Linux Netfilter / IP Tables Devel

• Date Index

• unbind [was: Re: [PATCH] netlink: have netlink per-protocol bind function return] an error code., (continued)
  • unbind [was: Re: [PATCH] netlink: have netlink per-protocol bind function return] an error code., Richard Guy Briggs
  • [PATCH][v6] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
    • Re: [PATCH][v6] netlink: have netlink per-protocol bind function return an error code., David Miller
    • Re: [PATCH][v6] netlink: have netlink per-protocol bind function return an error code., Patrick McHardy
  • [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, Richard Guy Briggs
    • [PATCH 3/3] netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP, Richard Guy Briggs
    • [PATCH 2/3][v7] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
    • [PATCH 1/3] netlink: simplify nfnetlink_bind, Richard Guy Briggs
    • Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, David Miller
      • Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, Richard Guy Briggs
        • Re: [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set, David Miller
  • [PATCH 0/6] audit: implement multicast socket for journald, Richard Guy Briggs
    • [PATCH 6/6] audit: send multicast messages only if there are listeners, Richard Guy Briggs
    • [PATCH 2/6] netlink: have netlink per-protocol bind function return an error code., Richard Guy Briggs
      • Re: [PATCH 2/6] netlink: have netlink per-protocol bind function return an error code., David Miller
    • [PATCH 5/6] audit: add netlink multicast group for log read, Richard Guy Briggs
    • [PATCH 1/6] netlink: simplify nfnetlink_bind, Richard Guy Briggs
    • [PATCH 4/6] audit: add netlink audit protocol bind to check capabilities on multicast join, Richard Guy Briggs
    • [PATCH 3/6] netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP, Richard Guy Briggs
• [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
  • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
    • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
      • Re: [PATCH v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [nft PATCH] src: check if the set name is too long, Giuseppe Longo
  • Re: [nft PATCH] src: check if the set name is too long, Tomasz Bursztyka
    • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
    • Message not available
      • Re: [nft PATCH] src: check if the set name is too long, Tomasz Bursztyka
  • <Possible follow-ups>
  • [nft PATCH] src: check if the set name is too long, Giuseppe Longo
    • [PATCH] nftables: fix length of set name, Giuseppe Longo
      • Re: [PATCH] nftables: fix length of set name, Pablo Neira Ayuso
    • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
      • Re: [nft PATCH] src: check if the set name is too long, Tomasz Bursztyka
        • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
          • Re: [nft PATCH] src: check if the set name is too long, Pablo Neira Ayuso
• [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
  • Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
    • Re: [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [PATCH next] netfilter: connlimit: move lock array out of struct connlimit_data, Florian Westphal
  • Re: [PATCH next] netfilter: connlimit: move lock array out of struct connlimit_data, Pablo Neira Ayuso
• [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
    • Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
      • Re: [PATCH v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [libnftnl PATCH] set_elems: delete void EXPORT_SYMBOL, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] set_elems: delete void EXPORT_SYMBOL, Pablo Neira Ayuso
• [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
  • <Possible follow-ups>
  • [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
      • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
        • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Patrick McHardy
    • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Pablo Neira Ayuso
      • Re: [nf_tables RFH PATCH] netfilter: nf_tables: add set_elem notifications, Arturo Borrero Gonzalez
• [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Alexey Perevalov
  • Re: [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Daniel Borkmann
    • Re: [PATCH] netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks, Pablo Neira Ayuso
• [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, David Miller
    • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
  • <Possible follow-ups>
  • [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
    • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Thomas Graf
      • Re: [PATCH] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors, Zoltan Kiss
• [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, behanw
  • RE: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, David Laight
    • Re: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, Behan Webster
      • RE: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, David Laight
        • Re: [PATCH v2] net: netfilter: LLVMLinux: vlais-netfilter, Behan Webster
        • [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter, behanw
          • RE: [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter, David Laight
            • Re: [PATCH v3] net: netfilter: LLVMLinux: vlais-netfilter, Mark Charlebois
            • [PATCH v4] net: netfilter: LLVMLinux: vlais-netfilter, behanw
              • Re: [PATCH v4] net: netfilter: LLVMLinux: vlais-netfilter, Behan Webster
• [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Florian Westphal
  • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
    • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Florian Westphal
      • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
        • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Patrick McHardy
          • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
            • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Patrick McHardy
              • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Pablo Neira Ayuso
                • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Florian Westphal
    • Re: [PATCH nft] expr: do not suppress OP_EQ when RHS is bitmask type, Patrick McHardy
• [PATCH -next] netfilter: connlimit: fix UP build, Florian Westphal
  • Re: [PATCH -next] netfilter: connlimit: fix UP build, Pablo Neira Ayuso
• [PATCH 00/38] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH 14/38] netfilter: ipset: Prepare the kernel for create option flags when no extension is needed, Pablo Neira Ayuso
  • [PATCH 34/38] netfilter: connlimit: use kmem_cache for conn objects, Pablo Neira Ayuso
  • [PATCH 37/38] netfilter: connlimit: make same_source_net signed, Pablo Neira Ayuso
  • [PATCH 38/38] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Pablo Neira Ayuso
  • [PATCH 36/38] netfilter: connlimit: use keyed locks, Pablo Neira Ayuso
    • RE: [PATCH 36/38] netfilter: connlimit: use keyed locks, David Laight
      • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Florian Westphal
        • RE: [PATCH 36/38] netfilter: connlimit: use keyed locks, David Laight
    • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Eric Dumazet
      • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Florian Westphal
      • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Jesper Dangaard Brouer
        • Re: [PATCH 36/38] netfilter: connlimit: use keyed locks, Eric Dumazet
  • [PATCH 28/38] netfilter: nf_tables: restore notifications for anonymous set destruction, Pablo Neira Ayuso
  • [PATCH 35/38] netfilter: Convert uses of __constant_<foo> to <foo>, Pablo Neira Ayuso
  • [PATCH 30/38] netfilter: nft_nat: fix family validation, Pablo Neira Ayuso
  • [PATCH 32/38] netfilter: connlimit: improve packet-to-closed-connection logic, Pablo Neira Ayuso
  • [PATCH 31/38] netfilter: connlimit: factor hlist search into new function, Pablo Neira Ayuso
  • [PATCH 33/38] netfilter: connlimit: move insertion of new element out of count function, Pablo Neira Ayuso
  • [PATCH 18/38] sections, ipvs: Remove useless __read_mostly for ipvs genl_ops, Pablo Neira Ayuso
  • [PATCH 27/38] netfilter: nf_tables: restore context for expression destructors, Pablo Neira Ayuso
  • [PATCH 29/38] netfilter: nft_ct: remove family from struct nft_ct, Pablo Neira Ayuso
  • [PATCH 10/38] netfilter: ipset: Follow manual page behavior for SET target on list:set, Pablo Neira Ayuso
  • [PATCH 25/38] netfilter: nft_hash: bug fixes and resizing, Pablo Neira Ayuso
  • [PATCH 26/38] netfilter: nf_tables: clean up nf_tables_trans_add() argument order, Pablo Neira Ayuso
  • [PATCH 24/38] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Pablo Neira Ayuso
  • [PATCH 11/38] netfilter: ipset: Add hash: fix coccinelle warnings, Pablo Neira Ayuso
  • [PATCH 19/38] ipvs: Reduce checkpatch noise in ip_vs_lblc.c, Pablo Neira Ayuso
  • [PATCH 23/38] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Pablo Neira Ayuso
  • [PATCH 17/38] netfilter: ipset: add forceadd kernel support for hash set types, Pablo Neira Ayuso
  • [PATCH 21/38] netfilter: conntrack: spinlock per cpu to protect special lists., Pablo Neira Ayuso
  • [PATCH 22/38] netfilter: avoid race with exp->master ct, Pablo Neira Ayuso
  • [PATCH 16/38] netfilter: ipset: move registration message to init from net_init, Pablo Neira Ayuso
  • [PATCH 07/38] netfilter: nf_tables: accept QUEUE/DROP verdict parameters, Pablo Neira Ayuso
  • [PATCH 15/38] netfilter: ipset: kernel: uapi: fix MARKMASK attr ABI breakage, Pablo Neira Ayuso
  • [PATCH 20/38] netfilter: trivial code cleanup and doc changes, Pablo Neira Ayuso
  • [PATCH 13/38] netfilter: ipset: add markmask for hash:ip,mark data type, Pablo Neira Ayuso
  • [PATCH 09/38] netfilter: nf_tables: add optional user data area to rules, Pablo Neira Ayuso
  • [PATCH 12/38] netfilter: ipset: add hash:ip,mark data type to ipset, Pablo Neira Ayuso
  • [PATCH 08/38] netfilter: nfnetlink_log: remove unused code, Pablo Neira Ayuso
  • [PATCH 05/38] netfilter: nfnetlink: add rcu_dereference_protected() helpers, Pablo Neira Ayuso
  • [PATCH 04/38] netfilter: ip_set: rename nfnl_dereference()/nfnl_set(), Pablo Neira Ayuso
  • [PATCH 03/38] netfilter: nft_ct: labels get support, Pablo Neira Ayuso
  • [PATCH 02/38] netfilter: xt_ipcomp: Use ntohs to ease sparse warning, Pablo Neira Ayuso
  • [PATCH 06/38] netfilter: nf_tables: add nft_dereference() macro, Pablo Neira Ayuso
  • [PATCH 01/38] netfilter: remove double colon, Pablo Neira Ayuso
  • Re: [PATCH 00/38] Netfilter/IPVS updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/38] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/38] netfilter: nft_reject_bridge: remove unnecessary ttl set, Pablo Neira Ayuso
    • [PATCH 02/38] netfilter: flowtables: use fixed renew timeout on teardown, Pablo Neira Ayuso
      • Re: [PATCH 02/38] netfilter: flowtables: use fixed renew timeout on teardown, Felix Fietkau
        • Re: [PATCH 02/38] netfilter: flowtables: use fixed renew timeout on teardown, Florian Westphal
    • [PATCH 03/38] netfilter: nft_tproxy: Move nf_tproxy_assign_sock() to nf_tproxy.h, Pablo Neira Ayuso
    • [PATCH 04/38] netfilter: utils: move nf_ip_checksum* from ipv4 to utils, Pablo Neira Ayuso
    • [PATCH 06/38] openvswitch: use nf_ct_get_tuplepr, invert_tuplepr, Pablo Neira Ayuso
    • [PATCH 07/38] netfilter: Kconfig: Make NETFILTER_XT_MATCH_SOCKET select NF_SOCKET_IPV4/6, Pablo Neira Ayuso
    • [PATCH 09/38] netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 08/38] netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 12/38] netfilter: conntrack: avoid calls to l4proto invert_tuple, Pablo Neira Ayuso
    • [PATCH 10/38] netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 11/38] netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackers, Pablo Neira Ayuso
    • [PATCH 17/38] netfilter: nf_conncount: Early exit for garbage collection, Pablo Neira Ayuso
    • [PATCH 16/38] netfilter: Kconfig: Change select IPv6 dependencies, Pablo Neira Ayuso
    • [PATCH 19/38] netfilter: nf_conncount: Early exit in nf_conncount_lookup() and cleanup, Pablo Neira Ayuso
    • [PATCH 14/38] netfilter: conntrack: remove get_timeout() indirection, Pablo Neira Ayuso
    • [PATCH 23/38] netfilter: nf_conntrack: resolve clash for matching conntracks, Pablo Neira Ayuso
    • [PATCH 25/38] ipvs: add assured state for conn templates, Pablo Neira Ayuso
    • [PATCH 24/38] ipvs: provide just conn to ip_vs_state_name, Pablo Neira Ayuso
    • [PATCH 27/38] netfilter: Remove useless param helper of nf_ct_helper_ext_add, Pablo Neira Ayuso
    • [PATCH 26/38] ipvs: drop conn templates under attack, Pablo Neira Ayuso
    • [PATCH 29/38] netfilter: nf_tables: make valid_genid callback mandatory, Pablo Neira Ayuso
    • [PATCH 33/38] netfilter: nf_osf: add nf_osf_match_one(), Pablo Neira Ayuso
    • [PATCH 28/38] netfilter: nf_tables: add and use helper for module autoload, Pablo Neira Ayuso
    • [PATCH 31/38] netfilter: nf_tables: avoid global info storage, Pablo Neira Ayuso
    • [PATCH 15/38] netfilter: conntrack: remove l3proto abstraction, Pablo Neira Ayuso
    • [PATCH 35/38] netfilter: nft_socket: Break evaluation if no socket found, Pablo Neira Ayuso
    • [PATCH 36/38] netfilter: nft_socket: Expose socket mark, Pablo Neira Ayuso
    • [PATCH 34/38] netfilter: nf_osf: add struct nf_osf_hdr_ctx, Pablo Neira Ayuso
    • [PATCH 37/38] ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module, Pablo Neira Ayuso
    • [PATCH 38/38] netfilter: nf_osf: add missing definitions to header file, Pablo Neira Ayuso
    • [PATCH 32/38] netfilter: nf_tables: use dedicated mutex to guard transactions, Pablo Neira Ayuso
    • [PATCH 30/38] netfilter: nf_tables: take module reference when starting a batch, Pablo Neira Ayuso
    • [PATCH 22/38] netfilter: nf_conncount: Add list lock and gc worker, and RCU for init tree search, Pablo Neira Ayuso
    • [PATCH 18/38] netfilter: nf_conncount: Switch to plain list, Pablo Neira Ayuso
    • [PATCH 21/38] netfilter: nf_conncount: Split insert and traversal, Pablo Neira Ayuso
    • [PATCH 20/38] netfilter: nf_conncount: Move locking into count_tree(), Pablo Neira Ayuso
    • [PATCH 13/38] netfilter: conntrack: avoid l4proto pkt_to_tuple calls, Pablo Neira Ayuso
    • [PATCH 05/38] netfilter: utils: move nf_ip6_checksum* from ipv6 to utils, Pablo Neira Ayuso
    • Re: [PATCH 00/38] Netfilter/IPVS updates for net-next, David Miller
• xt_CHAOS - PDE_DATA compilation error, M.G.
  • Re: xt_CHAOS - PDE_DATA compilation error, Mart Frauenlob
    • Re: xt_CHAOS - PDE_DATA compilation error, M.G.
      • Re: xt_CHAOS - PDE_DATA compilation error, Jesper Dangaard Brouer
        • Re: xt_CHAOS - PDE_DATA compilation error, Jesper Dangaard Brouer
• [nft RFC PATCH] mnl: Fix a potential buffer overflow, Yuxuan Shui
• [libnftnl RFC PATCH] set: Add nft_set_elems_nlmsg_build_payload_check, Yuxuan Shui
• [PATCH 1/2] iptables: save&restore: warn that -b/--binary isn't implemented, Jiri Popelka
  • [PATCH 2/2] iptables: save: actually parse -M/--modprobe option, Jiri Popelka
    • Re: [PATCH 2/2] iptables: save: actually parse -M/--modprobe option, Pablo Neira Ayuso
  • Re: [PATCH 1/2] iptables: save&restore: warn that -b/--binary isn't implemented, Pablo Neira Ayuso
• [libnftnl PATCH v2 2/2] rule: Changed parser for being more flexible, Alvaro Neira Ayuso
  • Re: [libnftnl PATCH v2 2/2] rule: Changed parser for being more flexible, Pablo Neira Ayuso
• [libnftnl PATCH v2 1/2] rule: Changed the print support for not having several attributes, Alvaro Neira Ayuso
  • Re: [libnftnl PATCH v2 1/2] rule: Changed the print support for not having several attributes, Pablo Neira Ayuso
• [PATCH 1/3] iptables-restore(8): missing -T in synopsis, Jiri Popelka
  • [PATCH 2/3] iptables-restore(8): file to read from can be specified as argument, Jiri Popelka
    • Re: [PATCH 2/3] iptables-restore(8): file to read from can be specified as argument, Pablo Neira Ayuso
  • [PATCH 3/3] iptables: save - fix getopt_long()'s optstring, Jiri Popelka
    • Re: [PATCH 3/3] iptables: save - fix getopt_long()'s optstring, Pablo Neira Ayuso
  • Re: [PATCH 1/3] iptables-restore(8): missing -T in synopsis, Pablo Neira Ayuso
• [PATCH 1/2] update FSF address in license text, Jiri Popelka
  • [PATCH 2/2] iptables: missing bracket in iptables-save(8), Jiri Popelka
    • Re: [PATCH 2/2] iptables: missing bracket in iptables-save(8), Pablo Neira Ayuso
  • Re: [PATCH 1/2] update FSF address in license text, Pablo Neira Ayuso
• [PATCH v2 0/3] netfilter: connlimit: scalability improvements, Florian Westphal
  • [PATCH v2 1/3] netfilter: connlimit: use keyed locks, Florian Westphal
  • [PATCH v2 2/3] netfilter: connlimit: make same_source_net signed, Florian Westphal
  • [PATCH v2 3/3] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
  • Re: [PATCH v2 0/3] netfilter: connlimit: scalability improvements, Pablo Neira Ayuso
• [nft PATCH] ct: add support for setting ct mark, Arturo Borrero Gonzalez
  • Re: [nft PATCH] ct: add support for setting ct mark, Kristian Evensen
  • Re: [nft PATCH] ct: add support for setting ct mark, Pablo Neira Ayuso
• [PATCH net-next 0/6] net: Convert uses of __constant_<foo> to <foo>, Joe Perches
  • [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>, Joe Perches
    • Re: [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>, David Miller
      • Re: [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>, Pablo Neira Ayuso
    • Re: [PATCH net-next 5/6] netfilter: Convert uses of __constant_<foo> to <foo>, Jozsef Kadlecsik
• [nft PATCH] src: fix expr_binary_error()-related compilation warnings, Arturo Borrero Gonzalez
  • Re: [nft PATCH] src: fix expr_binary_error()-related compilation warnings, Pablo Neira Ayuso
• [PATCH] iptables: make 'iptables-save -M' actually work, Jiri Popelka
  • Re: [PATCH] iptables: make 'iptables-save -M' actually work, Pablo Neira Ayuso
    • Re: [PATCH] iptables: make 'iptables-save -M' actually work, Jiri Popelka
• some minor tweaks for building doc/man pages for nftables, Robert P. J. Day
  • Re: some minor tweaks for building doc/man pages for nftables, Arturo Borrero Gonzalez
    • Re: some minor tweaks for building doc/man pages for nftables, Robert P. J. Day
      • Re: some minor tweaks for building doc/man pages for nftables, Arturo Borrero Gonzalez
        • Re: some minor tweaks for building doc/man pages for nftables, Robert P. J. Day
    • Re: some minor tweaks for building doc/man pages for nftables, Patrick McHardy
• [PATCH] conntrackd: claim lockfile ownership properly, Ansis Atteka
  • Re: [PATCH] conntrackd: claim lockfile ownership properly, Ansis Atteka
  • Re: [PATCH] conntrackd: claim lockfile ownership properly, Pablo Neira Ayuso
    • Re: [PATCH] conntrackd: claim lockfile ownership properly, Pablo Neira Ayuso
• [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
  • [PATCH RFC 1/9] net: rename fp->bpf_func to fp->run_filter, Pablo Neira Ayuso
  • [PATCH RFC 4/9] netfilter: nf_tables: move fast operations to header, Pablo Neira Ayuso
  • [PATCH RFC 3/9] net: filter: generalise sk_filter_release, Pablo Neira Ayuso
  • [PATCH RFC 6/9] netfilter: nf_tables: rename nf_tables_core.c to nf_tables_nf.c, Pablo Neira Ayuso
  • [PATCH RFC 5/9] netfilter: nf_tables: add nft_value_init, Pablo Neira Ayuso
  • [PATCH RFC 8/9] netfilter: nf_tables: generalize verdict handling and introduce scopes, Pablo Neira Ayuso
  • [PATCH RFC 7/9] netfilter: nf_tables: move expression infrastructure to built-in core, Pablo Neira Ayuso
  • [PATCH RFC 9/9] netfilter: nf_tables: add support for socket filtering, Pablo Neira Ayuso
  • [PATCH RFC 2/9] net: filter: account filter length in bytes, Pablo Neira Ayuso
  • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Daniel Borkmann
    • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
      • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
        • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
        • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
          • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
            • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
              • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
                • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
                  • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
                    • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Alexei Starovoitov
  • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Andi Kleen
  • Re: [PATCH RFC 0/9] socket filtering using nf_tables, David Miller
    • Re: [PATCH RFC 0/9] socket filtering using nf_tables, Pablo Neira Ayuso
• [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/2] src/rule: Changed parser support for having consistent with the new print support, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 2/2] src/rule: Changed parser support for having consistent with the new print support, Arturo Borrero Gonzalez
      • Re: [libnftnl PATCH 2/2] src/rule: Changed parser support for having consistent with the new print support, Álvaro Neira Ayuso
  • Re: [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules, Arturo Borrero Gonzalez
    • Re: [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules, Pablo Neira Ayuso
  • Re: [libnftnl PATCH 1/2] src/rule: Removed mandatory attribute printing in rules, Arturo Borrero Gonzalez
• [PATCH] userspace SSDP conntrack helper, Ash Hughes
  • Re: [PATCH] userspace SSDP conntrack helper, Ash Hughes
  • Re: [PATCH] userspace SSDP conntrack helper, Pablo Neira Ayuso
    • Re: [PATCH] userspace SSDP conntrack helper, Ash Hughes
      • Re: [PATCH] userspace SSDP conntrack helper, Pablo Neira Ayuso
• [libnftnl PATCH v2 1/3] example: fix the example for deleting rules, Alvaro Neira Ayuso
  • [libnftnl PATCH v2 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH v2 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add, Pablo Neira Ayuso
  • [libnftnl PATCH v2 3/3] example: removed printf rule function, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH v2 3/3] example: removed printf rule function, Pablo Neira Ayuso
  • Re: [libnftnl PATCH v2 1/3] example: fix the example for deleting rules, Pablo Neira Ayuso
• [libnftnl PATCH 1/3] example: fix the example for deleting rules, Alvaro Neira Ayuso
  • [libnftnl PATCH 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add, Alvaro Neira Ayuso
    • Re: [libnftnl PATCH 2/3] example/nft-rule-insert: fixed and merged this example with nft-rule-add, Pablo Neira Ayuso
  • [libnftnl PATCH 3/3] example: removed printf rule function, Alvaro Neira Ayuso
  • Re: [libnftnl PATCH 1/3] example: fix the example for deleting rules, Pablo Neira Ayuso
• [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Ken-ichirou MATSUZAWA
  • [PATCH 2/8] ipfix: fix enterprise bit handling, Ken-ichirou MATSUZAWA
  • [PATCH 3/8] ipfix: some cleanups, Ken-ichirou MATSUZAWA
  • [PATCH 4/8] ipfix: add functions for ipfix dataset creation, Ken-ichirou MATSUZAWA
  • [PATCH 5/8] ipfix: add function for ipfix message creation, Ken-ichirou MATSUZAWA
    • Re: [PATCH 5/8] ipfix: add function for ipfix message creation, Eric Leblond
  • [PATCH 6/8] ipfix: decide whether prepending template by send times, Ken-ichirou MATSUZAWA
  • [PATCH 7/8] ipfix: print ipfix message, Ken-ichirou MATSUZAWA
  • [PATCH 8/8] ipfix: build headers with template, Ken-ichirou MATSUZAWA
  • [libnetfilter_conntrack PATCH] conntrack: introduce clear and equal functions for bitmask object, Ken-ichirou MATSUZAWA
    • Re: [libnetfilter_conntrack PATCH] conntrack: introduce clear and equal functions for bitmask object, Florian Westphal
  • [PATCH 1/8] ipfix: use nfct_bitmask, Ken-ichirou MATSUZAWA
    • Re: [PATCH 1/8] ipfix: use nfct_bitmask, Eric Leblond
  • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Eric Leblond
    • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 1/8] ipfix: use nfct_bitmask, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 2/8] ipfix: fix enterprise bit handling, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 3/8] ipfix: some cleanups, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 4/8] ipfix: add functions for ipfix dataset creation, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 5/8] ipfix: add function for ipfix message creation, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 6/8] ipfix: decide whether prepending template by send times, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 7/8] ipfix: print ipfix message, Ken-ichirou MATSUZAWA
      • [ulogd PATCH 8/8] ipfix: build headers with template, Ken-ichirou MATSUZAWA
      • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Eric Leblond
        • [ulogd PATCH 1/8 resend] ipfix: use nfct_bitmask, Ken-ichirou MATSUZAWA
        • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Ken-ichirou MATSUZAWA
          • Re: [ulogd PATCH 0/8] make progress ulogd_output_IPFIX, Eric Leblond
  • [ulogd PATCH 0/13] make progress ulogd_output_IPFIX, Ken-ichirou MATSUZAWA
    • [libnetfilter_conntrack PATCH 1/13] conntrack: introduce clear and equal functions for bitmask object, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 2/13] ipfix: use nfct_bitmask, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 3/13] ipfix: fix enterprise bit handling, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 4/13] ipfix: some cleanups, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 5/13] ipfix: add functions for ipfix dataset creation, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 6/13] ipfix: add function for ipfix message creation, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 7/13] ipfix: decide whether prepending template by send times, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 8/13] ipfix: print ipfix message, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 9/13] ipfix: build headers with template, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 10/13] nfct: fix ipfix field_id of flow.end.usec, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 11/13] nfct/ipfix: introduce new vendor id, Ken-ichirou MATSUZAWA
    • [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Ken-ichirou MATSUZAWA
      • Re: [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Eric Leblond
        • Re: [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Pablo Neira Ayuso
          • Re: [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Ken-ichirou MATSUZAWA
            • Re: [ulogd PATCH 12/13] nfct: introduce new out keys for ipfix timestamp, Eric Leblond
    • [ulogd PATCH 13/13] ipfix: add debug symbol for yafscii, Ken-ichirou MATSUZAWA
• [iptables 0/3] ebtables patchset, Giuseppe Longo
  • [iptables 1/3] xtables: bootstrap xtables-eb for nftables, Giuseppe Longo
  • [iptables 2/3] Operations for bridge family, Giuseppe Longo
  • [iptables 3/3] nft-shared: make compare_matches as public, Giuseppe Longo
    • Re: [iptables 3/3] nft-shared: make compare_matches as public, Stephen Hemminger
  • Re: [iptables 0/3] ebtables patchset, Tomasz Bursztyka
    • Re: [iptables 0/3] ebtables patchset, Pablo Neira Ayuso
      • Re: [iptables 0/3] ebtables patchset, Giuseppe Longo
      • Re: [iptables 0/3] ebtables patchset, Tomasz Bursztyka
      • Re: [iptables 0/3] ebtables patchset, Tomasz Bursztyka
• [PATCH 0/5] netfilter: nf_tables: restore context during destruction, Patrick McHardy
  • [PATCH 1/5] netfilter: nf_tables: clean up nf_tables_trans_add() argument order, Patrick McHardy
  • [PATCH 3/5] netfilter: nf_tables: restore notifications for anonymous set destruction, Patrick McHardy
  • [PATCH 2/5] netfilter: nf_tables: restore context for expression destructors, Patrick McHardy
  • [PATCH 4/5] netfilter: nft_ct: remove family from struct nft_ct, Patrick McHardy
  • [PATCH 5/5] netfilter: nft_nat: fix family validation, Patrick McHardy
  • Re: [PATCH 0/5] netfilter: nf_tables: restore context during destruction, Pablo Neira Ayuso
• [PATCH iptables] update coreteam members from manpage, Pablo Neira Ayuso
• [PATCH] iptables: fix version in iptables(8), Jiri Popelka
  • Re: [PATCH] iptables: fix version in iptables(8), Pablo Neira Ayuso
• [iptables PATCH] nft-arp: wrong condition in parse_payload, Giuseppe Longo
  • Re: [iptables PATCH] nft-arp: wrong condition in parse_payload, Pablo Neira Ayuso
• [PATCH 0/7] netfilter: connlimit: scalability improvements, Florian Westphal
  • [PATCH 1/7] netfilter: connlimit: factor hlist search into new function, Florian Westphal
  • [PATCH 2/7] netfilter: connlimit: improve packet-to-closed-connection logic, Florian Westphal
  • [PATCH 4/7] netfilter: connlimit: use kmem_cache for conn objects, Florian Westphal
  • [PATCH 3/7] netfilter: connlimit: move insertion of new element out of count function, Florian Westphal
  • [PATCH 5/7] netfilter: connlimit: use keyed locks, Florian Westphal
    • Re: [PATCH 5/7] netfilter: connlimit: use keyed locks, Jan Engelhardt
      • Re: [PATCH 5/7] netfilter: connlimit: use keyed locks, Florian Westphal
  • [PATCH 6/7] netfilter: connlimit: make same_source_net signed, Florian Westphal
  • [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
    • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Eric Dumazet
      • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
        • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Eric Dumazet
          • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
            • Re: [PATCH 7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage, Florian Westphal
  • Re: [PATCH 0/7] netfilter: connlimit: scalability improvements, Pablo Neira Ayuso
• [ANNOUNCE] ipset 6.21.1 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 6.21.1 released, Jan Engelhardt
    • Re: [ANNOUNCE] ipset 6.21.1 released, Jozsef Kadlecsik
• [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations, Patrick McHardy
  • Re: [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations, Patrick McHardy
      • Re: [PATCH] netfilter: nf_tables: handle more than 8 * PAGE_SIZE set name allocations, Pablo Neira Ayuso
• [PATCH] nft-arp: fix is_same_interfaces arguments, Giuseppe Longo
  • Re: [PATCH] nft-arp: fix is_same_interfaces arguments, Pablo Neira Ayuso
• [PATCH] segtree: sort set elements before decomposition, Patrick McHardy
• [PATCH] set: properly account set size when merging recursive set definitions, Patrick McHardy
• [PATCH 1/2] netlink: use set location for IO errors, Patrick McHardy
  • [PATCH 2/2] parser: add grammatical distinction for verdict maps, Patrick McHardy
• [PATCH 0/3] nftables: fix segtree interval conflict reporting, Patrick McHardy
  • [PATCH 1/3] expr: make expr_binary_error() usable outside of evaluation, Patrick McHardy
  • [PATCH 3/3] set: abort on interval conflicts, Patrick McHardy
  • [PATCH 2/3] expr: add comparison function for singleton expressions, Patrick McHardy
• [ulogd PATCH] ulogd: fix logleve handling, Ken-ichirou MATSUZAWA
  • Re: [ulogd PATCH] ulogd: fix logleve handling, Eric Leblond
• [GIT PULL nf-next 0/2] IPVS Updates for v3.15, Simon Horman
  • [PATCH nf-next 1/2] sections, ipvs: Remove useless __read_mostly for ipvs genl_ops, Simon Horman
  • [PATCH nf-next 2/2] ipvs: Reduce checkpatch noise in ip_vs_lblc.c, Simon Horman
  • Re: [GIT PULL nf-next 0/2] IPVS Updates for v3.15, Pablo Neira Ayuso
• [PATCH] net: inetfilter: LLVMLinux: vlais-netfilter, behanw
  • Re: [PATCH] net: inetfilter: LLVMLinux: vlais-netfilter, Pablo Neira Ayuso
• [PATCH 0/8] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 1/8] netfilter: ipset: Follow manual page behavior for SET target on list:set, Jozsef Kadlecsik
  • [PATCH 2/8] netfilter: ipset: Add hash: fix coccinelle warnings, Jozsef Kadlecsik
  • [PATCH 3/8] netfilter: ipset: add hash:ip,mark data type to ipset, Jozsef Kadlecsik
  • [PATCH 4/8] netfilter: ipset: add markmask for hash:ip,mark data type, Jozsef Kadlecsik
  • [PATCH 7/8] netfilter: ipset: move registration message to init from net_init, Jozsef Kadlecsik
  • [PATCH 5/8] netfilter: ipset: Prepare the kernel for create option flags when no extension is needed, Jozsef Kadlecsik
  • [PATCH 6/8] netfilter: ipset: kernel: uapi: fix MARKMASK attr ABI breakage, Jozsef Kadlecsik
  • [PATCH 8/8] netfilter: ipset: add forceadd kernel support for hash set types, Jozsef Kadlecsik
  • Re: [PATCH 0/8] ipset patches for nf-next, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH 0/8] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 3/8] netfilter: ipset: Add skbinfo extension kernel support for the bitmap set types., Jozsef Kadlecsik
    • [PATCH 1/8] netfilter: ipset: Fix static checker warning in ip_set_core.c, Jozsef Kadlecsik
    • [PATCH 8/8] netfilter: ipset: hash:mac type added to ipset, Jozsef Kadlecsik
    • [PATCH 2/8] netfilter: ipset: Add skbinfo extension kernel support in the ipset core., Jozsef Kadlecsik
    • [PATCH 4/8] netfilter: ipset: Add skbinfo extension kernel support for the hash set types., Jozsef Kadlecsik
    • [PATCH 5/8] netfilter: ipset: Add skbinfo extension kernel support for the list set type., Jozsef Kadlecsik
    • [PATCH 6/8] netfilter: ipset: Add skbinfo extension support to SET target., Jozsef Kadlecsik
    • [PATCH 7/8] netfilter: ipset: send nonzero skbinfo extensions only, Jozsef Kadlecsik
    • Re: [PATCH 0/8] ipset patches for nf-next, Pablo Neira Ayuso
• [PATCH v2] xt_quota2: introduce support for network namespaces, Daniel Golle
  • Re: [PATCH v2] xt_quota2: introduce support for network namespaces, Jan Engelhardt
• [ANNOUNCE] ipset 6.21 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 6.21 released, AllKind
    • Re: [ANNOUNCE] ipset 6.21 released, Jozsef Kadlecsik
• [RFC PATCH 0/2] netfilter: nf_tables: set selection, Patrick McHardy
  • [RFC PATCH 2/2] netfilter: nft_hash: use set global element counter instead of private one, Patrick McHardy
  • [RFC PATCH 1/2] netfilter: nf_tables: implement proper set selection, Patrick McHardy
• [PATCH v3] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
  • Re: [PATCH v3] netfilter: nft_hash: bug fixes and resizing, Pablo Neira Ayuso
• [PATCH nft] parser: support reject unreach|reset, Florian Westphal
  • Re: [PATCH nft] parser: support reject unreach|reset, Eric Leblond
    • Re: [PATCH nft] parser: support reject unreach|reset, Florian Westphal
      • Re: [PATCH nft] parser: support reject unreach|reset, Patrick McHardy
    • Re: [PATCH nft] parser: support reject unreach|reset, Patrick McHardy
  • Re: [PATCH nft] parser: support reject unreach|reset, Patrick McHardy
    • Re: [PATCH nft] parser: support reject unreach|reset, Florian Westphal
• Re: linux-next: Tree for Mar 3 (netfilter: xt_socket), Randy Dunlap
• [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
  • [nf-next PATCH V3 1/5] netfilter: trivial code cleanup and doc changes, Jesper Dangaard Brouer
  • [nf-next PATCH V3 2/5] netfilter: conntrack: spinlock per cpu to protect special lists., Jesper Dangaard Brouer
  • [nf-next PATCH V3 3/5] netfilter: avoid race with exp->master ct, Jesper Dangaard Brouer
  • [nf-next PATCH V3 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Jesper Dangaard Brouer
  • [nf-next PATCH V3 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Jesper Dangaard Brouer
  • Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, David Miller
    • Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, Pablo Neira Ayuso
  • Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, Florian Westphal
    • Re: [nf-next PATCH V3 0/5] netfilter: conntrack: optimization, remove central spinlock, Eric Dumazet
• [BUG?] Null pointer dereference in nf_ct_delete_from_lists(), Namjae Jeon
  • Re: [BUG?] Null pointer dereference in nf_ct_delete_from_lists(), Namjae Jeon
• [PATCH] ip_set: remove extraneous log message, Jason A. Donenfeld
  • Re: [PATCH] ip_set: remove extraneous log message, Jozsef Kadlecsik
• [PATCH v3 0/2] ipset: forceadd support, Josh Hunt
  • [PATCH v3 2/2] ipset: add userspace support for forceadd, Josh Hunt
  • [PATCH v3 1/2] ipset: add forceadd kernel support for hash set types, Josh Hunt
  • Re: [PATCH v3 0/2] ipset: forceadd support, Jozsef Kadlecsik
• [PATCH v2] netfilter: hash resizing, Patrick McHardy
  • [PATCH v2] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
    • Re: [PATCH v2] netfilter: nft_hash: bug fixes and resizing, Eric Dumazet
      • Re: [PATCH v2] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
• [PATCH v2 0/2] ipset: forceadd support, Josh Hunt
  • [PATCH v2 1/2] ipset: add forceadd kernel support for hash set types, Josh Hunt
    • Re: [PATCH v2 1/2] ipset: add forceadd kernel support for hash set types, Jozsef Kadlecsik
  • [PATCH v2 2/2] ipset: add userspace support for forceadd, Josh Hunt
    • Re: [PATCH v2 2/2] ipset: add userspace support for forceadd, Pablo Neira Ayuso
    • Re: [PATCH v2 2/2] ipset: add userspace support for forceadd, Jozsef Kadlecsik
      • Re: [PATCH v2 2/2] ipset: add userspace support for forceadd, Josh Hunt
  • Re: [PATCH v2 0/2] ipset: forceadd support, Phil Oester
    • Re: [PATCH v2 0/2] ipset: forceadd support, Josh Hunt
• [nf-next PATCH 0/5] (repost) netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
  • [nf-next PATCH 1/5] netfilter: trivial code cleanup and doc changes, Jesper Dangaard Brouer
  • [nf-next PATCH 2/5] netfilter: conntrack: spinlock per cpu to protect special lists., Jesper Dangaard Brouer
  • [nf-next PATCH 3/5] netfilter: avoid race with exp->master ct, Jesper Dangaard Brouer
    • Re: [nf-next PATCH 3/5] netfilter: avoid race with exp->master ct, Florian Westphal
      • Re: [nf-next PATCH 3/5] netfilter: avoid race with exp->master ct, Jesper Dangaard Brouer
  • [nf-next PATCH 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Jesper Dangaard Brouer
  • [nf-next PATCH 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Jesper Dangaard Brouer
  • Re: [nf-next PATCH 0/5] (repost) netfilter: conntrack: optimization, remove central spinlock, David Miller
    • Re: [nf-next PATCH 0/5] (repost) netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
  • [nf-next PATCH V2 0/5] netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
    • [nf-next PATCH V2 1/5] netfilter: trivial code cleanup and doc changes, Jesper Dangaard Brouer
    • [nf-next PATCH V2 2/5] netfilter: conntrack: spinlock per cpu to protect special lists., Jesper Dangaard Brouer
    • [nf-next PATCH V2 3/5] netfilter: avoid race with exp->master ct, Jesper Dangaard Brouer
    • [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Jesper Dangaard Brouer
      • Re: [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Florian Westphal
        • Re: [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Jesper Dangaard Brouer
    • [nf-next PATCH V2 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Jesper Dangaard Brouer
    • Re: [nf-next PATCH V2 0/5] netfilter: conntrack: optimization, remove central spinlock, David Miller
• Re: [net-next PATCH 0/5] netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
  • Re: [net-next PATCH 0/5] netfilter: conntrack: optimization, remove central spinlock, Pablo Neira Ayuso
• [PATCH] netfilter: hash resizing, Patrick McHardy
  • [PATCH] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
    • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Josh Triplett
      • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
    • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Paul E. McKenney
      • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
        • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Paul E. McKenney
• [nf_tables] suggestion: system-wide sets, Arturo Borrero Gonzalez
  • Re: [nf_tables] suggestion: system-wide sets, Patrick McHardy
    • Re: [nf_tables] suggestion: system-wide sets, Arturo Borrero Gonzalez
      • Re: [nf_tables] suggestion: system-wide sets, Patrick McHardy
    • Re: [nf_tables] suggestion: system-wide sets, Patrick Schaaf
      • Re: [nf_tables] suggestion: system-wide sets, Patrick McHardy
• custom ebtables module && skb manipulation && kernel panic, Marek Kierdelewicz
• [libnftnl PATCH] src: check if netlink parsing fails, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] src: check if netlink parsing fails, Pablo Neira Ayuso
• [nft PATCH] netlink: fix chain attribute parsing, Arturo Borrero Gonzalez
  • Re: [nft PATCH] netlink: fix chain attribute parsing, Pablo Neira Ayuso
• [RFC PATCH v2 0/6] nft events reporting, Arturo Borrero Gonzalez
  • [RFC PATCH v2 1/6] rule: allow to print sets in plain format, Arturo Borrero Gonzalez
    • Re: [RFC PATCH v2 1/6] rule: allow to print sets in plain format, Pablo Neira Ayuso
  • [RFC PATCH v2 2/6] netlink: add netlink_delinearize_set() func, Arturo Borrero Gonzalez
  • [RFC PATCH v2 3/6] rule: generalize chain_print(), Arturo Borrero Gonzalez
  • [RFC PATCH v2 4/6] netlink: add netlink_delinearize_chain() func, Arturo Borrero Gonzalez
    • Re: [RFC PATCH v2 4/6] netlink: add netlink_delinearize_chain() func, Pablo Neira Ayuso
  • [RFC PATCH v2 5/6] netlink: add netlink_delinearize_table() func, Arturo Borrero Gonzalez
  • [RFC PATCH v2 6/6] src: add events reporting, Arturo Borrero Gonzalez
    • Re: [RFC PATCH v2 6/6] src: add events reporting, Arturo Borrero Gonzalez
      • Re: [RFC PATCH v2 6/6] src: add events reporting, Pablo Neira Ayuso
        • Re: [RFC PATCH v2 6/6] src: add events reporting, Arturo Borrero Gonzalez
    • Re: [RFC PATCH v2 6/6] src: add events reporting, Pablo Neira Ayuso
  • Re: [RFC PATCH v2 0/6] nft events reporting, Patrick McHardy
• [PATCH v2] netfilter: nf_tables: add optional user data area to rules, Pablo Neira Ayuso
  • Re: [PATCH v2] netfilter: nf_tables: add optional user data area to rules, Patrick McHardy
• [PATCH] netfilter: nf_tables: add optional user data area to rules, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: add optional user data area to rules, Patrick McHardy
    • Re: [PATCH] netfilter: nf_tables: add optional user data area to rules, Pablo Neira Ayuso
• [PATCH nft] src: add support for rule human-readable comments, Pablo Neira Ayuso
• [PATCH 0/7] libnftnl updates, Pablo Neira Ayuso
  • [PATCH 1/7] src: early attribute type validation in nft_*_attr_set, Pablo Neira Ayuso
  • [PATCH 3/7] src: add nft_*_attr_{set|get}_data interface, Pablo Neira Ayuso
  • [PATCH 2/7] src: add assertion infrastructure to validate attribute types, Pablo Neira Ayuso
  • [PATCH 6/7] example: nft-rule-add: simplify example, Pablo Neira Ayuso
  • [PATCH 5/7] include: get linux/netfilter/nf_tables.h in sync with kernel header, Pablo Neira Ayuso
  • [PATCH 7/7] rule: add NFT_RULE_ATTR_USERDATA support, Pablo Neira Ayuso
  • [PATCH 4/7] src: fix wrong type in NFT_ATTR_*_FAMILY, Pablo Neira Ayuso
• [PATCH] xt_quota2: introduce support for netns, Daniel Golle
  • Re: [PATCH] xt_quota2: introduce support for netns, Jan Engelhardt
• [PATCH RESEND v5] netfilter: xtables: add quota support for nfacct, mathieu . poirier
• [libmnl] mmap patch review request, Ken-ichirou MATSUZAWA
• [PATCH 2/2] bridge: netfilter: Use ether_addr_copy, Joe Perches
  • Re: [PATCH 2/2] bridge: netfilter: Use ether_addr_copy, David Miller
• BUG: ip6tables IPv6-REDIRECT over bridges, Artie Hamilton
  • Re: BUG: ip6tables IPv6-REDIRECT over bridges, Florian Westphal
  • [RFC] bridge: Allow to redirect IPv6 traffic to local machine, Sven Eckelmann
• [PATCH 1/2] nft-arp: adds nft_arp_save_firewall, Giuseppe Longo
  • [PATCH 2/2] xtables-events: prints arp rules, Giuseppe Longo
    • Re: [PATCH 2/2] xtables-events: prints arp rules, Pablo Neira Ayuso
  • Re: [PATCH 1/2] nft-arp: adds nft_arp_save_firewall, Pablo Neira Ayuso
• [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 5/6] netfilter: nf_tables: check if payload length is a power of 2, Pablo Neira Ayuso
  • [PATCH 4/6] netfilter: nf_tables: fix nf_trace always-on with XT_TRACE=n, Pablo Neira Ayuso
  • [PATCH 6/6] netfilter: ctnetlink: force null nat binding on insert, Pablo Neira Ayuso
  • [PATCH 3/6] netfilter: nf_nat_snmp_basic: fix duplicates in if/else branches, Pablo Neira Ayuso
  • [PATCH 1/6] netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement, Pablo Neira Ayuso
  • [PATCH 2/6] netfilter: nft_meta: fix typo "CONFIG_NET_CLS_ROUTE", Pablo Neira Ayuso
  • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/6] ipv4: fix "conntrack zones" support for defrag user check in ip_expire, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nfnetlink: Fix use after free when it fails to process batch, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: Fix potential use after free in ip6_route_me_harder(), Pablo Neira Ayuso
    • [PATCH 5/6] bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: ctnetlink: don't add null bindings if no nat requested, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: ipv4: defrag: set local_df flag on defragmented skb, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: Zero the tuple in nfnl_cthelper_parse_tuple(), Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_tables: allow to change chain policy without hook if it exists, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: Fix potential crash in nft_hash walker, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: xt_TPROXY: fix invflags check in tproxy_tg6_check(), Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: restore rule tracing via nfnetlink_log, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: ipset: Fixing unnamed union init, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nfnetlink: work around wrong endianess in res_id field, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nf_tables: Use 32 bit addressing register from nft_type_to_reg(), Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: ipset: Out of bound access in hash:net* types fixed, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nfnetlink: avoid recurrent netns lookups in call_batch, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_dup: add missing dependencies with NF_CONNTRACK, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nf_tables: use reverse traversal commit_list in nf_tables_abort, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nfnetlink_queue: avoid harmless unnitialized variable warnings, Pablo Neira Ayuso
    • Re: [PATCH 0/6] netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_tables_netdev: fix error path in module initialization, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nf_conntrack: use safer way to lock all buckets, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nft_byteorder: avoid unneeded le/be conversion steps, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nft_ct: keep counters away from CONFIG_NF_CONNTRACK_LABELS, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: ipset: allow a 0 netmask with hash_netiface type, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nfnetlink: correctly validate length of batch messages, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: tee: select NF_DUP_IPV6 unconditionally, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nft_counter: fix erroneous return values, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nfnetlink: use original skbuff when acking batches, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversion, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: conntrack: resched in nf_ct_iterate_cleanup, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nfnetlink_log: add "nf-logger-3-1" module alias name, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nfnetlink_acct: report overquota to the right netns, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: tproxy: properly refcount tcp listeners, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: conntrack: do not dump other netns's conntrack entries via proc, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: cttimeout: fix use after free error when delete netns, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nft_quota: reset quota after dump, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nft_queue: use raw_smp_processor_id(), Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nft_payload: mangle ckecksum if NFT_PAYLOAD_L4CSUM_PSEUDOHDR is set, Pablo Neira Ayuso
    • [PATCH 6/6] bridge: netfilter: Fix dropping packets that moving through bridge interface, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_tables: fix oob access, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: ipt_CLUSTERIP: check duplicate config when initializing, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nft_ct: fix random validation errors for zone set support, Pablo Neira Ayuso
    • [PATCH 3/6] uapi: fix linux/netfilter/xt_hashlimit.h userspace compilation error, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nf_ct_expect: nf_ct_expect_related_report(): Return zero on success., Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value., Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nft_set_bitmap: incorrect bitmap size, Pablo Neira Ayuso
    • [PATCH 2/6] uapi: stop including linux/sysctl.h in uapi/linux/netfilter.h, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: on sockopt() acquire sock lock only in the required scope, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check(), Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: ipset: Fix wraparound in hash:*net* types, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: x_tables: fix pointer leaks to userspace, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: x_tables: fix int overflow in xt_alloc_table_info(), Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nf_conncount: fix garbage collection confirm race, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_log: don't hold nf_log_mutex during user access, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nf_log: fix uninit read in nf_log_proc_dostring, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregister, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: ipv6: nf_defrag: reduce struct net memory waste, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nf_queue: augment nfqa_cfg_policy, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_conntrack: Fix possible possible crash on module loading., Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: ipv6: nf_defrag: drop skb dst before queueing, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nf_tproxy: fix possible non-linear access to transport header, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nft_compat: explicitly reject ERROR and standard target, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_tables: place all set backends in one single module, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: x_tables: set module owner for icmp(6) matches, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nft_osf: use enum nft_data_types for nft_validate_register_store, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: conntrack: get rid of double sizeof, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: xt_socket: check sk before checking for netns., Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: avoid erronous array bounds warning, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nft_set_rbtree: add missing rb_erase() in GC routine, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] selftests: netfilter: fix config fragment CONFIG_NF_TABLES_INET, Pablo Neira Ayuso
    • [PATCH 2/6] selftests: netfilter: add simple masq/redirect test cases, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nf_tables: unbind set in rule from commit path, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: ipv6: Don't preserve original oif for loopback address, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nft_compat: don't use refcount_inc on newly allocated entry, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_nat: skip nat clash resolution for same-origin entries, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Pablo Neira Ayuso
      • Re: [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Jakub Kicinski
        • Re: [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Jakub Kicinski
          • Re: [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Jozsef Kadlecsik
            • Re: [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Jakub Kicinski
    • [PATCH 2/6] netfilter: Use kvcalloc, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: flowtable: Fix hardware flush order on nf_flow_table_cleanup, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: flowtable: Fix setting forgotten NF_FLOW_HW_DEAD flag, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: flowtable: Fix missing flush hardware on table free, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nf_flowtable: fix documentation, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, Jakub Kicinski
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso