Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field, (continued)
  • Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field, Patrick McHardy
    • Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field, Pablo Neira Ayuso
      • Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field, Patrick McHardy
        • Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field, Pablo Neira Ayuso
          • Re: [PATCH 2/3] netfilter: nf_tables: check for overflow of rule dlen field, Patrick McHardy
  • [PATCH 3/3] netfilter: nf_tables: fix userdata length overflow, Patrick McHardy
  • Re: [PATCH 0/3] netfilter: nf_tables fixes, Pablo Neira Ayuso
• [iptables PATCH] ebtables-compat: support nflog extension, Arturo Borrero Gonzalez
  • Re: [iptables PATCH] ebtables-compat: support nflog extension, Pablo Neira Ayuso
• [nft PATCH v2] src: add import command, Alvaro Neira Ayuso
  • Re: [nft PATCH v2] src: add import command, Pablo Neira Ayuso
• [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it., Alvaro Neira Ayuso
  • Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it., Pablo Neira Ayuso
    • Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it., Álvaro Neira Ayuso
      • Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it., Pablo Neira Ayuso
        • Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it., Pablo Neira Ayuso
          • Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it., Álvaro Neira Ayuso
  • Re: [libnftnl PATCH] mxml: test if the root node name is initialized before to compare it., Pablo Neira Ayuso
• [libnftnl PATCH v2] ruleset: crash in path error when we build the xml tree, Alvaro Neira Ayuso
  • [libnftnl PATCH v10] example: : add nft-ruleset-parse-file., Alvaro Neira Ayuso
    • Re: [libnftnl PATCH v10] example: : add nft-ruleset-parse-file., Pablo Neira Ayuso
  • Re: [libnftnl PATCH v2] ruleset: crash in path error when we build the xml tree, Pablo Neira Ayuso
• [PATCH nf-next v3] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
  • Re: [PATCH nf-next v3] netfilter: x_tables: add context to know if extension runs from nft_compat, Arturo Borrero Gonzalez
• [PATCH nf-next v2] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: ipt_CLUSTERIP: deprecate it in favour of xt_cluster, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Patrick McHardy
    • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
      • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Patrick McHardy
        • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
          • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Patrick McHardy
            • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
              • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Patrick McHardy
  • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Florian Westphal
    • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Patrick McHardy
      • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
• nftables transaction semantics, Patrick McHardy
  • Re: nftables transaction semantics, Pablo Neira Ayuso
    • Re: nftables transaction semantics, Patrick McHardy
      • Re: nftables transaction semantics, Pablo Neira Ayuso
        • Re: nftables transaction semantics, Patrick McHardy
• [GIT PULL nf-next] IPVS Enhancements for v4.1, Simon Horman
  • [PATCH nf-next] ipvs: allow rescheduling of new connections when port reuse is detected, Simon Horman
  • Re: [GIT PULL nf-next] IPVS Enhancements for v4.1, Pablo Neira Ayuso
• NFLOG and Namespaces, nfnty
• [RFC] nft trace, Markus Kötter
  • nfnetlink_log and trace problems [was Re: [RFC] nft trace], Pablo Neira Ayuso
  • Re: [RFC] nft trace, Pablo Neira Ayuso
    • Re: [RFC] nft trace, Markus Koetter
• [PATCH] ebtables: Cache a copy of the v3.16 kernel headers in the ebtables tree, Pedro Alvarez
  • Re: [PATCH] ebtables: Cache a copy of the v3.16 kernel headers in the ebtables tree, Pablo Neira Ayuso
    • [PATCHv2] ebtables: Cache a copy of the v3.16 kernel headers in the ebtables tree, Pedro Alvarez
      • Re: [PATCHv2] ebtables: Cache a copy of the v3.16 kernel headers in the ebtables tree, Pablo Neira Ayuso
      • [PATCHv3] ebtables: Add kernel headers needed from v3.16, Pedro Alvarez
        • [PATCH] Add kernel headers needed from v3.16, Pedro Alvarez
          • Re: [PATCH] Add kernel headers needed from v3.16, Pablo Neira Ayuso
• [bug report] ct_sip_parse_numerical_param() error handling, Dan Carpenter
• [nft PATCH 0/3] fix a delinearization issue, Eric Leblond
  • [nft PATCH 3/3] netlink_delinearize: fix postprocessing, Eric Leblond
    • Re: [nft PATCH 3/3] netlink_delinearize: fix postprocessing, Patrick McHardy
  • [nft PATCH 1/3] regression: fix typo in README, Eric Leblond
  • [nft PATCH 2/3] regression: add test on counter related issue, Eric Leblond
• [libmnl] portability of getpagesize() in libmnl.h, Markus Teich
  • Re: [libmnl] portability of getpagesize() in libmnl.h, Pablo Neira Ayuso
    • [PATCH] header: use sysconf() instead of getpagesize(), Markus Teich
      • Re: [PATCH] header: use sysconf() instead of getpagesize(), Pablo Neira Ayuso
• [PATCH nft v2] main: display errors through stderr, Pablo Neira Ayuso
  • Re: [PATCH nft v2] main: display errors through stderr, Patrick McHardy
    • Re: [PATCH nft v2] main: display errors through stderr, Pablo Neira Ayuso
      • Re: [PATCH nft v2] main: display errors through stderr, Patrick McHardy
• [PATCH v4 0/2] nft hash resize fixes, Josh Hunt
  • [PATCH v4 2/2] rhashtable: require max_shift if grow_decision defined, Josh Hunt
  • [PATCH v4 1/2] nft_hash: define max_shift rhashtable parameter, Josh Hunt
    • Re: [PATCH v4 1/2] nft_hash: define max_shift rhashtable parameter, Daniel Borkmann
• [PATCH nft 1/2] src: complete meta priority support, Pablo Neira Ayuso
  • [PATCH nft 2/2] main: display errors and debugging through stderr, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2] main: display errors and debugging through stderr, Patrick McHardy
  • Re: [PATCH nft 1/2] src: complete meta priority support, Patrick McHardy
• [PATCH v3 0/2] nft hash resize fixes, Josh Hunt
  • [PATCH v3 1/2] rhashtable: require max_shift if grow_decision defined, Josh Hunt
  • [PATCH v3 2/2] nft_hash: define max_shift rhashtable parameter, Josh Hunt
  • Re: [PATCH v3 0/2] nft hash resize fixes, Nicolas Dichtel
    • Re: [PATCH v3 0/2] nft hash resize fixes, Josh Hunt
• [PATCH v2 0/2] nft hash resize fixes, Josh Hunt
  • [PATCH v2 2/2] nft_hash: define max_shift rhashtable parameter, Josh Hunt
    • Re: [PATCH v2 2/2] nft_hash: define max_shift rhashtable parameter, Thomas Graf
      • Re: [PATCH v2 2/2] nft_hash: define max_shift rhashtable parameter, Josh Hunt
  • [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined, Josh Hunt
    • Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined, Thomas Graf
    • Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined, David Miller
      • Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined, Daniel Borkmann
        • Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined, David Miller
          • Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined, Thomas Graf
            • Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined, David Miller
      • Re: [PATCH v2 1/2] rhashtable: require max_shift if grow_decision defined, Josh Hunt
• libnetfilter_conntrack API is not working, Sourabh Rudrawar
  • Re: libnetfilter_conntrack API is not working, Pablo Neira Ayuso
• [libnftnl PATCH v3] ruleset: fix crash if we free sets included in the set_list, Alvaro Neira Ayuso
  • [libnftnl PATCH] ruleset: crash in path error when we build the xml tree, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH] ruleset: crash in path error when we build the xml tree, Pablo Neira Ayuso
  • Re: [libnftnl PATCH v3] ruleset: fix crash if we free sets included in the set_list, Pablo Neira Ayuso
• Ottawa and slow hash-table resize, Paul E. McKenney
  • Re: Ottawa and slow hash-table resize, josh
    • Re: Ottawa and slow hash-table resize, Thomas Graf
      • Re: Ottawa and slow hash-table resize, Paul E. McKenney
        • Re: Ottawa and slow hash-table resize, David Miller
          • Re: Ottawa and slow hash-table resize, Paul E. McKenney
            • Re: Ottawa and slow hash-table resize, Thomas Graf
              • Re: Ottawa and slow hash-table resize, Patrick McHardy
                • RE: Ottawa and slow hash-table resize, David Laight
                  • Re: Ottawa and slow hash-table resize, Patrick McHardy
                • Re: Ottawa and slow hash-table resize, David Miller
                  • Re: Ottawa and slow hash-table resize, Thomas Graf
                    • Re: Ottawa and slow hash-table resize, David Miller
                      • Re: Ottawa and slow hash-table resize, josh
                        • Re: Ottawa and slow hash-table resize, Thomas Graf
                          • Re: Ottawa and slow hash-table resize, Herbert Xu
                            • Re: Ottawa and slow hash-table resize, Thomas Graf
                    • Re: Ottawa and slow hash-table resize, josh
                  • Re: Ottawa and slow hash-table resize, Herbert Xu
                    • Re: Ottawa and slow hash-table resize, Thomas Graf
  • Re: Ottawa and slow hash-table resize, Thomas Graf
    • Re: Ottawa and slow hash-table resize, Paul E. McKenney
  • Re: Ottawa and slow hash-table resize, Thomas Graf
    • Re: Ottawa and slow hash-table resize, Daniel Borkmann
      • Re: Ottawa and slow hash-table resize, Patrick McHardy
        • Re: Ottawa and slow hash-table resize, Josh Hunt
          • Re: Ottawa and slow hash-table resize, Patrick McHardy
            • Re: Ottawa and slow hash-table resize, David Miller
  • <Possible follow-ups>
  • Re: Ottawa and slow hash-table resize, Alexei Starovoitov
    • Re: Ottawa and slow hash-table resize, David Miller
    • Re: Ottawa and slow hash-table resize, Paul E. McKenney
  • Re: Ottawa and slow hash-table resize, Alexei Starovoitov
    • Re: Ottawa and slow hash-table resize, David Miller
• [iptables PATCH] libxt_quota: fix _save() invert syntax, Arturo Borrero Gonzalez
  • Re: [iptables PATCH] libxt_quota: fix _save() invert syntax, Pablo Neira Ayuso
• [GIT PULL] Second Round of IPVS Fixes for v3.20, Simon Horman
  • [PATCH] ipvs: add missing ip_vs_pe_put in sync code, Simon Horman
  • Re: [GIT PULL] Second Round of IPVS Fixes for v3.20, Pablo Neira Ayuso
• Re: [PATCH v2] net: Remove state argument from skb_find_text(), David Miller
• [PATCH v3] netfilter: nft_compat: don't truncate ethernet protocol type to u8, Arturo Borrero Gonzalez
  • Re: [PATCH v3] netfilter: nft_compat: don't truncate ethernet protocol type to u8, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort, Patrick McHardy
    • Re: [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort, Patrick McHardy
        • Re: [PATCH nf] netfilter: nf_tables: fix addition/deletion of elements from commit/abort, Pablo Neira Ayuso
• [PATCH] tests: regression: any/meta: revisit meta tests, Ana Rey Botello
  • Re: [PATCH] tests: regression: any/meta: revisit meta tests, Pablo Neira Ayuso
• iptables: add more test cases and minor bug fixes, Florian Westphal
  • [PATCH 1/7] extensions: remove MIRROR, Florian Westphal
    • Re: [PATCH 1/7] extensions: remove MIRROR, Jan Engelhardt
      • Re: [PATCH 1/7] extensions: remove MIRROR, Florian Westphal
      • Re: [PATCH 1/7] extensions: remove MIRROR, Pablo Neira Ayuso
  • [PATCH 2/7] extensions: remove SAME target, Florian Westphal
  • [PATCH 3/7] extensions: remove 'unclean' match, Florian Westphal
  • [PATCH 5/7] extensions: SNPT,DNPT: fix save/print output, Florian Westphal
  • [PATCH 4/7] extensions: add more test cases for iptables-test.py, Florian Westphal
  • [PATCH 6/7] extensions/libxt_recent.t: add test case for 3.19 regression, Florian Westphal
  • [PATCH 7/7] extensions: libip6t_dst: make inversion work, Florian Westphal
    • Re: [PATCH 7/7] extensions: libip6t_dst: make inversion work, Jan Engelhardt
      • Re: [PATCH 7/7] extensions: libip6t_dst: make inversion work, Florian Westphal
        • Re: [PATCH 7/7] extensions: libip6t_dst: make inversion work, Jan Engelhardt
  • Re: iptables: add more test cases and minor bug fixes, Pablo Neira Ayuso
  • Re: iptables: add more test cases and minor bug fixes, Florian Westphal
• Re: [PATCH] net: Remove state argument from skb_find_text(), Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: [PATCH] net: Remove state argument from skb_find_text(), David Miller
• [PATCH v2] iptables-compat: unset context flags in netlink delinearize step, Pablo Neira Ayuso
  • Re: [PATCH v2] iptables-compat: unset context flags in netlink delinearize step, Arturo Borrero Gonzalez
• [PATCH] iptables-compat: unset context flags in netlink delinearize step, Pablo Neira Ayuso
• [PATCH RESEND] Add element count to hash headers, Eric B Munson
  • Re: [PATCH RESEND] Add element count to hash headers, Josh Hunt
    • Re: [PATCH RESEND] Add element count to hash headers, Eric B Munson
    • Re: [PATCH RESEND] Add element count to hash headers, Jozsef Kadlecsik
      • Re: [PATCH RESEND] Add element count to hash headers, Eric B Munson
        • Re: [PATCH RESEND] Add element count to hash headers, Jozsef Kadlecsik
          • Re: [PATCH RESEND] Add element count to hash headers, Eric B Munson
• nft & notrack, Oleg
• almost(?) hole in nf_conntrack_sip, Alexey Dobriyan
• [PATCH 1/2] netfilter: nf_tables: fix refcount leak when jump to chain is used, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: nf_tables: don't uninitialize element from core, Pablo Neira Ayuso
• [PATCH nft] rule: fix object ordering via nft -f, Pablo Neira Ayuso
• [PATCH libnftnl] src: split internal.h is smaller files, Pablo Neira Ayuso
• [PATCH RESEND] Add element count to bitmap and hash headers, Eric B Munson
  • Re: [PATCH RESEND] Add element count to bitmap and hash headers, Pablo Neira Ayuso
    • Re: [PATCH RESEND] Add element count to bitmap and hash headers, Jozsef Kadlecsik
      • Re: [PATCH RESEND] Add element count to bitmap and hash headers, Pablo Neira Ayuso
        • Re: [PATCH RESEND] Add element count to bitmap and hash headers, Eric B Munson
        • Re: [PATCH RESEND] Add element count to bitmap and hash headers, Eric B Munson
• [libnftnl PATCH v2] ruleset: fix crash if we free sets included in the set_list, Alvaro Neira Ayuso
  • Re: [libnftnl PATCH v2] ruleset: fix crash if we free sets included in the set_list, Pablo Neira Ayuso
    • Re: [libnftnl PATCH v2] ruleset: fix crash if we free sets included in the set_list, Pablo Neira Ayuso
      • Re: [libnftnl PATCH v2] ruleset: fix crash if we free sets included in the set_list, Álvaro Neira Ayuso
• conntrackd refuses to work on interface with '_' in it's name, AZ
  • Re: conntrackd refuses to work on interface with '_' in it's name, Paul Robert Marino
  • Re: conntrackd refuses to work on interface with '_' in it's name, Pablo Neira Ayuso
• [PATCH net-next] netfilter: Remove uses of return value of seq_printf/puts/putc, Joe Perches
  • Re: [PATCH net-next] netfilter: Remove uses of return value of seq_printf/puts/putc, Joe Perches
  • Re: [PATCH net-next] netfilter: Remove uses of return value of seq_printf/puts/putc, Joe Perches
• [PATCH 36/45] include/uapi/linux/netfilter.h: include in.h and in6.h, Mikko Rapeli
• [PATCH 44/45] nf_conntrack_tuple_common.h: include linux/types.h and linux/netfilter.h, Mikko Rapeli
• [PATCH 43/45] include/uapi/linux/netfilter_bridge.h: include if.h, Mikko Rapeli
  • Re: [PATCH 43/45] include/uapi/linux/netfilter_bridge.h: include if.h, Jan Engelhardt
    • Re: [PATCH 43/45] include/uapi/linux/netfilter_bridge.h: include if.h, Mikko Rapeli
• [PATCH iptables] xtables-compat: remove unused fields from bridge and arp families, Pablo Neira Ayuso
• [libnftnl PATCH] ruleset: fix crash if we free sets included in the set_list, Alvaro Neira Ayuso
  • [libnftnl PATCH v9] example: Parse and create netlink message using the new parsing functions., Alvaro Neira Ayuso
    • Re: [libnftnl PATCH v9] example: Parse and create netlink message using the new parsing functions., Pablo Neira Ayuso
  • Re: [libnftnl PATCH] ruleset: fix crash if we free sets included in the set_list, Pablo Neira Ayuso
• [PATCH -next] netfilter: bridge: rework reject handling, Florian Westphal
  • Re: [PATCH -next] netfilter: bridge: rework reject handling, Pablo Neira Ayuso
• [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid, Florian Westphal
  • Re: [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid, Pablo Neira Ayuso
    • Re: [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid, Florian Westphal
      • Re: [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid, Pablo Neira Ayuso
  • Re: [PATCH -next v3] netfilter: reject: don't send icmp error if csum is invalid, Pablo Neira Ayuso
• [iptables PATCH] arpt-compat: mangle extension support, Arturo Borrero Gonzalez
  • Re: [iptables PATCH] arpt-compat: mangle extension support, Pablo Neira Ayuso
• [PATCH] netfilter: nft_compat: add support for arptables extensions, Arturo Borrero Gonzalez
  • Re: [PATCH] netfilter: nft_compat: add support for arptables extensions, Pablo Neira Ayuso
• [PATCH net] netfilter: xt_socket: fix a stack corruption bug, Eric Dumazet
  • Re: [PATCH net] netfilter: xt_socket: fix a stack corruption bug, Pablo Neira Ayuso
• Some help to fix 'ipac-ng', a iptables-based accounting software..., Marco Gaiarin
• [PATCH] netfilter: xt_recent: don't reject rule if new hitcount exceeds table max, Florian Westphal
  • Re: [PATCH] netfilter: xt_recent: don't reject rule if new hitcount exceeds table max, Pablo Neira Ayuso
• softlockups when trying to restore an nft set of 1M entries, Josh Hunt
  • Re: softlockups when trying to restore an nft set of 1M entries, Cong Wang
  • Re: softlockups when trying to restore an nft set of 1M entries, Thomas Graf
• [arpt-compat PATCH] arptables-compat: add mangle target extension, Arturo Borrero Gonzalez
• [PATCH] netfilter: nft_compat: fix module refcount underflow, Pablo Neira Ayuso
• [PATCH v2] netfilter: nft_compat: fix sparse warning, Arturo Borrero Gonzalez
  • Re: [PATCH v2] netfilter: nft_compat: fix sparse warning, Pablo Neira Ayuso
• [iptables PATCH v2] ebtables-compat: parser cleanups, Arturo Borrero Gonzalez
• [iptables PATCH] ebtables-compat: parser cleanups, Arturo Borrero Gonzalez
  • Re: [iptables PATCH] ebtables-compat: parser cleanups, Pablo Neira Ayuso
• xt_recent fails with kernel 3.19.0, Chris Vine
  • Re: xt_recent fails with kernel 3.19.0, Chris Vine
    • Re: xt_recent fails with kernel 3.19.0, Chris Vine
      • Re: xt_recent fails with kernel 3.19.0, Florian Westphal
        • Re: xt_recent fails with kernel 3.19.0, Florian Westphal
          • Re: xt_recent fails with kernel 3.19.0, Chris Vine
            • Re: xt_recent fails with kernel 3.19.0, Florian Westphal
              • Re: xt_recent fails with kernel 3.19.0, Chris Vine
                • Re: xt_recent fails with kernel 3.19.0, Florian Westphal
                  • Re: xt_recent fails with kernel 3.19.0, Chris Vine
• [PATCH] netfilter: nft_compat: fix sparse warning, Arturo Borrero Gonzalez
  • Re: [PATCH] netfilter: nft_compat: fix sparse warning, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nft_compat: fix sparse warning, Arturo Borrero Gonzalez
      • Re: [PATCH] netfilter: nft_compat: fix sparse warning, Pablo Neira Ayuso
• Re: xt_recent broken in kernel 3.19.0 + PATCH, Cong Wang
  • Re: xt_recent broken in kernel 3.19.0 + PATCH, Florian Westphal
    • Re: xt_recent broken in kernel 3.19.0 + PATCH, Chris Vine
      • Re: xt_recent broken in kernel 3.19.0 + PATCH, Chris Vine
        • Re: xt_recent broken in kernel 3.19.0 + PATCH, Chris Vine
• [libnftnl PATCH v2] rule: don't release the tree parameter in the function nft_jansson_parse_rule, Alvaro Neira Ayuso
  • [libnftnl PATCH v2] ruleset: fix a leak when we use the set lists, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH v2] ruleset: fix a leak when we use the set lists, Pablo Neira Ayuso
      • Re: [libnftnl PATCH v2] ruleset: fix a leak when we use the set lists, Álvaro Neira Ayuso
  • Re: [libnftnl PATCH v2] rule: don't release the tree parameter in the function nft_jansson_parse_rule, Pablo Neira Ayuso
• [RFC PATCH] src/expr: add new nft_tee expression, Arturo Borrero Gonzalez
• [RFC PATCH 1/2] netfilter: refactor xt_TEE code, Arturo Borrero Gonzalez
  • [RFC PATCH 2/2] netfilter: nf_tables: add nft_tee expression, Arturo Borrero Gonzalez
• [ANNOUNCE] 11th Netfilter Workshop in Budapest, Hungary, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: fix boolreturn.cocci warnings, kbuild test robot
  • Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings, Jozsef Kadlecsik
  • Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: ipset: fix boolreturn.cocci warnings, Jozsef Kadlecsik
• [libnftnl PATCH] rule: don't release the tree parameter in the function nft_jansson_parse_rule, Alvaro Neira Ayuso
  • [libnftnl PATCH] ruleset: fix a leak when we use the set lists, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH] ruleset: fix a leak when we use the set lists, Pablo Neira Ayuso
  • Re: [libnftnl PATCH] rule: don't release the tree parameter in the function nft_jansson_parse_rule, Pablo Neira Ayuso
    • Re: [libnftnl PATCH] rule: don't release the tree parameter in the function nft_jansson_parse_rule, Álvaro Neira Ayuso
• NetDev 0.1 online registration deadline Feb 12 (Thursday), Richard Guy Briggs
• [nft PATCH] src: add import operation, Alvaro Neira Ayuso
  • Re: [nft PATCH] src: add import operation, Álvaro Neira Ayuso
• [GIT PULL nf-next] IPVS Enhancements for v3.20, Simon Horman
  • [PATCH nf-next] ipvs: use 64-bit rates in stats, Simon Horman
  • Re: [GIT PULL nf-next] IPVS Enhancements for v3.20, Pablo Neira Ayuso
    • Re: [GIT PULL nf-next] IPVS Enhancements for v3.20, Simon Horman
• [PATCH 0/2] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: nft_lookup: add missing attribute validation for NFTA_LOOKUP_SET_ID, Pablo Neira Ayuso
  • [PATCH 1/2] netfilter: nft_compat: add ebtables support, Pablo Neira Ayuso
  • Re: [PATCH 0/2] Netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 0/2] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 1/2] netfilter: remove deprecation warnings from uapi headers., Pablo Neira Ayuso
    • [PATCH 2/2] netfilter: nft_bitwise: Adjust parentheses to fix memcmp size argument, Pablo Neira Ayuso
    • Re: [PATCH 0/2] Netfilter updates for net-next, David Miller
• [PATCH 0/3] nft hash set expansion fixes, Josh Hunt
  • [PATCH 1/3] rhashtable: require max_shift definition, Josh Hunt
    • Re: [PATCH 1/3] rhashtable: require max_shift definition, Thomas Graf
      • Re: [PATCH 1/3] rhashtable: require max_shift definition, Daniel Borkmann
        • Re: [PATCH 1/3] rhashtable: require max_shift definition, Josh Hunt
          • Re: [PATCH 1/3] rhashtable: require max_shift definition, Daniel Borkmann
            • Re: [PATCH 1/3] rhashtable: require max_shift definition, Thomas Graf
              • Re: [PATCH 1/3] rhashtable: require max_shift definition, Patrick McHardy
                • Re: [PATCH 1/3] rhashtable: require max_shift definition, Josh Hunt
  • [PATCH 2/3] nft_hash: define max_shift rhashtable param, Josh Hunt
  • [PATCH 3/3] nft_hash: introduce init_size set parameter, Josh Hunt
• [libnftnl PATCH] buffer: fix a bug in nft_buf_close passing the tag to close the xml elements., Alvaro Neira Ayuso
  • [libnftnl PATCH 1/4 v8] src: add command tag in json/xml export support, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/4 v8] src: add support to import json/xml with the new command syntax, Alvaro Neira Ayuso
  • [libnftnl PATCH 3/4 v8] example: Parse and create netlink message using the new parsing functions., Alvaro Neira Ayuso
  • [libnftnl PATCH 4/4 v8] test: update json/xml tests to the new syntax, Alvaro Neira Ayuso
• [ebtables-compat PATCH 1/2] ebtables-compat: add watchers support, Arturo Borrero Gonzalez
  • [ebtables-compat PATCH 2/2] ebtables-compat: add log watcher extension, Arturo Borrero Gonzalez
  • Re: [ebtables-compat PATCH 1/2] ebtables-compat: add watchers support, Pablo Neira Ayuso
• [GIT PULL nf] IPVS Fixes for v3.20, Simon Horman
  • [PATCH nf] ipvs: fix inability to remove a mixed-family RS, Simon Horman
  • Re: [GIT PULL nf] IPVS Fixes for v3.20, Pablo Neira Ayuso
    • Re: [GIT PULL nf] IPVS Fixes for v3.20, Simon Horman
• nft hash set expansion problem, Josh Hunt
  • Re: nft hash set expansion problem, Daniel Borkmann
    • Re: nft hash set expansion problem, Josh Hunt
      • Re: nft hash set expansion problem, Thomas Graf
        • Re: nft hash set expansion problem, Josh Hunt
• [libnftnl PATCH 1/4 v7] src: add command tag in json/xml export support, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/4 v7] src: add support to import json/xml with the new command syntax, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 2/4 v7] src: add support to import json/xml with the new command syntax, Pablo Neira Ayuso
  • [libnftnl PATCH 3/4 v7] example: Parse and create netlink message using the new parsing functions., Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 3/4 v7] example: Parse and create netlink message using the new parsing functions., Pablo Neira Ayuso
  • [libnftnl PATCH 4/4 v7] test: update json/xml tests to the new syntax, Alvaro Neira Ayuso
  • Re: [libnftnl PATCH 1/4 v7] src: add command tag in json/xml export support, Pablo Neira Ayuso
• [PATCH 1/3] Add revision field for xt_entry_target, Gao feng
  • [PATCH 3/3] Update the manpage for MARK target, Gao feng
  • [PATCH 2/3] Add MARK target for arptables, Gao feng
    • Re: [PATCH 2/3] Add MARK target for arptables, Pablo Neira Ayuso
      • Re: [PATCH 2/3] Add MARK target for arptables, Gao feng
  • Re: [PATCH 1/3] Add revision field for xt_entry_target, Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: [PATCH 1/3] Add revision field for xt_entry_target, Zhang, Chunyu
    • Re: [PATCH 1/3] Add revision field for xt_entry_target, Pablo Neira Ayuso
      • Re: Re: [PATCH 1/3] Add revision field for xt_entry_target, Zhang, Chunyu
        • Re: Re: [PATCH 1/3] Add revision field for xt_entry_target, Pablo Neira Ayuso
          • Re: Re: [PATCH 1/3] Add revision field for xt_entry_target, Zhang, Chunyu
• NetDev 0.1 final schedule and new sponsor update, Richard Guy Briggs
• [v5 nft] src: Add named counters support, Ana Rey Botello
• [libnftnl PATCH 1/4 v6] src: add command tag in json/xml export support, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/4 v6] src: add support to import json/xml with the new command syntax, Alvaro Neira Ayuso
  • [libnftnl PATCH 3/4 v6] example: Parse and create netlink message using the new parsing functions., Alvaro Neira Ayuso
  • [libnftnl PATCH 4/4 v6] test: update json/xml tests to the new syntax, Alvaro Neira Ayuso
• [ANNOUNCE] netdev0.1 netfilter BoF, Josh Hunt
  • Re: [ANNOUNCE] netdev0.1 netfilter BoF, Patrick McHardy
• [v4 nft 1/2] src: Add named counters support, Ana Rey Botello
  • Message not available
    • [v4 nft 2/2] tests: regression: Add counters support, Ana Rey Botello
• [v4 libnftnl 1/2] src: Add named counters support, Ana Rey Botello
  • Message not available
    • [v4 libnftnl 2/2] tests: add unit tests for counters, Ana Rey Botello
• [v4 nf 0/5] Named counter objects support in nft, Ana Rey Botello
  • [v4 nf 1/1] netfilter: add named counters support, Ana Rey Botello
  • Re: [v4 nf 0/5] Named counter objects support in nft, Patrick McHardy
    • Re: [v4 nf 0/5] Named counter objects support in nft, Ana Rey
• Re: nft iptable-compat and TCPMSS target, Pablo Neira Ayuso
• [ebtables-compat PATCH v3] ebtables-compat: add mark target extension, Arturo Borrero Gonzalez
• [ebtables-compat PATCH] ebtables-compat: call extensions final checks, Arturo Borrero Gonzalez
• [libnftnl PATCH 1/4 v3] src: add command tag in json/xml export support, Alvaro Neira Ayuso
  • [libnftnl PATCH 3/4 v5] example: Parse and create netlink message using the new parsing functions., Alvaro Neira Ayuso
  • [libnftnl PATCH 2/4 v3] src: add support to import json/xml with the new command syntax, Alvaro Neira Ayuso
  • [libnftnl PATCH 4/4 v3] test: update json/xml tests to the new syntax, Alvaro Neira Ayuso
• [PATCH] Fix setting labels in updates., Jarno Rajahalme
• [PATCH] meta: register pkttype_type datatype, Pablo Neira Ayuso
• [PATCH V2 next] netfilter: reject: don't send icmp error if packet has invalid checksum, Florian Westphal
• [PATCH 0/4] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH 1/4] netfilter: nf_tables: validate hooks in NAT expressions, Pablo Neira Ayuso
  • [PATCH 3/4] ipvs: rerouting to local clients is not needed anymore, Pablo Neira Ayuso
  • [PATCH 4/4] netfilter: nf_tables: fix leaks in error path of nf_tables_newchain(), Pablo Neira Ayuso
  • [PATCH 2/4] netfilter: nf_tables: disable preemption when restoring chain counters, Pablo Neira Ayuso
  • Re: [PATCH 0/4] Netfilter/IPVS fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 0/4] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: nft_compat: fix module refcount underflow, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: xt_recent: don't reject rule if new hitcount exceeds table max, Pablo Neira Ayuso
    • [PATCH 1/4] ipvs: fix inability to remove a mixed-family RS, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: xt_socket: fix a stack corruption bug, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter/IPVS fixes for net, David Miller
  • [PATCH 0/4] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] ipvs: defer hook registration to avoid leaks, Pablo Neira Ayuso
    • [PATCH 2/4] ipvs: fix tinfo memory leak in start_sync_thread, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: ctnetlink: Fix regression in conntrack entry deletion, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: Fix remainder of pseudo-header protocol 0, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter/IPVS fixes for net, David Miller
• [v3 nf] netfilter: add counters support, Ana Rey Botello
  • Re: [v3 nf] netfilter: add counters support, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix leaks in error path of nf_tables_newchain(), Pablo Neira Ayuso
• [libnftnl PATCH 2/4 v3] src: add support to import json/xml with the new syntax, Alvaro Neira Ayuso
• NetDev 0.1 Preliminary schedule posted, Jamal Hadi Salim
• [libnftnl PATCH 1/4 v2] src: add command tag in json/xml export support, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/4 v2] src: add support to import json/xml with the new syntax, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 2/4 v2] src: add support to import json/xml with the new syntax, Pablo Neira Ayuso
    • Re: [libnftnl PATCH 2/4 v2] src: add support to import json/xml with the new syntax, Pablo Neira Ayuso
  • [libnftnl PATCH 3/4 v4] example: Parse and create netlink message using the new parsing functions., Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 3/4 v4] example: Parse and create netlink message using the new parsing functions., Pablo Neira Ayuso
  • [libnftnl PATCH 4/4 v2] test: update json/xml tests to the new syntax, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 4/4 v2] test: update json/xml tests to the new syntax, Pablo Neira Ayuso
  • Re: [libnftnl PATCH 1/4 v2] src: add command tag in json/xml export support, Pablo Neira Ayuso
• [ebtables-compat PATCH] extensions: cleanup commented code in ebtables-compat extensions, Arturo Borrero Gonzalez
  • Re: [ebtables-compat PATCH] extensions: cleanup commented code in ebtables-compat extensions, Pablo Neira Ayuso
• [ebtables-compat PATCH v2] ebtables-compat: add mark_m match extension, Arturo Borrero Gonzalez
  • Re: [ebtables-compat PATCH v2] ebtables-compat: add mark_m match extension, Pablo Neira Ayuso
• [PATCH 0/9 WIP] nf_tables: set extensions and dynamic updates, Patrick McHardy
  • [PATCH 1/9] rhashtable: simplify rhashtable_remove(), Patrick McHardy
    • Re: [PATCH 1/9] rhashtable: simplify rhashtable_remove(), Thomas Graf
  • [PATCH 8/9] netfilter: nft_lookup: add missing attribute validation for NFTA_LOOKUP_SET_ID, Patrick McHardy
  • [PATCH 9/9] netfilter: nf_tables: add support for dynamic set updates, Patrick McHardy
    • Re: [PATCH 9/9] netfilter: nf_tables: add support for dynamic set updates, Herbert Xu
      • Re: [PATCH 9/9] netfilter: nf_tables: add support for dynamic set updates, Patrick McHardy
        • Re: [PATCH 9/9] netfilter: nf_tables: add support for dynamic set updates, Herbert Xu
          • Re: [PATCH 9/9] netfilter: nf_tables: add support for dynamic set updates, Herbert Xu
  • [PATCH 7/9] netfilter: nft_hash: add support for timeouts, Patrick McHardy
    • Re: [PATCH 7/9] netfilter: nft_hash: add support for timeouts, Herbert Xu
      • Re: [PATCH 7/9] netfilter: nft_hash: add support for timeouts, Patrick McHardy
  • [PATCH 6/9] netfilter: nf_tables: add set timeout support, Patrick McHardy
  • [PATCH 5/9] netfilter: nf_tables: convert hash and rbtree to set extensions, Patrick McHardy
  • [PATCH 4/9] netfilter: nf_tables: add set extensions, Patrick McHardy
  • [PATCH 2/9] nftables: reject NFT_SET_ELEM_INTERVAL_END flag for non-interval sets, Patrick McHardy
    • Re: [PATCH 2/9] nftables: reject NFT_SET_ELEM_INTERVAL_END flag for non-interval sets, Pablo Neira Ayuso
      • Re: [PATCH 2/9] nftables: reject NFT_SET_ELEM_INTERVAL_END flag for non-interval sets, Patrick McHardy
        • Re: [PATCH 2/9] nftables: reject NFT_SET_ELEM_INTERVAL_END flag for non-interval sets, Pablo Neira Ayuso
  • [PATCH 3/9] nftables: nft_rbtree: fix locking, Patrick McHardy
    • Re: [PATCH 3/9] nftables: nft_rbtree: fix locking, Pablo Neira Ayuso
• [GIT PULL nf] IPVS Fixes for v3.19, Simon Horman
  • [PATCH] ipvs: rerouting to local clients is not needed anymore, Simon Horman
  • Re: [GIT PULL nf] IPVS Fixes for v3.19, Pablo Neira Ayuso
  • Re: [GIT PULL nf] IPVS Fixes for v3.19, Pablo Neira Ayuso
• [nf-next PATCH v2] netfilter: nft_compat: add ebtables support, Arturo Borrero Gonzalez
  • Re: [nf-next PATCH v2] netfilter: nft_compat: add ebtables support, Pablo Neira Ayuso
• [ebtables-compat PATCH v2] ebtables-compat: add mark target extension, Arturo Borrero Gonzalez
• [nf-next PATCH] netfilter: nft_compat: translate ebtables verdicts, Arturo Borrero Gonzalez
  • Re: [nf-next PATCH] netfilter: nft_compat: translate ebtables verdicts, Pablo Neira Ayuso
• [ebtables-compat PATCH 1/2] libxtables: search first for AF-specific extension, Arturo Borrero Gonzalez
  • [ebtables-compat PATCH 2/2] ebtables-compat: add mark target extension, Arturo Borrero Gonzalez
    • Re: [ebtables-compat PATCH 2/2] ebtables-compat: add mark target extension, Pablo Neira Ayuso
    • Re: [ebtables-compat PATCH 2/2] ebtables-compat: add mark target extension, Pablo Neira Ayuso
      • Re: [ebtables-compat PATCH 2/2] ebtables-compat: add mark target extension, Arturo Borrero Gonzalez
  • Re: [ebtables-compat PATCH 1/2] libxtables: search first for AF-specific extension, Pablo Neira Ayuso
• [PATCH next] netfilter: reject: don't send icmp error if packet has invalid checksum, Florian Westphal
  • Re: [PATCH next] netfilter: reject: don't send icmp error if packet has invalid checksum, Pablo Neira Ayuso
    • Re: [PATCH next] netfilter: reject: don't send icmp error if packet has invalid checksum, Florian Westphal
    • Re: [PATCH next] netfilter: reject: don't send icmp error if packet has invalid checksum, Florian Westphal
      • Re: [PATCH next] netfilter: reject: don't send icmp error if packet has invalid checksum, Pablo Neira Ayuso
        • Re: [PATCH next] netfilter: reject: don't send icmp error if packet has invalid checksum, Florian Westphal
• NetDev 0.1 Schedule delay update, Jamal Hadi Salim
• I want to help. Pointers?, Ander Juaristi Alamos
• [nf v2 0/6] Accounting objects support in nft, Ana Rey Botello
  • [nf v2 1/2] netfilter: Rename from nft_counter to nft_counter_priv, Ana Rey Botello
  • [nf v2 2/2] netfilter: named counter: add support to counters in nftables, Ana Rey Botello
  • Message not available
    • [libnftnl v2 1/2] src: Add counters support, Ana Rey Botello
  • Message not available
    • [nft v2 2/2] tests: regression: Add counters support, Ana Rey Botello
  • Message not available
    • [nft v2 1/2] src: Add the accounter support, Ana Rey Botello
  • Message not available
    • [libnftnl v2 2/2] tests: add unit tests for counters, Ana Rey Botello
• [nft_compat PATCH v3] nft_compat: adds support for ebtables match/target, Giuseppe Longo
• NetDev 0.1 conference post-CFP deadline weekly update, Richard Guy Briggs
• [libnftnl PATCH 4/5 v3] example: Parse and create netlink message using the new parsing functions., Alvaro Neira Ayuso
• [libnftnl PATCH 4/5 v2] example: Parse and create netlink message using the new parsing functions., Alvaro Neira Ayuso
• [PATCH nf] netfilter: nf_tables: disable preemption when restoring chain counters, Pablo Neira Ayuso
• Sad news - our Netfilter collegue Holger Eitzenberger passed away, Pablo Neira Ayuso
• [libnftnl PATCH] set: refactor code in json parse function, Alvaro Neira Ayuso
  • [libnftnl PATCH 1/5] src: add command tag in json/xml export support, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/5] src: add support to import json/xml with the new syntax, Alvaro Neira Ayuso
  • [libnftnl PATCH 3/5] ruleset: consolidate code in json/xml import support, Alvaro Neira Ayuso
  • [libnftnl PATCH 4/5] example: Parse and create netlink message using the new parsing functions., Alvaro Neira Ayuso
  • [libnftnl PATCH 5/5] test: update json/xml tests to the new syntax, Alvaro Neira Ayuso
• Funny iptables -L output with 0.0.0.3 netmask, Patrick Schaaf
  • Re: Funny iptables -L output with 0.0.0.3 netmask, Jan Engelhardt
    • Re: Funny iptables -L output with 0.0.0.3 netmask, Patrick Schaaf
• [ebtables-compat PATCH] ebtables-compat: add mark_m match extension, Arturo Borrero Gonzalez
• [PATCH] netfilter: Don't hide NETFILTER_XT_MATCH_ADDRTYPE behind NETFILTER_ADVANCED, Anton Blanchard
  • Re: [PATCH] netfilter: Don't hide NETFILTER_XT_MATCH_ADDRTYPE behind NETFILTER_ADVANCED, Pablo Neira Ayuso
• [PATCH 0/3 net-next] rhashtable: Notify on resize to allow signaling interrupted dumps, Thomas Graf
  • [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
    • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Patrick McHardy
      • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
        • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Patrick McHardy
          • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
            • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
              • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
                • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
                  • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
                    • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
                    • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Patrick McHardy
              • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
                • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
                  • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
                    • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
                      • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
                        • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
                          • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
                            • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
                              • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
                      • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
                        • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Patrick McHardy
                          • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
                            • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Patrick McHardy
                              • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
                                • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Patrick McHardy
                • RE: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, David Laight
      • RE: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, David Laight
        • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Thomas Graf
      • Re: [PATCH 3/3] netlink: Lock out table resizes while dumping Netlink sockets, Herbert Xu
  • [PATCH 2/3] netlink: Mark dumps as inconsistent which have been interrupted by a resize, Thomas Graf
    • Re: [PATCH 2/3] netlink: Mark dumps as inconsistent which have been interrupted by a resize, Ying Xue
      • Re: [PATCH 2/3] netlink: Mark dumps as inconsistent which have been interrupted by a resize, Thomas Graf
        • Re: [PATCH 2/3] netlink: Mark dumps as inconsistent which have been interrupted by a resize, Herbert Xu
          • Re: [PATCH 2/3] netlink: Mark dumps as inconsistent which have been interrupted by a resize, Patrick McHardy
            • Re: [PATCH 2/3] netlink: Mark dumps as inconsistent which have been interrupted by a resize, Herbert Xu
              • Re: [PATCH 2/3] netlink: Mark dumps as inconsistent which have been interrupted by a resize, Patrick McHardy
          • [PATCH 0/2] rhashtable: Add walk iterator primitives and use them in netlink, Herbert Xu
            • [PATCH 2/2] netlink: Use rhashtable walk iterator, Herbert Xu
            • [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
              • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Thomas Graf
                • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
              • RE: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, David Laight
                • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                  • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, David Miller
                    • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                      • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                        • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Thomas Graf
                          • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                            • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Thomas Graf
                              • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                                • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Thomas Graf
                                  • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                                    • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Thomas Graf
                                      • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                                        • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, David Miller
                                          • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                                    • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Patrick McHardy
                                      • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                                        • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Patrick McHardy
                                          • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                                            • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Patrick McHardy
                  • RE: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, David Laight
                    • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
            • [PATCH 0/2] rhashtable: Add walk iterator primitives and use them in netlink, Herbert Xu
              • [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                • Re: [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Thomas Graf
              • [PATCH 2/2] netlink: Use rhashtable walk iterator, Herbert Xu
                • Re: [PATCH 2/2] netlink: Use rhashtable walk iterator, Thomas Graf
              • Re: [PATCH 0/2] rhashtable: Add walk iterator primitives and use them in netlink, David Miller
                • [PATCH 0/2] rhashtable: Add walk iterator primitives and use them in netlink, Herbert Xu
                  • [PATCH 1/2] rhashtable: Introduce rhashtable_walk_*, Herbert Xu
                  • [PATCH 2/2] netlink: Use rhashtable walk iterator, Herbert Xu
                  • netfilter: Use rhashtable walk iterator, Herbert Xu
                    • Re: netfilter: Use rhashtable walk iterator, Patrick McHardy
                    • Re: netfilter: Use rhashtable walk iterator, David Miller
                  • Re: [PATCH 0/2] rhashtable: Add walk iterator primitives and use them in netlink, David Miller
  • [PATCH 1/3] rhashtable: Provide notifier for deferred resizes, Thomas Graf
• [nft_compat PATCH v2] nft_compat: add support for ebtables matches/targets, Giuseppe Longo
• [PATCH iptables] iptables: use flock() instead of abstract unix sockets, Pablo Neira Ayuso
  • Re: [PATCH iptables] iptables: use flock() instead of abstract unix sockets, Lennart Poettering
  • Re: [PATCH iptables] iptables: use flock() instead of abstract unix sockets, Phil Oester
• NetDev 0.1 conference new proposals accepted + misc updates, Jamal Hadi Salim
• [ebtables-compat PATCH 1/7] include: cache copy of Linux header uapi/linux/netfilter_bridge/ebt_802_3.h, Arturo Borrero Gonzalez
  • [ebtables-compat PATCH 2/7] ebtables-compat: add nft rule compat information to bridge rules, Arturo Borrero Gonzalez
  • [ebtables-compat PATCH 3/7] ebtables-compat: prevent options overwrite, Arturo Borrero Gonzalez
  • [ebtables-compat PATCH 4/7] ebtables-compat: prevent same matches to be included multiple times, Arturo Borrero Gonzalez
  • [ebtables-compat PATCH 5/7] ebtables-compat: include rule counters in ebtables rules, Arturo Borrero Gonzalez
  • [ebtables-compat PATCH 6/7] ebtables-compat: fix nft payload bases, Arturo Borrero Gonzalez
  • [ebtables-compat PATCH 7/7] ebtables-compat: add 'ip' match extension, Arturo Borrero Gonzalez
  • Re: [ebtables-compat PATCH 1/7] include: cache copy of Linux header uapi/linux/netfilter_bridge/ebt_802_3.h, Pablo Neira Ayuso
• [PATCH 1/1] bridge: forward IPv6 fragmented packets when passing netfilter, Bernhard Thaler
  • Re: [PATCH 1/1] bridge: forward IPv6 fragmented packets when passing netfilter, Pablo Neira Ayuso
    • [PATCHv2 1/1] bridge: forward IPv6 fragmented packets when passing netfilter, Bernhard Thaler
      • Re: [PATCHv2 1/1] bridge: forward IPv6 fragmented packets when passing netfilter, Florian Westphal
        • [PATCHv3 1/1] bridge: forward IPv6 fragmented packets when passing netfilter, Bernhard Thaler
          • Re: [PATCHv3 1/1] bridge: forward IPv6 fragmented packets when passing netfilter, Florian Westphal
            • [PATCHv4 RFC 1/1] bridge: forward IPv6 fragmented packets when passing netfilter, Bernhard Thaler
              • Re: [PATCHv4 RFC 1/1] bridge: forward IPv6 fragmented packets when passing netfilter, Pablo Neira Ayuso
                • Re: [PATCHv4 RFC 1/1] bridge: forward IPv6 fragmented packets when passing netfilter, Pablo Neira Ayuso
                  • [PATCH 2/4] bridge: forward IPv6 fragmented packets when passing netfilter, Bernhard Thaler
• [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Pablo Neira Ayuso
  • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Jan Engelhardt
    • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Pablo Neira Ayuso
      • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Patrick McHardy
        • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Pablo Neira Ayuso
          • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Patrick McHardy
          • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Pablo Neira Ayuso
            • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Patrick McHardy
              • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Pablo Neira Ayuso
            • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Patrick Schaaf
              • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Patrick Schaaf
            • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Jan Engelhardt
              • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Lennart Poettering
      • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Lennart Poettering
  • Re: [PATCH iptables] iptables: use IPC semaphore instead of abstract unix sockets, Lennart Poettering
• Re: mmotm 2015-01-16-15-50 uploaded (netfilter xt_TPROXY.c), Randy Dunlap
• IPTABLES + PREROUTING + --set-mark + Ubuntu, The Media Server
• [PATCH nf] netfilter: nf_tables: validate hooks in NAT expressions, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: validate hooks in NAT expressions, Patrick McHardy
    • Re: [PATCH nf] netfilter: nf_tables: validate hooks in NAT expressions, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nf_tables: validate hooks in NAT expressions, Patrick McHardy
        • Re: [PATCH nf] netfilter: nf_tables: validate hooks in NAT expressions, Pablo Neira Ayuso
          • Re: [PATCH nf] netfilter: nf_tables: validate hooks in NAT expressions, Patrick McHardy
• [libnetfilter_conntrack PATCH] src/Makefile.am: drop hardcoded -ldl, Gustavo Zacarias
  • Re: [libnetfilter_conntrack PATCH] src/Makefile.am: drop hardcoded -ldl, Florian Westphal
• [ebtables-compat PATCH] ebtables-compat: fix ACCEPT printing by simplifying logic, Arturo Borrero Gonzalez
  • Re: [ebtables-compat PATCH] ebtables-compat: fix ACCEPT printing by simplifying logic, Pablo Neira Ayuso
    • Re: [ebtables-compat PATCH] ebtables-compat: fix ACCEPT printing by simplifying logic, Arturo Borrero Gonzalez
      • Re: [ebtables-compat PATCH] ebtables-compat: fix ACCEPT printing by simplifying logic, Pablo Neira Ayuso
        • Re: [ebtables-compat PATCH] ebtables-compat: fix ACCEPT printing by simplifying logic, Arturo Borrero Gonzalez
• [iptables PATCH] configure: disable connlabel for static builds, Gustavo Zacarias
  • Re: [iptables PATCH] configure: disable connlabel for static builds, Florian Westphal
    • Re: [iptables PATCH] configure: disable connlabel for static builds, Gustavo Zacarias
      • Re: [iptables PATCH] configure: disable connlabel for static builds, Jan Engelhardt
        • Re: [iptables PATCH] configure: disable connlabel for static builds, Gustavo Zacarias
• conntrack: netmask filtering support, Asbjørn Sloth Tønnesen
  • [PATCH 1/3] conntrack: add support for netmask filtering, Asbjørn Sloth Tønnesen
    • Re: [PATCH 1/3] conntrack: add support for netmask filtering, Pablo Neira Ayuso
  • [PATCH 3/3] fix unused value warning, Asbjørn Sloth Tønnesen
  • [PATCH 2/3] conntrack: add support for CIDR notation, Asbjørn Sloth Tønnesen
• ulogd unexpected character problem, Umut Yerci
• NetDev 0.1 new proposals accepted update, Richard Guy Briggs
• [rhashtable] WARNING: CPU: 0 PID: 1 at lib/debugobjects.c:301 __debug_object_init(), Fengguang Wu
  • [PATCH net-next] rhashtable: Lower/upper bucket may map to same lock while shrinking, Thomas Graf
    • Re: [PATCH net-next] rhashtable: Lower/upper bucket may map to same lock while shrinking, David Miller
    • RE: [PATCH net-next] rhashtable: Lower/upper bucket may map to same lock while shrinking, David Laight
      • Re: [PATCH net-next] rhashtable: Lower/upper bucket may map to same lock while shrinking, 'Thomas Graf'
        • RE: [PATCH net-next] rhashtable: Lower/upper bucket may map to same lock while shrinking, David Laight
        • RE: [PATCH net-next] rhashtable: Lower/upper bucket may map to same lock while shrinking, David Laight
          • Re: [PATCH net-next] rhashtable: Lower/upper bucket may map to same lock while shrinking, 'Thomas Graf'
• xtables tools locking vulnerable to local DoS, Lennart Poettering
• [libnftnl PATCH 1/2 v2] src: not create iterator with empty list, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/2] ruleset: refactor ruleset element parsing function calls to nft_ruleset_*_parse_ruleset(), Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 2/2] ruleset: refactor ruleset element parsing function calls to nft_ruleset_*_parse_ruleset(), Pablo Neira Ayuso
  • Re: [libnftnl PATCH 1/2 v2] src: not create iterator with empty list, Pablo Neira Ayuso
• [PATCH 1/4] evaluate: verify named map is actually a map, Patrick McHardy
  • [PATCH 2/4] evaluate: properly set datatype of map expression, Patrick McHardy
  • [PATCH 3/4] evaluate: check that map expressions' datatype matches mappings, Patrick McHardy
  • [PATCH 4/4] evaluate: use stmt_evaluate_arg() in all cases, Patrick McHardy
• [PATCH] meta: don't print meta keyword for unqualified meta stmts, Patrick McHardy
• Accounting objects support in nft, ana
  • Message not available
    • [libnftnl] src: Add accounters support, ana
  • [nft 2/2] tests: regression: Accounter support, ana
  • [nft 1/2] src: Add the accounter support, ana
  • Message not available
    • [nf-next] netfilter: acct: add support to accounters in nftables, ana
      • Re: [nf-next] netfilter: acct: add support to accounters in nftables, Pablo Neira Ayuso
        • Re: [nf-next] netfilter: acct: add support to accounters in nftables, Patrick McHardy
          • Re: [nf-next] netfilter: acct: add support to accounters in nftables, Pablo Neira Ayuso
            • Re: [nf-next] netfilter: acct: add support to accounters in nftables, Patrick McHardy
              • Re: [nf-next] netfilter: acct: add support to accounters in nftables, Patrick McHardy
                • Re: [nf-next] netfilter: acct: add support to accounters in nftables, Patrick McHardy
      • Re: [nf-next] netfilter: acct: add support to accounters in nftables, Patrick McHardy
  • Re: Accounting objects support in nft, Patrick McHardy
    • Re: Accounting objects support in nft, Pablo Neira Ayuso
  • Re: Accounting objects support in nft, Arturo Borrero Gonzalez
    • Re: Accounting objects support in nft, Pablo Neira Ayuso
      • Re: Accounting objects support in nft, Patrick McHardy
        • Re: Accounting objects support in nft, Pablo Neira Ayuso
        • Re: Accounting objects support in nft, Arturo Borrero Gonzalez
          • Re: Accounting objects support in nft, Ana Rey
• [PATCH 1/2] set: remove unused set_clone() function, Patrick McHardy
  • [PATCH 2/2] expr: fix crash when listing non-verdict mappings, Patrick McHardy
• [nft PATCH] evaluate: clean up unused variables (pctx), Alvaro Neira Ayuso
  • Re: [nft PATCH] evaluate: clean up unused variables (pctx), Patrick McHardy
• [PATCH] parser: properly fix handling of large integer values, Patrick McHardy
• [RFC] Make predictable/persistent network interface names more handy, Richard Weinberger
  • [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), Richard Weinberger
    • Re: [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), Joe Perches
      • Re: [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), Richard Weinberger
        • Re: [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), Joe Perches
          • Re: [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), Richard Weinberger
            • Re: [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), Joe Perches
              • Re: [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), Richard Weinberger
                • Re: [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), David Miller
                  • Re: [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), Richard Weinberger
                    • Re: [PATCH 3/3] x_tables: Factor out 16bit aligment ifname_compare(), Joe Perches