Linux Netfilter / IP Tables Devel

• Date Index

• Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, (continued)
  • Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
  • Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
    • Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
    • Re: [nf_tables PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
• [libnftnl PATCH] examples: complete nft-events example, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] examples: complete nft-events example, Pablo Neira Ayuso
• [nf_tables PATCH] netfilter: nft_hash: fix inclusion of linux/vmalloc.h, Arturo Borrero Gonzalez
• [PATCH] ipset: Fix grammar error in manpage, Neutron Soutmun
  • Re: [PATCH] ipset: Fix grammar error in manpage, Jozsef Kadlecsik
• [PATCH] ipset: Fix printf format warning, Neutron Soutmun
  • Re: [PATCH] ipset: Fix printf format warning, Jozsef Kadlecsik
• netfilter: NULL ptr deref on boot in xt_register_table, Sasha Levin
• no new feature patches please, David Miller
  • net-next is closed [was Re: no new feature patches please], Pablo Neira Ayuso
• Re: linux-next: Tree for Mar 31 (netfilter), Randy Dunlap
• [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len(), Masanari Iida
  • [PATCH 5/5] netfilter: Fix format string mismatch in nf_conntrack_sip_init(), Masanari Iida
    • Re: [PATCH 5/5] netfilter: Fix format string mismatch in nf_conntrack_sip_init(), Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: Fix format string mismatch in nf_conntrack_irc_init(), Masanari Iida
    • Re: [PATCH 4/5] netfilter: Fix format string mismatch in nf_conntrack_irc_init(), Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: Fix format string mismatch in _conntrack_tftp_init(), Masanari Iida
    • Re: [PATCH 3/5] netfilter: Fix format string mismatch in _conntrack_tftp_init(), Pablo Neira Ayuso
  • Re: [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len(), Pablo Neira Ayuso
  • Re: [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len(), Patrick McHardy
    • Re: [PATCH 2/5] netfilter: Fix format string mismatch in mangle_content_len(), Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: relax string validation of NFTA_CHAIN_TYPE, Pablo Neira Ayuso
• [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre, Andrey Vagin
  • Re: [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre, Pablo Neira Ayuso
    • Re: [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre, Andrew Vagin
      • Re: [PATCH] [RFC] netfilter: ct: flush net_gre->keymap_list only in nf_conntrack_proto_gre, Pablo Neira Ayuso
• [PATCH 1/3] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: nf_tables: fix wrong format in request_module(), Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Pablo Neira Ayuso
    • Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Florian Westphal
      • Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Pablo Neira Ayuso
        • Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Florian Westphal
          • Re: [PATCH 3/3] netfilter: nf_tables: enforce NLA_NUL_STRING in strings, Thomas Graf
• [RFC PATCH 0/2] netfilter: Adding quota capabilities to nfnetlink, mathieu . poirier
  • [RFC PATCH 1/2] netfilter: nfnetlink_acct: Adding quota support to nf_acct objects, mathieu . poirier
  • [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter, mathieu . poirier
    • Re: [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter, Pablo Neira Ayuso
      • Re: [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter, Mathieu Poirier
        • Re: [RFC PATCH 2/2] netfilter: xt_nfacct: Add quota to nfacct filter, Pablo Neira Ayuso
• [PATCH 0/8] new transaction infrastructure for nf_tables (v2), Pablo Neira Ayuso
  • [PATCH 2/8] netfilter: nf_tables: relocate commit and abort routines in the source file, Pablo Neira Ayuso
  • [PATCH 1/8] netfilter: nf_tables: generalise transaction infrastructure, Pablo Neira Ayuso
  • [PATCH 3/8] netfilter: nf_tables: add message type to transactions, Pablo Neira Ayuso
  • [PATCH 7/8] netfilter: nf_tables: pass context to nf_tables_uptable, Pablo Neira Ayuso
  • [PATCH 5/8] netfilter: nf_tables: move chain handling to the transaction infrastructure, Pablo Neira Ayuso
  • [PATCH 4/8] netfilter: nf_tables: move set handling to the transaction infrastructure, Pablo Neira Ayuso
  • [PATCH 6/8] netfilter: nf_tables: disabling table hooks always succeeds, Pablo Neira Ayuso
  • [PATCH 8/8] netfilter: nf_tables: move table handling to the transaction infrastructure, Pablo Neira Ayuso
• [PATCH 0/3] netfilter: nf_tables: cleanup and a bugfix, Patrick McHardy
  • [PATCH 1/3] netfilter: nft_ct: add missing ifdef for NFT_MARK setting, Patrick McHardy
  • [PATCH 2/3] netfilter: nft_meta: split nft_meta_init() into two functions for get/set, Patrick McHardy
    • Re: [PATCH 2/3] netfilter: nft_meta: split nft_meta_init() into two functions for get/set, Tomasz Bursztyka
      • Re: [PATCH 2/3] netfilter: nft_meta: split nft_meta_init() into two functions for get/set, Patrick McHardy
  • [PATCH 3/3] netfilter: nft_ct: split nft_ct_init() into two functions for get/set, Patrick McHardy
  • Re: [PATCH 0/3] netfilter: nf_tables: cleanup and a bugfix, Pablo Neira Ayuso
• [ulogd RFC PATCH 0/2] introduce new string output plugin, Ken-ichirou MATSUZAWA
  • [ulogd RFC PATCH 1/2] sprint: introduce new output plugin, Ken-ichirou MATSUZAWA
    • Re: [ulogd RFC PATCH 1/2] sprint: introduce new output plugin, Eric Leblond
  • [ulogd RFC PATCH 2/2] ip2str: introduce changable address separator, Ken-ichirou MATSUZAWA
    • Re: [ulogd RFC PATCH 2/2] ip2str: introduce changable address separator, Eric Leblond
  • Re: [ulogd RFC PATCH 0/2] introduce new string output plugin, Eric Leblond
    • Re: [ulogd RFC PATCH 0/2] introduce new string output plugin, Ken-ichirou MATSUZAWA
      • Re: [ulogd RFC PATCH 0/2] introduce new string output plugin, Eric Leblond
        • [ulogd RFC PATCH 0/2 resend] introduce new string output plugin, Ken-ichirou MATSUZAWA
• The same nf_ct_gre_keymap is deleted from list twice, Andrey Wagin
• [PATCH v2] nftables: Fix list of sets by family, Ana Rey
  • Re: [PATCH v2] nftables: Fix list of sets by family, Patrick McHardy
• [PATCH 0/2] netfilter: nf_tables: set selection, Patrick McHardy
  • [PATCH 1/2] netfilter: nf_tables: implement proper set selection, Patrick McHardy
  • [PATCH 2/2] netfilter: nft_hash: use set global element counter instead of private one, Patrick McHardy
  • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Pablo Neira Ayuso
    • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Patrick McHardy
      • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Pablo Neira Ayuso
        • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Patrick McHardy
          • Re: [PATCH 0/2] netfilter: nf_tables: set selection, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v3), Andrey Vagin
  • Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v3), Pablo Neira Ayuso
• [PATCH] nftables: Fix list of sets by family, Ana Rey
  • Re: [PATCH] nftables: Fix list of sets by family, Patrick McHardy
    • Re: [PATCH] nftables: Fix list of sets by family, Arturo Borrero Gonzalez
      • Re: [PATCH] nftables: Fix list of sets by family, Patrick McHardy
• [PATCH 1/3 nft] src: add set netlink message to the batch, Pablo Neira Ayuso
  • [PATCH 2/3 nft] src: add chain netlink messages to the batch, Pablo Neira Ayuso
  • [PATCH 3/3 nft] src: add table netlink messages to the batch, Pablo Neira Ayuso
• [PATCH libnftnl] set: add set ID support, Pablo Neira Ayuso
• [PATCH 0/7] new transaction infrastructure for nf_tables, Pablo Neira Ayuso
  • [PATCH 1/7] netfilter: nf_tables: deconstify table and chain in context structure, Pablo Neira Ayuso
    • Re: [PATCH 1/7] netfilter: nf_tables: deconstify table and chain in context structure, Patrick McHardy
      • Re: [PATCH 1/7] netfilter: nf_tables: deconstify table and chain in context structure, Pablo Neira Ayuso
  • [PATCH 2/7] netfilter: nf_tables: generalise transaction infrastructure, Pablo Neira Ayuso
    • Re: [PATCH 2/7] netfilter: nf_tables: generalise transaction infrastructure, Patrick McHardy
  • [PATCH 3/7] netfilter: nf_tables: relocate commit and abort routines in the source file, Pablo Neira Ayuso
  • [PATCH 6/7] netfilter: nf_tables: move chain handling to the transaction infrastructure, Pablo Neira Ayuso
    • Re: [PATCH 6/7] netfilter: nf_tables: move chain handling to the transaction infrastructure, Patrick McHardy
  • [PATCH 7/7] netfilter: nf_tables: move table handling to the transaction infrastructure, Pablo Neira Ayuso
    • Re: [PATCH 7/7] netfilter: nf_tables: move table handling to the transaction infrastructure, Patrick McHardy
  • [PATCH 4/7] netfilter: nf_tables: better encapsulation for the rule transaction code, Pablo Neira Ayuso
    • Re: [PATCH 4/7] netfilter: nf_tables: better encapsulation for the rule transaction code, Patrick McHardy
  • [PATCH 5/7] netfilter: nf_tables: move set handling to the transaction infrastructure, Pablo Neira Ayuso
    • Re: [PATCH 5/7] netfilter: nf_tables: move set handling to the transaction infrastructure, Patrick McHardy
• [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
  • Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Pablo Neira Ayuso
    • Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
      • Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Pablo Neira Ayuso
        • Re: [PATCH -next] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
• [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Andrey Vagin
  • Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Patrick McHardy
    • [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v2), Andrey Vagin
  • Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Florian Westphal
    • Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len, Patrick McHardy
• [PATCH 0/5] Add suport for bridge if dev name meta exepression keys, Tomasz Bursztyka
  • [PATCH 2/5] netfilter: nf_tables: Make meta expression core functions public, Tomasz Bursztyka
  • [PATCH 1/5] netfilter: nf_tables: Stack expression type depending on their family, Tomasz Bursztyka
  • [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
    • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Arturo Borrero Gonzalez
      • Re: [PATCH 3/5] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • [PATCH libnftnl 4/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  • [PATCH nftables 5/5] meta: Add support for input and output bridge interface name, Tomasz Bursztyka
  • Re: [PATCH 0/5] Add suport for bridge if dev name meta exepression keys, Patrick McHardy
    • Re: [PATCH 0/5] Add suport for bridge if dev name meta exepression keys, Tomasz Bursztyka
• [RFC 0/3] Add support for meta keys, bridge family specific, Tomasz Bursztyka
  • [RFC 1/3] netfilter: nf_tables: Make public core function of META expression, Tomasz Bursztyka
  • [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
    • Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
      • Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
        • Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
          • Re: [RFC 2/3] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • [RFC 3/3] netfilter: nftables: Return preferably given family expression if any, Tomasz Bursztyka
    • Re: [RFC 3/3] netfilter: nftables: Return preferably given family expression if any, Patrick McHardy
      • Re: [RFC 3/3] netfilter: nftables: Return preferably given family expression if any, Tomasz Bursztyka
• NULL pointer dereference in nf_nat_setup_info, Andrey Wagin
  • Re: NULL pointer dereference in nf_nat_setup_info, Andrey Wagin
• [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
    • Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Luis Henriques
      • Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Ben Hutchings
        • Re: [PATCH v5] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
          • [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Ben Hutchings
            • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Luis Henriques
            • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
            • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Josh Boyer
            • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Ben Hutchings
              • Re: [PATCH 3.13] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Greg Kroah-Hartman
• [helper PATCH] Preserve conntrack helper bound through CT rule, Alin Năstac
  • Re: [helper PATCH] Preserve conntrack helper bound through CT rule, Florian Westphal
    • Re: [helper PATCH] Preserve conntrack helper bound through CT rule, Alin Năstac
      • Re: [helper PATCH] Preserve conntrack helper bound through CT rule, Florian Westphal
        • Re: [helper PATCH] Preserve conntrack helper bound through CT rule, Alin Năstac
• [PATCH] netfilter: Add {ipt,ip6t}_osf aliases for xt_osf, Kirill Tkhai
  • Re: [PATCH] netfilter: Add {ipt,ip6t}_osf aliases for xt_osf, Pablo Neira Ayuso
• [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Pablo Neira Ayuso
  • [PATCH RFC nft 2/2] src: add set netlink message to the batch, Pablo Neira Ayuso
  • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Patrick McHardy
    • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Pablo Neira Ayuso
      • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Patrick McHardy
        • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Pablo Neira Ayuso
          • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Patrick McHardy
            • Re: [PATCH RFC 1/2] netfilter: nf_tables: move set netlink messages into the batch, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
  • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Patrick McHardy
    • Re: [PATCH] netfilter: nf_tables: Add meta expression key for bridge interface name, Tomasz Bursztyka
• [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Florian Westphal
    • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Florian Westphal
        • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_tables: set names cannot be larger than 15 bytes, Florian Westphal
• [iptables PATCH] nft: replace nft_rule_attr_get_u8, Giuseppe Longo
  • Re: [iptables PATCH] nft: replace nft_rule_attr_get_u8, Pablo Neira Ayuso
• [PATCH] netfilter: disallow builtin socket/tproxy with modular ipv6 defrag, Florian Westphal
  • Re: [PATCH] netfilter: disallow builtin socket/tproxy with modular ipv6 defrag, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: disallow builtin socket/tproxy with modular ipv6 defrag, Florian Westphal
• [PATCH] netlink: simplify nfnetlink_bind, Richard Guy Briggs
  • Re: [PATCH] netlink: simplify nfnetlink_bind, Pablo Neira Ayuso
    • Re: [PATCH] netlink: simplify nfnetlink_bind, Richard Guy Briggs
• [PATCH] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
  • Re: [PATCH] netlink: have netlink per-protocol bind function return an error code., David Miller
    • Re: [PATCH] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
      • Re: [PATCH] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
        • [PATCH][v3] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
          • [PATCH][v4] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
        • [PATCH][v5] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
          • Re: [PATCH][v5] netlink: have netlink per-protocol bind function return an error code., David Miller
            • v6 superceded it [was: Re: [PATCH][v5] netlink: have netlink per-protocol bind function return an error code.], Richard Guy Briggs
        • unbind [was: Re: [PATCH] netlink: have netlink per-protocol bind function return] an error code., Richard Guy Briggs
        • [PATCH][v6] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
          • Re: [PATCH][v6] netlink: have netlink per-protocol bind function return an error code., David Miller
          • Re: [PATCH][v6] netlink: have netlink per-protocol bind function return an error code., Patrick McHardy
        • [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, Richard Guy Briggs
          • [PATCH 3/3] netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP, Richard Guy Briggs
          • [PATCH 2/3][v7] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
          • [PATCH 1/3] netlink: simplify nfnetlink_bind, Richard Guy Briggs
          • Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, David Miller
            • Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, Richard Guy Briggs
              • Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, David Miller
        • [PATCH 0/6] audit: implement multicast socket for journald, Richard Guy Briggs
          • [PATCH 6/6] audit: send multicast messages only if there are listeners, Richard Guy Briggs
          • [PATCH 2/6] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
            • Re: [PATCH 2/6] netlink: have netlink per-protocol bind function return an error code., David Miller
          • [PATCH 5/6] audit: add netlink multicast group for log read, Richard Guy Briggs
          • [PATCH 1/6] netlink: simplify nfnetlink_bind, Richard Guy Briggs
          • [PATCH 4/6] audit: add netlink audit protocol bind to check capabilities on multicast join, Richard Guy Briggs
          • [PATCH 3/6] netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP, Richard Guy Briggs
• [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
  • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
    • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
      • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [nft PATCH] src: check if the set name is too long, Giuseppe Longo
  • Re: [nft PATCH] src: check if the set name is too long, Tomasz Bursztyka
    • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
    • Message not available
      • Re: [nft PATCH] src: check if the set name is too long, Tomasz Bursztyka
  • <Possible follow-ups>
  • [nft PATCH] src: check if the set name is too long, Giuseppe Longo
    • [PATCH] nftables: fix length of set name, Giuseppe Longo
      • Re: [PATCH] nftables: fix length of set name, Pablo Neira Ayuso
    • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
      • Re: [nft PATCH] src: check if the set name is too long, Tomasz Bursztyka
        • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
          • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
• [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
  • Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
    • Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [PATCH next] netfilter: connlimit: move lock array out of struct connlimit_data, Florian Westphal
  • Re: [PATCH next] netfilter: connlimit: move lock array out of struct connlimit_data, Pablo Neira Ayuso
• [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
    • Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
      • Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [libnftnl PATCH] set_elems: delete void EXPORT_SYMBOL, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] set_elems: delete void EXPORT_SYMBOL, Pablo Neira Ayuso
• [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
  • <Possible follow-ups>
  • [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
      • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
        • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
      • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
• [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Alexey Perevalov
  • Re: [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Daniel Borkmann
    • Re: [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Pablo Neira Ayuso
• [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
    • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • <Possible follow-ups>
  • [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
    • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
      • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, behanw
  • RE: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, David Laight
    • Re: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, Behan Webster
      • RE: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, David Laight
        • Re: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, Behan Webster
        • [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter, behanw
          • RE: [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter, David Laight
            • Re: [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter, Mark Charlebois
            • [PATCH v4] net: netfilter: LLVMLinux: vlais-netfilter, behanw
              • Re: [PATCH v4] net: netfilter: LLVMLinux: vlais-netfilter, Behan Webster
• [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Florian Westphal
  • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
    • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Florian Westphal
      • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
        • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Patrick McHardy
          • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
            • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Patrick McHardy
              • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
                • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Florian Westphal
    • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Patrick McHardy
• [PATCH -next] netfilter: connlimit: fix UP build, Florian Westphal
  • Re: [PATCH -next] netfilter: connlimit: fix UP build, Pablo Neira Ayuso
• [PATCH 00/38] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH 14/38] netfilter: ipset: Prepare the kernel for create option flags when no extension is needed, Pablo Neira Ayuso
  • [PATCH 34/38] netfilter: connlimit: use kmem_cache for conn objects, Pablo Neira Ayuso
  • [PATCH 37/38] netfilter: connlimit: make same_source_net signed, Pablo Neira Ayuso
  • [PATCH 38/38] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Pablo Neira Ayuso
  • [PATCH 36/38] netfilter: connlimit: use keyed locks, Pablo Neira Ayuso
    • RE: [PATCH 36/38] netfilter: connlimit: use keyed locks, David Laight
      • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Florian Westphal
        • RE: [PATCH 36/38] netfilter: connlimit: use keyed locks, David Laight
    • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Eric Dumazet
      • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Florian Westphal
      • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Jesper Dangaard Brouer
        • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Eric Dumazet
  • [PATCH 28/38] netfilter: nf_tables: restore notifications for anonymous set destruction, Pablo Neira Ayuso
  • [PATCH 35/38] netfilter: Convert uses of __constant_<foo> to <foo>, Pablo Neira Ayuso
  • [PATCH 30/38] netfilter: nft_nat: fix family validation, Pablo Neira Ayuso
  • [PATCH 32/38] netfilter: connlimit: improve packet-to-closed-connection logic, Pablo Neira Ayuso
  • [PATCH 31/38] netfilter: connlimit: factor hlist search into new function, Pablo Neira Ayuso
  • [PATCH 33/38] netfilter: connlimit: move insertion of new element out of count function, Pablo Neira Ayuso
  • [PATCH 18/38] sections, ipvs: Remove useless __read_mostly for ipvs genl_ops, Pablo Neira Ayuso
  • [PATCH 27/38] netfilter: nf_tables: restore context for expression destructors, Pablo Neira Ayuso
  • [PATCH 29/38] netfilter: nft_ct: remove family from struct nft_ct, Pablo Neira Ayuso
  • [PATCH 10/38] netfilter: ipset: Follow manual page behavior for SET target on list:set, Pablo Neira Ayuso
  • [PATCH 25/38] netfilter: nft_hash: bug fixes and resizing, Pablo Neira Ayuso
  • [PATCH 26/38] netfilter: nf_tables: clean up nf_tables_trans_add() argument order, Pablo Neira Ayuso
  • [PATCH 24/38] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Pablo Neira Ayuso
  • [PATCH 11/38] netfilter: ipset: Add hash: fix coccinelle warnings, Pablo Neira Ayuso
  • [PATCH 19/38] ipvs: Reduce checkpatch noise in ip_vs_lblc.c, Pablo Neira Ayuso
  • [PATCH 23/38] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Pablo Neira Ayuso
  • [PATCH 17/38] netfilter: ipset: add forceadd kernel support for hash set types, Pablo Neira Ayuso
  • [PATCH 21/38] netfilter: conntrack: spinlock per cpu to protect special lists., Pablo Neira Ayuso
  • [PATCH 22/38] netfilter: avoid race with exp->master ct, Pablo Neira Ayuso
  • [PATCH 16/38] netfilter: ipset: move registration message to init from net_init, Pablo Neira Ayuso
  • [PATCH 07/38] netfilter: nf_tables: accept QUEUE/DROP verdict parameters, Pablo Neira Ayuso
  • [PATCH 15/38] netfilter: ipset: kernel: uapi: fix MARKMASK attr ABI breakage, Pablo Neira Ayuso
  • [PATCH 20/38] netfilter: trivial code cleanup and doc changes, Pablo Neira Ayuso
  • [PATCH 13/38] netfilter: ipset: add markmask for hash:ip,mark data type, Pablo Neira Ayuso
  • [PATCH 09/38] netfilter: nf_tables: add optional user data area to rules, Pablo Neira Ayuso
  • [PATCH 12/38] netfilter: ipset: add hash:ip,mark data type to ipset, Pablo Neira Ayuso
  • [PATCH 08/38] netfilter: nfnetlink_log: remove unused code, Pablo Neira Ayuso
  • [PATCH 05/38] netfilter: nfnetlink: add rcu_dereference_protected() helpers, Pablo Neira Ayuso
  • [PATCH 04/38] netfilter: ip_set: rename nfnl_dereference()/nfnl_set(), Pablo Neira Ayuso
  • [PATCH 03/38] netfilter: nft_ct: labels get support, Pablo Neira Ayuso
  • [PATCH 02/38] netfilter: xt_ipcomp: Use ntohs to ease sparse warning, Pablo Neira Ayuso
  • [PATCH 06/38] netfilter: nf_tables: add nft_dereference() macro, Pablo Neira Ayuso
  • [PATCH 01/38] netfilter: remove double colon, Pablo Neira Ayuso
  • Re: [PATCH 00/38] Netfilter/IPVS updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/38] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/38] netfilter: nft_reject_bridge: remove unnecessary ttl set, Pablo Neira Ayuso
    • [PATCH 02/38] netfilter: flowtables: use fixed renew timeout on teardown, Pablo Neira Ayuso
      • Re: [PATCH 02/38] netfilter: flowtables: use fixed renew timeout on teardown, Felix Fietkau
        • Re: [PATCH 02/38] netfilter: flowtables: use fixed renew timeout on teardown, Florian Westphal
    • [PATCH 03/38] netfilter: nft_tproxy: Move nf_tproxy_assign_sock() to nf_tproxy.h, Pablo Neira Ayuso
    • [PATCH 04/38] netfilter: utils: move nf_ip_checksum* from ipv4 to utils, Pablo Neira Ayuso
    • [PATCH 06/38] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Pablo Neira Ayuso
    • [PATCH 07/38] netfilter: Kconfig: Make NETFILTER_XT_MATCH_SOCKET select NF_SOCKET_IPV4/6, Pablo Neira Ayuso
    • [PATCH 09/38] netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 08/38] netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 12/38] netfilter: conntrack: avoid calls to l4proto invert_tuple, Pablo Neira Ayuso
    • [PATCH 10/38] netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 11/38] netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 17/38] netfilter: nf_conncount: Early exit for garbage collection, Pablo Neira Ayuso
    • [PATCH 16/38] netfilter: Kconfig: Change select IPv6 dependencies, Pablo Neira Ayuso
    • [PATCH 19/38] netfilter: nf_conncount: Early exit in nf_conncount_lookup() and cleanup, Pablo Neira Ayuso
    • [PATCH 14/38] netfilter: conntrack: remove get_timeout() indirection, Pablo Neira Ayuso
    • [PATCH 23/38] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
    • [PATCH 25/38] ipvs: add assured state for conn templates, Pablo Neira Ayuso
    • [PATCH 24/38] ipvs: provide just conn to ip_vs_state_name, Pablo Neira Ayuso
    • [PATCH 27/38] netfilter: Remove useless param helper of nf_ct_helper_ext_add, Pablo Neira Ayuso
    • [PATCH 26/38] ipvs: drop conn templates under attack, Pablo Neira Ayuso
    • [PATCH 29/38] netfilter: nf_tables: make valid_genid callback mandatory, Pablo Neira Ayuso
    • [PATCH 33/38] netfilter: nf_osf: add nf_osf_match_one(), Pablo Neira Ayuso
    • [PATCH 28/38] netfilter: nf_tables: add and use helper for module autoload, Pablo Neira Ayuso
    • [PATCH 31/38] netfilter: nf_tables: avoid global info storage, Pablo Neira Ayuso
    • [PATCH 15/38] netfilter: conntrack: remove l3proto abstraction, Pablo Neira Ayuso
    • [PATCH 35/38] netfilter: nft_socket: Break evaluation if no socket found, Pablo Neira Ayuso
    • [PATCH 36/38] netfilter: nft_socket: Expose socket mark, Pablo Neira Ayuso
    • [PATCH 34/38] netfilter: nf_osf: add struct nf_osf_hdr_ctx, Pablo Neira Ayuso
    • [PATCH 37/38] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, Pablo Neira Ayuso
    • [PATCH 38/38] netfilter: nf_osf: add missing definitions to header file, Pablo Neira Ayuso
    • [PATCH 32/38] netfilter: nf_tables: use dedicated mutex to guard transactions, Pablo Neira Ayuso
    • [PATCH 30/38] netfilter: nf_tables: take module reference when starting a batch, Pablo Neira Ayuso
    • [PATCH 22/38] netfilter: nf_conncount: Add list lock and gc worker, and RCU for init tree search, Pablo Neira Ayuso
    • [PATCH 18/38] netfilter: nf_conncount: Switch to plain list, Pablo Neira Ayuso
    • [PATCH 21/38] netfilter: nf_conncount: Split insert and traversal, Pablo Neira Ayuso
    • [PATCH 20/38] netfilter: nf_conncount: Move locking into count_tree(), Pablo Neira Ayuso
    • [PATCH 13/38] netfilter: conntrack: avoid l4proto pkt_to_tuple calls, Pablo Neira Ayuso
    • [PATCH 05/38] netfilter: utils: move nf_ip6_checksum* from ipv6 to utils, Pablo Neira Ayuso
    • Re: [PATCH 00/38] Netfilter/IPVS updates for net-next, David Miller
• xt_CHAOS - PDE_DATA compilation error, M.G.
  • Re: xt_CHAOS - PDE_DATA compilation error, Mart Frauenlob
    • Re: xt_CHAOS - PDE_DATA compilation error, M.G.
      • Re: xt_CHAOS - PDE_DATA compilation error, Jesper Dangaard Brouer
        • Re: xt_CHAOS - PDE_DATA compilation error, Jesper Dangaard Brouer
• [nft RFC PATCH] mnl: Fix a potential buffer overflow, Yuxuan Shui
• [libnftnl RFC PATCH] set: Add nft_set_elems_nlmsg_build_payload_check, Yuxuan Shui
• [PATCH 1/2] iptables: save&restore: warn that -b/--binary isn't implemented, Jiri Popelka
  • [PATCH 2/2] iptables: save: actually parse -M/--modprobe option, Jiri Popelka
    • Re: [PATCH 2/2] iptables: save: actually parse -M/--modprobe option, Pablo Neira Ayuso
  • Re: [PATCH 1/2] iptables: save&restore: warn that -b/--binary isn't implemented, Pablo Neira Ayuso
• [libnftnl PATCH v2 2/2] rule: Changed parser for being more flexible, Alvaro Neira Ayuso
  • Re: [libnftnl PATCH v2 2/2] rule: Changed parser for being more flexible, Pablo Neira Ayuso
• [libnftnl PATCH v2 1/2] rule: Changed the print support for not having several attributes, Alvaro Neira Ayuso
  • Re: [libnftnl PATCH v2 1/2] rule: Changed the print support for not having several attributes, Pablo Neira Ayuso
• [PATCH 1/3] iptables-restore(8): missing -T in synopsis, Jiri Popelka
  • [PATCH 2/3] iptables-restore(8): file to read from can be specified as argument, Jiri Popelka
    • Re: [PATCH 2/3] iptables-restore(8): file to read from can be specified as argument, Pablo Neira Ayuso
  • [PATCH 3/3] iptables: save - fix getopt_long()'s optstring, Jiri Popelka
    • Re: [PATCH 3/3] iptables: save - fix getopt_long()'s optstring, Pablo Neira Ayuso
  • Re: [PATCH 1/3] iptables-restore(8): missing -T in synopsis, Pablo Neira Ayuso
• [PATCH 1/2] update FSF address in license text, Jiri Popelka
  • [PATCH 2/2] iptables: missing bracket in iptables-save(8), Jiri Popelka
    • Re: [PATCH 2/2] iptables: missing bracket in iptables-save(8), Pablo Neira Ayuso
  • Re: [PATCH 1/2] update FSF address in license text, Pablo Neira Ayuso
• [PATCH v2 0/3] netfilter: connlimit: scalability improvements, Florian Westphal
  • [PATCH v2 1/3] netfilter: connlimit: use keyed locks, Florian Westphal
  • [PATCH v2 2/3] netfilter: connlimit: make same_source_net signed, Florian Westphal
  • [PATCH v2 3/3] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
  • Re: [PATCH v2 0/3] netfilter: connlimit: scalability improvements, Pablo Neira Ayuso
• [nft PATCH] ct: add support for setting ct mark, Arturo Borrero Gonzalez
  • Re: [nft PATCH] ct: add support for setting ct mark, Kristian Evensen
  • Re: [nft PATCH] ct: add support for setting ct mark, Pablo Neira Ayuso
• [PATCH net-next 0/6] net: Convert uses of __constant_<foo> to <foo>, Joe Perches
  • [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>, Joe Perches
    • Re: [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>, David Miller
      • Re: [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>, Pablo Neira Ayuso
    • Re: [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>, Jozsef Kadlecsik
• [nft PATCH] src: fix expr_binary_error()-related compilation warnings, Arturo Borrero Gonzalez
  • Re: [nft PATCH] src: fix expr_binary_error()-related compilation warnings, Pablo Neira Ayuso
• [PATCH] iptables: make 'iptables-save -M' actually work, Jiri Popelka
  • Re: [PATCH] iptables: make 'iptables-save -M' actually work, Pablo Neira Ayuso
    • Re: [PATCH] iptables: make 'iptables-save -M' actually work, Jiri Popelka
• some minor tweaks for building doc/man pages for nftables, Robert P. J. Day
  • Re: some minor tweaks for building doc/man pages for nftables, Arturo Borrero Gonzalez
    • Re: some minor tweaks for building doc/man pages for nftables, Robert P. J. Day
      • Re: some minor tweaks for building doc/man pages for nftables, Arturo Borrero Gonzalez
        • Re: some minor tweaks for building doc/man pages for nftables, Robert P. J. Day
    • Re: some minor tweaks for building doc/man pages for nftables, Patrick McHardy
• [PATCH] conntrackd: claim lockfile ownership properly, Ansis Atteka
  • Re: [PATCH] conntrackd: claim lockfile ownership properly, Ansis Atteka
  • Re: [PATCH] conntrackd: claim lockfile ownership properly, Pablo Neira Ayuso
    • Re: [PATCH] conntrackd: claim lockfile ownership properly, Pablo Neira Ayuso
• [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
  • [PATCH RFC 1/9] net: rename fp->bpf_func to fp->run_filter, Pablo Neira Ayuso
  • [PATCH RFC 4/9] netfilter: nf_tables: move fast operations to header, Pablo Neira Ayuso
  • [PATCH RFC 3/9] net: filter: generalise sk_filter_release, Pablo Neira Ayuso
  • [PATCH RFC 6/9] netfilter: nf_tables: rename nf_tables_core.c to nf_tables_nf.c, Pablo Neira Ayuso
  • [PATCH RFC 5/9] netfilter: nf_tables: add nft_value_init, Pablo Neira Ayuso
  • [PATCH RFC 8/9] netfilter: nf_tables: generalize verdict handling and introduce scopes, Pablo Neira Ayuso
  • [PATCH RFC 7/9] netfilter: nf_tables: move expression infrastructure to built-in core, Pablo Neira Ayuso
  • [PATCH RFC 9/9] netfilter: nf_tables: add support for socket filtering, Pablo Neira Ayuso
  • [PATCH RFC 2/9] net: filter: account filter length in bytes, Pablo Neira Ayuso
  • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Daniel Borkmann
    • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
      • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
        • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
        • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
          • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
            • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
              • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
                • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
                  • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
                    • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
  • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Andi Kleen
  • Re: [PATCH RFC 0/9] socket filtering using nf_tables, David Miller
    • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
• [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/2] src/rule: Changed parser support for having consistent with the new print support, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 2/2] src/rule: Changed parser support for having consistent with the new print support, Arturo Borrero Gonzalez
      • Re: [libnftnl PATCH 2/2] src/rule: Changed parser support for having consistent with the new print support, Álvaro Neira Ayuso
  • Re: [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules, Arturo Borrero Gonzalez
    • Re: [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules, Pablo Neira Ayuso
  • Re: [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules, Arturo Borrero Gonzalez
• [PATCH] userspace SSDP conntrack helper, Ash Hughes
  • Re: [PATCH] userspace SSDP conntrack helper, Ash Hughes
  • Re: [PATCH] userspace SSDP conntrack helper, Pablo Neira Ayuso
    • Re: [PATCH] userspace SSDP conntrack helper, Ash Hughes
      • Re: [PATCH] userspace SSDP conntrack helper, Pablo Neira Ayuso
• [libnftnl PATCH v2 1/3] example: fix the example for deleting rules, Alvaro Neira Ayuso
  • [libnftnl PATCH v2 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH v2 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add, Pablo Neira Ayuso
  • [libnftnl PATCH v2 3/3] example: removed printf rule function, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH v2 3/3] example: removed printf rule function, Pablo Neira Ayuso
  • Re: [libnftnl PATCH v2 1/3] example: fix the example for deleting rules, Pablo Neira Ayuso
• [libnftnl PATCH 1/3] example: fix the example for deleting rules, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add, Pablo Neira Ayuso
  • [libnftnl PATCH 3/3] example: removed printf rule function, Alvaro Neira Ayuso
  • Re: [libnftnl PATCH 1/3] example: fix the example for deleting rules, Pablo Neira Ayuso
• [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Ken-ichirou MATSUZAWA
  • [PATCH 2/8] ipfix: fix enterprise bit handling, Ken-ichirou MATSUZAWA
  • [PATCH 3/8] ipfix: some cleanups, Ken-ichirou MATSUZAWA
  • [PATCH 4/8] ipfix: add functions for ipfix dataset creation, Ken-ichirou MATSUZAWA
  • [PATCH 5/8] ipfix: add function for ipfix message creation, Ken-ichirou MATSUZAWA
    • Re: [PATCH 5/8] ipfix: add function for ipfix message creation, Eric Leblond
  • [PATCH 6/8] ipfix: decide whether prepending template by send times, Ken-ichirou MATSUZAWA
  • [PATCH 7/8] ipfix: print ipfix message, Ken-ichirou MATSUZAWA
  • [PATCH 8/8] ipfix: build headers with template, Ken-ichirou MATSUZAWA
  • [libnetfilter_conntrack PATCH] conntrack: introduce clear and equal functions for bitmask object, Ken-ichirou MATSUZAWA
    • Re: [libnetfilter_conntrack PATCH] conntrack: introduce clear and equal functions for bitmask object, Florian Westphal
  • [PATCH 1/8] ipfix: use nfct_bitmask, Ken-ichirou MATSUZAWA
    • Re: [PATCH 1/8] ipfix: use nfct_bitmask, Eric Leblond
  • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Eric Leblond
    • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 1/8] ipfix: use nfct_bitmask, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 2/8] ipfix: fix enterprise bit handling, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 3/8] ipfix: some cleanups, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 4/8] ipfix: add functions for ipfix dataset creation, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 5/8] ipfix: add function for ipfix message creation, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 6/8] ipfix: decide whether prepending template by send times, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 7/8] ipfix: print ipfix message, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 8/8] ipfix: build headers with template, Ken-ichirou MATSUZAWA
      • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Eric Leblond
        • [ulogd PATCH 1/8 resend] ipfix: use nfct_bitmask, Ken-ichirou MATSUZAWA
        • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Ken-ichirou MATSUZAWA
          • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Eric Leblond
  • [ulogd PATCH 0/13] make progress ulogd_output_IPFIX, Ken-ichirou MATSUZAWA
    • [libnetfilter_conntrack PATCH 1/13] conntrack: introduce clear and equal functions for bitmask object, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 2/13] ipfix: use nfct_bitmask, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 3/13] ipfix: fix enterprise bit handling, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 4/13] ipfix: some cleanups, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 5/13] ipfix: add functions for ipfix dataset creation, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 6/13] ipfix: add function for ipfix message creation, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 7/13] ipfix: decide whether prepending template by send times, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 8/13] ipfix: print ipfix message, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 9/13] ipfix: build headers with template, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 10/13] nfct: fix ipfix field_id of flow.end.usec, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 11/13] nfct/ipfix: introduce new vendor id, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Ken-ichirou MATSUZAWA
      • Re: [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Eric Leblond
        • Re: [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Pablo Neira Ayuso
          • Re: [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Ken-ichirou MATSUZAWA
            • Re: [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Eric Leblond
    • [ulogd PATCH 13/13] ipfix: add debug symbol for yafscii, Ken-ichirou MATSUZAWA
• [iptables 0/3] ebtables patchset, Giuseppe Longo
  • [iptables 1/3] xtables: bootstrap xtables-eb for nftables, Giuseppe Longo
  • [iptables 2/3] Operations for bridge family, Giuseppe Longo
  • [iptables 3/3] nft-shared: make compare_matches as public, Giuseppe Longo
    • Re: [iptables 3/3] nft-shared: make compare_matches as public, Stephen Hemminger
  • Re: [iptables 0/3] ebtables patchset, Tomasz Bursztyka
    • Re: [iptables 0/3] ebtables patchset, Pablo Neira Ayuso
      • Re: [iptables 0/3] ebtables patchset, Giuseppe Longo
      • Re: [iptables 0/3] ebtables patchset, Tomasz Bursztyka
      • Re: [iptables 0/3] ebtables patchset, Tomasz Bursztyka
• [PATCH 0/5] netfilter: nf_tables: restore context during destruction, Patrick McHardy
  • [PATCH 1/5] netfilter: nf_tables: clean up nf_tables_trans_add() argument order, Patrick McHardy
  • [PATCH 3/5] netfilter: nf_tables: restore notifications for anonymous set destruction, Patrick McHardy
  • [PATCH 2/5] netfilter: nf_tables: restore context for expression destructors, Patrick McHardy
  • [PATCH 4/5] netfilter: nft_ct: remove family from struct nft_ct, Patrick McHardy
  • [PATCH 5/5] netfilter: nft_nat: fix family validation, Patrick McHardy
  • Re: [PATCH 0/5] netfilter: nf_tables: restore context during destruction, Pablo Neira Ayuso
• [PATCH iptables] update coreteam members from manpage, Pablo Neira Ayuso
• [PATCH] iptables: fix version in iptables(8), Jiri Popelka
  • Re: [PATCH] iptables: fix version in iptables(8), Pablo Neira Ayuso
• [iptables PATCH] nft-arp: wrong condition in parse_payload, Giuseppe Longo
  • Re: [iptables PATCH] nft-arp: wrong condition in parse_payload, Pablo Neira Ayuso
• [PATCH 0/7] netfilter: connlimit: scalability improvements, Florian Westphal
  • [PATCH 1/7] netfilter: connlimit: factor hlist search into new function, Florian Westphal
  • [PATCH 2/7] netfilter: connlimit: improve packet-to-closed-connection logic, Florian Westphal
  • [PATCH 4/7] netfilter: connlimit: use kmem_cache for conn objects, Florian Westphal
  • [PATCH 3/7] netfilter: connlimit: move insertion of new element out of count function, Florian Westphal
  • [PATCH 5/7] netfilter: connlimit: use keyed locks, Florian Westphal
    • Re: [PATCH 5/7] netfilter: connlimit: use keyed locks, Jan Engelhardt
      • Re: [PATCH 5/7] netfilter: connlimit: use keyed locks, Florian Westphal
  • [PATCH 6/7] netfilter: connlimit: make same_source_net signed, Florian Westphal
  • [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
    • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Eric Dumazet
      • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
        • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Eric Dumazet
          • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
            • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
  • Re: [PATCH 0/7] netfilter: connlimit: scalability improvements, Pablo Neira Ayuso
• [ANNOUNCE] ipset 6.21.1 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 6.21.1 released, Jan Engelhardt
    • Re: [ANNOUNCE] ipset 6.21.1 released, Jozsef Kadlecsik
• [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations, Patrick McHardy
  • Re: [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations, Patrick McHardy
      • Re: [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations, Pablo Neira Ayuso
• [PATCH] nft-arp: fix is_same_interfaces arguments, Giuseppe Longo
  • Re: [PATCH] nft-arp: fix is_same_interfaces arguments, Pablo Neira Ayuso
• [PATCH] segtree: sort set elements before decomposition, Patrick McHardy
• [PATCH] set: properly account set size when merging recursive set definitions, Patrick McHardy
• [PATCH 1/2] netlink: use set location for IO errors, Patrick McHardy
  • [PATCH 2/2] parser: add grammatical distinction for verdict maps, Patrick McHardy
• [PATCH 0/3] nftables: fix segtree interval conflict reporting, Patrick McHardy
  • [PATCH 1/3] expr: make expr_binary_error() usable outside of evaluation, Patrick McHardy
  • [PATCH 3/3] set: abort on interval conflicts, Patrick McHardy
  • [PATCH 2/3] expr: add comparison function for singleton expressions, Patrick McHardy
• [ulogd PATCH] ulogd: fix logleve handling, Ken-ichirou MATSUZAWA
  • Re: [ulogd PATCH] ulogd: fix logleve handling, Eric Leblond
• [GIT PULL nf-next 0/2] IPVS Updates for v3.15, Simon Horman
  • [PATCH nf-next 1/2] sections, ipvs: Remove useless __read_mostly for ipvs genl_ops, Simon Horman
  • [PATCH nf-next 2/2] ipvs: Reduce checkpatch noise in ip_vs_lblc.c, Simon Horman
  • Re: [GIT PULL nf-next 0/2] IPVS Updates for v3.15, Pablo Neira Ayuso
• [PATCH] net: inetfilter: LLVMLinux: vlais-netfilter, behanw
  • Re: [PATCH] net: inetfilter: LLVMLinux: vlais-netfilter, Pablo Neira Ayuso
• [PATCH 0/8] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 1/8] netfilter: ipset: Follow manual page behavior for SET target on list:set, Jozsef Kadlecsik
  • [PATCH 2/8] netfilter: ipset: Add hash: fix coccinelle warnings, Jozsef Kadlecsik
  • [PATCH 3/8] netfilter: ipset: add hash:ip,mark data type to ipset, Jozsef Kadlecsik
  • [PATCH 4/8] netfilter: ipset: add markmask for hash:ip,mark data type, Jozsef Kadlecsik
  • [PATCH 7/8] netfilter: ipset: move registration message to init from net_init, Jozsef Kadlecsik
  • [PATCH 5/8] netfilter: ipset: Prepare the kernel for create option flags when no extension is needed, Jozsef Kadlecsik
  • [PATCH 6/8] netfilter: ipset: kernel: uapi: fix MARKMASK attr ABI breakage, Jozsef Kadlecsik
  • [PATCH 8/8] netfilter: ipset: add forceadd kernel support for hash set types, Jozsef Kadlecsik
  • Re: [PATCH 0/8] ipset patches for nf-next, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH 0/8] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 3/8] netfilter: ipset: Add skbinfo extension kernel support for the bitmap set types., Jozsef Kadlecsik
    • [PATCH 1/8] netfilter: ipset: Fix static checker warning in ip_set_core.c, Jozsef Kadlecsik
    • [PATCH 8/8] netfilter: ipset: hash:mac type added to ipset, Jozsef Kadlecsik
    • [PATCH 2/8] netfilter: ipset: Add skbinfo extension kernel support in the ipset core., Jozsef Kadlecsik
    • [PATCH 4/8] netfilter: ipset: Add skbinfo extension kernel support for the hash set types., Jozsef Kadlecsik
    • [PATCH 5/8] netfilter: ipset: Add skbinfo extension kernel support for the list set type., Jozsef Kadlecsik
    • [PATCH 6/8] netfilter: ipset: Add skbinfo extension support to SET target., Jozsef Kadlecsik
    • [PATCH 7/8] netfilter: ipset: send nonzero skbinfo extensions only, Jozsef Kadlecsik
    • Re: [PATCH 0/8] ipset patches for nf-next, Pablo Neira Ayuso
• [PATCH v2] xt_quota2: introduce support for network namespaces, Daniel Golle
  • Re: [PATCH v2] xt_quota2: introduce support for network namespaces, Jan Engelhardt
• [ANNOUNCE] ipset 6.21 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 6.21 released, AllKind
    • Re: [ANNOUNCE] ipset 6.21 released, Jozsef Kadlecsik
• [RFC PATCH 0/2] netfilter: nf_tables: set selection, Patrick McHardy
  • [RFC PATCH 2/2] netfilter: nft_hash: use set global element counter instead of private one, Patrick McHardy
  • [RFC PATCH 1/2] netfilter: nf_tables: implement proper set selection, Patrick McHardy
• [PATCH v3] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
  • Re: [PATCH v3] netfilter: nft_hash: bug fixes and resizing, Pablo Neira Ayuso
• [PATCH nft] parser: support reject unreach|reset, Florian Westphal
  • Re: [PATCH nft] parser: support reject unreach|reset, Eric Leblond
    • Re: [PATCH nft] parser: support reject unreach|reset, Florian Westphal
      • Re: [PATCH nft] parser: support reject unreach|reset, Patrick McHardy
    • Re: [PATCH nft] parser: support reject unreach|reset, Patrick McHardy
  • Re: [PATCH nft] parser: support reject unreach|reset, Patrick McHardy
    • Re: [PATCH nft] parser: support reject unreach|reset, Florian Westphal
• Re: linux-next: Tree for Mar 3 (netfilter: xt_socket), Randy Dunlap
• [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
  • [nf-next PATCH V3 1/5] netfilter: trivial code cleanup and doc changes, Jesper Dangaard Brouer
  • [nf-next PATCH V3 2/5] netfilter: conntrack: spinlock per cpu to protect special lists., Jesper Dangaard Brouer
  • [nf-next PATCH V3 3/5] netfilter: avoid race with exp->master ct, Jesper Dangaard Brouer
  • [nf-next PATCH V3 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Jesper Dangaard Brouer
  • [nf-next PATCH V3 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Jesper Dangaard Brouer
  • Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, David Miller
    • Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, Pablo Neira Ayuso
  • Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, Florian Westphal
    • Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, Eric Dumazet
• [BUG?] Null pointer dereference in nf_ct_delete_from_lists(), Namjae Jeon
  • Re: [BUG?] Null pointer dereference in nf_ct_delete_from_lists(), Namjae Jeon
• [PATCH] ip_set: remove extraneous log message, Jason A. Donenfeld
  • Re: [PATCH] ip_set: remove extraneous log message, Jozsef Kadlecsik
• [PATCH v3 0/2] ipset: forceadd support, Josh Hunt
  • [PATCH v3 2/2] ipset: add userspace support for forceadd, Josh Hunt
  • [PATCH v3 1/2] ipset: add forceadd kernel support for hash set types, Josh Hunt
  • Re: [PATCH v3 0/2] ipset: forceadd support, Jozsef Kadlecsik
• [PATCH v2] netfilter: hash resizing, Patrick McHardy
  • [PATCH v2] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
    • Re: [PATCH v2] netfilter: nft_hash: bug fixes and resizing, Eric Dumazet
      • Re: [PATCH v2] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
• [PATCH v2 0/2] ipset: forceadd support, Josh Hunt
  • [PATCH v2 1/2] ipset: add forceadd kernel support for hash set types, Josh Hunt
    • Re: [PATCH v2 1/2] ipset: add forceadd kernel support for hash set types, Jozsef Kadlecsik
  • [PATCH v2 2/2] ipset: add userspace support for forceadd, Josh Hunt
    • Re: [PATCH v2 2/2] ipset: add userspace support for forceadd, Pablo Neira Ayuso
    • Re: [PATCH v2 2/2] ipset: add userspace support for forceadd, Jozsef Kadlecsik
      • Re: [PATCH v2 2/2] ipset: add userspace support for forceadd, Josh Hunt
  • Re: [PATCH v2 0/2] ipset: forceadd support, Phil Oester
    • Re: [PATCH v2 0/2] ipset: forceadd support, Josh Hunt
• [nf-next PATCH 0/5] (repost) netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
  • [nf-next PATCH 1/5] netfilter: trivial code cleanup and doc changes, Jesper Dangaard Brouer
  • [nf-next PATCH 2/5] netfilter: conntrack: spinlock per cpu to protect special lists., Jesper Dangaard Brouer
  • [nf-next PATCH 3/5] netfilter: avoid race with exp->master ct, Jesper Dangaard Brouer
    • Re: [nf-next PATCH 3/5] netfilter: avoid race with exp->master ct, Florian Westphal
      • Re: [nf-next PATCH 3/5] netfilter: avoid race with exp->master ct, Jesper Dangaard Brouer
  • [nf-next PATCH 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Jesper Dangaard Brouer
  • [nf-next PATCH 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Jesper Dangaard Brouer
  • Re: [nf-next PATCH 0/5] (repost) netfilter: conntrack: optimization, remove central spinlock, David Miller
    • Re: [nf-next PATCH 0/5] (repost) netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
  • [nf-next PATCH V2 0/5] netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
    • [nf-next PATCH V2 1/5] netfilter: trivial code cleanup and doc changes, Jesper Dangaard Brouer
    • [nf-next PATCH V2 2/5] netfilter: conntrack: spinlock per cpu to protect special lists., Jesper Dangaard Brouer
    • [nf-next PATCH V2 3/5] netfilter: avoid race with exp->master ct, Jesper Dangaard Brouer
    • [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Jesper Dangaard Brouer
      • Re: [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Florian Westphal
        • Re: [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Jesper Dangaard Brouer
    • [nf-next PATCH V2 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Jesper Dangaard Brouer
    • Re: [nf-next PATCH V2 0/5] netfilter: conntrack: optimization, remove central spinlock, David Miller
• Re: [net-next PATCH 0/5] netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
  • Re: [net-next PATCH 0/5] netfilter: conntrack: optimization, remove central spinlock, Pablo Neira Ayuso
• [PATCH] netfilter: hash resizing, Patrick McHardy