Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 1/1] netfilter/jump_label: use HAVE_JUMP_LABEL?, Zhouyi Zhou
  • Re: [PATCH 1/1] netfilter/jump_label: use HAVE_JUMP_LABEL?, Florian Westphal
    • Re: [PATCH 1/1] netfilter/jump_label: use HAVE_JUMP_LABEL?, Zhouyi Zhou
      • Re: [PATCH 1/1] netfilter/jump_label: use HAVE_JUMP_LABEL?, Florian Westphal
• [PATCH] verdict type: handle verdict flags and encoded additional information, Patrick McHardy
• [PATCH 0/3] nftables: fix some endian issues, Patrick McHardy
  • [PATCH 1/3] payload: take endianess into account when updating the payload context, Patrick McHardy
  • [PATCH 3/3] proto: fix byteorder of ETH_P_* values, Patrick McHardy
  • [PATCH 2/3] datatype: take endianess into account in symbolic_constant_print(), Patrick McHardy
  • Re: [PATCH 0/3] nftables: fix some endian issues, Álvaro Neira Ayuso
• [nft PATCH] linealize: generate unary expression with the appropiate operation, Alvaro Neira Ayuso
  • Re: [nft PATCH] linealize: generate unary expression with the appropiate operation, Pablo Neira Ayuso
• [PATCH nft] src: don't return error in netlink_linearize_rule(), Pablo Neira Ayuso
• [libnftnl PATCH 1/2] examples: merge nft-chain-{xml|json}-add.c, Arturo Borrero Gonzalez
  • [libnftnl PATCH 2/2] examples: nft-chain-parse-add: add batching support, Arturo Borrero Gonzalez
    • Re: [libnftnl PATCH 2/2] examples: nft-chain-parse-add: add batching support, Pablo Neira Ayuso
  • Re: [libnftnl PATCH 1/2] examples: merge nft-chain-{xml|json}-add.c, Pablo Neira Ayuso
• [PATCH] netfilter: x_tables: allow to use default cgroup match, Daniel Borkmann
  • Re: [PATCH] netfilter: x_tables: allow to use default cgroup match, Alexey Perevalov
    • Re: [PATCH] netfilter: x_tables: allow to use default cgroup match, Pablo Neira Ayuso
• [libnftnl PATCH 1/2] examples: nft-chain-del: add chain_del_parse(), Arturo Borrero Gonzalez
  • [libnftnl PATCH 2/2] examples: nft-chain-del: support new batching interface, Arturo Borrero Gonzalez
• [nft PATCH v2] nft: add reject support, Alvaro Neira Ayuso
  • Re: [nft PATCH v2] nft: add reject support, Pablo Neira Ayuso
    • Re: [nft PATCH v2] nft: add reject support, Álvaro Neira Ayuso
• Post_Routing hook with encapsulated packets (forwarding scenario), Hugo Alves
• [libnftnl PATCH] Rename xfree() to libnftnl_xfree() to avoid symbol naming conflict, Thomas Petazzoni
  • Re: [libnftnl PATCH] Rename xfree() to libnftnl_xfree() to avoid symbol naming conflict, Pablo Neira Ayuso
    • Re: [libnftnl PATCH] Rename xfree() to libnftnl_xfree() to avoid symbol naming conflict, Thomas Petazzoni
    • Re: [libnftnl PATCH] Rename xfree() to libnftnl_xfree() to avoid symbol naming conflict, Jan Engelhardt
      • Re: [libnftnl PATCH] Rename xfree() to libnftnl_xfree() to avoid symbol naming conflict, Pablo Neira Ayuso
• none zero check of the classid in xt_cgroup, Alexey Perevalov
  • Re: none zero check of the classid in xt_cgroup, Daniel Borkmann
• Centos 6.5 xtables Addons, Glenn Sams
  • Re: Centos 6.5 xtables Addons, Jan Engelhardt
• [PATCH 1/3 libnftnl] common: add batching interfaces, Pablo Neira Ayuso
  • [PATCH 3/3 libnftnl] examples: nft-chain-add: support new batching interface, Pablo Neira Ayuso
  • [PATCH 2/3 libnftnl] examples: nft-chain-add: add chain_add_parse(), Pablo Neira Ayuso
• [nft RFC PATCH] src: add set optimization options, Arturo Borrero Gonzalez
  • Re: [nft RFC PATCH] src: add set optimization options, Pablo Neira Ayuso
    • Re: [nft RFC PATCH] src: add set optimization options, Patrick McHardy
      • Re: [nft RFC PATCH] src: add set optimization options, Arturo Borrero Gonzalez
        • Re: [nft RFC PATCH] src: add set optimization options, Patrick McHardy
• [PATCHv2 1/2] netfilter: move NAT Kconfig switches out of the iptables scope, Pablo Neira Ayuso
• [nft PATCH] More extensive error checking on base chain, Yanchuan Nian
  • Re: [nft PATCH] More extensive error checking on base chain, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: move NAT Kconfig switches out of the iptables scope, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: nf_tables: nat expression must select CONFIG_NF_NAT, Pablo Neira Ayuso
• [libnftnl PATCH 1/4] examples: fix nft-set-del by adding batching support, Arturo Borrero Gonzalez
  • [libnftnl PATCH 2/4] examples: fix with batching and generalize nft-set-json-add.c, Arturo Borrero Gonzalez
  • [libnftnl PATCH 3/4] examples: add batching support to nft-set-elem-add.c, Arturo Borrero Gonzalez
  • [libnftnl PATCH 4/4] examples: fix nft-set-elem-del.c by adding batching support, Arturo Borrero Gonzalez
• [libnftnl PATCH 1/4] examples: fix nft-table-add by adding batching support, Arturo Borrero Gonzalez
  • [libnftnl PATCH 2/4] examples: fix nft-table-del by adding batching support, Arturo Borrero Gonzalez
  • [libnftnl PATCH 3/4] examples: fix nft-table-upd by adding batching support, Arturo Borrero Gonzalez
  • [libnftnl PATCH 4/4] examples: fix and merge nft-table-{xml|json}-add.c, Arturo Borrero Gonzalez
• [libnftnl PATCH 1/3] examples: fix nft-chain-add by adding batching support, Arturo Borrero Gonzalez
  • [libnftnl PATCH 2/3] examples: fix nft-chain-del by adding batching support, Arturo Borrero Gonzalez
  • [libnftnl PATCH 3/3] examples: fix and merge nft-chain-{xml|json}-add.c, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH 1/3] examples: fix nft-chain-add by adding batching support, Pablo Neira Ayuso
• Bug: nft cannot identify elements in set correctly, Yanchuan Nian
  • Re: Bug: nft cannot identify elements in set correctly, Florian Westphal
• Bug: Some anonymous sets aren't displayed correctly, Yanchuan Nian
• [nft PATCH] Remove unused function netlink_get_table, Yanchuan Nian
• [nft PATCH] Fix memory leak in nft get operation, Yanchuan Nian
• [PATCH nftables] payload: use proto_unknown for raw protocol header, Yuxuan Shui
  • Re: [PATCH nftables] payload: use proto_unknown for raw protocol header, Pablo Neira Ayuso
• [PATCH] nft-arp: remove wrong conditions, Giuseppe Longo
  • Re: [PATCH] nft-arp: remove wrong conditions, Pablo Neira Ayuso
• [PATCH] netfilter: xt_u32: Accept negative offset in AT operation, Takero Funaki
• [PATCH 0/5] fix error return code, Julia Lawall
  • [PATCH 4/5] netfilter: nf_tables: fix error return code, Julia Lawall
    • Re: [PATCH 4/5] netfilter: nf_tables: fix error return code, Pablo Neira Ayuso
• SDP NATing issue producing invalid X.Y.0.0 IPs, Cormac Long
• [PATCH] [libnftnl] expr: meta: Add cpu support for meta expresion, Ana Rey
  • [PATCH] netfilter: nf_tables: Add cpu attribute support to meta expresion., Ana Rey
    • Re: [PATCH] netfilter: nf_tables: Add cpu attribute support to meta expresion., Pablo Neira Ayuso
  • [PATCH] [nft] src: Add support for cpu in meta expresion, Ana Rey
    • Re: [PATCH] [nft] src: Add support for cpu in meta expresion, Pablo Neira Ayuso
  • [PATCH] [nft] tests: Add tests for cpu attribute of meta expresion., Ana Rey
  • Re: [PATCH] [libnftnl] expr: meta: Add cpu support for meta expresion, Pablo Neira Ayuso
• [PATCH v2] net: reallocate new socket option number for IPV6_AUTOFLOWLABEL, Pablo Neira Ayuso
  • Re: [PATCH v2] net: reallocate new socket option number for IPV6_AUTOFLOWLABEL, David Miller
  • Re: [PATCH v2] net: reallocate new socket option number for IPV6_AUTOFLOWLABEL, Dave Jones
• [PATCH] net: reallocate new socket option number for IPV6_AUTOFLOWLABEL, Pablo Neira Ayuso
  • Re: [PATCH] net: reallocate new socket option number for IPV6_AUTOFLOWLABEL, Florian Westphal
    • Re: [PATCH] net: reallocate new socket option number for IPV6_AUTOFLOWLABEL, David Miller
  • Re: [PATCH] net: reallocate new socket option number for IPV6_AUTOFLOWLABEL, Pablo Neira Ayuso
• [PATCH 0/3] nftables: add cpu attribute to nft_meta, Valentina Giusti
  • [PATCH 1/3] netfilter: nft_meta: add attribute to match cpu handling the packet, Valentina Giusti
  • [PATCH 2/3] libnftnl: add attribute for cpu handling the packet, Valentina Giusti
  • [PATCH 3/3] nftables: add support for cpu meta attribute, Valentina Giusti
• Re: ip6tables filter breakage., David Miller
  • Re: ip6tables filter breakage., Pablo Neira Ayuso
    • Re: ip6tables filter breakage., Tom Herbert
• [PATCH] nfacct: add filter in to the list operation, Alexey Perevalov
  • [PATCH] nfacct: add filter in to the list operation, Alexey Perevalov
    • Re: [PATCH] nfacct: add filter in to the list operation, Pablo Neira Ayuso
      • Re: nfacct: add filter in to the list operation, Alexey Perevalov
      • [PATCH V2] nfacct: add filter in to the list operation, Alexey Perevalov
• README: Merge window prep, David Miller
• [nft PATCH] tests: Add tests for pkttype attribute., Ana Rey
• [nft PATCH v2] src: Add support for pkttype in meta expresion, Ana Rey
• [PATCH] netfilter: nf_tables: don't update chain with unset counters, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: don't update chain with unset counters, Eric Dumazet
    • Re: [PATCH] netfilter: nf_tables: don't update chain with unset counters, Pablo Neira Ayuso
• [PATCH] netfilter: h323: Remove typedefs from structs, Himangi Saraogi
• [nf-next 1/2] net/netfilter/ipset: Resolve missing-field-initializer warnings, Jeff Kirsher
  • [nf-next 2/2] netfilter: Resolve missing-field-initializers warnings, Jeff Kirsher
• nftables null pointer, Matteo Croce
  • Re: nftables null pointer, Pablo Neira Ayuso
    • Re: nftables null pointer, Matteo Croce
      • Re: nftables null pointer, Pablo Neira Ayuso
        • Re: nftables null pointer, Matteo Croce
          • Re: nftables null pointer, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: uninitialize element key/data from the commit path, Pablo Neira Ayuso
• [nft PATCH 0/5] Changes in nft byteorder conversions, Alvaro Neira Ayuso
  • [nft PATCH 1/5] payload: fix update context with wrong byteorder, Alvaro Neira Ayuso
    • Re: [nft PATCH 1/5] payload: fix update context with wrong byteorder, Patrick McHardy
  • [nft PATCH 2/5] payload: generate dependency in the correct byteorder, Alvaro Neira Ayuso
    • Re: [nft PATCH 2/5] payload: generate dependency in the correct byteorder, Patrick McHardy
  • [nft PATCH 3/5 v3] src: fix byteorder conversions in constant values, Alvaro Neira Ayuso
    • Re: [nft PATCH 3/5 v3] src: fix byteorder conversions in constant values, Patrick McHardy
  • [nft PATCH 4/5 v2] src: fix byteorder conversions in range values, Alvaro Neira Ayuso
  • [nft PATCH 5/5 v2] src: fix byteorder conversions in sets, Alvaro Neira Ayuso
    • Re: [nft PATCH 5/5 v2] src: fix byteorder conversions in sets, Patrick McHardy
• [nft PATCH] doc: update documentation with 'monitor' and 'export', Arturo Borrero Gonzalez
• [PATCH net-next v5 0/3] Lockless netlink_lookup() with new concurrent hash table, Thomas Graf
  • [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Thomas Graf
    • Re: [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Nikolay Aleksandrov
  • [PATCH net-next 1/3] lib: Resizable, Scalable, Concurrent Hash Table, Thomas Graf
    • Re: [PATCH net-next 1/3] lib: Resizable, Scalable, Concurrent Hash Table, Nikolay Aleksandrov
  • [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Thomas Graf
    • Re: [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Nikolay Aleksandrov
    • Re: [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Sasha Levin
      • Re: [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, David Miller
        • Re: [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Eric Dumazet
          • Re: [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, David Miller
  • Re: [PATCH net-next v5 0/3] Lockless netlink_lookup() with new concurrent hash table, David Miller
• what is the default value of /proc/sys/net/netfilter/nf_conntrack_helper ?, Toralf Förster
  • Re: what is the default value of /proc/sys/net/netfilter/nf_conntrack_helper ?, Florian Westphal
• [PATCH 0/3] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH 1/3] ipvs: Maintain all DSCP and ECN bits for ipv6 tun forwarding, Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: nf_tables: Avoid duplicate call to nft_data_uninit() for same key, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: xt_LED: fix too short led-always-blink, Pablo Neira Ayuso
  • Re: [PATCH 0/3] Netfilter/IPVS fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 0/3] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 1/3] netfilter: compat: initialize all fields in xt_init, Pablo Neira Ayuso
    • [PATCH 2/3] ipvs: fix dependency on nf_defrag_ipv6, Pablo Neira Ayuso
    • [PATCH 3/3] netfilter: nft_compat: use-after-free when deleting targets, Pablo Neira Ayuso
    • Re: [PATCH 0/3] Netfilter/IPVS fixes for net, David Miller
• [PATCH] nftables: Avoid duplicate call to nft_data_uninit() for same key, Thomas Graf
  • Re: [PATCH] nftables: Avoid duplicate call to nft_data_uninit() for same key, Pablo Neira Ayuso
• [PATCH net-next v4 0/3] Lockless netlink_lookup() with new concurrent hash table, Thomas Graf
  • [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Thomas Graf
    • Re: [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Nikolay Aleksandrov
      • Re: [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Thomas Graf
        • Re: [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Patrick McHardy
          • Re: [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Thomas Graf
            • Re: [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Patrick McHardy
  • [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Thomas Graf
    • Re: [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Nikolay Aleksandrov
      • Re: [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Thomas Graf
        • Re: [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Nikolay Aleksandrov
  • [PATCH net-next 1/3] lib: Resizable, Scalable, Concurrent Hash Table, Thomas Graf
• [PATCH net-next v3 0/3] Lockless netlink_lookup() with new concurrent hash table, Thomas Graf
  • [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Thomas Graf
    • Re: [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Patrick McHardy
      • Re: [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Thomas Graf
        • Re: [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Patrick McHardy
  • [PATCH net-next 1/3] lib: Resizable, Scalable, Concurrent Hash Table, Thomas Graf
    • Re: [PATCH net-next 1/3] lib: Resizable, Scalable, Concurrent Hash Table, Nikolay Aleksandrov
      • Re: [PATCH net-next 1/3] lib: Resizable, Scalable, Concurrent Hash Table, Thomas Graf
    • Re: [PATCH net-next 1/3] lib: Resizable, Scalable, Concurrent Hash Table, Patrick McHardy
      • Re: [PATCH net-next 1/3] lib: Resizable, Scalable, Concurrent Hash Table, Thomas Graf
  • [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Thomas Graf
• [PATCH v2 0/3 net-next] Lockless netlink_lookup() with new concurrent hash table, Thomas Graf
  • [PATCH net-next 3/3] nftables: Convert nft_hash to use generic rhashtable, Thomas Graf
  • [PATCH net-next 1/3] lib: Resizable, Scalable, Concurrent Hash Table, Thomas Graf
  • [PATCH net-next 2/3] netlink: Convert netlink_lookup() to use RCU protected hash table, Thomas Graf
  • Re: [PATCH v2 0/3 net-next] Lockless netlink_lookup() with new concurrent hash table, David Miller
    • Re: [PATCH v2 0/3 net-next] Lockless netlink_lookup() with new concurrent hash table, David Miller
      • Re: [PATCH v2 0/3 net-next] Lockless netlink_lookup() with new concurrent hash table, Thomas Graf
• [PATCH 0/9] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 1/9] netfilter: bridge: add reject support, Pablo Neira Ayuso
  • [PATCH 9/9] netfilter: nf_tables: check for unset NFTA_SET_ELEM_LIST_ELEMENTS attribute, Pablo Neira Ayuso
  • [PATCH 7/9] netfilter: nfnetlink_acct: dump unmodified nfacct flags, Pablo Neira Ayuso
  • [PATCH 4/9] netfilter: nf_conntrack: remove exceptional & on function name, Pablo Neira Ayuso
  • [PATCH 8/9] netfilter: nfnetlink_acct: avoid using NFACCT_F_OVERQUOTA with bit helper functions, Pablo Neira Ayuso
  • [PATCH 6/9] netfilter: kill remnants of ulog targets, Pablo Neira Ayuso
  • [PATCH 5/9] netfilter: xt_LED: don't output error message redundantly, Pablo Neira Ayuso
  • [PATCH 2/9] netfilter: nf_tables: simplify set dump through netlink, Pablo Neira Ayuso
  • [PATCH 3/9] netfilter: xt_hashlimit: perform garbage collection from process context, Pablo Neira Ayuso
  • Re: [PATCH 0/9] Netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 0/9] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: xt_TEE: use IS_ENABLED(CONFIG_NF_DUP_IPV6), Pablo Neira Ayuso
    • [PATCH 3/9] ipvs: add sync_maxlen parameter for the sync daemon, Pablo Neira Ayuso
    • [PATCH 4/9] ipvs: add more mcast parameters for the sync daemon, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: reduce sparse warnings, Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: ip6t_REJECT: added missing icmpv6 codes, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: nf_dup: fix sparse warnings, Pablo Neira Ayuso
    • [PATCH 8/9] Revert "netfilter: xtables: compute exact size needed for jumpstack", Pablo Neira Ayuso
    • [PATCH 1/9] ipvs: Add ovf scheduler, Pablo Neira Ayuso
    • [PATCH 2/9] ipvs: call rtnl_lock early, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter updates for net-next, David Miller
  • [PATCH 0/9] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: nf_tables: pass ctx to nf_tables_expr_destroy(), Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: nf_tables: handle chain name lookups via rhltable, Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: nf_tables: add destroy_clone expression, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: nf_tables: add connlimit support, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: nf_tables: garbage collection for stateful expressions, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: Decrease code duplication regarding transparent socket option, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: nf_tables: pass context to object destroy indirection, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: Libify xt_TPROXY, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: nf_conncount: expose connection list interface, Pablo Neira Ayuso
  • [PATCH 0/9] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 3/9] netfilter: nf_tables: pass hook list to nft_{un,}register_flowtable_net_hooks(), Pablo Neira Ayuso
    • [PATCH 5/9] netfilter: nf_tables: pass hook list to flowtable event notifier, Pablo Neira Ayuso
    • [PATCH 6/9] netfilter: nf_tables: add devices to existing flowtable, Pablo Neira Ayuso
    • [PATCH 8/9] netfilter: nf_tables: allow to register flowtable with no devices, Pablo Neira Ayuso
    • [PATCH 4/9] netfilter: nf_tables: add nft_flowtable_hooks_destroy(), Pablo Neira Ayuso
    • [PATCH 7/9] netfilter: nf_tables: delete devices from flowtable, Pablo Neira Ayuso
    • [PATCH 9/9] netfilter: nf_tables: skip flowtable hooknum and priority on device updates, Pablo Neira Ayuso
    • [PATCH 2/9] netfilter: nf_tables: generalise flowtable hook parsing, Pablo Neira Ayuso
    • [PATCH 1/9] netfilter: ctnetlink: add kernel side filtering for dump, Pablo Neira Ayuso
    • Re: [PATCH 0/9] Netfilter updates for net-next, David Miller
• [PATCH nf-next] netfilter: don't use mutex_lock_interruptible(), Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: don't use mutex_lock_interruptible(), Julian Anastasov
• [PATCH] nftables: Add a flags attribute for lookup operator, Yuxuan Shui
  • [libnftnl PATCH] lookup: Add support for the flag attribute, Yuxuan Shui
  • [nftables PATCH] expr: Interpret OP_NEQ against a set as OP_LOOKUP, Yuxuan Shui
• [PATCH 0/6] tests: Automated regression testing, Ana Rey
  • [PATCH 2/6] [nft] tests: Add ip6 folder with test files., Ana Rey
  • [PATCH 3/6] [nft] tests: Add inet folder with test files., Ana Rey
  • [PATCH 1/6] [nft] tests: Add Automated regression testing, Ana Rey
  • [PATCH 5/6] [nft] tests: Add arp folder with test files., Ana Rey
  • [PATCH 6/6] [nft] tests: Add bridge folder with test files., Ana Rey
  • [PATCH 4/6] [nft] tests: Add any folder with test files., Ana Rey
• [PATCH v4 net-next 0/5] net: filter: split sk_filter into socket and bpf, cleanup names, Alexei Starovoitov
  • [PATCH v4 net-next 2/5] net: filter: rename sk_filter_proglen -> bpf_classic_proglen, Alexei Starovoitov
  • [PATCH v4 net-next 3/5] net: filter: rename sk_chk_filter() -> bpf_check_classic(), Alexei Starovoitov
  • [PATCH v4 net-next 5/5] net: filter: split 'struct sk_filter' into socket and bpf parts, Alexei Starovoitov
    • Re: [PATCH v4 net-next 5/5] net: filter: split 'struct sk_filter' into socket and bpf parts, Pablo Neira Ayuso
      • Re: [PATCH v4 net-next 5/5] net: filter: split 'struct sk_filter' into socket and bpf parts, Alexei Starovoitov
        • Re: [PATCH v4 net-next 5/5] net: filter: split 'struct sk_filter' into socket and bpf parts, Pablo Neira Ayuso
          • Re: [PATCH v4 net-next 5/5] net: filter: split 'struct sk_filter' into socket and bpf parts, Alexei Starovoitov
            • Re: [PATCH v4 net-next 5/5] net: filter: split 'struct sk_filter' into socket and bpf parts, Pablo Neira Ayuso
              • Re: [PATCH v4 net-next 5/5] net: filter: split 'struct sk_filter' into socket and bpf parts, Alexei Starovoitov
                • Re: [PATCH v4 net-next 5/5] net: filter: split 'struct sk_filter' into socket and bpf parts, David Miller
  • [PATCH v4 net-next 4/5] net: filter: rename sk_convert_filter() -> bpf_convert_filter(), Alexei Starovoitov
  • [PATCH v4 net-next 1/5] net: filter: simplify socket charging, Alexei Starovoitov
  • Re: [PATCH v4 net-next 0/5] net: filter: split sk_filter into socket and bpf, cleanup names, David Miller
• [PATCH] Fix overquota output result, Alexey Perevalov
  • [PATCH] Fix overquota output result, Alexey Perevalov
    • Re: [PATCH] Fix overquota output result, Pablo Neira Ayuso
      • [PATCH v2] Fix overquota output result, Alexey Perevalov
        • Re: [PATCH v2] Fix overquota output result, Pablo Neira Ayuso
• [PATCH 0/2] fixes for NFACCT_F_OVERQUOTA usage, Alexey Perevalov
  • [PATCH 1/2] netfilter: nfnetlink_acct: avoid using NFACCT_F_OVERQUOTA with bit helper funcitons, Alexey Perevalov
    • Re: [PATCH 1/2] netfilter: nfnetlink_acct: avoid using NFACCT_F_OVERQUOTA with bit helper funcitons, Pablo Neira Ayuso
      • [PATCH V2] netfilter: nfnetlink_acct: avoid using NFACCT_F_OVERQUOTA with bit helper funcitons, Alexey Perevalov
        • Re: [PATCH V2] netfilter: nfnetlink_acct: avoid using NFACCT_F_OVERQUOTA with bit helper funcitons, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: nfnetlink_acct: dump unmodified nfacct flags, Alexey Perevalov
    • Re: [PATCH 2/2] netfilter: nfnetlink_acct: dump unmodified nfacct flags, Pablo Neira Ayuso
• [PATCH nf-next] include: add linux/filter.h, Willem de Bruijn
  • Re: [PATCH nf-next] include: add linux/filter.h, Pablo Neira Ayuso
• [nft PATCH 2/4 v3] src: fix byteorder conversions in simple values, Alvaro Neira Ayuso
  • Re: [nft PATCH 2/4 v3] src: fix byteorder conversions in simple values, Pablo Neira Ayuso
    • Re: [nft PATCH 2/4 v3] src: fix byteorder conversions in simple values, Patrick McHardy
      • Re: [nft PATCH 2/4 v3] src: fix byteorder conversions in simple values, Pablo Neira Ayuso
• [PATCH 1/2 v2 net-next] netfilter: xt_bpf: add mising opaque struct sk_filter definition, Pablo Neira Ayuso
  • Re: [PATCH 1/2 v2 net-next] netfilter: xt_bpf: add mising opaque struct sk_filter definition, Willem de Bruijn
  • Re: [PATCH 1/2 v2 net-next] netfilter: xt_bpf: add mising opaque struct sk_filter definition, David Miller
• [PATCH net-next 1/2] netfilter: xt_bpf: don't include linux/filter.h from uapi header, Pablo Neira Ayuso
  • [PATCH net-next 2/2] net: filter: don't release unattached filter through call_rcu(), Pablo Neira Ayuso
    • Re: [PATCH net-next 2/2] net: filter: don't release unattached filter through call_rcu(), Alexei Starovoitov
    • Re: [PATCH net-next 2/2] net: filter: don't release unattached filter through call_rcu(), David Miller
  • Re: [PATCH net-next 1/2] netfilter: xt_bpf: don't include linux/filter.h from uapi header, Willem de Bruijn
    • Re: [PATCH net-next 1/2] netfilter: xt_bpf: don't include linux/filter.h from uapi header, Pablo Neira Ayuso
      • Re: [PATCH net-next 1/2] netfilter: xt_bpf: don't include linux/filter.h from uapi header, Willem de Bruijn
        • Re: [PATCH net-next 1/2] netfilter: xt_bpf: don't include linux/filter.h from uapi header, Pablo Neira Ayuso
• [PATCH v3 net-next] net: filter: cleanup sk_* and bpf_* names, Alexei Starovoitov
  • Re: [PATCH v3 net-next] net: filter: cleanup sk_* and bpf_* names, Pablo Neira Ayuso
    • Re: [PATCH v3 net-next] net: filter: cleanup sk_* and bpf_* names, Alexei Starovoitov
      • Re: [PATCH v3 net-next] net: filter: cleanup sk_* and bpf_* names, Pablo Neira Ayuso
        • Re: [PATCH v3 net-next] net: filter: cleanup sk_* and bpf_* names, Alexei Starovoitov
• [nft PATCH] nft: add reject support, Alvaro Neira Ayuso
• [nft PATCH 0/4] Changes in nft byteorder conversions, Alvaro Neira Ayuso
  • [nft PATCH 1/4] payload: fix update context with wrong byteorder, Alvaro Neira Ayuso
  • [nft PATCH 2/4 v2] src: fix byteorder conversions in simple values, Alvaro Neira Ayuso
  • [nft PATCH 3/4] src: fix byteorder conversions in range values, Alvaro Neira Ayuso
  • [nft PATCH 4/4] src: fix byteorder conversions in sets, Alvaro Neira Ayuso
• [PATCH nft v2] src: add level option to the log statement, Pablo Neira Ayuso
• [PATCH resend] nf: xt_LED: fix too short led-always-blink, Jiri Prchal
  • Re: [PATCH resend] nf: xt_LED: fix too short led-always-blink, Pablo Neira Ayuso
• Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Pablo Neira Ayuso
  • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Daniel Borkmann
    • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Alexei Starovoitov
      • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Pablo Neira Ayuso
        • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Alexei Starovoitov
          • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Pablo Neira Ayuso
            • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', David Miller
            • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Alexei Starovoitov
              • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', David Miller
  • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Willem de Bruijn
    • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Alexei Starovoitov
      • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Willem de Bruijn
        • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Alexei Starovoitov
          • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Willem de Bruijn
            • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Alexei Starovoitov
              • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Alexei Starovoitov
            • Re: [PATCH net-next] net: filter: rename 'struct sk_filter' to 'struct bpf_prog', Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: check for unset NFTA_SET_ELEM_LIST_ELEMENTS attribute, Pablo Neira Ayuso
• reset nfacct counters, Alexey Perevalov
  • Re: reset nfacct counters, Pablo Neira Ayuso
    • Re: reset nfacct counters, Alexey Perevalov
    • [PATCH] reset nfacct counters, Alexey Perevalov
      • Re: [PATCH] reset nfacct counters, Pablo Neira Ayuso
    • [PATCH] netfilter: nfnetlink_acct: use flag to reset counters, Alexey Perevalov
      • Re: [PATCH] netfilter: nfnetlink_acct: use flag to reset counters, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: nfnetlink_acct: use flag to reset counters, Alexey Perevalov
          • Re: [PATCH] netfilter: nfnetlink_acct: use flag to reset counters, Pablo Neira Ayuso
            • RE: [PATCH] netfilter: nfnetlink_acct: use flag to reset counters, Alexey Perevalov
            • [PATCH] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Alexey Perevalov
            • [PATCH] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Alexey Perevalov
              • Re: [PATCH] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Pablo Neira Ayuso
                • [PATCH v2] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Alexey Perevalov
                  • Re: [PATCH v2] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Pablo Neira Ayuso
                    • [[PATCH v3]] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Alexey Perevalov
                      • Re: [[PATCH v3]] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Pablo Neira Ayuso
                        • Re: [[PATCH v3]] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Alexey Perevalov
                          • Re: [[PATCH v3]] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Pablo Neira Ayuso
                        • Re: [[PATCH v3]] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Alexey Perevalov
                • Re: [PATCH] netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset, Alexey Perevalov
• [PATCH nft] src: add level option to the log statement, Pablo Neira Ayuso
  • Re: [PATCH nft] src: add level option to the log statement, Patrick McHardy
• [PATCH] netfilter: nf_conntrack: remove exceptional & on function name, Himangi Saraogi
  • Re: [PATCH] netfilter: nf_conntrack: remove exceptional & on function name, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: xt_hashlimit: perform garbage collection from process context, Eric Dumazet
  • Re: [PATCH nf-next] netfilter: xt_hashlimit: perform garbage collection from process context, Florian Westphal
    • Re: [PATCH nf-next] netfilter: xt_hashlimit: perform garbage collection from process context, Pablo Neira Ayuso
• [PATCH] netfilter: nf_sockopt_find() should return ERESTARTSYS, Eric Dumazet
  • Re: [PATCH] netfilter: nf_sockopt_find() should return ERESTARTSYS, Patrick McHardy
    • Re: [PATCH] netfilter: nf_sockopt_find() should return ERESTARTSYS, Eric Dumazet
    • [PATCH v2] netfilter: nf_sockopt_find() / nf_register_sockopt() should not return EINTR, Eric Dumazet
      • Re: [PATCH v2] netfilter: nf_sockopt_find() / nf_register_sockopt() should not return EINTR, Pablo Neira Ayuso
        • Re: [PATCH v2] netfilter: nf_sockopt_find() / nf_register_sockopt() should not return EINTR, Patrick McHardy
• [PATCH nft 1/3] main: propagate error to shell, Pablo Neira Ayuso
  • [PATCH nft 2/3] mnl: introduce NFT_NLMSG_MAXSIZE, Pablo Neira Ayuso
  • [PATCH nft 3/3] mnl: fix crashes when using sets with many elements, Pablo Neira Ayuso
• [PATCH libnftnl] set_elem: add nft_set_elems_nlmsg_build_payload_iter(), Pablo Neira Ayuso
• netfilter: remnants of ulog targets, Paul Bolle
  • Re: netfilter: remnants of ulog targets, Pablo Neira Ayuso
    • [PATCH] [linux-next] netfilter: kill remnants of ulog targets, Paul Bolle
      • Re: [PATCH] [linux-next] netfilter: kill remnants of ulog targets, Pablo Neira Ayuso
• [PATCH] netfilter: don't output error message redundantly, Duan Jiong
  • Re: [PATCH] netfilter: don't output error message redundantly, Pablo Neira Ayuso
    • [PATCH v2] netfilter: don't output error message redundantly, Duan Jiong
      • Re: [PATCH v2] netfilter: don't output error message redundantly, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: don't output error message redundantly, Patrick McHardy
      • Re: [PATCH] netfilter: don't output error message redundantly, Patrick McHardy
• [GIT PULL] Third Round of IPVS Fixes for v3.16, Simon Horman
  • [PATCH] ipvs: Maintain all DSCP and ECN bits for ipv6 tun forwarding, Simon Horman
  • Re: [GIT PULL] Third Round of IPVS Fixes for v3.16, Pablo Neira Ayuso
• [PATCH] netfilter: xt_hashlimit: handle iptables-restore of hash with same name, Josh Hunt
  • Re: [PATCH] netfilter: xt_hashlimit: handle iptables-restore of hash with same name, Josh Hunt
  • Re: [PATCH] netfilter: xt_hashlimit: handle iptables-restore of hash with same name, Florian Westphal
    • Re: [PATCH] netfilter: xt_hashlimit: handle iptables-restore of hash with same name, Patrick McHardy
      • Re: [PATCH] netfilter: xt_hashlimit: handle iptables-restore of hash with same name, Florian Westphal
      • Re: [PATCH] netfilter: xt_hashlimit: handle iptables-restore of hash with same name, Josh Hunt
        • Re: [PATCH] netfilter: xt_hashlimit: handle iptables-restore of hash with same name, Holger Eitzenberger
          • Re: [PATCH] netfilter: xt_hashlimit: handle iptables-restore of hash with same name, Jan Engelhardt
            • Re: [PATCH] netfilter: xt_hashlimit: handle iptables-restore of hash with same name, Holger Eitzenberger
• [PATCH libnftnl] src: stricter netlink attribute length validation, Pablo Neira Ayuso
• [PATCH net] IPVS fix pull request, Pablo Neira Ayuso
  • [PATCH net] ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrack, Pablo Neira Ayuso
• [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality, Andrey Utkin
  • Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality, Julian Anastasov
    • Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality, Andrey Utkin
      • Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality, Andrey Utkin
        • Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality, Andrey Utkin
      • Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality, Julian Anastasov
        • Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality, Dan Carpenter
          • Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality, Julian Anastasov
            • Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality, Dan Carpenter
• [libnftnl PATCH] src: improve printing of XML/JSON event wrapper header/footer, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] src: improve printing of XML/JSON event wrapper header/footer, Pablo Neira Ayuso
• [nft PATCH 2/2] payload: fix update context with wrong byteorder, Alvaro Neira Ayuso
• [nft PATCH 1/2] src: fix byteorder conversions, Alvaro Neira Ayuso
  • Re: [nft PATCH 1/2] src: fix byteorder conversions, Pablo Neira Ayuso
• [PATCH] Add support for negated lookup operator, Yuxuan Shui
  • [PATCH] nftables: Add a flags attribute for lookup operator, Yuxuan Shui
  • [libnftnl PATCH] lookup: Add support for the flag attribute, Yuxuan Shui
    • Re: [libnftnl PATCH] lookup: Add support for the flag attribute, Pablo Neira Ayuso
  • [nftables PATCH] expr: Interpret OP_NEQ against a set as OP_LOOKUP, Yuxuan Shui
• re: netfilter: ipset: list:set set type support, Dan Carpenter
• [PATCH nf-next] netfilter: nf_tables: simplify set dump through netlink, Pablo Neira Ayuso
• randconfig build error with next-20140716, in net/netfilter/xt_socket.c, Jim Davis
• [GIT PULL nf-next 0/2] IPVS Updates for v3.17, Simon Horman
  • [PATCH 2/2] ipvs: Remove dead debug code, Simon Horman
  • [PATCH 1/2] ipvs: remove null test before kfree, Simon Horman
  • Re: [GIT PULL nf-next 0/2] IPVS Updates for v3.17, Pablo Neira Ayuso
• [GIT PULL nf] Second Round of IPVS Fixes for v3.16, Simon Horman
  • [PATCH] ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrack, Simon Horman
  • Re: [GIT PULL nf] Second Round of IPVS Fixes for v3.16, Pablo Neira Ayuso
• [PATCH nft 1/3] mnl: add nft_batch_continue() helper, Pablo Neira Ayuso
  • [PATCH nft 2/3] mnl: add nft_nlmsg_batch_current() helper, Pablo Neira Ayuso
  • [PATCH nft 3/3] src: rework batching logic to fix possible use of uninitialized pages, Pablo Neira Ayuso
    • Re: [PATCH nft 3/3] src: rework batching logic to fix possible use of uninitialized pages, Yanchuan Nian
      • Re: [PATCH nft 3/3] src: rework batching logic to fix possible use of uninitialized pages, Yanchuan Nian
• [PATCH 0/4] Netfilter/nf_tables fixes, Pablo Neira Ayuso
  • [PATCH 3/4] netfilter: nf_tables: set NLM_F_DUMP_INTR if netlink dumping is stale, Pablo Neira Ayuso
  • [PATCH 1/4] netfilter: nf_tables: skip transaction if no update flags in tables, Pablo Neira Ayuso
  • [PATCH 4/4] netfilter: nf_tables: 64bit stats need some extra synchronization, Pablo Neira Ayuso
  • [PATCH 2/4] netfilter: nf_tables: safe RCU iteration on list when dumping, Pablo Neira Ayuso
  • Re: [PATCH 0/4] Netfilter/nf_tables fixes, David Miller
• [libnftnl PATCH] log: define variable flags in xml parser, Alvaro Neira Ayuso
  • Re: [libnftnl PATCH] log: define variable flags in xml parser, Pablo Neira Ayuso
• [PATCH 10/16] netfilter: remove unnecessary break after return, Fabian Frederick
• [PATCH 00/16] net: remove unnecessary break after goto/return, Fabian Frederick
  • Re: [PATCH 00/16] net: remove unnecessary break after goto/return, David Miller
• [libnftnl PATCH] common: events: be more strict when placing the \0 character, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] common: events: be more strict when placing the \0 character, Pablo Neira Ayuso
    • Re: [libnftnl PATCH] common: events: be more strict when placing the \0 character, Arturo Borrero Gonzalez
• [nft PATCH 1/2] netlink: monitor: add a helper function to handle sets referenced by a rule, Arturo Borrero Gonzalez
  • [nft PATCH 2/2] monitor: fix how rules with intervals are printed, Arturo Borrero Gonzalez
    • Re: [nft PATCH 2/2] monitor: fix how rules with intervals are printed, Pablo Neira Ayuso
  • Re: [nft PATCH 1/2] netlink: monitor: add a helper function to handle sets referenced by a rule, Pablo Neira Ayuso
• [libnftnl PATCH] examples: nft-set-add: use batch infraestructure, Arturo Borrero Gonzalez
• [libnftnl PATCH] set: add support for set mechanism selection, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] set: add support for set mechanism selection, Pablo Neira Ayuso
• [PATCH 2/2 nft, v3] mnl: check for NLM_F_DUMP_INTR when dumping object lists, Pablo Neira Ayuso
• [PATCH 1/2 nft] mnl: immediately return on errors in mnl_nft_ruleset_dump(), Pablo Neira Ayuso
• [nft PATCH v2] payload: generate dependency with wrong byteorder value format, Alvaro Neira Ayuso
  • Re: [nft PATCH v2] payload: generate dependency with wrong byteorder value format, Pablo Neira Ayuso
    • Re: [nft PATCH v2] payload: generate dependency with wrong byteorder value format, Patrick McHardy
• [PATCH nft, v2] mnl: check for NLM_F_DUMP_INTR when dumping object lists, Pablo Neira Ayuso
  • Re: [PATCH nft, v2] mnl: check for NLM_F_DUMP_INTR when dumping object lists, Patrick McHardy
• [nft PATCH 2/2] payload: generate dependency with wrong byteorder value format, Alvaro Neira Ayuso
  • Re: [nft PATCH 2/2] payload: generate dependency with wrong byteorder value format, Pablo Neira Ayuso
• [nft PATCH 1/2] proto: add protocol key in some proto_desc for identifying it, Alvaro Neira Ayuso
  • Re: [nft PATCH 1/2] proto: add protocol key in some proto_desc for identifying it, Pablo Neira Ayuso
    • Re: [nft PATCH 1/2] proto: add protocol key in some proto_desc for identifying it, Alvaro Neira Ayuso
• [RFC Patch V1 04/30] mm, netfilter: Use cpu_to_mem()/numa_mem_id() to support memoryless node, Jiang Liu
• Aw: Re: [PATCH] autotools conversion: include the header 'config.h' in every C source file., giorgio . nicole
• [PATCH] evaluate: fix concat expressions as map arguments, Patrick McHardy
• Aw: Re: [PATCH 4/7] autotools conversion: include the header 'config.h' in every C source file., giorgio . nicole
  • Re: Re: [PATCH 4/7] autotools conversion: include the header 'config.h' in every C source file., Patrick McHardy
    • [PATCH] autotools conversion: include the header 'config.h' in every C source file., Giorgio Dal Molin
      • Re: [PATCH] autotools conversion: include the header 'config.h' in every C source file., Pablo Neira Ayuso
        • Re: [PATCH] autotools conversion: include the header 'config.h' in every C source file., Jan Engelhardt
  • Aw: Re: Re: [PATCH 4/7] autotools conversion: include the header 'config.h' in every C source file., giorgio . nicole
• [PATCH] netlink: check and handle errors from netlink_delinearize_set(), Patrick McHardy
• [PATCH] netfilter: nf_tables: 64bit stats need some extra synchronization, Eric Dumazet
  • Re: [PATCH] netfilter: nf_tables: 64bit stats need some extra synchronization, Pablo Neira Ayuso
• [nft-sync PATCH] mnl: delete erroneous memory free, Arturo Borrero Gonzalez
• [nftables PATCH] Fix memory leak in batch operation, Yanchuan Nian
• [PATCH 0/7] patches for an autotooled version of 'nftables'. (vers. 2), Giorgio Dal Molin
  • [PATCH 1/7] autotool conversion: autotools support for the subdir. 'files/nftables'., Giorgio Dal Molin
  • [PATCH 2/7] autotool conversion: use pkg-config to find 'libmnl', libnftnl' and 'ncurses'., Giorgio Dal Molin
  • [PATCH 7/7] autotool conversion: updated the files .gitignore, Giorgio Dal Molin
  • [PATCH 3/7] autotool conversion: converted the subdir. 'src/', Giorgio Dal Molin
    • Re: [PATCH 3/7] autotool conversion: converted the subdir. 'src/', Pablo Neira Ayuso
      • [PATCH 3/7] autotool conversion: converted the subdir. 'src/', Giorgio Dal Molin
  • [PATCH 6/7] autotools conversion: commit the rest of the configure.ac changes., Giorgio Dal Molin
  • [PATCH 4/7] autotools conversion: include the header 'config.h' in every C source file., Giorgio Dal Molin
    • Re: [PATCH 4/7] autotools conversion: include the header 'config.h' in every C source file., Patrick McHardy
      • Re: [PATCH 4/7] autotools conversion: include the header 'config.h' in every C source file., Jan Engelhardt
  • [PATCH 5/7] autotool conversion: Converted the support for the 'doc/' subdir., Giorgio Dal Molin
  • Re: [PATCH 0/7] patches for an autotooled version of 'nftables'. (vers. 2), Pablo Neira Ayuso
    • [PATCH 0/8] patches for an autotooled version of 'nftables'., Giorgio Dal Molin
      • [PATCH 1/8] autotool conversion: Added some required files, removed some unneeded., Giorgio Dal Molin
      • [PATCH 2/8] autotool conversion: autotools support for the subdir. 'files/nftables'., Giorgio Dal Molin
      • [PATCH 3/8] autotool conversion: use pkg-config to find 'libmnl', libnftnl' and 'ncurses'., Giorgio Dal Molin
      • [PATCH 4/8] autotool conversion: converted the subdir. 'src/', Giorgio Dal Molin
      • [PATCH 5/8] autotools conversion: include the header 'config.h' in every C source file., Giorgio Dal Molin
      • [PATCH 6/8] autotool conversion: Converted the support for the 'doc/' subdir., Giorgio Dal Molin
      • [PATCH 7/8] autotools conversion: commit the rest of the configure.ac changes., Giorgio Dal Molin
      • [PATCH 8/8] autotool conversion: updated the files .gitignore, Giorgio Dal Molin
• [PATCH 0/7] patches for an autotooled version of 'nftables'., Giorgio Dal Molin
  • [PATCH 7/7] autotool conversion: updated the files .gitignore, Giorgio Dal Molin
  • [PATCH 3/7] autotool conversion: converted the subdir. 'src/', Giorgio Dal Molin
  • [PATCH 6/7] autotools conversion: commit the rest of the configure.ac changes., Giorgio Dal Molin
    • Re: [PATCH 6/7] autotools conversion: commit the rest of the configure.ac changes., Jan Engelhardt
    • Aw: Re: [PATCH 6/7] autotools conversion: commit the rest of the configure.ac changes., giorgio . nicole
  • [PATCH 4/7] autotools conversion: include the header 'config.h' in every C source file., Giorgio Dal Molin
  • [PATCH 2/7] autotool conversion: use pkg-config to find 'libmnl', libnftnl' and 'ncurses'., Giorgio Dal Molin
    • Re: [PATCH 2/7] autotool conversion: use pkg-config to find 'libmnl', libnftnl' and 'ncurses'., Jan Engelhardt
    • Aw: Re: [PATCH 2/7] autotool conversion: use pkg-config to find 'libmnl', libnftnl' and 'ncurses'., giorgio . nicole
  • [PATCH 1/7] autotool conversion: autotools support for the subdir. 'files/nftables'., Giorgio Dal Molin
  • [PATCH 5/7] autotool conversion: Converted the support for the 'doc/' subdir., Giorgio Dal Molin
    • Re: [PATCH 5/7] autotool conversion: Converted the support for the 'doc/' subdir., Jan Engelhardt
    • Aw: Re: [PATCH 5/7] autotool conversion: Converted the support for the 'doc/' subdir., giorgio . nicole
• [PATCH v2] iptables: add optional [seconds] argument to -w, Jiri Popelka
  • Re: [PATCH v2] iptables: add optional [seconds] argument to -w, Pablo Neira Ayuso
• [nftables PATCH] Fix segmentation fault in batch operation, Yanchuan Nian
  • Re: [nftables PATCH] Fix segmentation fault in batch operation, Arturo Borrero Gonzalez
• [PATCH nft] mnl: check for NLM_F_DUMP_INTR when dumping object lists, Pablo Neira Ayuso
  • Re: [PATCH nft] mnl: check for NLM_F_DUMP_INTR when dumping object lists, Patrick McHardy
    • Re: [PATCH nft] mnl: check for NLM_F_DUMP_INTR when dumping object lists, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: nf_tables: safe RCU iteration on list when dumping, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: nf_tables: set NLM_F_DUMP_INTR if netlink dumping is stale, Pablo Neira Ayuso
• [libnftnl PATCH] set_elem: use proper free function, Arturo Borrero Gonzalez
• patches for an autotooled version of 'nftables'., giorgio . nicole
  • <Possible follow-ups>
  • patches for an autotooled version of 'nftables'., giorgio . nicole
• net: pretty odd panic in netfilter, Sasha Levin
  • Re: net: pretty odd panic in netfilter, Dan Aloni
• [PATCH] proto: initialize result expression in ethertype_parse(), Pablo Neira Ayuso
• [linux PATCH v3 0/5] NAT updates for nf_tables, Arturo Borrero Gonzalez
  • [linux PATCH v3 1/5] netfilter: nft_nat: include a flag attribute, Arturo Borrero Gonzalez
  • [linux PATCH v3 2/5] netfilter: nf_nat_masquerade_ipv4: code factorization, Arturo Borrero Gonzalez
    • Re: [linux PATCH v3 2/5] netfilter: nf_nat_masquerade_ipv4: code factorization, Patrick McHardy
      • Re: [linux PATCH v3 2/5] netfilter: nf_nat_masquerade_ipv4: code factorization, Pablo Neira Ayuso
  • [linux PATCH v3 3/5] netfilter: nf_nat_masquerade_ipv6: code factorization, Arturo Borrero Gonzalez
  • [linux PATCH v3 4/5] netfilter: nft_nat: split code in AF parts, Arturo Borrero Gonzalez
  • [linux PATCH v3 5/5] netfilter: nft_nat: add masquerade support, Arturo Borrero Gonzalez
  • Re: [linux PATCH v3 0/5] NAT updates for nf_tables, Pablo Neira Ayuso
    • Re: [linux PATCH v3 0/5] NAT updates for nf_tables, Patrick McHardy
• [PATCH libnftnl] expr: log: add support for level and flags, Pablo Neira Ayuso
• [linux PATCH v2 0/5] NAT updates for nf_tables, Arturo Borrero Gonzalez
  • [linux PATCH v2 1/5] netfilter: nft_nat: include a flag attribute, Arturo Borrero Gonzalez
    • Re: [linux PATCH v2 1/5] netfilter: nft_nat: include a flag attribute, Pablo Neira Ayuso
  • [linux PATCH v2 2/5] netfilter: nf_nat_masquerade_ipv4: code factorization, Arturo Borrero Gonzalez
  • [linux PATCH v2 3/5] netfilter: nf_nat_masquerade_ipv6: code factorization, Arturo Borrero Gonzalez
  • [linux PATCH v2 4/5] netfilter: nft_nat: split code in AF parts, Arturo Borrero Gonzalez
    • Re: [linux PATCH v2 4/5] netfilter: nft_nat: split code in AF parts, Pablo Neira Ayuso
  • [linux PATCH v2 5/5] netfilter: nft_nat: add masquerade support, Arturo Borrero Gonzalez
• Parser stable fix question for CFG80211_INTERNAL_REGDB, Luis R. Rodriguez
  • Re: Parser stable fix question for CFG80211_INTERNAL_REGDB, Luis R. Rodriguez
    • Re: Parser stable fix question for CFG80211_INTERNAL_REGDB, John W. Linville
      • Re: Parser stable fix question for CFG80211_INTERNAL_REGDB, Luis R. Rodriguez
        • Re: Parser stable fix question for CFG80211_INTERNAL_REGDB, Luis R. Rodriguez
          • Re: Parser stable fix question for CFG80211_INTERNAL_REGDB, John W. Linville
      • Re: Parser stable fix question for CFG80211_INTERNAL_REGDB, Krishna Chaitanya
        • Re: Parser stable fix question for CFG80211_INTERNAL_REGDB, Maxime Bizon
• Starting point in netfilter development, Quentin Headen
  • Re: Starting point in netfilter development, Florian Westphal
    • Re: Starting point in netfilter development, Quentin Headen
      • Re: Starting point in netfilter development, Florian Westphal
        • Re: Starting point in netfilter development, Pablo Neira Ayuso
          • Re: Starting point in netfilter development, Quentin Headen
• [libnftnl PATCH v2 0/4] src: chain: Do not print unset values in json and xml, Ana Rey
  • [libnftnl PATCH v2 1/4] src: chain: Add all support of use attribute, Ana Rey
  • [libnftnl PATCH v2 2/4] src: chain: Do not print unset values in xml, Ana Rey
  • [libnftnl PATCH v2 3/4] src: chain: Rename variables in nft_jansson_parse_chain functions, Ana Rey
  • [libnftnl PATCH v2 4/4] src: chain: Do not print unser values in json, Ana Rey
  • Re: [libnftnl PATCH v2 0/4] src: chain: Do not print unset values in json and xml, Pablo Neira Ayuso
• libreadline not found by configure [was Re: [ANNOUNCE] nftables 0.3, Pablo Neira Ayuso
  • Re: libreadline not found by configure [was Re: [ANNOUNCE] nftables 0.3, Robby Workman
• Aw: Re: libnftnl.pc lacks dependency from libmnl, giorgio . nicole
  • Re: Aw: Re: libnftnl.pc lacks dependency from libmnl, Jan Engelhardt
• [PATCH libnetfilter_queue] extra: tcp: insufficient sanitization in nfq_tcp_get_payload(), Pablo Neira Ayuso
• [PATCH v2] netfilter: use IS_ENABLED() macro, Duan Jiong
  • Re: [PATCH v2] netfilter: use IS_ENABLED() macro, Pablo Neira Ayuso
• [PATCH 1/2 nf-next] netfilter: fix several Kconfig problems in NF_LOG_*, Pablo Neira Ayuso
  • [PATCH 2/2 nf-next] netfilter: xt_LOG: add missing string format in nf_log_packet(), Pablo Neira Ayuso
• [RFC PATCH iptables] Hide FORWARD chain if forwarding is not enabled, Jethro Beekman
  • Re: [RFC PATCH iptables] Hide FORWARD chain if forwarding is not enabled, Pascal Hambourg
  • Re: [RFC PATCH iptables] Hide FORWARD chain if forwarding is not enabled, Pascal Hambourg
• Unable to DNAT packets back into originating bridge port, Matthijs Kooijman
  • Re: Unable to DNAT packets back into originating bridge port, Florian Westphal
    • Re: Unable to DNAT packets back into originating bridge port, Matthijs Kooijman
• [PATCH nf] netfilter: nf_tables: skip transaction if no update flags in tables, Pablo Neira Ayuso
• libnftnl 0.3: build fixes, Jan Engelhardt
  • [PATCH] build: resolve build failure on systems with old glibc-linux headers, Jan Engelhardt
• sockopts, netfilter
  • Re: sockopts, Jan Engelhardt
• [PATCH] netfilter: bridge: add reject support, Pablo Neira Ayuso
• libnftnl.pc lacks dependency from libmnl, giorgio . nicole
  • Re: libnftnl.pc lacks dependency from libmnl, Jan Engelhardt
• [PATCH net-next] netfilter: only compile nf_nat_ipv4_nlattr_to_range/nf_nat_ipv6_nlattr_to_range, Duan Jiong
• [PATCH] netfilter: use IS_ENABLED() macro, Duan Jiong
  • Re: [PATCH] netfilter: use IS_ENABLED() macro, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: use IS_ENABLED() macro, Duan Jiong
• Possible bug in __nfnl_handle_msg, Joern Heissler
  • Re: Possible bug in __nfnl_handle_msg, Florian Westphal
• [libnftnl PATCH 0/5] Do not print unset values in xml and json, Ana Rey
  • [libnftnl PATCH 4/5] src: table: Do not print unset values in xml file, Ana Rey
  • [libnftnl PATCH 1/5] src: table: Free memory in the same function that is reserved, Ana Rey
  • [libnftnl PATCH 3/5] src: table: Add set, unset and parse implementation for use value, Ana Rey
  • [libnftnl PATCH 2/5] src: table: Use nft_table_attr_set_* in the xml functions, Ana Rey
  • [libnftnl PATCH 5/5] src: table: Do not print unset values in json file, Ana Rey
  • Re: [libnftnl PATCH 0/5] Do not print unset values in xml and json, Pablo Neira Ayuso
• [libnftnl PATCH 0/6] src: chain: Do not print unset values in json and xml, Ana Rey
  • [libnftnl PATCH 3/6] src: chain: add set, unset, get, parse and build payload implementation for use value, Ana Rey
    • Re: [libnftnl PATCH 3/6] src: chain: add set, unset, get, parse and build payload implementation for use value, Pablo Neira Ayuso
  • [libnftnl PATCH 2/6] src: chain: Use nft_rule_expr_set_* in the xml parsing code, Ana Rey
    • Re: [libnftnl PATCH 2/6] src: chain: Use nft_rule_expr_set_* in the xml parsing code, Pablo Neira Ayuso
  • [libnftnl PATCH 1/6] src: chain: Free memory in the same function that is reserved, Ana Rey
    • Re: [libnftnl PATCH 1/6] src: chain: Free memory in the same function that is reserved, Pablo Neira Ayuso
  • [libnftnl PATCH 6/6] src: chain: Do not print unser values in json, Ana Rey
  • [libnftnl PATCH 5/6] src: chain: Rename variables in nft_jansson_parse_chain functions, Ana Rey
  • [libnftnl PATCH 4/6] src: chain: Do not print unset values in xml, Ana Rey
• [libnftnl PATCH 1/2] expr: nat: add support for the new flags attribute, Arturo Borrero Gonzalez
  • [libnftnl PATCH 2/2] expr: nat: add masquerade support, Arturo Borrero Gonzalez
• [linux PATCH 0/5] NAT updates for nf_tables., Arturo Borrero Gonzalez
  • [linux PATCH 1/5] netfilter: nft_nat: include a flag attribute, Arturo Borrero Gonzalez
    • Re: [linux PATCH 1/5] netfilter: nft_nat: include a flag attribute, Florian Westphal
  • [linux PATCH 2/5] netfilter: nf_nat_masquerade_ipv4: code factorization, Arturo Borrero Gonzalez
  • [linux PATCH 3/5] netfilter: nf_nat_masquerade_ipv6: code factorization, Arturo Borrero Gonzalez
  • [linux PATCH 4/5] netfilter: nft_nat: split code in AF parts, Arturo Borrero Gonzalez
  • [linux PATCH 5/5] netfilter: nft_nat: add masquerade support, Arturo Borrero Gonzalez
• Sub: NAT issue in netfilter, Kamal Kumar
• problems cross compiling nftables, Giorgio
  • Re: problems cross compiling nftables, Jan Engelhardt
• [ANNOUNCE] libnftnl 1.0.2 release, Pablo Neira Ayuso
• [ANNOUNCE] nftables 0.3 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] nftables 0.3 release, Robby Workman
• [PATCH 0/9] Netfilter packet logging updates (v2), Pablo Neira Ayuso
  • [PATCH 1/9] netfilter: kill ulog targets, Pablo Neira Ayuso
  • [PATCH 5/9] netfilter: log: nf_log_packet() as real unified interface, Pablo Neira Ayuso
  • [PATCH 7/9] netfilter: bridge: add generic packet logger, Pablo Neira Ayuso
  • [PATCH 8/9] netfilter: nft_log: request explicit logger when loading rules, Pablo Neira Ayuso
  • [PATCH 4/9] netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c files, Pablo Neira Ayuso
  • [PATCH 9/9] netfilter: nft_log: complete logging support, Pablo Neira Ayuso
    • Re: [PATCH 9/9] netfilter: nft_log: complete logging support, Patrick McHardy
      • Re: [PATCH 9/9] netfilter: nft_log: complete logging support, Pablo Neira Ayuso
  • [PATCH 3/9] netfilter: nf_log: move log buffering to core logging, Pablo Neira Ayuso
  • [PATCH 2/9] netfilter: nf_log: use an array of loggers instead of list, Pablo Neira Ayuso
  • [PATCH 6/9] netfilter: add generic ARP packet logger, Pablo Neira Ayuso
• [libnftnl PATCH 0/4] expr: match: Do not print unset values in xml and json, Ana Rey
  • [libnftnl PATCH 2/4] expr: match: Use nft_rule_expr_set_* in the xml parsing code, Ana Rey
  • [libnftnl PATCH 1/4] expr: match: get a nft_rule_expr type in nft_rule_expr_match_snprintf_* functions, Ana Rey
  • [libnftnl PATCH 3/4] expr: match: Do not print unset values in xml file, Ana Rey
  • [libnftnl PATCH 4/4] expr: match: Do not print unset values in json file, Ana Rey
• [libnftnl PATCH 0/3] expr: lookup: Do not print unset values in xml and json, Ana Rey
  • [libnftnl PATCH 3/3] expr: lookup: Do not print unset values in json file, Ana Rey
  • [libnftnl PATCH 1/3] expr: lookup: Use nft_rule_expr_set_* in the xml parsing code, Ana Rey
  • [libnftnl PATCH 2/3] expr: lookup: Do not print unset values in xml file, Ana Rey
• [libnftnl PATCH 0/4] expr: exthdr: Do not print unset values in xml and json, Ana Rey
  • [libnftnl PATCH 1/4] expr: exthdr: Add nft_rule_expr_exthdr_snprinf_* functions, Ana Rey
  • [libnftnl PATCH 2/4] expr: exthdr: Use nft_rule_expr_set_* in the xml parsing code, Ana Rey
  • [libnftnl PATCH 4/4] expr: exthdr: Do not print unset values in json, Ana Rey
  • [libnftnl PATCH 3/4] expr: exthdr: Do not print unset values in xml, Ana Rey
  • Re: [libnftnl PATCH 0/4] expr: exthdr: Do not print unset values in xml and json, Pablo Neira Ayuso
• [PATCH lnf-ct] conntrack: compare: relax MARK/ZONE attribute comparision, Florian Westphal
• [PATCH] netfilter: x_tables: xt_free_table_info() cleanup, Eric Dumazet
  • Re: [PATCH] netfilter: x_tables: xt_free_table_info() cleanup, Pablo Neira Ayuso
• [libnftnl PATCH 0/4] expr: counter: Do not print unset values in xml and json, Ana Rey
  • [libnftnl PATCH 1/4] expr: counter: Add nft_rule_expr_counter_snprinf_* functions, Ana Rey
  • [libnftnl PATCH 2/4] expr: counter: Use nft_rule_expr_set_* in the xml parsing code, Ana Rey
  • [libnftnl PATCH 3/4] expr: counter: Do not print unset values in xml, Ana Rey
  • [libnftnl PATCH 4/4] expr: counter: Do not print unset values in json, Ana Rey
• [libnftnl PATCH 0/4] expr: ct: Do not print unset values in xml and json, Ana Rey
  • [libnftnl PATCH 3/4] expr: ct: Delete the last comma character in json text., Ana Rey
  • [libnftnl PATCH 4/4] expr: ct: Do not print unset values in json, Ana Rey
  • [libnftnl PATCH 1/4] expr: ct: Use nft_rule_expr_set_* in the xml parsing code, Ana Rey
  • [libnftnl PATCH 4/4] expr: ct: Do not print unset values in json, Ana Rey
  • [libnftnl PATCH 2/4] expr: ct: Do not print unset values in xml file, Ana Rey
• [PATCH 0/9] Netfilter packet logging updates, Pablo Neira Ayuso
  • [PATCH 2/9] netfilter: nf_log: use an array of loggers instead of list, Pablo Neira Ayuso
  • [PATCH 5/9] netfilter: log: nf_log_packet() as real unified interface, Pablo Neira Ayuso
  • [PATCH 6/9] netfilter: add generic ARP packet logger, Pablo Neira Ayuso
  • [PATCH 4/9] netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c files, Pablo Neira Ayuso
  • [PATCH 7/9] netfilter: bridge: add generic packet logger, Pablo Neira Ayuso
  • [PATCH 8/9] netfilter: add generic inet packet logger, Pablo Neira Ayuso
  • [PATCH 9/9] netfilter: nft_log: complete logging support, Pablo Neira Ayuso
  • [PATCH 1/9] netfilter: kill ulog targets, Pablo Neira Ayuso
  • [PATCH 3/9] netfilter: nf_log: move log buffering to core logging, Pablo Neira Ayuso
• [nftables PATCH] proto: add icmp and icmpv6 in inet protocols, Alvaro Neira Ayuso
  • Re: [nftables PATCH] proto: add icmp and icmpv6 in inet protocols, Patrick McHardy
• [libnftnl PATCH 0/4] expr: target: Do not print unset values in xml and json files, Ana Rey
  • [libnftnl PATCH 1/4] expr: target: get a nft_rule_expr type in nft_rule_expr_target_snprintf_* functions, Ana Rey
  • [libnftnl PATCH 2/4] expr: target: Use nft_rule_expr_set_* in the xml parsing code, Ana Rey
  • [libnftnl PATCH 4/4] expr: target: Do not print unset values in json file, Ana Rey
  • [libnftnl PATCH 3/4] expr: target: Do not print unset values in xml file, Ana Rey