Linux Netfilter / IP Tables Devel

Date Index

[Prev Page][Next Page]

[PATCH] net: fix description of skb_find_text() according to removed functionality, (continued)
[PATCH] netfilter: xt_hashlimit: Fix integer divide round to zero., Alban Browaeys
- Re: [PATCH] netfilter: xt_hashlimit: Fix integer divide round to zero., Pablo Neira Ayuso
  - Re: [PATCH] netfilter: xt_hashlimit: Fix integer divide round to zero., Alban Browaeys
    - [PATCH v2] netfilter: xt_hashlimit: Fix integer divide round to zero., Alban Browaeys
      - Re: [PATCH v2] netfilter: xt_hashlimit: Fix integer divide round to zero., Pablo Neira Ayuso
Concurrent iptables-restore calls clobberring each other, Shaun Crampton
- Re: Concurrent iptables-restore calls clobberring each other, Jan Engelhardt
  - Re: Concurrent iptables-restore calls clobberring each other, Shaun Crampton
    - Re: Concurrent iptables-restore calls clobberring each other, Shaun Crampton
[PATCH nft] statement: Print NAT IPv4 address in nat_stmt_print(), Elise Lennion
- Re: [PATCH nft] statement: Print NAT IPv4 address in nat_stmt_print(), Pablo Neira Ayuso
[PATCH nftables] statement: fix print of ip dnat address, Florian Westphal
- Re: [PATCH nftables] statement: fix print of ip dnat address, Pablo Neira Ayuso
[PATCH -next 0/9] nftables: add zone support to ct statement, Florian Westphal
- [PATCH nf-next 1/9] netfilter: nft_ct: add zone id get support, Florian Westphal
  - Re: [PATCH nf-next 1/9] netfilter: nft_ct: add zone id get support, Pablo Neira Ayuso
- [PATCH nf-next 2/9] netfilter: nft_ct: prepare for key-dependent error unwind, Florian Westphal
  - Re: [PATCH nf-next 2/9] netfilter: nft_ct: prepare for key-dependent error unwind, Pablo Neira Ayuso
- [PATCH nf-next 3/9] netfilter: nft_ct: add zone id set support, Florian Westphal
  - Re: [PATCH nf-next 3/9] netfilter: nft_ct: add zone id set support, Pablo Neira Ayuso
- [PATCH libnftnl 4/9] src: ct: add zone support, Florian Westphal
  - Re: [PATCH libnftnl 4/9] src: ct: add zone support, Pablo Neira Ayuso
- [PATCH nftables 5/9] src: add host byte order integer type, Florian Westphal
  - Re: [PATCH nftables 5/9] src: add host byte order integer type, Pablo Neira Ayuso
    - Re: [PATCH nftables 5/9] src: add host byte order integer type, Pablo Neira Ayuso
    - Re: [PATCH nftables 5/9] src: add host byte order integer type, Florian Westphal
      - Re: [PATCH nftables 5/9] src: add host byte order integer type, Pablo Neira Ayuso
        
        Re: [PATCH nftables 5/9] src: add host byte order integer type, Pablo Neira Ayuso
- [PATCH nftables 6/9] src: add conntrack zone support, Florian Westphal
- [PATCH nftables 7/9] ct: refactor print function so it can be re-used for ct statement, Florian Westphal
- [PATCH nftables 8/9] src: support zone set statement with optional direction, Florian Westphal
- [PATCH nftables 9/9] tests: add test entries for conntrack zones, Florian Westphal
[PATCH 00/27] Netfilter updates for net-next, Pablo Neira Ayuso
- [PATCH 01/27] netfilter: merge udp and udplite conntrack helpers, Pablo Neira Ayuso
- [PATCH 11/27] arptables: use match, target and data copy_to_user helpers, Pablo Neira Ayuso
- [PATCH 24/27] netfilter: guarantee 8 byte minalign for template addresses, Pablo Neira Ayuso
  - RE: [PATCH 24/27] netfilter: guarantee 8 byte minalign for template addresses, David Laight
- [PATCH 15/27] netfilter: pkttype: unnecessary to check ipv6 multicast address, Pablo Neira Ayuso
- [PATCH 17/27] netfilter: nf_tables: eliminate useless condition checks, Pablo Neira Ayuso
- [PATCH 22/27] skbuff: add and use skb_nfct helper, Pablo Neira Ayuso
- [PATCH 19/27] netfilter: conntrack: no need to pass ctinfo to error handler, Pablo Neira Ayuso
- [PATCH 20/27] netfilter: reset netfilter state when duplicating packet, Pablo Neira Ayuso
- [PATCH 26/27] ipvs: free ip_vs_dest structs when refcnt=0, Pablo Neira Ayuso
- [PATCH 27/27] netfilter: allow logging from non-init namespaces, Pablo Neira Ayuso
- [PATCH 23/27] netfilter: add and use nf_ct_set helper, Pablo Neira Ayuso
- [PATCH 25/27] netfilter: merge ctinfo into nfct pointer storage area, Pablo Neira Ayuso
- [PATCH 21/27] netfilter: reduce direct skb->nfct usage, Pablo Neira Ayuso
- [PATCH 18/27] netfilter: nf_tables: Eliminate duplicated code in nf_tables_table_enable(), Pablo Neira Ayuso
- [PATCH 14/27] xtables: extend matches and targets with .usersize, Pablo Neira Ayuso
- [PATCH 16/27] netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family, Pablo Neira Ayuso
- [PATCH 12/27] ebtables: use match, target and data copy_to_user helpers, Pablo Neira Ayuso
- [PATCH 13/27] xtables: use match, target and data copy_to_user helpers in compat, Pablo Neira Ayuso
- [PATCH 10/27] ip6tables: use match, target and data copy_to_user helpers, Pablo Neira Ayuso
- [PATCH 06/27] netfilter: conntrack: validate SCTP crc32c in PREROUTING, Pablo Neira Ayuso
- [PATCH 07/27] netfilter: xt_connlimit: use rb_entry(), Pablo Neira Ayuso
- [PATCH 08/27] xtables: add xt_match, xt_target and data copy_to_user functions, Pablo Neira Ayuso
- [PATCH 09/27] iptables: use match, target and data copy_to_user helpers, Pablo Neira Ayuso
- [PATCH 02/27] netfilter: nat: merge udp and udplite helpers, Pablo Neira Ayuso
- [PATCH 04/27] netfilter: nft_ct: add average bytes per packet support, Pablo Neira Ayuso
- [PATCH 03/27] netfilter: nf_tables: add missing descriptions in nft_ct_keys, Pablo Neira Ayuso
- [PATCH 05/27] netfilter: select LIBCRC32C together with SCTP conntrack, Pablo Neira Ayuso
- Re: [PATCH 00/27] Netfilter updates for net-next, David Miller
- <Possible follow-ups>
- [PATCH 00/27] Netfilter updates for net-next, Pablo Neira Ayuso
  - [PATCH 02/27] netfilter: nf_tables_offload: avoid excessive stack usage, Pablo Neira Ayuso
  - [PATCH 03/27] netfilter: nf_tables_offload: move indirect flow_block callback logic to core, Pablo Neira Ayuso
  - [PATCH 07/27] netfilter: nf_tables_offload: refactor the nft_flow_offload_chain function, Pablo Neira Ayuso
  - [PATCH 10/27] netfilter: fix include guards., Pablo Neira Ayuso
  - [PATCH 09/27] netfilter: nf_tables_offload: remove rules when the device unregisters, Pablo Neira Ayuso
  - [PATCH 13/27] netfilter: inline xt_hashlimit, ebt_802_3 and xt_physdev headers, Pablo Neira Ayuso
  - [PATCH 19/27] netfilter: conntrack: use consistent style when defining inline functions, Pablo Neira Ayuso
  - [PATCH 18/27] netfilter: move nf_bridge_frag_data struct definition to a more appropriate header., Pablo Neira Ayuso
  - [PATCH 27/27] netfilter: conntrack: remove two unused functions from nf_conntrack_timestamp.h., Pablo Neira Ayuso
  - [PATCH 25/27] netfilter: remove CONFIG_NETFILTER checks from headers., Pablo Neira Ayuso
  - [PATCH 17/27] netfilter: synproxy: move code between headers., Pablo Neira Ayuso
  - [PATCH 20/27] netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENABLED(CONFIG...)., Pablo Neira Ayuso
  - [PATCH 22/27] netfilter: br_netfilter: update stub br_nf_pre_routing_ipv6 parameter to `void *priv`., Pablo Neira Ayuso
  - [PATCH 21/27] netfilter: conntrack: wrap two inline functions in config checks., Pablo Neira Ayuso
  - [PATCH 26/27] netfilter: conntrack: remove CONFIG_NF_CONNTRACK checks from nf_conntrack_zones.h., Pablo Neira Ayuso
  - [PATCH 24/27] netfilter: conntrack: remove CONFIG_NF_CONNTRACK check from nf_conntrack_acct.h., Pablo Neira Ayuso
  - [PATCH 23/27] netfilter: conntrack: move code to linux/nf_conntrack_common.h., Pablo Neira Ayuso
  - [PATCH 14/27] netfilter: update include directives., Pablo Neira Ayuso
  - [PATCH 16/27] netfilter: move inline nf_ip6_ext_hdr() function to a more appropriate header., Pablo Neira Ayuso
  - [PATCH 15/27] netfilter: remove nf_conntrack_icmpv6.h header., Pablo Neira Ayuso
  - [PATCH 11/27] netfilter: fix coding-style errors., Pablo Neira Ayuso
  - [PATCH 04/27] netfilter: nft_synproxy: add synproxy stateful object support, Pablo Neira Ayuso
  - [PATCH 12/27] netfilter: ip_tables: remove unused function declarations., Pablo Neira Ayuso
  - [PATCH 05/27] netfilter: nft_{fwd,dup}_netdev: add offload support, Pablo Neira Ayuso
  - [PATCH 06/27] netfilter: nf_tables_offload: add __nft_offload_get_chain function, Pablo Neira Ayuso
  - [PATCH 08/27] netfilter: nf_tables_offload: refactor the nft_flow_offload_rule function, Pablo Neira Ayuso
  - [PATCH 01/27] netfilter: nf_tables: Fix an Oops in nf_tables_updobj() error handling, Pablo Neira Ayuso
  - Re: [PATCH 00/27] Netfilter updates for net-next, David Miller
[PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf, Kaarle Ritvanen
- Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf, Pablo Neira Ayuso
  - Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf, Arturo Borrero Gonzalez
- Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf, Eric Leblond
- <Possible follow-ups>
- Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf, Kaarle Ritvanen
  - Re: [PATCH ulogd2] adjust ulogd.logrotate to match ulogd.conf, Pablo Neira Ayuso
linux-next: manual merge of the rcu tree with the netfilter-next tree, Stephen Rothwell
[PATCH nft v2 2/2] src: Always print range expressions numerically, Elise Lennion
- Re: [PATCH nft v2 2/2] src: Always print range expressions numerically, Pablo Neira Ayuso
[PATCH nft v2 1/2] main: Validate the number of numeric options, Elise Lennion
- Re: [PATCH nft v2 1/2] main: Validate the number of numeric options, Pablo Neira Ayuso
[PATCH nft] configure: Require newer version of libxtables, Elise Lennion
- Re: [PATCH nft] configure: Require newer version of libxtables, Pablo Neira Ayuso
ANNOUNCE: Netdev 2.1 update, Jamal Hadi Salim
[PATCH nf-next v2] netfilter: allow logging from non-init namespaces, Michal Kubecek
- Re: [PATCH nf-next v2] netfilter: allow logging from non-init namespaces, Pablo Neira Ayuso
new patch state in patchwork..., David Miller
[PATCH nft] src: Always print range expressions numerically, Elise Lennion
- Re: [PATCH nft] src: Always print range expressions numerically, Pablo Neira Ayuso
net: suspicious RCU usage in nf_hook, Dmitry Vyukov
- Re: net: suspicious RCU usage in nf_hook, Cong Wang
  - Re: net: suspicious RCU usage in nf_hook, Cong Wang
- Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
  - Re: net: suspicious RCU usage in nf_hook, Cong Wang
    - Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
      - Re: net: suspicious RCU usage in nf_hook, Cong Wang
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Cong Wang
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Cong Wang
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Eric Dumazet
        
        Re: net: suspicious RCU usage in nf_hook, Cong Wang
[ANNOUNCE] iptables 1.6.1 release, Pablo Neira Ayuso
[PATCH 1/2 conntrack-tools] conntrackd: cthelper: Free pktb after use, Kevin Cernekee
- [PATCH 2/2 conntrack-tools] conntrackd: config: Free strdup()ed tokens, Kevin Cernekee
  - Re: [PATCH 2/2 conntrack-tools] conntrackd: config: Free strdup()ed tokens, Pablo Neira Ayuso
- Re: [PATCH 1/2 conntrack-tools] conntrackd: cthelper: Free pktb after use, Pablo Neira Ayuso
[RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
- Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Steve Grubb
  - Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
    - Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
      - Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Steve Grubb
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Paul Moore
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Steve Grubb
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Paul Moore
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Paul Moore
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Paul Moore
        
        Re: [RFC PATCH] audit: normalize NETFILTER_PKT, Richard Guy Briggs
[PATCH conntrack-tools] conntrackd: cthelper: Don't leak nat_tuple, Kevin Cernekee
- Re: [PATCH conntrack-tools] conntrackd: cthelper: Don't leak nat_tuple, Pablo Neira Ayuso
[PATCH V2 1/2] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Kevin Cernekee
- [PATCH V2 2/2] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Kevin Cernekee
  - Re: [PATCH V2 2/2] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Pablo Neira Ayuso
- Re: [PATCH V2 1/2] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Pablo Neira Ayuso
[PATCH net] tcp: don't annotate mark on control socket from tcp_v6_send_response(), Pablo Neira Ayuso
- Re: [PATCH net] tcp: don't annotate mark on control socket from tcp_v6_send_response(), David Miller
[PATCH nft v3 6/6] tests: py: Add tests for stateful objects, Elise Lennion
[PATCH nft v3 4/6] src: Allow list stateful objects in a table, Elise Lennion
[PATCH nft v3 5/6] tests: py: Add suport for stateful objects in python tests, Elise Lennion
[PATCH nft v3 3/6] evaluate: Evaluate table name before reset stateful objects in a table, Elise Lennion
[PATCH nft v3 2/6] src: Allow list single stateful object, Elise Lennion
[PATCH nft v3 1/6] src: Allow reset single stateful object, Elise Lennion
- Re: [PATCH nft v3 1/6] src: Allow reset single stateful object, Pablo Neira Ayuso
Re: ip_rcv_finish() NULL pointer kernel panic, Eric Dumazet
- Re: ip_rcv_finish() NULL pointer kernel panic, Florian Westphal
  - Re: ip_rcv_finish() NULL pointer kernel panic, David Miller
    - Re: ip_rcv_finish() NULL pointer kernel panic, Dan Streetman
      - Re: ip_rcv_finish() NULL pointer kernel panic, Florian Westphal
  - Re: ip_rcv_finish() NULL pointer kernel panic, Eric Dumazet
    - Re: ip_rcv_finish() NULL pointer kernel panic, Eric Dumazet
- Re: ip_rcv_finish() NULL pointer kernel panic, Roy Keene
[PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, David Windsor
- Re: [PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, Julian Anastasov
  - Re: [PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, Simon Horman
    - Re: [PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, Pablo Neira Ayuso
      - Re: [PATCH v2 net] net: free ip_vs_dest structs when refcnt=0, Simon Horman
[PATCH] iptables: fix the wrong appending of jump verdict after the comment., Shyam Saini
- Re: [PATCH] iptables: fix the wrong appending of jump verdict after the comment., Shivani Bhardwaj
- Re: [PATCH] iptables: fix the wrong appending of jump verdict after the comment., Shivani Bhardwaj
  - Re: [PATCH] iptables: fix the wrong appending of jump verdict after the comment., Pablo Neira Ayuso
[nft PATCH v2] payload: explicit network ctx assignation for icmp/icmp6 in special families, Arturo Borrero Gonzalez
- Re: [nft PATCH v2] payload: explicit network ctx assignation for icmp/icmp6 in special families, Pablo Neira Ayuso
[PATCH nf,v2 1/3] netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCL, Pablo Neira Ayuso
- [PATCH nf,v2 2/3] netfilter: nf_tables: deconstify walk callback function, Pablo Neira Ayuso
- [PATCH nf,v2 3/3] netfilter: nf_tables: bump set->ndeact on set flush, Pablo Neira Ayuso
[PATCH nft v2 2/2] src: Allow list single stateful object, Elise Lennion
[PATCH nft v2 1/2] src: Allow reset single stateful object, Elise Lennion
- Re: [PATCH nft v2 1/2] src: Allow reset single stateful object, Pablo Neira Ayuso
  - Re: [PATCH nft v2 1/2] src: Allow reset single stateful object, Elise Lennion
[RFC PATCH 0/2] restore original default of nf_conntrack_helper sysctl, Jiri Kosina
- Re: [RFC PATCH 0/2] restore original default of nf_conntrack_helper sysctl, Linus Torvalds
  - Re: [RFC PATCH 0/2] restore original default of nf_conntrack_helper sysctl, Pablo Neira Ayuso
    - [PATCH] netfilter: nf_ct_helper: warn when not applying default helper assignment (was Re: [RFC PATCH 0/2] restore original default of nf_conntrack_helper sysctl), Jiri Kosina
      - [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Jiri Kosina
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Linus Torvalds
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Jiri Kosina
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Joe Perches
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Pablo Neira Ayuso
        
        Re: [PATCH v2] netfilter: nf_ct_helper: warn when not applying default helper assignment, Jiri Kosina
        
        [PATCH v3] netfilter: nf_ct_helper: warn when not applying default helper assignment, Jiri Kosina
        
        Re: [PATCH v3] netfilter: nf_ct_helper: warn when not applying default helper assignment, Pablo Neira Ayuso
[PATCH 2/2] Revert "netfilter: fix nf_conntrack_helper documentation", Jiri Kosina
[PATCH 1/2] Revert "netfilter: nf_ct_helper: disable automatic helper assignment", Jiri Kosina
[PATCH nft] tests: shell: Add test for flush bug on sets with size, Elise Lennion
- Re: [PATCH nft] tests: shell: Add test for flush bug on sets with size, Pablo Neira Ayuso
[PATCH nft 2/2] src: Allow list single stateful object, Elise Lennion
[PATCH nft 1/2] src: Allow reset single stateful object, Elise Lennion
[PATCH nf-next v4 0/7] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Florian Westphal
- [PATCH v4 nf-next 1/7] netfilter: conntrack: no need to pass ctinfo to error handler, Florian Westphal
- [PATCH v4 nf-next 2/7] netfilter: reset netfilter state when duplicating packet, Florian Westphal
- [PATCH v4 nf-next 3/7] netfilter: reduce direct skb->nfct usage, Florian Westphal
- [PATCH v4 nf-next 4/7] skbuff: add and use skb_nfct helper, Florian Westphal
- [PATCH v4 nf-next 5/7] netfilter: add and use nf_ct_set helper, Florian Westphal
- [PATCH v4 nf-next 6/7] netfilter: guarantee 8 byte minalign for template addresses, Florian Westphal
- [PATCH v4 nf-next 7/7] netfilter: merge ctinfo into nfct pointer storage area, Florian Westphal
- Re: [PATCH nf-next v4 0/7] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Pablo Neira Ayuso
[PATCH nft] rule: check for EINTR error from cache_init_objects() for stateful objects, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH nft] rule: check for EINTR error from cache_init_objects() for stateful objects, Pablo Neira Ayuso
  - [PATCH nft] tests: shell: validate set size, Pablo Neira Ayuso
[PATCH nf-next v3 0/7] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Florian Westphal
- [PATCH v3 nf-next 1/7] netfilter: conntrack: no need to pass ctinfo to error handler, Florian Westphal
- [PATCH v3 nf-next 2/7] netfilter: reset netfilter state when duplicating packet, Florian Westphal
- [PATCH v3 nf-next 3/7] netfilter: reduce direct skb->nfct usage, Florian Westphal
- [PATCH v3 nf-next 4/7] skbuff: add and use skb_nfct helper, Florian Westphal
- [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Florian Westphal
  - Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Pablo Neira Ayuso
    - Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Florian Westphal
      - Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Jozsef Kadlecsik
        
        Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Florian Westphal
        
        Re: [PATCH v3 nf-next 5/7] netfilter: add and use nf_ct_set helper, Jozsef Kadlecsik
- [PATCH v3 nf-next 6/7] netfilter: guarantee 8 byte minalign for template addresses, Florian Westphal
- [PATCH v3 nf-next 7/7] netfilter: merge ctinfo into nfct pointer storage area, Florian Westphal
EPOLLERR on memory mapped netlink socket, prashantkumar dhotre
- Re: EPOLLERR on memory mapped netlink socket, prashantkumar dhotre
  - Re: EPOLLERR on memory mapped netlink socket, Patrick PIGNOL
- Re: EPOLLERR on memory mapped netlink socket, Pablo Neira Ayuso
[PATCH nf] netfilter: nft_log: restrict the log prefix length to 127, Liping Zhang
- Re: [PATCH nf] netfilter: nft_log: restrict the log prefix length to 127, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: nft_log: restrict the log prefix length to 127, Pablo Neira Ayuso
[PATCH nf-next v4 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, fgao
- Re: [PATCH nf-next v4 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Pablo Neira Ayuso
[PATCH 1/2 nf] netfilter: nf_tables: deconstify walk callback function, Pablo Neira Ayuso
- [PATCH 2/2 nf] netfilter: nf_tables: bump set->ndeact on set flush, Pablo Neira Ayuso
[PATCH nf V2] netfilter: nf_tables: validate the name size when possible, Liping Zhang
- Re: [PATCH nf V2] netfilter: nf_tables: validate the name size when possible, Pablo Neira Ayuso
[nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Arturo Borrero Gonzalez
- Re: [nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Pablo Neira Ayuso
  - Re: [nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Pablo Neira Ayuso
- <Possible follow-ups>
- [nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Arturo Borrero Gonzalez
  - Re: [nft PATCH] payload: use explicit network ctx assignation for icmp/icmp6 in inet family, Arturo Borrero Gonzalez
[PATCH nf-next v3 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, fgao
[PATCH nft] netlink: don't bail out on dump errors, Pablo Neira Ayuso
[PATCH nft] tests: shell: Add test for set element leak bug, Elise Lennion
- Re: [PATCH nft] tests: shell: Add test for set element leak bug, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Liping Zhang
- Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Liping Zhang
    - Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Patrick PIGNOL
    - Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Florian Westphal
    - Re: [PATCH nf] netfilter: nf_tables: report error if stateful obj's name is truncated, Patrick PIGNOL
[PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, fgao
- Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Feng Gao
  - Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Liping Zhang
    - Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Feng Gao
      - Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Feng Gao
[nf-next:fw 18/18] net/netfilter/nf_conntrack_standalone.c:647:2: error: call to '__compiletime_assert_647' declared with attribute error: BUILD_BUG_ON failed: NFCT_INFOMASK >= ARCH_KMALLOC_MINALIGN, kbuild test robot
[PATCH nft] src: Honor obligatory stateless printing of flow tables, Elise Lennion
- Re: [PATCH nft] src: Honor obligatory stateless printing of flow tables, Pablo Neira Ayuso
[PATCH nf-next 0/7] nf_tables set enhancements, Pablo Neira Ayuso
- [PATCH nf-next 2/7] netfilter: nf_tables: use struct nft_set_iter in set element flush, Pablo Neira Ayuso
- [PATCH nf-next 1/7] netfilter: nf_tables: pass netns to set->ops->remove(), Pablo Neira Ayuso
- [PATCH nf-next 4/7] netfilter: nf_tables: add flush field to struct nft_set_iter, Pablo Neira Ayuso
- [PATCH nf-next 3/7] netfilter: nf_tables: rename deactivate_one() to flush(), Pablo Neira Ayuso
- [PATCH nf-next 6/7] netfilter: nf_tables: add space notation to sets, Pablo Neira Ayuso
- [PATCH nf-next 5/7] netfilter: nf_tables: rename struct nft_set_estimate class field, Pablo Neira Ayuso
- [PATCH nf-next 7/7] netfilter: nf_tables: add bitmap set type, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: fix set->nelem leak, Pablo Neira Ayuso
[PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Florian Westphal
- Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Pablo Neira Ayuso
  - Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Florian Westphal
    - Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Pablo Neira Ayuso
      - Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Florian Westphal
      - Re: [PATCH nf-next] netfilter: ctnetlink: make more information available in DESTROY events, Victor Julien
[PATCH] iptables-save: Exit with error if unable to open proc file, Thomas Habets
- Re: [PATCH] iptables-save: Exit with error if unable to open proc file, Florian Westphal
- <Possible follow-ups>
- Re: [PATCH] iptables-save: Exit with error if unable to open proc file, thomas
  - Re: [PATCH] iptables-save: Exit with error if unable to open proc file, Florian Westphal
- Re: [PATCH] iptables-save: Exit with error if unable to open proc file, thomas
[PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Florian Westphal
- Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Denys Fedoryshchenko
- Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Nicolas Dichtel
- Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Denys Fedoryshchenko
  - Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, redux, Pablo Neira Ayuso
[nft PATCH 0/3] Boolean comparison and exthdr existence match support, Phil Sutter
- [nft PATCH 2/3] exthdr: Add support for exthdr specific flags, Phil Sutter
- [nft PATCH 3/3] exthdr: Implement exthdr existence check, Phil Sutter
- [nft PATCH 1/3] Implement boolean comparison in relational expression, Phil Sutter
- Re: [nft PATCH 0/3] Boolean comparison and exthdr existence match support, Pablo Neira Ayuso
  - Re: [nft PATCH 0/3] Boolean comparison and exthdr existence match support, Phil Sutter
    - Re: [nft PATCH 0/3] Boolean comparison and exthdr existence match support, Pablo Neira Ayuso
      - Re: [nft PATCH 0/3] Boolean comparison and exthdr existence match support, Phil Sutter
[nf-next PATCH] netfilter: nf_tables: exthdr: Add support for existence check, Phil Sutter
- Re: [nf-next PATCH] netfilter: nf_tables: exthdr: Add support for existence check, Pablo Neira Ayuso
[libnftnl PATCH] exthdr: Add support for exthdr flags, Phil Sutter
[nf-next PATCH] netfilter: nf_tables: cmp: support boolean operation, Phil Sutter
tcp state in conntrack destroy events, Victor Julien
- Re: tcp state in conntrack destroy events, Florian Westphal
  - Re: tcp state in conntrack destroy events, Victor Julien
  - Re: tcp state in conntrack destroy events, Jarno Rajahalme
    - Re: tcp state in conntrack destroy events, Florian Westphal
[PATCH nft 2/2] tests: py: Use stateless option on tests, Elise Lennion
- Re: [PATCH nft 2/2] tests: py: Use stateless option on tests, Pablo Neira Ayuso
  - Re: [PATCH nft 2/2] tests: py: Use stateless option on tests, Pablo Neira Ayuso
[PATCH nft 1/2] doc: Include stateless option, Elise Lennion
- Re: [PATCH nft 1/2] doc: Include stateless option, Pablo Neira Ayuso
AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
- Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
  - Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
    - Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
      - Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
    - Re: AUDIT_NETFILTER_PKT message format, Paul Moore
      - Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Patrick PIGNOL
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Patrick PIGNOL
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Pablo Neira Ayuso
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Paul Moore
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
        
        Re: AUDIT_NETFILTER_PKT message format, Steve Grubb
        
        Re: AUDIT_NETFILTER_PKT message format, Richard Guy Briggs
[RFC/PATCH 0/3] Fix ctnetlink regressions, Kevin Cernekee
- [RFC/PATCH 3/3] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Kevin Cernekee
  - Re: [RFC/PATCH 3/3] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Doug Anderson
- [RFC/PATCH 2/3] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Kevin Cernekee
  - Re: [RFC/PATCH 2/3] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Doug Anderson
- [RFC/PATCH 1/3] netfilter: ctnetlink: Fix regression in CTA_TIMEOUT processing, Kevin Cernekee
  - Re: [RFC/PATCH 1/3] netfilter: ctnetlink: Fix regression in CTA_TIMEOUT processing, Doug Anderson
- Re: [RFC/PATCH 0/3] Fix ctnetlink regressions, Pablo Neira Ayuso
[PATCH nft v2] src: Allow to list ruleset without stateful information, Elise Lennion
- Re: [PATCH nft v2] src: Allow to list ruleset without stateful information, Pablo Neira Ayuso
  - Re: [PATCH nft v2] src: Allow to list ruleset without stateful information, Pablo Neira Ayuso
[stable] bridge: netfilter: Fix dropping packets that moving through bridge interface, Artur Molchanov
- Re: [stable] bridge: netfilter: Fix dropping packets that moving through bridge interface, Pablo Neira Ayuso
  - Re: [stable] bridge: netfilter: Fix dropping packets that moving through bridge interface, Greg Kroah-Hartman
[PATCH nf] netfilter: conntrack: remove GC_MAX_EVICTS break, Florian Westphal
- Re: [PATCH nf] netfilter: conntrack: remove GC_MAX_EVICTS break, Nicolas Dichtel
  - Re: [PATCH nf] netfilter: conntrack: remove GC_MAX_EVICTS break, Pablo Neira Ayuso
ANNOUNCE: Netdev 2.1 Call For Proposals Opened!, Jamal Hadi Salim
[PATCH nf-next v2 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, fgao
- Re: [PATCH nf-next v2 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, Pablo Neira Ayuso
[PATCH nft] evaluate: fix export length and data corruption, Florian Westphal
- Re: [PATCH nft] evaluate: fix export length and data corruption, Pablo Neira Ayuso
[PATCH nf] netfilter: conntrack: refine gc worker heuristics, redux, Florian Westphal
- Re: [PATCH nf] netfilter: conntrack: refine gc worker heuristics, redux, Nicolas Dichtel
  - Re: [PATCH nf] netfilter: conntrack: refine gc worker heuristics, redux, Florian Westphal
4.9 conntrack performance issues, Denys Fedoryshchenko
- Re: 4.9 conntrack performance issues, Florian Westphal
  - Re: 4.9 conntrack performance issues, Denys Fedoryshchenko
    - Re: 4.9 conntrack performance issues, Florian Westphal
      - Re: 4.9 conntrack performance issues, Denys Fedoryshchenko
- Re: 4.9 conntrack performance issues, Guillaume Nault
  - Re: 4.9 conntrack performance issues, Denys Fedoryshchenko
    - Re: 4.9 conntrack performance issues, Guillaume Nault
ANNOUNCE: Netdev 2.1 in Montreal, Jamal Hadi Salim
[PATCH] netfilter: ipt_CLUSTERIP: fix build error without procfs, Arnd Bergmann
- Re: [PATCH] netfilter: ipt_CLUSTERIP: fix build error without procfs, Pablo Neira Ayuso
[PATCH nft] src: Allow to list ruleset without stateful information, Elise Lennion
- Re: [PATCH nft] src: Allow to list ruleset without stateful information, Pablo Neira Ayuso
[PATCH nft] build: add missing backslash to list of CFLAGS, Tobias Klauser
- Re: [PATCH nft] build: add missing backslash to list of CFLAGS, Pablo Neira Ayuso
[PATCH libnftnl] expr: Add const qualifiers to *2str translation arrays, Tobias Klauser
- Re: [PATCH libnftnl] expr: Add const qualifiers to *2str translation arrays, Pablo Neira Ayuso
[PATCH] examples: Remove the use of nftnl_mnl_batch_put(), Elise Lennion
- Re: [PATCH] examples: Remove the use of nftnl_mnl_batch_put(), Pablo Neira Ayuso
[PATCH nf-next 1/1] netfilter: nf_tables: Remove the rcu lock for dump functions, fgao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Remove the rcu lock for dump functions, Feng Gao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Remove the rcu lock for dump functions, Pablo Neira Ayuso
  - Re: [PATCH nf-next 1/1] netfilter: nf_tables: Remove the rcu lock for dump functions, Gao Feng
Re: probably serious conntrack/netfilter panic, 4.8.14, timers and intel turbo, Guillaume Nault
- Re: probably serious conntrack/netfilter panic, 4.8.14, timers and intel turbo, Denys Fedoryshchenko
- Re: probably serious conntrack/netfilter panic, 4.8.14, timers and intel turbo, Denys Fedoryshchenko
nftables conntrack set ops for zone, helper assignment, etc., Florian Westphal
- Re: nftables conntrack set ops for zone, helper assignment, etc., Pablo Neira Ayuso
  - Re: nftables conntrack set ops for zone, helper assignment, etc., Florian Westphal
    - Re: nftables conntrack set ops for zone, helper assignment, etc., Pablo Neira Ayuso
      - Re: nftables conntrack set ops for zone, helper assignment, etc., Florian Westphal
        
        Re: nftables conntrack set ops for zone, helper assignment, etc., Pablo Neira Ayuso
        
        Re: nftables conntrack set ops for zone, helper assignment, etc., Florian Westphal
[PATCH nf-next 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, fgao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, Pablo Neira Ayuso
  - Re: [PATCH nf-next 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, Gao Feng
    - Re: [PATCH nf-next 1/1] netfilter: nf_tables: Refine the codes to eliminate useless condition checks in nf_tables_api.c, Pablo Neira Ayuso
RFC: nftables: Boolean operation, two alternatives, Phil Sutter
[PATCH nf-next 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, fgao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Eliminate duplicated codes in nf_tables_table_enable, Pablo Neira Ayuso
[PATCH] netfilter: Fix typo in NF_CONNTRACK Kconfig option description, William Breathitt Gray
- Re: [PATCH] netfilter: Fix typo in NF_CONNTRACK Kconfig option description, Pablo Neira Ayuso
net_device features, Peter Skvarka
[PATCH iptables] extensions: libxt_rpfilter: add translation to nft, Liping Zhang
- Re: [PATCH iptables] extensions: libxt_rpfilter: add translation to nft, Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: pkttype: unnecessary to check ipv6 multicast address, Liping Zhang
- [PATCH nf-next 2/2] netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family, Liping Zhang
  - Re: [PATCH nf-next 2/2] netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family, Pablo Neira Ayuso
- Re: [PATCH nf-next 1/2] netfilter: pkttype: unnecessary to check ipv6 multicast address, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: fix possible oops when dumping stateful objects, Liping Zhang
- Re: [PATCH nf] netfilter: nf_tables: fix possible oops when dumping stateful objects, Pablo Neira Ayuso
[PATCH nf] netfilter: rpfilter: fix incorrect loopback packet judgment, Liping Zhang
- Re: [PATCH nf] netfilter: rpfilter: fix incorrect loopback packet judgment, Pablo Neira Ayuso
[PATCH] treewide: fix semicolon.cocci warnings, kbuild test robot
- Re: [PATCH] treewide: fix semicolon.cocci warnings, Michal Hocko
[PATCH nft 2/2] tests: shell: add maps tests, Elise Lennion
- Re: [PATCH nft 2/2] tests: shell: add maps tests, Pablo Neira Ayuso
[PATCH nft 1/2] src: sort set elements in netlink_get_setelems(), Elise Lennion
- Re: [PATCH nft 1/2] src: sort set elements in netlink_get_setelems(), Pablo Neira Ayuso
[PATCH nf-next 1/1] netfilter: nf_tables: Remove one useless condition check in nf_tables_newobj, fgao
- Re: [PATCH nf-next 1/1] netfilter: nf_tables: Remove one useless condition check in nf_tables_newobj, Feng Gao
[PATCH V2 conntrack-tools] conntrackd: cthelper: ssdp: Track UPnP eventing, Kevin Cernekee
- Re: [PATCH V2 conntrack-tools] conntrackd: cthelper: ssdp: Track UPnP eventing, Kevin Cernekee
- Re: [PATCH V2 conntrack-tools] conntrackd: cthelper: ssdp: Track UPnP eventing, Pablo Neira Ayuso
[PATCH nft] evaluate: Remove cache_update() in cmd_evaluate_flush(), Elise Lennion
- Re: [PATCH nft] evaluate: Remove cache_update() in cmd_evaluate_flush(), Anatole Denis
[PATCH nf-next v2 0/4] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Florian Westphal
- [PATCH nf-next v2 4/4] netfilter: merge ctinfo into nfct pointer storage area, Florian Westphal
  - Re: [PATCH nf-next v2 4/4] netfilter: merge ctinfo into nfct pointer storage area, Pablo Neira Ayuso
- [PATCH nf-next v2 2/4] netfilter: reset netfilter state when duplicating packet, Florian Westphal
- [PATCH nf-next v2 1/4] netfilter: conntrack: no need to pass ctinfo to error handler, Florian Westphal
- [PATCH nf-next v2 3/4] netfilter: reduce direct skb->nfct usage, Florian Westphal
[PATCH iptables] iptables 1.6.1 release, Pablo Neira Ayuso
[PATCH libnetfilter_cttimeout] Use __EXPORTED rather than EXPORT_SYMBOL, Kevin Cernekee
- [PATCH libnetfilter_cthelper] Use __EXPORTED rather than EXPORT_SYMBOL, Kevin Cernekee
  - Re: [PATCH libnetfilter_cthelper] Use __EXPORTED rather than EXPORT_SYMBOL, Pablo Neira Ayuso
- Re: [PATCH libnetfilter_cttimeout] Use __EXPORTED rather than EXPORT_SYMBOL, Pablo Neira Ayuso
[PATCH] netfilter: nf_tables: fix spelling mistakes, Alexander Alemayhu
- Re: [PATCH] netfilter: nf_tables: fix spelling mistakes, Pablo Neira Ayuso
[PATCH nf-next 0/4] netfilter: skbuff: merge nfctinfo bits and nfct pointer, Florian Westphal
- [PATCH nf-next 1/4] netfilter: conntrack: no need to pass ctinfo to error handler, Florian Westphal
- [PATCH nf-next 3/4] netfilter: reduce direct skb->nfct usage, Florian Westphal
- [PATCH nf-next 4/4] netfilter: merge ctinfo into nfct pointer storage area, Florian Westphal
  - Re: [PATCH nf-next 4/4] netfilter: merge ctinfo into nfct pointer storage area, kbuild test robot
  - Re: [PATCH nf-next 4/4] netfilter: merge ctinfo into nfct pointer storage area, kbuild test robot
- [PATCH nf-next 2/4] netfilter: reset netfilter state when duplicating packet, Florian Westphal
[PATCH net-next 5/8] bridge: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH net-next] nfnetlink/queue: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH net-next v2 13/27] bridge: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH net-next v2 16/27] nfnetlink/queue: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH] uapi: use wildcards to list files, Nicolas Dichtel
- Re: [PATCH] uapi: use wildcards to list files, David Miller
- Re: [PATCH] uapi: use wildcards to list files, Arnd Bergmann
  - Re: [PATCH] uapi: use wildcards to list files, Nicolas Dichtel
    - [PATCH v2 0/7] uapi: export all headers under uapi directories, Nicolas Dichtel
      - [PATCH v2 1/7] arm: put types.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v2 1/7] arm: put types.h in uapi, Arnd Bergmann
        
        Re: [PATCH v2 1/7] arm: put types.h in uapi, Russell King - ARM Linux
      - [PATCH v2 5/7] Makefile.headersinst: cleanup input files, Nicolas Dichtel
      - [PATCH v2 4/7] x86: put msr-index.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v2 4/7] x86: put msr-index.h in uapi, Borislav Petkov
        
        Re: [PATCH v2 4/7] x86: put msr-index.h in uapi, Andy Shevchenko
      - [PATCH v2 3/7] nios2: put setup.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v2 3/7] nios2: put setup.h in uapi, Arnd Bergmann
      - [PATCH v2 2/7] h8300: put bitsperlong.h in uapi, Nicolas Dichtel
      - [PATCH v2 6/7] Makefile.headersinst: remove destination-y option, Nicolas Dichtel
      - [PATCH v2 7/7] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Daniel Vetter
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Russell King - ARM Linux
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Christoph Hellwig
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Jan Engelhardt
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        Re: [PATCH v2 7/7] uapi: export all headers under uapi directories, Jeff Epler
        
        Re: [Linux-c6x-dev] [PATCH v2 7/7] uapi: export all headers under uapi directories, Mark Salter
      - Re: [PATCH v2 0/7] uapi: export all headers under uapi directories, Arnd Bergmann
        
        Re: [PATCH v2 0/7] uapi: export all headers under uapi directories, Jesper Nilsson
        
        [PATCH v3 0/8] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        [PATCH v3 4/8] x86: stop exporting msr-index.h to userland, Nicolas Dichtel
        
        [PATCH v3 3/8] nios2: put setup.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v3 3/8] nios2: put setup.h in uapi, Tobias Klauser
        
        [PATCH v3 5/8] Makefile.headersinst: cleanup input files, Nicolas Dichtel
        
        [PATCH v3 2/8] h8300: put bitsperlong.h in uapi, Nicolas Dichtel
        
        [PATCH v3 7/8] uapi: export all headers under uapi directories, Nicolas Dichtel
        
        [PATCH v3 8/8] uapi: export all arch specifics directories, Nicolas Dichtel
        
        [PATCH v3 6/8] Makefile.headersinst: remove destination-y option, Nicolas Dichtel
        
        [PATCH v3 1/8] arm: put types.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v3 1/8] arm: put types.h in uapi, Russell King - ARM Linux
        
        [no subject], David Howells
        
        Re: [PATCH v3 1/8] arm: put types.h in uapi, Nicolas Dichtel
        
        Re: [PATCH v3 1/8] arm: put types.h in uapi, Russell King - ARM Linux
        
        [no subject], David Howells
        
        Re: [PATCH v3 4/8] x86: stop exporting msr-index.h to userland, Nicolas Dichtel
        
        Re: [PATCH v3 4/8] x86: stop exporting msr-index.h to userland, Borislav Petkov
[PATCH nf-next 0/7] xtables: use dedicated copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 1/7] xtables: add xt_match, xt_target and data copy_to_user functions, Willem de Bruijn
- [PATCH nf-next 2/7] iptables: use match, target and data copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 3/7] ip6tables: use match, target and data copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 4/7] arptables: use match, target and data copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 6/7] xtables: use match, target and data copy_to_user helpers in compat, Willem de Bruijn
- [PATCH nf-next 5/7] ebtables: use match, target and data copy_to_user helpers, Willem de Bruijn
- [PATCH nf-next 7/7] xtables: extend matches and targets with .usersize, Willem de Bruijn
- Re: [PATCH nf-next 0/7] xtables: use dedicated copy_to_user helpers, Pablo Neira Ayuso
[PATCH v2 0/2] segtree: move huge arrays to heap, Oleksandr Natalenko
- [PATCH v2 2/2] segtree: allocate memory for arrays on heap, Oleksandr Natalenko
- [PATCH v2 1/2] utils: provide array allocation wrapper, Oleksandr Natalenko
- Re: [PATCH v2 0/2] segtree: move huge arrays to heap, Florian Westphal
[PATCH 0/2] segtree: move huge arrays to heap, Oleksandr Natalenko
- [PATCH 2/2] segtree: allocate memory for arrays on heap, Oleksandr Natalenko
- [PATCH 1/2] utils: provide array allocation wrapper, Oleksandr Natalenko
[PATCH nft] scanner: fix search_in_include_path test, Anatole Denis
- Re: [PATCH nft] scanner: fix search_in_include_path test, Pablo Neira Ayuso
[PATCH nf-next 0/2] nf_conntrack: validate crc32c on SCTP packets hitting PREROUTING hook, Davide Caratti
- [PATCH nf-next 1/2] netfilter: select LIBCRC32C together with SCTP conntrack, Davide Caratti
  - Re: [PATCH nf-next 1/2] netfilter: select LIBCRC32C together with SCTP conntrack, Marcelo Ricardo Leitner
- [PATCH nf-next 2/2] netfilter: conntrack: validate SCTP crc32c in PREROUTING, Davide Caratti
- Re: [PATCH nf-next 0/2] nf_conntrack: validate crc32c on SCTP packets hitting PREROUTING hook, Pablo Neira Ayuso
nft segfaults listing huge sets, Oleksandr Natalenko
- Re: nft segfaults listing huge sets, Oleksandr Natalenko
[PATCH] net/bridge: Fix dropping packets that moving through bridge interface, Artur Molchanov
- Re: [PATCH] net/bridge: Fix dropping packets that moving through bridge interface, Florian Westphal
  - Re: [PATCH] net/bridge: Fix dropping packets that moving through bridge interface, Pablo Neira Ayuso
    - Re: [PATCH] net/bridge: Fix dropping packets that moving through bridge interface, Artur Molchanov
[PATCH] Add a configure flag to link libc statically, Keno Fischer
- Re: [PATCH] Add a configure flag to link libc statically, Pablo Neira Ayuso
  - Re: [PATCH] Add a configure flag to link libc statically, Keno Fischer
    - Re: [PATCH] Add a configure flag to link libc statically, Pablo Neira Ayuso
[PATCH] Fix two compile errors during out-of-tree build, Keno Fischer
[PATCH nf-next 2/2] netfilter: nf_tables: Make sure the uniform style of condition blocks in nf_tables_newrule, fgao
- Re: [PATCH nf-next 2/2] netfilter: nf_tables: Make sure the uniform style of condition blocks in nf_tables_newrule, Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: nf_tables: Check chain's use count before alloc new handle in nf_tables_newrule, fgao
- Re: [PATCH nf-next 1/2] netfilter: nf_tables: Check chain's use count before alloc new handle in nf_tables_newrule, Pablo Neira Ayuso
[PATCH nf-next 1/1] netfilter: Use strlcpy to copy dev name instead of strncpy, fgao
- Re: [PATCH nf-next 1/1] netfilter: Use strlcpy to copy dev name instead of strncpy, Pablo Neira Ayuso
[PATCH xtables-addons] build: support for Linux 4.10, Ralph Sennhauser
- Re: [PATCH xtables-addons] build: support for Linux 4.10, Jan Engelhardt
[PATCH xtables-addons] build: support for Linux 4.9, Ralph Sennhauser
[PATCH iptables] extensions: libxt_connbytes: Add translation to nft, Liping Zhang
- Re: [PATCH iptables] extensions: libxt_connbytes: Add translation to nft, Pablo Neira Ayuso
[PATCH nft] ct: add average bytes per packet counter support, Liping Zhang
- Re: [PATCH nft] ct: add average bytes per packet counter support, Pablo Neira Ayuso
[PATCH libnftnl] src: ct: add average bytes per packet counter support, Liping Zhang
- Re: [PATCH libnftnl] src: ct: add average bytes per packet counter support, Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: nf_tables: add missing descriptions in nft_ct_keys, Liping Zhang
- [PATCH nf-next 2/2] netfilter: nft_ct: add average bytes per packet support, Liping Zhang
  - Re: [PATCH nf-next 2/2] netfilter: nft_ct: add average bytes per packet support, Pablo Neira Ayuso
- Re: [PATCH nf-next 1/2] netfilter: nf_tables: add missing descriptions in nft_ct_keys, Pablo Neira Ayuso
[PATCH conntrack-tools] conntrack: send mark filter to kernel iff set, Pablo Neira Ayuso
[PATCH nft 01/10] include: fetch nf_tables.h updates, Pablo Neira Ayuso
- [PATCH nft 04/10] src: listing of stateful objects, Pablo Neira Ayuso
- [PATCH nft 03/10] src: add used quota support, Pablo Neira Ayuso
- [PATCH nft 06/10] src: reset internal stateful objects, Pablo Neira Ayuso
- [PATCH nft 09/10] src: add support for stateful object maps, Pablo Neira Ayuso
- [PATCH nft 08/10] src: add stateful object reference expression, Pablo Neira Ayuso
- [PATCH nft 05/10] src: add/create/delete stateful objects, Pablo Neira Ayuso
- [PATCH nft 02/10] src: remove SET_F_* flag definitions, Pablo Neira Ayuso
- [PATCH nft 07/10] parser_bison: allow RESET token from rhs, Pablo Neira Ayuso
- [PATCH nft 10/10] src: support for stateful object monitoring, Pablo Neira Ayuso
BUG/panic in ctnetlink_conntrack_event in 4.8.11, Chris Boot
[PATCH v2 nf-next 0/2] netfilter: merge udp and udplite trackers, Florian Westphal
- [PATCH v2 nf-next 1/2] netfilter: merge udp and udplite conntrack helpers, Florian Westphal
- [PATCH v2 nf-next 2/2] netfilter: nat: merge udp and udplite helpers, Florian Westphal
- Re: [PATCH v2 nf-next 0/2] netfilter: merge udp and udplite trackers, Pablo Neira Ayuso
[ANNOUNCE] nftables 0.7 release, Pablo Neira Ayuso
- Re: build failure if --with-xtables [WAS: nftables 0.7 release], Robby Workman
  - Re: build failure if --with-xtables [WAS: nftables 0.7 release], Arturo Borrero Gonzalez
[PATCH] netfilter: xt_connlimit: use rb_entry(), Geliang Tang
- Re: [PATCH] netfilter: xt_connlimit: use rb_entry(), Pablo Neira Ayuso
[PATCH libnftnl] src: get rid of aliases and compat, Pablo Neira Ayuso
[PATCH nft] xt: use NFTNL_* definitions, Pablo Neira Ayuso
How to leverage IP & UDP checksum offloading from iptables kernel module?, Llorente Santos Jesus
Feature request: Load u32 value into packet mark, Llorente Santos Jesus
- Re: Feature request: Load u32 value into packet mark, Arturo Borrero Gonzalez
[PATCHv2 net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Xin Long
- Re: [PATCHv2 net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Pablo Neira Ayuso
[PATCH nft] mnl: add mnl_nft_setelem_batch_flush() and use it from netlink_flush_setelems(), Pablo Neira Ayuso
[ANNOUNCE] libnftnl 1.0.7 release, Pablo Neira Ayuso
[PATCH nft] expression: Show the base which pre-defined constants are displayed, Elise Lennion
- Re: [PATCH nft] expression: Show the base which pre-defined constants are displayed, Pablo Neira Ayuso
[-stable 4.8.y] Revert NAT conversion to rhashtable, Pablo Neira Ayuso
- Re: [-stable 4.8.y] Revert NAT conversion to rhashtable, Greg Kroah-Hartman
  - Re: [-stable 4.8.y] Revert NAT conversion to rhashtable, Pablo Neira Ayuso
    - Re: [-stable 4.8.y] Revert NAT conversion to rhashtable, Greg Kroah-Hartman
Re: nftables: masquerade sets wrong source address, Liping Zhang
- Re: nftables: masquerade sets wrong source address, Liping Zhang
- Re: nftables: masquerade sets wrong source address, Tom Hacohen
  - Re: nftables: masquerade sets wrong source address, Liping Zhang
    - Re: nftables: masquerade sets wrong source address, Tom Hacohen
      - Re: nftables: masquerade sets wrong source address, Florian Westphal
        
        Message not available
        
        Re: nftables: masquerade sets wrong source address, Tom Hacohen
libmnl compile failure., maowenan
- Re: libmnl compile failure., Phil Sutter
  - RE: libmnl compile failure., maowenan
  - RE: libmnl compile failure., maowenan
    - Re: libmnl compile failure., Florian Westphal
[PATCH 0/2] GTP tunneling fixes for net, Pablo Neira Ayuso
- [PATCH 1/2] gtp: gtp_check_src_ms_ipv4() always return success, Pablo Neira Ayuso
- [PATCH 2/2] gtp: Fix initialization of Flags octet in GTPv1 header, Pablo Neira Ayuso
- Re: [PATCH 0/2] GTP tunneling fixes for net, Pablo Neira Ayuso
- Re: [PATCH 0/2] GTP tunneling fixes for net, David Miller
[PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pau Espin Pedrol
- Re: [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pablo Neira Ayuso
- [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pau Espin Pedrol
  - Re: [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pablo Neira Ayuso
    - Re: [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pau Espin Pedrol
      - Re: [PATCH] netfilter: use fwmark_reflect in nf_send_reset, Pablo Neira Ayuso
  - [PATCH v2 1/2] netfilter: use fwmark_reflect in nf_send_reset, Pau Espin Pedrol
    - [PATCH v2 2/2] tcp: fix mark propagation with fwmark_reflect enabled, Pau Espin Pedrol
      - Re: [PATCH v2 2/2] tcp: fix mark propagation with fwmark_reflect enabled, Pablo Neira Ayuso
        
        Re: [PATCH v2 2/2] tcp: fix mark propagation with fwmark_reflect enabled, David Miller
    - Re: [PATCH v2 1/2] netfilter: use fwmark_reflect in nf_send_reset, Pablo Neira Ayuso
[PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Xin Long
- Re: [PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Marcelo Ricardo Leitner
- Re: [PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Pablo Neira Ayuso
  - Re: [PATCH net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP, Xin Long
[PATCH nf] netfilter: nft_payload: mangle ckecksum if NFT_PAYLOAD_L4CSUM_PSEUDOHDR is set, Pablo Neira Ayuso
[PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK, joseph . j . conley
- Re: [PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK, Pablo Neira Ayuso
  - Re: [PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK, Joseph Conley
    - Re: [PATCH] netfilter: conntrack: Fix ifdef checks for CONFIG_NF_CONNTRACK_MARK, Pablo Neira Ayuso
[PATCH nft] netlink_linearize: fix IPv6 layer 4 checksum mangling, Pablo Neira Ayuso
[PATCH nft] tests: py: update quota and payload, Pablo Neira Ayuso
[PATCH nft] mnl: don't send empty set elements netlink message to kernel, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: fix oob access, Florian Westphal
- Re: [PATCH nf] netfilter: nf_tables: fix oob access, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: nf_tables: fix oob access, Florian Westphal
[PATCH nft 1/2] segtree: wrong prefix expression length on interval_map_decompose(), Pablo Neira Ayuso
- [PATCH nft 2/2] segtree: don't trigger error on exact overlaps, Pablo Neira Ayuso
[PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers, Michał Mirosław
- Re: [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers, Sergei Shtylyov
  - Re: [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers, Michał Mirosław
    - Re: [PATCH net-next 13/27] bridge: use __vlan_hwaccel helpers, Toshiaki Makita
[PATCH net-next 16/27] nfnetlink/queue: use __vlan_hwaccel helpers, Michał Mirosław
[PATCH 1/2] libxtables: xtables: remove unnecessary debug code, Shyam Saini
- [PATCH 2/2] libxtables: xtables: Use getnameinfo(), Shyam Saini
  - Re: [PATCH 2/2] libxtables: xtables: Use getnameinfo(), Pablo Neira Ayuso
- Re: [PATCH 1/2] libxtables: xtables: remove unnecessary debug code, Pablo Neira Ayuso
[PATCH nf-next] netfilter: nft_queue: use raw_smp_processor_id(), Pablo Neira Ayuso
[PATCH nf-next] netfilter: nft_quota: reset quota after dump, Pablo Neira Ayuso
Adding element to interval map consumes entire memory, Richard Mörbitz
- Re: Adding element to interval map consumes entire memory, Pablo Neira Ayuso
  - Message not available
    - Re: Adding element to interval map consumes entire memory, Pablo Neira Ayuso
      - Re: Adding element to interval map consumes entire memory, Richard Mörbitz
        
        Re: Adding element to interval map consumes entire memory, Pablo Neira Ayuso

[Index of Archives] [LARTC] [Berkeley Packet Filter] [Bugtraq] [Yosemite Discussion]