Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- Re: [PATCH] netfilter: nf_nat: Fix possible null dereference, (continued)
- [PATCH -next 0/4] netfilter: xtables: improve jumpstack handling,
Florian Westphal
- [PATCH 1/3 nft] src: get rid of EINTR handling in nft_netlink(),
Pablo Neira Ayuso
- [PATCH v2] net/bridge: Use __in6_dev_get rather than in6_dev_get in br_validate_ipv6,
Julien Grall
- [PATCH lnf-ct] conntrack: fix stop timestamp assignment,
Ken-ichirou MATSUZAWA
- [PATCH nf] MAINTAINER: add bridge netfilter, Pablo Neira Ayuso
- [PATCH nft,v4 00/16] cache consolidation,
Pablo Neira Ayuso
- [PATCH nft,v4 02/16] src: add cmd_evaluate_list(), Pablo Neira Ayuso
- [PATCH nft,v4 03/16] rule: add reference counter to the table object, Pablo Neira Ayuso
- [PATCH nft,v4 01/16] src: consolidate table cache, Pablo Neira Ayuso
- [PATCH nft,v4 04/16] src: add table declaration to cache, Pablo Neira Ayuso
- [PATCH nft,v4 07/16] src: early allocation of the set ID, Pablo Neira Ayuso
- [PATCH nft,v4 05/16] src: consolidate set cache, Pablo Neira Ayuso
- [PATCH nft,v4 08/16] segtree: pass element expression as parameter to set_to_intervals(), Pablo Neira Ayuso
- [PATCH nft,v4 09/16] rule: use netlink_add_setelems() when creating literal sets, Pablo Neira Ayuso
- [PATCH nft,v4 11/16] rule: add chain reference counter, Pablo Neira Ayuso
- [PATCH nft,v4 10/16] rule: fix use of intervals in set declarations, Pablo Neira Ayuso
- [PATCH nft,v4 06/16] src: add set declaration to cache, Pablo Neira Ayuso
- [PATCH nft,v4 12/16] src: consolidate chain cache, Pablo Neira Ayuso
- [PATCH nft,v4 13/16] evaluate: add cmd_evaluate_rename(), Pablo Neira Ayuso
- [PATCH nft,v4 14/16] src: add chain declarations to cache, Pablo Neira Ayuso
- [PATCH nft,v4 15/16] rule: consolidate rule cache, Pablo Neira Ayuso
- [PATCH nft,v4 16/16] src: consolidate set element cache, Pablo Neira Ayuso
- [PATCH nft 1/3] rule: missing family when listing of tables,
Pablo Neira Ayuso
- [RFC PATCH nf] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n,
Bernhard Thaler
- Linux 4.2 build error in net/netfilter/ipset/ip_set_hash_netnet.c,
Vinson Lee
[RFC PATCH v2] netfilter: nf_conntrack: fix endless loop on netns deletion, Daniel Borkmann
[PATCH v2] conntrack: made the protocol option value case insensitive, pfeiffer . szilard
[PATCH nft,v3 0/7] cache consolidation,
Pablo Neira Ayuso
- [PATCH nft,v3 1/7] src: consolidate table cache, Pablo Neira Ayuso
- [PATCH nft,v3 2/7] src: add table declaration to cache, Pablo Neira Ayuso
- [PATCH nft,v3 3/7] src: consolidate set cache, Pablo Neira Ayuso
- [PATCH nft,v3 4/7] src: early allocation of the set ID, Pablo Neira Ayuso
- [PATCH nft,v3 5/7] segtree: pass element expression as parameter to set_to_intervals(), Pablo Neira Ayuso
- [PATCH nft,v3 6/7] rule: use netlink_add_setelems() when creating literal sets, Pablo Neira Ayuso
- [PATCH nft,v3 7/7] rule: fix use of intervals in set declarations, Pablo Neira Ayuso
[Q RFC nft] how to add bridge vlan header match support?,
Florian Westphal
[PATCH nf] netfilter: nf_conntrack: fix endless loop on netns deletion,
Daniel Borkmann
[PATCH nf,v2] netfilter: nfnetlink: keep going batch handling on missing modules, Pablo Neira Ayuso
[PATCH nf] netfilter: bridge: don't leak skb in error paths,
Florian Westphal
[PATCH nf] netfilter: arptables: use percpu jumpstack,
Florian Westphal
Extending nftables user-space utility for custom filters, Juergen Brendel
[PATCH 0/7 nft] cache consolidation,
Pablo Neira Ayuso
IPSet target SET subnet options,
WaaX
nftables: parser conflict between tokens & symbols,
Balazs Scheidler
[PATCH] redir: fix snprintf to return the number of bytes printed,
balazs . scheidler
[nftables] payload: gen l4proto dependency on bridge, Eric Leblond
[PATCH nft] datatype: avoid crash in debug mode when printing integers,
Florian Westphal
[PATCH nft] payload: fix transport matching with no network layer info in bridge family,
Pablo Neira Ayuso
[PATCH 1/2 nf] netfilter: nft_queue: restrict queueing to supported families,
Pablo Neira Ayuso
[PATCH nf] netfilter: bridge: fix CONFIG_NF_DEFRAG_IPV4/6 related warnings/errors, Pablo Neira Ayuso
expectation entry creation with conntrack,
pfeiffer . szilard
[PATCH] conntrack: made the protocol option value case insensitive,
pfeiffer . szilard
[PATCH] conntrack: made the manual page and help consistent in case of proto option,
pfeiffer . szilard
[ANNOUNCE] ipset 6.25.1 released, Jozsef Kadlecsik
Re: net/netfilter/ipset: work around gcc-4.4.4 initializer bug (was: Re: linux-next: Tree for Jun 25),
Geert Uytterhoeven
[ulogd2 PATCHv3] Use stdint types everywhere, Felix Janda
merge window freeze, David Miller
[nftables 0/3] misc fixes,
Eric Leblond
[ulogd2 PATCHv2] Use stdint types everywhere,
Felix Janda
Kernel 4.1.0 broke the TARPIT & DELUGE targets in xtables-addons-2.6,
Alexander Petrenas
[PATCH net] netfilter: nf_queue: Don't recompute the hook_list head,
Eric W. Biederman
Re: [PATCH net] netfilter: nf_qeueue: Drop queue entries on nf_unregister_hook,
Eric W. Biederman
[PATCH net] netfilter: nftables: Do not run chains in the wrong network namespace,
Eric W. Biederman
[PATCH nft 1/3] rule: use netlink_add_setelems() when creating literal sets,
Pablo Neira Ayuso
[PATCH nf-next, v4] netfilter: nft_counter: convert it to use per-cpu counters,
Pablo Neira Ayuso
[PATCH nf-next, v3] netfilter: nft_counter: convert it to use per-cpu counters, Pablo Neira Ayuso
[PATCH nft] src: add tee statement,
Pablo Neira Ayuso
[PATCH libnftnl] expr: add new nft_tee expression, Pablo Neira Ayuso
[PATCH nf-next,v2] netfilter: nft_counter: convert it to use per-cpu counters,
Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: nft_counter: split out counters from nft_counter,
Pablo Neira Ayuso
[PATCH nf-next, v2 1/3] netfilter: xt_TEE: always allocate private area,
Pablo Neira Ayuso
Kedves Email felhasználói;, "rendszer Administrator®"
[PATCH COLO-Frame v6 00/31] COarse-grain LOck-stepping(COLO) Virtual Machines for Non-stop Service,
zhanghailiang
[RFC] COLO Proxy Module,
Li Zhijian
[PATCH -next] netfilter: xtables: fix warnings on 32bit platforms,
Florian Westphal
[PATCH 0/5] nft trace,
Markus Koetter
[PATCH nf-next 0/3] netfilter: socket lookup function refactoring, cgroup match fixes,
Daniel Mack
[PATCH iptables RFC 4/4] libxt_TCPOPTSTRIP: Use local copy of TCPOPTS constants,
Felix Janda
[PATCH iptables 3/4] ip*_tables.h: Sync with upstream, Felix Janda
[PATCH iptables 2/4] xtables.h: Use <stdint.h> types, Felix Janda
[PATCH iptables 1/4] Sync with ethernetdb.h from ebtables,
Felix Janda
[PATCH nft-sync] event.c: Include <signal.h> for signal names, Felix Janda
[PATCH libnetfilter_queue] libnetfilter_queue.h: Include <sys/time.h> for struct timeval,
Felix Janda
[PATCH nft,next-4.2,v2] src: add netdev family support,
Pablo Neira Ayuso
[PATCH nft] netlink: fix use-after-free netlink_events_cache_deltable(), Pablo Neira Ayuso
[PATCH nft] parser_bison: allow to use mark as datatype for maps and sets,
Pablo Neira Ayuso
[PATCH nft,next-4.2] src: add netdev family support,
Pablo Neira Ayuso
[PATCH libnfnl] chain: add netdev family support, Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: bridge: rename br_netfilter.c to br_netfilter_hooks.c,
Pablo Neira Ayuso
[PATCH net-next] x_table: align per cpu xt_counter,
Eric Dumazet
[PATCH iptables] xt_socket: add --restore-skmark option,
Harout Hedeshian
[PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flag,
Harout Hedeshian
[PATCH 00/32] Netfilter updates for net-next,
Pablo Neira Ayuso
- [PATCH 01/32] netfilter: conntrack: warn the user if there is a better helper to use, Pablo Neira Ayuso
- [PATCH 03/32] netfilter: bridge: re-order br_nf_pre_routing_finish_ipv6(), Pablo Neira Ayuso
- [PATCH 04/32] netfilter: bridge: detect NAT66 correctly and change MAC address, Pablo Neira Ayuso
- [PATCH 02/32] netfilter: bridge: refactor clearing BRNF_NF_BRIDGE_PREROUTING, Pablo Neira Ayuso
- [PATCH 06/32] netfilter: bridge: rename br_parse_ip_options, Pablo Neira Ayuso
- [PATCH 05/32] netfilter: bridge: refactor frag_max_size, Pablo Neira Ayuso
- [PATCH 08/32] netfilter: bridge: forward IPv6 fragmented packets, Pablo Neira Ayuso
- [PATCH 26/32] netfilter: ipset: Introduce RCU locking in list type, Pablo Neira Ayuso
- [PATCH 24/32] netfilter: ipset: Introduce RCU locking in bitmap:* types, Pablo Neira Ayuso
- [PATCH 28/32] netfilter: Kconfig: get rid of parens around depends on, Pablo Neira Ayuso
- [PATCH 29/32] netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference., Pablo Neira Ayuso
- [PATCH 25/32] netfilter: ipset: Introduce RCU locking in hash:* types, Pablo Neira Ayuso
- [PATCH 30/32] netfilter: nf_tables: attach net_device to basechain, Pablo Neira Ayuso
- [PATCH 22/32] netfilter:ipset Remove rbtree from hash:net,iface, Pablo Neira Ayuso
- [PATCH 23/32] netfilter: ipset: Prepare the ipset core to use RCU at set level, Pablo Neira Ayuso
- [PATCH 32/32] netfilter: nf_tables_netdev: unregister hooks on net_device removal, Pablo Neira Ayuso
- [PATCH 31/32] netfilter: nf_tables: add nft_register_basechain() and nft_unregister_basechain(), Pablo Neira Ayuso
- [PATCH 27/32] netfilter: ipset: Fix coding styles reported by checkpatch.pl, Pablo Neira Ayuso
- [PATCH 21/32] netfilter: ipset: Make sure listing doesn't grab a set which is just being destroyed., Pablo Neira Ayuso
- [PATCH 20/32] netfilter: ipset: Fix parallel resizing and listing of the same set, Pablo Neira Ayuso
- [PATCH 07/32] netfilter: bridge: re-order check_hbh_len(), Pablo Neira Ayuso
- [PATCH 19/32] netfilter: ipset: Fix cidr handling for hash:*net* types, Pablo Neira Ayuso
- [PATCH 10/32] netfilter: bridge: restore vlan tag when refragmenting, Pablo Neira Ayuso
- [PATCH 17/32] netfilter: ipset: Make sure we always return line number on batch, Pablo Neira Ayuso
- [PATCH 18/32] netfilter: ipset: Check CIDR value only when attribute is given, Pablo Neira Ayuso
- [PATCH 15/32] netfilter: ipset: Check extensions attributes before getting extensions., Pablo Neira Ayuso
- [PATCH 12/32] netfilter: xtables: avoid percpu ruleset duplication, Pablo Neira Ayuso
- [PATCH 11/32] netfilter: xtables: use percpu rule counters, Pablo Neira Ayuso
- [PATCH 13/32] netfilter: ipset: Use MSEC_PER_SEC consistently, Pablo Neira Ayuso
- [PATCH 14/32] netfilter: ipset: Use SET_WITH_*() helpers to test set extensions, Pablo Neira Ayuso
- [PATCH 09/32] net: ip_fragment: remove BRIDGE_NETFILTER mtu special handling, Pablo Neira Ayuso
- [PATCH 16/32] netfilter: ipset: Permit CIDR equal to the host address CIDR in IPv6, Pablo Neira Ayuso
- Re: [PATCH 00/32] Netfilter updates for net-next, David Miller
- Re: [PATCH 00/32] Netfilter updates for net-next, Jakub Kiciński
[PATCH nf-next] x_tables: remove XT_TABLE_INFO_SZ and a dereference.,
Eric Dumazet
[PATCH RFC 00/15] Netfilter pernet hook support,
Pablo Neira Ayuso
- [PATCH RFC 01/15] net: include missing headers in net/net_namespace.h, Pablo Neira Ayuso
- [PATCH RFC 02/15] netfilter: use forward declaration instead of including linux/proc_fs.h, Pablo Neira Ayuso
- [PATCH RFC 05/15] netfilter: ipt_CLUSTERIP: adapt it to support pernet hooks, Pablo Neira Ayuso
- [PATCH RFC 04/15] netfilter: add pernet hook support, Pablo Neira Ayuso
- [PATCH RFC 06/15] netfilter: x_tables: adapt xt_hook_link() to support pernet hooks, Pablo Neira Ayuso
- [PATCH RFC 03/15] netfilter: don't pull include/linux/netfilter.h from netns headers, Pablo Neira Ayuso
- [PATCH RFC 08/15] netfilter: nf_conntrack: adapt IPv4 and IPv6 trackers to pernet hooks, Pablo Neira Ayuso
- [PATCH RFC 09/15] netfilter: synproxy: adapt IPv4 and IPv6 targets to pernet hooks, Pablo Neira Ayuso
- [PATCH RFC 10/15] netfilter: defrag: add pernet hook support, Pablo Neira Ayuso
- [PATCH RFC 11/15] ipvs: adapt it to pernet hooks, Pablo Neira Ayuso
- [PATCH RFC 12/15] netfilter: ebtables: adapt the filter and nat table to pernet hooks, Pablo Neira Ayuso
- [PATCH RFC 07/15] netfilter: x_tables: adapt tables to pernet hooks, Pablo Neira Ayuso
- [PATCH RFC 13/15] netfilter: nf_tables: adapt it to pernet hooks, Pablo Neira Ayuso
- [PATCH RFC 14/15] security: adapt it to pernet hooks, Pablo Neira Ayuso
- [PATCH RFC 15/15] netfilter: bridge: adapt it to pernet hooks, Pablo Neira Ayuso
[PATCH nf-next 1/3, v2] netfilter: nf_tables: attach net_device to basechain,
Pablo Neira Ayuso
[PATCH] net: fix search limit handling in skb_find_text(),
Roman I Khimov
[PATCH net-next 00/15] Simplify netfilter and network namespaces,
Eric W. Biederman
- [PATCH net-next 01/15] netfilter: Kill unused copies of RCV_SKB_FAIL, Eric W. Biederman
- [PATCH net-next 02/15] netfilter: Pass struct net into the netfilter hooks, Eric W. Biederman
- [PATCH net-next 03/15] netfilter: Use nf_hook_state.net, Eric W. Biederman
- [PATCH net-next 04/15] ebtables: Simplify the arguments to ebt_do_table, Eric W. Biederman
- [PATCH net-next 05/15] inet netfilter: Remove hook from ip6t_do_table, arp_do_table, ipt_do_table, Eric W. Biederman
- [PATCH net-next 06/15] inet netfilter: Prefer state->hook to ops->hooknum, Eric W. Biederman
- [PATCH net-next 07/15] nftables: kill nft_pktinfo.ops, Eric W. Biederman
- [PATCH net-next 08/15] tc: Simplify em_ipset_match, Eric W. Biederman
- [PATCH net-next 10/15] x_tables: Use par->net instead of computing from the passed net devices, Eric W. Biederman
- [PATCH net-next 09/15] x_tables: Pass struct net in xt_action_param, Eric W. Biederman
- [PATCH net-next 15/15] ipv6: Pass struct net into nf_ct_frag6_gather, Eric W. Biederman
- [PATCH net-next 13/15] nf_conntrack: Add a struct net parameter to l4_pkt_to_tuple, Eric W. Biederman
- [PATCH net-next 12/15] nf_tables: Use pkt->net instead of computing net from the passed net_devices, Eric W. Biederman
- [PATCH net-next 11/15] nftables: Pass struct net in nft_pktinfo, Eric W. Biederman
- [PATCH net-next 14/15] ipv4: Pass struct net into ip_defrag and ip_check_defrag, Eric W. Biederman
- Re: [PATCH net-next 00/15] Simplify netfilter and network namespaces, Pablo Neira Ayuso
- Re: [PATCH net-next 00/15] Simplify netfilter and network namespaces, David Miller
- [PATCH net-next 00/43] Simplify netfilter and network namespaces (take 2), Eric W. Biederman
- [PATCH net-next 01/43] netfilter: Kill unused copies of RCV_SKB_FAIL, Eric W. Biederman
- [PATCH net-next 03/43] netfilter: Use nf_hook_state.net, Eric W. Biederman
- [PATCH net-next 05/43] inet netfilter: Remove hook from ip6t_do_table, arp_do_table, ipt_do_table, Eric W. Biederman
- [PATCH net-next 06/43] inet netfilter: Prefer state->hook to ops->hooknum, Eric W. Biederman
- [PATCH net-next 09/43] x_tables: Pass struct net in xt_action_param, Eric W. Biederman
- [PATCH net-next 10/43] x_tables: Use par->net instead of computing from the passed net devices, Eric W. Biederman
- [PATCH net-next 07/43] nftables: kill nft_pktinfo.ops, Eric W. Biederman
- [PATCH net-next 04/43] ebtables: Simplify the arguments to ebt_do_table, Eric W. Biederman
- [PATCH net-next 08/43] tc: Simplify em_ipset_match, Eric W. Biederman
- [PATCH net-next 02/43] netfilter: Pass struct net into the netfilter hooks, Eric W. Biederman
- [PATCH net-next 21/43] netfilter: Add a network namespace Kconfig conflict, Eric W. Biederman
- [PATCH net-next 34/43] netfilter: bridge: adapt it to pernet hooks, Eric W. Biederman
- [PATCH net-next 32/43] netfilter: ipt_CLUSTERIP: adapt it to support pernet hooks, Eric W. Biederman
- [PATCH net-next 33/43] netfilter: ebtables: adapt the filter and nat table to pernet hooks, Eric W. Biederman
- [PATCH net-next 15/43] ipv6: Pass struct net into nf_ct_frag6_gather, Eric W. Biederman
- [PATCH net-next 18/43] netfilter: don't pull include/linux/netfilter.h from netns headers, Eric W. Biederman
- [PATCH net-next 11/43] nftables: Pass struct net in nft_pktinfo, Eric W. Biederman
- [PATCH net-next 26/43] netfitler: Remove spurios included of netfilter.h, Eric W. Biederman
- [PATCH net-next 36/43] netfilter: nf_conntract: Register netfilter hooks in all network namespaces, Eric W. Biederman
- [PATCH net-next 37/43] netfilter: nf_defrag: Register netfilter hooks in all network namespaces, Eric W. Biederman
- [PATCH net-next 27/43] x_tables: Add magical hook registration in the common case, Eric W. Biederman
- [PATCH net-next 43/43] netfilter: Skip unnecessary calls to synchronize_net, Eric W. Biederman
- [PATCH net-next 41/43] netfilter: Remove the network namespace Kconfig conflict, Eric W. Biederman
- [PATCH net-next 30/43] x_tables: Update ip?table_nat to register their hooks in all network namespaces, Eric W. Biederman
- [PATCH net-next 39/43] selinux: adapt it to pernet hooks, Eric W. Biederman
- [PATCH net-next 12/43] nf_tables: Use pkt->net instead of computing net from the passed net_devices, Eric W. Biederman
- [PATCH net-next 22/43] netfilter: Add a struct net parameter to nf_register_hook[s], Eric W. Biederman
- [PATCH net-next 31/43] netfilter: nf_tables: adapt it to pernet hooks, Eric W. Biederman
- [PATCH net-next 20/43] netfilter: Pass priv instead of nf_hook_ops to netfilter hooks, Eric W. Biederman
- [PATCH net-next 40/43] smack: adapt it to pernet hooks, Eric W. Biederman
- [PATCH net-next 35/43] ipvs: Register netfilter hooks in all network namespaces, Eric W. Biederman
- [PATCH net-next 16/43] net: include missing headers in net/net_namespace.h, Eric W. Biederman
- [PATCH net-next 29/43] x_tables: Kill xt_[un]hook_link, Eric W. Biederman
- [PATCH net-next 17/43] netfilter: use forward declaration instead of including linux/proc_fs.h, Eric W. Biederman
- [PATCH net-next 24/43] netfilter: Make the netfilter hooks per network namespace, Eric W. Biederman
- [PATCH net-next 25/43] netfilter: Make nf_hook_ops just a parameter structure, Eric W. Biederman
- [PATCH net-next 42/43] netfilter bridge: Make the sysctl knobs per network namespace, Eric W. Biederman
- [PATCH net-next 38/43] netfilter: synproxy: Register netfilter hooks in all network namespaces, Eric W. Biederman
- [PATCH net-next 13/43] nf_conntrack: Add a struct net parameter to l4_pkt_to_tuple, Eric W. Biederman
- [PATCH net-next 14/43] ipv4: Pass struct net into ip_defrag and ip_check_defrag, Eric W. Biederman
- [PATCH net-next 19/43] ipvs: Read hooknum from state rather than ops->hooknum, Eric W. Biederman
- [PATCH net-next 23/43] netfilter: Add a struct net parameter to nf_unregister_hook[s], Eric W. Biederman
- [PATCH net-next 28/43] x_tables: Where possible convert to the new hook registration method, Eric W. Biederman
- Re: [PATCH net-next 00/43] Simplify netfilter and network namespaces (take 2), Andreas Schultz
- Re: [PATCH net-next 00/43] Simplify netfilter and network namespaces (take 2), Pablo Neira Ayuso
- [PATCH -next 0/6] Per network namespace netfilter chains, Eric W. Biederman
- Re: [PATCH net-next 00/15] Simplify netfilter and network namespaces, Julian Anastasov
[PATCH nft] tests: regression: ip6: reduce warning noise, Pablo Neira Ayuso
Does arptables support adding new extensions dinamically like iptables does?, Roberto Santalla Fdez.
[PATCH iptables] xt_socket: add --mark option, Harout Hedeshian
[PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_MATCHSOCKMARK flag and mark fields,
Harout Hedeshian
[PATCH nf-next 2/4] netfilter: xt_TEE: always allocate private area,
Pablo Neira Ayuso
[PATCH nf-next 1/4] netfilter: Kconfig: get rid of parens around depends on, Pablo Neira Ayuso
[PATCH nf-next] netfilter: nf_tables: attach net_device to basechain, Pablo Neira Ayuso
[PATCH v3 nf-next 1/2] netfilter: xtables: use percpu rule counters,
Florian Westphal
[PATCH v2 nf-next 1/2] netfilter: xtables: use percpu rule counters,
Florian Westphal
nft rules processed in wrong network namespace,
Andreas Schultz
iptables nftables compat weirdness,
Andreas Schultz
[PATCH nf-next 1/2] netfilter: xtables: use percpu rule counters,
Florian Westphal
[PATCH nft 1/2] datatype: default to display bitmask in hexadecimal,
Pablo Neira Ayuso
Possible bug when bridging traffic we just SNATed and sent to another router,
Daniel Collins
[PATCH nft 0/9] concat support,
Patrick McHardy
nft netdev family bindings,
Patrick McHardy
[PATCH nf-next] net: ip_fragment: remove BRIDGE_NETFILTER mtu special handling,
Florian Westphal
[PATCH] netfilter: bridge: restore vlan tag when refragmenting,
Florian Westphal
[patch] ipvs: prevent some underflows,
Dan Carpenter
xtables-addons 64-bit counter patch,
Neal P. Murphy
[PATCH nft] netlink_delinearize: restore listing of host byteorder set elements,
Pablo Neira Ayuso
netlink multi-thread / libmnl / nfq,
Ryan Johnston
[PATCH 0/6 nft] improvements for the range printing,
Pablo Neira Ayuso
[PATCH 1/3] netlink_linearize: fix range cmp instruction generation,
Patrick McHardy
[PATCH net] Netfilter fix for net,
Pablo Neira Ayuso
[PATCH] remove unused 'numbytes',
Paul Aitken
[PATCH] Optimise nfq_queue_cb,
Paul Aitken
[PATCH 00/11] Replace module_init with an alternate initcall in non modules,
Paul Gortmaker
[PATCH 71/98] include/uapi/linux/netfilter/xt_TEE.h: include linux/netfilter.h, Mikko Rapeli
[PATCH 56/98] include/uapi/linux/netfilter.h: include in.h and in6.h, Mikko Rapeli
[PATCH 76/98] include/uapi/linux/netfilter/xt_recent.h: include linux/netfilter.h, Mikko Rapeli
[PATCH 75/98] include/uapi/linux/netfilter/xt_sctp.h: use _Bool type, 1 for true and 0 for false, Mikko Rapeli
[PATCH 57/98] include/uapi/linux/netfilter_bridge.h: include in.h, Mikko Rapeli
[PATCH 63/98] include/uapi/linux/netfilter/xt_policy.h: include linux/in.h and linux/in6.h, Mikko Rapeli
[PATCH 68/98] include/uapi/linux/netfilter/ipset/ip_set_hash.h: include linux/netfilter/ipset/ip_set.h, Mikko Rapeli
[PATCH 70/98] include/uapi/linux/netfilter/xt_HMARK.h: include linux/netfilter.h, Mikko Rapeli
[PATCH 73/98] include/uapi/linux/netfilter/xt_ipvs.h: include linux/netfilter.h, Mikko Rapeli
[PATCH 74/98] include/uapi/linux/netfilter/xt_mac.h: include linux/if_ether.h, Mikko Rapeli
[PATCH 69/98] include/uapi/linux/netfilter/ipset/ip_set_list.h: include linux/netfilter/ipset/ip_set.h, Mikko Rapeli
[PATCH 67/98] include/uapi/linux/netfilter/ipset/ip_set_bitmap.h: include linux/netfilter/ipset/ip_set.h,
Mikko Rapeli
[PATCH 60/98] include/uapi/linux/netfilter/xt_osf.h: include linux/ip.h and linux/tcp.h, Mikko Rapeli
[PATCH 72/98] include/uapi/linux/netfilter/xt_TPROXY.h: include linux/netfilter.h, Mikko Rapeli
[PATCH 59/98] include/uapi/linux/netfilter: include linux/if.h in several headers, Mikko Rapeli
[PATCH 44/98] nf_conntrack_tuple_common.h: include linux/types.h and linux/netfilter.h, Mikko Rapeli
[PATCHv7 4/4] netfilter: bridge: forward IPv6 fragmented packets,
Bernhard Thaler
[PATCH 3/4] netfilter: bridge: re-order check_hbh_len(),
Bernhard Thaler
[PATCHv6 2/4] netfilter: bridge: rename br_parse_ip_options,
Bernhard Thaler
[PATCHv2 1/4] netfilter: bridge: refactor frag_max_size,
Bernhard Thaler
[PATCHv4 3/3] netfilter: bridge: detect NAT66 correctly and change MAC address,
Bernhard Thaler
[PATCH 2/3] netfilter: bridge: re-order br_nf_pre_routing_finish_ipv6(),
Bernhard Thaler
[PATCH 1/3] netfilter: bridge: refactor clearing BRNF_NF_BRIDGE_PREROUTING,
Bernhard Thaler
[RESEND PATCH V2] Add element count to hash headers,
Eric B Munson
[PATCH conntrackd] expect: Fix wrong memset usage, Pablo Neira Ayuso
libnetfilter_queue multi-threaded nfq_handle shared or unique?, Ryan Johnston
[PATCH v2 -next 1/2] netfilter: iptables: separate counters from iptables rules,
Florian Westphal
Re: conntrack-tools bugs, Paul Aitken
[PATCH] Revert "netfilter: ensure number of counters is >0 in do_replace()",
Bernhard Thaler
[PATCH 4/4] netfilter: bridge: refactor frag_max_size, Bernhard Thaler
[PATCHv5 3/4] netfilter: bridge: rename br_parse_ip_options,
Bernhard Thaler
[PATCHv6 2/4] netfilter: bridge: forward IPv6 fragmented packets,
Bernhard Thaler
[PATCHv3 1/4] netfilter: bridge: detect NAT66 correctly and change MAC address,
Bernhard Thaler
REOUTE target extenstion,
Eddi Linder
[PATCH -next 1/2] netfilter: iptables: separate counters from iptables rules,
Florian Westphal
ebtables not working correctly with 1086bbe97a074844188c6c988fa0b1a98c3ccbb9,
Bernhard Thaler
[PATCH 1/1] Added a vlan id and pcp matching extension, Eddie Linder
[PATCH 1/1] netfilter: Added vlan matching extension,
Eddie Linder
[PATCH libmnl] example: netfilter: get rid of aligned_be64 definitions, Pablo Neira Ayuso
[PATCH 0/3 nf-next] nf_tables support at ingress,
Pablo Neira Ayuso
[PATCH] libnetfitler_queue: receive security context info,
Roman Kubiak
[PATCH] Security context information added to netfilter_queue,
Roman Kubiak
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
