Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 2/3] dtype: fix memory leak in concat_type_destroy(), (continued)
  • [PATCH 2/3] dtype: fix memory leak in concat_type_destroy(), Patrick McHardy
  • [PATCH 3/3] datatype: print datatype name in datatype_print() BUG message, Patrick McHardy
• [PATCH] stmt: rename nat "random-fully" option to "fully-random", Patrick McHardy
• nftables "random-fully" option, Patrick McHardy
• BUG: kernel panic nf_ct_del_from_dying_or_unconfirmed_list, Markus Kaindl
• [PATCH] dtype: remove unnecessary icmp* parse/print functions, Patrick McHardy
  • Re: [PATCH] dtype: remove unnecessary icmp* parse/print functions, Álvaro Neira Ayuso
• [conntrack-tools PATCH] Fix file descriptor leak in channel_open() on error, Thomas Jarosch
  • Re: [conntrack-tools PATCH] Fix file descriptor leak in channel_open() on error, Pablo Neira Ayuso
• conntrack-tools: cli test script broken, Thomas Jarosch
• [RFC ebtables-compat PATCH] extensions: add ebt 802_3 extension, Arturo Borrero Gonzalez
  • Re: [RFC ebtables-compat PATCH] extensions: add ebt 802_3 extension, Pablo Neira Ayuso
• [PATCH] netfilter: nfnetlink: remove redundant variable nskb, Duan Jiong
  • Re: [PATCH] netfilter: nfnetlink: remove redundant variable nskb, Pablo Neira Ayuso
• [GIT PULL nf-next] Second round of IPVS Updates for v3.19, Simon Horman
  • [PATCH nf-next] ipvs: uninitialized data with IP_VS_IPV6, Simon Horman
  • Re: [GIT PULL nf-next] Second round of IPVS Updates for v3.19, Pablo Neira Ayuso
• [PATCH nft] rule: fix segmentation faults on kernels without nftables support, Pablo Neira Ayuso
• [PATCH nft 1/3] src: generate set members using integer_type in the appropriate byteorder, Pablo Neira Ayuso
  • [PATCH nft 3/3] netlink: fix listing of range set elements in host byteorder, Pablo Neira Ayuso
  • [PATCH nft 2/3] netlink_delinearize: fix listing of set members in host byteorder using integer_type, Pablo Neira Ayuso
    • Re: [PATCH nft 2/3] netlink_delinearize: fix listing of set members in host byteorder using integer_type, Patrick McHardy
      • Re: [PATCH nft 2/3] netlink_delinearize: fix listing of set members in host byteorder using integer_type, Pablo Neira Ayuso
        • Re: [PATCH nft 2/3] netlink_delinearize: fix listing of set members in host byteorder using integer_type, Patrick McHardy
• [PATCH nft 1/2] src: add big endian integer datatype, Pablo Neira Ayuso
  • [PATCH nft 2/2] netlink: fix listing of range set elements, Pablo Neira Ayuso
  • Re: [PATCH nft 1/2] src: add big endian integer datatype, Patrick McHardy
    • Re: [PATCH nft 1/2] src: add big endian integer datatype, Pablo Neira Ayuso
      • Re: [PATCH nft 1/2] src: add big endian integer datatype, Patrick McHardy
• [PATCH nf-next 0/2] netfilter: conntrack: route cache for forwarded connections, Florian Westphal
  • [PATCH nf-next 2/2] netfilter: use conntrack rtcache if available, Florian Westphal
  • [PATCH nf-next 1/2] netfilter: conntrack: cache route for forwarded connections, Florian Westphal
    • Re: [PATCH nf-next 1/2] netfilter: conntrack: cache route for forwarded connections, Florian Westphal
    • Re: [nf-next, 1/2] netfilter: conntrack: cache route for forwarded connections, Charlemagne Lasse
  • Re: [PATCH nf-next 0/2] netfilter: conntrack: route cache for forwarded connections, Pablo Neira Ayuso
    • Re: [PATCH nf-next 0/2] netfilter: conntrack: route cache for forwarded connections, Florian Westphal
• Getting started, Rahul Radhakrishnan
• [PATCH] netfilter: Fix build for NETFILTER_XT_TARGET_REDIRECT, Guenter Roeck
  • Re: [PATCH] netfilter: Fix build for NETFILTER_XT_TARGET_REDIRECT, Pablo Neira Ayuso
• [PATCH 1/1] bridge: detect NAT66 correctly and change MAC address, Bernhard Thaler
  • Re: [PATCH 1/1] bridge: detect NAT66 correctly and change MAC address, Pablo Neira Ayuso
    • Re: [PATCH 1/1] bridge: detect NAT66 correctly and change MAC address, Pablo Neira Ayuso
      • Re: [PATCH 1/1] bridge: detect NAT66 correctly and change MAC address, Bernhard Thaler
        • [PATCHv2 1/4] bridge: detect NAT66 correctly and change MAC address, Bernhard Thaler
          • Re: [PATCHv2 1/4] bridge: detect NAT66 correctly and change MAC address, Pablo Neira Ayuso
            • Re: [PATCHv2 1/4] bridge: detect NAT66 correctly and change MAC address, Florian Westphal
• [PATCH nft v2] payload: fix endianess issue in payload_expr_pctx_update(), Pablo Neira Ayuso
  • Re: [PATCH nft v2] payload: fix endianess issue in payload_expr_pctx_update(), leroy christophe
    • Re: [PATCH nft v2] payload: fix endianess issue in payload_expr_pctx_update(), Pablo Neira Ayuso
• [PATCH nft] payload: fix endianess issue in payload_expr_pctx_update(), Pablo Neira Ayuso
• [PATCH] netfilter: conntrack: adjust nf_conntrack_buckets default value, Marcelo Ricardo Leitner
  • Re: [PATCH] netfilter: conntrack: adjust nf_conntrack_buckets default value, Jesper Dangaard Brouer
    • Re: [PATCH] netfilter: conntrack: adjust nf_conntrack_buckets default value, Pablo Neira Ayuso
• Reversed byte order issue with nft ?, leroy christophe
  • Re: Reversed byte order issue with nft ?, Pablo Neira Ayuso
    • Re: Reversed byte order issue with nft ?, leroy christophe
• Netdev 0.1 Call for Proposals, Pablo Neira Ayuso
• [patch] ipvs: uninitialized data with IP_VS_IPV6, Dan Carpenter
  • Re: [patch] ipvs: uninitialized data with IP_VS_IPV6, Julian Anastasov
    • Re: [patch] ipvs: uninitialized data with IP_VS_IPV6, Dan Carpenter
    • [patch v2] ipvs: uninitialized data with IP_VS_IPV6, Dan Carpenter
      • Re: [patch v2] ipvs: uninitialized data with IP_VS_IPV6, Julian Anastasov
        • Re: [patch v2] ipvs: uninitialized data with IP_VS_IPV6, Simon Horman
          • Re: [patch v2] ipvs: uninitialized data with IP_VS_IPV6, Dan Carpenter
            • Re: [patch v2] ipvs: uninitialized data with IP_VS_IPV6, Simon Horman
• [PATCH] netfilter: return -EFAULT directly when counters_ptr is NULL, Duan Jiong
  • Re: [PATCH] netfilter: return -EFAULT directly when counters_ptr is NULL, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: return -EFAULT directly when counters_ptr is NULL, Duan Jiong
• [nft PATCH] datatype: fix name of icmp* code, Eric Leblond
  • Re: [nft PATCH] datatype: fix name of icmp* code, Álvaro Neira Ayuso
    • Re: [nft PATCH] datatype: fix name of icmp* code, Pablo Neira Ayuso
• feature request: snat to @random_ip_from_this_set and negative set lookups, Bjørnar Ness
  • Re: feature request: snat to @random_ip_from_this_set and negative set lookups, Bjørnar Ness
• Out-of-bounds access in nfnetlink_bind, Dmitry Vyukov
  • Re: Out-of-bounds access in nfnetlink_bind, Andrey Ryabinin
• [RFC PATCH] netfilter: conntrack: cache route for forwarded connections, Florian Westphal
  • Re: [RFC PATCH] netfilter: conntrack: cache route for forwarded connections, Eric Dumazet
    • Re: [RFC PATCH] netfilter: conntrack: cache route for forwarded connections, Florian Westphal
  • Re: [RFC PATCH] netfilter: conntrack: cache route for forwarded connections, Julian Anastasov
    • Re: [RFC PATCH] netfilter: conntrack: cache route for forwarded connections, Florian Westphal
• [PATCH nft 1/5] netlink_delinearize: clone on netlink_get_register(), release previous on _set(), Pablo Neira Ayuso
  • [PATCH nft 2/5] meta: set base field on clones, Pablo Neira Ayuso
  • [PATCH nft 3/5] tests: regression: fix "Listing is broken" instead of output mismatch, Pablo Neira Ayuso
  • [PATCH nft 3/5] tests: regression: fix "Listing is broken" instead of output mismatch, Pablo Neira Ayuso
  • [PATCH nft 4/5] tests: regression: any/ct: remove wrong output, Pablo Neira Ayuso
  • [PATCH nft 5/5] scanner: don't bug on too large values, Pablo Neira Ayuso
• [PATCH 00/10] ipset patches for nf-next, v2, Jozsef Kadlecsik
  • [PATCH 03/14] netfilter: ipset: Indicate when /0 networks are supported, Jozsef Kadlecsik
  • [PATCH 08/14] netfilter: ipset: Introduce RCU locking instead of rwlock per set in the core, Jozsef Kadlecsik
    • Re: [PATCH 08/14] netfilter: ipset: Introduce RCU locking instead of rwlock per set in the core, Pablo Neira Ayuso
      • Re: [PATCH 08/14] netfilter: ipset: Introduce RCU locking instead of rwlock per set in the core, Jozsef Kadlecsik
  • [PATCH 02/14] netfilter: ipset: Alignment problem between 64bit kernel 32bit userspace, Jozsef Kadlecsik
  • [PATCH 09/14] netfilter: ipset: Introduce RCU locking in the bitmap types, Jozsef Kadlecsik
  • [PATCH 05/14] netfilter: ipset: Allocate the proper size of memory when /0 networks are supported, Jozsef Kadlecsik
  • [PATCH 07/14] netfilter: ipset: Remove rbtree from hash:net,iface in order to run under RCU, Jozsef Kadlecsik
    • Re: [PATCH 07/14] netfilter: ipset: Remove rbtree from hash:net,iface in order to run under RCU, Pablo Neira Ayuso
      • Re: [PATCH 07/14] netfilter: ipset: Remove rbtree from hash:net,iface in order to run under RCU, Jozsef Kadlecsik
  • [PATCH 14/14] netfilter: ipset: Fix sparse warning, Jozsef Kadlecsik
  • [PATCH 10/14] netfilter: ipset: Introduce RCU locking in the list type, Jozsef Kadlecsik
    • Re: [PATCH 10/14] netfilter: ipset: Introduce RCU locking in the list type, Pablo Neira Ayuso
      • Re: [PATCH 10/14] netfilter: ipset: Introduce RCU locking in the list type, Pablo Neira Ayuso
      • Re: [PATCH 10/14] netfilter: ipset: Introduce RCU locking in the list type, Jozsef Kadlecsik
        • Re: [PATCH 10/14] netfilter: ipset: Introduce RCU locking in the list type, Pablo Neira Ayuso
  • [PATCH 01/14] netfilter: ipset: Support updating extensions when the set is full, Jozsef Kadlecsik
    • Re: [PATCH 01/14] netfilter: ipset: Support updating extensions when the set is full, Pablo Neira Ayuso
      • Re: [PATCH 01/14] netfilter: ipset: Support updating extensions when the set is full, Pablo Neira Ayuso
        • Re: [PATCH 01/14] netfilter: ipset: Support updating extensions when the set is full, Jozsef Kadlecsik
          • Re: [PATCH 01/14] netfilter: ipset: Support updating extensions when the set is full, Pablo Neira Ayuso
  • [PATCH 13/14] netfilter: ipset: Fix parallel resizing and listing of the same set, Jozsef Kadlecsik
  • [PATCH 04/14] netfilter: ipset: Simplify cidr handling for hash:*net* types, Jozsef Kadlecsik
  • [PATCH 11/14] netfilter: ipset: Introduce RCU locking in the hash types, Jozsef Kadlecsik
    • Re: [PATCH 11/14] netfilter: ipset: Introduce RCU locking in the hash types, Jesper Dangaard Brouer
    • Re: [PATCH 11/14] netfilter: ipset: Introduce RCU locking in the hash types, Pablo Neira Ayuso
      • Re: [PATCH 11/14] netfilter: ipset: Introduce RCU locking in the hash types, Jozsef Kadlecsik
  • [PATCH 06/14] netfilter: ipset: Explicitly add padding elements to hash:net,net and hash:net,port,net, Jozsef Kadlecsik
  • [PATCH 12/14] netfilter: ipset: styles warned by checkpatch.pl fixed, Jozsef Kadlecsik
    • Re: [PATCH 12/14] netfilter: ipset: styles warned by checkpatch.pl fixed, Pablo Neira Ayuso
      • Re: [PATCH 12/14] netfilter: ipset: styles warned by checkpatch.pl fixed, Jozsef Kadlecsik
• [nft PATCH] scanner: fix reading of really long line, Eric Leblond
  • Re: [nft PATCH] scanner: fix reading of really long line, Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: [nft PATCH] scanner: fix reading of really long line, Eric Leblond
    • Re: [nft PATCH] scanner: fix reading of really long line, Pablo Neira Ayuso
• ipset website, Mike Wright
  • Re: ipset website, Jan Engelhardt
    • Re: ipset website, Mike Wright
      • Re: ipset website, Jan Engelhardt
        • Re: ipset website, Mike Wright
          • Re: ipset website, Mike Wright
            • Re: ipset website, Jozsef Kadlecsik
              • Re: ipset website, Mike Wright
                • Re: ipset website, Jozsef Kadlecsik
                  • Re: ipset website, Mike Wright
• [PATCH nft 2/2 v2] datatype: relax datatype check in integer_type_parse(), Pablo Neira Ayuso
• [PATCH nft 1/2 v2] datatype: fix crash when using basetype instead of symbolic constants, Pablo Neira Ayuso
  • [PATCH nft 2/2] datatype: relax datatype check in integer_type_parse(), Pablo Neira Ayuso
• Re: [PATCH] nf_log_ipv6: correct typo in module description, Pablo Neira Ayuso
• Re: issue with nftable - goto : Operation not supported, leroy christophe
• [PATCH nft] datatype: fix crash when using basetype instead of symbolic constants, Pablo Neira Ayuso
  • Re: [PATCH nft] datatype: fix crash when using basetype instead of symbolic constants, Patrick McHardy
• [PATCH -next] netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module, Pablo Neira Ayuso
  • Re: [PATCH -next] netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module, Or Gerlitz
    • Re: [PATCH -next] netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module, Pablo Neira Ayuso
• [nft PATCH v2] evaluate: reject: fix crash on NULL location with bridge and tcp reset, Alvaro Neira Ayuso
  • Re: [nft PATCH v2] evaluate: reject: fix crash on NULL location with bridge and tcp reset, Pablo Neira Ayuso
• [PATCH nf 1/2 v4] bridge: export nft_reject_ip*hdr_validate functions, Alvaro Neira Ayuso
  • [PATCH nf 2/2 v4] bridge: set the pktinfo for IPv4/IPv6 traffic, Alvaro Neira Ayuso
    • Re: [PATCH nf 2/2 v4] bridge: set the pktinfo for IPv4/IPv6 traffic, Pablo Neira Ayuso
  • Re: [PATCH nf 1/2 v4] bridge: export nft_reject_ip*hdr_validate functions, Pablo Neira Ayuso
• Custom Module for Userspace Proxy, NuSkooler
• [PATCH net] Revert "netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse", Pablo Neira Ayuso
  • Re: [PATCH net] Revert "netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse", David Miller
• [PATCH] net: netfilter: Fix undefined reference to nf_nat_redirect_* functions, Andreas Ruprecht
  • [PATCH v2] net: netfilter: Fix undefined reference to nf_nat_redirect_* functions, Andreas Ruprecht
    • Re: [PATCH v2] net: netfilter: Fix undefined reference to nf_nat_redirect_* functions, Florian Westphal
      • Re: [PATCH v2] net: netfilter: Fix undefined reference to nf_nat_redirect_* functions, Andreas Ruprecht
        • Re: [PATCH v2] net: netfilter: Fix undefined reference to nf_nat_redirect_* functions, Pablo Neira Ayuso
          • Re: [PATCH v2] net: netfilter: Fix undefined reference to nf_nat_redirect_* functions, Florian Westphal
        • Re: [PATCH v2] net: netfilter: Fix undefined reference to nf_nat_redirect_* functions, Florian Westphal
• [PATCH nf 1/2 v3] bridge: export nft_reject_ip*hdr_validate functions, Alvaro Neira Ayuso
  • [PATCH nf 2/2 v3] bridge: set the pktinfo for IPv4/IPv6 traffic, Alvaro Neira Ayuso
• [nft] segfault, bitmask datatype without parse() function, Arturo Borrero Gonzalez
  • Re: [nft] segfault, bitmask datatype without parse() function, Pablo Neira Ayuso
    • Re: [nft] segfault, bitmask datatype without parse() function, Arturo Borrero Gonzalez
• [PATCH nft] src: restore nft --debug and add missing \, Pablo Neira Ayuso
• [PATCH 1/2 nf] Revert "netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse", Pablo Neira Ayuso
  • [PATCH 2/2 nf] netfilter: conntrack: fix race between confirmation and flush, Pablo Neira Ayuso
    • Re: [PATCH 2/2 nf] netfilter: conntrack: fix race between confirmation and flush, Jesper Dangaard Brouer
  • Re: [PATCH 1/2 nf] Revert "netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse", Jesper Dangaard Brouer
    • Re: [PATCH 1/2 nf] Revert "netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse", Pablo Neira Ayuso
• [PATCH] build: add missing \ in src/Makefile.am (AM_CPPFLAGS), David Kozub
• Fwd: [Bug 88841] New: Kernel crash after a few minutes, Daniel Borkmann
• [ANNOUNCE] ipset 6.24 released, Jozsef Kadlecsik
• [PATCH 00/10] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 01/10] netfilter: ipset: Support updating extensions when the set is full, Jozsef Kadlecsik
  • [PATCH 03/10] netfilter: ipset: Indicate when /0 networks are supported, Jozsef Kadlecsik
  • [PATCH 02/10] netfilter: ipset: Alignment problem between 64bit kernel 32bit userspace, Jozsef Kadlecsik
  • [PATCH 04/10] netfilter: ipset: Simplify cidr handling for hash:*net* types, Jozsef Kadlecsik
  • [PATCH 05/10] netfilter: ipset: Allocate the proper size of memory when /0 networks are supported, Jozsef Kadlecsik
  • [PATCH 06/10] netfilter: ipset: Explicitly add padding elements to hash:net,net and hash:net,port,net, Jozsef Kadlecsik
  • [PATCH 07/10] netfilter: ipset: Remove rbtree from hash:net,iface in order to run under RCU, Jozsef Kadlecsik
  • [PATCH 10/10] netfilter: ipset: Fix parallel resizing and listing of the same set, Jozsef Kadlecsik
  • [PATCH 09/10] netfilter: ipset: styles warned by checkpatch.pl fixed, Jozsef Kadlecsik
  • [PATCH 08/10] netfilter: ipset: Introduce RCU in all set types instead of rwlock per set, Jozsef Kadlecsik
    • Re: [PATCH 08/10] netfilter: ipset: Introduce RCU in all set types instead of rwlock per set, Pablo Neira Ayuso
      • Re: [PATCH 08/10] netfilter: ipset: Introduce RCU in all set types instead of rwlock per set, Jozsef Kadlecsik
        • Re: [PATCH 08/10] netfilter: ipset: Introduce RCU in all set types instead of rwlock per set, Florian Westphal
          • Re: [PATCH 08/10] netfilter: ipset: Introduce RCU in all set types instead of rwlock per set, Jozsef Kadlecsik
            • Re: [PATCH 08/10] netfilter: ipset: Introduce RCU in all set types instead of rwlock per set, Pablo Neira Ayuso
              • Re: [PATCH 08/10] netfilter: ipset: Introduce RCU in all set types instead of rwlock per set, Jozsef Kadlecsik
• [nft PATCH] evaluate: reject: fix a crash to use tcp reset with network context in bridge, Alvaro Neira Ayuso
  • Re: [nft PATCH] evaluate: reject: fix a crash to use tcp reset with network context in bridge, Pablo Neira Ayuso
• [PATCH nf 1/2 v2] bridge: export nft_reject_ip*hdr_validate functions, Alvaro Neira Ayuso
  • [PATCH nf 2/2 v2] bridge: set the pktinfo for IPv4/IPv6 traffic, Alvaro Neira Ayuso
    • Re: [PATCH nf 2/2 v2] bridge: set the pktinfo for IPv4/IPv6 traffic, Pablo Neira Ayuso
• [ebtables-compat-experimental6 PATCH v2] iptables: xtables-eb: fix renaming of chains, Arturo Borrero Gonzalez
  • Re: [ebtables-compat-experimental6 PATCH v2] iptables: xtables-eb: fix renaming of chains, Pablo Neira Ayuso
• [PATCH -next] netfilter: conntrack: drop new packets that lose race against get_next_corpse(), Pablo Neira Ayuso
• [PATCH next] netfilter: conntrack: avoid zeroing timer, Florian Westphal
  • Re: [PATCH next] netfilter: conntrack: avoid zeroing timer, Pablo Neira Ayuso
• [PATCH 00/17] netfilter/ipvs updates for net-next, Pablo Neira Ayuso
  • [PATCH 03/17] netfilter: nf_tables: add new expression nft_redir, Pablo Neira Ayuso
  • [PATCH 06/17] netfilter: log: protect nf_log_register against double registering, Pablo Neira Ayuso
  • [PATCH 17/17] netfilter: nfnetlink_log: Make use of pr_fmt where applicable, Pablo Neira Ayuso
  • [PATCH 16/17] netfilter: Deletion of unnecessary checks before two function calls, Pablo Neira Ayuso
  • [PATCH 09/17] netfilter: nft_meta: add cgroup support, Pablo Neira Ayuso
  • [PATCH 14/17] netfilter: xt_connlimit: honor conntrack zone if available, Pablo Neira Ayuso
  • [PATCH 15/17] netfilter: nf_conntrack_h323: lookup route from proper net namespace, Pablo Neira Ayuso
  • [PATCH 11/17] netfilter: nft_redir: fix sparse warnings, Pablo Neira Ayuso
  • [PATCH 12/17] netfilter: fix various sparse warnings, Pablo Neira Ayuso
  • [PATCH 13/17] netfilter: nfnetlink_log: remove unnecessary error messages, Pablo Neira Ayuso
  • [PATCH 10/17] netfilter: fix unmet dependencies in NETFILTER_XT_TARGET_REDIRECT, Pablo Neira Ayuso
  • [PATCH 08/17] netfilter: nf_log: fix sparse warning in nf_logger_find_get(), Pablo Neira Ayuso
  • [PATCH 04/17] ipvs: remove unnecessary assignment in __ip_vs_get_out_rt, Pablo Neira Ayuso
  • [PATCH 07/17] netfilter: fix spelling errors, Pablo Neira Ayuso
  • [PATCH 02/17] netfilter: refactor NAT redirect IPv6 code to use it from nf_tables, Pablo Neira Ayuso
  • [PATCH 05/17] netfilter: nf_log: Introduce nft_log_dereference() macro, Pablo Neira Ayuso
  • [PATCH 01/17] netfilter: refactor NAT redirect IPv4 to use it from nf_tables, Pablo Neira Ayuso
  • Re: [PATCH 00/17] netfilter/ipvs updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/17] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
    • [PATCH 02/17] netfilter: conntrack: use shared sysctl constants, Pablo Neira Ayuso
    • [PATCH 03/17] ipvs: Improve robustness to the ipvs sysctl, Pablo Neira Ayuso
    • [PATCH 07/17] netfilter: inline four headers files into another one., Pablo Neira Ayuso
    • [PATCH 09/17] netfilter: add missing IS_ENABLED(CONFIG_BRIDGE_NETFILTER) checks to header-file., Pablo Neira Ayuso
    • [PATCH 08/17] netfilter: add missing includes to a number of header-files., Pablo Neira Ayuso
    • [PATCH 04/17] netfilter: remove unnecessary spaces, Pablo Neira Ayuso
    • [PATCH 05/17] netfilter: nft_bitwise: add offload support, Pablo Neira Ayuso
    • [PATCH 06/17] netfilter: nf_tables: store data in offload context registers, Pablo Neira Ayuso
    • [PATCH 01/17] netfilter: synproxy: rename mss synproxy_options field, Pablo Neira Ayuso
    • Re: [PATCH 00/17] Netfilter/IPVS updates for net-next, Jakub Kicinski
• [PATCH -next] netfilter: xt_recent: relax ip_pkt_list_tot restrictions, Florian Westphal
  • Re: [PATCH -next] netfilter: xt_recent: relax ip_pkt_list_tot restrictions, Pablo Neira Ayuso
    • Re: [PATCH -next] netfilter: xt_recent: relax ip_pkt_list_tot restrictions, Pablo Neira Ayuso
      • Re: [PATCH -next] netfilter: xt_recent: relax ip_pkt_list_tot restrictions, Florian Westphal
        • Re: [PATCH -next] netfilter: xt_recent: relax ip_pkt_list_tot restrictions, Pablo Neira Ayuso
• [iptables PATCH] iptables: nft: create a separated object update type to rename chains, Arturo Borrero Gonzalez
  • Re: [iptables PATCH] iptables: nft: create a separated object update type to rename chains, Pablo Neira Ayuso
• [ebtables-compat-experimental5 PATCH v2] iptables: xtables-eb: user-defined chains default policy is always RETURN, Arturo Borrero Gonzalez
  • Re: [ebtables-compat-experimental5 PATCH v2] iptables: xtables-eb: user-defined chains default policy is always RETURN, Pablo Neira Ayuso
    • Re: [ebtables-compat-experimental5 PATCH v2] iptables: xtables-eb: user-defined chains default policy is always RETURN, Arturo Borrero Gonzalez
      • Re: [ebtables-compat-experimental5 PATCH v2] iptables: xtables-eb: user-defined chains default policy is always RETURN, Pablo Neira Ayuso
• nft compilation issues, Arturo Borrero Gonzalez
  • Re: nft compilation issues, Pablo Neira Ayuso
    • Re: nft compilation issues, Arturo Borrero Gonzalez
• [nft-tests 1/2] tests: regression: don't use -nnn for non-list commands, Pablo Neira Ayuso
  • [nft-tests 2/2] tests: regression: any/meta.t: fix bogus error, Pablo Neira Ayuso
• [PATCH nft 1/2] src: restore nft --debug, Pablo Neira Ayuso
  • [PATCH nft 2/2] parser: restore named vmap, Pablo Neira Ayuso
• catch netlink event when create/delete ipset, Vasiliy Tolstov
  • Re: catch netlink event when create/delete ipset, Jozsef Kadlecsik
    • Re: catch netlink event when create/delete ipset, Vasiliy Tolstov
• [PATCH v2 0/9] Replace smp_read_barrier_depends() with lockless_derefrence(), Pranith Kumar
  • [PATCH v2 9/9] netfilter: Replace smp_read_barrier_depends() with lockless_dereference(), Pranith Kumar
    • Re: [PATCH v2 9/9] netfilter: Replace smp_read_barrier_depends() with lockless_dereference(), Eric Dumazet
      • Re: [PATCH v2 9/9] netfilter: Replace smp_read_barrier_depends() with lockless_dereference(), Pranith Kumar
        • Re: [PATCH v2 9/9] netfilter: Replace smp_read_barrier_depends() with lockless_dereference(), Eric Dumazet
          • Re: [PATCH v2 9/9] netfilter: Replace smp_read_barrier_depends() with lockless_dereference(), Pranith Kumar
        • Re: [PATCH v2 9/9] netfilter: Replace smp_read_barrier_depends() with lockless_dereference(), Andres Freund
• netfilter: xt_connlimit: it could get the accurate conn count with heavy traffic and multi cores, Feng Gao
• named vmaps, Bjørnar Ness
  • Re: named vmaps, Pablo Neira Ayuso
    • Re: named vmaps, Bjørnar Ness
      • Re: named vmaps, Pablo Neira Ayuso
• [libnftnl PATCH] buffer: include stdarg header, Giuseppe Longo
  • Re: [libnftnl PATCH] buffer: include stdarg header, Pablo Neira Ayuso
• [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: fix renaming of chains, Arturo Borrero Gonzalez
  • Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: fix renaming of chains, Pablo Neira Ayuso
    • Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: fix renaming of chains, Arturo Borrero Gonzalez
      • Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: fix renaming of chains, Pablo Neira Ayuso
• nftables error compile current git, Marco Berizzi
  • Re: nftables error compile current git, Giorgio
    • RE: nftables error compile current git, Marco Berizzi
      • Re: nftables error compile current git, Giorgio
        • RE: nftables error compile current git, Marco Berizzi
• [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: user-defined chains default policy is always RETURN, Arturo Borrero Gonzalez
  • Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: user-defined chains default policy is always RETURN, Pablo Neira Ayuso
  • Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: user-defined chains default policy is always RETURN, Pablo Neira Ayuso
    • Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: user-defined chains default policy is always RETURN, Arturo Borrero Gonzalez
• [PATCH v2] netfilter: bridge: unshare bridge info before change it, Gao feng
  • [PATCH] use NF_BR_PRI_BRNF in NF_HOOK_THRESH, Gao feng
    • Re: [PATCH] use NF_BR_PRI_BRNF in NF_HOOK_THRESH, Pablo Neira Ayuso
  • Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it, Pablo Neira Ayuso
    • Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it, Pablo Neira Ayuso
      • Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it, Gao feng
    • Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it, Gao feng
      • Re: [PATCH v2] netfilter: bridge: unshare bridge info before change it, Pablo Neira Ayuso
• [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls, SF Markus Elfring
  • Re: [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls, Pablo Neira Ayuso
    • [PATCH] net-ipvs: Delete an unnecessary check before the function call "module_put", SF Markus Elfring
      • Re: [PATCH] net-ipvs: Delete an unnecessary check before the function call "module_put", Simon Horman
  • Re: [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls, Julian Anastasov
    • Re: [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls, Simon Horman
      • Re: [PATCH 1/1] netfilter: Deletion of unnecessary checks before two function calls, Pablo Neira Ayuso
• [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: adjust policy in user-defined chains, Arturo Borrero Gonzalez
  • Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: adjust policy in user-defined chains, Pablo Neira Ayuso
    • Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: adjust policy in user-defined chains, Arturo Borrero Gonzalez
      • Re: [ebtables-compat-experimental5 PATCH] iptables: xtables-eb: adjust policy in user-defined chains, Pablo Neira Ayuso
• [PATCH RFC 0/1] bridge: fix netfilter/NF_BR_LOCAL_OUT for own, locally generated queries, Linus Lüssing
  • [PATCH RFC] bridge: fix netfilter/NF_BR_LOCAL_OUT for own, locally generated queries, Linus Lüssing
    • Re: [PATCH RFC] bridge: fix netfilter/NF_BR_LOCAL_OUT for own, locally generated queries, Pablo Neira Ayuso
• [ebtables-compat-experimental5 PATCH] iptables/xtables-eb.c: delete extra 'policy' printf, Arturo Borrero Gonzalez
  • Re: [ebtables-compat-experimental5 PATCH] iptables/xtables-eb.c: delete extra 'policy' printf, Pablo Neira Ayuso
• [libnftnl PATCH] examples: nft-rule-parse-add: fix wrong buffer usage when building rule header, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] examples: nft-rule-parse-add: fix wrong buffer usage when building rule header, Pablo Neira Ayuso
• [PATCH RESEND] netfilter: bridge: unshare bridge info before change it, Gao feng
  • Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it, Pablo Neira Ayuso
    • Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it, Gao feng
      • Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it, Pablo Neira Ayuso
        • Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it, Pablo Neira Ayuso
          • Re: [PATCH RESEND] netfilter: bridge: unshare bridge info before change it, Gao feng
• [BUG] libnftnl examples/nft-rule-parse-add.c hangs, Ian Bishop
• [ebtables-compat-experimental5 PATCH] ebtables-compat: include /etc/ethertypes in tarball, Arturo Borrero Gonzalez
  • Re: [ebtables-compat-experimental5 PATCH] ebtables-compat: include /etc/ethertypes in tarball, Pablo Neira Ayuso
• [PATCH nft] netlink: don't bug on unknown events, Pablo Neira Ayuso
• [PATCH -next] netfilter: xt_connlimit: honor conntrack zone if available, Florian Westphal
  • Re: [PATCH -next] netfilter: xt_connlimit: honor conntrack zone if available, Pablo Neira Ayuso
• [PATCH nf 1/2] bridge: export nft_reject_ip*hdr_validate functions, Alvaro Neira Ayuso
  • [PATCH nf 2/2] bridge: set the pktinfo for IPv4/IPv6 traffic, Alvaro Neira Ayuso
    • Re: [PATCH nf 2/2] bridge: set the pktinfo for IPv4/IPv6 traffic, Pablo Neira Ayuso
• [RFC PATCH 00/16] Replace smp_read_barrier_depends() with lockless_derefrence(), Pranith Kumar
  • [PATCH 15/16] netfilter: Replace smp_read_barrier_depends() with lockless_dereference(), Pranith Kumar
  • Re: [RFC PATCH 00/16] Replace smp_read_barrier_depends() with lockless_derefrence(), Paul E. McKenney
• Aw: Re: [libnftnl PATCH 1/1] Correctly define the header 'Requires:' in the file 'libnftnl.pc'., giorgio . nicole
• x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 24, Ronny Janssen
  • Re: x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 24, Jan Engelhardt
    • Re: x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 24, Ronny Janssen
      • Re: x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 24, Jan Engelhardt
• [libnftnl PATCH 1/1] Correctly define the header 'Requires:' in the file 'libnftnl.pc'., Giorgio Dal Molin
  • Re: [libnftnl PATCH 1/1] Correctly define the header 'Requires:' in the file 'libnftnl.pc'., Jan Engelhardt
• [PATCH] [netfileter] nf_conntrack_h323: lookup route from proper net namespace, Vasily Averin
  • Re: [PATCH] [netfileter] nf_conntrack_h323: lookup route from proper net namespace, Pablo Neira Ayuso
• Re: arm64 allmodconfig failures in nft_reject_bridge.c, Mark Brown
  • Re: arm64 allmodconfig failures in nft_reject_bridge.c, Pablo Neira Ayuso
    • Re: arm64 allmodconfig failures in nft_reject_bridge.c, Mark Brown
    • Re: arm64 allmodconfig failures in nft_reject_bridge.c, David Miller
      • Re: arm64 allmodconfig failures in nft_reject_bridge.c, Mark Brown
        • Re: arm64 allmodconfig failures in nft_reject_bridge.c, David Miller
          • Re: arm64 allmodconfig failures in nft_reject_bridge.c, Mark Brown
• [PATCH 1/1] netfilter: fix various sparse warnings, Florian Westphal
  • Re: [PATCH 1/1] netfilter: fix various sparse warnings, Pablo Neira Ayuso
• [BUG] index is out of range for nfnl_group2type[], Andrey Ryabinin
  • Re: [BUG] index is out of range for nfnl_group2type[], Pablo Neira Ayuso
    • Re: [BUG] index is out of range for nfnl_group2type[], Andrey Ryabinin
• [PATCH 0/3] autotools conversion: forgotten Makefile.am, 'doc' and 'files', Giorgio Dal Molin
  • [PATCH 1/3] autotools conversion: added a missing 'Makefile.am' under 'include/linux/netfilter/'., Giorgio Dal Molin
    • Re: [PATCH 1/3] autotools conversion: added a missing 'Makefile.am' under 'include/linux/netfilter/'., Pablo Neira Ayuso
  • [PATCH 3/3] autotools conversion: added autotools support for the 'files' subdir., Giorgio Dal Molin
    • Re: [PATCH 3/3] autotools conversion: added autotools support for the 'files' subdir., Pablo Neira Ayuso
  • [PATCH 2/3] autotools conversion: added autotools support for the 'doc' subdir., Giorgio Dal Molin
    • Re: [PATCH 2/3] autotools conversion: added autotools support for the 'doc' subdir., Pablo Neira Ayuso
• Aw: Re: [PATCH 1/1] autotools conversion fixups, giorgio . nicole
• [ebtables-compat-experimental5 PATCH] iptables/nft-bridge.c: fix inversion of builtin matches, Arturo Borrero Gonzalez
  • Re: [ebtables-compat-experimental5 PATCH] iptables/nft-bridge.c: fix inversion of builtin matches, Pablo Neira Ayuso
• [PATCH] build: add and use a symbol version map, Jan Engelhardt
  • Re: [PATCH] build: add and use a symbol version map, Pablo Neira Ayuso
    • Re: [PATCH] build: add and use a symbol version map, Jan Engelhardt
• [iptables PATCH v2] iptables/nft-shared.c: kill add_*() invflags parameter, Arturo Borrero Gonzalez
  • Re: [iptables PATCH v2] iptables/nft-shared.c: kill add_*() invflags parameter, Pablo Neira Ayuso
    • Re: [iptables PATCH v2] iptables/nft-shared.c: kill add_*() invflags parameter, Arturo Borrero Gonzalez
      • Re: [iptables PATCH v2] iptables/nft-shared.c: kill add_*() invflags parameter, Pablo Neira Ayuso
• [PATCH] netfilter: nft_redir: fix sparse warnings: cast to restricted __be32, Arturo Borrero Gonzalez
  • Re: [PATCH] netfilter: nft_redir: fix sparse warnings: cast to restricted __be32, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nft_redir: fix sparse warnings: cast to restricted __be32, Arturo Borrero Gonzalez
• [PATCH nf-next 1/2] netfilter: fix unmet dependencies in NETFILTER_XT_TARGET_REDIRECT, Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: nft_redir: fix sparse warnings, Pablo Neira Ayuso
• [GIT PULL nf] Second Round of IPVS Fixes for v3.18, Simon Horman
  • [PATCH nf] ipvs: Keep skb->sk when allocating headroom on tunnel xmit, Simon Horman
  • Re: [GIT PULL nf] Second Round of IPVS Fixes for v3.18, Pablo Neira Ayuso
    • Re: [GIT PULL nf] Second Round of IPVS Fixes for v3.18, Simon Horman
• [iptables PATCH] iptables/nft-shared.c: kill add_*() invflags parameter, Arturo Borrero Gonzalez
  • Re: [iptables PATCH] iptables/nft-shared.c: kill add_*() invflags parameter, Pablo Neira Ayuso
• [PATCH 1/3] netfilter: nft_compat: relax chain type validation, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: nft_compat: use the match->table to validate dependencies, Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: nf_tables: restore synchronous object release from commit/abort, Pablo Neira Ayuso
• [PATCH] arptables: remove dead dynamic hooks code, Gustavo Zacarias
  • Re: [PATCH] arptables: remove dead dynamic hooks code, Pablo Neira Ayuso
• [PATCH -next 0/2] seq: Convert seq_puts and seq_putc to return void, Joe Perches
  • [PATCH -next 2/2] seq_putc: Convert to return void and convert uses too., Joe Perches
    • Re: [PATCH -next 2/2] seq_putc: Convert to return void and convert uses too., Petr Mladek
      • Re: [PATCH -next 2/2] seq_putc: Convert to return void and convert uses too., Pablo Neira Ayuso
    • Re: [PATCH -next 2/2] seq_putc: Convert to return void and convert uses too., Corey Minyard
• [PATCH 0/1] autotools conversion: added autotools support for the 'files' subdir., Giorgio Dal Molin
  • [PATCH 1/1] autotools conversion: added autotools support for the 'files' subdir., Giorgio Dal Molin
    • Re: [PATCH 1/1] autotools conversion: added autotools support for the 'files' subdir., Pablo Neira Ayuso
• [PATCH 0/1] autotools conversion: added autotools support for the 'doc' subdir., Giorgio Dal Molin
  • [PATCH 0/1] autotools conversion: added autotools support for the 'doc' subdir., Giorgio Dal Molin
  • [PATCH 1/1] autotools conversion: added autotools support for the 'doc' subdir., Giorgio Dal Molin
    • Re: [PATCH 1/1] autotools conversion: added autotools support for the 'doc' subdir., Pablo Neira Ayuso
• [PATCH libnftnl 1/3] expr: nat: use 'nat_type' instead of 'type' in the parser, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3 v2] src: consolidate XML/JSON exportation, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] expr: data_reg: use 'reg' instead of 'data_reg', Pablo Neira Ayuso
• [PATCH libnftnl] src: consolidate XML/JSON exportation, Pablo Neira Ayuso
  • Re: [PATCH libnftnl] src: consolidate XML/JSON exportation, Pablo Neira Ayuso
• [PATCH] From fryasu: Trim kernel struct to allow deletion for TEE targets, Loganaden Velvindron
  • Re: [PATCH] From fryasu: Trim kernel struct to allow deletion for TEE targets, Pablo Neira Ayuso
• How to debug libiptc and mechanism for exchanging information between user space and kernel space, Nguyen Duong Tuan
• [ebtables-compat-experimental3 PATCH 1/2] nft-bridge: fix inversion of matches, Arturo Borrero Gonzalez
  • [ebtables-compat-experimental3 PATCH 2/2] nft-bridge: fix printing of inverted protocols, addresses, Arturo Borrero Gonzalez
    • Re: [ebtables-compat-experimental3 PATCH 2/2] nft-bridge: fix printing of inverted protocols, addresses, Pablo Neira Ayuso
  • Re: [ebtables-compat-experimental3 PATCH 1/2] nft-bridge: fix inversion of matches, Pablo Neira Ayuso
• [iptables PATCH] nft-arp: fix inversion of matches, Arturo Borrero Gonzalez
  • Re: [iptables PATCH] nft-arp: fix inversion of matches, Pablo Neira Ayuso
• [PATCH] arptables: disable dlfcn.h include, Gustavo Zacarias
  • Re: [PATCH] arptables: disable dlfcn.h include, Pablo Neira Ayuso
• [PATCH] netfilter: nft_compat: use current net namespace, Pablo Neira Ayuso
• [PATCH -nf] nft: masq: fix uninitialized range in nft_masq_{ipv4,ipv6}_eval, Daniel Borkmann
  • Re: [PATCH -nf] nft: masq: fix uninitialized range in nft_masq_{ipv4,ipv6}_eval, Pablo Neira Ayuso
• [nft PATCH 1/3] tests/regression: masquerade: fix invalid syntax, Arturo Borrero Gonzalez
  • [nft PATCH 2/3] tests/regression: redirect: fix invalid syntax, Arturo Borrero Gonzalez
    • Re: [nft PATCH 2/3] tests/regression: redirect: fix invalid syntax, Pablo Neira Ayuso
  • [nft PATCH 3/3] parser: allow both nat_flags and port specification in redirect, Arturo Borrero Gonzalez
    • Re: [nft PATCH 3/3] parser: allow both nat_flags and port specification in redirect, Pablo Neira Ayuso
  • Re: [nft PATCH 1/3] tests/regression: masquerade: fix invalid syntax, Pablo Neira Ayuso
• [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer, Dan Carpenter
  • Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer, Pablo Neira Ayuso
    • Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer, Jozsef Kadlecsik
      • Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer, Pablo Neira Ayuso
        • Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer, Jozsef Kadlecsik
          • Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer, Pablo Neira Ayuso
        • Re: [patch -mainline] netfilter: ipset: small potential read beyond the end of buffer, Dan Carpenter
• [PATCH nft 0/5] autotools conversion, Pablo Neira Ayuso
  • [PATCH nft 2/5] build: use AC_PROG_YACC and AM_PROG_LEX, Pablo Neira Ayuso
  • [PATCH nft 1/5] build: use PKG_CHECK_MODULES to check for libmnl and libnftnl, Pablo Neira Ayuso
  • [PATCH nft 3/5] rename parser.y to parser_bison.y, Pablo Neira Ayuso
  • [PATCH nft 4/5] include: add cli.h, Pablo Neira Ayuso
  • [PATCH nft 5/5] build: autotools conversion, Pablo Neira Ayuso
    • Re: [PATCH nft 5/5] build: autotools conversion, Jan Engelhardt
    • Re: [PATCH nft 5/5] build: autotools conversion, Giorgio
  • [PATCH 1/1] autotools conversion fixups, giorgio . nicole
    • Re: [PATCH 1/1] autotools conversion fixups, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse, Jesper Dangaard Brouer
  • Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse, Jesper Dangaard Brouer
      • Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse, Jörg Marx
        • Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse, Pablo Neira Ayuso
          • Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse, Jörg Marx
      • Re: [PATCH nf] netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse, Pablo Neira Ayuso
• [PATCH 1/3] netfilter: nfnetlink_log: remove unnecessary error messages, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: nfnetlink_log: improve error handling on __build_packet_message(), Pablo Neira Ayuso
    • Re: [PATCH 2/3] netfilter: nfnetlink_log: improve error handling on __build_packet_message(), Marcelo Ricardo Leitner
  • [PATCH 3/3] netfilter: nfnetlink_log: Make use of pr_fmt where applicable, Pablo Neira Ayuso
• [nft PATCH v2] nft: don't resolve hostnames by default, Arturo Borrero Gonzalez
  • Re: [nft PATCH v2] nft: don't resolve hostnames by default, Pablo Neira Ayuso
    • Re: [nft PATCH v2] nft: don't resolve hostnames by default, Arturo Borrero Gonzalez
• [PATCH 4/8] netfilter: Remove checks of seq_printf() return values, Steven Rostedt
• [PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
• [PATCH 3/8] netfilter: Convert print_tuple functions to return void, Steven Rostedt
  • Re: [PATCH 3/8] netfilter: Convert print_tuple functions to return void, Pablo Neira Ayuso
    • Re: [PATCH 3/8] netfilter: Convert print_tuple functions to return void, Joe Perches
• [PATCH] iptables-compat: homogenize error messages with 'R' option, Ana Rey
  • Re: [PATCH] iptables-compat: homogenize error messages with 'R' option, Pablo Neira Ayuso
• [PATCH] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
• [PATCH nft] utils: indicate file and line on memory allocation errors, Pablo Neira Ayuso
• [Repost] Fix userspace compilation of ip_tables.h/ip6_tables.h in C++ mode, Matthew Weber
  • Re: [Repost] Fix userspace compilation of ip_tables.h/ip6_tables.h in C++ mode, Pablo Neira Ayuso
    • Re: [Repost] Fix userspace compilation of ip_tables.h/ip6_tables.h in C++ mode, Matthew Weber
• [libnftnf PATCH] expr: meta: Add cgroup support, Ana Rey
  • [PATCH] netfilter: nft_meta: add cgroup support, Ana Rey
    • Re: [PATCH] netfilter: nft_meta: add cgroup support, Pablo Neira Ayuso
  • [nft PATCH] src: Add cgroup support in meta expresion, Ana Rey
    • Re: [nft PATCH] src: Add cgroup support in meta expresion, Pablo Neira Ayuso
  • Re: [libnftnf PATCH] expr: meta: Add cgroup support, Pablo Neira Ayuso
• recent module, Pietro Paolini
  • Re: recent module, Sven-Haegar Koch
• [PATCH] netfilter: nft_reject_bridge: fix missing declaration of csum_ipv6_magic, Jeff Mahoney
• [PATCH] netfilter: nft_reject_bridge: Fix powerpc build error, Guenter Roeck
  • Re: [PATCH] netfilter: nft_reject_bridge: Fix powerpc build error, David Miller
• iptables/ipset "-m set" alignment problem 64bit kernel 32bit userspace, Sven-Haegar Koch
  • Re: iptables/ipset "-m set" alignment problem 64bit kernel 32bit userspace, Florian Westphal
    • Re: iptables/ipset "-m set" alignment problem 64bit kernel 32bit userspace, Jan Engelhardt
    • Re: iptables/ipset "-m set" alignment problem 64bit kernel 32bit userspace, Jozsef Kadlecsik
• bug report: use after free bug leading to kernel panic, eric gisse
  • Re: bug report: use after free bug leading to kernel panic, Florian Westphal
    • Re: bug report: use after free bug leading to kernel panic, eric gisse
      • Re: bug report: use after free bug leading to kernel panic, Florian Westphal
        • Re: bug report: use after free bug leading to kernel panic, Mathias Krause
    • Re: bug report: use after free bug leading to kernel panic, Mathias Krause
• [PATCH] netfilter: nf_log: fix sparse warning in nf_logger_find_get(), Pablo Neira Ayuso
• [PATCH] extensions: devgroup: fix showing and saving of dst-group, Ana Rey
  • Re: [PATCH] extensions: devgroup: fix showing and saving of dst-group, Pablo Neira Ayuso
• [PATCH] iptables-compat: homogenize error messages, Ana Rey
  • Re: [PATCH] iptables-compat: homogenize error messages, Pablo Neira Ayuso
• [PATCH net-next] netfilter: fix spelling errors, Stephen Hemminger
  • Re: [PATCH net-next] netfilter: fix spelling errors, Pablo Neira Ayuso
• [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
  • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Florian Westphal
    • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
    • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
  • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
    • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
    • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Pablo Neira Ayuso
      • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
        • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Pablo Neira Ayuso
          • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
          • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
        • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Joe Perches
          • Re: [RFA][PATCH 2/8] netfilter: Remove return values for print_conntrack callbacks, Steven Rostedt
• [RFA][PATCH 3/8] netfilter: Convert print_tuple functions to return void, Steven Rostedt
  • Re: [RFA][PATCH 3/8] netfilter: Convert print_tuple functions to return void, Steven Rostedt
  • Re: [RFA][PATCH 3/8] netfilter: Convert print_tuple functions to return void, Steven Rostedt
• [RFA][PATCH 4/8] netfilter: Remove checks of seq_printf() return values, Steven Rostedt
  • Re: [RFA][PATCH 4/8] netfilter: Remove checks of seq_printf() return values, Steven Rostedt
• [ebtables-compat PATCH] extensions: libebt_log, Giuseppe Longo
  • Message not available
    • Re: [ebtables-compat PATCH] extensions: libebt_log, Giuseppe Longo
• [ebtables-compat PATCH] build ebtables extensions, Giuseppe Longo
  • <Possible follow-ups>
  • [ebtables-compat PATCH] build ebtables extensions, Giuseppe Longo
    • Re: [ebtables-compat PATCH] build ebtables extensions, Pablo Neira Ayuso
      • Re: [ebtables-compat PATCH] build ebtables extensions, Giuseppe Longo
        • Re: [ebtables-compat PATCH] build ebtables extensions, Pablo Neira Ayuso
• [PATCH v4 1/3] netfilter: log: protect nf_log_register against double registering, Marcelo Ricardo Leitner
  • [PATCH v4 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
    • Re: [PATCH v4 3/3] Make use of pr_fmt where applicable, Pablo Neira Ayuso
      • Re: [PATCH v4 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
  • [PATCH v4 2/3] Do error handling if __build_packet_message fails, Marcelo Ricardo Leitner
    • Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails, Pablo Neira Ayuso
      • Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails, Marcelo Ricardo Leitner
        • Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails, Pablo Neira Ayuso
          • Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails, Marcelo Ricardo Leitner
            • Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails, Pablo Neira Ayuso
              • Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails, Marcelo Ricardo Leitner
          • Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails, Florian Westphal
            • Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails, Pablo Neira Ayuso
              • Re: [PATCH v4 2/3] Do error handling if __build_packet_message fails, Florian Westphal
  • Re: [PATCH v4 1/3] netfilter: log: protect nf_log_register against double registering, Pablo Neira Ayuso
• [PATCH v2] Introduce nft_log_dereference() macro, Marcelo Ricardo Leitner
  • Re: [PATCH v2] Introduce nft_log_dereference() macro, Pablo Neira Ayuso
• [PATCH v3 1/3] netfilter: log: protect nf_log_register against double registering, Marcelo Ricardo Leitner
  • [PATCH v3 2/3] Do error handling if __build_packet_message fails, Marcelo Ricardo Leitner
    • Re: [PATCH v3 2/3] Do error handling if __build_packet_message fails, Marcelo Ricardo Leitner
  • [PATCH v3 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
• nftables in network name spaces breaks networking, Ed Tomlinson
  • Re: nftables in network name spaces breaks networking, Pablo Neira Ayuso
• [PATCH] Make_global.am: Don't include host headers, Baruch Siach
  • Re: [PATCH] Make_global.am: Don't include host headers, Jozsef Kadlecsik
• [ebtables-compat PATCH 1/2] nft-shared: rework inversion of matches, Arturo Borrero Gonzalez
  • [ebtables-compat PATCH 2/2] nft-bridge: fix printing of inverted protocols, addresses, Arturo Borrero Gonzalez
  • Re: [ebtables-compat PATCH 1/2] nft-shared: rework inversion of matches, Pablo Neira Ayuso
• [PATCH 0/5] bridge reject fixes, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nf_reject_ipv4: split nf_send_reset() in smaller functions, Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: nft_reject_bridge: don't use IP stack to reject traffic, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: nf_tables_bridge: update hook_mask to allow {pre,post}routing, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: nft_reject_bridge: restrict reject to prerouting and input, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: nf_reject_ipv6: split nf_send_reset6() in smaller functions, Pablo Neira Ayuso
• netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse, billbonaparte
  • <Possible follow-ups>
  • netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse, billbonaparte
    • Re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse, Florian Westphal
    • Re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse, Jesper Dangaard Brouer
  • Re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse, billbonaparte
  • Re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse, Jesper Dangaard Brouer
  • re: netfilter: nf_conntrack: there maybe a bug in __nf_conntrack_confirm, when it race against get_next_corpse, Bill Bonaparte
• [GIT PULL nf] IPVS Fixes for v3.18, Simon Horman
  • [PATCH nf] ipvs: Avoid null-pointer deref in debug code, Simon Horman
  • Re: [GIT PULL nf] IPVS Fixes for v3.18, Pablo Neira Ayuso
  • Re: [GIT PULL nf] IPVS Fixes for v3.18, Pablo Neira Ayuso
    • Re: [GIT PULL nf] IPVS Fixes for v3.18, Simon Horman
• [GIT PULL nf-next] IPVS Updates for v3.19, Simon Horman
  • [PATCH nf-next] ipvs: remove unnecessary assignment in __ip_vs_get_out_rt, Simon Horman
  • Re: [GIT PULL nf-next] IPVS Updates for v3.19, Pablo Neira Ayuso
• [nf_tables PATCH] netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops(), Arturo Borrero Gonzalez
  • Re: [nf_tables PATCH] netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops(), Pablo Neira Ayuso
• [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1), Kim N
  • Re: [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1), Jozsef Kadlecsik
    • Re: [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1), Thomas Graf
      • Re: [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1), Jozsef Kadlecsik
        • Re: [Kernel Bug 86261] Ipset add/restore slowed to a crawl in kernel 3.17 (and 3.17.1), Jozsef Kadlecsik
• iptables doesn't match udp rule, Ralf Schwarzmaier
• [PATCH] add missing ipset_parse_tcp_udp_port to libipset.map, Thomas Backlund
  • Re: [PATCH] add missing ipset_parse_tcp_udp_port to libipset.map, Jan Engelhardt
    • [PATCH v2] add missing ipset_parse_tcp_udp_port to libipset.map, Thomas Backlund
      • Re: [PATCH v2] add missing ipset_parse_tcp_udp_port to libipset.map, Jozsef Kadlecsik
    • Re: [PATCH] add missing ipset_parse_tcp_udp_port to libipset.map, Jozsef Kadlecsik
• [PATCH 1/3] Introduce nft_log_dereference() macro, Marcelo Ricardo Leitner
  • [PATCH v2 2/3] netfilter: log: protect nf_log_register against double registering, Marcelo Ricardo Leitner
    • Re: [PATCH v2 2/3] netfilter: log: protect nf_log_register against double registering, Pablo Neira Ayuso
      • Re: [PATCH v2 2/3] netfilter: log: protect nf_log_register against double registering, Marcelo Ricardo Leitner
  • [PATCH 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
    • Re: [PATCH 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
      • Re: [PATCH 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
    • Message not available
      • [PATCH v2 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
        • Re: [PATCH v2 3/3] Make use of pr_fmt where applicable, Pablo Neira Ayuso
          • Re: [PATCH v2 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
            • Re: [PATCH v2 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
              • Re: [PATCH v2 3/3] Make use of pr_fmt where applicable, Pablo Neira Ayuso
                • Re: [PATCH v2 3/3] Make use of pr_fmt where applicable, Marcelo Ricardo Leitner
  • Re: [PATCH 1/3] Introduce nft_log_dereference() macro, Pablo Neira Ayuso
    • Re: [PATCH 1/3] Introduce nft_log_dereference() macro, Marcelo Ricardo Leitner
• [PATCH] libipset: Bump lib version and update map file, Neutron Soutmun
  • Re: [PATCH] libipset: Bump lib version and update map file, Jozsef Kadlecsik
• [RFC PATCH netfilter] Fix Unknown symbols in nf_reject_ipvX modules, Li Zhong
  • Re: [RFC PATCH netfilter] Fix Unknown symbols in nf_reject_ipvX modules, Pablo Neira Ayuso
    • Re: [RFC PATCH netfilter] Fix Unknown symbols in nf_reject_ipvX modules, Li Zhong
• netfilter: NAT: do the optimization for getting curr_tuple in function nf_nat_setup_info, billbonaparte
• [nft PATCH 1/2 v2] evaluate: reject: check the context in reject without reason for bridge and inet tables, Alvaro Neira Ayuso
  • [nft PATCH 2/2 v2] evaluate: reject: enhance the error support throwing message with more details, Alvaro Neira Ayuso
    • Re: [nft PATCH 2/2 v2] evaluate: reject: enhance the error support throwing message with more details, Pablo Neira Ayuso
  • Re: [nft PATCH 1/2 v2] evaluate: reject: check the context in reject without reason for bridge and inet tables, Pablo Neira Ayuso
• [nft PATCH 1/2] evaluate: reject: check the context in reject without reason for bridge and inet tables, Alvaro Neira Ayuso
  • [nft PATCH 2/2] evaluate: reject: enhance the error support throwing messages with more details, Alvaro Neira Ayuso
• [nftables PATCH] meta: Add support for datatype devgroup, Ana Rey
  • Re: [nftables PATCH] meta: Add support for datatype devgroup, Pablo Neira Ayuso
• [PATCH] iptables-compat: fix empty chains after first invocation of iptables-compat -L, Pablo Neira Ayuso
• [PATCH 1/3] iptables-compat: fix chain policy reset with iptables -L -n, Pablo Neira Ayuso
  • [PATCH 3/3] iptables-compat: assume chain policy NF_ACCEPT when creating built-in chains, Pablo Neira Ayuso
  • [PATCH 2/3] iptables-compat: statify unused built-in table/chain functions, Pablo Neira Ayuso
  • Re: [PATCH 1/3] iptables-compat: fix chain policy reset with iptables -L -n, Ana Rey
• [PATCH 0/3] netfilter: nf_log: nlmsg size fixes, Florian Westphal
  • [PATCH 1/3] netfilter: nf_log: account for size of NLMSG_DONE attribute, Florian Westphal
    • Re: [PATCH 1/3] netfilter: nf_log: account for size of NLMSG_DONE attribute, Pablo Neira Ayuso
      • Re: [PATCH 1/3] netfilter: nf_log: account for size of NLMSG_DONE attribute, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: nfnetlink_log: fix maximum packet length logged to userspace, Florian Westphal
    • Re: [PATCH 2/3] netfilter: nfnetlink_log: fix maximum packet length logged to userspace, Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: nf_log: release skbuff on nlmsg put failure, Florian Westphal
    • Re: [PATCH 3/3] netfilter: nf_log: release skbuff on nlmsg put failure, Pablo Neira Ayuso
• Xtables Getting Started Question, Daniel Martin
• [nft PATCH 1/2 v3] evaluate: reject: accept a reject reason with incorrect network context, Alvaro Neira Ayuso
  • [nft PATCH 2/2 v3] evaluate: reject: check in bridge and inet the network context in reject, Alvaro Neira Ayuso
    • Re: [nft PATCH 2/2 v3] evaluate: reject: check in bridge and inet the network context in reject, Pablo Neira Ayuso
  • Re: [nft PATCH 1/2 v3] evaluate: reject: accept a reject reason with incorrect network context, Pablo Neira Ayuso
• Re: [PATCH] netfilter: xt_hashlimit: Enhance the xt_hashlimit to avoid duplicated codes, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: xt_hashlimit: Enhance the xt_hashlimit to avoid duplicated codes, Feng Gao
• [nft PATCH 1/4 v2] evaluate: refactor function to check the reject family in inet and bridge, Alvaro Neira Ayuso
  • [nft PATCH 3/4 v2] evaluate: check in bridge and inet the network context in reject, Alvaro Neira Ayuso
  • [nft PATCH 2/4 v2] evaluate: accept a reject reason with incorrect network context, Alvaro Neira Ayuso
  • [nft PATCH 4/4 v4] test: update and add the reject tests for ip, ip6, bridge and inet., Alvaro Neira Ayuso
• [RFC nft PATCH] src: add import operation, Arturo Borrero Gonzalez
  • Re: [RFC nft PATCH] src: add import operation, Pablo Neira Ayuso
• [nft PATCH] mnl: delete useless parameter nf_sock in batch functions, Arturo Borrero Gonzalez
  • Re: [nft PATCH] mnl: delete useless parameter nf_sock in batch functions, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats allocation, Sabrina Dubroca
  • Re: [PATCH nf] netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats allocation, Pablo Neira Ayuso
• [patch] netfilter: ipset: off by one in ip_set_nfnl_get_byindex(), Dan Carpenter
  • Re: [patch] netfilter: ipset: off by one in ip_set_nfnl_get_byindex(), Jozsef Kadlecsik
    • Re: [patch] netfilter: ipset: off by one in ip_set_nfnl_get_byindex(), Pablo Neira Ayuso
• [PATCH] netfilter: Fix wastful cleanup check for unconfirmed conn in get_next_corpse, Feng Gao
  • Message not available
    • Re: [PATCH] netfilter: Fix wastful cleanup check for unconfirmed conn in get_next_corpse, Feng Gao
• [nft PATCH 1/4] evaluate: refactor function to check the reject family in inet and bridge, Alvaro Neira Ayuso
  • [nft PATCH 3/4] evaluate: no check the network context in reject with tcp reset reason, Alvaro Neira Ayuso
    • Re: [nft PATCH 3/4] evaluate: no check the network context in reject with tcp reset reason, Pablo Neira Ayuso
      • Re: [nft PATCH 3/4] evaluate: no check the network context in reject with tcp reset reason, Álvaro Neira Ayuso
  • [nft PATCH 2/4] evaluate: accept a reject reason with incorrect network context, Alvaro Neira Ayuso
  • [nft PATCH 4/4 v3] evaluate: fix a crash if we check the transport protocol is tcp, Alvaro Neira Ayuso
    • Re: [nft PATCH 4/4 v3] evaluate: fix a crash if we check the transport protocol is tcp, Pablo Neira Ayuso
      • Re: [nft PATCH 4/4 v3] evaluate: fix a crash if we check the transport protocol is tcp, Álvaro Neira Ayuso
  • Re: [nft PATCH 1/4] evaluate: refactor function to check the reject family in inet and bridge, Pablo Neira Ayuso
• [PATCH] netfilter: log: protect nf_log_register against double registering, Marcelo Ricardo Leitner
  • Re: [PATCH] netfilter: log: protect nf_log_register against double registering, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: log: protect nf_log_register against double registering, Marcelo Ricardo Leitner
      • Re: [PATCH] netfilter: log: protect nf_log_register against double registering, Pablo Neira Ayuso
• TCP LAST ACK incorrectly treated as invalid, vDev
  • Re: TCP LAST ACK incorrectly treated as invalid, Jozsef Kadlecsik
    • Re: TCP LAST ACK incorrectly treated as invalid, vDev
      • Re: TCP LAST ACK incorrectly treated as invalid, Jozsef Kadlecsik
        • Re: TCP LAST ACK incorrectly treated as invalid, vDev
          • Re: TCP LAST ACK incorrectly treated as invalid, Jozsef Kadlecsik
            • Re: TCP LAST ACK incorrectly treated as invalid, Jozsef Kadlecsik
              • Re: TCP LAST ACK incorrectly treated as invalid, vDev
                • Re: TCP LAST ACK incorrectly treated as invalid, Jozsef Kadlecsik
                  • Re: TCP LAST ACK incorrectly treated as invalid, vDev
                    • Re: TCP LAST ACK incorrectly treated as invalid, vDev
                    • Re: TCP LAST ACK incorrectly treated as invalid, Jozsef Kadlecsik
                      • Re: TCP LAST ACK incorrectly treated as invalid, vDev
• [libnftnl PATCH] ruleset: deconstify _get interface, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] ruleset: deconstify _get interface, Pablo Neira Ayuso
• [nft PATCH v3] evaluate: fix a crash if we specify ether type or meta nfproto in reject, Alvaro Neira Ayuso
  • Re: [nft PATCH v3] evaluate: fix a crash if we specify ether type or meta nfproto in reject, Pablo Neira Ayuso
• [libnftnl PATCH v3] utils: fix arp family number, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH v3] utils: fix arp family number, Pablo Neira Ayuso