Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH v2 nf-next 0/3] netfilter: x_tables: pack percpu counter allocations, Florian Westphal
  • [PATCH v2 nf-next 3/3] netfilter: x_tables: pack percpu counter allocations, Florian Westphal
    • Re: [PATCH v2 nf-next 3/3] netfilter: x_tables: pack percpu counter allocations, Eric Dumazet
  • [PATCH v2 nf-next 2/3] netfilter: x_tables: pass xt_counters struct to counter allocator, Florian Westphal
  • [PATCH v2 nf-next 1/3] netfilter: x_tables: pass xt_counters struct instead of packet counter, Florian Westphal
• [PATCH nf-next 0/3] netfilter: x_tables: pack percpu counter allocations, Florian Westphal
  • [PATCH nf-next 1/3] netfilter: x_tables: pass xt_counters struct instead of packet counter, Florian Westphal
    • Re: [PATCH nf-next 1/3] netfilter: x_tables: pass xt_counters struct instead of packet counter, Eric Dumazet
  • [PATCH nf-next 2/3] netfilter: x_tables: pass xt_counters struct to counter allocator, Florian Westphal
    • Re: [PATCH nf-next 2/3] netfilter: x_tables: pass xt_counters struct to counter allocator, Eric Dumazet
  • [PATCH nf-next 3/3] netfilter: x_tables: pack percpu counter allocations, Florian Westphal
    • Re: [PATCH nf-next 3/3] netfilter: x_tables: pack percpu counter allocations, Eric Dumazet
• [PATCH nf] netfilter: nft_range: add the missing NULL pointer check, Liping Zhang
  • Re: [PATCH nf] netfilter: nft_range: add the missing NULL pointer check, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation, Anders K. Pedersen | Cohaesio
  • Re: [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation, Liping Zhang
    • Re: [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation, Anders K. Pedersen | Cohaesio
      • Re: [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation, Liping Zhang
  • Re: [PATCH nf] netfilter: nf_tables: fix inconsistent element expiration calculation, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_dynset: fix incorrect element expiration calculation, Liping Zhang
  • Re: [PATCH nf] netfilter: nft_dynset: fix incorrect element expiration calculation, Anders K. Pedersen | Cohaesio
    • Re: [PATCH nf] netfilter: nft_dynset: fix incorrect element expiration calculation, Liping Zhang
• [PATCH nft V2] src: add log flags syntax support, Liping Zhang
  • Re: [PATCH nft V2] src: add log flags syntax support, Pablo Neira Ayuso
• netfilter/nftables oops in 4.8, Arturo Borrero Gonzalez
  • Re: netfilter/nftables oops in 4.8, Arturo Borrero Gonzalez
• [nft] about commit 3e5b0e406cf2b635200f9ee05ba8a158528fe622, Arturo Borrero Gonzalez
  • Re: [nft] about commit 3e5b0e406cf2b635200f9ee05ba8a158528fe622, Florian Westphal
• [PATCH v3 2/2] parser_bison: Use __error() to avoid syntax error message duplication, Elise Lennion
• [PATCH v3 1/2] erec: Make error messages in nft consistent, Elise Lennion
• [PATCH v2] erec: Make error messages in nft consistent, Elise Lennion
  • Re: [PATCH v2] erec: Make error messages in nft consistent, Elise Lennion
• [PATCH nf 0/2] netfilter: nat: fix regressions introduced by rhashtable conversion, Florian Westphal
  • [PATCH nf 1/2] netfilter: nat: fix cmp return value, Florian Westphal
  • [PATCH nf 2/2] netfilter: nat: switch to new rhlist interface, Florian Westphal
  • Re: [PATCH nf 0/2] netfilter: nat: fix regressions introduced by rhashtable conversion, Pablo Neira Ayuso
• Re: netfilter question, Eric Dumazet
  • Re: netfilter question, Florian Westphal
    • Re: netfilter question, Eric Dumazet
      • Re: netfilter question, Florian Westphal
        • Re: netfilter question, Eric Dumazet
        • Re: netfilter question, Eric Desrochers
        • Re: netfilter question, Eric Dumazet
          • Message not available
            • Re: netfilter question, Eric Dumazet
              • Re: netfilter question, Eric Dumazet
• [nft PATCH 1/3] tests: shell: testcase for adding many set elements, Arturo Borrero Gonzalez
  • [nft PATCH 2/3] tests: shell: testcase for deleting many set elements, Arturo Borrero Gonzalez
  • [nft PATCH 3/3] tests: shell: another testcase for deleting many set elements, Arturo Borrero Gonzalez
  • Re: [nft PATCH 1/3] tests: shell: testcase for adding many set elements, Pablo Neira Ayuso
• [nft PATCH] tests: shell: allow to execute a single testcase, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests: shell: allow to execute a single testcase, Pablo Neira Ayuso
• [PATCH nf-next 0/3] Additional nf_hook_entry compaction, Aaron Conole
  • [PATCH nf-next 1/3] netfilter: introduce accessor functions for hook entries, Aaron Conole
  • [PATCH nf-next 2/3] netfilter: decouple nf_hook_entry and nf_hook_ops, Aaron Conole
  • [PATCH nf-next 3/3] netfilter: convert while loops to for loops, Aaron Conole
  • Re: [PATCH nf-next 0/3] Additional nf_hook_entry compaction, Pablo Neira Ayuso
• [PATCH v4 nf-next] netfilter: allow disabling conntrack-on-by-default, Florian Westphal
  • [PATCH nf-next 1/7] conntrack: remove unused init_net hook, Florian Westphal
  • [PATCH v4 nf-next 2/7] netfilter: add and use nf_ct_netns_get/put, Florian Westphal
  • [PATCH v4 nf-next 3/7] netfilter: nat: add dependencies on conntrack module, Florian Westphal
  • [PATCH v4 nf-next 4/7] nftables: add conntrack dependencies for nat/masq/redir expressions, Florian Westphal
  • [PATCH v4 nf-next 5/7] netfilter: conntrack: register hooks in netns when needed by ruleset, Florian Westphal
  • [PATCH nf-next 6/7] conntrack: add nf_conntrack_default_on sysctl, Florian Westphal
  • [PATCH v4 nf-next 7/7] netfilter: defrag: only register defrag functionality if needed, Florian Westphal
  • Re: [PATCH v4 nf-next] netfilter: allow disabling conntrack-on-by-default, Pablo Neira Ayuso
• [PATCH] erec: Make error messages in nft consistent, Elise Lennion
  • Re: [PATCH] erec: Make error messages in nft consistent, Pablo Neira Ayuso
    • Re: [PATCH] erec: Make error messages in nft consistent, Pablo Neira Ayuso
• [PATCH nf-next v2 0/4] netfilter: built-in conntrack support for DCCP, SCTP, UDPlite, Davide Caratti
  • [PATCH nf-next v2 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include, Davide Caratti
    • Re: [PATCH nf-next v2 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include, Mikko Rapeli
  • [PATCH nf-next v2 2/4] netfilter: conntrack: built-in support for DCCP, Davide Caratti
  • [PATCH nf-next v2 3/4] netfilter: conntrack: built-in support for SCTP, Davide Caratti
  • [PATCH nf-next v2 4/4] netfilter: conntrack: built-in support for UDPlite, Davide Caratti
  • Re: [PATCH nf-next v2 0/4] netfilter: built-in conntrack support for DCCP, SCTP, UDPlite, Pablo Neira Ayuso
• [GIT PULL nf-next 0/2] IPVS Updates for v4.10, Simon Horman
  • [PATCH nf-next 2/2] ipvs: Decrement ttl, Simon Horman
  • [PATCH nf-next 1/2] ipvs: Use IS_ERR_OR_NULL(svc) instead of IS_ERR(svc) || svc == NULL, Simon Horman
  • Re: [GIT PULL nf-next 0/2] IPVS Updates for v4.10, Pablo Neira Ayuso
• [PATCH nft] mnl: use nftnl_set_elems_nlmsg_build_payload_iter() when deleting elements, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: validate maximum value of u32 netlink hash attribute, Laura Garcia Liebana
  • Re: [PATCH nf-next] netfilter: nf_tables: validate maximum value of u32 netlink hash attribute, Pablo Neira Ayuso
• [PATCH 1/2 nft] tests: py: add some testcases for log flags, Pablo Neira Ayuso
  • [PATCH 2/2 nft] tests: py: missing range conversion in icmpv6, Pablo Neira Ayuso
• iptables: incorrect package match w/ conntrack_sip, Juergen Schmidt
• [PATCH nf-next] netfilter: nfnetlink_log: add "nf-logger-5-1" module alias name, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nfnetlink_log: add "nf-logger-5-1" module alias name, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_log: do not assume ethernet header in netdev family, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nf_log: do not assume ethernet header in netdev family, Pablo Neira Ayuso
• [PATCH nf-next,RFC] netfilter: nft_meta: add cgroup version 2 support, Pablo Neira Ayuso
  • Re: [PATCH nf-next,RFC] netfilter: nft_meta: add cgroup version 2 support, Daniel Mack
    • Re: [PATCH nf-next,RFC] netfilter: nft_meta: add cgroup version 2 support, Pablo Neira Ayuso
• [PATCH 00/39] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 01/39] netfilter: get rid of useless debugging from core, Pablo Neira Ayuso
  • [PATCH 03/39] netfilter: kill NF_HOOK_THRESH() and state->tresh, Pablo Neira Ayuso
  • [PATCH 04/39] netfilter: deprecate NF_STOP, Pablo Neira Ayuso
  • [PATCH 02/39] netfilter: remove comments that predate rcu days, Pablo Neira Ayuso
  • [PATCH 13/39] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Pablo Neira Ayuso
  • [PATCH 17/39] netfilter: ipset: Mark some helper args as const., Pablo Neira Ayuso
  • [PATCH 23/39] netfilter: ipset: Regroup ip_set_put_extensions and add extern, Pablo Neira Ayuso
  • [PATCH 26/39] netfilter: ipset: Count non-static extension memory for userspace, Pablo Neira Ayuso
  • [PATCH 39/39] netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL test, Pablo Neira Ayuso
  • [PATCH 38/39] netfilter: conntrack: remove unused netns_ct member, Pablo Neira Ayuso
  • [PATCH 32/39] netfilter: ipset: Make struct htype per ipset family, Pablo Neira Ayuso
  • [PATCH 36/39] netfilter: ipset: use setup_timer() and mod_timer()., Pablo Neira Ayuso
  • [PATCH 37/39] netfilter: ipset: hash: fix boolreturn.cocci warnings, Pablo Neira Ayuso
  • [PATCH 35/39] netfilter: ipset: hash:ipmac type support added to ipset, Pablo Neira Ayuso
  • [PATCH 33/39] netfilter: ipset: Collapse same condition body to a single one, Pablo Neira Ayuso
  • [PATCH 31/39] netfilter: ipset: Optimize hash creation routine, Pablo Neira Ayuso
  • [PATCH 34/39] netfilter: ipset: Fix reported memory size for hash:* types, Pablo Neira Ayuso
  • [PATCH 27/39] netfilter: ipset: Remove redundant mtype_expire() arguments, Pablo Neira Ayuso
  • [PATCH 30/39] netfilter: ipset: Make sure element data size is a multiple of u32, Pablo Neira Ayuso
  • [PATCH 29/39] netfilter: ipset: Make NLEN compile time constant for hash types, Pablo Neira Ayuso
  • [PATCH 24/39] netfilter: ipset: Add element count to hash headers, Pablo Neira Ayuso
  • [PATCH 28/39] netfilter: ipset: Simplify mtype_expire() for hash types, Pablo Neira Ayuso
  • [PATCH 19/39] netfilter: ipset: Improve skbinfo get/init helpers, Pablo Neira Ayuso
  • [PATCH 18/39] netfilter: ipset: Headers file cleanup, Pablo Neira Ayuso
  • [PATCH 25/39] netfilter: ipset: Add element count to all set types header, Pablo Neira Ayuso
  • [PATCH 22/39] netfilter: ipset: Separate memsize calculation code into dedicated function, Pablo Neira Ayuso
  • [PATCH 21/39] netfilter: ipset: Split extensions into separate files, Pablo Neira Ayuso
  • [PATCH 20/39] netfilter: ipset: Use kmalloc() in comment extension helper, Pablo Neira Ayuso
    • RE: [PATCH 20/39] netfilter: ipset: Use kmalloc() in comment extension helper, David Laight
  • [PATCH 12/39] netfilter: nf_tables: simplify the basic expressions' init routine, Pablo Neira Ayuso
  • [PATCH 16/39] netfilter: ipset: Remove extra whitespaces in ip_set.h, Pablo Neira Ayuso
  • [PATCH 15/39] netfilter: conntrack: fix NF_REPEAT handling, Pablo Neira Ayuso
  • [PATCH 08/39] netfilter: remove hook_entries field from nf_hook_state, Pablo Neira Ayuso
  • [PATCH 14/39] udp: provide udp{4,6}_lib_lookup for nf_socket_ipv{4,6}, Pablo Neira Ayuso
  • [PATCH 10/39] netfilter: handle NF_REPEAT from nf_conntrack_in(), Pablo Neira Ayuso
  • [PATCH 11/39] netfilter: nft_hash: get random bytes if seed is not specified, Pablo Neira Ayuso
  • [PATCH 09/39] netfilter: merge nf_iterate() into nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH 07/39] netfilter: use switch() to handle verdict cases from nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH 06/39] netfilter: nf_tables: use hook state from xt_action_param structure, Pablo Neira Ayuso
  • [PATCH 05/39] netfilter: x_tables: move hook state into xt_action_param structure, Pablo Neira Ayuso
  • Re: [PATCH 00/39] Netfilter updates for net-next, David Miller
• [PATCH] netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL test, Julia Lawall
  • Re: [PATCH] netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL test, Pablo Neira Ayuso
• question about xt_find_table_lock, Julia Lawall
  • Re: question about xt_find_table_lock, Florian Westphal
    • Re: question about xt_find_table_lock, Julia Lawall
• [PATCH nf-next 0/4] netfilter: built-in conntrack support for DCCP, SCTP, UDPlite, Davide Caratti
  • [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include, Davide Caratti
    • Re: [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include, Mikko Rapeli
      • Re: [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include, Davide Caratti
        • Re: [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include, Davide Caratti
          • Re: [PATCH nf-next 1/4] netfilter: nf_conntrack_tuple_common.h: fix #include, mikko . rapeli
  • [PATCH nf-next 2/4] netfilter: conntrack: built-in support for DCCP, Davide Caratti
  • [PATCH nf-next 3/4] netfilter: conntrack: built-in support for SCTP, Davide Caratti
  • [PATCH nf-next 4/4] netfilter: conntrack: built-in support for UDPlite, Davide Caratti
• [PATCH nf] netfilter: fix nf_conntrack_helper documentation, Florian Westphal
• [PATCH nf-next] netfilter: conntrack: remove unused netns_ct member, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: remove unused netns_ct member, Pablo Neira Ayuso
• [PATCH 00/22] ipset patches for nf-next, v3, Jozsef Kadlecsik
  • [PATCH 01/22] netfilter: ipset: Remove extra whitespaces in ip_set.h, Jozsef Kadlecsik
  • [PATCH 02/22] netfilter: ipset: Mark some helper args as const., Jozsef Kadlecsik
  • [PATCH 06/22] netfilter: ipset: Split extensions into separate files, Jozsef Kadlecsik
  • [PATCH 05/22] netfilter: ipset: Use kmalloc() in comment extension helper, Jozsef Kadlecsik
  • [PATCH 12/22] netfilter: ipset: Remove redundant mtype_expire() arguments, Jozsef Kadlecsik
  • [PATCH 08/22] netfilter: ipset: Regroup ip_set_put_extensions and add extern, Jozsef Kadlecsik
  • [PATCH 09/22] netfilter: ipset: Add element count to hash headers, Jozsef Kadlecsik
  • [PATCH 21/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • [PATCH 20/22] netfilter: ipset: hash:ipmac type support added to ipset, Jozsef Kadlecsik
  • [PATCH 14/22] netfilter: ipset: Make NLEN compile time constant for hash types, Jozsef Kadlecsik
  • [PATCH 10/22] netfilter: ipset: Add element count to all set types header, Jozsef Kadlecsik
  • [PATCH 22/22] netfilter: ipset: hash: fix boolreturn.cocci warnings, Jozsef Kadlecsik
  • [PATCH 13/22] netfilter: ipset: Simplify mtype_expire() for hash types, Jozsef Kadlecsik
  • [PATCH 18/22] netfilter: ipset: Collapse same condition body to a single one, Jozsef Kadlecsik
  • [PATCH 11/22] netfilter: ipset: Count non-static extension memory for userspace, Jozsef Kadlecsik
  • [PATCH 19/22] netfilter: ipset: Fix reported memory size for hash:* types, Jozsef Kadlecsik
  • [PATCH 17/22] netfilter: ipset: Make struct htype per ipset family, Jozsef Kadlecsik
  • [PATCH 07/22] netfilter: ipset: Separate memsize calculation code into dedicated function, Jozsef Kadlecsik
  • [PATCH 04/22] netfilter: ipset: Improve skbinfo get/init helpers, Jozsef Kadlecsik
  • [PATCH 15/22] netfilter: ipset: Make sure element data size is a multiple of u32, Jozsef Kadlecsik
  • [PATCH 03/22] netfilter: ipset: Headers file cleanup, Jozsef Kadlecsik
  • [PATCH 16/22] netfilter: ipset: Optimize hash creation routine, Jozsef Kadlecsik
  • Re: [PATCH 00/22] ipset patches for nf-next, v3, Pablo Neira Ayuso
• [PATCH 00/14] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 01/14] netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled, Pablo Neira Ayuso
  • [PATCH 06/14] netfilter: conntrack: avoid excess memory allocation, Pablo Neira Ayuso
  • [PATCH 14/14] netfilter: nf_tables: fix oops when inserting an element into a verdict map, Pablo Neira Ayuso
  • [PATCH 13/14] netfilter: conntrack: refine gc worker heuristics, Pablo Neira Ayuso
  • [PATCH 11/14] netfilter: connmark: ignore skbs with magic untracked conntrack objects, Pablo Neira Ayuso
  • [PATCH 08/14] netfilter: nf_tables: destroy the set if fail to add transaction, Pablo Neira Ayuso
  • [PATCH 12/14] netfilter: conntrack: fix CT target for UNSPEC helpers, Pablo Neira Ayuso
  • [PATCH 10/14] ipvs: use IPVS_CMD_ATTR_MAX for family.maxattr, Pablo Neira Ayuso
  • [PATCH 09/14] netfilter: nft_dup: do not use sreg_dev if the user doesn't specify it, Pablo Neira Ayuso
  • [PATCH 07/14] netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning, Pablo Neira Ayuso
  • [PATCH 03/14] netfilter: nf_tables: fix race when create new element in dynset, Pablo Neira Ayuso
  • [PATCH 02/14] netfilter: nf_tables: fix *leak* when expr clone fail, Pablo Neira Ayuso
  • [PATCH 04/14] netfilter: nf_conntrack_sip: extend request line validation, Pablo Neira Ayuso
  • [PATCH 05/14] netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_check, Pablo Neira Ayuso
  • Re: [PATCH 00/14] Netfilter fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 00/14] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 07/14] netfilter: ipt_CLUSTERIP: fix build error without procfs, Pablo Neira Ayuso
    • [PATCH 09/14] netfilter: conntrack: refine gc worker heuristics, redux, Pablo Neira Ayuso
      • Re: [PATCH 09/14] netfilter: conntrack: refine gc worker heuristics, redux, Nicolas Dichtel
        • Re: [PATCH 09/14] netfilter: conntrack: refine gc worker heuristics, redux, Nicolas Dichtel
          • Re: [PATCH 09/14] netfilter: conntrack: refine gc worker heuristics, redux, Pablo Neira Ayuso
    • [PATCH 05/14] netfilter: nf_tables: fix possible oops when dumping stateful objects, Pablo Neira Ayuso
    • [PATCH 14/14] netfilter: nf_tables: bump set->ndeact on set flush, Pablo Neira Ayuso
    • [PATCH 13/14] netfilter: nf_tables: deconstify walk callback function, Pablo Neira Ayuso
    • [PATCH 11/14] netfilter: nft_log: restrict the log prefix length to 127, Pablo Neira Ayuso
    • [PATCH 10/14] netfilter: nf_tables: validate the name size when possible, Pablo Neira Ayuso
    • [PATCH 06/14] netfilter: Fix typo in NF_CONNTRACK Kconfig option description, Pablo Neira Ayuso
    • [PATCH 03/14] netfilter: nf_tables: fix spelling mistakes, Pablo Neira Ayuso
    • [PATCH 04/14] netfilter: rpfilter: fix incorrect loopback packet judgment, Pablo Neira Ayuso
    • [PATCH 08/14] netfilter: conntrack: remove GC_MAX_EVICTS break, Pablo Neira Ayuso
    • [PATCH 12/14] netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCL, Pablo Neira Ayuso
    • [PATCH 02/14] tcp: fix mark propagation with fwmark_reflect enabled, Pablo Neira Ayuso
      • Re: [PATCH 02/14] tcp: fix mark propagation with fwmark_reflect enabled, Eric Dumazet
        • Re: [PATCH 02/14] tcp: fix mark propagation with fwmark_reflect enabled, Pablo Neira Ayuso
          • Re: [PATCH 02/14] tcp: fix mark propagation with fwmark_reflect enabled, Eric Dumazet
    • [PATCH 01/14] netfilter: use fwmark_reflect in nf_send_reset, Pablo Neira Ayuso
    • Re: [PATCH 00/14] Netfilter fixes for net, David Miller
  • [PATCH 00/14] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 01/14] netfilter: ipv6: fix oops when defragmenting locally generated fragments, Pablo Neira Ayuso
    • [PATCH 04/14] Revert "netfilter: nft_numgen: add map lookups for numgen random operations", Pablo Neira Ayuso
    • [PATCH 03/14] netfilter: bridge: define INT_MIN & INT_MAX in userspace, Pablo Neira Ayuso
    • [PATCH 02/14] netfilter: nft_osf: check if attribute is present, Pablo Neira Ayuso
    • [PATCH 14/14] netfilter: conntrack: fix calculation of next bucket number in early_drop, Pablo Neira Ayuso
    • [PATCH 07/14] netfilter: ipset: fix ip_set_list allocation failure, Pablo Neira Ayuso
    • [PATCH 13/14] netfilter: nft_compat: ebtables 'nat' table is normal chain type, Pablo Neira Ayuso
    • [PATCH 12/14] netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr, Pablo Neira Ayuso
    • [PATCH 11/14] netfilter: conntrack: add nf_{tcp,udp,sctp,icmp,dccp,icmpv6,generic}_pernet(), Pablo Neira Ayuso
    • [PATCH 10/14] netfilter: ipset: Fix calling ip_set() macro at dumping, Pablo Neira Ayuso
    • [PATCH 09/14] netfilter: xt_IDLETIMER: add sysfs filename checking routine, Pablo Neira Ayuso
    • [PATCH 08/14] netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment(), Pablo Neira Ayuso
    • [PATCH 05/14] netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace, Pablo Neira Ayuso
    • [PATCH 06/14] netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net, Pablo Neira Ayuso
    • Re: [PATCH 00/14] Netfilter fixes for net, David Miller
  • [PATCH 00/14] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 01/14] netfilter: nfnetlink: avoid deadlock due to synchronous request_module, Pablo Neira Ayuso
    • [PATCH 02/14] netfilter: Fix rpfilter dropping vrf packets by mistake, Pablo Neira Ayuso
    • [PATCH 05/14] netfilter: nf_tables: fix module autoload for redir, Pablo Neira Ayuso
    • [PATCH 04/14] netfilter: Update obsolete comments referring to ip_conntrack, Pablo Neira Ayuso
    • [PATCH 07/14] netfilter: conntrack: always store window size un-scaled, Pablo Neira Ayuso
    • [PATCH 09/14] netfilter: nft_hash: fix symhash with modulus one, Pablo Neira Ayuso
    • [PATCH 03/14] netfilter: nf_conntrack_sip: fix expectation clash, Pablo Neira Ayuso
    • [PATCH 06/14] netfilter: synproxy: fix erroneous tcp mss option, Pablo Neira Ayuso
    • [PATCH 08/14] netfilter: nf_tables: don't fail when updating base chain policy, Pablo Neira Ayuso
    • Re: [PATCH 00/14] Netfilter fixes for net, David Miller
• linux-next: manual merge of the net-next tree with the netfilter tree, Stephen Rothwell
  • Re: linux-next: manual merge of the net-next tree with the netfilter tree, Pablo Neira Ayuso
    • Re: linux-next: manual merge of the net-next tree with the netfilter tree, David Miller
  • <Possible follow-ups>
  • linux-next: manual merge of the net-next tree with the netfilter tree, Stephen Rothwell
    • Re: linux-next: manual merge of the net-next tree with the netfilter tree, Stephen Rothwell
      • Re: linux-next: manual merge of the net-next tree with the netfilter tree, Pablo Neira Ayuso
  • linux-next: manual merge of the net-next tree with the netfilter tree, Stephen Rothwell
• nf_nat_tftp broken in 4.8?, Florian Fainelli
  • Re: nf_nat_tftp broken in 4.8?, Florian Westphal
    • Re: nf_nat_tftp broken in 4.8?, Florian Fainelli
• Re: linux-next: Tree for Nov 9 (netdev, netfilter v6), Randy Dunlap
• [PATCH] netfilter: Update nf_send_reset6 to consider L3 domain, David Ahern
  • Re: [PATCH] netfilter: Update nf_send_reset6 to consider L3 domain, Pablo Neira Ayuso
• [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain, David Ahern
  • Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain, David Ahern
      • Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain, David Ahern
  • Re: [PATCH] netfilter: Update ip_route_me_harder to consider L3 domain, Pablo Neira Ayuso
• [nft PATCH] tests: shell: add testcases for comments in set elements, Arturo Borrero Gonzalez
• [PATCH nft] segtree: keep element comments in set intervals, Pablo Neira Ayuso
  • Re: [PATCH nft] segtree: keep element comments in set intervals, Arturo Borrero Gonzalez
• sip helper doesn't match on calls to myself, Juergen Schmidt
• Re: linux-next: Tree for Nov 8 (netdev, netfilter), Randy Dunlap
• [PATCH nft] tests: shell: add test case for inserting element into verdict map, Liping Zhang
  • Re: [PATCH nft] tests: shell: add test case for inserting element into verdict map, Arturo Borrero Gonzalez
  • Re: [PATCH nft] tests: shell: add test case for inserting element into verdict map, Pablo Neira Ayuso
• [PATCH 1/2] [net-next] udp: provide udp{4,6}_lib_lookup for nf_socket_ipv{4,6}, Arnd Bergmann
  • [PATCH 2/2] [nf-next] netfilter: fix NF_REPEAT handling, Arnd Bergmann
    • Re: [PATCH 2/2] [nf-next] netfilter: fix NF_REPEAT handling, Pablo Neira Ayuso
  • Re: [PATCH 1/2] [net-next] udp: provide udp{4,6}_lib_lookup for nf_socket_ipv{4,6}, Pablo Neira Ayuso
• "random" syn packets dropped, Bjørnar Ness
  • Re: "random" syn packets dropped, Florian Westphal
    • Re: "random" syn packets dropped, Bjørnar Ness
      • Message not available
        • Re: "random" syn packets dropped, Bjørnar Ness
          • Re: "random" syn packets dropped, Florian Westphal
            • Re: "random" syn packets dropped, Bjørnar Ness
              • Re: "random" syn packets dropped, Pablo Neira Ayuso
                • Re: "random" syn packets dropped, Bjørnar Ness
• [PATCH nf-next v3] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Davide Caratti
  • Re: [PATCH nf-next v3] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Pablo Neira Ayuso
• [PATCH] net/netfilter: Fix use uninitialized warn in nft_range_eval(), Shuah Khan
  • Re: [PATCH] net/netfilter: Fix use uninitialized warn in nft_range_eval(), Pablo Neira Ayuso
• nfqueue: Get pid of socket owner, David Buchmann
  • Re: nfqueue: Get pid of socket owner, Florian Westphal
    • Re: nfqueue: Get pid of socket owner, Florian Westphal
• [PATCH] extensions: libxt_mangle: Use getaddrinfo(), Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_mangle: Use getaddrinfo(), Pablo Neira Ayuso
• [PATCH] iptables: xtables-arp: Use getaddrinfo(), Shivani Bhardwaj
  • Re: [PATCH] iptables: xtables-arp: Use getaddrinfo(), Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: simplify the basic expressions' init routine, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nf_tables: simplify the basic expressions' init routine, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix oops when inserting an element into a verdict map, Liping Zhang
  • Re: [PATCH nf] netfilter: nf_tables: fix oops when inserting an element into a verdict map, Arturo Borrero Gonzalez
    • Re: [PATCH nf] netfilter: nf_tables: fix oops when inserting an element into a verdict map, Liping Zhang
  • Re: [PATCH nf] netfilter: nf_tables: fix oops when inserting an element into a verdict map, Pablo Neira Ayuso
• [nf-next:master 9/12] undefined reference to `udp6_lib_lookup', kbuild test robot
• [nf-next:master 9/12] ERROR: "udp4_lib_lookup" [net/ipv4/netfilter/nf_socket_ipv4.ko] undefined!, kbuild test robot
• [PATCH nf v4] netfilter: conntrack: refine gc worker heuristics, Florian Westphal
  • Re: [PATCH nf v4] netfilter: conntrack: refine gc worker heuristics, Nicolas Dichtel
  • Re: [PATCH nf v4] netfilter: conntrack: refine gc worker heuristics, Pablo Neira Ayuso
• [PATCH v3 nft 2/4] src: add offset attribute for hash expression, Laura Garcia Liebana
  • Re: [PATCH v3 nft 2/4] src: add offset attribute for hash expression, Pablo Neira Ayuso
• [PATCH v3 nft 1/4] src: make hash seed attribute optional, Laura Garcia Liebana
  • Re: [PATCH v3 nft 1/4] src: make hash seed attribute optional, Pablo Neira Ayuso
• [conntrack-tools PATCH 1/3] log: introduce a mechanism to know if log was initialized, Arturo Borrero Gonzalez
  • [conntrack-tools PATCH 2/3] conntrackd: replace error reporting in the config parser with dlog(), Arturo Borrero Gonzalez
  • [conntrack-tools PATCH 3/3] conntrackd: replace fprintf calls with dlog(), Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH 1/3] log: introduce a mechanism to know if log was initialized, Pablo Neira Ayuso
• [PATCH nf v3] netfilter: conntrack: refine gc worker heuristics, Florian Westphal
  • Re: [PATCH nf v3] netfilter: conntrack: refine gc worker heuristics, Nicolas Dichtel
• [Patch net] ipvs: use IPVS_CMD_ATTR_MAX for family.maxattr, Cong Wang
  • Re: [Patch net] ipvs: use IPVS_CMD_ATTR_MAX for family.maxattr, Simon Horman
    • Re: [Patch net] ipvs: use IPVS_CMD_ATTR_MAX for family.maxattr, Pablo Neira Ayuso
• [nf-next:master 8/10] net/netfilter/nfnetlink_queue.c:922:16: sparse: incompatible types in comparison expression (different address spaces), kbuild test robot
• [PATCH nf-next] netfilter: nft_hash: get random bytes if seed is not specified, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: fix CT target for UNSPEC helpers, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: fix CT target for UNSPEC helpers, Pablo Neira Ayuso
• [PATCH nf-next,v2 01/10] netfilter: get rid of useless debugging from core, Pablo Neira Ayuso
  • [PATCH nf-next,v2 04/10] netfilter: deprecate NF_STOP, Pablo Neira Ayuso
  • [PATCH nf-next,v2 07/10] netfilter: use switch() to handle verdict cases from nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH nf-next,v2 02/10] netfilter: remove comments that predate rcu days, Pablo Neira Ayuso
  • [PATCH nf-next,v2 03/10] netfilter: kill NF_HOOK_THRESH() and state->tresh, Pablo Neira Ayuso
  • [PATCH nf-next,v2 05/10] netfilter: x_tables: move hook state into xt_action_param structure, Pablo Neira Ayuso
  • [PATCH nf-next,v2 06/10] netfilter: nf_tables: use hook state from xt_action_param structure, Pablo Neira Ayuso
  • [PATCH nf-next,v2 08/10] netfilter: remove hook_entries field from nf_hook_state, Pablo Neira Ayuso
  • [PATCH nf-next,v2 09/10] netfilter: merge nf_iterate() into nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH nf-next 10/10] netfilter: handle NF_REPEAT from nf_conntrack_in(), Pablo Neira Ayuso
• [nft PATCH 1/3] tests: shell: delete useless stderr output in testcase, Arturo Borrero Gonzalez
  • [nft PATCH 2/3] tests: shell: introduce the cache testcases directory, Arturo Borrero Gonzalez
  • [nft PATCH 3/3] tests: shell: add a new testcase for ruleset loading bug, Arturo Borrero Gonzalez
  • Re: [nft PATCH 1/3] tests: shell: delete useless stderr output in testcase, Pablo Neira Ayuso
• [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, Florian Westphal
  • Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, Nicolas Dichtel
    • Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, Florian Westphal
      • Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, Nicolas Dichtel
        • Re: [PATCH nf v2] netfilter: conntrack: refine gc worker heuristics, Florian Westphal
• [PATCH nf] netfilter: conntrack: refine gc worker heuristics, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: refine gc worker heuristics, Eric Dumazet
    • Re: [PATCH nf] netfilter: conntrack: refine gc worker heuristics, Florian Westphal
• Rebasing nf-next..., Pablo Neira Ayuso
  • <Possible follow-ups>
  • rebasing nf-next..., Pablo Neira Ayuso
• [PATCH v2 nft 2/4] src: add offset attribute for hash expression, Laura Garcia Liebana
• [PATCH v2 nft 1/4] src: make hash seed attribute optional, Laura Garcia Liebana
• [PATCH nft] netlink_linearize: skip set element expression in flow table key, Pablo Neira Ayuso
• [PATCH next] nft_meta: add skb hash get support, Florian Westphal
  • Re: [PATCH next] nft_meta: add skb hash get support, kbuild test robot
  • Re: [PATCH next] nft_meta: add skb hash get support, Pablo Neira Ayuso
  • Re: [PATCH next] nft_meta: add skb hash get support, Pablo Neira Ayuso
• [PATCH nft] tests/py: add missing payload test for numgen offset, Pablo Neira Ayuso
• [PATCH libnftnl] expr: missing offset handling for snprintf() in hash and numgen, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: fix compilation with !CONFIG_NF_CONNTRACK, Pablo Neira Ayuso
• [PATCH next] netfilter: nf_queue: place volatile data in own cacheline, Florian Westphal
  • Re: [PATCH next] netfilter: nf_queue: place volatile data in own cacheline, Pablo Neira Ayuso
• [PATCH nft v2] ct: fix "ct l3proto/protocol" syntax broken, Liping Zhang
  • Re: [PATCH nft v2] ct: fix "ct l3proto/protocol" syntax broken, Florian Westphal
• [PATCH nft] log: rename the log level "warning" to "warn", Liping Zhang
  • Re: [PATCH nft] log: rename the log level "warning" to "warn", Pablo Neira Ayuso
• [PATCH nft] ct: fix "ct l3proto/protocol" syntax broken, Liping Zhang
• [nf-next:master 10/11] undefined reference to `udp4_lib_lookup', kbuild test robot
• [nf-next:master 10/11] include/net/netfilter/nf_conntrack.h:83:22: error: field 'ct_general' has incomplete type, kbuild test robot
• [nf-next:master 8/11] net/ipv4/netfilter/nft_fib_ipv4.c:80:6: warning: unused variable 'i', kbuild test robot
• [PATCH nf] netfilter: nft_dup: do not use sreg_dev if the user doesn't specify it, Liping Zhang
  • Re: [PATCH nf] netfilter: nft_dup: do not use sreg_dev if the user doesn't specify it, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: destroy the set if fail to add transaction, Liping Zhang
  • Re: [PATCH nf] netfilter: nf_tables: destroy the set if fail to add transaction, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: remove useless U8_MAX validation, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nf_tables: remove useless U8_MAX validation, Pablo Neira Ayuso
• [PATCH nftables] Allow concatenation of rt nexthop etc., Anders K. Pedersen | Cohaesio
  • Re: [PATCH nftables] Allow concatenation of rt nexthop etc., Pablo Neira Ayuso
• [PATCH] Correct description of -n/--numeric option, Jon Jensen
  • Re: [PATCH] Correct description of -n/--numeric option, Florian Westphal
• [PATCH] Correct manpage description of -n / --numeric option, Jon Jensen
  • Re: [PATCH] Correct manpage description of -n / --numeric option, Florian Westphal
    • Re: [PATCH] Correct manpage description of -n / --numeric option, Jon Jensen
• [PATCH nf] netfilter: connmark: ignore skbs with magic untracked conntrack objects, Florian Westphal
  • Re: [PATCH nf] netfilter: connmark: ignore skbs with magic untracked conntrack objects, Pablo Neira Ayuso
• [PATCH] [v2 netfilter-next] netfilter: nf_tables: fib warnings, Arnd Bergmann
  • Re: [PATCH] [v2 netfilter-next] netfilter: nf_tables: fib warnings, Florian Westphal
    • Re: [PATCH] [v2 netfilter-next] netfilter: nf_tables: fib warnings, Pablo Neira Ayuso
• [PATCH nftables] rt: update test scripts and fix documentation, Anders K. Pedersen | Cohaesio
  • Re: [PATCH nftables] rt: update test scripts and fix documentation, Florian Westphal
    • Re: [PATCH nftables] rt: update test scripts and fix documentation, Florian Westphal
• [PATCH] [rfc, netfilter-next] netfilter: nf_tables: fib warnings, Arnd Bergmann
  • Re: [PATCH] [rfc, netfilter-next] netfilter: nf_tables: fib warnings, Florian Westphal
    • Re: [PATCH] [rfc, netfilter-next] netfilter: nf_tables: fib warnings, Arnd Bergmann
      • Re: [PATCH] [rfc, netfilter-next] netfilter: nf_tables: fib warnings, Florian Westphal
        • Re: [PATCH] [rfc, netfilter-next] netfilter: nf_tables: fib warnings, Arnd Bergmann
• [PATCH nf-next v2] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Davide Caratti
  • Re: [PATCH nf-next v2] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Pablo Neira Ayuso
  • Re: [PATCH nf-next v2] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Davide Caratti
• [conntrack-tools PATCH v2] log: print messages to stdout/sderr if running in console mode, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH v2] log: print messages to stdout/sderr if running in console mode, Pablo Neira Ayuso
• [PATCH v4 nftables] rt: introduce routing expression, Anders K. Pedersen | Cohaesio
  • Re: [PATCH v4 nftables] rt: introduce routing expression, Pablo Neira Ayuso
  • Re: [PATCH v4 nftables] rt: introduce routing expression, Pablo Neira Ayuso
    • Re: [PATCH v4 nftables] rt: introduce routing expression, Anders K. Pedersen | Cohaesio
• [PATCH v4 libnftnl] introduce rt expression, Anders K. Pedersen | Cohaesio
  • Re: [PATCH v4 libnftnl] introduce rt expression, Pablo Neira Ayuso
• [PATCH v4 nf-next] netfilter: nft: introduce routing expression, Anders K. Pedersen | Cohaesio
  • Re: [PATCH v4 nf-next] netfilter: nft: introduce routing expression, Pablo Neira Ayuso
• [PATCH nft] parser: add offset keyword and parser rule, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_log: add packet logging for netdev family, Pablo Neira Ayuso
• [PATCH RFC netfilter-next 0/3] Additional refactoring enhancements for nf_hook_entry, Aaron Conole
  • [PATCH RFC netfilter-next 1/3] netfilter: introduce accessor functions for hook entries, Aaron Conole
    • Re: [PATCH RFC netfilter-next 1/3] netfilter: introduce accessor functions for hook entries, Pablo Neira Ayuso
      • Re: [PATCH RFC netfilter-next 1/3] netfilter: introduce accessor functions for hook entries, Aaron Conole
  • [PATCH RFC netfilter-next 2/3] netfilter: decouple nf_hook_entry and nf_hook_ops, Aaron Conole
  • [PATCH RFC netfilter-next 3/3] netfilter: convert while loops to for loops, Aaron Conole
• [PATCH nft] meta: fix pkttype name and add 'other' symbol, Florian Westphal
  • Re: [PATCH nft] meta: fix pkttype name and add 'other' symbol, Pablo Neira Ayuso
• NFTables Internals, mark diener
  • Re: NFTables Internals, Florian Westphal
• [conntrack-tools PATCH] log: print messages to stdout/sderr if running in console mode, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] log: print messages to stdout/sderr if running in console mode, Pablo Neira Ayuso
• [conntrack-tools PATCH] sync-mode: print errno message on failure, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] sync-mode: print errno message on failure, Florian Westphal
• [PATCH nft 0/3] support ct/meta key lookups at runtime, Florian Westphal
  • [PATCH nft 3/3] meta: allow resolving meta keys at run time, Florian Westphal
  • [PATCH nft 1/3] utils: provide snprintf helper macro, Florian Westphal
  • [PATCH nft 2/3] ct: allow resolving ct keys at run time, Florian Westphal
  • Re: [PATCH nft 0/3] support ct/meta key lookups at runtime, Pablo Neira Ayuso
    • Re: [PATCH nft 0/3] support ct/meta key lookups at runtime, Pablo Neira Ayuso
      • Re: [PATCH nft 0/3] support ct/meta key lookups at runtime, Florian Westphal
        • Re: [PATCH nft 0/3] support ct/meta key lookups at runtime, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: avoid excess memory allocation, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: avoid excess memory allocation, Pablo Neira Ayuso
• Logical processing, mark diener
• reject statement - "crazy" parse error?, James Feeney
  • Re: reject statement - "crazy" parse error?, Arturo Borrero Gonzalez
    • Re: reject statement - "crazy" parse error?, James Feeney
      • Re: reject statement - "crazy" parse error?, Arturo Borrero Gonzalez
        • Re: reject statement - "crazy" parse error?, Pablo Neira Ayuso
        • Re: reject statement - "crazy" parse error?, James Feeney
        • Re: reject statement - "crazy" parse error?, James Feeney
• [PATCH] netfilter: fix type mismatch with error return from nft_parse_u32_check, John W. Linville
  • [PATCH v2] netfilter: fix type mismatch with error return from nft_parse_u32_check, John W. Linville
    • Re: [PATCH v2] netfilter: fix type mismatch with error return from nft_parse_u32_check, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: fix type mismatch with error return from nft_parse_u32_check, John W. Linville
• [PATCH v2] nf_conntrack_sip: extend request line validation, Ulrich Weber
  • Re: [PATCH v2] nf_conntrack_sip: extend request line validation, Marco Angaroni
    • Re: [PATCH v2] nf_conntrack_sip: extend request line validation, Pablo Neira Ayuso
• [PATCH] netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning, Arnd Bergmann
  • Re: [PATCH] netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning, Julian Anastasov
    • Re: [PATCH] netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning, Arnd Bergmann
      • RE: [PATCH] netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning, David Laight
    • Re: [PATCH] netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning, Simon Horman
        • Re: [PATCH] netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning, Pablo Neira Ayuso
• [PATCH 0/3 various] netfilter: add fib expression, Florian Westphal
  • [PATCH 1/3 nf-next] nf_tables: add fib expression, Florian Westphal
    • Re: [PATCH 1/3 nf-next] nf_tables: add fib expression, Pablo Neira Ayuso
  • [PATCH 2/3 libnftables] expr: add fib expression, Florian Westphal
  • [PATCH 3/3 nft] src: add fib expression, Florian Westphal
• [PATCH 00/22] ipset patches for nf-next, v2, Jozsef Kadlecsik
  • [PATCH 08/22] netfilter: ipset: Add element count to hash headers, Jozsef Kadlecsik
  • [PATCH 01/22] netfilter: ipset: Correct rcu_dereference_bh_nfnl() usage, Jozsef Kadlecsik
    • Re: [PATCH 01/22] netfilter: ipset: Correct rcu_dereference_bh_nfnl() usage, Pablo Neira Ayuso
  • [PATCH 13/22] netfilter: ipset: Make sure element data size is a multiple of u32, Jozsef Kadlecsik
  • [PATCH 05/22] netfilter: ipset: Split extensions into separate files, Jozsef Kadlecsik
    • Re: [PATCH 05/22] netfilter: ipset: Split extensions into separate files, Pablo Neira Ayuso
    • Re: [PATCH 05/22] netfilter: ipset: Split extensions into separate files, Pablo Neira Ayuso
  • [PATCH 03/22] netfilter: ipset: Improve skbinfo get/init helpers, Jozsef Kadlecsik
    • Re: [PATCH 03/22] netfilter: ipset: Improve skbinfo get/init helpers, Pablo Neira Ayuso
  • [PATCH 02/22] netfilter: ipset: Headers file cleanup, Jozsef Kadlecsik
    • Re: [PATCH 02/22] netfilter: ipset: Headers file cleanup, Pablo Neira Ayuso
  • [PATCH 06/22] netfilter: ipset: Separate memsize calculation code into dedicated function, Jozsef Kadlecsik
    • Re: [PATCH 06/22] netfilter: ipset: Separate memsize calculation code into dedicated function, Pablo Neira Ayuso
  • [PATCH 07/22] netfilter: ipset: Regroup ip_set_put_extensions and add extern, Jozsef Kadlecsik
    • Re: [PATCH 07/22] netfilter: ipset: Regroup ip_set_put_extensions and add extern, Pablo Neira Ayuso
  • [PATCH 22/22] netfilter: ipset: hash: fix boolreturn.cocci warnings, Jozsef Kadlecsik
  • [PATCH 10/22] netfilter: ipset: Count non-static extension memory for userspace, Jozsef Kadlecsik
  • [PATCH 04/22] netfilter: ipset: Improve comment extension helpers, Jozsef Kadlecsik
    • Re: [PATCH 04/22] netfilter: ipset: Improve comment extension helpers, Pablo Neira Ayuso
  • [PATCH 11/22] netfilter: ipset: Simplify mtype_expire() for hash types, Jozsef Kadlecsik
    • Re: [PATCH 11/22] netfilter: ipset: Simplify mtype_expire() for hash types, Pablo Neira Ayuso
  • [PATCH 12/22] netfilter: ipset: Make NLEN compile time constant for hash types, Jozsef Kadlecsik
  • [PATCH 17/22] netfilter: ipset: Fix reported memory size for hash:* types, Jozsef Kadlecsik
  • [PATCH 09/22] netfilter: ipset: Add element count to all set types header, Jozsef Kadlecsik
  • [PATCH 14/22] netfilter: ipset: Optimize hash creation routine, Jozsef Kadlecsik
  • [PATCH 21/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • [PATCH 18/22] netfilter: ipset: hash:ipmac type support added to ipset, Jozsef Kadlecsik
  • [PATCH 19/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
    • Re: [PATCH 19/22] netfilter: ipset: use setup_timer() and mod_timer()., Pablo Neira Ayuso
  • [PATCH 15/22] netfilter: ipset: Make struct htype per ipset family, Jozsef Kadlecsik
  • [PATCH 16/22] netfilter: ipset: Collapse same condition body to a single one, Jozsef Kadlecsik
    • Re: [PATCH 16/22] netfilter: ipset: Collapse same condition body to a single one, Pablo Neira Ayuso
  • [PATCH 20/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • Re: [PATCH 00/22] ipset patches for nf-next, v2, Pablo Neira Ayuso
    • Re: [PATCH 00/22] ipset patches for nf-next, v2, Pablo Neira Ayuso
• [PATCH nft 0/4] src: changes related to numgen and hash expressions, Laura Garcia Liebana
  • [PATCH nft 1/4] src: make hash seed attribute optional, Laura Garcia Liebana
    • Re: [PATCH nft 1/4] src: make hash seed attribute optional, Pablo Neira Ayuso
      • Re: [PATCH nft 1/4] src: make hash seed attribute optional, Pablo Neira Ayuso
  • [PATCH nft 2/4] src: add offset attribute for hash expression, Laura Garcia Liebana
    • Re: [PATCH nft 2/4] src: add offset attribute for hash expression, Pablo Neira Ayuso
  • [PATCH nft 3/4] src: add offset attribute for numgen expression, Laura Garcia Liebana
    • Re: [PATCH nft 3/4] src: add offset attribute for numgen expression, Pablo Neira Ayuso
  • [PATCH nft 4/4] netlink: fix linearize numgen type, Laura Garcia Liebana
    • Re: [PATCH nft 4/4] netlink: fix linearize numgen type, Pablo Neira Ayuso
• [PATCH nftables] doc: fix synopsis for ct expression, Anders K. Pedersen | Cohaesio
• [PATCH nf 0/3] netfilter: nf_tables: fix some bugs related to dynset, Liping Zhang
  • [PATCH nf 2/3] netfilter: nf_tables: fix *leak* when expr clone fail, Liping Zhang
  • [PATCH nf 1/3] netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled, Liping Zhang
    • Re: [PATCH nf 1/3] netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled, Liping Zhang
      • Re: [PATCH nf 1/3] netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled, Liping Zhang
  • [PATCH nf 3/3] netfilter: nf_tables: fix race when create new element in dynset, Liping Zhang
  • Re: [PATCH nf 0/3] netfilter: nf_tables: fix some bugs related to dynset, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Davide Caratti
  • Re: [PATCH nf-next] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Pablo Neira Ayuso
• [PATCH nft] src: don't need keyword for log level, Pablo Neira Ayuso
• [PATCH] Netfilter: Fix an ICMPv6 bug which caused by a latter ICMPv6 NA packet to inherit the mark of previous NS packet., XU Tianwen
  • Re: [PATCH] Netfilter: Fix an ICMPv6 bug which caused by a latter ICMPv6 NA packet to inherit the mark of previous NS packet., Florian Westphal
• [PATCH 1/1] netlink: fix monitor trace crash with netdev family, Florian Westphal
• [PATCH v3 nf-next 0/5] netfilter: nft: introduce routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 1/5] netfilter: nft: UAPI headers for routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
    • Re: [PATCH v3 nf-next 2/5] netfilter: nft: basic routing expression, Liping Zhang
      • Re: [PATCH v3 nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 3/5] netfilter: nft: rt nexthop for IPv4 family, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 4/5] netfilter: nft: rt nexthop for IPv6 family, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
• [PATCH nf-next v2 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Davide Caratti
  • [PATCH nf-next v2 1/3] netfilter: built-in NAT support for DCCP, Davide Caratti
  • [PATCH nf-next v2 2/3] netfilter: built-in NAT support for SCTP, Davide Caratti
  • [PATCH nf-next v2 3/3] netfilter: built-in NAT support for UDPlite, Davide Caratti
  • Re: [PATCH nf-next v2 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Pablo Neira Ayuso
• [PATCH] netfilter: nft_ct: add notrack support, Pablo Neira Ayuso
  • [PATCH libnftnl] src: add notrack expression, Pablo Neira Ayuso
  • [PATCH nft] src: add notrack support, Pablo Neira Ayuso
• Re: nftables: Add anonymous set to named set, Pablo Neira Ayuso
• [PATCH nf-next 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Davide Caratti
  • [PATCH nf-next 1/3] netfilter: built-in NAT support for DCCP, Davide Caratti
    • Re: [PATCH nf-next 1/3] netfilter: built-in NAT support for DCCP, Pablo Neira Ayuso
      • Re: [PATCH nf-next 1/3] netfilter: built-in NAT support for DCCP, Davide Caratti
  • [PATCH nf-next 2/3] netfilter: built-in NAT support for SCTP, Davide Caratti
  • [PATCH nf-next 3/3] netfilter: built-in NAT support for UDPlite, Davide Caratti
  • Re: [PATCH nf-next 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Florian Westphal
    • Re: [PATCH nf-next 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Davide Caratti
• [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Arturo Borrero Gonzalez
  • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Pablo Neira Ayuso
    • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Arturo Borrero Gonzalez
      • Message not available
        • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Arturo Borrero Gonzalez
          • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Mathew Heard
            • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Pablo Neira Ayuso
              • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Mathew Heard
• [PATCH v2 nftables] rt: introduce routing expression, Anders K. Pedersen | Cohaesio
• [PATCH v2 libnftnl] introduce rt expression, Anders K. Pedersen | Cohaesio
• [PATCH v2 nf-next 0/5] netfilter: nft: introduce routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 1/5] netfilter: nft: UAPI headers for routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 3/5] netfilter: nft: rt nexthop for IPv4 family, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 4/5] netfilter: nft: rt nexthop for IPv6 family, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
    • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
      • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
        • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
          • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
            • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
              • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
                • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                  • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
                    • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                      • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
                  • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Pablo Neira Ayuso
                    • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                      • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Pablo Neira Ayuso
                        • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                          • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
                            • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                              • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Pablo Neira Ayuso
• [PATCH] nf_conntrack_sip: check for trailing spaces, Ulrich Weber
  • Re: [PATCH] nf_conntrack_sip: check for trailing spaces, Pablo Neira Ayuso
    • Re: [PATCH] nf_conntrack_sip: check for trailing spaces, Ulrich Weber
• [PATCH nf-next] netfilter: nft_numgen: start round robin from zero, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nft_numgen: start round robin from zero, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_meta: permit pkttype mangling in ip/ip6 prerouting, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nft_meta: permit pkttype mangling in ip/ip6 prerouting, Pablo Neira Ayuso
• [PATCH nf] netfilter: fix nf_queue handling, Pablo Neira Ayuso
• [PATCH next] netfilter: nf_tables: allow expressions to return STOLEN, Florian Westphal
  • Re: [PATCH next] netfilter: nf_tables: allow expressions to return STOLEN, Pablo Neira Ayuso
• [PATCH iproute2] tc, ipt: don't enforce iproute2 dependency on iptables-devel, Daniel Borkmann
• [iptables PATCH] extensions: update Arturo Borrero email address, Arturo Borrero Gonzalez
• [PATCH] conntrack-tools: update Arturo Borrero Gonzalez email address, Arturo Borrero Gonzalez
• [nf-next PATCH] netfilter: update Arturo Borrero Gonzalez email address, Arturo Borrero Gonzalez
• [nft PATCH] tests: shell: update kernel modules to clean, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests: shell: update kernel modules to clean, Pablo Neira Ayuso
• [nft PATCH] xt: update Arturo Borrero Gonzalez email address, Arturo Borrero Gonzalez
• [PATCH nftables] Fix register allocation for EXPR_SET_ELEM, Anders K. Pedersen | Cohaesio
• [PATCH 00/28] Reenable maybe-uninitialized warnings, Arnd Bergmann
  • [PATCH 01/28] [v2] netfilter: nf_tables: avoid uninitialized variable warning, Arnd Bergmann
    • Re: [PATCH 01/28] [v2] netfilter: nf_tables: avoid uninitialized variable warning, Pablo Neira Ayuso
  • [PATCH 28/28] Kbuild: bring back -Wmaybe-uninitialized warning, Arnd Bergmann
  • Re: [PATCH 00/28] Reenable maybe-uninitialized warnings, Christoph Hellwig
• [PATCH nf] netfilter: x_tables: suppress kmemcheck warning, Florian Westphal
  • Re: [PATCH nf] netfilter: x_tables: suppress kmemcheck warning, Aaron Conole
  • Re: [PATCH nf] netfilter: x_tables: suppress kmemcheck warning, Pablo Neira Ayuso
• [PATCH libnftnl] set_elem: don't add NFTA_SET_ELEM_LIST_ELEMENTS attribute if set is empty, Pablo Neira Ayuso
• [ANNOUNCE] ipset 6.30 released, Jozsef Kadlecsik
• [PATCH 00/22] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 20/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • [PATCH 06/22] netfilter: ipset: Separate memsize calculation code into dedicated function, Jozsef Kadlecsik
  • [PATCH 21/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • [PATCH 10/22] netfilter: ipset: Count non-static extension memory for userspace, Jozsef Kadlecsik
  • [PATCH 08/22] netfilter: ipset: Add element count to hash headers, Jozsef Kadlecsik
  • [PATCH 16/22] netfilter: ipset: Collapse same condition body to a single one, Jozsef Kadlecsik
  • [PATCH 02/22] netfilter: ipset: Headers file cleanup, Jozsef Kadlecsik
  • [PATCH 01/22] netfilter: ipset: Correct rcu_dereference_bh_nfnl() usage, Jozsef Kadlecsik
  • [PATCH 03/22] netfilter: ipset: Improve skbinfo get/init helpers, Jozsef Kadlecsik
  • [PATCH 17/22] netfilter: ipset: Fix reported memory size for hash:* types, Jozsef Kadlecsik
  • [PATCH 19/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • [PATCH 07/22] netfilter: ipset: Regroup ip_set_put_extensions and add extern, Jozsef Kadlecsik
  • [PATCH 22/22] netfilter: ipset: hash: fix boolreturn.cocci warnings, Jozsef Kadlecsik
  • [PATCH 11/22] netfilter: ipset: Simplify mtype_expire() for hash types, Jozsef Kadlecsik
  • [PATCH 15/22] netfilter: ipset: Make struct htype per ipset family, Jozsef Kadlecsik
  • [PATCH 09/22] netfilter: ipset: Add element count to all set types header, Jozsef Kadlecsik
  • [PATCH 12/22] netfilter: ipset: Make NLEN compile time constant for hash types, Jozsef Kadlecsik
  • [PATCH 04/22] netfilter: ipset: Improve comment extension helpers, Jozsef Kadlecsik
  • [PATCH 14/22] netfilter: ipset: Optimize hash creation routine, Jozsef Kadlecsik
  • [PATCH 05/22] netfilter: ipset: Split extensions into separate files, Jozsef Kadlecsik
  • [PATCH 13/22] netfilter: ipset: Make sure element data size is a multiple of u32, Jozsef Kadlecsik
  • [PATCH 18/22] netfilter: ipset: hash:ipmac type support added to ipset, Jozsef Kadlecsik
  • Re: [PATCH 00/22] ipset patches for nf-next, Pablo Neira Ayuso
    • Re: [PATCH 00/22] ipset patches for nf-next, Pablo Neira Ayuso
• [PATCH 00/10, nf-next] Netfilter core updates, Pablo Neira Ayuso
  • [PATCH 04/10] netfilter: deprecate NF_STOP, Pablo Neira Ayuso
  • [PATCH 01/10] netfilter: get rid of useless debugging from core, Pablo Neira Ayuso
  • [PATCH 03/10] netfilter: kill NF_HOOK_THRESH() and state->tresh, Pablo Neira Ayuso
  • [PATCH 06/10] netfilter: nf_tables: use hook state from xt_action_param structure, Pablo Neira Ayuso
  • [PATCH 09/10] netfilter: handle queue bypass flag from nf_queue, Pablo Neira Ayuso
  • [PATCH 08/10] netfilter: remove hook_entries field from nf_hook_state, Pablo Neira Ayuso
  • [PATCH 05/10] netfilter: x_tables: move hook state into xt_action_param structure, Pablo Neira Ayuso
  • [PATCH 07/10] netfilter: use switch() to handle verdict cases from nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH 10/10] netfilter: merge nf_iterate() into nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH 02/10] netfilter: remove comments that predate rcu days, Pablo Neira Ayuso
  • Re: [PATCH 00/10, nf-next] Netfilter core updates, Florian Westphal
    • Re: [PATCH 00/10, nf-next] Netfilter core updates, Aaron Conole
      • Re: [PATCH 00/10, nf-next] Netfilter core updates, Pablo Neira Ayuso
• [PATCH nft] meta: permit numeric interface type, Florian Westphal
  • Re: [PATCH nft] meta: permit numeric interface type, Pablo Neira Ayuso
• [PATCH nftables] rt: introduce routing expression, Anders K. Pedersen | Cohaesio
• [PATCH libnftnl] introduce rt expression, Anders K. Pedersen | Cohaesio
• [PATCH nf-next 0/5] netfilter: nft: introduce routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH nf-next 1/5] netfilter: nft: UAPI headers for routing expression, Anders K. Pedersen | Cohaesio
    • Re: [PATCH nf-next 1/5] netfilter: nft: UAPI headers for routing expression, Arturo Borrero Gonzalez
  • [PATCH nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
    • Re: [PATCH nf-next 2/5] netfilter: nft: basic routing expression, Arturo Borrero Gonzalez
      • Re: [PATCH nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH nf-next 3/5] netfilter: nft: rt nexthop for IPv4 family, Anders K. Pedersen | Cohaesio
  • [PATCH nf-next 4/5] netfilter: nft: rt nexthop for IPv6 family, Anders K. Pedersen | Cohaesio
  • [PATCH nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
• [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Pablo Neira Ayuso
  • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Aaron Conole
    • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Pablo Neira Ayuso
      • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Aaron Conole
        • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Pablo Neira Ayuso
          • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Florian Westphal
            • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Aaron Conole
• [PATCH nf-next,RFC 00/10] Netfilter core updates, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 02/10] netfilter: remove comments that predate rcu days, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 01/10] netfilter: get rid of useless debugging from core, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 03/10] netfilter: bridge: kill NF_HOOK_THRESH() and state->tresh, Pablo Neira Ayuso