: [PATCH nft] evaluate: fix export length and data corruption, Pablo Neira Ayuso
[PATCH nf] netfilter: conntrack: refine gc worker heuristics, redux, Florian Westphal
- Re: [PATCH nf] netfilter: conntrack: refine gc worker heuristics, redux, Nicolas Dichtel
  - Re: [PATCH nf] netfilter: conntrack: refine gc worker heuristics, redux, Florian Westphal
4.9 conntrack performance issues, Denys Fedoryshchenko
- Re: 4.9 conntrack performance issues, Florian Westphal
  - Re: 4.9 conntrack performance issues, Denys Fedoryshchenko
    - Re: 4.9 conntrack performance issues, Florian Westphal
      - Re: 4.9 conntrack performance issues, Denys Fedoryshchenko
- Re: 4.9 conntrack performance issues, Guillaume Nault
  - Re: 4.9 conntrack performance issues, Denys Fedoryshchenko
    - Re: 4.9 conntrack performance issues, Guillaume Nault
ANNOUNCE: Netdev 2.1 in Montreal, Jamal Hadi Salim
[PATCH] netfilter: ipt_CLUSTERIP: fix build error without procfs, Arnd Bergmann
- Re: [PATCH] netfilter: ipt_CLUSTERIP: fix build error without procfs, Pablo Neira Ayuso
[PATCH nft] src: Allow to list ruleset without stateful information, Elise Lennion
- Re: [PATCH nft] src: Allow to list ruleset without stateful information, Pablo Neira Ayuso
[PATCH nft] build: add missing backslash to list of CFLAGS, Tobias Klauser
- Re: [PATCH nft] build: add missing backslash to list of CFLAGS, Pablo Neira Ayuso
[PATCH libnftnl] expr: Add const qualifiers to *2str translation arrays, Tobias Klauser
- Re: [PATCH libnftnl] expr: Add const qualifiers to *2str translation arrays, Pablo Neira Ayuso
[PATCH] examples: Remove the use of nftnl_mnl_batch_put(), Elise Lennion
- Re: [PATCH] examples: Remove the use of nftnl_mnl_batch_put(), Pablo Neira Ayuso
[PATCH nf-next 1/1] netfilter: nf_tables: Remove the rcu lock for dump functions, fgao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Remove the rcu lock for dump functions, Feng Gao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Remove the rcu lock for dump functions, Pablo Neira Ayuso
  - Re: [PATCH nf-next 1/1] netfilter: nf_tables: Remove the rcu lock for dump functions, Gao Feng
Re: probably serious conntrack/netfilter panic, 4.8.14, timers and intel turbo, Guillaume Nault
- Re: probably serious conntrack/netfilter panic, 4.8.14, timers and intel turbo, Denys Fedoryshchenko
- Re: probably serious conntrack/netfilter panic, 4.8.14, timers and intel turbo, Denys Fedoryshchenko
nftables conntrack set ops for zone, helper assignment, etc., Florian Westphal
- Re: nftables conntrack set ops for zone, helper assignment, etc., Pablo Neira Ayuso
  - Re: nftables conntrack set ops for zone, helper assignment, etc., Florian Westphal
    - Re: nftables conntrack set ops for zone, helper assignment, etc., Pablo Neira Ayuso
      - Re: nftables conntrack set ops for zone, helper assignment, etc., Florian Westphal
        
        Re: nftables conntrack set ops for zone, helper assignment, etc., Pablo Neira Ayuso
        
        Re: nftables conntrack set ops for zone, helper assignment, etc., Florian Westphal
[PATCH nf-next 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, fgao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, Pablo Neira Ayuso
  - Re: [PATCH nf-next 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, Gao Feng
    - Re: [PATCH nf-next 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, Pablo Neira Ayuso
RFC: nftables: Boolean operation, two alternatives, Phil Sutter
[PATCH nf-next 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, fgao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Pablo Neira Ayuso
[PATCH] netfilter: Fix typo in NF_CONNTRACK Kconfig option description, William Breathitt Gray
- Re: [PATCH] netfilter: Fix typo in NF_CONNTRACK Kconfig option description, Pablo Neira Ayuso
net_device features, Peter Skvarka
[PATCH iptables] extensions: libxt_rpfilter: add translation to nft, Liping Zhang
- Re: [PATCH iptables] extensions: libxt_rpfilter: add translation to nft, Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: pkttype: unnecessary to check ipv6 multicast address, Liping Zhang
- [PATCH nf-next 2/2] netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family, Liping Zhang
  - Re: [PATCH nf-next 2/2] netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family, Pablo Neira Ayuso
- Re: [PATCH nf-next 1/2] netfilter: pkttype: unnecessary to check ipv6 multicast address, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: fix possible oops when dumping stateful objects, Liping Zhang
- Re: [PATCH nf] netfilter: nf_tables: fix possible oops when dumping stateful objects, Pablo Neira Ayuso
[PATCH nf] netfilter: rpfilter: fix incorrect loopback packet judgment, Liping Zhang
- Re: [PATCH nf] netfilter: rpfilter: fix incorrect loopback packet judgment, Pablo Neira Ayuso
[PATCH] treewide: fix semicolon.cocci warnings, kbuild test robot
- Re: [PATCH] treewide: fix semicolon.cocci warnings, Michal Hocko
[PATCH nft 2/2] tests: shell: add maps tests, Elise Lennion
- Re: [PATCH nft 2/2] tests: shell: add maps tests, Pablo Neira Ayuso
[PATCH nft 1/2] src: sort set elements in netlink_get_setelems(), Elise Lennion
- Re: [PATCH nft 1/2] src: sort set elements in netlink_get_setelems(), Pablo Neira Ayuso
[PATCH nf-next 1/1] netfilter: nf_tables: Remove one useless condition check in nf_tables_newobj, fgao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Remove one useless condition check in nf_tables_newobj, Feng Gao
[PATCH V2 conntrack-tools] conntrackd: cthelper: ssdp: Track UPnP eventing, Kevin Cernekee
- Re: [PATCH V2 conntrack-tools] conntrackd: cthelper: ssdp: Track UPnP eventing, Kevin Cernekee
- Re: [PATCH V2 conntrack-tools] conntrackd: cthelper: ssdp: Track UPnP eventing, Pablo Neira Ayuso
[PATCH nft] evaluate: Remove cache_update() in cmd_evaluate_flush(), Elise Lennion
- Re: [PATCH nft] evaluate: Remove cache_update() in cmd_evaluate_flush(), Anatole Denis
[PATCH nf-next v2 0/4] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Florian Westphal
- [PATCH nf-next v2 4/4] netfilter: merge ctinfo into nfct pointer storage area, Florian Westphal
  - Re: [PATCH nf-next v2 4/4] netfilter: merge ctinfo into nfct pointer storage area, Pablo Neira Ayuso
- [PATCH nf-next v2 2/4] netfilter: reset netfilter state when duplicating packet, Florian Westphal
- [PATCH nf-next v2 1/4] netfilter: conntrack: no need to pass ctinfo to error handler, Florian Westphal
- [PATCH nf-next v2 3/4] netfilter: reduce direct skb->nfct usage, Florian Westphal
[PATCH iptables] iptables 1.6.1 release, Pablo Neira Ayuso
[PATCH libnetfilter_cttimeout] Use __EXPORTED rather than EXPORT_SYMBOL, Kevin Cernekee
- [PATCH libnetfilter_cthelper] Use __EXPORTED rather than EXPORT_SYMBOL, Kevin Cernekee
  - Re: [PATCH libnetfilter_cthelper] Use __EXPORTED rather than EXPORT_SYMBOL, Pablo Neira Ayuso
- Re: [PATCH libnetfilter_cttimeout] Use __EXPORTED rather than EXPORT_SYMBOL, Pablo Neira Ayuso
[PATCH] netfilter: nf_tables: fix spelling mistakes, Alexander Alemayhu
- Re: [PATCH] netfilter: nf_tables: fix spelling mistakes, Pablo Neira Ayuso
[PATCH nf-next 0/4] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Florian Westphal
- [PATCH nf-next 1/4] netfilter: conntrack: no need to pass ctinfo to error handler, Florian Westphal
- [PATCH nf-next 3/4] netfilter: reduce direct skb->nfct usage, Florian Westphal
- [PATCH nf-next 4/4] netfilter: merge ctinfo into nfct pointer storage area, Florian Westphal
  - Re: [PATCH nf-next 4/4] netfilter: merge ctinfo into nfct pointer storage area, kbuild test robot
  - Re: [PATCH nf-next 4/4] netfilter: merge ctinfo into nfct pointer storage area, kbuild test robot
- [PATCH nf-next 2/4] netfilter: reset netfilter state when duplicating packet, Florian Westphal
[PATCH net-next 5/8] bridge: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH net-next] nfnetlink/queue: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH net-next v2 13/27] bridge: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH net-next v2 16/27] nfnetlink/queue: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH] uapi: use wildcards to list files, Nicolas Dichtel
- Re: [PATCH] uapi: use wildcards to list files, David Miller
- Re: [PATCH] uapi: use wildcards to list files, Arnd Bergmann
  - Re: [PATCH] uapi: use wildcards to list files, Nicolas Dichtel
    - [PATCH v2 0/7] uapi: export all headers under uapi directories, Nicolas Dichtel
      - [PATCH v2 1/7] arm: put types.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v2 1/7] arm: put types.h in uapi, Arnd Bergmann
        
        Re: [PATCH v2 1/7] arm: put types.h in uapi, Russell King - ARM Linux
      - [PATCH v2 5/7] Makefile.headersinst: cleanup input files, Nicolas Dichtel
      - [PATCH v2 4/7] x86: put msr-index.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v2 4/7] x86: put msr-index.h in uapi, Borislav Petkov
        
        Re: [PATCH v2 4/7] x86: put msr-index.h in uapi, Andy Shevchenko
      - [PATCH v2 3/7] nios2: put setup.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v2 3/7] nios2: put setup.h in uapi, Arnd Bergmann
      - [PATCH v2 2/7] h8300: put bitsperlong.h in uapi, Nicolas Dichtel
      - [PATCH v2 6/7] Makefile.headersinst: remove destination-y option, Nicolas Dichtel
      - [PATCH v2 7/7] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Daniel Vetter
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Russell King - ARM Linux
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Christoph Hellwig
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Jan Engelhardt
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Jeff Epler
        
        Re: [Linux-c6x-dev] [PATCH v2 7/7] uapi: export all headers under uapi directories, Mark Salter
      - Re: [PATCH v2 0/7] uapi: export all headers under uapi directories, Arnd Bergmann
        
        Re: [PATCH v2 0/7] uapi: export all headers under uapi directories, Jesper Nilsson
        
        [PATCH v3 0/8] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        [PATCH v3 4/8] x86: stop exporting msr-index.h to userland, Nicolas Dichtel
        
        [PATCH v3 3/8] nios2: put setup.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v3 3/8] nios2: put setup.h in uapi, Tobias Klauser
        
        [PATCH v3 5/8] Makefile.headersinst: cleanup input files, Nicolas Dichtel
        
        [PATCH v3 2/8] h8300: put bitsperlong.h in uapi, Nicolas Dichtel
        
        [PATCH v3 7/8] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        [PATCH v3 8/8] uapi: export all arch specifics directories, Nicolas Dichtel
        
        [PATCH v3 6/8] Makefile.headersinst: remove destination-y option, Nicolas Dichtel
        
        [PATCH v3 1/8] arm: put types.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v3 1/8] arm: put types.h in uapi, Russell King - ARM Linux
        
        [no subject], David Howells
        
        Re: [PATCH v3 1/8] arm: put types.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v3 1/8] arm: put types.h in uapi, Russell King - ARM Linux
        
        [no subject], David Howells
        
        Re: [PATCH v3 4/8] x86: stop exporting msr-index.h to userland, Nicolas Dichtel
        
        Re: [PATCH v3 4/8] x86: stop exporting msr-index.h to userland, Borislav Petkov
[PATCH nf-next 0/7] xtables: use dedicated copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 1/7] xtables: add xt_match, xt_target and data copy_to_user functions, Willem de Bruijn
- [PATCH nf-next 2/7] iptables: use match, target and data copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 3/7] ip6tables: use match, target and data copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 4/7] arptables: use match, target and data copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 6/7] xtables: use match, target and data copy_to_user helpers in compat, Willem de Bruijn
- [PATCH nf-next 5/7] ebtables: use match, target and data copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 7/7] xtables: extend matches and targets with .usersize, Willem de Bruijn
- Re: [PATCH nf-next 0/7] xtables: use dedicated copy_to_user helpers, Pablo Neira Ayuso
[PATCH v2 0/2] segtree: move huge arrays to heap, Oleksandr Natalenko
- [PATCH v2 2/2] segtree: allocate memory for arrays on heap, Oleksandr Natalenko
- [PATCH v2 1/2] utils: provide array allocation wrapper, Oleksandr Natalenko
- Re: [PATCH v2 0/2] segtree: move huge arrays to heap, Florian Westphal
[PATCH 0/2] segtree: move huge arrays to heap, Oleksandr Natalenko
- [PATCH 2/2] segtree: allocate memory for arrays on heap, Oleksandr Natalenko
- [PATCH 1/2] utils: provide array allocation wrapper, Oleksandr Natalenko
[PATCH nft] scanner: fix search_in_include_path test, Anatole Denis
- Re: [PATCH nft] scanner: fix search_in_include_path test, Pablo Neira Ayuso
[PATCH nf-next 0/2] nf_conntrack: validate crc32c on SCTP packets hitting PREROUTING hook, Davide Caratti
- [PATCH nf-next 1/2] netfilter: select LIBCRC32C together with SCTP conntrack, Davide Caratti
  - Re: [PATCH nf-next 1/2] netfilter: select LIBCRC32C together with SCTP conntrack, Marcelo Ricardo Leitner
- [PATCH nf-next 2/2] netfilter: conntrack: validate SCTP crc32c in PREROUTING, Davide Caratti
- Re: [PATCH nf-next 0/2] nf_conntrack: validate crc32c on SCTP packets hitting PREROUTING hook, Pablo Neira Ayuso
nft segfaults listing huge sets, Oleksandr Natalenko
- Re: nft segfaults listing huge sets, Oleksandr Natalenko
[PATCH] net/bridge: Fix dropping packets that moving through bridge interface, Artur Molchanov
- Re: [PATCH] net/bridge: Fix dropping packets that moving through bridge interface, Florian Westphal
  - Re: [PATCH] net/bridge: Fix dropping packets that moving through bridge interface, Pablo Neira Ayuso
    - Re: [PATCH] net/bridge: Fix dropping packets that moving through bridge interface, Artur Molchanov
[PATCH] Add a configure flag to link libc statically, Keno Fischer
- Re: [PATCH] Add a configure flag to link libc statically, Pablo Neira Ayuso
  - Re: [PATCH] Add a configure flag to link libc statically, Keno Fischer
    - Re: [PATCH] Add a configure flag to link libc statically, Pablo Neira Ayuso
[PATCH] Fix two compile errors during out-of-tree build, Keno Fischer
[PATCH nf-next 2/2] netfilter: nf_tables: Make sure the uniform style of condition blocks in nf_tables_newrule, fgao
- Re: [PATCH nf-next 2/2] netfilter: nf_tables: Make sure the uniform style of condition blocks in nf_tables_newrule, Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: nf_tables: Check chain's use count before alloc new handle in nf_tables_newrule, fgao
- Re: [PATCH nf-next 1/2] netfilter: nf_tables: Check chain's use count before alloc new handle in nf_tables_newrule, Pablo Neira Ayuso
[PATCH nf-next 1/1] netfilter: Use strlcpy to copy dev name instead of strncpy, fgao
- Re: [PATCH nf-next 1/1] netfilter: Use strlcpy to copy dev name instead of strncpy, Pablo Neira Ayuso
[PATCH xtables-addons] build: support for Linux 4.10, Ralph Sennhauser
- Re: [PATCH xtables-addons] build: support for Linux 4.10, Jan Engelhardt
[PATCH xtables-addons] build: support for Linux 4.9, Ralph Sennhauser
[PATCH iptables] extensions: libxt_connbytes: Add translation to nft, Liping Zhang
- Re: [PATCH iptables] extensions: libxt_connbytes: Add translation to nft, Pablo Neira Ayuso
[PATCH nft] ct: add average bytes per packet counter support, Liping Zhang
- Re: [PATCH nft] ct: add average bytes per packet counter support, Pablo Neira Ayuso
[PATCH libnftnl] src: ct: add average bytes per packet counter support, Liping Zhang
- Re: [PATCH libnftnl] src: ct: add average bytes per packet counter support, Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: nf_tables: add missing descriptions in nft_ct_keys, Liping Zhang
- [PATCH nf-next 2/2] netfilter: nft_ct: add average bytes per packet support, Liping Zhang
  - Re: [PATCH nf-next 2/2] netfilter: nft_ct: add average bytes per packet support, Pablo Neira Ayuso
- Re: [PATCH nf-next 1/2] netfilter: nf_tables: add missing descriptions in nft_ct_keys, Pablo Neira Ayuso
[PATCH conntrack-tools] conntrack: send mark filter to kernel iff set, Pablo Neira Ayuso
[PATCH nft 01/10] include: fetch nf_tables.h updates, Pablo Neira Ayuso
- [PATCH nft 04/10] src: listing of stateful objects, Pablo Neira Ayuso
- [PATCH nft 03/10] src: add used quota support, Pablo Neira Ayuso
- [PATCH nft 06/10] src: reset internal stateful objects, Pablo Neira Ayuso
- [PATCH nft 09/10] src: add support for stateful object maps, Pablo Neira Ayuso
- [PATCH nft 08/10] src: add stateful object reference expression, Pablo Neira Ayuso
- [PATCH nft 05/10] src: add/create/delete stateful objects, Pablo Neira Ayuso
- [PATCH nft 02/10] src: remove SET_F_* flag definitions, Pablo Neira Ayuso
- [PATCH nft 07/10] parser_bison: allow RESET token from rhs, Pablo Neira Ayuso
- [PATCH nft 10/10] src: support for stateful object monitoring, Pablo Neira Ayuso
BUG/panic in ctnetlink_conntrack_event in 4.8.11, Chris Boot
[PATCH v2 nf-next 0/2] netfilter: merge udp and udplite trackers, Florian Westphal
- [PATCH v2 nf-next 1/2] netfilter: merge udp and udplite conntrack helpers, Florian Westphal
- [PATCH v2 nf-next 2/2] netfilter: nat: merge udp and udplite helpers, Florian Westphal
- Re: [PATCH v2 nf-next 0/2] netfilter: merge udp and udplite trackers, Pablo Neira Ayuso
[ANNOUNCE] nftables 0.7 release, Pablo Neira Ayuso
- Re: build failure if --with-xtables [WAS: nftables 0.7 release], Robby Workman
  - Re: build failure if --with-xtables [WAS: nftables 0.7 release], Arturo Borrero Gonzalez
[PATCH] netfilter: xt_connlimit: use rb_entry(), Geliang Tang
- Re: [PATCH] netfilter: xt_connlimit: use rb_entry(), Pablo Neira Ayuso
[PATCH libnftnl] src: get rid of aliases and compat, Pablo Neira Ayuso
[PATCH nft] xt: use NFTNL_* definitions, Pablo Neira Ayuso
How to leverage IP & UDP checksum offloading from iptables kernel module?, Llorente Santos Jesus
Feature request: Load u32 value into packet mark, Llorente Santos Jesus
- Re: Feature request: Load u32 value into packet mark, Arturo Borrero Gonzalez
[PATCHv2 net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Xin Long
- Re: [PATCHv2 net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Pablo Neira Ayuso
[PATCH nft] mnl: add mnl_nft_setelem_batch_flush() and use it from netlink_flush_setelems(), Pablo Neira Ayuso
[ANNOUNCE] libnftnl 1.0.7 release, Pablo Neira Ayuso
[PATCH nft] expression: Show the base which pre-defined constants are displayed, Elise Lennion
- Re: [PATCH nft] expression: Show the base which pre-defined constants are displayed, Pablo Neira Ayuso
[-stable 4.8.y] Revert NAT conversion to rhashtable, Pablo Neira Ayuso
- Re: [-stable 4.8.y] Revert NAT conversion to rhashtable, Greg Kroah-Hartman
  - Re: [-stable 4.8.y] Revert NAT conversion to rhashtable, Pablo Neira Ayuso
    - Re: [-stable 4.8.y] Revert NAT conversion to rhashtable, Greg Kroah-Hartman
Re: nftables: masquerade sets wrong source address, Liping Zhang
- Re: nftables: masquerade sets wrong source address, Liping Zhang
- Re: nftables: masquerade sets wrong source address, Tom Hacohen
  - Re: nftables: masquerade sets wrong source address, Liping Zhang
    - Re: nftables: masquerade sets wrong source address, Tom Hacohen
      - Re: nftables: masquerade sets wrong source address, Florian Westphal
        
        Message not available
        
        Re: nftables: masquerade sets wrong source address, Tom Hacohen
libmnl compile failure., maowenan
- Re: libmnl compile failure., Phil Sutter
  - RE: libmnl compile failure., maowenan
  - RE: libmnl compile failure., maowenan
    - Re: libmnl compile failure., Florian Westphal
[PATCH 0/2] GTP tunneling fixes for net, Pablo Neira Ayuso
- [PATCH 1/2] gtp: gtp_check_src_ms_ipv4() always return success, Pablo Neira Ayuso
- [PATCH 2/2] gtp: Fix initialization of Flags octet in GTPv1 header, Pablo Neira Ayuso
- Re: [PATCH 0/2] GTP tunneling fixes for net, Pablo Neira Ayuso
- Re: [PATCH 0/2] GTP tunneling fixes for net, David Miller
[PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pau Espin Pedrol
- Re: [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pablo Neira Ayuso
- [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pau Espin Pedrol
  - Re: [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pablo Neira Ayuso
    - Re: [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pau Espin Pedrol
      - Re: [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pablo Neira Ayuso
  - [PATCH v2 1/2] netfilter: use fwmark_reflect in nf_send_reset, Pau Espin Pedrol
    - [PATCH v2 2/2] tcp: fix mark propagation with fwmark_reflect enabled, Pau Espin Pedrol
      - Re: [PATCH v2 2/2] tcp: fix mark propagation with fwmark_reflect enabled, Pablo Neira Ayuso
        
        Re: [PATCH v2 2/2] tcp: fix mark propagation with fwmark_reflect enabled, David Miller
    - Re: [PATCH v2 1/2] netfilter: use fwmark_reflect in nf_send_reset, Pablo Neira Ayuso
[PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Xin Long
- Re: [PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Marcelo Ricardo Leitner
- Re: [PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Pablo Neira Ayuso
  - Re: [PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Xin Long
[PATCH nf] netfilter: nft_payload: mangle ckecksum if NFT_PAYLOAD_L4CSUM_PSEUDOHDR is set, Pablo Neira Ayuso
[PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK, joseph . j . conley
- Re: [PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK, Pablo Neira Ayuso
  - Re: [PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK, Joseph Conley
    - Re: [PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK, Pablo Neira Ayuso
[PATCH nft] netlink_linearize: fix IPv6 layer 4 checksum mangling, Pablo Neira Ayuso
[PATCH nft] tests: py: update quota and payload, Pablo Neira Ayuso
[PATCH nft] mnl: don't send empty set elements netlink message to kernel, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: fix oob access, Florian Westphal
- Re: [PATCH nf] netfilter: nf_tables: fix oob access, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: nf_tables: fix oob access, Florian Westphal
[PATCH nft 1/2] segtree: wrong prefix expression length on interval_map_decompose(), Pablo Neira Ayuso
- [PATCH nft 2/2] segtree: don't trigger error on exact overlaps, Pablo Neira Ayuso
[PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers, Michał Mirosław
- Re: [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers, Sergei Shtylyov
  - Re: [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers, Michał Mirosław
    - Re: [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers, Toshiaki Makita
[PATCH net-next 16/27] nfnetlink/queue: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH 1/2] libxtables: xtables: remove unnecessary debug code, Shyam Saini
- [PATCH 2/2] libxtables: xtables: Use getnameinfo(), Shyam Saini
  - Re: [PATCH 2/2] libxtables: xtables: Use getnameinfo(), Pablo Neira Ayuso
- Re: [PATCH 1/2] libxtables: xtables: remove unnecessary debug code, Pablo Neira Ayuso
[PATCH nf-next] netfilter: nft_queue: use raw_smp_processor_id(), Pablo Neira Ayuso
[PATCH nf-next] netfilter: nft_quota: reset quota after dump, Pablo Neira Ayuso
Adding element to interval map consumes entire memory, Richard Mörbitz
- Re: Adding element to interval map consumes entire memory, Pablo Neira Ayuso
  - Message not available
    - Re: Adding element to interval map consumes entire memory, Pablo Neira Ayuso
      - Re: Adding element to interval map consumes entire memory, Richard Mörbitz
        
        Re: Adding element to interval map consumes entire memory, Pablo Neira Ayuso
        
        Re: Adding element to interval map consumes entire memory, Pablo Neira Ayuso
[PATCH nft] datatype: Display pre-defined inet_service values in decimal base, Elise Lennion
- Re: [PATCH nft] datatype: Display pre-defined inet_service values in decimal base, Pablo Neira Ayuso
[PATCH net-next] netfilter: nft_counter: rework atomic dump and reset, Pablo Neira Ayuso
- Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset, Pablo Neira Ayuso
  - Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset, Pablo Neira Ayuso
    - Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset, Eric Dumazet
      - Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset, Pablo Neira Ayuso
  - Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset, David Miller
  - Re: [PATCH net-next] netfilter: nft_counter: rework atomic dump and reset, Arnd Bergmann
[PATCH] ARM: add cmpxchg64 helper for ARMv7-M, Arnd Bergmann
- Re: [PATCH] ARM: add cmpxchg64 helper for ARMv7-M, Pablo Neira Ayuso
  - Re: [PATCH] ARM: add cmpxchg64 helper for ARMv7-M, Russell King - ARM Linux
RFC: nft.8 review, Phil Sutter
- Re: RFC: nft.8 review, Pablo Neira Ayuso
  - Re: RFC: nft.8 review, mark diener
    - Re: RFC: nft.8 review, Phil Sutter
      - Re: RFC: nft.8 review, mark diener
[PATCH nft v3] datatype: Display pre-defined inet_service values in host byte order, Elise Lennion
- Re: [PATCH nft v3] datatype: Display pre-defined inet_service values in host byte order, Pablo Neira Ayuso
Question on match pid owner, Christos
[PATCH libnftnl 1/7] include: fetch stateful object updates for nf_tables.h cache copy, Pablo Neira Ayuso
- [PATCH libnftnl 4/7] set: add NFTNL_SET_OBJ_TYPE attribute, Pablo Neira Ayuso
- [PATCH libnftnl 5/7] set_elem: add NFTNL_SET_ELEM_OBJREF attribute, Pablo Neira Ayuso
- [PATCH libnftnl 6/7] expr: objref: add support for stateful object maps, Pablo Neira Ayuso
- [PATCH libnftnl 2/7] src: support for stateful objects, Pablo Neira Ayuso
- [PATCH libnftnl 3/7] expr: add stateful object reference expression, Pablo Neira Ayuso
- [PATCH libnftnl 7/7] quota: support for consumed bytes, Pablo Neira Ayuso
[PATCH] libxtables: xtables.c: Use getnameinfo(), Shyam Saini
- Re: [PATCH] libxtables: xtables.c: Use getnameinfo(), Pablo Neira Ayuso
  - Re: [PATCH] libxtables: xtables.c: Use getnameinfo(), Pablo Neira Ayuso
    - Re: [PATCH] libxtables: xtables.c: Use getnameinfo(), Shivani Bhardwaj
      - Re: [PATCH] libxtables: xtables.c: Use getnameinfo(), Pablo Neira Ayuso
[PATCH next] iptables: on revision mismatch, do not call print/save, Willem de Bruijn
- Re: [PATCH next] iptables: on revision mismatch, do not call print/save, Pablo Neira Ayuso
- Re: [PATCH next] iptables: on revision mismatch, do not call print/save, Jozsef Kadlecsik
  - Re: [PATCH next] iptables: on revision mismatch, do not call print/save, Willem de Bruijn
    - Re: [PATCH next] iptables: on revision mismatch, do not call print/save, Willem de Bruijn
      - Re: [PATCH next] iptables: on revision mismatch, do not call print/save, Willem de Bruijn
        
        Re: [PATCH next] iptables: on revision mismatch, do not call print/save, Jozsef Kadlecsik
        
        Re: [PATCH next] iptables: on revision mismatch, do not call print/save, Willem de Bruijn
        
        Re: [PATCH next] iptables: on revision mismatch, do not call print/save, Jozsef Kadlecsik
[PATCH] extensions: libxt_bpf: support ebpf pinned objects, Willem de Bruijn
- Re: [PATCH] extensions: libxt_bpf: support ebpf pinned objects, Pablo Neira Ayuso
[nf-next:master 36/49] ERROR: "__cmpxchg_u64" [net/netfilter/nft_counter.ko] undefined!, kbuild test robot
[PATCH 00/50] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
- [PATCH 01/50] ipvs: Use IS_ERR_OR_NULL(svc) instead of IS_ERR(svc) || svc == NULL, Pablo Neira Ayuso
- [PATCH 02/50] ipvs: Decrement ttl, Pablo Neira Ayuso
- [PATCH 03/50] netfilter: update Arturo Borrero Gonzalez email address, Pablo Neira Ayuso
- [PATCH 07/50] netfilter: nf_log: do not assume ethernet header in netdev family, Pablo Neira Ayuso
- [PATCH 04/50] netfilter: built-in NAT support for DCCP, Pablo Neira Ayuso
- [PATCH 05/50] netfilter: built-in NAT support for SCTP, Pablo Neira Ayuso
- [PATCH 10/50] netfilter: conntrack: built-in support for DCCP, Pablo Neira Ayuso
- [PATCH 13/50] netfilter: conntrack: remove unused init_net hook, Pablo Neira Ayuso
- [PATCH 35/50] netfilter: nf_tables: add stateful object reference expression, Pablo Neira Ayuso
- [PATCH 47/50] netfilter: nf_tables: support for set flushing, Pablo Neira Ayuso
- [PATCH 50/50] netfilter: nft_quota: allow to restore consumed quota, Pablo Neira Ayuso
- [PATCH 48/50] netfilter: x_tables: avoid warn and OOM killer on vmalloc call, Pablo Neira Ayuso
- [PATCH 49/50] netfilter: xt_bpf: support ebpf, Pablo Neira Ayuso
- [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects, Pablo Neira Ayuso
  - Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects, Paul Gortmaker
    - Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects, Pablo Neira Ayuso
      - Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects, Eric Dumazet
        
        Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects, Eric Dumazet
        
        Re: [PATCH 37/50] netfilter: nf_tables: atomic dump and reset for stateful objects, Pablo Neira Ayuso
- [PATCH 45/50] netfilter: nf_tables: constify struct nft_ctx * parameter in nft_trans_alloc(), Pablo Neira Ayuso
- [PATCH 44/50] netfilter: nat: skip checksum on offload SCTP packets, Pablo Neira Ayuso
- [PATCH 46/50] netfilter: nft_set: introduce nft_{hash, rbtree}_deactivate_one(), Pablo Neira Ayuso
- [PATCH 42/50] netfilter: nf_tables: allow to filter stateful object dumps by type, Pablo Neira Ayuso
- [PATCH 33/50] netfilter: nft_counter: add stateful object type, Pablo Neira Ayuso
- [PATCH 43/50] netfilter: rpfilter: bypass ipv4 lbcast packets with zeronet source, Pablo Neira Ayuso
- [PATCH 36/50] netfilter: nft_quota: dump consumed quota, Pablo Neira Ayuso
- [PATCH 17/50] netfilter: conntrack: register hooks in netns when needed by ruleset, Pablo Neira Ayuso
- [PATCH 21/50] netfilter: decouple nf_hook_entry and nf_hook_ops, Pablo Neira Ayuso
- [PATCH 41/50] netfilter: nft_objref: support for stateful object maps, Pablo Neira Ayuso
- [PATCH 40/50] netfilter: nf_tables: add stateful object reference to set elements, Pablo Neira Ayuso
- [PATCH 39/50] netfilter: nft_quota: add depleted flag for objects, Pablo Neira Ayuso
- [PATCH 38/50] netfilter: nf_tables: notify internal updates of stateful objects, Pablo Neira Ayuso
- [PATCH 34/50] netfilter: nft_quota: add stateful object type, Pablo Neira Ayuso
- [PATCH 32/50] netfilter: nf_tables: add stateful objects, Pablo Neira Ayuso
- [PATCH 20/50] netfilter: introduce accessor functions for hook entries, Pablo Neira Ayuso
- [PATCH 31/50] netfilter: add and use nf_fwd_netdev_egress, Pablo Neira Ayuso
- [PATCH 25/50] netfilter: x_tables: pack percpu counter allocations, Pablo Neira Ayuso
- [PATCH 30/50] netfilter: ingress: translate 0 nf_hook_slow retval to -1, Pablo Neira Ayuso
- [PATCH 19/50] netfilter: defrag: only register defrag functionality if needed, Pablo Neira Ayuso
- [PATCH 23/50] netfilter: x_tables: pass xt_counters struct instead of packet counter, Pablo Neira Ayuso
- [PATCH 28/50] netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields, Pablo Neira Ayuso
- [PATCH 29/50] netfilter: xt_multiport: Fix wrong unmatch result with multiple ports, Pablo Neira Ayuso
- [PATCH 26/50] netfilter: nft_fib: convert htonl to ntohl properly, Pablo Neira Ayuso
- [PATCH 27/50] netfilter: nft_fib_ipv4: initialize *dest to zero, Pablo Neira Ayuso
- [PATCH 22/50] netfilter: convert while loops to for loops, Pablo Neira Ayuso
- [PATCH 18/50] netfilter: conntrack: add nf_conntrack_default_on sysctl, Pablo Neira Ayuso
- [PATCH 16/50] netfilter: nf_tables: add conntrack dependencies for nat/masq/redir expressions, Pablo Neira Ayuso
- [PATCH 15/50] netfilter: nat: add dependencies on conntrack module, Pablo Neira Ayuso
- [PATCH 12/50] netfilter: conntrack: built-in support for UDPlite, Pablo Neira Ayuso
- [PATCH 24/50] netfilter: x_tables: pass xt_counters struct to counter allocator, Pablo Neira Ayuso
- [PATCH 14/50] netfilter: add and use nf_ct_netns_get/put, Pablo Neira Ayuso
- [PATCH 11/50] netfilter: conntrack: built-in support for SCTP, Pablo Neira Ayuso
- [PATCH 09/50] netfilter: nf_conntrack_tuple_common.h: fix #include, Pablo Neira Ayuso
- [PATCH 06/50] netfilter: built-in NAT support for UDPlite, Pablo Neira Ayuso
- [PATCH 08/50] netfilter: nfnetlink_log: add "nf-logger-5-1" module alias name, Pablo Neira Ayuso
- Re: [PATCH 00/50] Netfilter/IPVS updates for net-next, David Miller
[PATCH nft v2] datatype: Display pre-defined inet_service values in host byte order, Elise Lennion
- Re: [PATCH nft v2] datatype: Display pre-defined inet_service values in host byte order, Pablo Neira Ayuso
  - Re: [PATCH nft v2] datatype: Display pre-defined inet_service values in host byte order, Elise Lennion
    - Re: [PATCH nft v2] datatype: Display pre-defined inet_service values in host byte order, Pablo Neira Ayuso
[nf-next:master 36/48] net/netfilter/nft_counter.c:131:9: error: implicit declaration of function 'cmpxchg64', kbuild test robot
[PATCH nf-next] netfilter: nft_quota: allow to restore consumed quota, Pablo Neira Ayuso
[PATCH] netfilter: nft_counter: use cmpxchg64 instead of xchg, Pablo Neira Ayuso
[PATCH nf-next v2] netfilter: xt_bpf: support ebpf, Willem de Bruijn
- Re: [PATCH nf-next v2] netfilter: xt_bpf: support ebpf, Pablo Neira Ayuso
Rebasing nf-next, Pablo Neira Ayuso
- <Possible follow-ups>
- Rebasing nf-next, Pablo Neira Ayuso

[Index of Archives] [LARTC] [Berkeley Packet Filter] [Bugtraq] [Yosemite Discussion]