Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 9/9] netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributes, (continued)
  • [PATCH 9/9] netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributes, Pablo Neira Ayuso
  • [PATCH 4/9] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Pablo Neira Ayuso
  • [PATCH 8/9] netfilter: ctnetlink: reject new conntrack request with different l4proto, Pablo Neira Ayuso
  • [PATCH 5/9] netfilter: nf_ct_expect: remove the redundant slash when policy name is empty, Pablo Neira Ayuso
  • [PATCH 3/9] netfilter: nft_rbtree: ignore inactive matching element with no descendants, Pablo Neira Ayuso
  • [PATCH 7/9] netfilter: nfnetlink_queue: reject verdict request from different portid, Pablo Neira Ayuso
  • [PATCH 6/9] netfilter: nfnetlink_queue: fix memory leak when attach expectation successfully, Pablo Neira Ayuso
  • Re: [PATCH 0/9] Netfilter fixes for net, David Miller
  • [PATCH 0/9] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributes, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: nf_tables: s/MFT_REG32_01/NFT_REG32_01, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: ctnetlink: reject new conntrack request with different l4proto, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: nfnetlink_queue: fix memory leak when attach expectation successfully, Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: nfnetlink_queue: reject verdict request from different portid, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: nf_ct_expect: remove the redundant slash when policy name is empty, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: nft_rbtree: ignore inactive matching element with no descendants, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: nf_ct_h323: do not re-activate already expired timer, Pablo Neira Ayuso
  • [PATCH 0/9] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: ipt_CLUSTERIP: Fix wrong conntrack netns refcnt usage, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: ctnetlink: skip dumping expect when nfct_help(ct) is NULL, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: nft_hash: do not dump the auto generated seed, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: ctnetlink: make it safer when checking the ct helper name, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: helper: Add the rcu lock when call __nf_conntrack_helper_find, Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: nf_ct_expect: use proper RCU list traversal/update APIs, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: make it safer during the inet6_dev->addr_list traversal, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: ctnetlink: using bit to represent the ct event, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter fixes for net, David Miller
  • [PATCH 0/9] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: nf_tables: close race between netns exit and rmmod, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: nft_socket: fix module autoload, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: xt_connmark: fix list corruption on rmmod, Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: ctnetlink: avoid null pointer dereference, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain(), Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: nf_conncount: Fix garbage collection with zones, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: nf_tables: fix module unload race, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: fix null-ptr-deref in nf_nat_decode_session, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter fixes for net, David Miller
  • [PATCH 0/9] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: nf_tables: fix jumpstack depth validation, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: nft_set_rbtree: fix panic when destroying set by GC, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: nf_tables: fix memory leaks on chain rename, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy(), Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: nf_tables: use dev->name directly, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: nf_tables: move dumper state allocation into ->start, Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: nf_tables: don't allow to rename to already-pending name, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: nf_tables: free flow table struct too, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter fixes for net, David Miller
  • [PATCH 0/9] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: nf_conncount: split gc in two phases, Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: nf_conncount: move all list iterations under spinlock, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: nf_conncount: fix argument order to find_next_bit, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: nf_conncount: merge lookup and add functions, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: nf_conncount: restart search when nodes have been erased, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: nf_conncount: speculative garbage collection on empty lists, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: nf_tables: fix a missing check of nla_put_failure, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: nf_conncount: replace CONNCOUNT_LOCK_SLOTS with CONNCOUNT_SLOTS, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: nf_conncount: don't skip eviction when age is negative, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter fixes for net, David Miller
  • [PATCH 0/9] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: nft_set_rbtree: check for inactive element after flag mismatch, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: nf_flowtable: remove duplicated transition in diagram, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: nf_tables: add missing ->release_ops() in error path of newrule(), Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: ip6t_srh: fix NULL pointer dereferences, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: nf_tables: bogus EBUSY in helper removal from transaction, Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: nft_redir: fix module autoload with ip4, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: nf_conntrack_sip: remove direct dependency on IPv6, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter fixes for net, David Miller
  • [PATCH 0/9] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets, Pablo Neira Ayuso
    • [PATCH 7/9] bridge: ebtables: don't crash when using dnat target in output chains, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: nf_tables: Align nft_expr private data to 64-bit, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: nf_tables: bogus EOPNOTSUPP on basechain update, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: nf_tables_offload: skip EBUSY on chain update, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: nf_tables: fix unexpected EOPNOTSUPP error, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICT, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: ipset: Fix an error code in ip_set_sockfn_get(), Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: nf_tables_offload: check for register data length mismatches, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter fixes for net, David Miller
  • [PATCH 0/9] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: arp_tables: init netns pointer in xt_tgchk_param struct, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: nft_flow_offload: fix underflow in flowtable reference counter, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: nf_tables: unbind callbacks from flowtable destroy path, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: conntrack: dccp, sctp: handle null timeout argument, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: nf_flow_table_offload: fix the nat port mangle., Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: flowtable: add nf_flowtable_time_stamp, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: nf_flow_table_offload: check the status of dst_neigh, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: nf_flow_table_offload: fix incorrect ethernet dst address, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter fixes for net, David Miller
  • [PATCH 0/9] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: xt_hashlimit: reduce hashlimit_mutex scope for htable_put(), Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: conntrack: split resolve_clash function, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: nft_set_pipapo: Don't abuse unlikely() in pipapo_refill(), Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: conntrack: allow insertion of clashing entries, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: nft_set_pipapo: Fix mapping table example in comments, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: conntrack: place confirm-bit setting in a helper, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: flowtable: skip offload setup if disabled, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: conntrack: remove two args from resolve_clash, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: xt_hashlimit: limit the max size of hashtable, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter fixes for net, David Miller
• [PATCH V2] netfilter: ip6t_SYNPROXY: remove magic number, Liping Zhang
  • Re: [PATCH V2] netfilter: ip6t_SYNPROXY: remove magic number, Pablo Neira Ayuso
• BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Baozeng Ding
  • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Jozsef Kadlecsik
    • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Jozsef Kadlecsik
      • Message not available
        • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Baozeng Ding
          • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Jozsef Kadlecsik
            • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Pablo Neira Ayuso
            • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, David Miller
              • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Eric Dumazet
              • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Jan Engelhardt
                • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Eric Dumazet
                  • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Eric Dumazet
                    • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, David Miller
                      • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Eric Dumazet
                  • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Jozsef Kadlecsik
                    • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, Eric Dumazet
                • Re: BUG: net/netfilter: KASAN: stack-out-of-bounds in tcp_packet, David Miller
• [iptables PATCH] configure: exit if libnftnl is not found, Giuseppe Longo
  • Re: [iptables PATCH] configure: exit if libnftnl is not found, Jan Engelhardt
    • Message not available
      • Re: [iptables PATCH] configure: exit if libnftnl is not found, Jan Engelhardt
  • Re: [iptables PATCH] configure: exit if libnftnl is not found, Pablo Neira Ayuso
    • Re: [iptables PATCH] configure: exit if libnftnl is not found, Giuseppe Longo
      • Re: [iptables PATCH] configure: exit if libnftnl is not found, Pablo Neira Ayuso
• [PATCH V2] netfilter: ipv4: fix NULL dereference, Liping Zhang
  • Re: [PATCH V2] netfilter: ipv4: fix NULL dereference, Pablo Neira Ayuso
• [PATCH nf-next v6 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Stephane Bryant
  • [PATCH nf-next v6 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Stephane Bryant
    • Re: [PATCH nf-next v6 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Pablo Neira Ayuso
  • [PATCH nf-next v6 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Stephane Bryant
    • Re: [PATCH nf-next v6 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Pablo Neira Ayuso
  • Re: [PATCH nf-next v6 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Pablo Neira Ayuso
• [ANNOUNCE] Linux Security Summit 2016 - CFP, James Morris
• [PATCH nf] netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES, Pablo Neira Ayuso
• [PATCH nft] src: store parser location for handle and position IDs, Pablo Neira Ayuso
  • Re: [PATCH nft] src: store parser location for handle and position IDs, Arturo Borrero Gonzalez
• [PATCH] netfilter: ipv4: fix NULL dereference, Liping Zhang
  • Re: [PATCH] netfilter: ipv4: fix NULL dereference, Nikolay Borisov
    • Message not available
      • Re: [PATCH] netfilter: ipv4: fix NULL dereference, Nikolay Borisov
    • Re: [PATCH] netfilter: ipv4: fix NULL dereference, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: ipv4: fix NULL dereference, Pablo Neira Ayuso
    • Re:Re: [PATCH] netfilter: ipv4: fix NULL dereference, Liping Zhang
      • Re: Re: [PATCH] netfilter: ipv4: fix NULL dereference, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: ipv4: fix NULL dereference, Liping Zhang
• [PATCH] netfilter: ip6t_SYNPROXY: remove magic number, Liping Zhang
  • Re: [PATCH] netfilter: ip6t_SYNPROXY: remove magic number, Pablo Neira Ayuso
• [nft PATCH 1/3] src/rule.c: don't print trailing statement whitespace, Arturo Borrero Gonzalez
  • [nft PATCH 2/3] src/evaluate.c: improve rule management checks, Arturo Borrero Gonzalez
    • Re: [nft PATCH 2/3] src/evaluate.c: improve rule management checks, Pablo Neira Ayuso
      • Re: [nft PATCH 2/3] src/evaluate.c: improve rule management checks, Arturo Borrero Gonzalez
        • Re: [nft PATCH 2/3] src/evaluate.c: improve rule management checks, Pablo Neira Ayuso
  • [nft PATCH 3/3] tests/shell: add testcases for Netfilter bug #965, Arturo Borrero Gonzalez
    • Re: [nft PATCH 3/3] tests/shell: add testcases for Netfilter bug #965, Pablo Neira Ayuso
  • Re: [nft PATCH 1/3] src/rule.c: don't print trailing statement whitespace, Pablo Neira Ayuso
• [PATCH] netfilter: nfnetlink_queue: honor NFQA_CFG_F_FAIL_OPEN when netlink unicast fails, Pablo Neira Ayuso
• [PATCH] iptables: extensions: libxt_TEE: Add translation to nft, Roberto García
  • Re: [PATCH] iptables: extensions: libxt_TEE: Add translation to nft, Pablo Neira Ayuso
• [PATCH 1/4 v6] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
  • [PATCH 2/4 v6] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
    • Re: [PATCH 2/4 v6] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Pablo Neira Ayuso
      • Re: [PATCH 2/4 v6] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
        • Re: [PATCH 2/4 v6] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Pablo Neira Ayuso
  • [PATCH 3/4 v6] libnftnl: test: Update test to check new nftnl_udata features of nftnl_rule, Carlos Falgueras García
    • Re: [PATCH 3/4 v6] libnftnl: test: Update test to check new nftnl_udata features of nftnl_rule, Pablo Neira Ayuso
  • [PATCH 4/4 v6] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Carlos Falgueras García
    • Re: [PATCH 4/4 v6] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Pablo Neira Ayuso
  • Re: [PATCH 1/4 v6] libnftnl: Implement new buffer of TLV objects, Pablo Neira Ayuso
    • Re: [PATCH 1/4 v6] libnftnl: Implement new buffer of TLV objects, Pablo Neira Ayuso
• Test case example for conntrack expectation doesn't work?, Bill
  • Re: Test case example for conntrack expectation doesn't work?, Pablo Neira Ayuso
• [PATCH nf v3] netfilter: x_tables: perform more sanity tests on rule set, Florian Westphal
  • [PATCH 2/5] netfilter: x_tables: make sure e->next_offset covers remaining blob size, Florian Westphal
    • Re: [PATCH 2/5] netfilter: x_tables: make sure e->next_offset covers remaining blob size, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: x_tables: validate e->target_offset early, Florian Westphal
    • Re: [PATCH 1/5] netfilter: x_tables: validate e->target_offset early, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: x_tables: add and use xt_check_entry_target, Florian Westphal
    • Re: [PATCH 3/5] netfilter: x_tables: add and use xt_check_entry_target, Pablo Neira Ayuso
    • Re: [PATCH 3/5] netfilter: x_tables: add and use xt_check_entry_target, Florian Westphal
      • Re: [PATCH 3/5] netfilter: x_tables: add and use xt_check_entry_target, Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: x_tables: fix unconditional helper, Florian Westphal
    • Re: [PATCH 4/5] netfilter: x_tables: fix unconditional helper, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: x_tables: don't move to non-existant next rule, Florian Westphal
    • Re: [PATCH 5/5] netfilter: x_tables: don't move to non-existant next rule, Pablo Neira Ayuso
• Re: net/sctp: stack-out-of-bounds in sctp_getsockopt, Eric Dumazet
  • Re: net/sctp: stack-out-of-bounds in sctp_getsockopt, Baozeng
    • Re: net/sctp: stack-out-of-bounds in sctp_getsockopt, Eric Dumazet
    • Re: net/sctp: stack-out-of-bounds in sctp_getsockopt, Pablo Neira Ayuso
      • Re: net/sctp: stack-out-of-bounds in sctp_getsockopt, Baozeng
• [nft PATCH] tests/shell: add chain validations tests, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests/shell: add chain validations tests, Pablo Neira Ayuso
    • Re: [nft PATCH] tests/shell: add chain validations tests, Arturo Borrero Gonzalez
      • Re: [nft PATCH] tests/shell: add chain validations tests, Pablo Neira Ayuso
  • Re: [nft PATCH] tests/shell: add chain validations tests, Mart Frauenlob
    • Re: [nft PATCH] tests/shell: add chain validations tests, Arturo Borrero Gonzalez
• [PATCH v4] configure: Show support for connlabel, Shivani Bhardwaj
  • Re: [PATCH v4] configure: Show support for connlabel, Pablo Neira Ayuso
• [PATCH] openvswitch: Fix checking for new expected connections., Jarno Rajahalme
  • Re: [PATCH] openvswitch: Fix checking for new expected connections., Pablo Neira Ayuso
• [PATCH net-next] change nfqueue failopen to apply also to receive message buffer in addition to queue size, Yigal Reiss (yreiss)
  • Re: [PATCH net-next] change nfqueue failopen to apply also to receive message buffer in addition to queue size, Florian Westphal
    • RE: [PATCH net-next] change nfqueue failopen to apply also to receive message buffer in addition to queue size, Yigal Reiss (yreiss)
      • enhancing nfnetlink stats [was Re: [PATCH net-next] change nfqueue failopen to apply also to receive message buffer in addition to queue size], Pablo Neira Ayuso
  • Re: [PATCH net-next] change nfqueue failopen to apply also to receive message buffer in addition to queue size, Pablo Neira Ayuso
    • RE: [PATCH net-next] change nfqueue failopen to apply also to receive message buffer in addition to queue size, Yigal Reiss (yreiss)
      • Re: [PATCH net-next] change nfqueue failopen to apply also to receive message buffer in addition to queue size, Pablo Neira Ayuso
• [PATCH] Add systemd files, Sébastien Luttringer
  • Re: [PATCH] Add systemd files, Arturo Borrero Gonzalez
• [PATCH nf-next v5 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Stephane Bryant
  • [PATCH nf-next v5 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Stephane Bryant
  • [PATCH nf-next v5 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Stephane Bryant
    • Re: [PATCH nf-next v5 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Pablo Neira Ayuso
• [PATCH] change nfqueue fail-open mechanism to apply also to receive message, Yigal Reiss (yreiss)
  • Re: [PATCH] change nfqueue fail-open mechanism to apply also to receive message, kbuild test robot
• [PATCH 1/4] netfilter: x_tables: validate e->target_offset early, Florian Westphal
  • [PATCH 2/4] netfilter: x_tables: don't move to non-existent next rule, Florian Westphal
    • Re: [PATCH 2/4] netfilter: x_tables: don't move to non-existent next rule, Florian Westphal
  • [PATCH 3/4] netfilter: xtables: validate targets of jumps, Florian Westphal
  • [PATCH 4/4] netfilter: xtables: don't attempt to alloc more than 4g, Florian Westphal
• [PATCH] netfilter: x_tables: ensure e->next_offset consistency with table size, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: x_tables: ensure e->next_offset consistency with table size, Eric Dumazet
  • Re: [PATCH] netfilter: x_tables: ensure e->next_offset consistency with table size, Florian Westphal
• [PATCH] iptables-translate: translate iptables --flush, Guruswamy Basavaiah
  • Re: [PATCH] iptables-translate: translate iptables --flush, Pablo Neira Ayuso
• [nft PATCH 1/2] src/parser_bison: fix ruleid_spec ambiguity, Arturo Borrero Gonzalez
  • [nft PATCH 2/2] tests/shell: add testcases for Netfilter bug #965, Arturo Borrero Gonzalez
  • Re: [nft PATCH 1/2] src/parser_bison: fix ruleid_spec ambiguity, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [nft PATCH 1/2] src/parser_bison: fix ruleid_spec ambiguity, Arturo Borrero Gonzalez
    • [nft PATCH 2/2] tests/shell: add testcases for Netfilter bug #965, Arturo Borrero Gonzalez
      • Re: [nft PATCH 2/2] tests/shell: add testcases for Netfilter bug #965, Arturo Borrero Gonzalez
• [PATCH nf-next v4 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Stephane Bryant
  • [PATCH nf-next v4 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Stephane Bryant
  • [PATCH nf-next v4 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Stephane Bryant
    • Re: [PATCH nf-next v4 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Florian Westphal
• [PATCH] ulogd: fix cross compilation errors with mysql_config, Helmut Schaa
  • Re: [PATCH] ulogd: fix cross compilation errors with mysql_config, Eric Leblond
• [nft PATCH] tests/shell: add new testcases for commit/rollback, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests/shell: add new testcases for commit/rollback, Pablo Neira Ayuso
• [PATCH] iptables: Replace gethostbyname() with getaddrinfo(), Arpan Kapoor
  • Re: [PATCH] iptables: Replace gethostbyname() with getaddrinfo(), Jan Engelhardt
    • Re: [PATCH] iptables: Replace gethostbyname() with getaddrinfo(), Arpan Kapoor
  • Re: [PATCH] iptables: Replace gethostbyname() with getaddrinfo(), Pablo Neira Ayuso
• [PATCH] nft: include/mini-gmp.h is not included at "make dist", Magnus Öberg
  • Re: [PATCH] nft: include/mini-gmp.h is not included at "make dist", Pablo Neira Ayuso
• [nft PATCH] tests/shell: unload modules between tests, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests/shell: unload modules between tests, Pablo Neira Ayuso
  • Re: [nft PATCH] tests/shell: unload modules between tests, Piyush Pangtey
    • Re: [nft PATCH] tests/shell: unload modules between tests, Arturo Borrero Gonzalez
      • Re: [nft PATCH] tests/shell: unload modules between tests, Pablo Neira Ayuso
• [PATCHv2] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation, Laura Garcia Liebana
  • Re: [PATCHv2] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation, Pablo Neira Ayuso
• [PATCHv2] extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation, Laura Garcia Liebana
  • Re: [PATCHv2] extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation, Pablo Neira Ayuso
• [PATCHv7] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv7] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
• [ANNOUNCE] ipset 6.29 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 6.29 released, AllKind
    • Re: [ANNOUNCE] ipset 6.29 released, Jozsef Kadlecsik
• conntrack-tool question for contribution., Miguel Angel Ajo Pelayo
  • Re: conntrack-tool question for contribution., Arturo Borrero Gonzalez
    • Re: conntrack-tool question for contribution., Miguel Angel Ajo Pelayo
• [PATCH 1/4 v5] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
  • [PATCH 2/4 v5] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
  • [PATCH 3/4 v5] libnftnl: test: Update test to check new nftnl_udata features of nftnl_rule, Carlos Falgueras García
  • [PATCH 4/4 v5] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Carlos Falgueras García
    • Re: [PATCH 4/4 v5] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Pablo Neira Ayuso
      • Re: [PATCH 4/4 v5] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Carlos Falgueras García
  • Re: [PATCH 1/4 v5] libnftnl: Implement new buffer of TLV objects, Pablo Neira Ayuso
    • Re: [PATCH 1/4 v5] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
      • Re: [PATCH 1/4 v5] libnftnl: Implement new buffer of TLV objects, Pablo Neira Ayuso
• Memory-leak in nft, Piyush Pangtey
• [PATCH] netfilter: nf_conntrack: Uses pr_fmt() for logging., Weongyo Jeong
  • Re: [PATCH] netfilter: nf_conntrack: Uses pr_fmt() for logging., Pablo Neira Ayuso
• [nft 1/3] parser_bison: simplify hook_spec rule, Pablo Neira Ayuso
  • [nft 2/3] parser_bison: duplicate string returned by chain_type_name_lookup(), Pablo Neira Ayuso
  • [nft 3/3] parser_bison: release parsed type and hook name strings, Pablo Neira Ayuso
• [RFC PATCH 0/3] connlabel set support using extra setter attr, Florian Westphal
  • [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Florian Westphal
    • Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
      • Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Florian Westphal
        • Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Florian Westphal
          • Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
            • Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Florian Westphal
              • Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
        • Re: [PATCH nf-next 1/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
  • [PATCH libnftl 2/3] ct: add label set support, Florian Westphal
  • [PATCH nft 3/3] ct: add conntrack label set support, Florian Westphal
    • Re: [PATCH nft 3/3] ct: add conntrack label set support, Pablo Neira Ayuso
      • Re: [PATCH nft 3/3] ct: add conntrack label set support, Florian Westphal
• [ANNOUNCE] NetDev 1.1 videos now available, Pablo Neira Ayuso
• [PATCH] nft: Removed ^L characters, Piyush Pangtey
  • Re: [PATCH] nft: Removed ^L characters, Jan Engelhardt
• [PATCH v2] nft: Remove memory-leak, Piyush Pangtey
  • Re: [PATCH v2] nft: Remove memory-leak, Pablo Neira Ayuso
• [PATCH 00/18] Netfilter/IPVS/OVS updates for net-next, Pablo Neira Ayuso
  • [PATCH 01/18] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Pablo Neira Ayuso
  • [PATCH 05/18] ipvs: allow rescheduling after RST, Pablo Neira Ayuso
  • [PATCH 11/18] netfilter: Allow calling into nat helper without skb_dst., Pablo Neira Ayuso
  • [PATCH 16/18] openvswitch: Delay conntrack helper call for new connections., Pablo Neira Ayuso
  • [PATCH 03/18] ipvs: handle ip_vs_fill_iph_skb_off failure, Pablo Neira Ayuso
  • [PATCH 09/18] netfilter: x_tables: check for size overflow, Pablo Neira Ayuso
  • [PATCH 17/18] openvswitch: Interface with NAT., Pablo Neira Ayuso
  • [PATCH 15/18] openvswitch: Handle NF_REPEAT in conntrack action., Pablo Neira Ayuso
  • [PATCH 18/18] netfilter: nf_conntrack: consolidate lock/unlock into unlock_wait, Pablo Neira Ayuso
  • [PATCH 06/18] ipvs: correct initial offset of Call-ID header search in SIP persistence engine, Pablo Neira Ayuso
  • [PATCH 02/18] netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters, Pablo Neira Ayuso
  • [PATCH 13/18] openvswitch: Update the CT state key only after nf_conntrack_in()., Pablo Neira Ayuso
  • [PATCH 14/18] openvswitch: Find existing conntrack entry after upcall., Pablo Neira Ayuso
  • [PATCH 08/18] netfilter: nft_compat: check match/targetinfo attr size, Pablo Neira Ayuso
  • [PATCH 12/18] openvswitch: Add commentary to conntrack.c, Pablo Neira Ayuso
  • [PATCH 04/18] ipvs: drop first packet to redirect conntrack, Pablo Neira Ayuso
  • [PATCH 10/18] netfilter: Remove IP_CT_NEW_REPLY definition., Pablo Neira Ayuso
  • [PATCH 07/18] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length, Pablo Neira Ayuso
  • Re: [PATCH 00/18] Netfilter/IPVS/OVS updates for net-next, David Miller
• [PATCH] Shows proper function name for pr_debug() messages., Weongyo Jeong
  • Re: [PATCH] Shows proper function name for pr_debug() messages., Pablo Neira Ayuso
    • Re: [PATCH] Shows proper function name for pr_debug() messages., Weongyo Jeong
• [PATCH v2] netfilter: fix race condition in ipset save, swap and delete, Vishwanath Pai
  • Re: [PATCH v2] netfilter: fix race condition in ipset save, swap and delete, Jozsef Kadlecsik
• [PATCH 1/2 nft] src: revisit cache population logic, Pablo Neira Ayuso
  • [PATCH 2/2 nft] evaluate: use table_lookup_global() from expr_evaluate_symbol(), Pablo Neira Ayuso
  • Re: [PATCH 1/2 nft] src: revisit cache population logic, Pablo Neira Ayuso
• [PATCH nf-next resend 0/3] netfilter: connlabel set support, Florian Westphal
  • [PATCH nf-next v3 1/3] netfilter: connlabels: move helpers to xt_connlabel, Florian Westphal
  • [PATCH nf-next v3 2/3] netfilter: labels: don't emit ct event if labels are unchanged, Florian Westphal
  • [PATCH nf-next v3 3/3] netfilter: nftables: add connlabel set support, Florian Westphal
    • Re: [PATCH nf-next v3 3/3] netfilter: nftables: add connlabel set support, kbuild test robot
  • [PATCH nf-next v4 3/3] netfilter: nftables: add connlabel set support, Florian Westphal
    • Re: [PATCH nf-next v4 3/3] netfilter: nftables: add connlabel set support, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack: consolidate lock/unlock into unlock_wait, Nicholas Mc Guire
  • Re: [PATCH] netfilter: nf_conntrack: consolidate lock/unlock into unlock_wait, Pablo Neira Ayuso
• [PATCH] nft: Remove memory-leak, Piyush Pangtey
  • Re: [PATCH] nft: Remove memory-leak, Pablo Neira Ayuso
• libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working, ravin goyal
  • <Possible follow-ups>
  • libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working, ravin goyal
    • Re: libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working, Pablo Neira Ayuso
      • Message not available
        • Re: libnetfilter_conntrack's NFCT_OF_TIMESTAMP is not working, Pablo Neira Ayuso
• [RFC] nft: Remove memory-leak, Piyush Pangtey
  • Re: [RFC] nft: Remove memory-leak, Florian Westphal
    • Re: [RFC] nft: Remove memory-leak, Piyush Pangtey
• [PATCH v5] extensions: libxt_multiport: Add translation to nft, Piyush Pangtey
  • Re: [PATCH v5] extensions: libxt_multiport: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH v5] extensions: libxt_multiport: Add translation to nft, Piyush Pangtey
• [PATCH] netfilter: fix race condition in ipset save and delete, Vishwanath Pai
  • Re: [PATCH] netfilter: fix race condition in ipset save and delete, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: fix race condition in ipset save and delete, Vishwanath Pai
• [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 6.28 released, Jan Engelhardt
    • Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
      • Re: [ANNOUNCE] ipset 6.28 released, Jan Engelhardt
        • Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
      • Re: [ANNOUNCE] ipset 6.28 released, Jan Engelhardt
        • Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
          • Re: [ANNOUNCE] ipset 6.28 released, Jan Engelhardt
            • Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
    • Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
      • Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
        • Re: [ANNOUNCE] ipset 6.28 released, Michal Kubecek
          • Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
            • Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
              • Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
              • Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
                • Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
                  • Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
                    • Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
                      • Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
                        • Re: [ANNOUNCE] ipset 6.28 released, Akshat Kakkar
                          • Re: [ANNOUNCE] ipset 6.28 released, Jozsef Kadlecsik
• [PATCH] extensions: libip6t_REJECT: Avoid to print the default reject with value in the translation, Laura Garcia Liebana
• [PATCH] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation, Laura Garcia Liebana
  • Re: [PATCH] extensions: libipt_REJECT: Avoid to print the default reject with value in the translation, Pablo Neira Ayuso
• [PATCHv6] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
  • Re: [Outreachy kernel] [PATCHv6] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
• [PATCH v3] configure: Show support for connlabel, Shivani Bhardwaj
  • Re: [PATCH v3] configure: Show support for connlabel, Pablo Neira Ayuso
    • Re: [PATCH v3] configure: Show support for connlabel, Shivani Bhardwaj
      • Re: [PATCH v3] configure: Show support for connlabel, Pablo Neira Ayuso
• Re: userns, netns, and quick physical memory consumption by unprivileged user, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_LOG: Avoid to print the default log level in the translation, Roberto García
  • Re: [PATCH] extensions: libip6t_LOG: Avoid to print the default log level in the translation, Pablo Neira Ayuso
• [PATCH v4] extensions: libxt_multiport: Add translation to nft, Piyush Pangtey
  • Re: [PATCH v4] extensions: libxt_multiport: Add translation to nft, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH v4] extensions: libxt_multiport: Add translation to nft, Piyush Pangtey
• [PATCH 1/4 v4] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
  • [PATCH 2/4 v4] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
  • [PATCH 3/4 v4] libnftnl: test: Actualize test to check new nftnl_udata features of nftnl_rule, Carlos Falgueras García
  • [PATCH 4/4 v4] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Carlos Falgueras García
    • Re: [PATCH 4/4 v4] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Pablo Neira Ayuso
      • Re: [PATCH 4/4 v4] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf, Carlos Falgueras García
  • Re: [PATCH 1/4 v4] libnftnl: Implement new buffer of TLV objects, Pablo Neira Ayuso
    • Re: [PATCH 1/4 v4] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
• [PATCH nf-next v10 0/8] openvswitch: NAT support, Jarno Rajahalme
  • [PATCH nf-next v10 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
  • [PATCH nf-next v10 3/8] openvswitch: Add commentary to conntrack.c, Jarno Rajahalme
    • Re: [PATCH nf-next v10 3/8] openvswitch: Add commentary to conntrack.c, Joe Stringer
  • [PATCH nf-next v10 4/8] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
  • [PATCH nf-next v10 2/8] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
  • [PATCH nf-next v10 5/8] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
  • [PATCH nf-next v10 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
    • Re: [PATCH nf-next v10 8/8] openvswitch: Interface with NAT., Joe Stringer
  • [PATCH nf-next v10 7/8] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
    • Re: [PATCH nf-next v10 7/8] openvswitch: Delay conntrack helper call for new connections., Joe Stringer
      • Re: [PATCH nf-next v10 7/8] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
  • [PATCH nf-next v10 6/8] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
  • Re: [PATCH nf-next v10 0/8] openvswitch: NAT support, Pablo Neira Ayuso
• [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation, Laura Garcia Liebana
  • Re: [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation, Shivani Bhardwaj
    • Re: [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation, Pablo Neira Ayuso
  • Re: [PATCH] extensions: libipt_LOG: Avoid to print the default log level in the translation, Pablo Neira Ayuso
• [PATCH v2] configure: Show support for connlabel, Shivani Bhardwaj
  • Re: [PATCH v2] configure: Show support for connlabel, Pablo Neira Ayuso
• [PATCH nf v2] netfilter: x_tables: don't rely on well-behaving userspace, Florian Westphal
• [PATCHv5] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv5] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
• [PATCHv4] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
• [PATCH libnftnl] trace: fix missing NFTNL_TRACE_JUMP_TARGET in nftnl_trace_get_str(), Patrick McHardy
• [iptables PATCH 1/2] extensions/libxt_rpfilter.man: fix typo, specifiy vs specify, Arturo Borrero Gonzalez
  • [iptables PATCH 2/2] iptables/xtables-arp.c: fix typo, wierd vs weird, Arturo Borrero Gonzalez
  • Re: [iptables PATCH 1/2] extensions/libxt_rpfilter.man: fix typo, specifiy vs specify, Florian Westphal
• [PATCH nf] netfilter: x_tables: check for size overflow, Florian Westphal
  • Re: [PATCH nf] netfilter: x_tables: check for size overflow, Pablo Neira Ayuso
• [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Florian Westphal
  • Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Ben Hawkes
      • Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Michal Kubecek
      • Re: [PATCH nf] netfilter: x_tables: deal with bogus nextoffset values, Pablo Neira Ayuso
• [PATCH nf-next v9 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
  • [PATCH nf-next v9 2/8] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
  • [PATCH nf-next v9 5/8] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
    • Re: [PATCH nf-next v9 5/8] openvswitch: Find existing conntrack entry after upcall., Joe Stringer
  • [PATCH nf-next v9 3/8] openvswitch: Add commentary to conntrack.c, Jarno Rajahalme
  • [PATCH nf-next v9 7/8] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
    • Re: [PATCH nf-next v9 7/8] openvswitch: Delay conntrack helper call for new connections., Joe Stringer
  • [PATCH nf-next v9 6/8] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
  • [PATCH nf-next v9 4/8] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
    • Re: [ovs-dev] [PATCH nf-next v9 4/8] openvswitch: Update the CT state key only after nf_conntrack_in()., Joe Stringer
  • [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
    • Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Joe Stringer
      • Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Thomas Graf
        • Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
      • Re: [PATCH nf-next v9 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
• Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
  • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
    • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
      • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
        • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
          • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
            • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
              • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
                • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cong Wang
                  • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
                    • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                      • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
                        • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                          • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                          • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
                            • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                              • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                                • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
                                  • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                                    • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
                                      • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Florian Westphal
                                      • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                                      • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                                        • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cyrill Gorcunov
                                          • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, David Miller
                    • Re: [RFC] net: ipv4 -- Introduce ifa limit per net, Cong Wang
• NFQUEUE "fail-open" only open to queue limit and not receive buffer limit, Yigal Reiss (yreiss)
  • Re: NFQUEUE "fail-open" only open to queue limit and not receive buffer limit, Florian Westphal
• [PATCH nft] proto: Add router advertisement and solicitation icmp types, Laura Garcia Liebana
  • Re: [PATCH nft] proto: Add router advertisement and solicitation icmp types, Pablo Neira Ayuso
• [PATCH iptables] iptables-translate: pass ipt_entry and ip6t_entry to ->xlate(), Pablo Neira Ayuso
• [PATCH nft] parser_bison: allow 'snat' and 'dnat' keywords from the right-hand side, Pablo Neira Ayuso
• nft: Modified punctuation used in nft's show_help, Piyush Pangtey
  • Re: nft: Modified punctuation used in nft's show_help, Pablo Neira Ayuso
• [PATCH nf-next v8 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
  • [PATCH nf-next v8 2/8] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
  • [PATCH nf-next v8 3/8] openvswitch: Add commentary to conntrack.c, Jarno Rajahalme
    • Re: [PATCH nf-next v8 3/8] openvswitch: Add commentary to conntrack.c, Sergei Shtylyov
      • Re: [PATCH nf-next v8 3/8] openvswitch: Add commentary to conntrack.c, Jarno Rajahalme
  • [PATCH nf-next v8 4/8] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
  • [PATCH nf-next v8 5/8] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
  • [PATCH nf-next v8 6/8] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
  • [PATCH nf-next v8 7/8] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
  • [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
    • Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., kbuild test robot
    • Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., kbuild test robot
    • Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., kbuild test robot
      • Re: [PATCH nf-next v8 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
  • Re: [PATCH nf-next v8 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Or Gerlitz
    • Re: [PATCH nf-next v8 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
• [PATCH nft 1/4] tests: frag: enable more tests, Florian Westphal
  • [PATCH nft 2/4] netlink_delinearize: fix bogus offset w exthdr expressions, Florian Westphal
  • [PATCH nft 3/4] nft-test: don't zap remainder of rule after handling a set, Florian Westphal
  • [PATCH nft 4/4] netlink_delinarize: shift constant for ranges too, Florian Westphal
  • Re: [PATCH nft 1/4] tests: frag: enable more tests, Pablo Neira Ayuso
• [PATCH] netfilter: nft_compat: check match/targetinfo attr size, Florian Westphal
  • Re: [PATCH] netfilter: nft_compat: check match/targetinfo attr size, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nft_compat: check match/targetinfo attr size, Florian Westphal
      • Re: [PATCH] netfilter: nft_compat: check match/targetinfo attr size, Pablo Neira Ayuso
• [PATCH 1/4 v3] libnftnl: Implement new buffer of TLV objects., Carlos Falgueras García
  • Re: [PATCH 1/4 v3] libnftnl: Implement new buffer of TLV objects., Pablo Neira Ayuso
• [PATCH 00/10] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH 01/10] netfilter: ipvs: Remove noisy debug print from ip_vs_del_service, Pablo Neira Ayuso
  • [PATCH 03/10] netfilter: meta: add PRANDOM support, Pablo Neira Ayuso
  • [PATCH 07/10] netfilter: xtables: don't hook tables by default, Pablo Neira Ayuso
  • [PATCH 04/10] netfilter: xt_osf: remove unused variable, Pablo Neira Ayuso
  • [PATCH 02/10] netfilter: ipvs: avoid unused variable warnings, Pablo Neira Ayuso
  • [PATCH 05/10] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check(), Pablo Neira Ayuso
  • [PATCH 10/10] netfilter: nft_masq: support port range, Pablo Neira Ayuso
  • [PATCH 09/10] netfilter: don't call hooks unless needed, Pablo Neira Ayuso
  • [PATCH 08/10] netfilter: bridge: register hooks only when bridge interface is added, Pablo Neira Ayuso
  • [PATCH 06/10] netfilter: xtables: prepare for on-demand hook register, Pablo Neira Ayuso
  • Re: [PATCH 00/10] Netfilter/IPVS updates for net-next, David Miller
• [PATCHv3] extensions: libip6t_icmp6: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv3] extensions: libip6t_icmp6: Add translation to nft, Pablo Neira Ayuso
• [PATCHv3] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv3] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
    • [PATCH] libxt_multiport: Add translation to nft, FaTe
      • Re: [PATCH] libxt_multiport: Add translation to nft, Pablo Neira Ayuso
        • Re: [PATCH] libxt_multiport: Add translation to nft, Piyush Pangtey
        • [PATCH v2] libxt_multiport: Add translation to nft, Piyush Pangtey
          • Re: [PATCH v2] libxt_multiport: Add translation to nft, Pablo Neira Ayuso
            • [PATCH v3] libxt_multiport: Add translation to nft, Piyush Pangtey
              • Re: [PATCH v3] libxt_multiport: Add translation to nft, Pablo Neira Ayuso
    • Regarding libxt_multiport translation in nft, FaTe
      • Re: Regarding libxt_multiport translation in nft, Arturo Borrero Gonzalez
        • Re: Regarding libxt_multiport translation in nft, Piyush Pangtey
    • [PATCH] libip6t_hbh: Add translation to nft, FaTe
      • Re: [PATCH] libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
• [PATCH 1/4 v3] libnftnl: Implement new buffer of TLV objects, Carlos Falgueras García
  • [PATCH 4/4 v3] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf MIME-Version: 1.0, Carlos Falgueras García
    • Re: [PATCH 4/4 v3] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf MIME-Version: 1.0, Pablo Neira Ayuso
      • Re: [PATCH 4/4 v3] nftables: rule: Change the field "rule->comment" for an nftnl_udata_buf MIME-Version: 1.0, Carlos Falgueras García
  • [PATCH 2/4 v3] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
    • Re: [PATCH 2/4 v3] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Pablo Neira Ayuso
      • Re: [PATCH 2/4 v3] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer, Carlos Falgueras García
  • [PATCH 3/4] libnftnl: test: Actualize test to check new nftnl_udata features of nftnl_rule, Carlos Falgueras García
• [PATCH] doc: nft: Fixed a typo and added/changed punctuation, Piyush Pangtey
  • Re: [PATCH] doc: nft: Fixed a typo and added/changed punctuation, Pablo Neira Ayuso
    • [PATCH v2] doc: nft: Fixed a typo and added/changed punctuation, FaTe
      • Re: [PATCH v2] doc: nft: Fixed a typo and added/changed punctuation, Pablo Neira Ayuso
• [PATCH 1/2 nft] parser: remove 'reset' as reserve keyword, Pablo Neira Ayuso
  • [PATCH 2/2 nft] tests/py: enable tests for dccp types, Pablo Neira Ayuso
• [PATCH libnftnl] trace: fix multiple copy and paste errors, Patrick McHardy
  • Re: [PATCH libnftnl] trace: fix multiple copy and paste errors, Florian Westphal
• [PATCH] configure: Show support for connlabel, Shivani Bhardwaj
  • Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
    • Re: [PATCH] configure: Show support for connlabel, Shivani Bhardwaj
      • Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
        • Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
          • Re: [PATCH] configure: Show support for connlabel, Shivani Bhardwaj
            • Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
              • Re: [PATCH] configure: Show support for connlabel, Jan Engelhardt
                • Re: [PATCH] configure: Show support for connlabel, Pablo Neira Ayuso
• [GIT PULL v2 0/4] IPVS Fixes for v4.5, Simon Horman
  • [PATCH 1/4] ipvs: handle ip_vs_fill_iph_skb_off failure, Simon Horman
  • [PATCH 2/4] ipvs: drop first packet to redirect conntrack, Simon Horman
  • [PATCH 4/4] ipvs: correct initial offset of Call-ID header search in SIP persistence engine, Simon Horman
  • [PATCH 3/4] ipvs: allow rescheduling after RST, Simon Horman
  • Re: [GIT PULL v2 0/4] IPVS Fixes for v4.5, Pablo Neira Ayuso
• [PATCHv2] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
  • Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Laura Garcia
      • Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Shivani Bhardwaj
        • Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
        • Re: [PATCHv2] extensions: libipt_icmp: Add translation to nft, Laura Garcia
• [PATCHv2] extensions: libip6t_icmp6: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCHv2] extensions: libip6t_icmp6: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCHv2] extensions: libip6t_icmp6: Add translation to nft, Laura Garcia
      • Re: [PATCHv2] extensions: libip6t_icmp6: Add translation to nft, Pablo Neira Ayuso
• [PATCH libmnl] Move declaration of visibility attributes before definition., Peter Foley
  • Re: [PATCH libmnl] Move declaration of visibility attributes before definition., Pablo Neira Ayuso
    • Re: [PATCH libmnl] Move declaration of visibility attributes before definition., Peter Foley
• [PATCH] extensions: libip6t_rt.c: Add translation to nft, Janani Ravichandran
  • Re: [PATCH] extensions: libip6t_rt.c: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libxt_connlabel: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
    • Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Shivani Bhardwaj
        • Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Florian Westphal
          • Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
        • Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Pablo Neira Ayuso
          • Re: [PATCH] extensions: libxt_connlabel: Add translation to nft, Shivani Bhardwaj
• [PATCH] extensions: libipt_icmp: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH] extensions: libipt_icmp: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH] extensions: libipt_icmp: Add translation to nft, Laura Garcia
  • Re: [PATCH] extensions: libipt_icmp: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_icmp6: Add translation to nft, Laura Garcia Liebana
• Reading rules from multiple files, Piyush Pangtey
• Re: using connlabel match, Pablo Neira Ayuso
• Seeking help for implementing CT HELPER in nftables, christophe leroy
  • Re: Seeking help for implementing CT HELPER in nftables, Patrick McHardy
    • Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
      • Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
        • Re: Seeking help for implementing CT HELPER in nftables, Florian Westphal
          • Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
            • Re: Seeking help for implementing CT HELPER in nftables, Florian Westphal
              • Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
                • Re: Seeking help for implementing CT HELPER in nftables, Pablo Neira Ayuso
                  • Re: Seeking help for implementing CT HELPER in nftables, Florian Westphal
                  • Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
                    • Re: Seeking help for implementing CT HELPER in nftables, Pablo Neira Ayuso
                      • Re: Seeking help for implementing CT HELPER in nftables, Christophe Leroy
                  • Re: Seeking help for implementing CT HELPER in nftables, Florian Westphal
• Nftables issues with modular rulesets, Puustinen, Ismo
• [PATCH nft] rule: simplify ("rule: delete extra space in sets printing"), Pablo Neira Ayuso
  • Re: [PATCH nft] rule: simplify ("rule: delete extra space in sets printing"), Arturo Borrero Gonzalez
• [PATCH v3] extensions: libxt_dccp: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v3] extensions: libxt_dccp: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH v3] extensions: libxt_dccp: Add translation to nft, Shivani Bhardwaj
      • Re: [PATCH v3] extensions: libxt_dccp: Add translation to nft, Pablo Neira Ayuso
• [PATCH v2] extensions: libxt_dccp: Add translation to nft, Shivani Bhardwaj
• extensions: libxt_multiport: Multiport translations, Piyush Pangtey
  • Re: extensions: libxt_multiport: Multiport translations, Pablo Neira Ayuso
• [PATCH nft 1/3] expression: add helper to decide if operator needs to be shown, Florian Westphal
  • [PATCH nft 3/4] meta: add probability matching, Florian Westphal
    • Re: [PATCH nft 3/4] meta: add probability matching, Jan Engelhardt
      • Re: [PATCH nft 3/4] meta: add probability matching, Florian Westphal
        • Re: [PATCH nft 3/4] meta: add probability matching, Jan Engelhardt
          • Re: [PATCH nft 3/4] meta: add probability matching, Florian Westphal
            • Re: [PATCH nft 3/4] meta: add probability matching, Jan Engelhardt
              • Re: [PATCH nft 3/4] meta: add probability matching, Florian Westphal
  • [PATCH nft 4/4] meta: add tests for probability matching, Florian Westphal
• [PATCH v2] extensions: libxt_sctp: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
• [PATCH v2] extensions: libxt_owner: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libxt_owner: Add translation to nft, Pablo Neira Ayuso
• [PATCH nft 0/1] Proposal: include directories for rulesets, Ismo Puustinen
  • [PATCH nft 1/1] scanner: add support for include directories, Ismo Puustinen
  • Re: [PATCH nft 0/1] Proposal: include directories for rulesets, Arturo Borrero Gonzalez
    • Re: [PATCH nft 0/1] Proposal: include directories for rulesets, Puustinen, Ismo
• [PATCH v2] extensions: libip6t_MASQUERADE: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libip6t_MASQUERADE: Add translation to nft, Pablo Neira Ayuso
• [PATCH v2] extensions: libipt_MASQUERADE: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libipt_MASQUERADE: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_hbh: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Shivani Bhardwaj
      • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] extensions: libip6t_hbh: Add translation to nft, Laura Garcia Liebana
    • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Laura Garcia
• [PATCH] extensions: libxt_sctp: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Shivani Bhardwaj
        • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Jan Engelhardt
          • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
        • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
• [PATCH v3] extensions: libxt_statistic: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
      • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
        • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
          • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso