Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH v2] extensions: libxt_owner: Add translation to nft, (continued)
  • Re: [PATCH v2] extensions: libxt_owner: Add translation to nft, Pablo Neira Ayuso
• [PATCH nft 0/1] Proposal: include directories for rulesets, Ismo Puustinen
  • [PATCH nft 1/1] scanner: add support for include directories, Ismo Puustinen
  • Re: [PATCH nft 0/1] Proposal: include directories for rulesets, Arturo Borrero Gonzalez
    • Re: [PATCH nft 0/1] Proposal: include directories for rulesets, Puustinen, Ismo
• [PATCH v2] extensions: libip6t_MASQUERADE: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libip6t_MASQUERADE: Add translation to nft, Pablo Neira Ayuso
• [PATCH v2] extensions: libipt_MASQUERADE: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libipt_MASQUERADE: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_hbh: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Shivani Bhardwaj
      • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] extensions: libip6t_hbh: Add translation to nft, Laura Garcia Liebana
    • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH] extensions: libip6t_hbh: Add translation to nft, Laura Garcia
• [PATCH] extensions: libxt_sctp: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Shivani Bhardwaj
        • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Jan Engelhardt
          • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
        • Re: [PATCH] extensions: libxt_sctp: Add translation to nft, Pablo Neira Ayuso
• [PATCH v3] extensions: libxt_statistic: Add translation to nft, Laura Garcia Liebana
  • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
      • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
        • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
          • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
            • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
      • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Jan Engelhardt
        • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
          • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Jan Engelhardt
            • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
          • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
            • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Florian Westphal
              • Re: [PATCH v3] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libxt_owner: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_owner: Add translation to nft, Pablo Neira Ayuso
• [PATCH nft,v3] src: Add support for masquerade port selection, Pablo Neira Ayuso
• [PATCH libnftnl] expr: masq: Add support for port selection, Pablo Neira Ayuso
• [PATCH nf-next,v2] netfilter: nft_masq: support port range, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_MASQUERADE: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_MASQUERADE: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libipt_MASQUERADE: Add translation to nft, Shivani Bhardwaj
• Re: [PATCH] iptables: extensions: iptables-translate prints extra "nft" after printing any error, Pablo Neira Ayuso
• [PATCH nft 00/10] nft: exthdr fixes and improvements, Florian Westphal
  • [PATCH nft 01/10] evaluate: enforce ip6 proto with exthdr expression, Florian Westphal
  • [PATCH nft 02/10] netlink: split generic part of netlink_gen_payload_mask into helper, Florian Westphal
  • [PATCH nft 03/10] netlink: add and use netlink_gen_exthdr_mask, Florian Westphal
  • [PATCH nft 04/10] payload: move payload_gen_dependency generic part to helper, Florian Westphal
  • [PATCH nft 05/10] exthdr: generate dependencies for inet/bridge/netdev family, Florian Westphal
  • [PATCH nft 06/10] tests: add/fix inet+exthdr tests, Florian Westphal
  • [PATCH nft 07/10] exthdr: remove implicit dependencies, Florian Westphal
  • [PATCH nft 08/10] exthdr: store offset for later use, Florian Westphal
  • [PATCH nft 09/10] netlink_delinearize: prepare binop_postprocess for exthdr demux, Florian Westphal
  • [PATCH nft 10/10] netlink_delinearize: handle extension header templates with odd sizes, Florian Westphal
  • Re: [PATCH nft 00/10] nft: exthdr fixes and improvements, Pablo Neira Ayuso
• [PATCH nft v2] src: Add support for masquerade port selection, Pablo Neira Ayuso
• [PATCH] extensions: libxt_dccp: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_dccp: Add translation to nft, Pablo Neira Ayuso
• [PATCH] src: proto: Add missing packet type, Shivani Bhardwaj
  • Re: [PATCH] src: proto: Add missing packet type, Florian Westphal
    • Re: [PATCH] src: proto: Add missing packet type, Shivani Bhardwaj
      • Re: [PATCH] src: proto: Add missing packet type, Florian Westphal
        • Re: [PATCH] src: proto: Add missing packet type, Pablo Neira Ayuso
• [PATCH] extensions: libxt_statistic: Add translation to nft, Laura Garcia Liebana
  • Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Shivani Bhardwaj
    • Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
      • Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Laura Garcia
        • Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
    • Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Laura Garcia
      • Re: [Outreachy kernel] [PATCH] extensions: libxt_statistic: Add translation to nft, Pablo Neira Ayuso
• [ANNOUNCE] NetDev 1.1 slides now available, Pablo Neira Ayuso
• [PATCH nft] evaluate: reject set references in set elements, Florian Westphal
  • Re: [PATCH nft] evaluate: reject set references in set elements, Pablo Neira Ayuso
• [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects., Carlos Falgueras García
  • [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Carlos Falgueras García
    • Re: [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Pablo Neira Ayuso
      • Re: [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Carlos Falgueras García
        • Re: [PATCH 2/3 v2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Pablo Neira Ayuso
  • [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Carlos Falgueras García
    • Re: [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Pablo Neira Ayuso
      • Re: [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Carlos Falgueras García
        • Re: [PATCH 3/3 v2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Pablo Neira Ayuso
  • Re: [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects., Pablo Neira Ayuso
    • Re: [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects., Carlos Falgueras García
      • Re: [PATCH 1/3 v2] libnftnl: Implement new buffer of TLV objects., Pablo Neira Ayuso
• [BUG] kernel crash in br_netfilter, Zefir Kurtisi
  • Re: [BUG] kernel crash in br_netfilter, Zefir Kurtisi
    • Re: [BUG] kernel crash in br_netfilter, Florian Westphal
      • Re: [BUG] kernel crash in br_netfilter, Felix Fietkau
• unused code in net/netfilter/ipset/ip_set_bitmap_ipmac.c, Julia Lawall
  • Re: unused code in net/netfilter/ipset/ip_set_bitmap_ipmac.c, Jozsef Kadlecsik
    • Re: unused code in net/netfilter/ipset/ip_set_bitmap_ipmac.c, Julia Lawall
• [PATCH] src: netlink_delinearize: Fix datatype for len, Shivani Bhardwaj
  • Re: [PATCH] src: netlink_delinearize: Fix datatype for len, Florian Westphal
    • Re: [PATCH] src: netlink_delinearize: Fix datatype for len, Shivani Bhardwaj
• [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Florian Westphal
  • Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Pablo Neira Ayuso
    • Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Florian Westphal
      • Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Pablo Neira Ayuso
        • Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Florian Westphal
          • Re: [PATCH nft] datatype, meta: add new ifname_type for iifname/oifname, Pablo Neira Ayuso
• batch netlink messages - performance improvement, Yigal Reiss (yreiss)
  • Re: batch netlink messages - performance improvement, Florian Westphal
    • RE: batch netlink messages - performance improvement, Yigal Reiss (yreiss)
• [PATCH 0/2] iptables: utils: Add bash completion, Mart Frauenlob
  • [PATCH 1/2] iptables: utils: Add bash completion, Mart Frauenlob
    • Re: [PATCH 1/2] iptables: utils: Add bash completion, Pablo Neira Ayuso
      • Re: [PATCH 1/2] iptables: utils: Add bash completion, Jan Engelhardt
      • Re: [PATCH 1/2] iptables: utils: Add bash completion, Mart Frauenlob
        • Re: [PATCH 1/2] iptables: utils: Add bash completion, Pablo Neira Ayuso
          • Re: [PATCH 1/2] iptables: utils: Add bash completion, Mart Frauenlob
          • Re: [PATCH 1/2] iptables: utils: Add bash completion, Mart Frauenlob
  • [PATCH 2/2] iptables: Add bash completion to build routine, Mart Frauenlob
• [PATCH ipset] Add bash completion to the install routine., Mart Frauenlob
• [PATCH nf-next 0/4] netfilter: xtables: don't register hooks by default, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: xtables: prepare for on-demand hook register, Florian Westphal
  • [PATCH v4 nf-next 2/4] netfilter: xtables: don't hook tables by default, Florian Westphal
  • [PATCH v4 nf-next 4/4] netfilter: don't call hooks unless needed, Florian Westphal
  • [PATCH v4 nf-next 3/4] netfilter: bridge: register hooks only when bridge interface is added, Florian Westphal
  • Re: [PATCH nf-next 0/4] netfilter: xtables: don't register hooks by default, Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters, Phil Turnbull
  • Re: [PATCH nf] netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters, Pablo Neira Ayuso
• [PATCH] netfilter: xt_osf: remove unused variable, Sudip Mukherjee
  • Re: [PATCH] netfilter: xt_osf: remove unused variable, Pablo Neira Ayuso
• netfilter: warning at net/ipv4/netfilter/nf_nat_l3proto_ipv4.c:275 nf_nat_ipv4_fn, Sasha Levin
• [PATCH] Fix musl compatibility, Loganaden Velvindron
  • Re: [PATCH] Fix musl compatibility, Pablo Neira Ayuso
    • Re: [PATCH] Fix musl compatibility, Loganaden Velvindron
• [PATCH] Add JSON output formatting to nfacct utility, Harald Welte
  • Re: [PATCH] Add JSON output formatting to nfacct utility, Pablo Neira Ayuso
• [PATCH] add JSON output format, Harald Welte
  • Re: [PATCH] add JSON output format, Pablo Neira Ayuso
• [PATCH 1/2] iptables: nft-ipv6: Use meta l4proto instead of nexthdr, Shivani Bhardwaj
  • [PATCH 2/2] extensions: libip6t_mh: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH 2/2] extensions: libip6t_mh: Add translation to nft, Pablo Neira Ayuso
  • Re: [PATCH 1/2] iptables: nft-ipv6: Use meta l4proto instead of nexthdr, Pablo Neira Ayuso
• [PATCH] libnftnl: Implement new buffer of TLV objects., Carlos Falgueras García
  • [PATCH 1/2] libnftnl: rule: Change the "userdata" attribute to use new TLV buffer., Carlos Falgueras García
  • [PATCH 2/2] nftables: rule: Change the field "rule->comment" for an nftnl_attrbuf., Carlos Falgueras García
• [PATCH V7] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH V7] netfilter: h323: avoid potential attack, Pablo Neira Ayuso
    • Re: Re: [PATCH V7] netfilter: h323: avoid potential attack, Zhouyi Zhou
• [PATCH nf-next v3 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Stephane Bryant
  • [PATCH nf-next v3 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Stephane Bryant
    • Re: [PATCH nf-next v3 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Pablo Neira Ayuso
      • Re: [PATCH nf-next v3 2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, stéphane bryant
  • [PATCH nf-next v3 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Stephane Bryant
    • Re: [PATCH nf-next v3 3/3] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Florian Westphal
• [GIT PULL nf 0/3] IPVS Fixes for v4.5, Simon Horman
  • [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST, Simon Horman
    • Re: [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST, Sergei Shtylyov
      • Re: [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST, Julian Anastasov
  • [PATCH nf 3/3] netfilter: ipvs: handle ip_vs_fill_iph_skb_off failure, Simon Horman
  • [PATCH nf 1/3] netfilter: ipvs: drop first packet to redirect conntrack, Simon Horman
• [GIT PULL nf-next 0/2] IPVS Updates for v4.6, Simon Horman
  • [PATCH nf-next 2/2] netfilter: ipvs: avoid unused variable warnings, Simon Horman
  • [PATCH nf-next 1/2] netfilter: ipvs: Remove noisy debug print from ip_vs_del_service, Simon Horman
• [PATCH] conntrackd: Disable runtime systemd support by default, Pablo Neira Ayuso
  • Re: [PATCH] conntrackd: Disable runtime systemd support by default, Arturo Borrero Gonzalez
    • Re: [PATCH] conntrackd: Disable runtime systemd support by default, Pablo Neira Ayuso
• [RESEND PATCH -stable,4.x.y] netfilter: nf_nat_redirect: add missing NULL pointer check, Pablo Neira Ayuso
  • [RESEND PATCH -stable,4.3.y] netfilter: xt_TEE: fix NULL dereference, Pablo Neira Ayuso
• [PATCH conntrackd] conntrackd: Disable systemd support by default, Pablo Neira Ayuso
  • Re: [PATCH conntrackd] conntrackd: Disable systemd support by default, Arturo Borrero Gonzalez
    • Re: [PATCH conntrackd] conntrackd: Disable systemd support by default, Pablo Neira Ayuso
• Merging iptables-translate branch into master, Pablo Neira Ayuso
• [PATCH nf-next v2] netfilter: meta: add PRANDOM support, Florian Westphal
  • Re: [PATCH nf-next v2] netfilter: meta: add PRANDOM support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: meta: add PRANDOM support, Florian Westphal
  • Re: [PATCH nf-next] netfilter: meta: add PRANDOM support, Daniel Borkmann
    • Re: [PATCH nf-next] netfilter: meta: add PRANDOM support, Florian Westphal
      • Re: [PATCH nf-next] netfilter: meta: add PRANDOM support, Daniel Borkmann
        • Re: [PATCH nf-next] netfilter: meta: add PRANDOM support, Florian Westphal
• [PATCH 0/7] fix IS_ERR_VALUE usage, Andrzej Hajda
  • [PATCH 1/7] netfilter: fix IS_ERR_VALUE usage, Andrzej Hajda
    • Re: [PATCH 1/7] netfilter: fix IS_ERR_VALUE usage, Al Viro
      • Re: [PATCH 1/7] netfilter: fix IS_ERR_VALUE usage, Andrzej Hajda
  • Re: [PATCH 0/7] fix IS_ERR_VALUE usage, Arnd Bergmann
• [PATCH 0/6] Namespacify various ip sysctl knobs, Nikolay Borisov
  • [PATCH 1/6] ipv4: Namespaceify ip_default_ttl sysctl knob, Nikolay Borisov
  • [PATCH 3/6] ipv4: Namespacify ip_dynaddr sysctl knob, Nikolay Borisov
  • [PATCH 2/6] igmp: net: Move igmp namespace init to correct file, Nikolay Borisov
  • [PATCH 5/6] ipv4: namespacify ip fragment max dist sysctl knob, Nikolay Borisov
  • [PATCH 6/6] net: Export ip fragment sysctl to unprivileged users, Nikolay Borisov
  • [PATCH 4/6] ipv4: namespacify ip_early_demux sysctl knob, Nikolay Borisov
  • Re: [PATCH 0/6] Namespacify various ip sysctl knobs, David Miller
    • Re: [PATCH 0/6] Namespacify various ip sysctl knobs, Eric W. Biederman
    • Re: [PATCH 0/6] Namespacify various ip sysctl knobs, Nikolay Borisov
  • <Possible follow-ups>
  • [PATCH 0/6] Namespacify various ip sysctl knobs, Nikolay Borisov
    • [PATCH 4/6] ipv4: namespacify ip_early_demux sysctl knob, Nikolay Borisov
    • [PATCH 6/6] net: Export ip fragment sysctl to unprivileged users, Nikolay Borisov
    • [PATCH 5/6] ipv4: namespacify ip fragment max dist sysctl knob, Nikolay Borisov
    • [PATCH 2/6] igmp: net: Move igmp namespace init to correct file, Nikolay Borisov
    • [PATCH 1/6] ipv4: Namespaceify ip_default_ttl sysctl knob, Nikolay Borisov
    • [PATCH 3/6] ipv4: Namespacify ip_dynaddr sysctl knob, Nikolay Borisov
• [PATCH] extensions: libxt_tos: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_tos: Add translation to nft, Pablo Neira Ayuso
• [PATCH nf-next v2 0/2] netfilter: bridge: add queuing to userspace for AF_, stephane . ml . bryant
  • [PATCH nf-next v2 1/2] netfilter: bridge: add nf_afinfo to enable queuing to userspace, stephane . ml . bryant
    • Re: [PATCH nf-next v2 1/2] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Florian Westphal
  • [PATCH nf-next v2 2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, stephane . ml . bryant
    • Re: [PATCH nf-next v2 2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Florian Westphal
    • Re: [PATCH nf-next v2 2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Pablo Neira Ayuso
• kernel BUG at net/netfilter/nf_nat_core.c:395, Oleksandr Natalenko
• [PATCH] iptables: nft-ipv6: Fix ipv6 flags, Shivani Bhardwaj
  • Re: [PATCH] iptables: nft-ipv6: Fix ipv6 flags, Pablo Neira Ayuso
• Re: [PATCH iproute2 v2 21/21] iplink: bridge: add support for netfilter call attributes, Pablo Neira Ayuso
• [PATCH v4] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v4] extensions: libxt_NFQUEUE: Add translation to nft, Pablo Neira Ayuso
• [PATCH v3] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
• [PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Florian Westphal
    • Re: [PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
      • Re: [PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Florian Westphal
        • Re: [PATCH v2] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
• [PATCH] netfilter: nft_counter: fix erroneous return values, Anton Protopopov
  • Re: [PATCH] netfilter: nft_counter: fix erroneous return values, Pablo Neira Ayuso
• [RFC] a software based on ulogd, Ken-ichirou MATSUZAWA
  • Re: [RFC] a software based on ulogd, Eric Leblond
    • Re: [RFC] a software based on ulogd, Ken-ichirou MATSUZAWA
      • [PATCH ulogd 1/7] ipfix: add flowDirection IE, Ken-ichirou MATSUZAWA
      • [PATCH ulogd 2/7] nfct/ipfix: introduce new vendor id, Ken-ichirou MATSUZAWA
      • [PATCH ulogd 3/7] nfct/ipfix: introduce NAT entries, Ken-ichirou MATSUZAWA
      • [PATCH ulogd 4/7] filter: add new filter for Netflow ICMP_TYPE, Ken-ichirou MATSUZAWA
      • [PATCH ulogd 5/7] filter: add new filter for IPFIX time, Ken-ichirou MATSUZAWA
      • [PATCH ulogd 6/7] ulogd: update calling stop callback condition, Ken-ichirou MATSUZAWA
      • [PATCH ulogd 7/7] nflow9: introduce new NetFlow v9 output plugin, Ken-ichirou MATSUZAWA
• [PATCH nf-next v7 0/7] openvswitch: NAT support., Jarno Rajahalme
  • [PATCH nf-next v7 1/7] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
  • [PATCH nf-next v7 2/7] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
  • [PATCH nf-next v7 3/7] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
  • [PATCH nf-next v7 7/7] openvswitch: Interface with NAT., Jarno Rajahalme
  • [PATCH nf-next v7 6/7] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
    • Re: [ovs-dev] [PATCH nf-next v7 6/7] openvswitch: Delay conntrack helper call for new connections., Joe Stringer
  • [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
    • Re: [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action., Joe Stringer
      • Re: [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action., Pablo Neira Ayuso
  • [PATCH nf-next v7 4/7] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
    • Re: [PATCH nf-next v7 4/7] openvswitch: Find existing conntrack entry after upcall., Joe Stringer
    • Re: [PATCH nf-next v7 4/7] openvswitch: Find existing conntrack entry after upcall., Joe Stringer
• [RFC nftables PATCH] nft: add bash completion script, Giuseppe Longo
  • Re: [RFC nftables PATCH] nft: add bash completion script, AllKind
  • Re: [RFC nftables PATCH] nft: add bash completion script, AllKind
  • Re: [RFC nftables PATCH] nft: add bash completion script, Pablo Neira Ayuso
    • Re: [RFC nftables PATCH] nft: add bash completion script, Giuseppe Longo
      • Re: [RFC nftables PATCH] nft: add bash completion script, Pablo Neira Ayuso
• Re: [PATCH] ulogd: Restructures signal handling by self-pipe trick., Eric Leblond
• [PATCH] netfilter: tee: select NF_DUP_IPV6 unconditionally, Arnd Bergmann
  • Re: [PATCH] netfilter: tee: select NF_DUP_IPV6 unconditionally, Pablo Neira Ayuso
• [PATCH 1/2] set: Implement new buffer of TLV objects., Carlos Falgueras García
  • [PATCH 2/2] Rule comment is now stored into a TLV attribute., Carlos Falgueras García
    • Re: [PATCH 2/2] Rule comment is now stored into a TLV attribute., Arturo Borrero Gonzalez
      • Re: [PATCH 2/2] Rule comment is now stored into a TLV attribute., Carlos Falgueras García
• [ANNOUNCE] NetDev 1.1 schedule is out, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check(), Joe Stringer
  • Re: [PATCH nf-next] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check(), Pablo Neira Ayuso
• [ANNOUNCE] 12th Netfilter Workshop in Amsterdam, Netherlands, Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink: correctly validate length of batch messages, phil . turnbull
  • Re: [PATCH nf] netfilter: nfnetlink: correctly validate length of batch messages, Pablo Neira Ayuso
• mirrors of nftable repo, Piyush Pangtey
  • Re: mirrors of nftable repo, Pablo Neira Ayuso
• [PATCH V6] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH V6] netfilter: h323: avoid potential attack, Pablo Neira Ayuso
• [PATCH V5] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH V5] netfilter: h323: avoid potential attack, Sergei Shtylyov
• [PATCH V4] netfilter: h323: avoid potential attack, Zhouyi Zhou
• [PATCH] netfilter: nft_ct: define nft_ct_get_eval_counter() only when needed, Eric Biggers
  • Re: [PATCH] netfilter: nft_ct: define nft_ct_get_eval_counter() only when needed, Florian Westphal
• [PATCH nft 0/3] meta: random match for statistic sampling, Florian Westphal
  • [PATCH nft 1/3] evaluate: move default op lookup into helper, Florian Westphal
  • [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
    • Re: [PATCH nft 2/3] meta: add prandom matching, Patrick McHardy
      • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
        • Re: [PATCH nft 2/3] meta: add prandom matching, Patrick McHardy
          • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
            • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
              • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
                • Re: [PATCH nft 2/3] meta: add prandom matching, Patrick McHardy
                  • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
                    • Re: [PATCH nft 2/3] meta: add prandom matching, Pablo Neira Ayuso
                      • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
                        • Re: [PATCH nft 2/3] meta: add prandom matching, Pablo Neira Ayuso
              • Re: [PATCH nft 2/3] meta: add prandom matching, Patrick McHardy
  • [PATCH nft 3/3] tests: add test cases for meta random, Florian Westphal
  • Re: [PATCH nft 0/3] meta: random match for statistic sampling, Pablo Neira Ayuso
• [PATCH 1/3 iptables,xlate4] libxtables: fix leak in xt_buf object, Pablo Neira Ayuso
  • [PATCH 3/3 iptables,xlate4] xtables: add xt_xlate_add_comment(), Pablo Neira Ayuso
  • [PATCH 2/3 iptables,xlate4] extensions: rename xt_buf to xt_xlate, Pablo Neira Ayuso
• [PATCH nft] proto: use parameter-problem for icmpv6 type, Pablo Neira Ayuso
• [PATCH conntrack 1/4] conntrack: split up nfct_set_addr_from_opt(), Asbjørn Sloth Tønnesen
  • [PATCH conntrack 4/4] tests: conntrack: add tests for CIDR notation, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 4/4] tests: conntrack: add tests for CIDR notation, Pablo Neira Ayuso
  • [PATCH conntrack 2/4 v2] conntrack: extend parse_addr() with CIDR support, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 2/4 v2] conntrack: extend parse_addr() with CIDR support, Pablo Neira Ayuso
  • [PATCH conntrack 3/4 v2] conntrack: add support for CIDR notation, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 3/4 v2] conntrack: add support for CIDR notation, Pablo Neira Ayuso
  • Re: [PATCH conntrack 1/4] conntrack: split up nfct_set_addr_from_opt(), Pablo Neira Ayuso
• [PATCH nft] netlink_delinearize: prune implicit binop before payload_match_postprocess(), Pablo Neira Ayuso
  • Re: [PATCH nft] netlink_delinearize: prune implicit binop before payload_match_postprocess(), Florian Westphal
• [PATCH nft] meta: fix error checks in tc handle parser, Florian Westphal
  • Re: [PATCH nft] meta: fix error checks in tc handle parser, Pablo Neira Ayuso
    • Re: [PATCH nft] meta: fix error checks in tc handle parser, Florian Westphal
  • Re: [PATCH nft] meta: fix error checks in tc handle parser, Pablo Neira Ayuso
• [PATCH] comment: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] comment: Add translation to nft, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] comment: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH] comment: Add translation to nft, Pablo Neira Ayuso
  • [PATCH] comment: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH] comment: Add translation to nft, Pablo Neira Ayuso
• [PATCH net-next] netfilter: nf_conntrack: remove the unneed check for *bucket, Weidong Wang
  • Re: [PATCH net-next] netfilter: nf_conntrack: remove the unneed check for *bucket, Florian Westphal
    • Re: [PATCH net-next] netfilter: nf_conntrack: remove the unneed check for *bucket, Weidong Wang
    • RE: [PATCH net-next] netfilter: nf_conntrack: remove the unneed check for *bucket, David Laight
• [PATCH V3] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH V3] netfilter: h323: avoid potential attack, Pablo Neira Ayuso
    • Re: [PATCH V3] netfilter: h323: avoid potential attack, Eric Dumazet
• [PATCH nft 00/11] revisiting protocol conflict resolution, Pablo Neira Ayuso
  • [PATCH nft 04/11] evaluate: don't adjust offset from resolve_protocol_conflict(), Pablo Neira Ayuso
  • [PATCH nft 03/11] evaluate: check if we have to resolve a conflict in first place, Pablo Neira Ayuso
  • [PATCH nft 01/11] evaluate: resolve_protocol_conflict() should return int, Pablo Neira Ayuso
  • [PATCH nft 02/11] evaluate: move inet/netdev protocol context supersede logic to supersede_dep(), Pablo Neira Ayuso
  • [PATCH nft 06/11] evaluate: assert on invalid base in resolve_protocol_conflict(), Pablo Neira Ayuso
  • [PATCH nft 07/11] evaluate: wrap protocol context debunk into function, Pablo Neira Ayuso
  • [PATCH nft 05/11] evaluate: only try to replace dummy protocol from link-layer context, Pablo Neira Ayuso
  • [PATCH nft 08/11] evaluate: generate ether type payload after meta iiftype, Pablo Neira Ayuso
  • [PATCH nft 09/11] proto: proto_dev_type() returns interface type for base protocols too, Pablo Neira Ayuso
  • [PATCH nft 10/11] src: annotate follow up dependency just after killing another, Pablo Neira Ayuso
  • [PATCH nft 11/11] tests/py: test vlan on ingress, Pablo Neira Ayuso
• [PATCH] src: netlink_linearize: Fix bug for redirect target, Shivani Bhardwaj
  • Re: [PATCH] src: netlink_linearize: Fix bug for redirect target, Pablo Neira Ayuso
• [PATCH nf] netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversion, Florian Westphal
  • Re: [PATCH nf] netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversion, Pablo Neira Ayuso
• [PATCH V2] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH V2] netfilter: h323: avoid potential attack, Eric Dumazet
    • Re: Re: [PATCH V2] netfilter: h323: avoid potential attack, Zhouyi Zhou
      • Re: Re: [PATCH V2] netfilter: h323: avoid potential attack, Eric Dumazet
        • Re: Re: [PATCH V2] netfilter: h323: avoid potential attack, Eric Dumazet
        • Re: [PATCH V2] netfilter: h323: avoid potential attack, One Thousand Gnomes
  • Re: [PATCH V2] netfilter: h323: avoid potential attack, Sergei Shtylyov
  • Re: [PATCH V2] netfilter: h323: avoid potential attack, Florian Westphal
    • Re: Re: [PATCH V2] netfilter: h323: avoid potential attack, Zhouyi Zhou
• [PATCH 1/1] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH 1/1] netfilter: h323: avoid potential attack, kbuild test robot
  • Re: [PATCH 1/1] netfilter: h323: avoid potential attack, Eric Dumazet
• [PATCH 1/2] netfilter: ipvs: avoid unused variable warnings, Arnd Bergmann
  • [PATCH 2/2] netfilter: ipvs/SIP: handle ip_vs_fill_iph_skb_off failure, Arnd Bergmann
    • Re: [PATCH 2/2] netfilter: ipvs/SIP: handle ip_vs_fill_iph_skb_off failure, Julian Anastasov
      • Re: [PATCH 2/2] netfilter: ipvs/SIP: handle ip_vs_fill_iph_skb_off failure, Simon Horman
  • Re: [PATCH 1/2] netfilter: ipvs: avoid unused variable warnings, Julian Anastasov
    • Re: [PATCH 1/2] netfilter: ipvs: avoid unused variable warnings, Simon Horman
      • Re: [PATCH 1/2] netfilter: ipvs: avoid unused variable warnings, Arnd Bergmann
• [PATCH nft] netlink_delinearize: only remove protocol if equal cmp is used, Florian Westphal
  • Re: [PATCH nft] netlink_delinearize: only remove protocol if equal cmp is used, Pablo Neira Ayuso
• [PATCH conntrack 1/5] conntrack: support delete by label, Asbjørn Sloth Tønnesen
  • [PATCH conntrack 2/5] conntrack: consolidate filtering, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 2/5] conntrack: consolidate filtering, Pablo Neira Ayuso
  • [PATCH conntrack 3/5] conntrack: cleanup: use switch statements for family checks, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 3/5] conntrack: cleanup: use switch statements for family checks, Pablo Neira Ayuso
  • [PATCH conntrack 5/5 v2] tests: conntrack: add netmask tests, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 5/5 v2] tests: conntrack: add netmask tests, Pablo Neira Ayuso
  • [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Pablo Neira Ayuso
      • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Asbjørn Sloth Tønnesen
        • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Pablo Neira Ayuso
          • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Asbjørn Sloth Tønnesen
            • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Pablo Neira Ayuso
    • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Pablo Neira Ayuso
  • Re: [PATCH conntrack 1/5] conntrack: support delete by label, Pablo Neira Ayuso
    • Re: [PATCH conntrack 1/5] conntrack: support delete by label, Florian Westphal
• [PATCH conntrack 1/4] tests: conntrack: run testfiles in the correct order, Asbjørn Sloth Tønnesen
  • [PATCH conntrack 3/4] tests: conntrack: ignore dot files in testdir, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 3/4] tests: conntrack: ignore dot files in testdir, Pablo Neira Ayuso
  • [PATCH conntrack 4/4] tests: conntrack: use local conntrack binary, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 4/4] tests: conntrack: use local conntrack binary, Pablo Neira Ayuso
  • [PATCH conntrack 2/4] tests: conntrack: flush stdout to keep sync, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 2/4] tests: conntrack: flush stdout to keep sync, Pablo Neira Ayuso
  • Re: [PATCH conntrack 1/4] tests: conntrack: run testfiles in the correct order, Pablo Neira Ayuso
• Re: [PATCH] extensions: fix cgroup2 help message in libxt_cgroup.c., Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink: use original skbuff when acking batches, Pablo Neira Ayuso
• [PATCH nft 1/3] netlink: move binop postprocess to extra function, Florian Westphal
  • [PATCH nft 2/3] tests: add two map test cases, Florian Westphal
    • Re: [PATCH nft 2/3] tests: add two map test cases, Pablo Neira Ayuso
  • [PATCH nft 3/3] netlink: do binop postprocessing also for map lookups, Florian Westphal
    • Re: [PATCH nft 3/3] netlink: do binop postprocessing also for map lookups, Pablo Neira Ayuso
      • Re: [PATCH nft 3/3] netlink: do binop postprocessing also for map lookups, Florian Westphal
  • Re: [PATCH nft 1/3] netlink: move binop postprocess to extra function, Pablo Neira Ayuso
• Re: net: GPF in netlink_getsockbyportid, Florian Westphal
  • Re: net: GPF in netlink_getsockbyportid, Daniel Borkmann
    • Re: net: GPF in netlink_getsockbyportid, Florian Westphal
      • Re: net: GPF in netlink_getsockbyportid, Herbert Xu
        • Re: net: GPF in netlink_getsockbyportid, Pablo Neira Ayuso
• [PATCH nftables] Add support for masquerade port selection, Shivani Bhardwaj
  • Re: [PATCH nftables] Add support for masquerade port selection, Pablo Neira Ayuso
• [PATCH libnftnl v3] Add support for masq port selection, Shivani Bhardwaj
• [PATCH libnftnl v2] Add support for masq port selection, Shivani Bhardwaj
  • Re: [PATCH libnftnl v2] Add support for masq port selection, Pablo Neira Ayuso
• [PATCH] Add support for masq port selection, Shivani Bhardwaj
  • Re: [PATCH] Add support for masq port selection, Pablo Neira Ayuso
• mark set datatype check too strict?, Florian Westphal
  • Re: mark set datatype check too strict?, Pablo Neira Ayuso
• [PATCH nft 1/2] src: add dup statement for netdev, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: add fwd statement for netdev, Pablo Neira Ayuso
• [PATCH v3] netfilter: nf_conntrack: use safer way to lock all buckets, Sasha Levin
  • Re: [PATCH v3] netfilter: nf_conntrack: use safer way to lock all buckets, Pablo Neira Ayuso
• [PATCH 1/5 nf,kernel] netfilter: nft_rbtree: allow adjacent intervals with dynamic updates, Pablo Neira Ayuso
  • [PATCH 4/5 nft] segtree: pass element expression as parameter to set_to_intervals(), Pablo Neira Ayuso
  • [PATCH 3/5 nft] segtree: when checks when qsorting from interval_map_decompose(), Pablo Neira Ayuso
  • [PATCH 2/5 nft] rule: use netlink_add_setelems() when creating literal sets, Pablo Neira Ayuso
  • [PATCH 5/5, nft] rule: allow dynamic updates for intervals in set declarations, Pablo Neira Ayuso
• [PATCH] ip6: Add tests for icmpv6 packet types, Shivani Bhardwaj
  • Re: [PATCH] ip6: Add tests for icmpv6 packet types, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables_netdev: fix error path in module initialization, Pablo Neira Ayuso
• Re: nf_conntrack_h323: Fix locking in process_urq, Florian Westphal
  • Re: nf_conntrack_h323: Fix locking in process_urq, Sebastian Pöhn
• nft compat layer, Arturo Borrero Gonzalez
  • Re: nft compat layer, Patrick McHardy
  • Re: nft compat layer, Andreas Schultz
    • Re: nft compat layer, Arturo Borrero Gonzalez
    • Re: nft compat layer, Pablo Neira Ayuso
      • Re: nft compat layer, Andreas Schultz
• [PATCH conntrack 1/2] Revert "conntrack: fix expectation entry creation", Asbjørn Sloth Tønnesen
  • [PATCH conntrack 2/2] conntrack: fix expectation entry creation, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 2/2] conntrack: fix expectation entry creation, Pablo Neira Ayuso
  • Re: [PATCH conntrack 1/2] Revert "conntrack: fix expectation entry creation", Pablo Neira Ayuso
    • Re: [PATCH conntrack 1/2] Revert "conntrack: fix expectation entry creation", Asbjørn Sloth Tønnesen
• [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Eric Dumazet
  • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Tom Herbert
    • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Eric Dumazet
      • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Tom Herbert
      • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), David Miller
        • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Pablo Neira Ayuso
• [xtables-compat PATCH] iptables: add xtables-compat.8 manpage, Arturo Borrero Gonzalez
  • Re: [xtables-compat PATCH] iptables: add xtables-compat.8 manpage, Pablo Neira Ayuso
• Reminder: Last day to buy your NetDev 1.1 ticket!, Pablo Neira Ayuso
• [PATCH nf-next 0/3] netfilter: bridge: add queuing to userspace for AF_BRIDGE family, Stephane Bryant
  • [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Stephane Bryant
    • Re: [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, kbuild test robot
    • Re: [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Florian Westphal
      • Re: [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, stéphane bryant
        • Re: [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Florian Westphal
  • [PATCH nf-next 2/3] netfilter: bridge: pull back mac header into skb queued to userspace, Stephane Bryant
  • [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Stephane Bryant
    • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
      • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
    • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Pablo Neira Ayuso
      • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
        • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Pablo Neira Ayuso
          • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, stéphane bryant
            • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
        • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, stéphane bryant
          • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
• [PATCH] extensions: libip6t_mh: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_mh: Add translation to nft, Pablo Neira Ayuso
• [PATCH v2] netfilter: nf_conntrack: use safer way to lock all buckets, Sasha Levin
  • Re: [PATCH v2] netfilter: nf_conntrack: use safer way to lock all buckets, Florian Westphal
  • Re: [PATCH v2] netfilter: nf_conntrack: use safer way to lock all buckets, Jesper Dangaard Brouer
• [xtables-addons] Problem with compilation, Romaneev Vasily
  • Re: [xtables-addons] Problem with compilation, Jan Engelhardt
    • Re: [xtables-addons] Problem with compilation, Romaneev Vasily
• [PATCH 1/1] doc: update ct expression, Florian Westphal
  • Re: [PATCH 1/1] doc: update ct expression, Pablo Neira Ayuso
• nft: segfault after adding to { type ipv4_addr; flags interval; } set, Asbjørn Sloth Tønnesen
  • Re: nft: segfault after adding to { type ipv4_addr; flags interval; } set, Pablo Neira Ayuso
    • Re: nft: segfault after adding to { type ipv4_addr; flags interval; } set, Asbjørn Sloth Tønnesen
• [nft PATCH v2] tests/listing: add some listing tests, Arturo Borrero Gonzalez
  • Re: [nft PATCH v2] tests/listing: add some listing tests, Pablo Neira Ayuso
• [nft PATCH] tests/shell: add first `nft -f' tests, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests/shell: add first `nft -f' tests, Pablo Neira Ayuso
• [nft PATCH v2] rule: delete extra space in sets printing, Arturo Borrero Gonzalez
  • Re: [nft PATCH v2] rule: delete extra space in sets printing, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_ct: keep counters away from CONFIG_NF_CONNTRACK_LABELS, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_ct: keep counters away from CONFIG_NF_CONNTRACK_LABELS, Florian Westphal
• [PATCH] netfilter: nft_ct: mark nft_ct_get_eval_counter __maybe_unused, Arnd Bergmann
  • Re: [PATCH] netfilter: nft_ct: mark nft_ct_get_eval_counter __maybe_unused, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nft_ct: mark nft_ct_get_eval_counter __maybe_unused, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet, Alin Nastac
  • Re: [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet, Alin Năstac
  • <Possible follow-ups>
  • [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet, Alin Nastac
• [PATCH nft] src: support limit rate over value, Pablo Neira Ayuso
• [PATCH 1/3 nft] tests/py: don't test log statement from protocol match, Pablo Neira Ayuso
  • [PATCH 2/3 nft] tests/py: test udp from ip and ip6 families, Pablo Neira Ayuso
  • [PATCH 3/3 nft] tests/py: netdev family with ingress chain, Pablo Neira Ayuso
  • Re: [PATCH 1/3 nft] tests/py: don't test log statement from protocol match, Florian Westphal
    • Re: [PATCH 1/3 nft] tests/py: don't test log statement from protocol match, Pablo Neira Ayuso
      • Re: [PATCH 1/3 nft] tests/py: don't test log statement from protocol match, Florian Westphal
• [PATCH] extensions: libip6t_REDIRECT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_REDIRECT: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libipt_REDIRECT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libipt_REDIRECT: Add translation to nft, Pablo Neira Ayuso
• [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Florian Westphal
  • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Jozsef Kadlecsik
    • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Florian Westphal
      • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Jozsef Kadlecsik
      • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Jozsef Kadlecsik
  • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Jozsef Kadlecsik
    • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Pablo Neira Ayuso
• [PATCH v2] extensions: libip6t_hl: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libip6t_hl: Add translation to nft, Pablo Neira Ayuso
• [PATCH nft] parser_bison: initializer_expr must use rhs_expr, Pablo Neira Ayuso
  • Re: [PATCH nft] parser_bison: initializer_expr must use rhs_expr, Florian Westphal
    • Re: [PATCH nft] parser_bison: initializer_expr must use rhs_expr, Arturo Borrero Gonzalez
• parser regression: '/' symbol, Arturo Borrero Gonzalez
  • Re: parser regression: '/' symbol, Pablo Neira Ayuso
• [PATCH nft v3 1/6] tests/py: remove unused variables, Pablo M. Bermudo Garay
  • [PATCH nft v3 3/6] tests/py: simplify use of globals, Pablo M. Bermudo Garay
  • [PATCH nft v3 2/6] tests/py: fix style, Pablo M. Bermudo Garay
  • [PATCH nft v3 4/6] tests/py: convert chains and tables to objects, Pablo M. Bermudo Garay
  • [PATCH nft v3 5/6] tests/py: modify supported test file syntax, Pablo M. Bermudo Garay
  • [PATCH nft v3 6/6] tests/py: update test files syntax, Pablo M. Bermudo Garay
  • Re: [PATCH nft v3 1/6] tests/py: remove unused variables, Pablo Neira Ayuso
• [PATCH nf-next] nftables: byteorder: avoid uneeded le/be conversion steps, Florian Westphal
  • Re: [PATCH nf-next] nftables: byteorder: avoid uneeded le/be conversion steps, Pablo Neira Ayuso
• [PATCH libnftnl] expr: add forward expression, Pablo Neira Ayuso
• [PATCH libnftnl] expr: limit: add support for flags, Pablo Neira Ayuso
• net-next is CLOSED, David Miller
  • Re: net-next is CLOSED, Johannes Berg
    • Re: net-next is CLOSED, David Miller
  • <Possible follow-ups>
  • net-next is CLOSED, David Miller
  • net-next is CLOSED, David Miller
  • net-next is CLOSED, David Miller
  • net-next is CLOSED, David Miller
• [PATCH 3/3] netfilter: nf_ct_helper: Use unidimensional helper array instead of bidimensional ones, fgao
• [PATCH 2/3] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register(), fgao
• [PATCH 1/3] netfilter: nf_ct_helper: Add new function nf_ct_helper_init(), fgao
• [PATCH 3/4 v3] libnftnl: set: Implement new buffer of TLV objects., Carlos Falgueras García
• [PATCH nft v2 1/6] tests/py: remove unused variables, Pablo M. Bermudo Garay
  • [PATCH nft v2 3/6] tests/py: simplify use of globals, Pablo M. Bermudo Garay
  • [PATCH nft v2 2/6] tests/py: fix style, Pablo M. Bermudo Garay
  • [PATCH nft v2 5/6] tests/py: modify supported test file syntax, Pablo M. Bermudo Garay
  • [PATCH nft v2 4/6] tests/py: convert chains and tables to objects, Pablo M. Bermudo Garay
  • [PATCH nft v2 6/6] tests/py: update test files syntax, Pablo M. Bermudo Garay
• [PATCH] extensions: libxt_cgroup: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_cgroup: Add translation to nft, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] extensions: libxt_cgroup: Add translation to nft, Laura Garcia Liebana
    • Re: [PATCH] extensions: libxt_cgroup: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH] extensions: libxt_cgroup: Add translation to nft, Laura Garcia
• [PATCH net-next v6 0/7] openvswitch: NAT support., Jarno Rajahalme
  • [PATCH net-next v6 4/7] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
  • [PATCH net-next v6 6/7] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
  • [PATCH net-next v6 7/7] openvswitch: Interface with NAT., Jarno Rajahalme
  • [PATCH net-next v6 3/7] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
  • [PATCH net-next v6 5/7] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
  • [PATCH net-next v6 1/7] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
  • [PATCH net-next v6 2/7] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
  • Re: [PATCH net-next v6 0/7] openvswitch: NAT support., Pablo Neira Ayuso
    • Re: [PATCH net-next v6 0/7] openvswitch: NAT support., David Miller
• Network card, Corcodel Marian
  • Re: Network card, Marcelo Ricardo Leitner
• [PATCH 00/17] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 01/17] netfilter: nf_tables: release objects on netns destruction, Pablo Neira Ayuso
  • [PATCH 03/17] netfilter: nf_tables: remove check against removal of inactive objects, Pablo Neira Ayuso
  • [PATCH 02/17] netfilter: nf_tables: destroy basechain and rules on netdevice removal, Pablo Neira Ayuso
  • [PATCH 04/17] netfilter: nfnetlink: pass down netns pointer to call() and call_rcu(), Pablo Neira Ayuso
  • [PATCH 08/17] netfilter: nf_tables: add forward expression to the netdev family, Pablo Neira Ayuso
  • [PATCH 10/17] netfilter: nfnetlink_queue: validate dependencies to avoid breaking atomicity, Pablo Neira Ayuso
  • [PATCH 17/17] netfilter: nft_ct: add byte/packet counter support, Pablo Neira Ayuso
  • [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, Pablo Neira Ayuso
    • RE: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, David Laight
      • Re: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, Florian Westphal
        • RE: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, David Laight
          • Re: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, Florian Westphal
  • [PATCH 15/17] netfilter: nf_tables: Add new attributes into nft_set to store user data., Pablo Neira Ayuso
  • [PATCH 11/17] netfilter: nfnetlink_queue: don't handle options after unbind, Pablo Neira Ayuso
  • [PATCH 09/17] netfilter: nf_ct_helper: define pr_fmt(), Pablo Neira Ayuso
  • [PATCH 13/17] netfilter: nfnetlink_queue: autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config flag, Pablo Neira Ayuso
  • [PATCH 12/17] netfilter: nfnetlink_queue: just returns error for unknown command, Pablo Neira Ayuso
  • [PATCH 14/17] netfilter: nfnetlink_log: just returns error for unknown command, Pablo Neira Ayuso
  • [PATCH 06/17] netfilter: nft_limit: allow to invert matching criteria, Pablo Neira Ayuso
  • [PATCH 05/17] netfilter: nfnetlink: pass down netns pointer to commit() and abort() callbacks, Pablo Neira Ayuso
  • [PATCH 07/17] netfilter: nf_tables: add packet duplication to the netdev family, Pablo Neira Ayuso
  • Re: [PATCH 00/17] Netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/17] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/17] netfilter: Clean up unnecessary #ifdef, Pablo Neira Ayuso
    • [PATCH 02/17] netfilter: Document ingress hook, Pablo Neira Ayuso
    • [PATCH 03/17] netfilter: nft_tunnel: no need to call htons() when dumping ports, Pablo Neira Ayuso
    • [PATCH 07/17] netfilter: nft_tunnel: add the missing nla_nest_cancel(), Pablo Neira Ayuso
    • [PATCH 11/17] netfilter: nft_meta: move sk uid/git handling to helper, Pablo Neira Ayuso
    • [PATCH 13/17] netfilter: nft_meta: move interface kind handling to helper, Pablo Neira Ayuso
    • [PATCH 16/17] netfilter: nft_meta: place rtclassid handling in a helper, Pablo Neira Ayuso
    • [PATCH 17/17] netfilter: nft_meta: add support for slave device ifindex matching, Pablo Neira Ayuso
    • [PATCH 14/17] netfilter: nft_meta: move all interface related keys to helper, Pablo Neira Ayuso
    • [PATCH 15/17] netfilter: nft_meta: place prandom handling in a helper, Pablo Neira Ayuso
    • [PATCH 12/17] netfilter: nft_meta: move cgroup handling to helper, Pablo Neira Ayuso
    • [PATCH 06/17] netfilter: nft_tunnel: also dump OPTS_ERSPAN/VXLAN, Pablo Neira Ayuso
    • [PATCH 10/17] netfilter: nft_meta: move pkttype handling to helper, Pablo Neira Ayuso
    • [PATCH 09/17] netfilter: nft_meta: move time handling to helper, Pablo Neira Ayuso
    • [PATCH 08/17] netfilter: conntrack: remove two export symbols, Pablo Neira Ayuso
    • [PATCH 05/17] netfilter: nft_tunnel: also dump ERSPAN_VERSION, Pablo Neira Ayuso
    • [PATCH 04/17] netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy, Pablo Neira Ayuso
    • Re: [PATCH 00/17] Netfilter updates for net-next, David Miller
• [PATCH nft 0/6] add support for conntrack counters, Florian Westphal
  • [PATCH libnftnl 1/6] src: ct: add packet and byte counter support, Florian Westphal
  • [PATCH nft 2/6] nft: swap key and direction in ct_dir syntax, Florian Westphal
  • [PATCH nft 3/6] ct: add packet/byte counter support, Florian Westphal
  • [PATCH nft 4/6] netlink_linearize: use u64 conversion for 64bit quantities, Florian Westphal
  • [PATCH nft 6/6] tests: ct: remove BUG cases that work with current master, Florian Westphal
  • [PATCH nft 5/6] ct regression tests for bytes, packets, Florian Westphal
  • Re: [PATCH nft 0/6] add support for conntrack counters, Pablo Neira Ayuso
• [PATCH -next] nftables: byteorder: provide 64bit le/be conversion, Florian Westphal
  • Re: [PATCH -next] nftables: byteorder: provide 64bit le/be conversion, Pablo Neira Ayuso
• [PATCH 4/4,nf-next] netfilter: nf_ct_helper: Use unidimensional helper array instead of bidimensional ones, Gao Feng
• [PATCH 4/4,nf-next] netfilter: nf_ct_helper: Use unidimensional helper, Gao Feng
• [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
  • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
  • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
    • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
  • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Pablo Neira Ayuso
    • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
• [nft] syntax for retrieving ct byte/packet counters, Florian Westphal
  • Re: [nft] syntax for retrieving ct byte/packet counters, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_hl: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_hl: Add translation to nft, Pablo Neira Ayuso
• [PATCH] ipset tool: Fix link with libtool >= 2.4.4, Olivier Blin
  • [PATCH] Fix link with libtool >= 2.4.4, Olivier Blin
  • Re: [PATCH] ipset tool: Fix link with libtool >= 2.4.4, Jozsef Kadlecsik
    • Re: [PATCH] ipset tool: Fix link with libtool >= 2.4.4, Olivier Blin
      • Re: [PATCH] ipset tool: Fix link with libtool >= 2.4.4, Kadlecsik József
• header conflict introduced by change to netfilter_ipv4/ip_tables.h, Stephen Hemminger
  • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Mikko Rapeli
  • Message not available
    • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Stephen Hemminger
      • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Mikko Rapeli
        • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Josh Boyer
          • [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h, Mikko Rapeli
            • Re: [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h, David Miller
              • Re: [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h, Mikko Rapeli
                • Re: [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h, David Miller
          • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Daniel Borkmann
            • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Mikko Rapeli
      • Kernel uapi and glibc header conflicts (was Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h ), Mikko Rapeli
        • Re: Kernel uapi and glibc header conflicts (was Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h ), Florian Weimer
  • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Thomas Graf
    • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Mikko Rapeli
      • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Thomas Graf
• [PATCH] extensions: libip6t_LOG: Add translation to nft, Shivani Bhardwaj
• [PATCH] extensions: libipt_LOG: Add translation to nft, Shivani Bhardwaj
• [PATCH v2] extensions: libip6t_REJECT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libip6t_REJECT: Add translation to nft, Pablo Neira Ayuso
• [PATCH 1/4 v2] nf: netfilter: nf_tables_api: Add new attributes into nft_set to store user data., Carlos Falgueras García
  • [PATCH 3/4 v2] libnftnl: set: Implement new buffer of TLV objects., Carlos Falgueras García
    • Re: [PATCH 3/4 v2] libnftnl: set: Implement new buffer of TLV objects., Florian Westphal
      • Re: [PATCH 3/4 v2] libnftnl: set: Implement new buffer of TLV objects., Pablo Neira Ayuso
• [PATCH v2] src: datatype: Modify symbol table for icmpv6 packet types, Shivani Bhardwaj
  • Re: [PATCH v2] src: datatype: Modify symbol table for icmpv6 packet types, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_REJECT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_REJECT: Add translation to nft, Arturo Borrero Gonzalez
    • Re: [PATCH] extensions: libip6t_REJECT: Add translation to nft, Shivani Bhardwaj
      • Re: [PATCH] extensions: libip6t_REJECT: Add translation to nft, Arturo Borrero Gonzalez
• [PATCH] src: datatype: Modify symbol table for icmpv6 packet types, Shivani Bhardwaj
• [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Sasha Levin
  • RE: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, David Laight
  • Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Florian Westphal
    • Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Sasha Levin
  • Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Jesper Dangaard Brouer
• [PATCH v2] extensions: libipt_ttl: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libipt_ttl: Add translation to nft, Pablo Neira Ayuso
• [ANNOUNCE] NetDev 1.1 is approaching..., Pablo Neira Ayuso
• [PATCH 0/2] Add support for ttl translation, Shivani Bhardwaj
  • [PATCH 1/2] iptables: nft-ipv4: Add ip ttl to the buffer, Shivani Bhardwaj
  • [PATCH 2/2] extensions: libipt_ttl: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH 0/2] Add support for ttl translation, Pablo Neira Ayuso
    • Re: [PATCH 0/2] Add support for ttl translation, Shivani Bhardwaj