Linux Netfilter / IP Tables Devel

Date Index

[Prev Page][Next Page]

Re: [PATCH nf-next v4 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, (continued)
[PATCH] ulogd: fix cross compilation errors with mysql_config, Helmut Schaa
- Re: [PATCH] ulogd: fix cross compilation errors with mysql_config, Eric Leblond
[nft PATCH] tests/shell: add new testcases for commit/rollback, Arturo Borrero Gonzalez
- Re: [nft PATCH] tests/shell: add new testcases for commit/rollback, Pablo Neira Ayuso
[PATCH] iptables: Replace gethostbyname() with getaddrinfo(), Arpan Kapoor
- Re: [PATCH] iptables: Replace gethostbyname() with getaddrinfo(), Jan Engelhardt
  - Re: [PATCH] iptables: Replace gethostbyname() with getaddrinfo(), Arpan Kapoor
- Re: [PATCH] iptables: Replace gethostbyname() with getaddrinfo(), Pablo Neira Ayuso
[PATCH] nft: include/mini-gmp.h is not included at "make dist", Magnus Öberg
- Re: [PATCH] nft: include/mini-gmp.h is not included at "make dist", Pablo Neira Ayuso
[nft PATCH] tests/shell: unload modules between tests, Arturo Borrero Gonzalez
- Re: [nft PATCH] tests/shell: unload modules between tests, Pablo Neira Ayuso
- Re: [nft PATCH] tests/shell: unload modules between tests, Piyush Pangtey
  - Re: [nft PATCH] tests/shell: unload modules between tests, Arturo Borrero Gonzalez
    - Re: [nft PATCH] tests/shell: unload modules between tests, Pablo Neira Ayuso
[PATCHv2] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation, Laura Garcia Liebana
- Re: [PATCHv2] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation, Pablo Neira Ayuso
[PATCHv2] extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation, Laura Garcia Liebana
- Re: [PATCHv2] extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation, Pablo Neira Ayuso
[PATCHv7] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
- Re: [PATCHv7] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
[ANNOUNCE] ipset 6.29 released, Jozsef Kadlecsik
- Re: [ANNOUNCE] ipset 6.29 released, AllKind
  - Re: [ANNOUNCE] ipset 6.29 released, Jozsef Kadlecsik
conntrack-tool question for contribution., Miguel Angel Ajo Pelayo
- Re: conntrack-tool question for contribution., Arturo Borrero Gonzalez
  - Re: conntrack-tool question for contribution., Miguel Angel Ajo Pelayo
[PATCH 1/4 v5] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
- [PATCH 2/4 v5] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
- [PATCH 3/4 v5] libnftnl: test: Update test to check new nftnl_udata features of nftnl_rule, Carlos Falgueras García
- [PATCH 4/4 v5] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Carlos Falgueras García
  - Re: [PATCH 4/4 v5] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Pablo Neira Ayuso
    - Re: [PATCH 4/4 v5] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Carlos Falgueras García
- Re: [PATCH 1/4 v5] libnftnl: Implement new buffer of TLV objects, Pablo Neira Ayuso
  - Re: [PATCH 1/4 v5] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
    - Re: [PATCH 1/4 v5] libnftnl: Implement new buffer of TLV objects, Pablo Neira Ayuso
Memory-leak in nft, Piyush Pangtey
[PATCH] netfilter: nf_conntrack: Uses pr_fmt() for logging., Weongyo Jeong
- Re: [PATCH] netfilter: nf_conntrack: Uses pr_fmt() for logging., Pablo Neira Ayuso
[nft 1/3] parser_bison: simplify hook_spec rule, Pablo Neira Ayuso
- [nft 2/3] parser_bison: duplicate string returned by chain_type_name_lookup(), Pablo Neira Ayuso
- [nft 3/3] parser_bison: release parsed type and hook name strings, Pablo Neira Ayuso
[RFC PATCH 0/3] connlabel set support using extra setter attr, Florian Westphal
- [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Florian Westphal
  - Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
    - Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Florian Westphal
      - Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Florian Westphal
        
        Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
        
        Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Florian Westphal
        
        Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
      - Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
- [PATCH libnftl 2/3] ct: add label set support, Florian Westphal
- [PATCH nft 3/3] ct: add conntrack label set support, Florian Westphal
  - Re: [PATCH nft 3/3] ct: add conntrack label set support, Pablo Neira Ayuso
    - Re: [PATCH nft 3/3] ct: add conntrack label set support, Florian Westphal
[ANNOUNCE] NetDev 1.1 videos now available, Pablo Neira Ayuso
[PATCH] nft: Removed ^L characters, Piyush Pangtey
- Re: [PATCH] nft: Removed ^L characters, Jan Engelhardt
[PATCH v2] nft: Remove memory-leak, Piyush Pangtey
- Re: [PATCH v2] nft: Remove memory-leak, Pablo Neira Ayuso
[PATCH 00/18] Netfilter/IPVS/OVS updates for net-next, Pablo Neira Ayuso
- [PATCH 01/18] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Pablo Neira Ayuso
- [PATCH 05/18] ipvs: allow rescheduling after RST, Pablo Neira Ayuso
- [PATCH 11/18] netfilter: Allow calling into nat helper without skb_dst., Pablo Neira Ayuso
- [PATCH 16/18] openvswitch: Delay conntrack helper call for new connections., Pablo Neira Ayuso
- [PATCH 03/18] ipvs: handle ip_vs_fill_iph_skb_off failure, Pablo Neira Ayuso
- [PATCH 09/18] netfilter: x_tables: check for size overflow, Pablo Neira Ayuso
- [PATCH 17/18] openvswitch: Interface with NAT., Pablo Neira Ayuso
- [PATCH 15/18] openvswitch: Handle NF_REPEAT in conntrack action., Pablo Neira Ayuso
- [PATCH 18/18] netfilter: nf_conntrack: consolidate lock/unlock into unlock_wait, Pablo Neira Ayuso
- [PATCH 06/18] ipvs: correct initial offset of Call-ID header search in SIP persistence engine, Pablo Neira Ayuso
- [PATCH 02/18] netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters, Pablo Neira Ayuso
- [PATCH 13/18] openvswitch: Update the CT state key only after nf_conntrack_in()., Pablo Neira Ayuso
- [PATCH 14/18] openvswitch: Find existing conntrack entry after upcall., Pablo Neira Ayuso
- [PATCH 08/18] netfilter: nft_compat: check match/targetinfo attr size, Pablo Neira Ayuso
- [PATCH 12/18] openvswitch: Add commentary to conntrack.c, Pablo Neira Ayuso
- [PATCH 04/18] ipvs: drop first packet to redirect conntrack, Pablo Neira Ayuso
- [PATCH 10/18] netfilter: Remove IP_CT_NEW_REPLY definition., Pablo Neira Ayuso
- [PATCH 07/18] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length, Pablo Neira Ayuso
- Re: [PATCH 00/18] Netfilter/IPVS/OVS updates for net-next, David Miller
[PATCH] Shows proper function name for pr_debug() messages., Weongyo Jeong
- Re: [PATCH] Shows proper function name for pr_debug() messages., Pablo Neira Ayuso
  - Re: [PATCH] Shows proper function name for pr_debug() messages., Weongyo Jeong
[PATCH v2] netfilter: fix race condition in ipset save, swap and delete, Vishwanath Pai
- Re: [PATCH v2] netfilter: fix race condition in ipset save, swap and delete, Jozsef Kadlecsik
[PATCH 1/2 nft] src: revisit cache population logic, Pablo Neira Ayuso
- [PATCH 2/2 nft] evaluate: use table_lookup_global() from expr_evaluate_symbol(), Pablo Neira Ayuso
- Re: [PATCH 1/2 nft] src: revisit cache population logic, Pablo Neira Ayuso
[PATCH nf-next resend 0/3] netfilter: connlabel set support, Florian Westphal
- [PATCH nf-next v3 1/3] netfilter: connlabels: move helpers to xt_connlabel, Florian Westphal
- [PATCH nf-next v3 2/3] netfilter: labels: don't emit ct event if labels are unchanged, Florian Westphal
- [PATCH nf-next v3 3/3] netfilter: nftables: add connlabel set support, Florian Westphal
  - Re: [PATCH nf-next v3 3/3] netfilter: nftables: add connlabel set support, kbuild test robot
- [PATCH nf-next v4 3/3] netfilter: nftables: add connlabel set support, Florian Westphal
  - Re: [PATCH nf-next v4 3/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
[PATCH] netfilter: nf_conntrack: consolidate lock/unlock into unlock_wait, Nicholas Mc Guire
- Re: [PATCH] netfilter: nf_conntrack: consolidate lock/unlock into unlock_wait, Pablo Neira Ayuso
[PATCH] nft: Remove memory-leak, Piyush Pangtey
- Re: [PATCH] nft: Remove memory-leak, Pablo Neira Ayuso
libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working, ravin goyal
- <Possible follow-ups>
- libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working, ravin goyal
  - Re: libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working, Pablo Neira Ayuso
    - Message not available
      - Re: libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working, Pablo Neira Ayuso
[RFC] nft: Remove memory-leak, Piyush Pangtey
- Re: [RFC] nft: Remove memory-leak, Florian Westphal
  - Re: [RFC] nft: Remove memory-leak, Piyush Pangtey
[PATCH v5] extensions: libxt_multiport: Add translation to nft, Piyush Pangtey
- Re: [PATCH v5] extensions: libxt_multiport: Add translation to nft, Pablo Neira Ayuso
  - Re: [PATCH v5] extensions: libxt_multiport: Add translation to nft, Piyush Pangtey
[PATCH] netfilter: fix race condition in ipset save and delete, Vishwanath Pai
- Re: [PATCH] netfilter: fix race condition in ipset save and delete, Jozsef Kadlecsik
  - Re: [PATCH] netfilter: fix race condition in ipset save and delete, Vishwanath Pai
[ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
- Re: [ANNOUNCE] ipset 6.28 released, Jan Engelhardt
  - Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
    - Re: [ANNOUNCE] ipset 6.28 released, Jan Engelhardt
      - Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
    - Re: [ANNOUNCE] ipset 6.28 released, Jan Engelhardt
      - Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
        
        Re: [ANNOUNCE] ipset 6.28 released, Jan Engelhardt
        
        Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
- Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
  - Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
    - Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
      - Re: [ANNOUNCE] ipset 6.28 released, Michal Kubecek
        
        Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
        
        Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
        
        Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
        
        Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
        
        Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
        
        Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
        
        Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
        
        Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
        
        Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
        
        Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
[PATCH] extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation, Laura Garcia Liebana
[PATCH] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation, Laura Garcia Liebana
- Re: [PATCH] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation, Pablo Neira Ayuso
[PATCHv6] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
- Re: [Outreachy kernel] [PATCHv6] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
[PATCH v3] configure: Show support for connlabel, Shivani Bhardwaj
- Re: [PATCH v3] configure: Show support for connlabel, Pablo Neira Ayuso
  - Re: [PATCH v3] configure: Show support for connlabel, Shivani Bhardwaj
    - Re: [PATCH v3] configure: Show support for connlabel, Pablo Neira Ayuso
Re: userns, netns, and quick physical memory consumption by unprivileged user, Pablo Neira Ayuso
[PATCH] extensions: libip6t_LOG: Avoid to print the default log level in the translation, Roberto García
- Re: [PATCH] extensions: libip6t_LOG: Avoid to print the default log level in the translation, Pablo Neira Ayuso
[PATCH v4] extensions: libxt_multiport: Add translation to nft, Piyush Pangtey
- Re: [PATCH v4] extensions: libxt_multiport: Add translation to nft, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH v4] extensions: libxt_multiport: Add translation to nft, Piyush Pangtey
[PATCH 1/4 v4] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
- [PATCH 2/4 v4] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
- [PATCH 3/4 v4] libnftnl: test: Actualize test to check new nftnl_udata features of nftnl_rule, Carlos Falgueras García
- [PATCH 4/4 v4] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Carlos Falgueras García
  - Re: [PATCH 4/4 v4] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Pablo Neira Ayuso
    - Re: [PATCH 4/4 v4] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Carlos Falgueras García
- Re: [PATCH 1/4 v4] libnftnl: Implement new buffer of TLV objects, Pablo Neira Ayuso
  - Re: [PATCH 1/4 v4] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
[PATCH nf-next v10 0/8] openvswitch: NAT support, Jarno Rajahalme
- [PATCH nf-next v10 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
- [PATCH nf-next v10 3/8] openvswitch: Add commentary to conntrack.c, Jarno Rajahalme
  - Re: [PATCH nf-next v10 3/8] openvswitch: Add commentary to conntrack.c, Joe Stringer
- [PATCH nf-next v10 4/8] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
- [PATCH nf-next v10 2/8] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
- [PATCH nf-next v10 5/8] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
- [PATCH nf-next v10 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
  - Re: [PATCH nf-next v10 8/8] openvswitch: Interface with NAT., Joe Stringer
- [PATCH nf-next v10 7/8] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
  - Re: [PATCH nf-next v10 7/8] openvswitch: Delay conntrack helper call for new connections., Joe Stringer
    - Re: [PATCH nf-next v10 7/8] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
- [PATCH nf-next v10 6/8] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
- Re: [PATCH nf-next v10 0/8] openvswitch: NAT support, Pablo Neira Ayuso
[PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation, Laura Garcia Liebana
- Re: [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation, Shivani Bhardwaj
  - Re: [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation, Pablo Neira Ayuso
- Re: [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation, Pablo Neira Ayuso
[PATCH v2] configure: Show support for connlabel, Shivani Bhardwaj
- Re: [PATCH v2] configure: Show support for connlabel, Pablo Neira Ayuso
[PATCH nf v2] netfilter: x_tables: don't rely on well-behaving userspace, Florian Westphal
[PATCHv5] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
- Re: [PATCHv5] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
[PATCHv4] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
[PATCH libnftnl] trace: fix missing NFTNL_TRACE_JUMP_TARGET in nftnl_trace_get_str(), Patrick McHardy
[iptables PATCH 1/2] extensions/libxt_rpfilter.man: fix typo, specifiy vs specify, Arturo Borrero Gonzalez
- [iptables PATCH 2/2] iptables/xtables-arp.c: fix typo, wierd vs weird, Arturo Borrero Gonzalez
- Re: [iptables PATCH 1/2] extensions/libxt_rpfilter.man: fix typo, specifiy vs specify, Florian Westphal
[PATCH nf] netfilter: x_tables: check for size overflow, Florian Westphal
- Re: [PATCH nf] netfilter: x_tables: check for size overflow, Pablo Neira Ayuso
[PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Florian Westphal
- Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Ben Hawkes
    - Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Michal Kubecek
    - Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Pablo Neira Ayuso
[PATCH nf-next v9 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
- [PATCH nf-next v9 2/8] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
- [PATCH nf-next v9 5/8] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
  - Re: [PATCH nf-next v9 5/8] openvswitch: Find existing conntrack entry after upcall., Joe Stringer
- [PATCH nf-next v9 3/8] openvswitch: Add commentary to conntrack.c, Jarno Rajahalme
- [PATCH nf-next v9 7/8] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
  - Re: [PATCH nf-next v9 7/8] openvswitch: Delay conntrack helper call for new connections., Joe Stringer
- [PATCH nf-next v9 6/8] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
- [PATCH nf-next v9 4/8] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
  - Re: [ovs-dev] [PATCH nf-next v9 4/8] openvswitch: Update the CT state key only after nf_conntrack_in()., Joe Stringer
- [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
  - Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Joe Stringer
    - Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Thomas Graf
      - Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
    - Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
- Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
  - Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
    - Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
      - Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cong Wang
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Florian Westphal
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
        
        Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cong Wang
NFQUEUE "fail-open" only open to queue limit and not receive buffer limit, Yigal Reiss (yreiss)
- Re: NFQUEUE "fail-open" only open to queue limit and not receive buffer limit, Florian Westphal
[PATCH nft] proto: Add router advertisement and solicitation icmp types, Laura Garcia Liebana
- Re: [PATCH nft] proto: Add router advertisement and solicitation icmp types, Pablo Neira Ayuso
[PATCH iptables] iptables-translate: pass ipt_entry and ip6t_entry to ->xlate(), Pablo Neira Ayuso
[PATCH nft] parser_bison: allow 'snat' and 'dnat' keywords from the right-hand side, Pablo Neira Ayuso
nft: Modified punctuation used in nft's show_help, Piyush Pangtey
- Re: nft: Modified punctuation used in nft's show_help, Pablo Neira Ayuso
[PATCH nf-next v8 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
- [PATCH nf-next v8 2/8] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
- [PATCH nf-next v8 3/8] openvswitch: Add commentary to conntrack.c, Jarno Rajahalme
  - Re: [PATCH nf-next v8 3/8] openvswitch: Add commentary to conntrack.c, Sergei Shtylyov
    - Re: [PATCH nf-next v8 3/8] openvswitch: Add commentary to conntrack.c, Jarno Rajahalme
- [PATCH nf-next v8 4/8] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
- [PATCH nf-next v8 5/8] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
- [PATCH nf-next v8 6/8] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
- [PATCH nf-next v8 7/8] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
- [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
  - Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., kbuild test robot
  - Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., kbuild test robot
  - Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., kbuild test robot
    - Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
- Re: [PATCH nf-next v8 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Or Gerlitz
  - Re: [PATCH nf-next v8 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
[PATCH nft 1/4] tests: frag: enable more tests, Florian Westphal
- [PATCH nft 2/4] netlink_delinearize: fix bogus offset w exthdr expressions, Florian Westphal
- [PATCH nft 3/4] nft-test: don't zap remainder of rule after handling a set, Florian Westphal
- [PATCH nft 4/4] netlink_delinarize: shift constant for ranges too, Florian Westphal
- Re: [PATCH nft 1/4] tests: frag: enable more tests, Pablo Neira Ayuso
[PATCH] netfilter: nft_compat: check match/targetinfo attr size, Florian Westphal
- Re: [PATCH] netfilter: nft_compat: check match/targetinfo attr size, Pablo Neira Ayuso
  - Re: [PATCH] netfilter: nft_compat: check match/targetinfo attr size, Florian Westphal
    - Re: [PATCH] netfilter: nft_compat: check match/targetinfo attr size, Pablo Neira Ayuso
[PATCH 1/4 v3] libnftnl: Implement new buffer of TLV objects., Carlos Falgueras García
- Re: [PATCH 1/4 v3] libnftnl: Implement new buffer of TLV objects., Pablo Neira Ayuso
[PATCH 00/10] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
- [PATCH 01/10] netfilter: ipvs: Remove noisy debug print from ip_vs_del_service, Pablo Neira Ayuso
- [PATCH 03/10] netfilter: meta: add PRANDOM support, Pablo Neira Ayuso
- [PATCH 07/10] netfilter: xtables: don't hook tables by default, Pablo Neira Ayuso
- [PATCH 04/10] netfilter: xt_osf: remove unused variable, Pablo Neira Ayuso
- [PATCH 02/10] netfilter: ipvs: avoid unused variable warnings, Pablo Neira Ayuso
- [PATCH 05/10] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check(), Pablo Neira Ayuso
- [PATCH 10/10] netfilter: nft_masq: support port range, Pablo Neira Ayuso
- [PATCH 09/10] netfilter: don't call hooks unless needed, Pablo Neira Ayuso
- [PATCH 08/10] netfilter: bridge: register hooks only when bridge interface is added, Pablo Neira Ayuso
- [PATCH 06/10] netfilter: xtables: prepare for on-demand hook register, Pablo Neira Ayuso
- Re: [PATCH 00/10] Netfilter/IPVS updates for net-next, David Miller
[PATCHv3] extensions: libip6t_icmp6: Add translation to nft, Laura Garcia Liebana
- Re: [PATCHv3] extensions: libip6t_icmp6: Add translation to nft, Pablo Neira Ayuso
[PATCHv3] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
- Re: [PATCHv3] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
  - [PATCH] libxt_multiport: Add translation to nft, FaTe
    - Re: [PATCH] libxt_multiport: Add translation to nft, Pablo Neira Ayuso
      - Re: [PATCH] libxt_multiport: Add translation to nft, Piyush Pangtey
      - [PATCH v2] libxt_multiport: Add translation to nft, Piyush Pangtey
        
        Re: [PATCH v2] libxt_multiport: Add translation to nft, Pablo Neira Ayuso
        
        [PATCH v3] libxt_multiport: Add translation to nft, Piyush Pangtey
        
        Re: [PATCH v3] libxt_multiport: Add translation to nft, Pablo Neira Ayuso
  - Regarding libxt_multiport translation in nft, FaTe
    - Re: Regarding libxt_multiport translation in nft, Arturo Borrero Gonzalez
      - Re: Regarding libxt_multiport translation in nft, Piyush Pangtey
  - [PATCH] libip6t_hbh: Add translation to nft, FaTe
    - Re: [PATCH] libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
[PATCH 1/4 v3] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
- [PATCH 4/4 v3] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf MIME-Version: 1.0, Carlos Falgueras García
  - Re: [PATCH 4/4 v3] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf MIME-Version: 1.0, Pablo Neira Ayuso
    - Re: [PATCH 4/4 v3] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf MIME-Version: 1.0, Carlos Falgueras García
- [PATCH 2/4 v3] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
  - Re: [PATCH 2/4 v3] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Pablo Neira Ayuso
    - Re: [PATCH 2/4 v3] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
- [PATCH 3/4] libnftnl: test: Actualize test to check new nftnl_udata features of nftnl_rule, Carlos Falgueras García
[PATCH] doc: nft: Fixed a typo and added/changed punctuation, Piyush Pangtey
- Re: [PATCH] doc: nft: Fixed a typo and added/changed punctuation, Pablo Neira Ayuso
  - [PATCH v2] doc: nft: Fixed a typo and added/changed punctuation, FaTe
    - Re: [PATCH v2] doc: nft: Fixed a typo and added/changed punctuation, Pablo Neira Ayuso
[PATCH 1/2 nft] parser: remove 'reset' as reserve keyword, Pablo Neira Ayuso
- [PATCH 2/2 nft] tests/py: enable tests for dccp types, Pablo Neira Ayuso
[PATCH libnftnl] trace: fix multiple copy and paste errors, Patrick McHardy
- Re: [PATCH libnftnl] trace: fix multiple copy and paste errors, Florian Westphal
[PATCH] configure: Show support for connlabel, Shivani Bhardwaj
- Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
  - Re: [PATCH] configure: Show support for connlabel, Shivani Bhardwaj
    - Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
      - Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
        
        Re: [PATCH] configure: Show support for connlabel, Shivani Bhardwaj
        
        Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
        
        Re: [PATCH] configure: Show support for connlabel, Jan Engelhardt
        
        Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
[GIT PULL v2 0/4] IPVS Fixes for v4.5, Simon Horman
- [PATCH 1/4] ipvs: handle ip_vs_fill_iph_skb_off failure, Simon Horman
- [PATCH 2/4] ipvs: drop first packet to redirect conntrack, Simon Horman
- [PATCH 4/4] ipvs: correct initial offset of Call-ID header search in SIP persistence engine, Simon Horman
- [PATCH 3/4] ipvs: allow rescheduling after RST, Simon Horman
- Re: [GIT PULL v2 0/4] IPVS Fixes for v4.5, Pablo Neira Ayuso
[PATCHv2] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
- Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
- Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
  - Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Laura Garcia
    - Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Shivani Bhardwaj
      - Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
    - Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
      - Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Laura Garcia
[PATCHv2] extensions: libip6t_icmp6: Add translation to nft, Laura Garcia Liebana
- Re: [PATCHv2] extensions: libip6t_icmp6: Add translation to nft, Pablo Neira Ayuso
  - Re: [PATCHv2] extensions: libip6t_icmp6: Add translation to nft, Laura Garcia
    - Re: [PATCHv2] extensions: libip6t_icmp6: Add translation to nft, Pablo Neira Ayuso
[PATCH libmnl] Move declaration of visibility attributes before definition., Peter Foley
- Re: [PATCH libmnl] Move declaration of visibility attributes before definition., Pablo Neira Ayuso
  - Re: [PATCH libmnl] Move declaration of visibility attributes before definition., Peter Foley
[PATCH] extensions: libip6t_rt.c: Add translation to nft, Janani Ravichandran
- Re: [PATCH] extensions: libip6t_rt.c: Add translation to nft, Pablo Neira Ayuso
[PATCH] extensions: libxt_connlabel: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
  - Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
    - Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Shivani Bhardwaj
      - Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
        
        Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
      - Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
        
        Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Shivani Bhardwaj
[PATCH] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
- Re: [PATCH] extensions: libipt_icmp: Add translation to nft, Shivani Bhardwaj
  - Re: [PATCH] extensions: libipt_icmp: Add translation to nft, Laura Garcia
- Re: [PATCH] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
[PATCH] extensions: libip6t_icmp6: Add translation to nft, Laura Garcia Liebana
Reading rules from multiple files, Piyush Pangtey
Re: using connlabel match, Pablo Neira Ayuso
Seeking help for implementing CT HELPER in nftables, christophe leroy
- Re: Seeking help for implementing CT HELPER in nftables, Patrick McHardy
  - Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
    - Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
      - Re: Seeking help for implementing CT HELPER in nftables, Florian Westphal
        
        Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
        
        Re: Seeking help for implementing CT HELPER in nftables, Florian Westphal
        
        Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
        
        Re: Seeking help for implementing CT HELPER in nftables, Pablo Neira Ayuso
        
        Re: Seeking help for implementing CT HELPER in nftables, Florian Westphal
        
        Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
        
        Re: Seeking help for implementing CT HELPER in nftables, Pablo Neira Ayuso
        
        Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
        
        Re: Seeking help for implementing CT HELPER in nftables, Florian Westphal
Nftables issues with modular rulesets, Puustinen, Ismo
[PATCH nft] rule: simplify ("rule: delete extra space in sets printing"), Pablo Neira Ayuso
- Re: [PATCH nft] rule: simplify ("rule: delete extra space in sets printing"), Arturo Borrero Gonzalez
[PATCH v3] extensions: libxt_dccp: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH v3] extensions: libxt_dccp: Add translation to nft, Pablo Neira Ayuso
  - Re: [PATCH v3] extensions: libxt_dccp: Add translation to nft, Shivani Bhardwaj
    - Re: [PATCH v3] extensions: libxt_dccp: Add translation to nft, Pablo Neira Ayuso
[PATCH v2] extensions: libxt_dccp: Add translation to nft, Shivani Bhardwaj
extensions: libxt_multiport: Multiport translations, Piyush Pangtey
- Re: extensions: libxt_multiport: Multiport translations, Pablo Neira Ayuso
[PATCH nft 1/3] expression: add helper to decide if operator needs to be shown, Florian Westphal
- [PATCH nft 3/4] meta: add probability matching, Florian Westphal
  - Re: [PATCH nft 3/4] meta: add probability matching, Jan Engelhardt
    - Re: [PATCH nft 3/4] meta: add probability matching, Florian Westphal
      - Re: [PATCH nft 3/4] meta: add probability matching, Jan Engelhardt
        
        Re: [PATCH nft 3/4] meta: add probability matching, Florian Westphal
        
        Re: [PATCH nft 3/4] meta: add probability matching, Jan Engelhardt
        
        Re: [PATCH nft 3/4] meta: add probability matching, Florian Westphal
- [PATCH nft 4/4] meta: add tests for probability matching, Florian Westphal
[PATCH v2] extensions: libxt_sctp: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH v2] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
[PATCH v2] extensions: libxt_owner: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH v2] extensions: libxt_owner: Add translation to nft, Pablo Neira Ayuso
[PATCH nft 0/1] Proposal: include directories for rulesets, Ismo Puustinen
- [PATCH nft 1/1] scanner: add support for include directories, Ismo Puustinen
- Re: [PATCH nft 0/1] Proposal: include directories for rulesets, Arturo Borrero Gonzalez
  - Re: [PATCH nft 0/1] Proposal: include directories for rulesets, Puustinen, Ismo
[PATCH v2] extensions: libip6t_MASQUERADE: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH v2] extensions: libip6t_MASQUERADE: Add translation to nft, Pablo Neira Ayuso
[PATCH v2] extensions: libipt_MASQUERADE: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH v2] extensions: libipt_MASQUERADE: Add translation to nft, Pablo Neira Ayuso
[PATCH] extensions: libip6t_hbh: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
  - Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Shivani Bhardwaj
    - Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH] extensions: libip6t_hbh: Add translation to nft, Laura Garcia Liebana
  - Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
    - Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Laura Garcia
[PATCH] extensions: libxt_sctp: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
  - Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
    - Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Shivani Bhardwaj
      - Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Jan Engelhardt
        
        Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
      - Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
[PATCH v3] extensions: libxt_statistic: Add translation to nft, Laura Garcia Liebana
- Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
  - Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
    - Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
      - Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
        
        Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
        
        Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
    - Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Jan Engelhardt
      - Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
        
        Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Jan Engelhardt
        
        Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
        
        Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
        
        Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
        
        Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
[PATCH] extensions: libxt_owner: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH] extensions: libxt_owner: Add translation to nft, Pablo Neira Ayuso
[PATCH nft,v3] src: Add support for masquerade port selection, Pablo Neira Ayuso
[PATCH libnftnl] expr: masq: Add support for port selection, Pablo Neira Ayuso
[PATCH nf-next,v2] netfilter: nft_masq: support port range, Pablo Neira Ayuso
[PATCH] extensions: libip6t_MASQUERADE: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH] extensions: libip6t_MASQUERADE: Add translation to nft, Pablo Neira Ayuso
[PATCH] extensions: libipt_MASQUERADE: Add translation to nft, Shivani Bhardwaj
Re: [PATCH] iptables: extensions: iptables-translate prints extra "nft" after printing any error, Pablo Neira Ayuso
[PATCH nft 00/10] nft: exthdr fixes and improvements, Florian Westphal
- [PATCH nft 01/10] evaluate: enforce ip6 proto with exthdr expression, Florian Westphal
- [PATCH nft 02/10] netlink: split generic part of netlink_gen_payload_mask into helper, Florian Westphal
- [PATCH nft 03/10] netlink: add and use netlink_gen_exthdr_mask, Florian Westphal
- [PATCH nft 04/10] payload: move payload_gen_dependency generic part to helper, Florian Westphal
- [PATCH nft 05/10] exthdr: generate dependencies for inet/bridge/netdev family, Florian Westphal
- [PATCH nft 06/10] tests: add/fix inet+exthdr tests, Florian Westphal
- [PATCH nft 07/10] exthdr: remove implicit dependencies, Florian Westphal
- [PATCH nft 08/10] exthdr: store offset for later use, Florian Westphal
- [PATCH nft 09/10] netlink_delinearize: prepare binop_postprocess for exthdr demux, Florian Westphal
- [PATCH nft 10/10] netlink_delinearize: handle extension header templates with odd sizes, Florian Westphal
- Re: [PATCH nft 00/10] nft: exthdr fixes and improvements, Pablo Neira Ayuso
[PATCH nft v2] src: Add support for masquerade port selection, Pablo Neira Ayuso
[PATCH] extensions: libxt_dccp: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH] extensions: libxt_dccp: Add translation to nft, Pablo Neira Ayuso
[PATCH] src: proto: Add missing packet type, Shivani Bhardwaj
- Re: [PATCH] src: proto: Add missing packet type, Florian Westphal
  - Re: [PATCH] src: proto: Add missing packet type, Shivani Bhardwaj
    - Re: [PATCH] src: proto: Add missing packet type, Florian Westphal
      - Re: [PATCH] src: proto: Add missing packet type, Pablo Neira Ayuso
[PATCH] extensions: libxt_statistic: Add translation to nft, Laura Garcia Liebana
- Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Shivani Bhardwaj
  - Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
    - Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Laura Garcia
      - Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
  - Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Laura Garcia
    - Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
[ANNOUNCE] NetDev 1.1 slides now available, Pablo Neira Ayuso
[PATCH nft] evaluate: reject set references in set elements, Florian Westphal
- Re: [PATCH nft] evaluate: reject set references in set elements, Pablo Neira Ayuso
[PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects., Carlos Falgueras García
- [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Carlos Falgueras García
  - Re: [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Pablo Neira Ayuso
    - Re: [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Carlos Falgueras García
      - Re: [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Pablo Neira Ayuso
- [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Carlos Falgueras García
  - Re: [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Pablo Neira Ayuso
    - Re: [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Carlos Falgueras García
      - Re: [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Pablo Neira Ayuso
- Re: [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects., Pablo Neira Ayuso
  - Re: [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects., Carlos Falgueras García
    - Re: [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects., Pablo Neira Ayuso
[BUG] kernel crash in br_netfilter, Zefir Kurtisi
- Re: [BUG] kernel crash in br_netfilter, Zefir Kurtisi
  - Re: [BUG] kernel crash in br_netfilter, Florian Westphal
    - Re: [BUG] kernel crash in br_netfilter, Felix Fietkau
unused code in net/netfilter/ipset/ip_set_bitmap_ipmac.c, Julia Lawall
- Re: unused code in net/netfilter/ipset/ip_set_bitmap_ipmac.c, Jozsef Kadlecsik
  - Re: unused code in net/netfilter/ipset/ip_set_bitmap_ipmac.c, Julia Lawall
[PATCH] src: netlink_delinearize: Fix datatype for len, Shivani Bhardwaj
- Re: [PATCH] src: netlink_delinearize: Fix datatype for len, Florian Westphal
  - Re: [PATCH] src: netlink_delinearize: Fix datatype for len, Shivani Bhardwaj
[PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Florian Westphal
- Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Pablo Neira Ayuso
  - Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Florian Westphal
    - Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Pablo Neira Ayuso
      - Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Florian Westphal
        
        Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Pablo Neira Ayuso
batch netlink messages - performance improvement, Yigal Reiss (yreiss)
- Re: batch netlink messages - performance improvement, Florian Westphal
  - RE: batch netlink messages - performance improvement, Yigal Reiss (yreiss)
[PATCH 0/2] iptables: utils: Add bash completion, Mart Frauenlob
- [PATCH 1/2] iptables: utils: Add bash completion, Mart Frauenlob
  - Re: [PATCH 1/2] iptables: utils: Add bash completion, Pablo Neira Ayuso
    - Re: [PATCH 1/2] iptables: utils: Add bash completion, Jan Engelhardt
    - Re: [PATCH 1/2] iptables: utils: Add bash completion, Mart Frauenlob
      - Re: [PATCH 1/2] iptables: utils: Add bash completion, Pablo Neira Ayuso
        
        Re: [PATCH 1/2] iptables: utils: Add bash completion, Mart Frauenlob
        
        Re: [PATCH 1/2] iptables: utils: Add bash completion, Mart Frauenlob
- [PATCH 2/2] iptables: Add bash completion to build routine, Mart Frauenlob
[PATCH ipset] Add bash completion to the install routine., Mart Frauenlob
[PATCH nf-next 0/4] netfilter: xtables: don't register hooks by default, Florian Westphal
- [PATCH nf-next 1/4] netfilter: xtables: prepare for on-demand hook register, Florian Westphal
- [PATCH v4 nf-next 2/4] netfilter: xtables: don't hook tables by default, Florian Westphal
- [PATCH v4 nf-next 4/4] netfilter: don't call hooks unless needed, Florian Westphal
- [PATCH v4 nf-next 3/4] netfilter: bridge: register hooks only when bridge interface is added, Florian Westphal
- Re: [PATCH nf-next 0/4] netfilter: xtables: don't register hooks by default, Pablo Neira Ayuso
[PATCH nf] netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters, Phil Turnbull
- Re: [PATCH nf] netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters, Pablo Neira Ayuso
[PATCH] netfilter: xt_osf: remove unused variable, Sudip Mukherjee
- Re: [PATCH] netfilter: xt_osf: remove unused variable, Pablo Neira Ayuso
netfilter: warning at net/ipv4/netfilter/nf_nat_l3proto_ipv4.c:275 nf_nat_ipv4_fn, Sasha Levin
[PATCH] Fix musl compatibility, Loganaden Velvindron
- Re: [PATCH] Fix musl compatibility, Pablo Neira Ayuso
  - Re: [PATCH] Fix musl compatibility, Loganaden Velvindron
[PATCH] Add JSON output formatting to nfacct utility, Harald Welte
- Re: [PATCH] Add JSON output formatting to nfacct utility, Pablo Neira Ayuso
[PATCH] add JSON output format, Harald Welte
- Re: [PATCH] add JSON output format, Pablo Neira Ayuso
[PATCH 1/2] iptables: nft-ipv6: Use meta l4proto instead of nexthdr, Shivani Bhardwaj
- [PATCH 2/2] extensions: libip6t_mh: Add translation to nft, Shivani Bhardwaj
  - Re: [PATCH 2/2] extensions: libip6t_mh: Add translation to nft, Pablo Neira Ayuso
- Re: [PATCH 1/2] iptables: nft-ipv6: Use meta l4proto instead of nexthdr, Pablo Neira Ayuso
[PATCH] libnftnl: Implement new buffer of TLV objects., Carlos Falgueras García
- [PATCH 1/2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Carlos Falgueras García
- [PATCH 2/2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Carlos Falgueras García
[PATCH V7] netfilter: h323: avoid potential attack, Zhouyi Zhou
- Re: [PATCH V7] netfilter: h323: avoid potential attack, Pablo Neira Ayuso
  - Re: Re: [PATCH V7] netfilter: h323: avoid potential attack, Zhouyi Zhou
[PATCH nf-next v3 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Stephane Bryant
- [PATCH nf-next v3 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Stephane Bryant
  - Re: [PATCH nf-next v3 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Pablo Neira Ayuso
    - Re: [PATCH nf-next v3 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, stéphane bryant
- [PATCH nf-next v3 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Stephane Bryant
  - Re: [PATCH nf-next v3 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Florian Westphal
[GIT PULL nf 0/3] IPVS Fixes for v4.5, Simon Horman
- [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST, Simon Horman
  - Re: [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST, Sergei Shtylyov
    - Re: [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST, Julian Anastasov
- [PATCH nf 3/3] netfilter: ipvs: handle ip_vs_fill_iph_skb_off failure, Simon Horman
- [PATCH nf 1/3] netfilter: ipvs: drop first packet to redirect conntrack, Simon Horman
[GIT PULL nf-next 0/2] IPVS Updates for v4.6, Simon Horman
- [PATCH nf-next 2/2] netfilter: ipvs: avoid unused variable warnings, Simon Horman
- [PATCH nf-next 1/2] netfilter: ipvs: Remove noisy debug print from ip_vs_del_service, Simon Horman
[PATCH] conntrackd: Disable runtime systemd support by default, Pablo Neira Ayuso
- Re: [PATCH] conntrackd: Disable runtime systemd support by default, Arturo Borrero Gonzalez
  - Re: [PATCH] conntrackd: Disable runtime systemd support by default, Pablo Neira Ayuso
[RESEND PATCH -stable,4.x.y] netfilter: nf_nat_redirect: add missing NULL pointer check, Pablo Neira Ayuso
- [RESEND PATCH -stable,4.3.y] netfilter: xt_TEE: fix NULL dereference, Pablo Neira Ayuso
[PATCH conntrackd] conntrackd: Disable systemd support by default, Pablo Neira Ayuso
- Re: [PATCH conntrackd] conntrackd: Disable systemd support by default, Arturo Borrero Gonzalez
  - Re: [PATCH conntrackd] conntrackd: Disable systemd support by default, Pablo Neira Ayuso
Merging iptables-translate branch into master, Pablo Neira Ayuso
[PATCH nf-next v2] netfilter: meta: add PRANDOM support, Florian Westphal
- Re: [PATCH nf-next v2] netfilter: meta: add PRANDOM support, Pablo Neira Ayuso
[PATCH nf-next] netfilter: meta: add PRANDOM support, Florian Westphal
- Re: [PATCH nf-next] netfilter: meta: add PRANDOM support, Daniel Borkmann
  - Re: [PATCH nf-next] netfilter: meta: add PRANDOM support, Florian Westphal
    - Re: [PATCH nf-next] netfilter: meta: add PRANDOM support, Daniel Borkmann
      - Re: [PATCH nf-next] netfilter: meta: add PRANDOM support, Florian Westphal
[PATCH 0/7] fix IS_ERR_VALUE usage, Andrzej Hajda
- [PATCH 1/7] netfilter: fix IS_ERR_VALUE usage, Andrzej Hajda
  - Re: [PATCH 1/7] netfilter: fix IS_ERR_VALUE usage, Al Viro
    - Re: [PATCH 1/7] netfilter: fix IS_ERR_VALUE usage, Andrzej Hajda
- Re: [PATCH 0/7] fix IS_ERR_VALUE usage, Arnd Bergmann
[PATCH 0/6] Namespacify various ip sysctl knobs, Nikolay Borisov
- [PATCH 1/6] ipv4: Namespaceify ip_default_ttl sysctl knob, Nikolay Borisov
- [PATCH 3/6] ipv4: Namespacify ip_dynaddr sysctl knob, Nikolay Borisov
- [PATCH 2/6] igmp: net: Move igmp namespace init to correct file, Nikolay Borisov
- [PATCH 5/6] ipv4: namespacify ip fragment max dist sysctl knob, Nikolay Borisov
- [PATCH 6/6] net: Export ip fragment sysctl to unprivileged users, Nikolay Borisov
- [PATCH 4/6] ipv4: namespacify ip_early_demux sysctl knob, Nikolay Borisov
- Re: [PATCH 0/6] Namespacify various ip sysctl knobs, David Miller
  - Re: [PATCH 0/6] Namespacify various ip sysctl knobs, Eric W. Biederman
  - Re: [PATCH 0/6] Namespacify various ip sysctl knobs, Nikolay Borisov
- <Possible follow-ups>
- [PATCH 0/6] Namespacify various ip sysctl knobs, Nikolay Borisov
  - [PATCH 4/6] ipv4: namespacify ip_early_demux sysctl knob, Nikolay Borisov
  - [PATCH 6/6] net: Export ip fragment sysctl to unprivileged users, Nikolay Borisov
  - [PATCH 5/6] ipv4: namespacify ip fragment max dist sysctl knob, Nikolay Borisov
  - [PATCH 2/6] igmp: net: Move igmp namespace init to correct file, Nikolay Borisov
  - [PATCH 1/6] ipv4: Namespaceify ip_default_ttl sysctl knob, Nikolay Borisov
  - [PATCH 3/6] ipv4: Namespacify ip_dynaddr sysctl knob, Nikolay Borisov
[PATCH] extensions: libxt_tos: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH] extensions: libxt_tos: Add translation to nft, Pablo Neira Ayuso
[PATCH nf-next v2 0/2] netfilter: bridge: add queuing to userspace for AF_, stephane . ml . bryant
- [PATCH nf-next v2 1/2] netfilter: bridge: add nf_afinfo to enable queuing to userspace, stephane . ml . bryant
  - Re: [PATCH nf-next v2 1/2] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Florian Westphal
- [PATCH nf-next v2 2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, stephane . ml . bryant
  - Re: [PATCH nf-next v2 2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Florian Westphal
  - Re: [PATCH nf-next v2 2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Pablo Neira Ayuso
kernel BUG at net/netfilter/nf_nat_core.c:395, Oleksandr Natalenko
[PATCH] iptables: nft-ipv6: Fix ipv6 flags, Shivani Bhardwaj
- Re: [PATCH] iptables: nft-ipv6: Fix ipv6 flags, Pablo Neira Ayuso
Re: [PATCH iproute2 v2 21/21] iplink: bridge: add support for netfilter call attributes, Pablo Neira Ayuso
[PATCH v4] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH v4] extensions: libxt_NFQUEUE: Add translation to nft, Pablo Neira Ayuso
[PATCH v3] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
[PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
- Re: [PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Florian Westphal
  - Re: [PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
    - Re: [PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Florian Westphal
      - Re: [PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
[PATCH] netfilter: nft_counter: fix erroneous return values, Anton Protopopov
- Re: [PATCH] netfilter: nft_counter: fix erroneous return values, Pablo Neira Ayuso
[RFC] a software based on ulogd, Ken-ichirou MATSUZAWA
- Re: [RFC] a software based on ulogd, Eric Leblond
  - Re: [RFC] a software based on ulogd, Ken-ichirou MATSUZAWA
    - [PATCH ulogd 1/7] ipfix: add flowDirection IE, Ken-ichirou MATSUZAWA
    - [PATCH ulogd 2/7] nfct/ipfix: introduce new vendor id, Ken-ichirou MATSUZAWA
    - [PATCH ulogd 3/7] nfct/ipfix: introduce NAT entries, Ken-ichirou MATSUZAWA
    - [PATCH ulogd 4/7] filter: add new filter for Netflow ICMP_TYPE, Ken-ichirou MATSUZAWA
    - [PATCH ulogd 5/7] filter: add new filter for IPFIX time, Ken-ichirou MATSUZAWA
    - [PATCH ulogd 6/7] ulogd: update calling stop callback condition, Ken-ichirou MATSUZAWA
    - [PATCH ulogd 7/7] nflow9: introduce new NetFlow v9 output plugin, Ken-ichirou MATSUZAWA
[PATCH nf-next v7 0/7] openvswitch: NAT support., Jarno Rajahalme
- [PATCH nf-next v7 1/7] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
- [PATCH nf-next v7 2/7] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
- [PATCH nf-next v7 3/7] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
- [PATCH nf-next v7 7/7] openvswitch: Interface with NAT., Jarno Rajahalme
- [PATCH nf-next v7 6/7] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
  - Re: [ovs-dev] [PATCH nf-next v7 6/7] openvswitch: Delay conntrack helper call for new connections., Joe Stringer
- [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
  - Re: [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action., Joe Stringer
    - Re: [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action., Pablo Neira Ayuso
- [PATCH nf-next v7 4/7] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
  - Re: [PATCH nf-next v7 4/7] openvswitch: Find existing conntrack entry after upcall., Joe Stringer
  - Re: [PATCH nf-next v7 4/7] openvswitch: Find existing conntrack entry after upcall., Joe Stringer
[RFC nftables PATCH] nft: add bash completion script, Giuseppe Longo
- Re: [RFC nftables PATCH] nft: add bash completion script, AllKind
- Re: [RFC nftables PATCH] nft: add bash completion script, AllKind
- Re: [RFC nftables PATCH] nft: add bash completion script, Pablo Neira Ayuso
  - Re: [RFC nftables PATCH] nft: add bash completion script, Giuseppe Longo
    - Re: [RFC nftables PATCH] nft: add bash completion script, Pablo Neira Ayuso
Re: [PATCH] ulogd: Restructures signal handling by self-pipe trick., Eric Leblond
[PATCH] netfilter: tee: select NF_DUP_IPV6 unconditionally, Arnd Bergmann
- Re: [PATCH] netfilter: tee: select NF_DUP_IPV6 unconditionally, Pablo Neira Ayuso
[PATCH 1/2] set: Implement new buffer of TLV objects., Carlos Falgueras García
- [PATCH 2/2] Rule comment is now stored into a TLV attribute., Carlos Falgueras García
  - Re: [PATCH 2/2] Rule comment is now stored into a TLV attribute., Arturo Borrero Gonzalez
    - Re: [PATCH 2/2] Rule comment is now stored into a TLV attribute., Carlos Falgueras García
[ANNOUNCE] NetDev 1.1 schedule is out, Pablo Neira Ayuso
[PATCH nf-next] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check(), Joe Stringer
- Re: [PATCH nf-next] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check(), Pablo Neira Ayuso
[ANNOUNCE] 12th Netfilter Workshop in Amsterdam, Netherlands, Pablo Neira Ayuso
[PATCH nf] netfilter: nfnetlink: correctly validate length of batch messages, phil . turnbull
- Re: [PATCH nf] netfilter: nfnetlink: correctly validate length of batch messages, Pablo Neira Ayuso
mirrors of nftable repo, Piyush Pangtey
- Re: mirrors of nftable repo, Pablo Neira Ayuso
[PATCH V6] netfilter: h323: avoid potential attack, Zhouyi Zhou
- Re: [PATCH V6] netfilter: h323: avoid potential attack, Pablo Neira Ayuso
[PATCH V5] netfilter: h323: avoid potential attack, Zhouyi Zhou

[Index of Archives] [LARTC] [Berkeley Packet Filter] [Bugtraq] [Yosemite Discussion]