Linux Netfilter / IP Tables Devel

Date Index

[Prev Page][Next Page]

[PATCH nftables 0/4] more transaction updates, Pablo Neira Ayuso
- [PATCH nftables 1/4] netfilter: nf_tables: release objects in reverse order in the abort path, Pablo Neira Ayuso
- [PATCH nftables 2/4] netfilter: nf_rbtree: introduce locking, Pablo Neira Ayuso
- [PATCH nftables 4/4] netfilter: nf_tables: atomic allocation in set notifications from rcu callback, Pablo Neira Ayuso
  - Re: [PATCH nftables 4/4] netfilter: nf_tables: atomic allocation in set notifications from rcu callback, Patrick McHardy
- [PATCH nftables 3/4] netfilter: nf_tables: allow to delete several objects from a batch, Pablo Neira Ayuso
[PATCH nft] netlink: fix crash if kernel doesn't support nfnetlink / nf_tables, Pablo Neira Ayuso
[PATCH nft] parser: use symbolic expression for ether too, Pablo Neira Ayuso
[nftables PATCH] netlink: Allow invert the ranges, Alvaro Neira Ayuso
- [nftables PATCH v2] netlink: Allow to invert the ranges, Alvaro Neira Ayuso
  - Re: [nftables PATCH v2] netlink: Allow to invert the ranges, Patrick McHardy
    - Re: [nftables PATCH v2] netlink: Allow to invert the ranges, Pablo Neira Ayuso
[nftables PATCH] payload: moderate the expr operation checking, Alvaro Neira Ayuso
- [nftables PATCH v2] payload: Relax assert in function payload_expr_pctx_update, Alvaro Neira Ayuso
  - Re: [nftables PATCH v2] payload: Relax assert in function payload_expr_pctx_update, Patrick McHardy
  - [nftables PATCH v3] payload: Update the context only in equality relations, Alvaro Neira Ayuso
    - Re: [nftables PATCH v3] payload: Update the context only in equality relations, Pablo Neira Ayuso
[nftables PATCH] scanner: Add udplite value for parsing it., Alvaro Neira Ayuso
- Re: [nftables PATCH] scanner: Add udplite value for parsing it., Pablo Neira Ayuso
[nftables PATCH 2/2] src: Add DSCP support in nftables, Alvaro Neira Ayuso
- [nftables PATCH v2] src: Replace TOS support for using DSCP support, Alvaro Neira Ayuso
  - Re: [nftables PATCH v2] src: Replace TOS support for using DSCP support, Patrick McHardy
    - Re: [nftables PATCH v2] src: Replace TOS support for using DSCP support, Álvaro Neira Ayuso
      - Re: [nftables PATCH v2] src: Replace TOS support for using DSCP support, Florian Westphal
        
        Re: [nftables PATCH v2] src: Replace TOS support for using DSCP support, Maciej Żenczykowski
        
        Re: [nftables PATCH v2] src: Replace TOS support for using DSCP support, Álvaro Neira Ayuso
[nftables PATCH 0/2] Add DSCP and TOS support, Alvaro Neira Ayuso
[HEADS UP] Migrating ebtables and arptables to netfilter.org, Pablo Neira Ayuso
- Re: [HEADS UP] Migrating ebtables and arptables to netfilter.org, Maciej Żenczykowski
  - Re: [HEADS UP] Migrating ebtables and arptables to netfilter.org, Pablo Neira Ayuso
OOPS NULL pointer dereference in nf_nat_setup_info+0x471 (reproductible, 3.14.4), Vincent Tondellier
- Re: OOPS NULL pointer dereference in nf_nat_setup_info+0x471 (reproductible, 3.14.4), Vincent Tondellier
- Re: OOPS NULL pointer dereference in nf_nat_setup_info+0x471 (reproductible, 3.14.4), Vincent Tondellier
  - Re: OOPS NULL pointer dereference in nf_nat_setup_info+0x471 (reproductible, 3.14.4), Florian Westphal
    - Re: OOPS NULL pointer dereference in nf_nat_setup_info+0x471 (reproductible, 3.14.4), Vincent Tondellier
[GIT PULL nf] Fixes for v3.15, Simon Horman
- [PATCH nf] ipvs: Fix panic due to non-linear skb, Simon Horman
- Re: [GIT PULL nf] Fixes for v3.15, Pablo Neira Ayuso
[PATCH net-next] netfilter: bridge: fix Kconfig unmet dependencies, Pablo Neira Ayuso
- Re: [PATCH net-next] netfilter: bridge: fix Kconfig unmet dependencies, David Miller
[nftables PATCH] src: Add support for adding TOS symbols, Alvaro Neira Ayuso
- Re: [nftables PATCH] src: Add support for adding TOS symbols, Pablo Neira Ayuso
- [nftables PATCH v2] src: Add support for adding TOS symbols, Alvaro Neira Ayuso
  - Re: [nftables PATCH v2] src: Add support for adding TOS symbols, Maciej Żenczykowski
  - [nftables PATCH 1/2 v3] src: Add support for adding TOS symbols, Alvaro Neira Ayuso
[PATCH nf-next] netfilter: nf_tables: fix wrong transaction ordering in set elements, Pablo Neira Ayuso
[PATCH] iptables: add optional [seconds] argument to -w, Jiri Popelka
- Re: [PATCH] iptables: add optional [seconds] argument to -w, Pablo Neira Ayuso
[PATCH nft 1/2] netlink_delinearize: fix double free in relational_binop_postprocess(), Pablo Neira Ayuso
- [PATCH nft 2/2] netlink: don't add table/chain/set to ctx->list in the event path, Pablo Neira Ayuso
[PATCH -next] remove timer from ecache extension, Florian Westphal
- [PATCH 1/2] netfilter: ctnetlink: only export whitelisted flags to userspace, Florian Westphal
- [PATCH 2/2] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
  - Re: [PATCH 2/2] netfilter: conntrack: remove timer from ecache extension, Pablo Neira Ayuso
    - Re: [PATCH 2/2] netfilter: conntrack: remove timer from ecache extension, Pablo Neira Ayuso
      - Re: [PATCH 2/2] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
    - Re: [PATCH 2/2] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
      - Re: [PATCH 2/2] netfilter: conntrack: remove timer from ecache extension, Pablo Neira Ayuso
        
        Re: [PATCH 2/2] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
[PATCH 00/25] Netfilter/nftables updates for net-next, Pablo Neira Ayuso
- [PATCH 07/25] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations, Pablo Neira Ayuso
- [PATCH 08/25] netfilter: nf_tables: Stack expression type depending on their family, Pablo Neira Ayuso
- [PATCH 11/25] netfilter: nf_tables: relax string validation of NFTA_CHAIN_TYPE, Pablo Neira Ayuso
- [PATCH 06/25] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
- [PATCH 22/25] netfilter: nf_tables: use new transaction infrastructure to handle elements, Pablo Neira Ayuso
- [PATCH 21/25] netfilter: nf_tables: use new transaction infrastructure to handle table, Pablo Neira Ayuso
- [PATCH 25/25] netfilter: nf_tables: defer all object release via rcu, Pablo Neira Ayuso
- [PATCH 20/25] netfilter: nf_tables: pass context to nf_tables_updtable(), Pablo Neira Ayuso
- [PATCH 24/25] netfilter: nf_tables: remove skb and nlh from context structure, Pablo Neira Ayuso
- [PATCH 17/25] netfilter: nf_tables: refactor chain statistic routines, Pablo Neira Ayuso
- [PATCH 23/25] netfilter: nf_tables: simplify nf_tables_*_notify, Pablo Neira Ayuso
- [PATCH 10/25] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
- [PATCH 05/25] netfilter: nft_hash: use set global element counter instead of private one, Pablo Neira Ayuso
- [PATCH 14/25] netfilter: nf_tables: relocate commit and abort routines in the source file, Pablo Neira Ayuso
- [PATCH 12/25] netfilter: nf_tables: deconstify table and chain in context structure, Pablo Neira Ayuso
- [PATCH 13/25] netfilter: nf_tables: generalise transaction infrastructure, Pablo Neira Ayuso
- [PATCH 15/25] netfilter: nf_tables: add message type to transactions, Pablo Neira Ayuso
- [PATCH 16/25] netfilter: nf_tables: use new transaction infrastructure to handle sets, Pablo Neira Ayuso
- [PATCH 18/25] netfilter: nf_tables: use new transaction infrastructure to handle chain, Pablo Neira Ayuso
- [PATCH 19/25] netfilter: nf_tables: disabling table hooks always succeeds, Pablo Neira Ayuso
- [PATCH 04/25] netfilter: nf_tables: implement proper set selection, Pablo Neira Ayuso
- [PATCH 02/25] netfilter: nft_meta: split nft_meta_init() into two functions for get/set, Pablo Neira Ayuso
- [PATCH 03/25] netfilter: nft_ct: split nft_ct_init() into two functions for get/set, Pablo Neira Ayuso
- [PATCH 01/25] netfilter: nft_ct: add missing ifdef for NFT_MARK setting, Pablo Neira Ayuso
- Re: [PATCH 00/25] Netfilter/nftables updates for net-next, David Miller
function for getting the source ip defined in the routing table, Andreas Herz
- Re: function for getting the source ip defined in the routing table, Jan Engelhardt
  - Re: function for getting the source ip defined in the routing table, Andreas Herz
    - Re: function for getting the source ip defined in the routing table, Maciej Żenczykowski
      - Re: function for getting the source ip defined in the routing table, Andreas Herz
        
        Re: function for getting the source ip defined in the routing table, Maciej Żenczykowski
        
        Re: function for getting the source ip defined in the routing table, Maciej Żenczykowski
        
        Re: function for getting the source ip defined in the routing table, Andreas Herz
        
        Message not available
        
        Re: function for getting the source ip defined in the routing table, Andreas Herz
  - Re: function for getting the source ip defined in the routing table, Andreas Herz
[PATCH 0/6] Netfilter/nftables fixes for net, Pablo Neira Ayuso
- [PATCH 1/6] netfilter: nf_tables: reset rule number counter after jump and goto, Pablo Neira Ayuso
- [PATCH 4/6] netfilter: nf_tables: fix bogus rulenum after goto action, Pablo Neira Ayuso
- [PATCH 3/6] netfilter: nf_tables: fix tracing of the goto action, Pablo Neira Ayuso
- [PATCH 5/6] netfilter: nf_tables: fix missing return trace at the end of non-base chain, Pablo Neira Ayuso
- [PATCH 6/6] netfilter: nf_tables: fix trace of matching non-terminal rule, Pablo Neira Ayuso
- [PATCH 2/6] netfilter: nf_tables: fix goto action, Pablo Neira Ayuso
- Re: [PATCH 0/6] Netfilter/nftables fixes for net, David Miller
[PATCH nft] parser: remove the "new" and "destroy" tokens from the scanner, Pablo Neira Ayuso
Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), Florian Westphal
- Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), Bart De Schuymer
  - Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Newall
    - Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), Bart De Schuymer
      - Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Miller
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), Bart De Schuymer
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Miller
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Newall
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Miller
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Newall
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Miller
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Newall
        
        RE: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Laight
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Miller
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Newall
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Miller
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Newall
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Miller
      - Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Newall
        
        Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), Bart De Schuymer
- Re: Revert 462fb2af9788a82a534f8184abfde31574e1cfa0 (bridge : Sanitize skb before it enters the IP stack), David Newall
new transaction for nftables now in master, Pablo Neira Ayuso
[PATCH 0/13] make return of 0 explicit, Julia Lawall
- [PATCH 6/13] [NETFILTER]: arp_tables: make return of 0 explicit, Julia Lawall
  - Re: [PATCH 6/13] [NETFILTER]: arp_tables: make return of 0 explicit, Pablo Neira Ayuso
    - Re: [PATCH 6/13] [NETFILTER]: arp_tables: make return of 0 explicit, Julia Lawall
[PATCHv2 nf] netfilter: nf_tables: fix trace of matching non-terminal rule, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: fix trace when matching rule, Pablo Neira Ayuso
[nft PATCH 0/4] small updates to documentation, Arturo Borrero Gonzalez
- [nft PATCH 1/4] doc: fix indendation of examples, Arturo Borrero Gonzalez
- [nft PATCH 2/4] doc: update return code for NFT_EXIT_NONL, Arturo Borrero Gonzalez
- [nft PATCH 3/4] doc: document export op, Arturo Borrero Gonzalez
- [nft PATCH 4/4] doc: document monitor op, Arturo Borrero Gonzalez
[nft PATCH] parser: fix inconsistency in monitor options, Arturo Borrero Gonzalez
[libnftnl PATCH v2] utils: fix buffer reallocation of nft_fprinft(), Arturo Borrero Gonzalez
- Re: [libnftnl PATCH v2] utils: fix buffer reallocation of nft_fprinft(), Pablo Neira Ayuso
[libnftnl PATCH v2] internal: fix SNPRINTF_BUFFER_SIZE macro, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH v2] internal: fix SNPRINTF_BUFFER_SIZE macro, Pablo Neira Ayuso
[net] BUG: unable to handle kernel NULL pointer dereference at 000000000000022f, Jet Chen
- Re: [net] BUG: unable to handle kernel NULL pointer dereference at 000000000000022f, Oliver Hartkopp
  - Re: [net] BUG: unable to handle kernel NULL pointer dereference at 000000000000022f, Marc Kleine-Budde
    - Re: [net] BUG: unable to handle kernel NULL pointer dereference at 000000000000022f, Marc Kleine-Budde
[ANNOUNCE] nft-sync: nftables ruleset synchronization software, Pablo Neira Ayuso
Re: conntrackd, internal cache keeps filling up, Pablo Neira Ayuso
- Re: conntrackd, internal cache keeps filling up, Martin Kraus
  - Re: conntrackd, internal cache keeps filling up, Florian Westphal
    - Re: conntrackd, internal cache keeps filling up, Pablo Neira Ayuso
  - Re: conntrackd, internal cache keeps filling up, Pablo Neira Ayuso
    - Re: conntrackd, internal cache keeps filling up, Martin Kraus
- Re: conntrackd, internal cache keeps filling up, Martin Kraus
[PATCH nf-next 1/3] netfilter: nf_tables: simplify nf_tables_*_notify, Pablo Neira Ayuso
- [PATCH nf-next 2/3] netfilter: nf_tables: remove skb and nlh from context structure, Pablo Neira Ayuso
- [PATCH nf-next 3/3] netfilter: nf_tables: defer all object release via rcu, Pablo Neira Ayuso
[PATCH nf 1/5] netfilter: nf_tables: reset rule number counter after jump and goto, Pablo Neira Ayuso
- [PATCH nf 3/5] netfilter: nf_tables: fix tracing of the goto action, Pablo Neira Ayuso
- [PATCH nf 4/5] netfilter: nf_tables: fix bogus rulenum after goto action, Pablo Neira Ayuso
- [PATCH nf 5/5] netfilter: nf_tables: fix missing return trace at the end of non-base chain, Pablo Neira Ayuso
- [PATCH nf 2/5] netfilter: nf_tables: fix goto action, Pablo Neira Ayuso
[PATCH RFC v2 11/11] br_netfilter: switch all sysctls to per-netns processing, Vasily Averin
[PATCH RFC v2 08/11] br_netfilter: switch sysctl pass_vlan_indev to init_brnf_net, Vasily Averin
[PATCH RFC v2 10/11] br_netfilter: per-netns sysctl registration, Vasily Averin
[PATCH RFC v2 09/11] br_netfilter: added pernet_operations without sysctl registration, Vasily Averin
[PATCH RFC v2 07/11] br_netfilter: switch sysctl filter_pppoe_tagged to init_brnf_net, Vasily Averin
[PATCH RFC v2 06/11] br_netfilter: switch sysctl filter_vlan_tagged to init_brnf_net, Vasily Averin
[PATCH RFC v2 05/11] br_netfilter: switch sysctls call_iptables and call_ip6tables to init_brnf_net, Vasily Averin
[PATCH RFC v2 04/11] br_netfilter: switch sysctl call_arptables to init_brnf_net, Vasily Averin
[PATCH RFC v2 03/11] br_netfilter: brnf_flag macro, Vasily Averin
[PATCH RFC v2 02/11] br_netfilter: default sysctl settings in init_brnf_net, Vasily Averin
- Re: [PATCH RFC v2 02/11] br_netfilter: default sysctl settings in init_brnf_net, Patrick McHardy
  - [PATCH RFC v3 0/2] per-netns sysctl for br_netfilter, Vasily Averin
    - Re: [PATCH RFC v3 0/2] per-netns sysctl for br_netfilter, Pablo Neira Ayuso
      - Re: [PATCH RFC v3 0/2] per-netns sysctl for br_netfilter, Vasily Averin
  - Message not available
    - [PATCH RFC v3 1/2] br_netfilter: common structure for sysctl flags, Vasily Averin
  - Message not available
    - [PATCH RFC v3 2/2] br_netfilter: per-netns copy of structure for sysctl flags, Vasily Averin
      - Re: [PATCH RFC v3 2/2] br_netfilter: per-netns copy of structure for sysctl flags, Bart De Schuymer
        
        Re: [PATCH RFC v3 2/2] br_netfilter: per-netns copy of structure for sysctl flags, Vasily Averin
        
        Re: [PATCH RFC v3 2/2] br_netfilter: per-netns copy of structure for sysctl flags, Bart De Schuymer
        
        question about default values for per-namespace settings, Vasily Averin
        
        Re: question about default values for per-namespace settings, Serge Hallyn
        
        Re: question about default values for per-namespace settings, Tejun Heo
        
        Re: question about default values for per-namespace settings, Maciej Żenczykowski
        
        Re: question about default values for per-namespace settings, Bart De Schuymer
        
        Re: question about default values for per-namespace settings, Vasily Averin
        
        Re: question about default values for per-namespace settings, Eric W. Biederman
[PATCH RFC v2 00/11] per-netns sysctl for br_netfilter, Vasily Averin
[PATCH RFC v2 01/11] br_netfilter: brnf_net structure for sysctl setting, Vasily Averin
[PATCH 15/15] br_netfilter: switch sysctl pass_vlan_indev to per-netns processing, Vasily Averin
[PATCH 14/15] br_netfilter: switch sysctl filter_pppoe_tagged to per-netns processing, Vasily Averin
[PATCH 13/15] br_netfilter: switch sysctl filter_vlan_tagged to per-netns processing, Vasily Averin
[PATCH 12/15] br_netfilter: switch sysctls nf_call_iptables and nf_call_ip6tables to per-netns processing, Vasily Averin
[PATCH 11/15] br_netfilter: switch sysctl nf_call_arptables to per-netns processing, Vasily Averin
[PATCH 10/15] br_netfilter: added per-netns sysctl registration, Vasily Averin
[PATCH 09/15] br_netfilter: pernet_operations brnf_net_ops without per-netns sysctl registration, Vasily Averin
- Re: [PATCH 09/15] br_netfilter: pernet_operations brnf_net_ops without per-netns sysctl registration, Bart De Schuymer
[PATCH 08/15] br_netfilter: switch sysctl pass_vlan_indev to init_brnf_net, Vasily Averin
[PATCH 07/15] br_netfilter: switch sysctl filter_pppoe_tagged to init_brnf_net, Vasily Averin
[PATCH 06/15] br_netfilter: switch sysctl filter_vlan_tagged to init_brnf_net, Vasily Averin
[PATCH 05/15] br_netfilter: switch sysctl nf_call_ip6tables to init_brnf_net, Vasily Averin
[PATCH 04/15] br_netfilter: switch sysctl nf_call_iptables to init_brnf_net, Vasily Averin
- Re: [PATCH 04/15] br_netfilter: switch sysctl nf_call_iptables to init_brnf_net, Bart De Schuymer
[PATCH 03/15] br_netfilter: switch sysctl nf_call_arptables to init_brnf_net, Vasily Averin
[PATCH 02/15] br_netfilter: default settings in init_brnf_net, Vasily Averin
[PATCH 01/15] br_netfilter: brnf_net structure, Vasily Averin
- Re: [PATCH 01/15] br_netfilter: brnf_net structure, Bart De Schuymer
[PATCH 00/15 RFC] per-netns sysctl for br_netfilter, Vasily Averin
[libnftnl PATCH] utils: fix buffer reallocation of nft_fprinft(), Arturo Borrero Gonzalez
- Re: [libnftnl PATCH] utils: fix buffer reallocation of nft_fprinft(), Pablo Neira Ayuso
  - Re: [libnftnl PATCH] utils: fix buffer reallocation of nft_fprinft(), Arturo Borrero Gonzalez
    - Re: [libnftnl PATCH] utils: fix buffer reallocation of nft_fprinft(), Pablo Neira Ayuso
ip_route_output_key returns wrong gateway info with specific ip rules, Andreas Herz
- Re: ip_route_output_key returns wrong gateway info with specific ip rules, Maciej Żenczykowski
  - Re: ip_route_output_key returns wrong gateway info with specific ip rules, Maciej Żenczykowski
    - Re: ip_route_output_key returns wrong gateway info with specific ip rules, Maciej Żenczykowski
  - Re: ip_route_output_key returns wrong gateway info with specific ip rules, Andreas Herz
[libnftnl PATCH] internal: fix SNPRINTF_BUFFER_SIZE macro, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH] internal: fix SNPRINTF_BUFFER_SIZE macro, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH] internal: fix SNPRINTF_BUFFER_SIZE macro, Pablo Neira Ayuso
Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout, Pablo Neira Ayuso
- Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout, Hangbin Liu
  - Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout, Pablo Neira Ayuso
    - Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout, Hangbin Liu
      - Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout, Pablo Neira Ayuso
        
        Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout, Pablo Neira Ayuso
        
        Re: [contrack-tools PATCH] build: do not compile nfct if we disabled cttimeout, Hangbin Liu
How to NAT with source MAC address recorded?, LIU, Kun
[PATCH] netfilter: Fix potential use after free in ip6_route_me_harder(), Sergey Popovich
- Re: [PATCH] netfilter: Fix potential use after free in ip6_route_me_harder(), Pablo Neira Ayuso
conntrackd IPv6 client support for interface scope, Michael Griego
- Re: conntrackd IPv6 client support for interface scope, Pablo Neira Ayuso
[libnftnl PATCH 1/2] src: add nft_*_build_msg functions, Arturo Borrero Gonzalez
- [libnftnl PATCH 2/2] examples: use new nft_*_build_msg() functions, Arturo Borrero Gonzalez
  - Re: [libnftnl PATCH 2/2] examples: use new nft_*_build_msg() functions, Pablo Neira Ayuso
    - Re: [libnftnl PATCH 2/2] examples: use new nft_*_build_msg() functions, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH 1/2] src: add nft_*_build_msg functions, Pablo Neira Ayuso
[PATCH] nfacct: remove unecessary end of line check, mathieu . poirier
- Re: [PATCH] nfacct: remove unecessary end of line check, Pablo Neira Ayuso
[libnftnl PATCH] data_reg: fix bad buffer size bounds, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH] data_reg: fix bad buffer size bounds, Pablo Neira Ayuso
[libnftnl PATCH] ruleset: fix erroneus call to snprintf, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH] ruleset: fix erroneus call to snprintf, Arturo Borrero Gonzalez
  - Re: [libnftnl PATCH] ruleset: fix erroneus call to snprintf, Pablo Neira Ayuso
[PATCH 0/2] hash:net,net and hash:net,port,net fixes and debug output extending, Sergey Popovich
- [PATCH 2/2] netnet,netportnet: Fix value range support for IPv4, Sergey Popovich
  - Re: [PATCH 2/2] netnet,netportnet: Fix value range support for IPv4, Jozsef Kadlecsik
- [PATCH 1/2] libipset: print third element in debugging, Sergey Popovich
  - Re: [PATCH 1/2] libipset: print third element in debugging, Jozsef Kadlecsik
[pablo@xxxxxxxxxxxxx: Re: nft 2.0, NULL pointer dereference in 3.14.1], Pablo Neira Ayuso
[PATCH] ipv4: "conntrack zones" support for defrag user check in ip_expire, Vasily Averin
- Re: [PATCH] ipv4: "conntrack zones" support for defrag user check in ip_expire, Pablo Neira Ayuso
  - Re: [PATCH] ipv4: "conntrack zones" support for defrag user check in ip_expire, Pablo Neira Ayuso
    - Re: [PATCH] ipv4: "conntrack zones" support for defrag user check in ip_expire, David Miller
- Re: [PATCH] ipv4: "conntrack zones" support for defrag user check in ip_expire, Pablo Neira Ayuso
[PATCH RFC] Bridge: do not defragment packets unless connection tracking is enabled, Vasily Averin
- Re: [PATCH RFC] Bridge: do not defragment packets unless connection tracking is enabled, Florian Westphal
  - Re: [PATCH RFC] Bridge: do not defragment packets unless connection tracking is enabled, Vasily Averin
  - [PATCH RFC v2] Bridge: do not defragment packets unless connection tracking is enabled, Vasily Averin
  - Re: [PATCH RFC] Bridge: do not defragment packets unless connection tracking is enabled, Pablo Neira Ayuso
    - Re: [PATCH RFC] Bridge: do not defragment packets unless connection tracking is enabled, Florian Westphal
      - Re: [PATCH RFC] Bridge: do not defragment packets unless connection tracking is enabled, Pablo Neira Ayuso
    - Re: [PATCH RFC] Bridge: do not defragment packets unless connection tracking is enabled, Bart De Schuymer
      - Re: [PATCH RFC] Bridge: do not defragment packets unless connection tracking is enabled, Pablo Neira Ayuso
    - [PATCH RFC 0/7] users counter to manage ipv4 defragmentation on bridge, Vasily Averin
      - Re: [PATCH RFC 0/7] users counter to manage ipv4 defragmentation on bridge, Florian Westphal
        
        Re: [PATCH RFC 0/7] users counter to manage ipv4 defragmentation on bridge, Vasily Averin
        
        Re: [PATCH RFC 0/7] users counter to manage ipv4 defragmentation on bridge, Bart De Schuymer
    - Message not available
      - [PATCH 1/7] nf: added per net namespace ipv4 defragmentation users counter, Vasily Averin
    - Message not available
      - [PATCH 2/7] nf: initialization of ipv4 defragmentation users counter, Vasily Averin
    - Message not available
      - [PATCH 3/7] nf: increment and decrement functions for ipv4 defragmentation users counter, Vasily Averin
    - Message not available
      - [PATCH 4/7] nf: ipv4 defragmentation users counter changes in nf_conntrack_ipv4 module, Vasily Averin
    - Message not available
      - [PATCH 5/7] nf: ipv4 defragmentation users counter changes in TPROXY target, Vasily Averin
    - Message not available
      - [PATCH 6/7] nf: ipv4 defragmentation users counter changes in xt_socket match, Vasily Averin
    - Message not available
      - [PATCH 7/7] nf: use counter to manage ipv4 defragmentation on bridge, Vasily Averin
[PATCH] netfilter: ipv4: defrag: set local_df flag on defragmented skb, Florian Westphal
- Re: [PATCH] netfilter: ipv4: defrag: set local_df flag on defragmented skb, Maciej Żenczykowski
  - Re: [PATCH] netfilter: ipv4: defrag: set local_df flag on defragmented skb, Florian Westphal
- Re: [PATCH] netfilter: ipv4: defrag: set local_df flag on defragmented skb, Pablo Neira Ayuso
ebtables issue in compat mode, Sharat Masetty
- Re: ebtables issue in compat mode, Florian Westphal
  - Re: ebtables issue in compat mode, Sharat Masetty
    - Re: ebtables issue in compat mode, Sharat Masetty
    - Re: ebtables issue in compat mode, Florian Westphal
      - Re: ebtables issue in compat mode, Jan Engelhardt
        
        Re: ebtables issue in compat mode, Florian Westphal
        
        Re: ebtables issue in compat mode, Sharat Masetty
        
        Re: ebtables issue in compat mode, Bart De Schuymer
        
        Re: ebtables issue in compat mode, Jan Engelhardt
    - Re: ebtables issue in compat mode, Bart De Schuymer
[PATCH] ipset: Fix ethernet address parser, Janeks Jaunups
- Re: [PATCH] ipset: Fix ethernet address parser, Jozsef Kadlecsik
[PATCH next] net: netfilter: add helper for adding nat extension, Florian Westphal
- Re: [PATCH next] net: netfilter: add helper for adding nat extension, Pablo Neira Ayuso
[PATCH] netfilter: ctnetlink: don't add null bindings if no nat requested, Florian Westphal
- Re: [PATCH] netfilter: ctnetlink: don't add null bindings if no nat requested, Pablo Neira Ayuso
[nft PATCH] mnl: split talk() and recv() functions, Arturo Borrero Gonzalez
- Re: [nft PATCH] mnl: split talk() and recv() functions, Pablo Neira Ayuso
[PATCH v2] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
[PATCH libnetfilter_acct] src: fix broken output handling, Pablo Neira Ayuso
[libnftnl PATCH] common: fix unconditional output of event wrapping stuff, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH] common: fix unconditional output of event wrapping stuff, Pablo Neira Ayuso
Iptables udp ports advice, Dmitry Korzhevin
keepalived scripts, Paul Robert Marino
- Re: keepalived scripts, Paul Robert Marino
[PATCH libnftnl] examples: nft-events: add option how to format the printed events, Pablo Neira Ayuso
tests/test-script.sh missing from 1.0.1 tar.bz2?, Kevin Fenzi
- Re: tests/test-script.sh missing from 1.0.1 tar.bz2?, Pablo Neira Ayuso
  - Re: tests/test-script.sh missing from 1.0.1 tar.bz2?, Kevin Fenzi
    - Re: tests/test-script.sh missing from 1.0.1 tar.bz2?, Pablo Neira Ayuso
[PATCH lnf-queue] src: PF_BIND/UNBIND is ignored in 3.8 and later, Florian Westphal
- Re: [PATCH lnf-queue] src: PF_BIND/UNBIND is ignored in 3.8 and later, Pablo Neira Ayuso
  - Re: [PATCH lnf-queue] src: PF_BIND/UNBIND is ignored in 3.8 and later, Florian Westphal
[PATCH 1/2] Make column type for oob_protocol in mysql smallint(5), Bob Hockney
[PATCH 2/2] Connection parameters other than connstring are ignored, Bob Hockney
[ ulogd PATCH 1/2 ] fix oob_protocol field for mysql, Bob Hockney
[ ulogd PATCH 2/2 ] fix to allow not using connstring parameter in pgsql plugin, Bob Hockney
[ ulogd PATCH 0/2 ] two small fixes for ulogd, Bob Hockney
- Re: [ ulogd PATCH 0/2 ] two small fixes for ulogd, Eric Leblond
ipset suggestion, idle-timeout, Shannon Wynter
- Re: ipset suggestion, idle-timeout, Jozsef Kadlecsik
  - Re: ipset suggestion, idle-timeout, Shannon Wynter
[RESEND PATCH 1/2] Extend accounting capabilities to support quotas, mathieu . poirier
- [RESEND PATCH 2/2] nfacct: adding quota capabilities, mathieu . poirier
  - Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities, Pablo Neira Ayuso
    - Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities, Pablo Neira Ayuso
      - Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities, Mathieu Poirier
      - Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities, Mathieu Poirier
        
        Re: [RESEND PATCH 2/2] nfacct: adding quota capabilities, Pablo Neira Ayuso
- Re: [RESEND PATCH 1/2] Extend accounting capabilities to support quotas, Pablo Neira Ayuso
[RESEND PATCH v2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, mathieu . poirier
- Re: [RESEND PATCH v2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, Mathieu Poirier
- Re: [RESEND PATCH v2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, Pablo Neira Ayuso
[GIT PULL nf-next] IPVS Updates for v3.16, Simon Horman
- [PATCH nf-next] netfilter: Fix format string mismatch in ip_vs_proto_name(), Simon Horman
- Re: [GIT PULL nf-next] IPVS Updates for v3.16, Pablo Neira Ayuso
  - Re: [GIT PULL nf-next] IPVS Updates for v3.16, Simon Horman
Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
- Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Florian Westphal
  - Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
    - Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Florian Westphal
      - Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
        
        Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
        
        Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
      - [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
        
        Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
        
        Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Florian Westphal
        
        Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
        
        Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
        
        Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
        
        [PATCH v2] bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
        
        Re: [PATCH v2] bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
- Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Patrick McHardy
additional conntrack feature, Donovan
- Re: additional conntrack feature, Pablo Neira Ayuso
[ANNOUNCE] libnftnl 1.0.1 release, Pablo Neira Ayuso
[nft PATCH v2 8/8] src: add events reporting, Arturo Borrero Gonzalez
- Re: [nft PATCH v2 8/8] src: add events reporting, Patrick McHardy
  - Re: [nft PATCH v2 8/8] src: add events reporting, Pablo Neira Ayuso
[PATCH] build: delete useless characters, Arturo Borrero Gonzalez
- Re: [PATCH] build: delete useless characters, Patrick McHardy
  - Re: [PATCH] build: delete useless characters, Arturo Borrero Gonzalez
    - Re: [PATCH] build: delete useless characters, Patrick McHardy
      - Re: [PATCH] build: delete useless characters, Jan Engelhardt
nftables v0.2 doesn't build with libnftnl v1.0.0, Arturo Borrero Gonzalez
[iptables PATCH] extensions: udp: add translation to nft, Ana Rey
- Re: [iptables PATCH] extensions: udp: add translation to nft, Pablo Neira Ayuso
[libnftnl PATCH v2 1/2] src: add flag to add event wrapping in output functions, Arturo Borrero Gonzalez
- [libnftnl PATCH v2 2/2] examples: nft-events: use new events wrappers, Arturo Borrero Gonzalez
  - Re: [libnftnl PATCH v2 2/2] examples: nft-events: use new events wrappers, Pablo Neira Ayuso
- Re: [libnftnl PATCH v2 1/2] src: add flag to add event wrapping in output functions, Pablo Neira Ayuso
[OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt(), Holger Eitzenberger
- Re: [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt(), Pablo Neira Ayuso
  - Re: [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt(), Eric Dumazet
  - Re: [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt(), Holger Eitzenberger
  - Re: [OOPS,xt_owner,V2]: Oops accessing socket in owner_mt(), Holger Eitzenberger
[libnftnl PATCH 1/2] src: add flag to add event wrapping in output functions, Arturo Borrero Gonzalez
- [libnftnl PATCH 2/2] examples: nft-events: use new events wrappers, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH 1/2] src: add flag to add event wrapping in output functions, Pablo Neira Ayuso
- Re: [libnftnl PATCH 1/2] src: add flag to add event wrapping in output functions, Pablo Neira Ayuso
[libnftnl PATCH] lookup: Fix an invalid read, Ana Rey
- [libnftnl PATCH] set-elem: fix a memory leak, Ana Rey
  - Re: [libnftnl PATCH] set-elem: fix a memory leak, Pablo Neira Ayuso
- Re: [libnftnl PATCH] lookup: Fix an invalid read, Pablo Neira Ayuso
[libnftnl PATCH 1/2] common: add wrapper to represent events, Arturo Borrero Gonzalez
- [libnftnl PATCH 2/2] examples: nft-events: use new events wrappers, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH 1/2] common: add wrapper to represent events, Pablo Neira Ayuso
[libnftnl PATCH] set: add helper to get the first set_elem, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH] set: add helper to get the first set_elem, Patrick McHardy
  - Re: [libnftnl PATCH] set: add helper to get the first set_elem, Pablo Neira Ayuso
    - Re: [libnftnl PATCH] set: add helper to get the first set_elem, Arturo Borrero Gonzalez
[ANNOUNCE] ulogd 2.0.4 release, Eric Leblond
[PATCH v4 0/5] Add suport for bridge if dev name meta expression keys, Tomasz Bursztyka
- [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family, Tomasz Bursztyka
- [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public, Tomasz Bursztyka
- [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  - Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
    - Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
      - Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
- [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
- [PATCH 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
[ANNOUNCE]: Release of nftables 0.2, Patrick McHardy
- Re: [ANNOUNCE]: Release of nftables 0.2, Jan Engelhardt
[RFC PATCH 0/5] translations from iptables to nft, Pablo Neira Ayuso
- [PATCH 1/5] nft: xtables: add generic parsing infrastructure to interpret commands, Pablo Neira Ayuso
- [PATCH 2/5] nft: xtables-restore: add generic parsing infrastructure, Pablo Neira Ayuso
- [PATCH 4/5] extensions: libxt_tcp: add translation to nft, Pablo Neira Ayuso
- [PATCH 3/5] nft: xtables: add the infrastructure to translate from iptables to nft, Pablo Neira Ayuso
- [PATCH 5/5] extensions: libxt_state: add translation to nft, Pablo Neira Ayuso
[nft PATCH 0/8] nft event monitor, Arturo Borrero Gonzalez
- [nft PATCH 1/8] rule: allow to print sets in plain format, Arturo Borrero Gonzalez
- [nft PATCH 2/8] netlink: add netlink_delinearize_set() func, Arturo Borrero Gonzalez
- [nft PATCH 3/8] rule: generalize chain_print(), Arturo Borrero Gonzalez
- [nft PATCH 4/8] netlink: add netlink_delinearize_chain() func, Arturo Borrero Gonzalez
- [nft PATCH 5/8] netlink: add netlink_delinearize_table() func, Arturo Borrero Gonzalez
- [nft PATCH 6/8] netlink: refactorize set_elem conversion from netlink, Arturo Borrero Gonzalez
- [nft PATCH 7/8] netlink: add socket error reporting helper function, Arturo Borrero Gonzalez
- [nft PATCH 8/8] src: add events reporting, Arturo Borrero Gonzalez
  - Re: [nft PATCH 8/8] src: add events reporting, Pablo Neira Ayuso
- Re: [nft PATCH 0/8] nft event monitor, Pablo Neira Ayuso
  - Re: [nft PATCH 0/8] nft event monitor, Patrick McHardy
- Re: [nft PATCH 0/8] nft event monitor, Pablo Neira Ayuso
[libnftnl PATCH v2] target, match: Fix an invalid read, Ana Rey
- Re: [libnftnl PATCH v2] target, match: Fix an invalid read, Pablo Neira Ayuso
cannot stat 'doc/nftables.8': No such file or directory, Ana Rey
- Re: cannot stat 'doc/nftables.8': No such file or directory, Patrick McHardy
  - Re: cannot stat 'doc/nftables.8': No such file or directory, Ana Rey
nftables documentation update, Patrick McHardy
[PATCH] datatypes: rename some types for more consistency, Patrick McHardy
[PATCH] netlink: fix length value of concat data, Patrick McHardy
[PATCH 1/2] Extend accounting capabilities to support quotas, mathieu . poirier
- [PATCH 2/2] nfacct: adding quota capabilities, mathieu . poirier
[PATCH v2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, mathieu . poirier
[libnftnl PATCH] target: Fix an invalid read., Ana Rey
- [libnftnl PATCH] tests: Fix a memory leak, Ana Rey
  - Re: [libnftnl PATCH] tests: Fix a memory leak, Pablo Neira Ayuso
- Re: [libnftnl PATCH] target: Fix an invalid read., Florian Westphal
[PATCH 0/1] netfilter: nf_tables: fix big endian problems, Patrick McHardy
- [PATCH 1/1] netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4, Patrick McHardy
  - Re: [PATCH 1/1] netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4, Pablo Neira Ayuso
- Re: [PATCH 0/1] netfilter: nf_tables: fix big endian problems, Arturo Borrero Gonzalez
nftables data type names, Patrick McHardy
- Re: nftables data type names, Florian Westphal
  - Re: nftables data type names, Patrick McHardy
    - Re: nftables data type names, Patrick McHardy
      - Re: nftables data type names, Pablo Neira Ayuso
        
        Re: nftables data type names, Patrick McHardy
[PATCH 0/2] nftables: fix big endian bugs, Patrick McHardy
- [PATCH 1/2] expression: fix constant expression allocation on big endian, Patrick McHardy
- [PATCH 2/2] gmputil: use MSF/LSF in import/export functions dependant on host byte order, Patrick McHardy
[PATCH] netfilter: conntrack: initialize net.ct.generation, Andrey Vagin
- Re: [PATCH] netfilter: conntrack: initialize net.ct.generation, David Miller
  - Re: [PATCH] netfilter: conntrack: initialize net.ct.generation, Pablo Neira Ayuso
[PATCH] parser: fix ether keyword clash, Patrick McHardy
[PATCH] ebtables printing of ipv6 masks, Mariusz Mazur
- Re: [PATCH] ebtables printing of ipv6 masks, Bart De Schuymer
[nft PATCH] expression: Fix inconsistent output in set, Ana Rey
- Re: [nft PATCH] expression: Fix inconsistent output in set, Patrick McHardy
NETFILTER_XT_TARGET_NOTRACK, Jean Delvare
- Re: NETFILTER_XT_TARGET_NOTRACK, Pablo Neira Ayuso
[PATCH RFC] netfilter: nf_tables: defer all object release via rcu, Pablo Neira Ayuso
- Re: [PATCH RFC] netfilter: nf_tables: defer all object release via rcu, Tomasz Bursztyka
  - Re: [PATCH RFC] netfilter: nf_tables: defer all object release via rcu, Pablo Neira Ayuso
[PATCH 00/11] new transaction infrastructure for nf_tables (v4), Pablo Neira Ayuso
- [PATCH 01/11] netfilter: nf_tables: deconstify table and chain in context structure, Pablo Neira Ayuso
- [PATCH 04/11] netfilter: nf_tables: add message type to transactions, Pablo Neira Ayuso
- [PATCH 03/11] netfilter: nf_tables: relocate commit and abort routines in the source file, Pablo Neira Ayuso
- [PATCH 06/11] netfilter: nf_tables: refactor chain statistic routines, Pablo Neira Ayuso
- [PATCH 08/11] netfilter: nf_tables: disabling table hooks always succeeds, Pablo Neira Ayuso
- [PATCH 11/11] netfilter: nf_tables: use new transaction infrastructure to handle elements, Pablo Neira Ayuso
- [PATCH 09/11] netfilter: nf_tables: pass context to nf_tables_uptable, Pablo Neira Ayuso
- [PATCH 02/11] netfilter: nf_tables: generalise transaction infrastructure, Pablo Neira Ayuso
- [PATCH 07/11] netfilter: nf_tables: use new transaction infrastructure to handle chain, Pablo Neira Ayuso
- [PATCH 10/11] netfilter: nf_tables: use new transaction infrastructure to handle table, Pablo Neira Ayuso
- [PATCH 05/11] netfilter: nf_tables: use new transaction infrastructure to handle sets, Pablo Neira Ayuso
[libnftnl PATCH v2 0/2] New features in nft-parsing-test, Ana Rey
- [libnftnl PATCH v2 2/2] tests: Add support to check a json or xml testfile., Ana Rey
- [libnftnl PATCH v2 1/2] tests: New tools to uptade xml and json testfiles., Ana Rey
- Re: [libnftnl PATCH v2 0/2] New features in nft-parsing-test, Pablo Neira Ayuso
[PATCH] utils: fix -Wcast-align warnings on sparc, Patrick McHardy
nftables-20140407 compilation error, Nazim Wahid Djafar
- Re: nftables-20140407 compilation error, Florian Westphal
  - Re: nftables-20140407 compilation error, Pablo Neira Ayuso
    - Re: nftables-20140407 compilation error, Florian Westphal
      - Re: nftables-20140407 compilation error, Pablo Neira Ayuso
        
        Re: nftables-20140407 compilation error, Florian Westphal
        
        Re: nftables-20140407 compilation error, Patrick McHardy
        
        Re: nftables-20140407 compilation error, Florian Westphal
- Re: nftables-20140407 compilation error, Arturo Borrero Gonzalez
[libnftnl PATCH] xml: json: Delete an immediatedate label in xml and json file., Ana Rey
- Re: [libnftnl PATCH] xml: json: Delete an immediatedate label in xml and json file., Arturo Borrero Gonzalez
- Re: [libnftnl PATCH] xml: json: Delete an immediatedate label in xml and json file., Pablo Neira Ayuso
[libnftnl PATCH] xml: json: Delete a cmpdata label in xml and json file., Ana Rey
- Re: [libnftnl PATCH] xml: json: Delete a cmpdata label in xml and json file., Pablo Neira Ayuso
[libnftnl PATCH 0/3] New features in nft-parsing-test, Ana Rey
- [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset., Ana Rey
  - Re: [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset., Arturo Borrero Gonzalez
    - Re: [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset., Ana Rey
  - Re: [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset., Ana Rey
- [libnftnl PATCH 3/3] tests: Add support to check a json or xml testfile., Ana Rey
- [libnftnl PATCH 2/3] tests: New tools to uptade xml and json testfiles., Ana Rey
[PATCH v3 0/5] Add suport for bridge if dev name meta exepression keys, Tomasz Bursztyka
- [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public, Tomasz Bursztyka
- [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  - Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
    - Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
      - Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
- [PATCH 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
- [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
- [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family, Tomasz Bursztyka
[libnetfilter_conntrack/ulogd PATCH 0/3] add mark filter, Ken-ichirou MATSUZAWA
- [libnetfilter_conntrack PATCH 1/3] conntrack: add mark event filter, Ken-ichirou MATSUZAWA
  - Re: [libnetfilter_conntrack PATCH 1/3] conntrack: add mark event filter, Pablo Neira Ayuso
    - [libnetfilter_conntrack PATCH 1/3 resend] conntrack: add mark event filter, Ken-ichirou MATSUZAWA
- [ulogd PATCH 2/3] add mark event filter, Ken-ichirou MATSUZAWA
  - Re: [ulogd PATCH 2/3] add mark event filter, Pablo Neira Ayuso
- [ulogd PATCH 3/3] add mark dump filter, Ken-ichirou MATSUZAWA
[nftables PATCH v2] src: rule: fix crash in set listing, Ana Rey
- Re: [nftables PATCH v2] src: rule: fix crash in set listing, Pablo Neira Ayuso
[nftables PATCH] src: rule: Fix list of set: Add a forgotten 'return', Ana Rey
- Re: [nftables PATCH] src: rule: Fix list of set: Add a forgotten 'return', Pablo Neira Ayuso
[PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
- Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pablo Neira Ayuso
  - Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
    - Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pablo Neira Ayuso
      - Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
        
        Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pavel Emelyanov
        
        Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
        
        Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pavel Emelyanov
        
        Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pablo Neira Ayuso
        
        Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
[PATCH --smtp-server=mail.sw.ru] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
[PATCH libnftnl] src: fix bogus assertion for unset attributes, Pablo Neira Ayuso
[libnftnl PATCH] set_elem: parse family from Netlink message, Arturo Borrero Gonzalez
- Re: [libnftnl PATCH] set_elem: parse family from Netlink message, Pablo Neira Ayuso
[PATCH 0/8] netfilter fixes for net, Pablo Neira Ayuso
- [PATCH 2/8] netfilter: connlimit: move lock array out of struct connlimit_data, Pablo Neira Ayuso
- [PATCH 1/8] netfilter: connlimit: fix UP build, Pablo Neira Ayuso
- [PATCH 7/8] netfilter: nf_tables: fix wrong format in request_module(), Pablo Neira Ayuso
- [PATCH 4/8] netfilter: Add {ipt,ip6t}_osf aliases for xt_osf, Pablo Neira Ayuso
- [PATCH 3/8] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Pablo Neira Ayuso
- [PATCH 5/8] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Pablo Neira Ayuso
- [PATCH 8/8] netfilter: Can't fail and free after table replacement, Pablo Neira Ayuso
- [PATCH 6/8] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH 0/8] netfilter fixes for net, Pablo Neira Ayuso
- [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/8] netfilter: nf_conntrack: allow server to become a client in TW handling, Pablo Neira Ayuso
  - [PATCH 6/8] netfilter: nfnetlink_log: fix maximum packet length logged to userspace, Pablo Neira Ayuso
  - [PATCH 3/8] netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats allocation, Pablo Neira Ayuso
  - [PATCH 4/8] bridge: Do not compile options in br_parse_ip_options, Pablo Neira Ayuso
  - [PATCH 8/8] netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops(), Pablo Neira Ayuso
  - [PATCH 7/8] netfilter: nf_log: release skbuff on nlmsg put failure, Pablo Neira Ayuso
  - [PATCH 5/8] netfilter: nf_log: account for size of NLMSG_DONE attribute, Pablo Neira Ayuso
  - [PATCH 2/8] netfilter: ipset: off by one in ip_set_nfnl_get_byindex(), Pablo Neira Ayuso
  - Re: [PATCH 0/8] Netfilter fixes for net, David Miller
- [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 3/8] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Pablo Neira Ayuso
  - [PATCH 7/8] netfilter: nfnetlink_queue: fix NFQA_VLAN_MAX definition, Pablo Neira Ayuso
  - [PATCH 4/8] Fix bug: sometimes valid entries in hash:* types of sets were evicted, Pablo Neira Ayuso
  - [PATCH 2/8] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Pablo Neira Ayuso
  - [PATCH 6/8] netfilter: xt_hashlimit: Fix integer divide round to zero., Pablo Neira Ayuso
  - [PATCH 8/8] netfilter: nfnetlink: remove static declaration from err_list, Pablo Neira Ayuso
  - [PATCH 5/8] netfilter: ipset: Null pointer exception in ipset list:set, Pablo Neira Ayuso
  - [PATCH 1/8] netfilter: nf_ct_helper: warn when not applying default helper assignment, Pablo Neira Ayuso
  - Re: [PATCH 0/8] Netfilter fixes for net, David Miller
- [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/8] netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max, Pablo Neira Ayuso
  - [PATCH 2/8] netfilter: nfnl_cthelper: fix runtime expectation policy updates, Pablo Neira Ayuso
  - [PATCH 3/8] netfilter: nfnl_cthelper: Fix memory leak, Pablo Neira Ayuso
  - [PATCH 4/8] netfilter: invoke synchronize_rcu after set the _hook_ to NULL, Pablo Neira Ayuso
  - [PATCH 5/8] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table, Pablo Neira Ayuso
  - [PATCH 6/8] netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregister, Pablo Neira Ayuso
  - [PATCH 7/8] netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to register, Pablo Neira Ayuso
  - [PATCH 8/8] netfilter: nfnetlink_queue: fix secctx memory leak, Pablo Neira Ayuso
  - Re: [PATCH 0/8] Netfilter fixes for net, David Miller
- [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 2/8] netfilter: nft_osf: usage from output path is not valid, Pablo Neira Ayuso
  - [PATCH 7/8] netfilter: nf_flow_table: remove flowtable hook flush routine in netns exit routine, Pablo Neira Ayuso
  - [PATCH 6/8] netfilter: xt_nat: fix DNAT target for shifted portmap ranges, Pablo Neira Ayuso
  - [PATCH 8/8] netfilter: nf_flow_table: do not remove offload when other netns's interface is down, Pablo Neira Ayuso
  - [PATCH 4/8] netfilter: xt_TEE: add missing code to get interface index in checkentry., Pablo Neira Ayuso
  - [PATCH 5/8] netfilter: nft_compat: do not dump private area, Pablo Neira Ayuso
  - [PATCH 3/8] netfilter: xt_TEE: fix wrong interface selection, Pablo Neira Ayuso
  - [PATCH 1/8] netfilter: nft_set_rbtree: allow loose matching of closing element in interval, Pablo Neira Ayuso
  - Re: [PATCH 0/8] Netfilter fixes for net, David Miller
- [PATCH 0/8] netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 3/8] netfilter: nft_meta_bridge: Eliminate 'out' label, Pablo Neira Ayuso
  - [PATCH 2/8] netfilter: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
  - [PATCH 7/8] netfilter: ipset: Fix rename concurrency with listing, Pablo Neira Ayuso
  - [PATCH 5/8] netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too, Pablo Neira Ayuso
  - [PATCH 8/8] netfilter: ebtables: also count base chain policies, Pablo Neira Ayuso
  - [PATCH 6/8] netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets, Pablo Neira Ayuso
  - [PATCH 4/8] netfilter: add include guard to xt_connlabel.h, Pablo Neira Ayuso
  - [PATCH 1/8] netfilter: ebtables: fix a memory leak bug in compat, Pablo Neira Ayuso
  - Re: [PATCH 0/8] netfilter fixes for net, David Miller
- [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 4/8] netfilter: nf_tables: free chain context when BINDING flag is missing, Pablo Neira Ayuso
  - [PATCH 3/8] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Pablo Neira Ayuso
  - [PATCH 7/8] selftests: netfilter: kill running process only, Pablo Neira Ayuso
  - [PATCH 8/8] netfilter: ebtables: reject bogus getopt len value, Pablo Neira Ayuso
  - [PATCH 6/8] selftests: netfilter: add MTU arguments to flowtables, Pablo Neira Ayuso
  - [PATCH 2/8] netfilter: nft_compat: remove flush counter optimization, Pablo Neira Ayuso
  - [PATCH 5/8] selftests: netfilter: add checktool function, Pablo Neira Ayuso
  - [PATCH 1/8] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Pablo Neira Ayuso
  - Re: [PATCH 0/8] Netfilter fixes for net, David Miller
- [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/8] netfilter: delete repeated words, Pablo Neira Ayuso
  - [PATCH 8/8] netfilter: conntrack: do not auto-delete clash entries on reply, Pablo Neira Ayuso
  - [PATCH 7/8] selftests: netfilter: add command usage, Pablo Neira Ayuso
  - [PATCH 6/8] selftests: netfilter: simplify command testing, Pablo Neira Ayuso
  - [PATCH 5/8] selftests: netfilter: remove unused variable in make_file(), Pablo Neira Ayuso
  - [PATCH 4/8] selftests: netfilter: exit on invalid parameters, Pablo Neira Ayuso
  - [PATCH 2/8] netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS, Pablo Neira Ayuso
  - [PATCH 3/8] selftests: netfilter: fix header example, Pablo Neira Ayuso
  - Re: [PATCH 0/8] Netfilter fixes for net, David Miller
[PATCH v2] netfilter: Can't fail and free after table replacement, Thomas Graf
- Re: [PATCH v2] netfilter: Can't fail and free after table replacement, Pablo Neira Ayuso
[PATCH nft 1/3] src: add set netlink message to the batch, Pablo Neira Ayuso
- [PATCH nft 2/3] src: add chain netlink messages to the batch, Pablo Neira Ayuso
- [PATCH nft 3/3] src: add table netlink messages to the batch, Pablo Neira Ayuso
[PATCH libnftnl 1/2] include: synchronize nf_tables.h with nftables tree, Pablo Neira Ayuso
- [PATCH libnftnl 2/2] set: add set ID support, Pablo Neira Ayuso
[PATCH 00/10] new transaction infrastructure for nf_tables (v3), Pablo Neira Ayuso
- [PATCH 01/10] netfilter: nf_tables: deconstify table and chain in context structure, Pablo Neira Ayuso
- [PATCH 02/10] netfilter: nf_tables: generalise transaction infrastructure, Pablo Neira Ayuso
- [PATCH 07/10] netfilter: nf_tables: disabling table hooks always succeeds, Pablo Neira Ayuso
- [PATCH 10/10] netfilter: nf_tables: use new transaction infrastructure to handle elements, Pablo Neira Ayuso
- [PATCH 09/10] netfilter: nf_tables: use new transaction infrastructure to handle table, Pablo Neira Ayuso
- [PATCH 03/10] netfilter: nf_tables: relocate commit and abort routines in the source file, Pablo Neira Ayuso
- [PATCH 05/10] netfilter: nf_tables: use new transaction infrastructure to handle sets, Pablo Neira Ayuso
- [PATCH 04/10] netfilter: nf_tables: add message type to transactions, Pablo Neira Ayuso
- [PATCH 08/10] netfilter: nf_tables: pass context to nf_tables_uptable, Pablo Neira Ayuso
- [PATCH 06/10] netfilter: nf_tables: use new transaction infrastructure to handle chain, Pablo Neira Ayuso
[PATCH v2 0/4] Add suport for bridge if dev name meta exepression keys, Tomasz Bursztyka
- [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family, Tomasz Bursztyka
- [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
- [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  - Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Pablo Neira Ayuso
    - Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Patrick McHardy
      - Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Pablo Neira Ayuso
        
        Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
- [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public, Tomasz Bursztyka
- [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
[PATCH v3] libnftnl: tests: Use getopt_long to parse the command-line arguments., Ana Rey
- Re: [PATCH v3] libnftnl: tests: Use getopt_long to parse the command-line arguments., Pablo Neira Ayuso
ip_tables: limit match: invalid size 40 != 48, Ronny Janssen
- Re: ip_tables: limit match: invalid size 40 != 48, Jan Engelhardt
[PATCH] ipset: Pass IPSET_BIN to test scripts to change binary location, Neutron Soutmun
- Re: [PATCH] ipset: Pass IPSET_BIN to test scripts to change binary location, Jozsef Kadlecsik
[nf_tables PATCH v2] Subject: netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
- Re: [nf_tables PATCH v2] Subject: netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
[PATCH v2] libnftnl: tests: Use getopt_long to parse the command-line arguments., Ana Rey
- Re: [PATCH v2] libnftnl: tests: Use getopt_long to parse the command-line arguments., Pablo Neira Ayuso
[PATCH] libnftnl: tests: Use getopt_long to parse the command-line arguments., Ana Rey
[nftables] testing at sparc, Arturo Borrero Gonzalez
- Re: [nftables] testing at sparc, Patrick McHardy
  - [PATCH RFC] expression: fix constant expression allocation on big endian, Patrick McHardy
[PATCH] netfilter: Can't fail and free after table replacement, Thomas Graf
- Re: [PATCH] netfilter: Can't fail and free after table replacement, Pablo Neira Ayuso
  - Re: [PATCH] netfilter: Can't fail and free after table replacement, Florian Westphal
    - Re: [PATCH] netfilter: Can't fail and free after table replacement, Pablo Neira Ayuso
[PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, mathieu . poirier
- [PATCH 2/2] Extend accounting capabilities to support quotas, mathieu . poirier
- Re: [PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, Pablo Neira Ayuso
  - Re: [PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, Mathieu Poirier

[Index of Archives] [LARTC] [Berkeley Packet Filter] [Bugtraq] [Yosemite Discussion]