Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, (continued)
  • Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
  • Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
  • [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
    • Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
      • Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Florian Westphal
    • Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
      • Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
        • Re: [PATCH] bridge: Superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
          • [PATCH v2] bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit, Vasily Averin
            • Re: [PATCH v2] bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
  • Re: [PATCH 1/1] superfluous skb->nfct check in br_nf_dev_queue_xmit, Patrick McHardy
• additional conntrack feature, Donovan
  • Re: additional conntrack feature, Pablo Neira Ayuso
• [ANNOUNCE] libnftnl 1.0.1 release, Pablo Neira Ayuso
• [nft PATCH v2 8/8] src: add events reporting, Arturo Borrero Gonzalez
  • Re: [nft PATCH v2 8/8] src: add events reporting, Patrick McHardy
    • Re: [nft PATCH v2 8/8] src: add events reporting, Pablo Neira Ayuso
• [PATCH] build: delete useless characters, Arturo Borrero Gonzalez
  • Re: [PATCH] build: delete useless characters, Patrick McHardy
    • Re: [PATCH] build: delete useless characters, Arturo Borrero Gonzalez
      • Re: [PATCH] build: delete useless characters, Patrick McHardy
        • Re: [PATCH] build: delete useless characters, Jan Engelhardt
• nftables v0.2 doesn't build with libnftnl v1.0.0, Arturo Borrero Gonzalez
• [iptables PATCH] extensions: udp: add translation to nft, Ana Rey
  • Re: [iptables PATCH] extensions: udp: add translation to nft, Pablo Neira Ayuso
• [libnftnl PATCH v2 1/2] src: add flag to add event wrapping in output functions, Arturo Borrero Gonzalez
  • [libnftnl PATCH v2 2/2] examples: nft-events: use new events wrappers, Arturo Borrero Gonzalez
    • Re: [libnftnl PATCH v2 2/2] examples: nft-events: use new events wrappers, Pablo Neira Ayuso
  • Re: [libnftnl PATCH v2 1/2] src: add flag to add event wrapping in output functions, Pablo Neira Ayuso
• [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt(), Holger Eitzenberger
  • Re: [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt(), Pablo Neira Ayuso
    • Re: [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt(), Eric Dumazet
    • Re: [OOPS,TPROXY,xt_owner]: Oops accessing socket in owner_mt(), Holger Eitzenberger
    • Re: [OOPS,xt_owner,V2]: Oops accessing socket in owner_mt(), Holger Eitzenberger
• [libnftnl PATCH 1/2] src: add flag to add event wrapping in output functions, Arturo Borrero Gonzalez
  • [libnftnl PATCH 2/2] examples: nft-events: use new events wrappers, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH 1/2] src: add flag to add event wrapping in output functions, Pablo Neira Ayuso
  • Re: [libnftnl PATCH 1/2] src: add flag to add event wrapping in output functions, Pablo Neira Ayuso
• [libnftnl PATCH] lookup: Fix an invalid read, Ana Rey
  • [libnftnl PATCH] set-elem: fix a memory leak, Ana Rey
    • Re: [libnftnl PATCH] set-elem: fix a memory leak, Pablo Neira Ayuso
  • Re: [libnftnl PATCH] lookup: Fix an invalid read, Pablo Neira Ayuso
• [libnftnl PATCH 1/2] common: add wrapper to represent events, Arturo Borrero Gonzalez
  • [libnftnl PATCH 2/2] examples: nft-events: use new events wrappers, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH 1/2] common: add wrapper to represent events, Pablo Neira Ayuso
• [libnftnl PATCH] set: add helper to get the first set_elem, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] set: add helper to get the first set_elem, Patrick McHardy
    • Re: [libnftnl PATCH] set: add helper to get the first set_elem, Pablo Neira Ayuso
      • Re: [libnftnl PATCH] set: add helper to get the first set_elem, Arturo Borrero Gonzalez
• [ANNOUNCE] ulogd 2.0.4 release, Eric Leblond
• [PATCH v4 0/5] Add suport for bridge if dev name meta expression keys, Tomasz Bursztyka
  • [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family, Tomasz Bursztyka
  • [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public, Tomasz Bursztyka
  • [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
    • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
      • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
        • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
  • [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  • [PATCH 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
• [ANNOUNCE]: Release of nftables 0.2, Patrick McHardy
  • Re: [ANNOUNCE]: Release of nftables 0.2, Jan Engelhardt
• [RFC PATCH 0/5] translations from iptables to nft, Pablo Neira Ayuso
  • [PATCH 1/5] nft: xtables: add generic parsing infrastructure to interpret commands, Pablo Neira Ayuso
  • [PATCH 2/5] nft: xtables-restore: add generic parsing infrastructure, Pablo Neira Ayuso
  • [PATCH 4/5] extensions: libxt_tcp: add translation to nft, Pablo Neira Ayuso
  • [PATCH 3/5] nft: xtables: add the infrastructure to translate from iptables to nft, Pablo Neira Ayuso
  • [PATCH 5/5] extensions: libxt_state: add translation to nft, Pablo Neira Ayuso
• [nft PATCH 0/8] nft event monitor, Arturo Borrero Gonzalez
  • [nft PATCH 1/8] rule: allow to print sets in plain format, Arturo Borrero Gonzalez
  • [nft PATCH 2/8] netlink: add netlink_delinearize_set() func, Arturo Borrero Gonzalez
  • [nft PATCH 3/8] rule: generalize chain_print(), Arturo Borrero Gonzalez
  • [nft PATCH 4/8] netlink: add netlink_delinearize_chain() func, Arturo Borrero Gonzalez
  • [nft PATCH 5/8] netlink: add netlink_delinearize_table() func, Arturo Borrero Gonzalez
  • [nft PATCH 6/8] netlink: refactorize set_elem conversion from netlink, Arturo Borrero Gonzalez
  • [nft PATCH 7/8] netlink: add socket error reporting helper function, Arturo Borrero Gonzalez
  • [nft PATCH 8/8] src: add events reporting, Arturo Borrero Gonzalez
    • Re: [nft PATCH 8/8] src: add events reporting, Pablo Neira Ayuso
  • Re: [nft PATCH 0/8] nft event monitor, Pablo Neira Ayuso
    • Re: [nft PATCH 0/8] nft event monitor, Patrick McHardy
  • Re: [nft PATCH 0/8] nft event monitor, Pablo Neira Ayuso
• [libnftnl PATCH v2] target, match: Fix an invalid read, Ana Rey
  • Re: [libnftnl PATCH v2] target, match: Fix an invalid read, Pablo Neira Ayuso
• cannot stat 'doc/nftables.8': No such file or directory, Ana Rey
  • Re: cannot stat 'doc/nftables.8': No such file or directory, Patrick McHardy
    • Re: cannot stat 'doc/nftables.8': No such file or directory, Ana Rey
• nftables documentation update, Patrick McHardy
• [PATCH] datatypes: rename some types for more consistency, Patrick McHardy
• [PATCH] netlink: fix length value of concat data, Patrick McHardy
• [PATCH 1/2] Extend accounting capabilities to support quotas, mathieu . poirier
  • [PATCH 2/2] nfacct: adding quota capabilities, mathieu . poirier
• [PATCH v2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, mathieu . poirier
• [libnftnl PATCH] target: Fix an invalid read., Ana Rey
  • [libnftnl PATCH] tests: Fix a memory leak, Ana Rey
    • Re: [libnftnl PATCH] tests: Fix a memory leak, Pablo Neira Ayuso
  • Re: [libnftnl PATCH] target: Fix an invalid read., Florian Westphal
• [PATCH 0/1] netfilter: nf_tables: fix big endian problems, Patrick McHardy
  • [PATCH 1/1] netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4, Patrick McHardy
    • Re: [PATCH 1/1] netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4, Pablo Neira Ayuso
  • Re: [PATCH 0/1] netfilter: nf_tables: fix big endian problems, Arturo Borrero Gonzalez
• nftables data type names, Patrick McHardy
  • Re: nftables data type names, Florian Westphal
    • Re: nftables data type names, Patrick McHardy
      • Re: nftables data type names, Patrick McHardy
        • Re: nftables data type names, Pablo Neira Ayuso
          • Re: nftables data type names, Patrick McHardy
• [PATCH 0/2] nftables: fix big endian bugs, Patrick McHardy
  • [PATCH 1/2] expression: fix constant expression allocation on big endian, Patrick McHardy
  • [PATCH 2/2] gmputil: use MSF/LSF in import/export functions dependant on host byte order, Patrick McHardy
• [PATCH] netfilter: conntrack: initialize net.ct.generation, Andrey Vagin
  • Re: [PATCH] netfilter: conntrack: initialize net.ct.generation, David Miller
    • Re: [PATCH] netfilter: conntrack: initialize net.ct.generation, Pablo Neira Ayuso
• [PATCH] parser: fix ether keyword clash, Patrick McHardy
• [PATCH] ebtables printing of ipv6 masks, Mariusz Mazur
  • Re: [PATCH] ebtables printing of ipv6 masks, Bart De Schuymer
• [nft PATCH] expression: Fix inconsistent output in set, Ana Rey
  • Re: [nft PATCH] expression: Fix inconsistent output in set, Patrick McHardy
• NETFILTER_XT_TARGET_NOTRACK, Jean Delvare
  • Re: NETFILTER_XT_TARGET_NOTRACK, Pablo Neira Ayuso
• [PATCH RFC] netfilter: nf_tables: defer all object release via rcu, Pablo Neira Ayuso
  • Re: [PATCH RFC] netfilter: nf_tables: defer all object release via rcu, Tomasz Bursztyka
    • Re: [PATCH RFC] netfilter: nf_tables: defer all object release via rcu, Pablo Neira Ayuso
• [PATCH 00/11] new transaction infrastructure for nf_tables (v4), Pablo Neira Ayuso
  • [PATCH 01/11] netfilter: nf_tables: deconstify table and chain in context structure, Pablo Neira Ayuso
  • [PATCH 04/11] netfilter: nf_tables: add message type to transactions, Pablo Neira Ayuso
  • [PATCH 03/11] netfilter: nf_tables: relocate commit and abort routines in the source file, Pablo Neira Ayuso
  • [PATCH 06/11] netfilter: nf_tables: refactor chain statistic routines, Pablo Neira Ayuso
  • [PATCH 08/11] netfilter: nf_tables: disabling table hooks always succeeds, Pablo Neira Ayuso
  • [PATCH 11/11] netfilter: nf_tables: use new transaction infrastructure to handle elements, Pablo Neira Ayuso
  • [PATCH 09/11] netfilter: nf_tables: pass context to nf_tables_uptable, Pablo Neira Ayuso
  • [PATCH 02/11] netfilter: nf_tables: generalise transaction infrastructure, Pablo Neira Ayuso
  • [PATCH 07/11] netfilter: nf_tables: use new transaction infrastructure to handle chain, Pablo Neira Ayuso
  • [PATCH 10/11] netfilter: nf_tables: use new transaction infrastructure to handle table, Pablo Neira Ayuso
  • [PATCH 05/11] netfilter: nf_tables: use new transaction infrastructure to handle sets, Pablo Neira Ayuso
• [libnftnl PATCH v2 0/2] New features in nft-parsing-test, Ana Rey
  • [libnftnl PATCH v2 2/2] tests: Add support to check a json or xml testfile., Ana Rey
  • [libnftnl PATCH v2 1/2] tests: New tools to uptade xml and json testfiles., Ana Rey
  • Re: [libnftnl PATCH v2 0/2] New features in nft-parsing-test, Pablo Neira Ayuso
• [PATCH] utils: fix -Wcast-align warnings on sparc, Patrick McHardy
• nftables-20140407 compilation error, Nazim Wahid Djafar
  • Re: nftables-20140407 compilation error, Florian Westphal
    • Re: nftables-20140407 compilation error, Pablo Neira Ayuso
      • Re: nftables-20140407 compilation error, Florian Westphal
        • Re: nftables-20140407 compilation error, Pablo Neira Ayuso
          • Re: nftables-20140407 compilation error, Florian Westphal
            • Re: nftables-20140407 compilation error, Patrick McHardy
              • Re: nftables-20140407 compilation error, Florian Westphal
  • Re: nftables-20140407 compilation error, Arturo Borrero Gonzalez
• [libnftnl PATCH] xml: json: Delete an immediatedate label in xml and json file., Ana Rey
  • Re: [libnftnl PATCH] xml: json: Delete an immediatedate label in xml and json file., Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] xml: json: Delete an immediatedate label in xml and json file., Pablo Neira Ayuso
• [libnftnl PATCH] xml: json: Delete a cmpdata label in xml and json file., Ana Rey
  • Re: [libnftnl PATCH] xml: json: Delete a cmpdata label in xml and json file., Pablo Neira Ayuso
• [libnftnl PATCH 0/3] New features in nft-parsing-test, Ana Rey
  • [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset., Ana Rey
    • Re: [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset., Arturo Borrero Gonzalez
      • Re: [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset., Ana Rey
    • Re: [libnftnl PATCH 1/3] ruleset: Add an end of line in the exit of ruleset., Ana Rey
  • [libnftnl PATCH 3/3] tests: Add support to check a json or xml testfile., Ana Rey
  • [libnftnl PATCH 2/3] tests: New tools to uptade xml and json testfiles., Ana Rey
• [PATCH v3 0/5] Add suport for bridge if dev name meta exepression keys, Tomasz Bursztyka
  • [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public, Tomasz Bursztyka
  • [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
    • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
      • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
        • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
  • [PATCH 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  • [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  • [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family, Tomasz Bursztyka
• [libnetfilter_conntrack/ulogd PATCH 0/3] add mark filter, Ken-ichirou MATSUZAWA
  • [libnetfilter_conntrack PATCH 1/3] conntrack: add mark event filter, Ken-ichirou MATSUZAWA
    • Re: [libnetfilter_conntrack PATCH 1/3] conntrack: add mark event filter, Pablo Neira Ayuso
      • [libnetfilter_conntrack PATCH 1/3 resend] conntrack: add mark event filter, Ken-ichirou MATSUZAWA
  • [ulogd PATCH 2/3] add mark event filter, Ken-ichirou MATSUZAWA
    • Re: [ulogd PATCH 2/3] add mark event filter, Pablo Neira Ayuso
  • [ulogd PATCH 3/3] add mark dump filter, Ken-ichirou MATSUZAWA
• [nftables PATCH v2] src: rule: fix crash in set listing, Ana Rey
  • Re: [nftables PATCH v2] src: rule: fix crash in set listing, Pablo Neira Ayuso
• [nftables PATCH] src: rule: Fix list of set: Add a forgotten 'return', Ana Rey
  • Re: [nftables PATCH] src: rule: Fix list of set: Add a forgotten 'return', Pablo Neira Ayuso
• [PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
  • Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pablo Neira Ayuso
    • Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
      • Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pablo Neira Ayuso
        • Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
          • Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pavel Emelyanov
            • Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
              • Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pavel Emelyanov
          • Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Pablo Neira Ayuso
            • Re: [PATCH] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
• [PATCH --smtp-server=mail.sw.ru] ipt_CLUSTERIP: Add network device notifier, Kirill Tkhai
• [PATCH libnftnl] src: fix bogus assertion for unset attributes, Pablo Neira Ayuso
• [libnftnl PATCH] set_elem: parse family from Netlink message, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] set_elem: parse family from Netlink message, Pablo Neira Ayuso
• [PATCH 0/8] netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 2/8] netfilter: connlimit: move lock array out of struct connlimit_data, Pablo Neira Ayuso
  • [PATCH 1/8] netfilter: connlimit: fix UP build, Pablo Neira Ayuso
  • [PATCH 7/8] netfilter: nf_tables: fix wrong format in request_module(), Pablo Neira Ayuso
  • [PATCH 4/8] netfilter: Add {ipt,ip6t}_osf aliases for xt_osf, Pablo Neira Ayuso
  • [PATCH 3/8] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Pablo Neira Ayuso
  • [PATCH 5/8] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Pablo Neira Ayuso
  • [PATCH 8/8] netfilter: Can't fail and free after table replacement, Pablo Neira Ayuso
  • [PATCH 6/8] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH 0/8] netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: nf_conntrack: allow server to become a client in TW handling, Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: nfnetlink_log: fix maximum packet length logged to userspace, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats allocation, Pablo Neira Ayuso
    • [PATCH 4/8] bridge: Do not compile options in br_parse_ip_options, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops(), Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: nf_log: release skbuff on nlmsg put failure, Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: nf_log: account for size of NLMSG_DONE attribute, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: ipset: off by one in ip_set_nfnl_get_byindex(), Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter fixes for net, David Miller
  • [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: ctnetlink: Fix regression in CTA_HELP processing, Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: nfnetlink_queue: fix NFQA_VLAN_MAX definition, Pablo Neira Ayuso
    • [PATCH 4/8] Fix bug: sometimes valid entries in hash:* types of sets were evicted, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: ctnetlink: Fix regression in CTA_STATUS processing, Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: xt_hashlimit: Fix integer divide round to zero., Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: nfnetlink: remove static declaration from err_list, Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: ipset: Null pointer exception in ipset list:set, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: nf_ct_helper: warn when not applying default helper assignment, Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter fixes for net, David Miller
  • [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: nfnl_cthelper: fix runtime expectation policy updates, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: nfnl_cthelper: Fix memory leak, Pablo Neira Ayuso
    • [PATCH 4/8] netfilter: invoke synchronize_rcu after set the _hook_ to NULL, Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table, Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregister, Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to register, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: nfnetlink_queue: fix secctx memory leak, Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter fixes for net, David Miller
  • [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: nft_osf: usage from output path is not valid, Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: nf_flow_table: remove flowtable hook flush routine in netns exit routine, Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: xt_nat: fix DNAT target for shifted portmap ranges, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: nf_flow_table: do not remove offload when other netns's interface is down, Pablo Neira Ayuso
    • [PATCH 4/8] netfilter: xt_TEE: add missing code to get interface index in checkentry., Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: nft_compat: do not dump private area, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: xt_TEE: fix wrong interface selection, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: nft_set_rbtree: allow loose matching of closing element in interval, Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter fixes for net, David Miller
  • [PATCH 0/8] netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: nft_meta_bridge: Eliminate 'out' label, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: nf_tables: Make nft_meta expression more robust, Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: ipset: Fix rename concurrency with listing, Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: ebtables: also count base chain policies, Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets, Pablo Neira Ayuso
    • [PATCH 4/8] netfilter: add include guard to xt_connlabel.h, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: ebtables: fix a memory leak bug in compat, Pablo Neira Ayuso
    • Re: [PATCH 0/8] netfilter fixes for net, David Miller
  • [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/8] netfilter: nf_tables: free chain context when BINDING flag is missing, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Pablo Neira Ayuso
    • [PATCH 7/8] selftests: netfilter: kill running process only, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: ebtables: reject bogus getopt len value, Pablo Neira Ayuso
    • [PATCH 6/8] selftests: netfilter: add MTU arguments to flowtables, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: nft_compat: remove flush counter optimization, Pablo Neira Ayuso
    • [PATCH 5/8] selftests: netfilter: add checktool function, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter fixes for net, David Miller
  • [PATCH 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: delete repeated words, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: conntrack: do not auto-delete clash entries on reply, Pablo Neira Ayuso
    • [PATCH 7/8] selftests: netfilter: add command usage, Pablo Neira Ayuso
    • [PATCH 6/8] selftests: netfilter: simplify command testing, Pablo Neira Ayuso
    • [PATCH 5/8] selftests: netfilter: remove unused variable in make_file(), Pablo Neira Ayuso
    • [PATCH 4/8] selftests: netfilter: exit on invalid parameters, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS, Pablo Neira Ayuso
    • [PATCH 3/8] selftests: netfilter: fix header example, Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter fixes for net, David Miller
• [PATCH v2] netfilter: Can't fail and free after table replacement, Thomas Graf
  • Re: [PATCH v2] netfilter: Can't fail and free after table replacement, Pablo Neira Ayuso
• [PATCH nft 1/3] src: add set netlink message to the batch, Pablo Neira Ayuso
  • [PATCH nft 2/3] src: add chain netlink messages to the batch, Pablo Neira Ayuso
  • [PATCH nft 3/3] src: add table netlink messages to the batch, Pablo Neira Ayuso
• [PATCH libnftnl 1/2] include: synchronize nf_tables.h with nftables tree, Pablo Neira Ayuso
  • [PATCH libnftnl 2/2] set: add set ID support, Pablo Neira Ayuso
• [PATCH 00/10] new transaction infrastructure for nf_tables (v3), Pablo Neira Ayuso
  • [PATCH 01/10] netfilter: nf_tables: deconstify table and chain in context structure, Pablo Neira Ayuso
  • [PATCH 02/10] netfilter: nf_tables: generalise transaction infrastructure, Pablo Neira Ayuso
  • [PATCH 07/10] netfilter: nf_tables: disabling table hooks always succeeds, Pablo Neira Ayuso
  • [PATCH 10/10] netfilter: nf_tables: use new transaction infrastructure to handle elements, Pablo Neira Ayuso
  • [PATCH 09/10] netfilter: nf_tables: use new transaction infrastructure to handle table, Pablo Neira Ayuso
  • [PATCH 03/10] netfilter: nf_tables: relocate commit and abort routines in the source file, Pablo Neira Ayuso
  • [PATCH 05/10] netfilter: nf_tables: use new transaction infrastructure to handle sets, Pablo Neira Ayuso
  • [PATCH 04/10] netfilter: nf_tables: add message type to transactions, Pablo Neira Ayuso
  • [PATCH 08/10] netfilter: nf_tables: pass context to nf_tables_uptable, Pablo Neira Ayuso
  • [PATCH 06/10] netfilter: nf_tables: use new transaction infrastructure to handle chain, Pablo Neira Ayuso
• [PATCH v2 0/4] Add suport for bridge if dev name meta exepression keys, Tomasz Bursztyka
  • [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family, Tomasz Bursztyka
  • [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  • [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
    • Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Pablo Neira Ayuso
      • Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Patrick McHardy
        • Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Pablo Neira Ayuso
          • Re: [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  • [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public, Tomasz Bursztyka
  • [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
• [PATCH v3] libnftnl: tests: Use getopt_long to parse the command-line arguments., Ana Rey
  • Re: [PATCH v3] libnftnl: tests: Use getopt_long to parse the command-line arguments., Pablo Neira Ayuso
• ip_tables: limit match: invalid size 40 != 48, Ronny Janssen
  • Re: ip_tables: limit match: invalid size 40 != 48, Jan Engelhardt
• [PATCH] ipset: Pass IPSET_BIN to test scripts to change binary location, Neutron Soutmun
  • Re: [PATCH] ipset: Pass IPSET_BIN to test scripts to change binary location, Jozsef Kadlecsik
• [nf_tables PATCH v2] Subject: netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
  • Re: [nf_tables PATCH v2] Subject: netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
• [PATCH v2] libnftnl: tests: Use getopt_long to parse the command-line arguments., Ana Rey
  • Re: [PATCH v2] libnftnl: tests: Use getopt_long to parse the command-line arguments., Pablo Neira Ayuso
• [PATCH] libnftnl: tests: Use getopt_long to parse the command-line arguments., Ana Rey
• [nftables] testing at sparc, Arturo Borrero Gonzalez
  • Re: [nftables] testing at sparc, Patrick McHardy
    • [PATCH RFC] expression: fix constant expression allocation on big endian, Patrick McHardy
• [PATCH] netfilter: Can't fail and free after table replacement, Thomas Graf
  • Re: [PATCH] netfilter: Can't fail and free after table replacement, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: Can't fail and free after table replacement, Florian Westphal
      • Re: [PATCH] netfilter: Can't fail and free after table replacement, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, mathieu . poirier
  • [PATCH 2/2] Extend accounting capabilities to support quotas, mathieu . poirier
  • Re: [PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, Pablo Neira Ayuso
    • Re: [PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to accounting framework, Mathieu Poirier
• Re: linux-next: Tree for Apr 1 (netfilter), Randy Dunlap
  • Re: linux-next: Tree for Apr 1 (netfilter), David Miller
    • Re: linux-next: Tree for Apr 1 (netfilter), Geert Uytterhoeven
      • Re: linux-next: Tree for Apr 1 (netfilter), David Miller
        • Re: linux-next: Tree for Apr 1 (netfilter), Geert Uytterhoeven
• [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
  • Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
  • Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
    • Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
    • Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
• [libnftnl PATCH] examples: complete nft-events example, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] examples: complete nft-events example, Pablo Neira Ayuso
• [nf_tables PATCH] netfilter: nft_hash: fix inclusion of linux/vmalloc.h, Arturo Borrero Gonzalez
• [PATCH] ipset: Fix grammar error in manpage, Neutron Soutmun
  • Re: [PATCH] ipset: Fix grammar error in manpage, Jozsef Kadlecsik
• [PATCH] ipset: Fix printf format warning, Neutron Soutmun
  • Re: [PATCH] ipset: Fix printf format warning, Jozsef Kadlecsik
• netfilter: NULL ptr deref on boot in xt_register_table, Sasha Levin
• no new feature patches please, David Miller
  • net-next is closed [was Re: no new feature patches please], Pablo Neira Ayuso
• Re: linux-next: Tree for Mar 31 (netfilter), Randy Dunlap
• [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len(), Masanari Iida
  • [PATCH 5/5] netfilter: Fix format string mismatch in nf_conntrack_sip_init(), Masanari Iida
    • Re: [PATCH 5/5] netfilter: Fix format string mismatch in nf_conntrack_sip_init(), Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: Fix format string mismatch in nf_conntrack_irc_init(), Masanari Iida
    • Re: [PATCH 4/5] netfilter: Fix format string mismatch in nf_conntrack_irc_init(), Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: Fix format string mismatch in _conntrack_tftp_init(), Masanari Iida
    • Re: [PATCH 3/5] netfilter: Fix format string mismatch in _conntrack_tftp_init(), Pablo Neira Ayuso
  • Re: [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len(), Pablo Neira Ayuso
  • Re: [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len(), Patrick McHardy
    • Re: [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len(), Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: relax string validation of NFTA_CHAIN_TYPE, Pablo Neira Ayuso
• [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre, Andrey Vagin
  • Re: [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre, Pablo Neira Ayuso
    • Re: [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre, Andrew Vagin
      • Re: [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre, Pablo Neira Ayuso
• [PATCH 1/3] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: nf_tables: fix wrong format in request_module(), Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Pablo Neira Ayuso
    • Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Florian Westphal
      • Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Pablo Neira Ayuso
        • Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Florian Westphal
          • Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Thomas Graf
• [RFC PATCH 0/2] netfilter: Adding quota capabilities to nfnetlink, mathieu . poirier
  • [RFC PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to nf_acct objects, mathieu . poirier
  • [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter, mathieu . poirier
    • Re: [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter, Pablo Neira Ayuso
      • Re: [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter, Mathieu Poirier
        • Re: [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter, Pablo Neira Ayuso
• [PATCH 0/8] new transaction infrastructure for nf_tables (v2), Pablo Neira Ayuso
  • [PATCH 2/8] netfilter: nf_tables: relocate commit and abort routines in the source file, Pablo Neira Ayuso
  • [PATCH 1/8] netfilter: nf_tables: generalise transaction infrastructure, Pablo Neira Ayuso
  • [PATCH 3/8] netfilter: nf_tables: add message type to transactions, Pablo Neira Ayuso
  • [PATCH 7/8] netfilter: nf_tables: pass context to nf_tables_uptable, Pablo Neira Ayuso
  • [PATCH 5/8] netfilter: nf_tables: move chain handling to the transaction infrastructure, Pablo Neira Ayuso
  • [PATCH 4/8] netfilter: nf_tables: move set handling to the transaction infrastructure, Pablo Neira Ayuso
  • [PATCH 6/8] netfilter: nf_tables: disabling table hooks always succeeds, Pablo Neira Ayuso
  • [PATCH 8/8] netfilter: nf_tables: move table handling to the transaction infrastructure, Pablo Neira Ayuso
• [PATCH 0/3] netfilter: nf_tables: cleanup and a bugfix, Patrick McHardy
  • [PATCH 1/3] netfilter: nft_ct: add missing ifdef for NFT_MARK setting, Patrick McHardy
  • [PATCH 2/3] netfilter: nft_meta: split nft_meta_init() into two functions for get/set, Patrick McHardy
    • Re: [PATCH 2/3] netfilter: nft_meta: split nft_meta_init() into two functions for get/set, Tomasz Bursztyka
      • Re: [PATCH 2/3] netfilter: nft_meta: split nft_meta_init() into two functions for get/set, Patrick McHardy
  • [PATCH 3/3] netfilter: nft_ct: split nft_ct_init() into two functions for get/set, Patrick McHardy
  • Re: [PATCH 0/3] netfilter: nf_tables: cleanup and a bugfix, Pablo Neira Ayuso
• [ulogd RFC PATCH 0/2] introduce new string output plugin, Ken-ichirou MATSUZAWA
  • [ulogd RFC PATCH 1/2] sprint: introduce new output plugin, Ken-ichirou MATSUZAWA
    • Re: [ulogd RFC PATCH 1/2] sprint: introduce new output plugin, Eric Leblond
  • [ulogd RFC PATCH 2/2] ip2str: introduce changable address separator, Ken-ichirou MATSUZAWA
    • Re: [ulogd RFC PATCH 2/2] ip2str: introduce changable address separator, Eric Leblond
  • Re: [ulogd RFC PATCH 0/2] introduce new string output plugin, Eric Leblond
    • Re: [ulogd RFC PATCH 0/2] introduce new string output plugin, Ken-ichirou MATSUZAWA
      • Re: [ulogd RFC PATCH 0/2] introduce new string output plugin, Eric Leblond
        • [ulogd RFC PATCH 0/2 resend] introduce new string output plugin, Ken-ichirou MATSUZAWA
• The same nf_ct_gre_keymap is deleted from list twice, Andrey Wagin
• [PATCH v2] nftables: Fix list of sets by family, Ana Rey
  • Re: [PATCH v2] nftables: Fix list of sets by family, Patrick McHardy
• [PATCH 0/2] netfilter: nf_tables: set selection, Patrick McHardy
  • [PATCH 1/2] netfilter: nf_tables: implement proper set selection, Patrick McHardy
  • [PATCH 2/2] netfilter: nft_hash: use set global element counter instead of private one, Patrick McHardy
  • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Pablo Neira Ayuso
    • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Patrick McHardy
      • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Pablo Neira Ayuso
        • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Patrick McHardy
          • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v3), Andrey Vagin
  • Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v3), Pablo Neira Ayuso
• [PATCH] nftables: Fix list of sets by family, Ana Rey
  • Re: [PATCH] nftables: Fix list of sets by family, Patrick McHardy
    • Re: [PATCH] nftables: Fix list of sets by family, Arturo Borrero Gonzalez
      • Re: [PATCH] nftables: Fix list of sets by family, Patrick McHardy
• [PATCH 1/3 nft] src: add set netlink message to the batch, Pablo Neira Ayuso
  • [PATCH 2/3 nft] src: add chain netlink messages to the batch, Pablo Neira Ayuso
  • [PATCH 3/3 nft] src: add table netlink messages to the batch, Pablo Neira Ayuso
• [PATCH libnftnl] set: add set ID support, Pablo Neira Ayuso
• [PATCH 0/7] new transaction infrastructure for nf_tables, Pablo Neira Ayuso
  • [PATCH 1/7] netfilter: nf_tables: deconstify table and chain in context structure, Pablo Neira Ayuso
    • Re: [PATCH 1/7] netfilter: nf_tables: deconstify table and chain in context structure, Patrick McHardy
      • Re: [PATCH 1/7] netfilter: nf_tables: deconstify table and chain in context structure, Pablo Neira Ayuso
  • [PATCH 2/7] netfilter: nf_tables: generalise transaction infrastructure, Pablo Neira Ayuso
    • Re: [PATCH 2/7] netfilter: nf_tables: generalise transaction infrastructure, Patrick McHardy
  • [PATCH 3/7] netfilter: nf_tables: relocate commit and abort routines in the source file, Pablo Neira Ayuso
  • [PATCH 6/7] netfilter: nf_tables: move chain handling to the transaction infrastructure, Pablo Neira Ayuso
    • Re: [PATCH 6/7] netfilter: nf_tables: move chain handling to the transaction infrastructure, Patrick McHardy
  • [PATCH 7/7] netfilter: nf_tables: move table handling to the transaction infrastructure, Pablo Neira Ayuso
    • Re: [PATCH 7/7] netfilter: nf_tables: move table handling to the transaction infrastructure, Patrick McHardy
  • [PATCH 4/7] netfilter: nf_tables: better encapsulation for the rule transaction code, Pablo Neira Ayuso
    • Re: [PATCH 4/7] netfilter: nf_tables: better encapsulation for the rule transaction code, Patrick McHardy
  • [PATCH 5/7] netfilter: nf_tables: move set handling to the transaction infrastructure, Pablo Neira Ayuso
    • Re: [PATCH 5/7] netfilter: nf_tables: move set handling to the transaction infrastructure, Patrick McHardy
• [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
  • Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Pablo Neira Ayuso
    • Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
      • Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Pablo Neira Ayuso
        • Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
• [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Andrey Vagin
  • Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Patrick McHardy
    • [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v2), Andrey Vagin
  • Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Florian Westphal
    • Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Patrick McHardy
• [PATCH 0/5] Add suport for bridge if dev name meta exepression keys, Tomasz Bursztyka
  • [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public, Tomasz Bursztyka
  • [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family, Tomasz Bursztyka
  • [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
    • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Arturo Borrero Gonzalez
      • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  • [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  • Re: [PATCH 0/5] Add suport for bridge if dev name meta exepression keys, Patrick McHardy
    • Re: [PATCH 0/5] Add suport for bridge if dev name meta exepression keys, Tomasz Bursztyka
• [RFC 0/3] Add support for meta keys, bridge family specific, Tomasz Bursztyka
  • [RFC 1/3] netfilter: nf_tables: Make public core function of META expression, Tomasz Bursztyka
  • [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
    • Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
      • Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
        • Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
          • Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • [RFC 3/3] netfilter: nftables: Return preferably given family expression if any, Tomasz Bursztyka
    • Re: [RFC 3/3] netfilter: nftables: Return preferably given family expression if any, Patrick McHardy
      • Re: [RFC 3/3] netfilter: nftables: Return preferably given family expression if any, Tomasz Bursztyka
• NULL pointer dereference in nf_nat_setup_info, Andrey Wagin
  • Re: NULL pointer dereference in nf_nat_setup_info, Andrey Wagin
• [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
    • Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Luis Henriques
      • Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Ben Hutchings
        • Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
          • [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Ben Hutchings
            • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Luis Henriques
            • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
            • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Josh Boyer
            • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Ben Hutchings
              • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Greg Kroah-Hartman
• [helper PATCH] Preserve conntrack helper bound through CT rule, Alin Năstac
  • Re: [helper PATCH] Preserve conntrack helper bound through CT rule, Florian Westphal
    • Re: [helper PATCH] Preserve conntrack helper bound through CT rule, Alin Năstac
      • Re: [helper PATCH] Preserve conntrack helper bound through CT rule, Florian Westphal
        • Re: [helper PATCH] Preserve conntrack helper bound through CT rule, Alin Năstac
• [PATCH] netfilter: Add {ipt,ip6t}_osf aliases for xt_osf, Kirill Tkhai
  • Re: [PATCH] netfilter: Add {ipt,ip6t}_osf aliases for xt_osf, Pablo Neira Ayuso
• [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Pablo Neira Ayuso
  • [PATCH RFC nft 2/2] src: add set netlink message to the batch, Pablo Neira Ayuso
  • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Patrick McHardy
    • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Pablo Neira Ayuso
      • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Patrick McHardy
        • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Pablo Neira Ayuso
          • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Patrick McHardy
            • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Patrick McHardy
    • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
• [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Florian Westphal
    • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Florian Westphal
        • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Florian Westphal
• [iptables PATCH] nft: replace nft_rule_attr_get_u8, Giuseppe Longo
  • Re: [iptables PATCH] nft: replace nft_rule_attr_get_u8, Pablo Neira Ayuso
• [PATCH] netfilter: disallow builtin socket/tproxy with modular ipv6 defrag, Florian Westphal
  • Re: [PATCH] netfilter: disallow builtin socket/tproxy with modular ipv6 defrag, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: disallow builtin socket/tproxy with modular ipv6 defrag, Florian Westphal
• [PATCH] netlink: simplify nfnetlink_bind, Richard Guy Briggs
  • Re: [PATCH] netlink: simplify nfnetlink_bind, Pablo Neira Ayuso
    • Re: [PATCH] netlink: simplify nfnetlink_bind, Richard Guy Briggs
• [PATCH] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
  • Re: [PATCH] netlink: have netlink per-protocol bind function return an error code., David Miller
    • Re: [PATCH] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
      • Re: [PATCH] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
        • [PATCH][v3] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
          • [PATCH][v4] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
        • [PATCH][v5] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
          • Re: [PATCH][v5] netlink: have netlink per-protocol bind function return an error code., David Miller
            • v6 superceded it [was: Re: [PATCH][v5] netlink: have netlink per-protocol bind function return an error code.], Richard Guy Briggs
        • unbind [was: Re: [PATCH] netlink: have netlink per-protocol bind function return] an error code., Richard Guy Briggs
        • [PATCH][v6] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
          • Re: [PATCH][v6] netlink: have netlink per-protocol bind function return an error code., David Miller
          • Re: [PATCH][v6] netlink: have netlink per-protocol bind function return an error code., Patrick McHardy
        • [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, Richard Guy Briggs
          • [PATCH 3/3] netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP, Richard Guy Briggs
          • [PATCH 2/3][v7] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
          • [PATCH 1/3] netlink: simplify nfnetlink_bind, Richard Guy Briggs
          • Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, David Miller
            • Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, Richard Guy Briggs
              • Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, David Miller
        • [PATCH 0/6] audit: implement multicast socket for journald, Richard Guy Briggs
          • [PATCH 6/6] audit: send multicast messages only if there are listeners, Richard Guy Briggs
          • [PATCH 2/6] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
            • Re: [PATCH 2/6] netlink: have netlink per-protocol bind function return an error code., David Miller
          • [PATCH 5/6] audit: add netlink multicast group for log read, Richard Guy Briggs
          • [PATCH 1/6] netlink: simplify nfnetlink_bind, Richard Guy Briggs
          • [PATCH 4/6] audit: add netlink audit protocol bind to check capabilities on multicast join, Richard Guy Briggs
          • [PATCH 3/6] netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP, Richard Guy Briggs
• [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
  • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
    • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
      • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [nft PATCH] src: check if the set name is too long, Giuseppe Longo
  • Re: [nft PATCH] src: check if the set name is too long, Tomasz Bursztyka
    • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
    • Message not available
      • Re: [nft PATCH] src: check if the set name is too long, Tomasz Bursztyka
  • <Possible follow-ups>
  • [nft PATCH] src: check if the set name is too long, Giuseppe Longo
    • [PATCH] nftables: fix length of set name, Giuseppe Longo
      • Re: [PATCH] nftables: fix length of set name, Pablo Neira Ayuso
    • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
      • Re: [nft PATCH] src: check if the set name is too long, Tomasz Bursztyka
        • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
          • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
• [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
  • Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
    • Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [PATCH next] netfilter: connlimit: move lock array out of struct connlimit_data, Florian Westphal
  • Re: [PATCH next] netfilter: connlimit: move lock array out of struct connlimit_data, Pablo Neira Ayuso
• [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
    • Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
      • Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [libnftnl PATCH] set_elems: delete void EXPORT_SYMBOL, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] set_elems: delete void EXPORT_SYMBOL, Pablo Neira Ayuso
• [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
  • <Possible follow-ups>
  • [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
      • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
        • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
      • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
• [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Alexey Perevalov
  • Re: [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Daniel Borkmann
    • Re: [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Pablo Neira Ayuso
• [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
    • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • <Possible follow-ups>
  • [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
    • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
      • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, behanw
  • RE: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, David Laight
    • Re: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, Behan Webster
      • RE: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, David Laight
        • Re: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, Behan Webster
        • [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter, behanw
          • RE: [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter, David Laight
            • Re: [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter, Mark Charlebois
            • [PATCH v4] net: netfilter: LLVMLinux: vlais-netfilter, behanw
              • Re: [PATCH v4] net: netfilter: LLVMLinux: vlais-netfilter, Behan Webster
• [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Florian Westphal
  • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
    • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Florian Westphal
      • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
        • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Patrick McHardy
          • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
            • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Patrick McHardy
              • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
                • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Florian Westphal
    • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Patrick McHardy
• [PATCH -next] netfilter: connlimit: fix UP build, Florian Westphal
  • Re: [PATCH -next] netfilter: connlimit: fix UP build, Pablo Neira Ayuso
• [PATCH 00/38] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH 14/38] netfilter: ipset: Prepare the kernel for create option flags when no extension is needed, Pablo Neira Ayuso
  • [PATCH 34/38] netfilter: connlimit: use kmem_cache for conn objects, Pablo Neira Ayuso
  • [PATCH 37/38] netfilter: connlimit: make same_source_net signed, Pablo Neira Ayuso
  • [PATCH 38/38] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Pablo Neira Ayuso
  • [PATCH 36/38] netfilter: connlimit: use keyed locks, Pablo Neira Ayuso
    • RE: [PATCH 36/38] netfilter: connlimit: use keyed locks, David Laight
      • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Florian Westphal
        • RE: [PATCH 36/38] netfilter: connlimit: use keyed locks, David Laight
    • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Eric Dumazet
      • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Florian Westphal
      • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Jesper Dangaard Brouer
        • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Eric Dumazet
  • [PATCH 28/38] netfilter: nf_tables: restore notifications for anonymous set destruction, Pablo Neira Ayuso
  • [PATCH 35/38] netfilter: Convert uses of __constant_<foo> to <foo>, Pablo Neira Ayuso
  • [PATCH 30/38] netfilter: nft_nat: fix family validation, Pablo Neira Ayuso
  • [PATCH 32/38] netfilter: connlimit: improve packet-to-closed-connection logic, Pablo Neira Ayuso
  • [PATCH 31/38] netfilter: connlimit: factor hlist search into new function, Pablo Neira Ayuso
  • [PATCH 33/38] netfilter: connlimit: move insertion of new element out of count function, Pablo Neira Ayuso
  • [PATCH 18/38] sections, ipvs: Remove useless __read_mostly for ipvs genl_ops, Pablo Neira Ayuso
  • [PATCH 27/38] netfilter: nf_tables: restore context for expression destructors, Pablo Neira Ayuso
  • [PATCH 29/38] netfilter: nft_ct: remove family from struct nft_ct, Pablo Neira Ayuso
  • [PATCH 10/38] netfilter: ipset: Follow manual page behavior for SET target on list:set, Pablo Neira Ayuso
  • [PATCH 25/38] netfilter: nft_hash: bug fixes and resizing, Pablo Neira Ayuso
  • [PATCH 26/38] netfilter: nf_tables: clean up nf_tables_trans_add() argument order, Pablo Neira Ayuso
  • [PATCH 24/38] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Pablo Neira Ayuso
  • [PATCH 11/38] netfilter: ipset: Add hash: fix coccinelle warnings, Pablo Neira Ayuso
  • [PATCH 19/38] ipvs: Reduce checkpatch noise in ip_vs_lblc.c, Pablo Neira Ayuso
  • [PATCH 23/38] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Pablo Neira Ayuso
  • [PATCH 17/38] netfilter: ipset: add forceadd kernel support for hash set types, Pablo Neira Ayuso
  • [PATCH 21/38] netfilter: conntrack: spinlock per cpu to protect special lists., Pablo Neira Ayuso
  • [PATCH 22/38] netfilter: avoid race with exp->master ct, Pablo Neira Ayuso
  • [PATCH 16/38] netfilter: ipset: move registration message to init from net_init, Pablo Neira Ayuso
  • [PATCH 07/38] netfilter: nf_tables: accept QUEUE/DROP verdict parameters, Pablo Neira Ayuso
  • [PATCH 15/38] netfilter: ipset: kernel: uapi: fix MARKMASK attr ABI breakage, Pablo Neira Ayuso
  • [PATCH 20/38] netfilter: trivial code cleanup and doc changes, Pablo Neira Ayuso
  • [PATCH 13/38] netfilter: ipset: add markmask for hash:ip,mark data type, Pablo Neira Ayuso
  • [PATCH 09/38] netfilter: nf_tables: add optional user data area to rules, Pablo Neira Ayuso
  • [PATCH 12/38] netfilter: ipset: add hash:ip,mark data type to ipset, Pablo Neira Ayuso
  • [PATCH 08/38] netfilter: nfnetlink_log: remove unused code, Pablo Neira Ayuso
  • [PATCH 05/38] netfilter: nfnetlink: add rcu_dereference_protected() helpers, Pablo Neira Ayuso
  • [PATCH 04/38] netfilter: ip_set: rename nfnl_dereference()/nfnl_set(), Pablo Neira Ayuso
  • [PATCH 03/38] netfilter: nft_ct: labels get support, Pablo Neira Ayuso
  • [PATCH 02/38] netfilter: xt_ipcomp: Use ntohs to ease sparse warning, Pablo Neira Ayuso
  • [PATCH 06/38] netfilter: nf_tables: add nft_dereference() macro, Pablo Neira Ayuso
  • [PATCH 01/38] netfilter: remove double colon, Pablo Neira Ayuso
  • Re: [PATCH 00/38] Netfilter/IPVS updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/38] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/38] netfilter: nft_reject_bridge: remove unnecessary ttl set, Pablo Neira Ayuso
    • [PATCH 02/38] netfilter: flowtables: use fixed renew timeout on teardown, Pablo Neira Ayuso
      • Re: [PATCH 02/38] netfilter: flowtables: use fixed renew timeout on teardown, Felix Fietkau
        • Re: [PATCH 02/38] netfilter: flowtables: use fixed renew timeout on teardown, Florian Westphal
    • [PATCH 03/38] netfilter: nft_tproxy: Move nf_tproxy_assign_sock() to nf_tproxy.h, Pablo Neira Ayuso
    • [PATCH 04/38] netfilter: utils: move nf_ip_checksum* from ipv4 to utils, Pablo Neira Ayuso
    • [PATCH 06/38] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Pablo Neira Ayuso
    • [PATCH 07/38] netfilter: Kconfig: Make NETFILTER_XT_MATCH_SOCKET select NF_SOCKET_IPV4/6, Pablo Neira Ayuso
    • [PATCH 09/38] netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 08/38] netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 12/38] netfilter: conntrack: avoid calls to l4proto invert_tuple, Pablo Neira Ayuso