Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH 1/1] solve musl build problem, (continued)
  • Re: [PATCH 1/1] solve musl build problem, Brendan Heading
• broken packet passed into raw table by nf_defrag_ipv6, Andreas Herz
• [PATCH nf-next] netfilter: nf_conntrack: make nf_ct_zone_dflt built-in, Daniel Borkmann
  • Re: [PATCH nf-next] netfilter: nf_conntrack: make nf_ct_zone_dflt built-in, David Miller
• [PATCH nf-next] netfilter: nf_dup{4,6}: fix build error when nf_conntrack disabled, Daniel Borkmann
  • Re: [PATCH nf-next] netfilter: nf_dup{4,6}: fix build error when nf_conntrack disabled, David Miller
• [PATCH libnftnl 3/3] src: add compat header file definitions, Pablo Neira Ayuso
• [PATCH libnftnl 0/3] use nftnl_ prefix, Pablo Neira Ayuso
  • [PATCH libnftnl 1/3] src: introduce nftnl_* aliases for all existing functions, Pablo Neira Ayuso
  • Re: [PATCH libnftnl 0/3] use nftnl_ prefix, Pablo Neira Ayuso
    • Re: [PATCH libnftnl 0/3] use nftnl_ prefix, Pablo Neira Ayuso
      • Re: [PATCH libnftnl 0/3] use nftnl_ prefix, Arturo Borrero Gonzalez
      • Re: [PATCH libnftnl 0/3] use nftnl_ prefix, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths, Daniel Borkmann
  • Re: [PATCH nf] netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths, Pablo Neira Ayuso
• [PATCH nf 1/1] nft: Fix nlmsg_type in GET operation callbacks, Vijay Subramanian
  • Re: [PATCH nf 1/1] nft: Fix nlmsg_type in GET operation callbacks, Pablo Neira Ayuso
    • Re: [PATCH nf 1/1] nft: Fix nlmsg_type in GET operation callbacks, Vijay Subramanian
• [ANNOUNCE] ipset 6.26 released, Jozsef Kadlecsik
• [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: ipset: Out of bound access in hash:net* types fixed, Jozsef Kadlecsik
  • Re: [PATCH 0/1] ipset patch for nf, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Jozsef Kadlecsik
      • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Pablo Neira Ayuso
        • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Jozsef Kadlecsik
          • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Pablo Neira Ayuso
            • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Jozsef Kadlecsik
              • Re: [PATCH 1/1] netfilter: ipset: Fix set:list type crash when flush/dump set in parallel, Pablo Neira Ayuso
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length, Jozsef Kadlecsik
      • Re: [PATCH 1/1] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length, Daniel Borkmann
        • Re: [PATCH 1/1] netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length, Jozsef Kadlecsik
    • Re: [PATCH 0/1] ipset patch for nf, Pablo Neira Ayuso
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: fix race condition in ipset save, swap and delete, Jozsef Kadlecsik
    • Re: [PATCH 0/1] ipset patch for nf, Pablo Neira Ayuso
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses, Jozsef Kadlecsik
      • Re: [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses, Pablo Neira Ayuso
        • Re: [PATCH 1/1] Fix adding an IPv4 range containing more than 2^31 addresses, Jozsef Kadlecsik
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports, Jozsef Kadlecsik
  • [PATCH 0/1] ipset patch for nf, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: Fix suspicious rcu_dereference_protected(), Jozsef Kadlecsik
• [PATCH -next] netfilter: nfnetlink: work around wrong endianess with old nft userspace, Florian Westphal
  • Re: [PATCH -next] netfilter: nfnetlink: work around wrong endianess with old nft userspace, Pablo Neira Ayuso
    • Re: [PATCH -next] netfilter: nfnetlink: work around wrong endianess with old nft userspace, Florian Westphal
• [PATCH -next] netfilter: reduce sparse warnings, Florian Westphal
  • Re: [PATCH -next] netfilter: reduce sparse warnings, Pablo Neira Ayuso
• nftables batch abi broken ..., Florian Westphal
  • Re: nftables batch abi broken ..., Pablo Neira Ayuso
• [conntrackd] allowing DisableExternalCache in alarm mode, Arturo Borrero Gonzalez
  • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Pablo Neira Ayuso
    • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Arturo Borrero Gonzalez
      • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Pablo Neira Ayuso
        • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Arturo Borrero Gonzalez
        • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Arturo Borrero Gonzalez
          • Re: [conntrackd] allowing DisableExternalCache in alarm mode, Pablo Neira Ayuso
• [PATCH -next] Revert "netfilter: xtables: compute exact size needed for jumpstack", Florian Westphal
  • Re: [PATCH -next] Revert "netfilter: xtables: compute exact size needed for jumpstack", Pablo Neira Ayuso
• [PATCHv6 net-next 00/10] OVS conntrack support, Joe Stringer
  • [PATCHv6 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Joe Stringer
  • [PATCHv6 net-next 08/10] netfilter: connlabels: Export setting connlabel length, Joe Stringer
  • [PATCHv6 net-next 09/10] openvswitch: Allow matching on conntrack label, Joe Stringer
  • [PATCHv6 net-next 03/10] ipv6: Export nf_ct_frag6_gather(), Joe Stringer
  • [PATCHv6 net-next 06/10] openvswitch: Allow matching on conntrack mark, Joe Stringer
  • [PATCHv6 net-next 07/10] netfilter: Always export nf_connlabels_replace(), Joe Stringer
  • [PATCHv6 net-next 04/10] dst: Add __skb_dst_copy() variation, Joe Stringer
  • [PATCHv6 net-next 05/10] openvswitch: Add conntrack action, Joe Stringer
    • Re: [PATCHv6 net-next 05/10] openvswitch: Add conntrack action, Joe Stringer
    • Re: [PATCHv6 net-next 05/10] openvswitch: Add conntrack action, Pravin Shelar
  • [PATCHv6 net-next 02/10] openvswitch: Move MASKED* macros to datapath.h, Joe Stringer
  • [PATCHv6 net-next 01/10] openvswitch: Serialize acts with original netlink len, Joe Stringer
  • Re: [PATCHv6 net-next 00/10] OVS conntrack support, David Miller
  • Re: [PATCHv6 net-next 00/10] OVS conntrack support, Simon Horman
    • Re: [PATCHv6 net-next 00/10] OVS conntrack support, Joe Stringer
• [conntrack-tools PATCH] tcp: use MSG_NOSIGNAL in sendto() to avoid SIGPIPE, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] tcp: use MSG_NOSIGNAL in sendto() to avoid SIGPIPE, Pablo Neira Ayuso
• How to set connmark on a socket descriptor from userspace?, David Hinkle
  • Re: How to set connmark on a socket descriptor from userspace?, Anton Danilov
• WARNING at net/ipv4/netfilter/ip_tables.c:530, Cong Wang
  • Re: WARNING at net/ipv4/netfilter/ip_tables.c:530, Florian Westphal
• [PATCH conntrack-tools] conntrack: add zone direction support, Daniel Borkmann
  • Re: [PATCH conntrack-tools] conntrack: add zone direction support, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack] conntrack: add zone attribute to tuple, Daniel Borkmann
  • Re: [PATCH libnetfilter_conntrack] conntrack: add zone attribute to tuple, Pablo Neira Ayuso
• [PATCHv5 net-next 00/10] OVS conntrack support, Joe Stringer
  • [PATCHv5 net-next 08/10] netfilter: connlabels: Export setting connlabel length, Joe Stringer
  • [PATCHv5 net-next 07/10] netfilter: Always export nf_connlabels_replace(), Joe Stringer
  • [PATCHv5 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Joe Stringer
    • Re: [PATCHv5 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Thomas Graf
      • Re: [PATCHv5 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Joe Stringer
    • Re: [PATCHv5 net-next 10/10] openvswitch: Allow attaching helpers to ct action, Pravin Shelar
  • [PATCHv5 net-next 05/10] openvswitch: Add conntrack action, Joe Stringer
    • Re: [PATCHv5 net-next 05/10] openvswitch: Add conntrack action, Thomas Graf
    • Re: [PATCHv5 net-next 05/10] openvswitch: Add conntrack action, Pravin Shelar
  • [PATCHv5 net-next 06/10] openvswitch: Allow matching on conntrack mark, Joe Stringer
    • Re: [PATCHv5 net-next 06/10] openvswitch: Allow matching on conntrack mark, Thomas Graf
    • Re: [PATCHv5 net-next 06/10] openvswitch: Allow matching on conntrack mark, Pravin Shelar
  • [PATCHv5 net-next 09/10] openvswitch: Allow matching on conntrack label, Joe Stringer
    • Re: [PATCHv5 net-next 09/10] openvswitch: Allow matching on conntrack label, Thomas Graf
    • Re: [PATCHv5 net-next 09/10] openvswitch: Allow matching on conntrack label, Pravin Shelar
  • [PATCHv5 net-next 03/10] ipv6: Export nf_ct_frag6_gather(), Joe Stringer
    • Re: [PATCHv5 net-next 03/10] ipv6: Export nf_ct_frag6_gather(), Pravin Shelar
  • [PATCHv5 net-next 02/10] openvswitch: Move MASKED* macros to datapath.h, Joe Stringer
  • [PATCHv5 net-next 04/10] dst: Add __skb_dst_copy() variation, Joe Stringer
    • Re: [PATCHv5 net-next 04/10] dst: Add __skb_dst_copy() variation, Thomas Graf
  • [PATCHv5 net-next 01/10] openvswitch: Serialize acts with original netlink len, Joe Stringer
    • Re: [PATCHv5 net-next 01/10] openvswitch: Serialize acts with original netlink len, Thomas Graf
• [PATCH nf-next 0/2] netfilter: nfnetlink_log attach conntrack, Ken-ichirou MATSUZAWA
  • [PATCH nf-next 1/2] netfilter: nfnetlink_queue: enable to specify nla type, Ken-ichirou MATSUZAWA
  • [PATCH nf-next 2/2] netfilter: nfnetlink_log: allow to attach conntrack, Ken-ichirou MATSUZAWA
    • Re: [PATCH nf-next 2/2] netfilter: nfnetlink_log: allow to attach conntrack, Pablo Neira Ayuso
      • Re: [PATCH nf-next 2/2] netfilter: nfnetlink_log: allow to attach conntrack, Ken-ichirou MATSUZAWA
      • Re: [PATCH nf-next 2/2] netfilter: nfnetlink_log: allow to attach conntrack, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 1/5] netfilter: nfnetlink_queue: enable to specify nla type, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 2/5] netfilter: nf_conntrack_netlink: rename to link ct attachment with, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 3/5] netfilter: nfnetlink_queue_ct: export functions, Ken-ichirou MATSUZAWA
          • Re: [PATCHv2 nf-next 3/5] netfilter: nfnetlink_queue_ct: export functions, Pablo Neira Ayuso
            • Re: [PATCHv2 nf-next 3/5] netfilter: nfnetlink_queue_ct: export functions, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 4/5] netfilter: nfnetlink_queue: rename nfnetlink_queue_core.c, Ken-ichirou MATSUZAWA
        • [PATCHv2 nf-next 5/5] netfilter: nfnetlink_log: allow to attach conntrack, Ken-ichirou MATSUZAWA
• [PATCH iptables v2] libxt_CT: add support for recently introduced zone options, Daniel Borkmann
  • Re: [PATCH iptables v2] libxt_CT: add support for recently introduced zone options, Pablo Neira Ayuso
• [PATCH 1/2 nf-next] netfilter: nf_dup: fix sparse warnings, Pablo Neira Ayuso
  • [PATCH 2/2 nf-next] netfilter: xt_TEE: use IS_ENABLED(CONFIG_NF_DUP_IPV6), Pablo Neira Ayuso
• [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union init, Elad Raz
  • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union init, Jozsef Kadlecsik
    • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union init, Akemi Yagi
    • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union init, Pablo Neira Ayuso
      • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Pablo Neira Ayuso
        • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Akemi Yagi
          • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Vinson Lee
            • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Akemi Yagi
              • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Pablo Neira Ayuso
                • Re: [PATCH v2 net-next] netfilter: ipset: Fixing unnamed union initg, Akemi Yagi
• [PATCH] netfilter: nf_ct_tcp: Remove the duplicated word in comment, Feng Gao
  • Re: [PATCH] netfilter: nf_ct_tcp: Remove the duplicated word in comment, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_ct_tcp: Remove the duplicated word in comment, Feng Gao
• [PATCH conntrack-tools] nfct: Update syntax to specify command before subsystem, Pablo Neira Ayuso
• [GIT PULL nf-next] Second Round of IPVS Updates for v4.3, Simon Horman
  • [PATCH 3/4 nf-next] ipvs: add sync_maxlen parameter for the sync daemon, Simon Horman
  • [PATCH 4/4 nf-next] ipvs: add more mcast parameters for the sync daemon, Simon Horman
  • [PATCH 2/4 nf-next] ipvs: call rtnl_lock early, Simon Horman
  • [PATCH 1/4 nf-next] ipvs: Add ovf scheduler, Simon Horman
  • Re: [GIT PULL nf-next] Second Round of IPVS Updates for v4.3, Pablo Neira Ayuso
    • Re: [GIT PULL nf-next] Second Round of IPVS Updates for v4.3, Simon Horman
• [PATCH net-next] netfilter: ipset: Fixing unnamed union init, Elad Raz
• [PATCH v2 iptables] added missing icmpv6 codes in REJECT, Andreas Herz
  • Re: [PATCH v2 iptables] added missing icmpv6 codes in REJECT, Pablo Neira Ayuso
• [PATCH v2 nf-next] added missing icmpv6 codes in REJECT, Andreas Herz
  • Re: [PATCH v2 nf-next] added missing icmpv6 codes in REJECT, Pablo Neira Ayuso
• [PATCH nf-next] add missing icmpv6 codes (rfc4443) in REJECT, Andreas Herz
  • Re: [PATCH nf-next] add missing icmpv6 codes (rfc4443) in REJECT, Florian Westphal
• [PATCH iptables] add missing icmpv6 codes (rfc4443) in REJECT, Andreas Herz
• [conntrack-tools PATCH] nfct: don't link against libnetfilter_conntrack, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] nfct: don't link against libnetfilter_conntrack, Jan Engelhardt
    • Re: [conntrack-tools PATCH] nfct: don't link against libnetfilter_conntrack, Arturo Borrero Gonzalez
      • Re: [conntrack-tools PATCH] nfct: don't link against libnetfilter_conntrack, Pablo Neira Ayuso
• [conntrack-tools PATCH] nfct.8: reword some sentences, Arturo Borrero Gonzalez
• [conntrack-tools PATCH] doc/debian.conntrackd.init.d: drop file, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] doc/debian.conntrackd.init.d: drop file, Pablo Neira Ayuso
• [conntrack-tools PATCH] list: fix prefetch dummy, Arturo Borrero Gonzalez
  • Re: [conntrack-tools PATCH] list: fix prefetch dummy, Pablo Neira Ayuso
• [PATCH] iptables: update gitignore list, Mike Frysinger
  • Re: [PATCH] iptables: update gitignore list, Arturo Borrero Gonzalez
    • Re: [PATCH] iptables: update gitignore list, Mike Frysinger
  • [PATCH v2] iptables: update gitignore list, Mike Frysinger
    • Re: [PATCH v2] iptables: update gitignore list, Pablo Neira Ayuso
• [PATCH] libiptc: fix fortify errors in debug code, Mike Frysinger
  • Re: [PATCH] libiptc: fix fortify errors in debug code, Pablo Neira Ayuso
• [PATCH 1/1] added missing icmpv6 dest-unreach codes, Andreas Herz
  • Re: [PATCH 1/1] added missing icmpv6 dest-unreach codes, Pablo Neira Ayuso
• ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Andreas Herz
  • Re: ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Jan Engelhardt
    • Re: ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Andreas Herz
      • Re: ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Jan Engelhardt
        • Re: ICMPv6 Type 1 Code 5 and 6 missing in iptables REJECT target and icmpv6 match, Andreas Herz
• [PATCH] build: add finer module blacklisting, Mike Frysinger
  • Re: [PATCH] build: add finer module blacklisting, Pablo Neira Ayuso
• [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Mike Frysinger
  • Re: [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Jan Engelhardt
    • Re: [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Mike Frysinger
      • Re: [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Jan Engelhardt
        • Re: [PATCH] build: use _DEFAULT_SOURCE for newer glibc, Mike Frysinger
• [PATCH conntrackd 0/8] unsorted fixes, Pablo Neira Ayuso
  • [PATCH conntrackd 1/8] conntrackd: fix sanitization of expection attribute in the wire format, Pablo Neira Ayuso
  • [PATCH conntrackd 2/8] conntrackd: NTA_MAX is also an invalid attribute, Pablo Neira Ayuso
  • [PATCH conntrackd 3/8] conntrackd: fix leak in fork_process_new(), Pablo Neira Ayuso
  • [PATCH conntrackd 4/8] conntrackd: fix descriptor leak in do_local_request(), Pablo Neira Ayuso
  • [PATCH conntrackd 5/8] conntrackd: fix error handling in nfq_queue_cb(), Pablo Neira Ayuso
  • [PATCH conntrackd 6/8] conntrackd: simplify branch in tcp_accept(), Pablo Neira Ayuso
  • [PATCH conntrackd 7/8] conntrackd: use strncpy to set up the cache name, Pablo Neira Ayuso
  • [PATCH conntrackd 8/8] conntrackd: missing break in expectation message parser function, Pablo Neira Ayuso
• [PATCH nft 1/2] tests: sets: don't include listing in payload tests, Pablo Neira Ayuso
  • [PATCH nft 2/2] tests: redirect: fix payload display, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2] tests: redirect: fix payload display, Florian Westphal
• [PATCH libnftnl] expr: immediate: fix leak in expression destroy path, Pablo Neira Ayuso
• [nft] merged next-4.2 and lastest cache consolidation patches, Pablo Neira Ayuso
• [PATCH -next] nftables: nft_payload: work around vlan header stripping, Florian Westphal
  • Re: [PATCH -next] nftables: nft_payload: work around vlan header stripping, Pablo Neira Ayuso
• [PATCH libnftnl 1/3] expr: add dup expression support, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3] expr: limit: add burst attribute, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] expr: limit: add per-byte limiting support, Pablo Neira Ayuso
  • Re: [PATCH libnftnl 1/3] expr: add dup expression support, Patrick McHardy
    • Re: [PATCH libnftnl 1/3] expr: add dup expression support, Pablo Neira Ayuso
• [PATCH nft 0/12] add support for VLAN header filtering in bridge family, Florian Westphal
  • [PATCH 02/12] tests: add 'awkward' prefix match expression, Florian Westphal
  • [PATCH 01/12] tests: use the src/nft binary instead of $PATH one, Florian Westphal
  • [PATCH 03/12] nft: allow stacking vlan header on top of ethernet, Florian Westphal
  • [PATCH 06/12] src: netlink: don't truncate set key lengths, Florian Westphal
  • [PATCH 07/12] nft: fill in doff and fix ihl/version template entries, Florian Westphal
  • [PATCH 10/12] nft: support listing expressions that use non-byte header fields, Florian Westphal
  • [PATCH 12/13] vlan: make != tests work, Florian Westphal
  • [PATCH 11/12] tests: vlan tests, Florian Westphal
  • [PATCH 08/12] netlink: cmp: shift rhs constant if lhs offset doesn't start on byte boundary, Florian Westphal
  • [PATCH 09/12] tests: add tests for ip version/hdrlength/tcp doff, Florian Westphal
  • [PATCH 05/12] src: netlink_linearize: handle sub-byte lengths, Florian Westphal
  • [PATCH 04/12] payload: disable payload merge if offsets are not on byte boundary, Florian Westphal
  • Re: [PATCH nft 0/12] add support for VLAN header filtering in bridge family, Florian Westphal
  • Re: [PATCH nft 0/12] add support for VLAN header filtering in bridge family, Florian Westphal
• [PATCH] configure: fix 3rd arg w/AC_ARG_ENABLE, Mike Frysinger
  • Re: [PATCH] configure: fix 3rd arg w/AC_ARG_ENABLE, Pablo Neira Ayuso
• [PATCH nf-next v5 0/2] Netfilter zone directions, Daniel Borkmann
  • [PATCH nf-next v5 1/2] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
    • Re: [PATCH nf-next v5 1/2] netfilter: nf_conntrack: add direction support for zones, Pablo Neira Ayuso
  • [PATCH nf-next v5 2/2] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
    • Re: [PATCH nf-next v5 2/2] netfilter: nf_conntrack: add efficient mark to zone mapping, Pablo Neira Ayuso
      • Re: [PATCH nf-next v5 2/2] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
• ipset triggering kasan warnings., Dave Jones
  • Re: ipset triggering kasan warnings., Jozsef Kadlecsik
    • Re: ipset triggering kasan warnings., Dave Jones
• nftables: precondition validation fails on map construct, Andreas Schultz
  • Re: nftables: precondition validation fails on map construct, Patrick McHardy
• [PATCH] netfilter: Remove the duplicated word "see" in the comment when set the IPS_ASSURED_BIT in tcp_packet, Feng Gao
  • Re: [PATCH] netfilter: Remove the duplicated word "see" in the comment when set the IPS_ASSURED_BIT in tcp_packet, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: Remove the duplicated word "see" in the comment when set the IPS_ASSURED_BIT in tcp_packet, Feng Gao
      • Re: [PATCH] netfilter: Remove the duplicated word "see" in the comment when set the IPS_ASSURED_BIT in tcp_packet, Feng Gao
• [PATCHv4 nf-next] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Bernhard Thaler
  • Re: [PATCHv4 nf-next] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Pablo Neira Ayuso
• [PATCH nft 1/2] evaluate: display error on unexisting chain when listing, Pablo Neira Ayuso
  • [PATCH nft 2/2] netlink: don't call netlink_dump_*() from listing functions with --debug=netlink, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: Use 32 bit addressing register from nft_type_to_reg(), Pablo Neira Ayuso
• [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: nf_conntrack: silence warning on falling back to vmalloc(), Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nf_conntrack: checking for IS_ERR() instead of NULL, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: conntrack: Use flags in nf_ct_tmpl_alloc(), Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: SYNPROXY: fix sending window update to client, Pablo Neira Ayuso
  • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: expect: fix crash when putting uninited expectation, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: nf_tables: only allow in/output for arp packets, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: remove old pre-netns era hook api, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nat: fix src map lookup, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
      • Re: [PATCH 0/5] Netfilter fixes for net, Florian Westphal
        • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: x_tables: Fix use-after-free in ipt_do_table., Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nft_compat: check extension hook mask only if set, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: check for seqadj ext existence before adding it in nf_nat_setup_info, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_tables: Fix nft limit burst handling, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: ipt_CLUSTERIP: fix use-after-free of proc entry, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: ebtables: fix erroneous reject of last rule, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nft_set_hash: skip fixed hash if timeout is specified, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_tables: release flowtable hooks, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: x_tables: add and use xt_check_proc_name, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: bridge: ebt_among: add more missing match size checks, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nf_tables: fix suspicious RCU usage in nft_chain_stats_replace(), Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: seqadj: re-load tcp header pointer after possible head reallocation, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: nat: can't use dst_hold on noref dst, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_conncount: use rb_link_node_rcu() instead of rb_link_node(), Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nat: don't register device notifier twice, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: nf_tables: use-after-free in dynamic operations, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nf_tables: bogus EBUSY when deleting set after flush, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_tables: return immediately on empty commit, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nf_tables: fix set double-free in abort path, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: add include guard to nf_conntrack_h323_types.h, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: ebtables: Fix argument order to ADD_COUNTER, Pablo Neira Ayuso
    • [PATCH 1/5] MAINTAINERS: Remove IP MASQUERADING record, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nft_flow_offload: missing netlink attribute policy, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: xt_physdev: Fix spurious error message in physdev_mt_check, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: conntrack: make sysctls per-namespace again, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nft_meta_bridge: Fix get NFT_META_BRI_IIFVPROTO in network byteorder, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nf_conntrack_ftp: Fix debug output, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: nf_flow_table: clear skb tstamp before xmit, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nft_socket: fix erroneous socket assignment, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: ctnetlink: honor IPS_OFFLOAD flag, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_flow_table: set default timeout after successful insertion, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nf_tables: add NFT_CHAIN_POLICY_UNSET and use it, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: ebtables: use __u8 instead of uint8_t in uapi header, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nf_tables_offload: fix always true policy is unset check, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nf_tables: allow lookups in dynamic sets, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: ipset: Fix subcounter update skip, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nfnetlink_cthelper: unbreak userspace helper support, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: conntrack: make conntrack userspace helpers work again, Pablo Neira Ayuso
      • Re: [PATCH 4/5] netfilter: conntrack: make conntrack userspace helpers work again, Jakub Kicinski
    • [PATCH 1/5] netfilter: nft_reject_bridge: enable reject with bridge vlan, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
      • Re: [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
        • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nft_compat: make sure xtables destructors have run, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nft_meta: fix iifgroup matching, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: conntrack: Move nf_ct_offload_timeout to header file, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: flowtable: Set offload timeout when adding flow, Pablo Neira Ayuso
    • [PATCH 3/5] selftests: netfilter: add meta iif/oif match test, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
  • [PATCH 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid, Pablo Neira Ayuso
    • [PATCH 4/5] netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled, Pablo Neira Ayuso
    • [PATCH 3/5] netfilter: ctnetlink: fix mark based dump filtering regression, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: ctnetlink: add a range check for l3/l4 protonum, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter fixes for net, David Miller
• Re: IPv6 and private net with masquerading not working correctly, Cong Wang
  • Re: IPv6 and private net with masquerading not working correctly, Gerhard Wiesinger
• nft: parser problem, can use mark as datatype in sets and maps, Andreas Schultz
  • Re: nft: parser problem, can use mark as datatype in sets and maps, Pablo Neira Ayuso
    • Re: nft: parser problem, can use mark as datatype in sets and maps, Andreas Schultz
      • Re: nft: parser problem, can use mark as datatype in sets and maps, Pablo Neira Ayuso
        • Re: nft: parser problem, can use mark as datatype in sets and maps, Andreas Schultz
          • Re: nft: parser problem, can use mark as datatype in sets and maps, Pablo Neira Ayuso
            • Re: nft: parser problem, can use mark as datatype in sets and maps, Pablo Neira Ayuso
              • Re: nft: parser problem, can use mark as datatype in sets and maps, Andreas Schultz
• [PATCH nft v5 00/14] cache consolidation, Pablo Neira Ayuso
  • [PATCH nft v5 01/14] src: add cache infrastructure and use it for table objects, Pablo Neira Ayuso
  • [PATCH nft v5 03/14] rule: add reference counter to the table object, Pablo Neira Ayuso
  • [PATCH nft v5 04/14] src: add table declaration to cache, Pablo Neira Ayuso
  • [PATCH nft v5 02/14] src: add cmd_evaluate_list(), Pablo Neira Ayuso
  • [PATCH nft v5 05/14] src: use cache infrastructure for set objects, Pablo Neira Ayuso
  • [PATCH nft v5 06/14] src: add set declaration to cache, Pablo Neira Ayuso
  • [PATCH nft v5 07/14] src: early allocation of the set ID, Pablo Neira Ayuso
  • [PATCH nft v5 09/14] src: use cache infrastructure for chain objects, Pablo Neira Ayuso
  • [PATCH nft v5 10/14] evaluate: add cmd_evaluate_rename(), Pablo Neira Ayuso
  • [PATCH nft v5 08/14] rule: add chain reference counter, Pablo Neira Ayuso
  • [PATCH nft v5 12/14] src: use cache infrastructure for rule objects, Pablo Neira Ayuso
  • [PATCH nft v5 11/14] src: add chain declarations to cache, Pablo Neira Ayuso
  • [PATCH nft v5 13/14] src: use cache infrastructure for set element objects, Pablo Neira Ayuso
  • [PATCH nft v5 14/14] src: get rid of EINTR handling for nft_netlink(), Pablo Neira Ayuso
• [lnf-log RFC PATCH 0/2] introduce new functions to use without nflog_handle, Ken-ichirou MATSUZAWA
  • [lnf-log RFC PATCH 1/2] introduce new functions to use without nflog_handle, Ken-ichirou MATSUZAWA
    • Re: [lnf-log RFC PATCH 1/2] introduce new functions to use without nflog_handle, Pablo Neira Ayuso
  • [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Ken-ichirou MATSUZAWA
    • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Pablo Neira Ayuso
      • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Ken-ichirou MATSUZAWA
        • [lnf-log RFC PATCH v2 1/2] introduce new functions independent from libnfnetlink, Ken-ichirou MATSUZAWA
        • [lnf-log RFC PATCH v2 2/2] utils: take a example from libmnl and use new functions, Ken-ichirou MATSUZAWA
        • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Pablo Neira Ayuso
          • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Ken-ichirou MATSUZAWA
            • [lnf-log PATCH 1/2] introduce new functions independent from libnfnetlink, Ken-ichirou MATSUZAWA
            • [lnf-log PATCH 2/2] utils: take a example from libmnl and use new functions, Ken-ichirou MATSUZAWA
            • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Pablo Neira Ayuso
              • Re: [lnf-log RFC PATCH 2/2] utils: take a example from libmnl and use nflog_nlmsg_parse, Ken-ichirou MATSUZAWA
                • [lnf-log PATCHv2 1/3] introduce new functions independent from libnfnetlink, Ken-ichirou MATSUZAWA
                  • Re: [lnf-log PATCHv2 1/3] introduce new functions independent from libnfnetlink, Pablo Neira Ayuso
                • [lnf-log PATCHv2 2/3] utils: take a example from libmnl and use new functions, Ken-ichirou MATSUZAWA
                  • Re: [lnf-log PATCHv2 2/3] utils: take a example from libmnl and use new functions, Pablo Neira Ayuso
                • [lnf-log PATCHv2 3/3] nlmsg: add printf function in conjunction with libmnl, Ken-ichirou MATSUZAWA
                  • Re: [lnf-log PATCHv2 3/3] nlmsg: add printf function in conjunction with libmnl, Pablo Neira Ayuso
• [lnf-log PATCH] build: fix typo, Ken-ichirou MATSUZAWA
  • Re: [lnf-log PATCH] build: fix typo, Pablo Neira Ayuso
• [PATCH nf-next v4 0/3] Netfilter zone directions, Daniel Borkmann
  • [PATCH v4 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
  • [PATCH v4 1/3] netfilter: nf_conntrack: push zone object into functions, Daniel Borkmann
    • Re: [PATCH v4 1/3] netfilter: nf_conntrack: push zone object into functions, Pablo Neira Ayuso
  • [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
    • Re: [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Pablo Neira Ayuso
      • Re: [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
        • Re: [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Pablo Neira Ayuso
          • Re: [PATCH v4 2/3] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
• [PATCH] netfilter: per network namespace nfacct, Andreas Schultz
  • Re: [PATCH] netfilter: per network namespace nfacct, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: per network namespace nfacct, Andreas Schultz
      • Re: [PATCH] netfilter: per network namespace nfacct, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: per network namespace nfacct, Andreas Schultz
          • Re: [PATCH] netfilter: per network namespace nfacct, Pablo Neira Ayuso
• [PATCH nf-next 1/6] netfilter: nft_limit: rename to nft_limit_pkts, Pablo Neira Ayuso
  • [PATCH nf-next 3/6] netfilter: nft_limit: factor out shared code with per-byte limiting, Pablo Neira Ayuso
  • [PATCH nf-next 2/6] netfilter: nft_limit: convert to token-based limiting at nanosecond granularity, Pablo Neira Ayuso
  • [PATCH nf-next 4/6] netfilter: nft_limit: add burst parameter, Pablo Neira Ayuso
  • [PATCH nf-next 5/6] netfilter: nft_limit: constant token cost per packet, Pablo Neira Ayuso
  • [PATCH nf-next 6/6] netfilter: nft_limit: add per-byte limiting, Pablo Neira Ayuso
    • Re: [PATCH nf-next 6/6] netfilter: nft_limit: add per-byte limiting, Patrick McHardy
      • Re: [PATCH nf-next 6/6] netfilter: nft_limit: add per-byte limiting, Pablo Neira Ayuso
• [PATCH libnftnl] src: fix memory leaks at nft_[object]_nlmsg_parse, Carlos Falgueras García
  • Re: [PATCH libnftnl] src: fix memory leaks at nft_[object]_nlmsg_parse, Pablo Neira Ayuso
• [PATCH net] netfilter: conntrack: Use flags in nf_ct_tmpl_alloc(), Joe Stringer
  • Re: [PATCH net] netfilter: conntrack: Use flags in nf_ct_tmpl_alloc(), Joe Stringer
  • Re: [PATCH net] netfilter: conntrack: Use flags in nf_ct_tmpl_alloc(), Pablo Neira Ayuso
• Re: [PATCH] netfilter: ipt_SYNPROXY: fix sending window update to client, Pablo Neira Ayuso
  • [PATCH 1/2] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Phil Sutter
    • [PATCH 2/2] netfilter: ip6t_SYNPROXY: fix sending window update to client, Phil Sutter
    • Re: [PATCH 1/2] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Patrick McHardy
      • [PATCH v2 1/2] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Phil Sutter
        • [PATCH v2 2/2] netfilter: ip6t_SYNPROXY: fix sending window update to client, Phil Sutter
          • Re: [PATCH v2 2/2] netfilter: ip6t_SYNPROXY: fix sending window update to client, Patrick McHardy
            • Re: [PATCH v2 2/2] netfilter: ip6t_SYNPROXY: fix sending window update to client, Pablo Neira Ayuso
        • Re: [PATCH v2 1/2] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Patrick McHardy
          • Re: [PATCH v2 1/2] netfilter: ip6t_SYNPROXY: fix NULL pointer dereference, Pablo Neira Ayuso
• IPv6 support for GRE helper(nf_conntrack_proto_gre), Aju L Francis
  • Re: IPv6 support for GRE helper(nf_conntrack_proto_gre), Pablo Neira Ayuso
• nfacct is not namespace aware, Andreas Schultz
  • Re: nfacct is not namespace aware, Pablo Neira Ayuso
• [PATCH nf-next 1/3] netfilter: xt_TEE: get rid of WITH_CONNTRACK definition, Pablo Neira Ayuso
  • [PATCH nf-next 3/3] netfilter: nf_tables: add nft_dup expression, Pablo Neira Ayuso
  • =?y?q?=5BPATCH=20nf-next=202/3=5D=20netfilter=3A=20factor=20out=20packet=20duplication=20for=20IPv4/IPv6?=, Pablo Neira Ayuso
    • Re: [PATCH nf-next 2/3] netfilter: factor out packet duplication for IPv4/IPv6, Florian Westphal
      • Re: [PATCH nf-next 2/3] netfilter: factor out packet duplication for IPv4/IPv6, Pablo Neira Ayuso
• [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Pablo Neira Ayuso
  • [PATCH nf-next 3/3] netfilter: nf_tables: add generation mask to set objects, Pablo Neira Ayuso
    • Re: [PATCH nf-next 3/3] netfilter: nf_tables: add generation mask to set objects, Patrick McHardy
      • Re: [PATCH nf-next 3/3] netfilter: nf_tables: add generation mask to set objects, Pablo Neira Ayuso
    • Re: [PATCH nf-next 3/3] netfilter: nf_tables: add generation mask to set objects, Patrick McHardy
      • Re: [PATCH nf-next 3/3] netfilter: nf_tables: add generation mask to set objects, Pablo Neira Ayuso
  • [PATCH nf-next 2/3] netfilter: nf_tables: add generation mask to chain objects, Pablo Neira Ayuso
  • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Patrick McHardy
    • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Pablo Neira Ayuso
      • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Patrick McHardy
        • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Pablo Neira Ayuso
          • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Patrick McHardy
            • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Pablo Neira Ayuso
              • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Patrick McHardy
              • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Patrick McHardy
                • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Pablo Neira Ayuso
    • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Pablo Neira Ayuso
      • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Patrick McHardy
        • Re: [PATCH nf-next 1/3] netfilter: nf_tables: add generation mask to table objects, Pablo Neira Ayuso
• [PATCH nft] src: restore nft list tables, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_counter: convert it to use per-cpu counters, Pablo Neira Ayuso
• Multiple DSCP match by "-m dscp --dscp-multi value,value,...", Kyeong Yoo
• New multiple DSCP match by "-m dscp --dscp-multi value,value,...", Kyeong Yoo
  • Re: New multiple DSCP match by "-m dscp --dscp-multi value,value,...", Pablo Neira Ayuso
    • Re: New multiple DSCP match by "-m dscp --dscp-multi value,value,...", Florian Westphal
      • Re: New multiple DSCP match by "-m dscp --dscp-multi value,value,...", Pablo Neira Ayuso
• [PATCH nf-next] netfilter: connlabels: Export setting connlabel length, Joe Stringer
  • Re: [PATCH nf-next] netfilter: connlabels: Export setting connlabel length, Florian Westphal
    • Re: [PATCH nf-next] netfilter: connlabels: Export setting connlabel length, Joe Stringer
• [IPTABLES] Module ipt_same, Alex william
  • Re: [IPTABLES] Module ipt_same, Jan Engelhardt
    • Re: [IPTABLES] Module ipt_same, Alex william
• [PATCH nf-next] netfilter: ip6t_REJECT: Remove debug messages from reject_tg6(), subashab
  • Re: [PATCH nf-next] netfilter: ip6t_REJECT: Remove debug messages from reject_tg6(), Pablo Neira Ayuso
• IP sets: Suggestion: additional value match, Rudolf_AT
  • Re: IP sets: Suggestion: additional value match, Jozsef Kadlecsik
    • Re: IP sets: Suggestion: additional value match, Rudolf_AT
      • Re: IP sets: Suggestion: additional value match, Rudolf_AT
• [PATCH nf-next] netfilter: ip6t_REJECT: Log reject reason in reject_tg6(), subashab
  • Re: [PATCH nf-next] netfilter: ip6t_REJECT: Log reject reason in reject_tg6(), Pablo Neira Ayuso
• [PATCHv3 2/2 nf] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Bernhard Thaler
  • Re: [PATCHv3 2/2 nf] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Pablo Neira Ayuso
    • Re: [PATCHv3 2/2 nf] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Bernhard Thaler
      • Re: [PATCHv3 2/2 nf] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Pablo Neira Ayuso
• [PATCH 1/2 nf] netfilter: bridge: do not initialize statics to 0 or NULL, Bernhard Thaler
  • Re: [PATCH 1/2 nf] netfilter: bridge: do not initialize statics to 0 or NULL, Pablo Neira Ayuso
• [patch -master] netfilter: xt_CT: checking for IS_ERR() instead of NULL, Dan Carpenter
  • Re: [patch -master] netfilter: xt_CT: checking for IS_ERR() instead of NULL, Pablo Neira Ayuso
    • Re: [patch -master] netfilter: xt_CT: checking for IS_ERR() instead of NULL, Dan Carpenter
      • Re: [patch -master] netfilter: xt_CT: checking for IS_ERR() instead of NULL, Pablo Neira Ayuso
    • Re: [patch -master] netfilter: xt_CT: checking for IS_ERR() instead of NULL, Joe Stringer
      • Re: [patch -master] netfilter: xt_CT: checking for IS_ERR() instead of NULL, Joe Stringer
        • Re: [patch -master] netfilter: xt_CT: checking for IS_ERR() instead of NULL, Pablo Neira Ayuso
          • Re: [patch -master] netfilter: xt_CT: checking for IS_ERR() instead of NULL, Joe Stringer
• [PATCH] netfilter: xtables: Add helper macro for xt_match boilerplate, Vaishali Thakkar
  • Re: [PATCH] netfilter: xtables: Add helper macro for xt_match boilerplate, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: xtables: Add helper macro for xt_match boilerplate, Vaishali Thakkar
• IPv4 IPv6 parallel dns lookup in combination with nfqueue is problematic, Tarik Demirci
  • Re: IPv4 IPv6 parallel dns lookup in combination with nfqueue is problematic, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: bridge: reduce nf_bridge_info to 32 bytes again, Florian Westphal
  • Re: [PATCH nf-next] netfilter: bridge: reduce nf_bridge_info to 32 bytes again, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_conntrack: silence warning on falling back to vmalloc(), Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_queue: fix nf_queue_nf_hook_drop(), Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nf_queue: fix nf_queue_nf_hook_drop(), Eric W. Biederman
• [PATCH 00/10] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH 04/10] ipvs: do not use random local source address for tunnels, Pablo Neira Ayuso
  • [PATCH 10/10] netfilter: nf_conntrack: Support expectations in different zones, Pablo Neira Ayuso
  • [PATCH 09/10] netfilter: fix netns dependencies with conntrack templates, Pablo Neira Ayuso
  • [PATCH 07/10] ipvs: fix crash with sync protocol v0 and FTP, Pablo Neira Ayuso
  • [PATCH 08/10] ipvs: call skb_sender_cpu_clear, Pablo Neira Ayuso
  • [PATCH 06/10] ipvs: skb_orphan in case of forwarding, Pablo Neira Ayuso
  • [PATCH 05/10] ipvs: fix crash if scheduler is changed, Pablo Neira Ayuso
  • [PATCH 03/10] ipvs: fix ipv6 route unreach panic, Pablo Neira Ayuso
  • [PATCH 02/10] netfilter: IDLETIMER: fix lockdep warning, Pablo Neira Ayuso
  • [PATCH 01/10] netfilter: ctnetlink: put back references to master ct and expect objects, Pablo Neira Ayuso
  • Re: [PATCH 00/10] Netfilter/IPVS fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 00/10] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 04/10] ipvs: do not schedule icmp errors from tunnels, Pablo Neira Ayuso
    • [PATCH 05/10] netfilter: ctnetlink: don't use conntrack/expect object addresses as id, Pablo Neira Ayuso
    • [PATCH 02/10] netfilter: conntrack: don't set related state for different outer address, Pablo Neira Ayuso
    • [PATCH 10/10] netfilter: fix nf_l4proto_log_invalid to log invalid packets, Pablo Neira Ayuso
    • [PATCH 06/10] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook(), Pablo Neira Ayuso
    • [PATCH 09/10] netfilter: never get/set skb->tstamp, Pablo Neira Ayuso
    • [PATCH 07/10] netfilter: nat: fix icmp id randomization, Pablo Neira Ayuso
    • [PATCH 03/10] netfilter: conntrack: initialize ct->timeout, Pablo Neira Ayuso
    • [PATCH 01/10] selftests: netfilter: check icmp pkttoobig errors are set as related, Pablo Neira Ayuso
    • [PATCH 08/10] netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON, Pablo Neira Ayuso
    • Re: [PATCH 00/10] Netfilter/IPVS fixes for net, David Miller
• [PATCH nf-next v3 0/3] Netfilter zone directions, Daniel Borkmann
  • [PATCH nf-next v3 2/3] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
  • [PATCH nf-next v3 1/3] netfilter: nf_conntrack: push zone object into functions, Daniel Borkmann
    • Re: [PATCH nf-next v3 1/3] netfilter: nf_conntrack: push zone object into functions, Pablo Neira Ayuso
      • Re: [PATCH nf-next v3 1/3] netfilter: nf_conntrack: push zone object into functions, Daniel Borkmann
        • Re: [PATCH nf-next v3 1/3] netfilter: nf_conntrack: push zone object into functions, Pablo Neira Ayuso
          • Re: [PATCH nf-next v3 1/3] netfilter: nf_conntrack: push zone object into functions, Daniel Borkmann
            • Re: [PATCH nf-next v3 1/3] netfilter: nf_conntrack: push zone object into functions, Pablo Neira Ayuso
              • Re: [PATCH nf-next v3 1/3] netfilter: nf_conntrack: push zone object into functions, Daniel Borkmann
                • Re: [PATCH nf-next v3 1/3] netfilter: nf_conntrack: push zone object into functions, Pablo Neira Ayuso
  • [PATCH nf-next v3 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
• ip(6)tables-restore segfault + patch, Felix Bolte
• [PATCH nf] netfilter: Support expectations in different zones, Joe Stringer
  • Re: [PATCH nf] netfilter: Support expectations in different zones, Pablo Neira Ayuso
• [RFC PATCH 0/5] netlink: mmap kernel panic and some issues, Ken-ichirou MATSUZAWA
  • [RFC PATCH 1/5] netlink: mmap: introduce mmaped skb helper functions, Ken-ichirou MATSUZAWA
  • [RFC PATCH 2/5] netlink: mmap: apply mmaped skb helper functions, Ken-ichirou MATSUZAWA
  • [RFC PATCH 3/5] netlink: mmap: fix status for not delivered skb, Ken-ichirou MATSUZAWA
  • [RFC PATCH 4/5] netlink: mmap: update tx type check, Ken-ichirou MATSUZAWA
  • [RFC PATCH 5/5] netlink: rx mmap: notify only when NL_MMAP_STATUS_VALID frame exists, Ken-ichirou MATSUZAWA
  • Re: [RFC PATCH 0/5] netlink: mmap kernel panic and some issues, Florian Westphal
• [IPTABLES 0/2] iptables-compat fixes, Thomas Woerner
  • [IPTABLES 1/2] iptables-compat: Allow to insert into rule_count+1 position, Thomas Woerner
  • [IPTABLES 2/2] iptables-compat: Increase rule number only for the selected table and chain, Thomas Woerner
  • Re: [IPTABLES 0/2] iptables-compat fixes, Pablo Neira Ayuso
• [PATCH nf-next 1/2] netfilter: fix possible removal of wrong hook, Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: rename local nf_hook_list to hook_list, Pablo Neira Ayuso
    • Re: [PATCH nf-next 2/2] netfilter: rename local nf_hook_list to hook_list, Eric W. Biederman
  • Re: [PATCH nf-next 1/2] netfilter: fix possible removal of wrong hook, Eric W. Biederman
• [PATCH nf-next] netfilter: nf_queue: fix deadlock in nf_queue_nf_hook_drop(), Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nf_queue: fix deadlock in nf_queue_nf_hook_drop(), Eric W. Biederman
    • Re: [PATCH nf-next] netfilter: nf_queue: fix deadlock in nf_queue_nf_hook_drop(), Pablo Neira Ayuso
      • Re: [PATCH nf-next] netfilter: nf_queue: fix deadlock in nf_queue_nf_hook_drop(), Eric W. Biederman
• [PATCH] Fix grammar error in manpage, Neutron Soutmun
  • Re: [PATCH] Fix grammar error in manpage, Jozsef Kadlecsik
• [PATCH nf] netfilter: nf_conntrack: silent warning when adding extensions to templates, Pablo Neira Ayuso
  • heads up, rebasing nf (was Re: [PATCH nf] netfilter: nf_conntrack: silent warning when adding) extensions to templates, Pablo Neira Ayuso
• Re: [PATCH] netfilter: Fix memory leak in nf_register_net_hook, Pablo Neira Ayuso
• [netfilter] INFO: task kworker/u2:0:6 blocked for more than 120 seconds., Fengguang Wu
• [PATCHv2 net-next] net: #ifdefify sk_classid member of struct sock, Mathias Krause
  • Re: [PATCHv2 net-next] net: #ifdefify sk_classid member of struct sock, David Miller
• [PATCH net-next] net: #ifdefify sk_classid member of struct sock, Mathias Krause
  • Re: [PATCH net-next] net: #ifdefify sk_classid member of struct sock, David Miller
    • Re: [PATCH net-next] net: #ifdefify sk_classid member of struct sock, Mathias Krause
• [PATCH nf-next v2] netfilter: nf_ct_sctp: minimal multihoming support, Michal Kubecek
  • Re: [PATCH nf-next v2] netfilter: nf_ct_sctp: minimal multihoming support, Pablo Neira Ayuso
• nf_conntrack: falling back to vmalloc., Toralf Förster
  • Re: nf_conntrack: falling back to vmalloc., Florian Westphal
    • Re: nf_conntrack: falling back to vmalloc., Toralf Förster
      • Re: nf_conntrack: falling back to vmalloc., Florian Westphal
    • Re: nf_conntrack: falling back to vmalloc., Pablo Neira Ayuso
• [PATCH nft] tests: validate generated netlink instructions, Florian Westphal
  • Re: [PATCH nft] tests: validate generated netlink instructions, Pablo Neira Ayuso
    • Re: [PATCH nft] tests: validate generated netlink instructions, Florian Westphal
      • Re: [PATCH nft] tests: validate generated netlink instructions, Pablo Neira Ayuso
      • Re: [PATCH nft] tests: validate generated netlink instructions, Pablo Neira Ayuso
        • Re: [PATCH nft] tests: validate generated netlink instructions, Florian Westphal
          • Re: [PATCH nft] tests: validate generated netlink instructions, Pablo Neira Ayuso
            • Re: [PATCH nft] tests: validate generated netlink instructions, Florian Westphal
              • Re: [PATCH nft] tests: validate generated netlink instructions, Pablo Neira Ayuso
                • Re: [PATCH nft] tests: validate generated netlink instructions, Florian Westphal
              • Re: [PATCH nft] tests: validate generated netlink instructions, Patrick McHardy
                • Re: [PATCH nft] tests: validate generated netlink instructions, Florian Westphal
                  • Re: [PATCH nft] tests: validate generated netlink instructions, Patrick McHardy
                • Re: [PATCH nft] tests: validate generated netlink instructions, Pablo Neira Ayuso
• [PATCH iptables] fix wrong headername in ipv6header for protocols, Andreas Herz
  • Re: [PATCH iptables] fix wrong headername in ipv6header for protocols, Pablo Neira Ayuso
    • Re: [PATCH iptables] fix wrong headername in ipv6header for protocols, Andreas Herz
      • Re: [PATCH iptables] fix wrong headername in ipv6header for protocols, Pablo Neira Ayuso
• nft: meta l4proto range printing broken on 32bit, Florian Westphal
  • Re: nft: meta l4proto range printing broken on 32bit, Florian Westphal
  • Re: nft: meta l4proto range printing broken on 32bit, Pablo Neira Ayuso
    • Re: nft: meta l4proto range printing broken on 32bit, Pablo Neira Ayuso
      • Re: nft: meta l4proto range printing broken on 32bit, Florian Westphal
• [PATCH nf 0/6] IPVS Fixes for v4.2, Simon Horman
  • [PATCH nf 6/6] ipvs: call skb_sender_cpu_clear, Simon Horman
  • [PATCH nf 5/6] ipvs: fix crash with sync protocol v0 and FTP, Simon Horman
  • [PATCH nf 3/6] ipvs: fix crash if scheduler is changed, Simon Horman
  • [PATCH nf 4/6] ipvs: skb_orphan in case of forwarding, Simon Horman
  • [PATCH nf 1/6] ipvs: fix ipv6 route unreach panic, Simon Horman
  • [PATCH nf 2/6] ipvs: do not use random local source address for tunnels, Simon Horman
  • Re: [PATCH nf 0/6] IPVS Fixes for v4.2, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: fix netns dependencies with conntrack templates, Pablo Neira Ayuso
  • Re: [PATCH nf,v2] netfilter: fix netns dependencies with conntrack templates, Daniel Borkmann
• iptables: AH/ESP init fix, and a build fix, Jan Engelhardt
  • [PATCH 2/2] extensions: restore matching any SPI id by default, Jan Engelhardt
    • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Pablo Neira Ayuso
      • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Jan Engelhardt
        • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Pablo Neira Ayuso
          • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Jan Engelhardt
            • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Pablo Neira Ayuso
              • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Jan Engelhardt
                • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Pablo Neira Ayuso
                  • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Jan Engelhardt
                    • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Pablo Neira Ayuso
                      • Re: [PATCH 2/2] extensions: restore matching any SPI id by default, Jan Engelhardt
  • [PATCH 1/2] build: resolve build error involving libnftnl, Jan Engelhardt
    • Re: [PATCH 1/2] build: resolve build error involving libnftnl, Pablo Neira Ayuso
• [Q] iptables AH module api mismatch between -master and 1.4.7, Cyrill Gorcunov
  • Re: [Q] iptables AH module api mismatch between -master and 1.4.7, Jan Engelhardt
    • Re: [Q] iptables AH module api mismatch between -master and 1.4.7, Cyrill Gorcunov
• [PATCH -next v2 0/6] netfilter: xtables: improve jumpstack handling, Florian Westphal
  • [PATCH -next 4/6] netfilter: add and use jump label for xt_tee, Florian Westphal
  • [PATCH -next 5/6] netfilter: xtables: remove __pure annotation, Florian Westphal
  • [PATCH -next v2 1/6] netfilter: xtables: compute exact size needed for jumpstack, Florian Westphal
  • [PATCH -next v2 3/6] netfilter: xtables: don't save/restore jumpstack offset, Florian Westphal
  • [PATCH -next v2 2/6] netfilter: move tee_active to core, Florian Westphal
  • [PATCH -next v2 6/6] netfilter: xtables: add upper limit on call chain depth, Florian Westphal
  • Re: [PATCH -next v2 0/6] netfilter: xtables: improve jumpstack handling, Pablo Neira Ayuso
    • Re: [PATCH -next v2 0/6] netfilter: xtables: improve jumpstack handling, Florian Westphal
• [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Michal Kubecek
  • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Michal Kubecek
      • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Marcelo Ricardo Leitner
        • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Michal Kubecek
          • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Marcelo Ricardo Leitner
  • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Michal Kubecek
      • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Marcelo Ricardo Leitner
    • Re: [PATCH nf-next] netfilter: nf_ct_sctp: minimal multihoming support, Michal Kubecek
• [PATCH iptables] extensions: libxt_socket: update man pages and tests for --restore-skmark, Harout Hedeshian
  • Re: [PATCH iptables] extensions: libxt_socket: update man pages and tests for --restore-skmark, Pablo Neira Ayuso
• [PATCH nf RFC] netfilter: fix netns dependencies with conntrack templates, Pablo Neira Ayuso
  • Re: [PATCH nf RFC] netfilter: fix netns dependencies with conntrack templates, Daniel Borkmann
  • Re: [PATCH nf RFC] netfilter: fix netns dependencies with conntrack templates, Florian Westphal
• [PATCH nf-next v2 0/3] Netfilter zone directions, Daniel Borkmann
  • [PATCH nf-next v2 1/3] netfilter: nf_conntrack: push zone object into functions, Daniel Borkmann
    • Re: [PATCH nf-next v2 1/3] netfilter: nf_conntrack: push zone object into functions, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 1/3] netfilter: nf_conntrack: push zone object into functions, Daniel Borkmann
  • [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
    • Re: [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
        • Re: [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
          • Re: [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Pablo Neira Ayuso
            • Re: [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
              • Re: [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Pablo Neira Ayuso
                • Re: [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
                  • Re: [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Pablo Neira Ayuso
                    • Re: [PATCH nf-next v2 3/3] netfilter: nf_conntrack: add efficient mark to zone mapping, Daniel Borkmann
  • [PATCH nf-next v2 2/3] netfilter: nf_conntrack: add direction support for zones, Daniel Borkmann
• [PATCH iptables] libxt_CT: add support for recently introduced zone options, Daniel Borkmann
  • <Possible follow-ups>
  • [PATCH iptables] libxt_CT: add support for recently introduced zone options, Daniel Borkmann
  • [PATCH iptables] libxt_CT: add support for recently introduced zone options, Daniel Borkmann