Linux Netfilter / IP Tables Devel

• Date Index

• Re: Multi-thread udp 4.7 regression, bisected to 71d8c47fc653, (continued)
  • Re: Multi-thread udp 4.7 regression, bisected to 71d8c47fc653, Pablo Neira Ayuso
    • Re: Multi-thread udp 4.7 regression, bisected to 71d8c47fc653, Marc Dionne
      • Re: Multi-thread udp 4.7 regression, bisected to 71d8c47fc653, Pablo Neira Ayuso
• [PATCH nf-next 0/2] netfilter: nat: simplify & convert bysrc hash to rhashtable, Florian Westphal
  • [PATCH nf-next 1/2] netfilter: move nat hlist_head to nf_conn, Florian Westphal
    • Re: [PATCH nf-next 1/2] netfilter: move nat hlist_head to nf_conn, Pablo Neira Ayuso
  • [PATCH nf-next 2/6] netfilter: nat: convert nat bysrc hash to rhashtable, Florian Westphal
    • Re: [PATCH nf-next 2/6] netfilter: nat: convert nat bysrc hash to rhashtable, Pablo Neira Ayuso
• [PATCH nft 1/3] meta: add random and probability match, Florian Westphal
  • [PATCH nft 1/3] meta: add random expression key, Florian Westphal
    • Re: [PATCH nft 1/3] meta: add random expression key, Pablo Neira Ayuso
      • Re: [PATCH nft 1/3] meta: add random expression key, Florian Westphal
  • [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Florian Westphal
    • Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Pablo Neira Ayuso
      • Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Florian Westphal
        • Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Pablo Neira Ayuso
          • Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Florian Westphal
            • Re: [PATCH nft 2/3] meta: add short-hand mnemonic for probalistic matching, Pablo Neira Ayuso
  • [PATCH nft 3/3] netlink_delinearize, meta: show meta prandom <= value as probability mnemonic, Florian Westphal
• libxtables backward compatibility, Neal P. Murphy
  • Re: libxtables backward compatibility, Jan Engelhardt
    • Re: libxtables backward compatibility, Neal P. Murphy
      • Re: libxtables backward compatibility, Jan Engelhardt
        • Re: libxtables backward compatibility, Neal P. Murphy
• [PATCH] fix off-by-one in DecodeQ931, Toby DiPasquale
  • Re: [PATCH] fix off-by-one in DecodeQ931, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] fix off-by-one in DecodeQ931, Toby DiPasquale
    • Re: [PATCH] fix off-by-one in DecodeQ931, Pablo Neira Ayuso
• [PATCH -next] netfilter: conntrack: simplify early_drop, Florian Westphal
  • Re: [PATCH -next] netfilter: conntrack: simplify early_drop, Pablo Neira Ayuso
• [PATCH libnetfilter_queue] src: check result of malloc when creating queue, lists
  • Re: [PATCH libnetfilter_queue] src: check result of malloc when creating queue, Florian Westphal
• [PATCH V2,nf 0/3] netfilter: conntrack: fix race condition associated with hash resize, Liping Zhang
  • [PATCH V2,nf 2/3] netfilter: cttimeout: unlink timeout obj again when hash resize happen, Liping Zhang
  • [PATCH V2,nf 3/3] netfilter: nf_ct_helper: unlink helper again when hash resize happen, Liping Zhang
  • [PATCH V2,nf 1/3] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Liping Zhang
  • Re: [PATCH V2,nf 0/3] netfilter: conntrack: fix race condition associated with hash resize, Pablo Neira Ayuso
• [PATCH 1/1 rev. 1] nft: configure.ac: Replace magic dblatex dep., Nicholas Vinson
  • Re: [PATCH 1/1 rev. 1] nft: configure.ac: Replace magic dblatex dep., Nick Vinson
    • Re: [PATCH 1/1 rev. 1] nft: configure.ac: Replace magic dblatex dep., Pablo Neira Ayuso
• Re: nftables: Dynamically updating sets gives syntax error, Anders K. Pedersen
  • Re: nftables: Dynamically updating sets gives syntax error, Pablo Neira Ayuso
    • Re: nftables: Dynamically updating sets gives syntax error, Anders K. Pedersen
• [PATCH nf 0/3] netfilter: conntrack: fix race condition associated with hash resize, Liping Zhang
  • [PATCH nf 2/3] netfilter: cttimeout: unlink timeout obj again when hash resize happen, Liping Zhang
  • [PATCH nf 3/3] netfilter: nf_ct_helper: unlink helper again when hash resize happen, Liping Zhang
  • [PATCH nf 1/3] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Liping Zhang
    • Re: [PATCH nf 1/3] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Florian Westphal
      • Re: [PATCH nf 1/3] netfilter: conntrack: fix race between nf_conntrack proc read and hash resize, Liping Zhang
• [ANNOUNCE] libmnl 1.0.4 release, Pablo Neira Ayuso
• [PATCH libmnl] src: cleanup function definitions, Pablo Neira Ayuso
• [PATCH] netfilter: nf_log: fix error on write NONE to logger choice sysctl, Pavel Tikhomirov
  • [PATCH v2] netfilter: nf_log: fix error on write NONE to logger choice sysctl, Pavel Tikhomirov
    • Re: [PATCH v2] netfilter: nf_log: fix error on write NONE to logger choice sysctl, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, chleroy
  • <Possible follow-ups>
  • [PATCH] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Christophe Leroy
    • Re: [PATCH] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Liping Zhang
      • Re: [PATCH] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Christophe Leroy
        • Re: [PATCH] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Liping Zhang
• [PATCH nf-next 0/3] Compact netfilter hooks list, Aaron Conole
  • [PATCH nf-next 2/3] netfilter: call nf_hook_state_init with rcu_read_lock held, Aaron Conole
  • [PATCH nf-next 1/3] netfilter: bridge: add and use br_nf_hook_thresh, Aaron Conole
  • [PATCH nf-next 3/3] netfilter: replace list_head with single linked list, Aaron Conole
    • Re: [PATCH nf-next 3/3] netfilter: replace list_head with single linked list, Florian Westphal
      • Re: [PATCH nf-next 3/3] netfilter: replace list_head with single linked list, Pablo Neira Ayuso
      • Re: [PATCH nf-next 3/3] netfilter: replace list_head with single linked list, Aaron Conole
• [PATCH] netfilter: Remove references to obsolete CONFIG_IP_ROUTE_FWMARK, Moritz Sichert
  • Re: [PATCH] netfilter: Remove references to obsolete CONFIG_IP_ROUTE_FWMARK, Pablo Neira Ayuso
• [ANNOUNCE] Statement of netfilter project on GPL enforcement, Pablo Neira Ayuso
• [nft PATCH 1/3 v3] include: cache ip_tables.h, ip6_tables.h, arp_tables.h and ebtables.h, Pablo M. Bermudo Garay
  • [nft PATCH 2/3 v3] src: expose delinearize/linearize structures and stmt_error(), Pablo M. Bermudo Garay
  • [nft PATCH 3/3 v3] src: add xt compat support, Pablo M. Bermudo Garay
    • Re: [nft PATCH 3/3 v3] src: add xt compat support, Pablo Neira Ayuso
• Advice requested: de-masquerading from a qdisc?, Kevin Darbyshire-Bryant
• [PATCH] iptables: extensions: libxt_ecn: Add translation to nft, rodanber
  • Re: [PATCH] iptables: extensions: libxt_ecn: Add translation to nft, Arturo Borrero Gonzalez
  • Re: [PATCH] iptables: extensions: libxt_ecn: Add translation to nft, Arturo Borrero Gonzalez
    • Re: [PATCH] iptables: extensions: libxt_ecn: Add translation to nft, Roberto García
  • <Possible follow-ups>
  • [PATCH] iptables: extensions: libxt_ecn: Add translation to nft, rodanber
    • Re: [PATCH] iptables: extensions: libxt_ecn: Add translation to nft, Arturo Borrero Gonzalez
  • [PATCH] iptables: extensions: libxt_ecn: Add translation to nft, rodanber
    • Re: [PATCH] iptables: extensions: libxt_ecn: Add translation to nft, Roberto García
      • Re: [PATCH] iptables: extensions: libxt_ecn: Add translation to nft, Pablo Neira Ayuso
• [PATCH net] openvswitch: fix conntrack netlink event delivery, Samuel Gauthier
  • Re: [ovs-dev] [PATCH net] openvswitch: fix conntrack netlink event delivery, Joe Stringer
    • [PATCH net v2] openvswitch: fix conntrack netlink event delivery, Samuel Gauthier
      • Re: [ovs-dev] [PATCH net v2] openvswitch: fix conntrack netlink event delivery, Joe Stringer
      • Re: [PATCH net v2] openvswitch: fix conntrack netlink event delivery, David Miller
• [PATCH 1/2 libnftnl] set: Add new attribute into 'set' to store user data, Carlos Falgueras García
  • [PATCH 2/2 libnftnl] tests: Check set user data, Carlos Falgueras García
    • Re: [PATCH 2/2 libnftnl] tests: Check set user data, Pablo Neira Ayuso
  • Re: [PATCH 1/2 libnftnl] set: Add new attribute into 'set' to store user data, Pablo Neira Ayuso
• [PATCH libnftnl] set: Fix nftnl_set_set_str, Carlos Falgueras García
  • Re: [PATCH libnftnl] set: Fix nftnl_set_set_str, Carlos Falgueras García
  • Re: [PATCH libnftnl] set: Fix nftnl_set_set_str, Pablo Neira Ayuso
    • [PATCH libnfntl v2] set: Fix nftnl_set_set_str, Carlos Falgueras García
    • [PATCH libnftnl] Fix string length calculations, Carlos Falgueras García
      • Re: [PATCH libnftnl] Fix string length calculations, Pablo Neira Ayuso
        • Re: [PATCH libnftnl] Fix string length calculations, Carlos Falgueras García
          • Re: [PATCH libnftnl] Fix string length calculations, Pablo Neira Ayuso
            • [PATCH 1/2 libnfntl] Fix nftnl_*_set_str, Carlos Falgueras García
              • [PATCH 2/2 libnfntl] Fix nftnl_*_get to set data_len, Carlos Falgueras García
                • Re: [PATCH 2/2 libnfntl] Fix nftnl_*_get to set data_len, Pablo Neira Ayuso
                  • [PATCH v2, libnftnl] Fix nftnl_*_get to set data_len, Carlos Falgueras García
                    • Re: [PATCH v2, libnftnl] Fix nftnl_*_get to set data_len, Pablo Neira Ayuso
                      • [PATCH v3, libnftnl] Fix nftnl_*_get to set data_len, Carlos Falgueras García
                        • Re: [PATCH v3, libnftnl] Fix nftnl_*_get to set data_len, Pablo Neira Ayuso
                • Re: [PATCH 2/2 libnfntl] Fix nftnl_*_get to set data_len, Pablo Neira Ayuso
                  • Re: [PATCH 2/2 libnfntl] Fix nftnl_*_get to set data_len, Pablo Neira Ayuso
              • Re: [PATCH 1/2 libnfntl] Fix nftnl_*_set_str, Pablo Neira Ayuso
    • Re: [PATCH libnftnl] set: Fix nftnl_set_set_str, Carlos Falgueras García
• [PATCH iptables] extensions: libipt_realm: fix order of mask and id when do nft translation, Liping Zhang
  • Re: [PATCH iptables] extensions: libipt_realm: fix order of mask and id when do nft translation, Pablo Neira Ayuso
• [PATCH 1/1] nft: configure.ac: Replace magic dblatex dep., Nicholas Vinson
  • Re: [PATCH 1/1] nft: configure.ac: Replace magic dblatex dep., Pablo Neira Ayuso
    • Re: [PATCH 1/1] nft: configure.ac: Replace magic dblatex dep., Nick Vinson
• [PATCH v3] netfilter/nflog: nflog-range does not truncate packets (userspace), Vishwanath Pai
  • Re: [PATCH v3] netfilter/nflog: nflog-range does not truncate packets (userspace), Pablo Neira Ayuso
• [PATCH] netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF, Joe Perches
• [PATCH 1/1] extensions: added AR substitution, Jordan Yelloz
  • Re: [PATCH 1/1] extensions: added AR substitution, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: x_tables: simplify ip{6}table_mangle_hook(), Pablo Neira Ayuso
• [PATCH v5] xtables: Add an interval option for xtables lock wait, Subash Abhinov Kasiviswanathan
  • Re: [PATCH v5] xtables: Add an interval option for xtables lock wait, Pablo Neira Ayuso
    • Re: [PATCH v5] xtables: Add an interval option for xtables lock wait, subashab
      • Re: [PATCH v5] xtables: Add an interval option for xtables lock wait, Pablo Neira Ayuso
• [nft PATCH] tests: shell: run-tests.sh: use src/nft binary by default, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests: shell: run-tests.sh: use src/nft binary by default, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: get rid of NFT_BASECHAIN_DISABLED, Pablo Neira Ayuso
• nft shell tests, Pablo Neira Ayuso
  • Re: nft shell tests, Arturo Borrero Gonzalez
    • Re: nft shell tests, Pablo Neira Ayuso
• [nf-next PATCH v5] netfilter: nf_tables: add support for inverted logic in nft_lookup, Arturo Borrero Gonzalez
  • Re: [nf-next PATCH v5] netfilter: nf_tables: add support for inverted logic in nft_lookup, Pablo Neira Ayuso
• [PATCH] ipset: Backports for the nla_put_net64() API changes, Neutron Soutmun
  • Re: [PATCH] ipset: Backports for the nla_put_net64() API changes, Pablo Neira Ayuso
    • Re: [PATCH] ipset: Backports for the nla_put_net64() API changes, Neutron Soutmun
      • Re: [PATCH] ipset: Backports for the nla_put_net64() API changes, Pablo Neira Ayuso
        • Re: [PATCH] ipset: Backports for the nla_put_net64() API changes, Neutron Soutmun
          • Re: [PATCH] ipset: Backports for the nla_put_net64() API changes, Pablo Neira Ayuso
            • Re: [PATCH] ipset: Backports for the nla_put_net64() API changes, Jozsef Kadlecsik
  • Re: [PATCH] ipset: Backports for the nla_put_net64() API changes, Jozsef Kadlecsik
• [RFC nf-next 0/3] Compact netfilter hooks list, Aaron Conole
  • [RFC nf-next 1/3] netfilter: bridge: add and use br_nf_hook_thresh, Aaron Conole
    • Re: [RFC nf-next 1/3] netfilter: bridge: add and use br_nf_hook_thresh, Aaron Conole
  • [RFC nf-next 2/3] netfilter: call nf_hook_state_init with rcu_read_lock held, Aaron Conole
  • [RFC nf-next 3/3] netfilter: replace list_head with single linked list, Aaron Conole
• [PATCH iptables] configure: Fix assignment statement, Shivani Bhardwaj
  • Re: [PATCH iptables] configure: Fix assignment statement, Florian Westphal
• [PATCH iptables] iptables-compat: use nft built-in comments support, Pablo M. Bermudo Garay
  • Re: [PATCH iptables] iptables-compat: use nft built-in comments support, Pablo Neira Ayuso
• [PATCH] nft: Add support for inverted bitwise value list, Laura Garcia Liebana
  • Re: [PATCH] nft: Add support for inverted bitwise value list, Florian Westphal
    • Re: [PATCH] nft: Add support for inverted bitwise value list, Jan Engelhardt
      • Re: [PATCH] nft: Add support for inverted bitwise value list, Florian Westphal
  • Re: [PATCH] nft: Add support for inverted bitwise value list, Pablo Neira Ayuso
• [PATCH iptables] configure: Fix logic to show connlabel support, Shivani Bhardwaj
  • Re: [PATCH iptables] configure: Fix logic to show connlabel support, Florian Westphal
    • Re: [PATCH iptables] configure: Fix logic to show connlabel support, Shivani Bhardwaj
• [PATCH nft] tests: shell: cover transactions via nft -f using flat syntax, Pablo Neira Ayuso
  • Re: [PATCH nft] tests: shell: cover transactions via nft -f using flat syntax, Arturo Borrero Gonzalez
    • Re: [PATCH nft] tests: shell: cover transactions via nft -f using flat syntax, Pablo Neira Ayuso
• [PATCH -next v3] netfilter: conntrack: allow increasing bucket size via sysctl too, Florian Westphal
  • Re: [PATCH -next v3] netfilter: conntrack: allow increasing bucket size via sysctl too, Pablo Neira Ayuso
• [PATCH nf-next 1/6] netfilter: nf_tables: add generic macros to check for generation mask, Pablo Neira Ayuso
  • [PATCH nf-next 2/6] netfilter: nf_tables: add generation mask to tables, Pablo Neira Ayuso
    • Re: [PATCH nf-next 2/6] netfilter: nf_tables: add generation mask to tables, Pablo Neira Ayuso
  • [PATCH nf-next 3/6] netfilter: nf_tables: add generation mask to chains, Pablo Neira Ayuso
  • [PATCH nf-next 4/6] netfilter: nf_tables: add generation mask to sets, Pablo Neira Ayuso
  • [PATCH nf-next 5/6] netfilter: nft_rbtree: check for next generation when deactivating elements, Pablo Neira Ayuso
  • [PATCH nf-next 6/6] netfilter: nft_hash: support deletion of inactive elements, Pablo Neira Ayuso
• [PATCH nft] segtree: don't check for overlaps if set definition is empty, Pablo Neira Ayuso
• [ANNOUNCE] Suricata meets Netfilter Conference on 27th June in Amsterdam, Netherlands, Pablo Neira Ayuso
• [stable] netfilter fixes for CVE-2016-3134, Ben Hutchings
  • Re: [stable] netfilter fixes for CVE-2016-3134, Greg KH
  • Re: [stable] netfilter fixes for CVE-2016-3134, Willy Tarreau
• [PATCH] iptables: extensions: libxt_MARK: Fix translation of --set-xmark option, rodanber
  • Re: [PATCH] iptables: extensions: libxt_MARK: Fix translation of --set-xmark option, Arturo Borrero Gonzalez
  • Re: [PATCH] iptables: extensions: libxt_MARK: Fix translation of --set-xmark option, Florian Westphal
    • Re: [PATCH] iptables: extensions: libxt_MARK: Fix translation of --set-xmark option, Roberto García Calero
  • Re: [PATCH] iptables: extensions: libxt_MARK: Fix translation of --set-xmark option, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] iptables: extensions: libxt_MARK: Fix translation of --set-xmark option, rodanber
• [PATCH] iptables: extensions: libxt_MARK: Add translation for revision 1 to nft, rodanber
  • Re: [PATCH] iptables: extensions: libxt_MARK: Add translation for revision 1 to nft, Arturo Borrero Gonzalez
  • Re: [PATCH] iptables: extensions: libxt_MARK: Add translation for revision 1 to nft, Pablo Neira Ayuso
• [PATCH v2 2/2] netfilter/nflog: nflog-range does not truncate packets (userspace), Vishwanath Pai
  • Re: [PATCH v2 2/2] netfilter/nflog: nflog-range does not truncate packets (userspace), Pablo Neira Ayuso
• [PATCH v2 1/2] netfilter/nflog: nflog-range does not truncate packets, Vishwanath Pai
  • Re: [PATCH v2 1/2] netfilter/nflog: nflog-range does not truncate packets, Pablo Neira Ayuso
• [PATCH -next v2] netfilter: conntrack: allow increasing bucket size via sysctl too, Florian Westphal
  • Re: [PATCH -next v2] netfilter: conntrack: allow increasing bucket size via sysctl too, Liping Zhang
• Linux Module based on netfilter hooks, Salis Joshi
• [PATCH iptables] configure: Remove flex check warning, Shivani Bhardwaj
  • Re: [PATCH iptables] configure: Remove flex check warning, Pablo Neira Ayuso
• [PATCH conntrack-tools] configure: Remove flex check warning, Shivani Bhardwaj
  • Re: [PATCH conntrack-tools] configure: Remove flex check warning, Pablo Neira Ayuso
• [PATCHv2] extensions: libxt_conntrack: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv2] extensions: libxt_conntrack: Add translation to nft, Pablo Neira Ayuso
• [PACTH nf-next] netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCP, Liping Zhang
  • Re: [PACTH nf-next] netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCP, Marcelo Ricardo Leitner
    • Re: [PACTH nf-next] netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCP, Liping Zhang
      • Re: [PACTH nf-next] netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCP, Marcelo Ricardo Leitner
        • Re: [PACTH nf-next] netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCP, Pablo Neira Ayuso
  • Re: [PACTH nf-next] netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCP, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix memory leak if expr init fails, Liping Zhang
  • Re: [PATCH nf] netfilter: nf_tables: fix memory leak if expr init fails, Pablo Neira Ayuso
• [PATCH libnetfilter_queue] src: make nfq_open_nfnl thread-safe, Florian Westphal
  • Re: [PATCH libnetfilter_queue] src: make nfq_open_nfnl thread-safe, Pablo Neira Ayuso
    • Re: [PATCH libnetfilter_queue] src: make nfq_open_nfnl thread-safe, Pablo Neira Ayuso
      • Re: [PATCH libnetfilter_queue] src: make nfq_open_nfnl thread-safe, Florian Westphal
        • Re: [PATCH libnetfilter_queue] src: make nfq_open_nfnl thread-safe, Pablo Neira Ayuso
• [PATCH libnftnl, v2] fix some error checking in parser functions, Carlos Falgueras García
  • Re: [PATCH libnftnl, v2] fix some error checking in parser functions, Pablo Neira Ayuso
    • Re: [PATCH libnftnl, v2] fix some error checking in parser functions, Pablo Neira Ayuso
• [PATCH iptables] libxt_iprange: remove extra space in translation, Pablo M. Bermudo Garay
  • Re: [PATCH iptables] libxt_iprange: remove extra space in translation, Pablo Neira Ayuso
• [PATCH conntrack-tools] configure: Fix flex version check, Shivani Bhardwaj
  • Re: [PATCH conntrack-tools] configure: Fix flex version check, Pablo Neira Ayuso
    • Re: [PATCH conntrack-tools] configure: Fix flex version check, Shivani Bhardwaj
      • Re: [PATCH conntrack-tools] configure: Fix flex version check, Pablo Neira Ayuso
• [PATCH nft] configure: Show flex version check, Shivani Bhardwaj
• [PATCH iptables] configure: Fix logic for flex version check, Shivani Bhardwaj
• [PATCH] iptables: extensions: libxt_CONNMARK: Add translation to nft, rodanber
  • Re: [PATCH] iptables: extensions: libxt_CONNMARK: Add translation to nft, Arturo Borrero Gonzalez
  • Re: [PATCH] iptables: extensions: libxt_CONNMARK: Add translation to nft, Pablo Neira Ayuso
• [PATCH 1/1] extensions: NETMAP: fix iptables-save output, Florian Westphal
• [PATCH] netfilter: xt_SYNPROXY: include missing <linux/types.h>, Pablo Neira Ayuso
• [PATCH nf] netfilter: add missing xt_SYNPROXY.h header to Kbuild, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: add missing xt_SYNPROXY.h header to Kbuild, kbuild test robot
• [PATCH] configure: Fix logic for flex version check, Shivani Bhardwaj
  • Re: [PATCH] configure: Fix logic for flex version check, Pablo Neira Ayuso
• rfc: netfilter: Unhide FWINV macro arguments ?, Joe Perches
  • Re: rfc: netfilter: Unhide FWINV macro arguments ?, Pablo Neira Ayuso
    • Re: rfc: netfilter: Unhide FWINV macro arguments ?, Joe Perches
• Implicit flow tables can't be listed, Florian Westphal
  • Re: Implicit flow tables can't be listed, Pablo Neira Ayuso
    • Re: Implicit flow tables can't be listed, Florian Westphal
      • Re: Implicit flow tables can't be listed, Pablo Neira Ayuso
• [PATCH 1/3 libnftnl] chain: Fix bug. Check correct attribute, Carlos Falgueras García
  • [PATCH 3/3 libnftnl] Consolidate setters, Carlos Falgueras García
  • [PATCH 2/3 libnftnl] fix some error checking in parser functions, Carlos Falgueras García
    • Re: [PATCH 2/3 libnftnl] fix some error checking in parser functions, Pablo Neira Ayuso
  • Re: [PATCH 1/3 libnftnl] chain: Fix bug. Check correct attribute, Pablo Neira Ayuso
• "header-y += xt_SYNPROXY.h" is missing in include/uapi/linux/netfilter/Kbuild, Matt Whitlock
• [PATCH] bridge: netfilter: spanning tree: Add masked_ether_addr_equal and neatening, Joe Perches
  • Re: [PATCH] bridge: netfilter: spanning tree: Add masked_ether_addr_equal and neatening, Joe Perches
  • Re: [PATCH] bridge: netfilter: spanning tree: Add masked_ether_addr_equal and neatening, Pablo Neira Ayuso
    • Re: [PATCH] bridge: netfilter: spanning tree: Add masked_ether_addr_equal and neatening, Joe Perches
      • Re: [PATCH] bridge: netfilter: spanning tree: Add masked_ether_addr_equal and neatening, Pablo Neira Ayuso
        • Re: [PATCH] bridge: netfilter: spanning tree: Add masked_ether_addr_equal and neatening, Pablo Neira Ayuso
          • [PATCH] etherdevice.h & bridge: netfilter: Add and use ether_addr_equal_masked, Joe Perches
            • Re: [PATCH] etherdevice.h & bridge: netfilter: Add and use ether_addr_equal_masked, David Miller
              • Re: [PATCH] etherdevice.h & bridge: netfilter: Add and use ether_addr_equal_masked, Pablo Neira Ayuso
• [PATCH nft] src: use new definitions from libnftnl, Pablo Neira Ayuso
• [PATCH v4] xtables: Add an interval option for xtables lock wait, Subash Abhinov Kasiviswanathan
  • Re: [PATCH v4] xtables: Add an interval option for xtables lock wait, Pablo Neira Ayuso
    • Re: [PATCH v4] xtables: Add an interval option for xtables lock wait, subashab
• [PATCH V3] net: Allow xt_owner in any user namespace, Kevin Cernekee
  • Re: [PATCH V3] net: Allow xt_owner in any user namespace, Pablo Neira Ayuso
• [PATCH] libipt_NETMAP: Avoid listing 32 bit mask and fix tests, Shivani Bhardwaj
  • Re: [PATCH] libipt_NETMAP: Avoid listing 32 bit mask and fix tests, Pablo Neira Ayuso
    • Re: [PATCH] libipt_NETMAP: Avoid listing 32 bit mask and fix tests, Florian Westphal
• [PATCH] extensions: libxt_conntrack: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH] extensions: libxt_conntrack: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_conntrack: Add translation to nft, Laura Garcia
• Re: [PATCH] netfilter: fix buffer null termination, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: fix buffer null termination, Kishan Sandeep
    • Re: [PATCH] netfilter: fix buffer null termination, Pablo Neira Ayuso
• [PATCH v2 0/5] ipvs: fix backup sync daemon with IPv6, and minor updates, Quentin Armitage
  • [PATCH v2 5/5] ipvs: log additional sync daemon parameters, Quentin Armitage
  • [PATCH v2 4/5] ipvs: Lock socket before setting SK_CAN_REUSE, Quentin Armitage
  • [PATCH v2 3/5] ipvs: Don't check result < 0 after setting result = 0, Quentin Armitage
  • [PATCH v2 2/5] ipvs: Stop calling __dev_get_by_name() repeatedly when starting sync daemon, Quentin Armitage
  • [PATCH v2 1/5] ipvs: Enable setting IPv6 multicast address for ipvs sync daemon backup, Quentin Armitage
  • Re: [PATCH v2 0/5] ipvs: fix backup sync daemon with IPv6, and minor updates, Julian Anastasov
    • Message not available
      • Re: [PATCH v2 0/5] ipvs: fix backup sync daemon with IPv6, and minor updates, Julian Anastasov
  • [PATCH v3 0/4] ipvs: fix backup sync daemon with IPv6, and minor updates, Quentin Armitage
    • [PATCH v3 1/4] ipvs: Enable setting IPv6 multicast address for ipvs, Quentin Armitage
    • [PATCH v3 4/4] ipvs: log additional sync daemon parameters, Quentin Armitage
    • [PATCH v3 3/4] ipvs: Don't check result < 0 after setting result = 0, Quentin Armitage
    • [PATCH v3 2/4] ipvs: Stop calling __dev_get_by_name() repeatedly when starting sync daemon, Quentin Armitage
    • Re: [PATCH v3 0/4] ipvs: fix backup sync daemon with IPv6, and minor updates, Julian Anastasov
      • [PATCH net-next v4 1/3] ipvs: Stop calling __dev_get_by_name() repeatedly when starting sync daemon, Quentin Armitage
        • [PATCH net-next v4 3/3] ipvs: log additional sync daemon parameters, Quentin Armitage
        • [PATCH net-next v4 2/3] ipvs: Don't check result < 0 after setting result = 0, Quentin Armitage
      • [PATCH v4 net] ipvs: fix bind to link-local mcast IPv6 address in backup, Quentin Armitage
        • Re: [PATCH v4 net] ipvs: fix bind to link-local mcast IPv6 address in backup, Julian Anastasov
          • Re: [PATCH v4 net] ipvs: fix bind to link-local mcast IPv6 address in backup, Simon Horman
• [PATCH libnftnl 1/9] src: get rid of aliases, Pablo Neira Ayuso
  • [PATCH libnftnl 5/9] expr: data_reg: get rid of leftover perror() calls, Pablo Neira Ayuso
  • [PATCH libnftnl 2/9] src: assert when setting unknown attributes, Pablo Neira Ayuso
  • [PATCH libnftnl 6/9] src: simplify unsetters, Pablo Neira Ayuso
  • [PATCH libnftnl 7/9] src: check for flags before releasing attributes, Pablo Neira Ayuso
  • [PATCH libnftnl 9/9] chain: dynamically allocate name, Pablo Neira Ayuso
  • [PATCH libnftnl 3/9] src: return value on setters that internally allocate memory, Pablo Neira Ayuso
  • [PATCH libnftnl 8/9] tests: shuffle values that are injected, Pablo Neira Ayuso
  • [PATCH libnftnl 4/9] src: check for strdup() errors from setters and parsers, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: fix a wrong check to skip the inactive rules, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nf_tables: fix a wrong check to skip the inactive rules, Pablo Neira Ayuso
• [HEADS UP] scheduled downtime for netfilter.org, Pablo Neira Ayuso
• [PATCH 0/5] ipvs: fix backup sync daemon with IPv6, and minor updates, Quentin Armitage
  • [PATCH 1/5] ipvs: Enable setting IPv6 multicast address for ipvs sync daemon backup, Quentin Armitage
  • [PATCH 2/5] ipvs: Stop calling __dev_get_by_name() repeatedly when starting sync daemon, Quentin Armitage
    • Re: [PATCH 2/5] ipvs: Stop calling __dev_get_by_name() repeatedly when starting sync daemon, kbuild test robot
  • [PATCH 4/5] ipvs: Lock socket before setting SK_CAN_REUSE, Quentin Armitage
    • Re: [PATCH 4/5] ipvs: Lock socket before setting SK_CAN_REUSE, Eric Dumazet
      • Re: [PATCH 4/5] ipvs: Lock socket before setting SK_CAN_REUSE, Eric Dumazet
  • [PATCH 5/5] ipvs: log additional sync daemon parameters, Quentin Armitage
  • [PATCH 3/5] ipvs: Don't check result < 0 after setting result = 0, Quentin Armitage
• [PATCH V2] net: Allow xt_owner in any user namespace, Kevin Cernekee
  • Re: [PATCH V2] net: Allow xt_owner in any user namespace, Eric W. Biederman
  • Re: [PATCH V2] net: Allow xt_owner in any user namespace, Florian Westphal
    • Re: [PATCH V2] net: Allow xt_owner in any user namespace, Eric Dumazet
    • Re: [PATCH V2] net: Allow xt_owner in any user namespace, Florian Westphal
    • Re: [PATCH V2] net: Allow xt_owner in any user namespace, Eric W. Biederman
      • Re: [PATCH V2] net: Allow xt_owner in any user namespace, Pablo Neira Ayuso
        • Re: [PATCH V2] net: Allow xt_owner in any user namespace, Eric W. Biederman
• [PATCH nft] tests: shell: add endless jump loop tests, Liping Zhang
  • Re: [PATCH nft] tests: shell: add endless jump loop tests, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: move zone info into struct nf_conn, Florian Westphal
  • Re: [PATCH nf-next] netfilter: move zone info into struct nf_conn, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_log: Remove NULL check, Shivani Bhardwaj
  • Re: [PATCH nf-next] netfilter: nf_log: Remove NULL check, Pablo Neira Ayuso
• [nft PATCH] tests/shell: cleanup tempfile handling in testcases/sets/cache_handling_0, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests/shell: cleanup tempfile handling in testcases/sets/cache_handling_0, Pablo Neira Ayuso
• [nft PATCH] tests/shell: delete unused variable in run-tests.sh, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests/shell: delete unused variable in run-tests.sh, Pablo Neira Ayuso
• [PATCH nft] tests: shell: make testcases which using tcp/udp port more rubost, Liping Zhang
  • Re: [PATCH nft] tests: shell: make testcases which using tcp/udp port more rubost, Arturo Borrero Gonzalez
    • Re: [PATCH nft] tests: shell: make testcases which using tcp/udp port more rubost, Pablo Neira Ayuso
• [PATCH nf-next 0/3] netfilter: fix a endless jump loop bug, Liping Zhang
  • [PATCH nf-next 1/3] netfilter: nf_tables: fix wrong check of NFT_SET_MAP in nf_tables_bind_set, Liping Zhang
    • Re: [PATCH nf-next 1/3] netfilter: nf_tables: fix wrong check of NFT_SET_MAP in nf_tables_bind_set, Pablo Neira Ayuso
  • [PATCH nf-next 2/3] netfilter: nf_tables: fix a endless jump loop when use vmap, Liping Zhang
    • Re: [PATCH nf-next 2/3] netfilter: nf_tables: fix a endless jump loop when use vmap, Pablo Neira Ayuso
      • Re:Re: [PATCH nf-next 2/3] netfilter: nf_tables: fix a endless jump loop when use vmap, Liping Zhang
        • Re: Re: [PATCH nf-next 2/3] netfilter: nf_tables: fix a endless jump loop when use vmap, Pablo Neira Ayuso
          • Re: Re: [PATCH nf-next 2/3] netfilter: nf_tables: fix a endless jump loop when use vmap, Pablo Neira Ayuso
  • [PATCH nf-next 3/3] netfilter: nf_tables: fix wrong destroy anonymous sets if binding fails, Liping Zhang
    • Re: [PATCH nf-next 3/3] netfilter: nf_tables: fix wrong destroy anonymous sets if binding fails, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: make comparision helpers stub functions in ZONES=n case, Florian Westphal
  • Re: [PATCH nf-next] netfilter: make comparision helpers stub functions in ZONES=n case, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: align nf_conn on cacheline boundary, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: align nf_conn on cacheline boundary, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: destroy kmemcache on module removal, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: destroy kmemcache on module removal, Pablo Neira Ayuso
• [PATCH] ip6tables: Warn about use of DROP in nat table, Thomas Woerner
  • Re: [PATCH] ip6tables: Warn about use of DROP in nat table, Pablo Neira Ayuso
• [PATCH 1/2 v2,libnftnl] Fix leak in nftnl_*_unset(), Carlos Falgueras García
  • [PATCH 2/2 v2,libnftnl] Check memory allocations in setters, Carlos Falgueras García
    • Re: [PATCH 2/2 v2,libnftnl] Check memory allocations in setters, Pablo Neira Ayuso
  • Re: [PATCH 1/2 v2,libnftnl] Fix leak in nftnl_*_unset(), Pablo Neira Ayuso
• [PATCH 1/2 libnftnl] Fix leak in nftnl_*_unset(), Carlos Falgueras García
  • [PATCH 2/2 libnftnl] Check memory allocations in setters, Carlos Falgueras García
    • Re: [PATCH 2/2 libnftnl] Check memory allocations in setters, Pablo Neira Ayuso
  • Re: [PATCH 1/2 libnftnl] Fix leak in nftnl_*_unset(), Arturo Borrero Gonzalez
    • Re: [PATCH 1/2 libnftnl] Fix leak in nftnl_*_unset(), Carlos Falgueras García
• ip6tables: Warn about use of DROP in nat table, Thomas Woerner
  • Re: ip6tables: Warn about use of DROP in nat table, Jan Engelhardt
• [PATCH net-next] nfnetlink_queue: enable PID info retrieval, Saeed Mahameed
  • Re: [PATCH net-next] nfnetlink_queue: enable PID info retrieval, Florian Westphal
    • Re: [PATCH net-next] nfnetlink_queue: enable PID info retrieval, Daniel Borkmann
      • Re: [PATCH net-next] nfnetlink_queue: enable PID info retrieval, Daniel Borkmann
        • Re: [PATCH net-next] nfnetlink_queue: enable PID info retrieval, Daniel Wagner
          • Re: [PATCH net-next] nfnetlink_queue: enable PID info retrieval, Tejun Heo
  • Re: [PATCH net-next] nfnetlink_queue: enable PID info retrieval, Eric Dumazet
    • RE: [PATCH net-next] nfnetlink_queue: enable PID info retrieval, David Laight
      • Re: [PATCH net-next] nfnetlink_queue: enable PID info retrieval, Eric Dumazet
• [PATCH v2] iptables: extensions: libxt_MARK: Add translation to nft, Roberto García
  • Re: [PATCH v2] iptables: extensions: libxt_MARK: Add translation to nft, Pablo Neira Ayuso
• [PATCHv4] extensions: libip6t_frag: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv4] extensions: libip6t_frag: Add translation to nft, Pablo Neira Ayuso
• Netfilter/Suricata user day on 27th June in Amsterdam, Netherlands, Pablo Neira Ayuso
• [PATCH iptables] extensions: libxt_TRACE: Add translation to nft, Liping Zhang
  • Re: [PATCH iptables] extensions: libxt_TRACE: Add translation to nft, Pablo Neira Ayuso
• [PATCH nf-next 0/4] netfilter: request related nf_log module when we add TRACE rule, Liping Zhang
  • [PATCH nf-next 3/4] netfilter: xt_TRACE: add explicitly nf_logger_find_get call, Liping Zhang
    • Re: [PATCH nf-next 3/4] netfilter: xt_TRACE: add explicitly nf_logger_find_get call, Florian Westphal
    • Re: [PATCH nf-next 3/4] netfilter: xt_TRACE: add explicitly nf_logger_find_get call, Pablo Neira Ayuso
  • [PATCH nf-next 1/4] netfilter: nf_log: handle NFPROTO_INET properly in nf_logger_[find_get|put], Liping Zhang
    • Re: [PATCH nf-next 1/4] netfilter: nf_log: handle NFPROTO_INET properly in nf_logger_[find_get|put], Pablo Neira Ayuso
      • Re: [PATCH nf-next 1/4] netfilter: nf_log: handle NFPROTO_INET properly in nf_logger_[find_get|put], Pablo Neira Ayuso
  • [PATCH nf-next 2/4] netfilter: nft_log: no need to deal with NFPROTO_INET family, Liping Zhang
  • [PATCH nf-next 4/4] netfilter: nft_meta: add explicitly nf_logger_find_get call, Liping Zhang
    • Re: [PATCH nf-next 4/4] netfilter: nft_meta: add explicitly nf_logger_find_get call, Florian Westphal
      • Re: [PATCH nf-next 4/4] netfilter: nft_meta: add explicitly nf_logger_find_get call, Liping Zhang
        • Re: [PATCH nf-next 4/4] netfilter: nft_meta: add explicitly nf_logger_find_get call, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: xt_cpu: no need to check the validity of invert flag, Liping Zhang
  • Re: [PATCH nf-next] netfilter: xt_cpu: no need to check the validity of invert flag, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: xt_cpu: no need to check the validity of invert flag, Liping Zhang
• [PATCH nf-next] netfilter: nft_meta: set skb->nf_trace appropriately, Liping Zhang
  • Re: [PATCH nf-next] netfilter: nft_meta: set skb->nf_trace appropriately, Pablo Neira Ayuso
• [PATCH libmnl] nlmsg: Improve payload printing, Carlos Falgueras García
• [PATCH libnftnl 1/2] examples: nft-table-upd: don't use deprecated aliases, Pablo Neira Ayuso
  • [PATCH libnftnl 2/2] src: get rid of EXPORT_SYMBOL_ALIAS(), Pablo Neira Ayuso
• [PATCHv3] extensions: libip6t_frag: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv3] extensions: libip6t_frag: Add translation to nft, Pablo Neira Ayuso
• [PATCH 1/1] payload: don't update protocol context if we can't find a description, Florian Westphal
  • Re: [PATCH 1/1] payload: don't update protocol context if we can't find a description, Pablo Neira Ayuso
• [PATCHv2] extensions: libip6t_frag: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv2] extensions: libip6t_frag: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCHv2] extensions: libip6t_frag: Add translation to nft, Pablo Neira Ayuso
• [PATCHv2] extensions: libxt_dscp: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv2] extensions: libxt_dscp: Add translation to nft, Pablo Neira Ayuso
• 4.7-rc2: iptables broken on ARM 32 bits, Sylvain Lemieux
• [GIT PULL] IPVS Fixes for v4.7, Simon Horman
  • [PATCH] ipvs: update real-server binding of outgoing connections in SIP-pe, Simon Horman
  • Re: [GIT PULL] IPVS Fixes for v4.7, Pablo Neira Ayuso
• [PATCH] extensions: libxt_dscp: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH] extensions: libxt_dscp: Add translation to nft, Pablo Neira Ayuso
• [PATCH] doc: Update datatypes, Laura Garcia Liebana
  • Re: [PATCH] doc: Update datatypes, Pablo Neira Ayuso
• [PATCH] iptables: extensions: libxt_MARK: Add translation to nft, rodanber
  • Re: [PATCH] iptables: extensions: libxt_MARK: Add translation to nft, Arturo Borrero Gonzalez
  • <Possible follow-ups>
  • [PATCH] iptables: extensions: libxt_MARK: Add translation to nft, rodanber
    • Re: [PATCH] iptables: extensions: libxt_MARK: Add translation to nft, Pablo Neira Ayuso
• [PATCH ipvs-next] ipvs: count pre-established TCP states as active, Michal Kubecek
  • Re: [PATCH ipvs-next] ipvs: count pre-established TCP states as active, Julian Anastasov
  • Re: [PATCH ipvs-next] ipvs: count pre-established TCP states as active, Julian Anastasov
    • Re: [PATCH ipvs-next] ipvs: count pre-established TCP states as active, Simon Horman
• [conntrack-tools PATCH] include/network.h: fix erroneus comment in NTA_(S|D)NAT_IPV6, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] include/network.h: fix erroneus comment in NTA_(S|D)NAT_IPV6, Pablo Neira Ayuso
• [PATCH v3] xtables: Add a smaller delay option when waiting for xtables lock, Subash Abhinov Kasiviswanathan
  • Re: [PATCH v3] xtables: Add a smaller delay option when waiting for xtables lock, Pablo Neira Ayuso
• [PATCHv4] extensions: libxt_multiport: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv4] extensions: libxt_multiport: Add translation to nft, Pablo Neira Ayuso
• [ANNOUNCE] nftables 0.6 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] nftables 0.6 release, Jan Engelhardt
• [PATCH] extensions: libip6t_frag: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH] extensions: libip6t_frag: Add translation to nft, Pablo Neira Ayuso
• Next libmnl release, Guillaume Nault
  • Re: Next libmnl release, Pablo Neira Ayuso
    • Re: Next libmnl release, Guillaume Nault
• [PATCH] extensions: libxt_devgroup: Fix order of mask and id, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_devgroup: Fix order of mask and id, Pablo Neira Ayuso
• [PATCH -v4 0/7] spin_unlock_wait borkage and assorted bits, Peter Zijlstra
  • [PATCH -v4 4/7] locking, tile: Provide TILE specific smp_acquire__after_ctrl_dep, Peter Zijlstra
  • [PATCH -v4 2/7] locking: Introduce smp_acquire__after_ctrl_dep, Peter Zijlstra
  • [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
    • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Boqun Feng
      • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
        • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Boqun Feng
          • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Boqun Feng
          • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
        • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
          • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Will Deacon
            • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
              • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Will Deacon
                • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
                  • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Will Deacon
                    • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
                • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
            • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
              • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Boqun Feng
                • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
                  • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Boqun Feng
                    • Re: [PATCH -v4 5/7] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
  • [PATCH -v4 6/7] locking: Update spin_unlock_wait users, Peter Zijlstra
  • [PATCH -v4 7/7] locking,netfilter: Fix nf_conntrack_lock(), Peter Zijlstra
  • [PATCH -v4 1/7] locking: Replace smp_cond_acquire with smp_cond_load_acquire, Peter Zijlstra
  • [PATCH -v4 3/7] locking: Move smp_cond_load_acquire() to asm-generic/barrier.h, Peter Zijlstra
• [PATCH 1/2,libnftnl] Free user data in unsetters, Carlos Falgueras García
  • [PATCH 2/2,libnftnl] Check memory allocations in setters, Carlos Falgueras García
    • Re: [PATCH 2/2,libnftnl] Check memory allocations in setters, Pablo Neira Ayuso
  • Re: [PATCH 1/2,libnftnl] Free user data in unsetters, Pablo Neira Ayuso
    • Re: [PATCH 1/2,libnftnl] Free user data in unsetters, Pablo Neira Ayuso
• [ANNOUNCE] Netdev 1.2 call for proposals, Hajime Tazaki
• [PATCH v2] netfilter: fix possible ZERO_SIZE_PTR pointer dereferencing error., Xiubo Li
  • Re: [PATCH v2] netfilter: fix possible ZERO_SIZE_PTR pointer dereferencing error., Pablo Neira Ayuso
• [PATCH] netfilter/nflog: nflog-range does not truncate packets, Vishwanath Pai
  • Re: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Pablo Neira Ayuso
    • Re: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Vishwanath Pai
      • Re: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Pablo Neira Ayuso
        • Re: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Vishwanath Pai
          • Re: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Vishwanath Pai
            • Re: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Pablo Neira Ayuso
              • Re: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Vishwanath Pai
                • RE: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Lubashev, Igor
                  • Re: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Pablo Neira Ayuso
                    • Re: [PATCH] netfilter/nflog: nflog-range does not truncate packets, Vishwanath Pai
• [PATCH iptables 3/3] libxt_hashlimit: iptables-restore does not work as expected with xt_hashlimit, Vishwanath Pai
  • Re: [PATCH iptables 3/3] libxt_hashlimit: iptables-restore does not work as expected with xt_hashlimit, Pablo Neira Ayuso
    • Re: [PATCH iptables 3/3] libxt_hashlimit: iptables-restore does not work as expected with xt_hashlimit, Vishwanath Pai
      • Re: [PATCH iptables 3/3] libxt_hashlimit: iptables-restore does not work as expected with xt_hashlimit, Pablo Neira Ayuso
        • Re: [PATCH iptables 3/3] libxt_hashlimit: iptables-restore does not work as expected with xt_hashlimit, Vishwanath Pai
          • Re: [PATCH iptables 3/3] libxt_hashlimit: iptables-restore does not work as expected with xt_hashlimit, Vishwanath Pai
            • Re: [PATCH iptables 3/3] libxt_hashlimit: iptables-restore does not work as expected with xt_hashlimit, Pablo Neira Ayuso
              • Re: [PATCH iptables 3/3] libxt_hashlimit: iptables-restore does not work as expected with xt_hashlimit, Vishwanath Pai
• [PATCH iptables 2/3] libxt_hashlimit: Create revision 2 of xt_hashlimit to support higher pps rates, Vishwanath Pai
• [PATCH iptables 1/3] libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2, Vishwanath Pai
  • Re: [PATCH iptables 1/3] libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2, Pablo Neira Ayuso
• [PATCH 3/3] netfilter: iptables-restore does not work as expected with xt_hashlimit, Vishwanath Pai
• [PATCH 2/3] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Vishwanath Pai
  • Re: [PATCH 2/3] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Pablo Neira Ayuso
    • Re: [PATCH 2/3] netfilter: Create revision 2 of xt_hashlimit to support higher pps rates, Vishwanath Pai
• [PATCH 1/3] netfilter: Prepare xt_hashlimit.c for revision 2, Vishwanath Pai
• [PATCH] doc: fix old parameters and update datatypes, Laura Garcia Liebana
  • Re: [PATCH] doc: fix old parameters and update datatypes, Pablo Neira Ayuso
• [PATCH] extensions: libxt_connmark: Fix order of mask and mark, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_connmark: Fix order of mask and mark, Pablo Neira Ayuso
• [nf-next PATCH v4] netfilter: nf_tables: add support for inverted logic in nft_lookup, Arturo Borrero Gonzalez
  • Re: [nf-next PATCH v4] netfilter: nf_tables: add support for inverted logic in nft_lookup, Pablo Neira Ayuso
    • Re: [nf-next PATCH v4] netfilter: nf_tables: add support for inverted logic in nft_lookup, Arturo Borrero Gonzalez
      • Re: [nf-next PATCH v4] netfilter: nf_tables: add support for inverted logic in nft_lookup, Arturo Borrero Gonzalez
  • Re: [nf-next PATCH v4] netfilter: nf_tables: add support for inverted logic in nft_lookup, Pablo Neira Ayuso
• [PATCH] extensions: libxt_mark: fix a wrong translation to nft when mask is specified, Liping Zhang
  • Re: [PATCH] extensions: libxt_mark: fix a wrong translation to nft when mask is specified, Pablo Neira Ayuso
• [PATCH nft v2] evaluate: fix "list set" unexpected behaviour, Pablo M. Bermudo Garay
  • Re: [PATCH nft v2] evaluate: fix "list set" unexpected behaviour, Pablo Neira Ayuso
• [PATCH nft] Bump version to v0.6, Pablo Neira Ayuso
• [PATCH nft] evaluate: fix "list set" unexpected behaviour, Pablo M. Bermudo Garay
  • Re: [PATCH nft] evaluate: fix "list set" unexpected behaviour, Pablo Neira Ayuso
    • Re: [PATCH nft] evaluate: fix "list set" unexpected behaviour, Pablo M. Bermudo Garay
• [PATCH] netfilter: fix possible ZERO_SIZE_PTR pointer dereferencing error., Xiubo Li
  • Re: [PATCH] netfilter: fix possible ZERO_SIZE_PTR pointer dereferencing error., Pablo Neira Ayuso
    • Re: [PATCH] netfilter: fix possible ZERO_SIZE_PTR pointerdereferencing error., Xiubo Li
      • Re: [PATCH] netfilter: fix possible ZERO_SIZE_PTR pointerdereferencing error., Pablo Neira Ayuso
        • Re: [PATCH] netfilter: fix possible ZERO_SIZE_PTRpointerdereferencing error., Xiubo Li
• [PATCH nf] netfilter: x_tables: don't reject valid target size on some architectures, Florian Westphal
  • Re: [PATCH nf] netfilter: x_tables: don't reject valid target size on some architectures, Pablo Neira Ayuso
• [PATCH] extensions: libxt_ipcomp: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH] extensions: libxt_ipcomp: Add translation to nft, Pablo Neira Ayuso
• [PATCH] doc: fix compression parameter index, Laura Garcia Liebana
  • Re: [PATCH] doc: fix compression parameter index, Pablo Neira Ayuso
• [PATCH v3] extensions: libxt_multiport: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH v3] extensions: libxt_multiport: Add translation to nft, Arturo Borrero Gonzalez
    • Re: [PATCH v3] extensions: libxt_multiport: Add translation to nft, Laura Garcia
      • Re: [PATCH v3] extensions: libxt_multiport: Add translation to nft, Pablo Neira Ayuso
• [nf-next PATCH v3] netfilter: nf_tables: add support for inverted login in nft_lookup, Arturo Borrero Gonzalez
• [libnftnl PATCH v2] expr: lookup: give support for inverted matching, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH v2] expr: lookup: give support for inverted matching, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [libnftnl PATCH v2] expr: lookup: give support for inverted matching, Arturo Borrero Gonzalez
    • Re: [libnftnl PATCH v2] expr: lookup: give support for inverted matching, Arturo Borrero Gonzalez
    • Re: [libnftnl PATCH v2] expr: lookup: give support for inverted matching, Pablo Neira Ayuso
• [nf-next PATCH v2] netfilter: nf_tables: add support for inverted login in nft_lookup, Arturo Borrero Gonzalez
  • Re: [nf-next PATCH v2] netfilter: nf_tables: add support for inverted login in nft_lookup, Pablo Neira Ayuso
• [libnftnl PATCH] expr: lookup: give support for inverted matching, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] expr: lookup: give support for inverted matching, Pablo Neira Ayuso
• [nf-next PATCH] netfilter: nf_tables: add support for inverted login in nft_lookup, Arturo Borrero Gonzalez
  • Re: [nf-next PATCH] netfilter: nf_tables: add support for inverted login in nft_lookup, Pablo Neira Ayuso
  • Re: [nf-next PATCH] netfilter: nf_tables: add support for inverted login in nft_lookup, Florian Westphal
    • Re: [nf-next PATCH] netfilter: nf_tables: add support for inverted login in nft_lookup, Arturo Borrero Gonzalez
      • Re: [nf-next PATCH] netfilter: nf_tables: add support for inverted login in nft_lookup, Arturo Borrero Gonzalez
        • Re: [nf-next PATCH] netfilter: nf_tables: add support for inverted login in nft_lookup, Arturo Borrero Gonzalez
        • Re: [nf-next PATCH] netfilter: nf_tables: add support for inverted login in nft_lookup, Florian Westphal
• [PATCH nft 1/2] src: add 'list maps' support, Pablo M. Bermudo Garay
  • [PATCH nft 2/2] src: add support for display maps content, Pablo M. Bermudo Garay
    • Re: [PATCH nft 2/2] src: add support for display maps content, Pablo Neira Ayuso
  • Re: [PATCH nft 1/2] src: add 'list maps' support, Pablo Neira Ayuso
• [PATCH v2 libnftnl] Check all strdup, Carlos Falgueras García
  • Re: [PATCH v2 libnftnl] Check all strdup, Pablo Neira Ayuso
    • Re: [PATCH v2 libnftnl] Check all strdup, Pablo Neira Ayuso
      • Re: [PATCH v2 libnftnl] Check all strdup, Florian Westphal
        • Re: [PATCH v2 libnftnl] Check all strdup, Pablo Neira Ayuso
• [PATCH -v3 0/8] spin_unlock_wait borkage and assorted bits, Peter Zijlstra
  • [PATCH -v3 6/8] locking,netfilter: Fix nf_conntrack_lock(), Peter Zijlstra
  • [PATCH -v3 5/8] locking: Update spin_unlock_wait users, Peter Zijlstra
  • [PATCH -v3 8/8] locking, tile: Provide TILE specific smp_acquire__after_ctrl_dep, Peter Zijlstra
    • Re: [PATCH -v3 8/8] locking, tile: Provide TILE specific smp_acquire__after_ctrl_dep, Chris Metcalf
  • [PATCH -v3 4/8] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
    • Re: [PATCH -v3 4/8] locking, arch: Update spin_unlock_wait(), Will Deacon
      • Re: [PATCH -v3 4/8] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
  • [PATCH -v3 1/8] locking: Replace smp_cond_acquire with smp_cond_load_acquire, Peter Zijlstra
  • [PATCH -v3 2/8] locking: Introduce cmpwait(), Peter Zijlstra
  • [PATCH -v3 3/8] locking: Introduce smp_acquire__after_ctrl_dep, Peter Zijlstra
    • Re: [PATCH -v3 3/8] locking: Introduce smp_acquire__after_ctrl_dep, Boqun Feng
      • Re: [PATCH -v3 3/8] locking: Introduce smp_acquire__after_ctrl_dep, Peter Zijlstra
        • Re: [PATCH -v3 3/8] locking: Introduce smp_acquire__after_ctrl_dep, Boqun Feng
  • [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Peter Zijlstra
    • Re: [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Waiman Long
      • Re: [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Peter Zijlstra
        • Re: [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Will Deacon
          • Re: [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Peter Zijlstra
            • Re: [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Will Deacon
              • Re: [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Peter Zijlstra
                • Re: [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Will Deacon
                  • Re: [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Peter Zijlstra
        • Re: [PATCH -v3 7/8] locking: Move smp_cond_load_acquire() and friends into asm-generic/barrier.h, Waiman Long
• [PATCH v2] extensions: libxt_multiport: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH v2] extensions: libxt_multiport: Add translation to nft, Arturo Borrero Gonzalez
    • Re: [PATCH v2] extensions: libxt_multiport: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH v2] extensions: libxt_multiport: Add translation to nft, Arturo Borrero Gonzalez
        • Re: [PATCH v2] extensions: libxt_multiport: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH v2] extensions: libxt_multiport: Add translation to nft, Laura Garcia
      • Re: [PATCH v2] extensions: libxt_multiport: Add translation to nft, Arturo Borrero Gonzalez
• [PATCH] extensions: libxt_multiport: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH] extensions: libxt_multiport: Add translation to nft, Arturo Borrero Gonzalez
• [PATCH nf,v2] netfilter: nf_ct_helper: bail out on duplicated helpers, Pablo Neira Ayuso
• [PATCH libnfntl] Check all strdup, Carlos Falgueras García
  • Re: [PATCH libnfntl] Check all strdup, Pablo Neira Ayuso
    • Re: [PATCH libnfntl] Check all strdup, Carlos Falgueras García
• [PATCH 1/2 nft] parser: Centralize commentary rule, Carlos Falgueras García
  • [PATCH 2/2 nft] parser: Check commentaries length, Carlos Falgueras García
    • Re: [PATCH 2/2 nft] parser: Check commentaries length, Pablo Neira Ayuso
  • Re: [PATCH 1/2 nft] parser: Centralize commentary rule, Pablo Neira Ayuso
• [PATCH nft] parser: Check commentaries length, Carlos Falgueras García
  • Re: [PATCH nft] parser: Check commentaries length, Pablo Neira Ayuso
    • Re: [PATCH nft] parser: Check commentaries length, Carlos Falgueras García
• [ANNOUNCE] libnftnl 1.0.6 release, Pablo Neira Ayuso
  • RE: [ANNOUNCE] libnftnl 1.0.6 release, Vink, Ronald
• [PATCH nft] parser: fix crash if we add a chain with an error chain type, Liping Zhang
  • Re: [PATCH nft] parser: fix crash if we add a chain with an error chain type, Pablo Neira Ayuso
• [PATCH nft 1/3] datatype: fix parsing of tchandle type, Liping Zhang
  • [PATCH nft 2/3] meta: fix endianness in priority, Liping Zhang
    • Re: [PATCH nft 2/3] meta: fix endianness in priority, Pablo Neira Ayuso
  • [PATCH nft 3/3] meta: fix a format error display when we set priority to root or none, Liping Zhang
    • Re: [PATCH nft 3/3] meta: fix a format error display when we set priority to root or none, Pablo Neira Ayuso
  • Re: [PATCH nft 1/3] datatype: fix parsing of tchandle type, Pablo Neira Ayuso
• BUG: netfilter hooks: problems porting to 4.4.6, Sam Patton
• [PATCH nf] netfilter: nf_tables: validate NFTA_SET_TABLE parameter, Phil Turnbull
  • Re: [PATCH nf] netfilter: nf_tables: validate NFTA_SET_TABLE parameter, Pablo Neira Ayuso
• [PATCH 1/2 libnftnl] set_elem: Copy user data memory, Carlos Falgueras García
  • [PATCH 2/2 nft] set_elem: Use libnftnl/udata to store set element comment, Carlos Falgueras García
    • Re: [PATCH 2/2 nft] set_elem: Use libnftnl/udata to store set element comment, Pablo Neira Ayuso
  • Re: [PATCH 1/2 libnftnl] set_elem: Copy user data memory, Pablo Neira Ayuso
• [PATCH nf] netfilter: set again FLOWI_FLAG_KNOWN_NH at flowi6_flags, Paolo Abeni
  • Re: [PATCH nf] netfilter: set again FLOWI_FLAG_KNOWN_NH at flowi6_flags, Pablo Neira Ayuso
• [PATCH libnftnl] build: update LIBVERSION to prepare a new release, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH libnftnl] build: update LIBVERSION to prepare a new release, Pablo Neira Ayuso
• [PATCH -v2 0/6] spin_unlock_wait borkage, Peter Zijlstra
  • [PATCH -v2 2/6] locking: Introduce cmpwait(), Peter Zijlstra
  • [PATCH -v2 5/6] locking: Update spin_unlock_wait users, Peter Zijlstra
  • [PATCH -v2 3/6] locking: Introduce smp_acquire__after_ctrl_dep, Peter Zijlstra
  • [PATCH -v2 1/6] locking: Replace smp_cond_acquire with smp_cond_load_acquire, Peter Zijlstra
  • [PATCH -v2 6/6] locking,netfilter: Fix nf_conntrack_lock(), Peter Zijlstra
  • [PATCH -v2 4/6] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
    • Re: [PATCH -v2 4/6] locking, arch: Update spin_unlock_wait(), Chris Metcalf
      • Re: [PATCH -v2 4/6] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
        • Re: [PATCH -v2 4/6] locking, arch: Update spin_unlock_wait(), Chris Metcalf
          • Re: [PATCH -v2 4/6] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
    • Re: [PATCH -v2 4/6] locking, arch: Update spin_unlock_wait(), Martin Schwidefsky
      • Re: [PATCH -v2 4/6] locking, arch: Update spin_unlock_wait(), Peter Zijlstra
• [Regression?] iptables broken on 32bit with pre-4.7-rc, John Stultz
  • Re: [Regression?] iptables broken on 32bit with pre-4.7-rc, Florian Westphal
    • Re: [Regression?] iptables broken on 32bit with pre-4.7-rc, John Stultz
• [PATCH nf] netfilter: nf_ct_helper: bail out on duplicated ports, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_ct_helper: bail out on duplicated ports, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_ct_helper: Fix helper unregister count., Pablo Neira Ayuso
• [PATCH] libnftnl: set_elem: Fix memory leak, Carlos Falgueras García
• [RFC][PATCH 0/3] spin_unlock_wait and assorted borkage, Peter Zijlstra
  • [RFC][PATCH 3/3] locking,netfilter: Fix nf_conntrack_lock(), Peter Zijlstra
    • Re: [RFC][PATCH 3/3] locking,netfilter: Fix nf_conntrack_lock(), Peter Zijlstra
    • Message not available
      • Re: [RFC][PATCH 3/3] locking,netfilter: Fix nf_conntrack_lock(), Peter Zijlstra
  • [RFC][PATCH 2/3] locking: Annotate spin_unlock_wait() users, Peter Zijlstra
    • Re: [RFC][PATCH 2/3] locking: Annotate spin_unlock_wait() users, Linus Torvalds
      • Re: [RFC][PATCH 2/3] locking: Annotate spin_unlock_wait() users, Tejun Heo
        • Re: [RFC][PATCH 2/3] locking: Annotate spin_unlock_wait() users, Peter Zijlstra
          • Re: [RFC][PATCH 2/3] locking: Annotate spin_unlock_wait() users, Tejun Heo
      • Re: [RFC][PATCH 2/3] locking: Annotate spin_unlock_wait() users, Peter Zijlstra
  • [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Peter Zijlstra
    • Message not available
      • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Paul E. McKenney
        • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Boqun Feng
          • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Paul E. McKenney
        • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Waiman Long
          • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Paul E. McKenney
            • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Peter Zijlstra
              • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Linus Torvalds
                • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Paul E. McKenney
            • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Vineet Gupta
              • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Peter Zijlstra
                • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Paul E. McKenney
                  • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Peter Zijlstra
                    • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Peter Zijlstra
                      • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Paul E. McKenney
                    • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Paul E. McKenney
                      • Re: [RFC][PATCH 1/3] locking: Introduce smp_acquire__after_ctrl_dep, Will Deacon