Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 18/22] netfilter: ipset: hash:ipmac type support added to ipset, (continued)
  • [PATCH 18/22] netfilter: ipset: hash:ipmac type support added to ipset, Jozsef Kadlecsik
  • [PATCH 19/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
    • Re: [PATCH 19/22] netfilter: ipset: use setup_timer() and mod_timer()., Pablo Neira Ayuso
  • [PATCH 15/22] netfilter: ipset: Make struct htype per ipset family, Jozsef Kadlecsik
  • [PATCH 16/22] netfilter: ipset: Collapse same condition body to a single one, Jozsef Kadlecsik
    • Re: [PATCH 16/22] netfilter: ipset: Collapse same condition body to a single one, Pablo Neira Ayuso
  • [PATCH 20/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • Re: [PATCH 00/22] ipset patches for nf-next, v2, Pablo Neira Ayuso
    • Re: [PATCH 00/22] ipset patches for nf-next, v2, Pablo Neira Ayuso
• [PATCH nft 0/4] src: changes related to numgen and hash expressions, Laura Garcia Liebana
  • [PATCH nft 1/4] src: make hash seed attribute optional, Laura Garcia Liebana
    • Re: [PATCH nft 1/4] src: make hash seed attribute optional, Pablo Neira Ayuso
      • Re: [PATCH nft 1/4] src: make hash seed attribute optional, Pablo Neira Ayuso
  • [PATCH nft 2/4] src: add offset attribute for hash expression, Laura Garcia Liebana
    • Re: [PATCH nft 2/4] src: add offset attribute for hash expression, Pablo Neira Ayuso
  • [PATCH nft 3/4] src: add offset attribute for numgen expression, Laura Garcia Liebana
    • Re: [PATCH nft 3/4] src: add offset attribute for numgen expression, Pablo Neira Ayuso
  • [PATCH nft 4/4] netlink: fix linearize numgen type, Laura Garcia Liebana
    • Re: [PATCH nft 4/4] netlink: fix linearize numgen type, Pablo Neira Ayuso
• [PATCH nftables] doc: fix synopsis for ct expression, Anders K. Pedersen | Cohaesio
• [PATCH nf 0/3] netfilter: nf_tables: fix some bugs related to dynset, Liping Zhang
  • [PATCH nf 2/3] netfilter: nf_tables: fix *leak* when expr clone fail, Liping Zhang
  • [PATCH nf 1/3] netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled, Liping Zhang
    • Re: [PATCH nf 1/3] netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled, Liping Zhang
      • Re: [PATCH nf 1/3] netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled, Liping Zhang
  • [PATCH nf 3/3] netfilter: nf_tables: fix race when create new element in dynset, Liping Zhang
  • Re: [PATCH nf 0/3] netfilter: nf_tables: fix some bugs related to dynset, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Davide Caratti
  • Re: [PATCH nf-next] netfilter: conntrack: simplify init/uninit of L4 protocol trackers, Pablo Neira Ayuso
• [PATCH nft] src: don't need keyword for log level, Pablo Neira Ayuso
• [PATCH] Netfilter: Fix an ICMPv6 bug which caused by a latter ICMPv6 NA packet to inherit the mark of previous NS packet., XU Tianwen
  • Re: [PATCH] Netfilter: Fix an ICMPv6 bug which caused by a latter ICMPv6 NA packet to inherit the mark of previous NS packet., Florian Westphal
• [PATCH 1/1] netlink: fix monitor trace crash with netdev family, Florian Westphal
• [PATCH v3 nf-next 0/5] netfilter: nft: introduce routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 1/5] netfilter: nft: UAPI headers for routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
    • Re: [PATCH v3 nf-next 2/5] netfilter: nft: basic routing expression, Liping Zhang
      • Re: [PATCH v3 nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 3/5] netfilter: nft: rt nexthop for IPv4 family, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 4/5] netfilter: nft: rt nexthop for IPv6 family, Anders K. Pedersen | Cohaesio
  • [PATCH v3 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
• [PATCH nf-next v2 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Davide Caratti
  • [PATCH nf-next v2 1/3] netfilter: built-in NAT support for DCCP, Davide Caratti
  • [PATCH nf-next v2 2/3] netfilter: built-in NAT support for SCTP, Davide Caratti
  • [PATCH nf-next v2 3/3] netfilter: built-in NAT support for UDPlite, Davide Caratti
  • Re: [PATCH nf-next v2 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Pablo Neira Ayuso
• [PATCH] netfilter: nft_ct: add notrack support, Pablo Neira Ayuso
  • [PATCH libnftnl] src: add notrack expression, Pablo Neira Ayuso
  • [PATCH nft] src: add notrack support, Pablo Neira Ayuso
• Re: nftables: Add anonymous set to named set, Pablo Neira Ayuso
• [PATCH nf-next 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Davide Caratti
  • [PATCH nf-next 1/3] netfilter: built-in NAT support for DCCP, Davide Caratti
    • Re: [PATCH nf-next 1/3] netfilter: built-in NAT support for DCCP, Pablo Neira Ayuso
      • Re: [PATCH nf-next 1/3] netfilter: built-in NAT support for DCCP, Davide Caratti
  • [PATCH nf-next 2/3] netfilter: built-in NAT support for SCTP, Davide Caratti
  • [PATCH nf-next 3/3] netfilter: built-in NAT support for UDPlite, Davide Caratti
  • Re: [PATCH nf-next 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Florian Westphal
    • Re: [PATCH nf-next 0/3] netfilter: built-in NAT support for DCCP, SCTP, UDPlite, Davide Caratti
• [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Arturo Borrero Gonzalez
  • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Pablo Neira Ayuso
    • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Arturo Borrero Gonzalez
      • Message not available
        • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Arturo Borrero Gonzalez
          • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Mathew Heard
            • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Pablo Neira Ayuso
              • Re: [RFC nf-next PATCH] netfilter: nf_conntrack_proto_tcp: propagate IP_CT_TCP_FLAG_BE_LIBERAL, Mathew Heard
• [PATCH v2 nftables] rt: introduce routing expression, Anders K. Pedersen | Cohaesio
• [PATCH v2 libnftnl] introduce rt expression, Anders K. Pedersen | Cohaesio
• [PATCH v2 nf-next 0/5] netfilter: nft: introduce routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 1/5] netfilter: nft: UAPI headers for routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 3/5] netfilter: nft: rt nexthop for IPv4 family, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 4/5] netfilter: nft: rt nexthop for IPv6 family, Anders K. Pedersen | Cohaesio
  • [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
    • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
      • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
        • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
          • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
            • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
              • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
                • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                  • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
                    • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                      • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
                  • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Pablo Neira Ayuso
                    • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                      • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Pablo Neira Ayuso
                        • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                          • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
                            • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Liping Zhang
                              • Re: [PATCH v2 nf-next 5/5] netfilter: nft: rt nexthop for inet family, Pablo Neira Ayuso
• [PATCH] nf_conntrack_sip: check for trailing spaces, Ulrich Weber
  • Re: [PATCH] nf_conntrack_sip: check for trailing spaces, Pablo Neira Ayuso
    • Re: [PATCH] nf_conntrack_sip: check for trailing spaces, Ulrich Weber
• [PATCH nf-next] netfilter: nft_numgen: start round robin from zero, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nft_numgen: start round robin from zero, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_meta: permit pkttype mangling in ip/ip6 prerouting, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nft_meta: permit pkttype mangling in ip/ip6 prerouting, Pablo Neira Ayuso
• [PATCH nf] netfilter: fix nf_queue handling, Pablo Neira Ayuso
• [PATCH next] netfilter: nf_tables: allow expressions to return STOLEN, Florian Westphal
  • Re: [PATCH next] netfilter: nf_tables: allow expressions to return STOLEN, Pablo Neira Ayuso
• [PATCH iproute2] tc, ipt: don't enforce iproute2 dependency on iptables-devel, Daniel Borkmann
• [iptables PATCH] extensions: update Arturo Borrero email address, Arturo Borrero Gonzalez
• [PATCH] conntrack-tools: update Arturo Borrero Gonzalez email address, Arturo Borrero Gonzalez
• [nf-next PATCH] netfilter: update Arturo Borrero Gonzalez email address, Arturo Borrero Gonzalez
• [nft PATCH] tests: shell: update kernel modules to clean, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests: shell: update kernel modules to clean, Pablo Neira Ayuso
• [nft PATCH] xt: update Arturo Borrero Gonzalez email address, Arturo Borrero Gonzalez
• [PATCH nftables] Fix register allocation for EXPR_SET_ELEM, Anders K. Pedersen | Cohaesio
• [PATCH 00/28] Reenable maybe-uninitialized warnings, Arnd Bergmann
  • [PATCH 01/28] [v2] netfilter: nf_tables: avoid uninitialized variable warning, Arnd Bergmann
    • Re: [PATCH 01/28] [v2] netfilter: nf_tables: avoid uninitialized variable warning, Pablo Neira Ayuso
  • [PATCH 28/28] Kbuild: bring back -Wmaybe-uninitialized warning, Arnd Bergmann
  • Re: [PATCH 00/28] Reenable maybe-uninitialized warnings, Christoph Hellwig
• [PATCH nf] netfilter: x_tables: suppress kmemcheck warning, Florian Westphal
  • Re: [PATCH nf] netfilter: x_tables: suppress kmemcheck warning, Aaron Conole
  • Re: [PATCH nf] netfilter: x_tables: suppress kmemcheck warning, Pablo Neira Ayuso
• [PATCH libnftnl] set_elem: don't add NFTA_SET_ELEM_LIST_ELEMENTS attribute if set is empty, Pablo Neira Ayuso
• [ANNOUNCE] ipset 6.30 released, Jozsef Kadlecsik
• [PATCH 00/22] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 20/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • [PATCH 06/22] netfilter: ipset: Separate memsize calculation code into dedicated function, Jozsef Kadlecsik
  • [PATCH 21/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • [PATCH 10/22] netfilter: ipset: Count non-static extension memory for userspace, Jozsef Kadlecsik
  • [PATCH 08/22] netfilter: ipset: Add element count to hash headers, Jozsef Kadlecsik
  • [PATCH 16/22] netfilter: ipset: Collapse same condition body to a single one, Jozsef Kadlecsik
  • [PATCH 02/22] netfilter: ipset: Headers file cleanup, Jozsef Kadlecsik
  • [PATCH 01/22] netfilter: ipset: Correct rcu_dereference_bh_nfnl() usage, Jozsef Kadlecsik
  • [PATCH 03/22] netfilter: ipset: Improve skbinfo get/init helpers, Jozsef Kadlecsik
  • [PATCH 17/22] netfilter: ipset: Fix reported memory size for hash:* types, Jozsef Kadlecsik
  • [PATCH 19/22] netfilter: ipset: use setup_timer() and mod_timer()., Jozsef Kadlecsik
  • [PATCH 07/22] netfilter: ipset: Regroup ip_set_put_extensions and add extern, Jozsef Kadlecsik
  • [PATCH 22/22] netfilter: ipset: hash: fix boolreturn.cocci warnings, Jozsef Kadlecsik
  • [PATCH 11/22] netfilter: ipset: Simplify mtype_expire() for hash types, Jozsef Kadlecsik
  • [PATCH 15/22] netfilter: ipset: Make struct htype per ipset family, Jozsef Kadlecsik
  • [PATCH 09/22] netfilter: ipset: Add element count to all set types header, Jozsef Kadlecsik
  • [PATCH 12/22] netfilter: ipset: Make NLEN compile time constant for hash types, Jozsef Kadlecsik
  • [PATCH 04/22] netfilter: ipset: Improve comment extension helpers, Jozsef Kadlecsik
  • [PATCH 14/22] netfilter: ipset: Optimize hash creation routine, Jozsef Kadlecsik
  • [PATCH 05/22] netfilter: ipset: Split extensions into separate files, Jozsef Kadlecsik
  • [PATCH 13/22] netfilter: ipset: Make sure element data size is a multiple of u32, Jozsef Kadlecsik
  • [PATCH 18/22] netfilter: ipset: hash:ipmac type support added to ipset, Jozsef Kadlecsik
  • Re: [PATCH 00/22] ipset patches for nf-next, Pablo Neira Ayuso
    • Re: [PATCH 00/22] ipset patches for nf-next, Pablo Neira Ayuso
• [PATCH 00/10, nf-next] Netfilter core updates, Pablo Neira Ayuso
  • [PATCH 04/10] netfilter: deprecate NF_STOP, Pablo Neira Ayuso
  • [PATCH 01/10] netfilter: get rid of useless debugging from core, Pablo Neira Ayuso
  • [PATCH 03/10] netfilter: kill NF_HOOK_THRESH() and state->tresh, Pablo Neira Ayuso
  • [PATCH 06/10] netfilter: nf_tables: use hook state from xt_action_param structure, Pablo Neira Ayuso
  • [PATCH 09/10] netfilter: handle queue bypass flag from nf_queue, Pablo Neira Ayuso
  • [PATCH 08/10] netfilter: remove hook_entries field from nf_hook_state, Pablo Neira Ayuso
  • [PATCH 05/10] netfilter: x_tables: move hook state into xt_action_param structure, Pablo Neira Ayuso
  • [PATCH 07/10] netfilter: use switch() to handle verdict cases from nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH 10/10] netfilter: merge nf_iterate() into nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH 02/10] netfilter: remove comments that predate rcu days, Pablo Neira Ayuso
  • Re: [PATCH 00/10, nf-next] Netfilter core updates, Florian Westphal
    • Re: [PATCH 00/10, nf-next] Netfilter core updates, Aaron Conole
      • Re: [PATCH 00/10, nf-next] Netfilter core updates, Pablo Neira Ayuso
• [PATCH nft] meta: permit numeric interface type, Florian Westphal
  • Re: [PATCH nft] meta: permit numeric interface type, Pablo Neira Ayuso
• [PATCH nftables] rt: introduce routing expression, Anders K. Pedersen | Cohaesio
• [PATCH libnftnl] introduce rt expression, Anders K. Pedersen | Cohaesio
• [PATCH nf-next 0/5] netfilter: nft: introduce routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH nf-next 1/5] netfilter: nft: UAPI headers for routing expression, Anders K. Pedersen | Cohaesio
    • Re: [PATCH nf-next 1/5] netfilter: nft: UAPI headers for routing expression, Arturo Borrero Gonzalez
  • [PATCH nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
    • Re: [PATCH nf-next 2/5] netfilter: nft: basic routing expression, Arturo Borrero Gonzalez
      • Re: [PATCH nf-next 2/5] netfilter: nft: basic routing expression, Anders K. Pedersen | Cohaesio
  • [PATCH nf-next 3/5] netfilter: nft: rt nexthop for IPv4 family, Anders K. Pedersen | Cohaesio
  • [PATCH nf-next 4/5] netfilter: nft: rt nexthop for IPv6 family, Anders K. Pedersen | Cohaesio
  • [PATCH nf-next 5/5] netfilter: nft: rt nexthop for inet family, Anders K. Pedersen | Cohaesio
• [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Pablo Neira Ayuso
  • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Aaron Conole
    • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Pablo Neira Ayuso
      • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Aaron Conole
        • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Pablo Neira Ayuso
          • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Florian Westphal
            • Re: [PATCH nf,v2] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Aaron Conole
• [PATCH nf-next,RFC 00/10] Netfilter core updates, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 02/10] netfilter: remove comments that predate rcu days, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 01/10] netfilter: get rid of useless debugging from core, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 03/10] netfilter: bridge: kill NF_HOOK_THRESH() and state->tresh, Pablo Neira Ayuso
    • Re: [PATCH nf-next,RFC 03/10] netfilter: bridge: kill NF_HOOK_THRESH() and state->tresh, Florian Westphal
      • Re: [PATCH nf-next,RFC 03/10] netfilter: bridge: kill NF_HOOK_THRESH() and state->tresh, Pablo Neira Ayuso
        • Re: [PATCH nf-next,RFC 03/10] netfilter: bridge: kill NF_HOOK_THRESH() and state->tresh, Florian Westphal
          • Re: [PATCH nf-next,RFC 03/10] netfilter: bridge: kill NF_HOOK_THRESH() and state->tresh, Pablo Neira Ayuso
            • Re: [PATCH nf-next,RFC 03/10] netfilter: bridge: kill NF_HOOK_THRESH() and state->tresh, Florian Westphal
  • [PATCH nf-next,RFC 04/10] netfilter: deprecate NF_STOP, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 07/10] netfilter: use switch() to handle verdict cases from nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Pablo Neira Ayuso
    • Re: [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Florian Westphal
      • Re: [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Pablo Neira Ayuso
        • Re: [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Florian Westphal
    • Re: [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Liping Zhang
      • Re: [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Pablo Neira Ayuso
        • Re: [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Pablo Neira Ayuso
        • Re: [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Florian Westphal
          • Re: [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Pablo Neira Ayuso
            • Re: [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 06/10] netfilter: nf_tables: use hook state from xt_action_param structure, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 09/10] netfilter: merge nf_iterate() into nf_hook_slow(), Pablo Neira Ayuso
  • [PATCH nf-next,RFC 10/10] netfilter: inline nf_hook_slow() and rename it to nf_hook_iterate(), Pablo Neira Ayuso
  • [PATCH nf-next,RFC 05/10] netfilter: x_tables: move hook state into xt_action_param structure, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nf-next,RFC 00/10] Netfilter core updates, Pablo Neira Ayuso
    • [PATCH nf-next,RFC 07/10] netfilter: use switch() to handle verdict cases from nf_hook_slow(), Pablo Neira Ayuso
    • [PATCH nf-next,RFC 06/10] netfilter: nf_tables: use hook state from xt_action_param structure, Pablo Neira Ayuso
    • [PATCH nf-next,RFC 03/10] netfilter: bridge: kill NF_HOOK_THRESH() and state->tresh, Pablo Neira Ayuso
    • [PATCH nf-next,RFC 05/10] netfilter: x_tables: move hook state into xt_action_param structure, Pablo Neira Ayuso
    • [PATCH nf-next,RFC 04/10] netfilter: deprecate NF_STOP, Pablo Neira Ayuso
    • [PATCH nf-next,RFC 02/10] netfilter: remove comments that predate rcu days, Pablo Neira Ayuso
    • [PATCH nf-next,RFC 10/10] netfilter: inline nf_hook_slow() and rename it to nf_hook_iterate(), Pablo Neira Ayuso
    • [PATCH nf-next,RFC 09/10] netfilter: merge nf_iterate() into nf_hook_slow(), Pablo Neira Ayuso
    • [PATCH nf-next,RFC 08/10] netfilter: move NF_QUEUE handling away from core, Pablo Neira Ayuso
    • [PATCH nf-next,RFC 01/10] netfilter: get rid of useless debugging from core, Pablo Neira Ayuso
• [PATCH 1/2 nf] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Pablo Neira Ayuso
  • [PATCH 2/2 nf] netfilter: nft_range: validate operation netlink attribute, Pablo Neira Ayuso
  • Re: [PATCH 1/2 nf] netfilter: nf_queue: don't re-enter same hook on packet reinjection, Aaron Conole
• [PATCH nft] src: use new range expression for != [a,b] intervals, Pablo Neira Ayuso
• [PATCH libnftnl] src: add range expression, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_hash: add missing NFTA_HASH_OFFSET's nla_policy, Liping Zhang
  • Re: [PATCH nf] netfilter: nft_hash: add missing NFTA_HASH_OFFSET's nla_policy, Pablo Neira Ayuso
• [PATCH nf] netfilter: xt_ipcomp: add "ip[6]t_ipcomp" module alias name, Liping Zhang
  • Re: [PATCH nf] netfilter: xt_ipcomp: add "ip[6]t_ipcomp" module alias name, Pablo Neira Ayuso
• [patch] netfilter: nf_tables: underflow in nft_parse_u32_check(), Dan Carpenter
  • Re: [patch] netfilter: nf_tables: underflow in nft_parse_u32_check(), Liping Zhang
    • [patch v2] netfilter: nf_tables: underflow in nft_parse_u32_check(), Dan Carpenter
      • Re: [patch v2] netfilter: nf_tables: underflow in nft_parse_u32_check(), Pablo Neira Ayuso
• [RFC] SIP conntrack handler and TCP fragmentation, Ulrich Weber
  • Re: [RFC] SIP conntrack handler and TCP fragmentation, Florian Westphal
    • Re: [RFC] SIP conntrack handler and TCP fragmentation, Ulrich Weber
      • Re: [RFC] SIP conntrack handler and TCP fragmentation, Florian Westphal
        • Re: [RFC] SIP conntrack handler and TCP fragmentation, Ulrich Weber
• [patch] netfilter: nft_exthdr: fix error handling in nft_exthdr_init(), Dan Carpenter
  • Re: [patch] netfilter: nft_exthdr: fix error handling in nft_exthdr_init(), Pablo Neira Ayuso
• routing table lookup, Bjørnar Ness
  • Re: routing table lookup, Jan Engelhardt
    • Re: routing table lookup, Bjørnar Ness
      • Re: routing table lookup, Jan Engelhardt
        • Re: routing table lookup, Bjørnar Ness
          • Re: routing table lookup, Michal Kubecek
            • Re: routing table lookup, Bjørnar Ness
              • Re: routing table lookup, Florian Westphal
                • Re: routing table lookup, Bjørnar Ness
• [PATCH nf] netfilter: xt_NFLOG: fix unexpected truncated packet, Liping Zhang
  • Re: [PATCH nf] netfilter: xt_NFLOG: fix unexpected truncated packet, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nf] netfilter: xt_NFLOG: fix unexpected truncated packet, Liping Zhang
    • RE: [PATCH nf] netfilter: xt_NFLOG: fix unexpected truncated packet, Justin Piszcz
    • Re: [PATCH nf] netfilter: xt_NFLOG: fix unexpected truncated packet, Chris Caputo
      • Re: [PATCH nf] netfilter: xt_NFLOG: fix unexpected truncated packet, Liping Zhang
        • Re: [PATCH nf] netfilter: xt_NFLOG: fix unexpected truncated packet, Chris Caputo
          • Re: [PATCH nf] netfilter: xt_NFLOG: fix unexpected truncated packet, Greg Kroah-Hartman
• [PATCH ulogd2] ulogd: fix crash when ipv4 packet is truncated, Liping Zhang
  • Re: [PATCH ulogd2] ulogd: fix crash when ipv4 packet is truncated, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH ulogd2] ulogd: fix crash when ipv4 packet is truncated, Liping Zhang
• [libnftnl PATCH] libnftnl: update Arturo Borrero Gonzalez email, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] libnftnl: update Arturo Borrero Gonzalez email, Pablo Neira Ayuso
• [PATCH net 0/2] conntrack update, Nicolas Dichtel
  • [PATCH net 1/2] conntrack: remove obsolete sysctl (nf_conntrack_events_retry_timeout), Nicolas Dichtel
    • Re: [PATCH net 1/2] conntrack: remove obsolete sysctl (nf_conntrack_events_retry_timeout), Florian Westphal
      • Re: [PATCH net 1/2] conntrack: remove obsolete sysctl (nf_conntrack_events_retry_timeout), Pablo Neira Ayuso
  • [PATCH net 2/2] conntrack: enable to tune gc parameters, Nicolas Dichtel
    • Re: [PATCH net 2/2] conntrack: enable to tune gc parameters, Florian Westphal
      • Re: [PATCH net 2/2] conntrack: enable to tune gc parameters, Nicolas Dichtel
        • Re: [PATCH net 2/2] conntrack: enable to tune gc parameters, Florian Westphal
          • Re: [PATCH net 2/2] conntrack: enable to tune gc parameters, Nicolas Dichtel
            • Re: [PATCH net 2/2] conntrack: enable to tune gc parameters, Florian Westphal
              • Re: [PATCH net 2/2] conntrack: enable to tune gc parameters, Pablo Neira Ayuso
                • Re: [PATCH net 2/2] conntrack: enable to tune gc parameters, Florian Westphal
                • [PATCH net] conntrack: perform a full scan in gc, Nicolas Dichtel
                  • Re: [PATCH net] conntrack: perform a full scan in gc, Florian Westphal
                    • Re: [PATCH net] conntrack: perform a full scan in gc, Nicolas Dichtel
                      • [PATCH net] conntrack: restart gc immediately if GC_MAX_EVICTS is reached, Nicolas Dichtel
                        • Re: [PATCH net] conntrack: restart gc immediately if GC_MAX_EVICTS is reached, Florian Westphal
                        • Re: [PATCH net] conntrack: restart gc immediately if GC_MAX_EVICTS is reached, Pablo Neira Ayuso
                      • Re: [PATCH net] conntrack: perform a full scan in gc, Nicolas Dichtel
• slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Linus Torvalds
  • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Florian Westphal
    • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Aaron Conole
      • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Linus Torvalds
        • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Linus Torvalds
          • Re: slab corruption with current -git, David Miller
            • Re: slab corruption with current -git, David Miller
              • Re: slab corruption with current -git, Linus Torvalds
              • Re: slab corruption with current -git, Michal Kubecek
                • Re: slab corruption with current -git, Aaron Conole
          • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Aaron Conole
            • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Linus Torvalds
              • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Linus Torvalds
                • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Aaron Conole
                • Re: slab corruption with current -git, David Miller
                  • Re: slab corruption with current -git, Linus Torvalds
          • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Linus Torvalds
            • Re: slab corruption with current -git (was Re: [git pull] vfs pile 1 (splice)), Linus Torvalds
              • Re: slab corruption with current -git, David Miller
                • Re: slab corruption with current -git, Markus Trippelsdorf
                  • Re: slab corruption with current -git, Markus Trippelsdorf
                    • Message not available
                      • Re: slab corruption with current -git, Markus Trippelsdorf
                        • Re: slab corruption with current -git, Linus Torvalds
                          • Re: slab corruption with current -git, Florian Westphal
                          • Re: slab corruption with current -git, Al Viro
• [PATCH nf] netfilter: nft_dynset: fix element timeout for HZ != 1000, Anders K. Pedersen | Cohaesio
  • Re: [PATCH nf] netfilter: nft_dynset: fix element timeout for HZ != 1000, Pablo Neira Ayuso
• [PATCH net-next] nfnetlink_log: Use GFP_NOWARN for skb allocation, Calvin Owens
  • Re: [PATCH net-next] nfnetlink_log: Use GFP_NOWARN for skb allocation, Pablo Neira Ayuso
• [PATCH iptables 0/8] iptables-translate: fix some bugs and add more translations to nft, Liping Zhang
  • [PATCH iptables 4/8] extensions: libxt_devgroup: handle the invert flag properly in translation, Liping Zhang
  • [PATCH iptables 7/8] extensions: libxt_DSCP: add translation to nft, Liping Zhang
  • [PATCH iptables 2/8] extensions: libxt_iprange: rename "ip saddr" to "ip6 saddr" in ip6tables-xlate, Liping Zhang
  • [PATCH iptables 3/8] extensions: libxt_iprange: handle the invert flag properly in translation, Liping Zhang
  • [PATCH iptables 1/8] extensions: libipt_realm: add a missing space in translation, Liping Zhang
  • [PATCH iptables 5/8] extensions: libxt_ipcomp: add range support in translation, Liping Zhang
  • [PATCH iptables 6/8] extensions: libxt_quota: add translation to nft, Liping Zhang
  • [PATCH iptables 8/8] extensions: libxt_statistic: add translation to nft, Liping Zhang
  • Re: [PATCH iptables 0/8] iptables-translate: fix some bugs and add more translations to nft, Pablo Neira Ayuso
• [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Davide Caratti
  • [PATCH nf-next 1/2] netfilter: persistent aliases for l4 nat protocols, Davide Caratti
  • [PATCH nf-next 2/2] xt_nat: probe module for non-builtin L4 protocols, Davide Caratti
  • Re: [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Arturo Borrero Gonzalez
    • Re: [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Davide Caratti
      • Re: [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Arturo Borrero Gonzalez
        • Re: [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Florian Westphal
  • Re: [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Pablo Neira Ayuso
    • Re: [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Davide Caratti
      • Re: [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Pablo Neira Ayuso
        • Re: [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Florian Westphal
          • Re: [PATCH nf-next 0/2] netfilter: autoload NAT support for non-builtin L4 protocols, Pablo Neira Ayuso
• [PATCH] netfilter: xt_hashlimit: Add missing ULL suffixes for 64-bit constants, Geert Uytterhoeven
  • Re: [PATCH] netfilter: xt_hashlimit: Add missing ULL suffixes for 64-bit constants, Vishwanath Pai
• [PATCH 0/5] Netfilter fixes for net-next, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: accommodate different kconfig in nf_set_hooks_head, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: nft_limit: fix divided by zero panic, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: Fix potential null pointer dereference, Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: fix namespace handling in nf_log_proc_dostring, Pablo Neira Ayuso
  • Re: [PATCH 0/5] Netfilter fixes for net-next, David Miller
• [PATCH 1/3] netfilter: nf_tables: avoid uninitialized variable warning, Arnd Bergmann
  • [PATCH 2/3] netfilter: hide reference to nf_hooks_ingress, Arnd Bergmann
    • Re: [PATCH 2/3] netfilter: hide reference to nf_hooks_ingress, Aaron Conole
  • [PATCH 3/3] netfilter: xt_hashlimit: uses div_u64 for division, Arnd Bergmann
    • Re: [PATCH 3/3] netfilter: xt_hashlimit: uses div_u64 for division, Eric Dumazet
      • Re: [PATCH 3/3] netfilter: xt_hashlimit: uses div_u64 for division, Vishwanath Pai
      • Re: [PATCH 3/3] netfilter: xt_hashlimit: uses div_u64 for division, Arnd Bergmann
  • Re: [PATCH 1/3] netfilter: nf_tables: avoid uninitialized variable warning, Pablo Neira Ayuso
    • Re: [PATCH 1/3] netfilter: nf_tables: avoid uninitialized variable warning, Pablo Neira Ayuso
• [PATCH net-next v3] netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division, Vishwanath Pai
  • Re: [PATCH net-next v3] netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division, Maciej Żenczykowski
  • Re: [PATCH net-next v3] netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division, Pablo Neira Ayuso
    • Re: [PATCH net-next v3] netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division, Vishwanath Pai
• [NetDev] [ANNOUNCE] Netdev 1.2 program announced, Hajime Tazaki
• [PATCH nft] doc: Fix wrong word in description of option "-n --numberic", fgao
  • Re: [PATCH nft] doc: Fix wrong word in description of option "-n --numberic", Pablo Neira Ayuso
• [PATCH nf-next v4 0/2] fixes for recent nf_compact hooks, Aaron Conole
  • [PATCH nf-next v4 1/2] netfilter: Fix potential null pointer dereference, Aaron Conole
    • Re: [PATCH nf-next v4 1/2] netfilter: Fix potential null pointer dereference, Pablo Neira Ayuso
  • [PATCH nf-next v4 2/2] nf_set_hooks_head: accommodate different kconfig, Aaron Conole
    • Re: [PATCH nf-next v4 2/2] nf_set_hooks_head: accommodate different kconfig, Pablo Neira Ayuso
• [PATCH nf-next v3 0/2] fixes for recent nf_compact hooks, Aaron Conole
  • [PATCH nf-next v3 1/2] netfilter: Fix potential null pointer dereference, Aaron Conole
    • Re: [PATCH nf-next v3 1/2] netfilter: Fix potential null pointer dereference, Eric Dumazet
      • Re: [PATCH nf-next v3 1/2] netfilter: Fix potential null pointer dereference, Aaron Conole
        • Re: [PATCH nf-next v3 1/2] netfilter: Fix potential null pointer dereference, Eric Dumazet
          • Re: [PATCH nf-next v3 1/2] netfilter: Fix potential null pointer dereference, Aaron Conole
  • [PATCH nf-next v3 2/2] nf_set_hooks_head: accommodate different kconfig, Aaron Conole
• [ANNOUNCE] Netdev 1.2 updates (27th September, 2016), Hajime Tazaki
• [PATCH v2] netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division, Vishwanath Pai
  • Re: [PATCH v2] netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division, Maciej Żenczykowski
• [PATCH nf-next v2 0/2] fixes for recent nf_compact hooks, Aaron Conole
  • [PATCH nf-next v2 1/2] netfilter: Fix potential null pointer dereference, Aaron Conole
    • Re: [PATCH nf-next v2 1/2] netfilter: Fix potential null pointer dereference, Feng Gao
      • Re: [PATCH nf-next v2 1/2] netfilter: Fix potential null pointer dereference, Liping Zhang
        • Re: [PATCH nf-next v2 1/2] netfilter: Fix potential null pointer dereference, Liping Zhang
          • Re: [PATCH nf-next v2 1/2] netfilter: Fix potential null pointer dereference, Feng Gao
          • Re: [PATCH nf-next v2 1/2] netfilter: Fix potential null pointer dereference, Aaron Conole
  • [PATCH nf-next v2 2/2] nf_set_hooks_head: acommodate different kconfig, Aaron Conole
• [PATCH nf] netfilter: nft_limit: fix divded by zero panic, Liping Zhang
  • Re: [PATCH nf] netfilter: nft_limit: fix divded by zero panic, Pablo Neira Ayuso
• Re: linux-next: Tree for Sep 27, Sergey Senozhatsky
  • Re: linux-next: Tree for Sep 27, Sergey Senozhatsky
    • error: 'struct net_device' has no member named 'nf_hooks_ingress', Michal Sojka
      • Re: error: 'struct net_device' has no member named 'nf_hooks_ingress', Eric Dumazet
        • Re: error: 'struct net_device' has no member named 'nf_hooks_ingress', Sergey Senozhatsky
• [PATCH] Fix link error in 32bit arch because of 64bit division, Vishwanath Pai
  • Re: [PATCH] Fix link error in 32bit arch because of 64bit division, Liping Zhang
  • Re: [PATCH] Fix link error in 32bit arch because of 64bit division, Eric Dumazet
• [PATCH nf-next] netfilter: xt_osf: Use explicit member assignment to avoid implicit no padding rule, fgao
  • Re: [PATCH nf-next] netfilter: xt_osf: Use explicit member assignment to avoid implicit no padding rule, Liping Zhang
    • Re: [PATCH nf-next] netfilter: xt_osf: Use explicit member assignment to avoid implicit no padding rule, Gao Feng
      • Re: [PATCH nf-next] netfilter: xt_osf: Use explicit member assignment to avoid implicit no padding rule, Liping Zhang
        • Re: [PATCH nf-next] netfilter: xt_osf: Use explicit member assignment to avoid implicit no padding rule, Gao Feng
• [PATCH v4 2/2] libxt_hashlimit: Create revision 2 of xt_hashlimit to support higher pps rates, Vishwanath Pai
  • Re: [PATCH v4 2/2] libxt_hashlimit: Create revision 2 of xt_hashlimit to support higher pps rates, Pablo Neira Ayuso
• [PATCH v4 1/2] libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2, Vishwanath Pai
  • Re: [PATCH v4 1/2] libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2, Pablo Neira Ayuso
• [PATCH nf-next 0/2] fixes for recent nf_compact hooks, Aaron Conole
  • [PATCH nf-next 2/2] nf_set_hooks_head: acommodate different kconfig, Aaron Conole
    • Re: [PATCH nf-next 2/2] nf_set_hooks_head: acommodate different kconfig, Florian Westphal
      • Re: [PATCH nf-next 2/2] nf_set_hooks_head: acommodate different kconfig, Aaron Conole
  • [PATCH nf-next 1/2] netfilter: Fix potential null pointer dereference, Aaron Conole
• [PATCH nf-next] netfilter: xt_nfacct: Use not operation instead of condition check, fgao
  • Re: [PATCH nf-next] netfilter: xt_nfacct: Use not operation instead of condition check, Florian Westphal
    • Re: [PATCH nf-next] netfilter: xt_nfacct: Use not operation instead of condition check, Gao Feng
      • Re: [PATCH nf-next] netfilter: xt_nfacct: Use not operation instead of condition check, Florian Westphal
        • Re: [PATCH nf-next] netfilter: xt_nfacct: Use not operation instead of condition check, Gao Feng
• [PATCH nf-next] netfilter: xt_multiport: Use switch case instead of multiple condition checks, fgao
  • Re: [PATCH nf-next] netfilter: xt_multiport: Use switch case instead of multiple condition checks, Pablo Neira Ayuso
• [nf-next:master 43/54] net/netfilter/core.c:96: error: type defaults to 'int' in declaration of '__val', kbuild test robot
• [PATCH 00/53] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 02/53] netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilter, Pablo Neira Ayuso
  • [PATCH 06/53] netfilter: ftp: Remove the useless code, Pablo Neira Ayuso
  • [PATCH 07/53] netfilter: nft_numgen: rename until attribute by modulus, Pablo Neira Ayuso
  • [PATCH 08/53] netfilter: nft_quota: fix overquota logic, Pablo Neira Ayuso
  • [PATCH 18/53] netfilter: nf_tables_bridge: use nft_set_pktinfo_ipv{4, 6}_validate, Pablo Neira Ayuso
  • [PATCH 19/53] netfilter: nf_tables: don't drop IPv6 packets that cannot parse transport, Pablo Neira Ayuso
  • [PATCH 24/53] netfilter: conntrack: remove packet hotpath stats, Pablo Neira Ayuso
  • [PATCH 22/53] netfilter: Add the missed return value check of nft_register_chain_type, Pablo Neira Ayuso
  • [PATCH 39/53] netfilter: call nf_hook_ingress with rcu_read_lock, Pablo Neira Ayuso
  • [PATCH 49/53] netfilter: evict stale entries when user reads /proc/net/nf_conntrack, Pablo Neira Ayuso
  • [PATCH 47/53] netfilter: xt_hashlimit: Prepare for revision 2, Pablo Neira Ayuso
  • [PATCH 40/53] netfilter: Remove explicit rcu_read_lock in nf_hook_slow, Pablo Neira Ayuso
  • [PATCH 52/53] netfilter: nft_log: complete NFTA_LOG_FLAGS attr support, Pablo Neira Ayuso
  • [PATCH 51/53] netfilter: nf_tables: add range expression, Pablo Neira Ayuso
  • [PATCH 50/53] netfilter: xt_socket: fix transparent match for IPv6 request sockets, Pablo Neira Ayuso
  • [PATCH 48/53] netfilter: xt_hashlimit: Create revision 2 to support higher pps rates, Pablo Neira Ayuso
  • [PATCH 53/53] netfilter: nf_log: get rid of XT_LOG_* macros, Pablo Neira Ayuso
  • [PATCH 46/53] netfilter: nft_ct: report error if mark and dir specified simultaneously, Pablo Neira Ayuso
  • [PATCH 43/53] netfilter: replace list_head with single linked list, Pablo Neira Ayuso
  • [PATCH 42/53] netfilter: nf_queue: whitespace cleanup, Pablo Neira Ayuso
  • [PATCH 41/53] netfilter: Only allow sane values in nf_register_net_hook, Pablo Neira Ayuso
  • [PATCH 44/53] netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ack, Pablo Neira Ayuso
  • [PATCH 45/53] netfilter: nft_ct: unnecessary to require dir when use ct l3proto/protocol, Pablo Neira Ayuso
  • [PATCH 38/53] netfilter: call nf_hook_state_init with rcu_read_lock held, Pablo Neira Ayuso
  • [PATCH 37/53] netfilter: bridge: add and use br_nf_hook_thresh, Pablo Neira Ayuso
  • [PATCH 35/53] netfilter: nft_lookup: remove superfluous element found check, Pablo Neira Ayuso
  • [PATCH 34/53] netfilter: xt_helper: Use sizeof(variable) instead of literal number, Pablo Neira Ayuso
  • [PATCH 36/53] netfilter: xt_TCPMSS: Refactor the codes to decrease one condition check and more readable, Pablo Neira Ayuso
  • [PATCH 27/53] netfilter: nft_numgen: add number generation offset, Pablo Neira Ayuso
  • [PATCH 33/53] netfilter: Enhance the codes used to get random once, Pablo Neira Ayuso
  • [PATCH 32/53] netfilter: nf_tables: check tprot_set first when we use xt.thoff, Pablo Neira Ayuso
  • [PATCH 30/53] netfilter: nf_queue: improve queue range support for bridge family, Pablo Neira Ayuso
  • [PATCH 29/53] netfilter: nft_queue: add _SREG_QNUM attr to select the queue number, Pablo Neira Ayuso
  • [PATCH 31/53] netfilter: nf_tables: improve nft payload fast eval, Pablo Neira Ayuso
  • [PATCH 28/53] netfilter: nf_tables: validate maximum value of u32 netlink attributes, Pablo Neira Ayuso
  • [PATCH 23/53] netfilter: nf_queue: get rid of dependency on IP6_NF_IPTABLES, Pablo Neira Ayuso
  • [PATCH 20/53] netfilter: nf_conntrack: simplify __nf_ct_try_assign_helper() return logic, Pablo Neira Ayuso
  • [PATCH 25/53] netfilter: nft_numgen: fix race between num generate and store it, Pablo Neira Ayuso
  • [PATCH 26/53] netfilter: nft_hash: fix hash overflow validation, Pablo Neira Ayuso
  • [PATCH 21/53] netfilter: Add the missed return value check of register_netdevice_notifier, Pablo Neira Ayuso
  • [PATCH 16/53] netfilter: nf_tables_ipv6: setup pktinfo transport field on failure to parse, Pablo Neira Ayuso
  • [PATCH 17/53] netfilter: introduce nft_set_pktinfo_{ipv4, ipv6}_validate(), Pablo Neira Ayuso
  • [PATCH 15/53] netfilter: nf_tables: ensure proper initialization of nft_pktinfo fields, Pablo Neira Ayuso
  • [PATCH 13/53] netfilter: nft_hash: Add hash offset value, Pablo Neira Ayuso
  • [PATCH 14/53] netfilter: nft_dynset: allow to invert match criteria, Pablo Neira Ayuso
  • [PATCH 03/53] netfilter: nf_ct_sip: correct parsing of continuation lines in SIP headers, Pablo Neira Ayuso
  • [PATCH 12/53] netfilter: nf_conntrack: remove unused ctl_table_path member in nf_conntrack_l3proto, Pablo Neira Ayuso
  • [PATCH 11/53] netfilter: nft_queue: check the validation of queues_total and queuenum, Pablo Neira Ayuso
  • [PATCH 01/53] netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfilter., Pablo Neira Ayuso
  • [PATCH 04/53] netfilter: nf_ct_sip: correct allowed characters in Call-ID SIP header, Pablo Neira Ayuso
  • [PATCH 10/53] netfilter: nf_ct_sip: allow tab character in SIP headers, Pablo Neira Ayuso
  • [PATCH 09/53] netfilter: nft_quota: introduce nft_overquota(), Pablo Neira Ayuso
  • [PATCH 05/53] netfilter: ftp: Remove the useless dlen==0 condition check in find_pattern, Pablo Neira Ayuso
  • Re: [PATCH 00/53] Netfilter updates for net-next, David Miller
• [nf-next:master 43/54] net/netfilter/core.c:96:30: error: 'struct net_device' has no member named 'nf_hooks_ingress', kbuild test robot
• [PATCH nft 0/3] src: add nft log flags support, Liping Zhang
  • [PATCH nft 1/3] src: add log flags syntax support, Liping Zhang
  • [PATCH nft 3/3] tests: py: add some testcases for log flags, Liping Zhang
  • [PATCH nft 2/3] doc: add description about log flags, Liping Zhang
  • Re: [PATCH nft 0/3] src: add nft log flags support, Pablo Neira Ayuso
    • Re: [PATCH nft 0/3] src: add nft log flags support, Liping Zhang
• [PATCH libnftnl 0/3] expr: complete log flags support, Liping Zhang
  • [PATCH libnftnl 1/3] expr: log: fix typo in nftnl_expr_log_export, Liping Zhang
  • [PATCH libnftnl 2/3] expr: log: do not print prefix if it is not set, Liping Zhang
  • [PATCH libnftnl 3/3] expr: log: complete log flags support, Liping Zhang
  • Re: [PATCH libnftnl 0/3] expr: complete log flags support, Pablo Neira Ayuso
• [PATCH nf-next 2/2] netfilter: nf_log: get rid of XT_LOG_* macros, Liping Zhang
  • Re: [PATCH nf-next 2/2] netfilter: nf_log: get rid of XT_LOG_* macros, Pablo Neira Ayuso
• [PATCH nf-next 0/2] netfilter: complete nft log flags support, Liping Zhang
  • [PATCH nf-next 1/2] netfilter: nft_log: complete NFTA_LOG_FLAGS attr support, Liping Zhang
    • Re: [PATCH nf-next 1/2] netfilter: nft_log: complete NFTA_LOG_FLAGS attr support, Pablo Neira Ayuso
• [PATCH] netfilter: don't permit unprivileged writes to global state via sysctls, Jann Horn
  • Re: [PATCH] netfilter: don't permit unprivileged writes to global state via sysctls, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: don't permit unprivileged writes to global state via sysctls, David Miller
      • Re: [PATCH] netfilter: don't permit unprivileged writes to global state via sysctls, Jann Horn
        • Re: [PATCH] netfilter: don't permit unprivileged writes to global state via sysctls, David Miller
• [PATCH nf-next] netfilter: nf_tables: add range expression, Pablo Neira Ayuso
• [PATCH libnftnl] src: display offset only if present in hash and numgen expressions, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: evict stale entries when user reads /proc/net/nf_conntrack, Florian Westphal
  • Re: [PATCH nf-next] netfilter: evict stale entries when user reads /proc/net/nf_conntrack, Pablo Neira Ayuso
• [PATCH v3 2/2] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Vishwanath Pai
  • Re: [PATCH v3 2/2] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Jan Engelhardt
    • Re: [PATCH v3 2/2] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Vishwanath Pai
      • Re: [PATCH v3 2/2] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Pablo Neira Ayuso
        • Re: [PATCH v3 2/2] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Pablo Neira Ayuso
  • Re: [PATCH v3 2/2] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Liping Zhang
    • Re: [PATCH v3 2/2] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Vishwanath Pai
• [PATCH v3 1/2] netfilter: Prepare xt_hashlimit.c for revision 2, Vishwanath Pai
• [libnftnl PATCH] libnftnl: remove libmxml support, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] libnftnl: remove libmxml support, Pablo Neira Ayuso
• [PATCH nft] src: support ct l3proto/protocol without direction syntax, Liping Zhang
  • Re: [PATCH nft] src: support ct l3proto/protocol without direction syntax, Pablo Neira Ayuso
• [PATCH nf-next 1/2] netfilter: nft_ct: unnecessary to require dir when use ct l3proto/protocol, Liping Zhang
  • [PATCH nf-next 2/2] netfilter: nft_ct: report error if mark and dir specified simultaneously, Liping Zhang
    • Re: [PATCH nf-next 2/2] netfilter: nft_ct: report error if mark and dir specified simultaneously, Pablo Neira Ayuso
  • Re: [PATCH nf-next 1/2] netfilter: nft_ct: unnecessary to require dir when use ct l3proto/protocol, Pablo Neira Ayuso
• [PATCH nf v5] netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ack, fgao
  • Re: [PATCH nf v5] netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ack, Pablo Neira Ayuso
• [PATCH nf v4] netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ack, fgao
• [PATCH nf v3] netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ack, fgao
  • Re: [PATCH nf v3] netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ack, Eric Dumazet
  • Re: [PATCH nf v3] netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ack, Pablo Neira Ayuso
• [PATCH 1/1 linux-next] netfilter: conntrack: fix kmemleak false positive, Fabian Frederick
  • Re: [PATCH 1/1 linux-next] netfilter: conntrack: fix kmemleak false positive, Florian Westphal
    • Re: [PATCH 1/1 linux-next] netfilter: conntrack: fix kmemleak false positive, Fabian Frederick
      • Re: [PATCH 1/1 linux-next] netfilter: conntrack: fix kmemleak false positive, Florian Westphal
        • Re: [PATCH 1/1 linux-next] netfilter: conntrack: fix kmemleak false positive, Fabian Frederick
• [PATCH nf-next v3 0/7] Compact netfilter hooks list, Aaron Conole
  • [PATCH nf-next v3 3/7] netfilter: call nf_hook_ingress with rcu_read_lock, Aaron Conole
  • [PATCH nf-next v3 5/7] nf_register_net_hook: Only allow sane values, Aaron Conole
  • [PATCH] netfilter: replace list_head with single linked list, Aaron Conole
    • Re: [PATCH] netfilter: replace list_head with single linked list, Aaron Conole
  • [PATCH nf-next v3 1/7] netfilter: bridge: add and use br_nf_hook_thresh, Aaron Conole
  • [PATCH nf-next v3 4/7] nf_hook_slow: Remove explicit rcu_read_lock, Aaron Conole
  • [PATCH nf-next v3 6/7] nf_queue_handler: whitespace cleanup, Aaron Conole
  • [PATCH nf-next v3 2/7] netfilter: call nf_hook_state_init with rcu_read_lock held, Aaron Conole
  • Re: [PATCH nf-next v3 0/7] Compact netfilter hooks list, Pablo Neira Ayuso
• libnftnl XML parsing seems broken with libmxml 2.10, Arturo Borrero Gonzalez
• [PATCH nf-next] netfilter: nft_lookup: remove superfluous element found check, Pablo Neira Ayuso
• Why ctinfo is IP_CT_RELATED_REPLY when reject with TCP RST, Feng Gao
• [PATCH] netfilter: xt_socket: fix transparent match for IPv6 request sockets, KOVACS Krisztian
  • Re: [PATCH] netfilter: xt_socket: fix transparent match for IPv6 request sockets, Eric Dumazet
    • Re: [PATCH] netfilter: xt_socket: fix transparent match for IPv6 request sockets, Eric Dumazet
  • <Possible follow-ups>
  • [PATCH] netfilter: xt_socket: fix transparent match for IPv6 request sockets, KOVACS Krisztian
    • Re: [PATCH] netfilter: xt_socket: fix transparent match for IPv6 request sockets, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: xt_helper: Use sizeof(variable) instead of literal number, fgao
  • Re: [PATCH nf-next] netfilter: xt_helper: Use sizeof(variable) instead of literal number, Pablo Neira Ayuso
• [PATCH] netfilter: fix namespace handling in nf_log_proc_dostring, Jann Horn
  • Re: [PATCH] netfilter: fix namespace handling in nf_log_proc_dostring, Pablo Neira Ayuso
• [nft] Problems with flushing all elements from a set, Anders K. Pedersen | Cohaesio
  • Re: [nft] Problems with flushing all elements from a set, Anders K. Pedersen | Cohaesio
• [PATCH nf-next] netfilter: Enhance the codes used to get random once, fgao
  • Re: [PATCH nf-next] netfilter: Enhance the codes used to get random once, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: check tprot_set first when we use xt.thoff, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nf_tables: check tprot_set first when we use xt.thoff, Pablo Neira Ayuso
• rate limit not working ?, Christophe Leroy
  • Re: rate limit not working ?, Pablo Neira Ayuso
    • Re: rate limit not working ?, Christophe Leroy
• [PATCH nft] tests: py: fix numgen case failed due to changes in libnftnl, Liping Zhang
  • Re: [PATCH nft] tests: py: fix numgen case failed due to changes in libnftnl, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: improve nft payload fast eval, Liping Zhang
• [PATCH nf-next] netfilter: nf_queue: improve queue range support for bridge family, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nf_queue: improve queue range support for bridge family, Pablo Neira Ayuso
• [PATCH nft] tests: py: add more test cases for queue expr, Liping Zhang
  • Re: [PATCH nft] tests: py: add more test cases for queue expr, Pablo Neira Ayuso
• [PATCH libnftnl V2] expr: queue: add NFTA_QUEUE_SREG_QNUM attr support, Liping Zhang
• [PATCH nf-next V2] netfilter: nft_queue: add _SREG_QNUM attr to select the queue number, Liping Zhang
  • Re: [PATCH nf-next V2] netfilter: nft_queue: add _SREG_QNUM attr to select the queue number, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: Ensure u8 attributes are loaded from u32 within the bounds, Laura Garcia Liebana
  • Re: [PATCH nf] netfilter: nf_tables: Ensure u8 attributes are loaded from u32 within the bounds, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nf_tables: Ensure u8 attributes are loaded from u32 within the bounds, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nf_tables: Ensure u8 attributes are loaded from u32 within the bounds, Eric Dumazet
      • Re: [PATCH nf] netfilter: nf_tables: Ensure u8 attributes are loaded from u32 within the bounds, Laura Garcia
    • Re: [PATCH nf] netfilter: nf_tables: Ensure u8 attributes are loaded from u32 within the bounds, Laura Garcia
• [PATCH nft] meta: support for nexthop and nexthop6, Anders K. Pedersen | Cohaesio
• [PATCH nf-next] netfilter: nf_meta: support for nexthop and nexthop6, Anders K. Pedersen | Cohaesio
  • Re: [PATCH nf-next] netfilter: nf_meta: support for nexthop and nexthop6, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: nf_meta: support for nexthop and nexthop6, Anders K. Pedersen | Cohaesio
      • Re: [PATCH nf-next] netfilter: nf_meta: support for nexthop and nexthop6, Pablo Neira Ayuso
• [ANNOUNCE] netdev 1.2 tokyo weekly update (13th September, 2016), Hajime Tazaki
• [PATCH v3 libnftnl] expr: numgen: add number generation offset, Laura Garcia Liebana
  • Re: [PATCH v3 libnftnl] expr: numgen: add number generation offset, Pablo Neira Ayuso
• [PATCH v3] netfilter: nft_numgen: add number generation offset, Laura Garcia Liebana
  • Re: [PATCH v3] netfilter: nft_numgen: add number generation offset, Pablo Neira Ayuso
• [PATCH] netfilter: nft_hash: fix hash overflow validation, Laura Garcia Liebana
  • Re: [PATCH] netfilter: nft_hash: fix hash overflow validation, Pablo Neira Ayuso
• [PATCH v8 nf] netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensions, fgao
  • Re: [PATCH v8 nf] netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensions, Pablo Neira Ayuso
• linux-next: manual merge of the netfilter-next tree with the net tree, Stephen Rothwell
  • Re: linux-next: manual merge of the netfilter-next tree with the net tree, Stephen Rothwell
    • Re: linux-next: manual merge of the netfilter-next tree with the net tree, Liping Zhang
  • <Possible follow-ups>
  • linux-next: manual merge of the netfilter-next tree with the net tree, Stephen Rothwell
  • linux-next: manual merge of the netfilter-next tree with the net tree, Stephen Rothwell
    • Re: linux-next: manual merge of the netfilter-next tree with the net tree, Stephen Rothwell
      • Re: linux-next: manual merge of the netfilter-next tree with the net tree, Stephen Rothwell
        • Re: linux-next: manual merge of the netfilter-next tree with the net tree, Stefano Brivio
• [PATCH nf-next] netfilter: nft_numgen: fix race between num generate and store it, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nft_numgen: fix race between num generate and store it, Pablo Neira Ayuso
• [PATCH nft V2] src: fix compile error due to _UNTIL renamed to _MODULUS in libnftnl, Liping Zhang
  • Re: [PATCH nft V2] src: fix compile error due to _UNTIL renamed to _MODULUS in libnftnl, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: remove packet hotpath stats, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: remove packet hotpath stats, Pablo Neira Ayuso
• [PATCH conntrack-tools] Link nfct and helper modules with `-z lazy`, Kevin Cernekee
  • Re: [PATCH conntrack-tools] Link nfct and helper modules with `-z lazy`, Pablo Neira Ayuso
• [PATCH libnftnl 0/3] expr: queue: add sreg_from and sreg_to support, Liping Zhang
  • [PATCH libnftnl 1/3] expr: queue: remove redundant NFTNL_EXPR_QUEUE_NUM set in json parse, Liping Zhang
    • Re: [PATCH libnftnl 1/3] expr: queue: remove redundant NFTNL_EXPR_QUEUE_NUM set in json parse, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3] tests: queue: add missing NFTNL_EXPR_QUEUE_FLAGS compare test, Liping Zhang
    • Re: [PATCH libnftnl 2/3] tests: queue: add missing NFTNL_EXPR_QUEUE_FLAGS compare test, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] expr: queue: add sreg_from and sreg_to support, Liping Zhang
• [PATCH nf-next] netfilter: nf_queue: get rid of dependency on IP6_NF_IPTABLES, Liping Zhang
  • [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Liping Zhang
    • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Florian Westphal
      • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Liping Zhang
      • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Laura Garcia
        • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Florian Westphal
          • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Pablo Neira Ayuso
      • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Pablo Neira Ayuso
        • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Florian Westphal
          • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Pablo Neira Ayuso
            • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Pablo Neira Ayuso
      • Re: [PATCH nf-next] netfilter: nft_queue: add _SREG_FROM and _SRGE_TO to select the queue numbers, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nf_queue: get rid of dependency on IP6_NF_IPTABLES, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: nf_queue: get rid of dependency on IP6_NF_IPTABLES, Liping Zhang
      • Re: [PATCH nf-next] netfilter: nf_queue: get rid of dependency on IP6_NF_IPTABLES, Pablo Neira Ayuso
• [PATCH nft] src: fix compile error due to _UNTIL renamed to _MODULUS in libnftnl, Liping Zhang
  • Re: [PATCH nft] src: fix compile error due to _UNTIL renamed to _MODULUS in libnftnl, Laura Garcia
    • Re: [PATCH nft] src: fix compile error due to _UNTIL renamed to _MODULUS in libnftnl, Liping Zhang
• [RFC] nftables: reverse path filtering for nft, Florian Westphal
  • Re: [RFC] nftables: reverse path filtering for nft, Pablo Neira Ayuso
    • Re: [RFC] nftables: reverse path filtering for nft, Florian Westphal
      • Re: [RFC] nftables: reverse path filtering for nft, Pablo Neira Ayuso
        • Re: [RFC] nftables: reverse path filtering for nft, Florian Westphal
          • Re: [RFC] nftables: reverse path filtering for nft, Pablo Neira Ayuso
            • Re: [RFC] nftables: reverse path filtering for nft, Florian Westphal
              • Re: [RFC] nftables: reverse path filtering for nft, Florian Westphal
            • Re: [RFC] nftables: reverse path filtering for nft, Florian Westphal
              • Re: [RFC] nftables: reverse path filtering for nft, Arturo Borrero Gonzalez
                • Re: [RFC] nftables: reverse path filtering for nft, Florian Westphal
                  • Re: [RFC] nftables: reverse path filtering for nft, Florian Westphal
                  • Re: [RFC] nftables: reverse path filtering for nft, Arturo Borrero Gonzalez
                  • Re: [RFC] nftables: reverse path filtering for nft, Arturo Borrero Gonzalez
• [PATCH nft] tests: py: replace "eth0" with "lo" in dup expr tests, Liping Zhang
  • Re: [PATCH nft] tests: py: replace "eth0" with "lo" in dup expr tests, Florian Westphal
• [PATCH v4 2/2 nf-next] netfilter: Add the missed return value check of nft_register_chain_type, fgao
  • Re: [PATCH v4 2/2 nf-next] netfilter: Add the missed return value check of nft_register_chain_type, Pablo Neira Ayuso
  • Re: [PATCH v4 2/2 nf-next] netfilter: Add the missed return value check of nft_register_chain_type, Pablo Neira Ayuso
• [PATCH v3 1/2 nf-next] netfilter: Add the missed return value check of register_netdevice_notifier, fgao
  • Re: [PATCH v3 1/2 nf-next] netfilter: Add the missed return value check of register_netdevice_notifier, Pablo Neira Ayuso
• [PATCH v3 2/2 nf-next] netfilter: Add the missed return value check of nft_register_chain_type, fgao
  • Re: [PATCH v3 2/2 nf-next] netfilter: Add the missed return value check of nft_register_chain_type, Pablo Neira Ayuso
• [PATCH v7 nf] netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensions, fgao
  • Re: [PATCH v7 nf] netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensions, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_nat: handle NF_DROP from nfnetlink_parse_nat_setup(), Pablo Neira Ayuso
• [PATCH nft 0/3] fix ether address formatting, Florian Westphal
  • [PATCH nft 1/3] datatype: ll: use big endian byte ordering, Florian Westphal
    • Re: [PATCH nft 1/3] datatype: ll: use big endian byte ordering, Pablo Neira Ayuso
  • [PATCH nft 2/3] tests: catch ordering issue w. ether set, Florian Westphal
    • Re: [PATCH nft 2/3] tests: catch ordering issue w. ether set, Pablo Neira Ayuso
  • [PATCH nft 3/3] payload: remove byteorder conversion, Florian Westphal
    • Re: [PATCH nft 3/3] payload: remove byteorder conversion, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_conntrack: simplify __nf_ct_try_assign_helper() return logic, Pablo Neira Ayuso
• [PATCH nf-next 1/5] netfilter: nf_tables: ensure proper initialization of nft_pktinfo fields, Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nf_tables_ipv6: setup pktinfo transport field on failure to parse, Pablo Neira Ayuso
  • [PATCH nf-next 3/5] netfilter: introduce nft_set_pktinfo_{ipv4,ipv6}_validate(), Pablo Neira Ayuso
  • [PATCH nf-next 5/5] netfilter: nf_tables: don't drop IPv6 packets that cannot parse transport, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nf_tables_bridge: use nft_set_pktinfo_ipv{4,6}_validate, Pablo Neira Ayuso
• [PATCH nft 1/2] doc: update meta expression, Florian Westphal
  • [PATCH nft 2/2] doc: payload and conntrack statement, Florian Westphal
    • Re: [PATCH nft 2/2] doc: payload and conntrack statement, Pablo Neira Ayuso
      • Re: [PATCH nft 2/2] doc: payload and conntrack statement, Florian Westphal
  • Re: [PATCH nft 1/2] doc: update meta expression, Pablo Neira Ayuso
• [PATCH 1/2 nft] doc: nft: add my copyright statement to the manpage, Pablo Neira Ayuso
  • [PATCH 2/2 nft] doc: nft: document log, reject, counter, meta, limit, nat and queue statements, Pablo Neira Ayuso
• Network namespace and neighboring subsystem problem, Tugrul Erdogan
• [PATCH v2 nf-next] netfilter: Add the missed return value check of register_netdevice_notifier, fgao
  • Re: [PATCH v2 nf-next] netfilter: Add the missed return value check of register_netdevice_notifier, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: xt_TEE: Add the missed return value check in tee_tg_check, fgao
  • Re: [PATCH nf-next] netfilter: xt_TEE: Add the missed return value check in tee_tg_check, Pablo Neira Ayuso