Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- Re: [PATCH nft v2 3/3] src: add xt compat support, (continued)
- [PATCH nft v2] src: restore interface to index cache, Pablo Neira Ayuso
- [PATCH 00/20] Netfilter updates for net-next,
Pablo Neira Ayuso
- [PATCH 01/20] netfilter: nf_tables: add set timeout API support, Pablo Neira Ayuso
- [PATCH 14/20] netfilter: bridge: start splitting mask into public/private chunks, Pablo Neira Ayuso
- [PATCH 20/20] netfilter: nf_tables: support optional userdata for set elements, Pablo Neira Ayuso
- [PATCH 11/20] netfilter: bridge: add helpers for fetching physin/outdev, Pablo Neira Ayuso
- [PATCH 16/20] netfilter: nf_tables: fix set selection when timeouts are requested, Pablo Neira Ayuso
- [PATCH 19/20] netfilter: nf_tables: add support for dynamic set updates, Pablo Neira Ayuso
- [PATCH 12/20] netfilter: physdev: use helpers, Pablo Neira Ayuso
- [PATCH 13/20] netfilter: bridge: add and use nf_bridge_info_get helper, Pablo Neira Ayuso
- [PATCH 18/20] netfilter: nf_tables: support different set binding types, Pablo Neira Ayuso
- [PATCH 17/20] netfilter: nf_tables: prepare set element accounting for async updates, Pablo Neira Ayuso
- [PATCH 15/20] netfilter: bridge: make BRNF_PKT_TYPE flag a bool, Pablo Neira Ayuso
- [PATCH 06/20] netfilter: x_tables: fix cgroup matching on non-full sks, Pablo Neira Ayuso
- [PATCH 10/20] netfilter: bridge: don't use nf_bridge_info data to store mac header, Pablo Neira Ayuso
- [PATCH 02/20] netfilter: nf_tables: add set element timeout support, Pablo Neira Ayuso
- [PATCH 07/20] netfilter: nft_meta: fix cgroup matching, Pablo Neira Ayuso
- [PATCH 04/20] netfilter: nf_tables: add GC synchronization helpers, Pablo Neira Ayuso
- [PATCH 03/20] netfilter: nf_tables: add set garbage collection helpers, Pablo Neira Ayuso
- [PATCH 05/20] netfilter: nft_hash: add support for timeouts, Pablo Neira Ayuso
- [PATCH 08/20] netfilter: bridge: really save frag_max_size between PRE and POST_ROUTING, Pablo Neira Ayuso
- [PATCH 09/20] netfilter: x_tables: don't extract flow keys on early demuxed sks in socket match, Pablo Neira Ayuso
- Re: [PATCH 00/20] Netfilter updates for net-next, David Miller
- [nft PATCH 1/4] include: cache a copy of kernel ebtables.h,
Arturo Borrero Gonzalez
- [iptables PATCH] libxtables: extensions find based also on family,
Arturo Borrero Gonzalez
- [kernel PATCH] uapi: ebtables: don't include linux/if.h,
Arturo Borrero Gonzalez
- [PATCH] netfilter: Fix switch statement warnings with recent gcc.,
David Miller
- [nft PATCH] monitor: fix missing space after chain name,
Arturo Borrero Gonzalez
- [PATCH] Add NFPROTO_ARP for mark target,
Zhang Chunyu
- [iptables PATCH] list: fix prefetch dummy,
Arturo Borrero Gonzalez
- [iptables PATCH] ebtables-compat: fix misplaced function attribute on ebt_print_error(),
Arturo Borrero Gonzalez
- [PATCH nft 1/2] src: introduce netlink_init_error(),
Pablo Neira Ayuso
- [PATCH 4/4] udp_tunnel: Pass UDP socket down through udp_tunnel{,6}_xmit_skb().,
David Miller
- [PATCH 3/4] netfilter: Pass socket pointer down through okfn().,
David Miller
- [PATCH 2/4] netfilter: Add socket pointer to nf_hook_state., David Miller
- [PATCH 1/4] netfilter: Add nf_hook_state initializer function.,
David Miller
- [PATCH 0/4] Prevent UDP tunnels from operating on garbage socket,
David Miller
Re: SYNPROXY module with bridge, Patrick McHardy
[PATCH] netfilter: nf_tables: support per element userdata,
Patrick McHardy
[PATCH 0/4] netfilter: nf_tables: dynamic set updates,
Patrick McHardy
[PATCH 9/9] netfilter: Pass nf_hook_state through arpt_do_table()., David Miller
[PATCH 8/9] netfilter: Pass nf_hook_state through nft_set_pktinfo*()., David Miller
[PATCH 7/9] netfilter: Pass nf_hook_state through ip6t_do_table()., David Miller
[PATCH 5/9] netfilter: Pass nf_hook_state through ipt_do_table()., David Miller
[PATCH 6/9] netfilter: Pass nf_hook_state through nf_nat_ipv6_{in,out,fn,local_fn}()., David Miller
[PATCH 4/9] netfilter: Pass nf_hook_state through nf_nat_ipv4_{in,out,fn,local_fn}()., David Miller
[PATCH 3/9] netfilter: Make nf_hookfn use nf_hook_state., David Miller
[PATCH 2/9] netfilter: Use nf_hook_state in nf_queue_entry., David Miller
[PATCH 1/9] netfilter: Create and use nf_hook_state.,
David Miller
[PATCH 0/9] netfilter: Compress hook function signatures.,
David Miller
[PATCH nf-next] netfilter: x_tables: don't bail out on mismatching revision, Pablo Neira Ayuso
ulogd2 memory bug?, Peter Sagerson
[PATCH v2 nf-next 0/6] netfilter: prepare for skb->nf_bridge removal,
Florian Westphal
[PATCH nf-next] netfilter: x_tables: don't extract flow keys on early demuxed sks in socket match,
Daniel Borkmann
[PATCH arptables 1/2] src: cache in tree and use x_tables.h,
Pablo Neira Ayuso
[PATCH nf-next 00/14] get rid of skb->nf_bridge pointer,
Florian Westphal
- [PATCH nf-next 01/14] netfilter: bridge: really save frag_max_size between PRE and POST_ROUTING, Florian Westphal
- [PATCH nf-next 13/14] netfilter: bridge: neigh_head and physoutdev can't be used at same time, Florian Westphal
- [PATCH nf-next 14/14] netfilter: bridge: hold physinport ref during neigh resolution, Florian Westphal
- [PATCH nf-next 11/14] netfilter: bridge: remove skb->nf_bridge, Florian Westphal
- [PATCH nf-next 12/14] netfilter: bridge: discard nf_bridge info on xmit, Florian Westphal
- [PATCH nf-next 08/14] netfilter: physdev: use helpers, Florian Westphal
- [PATCH nf-next 07/14] netfilter: bridge: add helpers for fetching physin/outdev, Florian Westphal
- [PATCH nf-next 10/14] netfilter: bridge: move bridge netfilter state into sk_buff, Florian Westphal
- [PATCH nf-next 09/14] netfilter: bridge: add and use nf_bridge_info_get helper, Florian Westphal
- [PATCH nf-next 05/14] netfilter: bridge: make BRNF_PKT_TYPE flag a bool, Florian Westphal
- [PATCH nf-next 06/14] netfilter: bridge: rename and resize 'data' field, Florian Westphal
- [PATCH nf-next 04/14] netfilter: bridge: start splitting mask into public/private chunks, Florian Westphal
- [PATCH nf-next 02/14] net: untangle ip_fragment and bridge netfilter, Florian Westphal
- [PATCH nf-next 03/14] netfilter: bridge: don't use nf_bridge_info data to store mac header, Florian Westphal
nft parser and problems with icmp type names (redirect and param-problem),
Alexander Holler
[PATCH 00/25] treewide: Use bool function return values of true/false not 1/0,
Joe Perches
[PATCH 4/9 net-next] ipv6: replace if/BUG by BUG_ON,
Fabian Frederick
[PATCH 9/9 net-next] netfilter: replace if/BUG by BUG_ON, Fabian Frederick
[PATCH V4 0/3] Add mark target,
Zhang Chunyu
[PATCH -iptables] cgroup, man: improve man-page bits,
Daniel Borkmann
[PATCH -nf] netfilter: x_tables: fix cgroup matching on non-full sks,
Daniel Borkmann
How to do a NAT lookup from the kernel?, Justin Michael Schwartzbeck
ANNOUNCEMENT: Netdev 01 materials posted, Jamal Hadi Salim
[PATCH nf-next v2 0/2] xt_cgroups fix,
Daniel Borkmann
[PATCH libnftnl 0/2] set timeout support,
Patrick McHardy
[PATCH libnftnl] list: fix prefetch dummy, Patrick McHardy
[PATCH 0/5] netfilter: nf_tables: set timeout support,
Patrick McHardy
[PATCH 00/15] Netfilter updates for net-next,
Pablo Neira Ayuso
- [PATCH 01/15] netfilter: nf_tables: move struct net pointer to base chain, Pablo Neira Ayuso
- [PATCH 04/15] netfilter: nf_tables: nft_queue does not depend on x_tables, Pablo Neira Ayuso
- [PATCH 06/15] rhashtable: provide len to obj_hashfn, Pablo Neira Ayuso
- [PATCH 10/15] netfilter: nf_tables: add set extensions, Pablo Neira Ayuso
- [PATCH 09/15] netfilter: nft_hash: convert to use rhashtable callbacks, Pablo Neira Ayuso
- [PATCH 13/15] netfilter: nf_tables: return set extensions from ->lookup(), Pablo Neira Ayuso
- [PATCH 12/15] netfilter: nf_tables: consolide set element destruction, Pablo Neira Ayuso
- [PATCH 11/15] netfilter: nf_tables: convert hash and rbtree to set extensions, Pablo Neira Ayuso
- [PATCH 07/15] netfilter: nft_hash: restore struct nft_hash, Pablo Neira Ayuso
- [PATCH 15/15] netfilter: nf_tables: implement set transaction support, Pablo Neira Ayuso
- [PATCH 14/15] netfilter: nf_tables: add transaction helper functions, Pablo Neira Ayuso
- [PATCH 08/15] netfilter: nft_hash: indent rhashtable parameters, Pablo Neira Ayuso
- [PATCH 02/15] netfilter: Use LOGLEVEL_<FOO> defines, Pablo Neira Ayuso
- [PATCH 05/15] netfilter: nft_meta: use raw_smp_processor_id(), Pablo Neira Ayuso
- [PATCH 03/15] netfilter: nf_tables: restore nf_log_trace() in nf_tables_core.c, Pablo Neira Ayuso
- Re: [PATCH 00/15] Netfilter updates for net-next, David Miller
- <Possible follow-ups>
- [PATCH 00/15] Netfilter updates for net-next, Pablo Neira Ayuso
- [PATCH 06/15] netfilter: nft_limit: convert to token-based limiting at nanosecond granularity, Pablo Neira Ayuso
- [PATCH 07/15] netfilter: nft_limit: factor out shared code with per-byte limiting, Pablo Neira Ayuso
- [PATCH 09/15] netfilter: nft_limit: constant token cost per packet, Pablo Neira Ayuso
- [PATCH 11/15] netfilter: nfacct: per network namespace support, Pablo Neira Ayuso
- [PATCH 15/15] netfilter: nft_payload: work around vlan header stripping, Pablo Neira Ayuso
- [PATCH 14/15] netfilter: nf_conntrack: add efficient mark to zone mapping, Pablo Neira Ayuso
- [PATCH 12/15] netfilter: nf_conntrack: push zone object into functions, Pablo Neira Ayuso
- [PATCH 13/15] netfilter: nf_conntrack: add direction support for zones, Pablo Neira Ayuso
- [PATCH 10/15] netfilter: nft_limit: add per-byte limiting, Pablo Neira Ayuso
- [PATCH 05/15] netfilter: nft_limit: rename to nft_limit_pkts, Pablo Neira Ayuso
- [PATCH 08/15] netfilter: nft_limit: add burst parameter, Pablo Neira Ayuso
- =?y?q?=5BPATCH=2003/15=5D=20netfilter=3A=20factor=20out=20packet=20duplication=20for=20IPv4/IPv6?=, Pablo Neira Ayuso
- [PATCH 04/15] netfilter: nf_tables: add nft_dup expression, Pablo Neira Ayuso
- [PATCH 02/15] netfilter: xt_TEE: get rid of WITH_CONNTRACK definition, Pablo Neira Ayuso
- [PATCH 01/15] netfilter: nft_counter: convert it to use per-cpu counters, Pablo Neira Ayuso
- Re: [PATCH 00/15] Netfilter updates for net-next, David Miller
- [PATCH 00/15] Netfilter updates for net-next, Pablo Neira Ayuso
- [PATCH 01/15] netfilter: nft_counter: convert it to use per-cpu counters, Pablo Neira Ayuso
- [PATCH 15/15] netfilter: nft_payload: work around vlan header stripping, Pablo Neira Ayuso
- [PATCH 13/15] netfilter: nf_conntrack: add direction support for zones, Pablo Neira Ayuso
- [PATCH 14/15] netfilter: nf_conntrack: add efficient mark to zone mapping, Pablo Neira Ayuso
- [PATCH 12/15] netfilter: nf_conntrack: push zone object into functions, Pablo Neira Ayuso
- [PATCH 11/15] netfilter: nfacct: per network namespace support, Pablo Neira Ayuso
- [PATCH 10/15] netfilter: nft_limit: add per-byte limiting, Pablo Neira Ayuso
- [PATCH 09/15] netfilter: nft_limit: constant token cost per packet, Pablo Neira Ayuso
- [PATCH 08/15] netfilter: nft_limit: add burst parameter, Pablo Neira Ayuso
- =?y?q?=5BPATCH=2003/15=5D=20netfilter=3A=20factor=20out=20packet=20duplication=20for=20IPv4/IPv6?=, Pablo Neira Ayuso
- [PATCH 07/15] netfilter: nft_limit: factor out shared code with per-byte limiting, Pablo Neira Ayuso
- [PATCH 05/15] netfilter: nft_limit: rename to nft_limit_pkts, Pablo Neira Ayuso
- [PATCH 06/15] netfilter: nft_limit: convert to token-based limiting at nanosecond granularity, Pablo Neira Ayuso
- [PATCH 04/15] netfilter: nf_tables: add nft_dup expression, Pablo Neira Ayuso
- [PATCH 02/15] netfilter: xt_TEE: get rid of WITH_CONNTRACK definition, Pablo Neira Ayuso
- Re: [PATCH 00/15] Netfilter updates for net-next, David Miller
[PATCH V3 0/2] add mark target,
Zhang Chunyu
[PATCH 1/3] netlink: fix use after free in netlink_get_table(),
Patrick McHardy
[nft PATCH 1/3] src: expose delinearize/linearize structures and stmt_error(),
Arturo Borrero Gonzalez
[PATCH 0/4] netfilter: nf_tables: set transactions,
Patrick McHardy
[PATCH 0/6] netfilter: set extensions,
Patrick McHardy
[PATCH] ipvs: fix header inline net_ipvs function to work without CONFIG_IP_VS,
Rafał Miłecki
[PATCH 1/2] netfilter: nf_tables: nft_queue does not depend on x_tables,
Patrick McHardy
[PATCHv3 4/4] netfilter: bridge: rename br_parse_ip_options,
Bernhard Thaler
[PATCH] nft-test: don't use colors if output is not a tty,
Patrick McHardy
[PATCH V2 0/4] add mark target for arptables,
Zhang Chunyu
#include <net/ip_vs.h> without CONFIG_IP_VS (error: 'struct net' has no member named 'ipvs'),
Rafał Miłecki
[PATCH nf-next 0/2] xt_cgroups fix,
Daniel Borkmann
[PATCH nft] set_elem: convert flag value to inclusive-OR binops during delinearize, Patrick McHardy
[PATCH V2 -next] netfilter: Use LOGLEVEL_<FOO> defines,
Joe Perches
[PATCH libnftnl] src: restore static array with expression operations,
Pablo Neira Ayuso
Strange behaviour when adding rules with libiptc, Юрий Пухальский
Re: nft 0.4, crash on list,
Patrick McHardy
11th Netfilter Workshop coming up soon, Pablo Neira Ayuso
[PATCH nf-next] netfilter: ip6t_REJECT: check for IP6T_F_PROTO,
Pablo Neira Ayuso
[PATCH nf] netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set,
Pablo Neira Ayuso
[PATCH 0/2] netfilter: preparatory patches for set extensions,
Patrick McHardy
[PATCH 0/5] netfilter: nf_tables: assorted patches,
Patrick McHardy
[PATCH nf] netfilter: xt_TPROXY: fix invflags check in tproxy_tg6_check(), Pablo Neira Ayuso
[PATCH nf] netfilter: restore rule tracing via nfnetlink_log, Pablo Neira Ayuso
[PATCH v2] add systemd service file,
Jörg Thalheim
[PATCH V2] Add element count to hash headers, Eric B Munson
[nft PATCH] rule: fix chain details align indentations,
Arturo Borrero Gonzalez
[PATCH 4/4] netfilter: bridge: rename br_parse_ip_options and delete unneeded code,
Bernhard Thaler
[PATCH 3/4] netfilter: bridge: add mtu size reduction to ip6_fragment(), Bernhard Thaler
[PATCH nf-next] netfilter: bridge: kill nf_bridge_pad,
Florian Westphal
[PATCH nft] netlink: fix crash when adding new non-base chain, Pablo Neira Ayuso
Can't link C++ program to libipset,
Pavel Odintsov
[nft PATCH v2] rule: delete extra space in rule indentation,
Arturo Borrero Gonzalez
[PATCH nf-next] netfilter: nf_tables: consolidate error path of nf_tables_newtable(), Pablo Neira Ayuso
[nft PATCH] rule: delete extra space in rule indentation,
Arturo Borrero Gonzalez
[PATCH nft] evaluate: missing break; in str2hooknum(), Pablo Neira Ayuso
[PATCH nft v2] src: allow to specify the default policy for base chains, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: allow to change chain policy without hook if it exists, Pablo Neira Ayuso
[PATCH nft 1/3] src: expose table flags,
Pablo Neira Ayuso
[PATCH] Use stdlib uint* instead of u_int*,
Nathan McSween
[PATCH net-next] netfilter: Remove uses of seq_<foo> return values,
Joe Perches
[PATCH] libxt_tcp: manpage correction,
Jiri Popelka
[libnftnl PATCH 1/3] parser: Add operation not supported error message,
Alvaro Neira Ayuso
ipset: small series of fixes,
Sergey Popovich
ipset: Proposed improvements to the kernel code,
Sergey Popovich
Using kernel ip_tables headers in C++, Philipp Kerling
net: portid signedness and format string fixes,
Richard Weinberger
Re: netfilter: Fix potential crash in nft_hash walker, Pablo Neira Ayuso
[PATCH] ipset: propose rewording in manpage,
Neutron Soutmun
[PATCH lnf-ct 0/2] add mark event filter,
Ken-ichirou MATSUZAWA
[PATCH v2 nf-next 0/6] more bridge netfilter refactoring,
Florian Westphal
[nft PATCH 2/2 v4] src: add import command, Alvaro Neira Ayuso
[libnftnl PATCH 1/2 v2] ruleset: add nft_ruleset_ctx_free, Alvaro Neira Ayuso
[PATCH 02/22] netfilter: %pF is only for function pointers, Scott Wood
[PATCH] netfilter: Zero the tuple in nfnl_cthelper_parse_tuple(),
Ian Wilson
iptables at scale,
Glen Miner
[iptables PATCH 1/2] ebtables-compat: add a bridge-specific exit_error function,
Arturo Borrero Gonzalez
[iptables PATCH] ebtables-compat: add support for limit extension,
Arturo Borrero Gonzalez
[PATCH nf-next] netfilter: bridge: use rcu hook to resolve br_netfilter dependency,
Pablo Neira Ayuso
[nft PATCH v3 2/2] src: add import command,
Alvaro Neira Ayuso
[libnftnl PATCH 1/2] src: add nft_ruleset_ctx_free,
Alvaro Neira Ayuso
[PATCH -next,resend] netfilter: bridge: remove BRNF_STATE_BRIDGED flag,
Florian Westphal
[PATCH -next v2] netfilter: bridge: query conntrack about skb dnat,
Florian Westphal
[PATCH next] netfilter: fix sparse warnings in reject handling,
Florian Westphal
[nft PATCH] src: add tee statement support,
Arturo Borrero Gonzalez
[PATCH] netfilter: ipset: make ip_set_get_ip*_port to use skb_network_offset,
Alexander Drozdov
Re: Unique items, Ceraon Co.,Ltd
Help with appending data to packets and the best way to create a message nonce for cryptography, Sebastian Gomez
[PATCH 0/7] Netfilter/IPVS fixes for net,
Pablo Neira Ayuso
- [PATCH 2/7] netfilter: nf_tables: fix addition/deletion of elements from commit/abort, Pablo Neira Ayuso
- [PATCH 6/7] netfilter: nf_tables: fix userdata length overflow, Pablo Neira Ayuso
- [PATCH 7/7] netfilter: nf_tables: fix error handling of rule replacement, Pablo Neira Ayuso
- [PATCH 5/7] netfilter: nf_tables: check for overflow of rule dlen field, Pablo Neira Ayuso
- [PATCH 1/7] netfilter: nft_compat: don't truncate ethernet protocol type to u8, Pablo Neira Ayuso
- [PATCH 3/7] ipvs: add missing ip_vs_pe_put in sync code, Pablo Neira Ayuso
- [PATCH 4/7] netfilter: nf_tables: fix transaction race condition, Pablo Neira Ayuso
- Re: [PATCH 0/7] Netfilter/IPVS fixes for net, David Miller
- <Possible follow-ups>
- [PATCH 0/7] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
- [PATCH 0/7] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
[iptables PATCH v2 1/2] arptables-compat: add support for the CLASSIFY target,
Arturo Borrero Gonzalez
[PATCH net-next] netfilter: nf_tables: limit maximum table name length to 32 bytes,
Pablo Neira Ayuso
[PATCH net-next] netfilter: nf_tables: consolidate Kconfig options,
Pablo Neira Ayuso
[PATCH nf-next 0/8] netfilter: untangle bridge and bridge netfilter,
Florian Westphal
[iptables PATCH] arptables-compat: add support for the CLASSIFY target, Arturo Borrero Gonzalez
[PATCH 0/3] netfilter: nf_tables cleanups,
Patrick McHardy
[PATCH 0/3] netfilter: nf_tables fixes,
Patrick McHardy
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]