Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH 2/2] Rule comment is now stored into a TLV attribute., (continued)
  • Re: [PATCH 2/2] Rule comment is now stored into a TLV attribute., Carlos Falgueras García
• [ANNOUNCE] NetDev 1.1 schedule is out, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check(), Joe Stringer
  • Re: [PATCH nf-next] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check(), Pablo Neira Ayuso
• [ANNOUNCE] 12th Netfilter Workshop in Amsterdam, Netherlands, Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink: correctly validate length of batch messages, phil . turnbull
  • Re: [PATCH nf] netfilter: nfnetlink: correctly validate length of batch messages, Pablo Neira Ayuso
• mirrors of nftable repo, Piyush Pangtey
  • Re: mirrors of nftable repo, Pablo Neira Ayuso
• [PATCH V6] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH V6] netfilter: h323: avoid potential attack, Pablo Neira Ayuso
• [PATCH V5] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH V5] netfilter: h323: avoid potential attack, Sergei Shtylyov
• [PATCH V4] netfilter: h323: avoid potential attack, Zhouyi Zhou
• [PATCH] netfilter: nft_ct: define nft_ct_get_eval_counter() only when needed, Eric Biggers
  • Re: [PATCH] netfilter: nft_ct: define nft_ct_get_eval_counter() only when needed, Florian Westphal
• [PATCH nft 0/3] meta: random match for statistic sampling, Florian Westphal
  • [PATCH nft 1/3] evaluate: move default op lookup into helper, Florian Westphal
  • [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
    • Re: [PATCH nft 2/3] meta: add prandom matching, Patrick McHardy
      • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
        • Re: [PATCH nft 2/3] meta: add prandom matching, Patrick McHardy
          • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
            • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
              • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
                • Re: [PATCH nft 2/3] meta: add prandom matching, Patrick McHardy
                  • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
                    • Re: [PATCH nft 2/3] meta: add prandom matching, Pablo Neira Ayuso
                      • Re: [PATCH nft 2/3] meta: add prandom matching, Florian Westphal
                        • Re: [PATCH nft 2/3] meta: add prandom matching, Pablo Neira Ayuso
              • Re: [PATCH nft 2/3] meta: add prandom matching, Patrick McHardy
  • [PATCH nft 3/3] tests: add test cases for meta random, Florian Westphal
  • Re: [PATCH nft 0/3] meta: random match for statistic sampling, Pablo Neira Ayuso
• [PATCH 1/3 iptables,xlate4] libxtables: fix leak in xt_buf object, Pablo Neira Ayuso
  • [PATCH 3/3 iptables,xlate4] xtables: add xt_xlate_add_comment(), Pablo Neira Ayuso
  • [PATCH 2/3 iptables,xlate4] extensions: rename xt_buf to xt_xlate, Pablo Neira Ayuso
• [PATCH nft] proto: use parameter-problem for icmpv6 type, Pablo Neira Ayuso
• [PATCH conntrack 1/4] conntrack: split up nfct_set_addr_from_opt(), Asbjørn Sloth Tønnesen
  • [PATCH conntrack 4/4] tests: conntrack: add tests for CIDR notation, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 4/4] tests: conntrack: add tests for CIDR notation, Pablo Neira Ayuso
  • [PATCH conntrack 2/4 v2] conntrack: extend parse_addr() with CIDR support, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 2/4 v2] conntrack: extend parse_addr() with CIDR support, Pablo Neira Ayuso
  • [PATCH conntrack 3/4 v2] conntrack: add support for CIDR notation, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 3/4 v2] conntrack: add support for CIDR notation, Pablo Neira Ayuso
  • Re: [PATCH conntrack 1/4] conntrack: split up nfct_set_addr_from_opt(), Pablo Neira Ayuso
• [PATCH nft] netlink_delinearize: prune implicit binop before payload_match_postprocess(), Pablo Neira Ayuso
  • Re: [PATCH nft] netlink_delinearize: prune implicit binop before payload_match_postprocess(), Florian Westphal
• [PATCH nft] meta: fix error checks in tc handle parser, Florian Westphal
  • Re: [PATCH nft] meta: fix error checks in tc handle parser, Pablo Neira Ayuso
    • Re: [PATCH nft] meta: fix error checks in tc handle parser, Florian Westphal
  • Re: [PATCH nft] meta: fix error checks in tc handle parser, Pablo Neira Ayuso
• [PATCH] comment: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] comment: Add translation to nft, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] comment: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH] comment: Add translation to nft, Pablo Neira Ayuso
  • [PATCH] comment: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH] comment: Add translation to nft, Pablo Neira Ayuso
• [PATCH net-next] netfilter: nf_conntrack: remove the unneed check for *bucket, Weidong Wang
  • Re: [PATCH net-next] netfilter: nf_conntrack: remove the unneed check for *bucket, Florian Westphal
    • Re: [PATCH net-next] netfilter: nf_conntrack: remove the unneed check for *bucket, Weidong Wang
    • RE: [PATCH net-next] netfilter: nf_conntrack: remove the unneed check for *bucket, David Laight
• [PATCH V3] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH V3] netfilter: h323: avoid potential attack, Pablo Neira Ayuso
    • Re: [PATCH V3] netfilter: h323: avoid potential attack, Eric Dumazet
• [PATCH nft 00/11] revisiting protocol conflict resolution, Pablo Neira Ayuso
  • [PATCH nft 04/11] evaluate: don't adjust offset from resolve_protocol_conflict(), Pablo Neira Ayuso
  • [PATCH nft 03/11] evaluate: check if we have to resolve a conflict in first place, Pablo Neira Ayuso
  • [PATCH nft 01/11] evaluate: resolve_protocol_conflict() should return int, Pablo Neira Ayuso
  • [PATCH nft 02/11] evaluate: move inet/netdev protocol context supersede logic to supersede_dep(), Pablo Neira Ayuso
  • [PATCH nft 06/11] evaluate: assert on invalid base in resolve_protocol_conflict(), Pablo Neira Ayuso
  • [PATCH nft 07/11] evaluate: wrap protocol context debunk into function, Pablo Neira Ayuso
  • [PATCH nft 05/11] evaluate: only try to replace dummy protocol from link-layer context, Pablo Neira Ayuso
  • [PATCH nft 08/11] evaluate: generate ether type payload after meta iiftype, Pablo Neira Ayuso
  • [PATCH nft 09/11] proto: proto_dev_type() returns interface type for base protocols too, Pablo Neira Ayuso
  • [PATCH nft 10/11] src: annotate follow up dependency just after killing another, Pablo Neira Ayuso
  • [PATCH nft 11/11] tests/py: test vlan on ingress, Pablo Neira Ayuso
• [PATCH] src: netlink_linearize: Fix bug for redirect target, Shivani Bhardwaj
  • Re: [PATCH] src: netlink_linearize: Fix bug for redirect target, Pablo Neira Ayuso
• [PATCH nf] netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversion, Florian Westphal
  • Re: [PATCH nf] netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversion, Pablo Neira Ayuso
• [PATCH V2] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH V2] netfilter: h323: avoid potential attack, Eric Dumazet
    • Re: Re: [PATCH V2] netfilter: h323: avoid potential attack, Zhouyi Zhou
      • Re: Re: [PATCH V2] netfilter: h323: avoid potential attack, Eric Dumazet
        • Re: Re: [PATCH V2] netfilter: h323: avoid potential attack, Eric Dumazet
        • Re: [PATCH V2] netfilter: h323: avoid potential attack, One Thousand Gnomes
  • Re: [PATCH V2] netfilter: h323: avoid potential attack, Sergei Shtylyov
  • Re: [PATCH V2] netfilter: h323: avoid potential attack, Florian Westphal
    • Re: Re: [PATCH V2] netfilter: h323: avoid potential attack, Zhouyi Zhou
• [PATCH 1/1] netfilter: h323: avoid potential attack, Zhouyi Zhou
  • Re: [PATCH 1/1] netfilter: h323: avoid potential attack, kbuild test robot
  • Re: [PATCH 1/1] netfilter: h323: avoid potential attack, Eric Dumazet
• [PATCH 1/2] netfilter: ipvs: avoid unused variable warnings, Arnd Bergmann
  • [PATCH 2/2] netfilter: ipvs/SIP: handle ip_vs_fill_iph_skb_off failure, Arnd Bergmann
    • Re: [PATCH 2/2] netfilter: ipvs/SIP: handle ip_vs_fill_iph_skb_off failure, Julian Anastasov
      • Re: [PATCH 2/2] netfilter: ipvs/SIP: handle ip_vs_fill_iph_skb_off failure, Simon Horman
  • Re: [PATCH 1/2] netfilter: ipvs: avoid unused variable warnings, Julian Anastasov
    • Re: [PATCH 1/2] netfilter: ipvs: avoid unused variable warnings, Simon Horman
      • Re: [PATCH 1/2] netfilter: ipvs: avoid unused variable warnings, Arnd Bergmann
• [PATCH nft] netlink_delinearize: only remove protocol if equal cmp is used, Florian Westphal
  • Re: [PATCH nft] netlink_delinearize: only remove protocol if equal cmp is used, Pablo Neira Ayuso
• [PATCH conntrack 1/5] conntrack: support delete by label, Asbjørn Sloth Tønnesen
  • [PATCH conntrack 2/5] conntrack: consolidate filtering, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 2/5] conntrack: consolidate filtering, Pablo Neira Ayuso
  • [PATCH conntrack 3/5] conntrack: cleanup: use switch statements for family checks, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 3/5] conntrack: cleanup: use switch statements for family checks, Pablo Neira Ayuso
  • [PATCH conntrack 5/5 v2] tests: conntrack: add netmask tests, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 5/5 v2] tests: conntrack: add netmask tests, Pablo Neira Ayuso
  • [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Pablo Neira Ayuso
      • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Asbjørn Sloth Tønnesen
        • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Pablo Neira Ayuso
          • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Asbjørn Sloth Tønnesen
            • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Pablo Neira Ayuso
    • Re: [PATCH conntrack 4/5 v2] conntrack: add support for netmask filtering, Pablo Neira Ayuso
  • Re: [PATCH conntrack 1/5] conntrack: support delete by label, Pablo Neira Ayuso
    • Re: [PATCH conntrack 1/5] conntrack: support delete by label, Florian Westphal
• [PATCH conntrack 1/4] tests: conntrack: run testfiles in the correct order, Asbjørn Sloth Tønnesen
  • [PATCH conntrack 3/4] tests: conntrack: ignore dot files in testdir, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 3/4] tests: conntrack: ignore dot files in testdir, Pablo Neira Ayuso
  • [PATCH conntrack 4/4] tests: conntrack: use local conntrack binary, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 4/4] tests: conntrack: use local conntrack binary, Pablo Neira Ayuso
  • [PATCH conntrack 2/4] tests: conntrack: flush stdout to keep sync, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 2/4] tests: conntrack: flush stdout to keep sync, Pablo Neira Ayuso
  • Re: [PATCH conntrack 1/4] tests: conntrack: run testfiles in the correct order, Pablo Neira Ayuso
• Re: [PATCH] extensions: fix cgroup2 help message in libxt_cgroup.c., Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink: use original skbuff when acking batches, Pablo Neira Ayuso
• [PATCH nft 1/3] netlink: move binop postprocess to extra function, Florian Westphal
  • [PATCH nft 2/3] tests: add two map test cases, Florian Westphal
    • Re: [PATCH nft 2/3] tests: add two map test cases, Pablo Neira Ayuso
  • [PATCH nft 3/3] netlink: do binop postprocessing also for map lookups, Florian Westphal
    • Re: [PATCH nft 3/3] netlink: do binop postprocessing also for map lookups, Pablo Neira Ayuso
      • Re: [PATCH nft 3/3] netlink: do binop postprocessing also for map lookups, Florian Westphal
  • Re: [PATCH nft 1/3] netlink: move binop postprocess to extra function, Pablo Neira Ayuso
• Re: net: GPF in netlink_getsockbyportid, Florian Westphal
  • Re: net: GPF in netlink_getsockbyportid, Daniel Borkmann
    • Re: net: GPF in netlink_getsockbyportid, Florian Westphal
      • Re: net: GPF in netlink_getsockbyportid, Herbert Xu
        • Re: net: GPF in netlink_getsockbyportid, Pablo Neira Ayuso
• [PATCH nftables] Add support for masquerade port selection, Shivani Bhardwaj
  • Re: [PATCH nftables] Add support for masquerade port selection, Pablo Neira Ayuso
• [PATCH libnftnl v3] Add support for masq port selection, Shivani Bhardwaj
• [PATCH libnftnl v2] Add support for masq port selection, Shivani Bhardwaj
  • Re: [PATCH libnftnl v2] Add support for masq port selection, Pablo Neira Ayuso
• [PATCH] Add support for masq port selection, Shivani Bhardwaj
  • Re: [PATCH] Add support for masq port selection, Pablo Neira Ayuso
• mark set datatype check too strict?, Florian Westphal
  • Re: mark set datatype check too strict?, Pablo Neira Ayuso
• [PATCH nft 1/2] src: add dup statement for netdev, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: add fwd statement for netdev, Pablo Neira Ayuso
• [PATCH v3] netfilter: nf_conntrack: use safer way to lock all buckets, Sasha Levin
  • Re: [PATCH v3] netfilter: nf_conntrack: use safer way to lock all buckets, Pablo Neira Ayuso
• [PATCH 1/5 nf,kernel] netfilter: nft_rbtree: allow adjacent intervals with dynamic updates, Pablo Neira Ayuso
  • [PATCH 4/5 nft] segtree: pass element expression as parameter to set_to_intervals(), Pablo Neira Ayuso
  • [PATCH 3/5 nft] segtree: when checks when qsorting from interval_map_decompose(), Pablo Neira Ayuso
  • [PATCH 2/5 nft] rule: use netlink_add_setelems() when creating literal sets, Pablo Neira Ayuso
  • [PATCH 5/5, nft] rule: allow dynamic updates for intervals in set declarations, Pablo Neira Ayuso
• [PATCH] ip6: Add tests for icmpv6 packet types, Shivani Bhardwaj
  • Re: [PATCH] ip6: Add tests for icmpv6 packet types, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables_netdev: fix error path in module initialization, Pablo Neira Ayuso
• Re: nf_conntrack_h323: Fix locking in process_urq, Florian Westphal
  • Re: nf_conntrack_h323: Fix locking in process_urq, Sebastian Pöhn
• nft compat layer, Arturo Borrero Gonzalez
  • Re: nft compat layer, Patrick McHardy
  • Re: nft compat layer, Andreas Schultz
    • Re: nft compat layer, Arturo Borrero Gonzalez
    • Re: nft compat layer, Pablo Neira Ayuso
      • Re: nft compat layer, Andreas Schultz
• [PATCH conntrack 1/2] Revert "conntrack: fix expectation entry creation", Asbjørn Sloth Tønnesen
  • [PATCH conntrack 2/2] conntrack: fix expectation entry creation, Asbjørn Sloth Tønnesen
    • Re: [PATCH conntrack 2/2] conntrack: fix expectation entry creation, Pablo Neira Ayuso
  • Re: [PATCH conntrack 1/2] Revert "conntrack: fix expectation entry creation", Pablo Neira Ayuso
    • Re: [PATCH conntrack 1/2] Revert "conntrack: fix expectation entry creation", Asbjørn Sloth Tønnesen
• [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Eric Dumazet
  • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Tom Herbert
    • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Eric Dumazet
      • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Tom Herbert
      • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), David Miller
        • Re: [PATCH net] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Pablo Neira Ayuso
• [xtables-compat PATCH] iptables: add xtables-compat.8 manpage, Arturo Borrero Gonzalez
  • Re: [xtables-compat PATCH] iptables: add xtables-compat.8 manpage, Pablo Neira Ayuso
• Reminder: Last day to buy your NetDev 1.1 ticket!, Pablo Neira Ayuso
• [PATCH nf-next 0/3] netfilter: bridge: add queuing to userspace for AF_BRIDGE family, Stephane Bryant
  • [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Stephane Bryant
    • Re: [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, kbuild test robot
    • Re: [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Florian Westphal
      • Re: [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, stéphane bryant
        • Re: [PATCH nf-next 1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Florian Westphal
  • [PATCH nf-next 2/3] netfilter: bridge: pull back mac header into skb queued to userspace, Stephane Bryant
  • [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Stephane Bryant
    • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
      • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
    • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Pablo Neira Ayuso
      • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
        • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Pablo Neira Ayuso
          • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, stéphane bryant
            • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
        • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, stéphane bryant
          • Re: [PATCH nf-next 3/3] netfilter: bridge: copy back VLAN header for bridge packet queued to userspace, Florian Westphal
• [PATCH] extensions: libip6t_mh: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_mh: Add translation to nft, Pablo Neira Ayuso
• [PATCH v2] netfilter: nf_conntrack: use safer way to lock all buckets, Sasha Levin
  • Re: [PATCH v2] netfilter: nf_conntrack: use safer way to lock all buckets, Florian Westphal
  • Re: [PATCH v2] netfilter: nf_conntrack: use safer way to lock all buckets, Jesper Dangaard Brouer
• [xtables-addons] Problem with compilation, Romaneev Vasily
  • Re: [xtables-addons] Problem with compilation, Jan Engelhardt
    • Re: [xtables-addons] Problem with compilation, Romaneev Vasily
• [PATCH 1/1] doc: update ct expression, Florian Westphal
  • Re: [PATCH 1/1] doc: update ct expression, Pablo Neira Ayuso
• nft: segfault after adding to { type ipv4_addr; flags interval; } set, Asbjørn Sloth Tønnesen
  • Re: nft: segfault after adding to { type ipv4_addr; flags interval; } set, Pablo Neira Ayuso
    • Re: nft: segfault after adding to { type ipv4_addr; flags interval; } set, Asbjørn Sloth Tønnesen
• [nft PATCH v2] tests/listing: add some listing tests, Arturo Borrero Gonzalez
  • Re: [nft PATCH v2] tests/listing: add some listing tests, Pablo Neira Ayuso
• [nft PATCH] tests/shell: add first `nft -f' tests, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests/shell: add first `nft -f' tests, Pablo Neira Ayuso
• [nft PATCH v2] rule: delete extra space in sets printing, Arturo Borrero Gonzalez
  • Re: [nft PATCH v2] rule: delete extra space in sets printing, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_ct: keep counters away from CONFIG_NF_CONNTRACK_LABELS, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_ct: keep counters away from CONFIG_NF_CONNTRACK_LABELS, Florian Westphal
• [PATCH] netfilter: nft_ct: mark nft_ct_get_eval_counter __maybe_unused, Arnd Bergmann
  • Re: [PATCH] netfilter: nft_ct: mark nft_ct_get_eval_counter __maybe_unused, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nft_ct: mark nft_ct_get_eval_counter __maybe_unused, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet, Alin Nastac
  • Re: [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet, Alin Năstac
  • <Possible follow-ups>
  • [PATCH] netfilter: nf_conntrack_icmpv6: find conntrack related to ICMPv6 redirect packet, Alin Nastac
• [PATCH nft] src: support limit rate over value, Pablo Neira Ayuso
• [PATCH 1/3 nft] tests/py: don't test log statement from protocol match, Pablo Neira Ayuso
  • [PATCH 2/3 nft] tests/py: test udp from ip and ip6 families, Pablo Neira Ayuso
  • [PATCH 3/3 nft] tests/py: netdev family with ingress chain, Pablo Neira Ayuso
  • Re: [PATCH 1/3 nft] tests/py: don't test log statement from protocol match, Florian Westphal
    • Re: [PATCH 1/3 nft] tests/py: don't test log statement from protocol match, Pablo Neira Ayuso
      • Re: [PATCH 1/3 nft] tests/py: don't test log statement from protocol match, Florian Westphal
• [PATCH] extensions: libip6t_REDIRECT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_REDIRECT: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libipt_REDIRECT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libipt_REDIRECT: Add translation to nft, Pablo Neira Ayuso
• [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Florian Westphal
  • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Jozsef Kadlecsik
    • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Florian Westphal
      • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Jozsef Kadlecsik
      • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Jozsef Kadlecsik
  • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Jozsef Kadlecsik
    • Re: [PATCH nf] ipset: allow a 0 netmask with hash_netiface type, Pablo Neira Ayuso
• [PATCH v2] extensions: libip6t_hl: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libip6t_hl: Add translation to nft, Pablo Neira Ayuso
• [PATCH nft] parser_bison: initializer_expr must use rhs_expr, Pablo Neira Ayuso
  • Re: [PATCH nft] parser_bison: initializer_expr must use rhs_expr, Florian Westphal
    • Re: [PATCH nft] parser_bison: initializer_expr must use rhs_expr, Arturo Borrero Gonzalez
• parser regression: '/' symbol, Arturo Borrero Gonzalez
  • Re: parser regression: '/' symbol, Pablo Neira Ayuso
• [PATCH nft v3 1/6] tests/py: remove unused variables, Pablo M. Bermudo Garay
  • [PATCH nft v3 3/6] tests/py: simplify use of globals, Pablo M. Bermudo Garay
  • [PATCH nft v3 2/6] tests/py: fix style, Pablo M. Bermudo Garay
  • [PATCH nft v3 4/6] tests/py: convert chains and tables to objects, Pablo M. Bermudo Garay
  • [PATCH nft v3 5/6] tests/py: modify supported test file syntax, Pablo M. Bermudo Garay
  • [PATCH nft v3 6/6] tests/py: update test files syntax, Pablo M. Bermudo Garay
  • Re: [PATCH nft v3 1/6] tests/py: remove unused variables, Pablo Neira Ayuso
• [PATCH nf-next] nftables: byteorder: avoid uneeded le/be conversion steps, Florian Westphal
  • Re: [PATCH nf-next] nftables: byteorder: avoid uneeded le/be conversion steps, Pablo Neira Ayuso
• [PATCH libnftnl] expr: add forward expression, Pablo Neira Ayuso
• [PATCH libnftnl] expr: limit: add support for flags, Pablo Neira Ayuso
• net-next is CLOSED, David Miller
  • Re: net-next is CLOSED, Johannes Berg
    • Re: net-next is CLOSED, David Miller
  • <Possible follow-ups>
  • net-next is CLOSED, David Miller
  • net-next is CLOSED, David Miller
  • net-next is CLOSED, David Miller
  • net-next is CLOSED, David Miller
• [PATCH 3/3] netfilter: nf_ct_helper: Use unidimensional helper array instead of bidimensional ones, fgao
• [PATCH 2/3] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register(), fgao
• [PATCH 1/3] netfilter: nf_ct_helper: Add new function nf_ct_helper_init(), fgao
• [PATCH 3/4 v3] libnftnl: set: Implement new buffer of TLV objects., Carlos Falgueras García
• [PATCH nft v2 1/6] tests/py: remove unused variables, Pablo M. Bermudo Garay
  • [PATCH nft v2 3/6] tests/py: simplify use of globals, Pablo M. Bermudo Garay
  • [PATCH nft v2 2/6] tests/py: fix style, Pablo M. Bermudo Garay
  • [PATCH nft v2 5/6] tests/py: modify supported test file syntax, Pablo M. Bermudo Garay
  • [PATCH nft v2 4/6] tests/py: convert chains and tables to objects, Pablo M. Bermudo Garay
  • [PATCH nft v2 6/6] tests/py: update test files syntax, Pablo M. Bermudo Garay
• [PATCH] extensions: libxt_cgroup: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_cgroup: Add translation to nft, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] extensions: libxt_cgroup: Add translation to nft, Laura Garcia Liebana
    • Re: [PATCH] extensions: libxt_cgroup: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH] extensions: libxt_cgroup: Add translation to nft, Laura Garcia
• [PATCH net-next v6 0/7] openvswitch: NAT support., Jarno Rajahalme
  • [PATCH net-next v6 4/7] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
  • [PATCH net-next v6 6/7] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
  • [PATCH net-next v6 7/7] openvswitch: Interface with NAT., Jarno Rajahalme
  • [PATCH net-next v6 3/7] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
  • [PATCH net-next v6 5/7] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
  • [PATCH net-next v6 1/7] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
  • [PATCH net-next v6 2/7] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
  • Re: [PATCH net-next v6 0/7] openvswitch: NAT support., Pablo Neira Ayuso
    • Re: [PATCH net-next v6 0/7] openvswitch: NAT support., David Miller
• Network card, Corcodel Marian
  • Re: Network card, Marcelo Ricardo Leitner
• [PATCH 00/17] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 01/17] netfilter: nf_tables: release objects on netns destruction, Pablo Neira Ayuso
  • [PATCH 03/17] netfilter: nf_tables: remove check against removal of inactive objects, Pablo Neira Ayuso
  • [PATCH 02/17] netfilter: nf_tables: destroy basechain and rules on netdevice removal, Pablo Neira Ayuso
  • [PATCH 04/17] netfilter: nfnetlink: pass down netns pointer to call() and call_rcu(), Pablo Neira Ayuso
  • [PATCH 08/17] netfilter: nf_tables: add forward expression to the netdev family, Pablo Neira Ayuso
  • [PATCH 10/17] netfilter: nfnetlink_queue: validate dependencies to avoid breaking atomicity, Pablo Neira Ayuso
  • [PATCH 17/17] netfilter: nft_ct: add byte/packet counter support, Pablo Neira Ayuso
  • [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, Pablo Neira Ayuso
    • RE: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, David Laight
      • Re: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, Florian Westphal
        • RE: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, David Laight
          • Re: [PATCH 16/17] netfilter: nft_byteorder: provide 64bit le/be conversion, Florian Westphal
  • [PATCH 15/17] netfilter: nf_tables: Add new attributes into nft_set to store user data., Pablo Neira Ayuso
  • [PATCH 11/17] netfilter: nfnetlink_queue: don't handle options after unbind, Pablo Neira Ayuso
  • [PATCH 09/17] netfilter: nf_ct_helper: define pr_fmt(), Pablo Neira Ayuso
  • [PATCH 13/17] netfilter: nfnetlink_queue: autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config flag, Pablo Neira Ayuso
  • [PATCH 12/17] netfilter: nfnetlink_queue: just returns error for unknown command, Pablo Neira Ayuso
  • [PATCH 14/17] netfilter: nfnetlink_log: just returns error for unknown command, Pablo Neira Ayuso
  • [PATCH 06/17] netfilter: nft_limit: allow to invert matching criteria, Pablo Neira Ayuso
  • [PATCH 05/17] netfilter: nfnetlink: pass down netns pointer to commit() and abort() callbacks, Pablo Neira Ayuso
  • [PATCH 07/17] netfilter: nf_tables: add packet duplication to the netdev family, Pablo Neira Ayuso
  • Re: [PATCH 00/17] Netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/17] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/17] netfilter: Clean up unnecessary #ifdef, Pablo Neira Ayuso
    • [PATCH 02/17] netfilter: Document ingress hook, Pablo Neira Ayuso
    • [PATCH 03/17] netfilter: nft_tunnel: no need to call htons() when dumping ports, Pablo Neira Ayuso
    • [PATCH 07/17] netfilter: nft_tunnel: add the missing nla_nest_cancel(), Pablo Neira Ayuso
    • [PATCH 11/17] netfilter: nft_meta: move sk uid/git handling to helper, Pablo Neira Ayuso
    • [PATCH 13/17] netfilter: nft_meta: move interface kind handling to helper, Pablo Neira Ayuso
    • [PATCH 16/17] netfilter: nft_meta: place rtclassid handling in a helper, Pablo Neira Ayuso
    • [PATCH 17/17] netfilter: nft_meta: add support for slave device ifindex matching, Pablo Neira Ayuso
    • [PATCH 14/17] netfilter: nft_meta: move all interface related keys to helper, Pablo Neira Ayuso
    • [PATCH 15/17] netfilter: nft_meta: place prandom handling in a helper, Pablo Neira Ayuso
    • [PATCH 12/17] netfilter: nft_meta: move cgroup handling to helper, Pablo Neira Ayuso
    • [PATCH 06/17] netfilter: nft_tunnel: also dump OPTS_ERSPAN/VXLAN, Pablo Neira Ayuso
    • [PATCH 10/17] netfilter: nft_meta: move pkttype handling to helper, Pablo Neira Ayuso
    • [PATCH 09/17] netfilter: nft_meta: move time handling to helper, Pablo Neira Ayuso
    • [PATCH 08/17] netfilter: conntrack: remove two export symbols, Pablo Neira Ayuso
    • [PATCH 05/17] netfilter: nft_tunnel: also dump ERSPAN_VERSION, Pablo Neira Ayuso
    • [PATCH 04/17] netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy, Pablo Neira Ayuso
    • Re: [PATCH 00/17] Netfilter updates for net-next, David Miller
• [PATCH nft 0/6] add support for conntrack counters, Florian Westphal
  • [PATCH libnftnl 1/6] src: ct: add packet and byte counter support, Florian Westphal
  • [PATCH nft 2/6] nft: swap key and direction in ct_dir syntax, Florian Westphal
  • [PATCH nft 3/6] ct: add packet/byte counter support, Florian Westphal
  • [PATCH nft 4/6] netlink_linearize: use u64 conversion for 64bit quantities, Florian Westphal
  • [PATCH nft 6/6] tests: ct: remove BUG cases that work with current master, Florian Westphal
  • [PATCH nft 5/6] ct regression tests for bytes, packets, Florian Westphal
  • Re: [PATCH nft 0/6] add support for conntrack counters, Pablo Neira Ayuso
• [PATCH -next] nftables: byteorder: provide 64bit le/be conversion, Florian Westphal
  • Re: [PATCH -next] nftables: byteorder: provide 64bit le/be conversion, Pablo Neira Ayuso
• [PATCH 4/4,nf-next] netfilter: nf_ct_helper: Use unidimensional helper array instead of bidimensional ones, Gao Feng
• [PATCH 4/4,nf-next] netfilter: nf_ct_helper: Use unidimensional helper, Gao Feng
• [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
  • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
  • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
    • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
  • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Pablo Neira Ayuso
    • Re: [PATCH nf-next] nftables: ct: add byte/packet counter support, Florian Westphal
• [nft] syntax for retrieving ct byte/packet counters, Florian Westphal
  • Re: [nft] syntax for retrieving ct byte/packet counters, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_hl: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_hl: Add translation to nft, Pablo Neira Ayuso
• [PATCH] ipset tool: Fix link with libtool >= 2.4.4, Olivier Blin
  • [PATCH] Fix link with libtool >= 2.4.4, Olivier Blin
  • Re: [PATCH] ipset tool: Fix link with libtool >= 2.4.4, Jozsef Kadlecsik
    • Re: [PATCH] ipset tool: Fix link with libtool >= 2.4.4, Olivier Blin
      • Re: [PATCH] ipset tool: Fix link with libtool >= 2.4.4, Kadlecsik József
• header conflict introduced by change to netfilter_ipv4/ip_tables.h, Stephen Hemminger
  • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Mikko Rapeli
  • Message not available
    • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Stephen Hemminger
      • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Mikko Rapeli
        • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Josh Boyer
          • [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h, Mikko Rapeli
            • Re: [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h, David Miller
              • Re: [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h, Mikko Rapeli
                • Re: [PATCH] uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h, David Miller
          • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Daniel Borkmann
            • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Mikko Rapeli
      • Kernel uapi and glibc header conflicts (was Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h ), Mikko Rapeli
        • Re: Kernel uapi and glibc header conflicts (was Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h ), Florian Weimer
  • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Thomas Graf
    • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Mikko Rapeli
      • Re: header conflict introduced by change to netfilter_ipv4/ip_tables.h, Thomas Graf
• [PATCH] extensions: libip6t_LOG: Add translation to nft, Shivani Bhardwaj
• [PATCH] extensions: libipt_LOG: Add translation to nft, Shivani Bhardwaj
• [PATCH v2] extensions: libip6t_REJECT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libip6t_REJECT: Add translation to nft, Pablo Neira Ayuso
• [PATCH 1/4 v2] nf: netfilter: nf_tables_api: Add new attributes into nft_set to store user data., Carlos Falgueras García
  • [PATCH 3/4 v2] libnftnl: set: Implement new buffer of TLV objects., Carlos Falgueras García
    • Re: [PATCH 3/4 v2] libnftnl: set: Implement new buffer of TLV objects., Florian Westphal
      • Re: [PATCH 3/4 v2] libnftnl: set: Implement new buffer of TLV objects., Pablo Neira Ayuso
• [PATCH v2] src: datatype: Modify symbol table for icmpv6 packet types, Shivani Bhardwaj
  • Re: [PATCH v2] src: datatype: Modify symbol table for icmpv6 packet types, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_REJECT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_REJECT: Add translation to nft, Arturo Borrero Gonzalez
    • Re: [PATCH] extensions: libip6t_REJECT: Add translation to nft, Shivani Bhardwaj
      • Re: [PATCH] extensions: libip6t_REJECT: Add translation to nft, Arturo Borrero Gonzalez
• [PATCH] src: datatype: Modify symbol table for icmpv6 packet types, Shivani Bhardwaj
• [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Sasha Levin
  • RE: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, David Laight
  • Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Florian Westphal
    • Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Sasha Levin
  • Re: [PATCH] netfilter: nf_conntrack: use safer way to lock all buckets, Jesper Dangaard Brouer
• [PATCH v2] extensions: libipt_ttl: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libipt_ttl: Add translation to nft, Pablo Neira Ayuso
• [ANNOUNCE] NetDev 1.1 is approaching..., Pablo Neira Ayuso
• [PATCH 0/2] Add support for ttl translation, Shivani Bhardwaj
  • [PATCH 1/2] iptables: nft-ipv4: Add ip ttl to the buffer, Shivani Bhardwaj
  • [PATCH 2/2] extensions: libipt_ttl: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH 0/2] Add support for ttl translation, Pablo Neira Ayuso
    • Re: [PATCH 0/2] Add support for ttl translation, Shivani Bhardwaj
      • Re: [PATCH 0/2] Add support for ttl translation, Pablo Neira Ayuso
• [nft PATCH 1/4] rule: don't list anonymous sets, Arturo Borrero Gonzalez
  • [nft PATCH 2/4] rule: when listing all sets, don't print empty tables, Arturo Borrero Gonzalez
    • Re: [nft PATCH 2/4] rule: when listing all sets, don't print empty tables, Pablo Neira Ayuso
    • Re: [nft PATCH 2/4] rule: when listing all sets, don't print empty tables, Pablo Neira Ayuso
      • Re: [nft PATCH 2/4] rule: when listing all sets, don't print empty tables, Pablo Neira Ayuso
        • Re: [nft PATCH 2/4] rule: when listing all sets, don't print empty tables, Arturo Borrero Gonzalez
  • [nft PATCH 3/4] rule: delete extra space in sets printing, Arturo Borrero Gonzalez
    • Re: [nft PATCH 3/4] rule: delete extra space in sets printing, Pablo Neira Ayuso
      • Re: [nft PATCH 3/4] rule: delete extra space in sets printing, Arturo Borrero Gonzalez
  • [nft PATCH 4/4] tests/operations: add some listing tests, Arturo Borrero Gonzalez
    • Re: [nft PATCH 4/4] tests/operations: add some listing tests, Arturo Borrero Gonzalez
  • Re: [nft PATCH 1/4] rule: don't list anonymous sets, Pablo Neira Ayuso
• [PATCH 1/3 nf-next] netfilter: nf_ct_helper: define pr_fmt(), Pablo Neira Ayuso
  • [PATCH 2/3 nf-next] netfilter: nf_ct_helper: Add new function nf_ct_helper_init(), Pablo Neira Ayuso
  • [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register(), Pablo Neira Ayuso
    • Re: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register(), kbuild test robot
      • Message not available
        • Re: 答复: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register(), Pablo Neira Ayuso
          • Re: 答复: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register(), Pablo Neira Ayuso
            • Message not available
              • Message not available
                • Message not available
                  • Re: 答复: 答复: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register(), Pablo Neira Ayuso
                    • Message not available
                      • Re: 答复: 答复: 答复: [PATCH 3/3 nf-next] netfilter: nf_ct_helper: Add nf_conntrack_helpers_register(), Pablo Neira Ayuso
• [PATCH nft 1/6] tests/py: remove unused variables, Pablo M. Bermudo Garay
  • [PATCH nft 3/6] tests/py: simplify use of globals, Pablo M. Bermudo Garay
  • [PATCH nft 2/6] tests/py: fix style, Pablo M. Bermudo Garay
    • Re: [PATCH nft 2/6] tests/py: fix style, Pablo Neira Ayuso
      • Re: [PATCH nft 2/6] tests/py: fix style, Pablo M. Bermudo Garay
  • [PATCH nft 5/6] tests/py: modify supported test file syntax, Pablo M. Bermudo Garay
  • [PATCH nft 4/6] tests/py: convert chains and tables to objects, Pablo M. Bermudo Garay
  • [PATCH nft 6/6] tests/py: update test files syntax, Pablo M. Bermudo Garay
• [PATCH 1/4] nf: netfilter: nf_tables_api: Add new attributes into nft_set to store user data., Carlos Falgueras García
  • [PATCH 2/4] libnftnl: set: Add new attribute into 'set' to store an arbitrary length user data., Carlos Falgueras García
  • [PATCH 3/4] libnftnl: set: Implement new buffer of TLV objects., Carlos Falgueras García
    • Re: [PATCH 3/4] libnftnl: set: Implement new buffer of TLV objects., Patrick McHardy
  • [PATCH 4/4] libnftnl: examples: Modify the example to allow add TLV objects as user data., Carlos Falgueras García
  • Re: [PATCH 1/4] nf: netfilter: nf_tables_api: Add new attributes into nft_set to store user data., Patrick McHardy
  • Re: [PATCH 1/4] nf: netfilter: nf_tables_api: Add new attributes into nft_set to store user data., Pablo Neira Ayuso
• [PATCH nft] scanner: disable most rules when we expect literal symbol, Florian Westphal
  • Re: [PATCH nft] scanner: disable most rules when we expect literal symbol, Florian Westphal
    • Re: [PATCH nft] scanner: disable most rules when we expect literal symbol, Florian Westphal
• [PATCH] sqlite3: Remove unused "buffer" option., Alex Xu
  • Re: [PATCH] sqlite3: Remove unused "buffer" option., Eric Leblond
  • <Possible follow-ups>
  • [PATCH] sqlite3: Remove unused "buffer" option., Alex Xu (Hello71)
    • Re: [PATCH] sqlite3: Remove unused "buffer" option., Eric Leblond
• [PATCH] extensions: libip6t_ah: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_ah: Add translation to nft, Pablo Neira Ayuso
• [PATCH] iptables: add xtables-config-parser.h to BUILT_SOURCES, Gustavo Zacarias
  • Re: [PATCH] iptables: add xtables-config-parser.h to BUILT_SOURCES, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_SNAT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_SNAT: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libip6t_DNAT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libip6t_DNAT: Add translation to nft, Pablo Neira Ayuso
• [PATCH v2] iptables: nft-ipv6: Replace ip with ip6, Shivani Bhardwaj
  • Re: [PATCH v2] iptables: nft-ipv6: Replace ip with ip6, Pablo Neira Ayuso
• ipset v6.24: Comment string is too long!, Drunkard Zhang
  • Re: ipset v6.24: Comment string is too long!, Jozsef Kadlecsik
    • Re: ipset v6.24: Comment string is too long!, Drunkard Zhang
• Re: ulogd's SQLITE3 "buffer" option, Pablo Neira Ayuso
  • Re: ulogd's SQLITE3 "buffer" option, Eric Leblond
• Re: nf_unregister_net_hook: hook not found!, Pablo Neira Ayuso
  • Re: nf_unregister_net_hook: hook not found!, Eric W. Biederman
    • Re: nf_unregister_net_hook: hook not found!, Sander Eikelenboom
      • Re: nf_unregister_net_hook: hook not found!, Joe Stringer
• [RFC PATCH nft] parser: re-try unexpected tokens as symbol expression, Florian Westphal
  • Re: [RFC PATCH nft] parser: re-try unexpected tokens as symbol expression, Pablo Neira Ayuso
• [PATCH 1/3 nft] parser: get rid of multiton_expr from lhs relational expression, Pablo Neira Ayuso
  • [PATCH 2/3 nft] parser: rename multiton_expr to multiton_rhs_expr, Pablo Neira Ayuso
  • [PATCH 3/3 nft] parser: restore bitwise operations from the rhs of relational expressions, Pablo Neira Ayuso
  • Re: [PATCH 1/3 nft] parser: get rid of multiton_expr from lhs relational expression, Patrick McHardy
• [PATCH v2] extensions: libxt_length: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libxt_length: Add translation to nft, Pablo Neira Ayuso
• [PATCH] iptables: nft-ipv6: Replace ip with ip6, Shivani Bhardwaj
• [PATCH] extensions: libxt_length: Add translation to nft, Shivani Bhardwaj
• [PATCH nft] doc: update meta and ct expression keyword lists, Florian Westphal
  • Re: [PATCH nft] doc: update meta and ct expression keyword lists, Pablo Neira Ayuso
• [PATCH v2] extensions: libipt_DNAT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libipt_DNAT: Add translation to nft, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_limit: allow to invert matching criteria, Pablo Neira Ayuso
• [PATCH 1/3 nft] src: add new netdev protocol description, Pablo Neira Ayuso
  • [PATCH 3/3 nft] parser: add redirect constant to rhs_expr rule, Pablo Neira Ayuso
  • [PATCH 2/3 nft] parser: restrict relational rhs expression recursion, Pablo Neira Ayuso
• [PATCH] extensions: libipt_REJECT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libipt_REJECT: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libipt_DNAT: Add translation to nft, Shivani Bhardwaj
• [PATCH] extensions: libipt_SNAT: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libipt_SNAT: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libipt_SNAT: Add translation to nft, Shivani Bhardwaj
  • <Possible follow-ups>
  • [PATCH] extensions: libipt_SNAT: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH] extensions: libipt_SNAT: Add translation to nft, Pablo Neira Ayuso
• [PATCH v2] extensions: libxt_pkttype: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libxt_pkttype: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libipt_realm: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libipt_realm: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libipt_ah: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libipt_ah: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libxt_pkttype: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_pkttype: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_pkttype: Add translation to nft, Shivani Bhardwaj
• [PATCH] extensions: libxt_cpu: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_cpu: Add translation to nft, Pablo Neira Ayuso
• [PATCH v4] extensions: libxt_devgroup: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v4] extensions: libxt_devgroup: Add translation to nft, Pablo Neira Ayuso
• [PATCH] include: xtables: Add enum for better nft translation code, Shivani Bhardwaj
  • Re: [PATCH] include: xtables: Add enum for better nft translation code, Shivani Bhardwaj
  • Re: [PATCH] include: xtables: Add enum for better nft translation code, Pablo Neira Ayuso
• [PATCH v2] extensions: libxt_mark: Fix inversion code, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libxt_mark: Fix inversion code, Pablo Neira Ayuso
• [nft PATCH] tests/shell: add tests for handles and comments, Arturo Borrero Gonzalez
  • Re: [nft PATCH] tests/shell: add tests for handles and comments, Pablo Neira Ayuso
• [PATCH v2] extensions: libxt_helper: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libxt_helper: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libxt_helper: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_helper: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_helper: Add translation to nft, Shivani Bhardwaj
• [PATCH v2] extensions: libxt_limit: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libxt_limit: Add translation to nft, Pablo Neira Ayuso
• [no subject], Luuk Paulussen
  • [PATCH v2] net-next: Add tcindex to conntrack and add netfilter target/matches, Luuk Paulussen
• [PATCH] extensions: libxt_mark: Fix inversion code, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_mark: Fix inversion code, Pablo Neira Ayuso
• [PATCH v3] extensions: libxt_connmark: Add translation to nft, Shivani Bhardwaj
  • <Possible follow-ups>
  • [PATCH v3] extensions: libxt_connmark: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH v3] extensions: libxt_connmark: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH v3] extensions: libxt_connmark: Add translation to nft, Shivani Bhardwaj
        • Re: [PATCH v3] extensions: libxt_connmark: Add translation to nft, Pablo Neira Ayuso
• [PATCH v3] extensions: libxt_devgroup: Add translation to nft, Shivani Bhardwaj
• [PATCH v2] extensions: libxt_connmark: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v2] extensions: libxt_connmark: Add translation to nft, Shivani Bhardwaj
• [PATCH] extensions: libxt_NFLOG: Add group_info and remove multiple keywords, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_NFLOG: Add group_info and remove multiple keywords, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_NFLOG: Add group_info and remove multiple keywords, Shivani Bhardwaj
• [PATCH 1/2] libxt_cgroup: prepare for multi revisions, Tejun Heo
  • [PATCH 2/2] libxt_cgroup2: add support for cgroup2 path matching, Tejun Heo
    • Re: [PATCH 2/2] libxt_cgroup2: add support for cgroup2 path matching, Pablo Neira Ayuso
      • Re: [PATCH 2/2] libxt_cgroup2: add support for cgroup2 path matching, Pablo Neira Ayuso
        • Re: [PATCH 2/2] libxt_cgroup2: add support for cgroup2 path matching, Tejun Heo
        • [PATCH iptables] extensions: libxt_cgroup: add unit test, Tejun Heo
          • Re: [PATCH iptables] extensions: libxt_cgroup: add unit test, Pablo Neira Ayuso
  • Re: [PATCH 1/2] libxt_cgroup: prepare for multi revisions, Pablo Neira Ayuso
• [PATCH 1/3,nf] netfilter: nf_tables_api: Add new attributes into, Carlos Falgueras García
  • [PATCH 2/3,libnftnl] set: Add new attribute into 'set' to store an, Carlos Falgueras García
  • [PATCH 3/3,libnftnl] examples: Modify the example 'nft-set-add' to, Carlos Falgueras García
• New xlate3 branch in iptables, Pablo Neira Ayuso
• [PATCH] extensions: libxt_mac: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_mac: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libxt_connmark: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_connmark: Add translation to nft, Pablo Neira Ayuso
• [PATCH 0/2] Add syntax and translation for comment module, Shivani Bhardwaj
  • [PATCH 1/2] iptables: nft-ipv4: Remove suffix counter for comment module, Shivani Bhardwaj
  • [PATCH 2/2] extensions: libxt_comment: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH 2/2] extensions: libxt_comment: Add translation to nft, Pablo Neira Ayuso
      • Re: [PATCH 2/2] extensions: libxt_comment: Add translation to nft, Shivani Bhardwaj
• [PATCH] extensions: libxt_limit: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_limit: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libxt_iprange: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_iprange: Add translation to nft, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: prepare xt_cgroup for multi revisions, Tejun Heo
  • [PATCH 2/2] netfilter: implement xt_cgroup cgroup2 path match, Tejun Heo
  • Re: [PATCH 1/2] netfilter: prepare xt_cgroup for multi revisions, Pablo Neira Ayuso
    • Re: [PATCH 1/2] netfilter: prepare xt_cgroup for multi revisions, Tejun Heo
• [PATCH] extensions: libxt_NFLOG: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_NFLOG: Add translation to nft, Arturo Borrero Gonzalez
  • Re: [PATCH] extensions: libxt_NFLOG: Add translation to nft, Arturo Borrero Gonzalez
    • Re: [PATCH] extensions: libxt_NFLOG: Add translation to nft, Pablo Neira Ayuso
  • Re: [PATCH] extensions: libxt_NFLOG: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_NFQUEUE: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_NFQUEUE: Add translation to nft, Shivani Bhardwaj
      • Re: [PATCH] extensions: libxt_NFQUEUE: Add translation to nft, Pablo Neira Ayuso
• Syn proxy causes vcenter traffic not working properly, İbrahim Ercan
• [PATCH] extensions: libxt_esp: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_esp: Add translation to nft, Pablo Neira Ayuso
• [PATCH] extensions: libxt_devgroup: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH] extensions: libxt_devgroup: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH] extensions: libxt_devgroup: Add translation to nft, Shivani Bhardwaj
      • Re: [PATCH] extensions: libxt_devgroup: Add translation to nft, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] extensions: libxt_devgroup: Add translation to nft, Shivani Bhardwaj
    • Re: [PATCH] extensions: libxt_devgroup: Add translation to nft, Shivani Bhardwaj
• Support of different targets in nftables, Shivani Bhardwaj
  • Re: Support of different targets in nftables, Pablo Neira Ayuso
    • Re: Support of different targets in nftables, Shivani Bhardwaj
• About a bug reported, Shivani Bhardwaj
• [PATCH v4] extensions: libxt_mark: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v4] extensions: libxt_mark: Add translation to nft, Pablo Neira Ayuso
    • Re: [PATCH v4] extensions: libxt_mark: Add translation to nft, Pablo Neira Ayuso
• nftables symbols, Shivani Bhardwaj
  • Re: nftables symbols, Pablo Neira Ayuso
    • Re: nftables symbols, Shivani Bhardwaj
      • Re: nftables symbols, Pablo Neira Ayuso
        • Re: nftables symbols, Shivani Bhardwaj
• [PATCH v3] extensions: libxt_mark: Add translation to nft, Shivani Bhardwaj
  • Re: [PATCH v3] extensions: libxt_mark: Add translation to nft, Pablo Neira Ayuso
• [PATCH nft 0/5] ct: add support for directional keys, Florian Westphal
  • [PATCH nft 1/5] ct: add support for directional keys, Florian Westphal
    • Re: [PATCH nft 1/5] ct: add support for directional keys, Pablo Neira Ayuso
      • Re: [PATCH nft 1/5] ct: add support for directional keys, Florian Westphal
  • [PATCH nft 2/5] netlink: don't handle lhs zero-length expression as concat type, Florian Westphal
  • [PATCH nft 5/5] tests: add ct tests for ip family, Florian Westphal
  • [PATCH nft 4/5] src: ct: make ct l3proto work, Florian Westphal
  • [PATCH nft 3/5] netlink: only drop mask if it matches left known-size operand, Florian Westphal
• [ANNOUNCE] iptables 1.6.0 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] iptables 1.6.0 release, Jan Engelhardt
    • Re: [ANNOUNCE] iptables 1.6.0 release, Pablo Neira Ayuso
• [PATCH] ila: add NETFILTER dependency, Arnd Bergmann
  • Re: [PATCH] ila: add NETFILTER dependency, Pablo Neira Ayuso
    • Re: [PATCH] ila: add NETFILTER dependency, Florian Westphal
      • Re: [PATCH] ila: add NETFILTER dependency, Pablo Neira Ayuso
  • Re: [PATCH] ila: add NETFILTER dependency, David Miller
• [PATCH nf] netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL key, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL key, Pablo Neira Ayuso
• [RFC nft] ct expr: make directional keys work, Florian Westphal
  • Re: [RFC nft] ct expr: make directional keys work, Pablo Neira Ayuso
    • Re: [RFC nft] ct expr: make directional keys work, Florian Westphal
      • Re: [RFC nft] ct expr: make directional keys work, Florian Westphal
        • Re: [RFC nft] ct expr: make directional keys work, Pablo Neira Ayuso
• [PATCH net-next v5 0/8] openvswitch: NAT support., Jarno Rajahalme
  • [PATCH net-next v5 4/8] openvswitch: Update the CT state key only after nf_conntrack_in()., Jarno Rajahalme
  • [PATCH net-next v5 5/8] openvswitch: Find existing conntrack entry after upcall., Jarno Rajahalme
  • [PATCH net-next v5 8/8] openvswitch: Interface with NAT., Jarno Rajahalme
  • [PATCH net-next v5 7/8] openvswitch: Delay conntrack helper call for new connections., Jarno Rajahalme
    • Re: [PATCH net-next v5 7/8] openvswitch: Delay conntrack helper call for new connections., Sergei Shtylyov
  • [PATCH net-next v5 6/8] openvswitch: Handle NF_REPEAT in conntrack action., Jarno Rajahalme
  • [PATCH net-next v5 3/8] netfilter: Allow calling into nat helper without skb_dst., Jarno Rajahalme
  • [PATCH net-next v5 2/8] netfilter: Factor out nf_ct_get_info()., Jarno Rajahalme
    • Re: [PATCH net-next v5 2/8] netfilter: Factor out nf_ct_get_info()., Sergei Shtylyov
    • Re: [PATCH net-next v5 2/8] netfilter: Factor out nf_ct_get_info()., Pablo Neira Ayuso
  • [PATCH net-next v5 1/8] netfilter: Remove IP_CT_NEW_REPLY definition., Jarno Rajahalme
• [PATCH nft] netlink_delinearize: add previous statement to rule_pp_ctx, Pablo Neira Ayuso
  • Re: [PATCH nft] netlink_delinearize: add previous statement to rule_pp_ctx, Pablo M. Bermudo Garay
• [PATCH nf] netfilter: nf_tables: use skb->protocol instead of assuming ethernet header, Pablo Neira Ayuso
• [PATCH 4/5,nf-next] netfilter: nfnetlink: pass down netns pointer to call() and call_rcu(), Pablo Neira Ayuso
  • [PATCH 5/5,nf-next] netfilter: nfnetlink: pass down netns pointer to commit() and abort() callbacks, Pablo Neira Ayuso
• [PATCH 2/5,nf-next] netfilter: nf_tables: destroy basechain and rules on netdevice removal, Pablo Neira Ayuso
  • [PATCH 3/5,nf-next] netfilter: nf_tables: remove check against removal of inactive objects, Pablo Neira Ayuso
• [PATCH 1/5 nf,v3] netfilter: nf_tables: release objects on netns destruction, Pablo Neira Ayuso
• IPTables connection mark rule stops working, Justin Michael Schwartzbeck
• [ANNOUNCE] Another round of NetDev 1.1 updates, Pablo Neira Ayuso
• [PATCH -stable] netfilter: ctnetlink: put back references to master ct and expect objects, Pablo Neira Ayuso
• [PATCH -stable-*] netfilter: nf_conntrack: Support expectations in different zones, Pablo Neira Ayuso
• [PATCH -stable] netfilter: nf_log: don't zap all loggers on unregister, Pablo Neira Ayuso
  • [PATCH -stable] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Pablo Neira Ayuso
  • [PATCH -stable] netfilter: nf_tables: fix bogus warning in nft_data_uninit(), Pablo Neira Ayuso
  • [PATCH -stable-3.18] netfilter: nft_compat: fix module refcount underflow, Pablo Neira Ayuso
  • [PATCH -stable] netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC, Pablo Neira Ayuso
  • [PATCH -stable] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse, Pablo Neira Ayuso
    • Re: [PATCH -stable] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse, Luis Henriques
• rebasing nf tree, Pablo Neira Ayuso
  • <Possible follow-ups>
  • rebasing nf tree, Pablo Neira Ayuso
• Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket", Jozsef Kadlecsik
  • Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket", Remzi AKYÜZ
    • Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket", Jozsef Kadlecsik
      • Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket", Noel Kuntze
        • Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket", Dâniel Fraga
          • Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket", Pablo Neira Ayuso
            • Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket", Dâniel Fraga
            • Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket", Dâniel Fraga