Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH next 29/84] ipvs: Pass ipvs not net to ip_vs_genl_parse_service, (continued)
  • [PATCH next 29/84] ipvs: Pass ipvs not net to ip_vs_genl_parse_service, Eric W. Biederman
  • [PATCH next 13/84] ipvs: Pass ipvs not net to ip_vs_has_real_service, Eric W. Biederman
  • [PATCH next 34/84] ipvs: Pass ipvs not net to stop_sync_thread, Eric W. Biederman
  • [PATCH next 77/84] ipvs: Pass ipvs into ip_vs_in_icmp and ip_vs_in_icmp_v6, Eric W. Biederman
  • [PATCH next 68/84] ipvs: Pass ipvs into __ip_vs_get_out_rt, Eric W. Biederman
  • [PATCH next 50/84] ipvs: Pass ipvs not net to estimation_timer, Eric W. Biederman
  • [PATCH next 75/84] ipvs: Pass ipvs into ip_vs_out, Eric W. Biederman
  • [PATCH next 27/84] ipvs: Pass ipvs not net to __ip_vs_get_dest_entries, Eric W. Biederman
  • [PATCH next 20/84] ipvs: Pass ipvs not net to ip_vs_flush, Eric W. Biederman
  • [PATCH next 74/84] ipvs: Pass ipvs not net into sysctl_nat_icmp_send, Eric W. Biederman
  • [PATCH next 59/84] ipvs: Pass ipvs not net into init_netns and exit_netns, Eric W. Biederman
  • [PATCH next 16/84] ipvs: Pass ipvs not net to __ip_vs_del_dest, Eric W. Biederman
  • [PATCH next 49/84] ipvs: Pass ipvs not net into ip_vs_control_net_(init|cleanup), Eric W. Biederman
  • [PATCH next 28/84] ipvs: Pass ipvs not net to __ip_vs_get_timeouts, Eric W. Biederman
  • [PATCH next 37/84] ipvs: Store ipvs not net in struct ip_vs_sync_thread_data, Eric W. Biederman
  • [PATCH next 63/84] ipvs: Pass ipvs not net to ip_vs_conn_hashkey, Eric W. Biederman
  • [PATCH next 22/84] ipvs: Pass ipvs not net to ip_vs_zero_all, Eric W. Biederman
  • [PATCH next 55/84] ipvs: Pass ipvs not net to register_ip_vs_app and unregister_ip_vs_app, Eric W. Biederman
  • [PATCH next 41/84] ipvs: Pass ipvs not net to ip_vs_proc_conn, Eric W. Biederman
  • [PATCH next 69/84] ipvs: Pass ipvs into __ip_vs_get_out_rt_v6, Eric W. Biederman
  • [PATCH next 83/84] ipvs: Remove skb_sknet, Eric W. Biederman
  • [PATCH next 65/84] ipvs: Pass ipvs not net into ip_vs_conn_net_init and ip_vs_conn_net_cleanup, Eric W. Biederman
  • [PATCH next 66/84] ipvs: Pass ipvs into .conn_schedule and ip_vs_try_to_schedule, Eric W. Biederman
  • [PATCH next 81/84] ipvs: Pass ipvs not net to ip_vs_protocol_net_(init|cleanup), Eric W. Biederman
  • [PATCH next 57/84] ipvs: Pass ipvs not net into ip_vs_app_net_init and ip_vs_app_net_cleanup, Eric W. Biederman
  • [PATCH next 48/84] ipvs: Pass ipvs not net to ip_vs_control_net_(init|cleanup)_sysctl, Eric W. Biederman
  • [PATCH next 11/84] ipvs: Pass ipvs not net to __ip_vs_service_find, Eric W. Biederman
  • [PATCH next 46/84] ipvs: Pass ipvs not net to ip_vs_start_estimator aned ip_vs_stop_estimator, Eric W. Biederman
  • [PATCH next 25/84] ipvs: Pass ipvs not net to ip_vs_set_timeout, Eric W. Biederman
  • [PATCH next 67/84] ipvs: Better derivation of ipvs in ip_vs_tunnel_xmit, Eric W. Biederman
  • [PATCH next 79/84] ipvs: Pass ipvs through ip_vs_route_me_harder into sysctl_snat_reroute, Eric W. Biederman
  • [PATCH next 73/84] ipvs: Simplify ipvs and net access in ip_vs_leave, Eric W. Biederman
  • [PATCH next 56/84] ipvs: Pass ipvs not net into ip_vs_app_inc_release, Eric W. Biederman
  • [PATCH next 80/84] ipvs: Remove net argument from ip_vs_tcp_conn_listen, Eric W. Biederman
  • [PATCH next 38/84] ipvs: Pass ipvs not net to ip_vs_process_message, Eric W. Biederman
  • [PATCH next 40/84] ipvs: Pass ipvs not net to ip_vs_sync_conn, Eric W. Biederman
  • [PATCH next 17/84] ipvs: Pass ipvs not net to ip_vs_dest_trash_expire, Eric W. Biederman
  • [PATCH next 54/84] ipvs: Pass ipvs not net to register_ip_vs_app_inc, Eric W. Biederman
  • [PATCH next 36/84] ipvs: Pass ipvs not net to make_receive_sock, Eric W. Biederman
  • [PATCH next 33/84] ipvs: Pass ipvs not net to start_sync_thread, Eric W. Biederman
  • [PATCH next 15/84] ipvs: Pass ipvs not net to ip_vs_trash_cleanup, Eric W. Biederman
  • [PATCH next 62/84] ipvs: Pass ipvs into conn_out_get, Eric W. Biederman
  • [PATCH next 14/84] ipvs: Pass ipvs not net to ip_vs_find_dest, Eric W. Biederman
  • [PATCH next 61/84] ipvs: Pass ipvs into .conn_in_get and ip_vs_conn_in_get_proto, Eric W. Biederman
  • [PATCH next 70/84] ipvs: Pass ipvs into ensure_mtu_is adequate, Eric W. Biederman
  • [PATCH next 23/84] ipvs: Cache ipvs in ip_vs_in_icmp and ip_vs_in_icmp_v6, Eric W. Biederman
  • [PATCH next 35/84] ipvs: Pass ipvs not net to make_send_sock, Eric W. Biederman
  • [PATCH next 30/84] ipvs: Pass ipvs not net to ip_vs_genl_find_service, Eric W. Biederman
  • [PATCH next 53/84] ipvs: Pass ipvs not net into ip_vs_app_inc_new, Eric W. Biederman
  • [PATCH next 60/84] ipvs: Pass ipvs into ip_vs_conn_fill_param_proto, Eric W. Biederman
  • [PATCH next 12/84] ipvs: Pass ipvs not net to ip_vs_service_find, Eric W. Biederman
  • [PATCH next 45/84] ipvs: Pass ipvs not net to ip_vs_genl_set_config, Eric W. Biederman
  • Re: [PATCH next 00/84] ipvs: Stop guessing the network namespace (take 2), Julian Anastasov
    • Re: [PATCH next 00/84] ipvs: Stop guessing the network namespace (take 2), Pablo Neira Ayuso
      • Re: [PATCH next 00/84] ipvs: Stop guessing the network namespace (take 2), Simon Horman
        • Re: [PATCH next 00/84] ipvs: Stop guessing the network namespace (take 2), Pablo Neira Ayuso
  • [PATCH next 0/5] netfilter: Pass net into ip_route_me_harder, Eric W. Biederman
    • [PATCH next 1/5] ipv4: Push struct net down into nf_send_reset, Eric W. Biederman
    • [PATCH next 2/5] netfilter: Push struct net down into nf_afinfo.reroute, Eric W. Biederman
    • [PATCH next 3/5] netfilter: ipt_SYNPROXY: Pass snet into synproxy_send_tcp, Eric W. Biederman
    • [PATCH next 5/5] ipv6: Pass struct net into ip6_route_me_harder, Eric W. Biederman
    • [PATCH next 4/5] ipv4: Pass struct net into ip_route_me_harder, Eric W. Biederman
    • Re: [PATCH next 0/5] netfilter: Pass net into ip_route_me_harder, Nicolas Dichtel
    • Re: [PATCH next 0/5] netfilter: Pass net into ip_route_me_harder, Pablo Neira Ayuso
    • [PATCH net-next 0/6] net: Pass net through ip fragmention, Eric W. Biederman
      • [PATCH net-next 2/6] openvswitch: Pass net into ovs_fragment, Eric W. Biederman
        • Re: [PATCH net-next 2/6] openvswitch: Pass net into ovs_fragment, Nicolas Dichtel
          • Re: [PATCH net-next 2/6] openvswitch: Pass net into ovs_fragment, Eric W. Biederman
            • Re: [PATCH net-next 2/6] openvswitch: Pass net into ovs_fragment, Nicolas Dichtel
      • [PATCH net-next 3/6] ipv4: Pass struct net through ip_fragment, Eric W. Biederman
      • [PATCH net-next 4/6] ipv6: Pass struct net through ip6_fragment, Eric W. Biederman
        • Re: [PATCH net-next 4/6] ipv6: Pass struct net through ip6_fragment, Nicolas Dichtel
          • [PATCH net-next 7/6] ipv6: Add missing newline to __xfrm6_output_finish, Eric W. Biederman
      • [PATCH net-next 6/6] openvswitch: Remove ovs_vport_output_sk, Eric W. Biederman
      • [PATCH net-next 5/6] bridge: Remove br_nf_push_frag_xmit_sk, Eric W. Biederman
      • [PATCH net-next 1/6] openvswitch: Pass net into ovs_vport_output, Eric W. Biederman
        • Re: [PATCH net-next 1/6] openvswitch: Pass net into ovs_vport_output, Nicolas Dichtel
      • Re: [PATCH net-next 0/6] net: Pass net through ip fragmention, Nicolas Dichtel
      • Re: [PATCH net-next 0/6] net: Pass net through ip fragmention, David Miller
      • [PATCH net-next 00/15] net: Pass net through the output path, Eric W. Biederman
        • [PATCH net-next 01/15] ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk, Eric W. Biederman
          • Re: [PATCH net-next 01/15] ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk, Sergei Shtylyov
          • Re: [PATCH net-next 01/15] ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk, Nicolas Dichtel
        • [PATCH net-next 02/15] xfrm: Only compute net once in xfrm_policy_queue_process, Eric W. Biederman
        • [PATCH net-next 07/15] ipv6: Merge __ip6_local_out and __ip6_local_out_sk, Eric W. Biederman
        • [PATCH net-next 10/15] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit, Eric W. Biederman
          • Re: [PATCH net-next 10/15] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit, Eric Dumazet
            • Re: [PATCH net-next 10/15] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit, Eric W. Biederman
              • Re: [PATCH net-next 10/15] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit, Eric Dumazet
        • [PATCH net-next 08/15] ipv6: Merge ip6_local_out and ip6_local_out_sk, Eric W. Biederman
        • [PATCH net-next 09/15] ipv4: Cache net in iptunnel_xmit, Eric W. Biederman
        • [PATCH net-next 06/15] ipv4: Merge ip_local_out and ip_local_out_sk, Eric W. Biederman
          • Re: [PATCH net-next 06/15] ipv4: Merge ip_local_out and ip_local_out_sk, Nicolas Dichtel
            • Re: [PATCH net-next 06/15] ipv4: Merge ip_local_out and ip_local_out_sk, Eric W. Biederman
              • Re: [PATCH net-next 06/15] ipv4: Merge ip_local_out and ip_local_out_sk, Nicolas Dichtel
        • [PATCH net-next 05/15] ipv4: Merge __ip_local_out and __ip_local_out_sk, Eric W. Biederman
        • [PATCH net-next 04/15] dst: Pass a sk into .local_out, Eric W. Biederman
        • [PATCH net-next 03/15] net: Pass net into dst_output and remove dst_output_okfn, Eric W. Biederman
        • [PATCH net-next 15/15] dst: Pass net into dst->output, Eric W. Biederman
        • [PATCH net-next 14/15] ipv4,ipv6: Pass net into ip_local_out and ip6_local_out, Eric W. Biederman
        • [PATCH net-next 13/15] ipv4,ipv6: Pass net into __ip_local_out and __ip6_local_out, Eric W. Biederman
        • [PATCH net-next 12/15] ipvlan: Cache net in ipvlan_process_v4_outbound and ipvlan_process_v6_outbound, Eric W. Biederman
          • Re: [PATCH net-next 12/15] ipvlan: Cache net in ipvlan_process_v4_outbound and ipvlan_process_v6_outbound, Mahesh Bandewar
            • Re: [PATCH net-next 12/15] ipvlan: Cache net in ipvlan_process_v4_outbound and ipvlan_process_v6_outbound, Mahesh Bandewar
        • [PATCH net-next 11/15] ppp: Cache net in pptp_xmit, Eric W. Biederman
        • [PATCH net-next 00/16] net: Pass net through the output path v2, Eric W. Biederman
          • [PATCH net-next 01/16] ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk, Eric W. Biederman
          • [PATCH net-next 03/16] xfrm: Only compute net once in xfrm_policy_queue_process, Eric W. Biederman
          • [PATCH net-next 05/16] dst: Pass a sk into .local_out, Eric W. Biederman
          • [PATCH net-next 10/16] ipv4: Cache net in iptunnel_xmit, Eric W. Biederman
          • [PATCH net-next 08/16] ipv6: Merge __ip6_local_out and __ip6_local_out_sk, Eric W. Biederman
          • [PATCH net-next 07/16] ipv4: Merge ip_local_out and ip_local_out_sk, Eric W. Biederman
          • [PATCH net-next 09/16] ipv6: Merge ip6_local_out and ip6_local_out_sk, Eric W. Biederman
          • [PATCH net-next 06/16] ipv4: Merge __ip_local_out and __ip_local_out_sk, Eric W. Biederman
          • [PATCH net-next 04/16] net: Pass net into dst_output and remove dst_output_okfn, Eric W. Biederman
          • [PATCH net-next 02/16] ipv4: Fix ip_queue_xmit to pass sk into ip_local_out_sk, Eric W. Biederman
          • [PATCH net-next 12/16] ppp: Cache net in pptp_xmit, Eric W. Biederman
          • [PATCH net-next 15/16] ipv4,ipv6: Pass net into ip_local_out and ip6_local_out, Eric W. Biederman
          • [PATCH net-next 11/16] ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit, Eric W. Biederman
          • [PATCH net-next 14/16] ipv4,ipv6: Pass net into __ip_local_out and __ip6_local_out, Eric W. Biederman
          • [PATCH net-next 13/16] ipvlan: Cache net in ipvlan_process_v4_outbound and ipvlan_process_v6_outbound, Eric W. Biederman
          • [PATCH net-next 16/16] dst: Pass net into dst->output, Eric W. Biederman
          • Re: [PATCH net-next 00/16] net: Pass net through the output path v2, Nicolas Dichtel
          • Re: [PATCH net-next 00/16] net: Pass net through the output path v2, David Miller
          • [PATCH net-next 0/3] net: Pass net into defragmentation, Eric W. Biederman
            • Re: [PATCH net-next 0/3] net: Pass net into defragmentation, Nicolas Dichtel
            • Re: [PATCH net-next 0/3] net: Pass net into defragmentation, David Miller
          • [PATCH net-next 2/3] ipv4: Pass struct net into ip_defrag and ip_check_defrag, Eric W. Biederman
            • Re: [PATCH net-next 2/3] ipv4: Pass struct net into ip_defrag and ip_check_defrag, Pablo Neira Ayuso
          • [PATCH net-next 1/3] ipv4: Only compute net once in ip_call_ra_chain, Eric W. Biederman
          • [PATCH net-next 3/3] ipv6: Pass struct net into nf_ct_frag6_gather, Eric W. Biederman
            • Re: [PATCH net-next 3/3] ipv6: Pass struct net into nf_ct_frag6_gather, Pablo Neira Ayuso
• SNAT and contrack helpers, johan
• [PATCH iptables] extensions: fix several test errors, Pablo Neira Ayuso
• [PATCH] netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC, Pablo Neira Ayuso
• [PATCH nf v2] netfilter: bridge: fix routing of bridge frames with call-iptables=1, Florian Westphal
  • Re: [PATCH nf v2] netfilter: bridge: fix routing of bridge frames with call-iptables=1, Sander Eikelenboom
  • Re: [PATCH nf v2] netfilter: bridge: fix routing of bridge frames with call-iptables=1, Pablo Neira Ayuso
• [PATCH nf] netfilter: bridge: fix routing of bridge frames with call-iptables=1, Florian Westphal
  • Re: [PATCH nf] netfilter: bridge: fix routing of bridge frames with call-iptables=1, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: bridge: fix routing of bridge frames with call-iptables=1, Pablo Neira Ayuso
• Re: [PATCH] ipvs:Fix locking requirements in the function ip_vs_unlink_service, Julian Anastasov
  • Message not available
    • Re: [PATCH] ipvs:Fix locking requirements in the function ip_vs_unlink_service, Julian Anastasov
• [PATCH -stable-4.2] netfilter: nf_tables: Use 32 bit addressing register from nft_type_to_reg(), Pablo Neira Ayuso
  • [PATCH -stable-4.2] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Pablo Neira Ayuso
  • [PATCH -stable-4.2] netfilter: ipset: Fixing unnamed union init, Pablo Neira Ayuso
  • [PATCH -stable-4.2] netfilter: ipset: Out of bound access in hash:net* types fixed, Pablo Neira Ayuso
  • [PATCH -stable-4.2] netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths, Pablo Neira Ayuso
  • [PATCH -stable-4.1,-stable-4.2] netfilter: nfnetlink: work around wrong endianess in res_id field, Pablo Neira Ayuso
• [PATCH nft] tests: add concatenations and maps; combine them too, Pablo Neira Ayuso
• [PATCH 1/2 -stable-3.12] netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_get, Pablo Neira Ayuso
  • [PATCH 2/2 -stable-3.12 ] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Pablo Neira Ayuso
    • Re: [PATCH 2/2 -stable-3.12 ] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Pablo Neira Ayuso
      • Re: [PATCH 2/2 -stable-3.12 ] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Jiri Slaby
  • Re: [PATCH 1/2 -stable-3.12] netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_get, Pablo Neira Ayuso
• [lnf-queue PATCH] nlmsg: add lacking attributes validation, Ken-ichirou MATSUZAWA
  • Re: [lnf-queue PATCH] nlmsg: add lacking attributes validation, Pablo Neira Ayuso
• [ANNOUNCE] Netdev 1.1 conference, Pablo Neira Ayuso
• [PATCH nft] evaluate: use existing table object from evaluation context, Pablo Neira Ayuso
  • Re: [PATCH nft] evaluate: use existing table object from evaluation context, Arturo Borrero Gonzalez
    • Re: [PATCH nft] evaluate: use existing table object from evaluation context, Pablo Neira Ayuso
• [ANNOUNCE] conntrack-tools 1.4.3 release, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_conntrack 1.0.5, Pablo Neira Ayuso
• [nft] segfault bug in simple ruleset, regression?, Arturo Borrero Gonzalez
  • Re: [nft] segfault bug in simple ruleset, regression?, Pablo Neira Ayuso
    • Re: [nft] segfault bug in simple ruleset, regression?, Florian Westphal
      • Re: [nft] segfault bug in simple ruleset, regression?, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_log: don't zap all loggers on unregister, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_log: don't zap all loggers on unregister, Pablo Neira Ayuso
• [PATCH RFC 0/3] Rework nfnetlink_queue conntrack support, Pablo Neira Ayuso
  • [PATCH RFC 3/3] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c, Pablo Neira Ayuso
    • Re: [PATCH RFC 3/3] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c, Ken-ichirou MATSUZAWA
      • Re: [PATCH RFC 3/3] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c, Pablo Neira Ayuso
        • nfqueue batch verdict with conntrack (was [PATCH RFC 3/3] netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c), Ken-ichirou MATSUZAWA
        • [PATCH nf-next 0/1] netfilter: nfnetlink_queue: return -EOPNOTSUPP if QUEUE_CT is disabled, Ken-ichirou MATSUZAWA
          • [PATCH nf-next 1/1] netfilter: nfnetlink_queue: return -EOPNOTSUPP if QUEUE_CT is disabled, Ken-ichirou MATSUZAWA
  • [PATCH RFC 1/3] netfilter: ctnetlink: remove ctnetlink_nfqueue_build_size(), Pablo Neira Ayuso
    • Re: [PATCH RFC 1/3] netfilter: ctnetlink: remove ctnetlink_nfqueue_build_size(), Ken-ichirou MATSUZAWA
      • Re: [PATCH RFC 1/3] netfilter: ctnetlink: remove ctnetlink_nfqueue_build_size(), Pablo Neira Ayuso
  • [PATCH RFC 2/3] netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c, Pablo Neira Ayuso
  • Re: [PATCH RFC 0/3] Rework nfnetlink_queue conntrack support, Ken-ichirou MATSUZAWA
    • [PATCH lnf-queue] examples: attaching a conntrack information, Ken-ichirou MATSUZAWA
      • Re: [PATCH lnf-queue] examples: attaching a conntrack information, Florian Westphal
        • Re: [PATCH lnf-queue] examples: attaching a conntrack information, Ken-ichirou MATSUZAWA
          • Re: [PATCH lnf-queue] examples: attaching a conntrack information, Florian Westphal
        • Re: [PATCH lnf-queue] examples: attaching a conntrack information, Pablo Neira Ayuso
          • [PATCHv2 lnf-queue] examples: attaching a conntrack information, Ken-ichirou MATSUZAWA
          • Re: [PATCH lnf-queue] examples: attaching a conntrack information, Ken-ichirou MATSUZAWA
    • Re: [PATCH RFC 0/3] Rework nfnetlink_queue conntrack support, Pablo Neira Ayuso
      • Re: [PATCH RFC 0/3] Rework nfnetlink_queue conntrack support, Ken-ichirou MATSUZAWA
        • [PATCH nf-next 1/3] netfilter: nfnetlink_queue: rename related to nfqueue attaching conntrack info, Ken-ichirou MATSUZAWA
          • Re: [PATCH nf-next 1/3] netfilter: nfnetlink_queue: rename related to nfqueue attaching conntrack info, Pablo Neira Ayuso
        • [PATCH nf-next 2/3] netfilter: nf_conntrack_netlink: add const qualifier to nfnl_hook, Ken-ichirou MATSUZAWA
        • [PATCH nf-next 3/3] netfilter: nfnetlink_log: allow to attach conntrack, Ken-ichirou MATSUZAWA
          • Re: [PATCH nf-next 3/3] netfilter: nfnetlink_log: allow to attach conntrack, Pablo Neira Ayuso
        • [PATCH lnf-log 1/3] include: Sync with kernel headers, Ken-ichirou MATSUZAWA
          • Re: [PATCH lnf-log 1/3] include: Sync with kernel headers, Pablo Neira Ayuso
        • [PATCH lnf-log 2/3] nlmsg: Add NFULA_CT and NFULA_CT_INFO attributes support, Ken-ichirou MATSUZAWA
          • Re: [PATCH lnf-log 2/3] nlmsg: Add NFULA_CT and NFULA_CT_INFO attributes support, Pablo Neira Ayuso
        • [PATCH lnf-log 3/3] utils: nf-log: attaching a conntrack information, Ken-ichirou MATSUZAWA
          • Re: [PATCH lnf-log 3/3] utils: nf-log: attaching a conntrack information, Pablo Neira Ayuso
            • Re: [PATCH lnf-log 3/3] utils: nf-log: attaching a conntrack information, Ken-ichirou MATSUZAWA
              • [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information, Ken-ichirou MATSUZAWA
                • Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information, Pablo Neira Ayuso
                  • Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information, Ken-ichirou MATSUZAWA
                    • Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information, Ken-ichirou MATSUZAWA
                      • Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information, Pablo Neira Ayuso
                    • Re: [PATCHv2 lnf-log] utils: nf-log: attaching a conntrack information, Pablo Neira Ayuso
• Re: linux-next: Tree for Sep 8 (netfilter build error), Randy Dunlap
• [PATCH v1 1/1] fix: resource leakage when loading library using dlopen, Imran Zaman
  • Re: [PATCH v1 1/1] fix: resource leakage when loading library using dlopen, Jan Engelhardt
    • RE: [PATCH v1 1/1] fix: resource leakage when loading library using dlopen, Zaman, Imran
      • RE: [PATCH v1 1/1] fix: resource leakage when loading library using dlopen, Jan Engelhardt
        • RE: [PATCH v1 1/1] fix: resource leakage when loading library using dlopen, Zaman, Imran
          • RE: [PATCH v1 1/1] fix: resource leakage when loading library using dlopen, Jan Engelhardt
            • RE: [PATCH v1 1/1] fix: resource leakage when loading library using dlopen, Zaman, Imran
              • RE: [PATCH v1 1/1] fix: resource leakage when loading library using dlopen, Jan Engelhardt
            • Re: [PATCH v1 1/1] fix: resource leakage when loading library using dlopen, Pablo Neira Ayuso
• [nft] deleting chains and verdict map entries in the same transaction, Andreas Schultz
  • Re: [nft] deleting chains and verdict map entries in the same transaction, Pablo Neira Ayuso
• Bug report: Segfault on nested sets with prefixes, Wilmer van der Gaast
  • Re: Bug report: Segfault on nested sets with prefixes, Pablo Neira Ayuso
    • Re: Bug report: Segfault on nested sets with prefixes, Wilmer van der Gaast
• Mixed IPv4+IPv6 sets, Wilmer van der Gaast
  • Re: Mixed IPv4+IPv6 sets, Pablo Neira Ayuso
    • Re: Mixed IPv4+IPv6 sets, Arturo Borrero Gonzalez
      • Re: Mixed IPv4+IPv6 sets, Wilmer van der Gaast
    • Re: Mixed IPv4+IPv6 sets, Wilmer van der Gaast
• [PATCH] iptables: Spelling fixes, Ville Skyttä
  • Re: [PATCH] iptables: Spelling fixes, Pablo Neira Ayuso
    • [PATCH] iptables: Spelling fixes, Ville Skyttä
      • Re: [PATCH] iptables: Spelling fixes, Jan Engelhardt
        • Re: [PATCH] iptables: Spelling fixes, Ville Skyttä
          • Re: [PATCH] iptables: Spelling fixes, Jozsef Kadlecsik
            • Re: [PATCH] iptables: Spelling fixes, Ville Skyttä
        • Re: [PATCH] iptables: Spelling fixes, Pablo Neira Ayuso
• [PATCH net] openvswitch: Remove conntrack Kconfig option., Joe Stringer
  • Re: [PATCH net] openvswitch: Remove conntrack Kconfig option., Pravin Shelar
  • Re: [PATCH net] openvswitch: Remove conntrack Kconfig option., David Miller
• [PATCH nft 1/2] netlink: flush stdout after each event in monitor mode, Pablo Neira Ayuso
  • [PATCH nft 2/2] mnl: rework netlink socket event receive path, Pablo Neira Ayuso
• [PATCH nft] tests: display error when trying to run tests out of the root directory, Pablo Neira Ayuso
• [PATCH 1/1] solve musl build problem, Brendan Heading
  • Re: [PATCH 1/1] solve musl build problem, Pablo Neira Ayuso
    • Re: [PATCH 1/1] solve musl build problem, Brendan Heading
      • Re: [PATCH 1/1] solve musl build problem, Brendan Heading
        • Re: [PATCH 1/1] solve musl build problem, Pablo Neira Ayuso
          • Re: [PATCH 1/1] solve musl build problem, Brendan Heading
• broken packet passed into raw table by nf_defrag_ipv6, Andreas Herz
• [PATCH nf-next] netfilter: nf_conntrack: make nf_ct_zone_dflt built-in, Daniel Borkmann
  • Re: [PATCH nf-next] netfilter: nf_conntrack: make nf_ct_zone_dflt built-in, David Miller
• [PATCH nf-next] netfilter: nf_dup{4,6}: fix build error when nf_conntrack disabled, Daniel Borkmann
  • Re: [PATCH nf-next] netfilter: nf_dup{4,6}: fix build error when nf_conntrack disabled, David Miller
• [PATCH libnftnl 3/3] src: add compat header file definitions, Pablo Neira Ayuso
• [PATCH libnftnl 0/3] use nftnl_ prefix, Pablo Neira Ayuso
  • [PATCH libnftnl 1/3] src: introduce nftnl_* aliases for all existing functions, Pablo Neira Ayuso
  • Re: [PATCH libnftnl 0/3] use nftnl_ prefix, Pablo Neira Ayuso
    • Re: [PATCH libnftnl 0/3] use nftnl_ prefix, Pablo Neira Ayuso
      • Re: [PATCH libnftnl 0/3] use nftnl_ prefix, Arturo Borrero Gonzalez
      • Re: [PATCH libnftnl 0/3] use nftnl_ prefix, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths, Daniel Borkmann
  • Re: [PATCH nf] netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths, Pablo Neira Ayuso
• [PATCH nf 1/1] nft: Fix nlmsg_type in GET operation callbacks, Vijay Subramanian
  • Re: [PATCH nf 1/1] nft: Fix nlmsg_type in GET operation callbacks, Pablo Neira Ayuso
    • Re: [PATCH nf 1/1] nft: Fix nlmsg_type in GET operation callbacks, Vijay Subramanian
• [ANNOUNCE] ipset 6.26 released, Jozsef Kadlecsik
• [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: ipset: Out of bound access in hash:net* types fixed, Jozsef Kadlecsik
  • Re: [PATCH 0/1] ipset patch for nf, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Jozsef Kadlecsik
      • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Pablo Neira Ayuso
        • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Jozsef Kadlecsik
          • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Pablo Neira Ayuso
            • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Jozsef Kadlecsik
              • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Pablo Neira Ayuso
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length, Jozsef Kadlecsik
      • Re: [PATCH 1/1] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length, Daniel Borkmann
        • Re: [PATCH 1/1] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length, Jozsef Kadlecsik
    • Re: [PATCH 0/1] ipset patch for nf, Pablo Neira Ayuso
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: fix race condition in ipset save, swap and delete, Jozsef Kadlecsik
    • Re: [PATCH 0/1] ipset patch for nf, Pablo Neira Ayuso
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses, Jozsef Kadlecsik
      • Re: [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses, Pablo Neira Ayuso
        • Re: [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses, Jozsef Kadlecsik
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports, Jozsef Kadlecsik
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: Fix suspicious rcu_dereference_protected(), Jozsef Kadlecsik
• [PATCH -next] netfilter: nfnetlink: work around wrong endianess with old nft userspace, Florian Westphal
  • Re: [PATCH -next] netfilter: nfnetlink: work around wrong endianess with old nft userspace, Pablo Neira Ayuso
    • Re: [PATCH -next] netfilter: nfnetlink: work around wrong endianess with old nft userspace, Florian Westphal
• [PATCH -next] netfilter: reduce sparse warnings, Florian Westphal
  • Re: [PATCH -next] netfilter: reduce sparse warnings, Pablo Neira Ayuso
• nftables batch abi broken ..., Florian Westphal
  • Re: nftables batch abi broken ..., Pablo Neira Ayuso
• [conntrackd] allowing DisableExternalCache in alarm mode, Arturo Borrero Gonzalez
  • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Pablo Neira Ayuso
    • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Arturo Borrero Gonzalez
      • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Pablo Neira Ayuso
        • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Arturo Borrero Gonzalez
        • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Arturo Borrero Gonzalez
          • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Pablo Neira Ayuso
• [PATCH -next] Revert "netfilter: xtables: compute exact size needed for jumpstack", Florian Westphal
  • Re: [PATCH -next] Revert "netfilter: xtables: compute exact size needed for jumpstack", Pablo Neira Ayuso
• [PATCHv6 net-next 00/10] OVS conntrack support, Joe Stringer
  • [PATCHv6 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Joe Stringer
  • [PATCHv6 net-next 08/10] netfilter: connlabels: Export setting connlabel length, Joe Stringer
  • [PATCHv6 net-next 09/10] openvswitch: Allow matching on conntrack label, Joe Stringer
  • [PATCHv6 net-next 03/10] ipv6: Export nf_ct_frag6_gather(), Joe Stringer
  • [PATCHv6 net-next 06/10] openvswitch: Allow matching on conntrack mark, Joe Stringer
  • [PATCHv6 net-next 07/10] netfilter: Always export nf_connlabels_replace(), Joe Stringer
  • [PATCHv6 net-next 04/10] dst: Add __skb_dst_copy() variation, Joe Stringer
  • [PATCHv6 net-next 05/10] openvswitch: Add conntrack action, Joe Stringer
    • Re: [PATCHv6 net-next 05/10] openvswitch: Add conntrack action, Joe Stringer
    • Re: [PATCHv6 net-next 05/10] openvswitch: Add conntrack action, Pravin Shelar
  • [PATCHv6 net-next 02/10] openvswitch: Move MASKED* macros to datapath.h, Joe Stringer
  • [PATCHv6 net-next 01/10] openvswitch: Serialize acts with original netlink len, Joe Stringer
  • Re: [PATCHv6 net-next 00/10] OVS conntrack support, David Miller
  • Re: [PATCHv6 net-next 00/10] OVS conntrack support, Simon Horman
    • Re: [PATCHv6 net-next 00/10] OVS conntrack support, Joe Stringer
• [conntrack-tools PATCH] tcp: use MSG_NOSIGNAL in sendto() to avoid SIGPIPE, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] tcp: use MSG_NOSIGNAL in sendto() to avoid SIGPIPE, Pablo Neira Ayuso
• How to set connmark on a socket descriptor from userspace?, David Hinkle
  • Re: How to set connmark on a socket descriptor from userspace?, Anton Danilov
• WARNING at net/ipv4/netfilter/ip_tables.c:530, Cong Wang
  • Re: WARNING at net/ipv4/netfilter/ip_tables.c:530, Florian Westphal
• [PATCH conntrack-tools] conntrack: add zone direction support, Daniel Borkmann
  • Re: [PATCH conntrack-tools] conntrack: add zone direction support, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack] conntrack: add zone attribute to tuple, Daniel Borkmann
  • Re: [PATCH libnetfilter_conntrack] conntrack: add zone attribute to tuple, Pablo Neira Ayuso
• [PATCHv5 net-next 00/10] OVS conntrack support, Joe Stringer
  • [PATCHv5 net-next 08/10] netfilter: connlabels: Export setting connlabel length, Joe Stringer
  • [PATCHv5 net-next 07/10] netfilter: Always export nf_connlabels_replace(), Joe Stringer
  • [PATCHv5 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Joe Stringer
    • Re: [PATCHv5 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Thomas Graf
      • Re: [PATCHv5 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Joe Stringer
    • Re: [PATCHv5 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Pravin Shelar
  • [PATCHv5 net-next 05/10] openvswitch: Add conntrack action, Joe Stringer
    • Re: [PATCHv5 net-next 05/10] openvswitch: Add conntrack action, Thomas Graf
    • Re: [PATCHv5 net-next 05/10] openvswitch: Add conntrack action, Pravin Shelar
  • [PATCHv5 net-next 06/10] openvswitch: Allow matching on conntrack mark, Joe Stringer
    • Re: [PATCHv5 net-next 06/10] openvswitch: Allow matching on conntrack mark, Thomas Graf
    • Re: [PATCHv5 net-next 06/10] openvswitch: Allow matching on conntrack mark, Pravin Shelar
  • [PATCHv5 net-next 09/10] openvswitch: Allow matching on conntrack label, Joe Stringer
    • Re: [PATCHv5 net-next 09/10] openvswitch: Allow matching on conntrack label, Thomas Graf
    • Re: [PATCHv5 net-next 09/10] openvswitch: Allow matching on conntrack label, Pravin Shelar
  • [PATCHv5 net-next 03/10] ipv6: Export nf_ct_frag6_gather(), Joe Stringer
    • Re: [PATCHv5 net-next 03/10] ipv6: Export nf_ct_frag6_gather(), Pravin Shelar
  • [PATCHv5 net-next 02/10] openvswitch: Move MASKED* macros to datapath.h, Joe Stringer
  • [PATCHv5 net-next 04/10] dst: Add __skb_dst_copy() variation, Joe Stringer
    • Re: [PATCHv5 net-next 04/10] dst: Add __skb_dst_copy() variation, Thomas Graf
  • [PATCHv5 net-next 01/10] openvswitch: Serialize acts with original netlink len, Joe Stringer
    • Re: [PATCHv5 net-next 01/10] openvswitch: Serialize acts with original netlink len, Thomas Graf
• [PATCH nf-next 0/2] netfilter: nfnetlink_log attach conntrack, Ken-ichirou MATSUZAWA
  • [PATCH nf-next 1/2] netfilter: nfnetlink_queue: enable to specify nla type, Ken-ichirou MATSUZAWA
  • [PATCH nf-next 2/2] netfilter: nfnetlink_log: allow to attach conntrack, Ken-ichirou MATSUZAWA
    • Re: [PATCH nf-next 2/2] netfilter: nfnetlink_log: allow to attach conntrack, Pablo Neira Ayuso
      • Re: [PATCH nf-next 2/2] netfilter: nfnetlink_log: allow to attach conntrack, Ken-ichirou MATSUZAWA
      • Re: [PATCH nf-next 2/2] netfilter: nfnetlink_log: allow to attach conntrack, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 1/5] netfilter: nfnetlink_queue: enable to specify nla type, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 2/5] netfilter: nf_conntrack_netlink: rename to link ct attachment with, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 3/5] netfilter: nfnetlink_queue_ct: export functions, Ken-ichirou MATSUZAWA
          • Re: [PATCHv2 nf-next 3/5] netfilter: nfnetlink_queue_ct: export functions, Pablo Neira Ayuso
            • Re: [PATCHv2 nf-next 3/5] netfilter: nfnetlink_queue_ct: export functions, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 4/5] netfilter: nfnetlink_queue: rename nfnetlink_queue_core.c, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 5/5] netfilter: nfnetlink_log: allow to attach conntrack, Ken-ichirou MATSUZAWA
• [PATCH iptables v2] libxt_CT: add support for recently introduced zone options, Daniel Borkmann
  • Re: [PATCH iptables v2] libxt_CT: add support for recently introduced zone options, Pablo Neira Ayuso
• [PATCH 1/2 nf-next] netfilter: nf_dup: fix sparse warnings, Pablo Neira Ayuso
  • [PATCH 2/2 nf-next] netfilter: xt_TEE: use IS_ENABLED(CONFIG_NF_DUP_IPV6), Pablo Neira Ayuso
• [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union init, Elad Raz
  • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union init, Jozsef Kadlecsik
    • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union init, Akemi Yagi
    • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union init, Pablo Neira Ayuso
      • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Pablo Neira Ayuso
        • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Akemi Yagi
          • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Vinson Lee
            • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Akemi Yagi
              • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Pablo Neira Ayuso
                • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Akemi Yagi
• [PATCH] netfilter: nf_ct_tcp: Remove the duplicated word in comment, Feng Gao
  • Re: [PATCH] netfilter: nf_ct_tcp: Remove the duplicated word in comment, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_ct_tcp: Remove the duplicated word in comment, Feng Gao
• [PATCH conntrack-tools] nfct: Update syntax to specify command before subsystem, Pablo Neira Ayuso
• [GIT PULL nf-next] Second Round of IPVS Updates for v4.3, Simon Horman
  • [PATCH 3/4 nf-next] ipvs: add sync_maxlen parameter for the sync daemon, Simon Horman
  • [PATCH 4/4 nf-next] ipvs: add more mcast parameters for the sync daemon, Simon Horman
  • [PATCH 2/4 nf-next] ipvs: call rtnl_lock early, Simon Horman
  • [PATCH 1/4 nf-next] ipvs: Add ovf scheduler, Simon Horman
  • Re: [GIT PULL nf-next] Second Round of IPVS Updates for v4.3, Pablo Neira Ayuso
    • Re: [GIT PULL nf-next] Second Round of IPVS Updates for v4.3, Simon Horman
• [PATCH net-next] netfilter: ipset: Fixing unnamed union init, Elad Raz
• [PATCH v2 iptables] added missing icmpv6 codes in REJECT, Andreas Herz
  • Re: [PATCH v2 iptables] added missing icmpv6 codes in REJECT, Pablo Neira Ayuso
• [PATCH v2 nf-next] added missing icmpv6 codes in REJECT, Andreas Herz
  • Re: [PATCH v2 nf-next] added missing icmpv6 codes in REJECT, Pablo Neira Ayuso
• [PATCH nf-next] add missing icmpv6 codes (rfc4443) in REJECT, Andreas Herz
  • Re: [PATCH nf-next] add missing icmpv6 codes (rfc4443) in REJECT, Florian Westphal
• [PATCH iptables] add missing icmpv6 codes (rfc4443) in REJECT, Andreas Herz
• [conntrack-tools PATCH] nfct: don't link against libnetfilter_conntrack, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] nfct: don't link against libnetfilter_conntrack, Jan Engelhardt
    • Re: [conntrack-tools PATCH] nfct: don't link against libnetfilter_conntrack, Arturo Borrero Gonzalez
      • Re: [conntrack-tools PATCH] nfct: don't link against libnetfilter_conntrack, Pablo Neira Ayuso
• [conntrack-tools PATCH] nfct.8: reword some sentences, Arturo Borrero Gonzalez
• [conntrack-tools PATCH] doc/debian.conntrackd.init.d: drop file, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] doc/debian.conntrackd.init.d: drop file, Pablo Neira Ayuso
• [conntrack-tools PATCH] list: fix prefetch dummy, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] list: fix prefetch dummy, Pablo Neira Ayuso
• [PATCH] iptables: update gitignore list, Mike Frysinger
  • Re: [PATCH] iptables: update gitignore list, Arturo Borrero Gonzalez
    • Re: [PATCH] iptables: update gitignore list, Mike Frysinger
  • [PATCH v2] iptables: update gitignore list, Mike Frysinger
    • Re: [PATCH v2] iptables: update gitignore list, Pablo Neira Ayuso
• [PATCH] libiptc: fix fortify errors in debug code, Mike Frysinger
  • Re: [PATCH] libiptc: fix fortify errors in debug code, Pablo Neira Ayuso
• [PATCH 1/1] added missing icmpv6 dest-unreach codes, Andreas Herz
  • Re: [PATCH 1/1] added missing icmpv6 dest-unreach codes, Pablo Neira Ayuso
• ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Andreas Herz
  • Re: ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Jan Engelhardt
    • Re: ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Andreas Herz
      • Re: ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Jan Engelhardt
        • Re: ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Andreas Herz
• [PATCH] build: add finer module blacklisting, Mike Frysinger
  • Re: [PATCH] build: add finer module blacklisting, Pablo Neira Ayuso
• [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Mike Frysinger
  • Re: [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Jan Engelhardt
    • Re: [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Mike Frysinger
      • Re: [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Jan Engelhardt
        • Re: [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Mike Frysinger
• [PATCH conntrackd 0/8] unsorted fixes, Pablo Neira Ayuso
  • [PATCH conntrackd 1/8] conntrackd: fix sanitization of expection attribute in the wire format, Pablo Neira Ayuso
  • [PATCH conntrackd 2/8] conntrackd: NTA_MAX is also an invalid attribute, Pablo Neira Ayuso
  • [PATCH conntrackd 3/8] conntrackd: fix leak in fork_process_new(), Pablo Neira Ayuso
  • [PATCH conntrackd 4/8] conntrackd: fix descriptor leak in do_local_request(), Pablo Neira Ayuso
  • [PATCH conntrackd 5/8] conntrackd: fix error handling in nfq_queue_cb(), Pablo Neira Ayuso
  • [PATCH conntrackd 6/8] conntrackd: simplify branch in tcp_accept(), Pablo Neira Ayuso
  • [PATCH conntrackd 7/8] conntrackd: use strncpy to set up the cache name, Pablo Neira Ayuso
  • [PATCH conntrackd 8/8] conntrackd: missing break in expectation message parser function, Pablo Neira Ayuso
• [PATCH nft 1/2] tests: sets: don't include listing in payload tests, Pablo Neira Ayuso
  • [PATCH nft 2/2] tests: redirect: fix payload display, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2] tests: redirect: fix payload display, Florian Westphal
• [PATCH libnftnl] expr: immediate: fix leak in expression destroy path, Pablo Neira Ayuso
• [nft] merged next-4.2 and lastest cache consolidation patches, Pablo Neira Ayuso
• [PATCH -next] nftables: nft_payload: work around vlan header stripping, Florian Westphal
  • Re: [PATCH -next] nftables: nft_payload: work around vlan header stripping, Pablo Neira Ayuso
• [PATCH libnftnl 1/3] expr: add dup expression support, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3] expr: limit: add burst attribute, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] expr: limit: add per-byte limiting support, Pablo Neira Ayuso
  • Re: [PATCH libnftnl 1/3] expr: add dup expression support, Patrick McHardy
    • Re: [PATCH libnftnl 1/3] expr: add dup expression support, Pablo Neira Ayuso
• [PATCH nft 0/12] add support for VLAN header filtering in bridge family, Florian Westphal
  • [PATCH 02/12] tests: add 'awkward' prefix match expression, Florian Westphal
  • [PATCH 01/12] tests: use the src/nft binary instead of $PATH one, Florian Westphal
  • [PATCH 03/12] nft: allow stacking vlan header on top of ethernet, Florian Westphal
  • [PATCH 06/12] src: netlink: don't truncate set key lengths, Florian Westphal
  • [PATCH 07/12] nft: fill in doff and fix ihl/version template entries, Florian Westphal
  • [PATCH 10/12] nft: support listing expressions that use non-byte header fields, Florian Westphal
  • [PATCH 12/13] vlan: make != tests work, Florian Westphal
  • [PATCH 11/12] tests: vlan tests, Florian Westphal
  • [PATCH 08/12] netlink: cmp: shift rhs constant if lhs offset doesn't start on byte boundary, Florian Westphal
  • [PATCH 09/12] tests: add tests for ip version/hdrlength/tcp doff, Florian Westphal
  • [PATCH 05/12] src: netlink_linearize: handle sub-byte lengths, Florian Westphal
  • [PATCH 04/12] payload: disable payload merge if offsets are not on byte boundary, Florian Westphal
  • Re: [PATCH nft 0/12] add support for VLAN header filtering in bridge family, Florian Westphal
  • Re: [PATCH nft 0/12] add support for VLAN header filtering in bridge family, Florian Westphal
• [PATCH] configure: fix 3rd arg w/AC_ARG_ENABLE, Mike Frysinger
  • Re: [PATCH] configure: fix 3rd arg w/AC_ARG_ENABLE, Pablo Neira Ayuso
• [PATCH nf-next v5 0/2] Netfilter zone directions, Daniel Borkmann
  • [PATCH nf-next v5 1/2] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
    • Re: [PATCH nf-next v5 1/2] netfilter: nf_conntrack: add direction support for zones, Pablo Neira Ayuso
  • [PATCH nf-next v5 2/2] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
    • Re: [PATCH nf-next v5 2/2] netfilter: nf_conntrack: add efficient mark to zone mapping, Pablo Neira Ayuso
      • Re: [PATCH nf-next v5 2/2] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
• ipset triggering kasan warnings., Dave Jones
  • Re: ipset triggering kasan warnings., Jozsef Kadlecsik
    • Re: ipset triggering kasan warnings., Dave Jones
• nftables: precondition validation fails on map construct, Andreas Schultz
  • Re: nftables: precondition validation fails on map construct, Patrick McHardy
• [PATCH] netfilter: Remove the duplicated word "see" in the comment when set the IPS_ASSURED_BIT in tcp_packet, Feng Gao
  • Re: [PATCH] netfilter: Remove the duplicated word "see" in the comment when set the IPS_ASSURED_BIT in tcp_packet, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: Remove the duplicated word "see" in the comment when set the IPS_ASSURED_BIT in tcp_packet, Feng Gao
      • Re: [PATCH] netfilter: Remove the duplicated word "see" in the comment when set the IPS_ASSURED_BIT in tcp_packet, Feng Gao
• [PATCHv4 nf-next] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Bernhard Thaler
  • Re: [PATCHv4 nf-next] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Pablo Neira Ayuso
• [PATCH nft 1/2] evaluate: display error on unexisting chain when listing, Pablo Neira Ayuso
  • [PATCH nft 2/2] netlink: don't call netlink_dump_*() from listing functions with --debug=netlink, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: Use 32 bit addressing register from nft_type_to_reg(), Pablo Neira Ayuso
• [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: nf_conntrack: silence warning on falling back to vmalloc(), Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nf_conntrack: checking for IS_ERR() instead of NULL, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: conntrack: Use flags in nf_ct_tmpl_alloc(), Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: SYNPROXY: fix sending window update to client, Pablo Neira Ayuso
  • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: expect: fix crash when putting uninited expectation, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: nf_tables: only allow in/output for arp packets, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: remove old pre-netns era hook api, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nat: fix src map lookup, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
      • Re: [PATCH 0/5] Netfilter fixes for net, Florian Westphal
        • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: x_tables: Fix use-after-free in ipt_do_table., Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nft_compat: check extension hook mask only if set, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: check for seqadj ext existence before adding it in nf_nat_setup_info, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_tables: Fix nft limit burst handling, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: ipt_CLUSTERIP: fix use-after-free of proc entry, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: ebtables: fix erroneous reject of last rule, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nft_set_hash: skip fixed hash if timeout is specified, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_tables: release flowtable hooks, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: x_tables: add and use xt_check_proc_name, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: bridge: ebt_among: add more missing match size checks, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nf_tables: fix suspicious RCU usage in nft_chain_stats_replace(), Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: seqadj: re-load tcp header pointer after possible head reallocation, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: nat: can't use dst_hold on noref dst, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_conncount: use rb_link_node_rcu() instead of rb_link_node(), Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nat: don't register device notifier twice, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: nf_tables: use-after-free in dynamic operations, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nf_tables: bogus EBUSY when deleting set after flush, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_tables: return immediately on empty commit, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nf_tables: fix set double-free in abort path, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: add include guard to nf_conntrack_h323_types.h, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: ebtables: Fix argument order to ADD_COUNTER, Pablo Neira Ayuso
    • [PATCH 1/5] MAINTAINERS: Remove IP MASQUERADING record, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nft_flow_offload: missing netlink attribute policy, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: xt_physdev: Fix spurious error message in physdev_mt_check, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: conntrack: make sysctls per-namespace again, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nft_meta_bridge: Fix get NFT_META_BRI_IIFVPROTO in network byteorder, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nf_conntrack_ftp: Fix debug output, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: nf_flow_table: clear skb tstamp before xmit, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nft_socket: fix erroneous socket assignment, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: ctnetlink: honor IPS_OFFLOAD flag, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_flow_table: set default timeout after successful insertion, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nf_tables: add NFT_CHAIN_POLICY_UNSET and use it, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: ebtables: use __u8 instead of uint8_t in uapi header, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nf_tables_offload: fix always true policy is unset check, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nf_tables: allow lookups in dynamic sets, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: ipset: Fix subcounter update skip, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nfnetlink_cthelper: unbreak userspace helper support, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: conntrack: make conntrack userspace helpers work again, Pablo Neira Ayuso
      • Re: [PATCH 4/5] netfilter: conntrack: make conntrack userspace helpers work again, Jakub Kicinski
    • [PATCH 1/5] netfilter: nft_reject_bridge: enable reject with bridge vlan, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
      • Re: [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
        • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nft_compat: make sure xtables destructors have run, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nft_meta: fix iifgroup matching, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: conntrack: Move nf_ct_offload_timeout to header file, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: flowtable: Set offload timeout when adding flow, Pablo Neira Ayuso
    • [PATCH 3/5] selftests: netfilter: add meta iif/oif match test, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: ctnetlink: fix mark based dump filtering regression, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: ctnetlink: add a range check for l3/l4 protonum, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
• Re: IPv6 and private net with masquerading not working correctly, Cong Wang
  • Re: IPv6 and private net with masquerading not working correctly, Gerhard Wiesinger
• nft: parser problem, can use mark as datatype in sets and maps, Andreas Schultz
  • Re: nft: parser problem, can use mark as datatype in sets and maps, Pablo Neira Ayuso
    • Re: nft: parser problem, can use mark as datatype in sets and maps, Andreas Schultz
      • Re: nft: parser problem, can use mark as datatype in sets and maps, Pablo Neira Ayuso
        • Re: nft: parser problem, can use mark as datatype in sets and maps, Andreas Schultz
          • Re: nft: parser problem, can use mark as datatype in sets and maps, Pablo Neira Ayuso
            • Re: nft: parser problem, can use mark as datatype in sets and maps, Pablo Neira Ayuso
              • Re: nft: parser problem, can use mark as datatype in sets and maps, Andreas Schultz
• [PATCH nft v5 00/14] cache consolidation, Pablo Neira Ayuso
  • [PATCH nft v5 01/14] src: add cache infrastructure and use it for table objects, Pablo Neira Ayuso
  • [PATCH nft v5 03/14] rule: add reference counter to the table object, Pablo Neira Ayuso
  • [PATCH nft v5 04/14] src: add table declaration to cache, Pablo Neira Ayuso
  • [PATCH nft v5 02/14] src: add cmd_evaluate_list(), Pablo Neira Ayuso
  • [PATCH nft v5 05/14] src: use cache infrastructure for set objects, Pablo Neira Ayuso
  • [PATCH nft v5 06/14] src: add set declaration to cache, Pablo Neira Ayuso
  • [PATCH nft v5 07/14] src: early allocation of the set ID, Pablo Neira Ayuso
  • [PATCH nft v5 09/14] src: use cache infrastructure for chain objects, Pablo Neira Ayuso
  • [PATCH nft v5 10/14] evaluate: add cmd_evaluate_rename(), Pablo Neira Ayuso
  • [PATCH nft v5 08/14] rule: add chain reference counter, Pablo Neira Ayuso
  • [PATCH nft v5 12/14] src: use cache infrastructure for rule objects, Pablo Neira Ayuso
  • [PATCH nft v5 11/14] src: add chain declarations to cache, Pablo Neira Ayuso
  • [PATCH nft v5 13/14] src: use cache infrastructure for set element objects, Pablo Neira Ayuso
  • [PATCH nft v5 14/14] src: get rid of EINTR handling for nft_netlink(), Pablo Neira Ayuso
• [lnf-log RFC PATCH 0/2] introduce new functions to use without nflog_handle, Ken-ichirou MATSUZAWA
  • [lnf-log RFC PATCH 1/2] introduce new functions to use without nflog_handle, Ken-ichirou MATSUZAWA
    • Re: [lnf-log RFC PATCH 1/2] introduce new functions to use without nflog_handle, Pablo Neira Ayuso
  • [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Ken-ichirou MATSUZAWA
    • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Pablo Neira Ayuso
      • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Ken-ichirou MATSUZAWA
        • [lnf-log RFC PATCH v2 1/2] introduce new functions independent from libnfnetlink, Ken-ichirou MATSUZAWA
        • [lnf-log RFC PATCH v2 2/2] utils: take a example from libmnl and use new functions, Ken-ichirou MATSUZAWA
        • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Pablo Neira Ayuso
          • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Ken-ichirou MATSUZAWA
            • [lnf-log PATCH 1/2] introduce new functions independent from libnfnetlink, Ken-ichirou MATSUZAWA
            • [lnf-log PATCH 2/2] utils: take a example from libmnl and use new functions, Ken-ichirou MATSUZAWA
            • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Pablo Neira Ayuso
              • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Ken-ichirou MATSUZAWA
                • [lnf-log PATCHv2 1/3] introduce new functions independent from libnfnetlink, Ken-ichirou MATSUZAWA
                  • Re: [lnf-log PATCHv2 1/3] introduce new functions independent from libnfnetlink, Pablo Neira Ayuso
                • [lnf-log PATCHv2 2/3] utils: take a example from libmnl and use new functions, Ken-ichirou MATSUZAWA
                  • Re: [lnf-log PATCHv2 2/3] utils: take a example from libmnl and use new functions, Pablo Neira Ayuso
                • [lnf-log PATCHv2 3/3] nlmsg: add printf function in conjunction with libmnl, Ken-ichirou MATSUZAWA
                  • Re: [lnf-log PATCHv2 3/3] nlmsg: add printf function in conjunction with libmnl, Pablo Neira Ayuso
• [lnf-log PATCH] build: fix typo, Ken-ichirou MATSUZAWA
  • Re: [lnf-log PATCH] build: fix typo, Pablo Neira Ayuso
• [PATCH nf-next v4 0/3] Netfilter zone directions, Daniel Borkmann
  • [PATCH v4 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
  • [PATCH v4 1/3] netfilter: nf_conntrack: push zone object into functions, Daniel Borkmann
    • Re: [PATCH v4 1/3] netfilter: nf_conntrack: push zone object into functions, Pablo Neira Ayuso
  • [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
    • Re: [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Pablo Neira Ayuso
      • Re: [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
        • Re: [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Pablo Neira Ayuso
          • Re: [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
• [PATCH] netfilter: per network namespace nfacct, Andreas Schultz
  • Re: [PATCH] netfilter: per network namespace nfacct, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: per network namespace nfacct, Andreas Schultz
      • Re: [PATCH] netfilter: per network namespace nfacct, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: per network namespace nfacct, Andreas Schultz
          • Re: [PATCH] netfilter: per network namespace nfacct, Pablo Neira Ayuso
• [PATCH nf-next 1/6] netfilter: nft_limit: rename to nft_limit_pkts, Pablo Neira Ayuso
  • [PATCH nf-next 3/6] netfilter: nft_limit: factor out shared code with per-byte limiting, Pablo Neira Ayuso
  • [PATCH nf-next 2/6] netfilter: nft_limit: convert to token-based limiting at nanosecond granularity, Pablo Neira Ayuso
  • [PATCH nf-next 4/6] netfilter: nft_limit: add burst parameter, Pablo Neira Ayuso
  • [PATCH nf-next 5/6] netfilter: nft_limit: constant token cost per packet, Pablo Neira Ayuso
  • [PATCH nf-next 6/6] netfilter: nft_limit: add per-byte limiting, Pablo Neira Ayuso
    • Re: [PATCH nf-next 6/6] netfilter: nft_limit: add per-byte limiting, Patrick McHardy
      • Re: [PATCH nf-next 6/6] netfilter: nft_limit: add per-byte limiting, Pablo Neira Ayuso
• [PATCH libnftnl] src: fix memory leaks at nft_[object]_nlmsg_parse, Carlos Falgueras García
  • Re: [PATCH libnftnl] src: fix memory leaks at nft_[object]_nlmsg_parse, Pablo Neira Ayuso
• [PATCH net] netfilter: conntrack: Use flags in nf_ct_tmpl_alloc(), Joe Stringer
  • Re: [PATCH net] netfilter: conntrack: Use flags in nf_ct_tmpl_alloc(), Joe Stringer
  • Re: [PATCH net] netfilter: conntrack: Use flags in nf_ct_tmpl_alloc(), Pablo Neira Ayuso
• Re: [PATCH] netfilter: ipt_SYNPROXY: fix sending window update to client, Pablo Neira Ayuso
  • [PATCH 1/2] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Phil Sutter
    • [PATCH 2/2] netfilter: ip6t_SYNPROXY: fix sending window update to client, Phil Sutter
    • Re: [PATCH 1/2] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Patrick McHardy