Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH nf-next] netfilter: ftp: Remove the useless dlen==0 condition check in find_pattern, (continued)
  • Re: [PATCH nf-next] netfilter: ftp: Remove the useless dlen==0 condition check in find_pattern, Feng Gao
    • Re: [PATCH nf-next] netfilter: ftp: Remove the useless dlen==0 condition check in find_pattern, Pablo Neira Ayuso
• [PATCH nft] evaluate: display expression, statement and command name on debug, Pablo Neira Ayuso
• [PATCH 5/5] net/netfilter/nf_conntrack_core: update memory barriers., Manfred Spraul
  • Re: [PATCH 5/5] net/netfilter/nf_conntrack_core: update memory barriers., Eric Dumazet
• [PATCH iptables v3] xtables-translate-restore: do not escape quotes, Pablo M. Bermudo Garay
  • Re: [PATCH iptables v3] xtables-translate-restore: do not escape quotes, Pablo Neira Ayuso
• [nf-next:master 8/29] ERROR: "nf_conntrack_htable_size" [net/ipv4/netfilter/nf_conntrack_ipv4.ko] undefined!, kbuild test robot
• [PATCH libnftnl] set: fix incorrect maximum set description attribute, Pablo Neira Ayuso
• [nft PATCH v2 0/4] A round of covscan indicated fixes, Phil Sutter
  • [nft PATCH v2 1/4] evaluate: Fix datalen checks in expr_evaluate_string(), Phil Sutter
    • Re: [nft PATCH v2 1/4] evaluate: Fix datalen checks in expr_evaluate_string(), Pablo Neira Ayuso
  • [nft PATCH v2 3/4] stmt_evaluate_reset: Have a generic fix for missing network context, Phil Sutter
    • Re: [nft PATCH v2 3/4] stmt_evaluate_reset: Have a generic fix for missing network context, Pablo Neira Ayuso
  • [nft PATCH v2 4/4] evaluate: Avoid undefined behaviour in concat_subtype_id(), Phil Sutter
    • Re: [nft PATCH v2 4/4] evaluate: Avoid undefined behaviour in concat_subtype_id(), Pablo Neira Ayuso
  • [nft PATCH v2 2/4] netlink_delinearize: Avoid potential null pointer deref, Phil Sutter
    • Re: [nft PATCH v2 2/4] netlink_delinearize: Avoid potential null pointer deref, Pablo Neira Ayuso
      • Re: [nft PATCH v2 2/4] netlink_delinearize: Avoid potential null pointer deref, Phil Sutter
• [PATCH 0/2] netfilter: allow tab character in SIP headers, Marco Angaroni
  • Re: [PATCH 0/2] netfilter: allow tab character in SIP headers, Pablo Neira Ayuso
    • Re: [PATCH 0/2] netfilter: allow tab character in SIP headers, Marco Angaroni
• [PATCH 2/2] netfilter: correct allowed characters in Call-ID SIP header, Marco Angaroni
  • Re: [PATCH 2/2] netfilter: correct allowed characters in Call-ID SIP header, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: correct parsing of continuation lines in SIP headers, Marco Angaroni
  • Re: [PATCH 1/2] netfilter: correct parsing of continuation lines in SIP headers, Pablo Neira Ayuso
  • Re: [PATCH 1/2] netfilter: correct parsing of continuation lines in SIP headers, Pablo Neira Ayuso
• [PATCH libnftnl] expr: numgen: add missing nftnl_expr_ng_cmp(), Pablo Neira Ayuso
• [conntrack-tools PATCH 1/4] src/main: refresh help message, Arturo Borrero Gonzalez
  • [conntrack-tools PATCH 2/4] conntrackd.8: refresh file, Arturo Borrero Gonzalez
    • Re: [conntrack-tools PATCH 2/4] conntrackd.8: refresh file, Pablo Neira Ayuso
  • [conntrack-tools PATCH 3/4] conntrackd.8: add reference to systemd, Arturo Borrero Gonzalez
    • Re: [conntrack-tools PATCH 3/4] conntrackd.8: add reference to systemd, Pablo Neira Ayuso
  • [conntrack-tools PATCH 4/4] doc/manual/conntrack-tools: include some bits about init systems, Arturo Borrero Gonzalez
    • Re: [conntrack-tools PATCH 4/4] doc/manual/conntrack-tools: include some bits about init systems, Rami Rosen
  • Re: [conntrack-tools PATCH 1/4] src/main: refresh help message, Pablo Neira Ayuso
• [PATCH nft] tests: py: adapt netlink bytecode output of numgen and hash, Pablo Neira Ayuso
• [PATCH libnftnl 1/3] expr: numgen: use switch to handle numgen types from snprintf, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3] expr: numgen: add missing trailing whitespace, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] expr: hash: missing trailing space and modulus in hexadecimal in snprintf, Pablo Neira Ayuso
• [NetDev] [ANNOUNCE] Netdev 1.2 weekly updates (30th August, 2016), Hajime Tazaki
• [PATCH nft 1/8] tests: py: adapt this to new add element command semantics, Pablo Neira Ayuso
  • [PATCH nft 2/8] src: add quota statement, Pablo Neira Ayuso
  • [PATCH nft 3/8] src: add numgen expression, Pablo Neira Ayuso
  • [PATCH nft 5/8] evaluate: add expr_evaluate_integer(), Pablo Neira Ayuso
  • [PATCH nft 4/8] src: add hash expression, Pablo Neira Ayuso
  • [PATCH nft 6/8] evaluate: validate maximum hash and numgen value, Pablo Neira Ayuso
  • [PATCH nft 8/8] parser_bison: allow variable references in set elements definition, Pablo Neira Ayuso
  • [PATCH nft 7/8] parser_bison: add variable_expr rule, Pablo Neira Ayuso
• [PATCH nft] parser_bison: allow variable references in set elements definition, Pablo Neira Ayuso
• [PATCH v2 nf] netfilter: log: Check param to avoid overflow in nf_log_set, fgao
  • Re: [PATCH v2 nf] netfilter: log: Check param to avoid overflow in nf_log_set, Feng Gao
  • Re: [PATCH v2 nf] netfilter: log: Check param to avoid overflow in nf_log_set, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: log: Check param to avoid overflow in nf_log_set, fgao
  • Re: [PATCH nf-next] netfilter: log: Check param to avoid overflow in nf_log_set, Feng Gao
  • Re: [PATCH nf-next] netfilter: log: Check param to avoid overflow in nf_log_set, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: log_arp: Use ARPHRD_ETHER instead of literal '1', fgao
  • Re: [PATCH nf-next] netfilter: log_arp: Use ARPHRD_ETHER instead of literal '1', Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables_netdev: remove redundant ip_hdr assignment, Liping Zhang
  • Re: [PATCH nf] netfilter: nf_tables_netdev: remove redundant ip_hdr assignment, Pablo Neira Ayuso
• [PATCH iptables 1/3] extensions: libipt_DNAT/SNAT: fix "OOM" when do translation to nft, Liping Zhang
  • [PATCH iptables 2/3] extensions: libip[6]t_SNAT/DNAT: use the new nft syntax when do xlate, Liping Zhang
    • Re: [PATCH iptables 2/3] extensions: libip[6]t_SNAT/DNAT: use the new nft syntax when do xlate, Pablo Neira Ayuso
      • Re: [PATCH iptables 2/3] extensions: libip[6]t_SNAT/DNAT: use the new nft syntax when do xlate, Liping Zhang
  • [PATCH iptables 3/3] extensions: libip[6]t_REDIRECT: use new nft syntax when do xlate, Liping Zhang
    • Re: [PATCH iptables 3/3] extensions: libip[6]t_REDIRECT: use new nft syntax when do xlate, Pablo Neira Ayuso
  • Re: [PATCH iptables 1/3] extensions: libipt_DNAT/SNAT: fix "OOM" when do translation to nft, Pablo Neira Ayuso
• [PATCH nft] meta: fix memory leak in tc classid parser, Liping Zhang
  • Re: [PATCH nft] meta: fix memory leak in tc classid parser, Pablo Neira Ayuso
• [PATCH iptables v3 1/2] xtables-compat: check if nft ruleset is compatible, Pablo M. Bermudo Garay
  • [PATCH iptables v3 2/2] xtables-compat: add rule cache, Pablo M. Bermudo Garay
    • Re: [PATCH iptables v3 2/2] xtables-compat: add rule cache, Pablo Neira Ayuso
  • Re: [PATCH iptables v3 1/2] xtables-compat: check if nft ruleset is compatible, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: Use nla_put_be32() to dump immediate parameters, Pablo Neira Ayuso
• [PATCH v3 net-next 2/2] netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilter, fgao
  • Re: [PATCH v3 net-next 2/2] netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilter, Pablo Neira Ayuso
• [PATCH v3 net-next 1/2] netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfilter., fgao
  • Re: [PATCH v3 net-next 1/2] netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfilter., Pablo Neira Ayuso
• [PATCH libnftnl] expr: imm: Fix immediate verdict comparison, Carlos Falgueras García
  • Re: [PATCH libnftnl] expr: imm: Fix immediate verdict comparison, Pablo Neira Ayuso
    • Re: [PATCH libnftnl] expr: imm: Fix immediate verdict comparison, Carlos Falgueras García
    • [PATCH libnftnl] expr: imm: Fix immediate verdict comparison, Carlos Falgueras García
      • Re: [PATCH libnftnl] expr: imm: Fix immediate verdict comparison, Pablo Neira Ayuso
• [PATCH nf-next,v2 1/2] rhashtable: add rhashtable_lookup_get_insert_key(), Pablo Neira Ayuso
  • [PATCH nf-next,v2 2/2] netfilter: nf_tables: honor NLM_F_EXCL flag in set element insertion, Pablo Neira Ayuso
  • Re: [PATCH nf-next,v2 1/2] rhashtable: add rhashtable_lookup_get_insert_key(), Herbert Xu
    • Re: [PATCH nf-next,v2 1/2] rhashtable: add rhashtable_lookup_get_insert_key(), Pablo Neira Ayuso
• netfilter: get rid of per-object conntrack timers, Florian Westphal
  • [PATCH v3 nf-next 1/7] netfilter: restart search if moved to other chain, Florian Westphal
  • [PATCH v3 nf-next 2/7] netfilter: don't rely on DYING bit to detect when destroy event was sent, Florian Westphal
  • [PATCH v3 nf-next 3/7] netfilter: conntrack: get rid of conntrack timer, Florian Westphal
  • [PATCH v3 nf-next 5/7] netfilter: conntrack: add gc worker to remove timed-out entries, Florian Westphal
    • Re: [PATCH v3 nf-next 5/7] netfilter: conntrack: add gc worker to remove timed-out entries, Eric Dumazet
  • [PATCH v3 nf-next 4/7] netfilter: evict stale entries on netlink dumps, Florian Westphal
  • [PATCH v3 nf-next 6/7] netfilter: conntrack: resched gc again if eviction rate is high, Florian Westphal
    • Re: [PATCH v3 nf-next 6/7] netfilter: conntrack: resched gc again if eviction rate is high, Eric Dumazet
  • [PATCH v3 nf-next 7/7] netfilter: remove __nf_ct_kill_acct helper, Florian Westphal
  • Re: netfilter: get rid of per-object conntrack timers, Pablo Neira Ayuso
• [ANNOUNCE] Netdev 1.2 weekly updates (24th August, 2016), Hajime Tazaki
• [PATCH nft 1/4] src: add create set command, Pablo Neira Ayuso
  • [PATCH nft 4/4] tests: shell: cover add and create set command, Pablo Neira Ayuso
  • [PATCH nft 2/4] tests: shell: cover add and create set command, Pablo Neira Ayuso
  • [PATCH nft 3/4] src: create element command, Pablo Neira Ayuso
• [PATCH nf-next 1/2] rhashtable: add rhashtable_lookup_get_insert_key(), Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: nf_tables: honor NLM_F_EXCL flag in set element insertion, Pablo Neira Ayuso
  • Re: [PATCH nf-next 1/2] rhashtable: add rhashtable_lookup_get_insert_key(), Herbert Xu
• [PATCH libnftnl] expr: data_reg: Fix DATA_CHAIN comparison, Carlos Falgueras García
  • Re: [PATCH libnftnl] expr: data_reg: Fix DATA_CHAIN comparison, Pablo Neira Ayuso
• [PATCH nf-next v2 0/7] netfilter: get rid of per-object conntrack timers, Florian Westphal
  • [PATCH v2 nf-next 1/7] netfilter: don't rely on DYING bit to detect when destroy event was sent, Florian Westphal
    • Re: [PATCH v2 nf-next 1/7] netfilter: don't rely on DYING bit to detect when destroy event was sent, Eric Dumazet
  • [PATCH v2 nf-next 2/7] netfilter: conntrack: get rid of conntrack timer, Florian Westphal
    • Re: [PATCH v2 nf-next 2/7] netfilter: conntrack: get rid of conntrack timer, Eric Dumazet
  • [PATCH v2 nf-next 3/7] netfilter: evict stale entries on netlink dumps, Florian Westphal
    • Re: [PATCH v2 nf-next 3/7] netfilter: evict stale entries on netlink dumps, Eric Dumazet
  • [PATCH v2 nf-next 4/7] netfilter: conntrack: add gc worker to remove timed-out entries, Florian Westphal
    • Re: [PATCH v2 nf-next 4/7] netfilter: conntrack: add gc worker to remove timed-out entries, Eric Dumazet
      • Re: [PATCH v2 nf-next 4/7] netfilter: conntrack: add gc worker to remove timed-out entries, Florian Westphal
        • Re: [PATCH v2 nf-next 4/7] netfilter: conntrack: add gc worker to remove timed-out entries, Eric Dumazet
          • Re: [PATCH v2 nf-next 4/7] netfilter: conntrack: add gc worker to remove timed-out entries, Florian Westphal
  • [PATCH v2 nf-next 5/7] netfilter: conntrack: resched gc again if eviction rate is high, Florian Westphal
  • [PATCH v2 nf-next 6/7] netfilter: remove __nf_ct_kill_acct helper, Florian Westphal
  • [PATCH nf-next 7/7] netfilter: restart search if moved to other chain, Florian Westphal
    • Re: [PATCH nf-next 7/7] netfilter: restart search if moved to other chain, Eric Dumazet
• [PATCH 1/2 nf-next] netfilter: nf_tables: introduce nft_chain_parse_hook(), Pablo Neira Ayuso
  • [PATCH 2/2 nf-next] netfilter: nf_tables: reject hook configuration updates on existing chains, Pablo Neira Ayuso
• [PATCH nft] parser_bison: explicit indication on export ruleset, Pablo Neira Ayuso
• [PATCH] dynset prefix support, Pablo Neira Ayuso
• [PATCH v2 iptables] iptables-restore: add missing arguments to usage message, Brian Haley
  • Re: [PATCH v2 iptables] iptables-restore: add missing arguments to usage message, Pablo Neira Ayuso
• [PATCH nf] netfilter: ebtables: put module reference when an incorrect extension is found, Sabrina Dubroca
  • Re: [PATCH nf] netfilter: ebtables: put module reference when an incorrect extension is found, Phil Sutter
  • Re: [PATCH nf] netfilter: ebtables: put module reference when an incorrect extension is found, Pablo Neira Ayuso
• [PATCH nft] Simplify parser rule_spec tree, Carlos Falgueras García
  • Re: [PATCH nft] Simplify parser rule_spec tree, Pablo Neira Ayuso
• [PATCH v2 1/2 net-next] netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfilter., fgao
  • <Possible follow-ups>
  • [PATCH v2 1/2 net-next] netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfilter., fgao
    • Re: [PATCH v2 1/2 net-next] netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfilter., Feng Gao
• [PATCH v2 2/2 net-next] netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilter, fgao
• [PATCH iptables] iptables-restore: add missing arguments to usage message, Brian Haley
  • Re: [PATCH iptables] iptables-restore: add missing arguments to usage message, Pablo Neira Ayuso
    • Re: [PATCH iptables] iptables-restore: add missing arguments to usage message, Brian Haley
• [PATCH nft] tests: shell: add testcase for reject expr, Liping Zhang
  • Re: [PATCH nft] tests: shell: add testcase for reject expr, Pablo Neira Ayuso
• [PATCH nft] parser_bison: keep snat/dnat existing syntax unchanged, Liping Zhang
  • Re: [PATCH nft] parser_bison: keep snat/dnat existing syntax unchanged, Pablo Neira Ayuso
• [PATCH iptables v2 1/2] xtables-compat: check if nft ruleset is compatible, Pablo M. Bermudo Garay
  • [PATCH iptables v2 2/2] xtables-compat: add rule cache, Pablo M. Bermudo Garay
    • Re: [PATCH iptables v2 2/2] xtables-compat: add rule cache, Pablo Neira Ayuso
      • Re: [PATCH iptables v2 2/2] xtables-compat: add rule cache, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_meta: improve the validity check of pkttype set expr, Liping Zhang
  • Re: [PATCH nf] netfilter: nft_meta: improve the validity check of pkttype set expr, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nft_meta: improve the validity check of pkttype set expr, Liping Zhang
• [PATCH nf 1/3] netfilter: nfnetlink: use list_for_each_entry_safe to delete all objects, Liping Zhang
  • [PATCH nf 2/3] netfilter: cttimeout: put back l4proto when replacing timeout policy, Liping Zhang
    • Re: [PATCH nf 2/3] netfilter: cttimeout: put back l4proto when replacing timeout policy, Pablo Neira Ayuso
  • [PATCH nf 3/3] netfilter: cttimeout: unlink timeout objs in the unconfirmed ct lists, Liping Zhang
    • Re: [PATCH nf 3/3] netfilter: cttimeout: unlink timeout objs in the unconfirmed ct lists, Pablo Neira Ayuso
  • Re: [PATCH nf 1/3] netfilter: nfnetlink: use list_for_each_entry_safe to delete all objects, Pablo Neira Ayuso
• [ANNOUNCE] nfacct 1.0.2 release, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_acct 1.0.3 release, Pablo Neira Ayuso
• [ANNOUNCE] conntrack-tools 1.4.4 release, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_conntrack 1.0.6 release, Pablo Neira Ayuso
• [PATCH iptables v2 1/2] xtables-translate: add escape_quotes option to comment_xlate, Pablo M. Bermudo Garay
  • [PATCH iptables v2 2/2] xtables-translate-restore: do not escape quotes, Pablo M. Bermudo Garay
    • Re: [PATCH iptables v2 2/2] xtables-translate-restore: do not escape quotes, Pablo Neira Ayuso
  • Re: [PATCH iptables v2 1/2] xtables-translate: add escape_quotes option to comment_xlate, Pablo Neira Ayuso
• [PATCH nft 1/2] ct: allow numeric conntrack labels, Florian Westphal
  • [PATCH nft 2/2] ct: display bit number instead of raw value, Florian Westphal
    • Re: [PATCH nft 2/2] ct: display bit number instead of raw value, Pablo Neira Ayuso
  • Re: [PATCH nft 1/2] ct: allow numeric conntrack labels, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: typo in trace attribute definition, Pablo Neira Ayuso
• [PATCH 1/4 V6 nft] Simplify parser rule_spec tree, Carlos Falgueras García
  • [PATCH 2/4 V6 nft] Implement deleting rule by description, Carlos Falgueras García
    • Re: [PATCH 2/4 V6 nft] Implement deleting rule by description, Pablo Neira Ayuso
  • [PATCH 3/4 V6 nft] test: shell: Add tests for deleting rule by description, Carlos Falgueras García
    • Re: [PATCH 3/4 V6 nft] test: shell: Add tests for deleting rule by description, Pablo Neira Ayuso
    • Message not available
      • Re: [PATCH 3/4 V6 nft] test: shell: Add tests for deleting rule by description, Pablo Neira Ayuso
        • Re: [PATCH 3/4 V6 nft] test: shell: Add tests for deleting rule by description, Pablo Neira Ayuso
  • [PATCH 4/4 V6 nft] parser: Improve syntax errors, Carlos Falgueras García
  • Re: [PATCH 1/4 V6 nft] Simplify parser rule_spec tree, Pablo Neira Ayuso
• [PATCH iptables 1/3] xtables-compat: remove useless functions, Pablo M. Bermudo Garay
  • [PATCH iptables 2/3] xtables-compat: check if nft ruleset is compatible, Pablo M. Bermudo Garay
    • Re: [PATCH iptables 2/3] xtables-compat: check if nft ruleset is compatible, Arturo Borrero Gonzalez
    • Re: [PATCH iptables 2/3] xtables-compat: check if nft ruleset is compatible, Pablo Neira Ayuso
  • [PATCH iptables 3/3] xtables-compat: add rule cache, Pablo M. Bermudo Garay
  • Re: [PATCH iptables 1/3] xtables-compat: remove useless functions, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT, Liping Zhang
  • Re: [PATCH nf] netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT, Pablo Neira Ayuso
• [PATCH -next] netfilter: nft_hash: fix non static symbol warning, Wei Yongjun
  • Re: [PATCH -next] netfilter: nft_hash: fix non static symbol warning, Pablo Neira Ayuso
• [PATCH iptables] extensions: libxt_CLASSIFY: Add translation to nft, Liping Zhang
  • Re: [PATCH iptables] extensions: libxt_CLASSIFY: Add translation to nft, Pablo Neira Ayuso
• [PATCH 1/1] netfilter: gre: Use the consitent GRE and PPTP struct instead of the structures defined in netfilter, fgao
  • Re: [PATCH 1/1] netfilter: gre: Use the consitent GRE and PPTP struct instead of the structures defined in netfilter, Feng Gao
    • Re: [PATCH 1/1] netfilter: gre: Use the consitent GRE and PPTP struct instead of the structures defined in netfilter, Pablo Neira Ayuso
      • Re: [PATCH 1/1] netfilter: gre: Use the consitent GRE and PPTP struct instead of the structures defined in netfilter, Feng Gao
  • Re: [PATCH 1/1] netfilter: gre: Use the consitent GRE and PPTP struct instead of the structures defined in netfilter, Pablo Neira Ayuso
• [PATCH nf-next 0/6] conntrack: get rid of per-object timer, Florian Westphal
  • [PATCH nf-next 1/6] netfilter: don't rely on DYING bit to detect when destroy event was sent, Florian Westphal
  • [PATCH nf-next 2/6] netfilter: conntrack: get rid of conntrack timer, Florian Westphal
    • Re: [PATCH nf-next 2/6] netfilter: conntrack: get rid of conntrack timer, Eric Dumazet
      • Re: [PATCH nf-next 2/6] netfilter: conntrack: get rid of conntrack timer, Florian Westphal
        • Re: [PATCH nf-next 2/6] netfilter: conntrack: get rid of conntrack timer, Eric Dumazet
          • Re: [PATCH nf-next 2/6] netfilter: conntrack: get rid of conntrack timer, Florian Westphal
            • Re: [PATCH nf-next 2/6] netfilter: conntrack: get rid of conntrack timer, Eric Dumazet
              • Re: [PATCH nf-next 2/6] netfilter: conntrack: get rid of conntrack timer, Florian Westphal
  • [PATCH nf-next 3/6] netfilter: evict stale entries on netlink dumps, Florian Westphal
  • [PATCH nf-next 4/6] netfilter: conntrack: add gc worker to remove timed-out entries, Florian Westphal
    • Re: [PATCH nf-next 4/6] netfilter: conntrack: add gc worker to remove timed-out entries, Eric Dumazet
      • Re: [PATCH nf-next 4/6] netfilter: conntrack: add gc worker to remove timed-out entries, Florian Westphal
  • [PATCH nf-next 5/6] netfilter: conntrack: resched gc again if eviction rate is high, Florian Westphal
  • [PATCH nf-next 6/6] netfilter: remove __nf_ct_kill_acct helper, Florian Westphal
• [PATCH v4] netfilter: nf_tables: Ensure init attributes are within the bounds, Laura Garcia Liebana
  • Re: [PATCH v4] netfilter: nf_tables: Ensure init attributes are within the bounds, Pablo Neira Ayuso
• [PATCH] netfilter: fix spelling mistake: "delimitter" -> "delimiter", Colin King
  • Re: [PATCH] netfilter: fix spelling mistake: "delimitter" -> "delimiter", Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_dynset: allow to invert match criteria, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nft_dynset: allow to invert match criteria, kbuild test robot
• [PATCH libnftnl] rule: Fix comparison between rules, Carlos Falgueras García
  • Re: [PATCH libnftnl] rule: Fix comparison between rules, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_conntrack: restore nf_conntrack_htable_size as exported symbol, Pablo Neira Ayuso
• [PATCH nf] netfilter: cttimeout: fix use after free error when delete netns, Liping Zhang
• [PATCH v3] netfilter: nf_tables: Ensure init attributes are within the bounds, Laura Garcia Liebana
  • Re: [PATCH v3] netfilter: nf_tables: Ensure init attributes are within the bounds, kbuild test robot
    • Re: [PATCH v3] netfilter: nf_tables: Ensure init attributes are within the bounds, Laura Garcia
  • Re: [PATCH v3] netfilter: nf_tables: Ensure init attributes are within the bounds, kbuild test robot
• [PATCH v5] netfilter: nft_numgen: add number generator expression, Laura Garcia Liebana
  • Re: [PATCH v5] netfilter: nft_numgen: add number generator expression, Pablo Neira Ayuso
• [PATCH 1/3 v4 libnftnl] tests: Consolidate printing error utilities, Carlos Falgueras García
  • [PATCH 2/3 v4 libnftnl] tests: Use libnftnl comparators in all tests, Carlos Falgueras García
  • [PATCH 3/3 v4 libnftnl] tests: Elimine static variable 'test_ok', Carlos Falgueras García
• [PATCH libnftnl] expr: hash: Add comparator to hash expression, Carlos Falgueras García
  • Re: [PATCH libnftnl] expr: hash: Add comparator to hash expression, Carlos Falgueras García
• [nf-next:master 8/9] ERROR: "nf_conntrack_htable_size" [net/netfilter/nfnetlink_cttimeout.ko] undefined!, kbuild test robot
• linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
  • <Possible follow-ups>
  • linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
  • linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
    • Re: linux-next: build failure after merge of the netfilter-next tree, Pablo Neira Ayuso
  • linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
  • linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
  • linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
    • Re: linux-next: build failure after merge of the netfilter-next tree, Florian Westphal
      • Re: linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
    • Re: linux-next: build failure after merge of the netfilter-next tree, Pablo Neira Ayuso
  • linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
    • Re: linux-next: build failure after merge of the netfilter-next tree, Pablo Neira Ayuso
      • Re: linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
  • linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
    • Re: linux-next: build failure after merge of the netfilter-next tree, Stephen Rothwell
• [PATCH nf-next] netfilter: nf_tables: add quota expression, Pablo Neira Ayuso
• [PATCH v4] netfilter: nft_numgen: add number generator expression, Laura Garcia Liebana
  • Re: [PATCH v4] netfilter: nft_numgen: add number generator expression, Pablo Neira Ayuso
• ulogd plugin development question, Tommy Knowlton
• Re: kernel panic TPROXY , vanilla 4.7.1, Eric Dumazet
  • Re: kernel panic TPROXY , vanilla 4.7.1, Denys Fedoryshchenko
    • Re: kernel panic TPROXY , vanilla 4.7.1, Eric Dumazet
    • [PATCH net] netfilter: tproxy: properly refcount tcp listeners, Eric Dumazet
      • Re: [PATCH net] netfilter: tproxy: properly refcount tcp listeners, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables_netdev: set nft_pktinfo field for non-IP traffic, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables_netdev: set nft_pktinfo field for non-IP traffic, Pablo Neira Ayuso
• [PATCH nft 00/10 nft] syntax updates, Pablo Neira Ayuso
  • [PATCH nft 01/10] src: quote user-defined strings when used from rule selectors, Pablo Neira Ayuso
  • [PATCH nft 02/10] src: add 'to' for snat and dnat, Pablo Neira Ayuso
  • [PATCH nft 03/10] src: support for RFC2732 IPv6 address format with brackets, Pablo Neira Ayuso
  • [PATCH nft 04/10] parser_bison: missing token string in QUOTED_ASTERISK and ASTERISK_STRING, Pablo Neira Ayuso
  • [PATCH nft 07/10] src: rename datatype name from tc_handle to classid, Pablo Neira Ayuso
  • [PATCH nft 05/10] scanner: allow strings starting by underscores and dots, Pablo Neira Ayuso
  • [PATCH nft 09/10] src: meta priority support using tc classid, Pablo Neira Ayuso
  • [PATCH nft 10/10] parser_bison: redirect to :port for consistency with nat/masq statement, Pablo Neira Ayuso
  • [PATCH nft 08/10] src: simplify classid printing using %x instead of %04x, Pablo Neira Ayuso
  • [PATCH nft 06/10] scanner: remove range expression, Pablo Neira Ayuso
• libipset developer documentation?, Peter Wu
• [PATCH 1/2 nft] ct: add missing slash to connlabel path, Pablo Neira Ayuso
  • [PATCH 2/2 nft] ct: release ct_label table on exit, Pablo Neira Ayuso
    • Re: [PATCH 2/2 nft] ct: release ct_label table on exit, Florian Westphal
  • Re: [PATCH 1/2 nft] ct: add missing slash to connlabel path, Florian Westphal
• [PATCH 1/3 v5 libnftnl] Implement rule comparison, Carlos Falgueras García
  • [PATCH 2/3 v5 nft] Simplify parser rule_spec tree, Carlos Falgueras García
    • Re: [PATCH 2/3 v5 nft] Simplify parser rule_spec tree, Pablo Neira Ayuso
  • [PATCH 3/3 v5 nft] Implement deleting rule by description, Carlos Falgueras García
  • Re: [PATCH 1/3 v5 libnftnl] Implement rule comparison, Pablo Neira Ayuso
• Snooping expected connections in a user CT helper, Kevin Cernekee
  • Re: Snooping expected connections in a user CT helper, Pablo Neira Ayuso
    • Re: Snooping expected connections in a user CT helper, Kevin Cernekee
      • Re: Snooping expected connections in a user CT helper, Pablo Neira Ayuso
        • Re: Snooping expected connections in a user CT helper, Kevin Cernekee
          • Re: Snooping expected connections in a user CT helper, Kevin Cernekee
            • Re: Snooping expected connections in a user CT helper, Pablo Neira Ayuso
              • Re: Snooping expected connections in a user CT helper, Pablo Neira Ayuso
• [PATCH iptables 1/2] xtables-translate: add escape_quotes option to comment_xlate, Pablo M. Bermudo Garay
  • [PATCH iptables 2/2] xtables-translate-restore: do not escape quotes, Pablo M. Bermudo Garay
    • Re: [PATCH iptables 2/2] xtables-translate-restore: do not escape quotes, Pablo Neira Ayuso
  • Re: [PATCH iptables 1/2] xtables-translate: add escape_quotes option to comment_xlate, Pablo Neira Ayuso
    • Re: [PATCH iptables 1/2] xtables-translate: add escape_quotes option to comment_xlate, Pablo M. Bermudo Garay
      • Re: [PATCH iptables 1/2] xtables-translate: add escape_quotes option to comment_xlate, Pablo Neira Ayuso
• [PATCH 1/3 v4 libnftnl] Implement rule comparison, Carlos Falgueras García
  • [PATCH 2/3 v4 nft] Simplify parser rule_spec tree, Carlos Falgueras García
  • [PATCH 3/3 v4 nft] Implement deleting rule by description, Carlos Falgueras García
  • Re: [PATCH 1/3 v4 libnftnl] Implement rule comparison, Pablo Neira Ayuso
• [ANNOUNCE] Netdev 1.2 updates (16th August, 2016), Hajime Tazaki
• [PATCH nf] netfilter: conntrack: do not dump other netns's conntrack entries via proc, Liping Zhang
  • Re: [PATCH nf] netfilter: conntrack: do not dump other netns's conntrack entries via proc, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: do not dump other netns's conntrack entries via proc, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack] src: Make the library compile under clang, Kevin Cernekee
  • Re: [PATCH libnetfilter_conntrack] src: Make the library compile under clang, Pablo Neira Ayuso
• [PATCH v2] netfilter: nf_tables: Check for overflow of u8 fields from u32 netlink attributes, Laura Garcia Liebana
  • Re: [PATCH v2] netfilter: nf_tables: Check for overflow of u8 fields from u32 netlink attributes, Pablo Neira Ayuso
• [PATCH v2 libnftnl] expr: add number generation expression, Laura Garcia Liebana
• [PATCH v3] netfilter: nft_numgen: add number generator expression, Laura Garcia Liebana
  • Re: [PATCH v3] netfilter: nft_numgen: add number generator expression, kbuild test robot
    • Re: [PATCH v3] netfilter: nft_numgen: add number generator expression, Laura Garcia
• [PATCH nf 1/2] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy, Liping Zhang
  • [PATCH nf 2/2] netfilter: nfnetlink_acct: report overquota to the right netns, Liping Zhang
    • Re: [PATCH nf 2/2] netfilter: nfnetlink_acct: report overquota to the right netns, Pablo Neira Ayuso
  • Re: [PATCH nf 1/2] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy, Pablo Neira Ayuso
    • Re: [PATCH nf 1/2] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy, Pablo Neira Ayuso
      • Re: [PATCH nf 1/2] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy, Liping Zhang
        • Re: [PATCH nf 1/2] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nfnetlink_log: add "nf-logger-3-1" module alias name, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nfnetlink_log: add "nf-logger-3-1" module alias name, Pablo Neira Ayuso
• [PATCH V3 nf-next] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
  • Re: [PATCH V3 nf-next] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Pablo Neira Ayuso
• [PATCH nf-next,v2] netfilter: remove ip_conntrack* sysctl compat code, Pablo Neira Ayuso
• [PATCH v2 libnftnl] expr: add hash expression, Laura Garcia Liebana
  • Re: [PATCH v2 libnftnl] expr: add hash expression, Pablo Neira Ayuso
• [nft PATCH 0/4] A round of covscan indicated fixes, Phil Sutter
  • [nft PATCH 3/4] proto_find_num: Avoid potential null pointer dereference, Phil Sutter
    • Re: [nft PATCH 3/4] proto_find_num: Avoid potential null pointer dereference, Pablo Neira Ayuso
  • [nft PATCH 2/4] netlink_delinearize: Avoid potential null pointer deref, Phil Sutter
    • Re: [nft PATCH 2/4] netlink_delinearize: Avoid potential null pointer deref, Pablo Neira Ayuso
  • [nft PATCH 1/4] evaluate: Fix datalen checks in expr_evaluate_string(), Phil Sutter
    • Re: [nft PATCH 1/4] evaluate: Fix datalen checks in expr_evaluate_string(), Pablo Neira Ayuso
  • [nft PATCH 4/4] evaluate: Avoid undefined behaviour in concat_subtype_id(), Phil Sutter
    • Re: [nft PATCH 4/4] evaluate: Avoid undefined behaviour in concat_subtype_id(), Pablo Neira Ayuso
• [libnftnl PATCH] utils: Don't return directly from SNPRINTF_BUFFER_SIZE, Phil Sutter
  • Re: [libnftnl PATCH] utils: Don't return directly from SNPRINTF_BUFFER_SIZE, Pablo Neira Ayuso
• [PATCH] netfilter: remove ip_conntrack* sysctl compat code, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: remove ip_conntrack* sysctl compat code, Liping Zhang
    • Re: [PATCH] netfilter: remove ip_conntrack* sysctl compat code, Pablo Neira Ayuso
• [libnftnl PATCH 0/7] A bunch of covscan detected fixes, Phil Sutter
  • [libnftnl PATCH 2/7] ruleset: Prevent memleak in nftnl_ruleset_snprintf_*() functions, Phil Sutter
    • Re: [libnftnl PATCH 2/7] ruleset: Prevent memleak in nftnl_ruleset_snprintf_*() functions, Pablo Neira Ayuso
      • Re: [libnftnl PATCH 2/7] ruleset: Prevent memleak in nftnl_ruleset_snprintf_*() functions, Phil Sutter
        • Re: [libnftnl PATCH 2/7] ruleset: Prevent memleak in nftnl_ruleset_snprintf_*() functions, Pablo Neira Ayuso
  • [libnftnl PATCH 4/7] expr/limit: Drop unreachable code in limit_to_type(), Phil Sutter
  • [libnftnl PATCH 1/7] set: prevent memleak in nftnl_jansson_parse_set_info(), Phil Sutter
  • [libnftnl PATCH 6/7] Avoid returning uninitialized data, Phil Sutter
  • [libnftnl PATCH 5/7] common: Avoid integer overflow in nftnl_batch_is_supported(), Phil Sutter
    • Re: [libnftnl PATCH 5/7] common: Avoid integer overflow in nftnl_batch_is_supported(), Pablo Neira Ayuso
  • [libnftnl PATCH 7/7] ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set(), Phil Sutter
  • [libnftnl PATCH 3/7] expr/ct: prevent array index overrun in ctkey2str(), Phil Sutter
  • Re: [libnftnl PATCH 0/7] A bunch of covscan detected fixes, Pablo Neira Ayuso
    • Re: [libnftnl PATCH 0/7] A bunch of covscan detected fixes, Pablo Neira Ayuso
      • Re: [libnftnl PATCH 0/7] A bunch of covscan detected fixes, Phil Sutter
        • Re: [libnftnl PATCH 0/7] A bunch of covscan detected fixes, Pablo Neira Ayuso
• [PATCH v5] netfilter: nf_tables: add hash expression, Laura Garcia Liebana
  • Re: [PATCH v5] netfilter: nf_tables: add hash expression, Pablo Neira Ayuso
• nfacct: setting quotas does not seem to work., Josue Alvarez
  • Re: nfacct: setting quotas does not seem to work., Pablo Neira Ayuso
    • Re: nfacct: setting quotas does not seem to work., Josue Alvarez
      • Re: nfacct: setting quotas does not seem to work., Pablo Neira Ayuso
• [PATCH 1/2, libnftnl] tests: Consolidate printing error utilities, Carlos Falgueras García
  • [PATCH 2/2, libnftnl] Use libnftnl comparators in all tests, Carlos Falgueras García
    • Re: [PATCH 2/2, libnftnl] Use libnftnl comparators in all tests, Pablo Neira Ayuso
      • Re: [PATCH 2/2, libnftnl] Use libnftnl comparators in all tests, Carlos Falgueras García
        • [PATCH 1/2 v2 libnftnl] tests: Consolidate printing error utilities, Carlos Falgueras García
          • [PATCH 2/2 v2 libnftnl] test: Use libnftnl comparators in all tests, Carlos Falgueras García
            • Re: [PATCH 2/2 v2 libnftnl] test: Use libnftnl comparators in all tests, Pablo Neira Ayuso
              • [PATCH 1/3 v3 nft] tests: Consolidate printing error utilities, Carlos Falgueras García
                • [PATCH 2/3 v3 nft] tests: Use libnftnl comparators in all tests, Carlos Falgueras García
                  • Re: [PATCH 2/3 v3 nft] tests: Use libnftnl comparators in all tests, Pablo Neira Ayuso
                • [PATCH 3/3 v3 nft] tests: Elimine static variable 'test_ok', Carlos Falgueras García
      • [PATCH 1/4, V2, libnftnl] tests: Fix segfaults due outbound access, Carlos Falgueras García
        • [PATCH 2/4, V2, libnftnl] tests: Fix wrong expression creation, Carlos Falgueras García
          • Re: [PATCH 2/4, V2, libnftnl] tests: Fix wrong expression creation, Pablo Neira Ayuso
        • [PATCH 3/4, V2, libnftnl] tests: Consolidate printing error utilities, Carlos Falgueras García
        • [PATCH 4/4, V2, libnftnl] tests: Use libnftnl comparators in all tests, Carlos Falgueras García
        • Re: [PATCH 1/4, V2, libnftnl] tests: Fix segfaults due outbound access, Pablo Neira Ayuso
          • Re: [PATCH 1/4, V2, libnftnl] tests: Fix segfaults due outbound access, Carlos Falgueras García
            • Re: [PATCH 1/4, V2, libnftnl] tests: Fix segfaults due outbound access, Pablo Neira Ayuso
              • [PATCH 1/2 libnftnl] expr: Improve bound checking in stringification functions, Carlos Falgueras García
                • [PATCH 2/2 libnftnl] expr: cmp: Use cmp2str() instead of directly access to array, Carlos Falgueras García
                  • Re: [PATCH 2/2 libnftnl] expr: cmp: Use cmp2str() instead of directly access to array, Pablo Neira Ayuso
                    • [PATCH 1/2 libnftnl] utils: Fix out of bound access in nftnl_family2str, Carlos Falgueras García
                      • [PATCH 2/2 libnfntl] expr: cmp: Use cmp2str() instead of directly access to array, Carlos Falgueras García
                        • Re: [PATCH 2/2 libnfntl] expr: cmp: Use cmp2str() instead of directly access to array, Pablo Neira Ayuso
                      • Re: [PATCH 1/2 libnftnl] utils: Fix out of bound access in nftnl_family2str, Pablo Neira Ayuso
                        • Re: [PATCH 1/2 libnftnl] utils: Fix out of bound access in nftnl_family2str, Carlos Falgueras García
                          • Re: [PATCH 1/2 libnftnl] utils: Fix out of bound access in nftnl_family2str, Pablo Neira Ayuso
                • Re: [PATCH 1/2 libnftnl] expr: Improve bound checking in stringification functions, Pablo Neira Ayuso
  • Re: [PATCH 1/2, libnftnl] tests: Consolidate printing error utilities, Pablo Neira Ayuso
    • Re: [PATCH 1/2, libnftnl] tests: Consolidate printing error utilities, Carlos Falgueras García
• [PATCH v4] netfilter: nf_tables: add hash expression, Laura Garcia Liebana
  • Re: [PATCH v4] netfilter: nf_tables: add hash expression, Pablo Neira Ayuso
• [PATCH 1/3, libnftnl] tests: Add missing tests to test-script.sh, Carlos Falgueras García
  • [PATCH 3/3, libnftnl] tests: Fix tests for immediate and lookup expressions, Carlos Falgueras García
    • Re: [PATCH 3/3, libnftnl] tests: Fix tests for immediate and lookup expressions, Pablo Neira Ayuso
  • [PATCH 2/3, libnftnl] expr: Fix lookup builder, Carlos Falgueras García
    • Re: [PATCH 2/3, libnftnl] expr: Fix lookup builder, Pablo Neira Ayuso
    • Re: [PATCH 2/3, libnftnl] expr: Fix lookup builder, Pablo Neira Ayuso
  • Re: [PATCH 1/3, libnftnl] tests: Add missing tests to test-script.sh, Pablo Neira Ayuso
  • Re: [PATCH 1/3, libnftnl] tests: Add missing tests to test-script.sh, Pablo Neira Ayuso
• [PATCH] nf-next: x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Loganaden Velvindron
  • Re: [PATCH] nf-next: x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Pablo Neira Ayuso
    • Re: [PATCH] nf-next: x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Loganaden Velvindron
    • Re: [PATCH] nf-next: x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Loganaden Velvindron
• [PATCH] x_tables: Replace kmalloc(s*n) with kmalloc_array(n,s), Loganaden Velvindron
• [PATCH netfilter] extensions/libxt_bpf.man: clarify BPF code generation with tcpdump, Willem de Bruijn
  • Re: [PATCH netfilter] extensions/libxt_bpf.man: clarify BPF code generation with tcpdump, Pablo Neira Ayuso
• [ANNOUNCE] Netdev 1.2 updates, Hajime Tazaki
• [PATCH 0/5] Check u32 load in u8 attributes, Laura Garcia Liebana
  • [PATCH 5/5] netfilter: nf_tables: Check u32 load in u8 nft_nat attribute, Laura Garcia Liebana
  • [PATCH 1/5] netfilter: nf_tables: Check u32 load in u8 nft_bitwise attribute, Laura Garcia Liebana
  • [PATCH 4/5] netfilter: nf_tables: Check u32 load in u8 nft_immediate attribute, Laura Garcia Liebana
  • [PATCH 2/5] netfilter: nf_tables: Check u32 load in u8 nft_byteorder attribute, Laura Garcia Liebana
  • [PATCH 3/5] netfilter: nf_tables: Check u32 load in u8 nft_cmp attribute, Laura Garcia Liebana
  • Re: [PATCH 0/5] Check u32 load in u8 attributes, Pablo Neira Ayuso
• [PATCH v3] netfilter: nf_tables: add hash expression, Laura Garcia Liebana
  • Re: [PATCH v3] netfilter: nf_tables: add hash expression, Pablo Neira Ayuso
• [PATCH nft] tests: tests to include files, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: Add size check on u8 nft_exthdr attributes, Laura Garcia Liebana
  • Re: [PATCH] netfilter: nf_tables: Add size check on u8 nft_exthdr attributes, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_tables: Add size check on u8 nft_exthdr attributes, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_tables: Add size check on u8 nft_exthdr attributes, Laura Garcia
• [PATCH v2] netfilter: nf_tables: add hash expression, Laura Garcia Liebana
  • Re: [PATCH v2] netfilter: nf_tables: add hash expression, Liping Zhang
    • Re: [PATCH v2] netfilter: nf_tables: add hash expression, Laura Garcia
• 4.7.0: RCU stall in nf_conntrack, Johannes Stezenbach
• Drop pings to other VLAN interfaces, vDev
• [PATCH] netfilter: nf_tables: rename set implementations, Pablo Neira Ayuso
• [PATCH libnftnl] expr: hash: Jenkins hash expression support, Laura Garcia Liebana
  • Re: [PATCH libnftnl] expr: hash: Jenkins hash expression support, Pablo Neira Ayuso
• [PATCH] netfilter: nft_hash: generate Jenkins Hash per source register, Laura Garcia Liebana
  • Re: [PATCH] netfilter: nft_hash: generate Jenkins Hash per source register, Pablo Neira Ayuso
• [PATCH nft 1/3] scanner: honor absolute and relative paths via include file, Pablo Neira Ayuso
  • [PATCH nft 3/3] scanner: don't break line on include error message, Pablo Neira Ayuso
  • [PATCH nft 2/3] scanner: don't fall back on current directory if include is not found, Pablo Neira Ayuso
• [PATCH nf] netfilter: ctnetlink: reject new conntrack request with different l4proto, Liping Zhang
  • Re: [PATCH nf] netfilter: ctnetlink: reject new conntrack request with different l4proto, Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink_queue: reject verdict request from different portid, Liping Zhang
  • Re: [PATCH nf] netfilter: nfnetlink_queue: reject verdict request from different portid, Florian Westphal
  • Re: [PATCH nf] netfilter: nfnetlink_queue: reject verdict request from different portid, Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink_queue: fix memory leak when attach expectation successfully, Liping Zhang
  • Re: [PATCH nf] netfilter: nfnetlink_queue: fix memory leak when attach expectation successfully, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_expect_proc: remove the redundant slash when policy name is empty, Liping Zhang
  • Re: [PATCH nf] netfilter: nf_expect_proc: remove the redundant slash when policy name is empty, Pablo Neira Ayuso
• [PATCH 1/4, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
  • [PATCH 2/4, libnfntl] Implement rule comparison, Carlos Falgueras García
    • Re: [PATCH 2/4, libnfntl] Implement rule comparison, Pablo Neira Ayuso
      • Re: [PATCH 2/4, libnfntl] Implement rule comparison, Carlos Falgueras García
    • Re: [PATCH 2/4, libnfntl] Implement rule comparison, Pablo Neira Ayuso
  • [PATCH 3/4, nft] Simplify parser rule_spec tree, Carlos Falgueras García
  • [PATCH 4/4, nft] Implement deleting rule by description, Carlos Falgueras García
  • Re: [PATCH 1/4, libnftnl] rule: Implement internal expression iterator, Pablo Neira Ayuso
    • Re: [PATCH 1/4, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
  • [PATCH 1/5, V2, libnftnl] rule: Add const modifier to rule field of expression iterator, Carlos Falgueras García
    • [PATCH 3/5, V2, libnftnl] Implement rule comparison, Carlos Falgueras García
      • Re: [PATCH 3/5, V2, libnftnl] Implement rule comparison, Pablo Neira Ayuso
    • [PATCH 2/5, V2, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
    • [PATCH 4/5, V2, nft] Simplify parser rule_spec tree, Carlos Falgueras García
      • Re: [PATCH 4/5, V2, nft] Simplify parser rule_spec tree, Pablo Neira Ayuso
        • Re: [PATCH 4/5, V2, nft] Simplify parser rule_spec tree, Carlos Falgueras García
    • [PATCH 5/5, V2, nft] Implement deleting rule by description, Carlos Falgueras García
      • Re: [PATCH 5/5, V2, nft] Implement deleting rule by description, Pablo Neira Ayuso
    • Re: [PATCH 1/5, V2, libnftnl] rule: Add const modifier to rule field of expression iterator, Pablo Neira Ayuso
      • [PATCH] rule: Constify rule iterators, Carlos Falgueras García
        • Re: [PATCH] rule: Constify rule iterators, Pablo Neira Ayuso
          • [PATCH, v2] Constify iterators, Carlos Falgueras García
            • Re: [PATCH, v2] Constify iterators, Pablo Neira Ayuso
      • [PATCH 1/4, V3, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
        • [PATCH 3/4, V3, nft] Simplify parser rule_spec tree, Carlos Falgueras García
          • Re: [PATCH 3/4, V3, nft] Simplify parser rule_spec tree, Pablo Neira Ayuso
        • [PATCH 2/4, V3, libnftnl] Implement rule comparison, Carlos Falgueras García
          • Re: [PATCH 2/4, V3, libnftnl] Implement rule comparison, Pablo Neira Ayuso
        • [PATCH 4/4, V3, nft] Implement deleting rule by description, Carlos Falgueras García
        • Re: [PATCH 1/4, V3, libnftnl] rule: Implement internal expression iterator, Pablo Neira Ayuso
          • Re: [PATCH 1/4, V3, libnftnl] rule: Implement internal expression iterator, Carlos Falgueras García
            • Re: [PATCH 1/4, V3, libnftnl] rule: Implement internal expression iterator, Pablo Neira Ayuso
• [PATCH nf-next v2] ipvs: use nf_ct_kill helper, Florian Westphal
  • Re: [PATCH nf-next v2] ipvs: use nf_ct_kill helper, Julian Anastasov
  • Re: [PATCH nf-next v2] ipvs: use nf_ct_kill helper, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2] ipvs: use nf_ct_kill helper, Simon Horman
• [PATCH libmnl] callback: mark cb_ctl_array 'const' in mnl_cb_run2(), Guillaume Nault
  • Re: [PATCH libmnl] callback: mark cb_ctl_array 'const' in mnl_cb_run2(), Pablo Neira Ayuso
• [PATCH v2] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Christophe Leroy
  • Re: [PATCH v2] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, Florian Westphal
  • Re: [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, kbuild test robot
  • Re: [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, kbuild test robot
    • Re: [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, Florian Westphal
      • Re: [kbuild-all] [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, Fengguang Wu
  • Re: [PATCH nf-next] netfilter: use_nf_conn_expires helper in more places, Pablo Neira Ayuso
• [PATCH nf-next] ipvs: use nf_ct_kill helper, Florian Westphal
  • Re: [PATCH nf-next] ipvs: use nf_ct_kill helper, Julian Anastasov
• [PATCH iptables] xtables-compat: fix comments listing, Pablo M. Bermudo Garay
  • Re: [PATCH iptables] xtables-compat: fix comments listing, Pablo Neira Ayuso
• [PATCH 1100/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1120/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1129/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1118/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1123/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1119/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1121/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1128/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1122/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1125/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1117/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1116/1285] Replace numeric parameter like 0444 with macro, Baole Ni
  • Re: [PATCH 1116/1285] Replace numeric parameter like 0444 with macro, Jan Engelhardt
    • Re: [PATCH 1116/1285] Replace numeric parameter like 0444 with macro, Jarod Wilson
• [PATCH 1127/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1124/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1130/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1126/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [PATCH 1115/1285] Replace numeric parameter like 0444 with macro, Baole Ni
  • Re: [PATCH 1115/1285] Replace numeric parameter like 0444 with macro, Eric W. Biederman
    • Re: [PATCH 1115/1285] Replace numeric parameter like 0444 with macro, Pavel Machek
      • Re: [PATCH 1115/1285] Replace numeric parameter like 0444 with macro, David Miller
• [PATCH 1099/1285] Replace numeric parameter like 0444 with macro, Baole Ni
• [stable, xtables] fix validation of jumps, Florian Westphal
  • [PATCH -stable 4.1.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
    • Re: [PATCH -stable 4.1.y] netfilter: x_tables: speed up jump target validation, Levin, Alexander
      • Re: [PATCH -stable 4.1.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
        • Re: [PATCH -stable 4.1.y] netfilter: x_tables: speed up jump target validation, Levin, Alexander
  • [PATCH -stable 3.18.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
  • [PATCH -stable 3.14.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
  • [PATCH -stable 4.4.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
  • [PATCH -stable 3.12.y] netfilter: x_tables: speed up jump target validation, Florian Westphal
• [PATCH libnftnl] src: don't set data_len to zero when returning pointers, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_rbtree: ignore inactive matching element with no descendants, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_rbtree: ignore inactive matching element with no descendants, Anders K. Pedersen
• [PATCH 3/3] netfilter: nat: don't assign a null snat rule to bridged traffic if no matching, fxp2001640163
  • Re: [PATCH 3/3] netfilter: nat: don't assign a null snat rule to bridged traffic if no matching, Florian Westphal
• [PATCH 2/3] netfilter: nat: snat created in route process just apply to routed traffic, fxp2001640163
  • Re: [PATCH 2/3] netfilter: nat: snat created in route process just apply to routed traffic, Florian Westphal
• [PATCH 1/3] netfilter: nat: update hash bucket if nat changed after ct confirmed, fxp2001640163
  • Re: [PATCH 1/3] netfilter: nat: update hash bucket if nat changed after ct confirmed, Florian Westphal
• [PATCH nf-next] netfilter: nf_dup4: remove redundant checksum recalculation, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nf_dup4: remove redundant checksum recalculation, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nf_dup4: remove redundant checksum recalculation, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_dup4: remove redundant checksum recalculation, Pablo Neira Ayuso
• [PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
  • Re: [PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Pablo Neira Ayuso
    • Re: [PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
      • Re: [PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Pablo Neira Ayuso
        • Re: [PATCH nf-next V2] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht, Liping Zhang
• [PATCH iptables] iptables-translate: add in/out ifname wildcard match translation to nft, Liping Zhang
  • Re: [PATCH iptables] iptables-translate: add in/out ifname wildcard match translation to nft, Pablo Neira Ayuso
• [PATCH RESEND nf] netfilter: avoid a race between nf_register_hook() and cleanup_net(), Michal Kubecek
  • Re: [PATCH RESEND nf] netfilter: avoid a race between nf_register_hook() and cleanup_net(), Eric W. Biederman
    • Re: [PATCH RESEND nf] netfilter: avoid a race between nf_register_hook() and cleanup_net(), Pablo Neira Ayuso
    • Re: [PATCH RESEND nf] netfilter: avoid a race between nf_register_hook() and cleanup_net(), Pablo Neira Ayuso
• NFQUEUE panic bug, Daniel Collins
  • Re: NFQUEUE panic bug, Florian Westphal
• [PATCH v4] doc: Complete documentation of statements, Shivani Bhardwaj
• [PATCH libnftnl v2] expr: nth: match every n packets, Laura Garcia Liebana
• [PATCH v2] netfilter: nft_nth: match every n packets, Laura Garcia Liebana
  • Re: [PATCH v2] netfilter: nft_nth: match every n packets, Florian Westphal
    • Re: [PATCH v2] netfilter: nft_nth: match every n packets, Laura Garcia
      • Re: [PATCH v2] netfilter: nft_nth: match every n packets, Florian Westphal
        • Re: [PATCH v2] netfilter: nft_nth: match every n packets, Pablo Neira Ayuso
          • Re: [PATCH v2] netfilter: nft_nth: match every n packets, Laura Garcia
            • Re: [PATCH v2] netfilter: nft_nth: match every n packets, Pablo Neira Ayuso
• Re: PROBLEM: TPROXY and DNAT broken (bisected to 079096f103fa), Eric Dumazet
  • <Possible follow-ups>
  • Re: PROBLEM: TPROXY and DNAT broken (bisected to 079096f103fa), Florian Westphal
• [PATCH nft] parser: compact list of rhs keyword expressions, Florian Westphal
  • Re: [PATCH nft] parser: compact list of rhs keyword expressions, Pablo Neira Ayuso
• [PATCH nft] parser_bison: keep map flag around when flags are specified, Pablo Neira Ayuso
• [RFC nft] meta: deprecate unqualified meta statements, Florian Westphal
  • Re: [RFC nft] meta: deprecate unqualified meta statements, Arturo Borrero Gonzalez
  • Re: [RFC nft] meta: deprecate unqualified meta statements, Pablo Neira Ayuso
• [nft PATCH 0/7] add payload set support for sub-byte sizes, Florian Westphal
  • [nft PATCH 3/7] evaluate: add support to set IPv6 non-byte header fields, Florian Westphal
    • Re: [nft PATCH 3/7] evaluate: add support to set IPv6 non-byte header fields, Pablo Neira Ayuso
      • Re: [nft PATCH 3/7] evaluate: add support to set IPv6 non-byte header fields, Florian Westphal
  • [nft PATCH 5/7] tests: ip6 dscp, flowlabel and ecn test cases, Florian Westphal
  • [nft PATCH 1/7] netlink: add __binop_adjust helper, Florian Westphal
  • [nft PATCH 4/7] netlink: decode payload statment, Florian Westphal
    • Re: [nft PATCH 4/7] netlink: decode payload statment, Pablo Neira Ayuso
  • [nft PATCH 6/7] netlink: make checksum fixup work with odd-sized header fields, Florian Westphal
  • [nft PATCH 7/7] tests: ip payload set support for ecn and dscp, Florian Westphal
  • [nft PATCH 2/7] payload: print base and raw values for unknown payloads, Florian Westphal
  • Re: [nft PATCH 0/7] add payload set support for sub-byte sizes, Pablo Neira Ayuso
    • Re: [nft PATCH 0/7] add payload set support for sub-byte sizes, Florian Westphal
• [PATCH iptables 1/2] include: xtables: fix struct definitions grepability, Pablo M. Bermudo Garay
  • [PATCH iptables v2 2/2] xtables-translate: fix issue with quotes, Pablo M. Bermudo Garay
    • Re: [PATCH iptables v2 2/2] xtables-translate: fix issue with quotes, Pablo Neira Ayuso
  • Re: [PATCH iptables 1/2] include: xtables: fix struct definitions grepability, Pablo Neira Ayuso
• [PATCH libnftnl] expr: nth: match every n packets, Laura Garcia Liebana
• [PATCH] netfilter: nft_nth: match every n packets, Laura Garcia Liebana
  • Re: [PATCH] netfilter: nft_nth: match every n packets, Pablo Neira Ayuso
• [PATCH] manpages: do not adjust reject-with type footnote indentation, Sami Kerola
  • Re: [PATCH] manpages: do not adjust reject-with type footnote indentation, Sami Kerola
    • Re: [PATCH] manpages: do not adjust reject-with type footnote indentation, Pablo Neira Ayuso
• nft_rbtree_lookup: BUG: unable to handle kernel NULL pointer dereference, Anders K. Pedersen
  • Re: nft_rbtree_lookup: BUG: unable to handle kernel NULL pointer dereference, Florian Westphal
    • Re: nft_rbtree_lookup: BUG: unable to handle kernel NULL pointer dereference, Anders K. Pedersen
• [NetDev] [ANNOUNCE] Netdev 1.2 updates (Tokyo, Japan, October 5-7), Hajime Tazaki
• [PATCH nf-next] netfilter: physdev: add missed blank, Hangbin Liu
  • Re: [PATCH nf-next] netfilter: physdev: add missed blank, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: s/MFT_REG32_01/NFT_REG32_01, Pablo Neira Ayuso
• [RFC] l2tp for nftables, Pablo Neira Ayuso
  • Re: [RFC] l2tp for nftables, Pablo Neira Ayuso
• [PATCH nft] xt: use struct xt_xlate_{mt,tg}_params, Pablo Neira Ayuso
• [PATCH iptables] src: introduce struct xt_xlate_{mt,tg}_params, Pablo Neira Ayuso
• [ISSUE] nftables: !=range doesn't really work, Xin Long
  • Re: [ISSUE] nftables: !=range doesn't really work, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_ct_h323: do not re-activate already expired timer, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nf_ct_h323: do not re-activate already expired timer, Pablo Neira Ayuso
• [PATCH 1/1] netfilter: Only need first 4 bytes to get l4proto ports, fgao
  • Re: [PATCH 1/1] netfilter: Only need first 4 bytes to get l4proto ports, Pablo Neira Ayuso
• [PATCH 00/25] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH 01/25] ipvs: count pre-established TCP states as active, Pablo Neira Ayuso
  • [PATCH 02/25] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Pablo Neira Ayuso
  • [PATCH 03/25] netfilter: cttimeout: unlink timeout obj again when hash resize happen, Pablo Neira Ayuso
  • [PATCH 04/25] netfilter: nf_ct_helper: unlink helper again when hash resize happen, Pablo Neira Ayuso
  • [PATCH 05/25] netfilter: conntrack: simplify early_drop, Pablo Neira Ayuso
  • [PATCH 06/25] netfilter: move nat hlist_head to nf_conn, Pablo Neira Ayuso
  • [PATCH 07/25] netfilter: nat: convert nat bysrc hash to rhashtable, Pablo Neira Ayuso
  • [PATCH 08/25] netfilter: physdev: physdev-is-out should not work with OUTPUT chain, Pablo Neira Ayuso
  • [PATCH 09/25] netfilter: nft_ct: make byte/packet expr more friendly, Pablo Neira Ayuso
  • [PATCH 10/25] netfilter: constify arg to is_dying/confirmed, Pablo Neira Ayuso
  • [PATCH 11/25] netfilter: nf_tables: get rid of possible_net_t from set and basechain, Pablo Neira Ayuso
  • [PATCH 13/25] netfilter: conntrack: protect early_drop by rcu read lock, Pablo Neira Ayuso
  • [PATCH 12/25] netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931, Pablo Neira Ayuso
  • [PATCH 14/25] netfilter: x_tables: speed up jump target validation, Pablo Neira Ayuso
  • [PATCH 15/25] netfilter: nft_ct: fix unpaired nf_connlabels_get/put call, Pablo Neira Ayuso
  • [PATCH 17/25] netfilter: nft_log: fix possible memory leak if log expr init fail, Pablo Neira Ayuso
  • [PATCH 16/25] netfilter: Add helper array register/unregister functions, Pablo Neira Ayuso
  • [PATCH 19/25] netfilter: nft_log: fix snaplen does not truncate packets, Pablo Neira Ayuso
  • [PATCH 18/25] netfilter: nft_log: check the validity of log level, Pablo Neira Ayuso
  • [PATCH 21/25] netfilter: conntrack: support a fixed size of 128 distinct labels, Pablo Neira Ayuso
  • [PATCH 20/25] netfilter: nf_tables: allow to filter out rules by table and chain, Pablo Neira Ayuso
  • [PATCH 23/25] netfilter: h323: Use mod_timer instead of set_expect_timeout, Pablo Neira Ayuso
  • [PATCH 22/25] netfilter: connlabels: move set helper to xt_connlabel, Pablo Neira Ayuso
  • [PATCH 24/25] netfilter: nft_compat: put back match/target module if init fail, Pablo Neira Ayuso
  • [PATCH 25/25] netfilter: nft_compat: fix crash when related match/target module is removed, Pablo Neira Ayuso
  • Re: [PATCH 00/25] Netfilter/IPVS updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/25] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
    • [PATCH 02/25] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Pablo Neira Ayuso
    • [PATCH 01/25] ipvs: count pre-established TCP states as active, Pablo Neira Ayuso
    • [PATCH 03/25] netfilter: cttimeout: unlink timeout obj again when hash resize happen, Pablo Neira Ayuso
    • [PATCH 04/25] netfilter: nf_ct_helper: unlink helper again when hash resize happen, Pablo Neira Ayuso
    • [PATCH 07/25] netfilter: nat: convert nat bysrc hash to rhashtable, Pablo Neira Ayuso
    • [PATCH 08/25] netfilter: physdev: physdev-is-out should not work with OUTPUT chain, Pablo Neira Ayuso
    • [PATCH 11/25] netfilter: nf_tables: get rid of possible_net_t from set and basechain, Pablo Neira Ayuso
    • [PATCH 16/25] netfilter: Add helper array register/unregister functions, Pablo Neira Ayuso
    • [PATCH 18/25] netfilter: nft_log: check the validity of log level, Pablo Neira Ayuso
    • [PATCH 24/25] netfilter: nft_compat: put back match/target module if init fail, Pablo Neira Ayuso
    • [PATCH 25/25] netfilter: nft_compat: fix crash when related match/target module is removed, Pablo Neira Ayuso
    • [PATCH 17/25] netfilter: nft_log: fix possible memory leak if log expr init fail, Pablo Neira Ayuso
    • [PATCH 23/25] netfilter: h323: Use mod_timer instead of set_expect_timeout, Pablo Neira Ayuso
    • [PATCH 22/25] netfilter: connlabels: move set helper to xt_connlabel, Pablo Neira Ayuso
    • [PATCH 10/25] netfilter: constify arg to is_dying/confirmed, Pablo Neira Ayuso
    • [PATCH 21/25] netfilter: conntrack: support a fixed size of 128 distinct labels, Pablo Neira Ayuso
    • [PATCH 09/25] netfilter: nft_ct: make byte/packet expr more friendly, Pablo Neira Ayuso
    • [PATCH 20/25] netfilter: nf_tables: allow to filter out rules by table and chain, Pablo Neira Ayuso
    • [PATCH 19/25] netfilter: nft_log: fix snaplen does not truncate packets, Pablo Neira Ayuso
    • [PATCH 06/25] netfilter: move nat hlist_head to nf_conn, Pablo Neira Ayuso
    • [PATCH 15/25] netfilter: nft_ct: fix unpaired nf_connlabels_get/put call, Pablo Neira Ayuso
    • [PATCH 05/25] netfilter: conntrack: simplify early_drop, Pablo Neira Ayuso
    • [PATCH 14/25] netfilter: x_tables: speed up jump target validation, Pablo Neira Ayuso
    • [PATCH 12/25] netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931, Pablo Neira Ayuso
    • [PATCH 13/25] netfilter: conntrack: protect early_drop by rcu read lock, Pablo Neira Ayuso
• [PATCH nf-next 1/2] netfilter: nft_compat: put back match/target module if init fail, Liping Zhang