Linux Netfilter / IP Tables Devel

Date Index

[Prev Page][Next Page]

Re: [PATCH nf 1/2] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy, (continued)
[PATCH nf-next] netfilter: nfnetlink_log: add "nf-logger-3-1" module alias name, Liping Zhang
- Re: [PATCH nf-next] netfilter: nfnetlink_log: add "nf-logger-3-1" module alias name, Pablo Neira Ayuso
[PATCH V3 nf-next] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
- Re: [PATCH V3 nf-next] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Pablo Neira Ayuso
[PATCH nf-next,v2] netfilter: remove ip_conntrack* sysctl compat code, Pablo Neira Ayuso
[PATCH v2 libnftnl] expr: add hash expression, Laura Garcia Liebana
- Re: [PATCH v2 libnftnl] expr: add hash expression, Pablo Neira Ayuso
[nft PATCH 0/4] A round of covscan indicated fixes, Phil Sutter
- [nft PATCH 3/4] proto_find_num: Avoid potential null pointer dereference, Phil Sutter
  - Re: [nft PATCH 3/4] proto_find_num: Avoid potential null pointer dereference, Pablo Neira Ayuso
- [nft PATCH 2/4] netlink_delinearize: Avoid potential null pointer deref, Phil Sutter
  - Re: [nft PATCH 2/4] netlink_delinearize: Avoid potential null pointer deref, Pablo Neira Ayuso
- [nft PATCH 1/4] evaluate: Fix datalen checks in expr_evaluate_string(), Phil Sutter
  - Re: [nft PATCH 1/4] evaluate: Fix datalen checks in expr_evaluate_string(), Pablo Neira Ayuso
- [nft PATCH 4/4] evaluate: Avoid undefined behaviour in concat_subtype_id(), Phil Sutter
  - Re: [nft PATCH 4/4] evaluate: Avoid undefined behaviour in concat_subtype_id(), Pablo Neira Ayuso
[libnftnl PATCH] utils: Don't return directly from SNPRINTF_BUFFER_SIZE, Phil Sutter
- Re: [libnftnl PATCH] utils: Don't return directly from SNPRINTF_BUFFER_SIZE, Pablo Neira Ayuso
[PATCH] netfilter: remove ip_conntrack* sysctl compat code, Pablo Neira Ayuso
- Re: [PATCH] netfilter: remove ip_conntrack* sysctl compat code, Liping Zhang
  - Re: [PATCH] netfilter: remove ip_conntrack* sysctl compat code, Pablo Neira Ayuso
[libnftnl PATCH 0/7] A bunch of covscan detected fixes, Phil Sutter
- [libnftnl PATCH 2/7] ruleset: Prevent memleak in nftnl_ruleset_snprintf_*() functions, Phil Sutter
  - Re: [libnftnl PATCH 2/7] ruleset: Prevent memleak in nftnl_ruleset_snprintf_*() functions, Pablo Neira Ayuso
    - Re: [libnftnl PATCH 2/7] ruleset: Prevent memleak in nftnl_ruleset_snprintf_*() functions, Phil Sutter
      - Re: [libnftnl PATCH 2/7] ruleset: Prevent memleak in nftnl_ruleset_snprintf_*() functions, Pablo Neira Ayuso
- [libnftnl PATCH 4/7] expr/limit: Drop unreachable code in limit_to_type(), Phil Sutter
- [libnftnl PATCH 1/7] set: prevent memleak in nftnl_jansson_parse_set_info(), Phil Sutter
- [libnftnl PATCH 6/7] Avoid returning uninitialized data, Phil Sutter
- [libnftnl PATCH 5/7] common: Avoid integer overflow in nftnl_batch_is_supported(), Phil Sutter
  - Re: [libnftnl PATCH 5/7] common: Avoid integer overflow in nftnl_batch_is_supported(), Pablo Neira Ayuso
- [libnftnl PATCH 7/7] ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set(), Phil Sutter
- [libnftnl PATCH 3/7] expr/ct: prevent array index overrun in ctkey2str(), Phil Sutter
- Re: [libnftnl PATCH 0/7] A bunch of covscan detected fixes, Pablo Neira Ayuso
  - Re: [libnftnl PATCH 0/7] A bunch of covscan detected fixes, Pablo Neira Ayuso
    - Re: [libnftnl PATCH 0/7] A bunch of covscan detected fixes, Phil Sutter
      - Re: [libnftnl PATCH 0/7] A bunch of covscan detected fixes, Pablo Neira Ayuso
[PATCH v5] netfilter: nf_tables: add hash expression, Laura Garcia Liebana
- Re: [PATCH v5] netfilter: nf_tables: add hash expression, Pablo Neira Ayuso
nfacct: setting quotas does not seem to work., Josue Alvarez
- Re: nfacct: setting quotas does not seem to work., Pablo Neira Ayuso
  - Re: nfacct: setting quotas does not seem to work., Josue Alvarez
    - Re: nfacct: setting quotas does not seem to work., Pablo Neira Ayuso
[PATCH 1/2, libnftnl] tests: Consolidate printing error utilities, Carlos Falgueras García
- [PATCH 2/2, libnftnl] Use libnftnl comparators in all tests, Carlos Falgueras García
  - Re: [PATCH 2/2, libnftnl] Use libnftnl comparators in all tests, Pablo Neira Ayuso
    - Re: [PATCH 2/2, libnftnl] Use libnftnl comparators in all tests, Carlos Falgueras García
      - [PATCH 1/2 v2 libnftnl] tests: Consolidate printing error utilities, Carlos Falgueras García
        
        [PATCH 2/2 v2 libnftnl] test: Use libnftnl comparators in all tests, Carlos Falgueras García
        
        Re: [PATCH 2/2 v2 libnftnl] test: Use libnftnl comparators in all tests, Pablo Neira Ayuso
        
        [PATCH 1/3 v3 nft] tests: Consolidate printing error utilities, Carlos Falgueras García
        
        [PATCH 2/3 v3 nft] tests: Use libnftnl comparators in all tests, Carlos Falgueras García
        
        Re: [PATCH 2/3 v3 nft] tests: Use libnftnl comparators in all tests, Pablo Neira Ayuso
        
        [PATCH 3/3 v3 nft] tests: Elimine static variable 'test_ok', Carlos Falgueras García
    - [PATCH 1/4, V2, libnftnl] tests: Fix segfaults due outbound access, Carlos Falgueras García
      - [PATCH 2/4, V2, libnftnl] tests: Fix wrong expression creation, Carlos Falgueras García
        
        Re: [PATCH 2/4, V2, libnftnl] tests: Fix wrong expression creation, Pablo Neira Ayuso
      - [PATCH 3/4, V2, libnftnl] tests: Consolidate printing error utilities, Carlos Falgueras García
      - [PATCH 4/4, V2, libnftnl] tests: Use libnftnl comparators in all tests, Carlos Falgueras García
      - Re: [PATCH 1/4, V2, libnftnl] tests: Fix segfaults due outbound access, Pablo Neira Ayuso
        
        Re: [PATCH 1/4, V2, libnftnl] tests: Fix segfaults due outbound access, Carlos Falgueras García
        
        Re: [PATCH 1/4, V2, libnftnl] tests: Fix segfaults due outbound access, Pablo Neira Ayuso
        
        [PATCH 1/2 libnftnl] expr: Improve bound checking in stringification functions, Carlos Falgueras García
        
        [PATCH 2/2 libnftnl] expr: cmp: Use cmp2str() instead of directly access to array, Carlos Falgueras García
        
        Re: [PATCH 2/2 libnftnl] expr: cmp: Use cmp2str() instead of directly access to array, Pablo Neira Ayuso
        
        [PATCH 1/2 libnftnl] utils: Fix out of bound access in nftnl_family2str, Carlos Falgueras García
        
        [PATCH 2/2 libnfntl] expr: cmp: Use cmp2str() instead of directly access to array, Carlos Falgueras García
        
        Re: [PATCH 2/2 libnfntl] expr: cmp: Use cmp2str() instead of directly access to array, Pablo Neira Ayuso
        
        Re: [PATCH 1/2 libnftnl] utils: Fix out of bound access in nftnl_family2str, Pablo Neira Ayuso
        
        Re: [PATCH 1/2 libnftnl] utils: Fix out of bound access in nftnl_family2str, Carlos Falgueras García
        
        Re: [PATCH 1/2 libnftnl] utils: Fix out of bound access in nftnl_family2str, Pablo Neira Ayuso
        
        Re: [PATCH 1/2 libnftnl] expr: Improve bound checking in stringification functions, Pablo Neira Ayuso
- Re: [PATCH 1/2, libnftnl] tests: Consolidate printing error utilities, Pablo Neira Ayuso
  - Re: [PATCH 1/2, libnftnl] tests: Consolidate printing error utilities, Carlos Falgueras García
[PATCH v4] netfilter: nf_tables: add hash expression, Laura Garcia Liebana
- Re: [PATCH v4] netfilter: nf_tables: add hash expression, Pablo Neira Ayuso
[PATCH 1/3, libnftnl] tests: Add missing tests to test-script.sh, Carlos Falgueras García
- [PATCH 3/3, libnftnl] tests: Fix tests for immediate and lookup expressions, Carlos Falgueras García
  - Re: [PATCH 3/3, libnftnl] tests: Fix tests for immediate and lookup expressions, Pablo Neira Ayuso
- [PATCH 2/3, libnftnl] expr: Fix lookup builder, Carlos Falgueras García
  - Re: [PATCH 2/3, libnftnl] expr: Fix lookup builder, Pablo Neira Ayuso
  - Re: [PATCH 2/3, libnftnl] expr: Fix lookup builder, Pablo Neira Ayuso
- Re: [PATCH 1/3, libnftnl] tests: Add missing tests to test-script.sh, Pablo Neira Ayuso
- Re: [PATCH 1/3, libnftnl] tests: Add missing tests to test-script.sh, Pablo Neira Ayuso
[PATCH] nf-next: x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Loganaden Velvindron
- Re: [PATCH] nf-next: x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Pablo Neira Ayuso
  - Re: [PATCH] nf-next: x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Loganaden Velvindron
  - Re: [PATCH] nf-next: x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Loganaden Velvindron
[PATCH] x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Loganaden Velvindron
[PATCH netfilter] extensions/libxt_bpf.man: clarify BPF code generation with tcpdump, Willem de Bruijn
- Re: [PATCH netfilter] extensions/libxt_bpf.man: clarify BPF code generation with tcpdump, Pablo Neira Ayuso
[ANNOUNCE] Netdev 1.2 updates, Hajime Tazaki
[PATCH 0/5] Check u32 load in u8 attributes, Laura Garcia Liebana
- [PATCH 5/5] netfilter: nf_tables: Check u32 load in u8 nft_nat attribute, Laura Garcia Liebana
- [PATCH 1/5] netfilter: nf_tables: Check u32 load in u8 nft_bitwise attribute, Laura Garcia Liebana
- [PATCH 4/5] netfilter: nf_tables: Check u32 load in u8 nft_immediate attribute, Laura Garcia Liebana
- [PATCH 2/5] netfilter: nf_tables: Check u32 load in u8 nft_byteorder attribute, Laura Garcia Liebana
- [PATCH 3/5] netfilter: nf_tables: Check u32 load in u8 nft_cmp attribute, Laura Garcia Liebana
- Re: [PATCH 0/5] Check u32 load in u8 attributes, Pablo Neira Ayuso
[PATCH v3] netfilter: nf_tables: add hash expression, Laura Garcia Liebana
- Re: [PATCH v3] netfilter: nf_tables: add hash expression, Pablo Neira Ayuso
[PATCH nft] tests: tests to include files, Pablo Neira Ayuso
[PATCH] netfilter: nf_tables: Add size check on u8 nft_exthdr attributes, Laura Garcia Liebana
- Re: [PATCH] netfilter: nf_tables: Add size check on u8 nft_exthdr attributes, Pablo Neira Ayuso
  - Re: [PATCH] netfilter: nf_tables: Add size check on u8 nft_exthdr attributes, Pablo Neira Ayuso
    - Re: [PATCH] netfilter: nf_tables: Add size check on u8 nft_exthdr attributes, Laura Garcia
[PATCH v2] netfilter: nf_tables: add hash expression, Laura Garcia Liebana
- Re: [PATCH v2] netfilter: nf_tables: add hash expression, Liping Zhang
  - Re: [PATCH v2] netfilter: nf_tables: add hash expression, Laura Garcia
4.7.0: RCU stall in nf_conntrack, Johannes Stezenbach
Drop pings to other VLAN interfaces, vDev
[PATCH] netfilter: nf_tables: rename set implementations, Pablo Neira Ayuso
[PATCH libnftnl] expr: hash: Jenkins hash expression support, Laura Garcia Liebana
- Re: [PATCH libnftnl] expr: hash: Jenkins hash expression support, Pablo Neira Ayuso
[PATCH] netfilter: nft_hash: generate Jenkins Hash per source register, Laura Garcia Liebana
- Re: [PATCH] netfilter: nft_hash: generate Jenkins Hash per source register, Pablo Neira Ayuso
[PATCH nft 1/3] scanner: honor absolute and relative paths via include file, Pablo Neira Ayuso
- [PATCH nft 3/3] scanner: don't break line on include error message, Pablo Neira Ayuso
- [PATCH nft 2/3] scanner: don't fall back on current directory if include is not found, Pablo Neira Ayuso
[PATCH nf] netfilter: ctnetlink: reject new conntrack request with different l4proto, Liping Zhang
- Re: [PATCH nf] netfilter: ctnetlink: reject new conntrack request with different l4proto, Pablo Neira Ayuso
[PATCH nf] netfilter: nfnetlink_queue: reject verdict request from different portid, Liping Zhang
- Re: [PATCH nf] netfilter: nfnetlink_queue: reject verdict request from different portid, Florian Westphal
- Re: [PATCH nf] netfilter: nfnetlink_queue: reject verdict request from different portid, Pablo Neira Ayuso
[PATCH nf] netfilter: nfnetlink_queue: fix memory leak when attach expectation successfully, Liping Zhang
- Re: [PATCH nf] netfilter: nfnetlink_queue: fix memory leak when attach expectation successfully, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_expect_proc: remove the redundant slash when policy name is empty, Liping Zhang
- Re: [PATCH nf] netfilter: nf_expect_proc: remove the redundant slash when policy name is empty, Pablo Neira Ayuso
[PATCH 1/4, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
- [PATCH 2/4, libnfntl] Implement rule comparison, Carlos Falgueras García
  - Re: [PATCH 2/4, libnfntl] Implement rule comparison, Pablo Neira Ayuso
    - Re: [PATCH 2/4, libnfntl] Implement rule comparison, Carlos Falgueras García
  - Re: [PATCH 2/4, libnfntl] Implement rule comparison, Pablo Neira Ayuso
- [PATCH 3/4, nft] Simplify parser rule_spec tree, Carlos Falgueras García
- [PATCH 4/4, nft] Implement deleting rule by description, Carlos Falgueras García
- Re: [PATCH 1/4, libnftnl] rule: Implement internal expression iterator, Pablo Neira Ayuso
  - Re: [PATCH 1/4, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
- [PATCH 1/5, V2, libnftnl] rule: Add const modifier to rule field of expression iterator, Carlos Falgueras García
  - [PATCH 3/5, V2, libnftnl] Implement rule comparison, Carlos Falgueras García
    - Re: [PATCH 3/5, V2, libnftnl] Implement rule comparison, Pablo Neira Ayuso
  - [PATCH 2/5, V2, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
  - [PATCH 4/5, V2, nft] Simplify parser rule_spec tree, Carlos Falgueras García
    - Re: [PATCH 4/5, V2, nft] Simplify parser rule_spec tree, Pablo Neira Ayuso
      - Re: [PATCH 4/5, V2, nft] Simplify parser rule_spec tree, Carlos Falgueras García
  - [PATCH 5/5, V2, nft] Implement deleting rule by description, Carlos Falgueras García
    - Re: [PATCH 5/5, V2, nft] Implement deleting rule by description, Pablo Neira Ayuso
  - Re: [PATCH 1/5, V2, libnftnl] rule: Add const modifier to rule field of expression iterator, Pablo Neira Ayuso
    - [PATCH] rule: Constify rule iterators, Carlos Falgueras García
      - Re: [PATCH] rule: Constify rule iterators, Pablo Neira Ayuso
        
        [PATCH, v2] Constify iterators, Carlos Falgueras García
        
        Re: [PATCH, v2] Constify iterators, Pablo Neira Ayuso
    - [PATCH 1/4, V3, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
      - [PATCH 3/4, V3, nft] Simplify parser rule_spec tree, Carlos Falgueras García
        
        Re: [PATCH 3/4, V3, nft] Simplify parser rule_spec tree, Pablo Neira Ayuso
      - [PATCH 2/4, V3, libnftnl] Implement rule comparison, Carlos Falgueras García
        
        Re: [PATCH 2/4, V3, libnftnl] Implement rule comparison, Pablo Neira Ayuso
      - [PATCH 4/4, V3, nft] Implement deleting rule by description, Carlos Falgueras García
      - Re: [PATCH 1/4, V3, libnftnl] rule: Implement internal expression iterator, Pablo Neira Ayuso
        
        Re: [PATCH 1/4, V3, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
        
        Re: [PATCH 1/4, V3, libnftnl] rule: Implement internal expression iterator, Pablo Neira Ayuso
[PATCH nf-next v2] ipvs: use nf_ct_kill helper, Florian Westphal
- Re: [PATCH nf-next v2] ipvs: use nf_ct_kill helper, Julian Anastasov
- Re: [PATCH nf-next v2] ipvs: use nf_ct_kill helper, Pablo Neira Ayuso
  - Re: [PATCH nf-next v2] ipvs: use nf_ct_kill helper, Simon Horman
[PATCH libmnl] callback: mark cb_ctl_array 'const' in mnl_cb_run2(), Guillaume Nault
- Re: [PATCH libmnl] callback: mark cb_ctl_array 'const' in mnl_cb_run2(), Pablo Neira Ayuso
[PATCH v2] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Christophe Leroy
- Re: [PATCH v2] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Pablo Neira Ayuso
[PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, Florian Westphal
- Re: [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, kbuild test robot
- Re: [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, kbuild test robot
  - Re: [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, Florian Westphal
    - Re: [kbuild-all] [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, Fengguang Wu
- Re: [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, Pablo Neira Ayuso
[PATCH nf-next] ipvs: use nf_ct_kill helper, Florian Westphal
- Re: [PATCH nf-next] ipvs: use nf_ct_kill helper, Julian Anastasov
[PATCH iptables] xtables-compat: fix comments listing, Pablo M. Bermudo Garay
- Re: [PATCH iptables] xtables-compat: fix comments listing, Pablo Neira Ayuso
[PATCH 1100/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1120/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1129/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1118/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1123/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1119/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1121/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1128/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1122/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1125/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1117/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1116/1285] Replace numeric parameter like 0444 with macro, Baole Ni
- Re: [PATCH 1116/1285] Replace numeric parameter like 0444 with macro, Jan Engelhardt
  - Re: [PATCH 1116/1285] Replace numeric parameter like 0444 with macro, Jarod Wilson
[PATCH 1127/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1124/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1130/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1126/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[PATCH 1115/1285] Replace numeric parameter like 0444 with macro, Baole Ni
- Re: [PATCH 1115/1285] Replace numeric parameter like 0444 with macro, Eric W. Biederman
  - Re: [PATCH 1115/1285] Replace numeric parameter like 0444 with macro, Pavel Machek
    - Re: [PATCH 1115/1285] Replace numeric parameter like 0444 with macro, David Miller
[PATCH 1099/1285] Replace numeric parameter like 0444 with macro, Baole Ni
[stable, xtables] fix validation of jumps, Florian Westphal
- [PATCH -stable 4.1.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
  - Re: [PATCH -stable 4.1.y] netfilter: x_tables: speed up jump target validation, Levin, Alexander
    - Re: [PATCH -stable 4.1.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
      - Re: [PATCH -stable 4.1.y] netfilter: x_tables: speed up jump target validation, Levin, Alexander
- [PATCH -stable 3.18.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
- [PATCH -stable 3.14.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
- [PATCH -stable 4.4.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
- [PATCH -stable 3.12.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
[PATCH libnftnl] src: don't set data_len to zero when returning pointers, Pablo Neira Ayuso
[PATCH nf] netfilter: nft_rbtree: ignore inactive matching element with no descendants, Pablo Neira Ayuso
- Re: [PATCH nf] netfilter: nft_rbtree: ignore inactive matching element with no descendants, Anders K. Pedersen
[PATCH 3/3] netfilter: nat: don't assign a null snat rule to bridged traffic if no matching, fxp2001640163
- Re: [PATCH 3/3] netfilter: nat: don't assign a null snat rule to bridged traffic if no matching, Florian Westphal
[PATCH 2/3] netfilter: nat: snat created in route process just apply to routed traffic, fxp2001640163
- Re: [PATCH 2/3] netfilter: nat: snat created in route process just apply to routed traffic, Florian Westphal
[PATCH 1/3] netfilter: nat: update hash bucket if nat changed after ct confirmed, fxp2001640163
- Re: [PATCH 1/3] netfilter: nat: update hash bucket if nat changed after ct confirmed, Florian Westphal
[PATCH nf-next] netfilter: nf_dup4: remove redundant checksum recalculation, Liping Zhang
- Re: [PATCH nf-next] netfilter: nf_dup4: remove redundant checksum recalculation, Florian Westphal
  - Re: [PATCH nf-next] netfilter: nf_dup4: remove redundant checksum recalculation, Florian Westphal
- Re: [PATCH nf-next] netfilter: nf_dup4: remove redundant checksum recalculation, Pablo Neira Ayuso
[PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
- Re: [PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Pablo Neira Ayuso
  - Re: [PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
    - Re: [PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Pablo Neira Ayuso
      - Re: [PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
[PATCH iptables] iptables-translate: add in/out ifname wildcard match translation to nft, Liping Zhang
- Re: [PATCH iptables] iptables-translate: add in/out ifname wildcard match translation to nft, Pablo Neira Ayuso
[PATCH RESEND nf] netfilter: avoid a race between nf_register_hook() and cleanup_net(), Michal Kubecek
- Re: [PATCH RESEND nf] netfilter: avoid a race between nf_register_hook() and cleanup_net(), Eric W. Biederman
  - Re: [PATCH RESEND nf] netfilter: avoid a race between nf_register_hook() and cleanup_net(), Pablo Neira Ayuso
  - Re: [PATCH RESEND nf] netfilter: avoid a race between nf_register_hook() and cleanup_net(), Pablo Neira Ayuso
NFQUEUE panic bug, Daniel Collins
- Re: NFQUEUE panic bug, Florian Westphal
[PATCH v4] doc: Complete documentation of statements, Shivani Bhardwaj
[PATCH libnftnl v2] expr: nth: match every n packets, Laura Garcia Liebana
[PATCH v2] netfilter: nft_nth: match every n packets, Laura Garcia Liebana
- Re: [PATCH v2] netfilter: nft_nth: match every n packets, Florian Westphal
  - Re: [PATCH v2] netfilter: nft_nth: match every n packets, Laura Garcia
    - Re: [PATCH v2] netfilter: nft_nth: match every n packets, Florian Westphal
      - Re: [PATCH v2] netfilter: nft_nth: match every n packets, Pablo Neira Ayuso
        
        Re: [PATCH v2] netfilter: nft_nth: match every n packets, Laura Garcia
        
        Re: [PATCH v2] netfilter: nft_nth: match every n packets, Pablo Neira Ayuso
Re: PROBLEM: TPROXY and DNAT broken (bisected to 079096f103fa), Eric Dumazet
- <Possible follow-ups>
- Re: PROBLEM: TPROXY and DNAT broken (bisected to 079096f103fa), Florian Westphal
[PATCH nft] parser: compact list of rhs keyword expressions, Florian Westphal
- Re: [PATCH nft] parser: compact list of rhs keyword expressions, Pablo Neira Ayuso
[PATCH nft] parser_bison: keep map flag around when flags are specified, Pablo Neira Ayuso
[RFC nft] meta: deprecate unqualified meta statements, Florian Westphal
- Re: [RFC nft] meta: deprecate unqualified meta statements, Arturo Borrero Gonzalez
- Re: [RFC nft] meta: deprecate unqualified meta statements, Pablo Neira Ayuso
[nft PATCH 0/7] add payload set support for sub-byte sizes, Florian Westphal
- [nft PATCH 3/7] evaluate: add support to set IPv6 non-byte header fields, Florian Westphal
  - Re: [nft PATCH 3/7] evaluate: add support to set IPv6 non-byte header fields, Pablo Neira Ayuso
    - Re: [nft PATCH 3/7] evaluate: add support to set IPv6 non-byte header fields, Florian Westphal
- [nft PATCH 5/7] tests: ip6 dscp, flowlabel and ecn test cases, Florian Westphal
- [nft PATCH 1/7] netlink: add __binop_adjust helper, Florian Westphal
- [nft PATCH 4/7] netlink: decode payload statment, Florian Westphal
  - Re: [nft PATCH 4/7] netlink: decode payload statment, Pablo Neira Ayuso
- [nft PATCH 6/7] netlink: make checksum fixup work with odd-sized header fields, Florian Westphal
- [nft PATCH 7/7] tests: ip payload set support for ecn and dscp, Florian Westphal
- [nft PATCH 2/7] payload: print base and raw values for unknown payloads, Florian Westphal
- Re: [nft PATCH 0/7] add payload set support for sub-byte sizes, Pablo Neira Ayuso
  - Re: [nft PATCH 0/7] add payload set support for sub-byte sizes, Florian Westphal
[PATCH iptables 1/2] include: xtables: fix struct definitions grepability, Pablo M. Bermudo Garay
- [PATCH iptables v2 2/2] xtables-translate: fix issue with quotes, Pablo M. Bermudo Garay
  - Re: [PATCH iptables v2 2/2] xtables-translate: fix issue with quotes, Pablo Neira Ayuso
- Re: [PATCH iptables 1/2] include: xtables: fix struct definitions grepability, Pablo Neira Ayuso
[PATCH libnftnl] expr: nth: match every n packets, Laura Garcia Liebana
[PATCH] netfilter: nft_nth: match every n packets, Laura Garcia Liebana
- Re: [PATCH] netfilter: nft_nth: match every n packets, Pablo Neira Ayuso
[PATCH] manpages: do not adjust reject-with type footnote indentation, Sami Kerola
- Re: [PATCH] manpages: do not adjust reject-with type footnote indentation, Sami Kerola
  - Re: [PATCH] manpages: do not adjust reject-with type footnote indentation, Pablo Neira Ayuso
nft_rbtree_lookup: BUG: unable to handle kernel NULL pointer dereference, Anders K. Pedersen
- Re: nft_rbtree_lookup: BUG: unable to handle kernel NULL pointer dereference, Florian Westphal
  - Re: nft_rbtree_lookup: BUG: unable to handle kernel NULL pointer dereference, Anders K. Pedersen
[NetDev] [ANNOUNCE] Netdev 1.2 updates (Tokyo, Japan, October 5-7), Hajime Tazaki
[PATCH nf-next] netfilter: physdev: add missed blank, Hangbin Liu
- Re: [PATCH nf-next] netfilter: physdev: add missed blank, Pablo Neira Ayuso
[PATCH] netfilter: nf_tables: s/MFT_REG32_01/NFT_REG32_01, Pablo Neira Ayuso
[RFC] l2tp for nftables, Pablo Neira Ayuso
- Re: [RFC] l2tp for nftables, Pablo Neira Ayuso
[PATCH nft] xt: use struct xt_xlate_{mt,tg}_params, Pablo Neira Ayuso
[PATCH iptables] src: introduce struct xt_xlate_{mt,tg}_params, Pablo Neira Ayuso
[ISSUE] nftables: !=range doesn't really work, Xin Long
- Re: [ISSUE] nftables: !=range doesn't really work, Pablo Neira Ayuso
[PATCH nf-next] netfilter: nf_ct_h323: do not re-activate already expired timer, Liping Zhang
- Re: [PATCH nf-next] netfilter: nf_ct_h323: do not re-activate already expired timer, Pablo Neira Ayuso
[PATCH 1/1] netfilter: Only need first 4 bytes to get l4proto ports, fgao
- Re: [PATCH 1/1] netfilter: Only need first 4 bytes to get l4proto ports, Pablo Neira Ayuso
[PATCH 00/25] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
- [PATCH 01/25] ipvs: count pre-established TCP states as active, Pablo Neira Ayuso
- [PATCH 02/25] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Pablo Neira Ayuso
- [PATCH 03/25] netfilter: cttimeout: unlink timeout obj again when hash resize happen, Pablo Neira Ayuso
- [PATCH 04/25] netfilter: nf_ct_helper: unlink helper again when hash resize happen, Pablo Neira Ayuso
- [PATCH 05/25] netfilter: conntrack: simplify early_drop, Pablo Neira Ayuso
- [PATCH 06/25] netfilter: move nat hlist_head to nf_conn, Pablo Neira Ayuso
- [PATCH 07/25] netfilter: nat: convert nat bysrc hash to rhashtable, Pablo Neira Ayuso
- [PATCH 08/25] netfilter: physdev: physdev-is-out should not work with OUTPUT chain, Pablo Neira Ayuso
- [PATCH 09/25] netfilter: nft_ct: make byte/packet expr more friendly, Pablo Neira Ayuso
- [PATCH 10/25] netfilter: constify arg to is_dying/confirmed, Pablo Neira Ayuso
- [PATCH 11/25] netfilter: nf_tables: get rid of possible_net_t from set and basechain, Pablo Neira Ayuso
- [PATCH 13/25] netfilter: conntrack: protect early_drop by rcu read lock, Pablo Neira Ayuso
- [PATCH 12/25] netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931, Pablo Neira Ayuso
- [PATCH 14/25] netfilter: x_tables: speed up jump target validation, Pablo Neira Ayuso
- [PATCH 15/25] netfilter: nft_ct: fix unpaired nf_connlabels_get/put call, Pablo Neira Ayuso
- [PATCH 17/25] netfilter: nft_log: fix possible memory leak if log expr init fail, Pablo Neira Ayuso
- [PATCH 16/25] netfilter: Add helper array register/unregister functions, Pablo Neira Ayuso
- [PATCH 19/25] netfilter: nft_log: fix snaplen does not truncate packets, Pablo Neira Ayuso
- [PATCH 18/25] netfilter: nft_log: check the validity of log level, Pablo Neira Ayuso
- [PATCH 21/25] netfilter: conntrack: support a fixed size of 128 distinct labels, Pablo Neira Ayuso
- [PATCH 20/25] netfilter: nf_tables: allow to filter out rules by table and chain, Pablo Neira Ayuso
- [PATCH 23/25] netfilter: h323: Use mod_timer instead of set_expect_timeout, Pablo Neira Ayuso
- [PATCH 22/25] netfilter: connlabels: move set helper to xt_connlabel, Pablo Neira Ayuso
- [PATCH 24/25] netfilter: nft_compat: put back match/target module if init fail, Pablo Neira Ayuso
- [PATCH 25/25] netfilter: nft_compat: fix crash when related match/target module is removed, Pablo Neira Ayuso
- Re: [PATCH 00/25] Netfilter/IPVS updates for net-next, David Miller
- <Possible follow-ups>
- [PATCH 00/25] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  - [PATCH 02/25] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Pablo Neira Ayuso
  - [PATCH 01/25] ipvs: count pre-established TCP states as active, Pablo Neira Ayuso
  - [PATCH 03/25] netfilter: cttimeout: unlink timeout obj again when hash resize happen, Pablo Neira Ayuso
  - [PATCH 04/25] netfilter: nf_ct_helper: unlink helper again when hash resize happen, Pablo Neira Ayuso
  - [PATCH 07/25] netfilter: nat: convert nat bysrc hash to rhashtable, Pablo Neira Ayuso
  - [PATCH 08/25] netfilter: physdev: physdev-is-out should not work with OUTPUT chain, Pablo Neira Ayuso
  - [PATCH 11/25] netfilter: nf_tables: get rid of possible_net_t from set and basechain, Pablo Neira Ayuso
  - [PATCH 16/25] netfilter: Add helper array register/unregister functions, Pablo Neira Ayuso
  - [PATCH 18/25] netfilter: nft_log: check the validity of log level, Pablo Neira Ayuso
  - [PATCH 24/25] netfilter: nft_compat: put back match/target module if init fail, Pablo Neira Ayuso
  - [PATCH 25/25] netfilter: nft_compat: fix crash when related match/target module is removed, Pablo Neira Ayuso
  - [PATCH 17/25] netfilter: nft_log: fix possible memory leak if log expr init fail, Pablo Neira Ayuso
  - [PATCH 23/25] netfilter: h323: Use mod_timer instead of set_expect_timeout, Pablo Neira Ayuso
  - [PATCH 22/25] netfilter: connlabels: move set helper to xt_connlabel, Pablo Neira Ayuso
  - [PATCH 10/25] netfilter: constify arg to is_dying/confirmed, Pablo Neira Ayuso
  - [PATCH 21/25] netfilter: conntrack: support a fixed size of 128 distinct labels, Pablo Neira Ayuso
  - [PATCH 09/25] netfilter: nft_ct: make byte/packet expr more friendly, Pablo Neira Ayuso
  - [PATCH 20/25] netfilter: nf_tables: allow to filter out rules by table and chain, Pablo Neira Ayuso
  - [PATCH 19/25] netfilter: nft_log: fix snaplen does not truncate packets, Pablo Neira Ayuso
  - [PATCH 06/25] netfilter: move nat hlist_head to nf_conn, Pablo Neira Ayuso
  - [PATCH 15/25] netfilter: nft_ct: fix unpaired nf_connlabels_get/put call, Pablo Neira Ayuso
  - [PATCH 05/25] netfilter: conntrack: simplify early_drop, Pablo Neira Ayuso
  - [PATCH 14/25] netfilter: x_tables: speed up jump target validation, Pablo Neira Ayuso
  - [PATCH 12/25] netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931, Pablo Neira Ayuso
  - [PATCH 13/25] netfilter: conntrack: protect early_drop by rcu read lock, Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: nft_compat: put back match/target module if init fail, Liping Zhang
- [PATCH nf-next 2/2] netfilter: nft_compat: fix crash when related match/target module is removed, Liping Zhang
  - Re: [PATCH nf-next 2/2] netfilter: nft_compat: fix crash when related match/target module is removed, Pablo Neira Ayuso
- Re: [PATCH nf-next 1/2] netfilter: nft_compat: put back match/target module if init fail, Pablo Neira Ayuso
[PATCH iptables] extensions: libxt_connlabel: add unit test, Liping Zhang
- Re: [PATCH iptables] extensions: libxt_connlabel: add unit test, Pablo Neira Ayuso
[PATCH 1/1] netfilter: tcp/udp: Only get 4 bytes to get tcp/udp ports, fgao
- Re: [PATCH 1/1] netfilter: tcp/udp: Only get 4 bytes to get tcp/udp ports, Pablo Neira Ayuso
[PATCH iptables 1/2] xtables-translate: add new field to identify the caller, Pablo M. Bermudo Garay
- [PATCH iptables 2/2] xtables-translate: fix issue with quotes, Pablo M. Bermudo Garay
  - Re: [PATCH iptables 2/2] xtables-translate: fix issue with quotes, Pablo Neira Ayuso
  - Re: [PATCH iptables 2/2] xtables-translate: fix issue with quotes, Pablo Neira Ayuso
    - Re: [PATCH iptables 2/2] xtables-translate: fix issue with quotes, Pablo M. Bermudo Garay
      - Re: [PATCH iptables 2/2] xtables-translate: fix issue with quotes, Pablo Neira Ayuso
- Re: [PATCH iptables 1/2] xtables-translate: add new field to identify the caller, Pablo Neira Ayuso
[PATCH 1/1] netfilter: h323: Use mod_timer instead of set_expect_timeout, fgao
- Re: [PATCH 1/1] netfilter: h323: Use mod_timer instead of set_expect_timeout, Pablo Neira Ayuso
[PATCH libnftnl] expr: lookup: print flags only if they are available, Pablo Neira Ayuso
[PATCH 1/1] netfilter: Use IS_ERR_OR_NULL instead of IS_ERR and NULl check to simplify the codes in ip_vs_genl_dump_dests and resolve_normal_ct, fgao
- Re: [PATCH 1/1] netfilter: Use IS_ERR_OR_NULL instead of IS_ERR and NULl check to simplify the codes in ip_vs_genl_dump_dests and resolve_normal_ct, Pablo Neira Ayuso
  - Re: [PATCH 1/1] netfilter: Use IS_ERR_OR_NULL instead of IS_ERR and NULl check to simplify the codes in ip_vs_genl_dump_dests and resolve_normal_ct, Pablo Neira Ayuso
- Re: [PATCH 1/1] netfilter: Use IS_ERR_OR_NULL instead of IS_ERR and NULl check to simplify the codes in ip_vs_genl_dump_dests and resolve_normal_ct, Pablo Neira Ayuso
netfilter: connlabels: get rid of variable-size support, Florian Westphal
- [PATCH 1/2] netfilter: conntrack: support a fixed size of 128 distinct labels, Florian Westphal
  - Re: [PATCH 1/2] netfilter: conntrack: support a fixed size of 128 distinct labels, Pablo Neira Ayuso
- [PATCH 2/2] netfilter: connlabels: move set helper to xt_connlabel, Florian Westphal
  - Re: [PATCH 2/2] netfilter: connlabels: move set helper to xt_connlabel, Pablo Neira Ayuso
    - Re: [PATCH 2/2] netfilter: connlabels: move set helper to xt_connlabel, Florian Westphal
  - Re: [PATCH 2/2] netfilter: connlabels: move set helper to xt_connlabel, Pablo Neira Ayuso
[PATCH 1/1] netfilter: udp: Remove a bit misleading comment in udp_pkt_to_tuple, fgao
- Re: [PATCH 1/1] netfilter: udp: Remove a bit misleading comment in udp_pkt_to_tuple, Pablo Neira Ayuso
[PATCH 1/1] netfilter: udp: Only get 8 bytes header in udp_pkt_to_tuple to keep consistent with tcp_pkt_to_tuple and comments, fgao
- Re: [PATCH 1/1] netfilter: udp: Only get 8 bytes header in udp_pkt_to_tuple to keep consistent with tcp_pkt_to_tuple and comments, Florian Westphal
[PATCH limnl] Fix test building on musl libc, Kylie McClain
[PATCH] Fix test building on musl libc, Kylie McClain
- <Possible follow-ups>
- [PATCH] Fix test building on musl libc, Kylie McClain
  - Re: [PATCH] Fix test building on musl libc, Pablo Neira Ayuso
[PATCH v2 iptables] connlabel: clarify default config path, Florian Westphal
- Re: [PATCH v2 iptables] connlabel: clarify default config path, Pablo Neira Ayuso
[PATCH lnf_conntrack] conntrack: labels: add function to fetch default config file location, Florian Westphal
- Re: [PATCH lnf_conntrack] conntrack: labels: add function to fetch default config file location, Pablo Neira Ayuso
[PATCH nf-next,v2] netfilter: nf_tables: allow to filter out rules by table and chain, Pablo Neira Ayuso
[PATCH libnftnl] examples: selective rule dumping, jalvarez
- Re: [PATCH libnftnl] examples: selective rule dumping, Pablo Neira Ayuso
  - Re: [PATCH libnftnl] examples: selective rule dumping, jalvarez
    - Re: [PATCH libnftnl] examples: selective rule dumping, Pablo Neira Ayuso
      - Re: [PATCH libnftnl] examples: selective rule dumping, Josue Alvarez
        
        Re: [PATCH libnftnl] examples: selective rule dumping, Pablo Neira Ayuso
        
        Re: [PATCH libnftnl] examples: selective rule dumping, jalvarez
        
        Re: [PATCH libnftnl] examples: selective rule dumping, Pablo Neira Ayuso
[PATCH iptables] extensions: libxt_NFLOG: add unit test to cover nflog-size with zero, Liping Zhang
- Re: [PATCH iptables] extensions: libxt_NFLOG: add unit test to cover nflog-size with zero, Pablo Neira Ayuso
[PATCH nft] ct: use nftables sysconf location for connlabel configuration, Florian Westphal
- Re: [PATCH nft] ct: use nftables sysconf location for connlabel configuration, Pablo Neira Ayuso
  - Re: [PATCH nft] ct: use nftables sysconf location for connlabel configuration, Florian Westphal
[PATCH iptables] connlabel: clarify default config path, Florian Westphal
- Re: [PATCH iptables] connlabel: clarify default config path, Pablo Neira Ayuso
  - Re: [PATCH iptables] connlabel: clarify default config path, Florian Westphal
[PATCH nf-next] netfilter: nf_tables: allow to filter out rules by table and chain, Pablo Neira Ayuso
- Re: [PATCH nf-next] netfilter: nf_tables: allow to filter out rules by table and chain, jalvarez
- Re: [PATCH nf-next] netfilter: nf_tables: allow to filter out rules by table and chain, jalvarez
  - Re: [PATCH nf-next] netfilter: nf_tables: allow to filter out rules by table and chain, Pablo Neira Ayuso
[PATCH stable-4.1] netfilter: x_tables: fix stable backport, Michal Kubecek
- [PATCH stable-4.1 v2] netfilter: x_tables: fix stable backport, Michal Kubecek
[ANNOUNCE] Suspending Patrick McHardy as coreteam member, Pablo Neira Ayuso
[PATCH iptables 1/2] extensions: libxt_NFLOG: display nflog-size even if it is zero, Liping Zhang
- [PATCH iptables 2/2] extensions: libxt_NFLOG: translate to nft log snaplen if nflog-size is specified, Liping Zhang
  - Re: [PATCH iptables 2/2] extensions: libxt_NFLOG: translate to nft log snaplen if nflog-size is specified, Pablo Neira Ayuso
- Re: [PATCH iptables 1/2] extensions: libxt_NFLOG: display nflog-size even if it is zero, Pablo Neira Ayuso
  - Re: [PATCH iptables 1/2] extensions: libxt_NFLOG: display nflog-size even if it is zero, Liping Zhang
[PATCH nf-next 0/3] netfilter: fix some small bugs related to nft_log, Liping Zhang
- [PATCH nf-next 1/3] netfilter: nft_log: fix possible memory leak if log expr init fail, Liping Zhang
  - Re: [PATCH nf-next 1/3] netfilter: nft_log: fix possible memory leak if log expr init fail, Pablo Neira Ayuso
- [PATCH nf-next 2/3] netfilter: nft_log: check the validity of log level, Liping Zhang
  - Re: [PATCH nf-next 2/3] netfilter: nft_log: check the validity of log level, Pablo Neira Ayuso
- [PATCH nf-next 3/3] netfilter: nft_log: fix snaplen does not truncate packets, Liping Zhang
  - Re: [PATCH nf-next 3/3] netfilter: nft_log: fix snaplen does not truncate packets, Pablo Neira Ayuso
    - Re: [PATCH nf-next 3/3] netfilter: nft_log: fix snaplen does not truncate packets, Liping Zhang
      - Re: [PATCH nf-next 3/3] netfilter: nft_log: fix snaplen does not truncate packets, Pablo Neira Ayuso
        
        Re: [PATCH nf-next 3/3] netfilter: nft_log: fix snaplen does not truncate packets, Liping Zhang
        
        Re: [PATCH nf-next 3/3] netfilter: nft_log: fix snaplen does not truncate packets, Pablo Neira Ayuso
[PATCH 1/1] netfilter: Add helper array register/unregister functions, fgao
- Re: [PATCH 1/1] netfilter: Add helper array register/unregister functions, Pablo Neira Ayuso
  - Message not available
    - Re: 答复: [PATCH 1/1] netfilter: Add helper array register/unregister functions, Pablo Neira Ayuso
      - 答复: 答复: [PATCH 1/1] netfilter: Add helper array register/unregister functions, 高峰
- Re: [PATCH 1/1] netfilter: Add helper array register/unregister functions, Liping Zhang
  - 答复: [PATCH 1/1] netfilter: Add helper array register/unregister functions, 高峰
    - Re: 答复: [PATCH 1/1] netfilter: Add helper array register/unregister functions, Pablo Neira Ayuso
  - Re: [PATCH 1/1] netfilter: Add helper array register/unregister functions, Pablo Neira Ayuso
[PATCH iptables] extensions: libxt_connlabel: fix crash when connlabel.conf is empty, Liping Zhang
- Re: [PATCH iptables] extensions: libxt_connlabel: fix crash when connlabel.conf is empty, Florian Westphal
[PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Liping Zhang
- Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
- Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
- Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
  - Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
    - Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
      - Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
        
        Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
        
        Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
        
        Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
  - Re: [PATCH V2 iptables] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
[PATCH nf] netfilter: nft_ct: fix unpaired nf_connlabels_get/put call, Liping Zhang
- Re: [PATCH nf] netfilter: nft_ct: fix unpaired nf_connlabels_get/put call, Florian Westphal
  - Re: [PATCH nf] netfilter: nft_ct: fix unpaired nf_connlabels_get/put call, Pablo Neira Ayuso
[PATCH iptables] extensions: libxt_connlabel: Add translation to nft, Liping Zhang
- Re: [PATCH iptables] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
  - Re: [PATCH iptables] extensions: libxt_connlabel: Add translation to nft, Liping Zhang
[PATCH v3 nf] netfilter: x_tables: speed up jump target validation, Florian Westphal
- Re: [PATCH v3 nf] netfilter: x_tables: speed up jump target validation, Pablo Neira Ayuso
  - Re: [PATCH v3 nf] netfilter: x_tables: speed up jump target validation, Florian Westphal
- Re: [PATCH v3 nf] netfilter: x_tables: speed up jump target validation, Pablo Neira Ayuso
[PATCH 1/2 nft] parser_bison: fix typo in symbol redefinition error reporting, Pablo Neira Ayuso
- [PATCH 2/2 nft] tests: shell: make sure split table definition works via nft -f, Pablo Neira Ayuso
[PATCH v2 nf] netfilter: x_tables: speed up jump target validation, Florian Westphal
- Re: [PATCH v2 nf] netfilter: x_tables: speed up jump target validation, Florian Westphal
[PATCH nft v5 1/3] include: cache ip_tables.h, ip6_tables.h, arp_tables.h and ebtables.h, Pablo M. Bermudo Garay
- [PATCH nft v5 3/3] src: add xt compat support, Pablo M. Bermudo Garay
  - Re: [PATCH nft v5 3/3] src: add xt compat support, Pablo Neira Ayuso
    - Re: [PATCH nft v5 3/3] src: add xt compat support, Arturo Borrero Gonzalez
- [PATCH nft v5 2/3] src: expose delinearize/linearize structures and stmt_error(), Pablo M. Bermudo Garay
  - Re: [PATCH nft v5 2/3] src: expose delinearize/linearize structures and stmt_error(), Pablo Neira Ayuso
- Re: [PATCH nft v5 1/3] include: cache ip_tables.h, ip6_tables.h, arp_tables.h and ebtables.h, Pablo Neira Ayuso
[PATCH nf] netfilter: x_tables: speed up jump target validation, Florian Westphal
- Re: [PATCH nf] netfilter: x_tables: speed up jump target validation, Jeff Wu
  - Re: [PATCH nf] netfilter: x_tables: speed up jump target validation, Jeff Wu
- Re: [PATCH nf] netfilter: x_tables: speed up jump target validation, Florian Westphal
[PATCH nf-next v2 0/3] Compact netfilter hooks list, Aaron Conole
- [PATCH nf-next v2 1/3] netfilter: bridge: add and use br_nf_hook_thresh, Aaron Conole
  - Re: [PATCH nf-next v2 1/3] netfilter: bridge: add and use br_nf_hook_thresh, Pablo Neira Ayuso
    - Re: [PATCH nf-next v2 1/3] netfilter: bridge: add and use br_nf_hook_thresh, Aaron Conole
- [PATCH v2 3/3] netfilter: replace list_head with single linked list, Aaron Conole
  - Re: [PATCH v2 3/3] netfilter: replace list_head with single linked list, Pablo Neira Ayuso
    - Re: [PATCH v2 3/3] netfilter: replace list_head with single linked list, Florian Westphal
- [PATCH nf-next v2 2/3] netfilter: call nf_hook_state_init with rcu_read_lock held, Aaron Conole
  - Re: [PATCH nf-next v2 2/3] netfilter: call nf_hook_state_init with rcu_read_lock held, Pablo Neira Ayuso
    - Re: [PATCH nf-next v2 2/3] netfilter: call nf_hook_state_init with rcu_read_lock held, Florian Westphal
[PATCH nft 1/2] parser_bison: restore parsing of dynamic set element updates, Pablo Neira Ayuso
- [PATCH nft 2/2] netlink_linearize: skip NFTNL_EXPR_DYNSET_TIMEOUT attribute if timeout is unset, Pablo Neira Ayuso
iptables bypass via raw ethernet frames and other networking protocols, ivan . vettese
[PATCH nf-next 1/2] netfilter: conntrack: protect early_drop by rcu read lock, Liping Zhang
- [PATCH nf-next 2/2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
  - Re: [PATCH nf-next 2/2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Florian Westphal
    - Re: [PATCH nf-next 2/2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
- Re: [PATCH nf-next 1/2] netfilter: conntrack: protect early_drop by rcu read lock, Florian Westphal
- Re: [PATCH nf-next 1/2] netfilter: conntrack: protect early_drop by rcu read lock, Pablo Neira Ayuso
[PATCH iptables] xtables-translate: fix multiple spaces issue, Pablo M. Bermudo Garay
- Re: [PATCH iptables] xtables-translate: fix multiple spaces issue, Pablo Neira Ayuso
[PATCH nft v4 1/3] include: cache ip_tables.h, ip6_tables.h, arp_tables.h and ebtables.h, Pablo M. Bermudo Garay
- [PATCH nft v4 2/3] src: expose delinearize/linearize structures and stmt_error(), Pablo M. Bermudo Garay
  - Re: [PATCH nft v4 2/3] src: expose delinearize/linearize structures and stmt_error(), Pablo Neira Ayuso
- [PATCH nft v4 3/3] src: add xt compat support, Pablo M. Bermudo Garay
  - Re: [PATCH nft v4 3/3] src: add xt compat support, Pablo Neira Ayuso
[PATCH 2/2] netfilter: add missing macro, Eric Engestrom
- Re: [PATCH 2/2] netfilter: add missing macro, kbuild test robot
- Re: [PATCH 2/2] netfilter: add missing macro, Pablo Neira Ayuso
[PATCH nf-next] netfilter: nf_tables: get rid of possible_net_t from set and basechain, Pablo Neira Ayuso
- Re: [PATCH nf-next] netfilter: nf_tables: get rid of possible_net_t from set and basechain, kbuild test robot
  - Re: [PATCH nf-next] netfilter: nf_tables: get rid of possible_net_t from set and basechain, Pablo Neira Ayuso
[PATCH nf-next] netfilter: constify arg to is_dying/confirmed, Florian Westphal
[PATCH v2 2/2] libxt_hashlimit: Create revision 2 of xt_hashlimit to support higher pps rates, Vishwanath Pai
[PATCH v2 1/2] libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2, Vishwanath Pai
- RE: [PATCH v2 1/2] libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2, David Laight
  - Re: [PATCH v2 1/2] libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2, Vishwanath Pai
    - Re: [PATCH v2 1/2] libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2, Vishwanath Pai
[PATCH v2 2/2] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Vishwanath Pai
[PATCH v2 1/2] netfilter: Prepare xt_hashlimit.c for revision 2, Vishwanath Pai
[GIT PULL nf-next] IPVS Updates for v4.8, Simon Horman
- [PATCH nf-next] ipvs: count pre-established TCP states as active, Simon Horman
- Re: [GIT PULL nf-next] IPVS Updates for v4.8, Pablo Neira Ayuso
[GIT PULL nf] Second Round of IPVS Fixes for v4.7, Simon Horman
- [PATCH nf] ipvs: fix bind to link-local mcast IPv6 address in backup, Simon Horman
- Re: [GIT PULL nf] Second Round of IPVS Fixes for v4.7, Pablo Neira Ayuso
[PATCH 00/26] Netfilter updates for net-next, Pablo Neira Ayuso
- [PATCH 01/26] bridge: netfilter: checkpatch data type fixes, Pablo Neira Ayuso
  - Re: [PATCH 01/26] bridge: netfilter: checkpatch data type fixes, Stephen Hemminger
- [PATCH 02/26] netfilter: helper: avoid extra expectation iterations on unregister, Pablo Neira Ayuso
- [PATCH 03/26] netfilter: x_tables: fix possible ZERO_SIZE_PTR pointer dereferencing error., Pablo Neira Ayuso
  - Re: [PATCH 03/26] netfilter: x_tables: fix possible ZERO_SIZE_PTR pointer dereferencing error., Sergei Shtylyov
- [PATCH 05/26] netfilter: xt_TRACE: add explicitly nf_logger_find_get call, Pablo Neira Ayuso
- [PATCH 12/26] netfilter: xt_NFLOG: nflog-range does not truncate packets, Pablo Neira Ayuso
- [PATCH 18/26] netfilter: nft_hash: support deletion of inactive elements, Pablo Neira Ayuso
- [PATCH 19/26] netfilter: conntrack: allow increasing bucket size via sysctl too, Pablo Neira Ayuso
- [PATCH 25/26] netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF, Pablo Neira Ayuso
- [PATCH 26/26] netfilter: nf_log: fix error on write NONE to logger choice sysctl, Pablo Neira Ayuso
- [PATCH 20/26] netfilter: nf_tables: get rid of NFT_BASECHAIN_DISABLED, Pablo Neira Ayuso
- [PATCH 24/26] netfilter: Remove references to obsolete CONFIG_IP_ROUTE_FWMARK, Pablo Neira Ayuso
- [PATCH 23/26] etherdevice.h & bridge: netfilter: Add and use ether_addr_equal_masked, Pablo Neira Ayuso
- [PATCH 21/26] netfilter: nf_tables: add support for inverted logic in nft_lookup, Pablo Neira Ayuso
- [PATCH 22/26] netfilter: x_tables: simplify ip{6}table_mangle_hook(), Pablo Neira Ayuso
- [PATCH 17/26] netfilter: nft_rbtree: check for next generation when deactivating elements, Pablo Neira Ayuso
- [PATCH 15/26] netfilter: nf_tables: add generation mask to chains, Pablo Neira Ayuso
- [PATCH 16/26] netfilter: nf_tables: add generation mask to sets, Pablo Neira Ayuso
- [PATCH 13/26] netfilter: nf_tables: add generic macros to check for generation mask, Pablo Neira Ayuso
- [PATCH 11/26] netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCP, Pablo Neira Ayuso
- [PATCH 14/26] netfilter: nf_tables: add generation mask to tables, Pablo Neira Ayuso
- [PATCH 10/26] netfilter: Allow xt_owner in any user namespace, Pablo Neira Ayuso
  - Re: [10/26] netfilter: Allow xt_owner in any user namespace, Andrei Vagin
- [PATCH 09/26] netfilter: move zone info into struct nf_conn, Pablo Neira Ayuso
- [PATCH 07/26] netfilter: make comparision helpers stub functions in ZONES=n case, Pablo Neira Ayuso
- [PATCH 08/26] netfilter: nf_log: Remove NULL check, Pablo Neira Ayuso
- [PATCH 04/26] netfilter: nf_log: handle NFPROTO_INET properly in nf_logger_[find_get|put], Pablo Neira Ayuso
- [PATCH 06/26] netfilter: conntrack: align nf_conn on cacheline boundary, Pablo Neira Ayuso
  - RE: [PATCH 06/26] netfilter: conntrack: align nf_conn on cacheline boundary, David Laight
    - Re: [PATCH 06/26] netfilter: conntrack: align nf_conn on cacheline boundary, Florian Westphal
- Re: [PATCH 00/26] Netfilter updates for net-next, David Miller
- <Possible follow-ups>
- [PATCH 00/26] Netfilter updates for net-next, Pablo Neira Ayuso
  - [PATCH 05/26] netfilter: ipset: Fix the last missing check of nla_parse_deprecated(), Pablo Neira Ayuso
  - [PATCH 16/26] netfilter: synproxy: extract SYNPROXY infrastructure from {ipt, ip6t}_SYNPROXY, Pablo Neira Ayuso
  - [PATCH 24/26] netfilter: bridge: Fix non-untagged fragment packet, Pablo Neira Ayuso
  - [PATCH 26/26] netfilter: nf_tables: add support for matching IPv4 options, Pablo Neira Ayuso
  - [PATCH 22/26] netfilter: bridge: prevent UAF in brnf_exit_net(), Pablo Neira Ayuso
  - [PATCH 23/26] netfilter: fix nf_conntrack_bridge/ipv6 link error, Pablo Neira Ayuso
  - [PATCH 25/26] netfilter: synproxy: fix manual bump of the reference counter, Pablo Neira Ayuso
  - [PATCH 17/26] netfilter: synproxy: ensure zero is returned on non-error return path, Pablo Neira Ayuso
  - [PATCH 21/26] netfilter: synproxy: use nf_cookie_v6_check() from core, Pablo Neira Ayuso
  - [PATCH 19/26] netfilter: nf_tables: enable set expiration time for set elements, Pablo Neira Ayuso
  - [PATCH 13/26] netfilter: bridge: namespace bridge netfilter sysctls, Pablo Neira Ayuso
  - [PATCH 18/26] netfilter: nft_ct: fix null pointer in ct expectations support, Pablo Neira Ayuso
  - [PATCH 20/26] netfilter: synproxy: fix building syncookie calls, Pablo Neira Ayuso
  - [PATCH 08/26] Update my email address, Pablo Neira Ayuso
  - [PATCH 09/26] netfilter: nft_ct: add ct expectations support, Pablo Neira Ayuso
  - [PATCH 10/26] netfilter: conntrack: small conntrack lookup optimization, Pablo Neira Ayuso
  - [PATCH 15/26] netfilter: synproxy: remove module dependency on IPv6 SYNPROXY, Pablo Neira Ayuso
  - [PATCH 14/26] netfilter: synproxy: add common uapi for SYNPROXY infrastructure, Pablo Neira Ayuso
  - [PATCH 12/26] netfilter: bridge: port sysctls to use brnf_net, Pablo Neira Ayuso
  - [PATCH 11/26] netfilter: xt_owner: bail out with EINVAL in case of unsupported flags, Pablo Neira Ayuso
  - [PATCH 07/26] ipset: Fix memory accounting for hash types on resize, Pablo Neira Ayuso
  - [PATCH 04/26] netfilter: ipset: fix a missing check of nla_parse, Pablo Neira Ayuso
  - [PATCH 02/26] netfilter: ipset: remove useless memset() calls, Pablo Neira Ayuso
  - [PATCH 06/26] netfilter: ipset: Fix error path in set_target_v3_checkentry(), Pablo Neira Ayuso
  - [PATCH 03/26] netfilter: ipset: merge uadd and udel functions, Pablo Neira Ayuso
  - [PATCH 01/26] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather, Pablo Neira Ayuso
  - Re: [PATCH 00/26] Netfilter updates for net-next, David Miller
[PATCH nf] netfilter: nft_ct: fix expiration getter, Florian Westphal
- Re: [PATCH nf] netfilter: nft_ct: fix expiration getter, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: nft_ct: fix expiration getter, Pablo Neira Ayuso
    - Re: [PATCH nf] netfilter: nft_ct: fix expiration getter, Florian Westphal
[ANNOUNCE] Netdev 1.2 Registration open, Hajime Tazaki
DoS attack mitigation in netfilter, Vikas
- Re: DoS attack mitigation in netfilter, Eric Dumazet
  - Writing metadata to a packet, Vikas
    - Re: Writing metadata to a packet, Patrick Schaaf
[RFC 0/7] netlink: Add allocation flag to netlink_unicast(), Masashi Honma
- [RFC 1/7] netlink: Add allocation flag to netlink_unicast(), Masashi Honma
- [RFC 2/7] netfilter: Add allocation flag to nfnetlink_unicast(), Masashi Honma
- [RFC 5/7] net: Add allocation flag to rtnl_unicast(), Masashi Honma
  - Re: [RFC 5/7] net: Add allocation flag to rtnl_unicast(), Eric Dumazet
    - Re: [RFC 5/7] net: Add allocation flag to rtnl_unicast(), Masashi Honma
      - Re: [RFC 5/7] net: Add allocation flag to rtnl_unicast(), Eric Dumazet
- [RFC 6/7] genetlink: Add allocation flag to genlmsg_unicast(), Masashi Honma
- [RFC 7/7] genetlink: Add allocation flag to genlmsg_reply(), Masashi Honma
- [RFC 4/7] infiniband: Add allocation flag to ibnl_unicast(), Masashi Honma
- [RFC 3/7] netlink: Add allocation flag to nlmsg_unicast(), Masashi Honma
- Re: [RFC 0/7] netlink: Add allocation flag to netlink_unicast(), David Miller
- Re: [RFC 0/7] netlink: Add allocation flag to netlink_unicast(), Masashi Honma
  - Message not available
    - Re: [RFC 0/7] netlink: Add allocation flag to netlink_unicast(), Masashi Honma
- Re: [RFC 0/7] netlink: Add allocation flag to netlink_unicast(), Masashi Honma
[PATCH nf-next] netfilter: nft_ct: make byte/packet expr more friendly, Liping Zhang
- Re: [PATCH nf-next] netfilter: nft_ct: make byte/packet expr more friendly, Florian Westphal
- Re: [PATCH nf-next] netfilter: nft_ct: make byte/packet expr more friendly, Pablo Neira Ayuso
[PATCH] netfilter: physdev: physdev-is-out should not work with OUTPUT chain, Hangbin Liu
- Re: [PATCH] netfilter: physdev: physdev-is-out should not work with OUTPUT chain, Marcelo Ricardo Leitner
  - Re: [PATCH] netfilter: physdev: physdev-is-out should not work with OUTPUT chain, Pablo Neira Ayuso
    - Re: [PATCH] netfilter: physdev: physdev-is-out should not work with OUTPUT chain, Pablo Neira Ayuso
Re: Multi-thread udp 4.7 regression, bisected to 71d8c47fc653, Pablo Neira Ayuso
- Re: Multi-thread udp 4.7 regression, bisected to 71d8c47fc653, Marc Dionne
  - Re: Multi-thread udp 4.7 regression, bisected to 71d8c47fc653, Pablo Neira Ayuso
    - Re: Multi-thread udp 4.7 regression, bisected to 71d8c47fc653, Marc Dionne
      - Re: Multi-thread udp 4.7 regression, bisected to 71d8c47fc653, Pablo Neira Ayuso
[PATCH nf-next 0/2] netfilter: nat: simplify & convert bysrc hash to rhashtable, Florian Westphal
- [PATCH nf-next 1/2] netfilter: move nat hlist_head to nf_conn, Florian Westphal
  - Re: [PATCH nf-next 1/2] netfilter: move nat hlist_head to nf_conn, Pablo Neira Ayuso
- [PATCH nf-next 2/6] netfilter: nat: convert nat bysrc hash to rhashtable, Florian Westphal
  - Re: [PATCH nf-next 2/6] netfilter: nat: convert nat bysrc hash to rhashtable, Pablo Neira Ayuso
[PATCH nft 1/3] meta: add random and probability match, Florian Westphal
- [PATCH nft 1/3] meta: add random expression key, Florian Westphal
  - Re: [PATCH nft 1/3] meta: add random expression key, Pablo Neira Ayuso
    - Re: [PATCH nft 1/3] meta: add random expression key, Florian Westphal
- [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Florian Westphal
  - Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Pablo Neira Ayuso
    - Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Florian Westphal
      - Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Pablo Neira Ayuso
        
        Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Florian Westphal
        
        Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Pablo Neira Ayuso
- [PATCH nft 3/3] netlink_delinearize, meta: show meta prandom <= value as probability mnemonic, Florian Westphal
libxtables backward compatibility, Neal P. Murphy
- Re: libxtables backward compatibility, Jan Engelhardt
  - Re: libxtables backward compatibility, Neal P. Murphy
    - Re: libxtables backward compatibility, Jan Engelhardt
      - Re: libxtables backward compatibility, Neal P. Murphy
[PATCH] fix off-by-one in DecodeQ931, Toby DiPasquale
- Re: [PATCH] fix off-by-one in DecodeQ931, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH] fix off-by-one in DecodeQ931, Toby DiPasquale
  - Re: [PATCH] fix off-by-one in DecodeQ931, Pablo Neira Ayuso
[PATCH -next] netfilter: conntrack: simplify early_drop, Florian Westphal
- Re: [PATCH -next] netfilter: conntrack: simplify early_drop, Pablo Neira Ayuso
[PATCH libnetfilter_queue] src: check result of malloc when creating queue, lists
- Re: [PATCH libnetfilter_queue] src: check result of malloc when creating queue, Florian Westphal
[PATCH V2,nf 0/3] netfilter: conntrack: fix race condition associated with hash resize, Liping Zhang
- [PATCH V2,nf 2/3] netfilter: cttimeout: unlink timeout obj again when hash resize happen, Liping Zhang
- [PATCH V2,nf 3/3] netfilter: nf_ct_helper: unlink helper again when hash resize happen, Liping Zhang
- [PATCH V2,nf 1/3] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Liping Zhang
- Re: [PATCH V2,nf 0/3] netfilter: conntrack: fix race condition associated with hash resize, Pablo Neira Ayuso
[PATCH 1/1 rev. 1] nft: configure.ac: Replace magic dblatex dep., Nicholas Vinson
- Re: [PATCH 1/1 rev. 1] nft: configure.ac: Replace magic dblatex dep., Nick Vinson
  - Re: [PATCH 1/1 rev. 1] nft: configure.ac: Replace magic dblatex dep., Pablo Neira Ayuso
Re: nftables: Dynamically updating sets gives syntax error, Anders K. Pedersen
- Re: nftables: Dynamically updating sets gives syntax error, Pablo Neira Ayuso
  - Re: nftables: Dynamically updating sets gives syntax error, Anders K. Pedersen
[PATCH nf 0/3] netfilter: conntrack: fix race condition associated with hash resize, Liping Zhang
- [PATCH nf 2/3] netfilter: cttimeout: unlink timeout obj again when hash resize happen, Liping Zhang
- [PATCH nf 3/3] netfilter: nf_ct_helper: unlink helper again when hash resize happen, Liping Zhang
- [PATCH nf 1/3] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Liping Zhang
  - Re: [PATCH nf 1/3] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Florian Westphal
    - Re: [PATCH nf 1/3] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Liping Zhang
[ANNOUNCE] libmnl 1.0.4 release, Pablo Neira Ayuso
[PATCH libmnl] src: cleanup function definitions, Pablo Neira Ayuso

[Index of Archives] [LARTC] [Berkeley Packet Filter] [Bugtraq] [Yosemite Discussion]