Linux Netfilter / IP Tables Devel

• Date Index

• Re: [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, (continued)
  • Re: [nf-next PATCH V2 4/5] netfilter: conntrack: seperate expect locking from nf_conntrack_lock, Jesper Dangaard Brouer
  • [nf-next PATCH V2 5/5] netfilter: conntrack: remove central spinlock nf_conntrack_lock, Jesper Dangaard Brouer
  • Re: [nf-next PATCH V2 0/5] netfilter: conntrack: optimization, remove central spinlock, David Miller
• Re: [net-next PATCH 0/5] netfilter: conntrack: optimization, remove central spinlock, Jesper Dangaard Brouer
  • Re: [net-next PATCH 0/5] netfilter: conntrack: optimization, remove central spinlock, Pablo Neira Ayuso
• [PATCH] netfilter: hash resizing, Patrick McHardy
  • [PATCH] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
    • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Josh Triplett
      • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
    • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Paul E. McKenney
      • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
        • Re: [PATCH] netfilter: nft_hash: bug fixes and resizing, Paul E. McKenney
• [nf_tables] suggestion: system-wide sets, Arturo Borrero Gonzalez
  • Re: [nf_tables] suggestion: system-wide sets, Patrick McHardy
    • Re: [nf_tables] suggestion: system-wide sets, Arturo Borrero Gonzalez
      • Re: [nf_tables] suggestion: system-wide sets, Patrick McHardy
    • Re: [nf_tables] suggestion: system-wide sets, Patrick Schaaf
      • Re: [nf_tables] suggestion: system-wide sets, Patrick McHardy
• custom ebtables module && skb manipulation && kernel panic, Marek Kierdelewicz
• [libnftnl PATCH] src: check if netlink parsing fails, Arturo Borrero Gonzalez
  • Re: [libnftnl PATCH] src: check if netlink parsing fails, Pablo Neira Ayuso
• [nft PATCH] netlink: fix chain attribute parsing, Arturo Borrero Gonzalez
  • Re: [nft PATCH] netlink: fix chain attribute parsing, Pablo Neira Ayuso
• [RFC PATCH v2 0/6] nft events reporting, Arturo Borrero Gonzalez
  • [RFC PATCH v2 1/6] rule: allow to print sets in plain format, Arturo Borrero Gonzalez
    • Re: [RFC PATCH v2 1/6] rule: allow to print sets in plain format, Pablo Neira Ayuso
  • [RFC PATCH v2 2/6] netlink: add netlink_delinearize_set() func, Arturo Borrero Gonzalez
  • [RFC PATCH v2 3/6] rule: generalize chain_print(), Arturo Borrero Gonzalez
  • [RFC PATCH v2 4/6] netlink: add netlink_delinearize_chain() func, Arturo Borrero Gonzalez
    • Re: [RFC PATCH v2 4/6] netlink: add netlink_delinearize_chain() func, Pablo Neira Ayuso
  • [RFC PATCH v2 5/6] netlink: add netlink_delinearize_table() func, Arturo Borrero Gonzalez
  • [RFC PATCH v2 6/6] src: add events reporting, Arturo Borrero Gonzalez
    • Re: [RFC PATCH v2 6/6] src: add events reporting, Arturo Borrero Gonzalez
      • Re: [RFC PATCH v2 6/6] src: add events reporting, Pablo Neira Ayuso
        • Re: [RFC PATCH v2 6/6] src: add events reporting, Arturo Borrero Gonzalez
    • Re: [RFC PATCH v2 6/6] src: add events reporting, Pablo Neira Ayuso
  • Re: [RFC PATCH v2 0/6] nft events reporting, Patrick McHardy
• [PATCH v2] netfilter: nf_tables: add optional user data area to rules, Pablo Neira Ayuso
  • Re: [PATCH v2] netfilter: nf_tables: add optional user data area to rules, Patrick McHardy
• [PATCH] netfilter: nf_tables: add optional user data area to rules, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: add optional user data area to rules, Patrick McHardy
    • Re: [PATCH] netfilter: nf_tables: add optional user data area to rules, Pablo Neira Ayuso
• [PATCH nft] src: add support for rule human-readable comments, Pablo Neira Ayuso
• [PATCH 0/7] libnftnl updates, Pablo Neira Ayuso
  • [PATCH 1/7] src: early attribute type validation in nft_*_attr_set, Pablo Neira Ayuso
  • [PATCH 3/7] src: add nft_*_attr_{set|get}_data interface, Pablo Neira Ayuso
  • [PATCH 2/7] src: add assertion infrastructure to validate attribute types, Pablo Neira Ayuso
  • [PATCH 6/7] example: nft-rule-add: simplify example, Pablo Neira Ayuso
  • [PATCH 5/7] include: get linux/netfilter/nf_tables.h in sync with kernel header, Pablo Neira Ayuso
  • [PATCH 7/7] rule: add NFT_RULE_ATTR_USERDATA support, Pablo Neira Ayuso
  • [PATCH 4/7] src: fix wrong type in NFT_ATTR_*_FAMILY, Pablo Neira Ayuso
• [PATCH] xt_quota2: introduce support for netns, Daniel Golle
  • Re: [PATCH] xt_quota2: introduce support for netns, Jan Engelhardt
• [PATCH RESEND v5] netfilter: xtables: add quota support for nfacct, mathieu . poirier
• [libmnl] mmap patch review request, Ken-ichirou MATSUZAWA
• [PATCH 2/2] bridge: netfilter: Use ether_addr_copy, Joe Perches
  • Re: [PATCH 2/2] bridge: netfilter: Use ether_addr_copy, David Miller
• BUG: ip6tables IPv6-REDIRECT over bridges, Artie Hamilton
  • Re: BUG: ip6tables IPv6-REDIRECT over bridges, Florian Westphal
  • [RFC] bridge: Allow to redirect IPv6 traffic to local machine, Sven Eckelmann
• [PATCH 1/2] nft-arp: adds nft_arp_save_firewall, Giuseppe Longo
  • [PATCH 2/2] xtables-events: prints arp rules, Giuseppe Longo
    • Re: [PATCH 2/2] xtables-events: prints arp rules, Pablo Neira Ayuso
  • Re: [PATCH 1/2] nft-arp: adds nft_arp_save_firewall, Pablo Neira Ayuso
• [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 5/6] netfilter: nf_tables: check if payload length is a power of 2, Pablo Neira Ayuso
  • [PATCH 4/6] netfilter: nf_tables: fix nf_trace always-on with XT_TRACE=n, Pablo Neira Ayuso
  • [PATCH 6/6] netfilter: ctnetlink: force null nat binding on insert, Pablo Neira Ayuso
  • [PATCH 3/6] netfilter: nf_nat_snmp_basic: fix duplicates in if/else branches, Pablo Neira Ayuso
  • [PATCH 1/6] netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement, Pablo Neira Ayuso
  • [PATCH 2/6] netfilter: nft_meta: fix typo "CONFIG_NET_CLS_ROUTE", Pablo Neira Ayuso
  • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/6] ipv4: fix "conntrack zones" support for defrag user check in ip_expire, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nfnetlink: Fix use after free when it fails to process batch, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: Fix potential use after free in ip6_route_me_harder(), Pablo Neira Ayuso
    • [PATCH 5/6] bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: ctnetlink: don't add null bindings if no nat requested, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: ipv4: defrag: set local_df flag on defragmented skb, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: Zero the tuple in nfnl_cthelper_parse_tuple(), Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_tables: allow to change chain policy without hook if it exists, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: Fix potential crash in nft_hash walker, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: xt_TPROXY: fix invflags check in tproxy_tg6_check(), Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: restore rule tracing via nfnetlink_log, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: ipset: Fixing unnamed union init, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nfnetlink: work around wrong endianess in res_id field, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nf_tables: Use 32 bit addressing register from nft_type_to_reg(), Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: bridge: fix IPv6 packets not being bridged with CONFIG_IPV6=n, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: ipset: Out of bound access in hash:net* types fixed, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nfnetlink: avoid recurrent netns lookups in call_batch, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_dup: add missing dependencies with NF_CONNTRACK, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nf_tables: use reverse traversal commit_list in nf_tables_abort, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nfnetlink_queue: avoid harmless unnitialized variable warnings, Pablo Neira Ayuso
    • Re: [PATCH 0/6] netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_tables_netdev: fix error path in module initialization, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nf_conntrack: use safer way to lock all buckets, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nft_byteorder: avoid unneeded le/be conversion steps, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6(), Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nft_ct: keep counters away from CONFIG_NF_CONNTRACK_LABELS, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: ipset: allow a 0 netmask with hash_netiface type, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nfnetlink: correctly validate length of batch messages, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: tee: select NF_DUP_IPV6 unconditionally, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nft_counter: fix erroneous return values, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nfnetlink: use original skbuff when acking batches, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversion, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: conntrack: resched in nf_ct_iterate_cleanup, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nfnetlink_log: add "nf-logger-3-1" module alias name, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nfnetlink_acct: report overquota to the right netns, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: tproxy: properly refcount tcp listeners, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: conntrack: do not dump other netns's conntrack entries via proc, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: cttimeout: fix use after free error when delete netns, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nft_quota: reset quota after dump, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nft_queue: use raw_smp_processor_id(), Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nft_payload: mangle ckecksum if NFT_PAYLOAD_L4CSUM_PSEUDOHDR is set, Pablo Neira Ayuso
    • [PATCH 6/6] bridge: netfilter: Fix dropping packets that moving through bridge interface, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_tables: fix oob access, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: ipt_CLUSTERIP: check duplicate config when initializing, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nft_ct: fix random validation errors for zone set support, Pablo Neira Ayuso
    • [PATCH 3/6] uapi: fix linux/netfilter/xt_hashlimit.h userspace compilation error, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nf_ct_expect: nf_ct_expect_related_report(): Return zero on success., Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value., Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nft_set_bitmap: incorrect bitmap size, Pablo Neira Ayuso
    • [PATCH 2/6] uapi: stop including linux/sysctl.h in uapi/linux/netfilter.h, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: on sockopt() acquire sock lock only in the required scope, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check(), Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: ipset: Fix wraparound in hash:*net* types, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: x_tables: fix pointer leaks to userspace, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: x_tables: fix int overflow in xt_alloc_table_info(), Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nf_conncount: fix garbage collection confirm race, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_log: don't hold nf_log_mutex during user access, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nf_log: fix uninit read in nf_log_proc_dostring, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregister, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: ipv6: nf_defrag: reduce struct net memory waste, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: nf_queue: augment nfqa_cfg_policy, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_conntrack: Fix possible possible crash on module loading., Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: ipv6: nf_defrag: drop skb dst before queueing, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nf_tproxy: fix possible non-linear access to transport header, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nft_compat: explicitly reject ERROR and standard target, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_tables: place all set backends in one single module, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: x_tables: set module owner for icmp(6) matches, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nft_osf: use enum nft_data_types for nft_validate_register_store, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: conntrack: get rid of double sizeof, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: xt_socket: check sk before checking for netns., Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: avoid erronous array bounds warning, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nft_set_rbtree: add missing rb_erase() in GC routine, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] selftests: netfilter: fix config fragment CONFIG_NF_TABLES_INET, Pablo Neira Ayuso
    • [PATCH 2/6] selftests: netfilter: add simple masq/redirect test cases, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nf_tables: unbind set in rule from commit path, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: ipv6: Don't preserve original oif for loopback address, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nft_compat: don't use refcount_inc on newly allocated entry, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nf_nat: skip nat clash resolution for same-origin entries, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Pablo Neira Ayuso
      • Re: [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Jakub Kicinski
        • Re: [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Jakub Kicinski
          • Re: [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Jozsef Kadlecsik
            • Re: [PATCH 1/6] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Jakub Kicinski
    • [PATCH 2/6] netfilter: Use kvcalloc, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: flowtable: Fix hardware flush order on nf_flow_table_cleanup, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: flowtable: Fix setting forgotten NF_FLOW_HW_DEAD flag, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: flowtable: Fix missing flush hardware on table free, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nf_flowtable: fix documentation, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, Jakub Kicinski
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: ipset: Fix forceadd evaluation path, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports, Pablo Neira Ayuso
    • [PATCH 5/6] selftests: nft_concat_range: Add test for reported add/flush/add issue, Pablo Neira Ayuso
    • [PATCH 4/6] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove(), Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: xt_hashlimit: unregister proc file before releasing mutex, Pablo Neira Ayuso
    • [PATCH 3/6] selftests: nft_concat_range: Move option for 'list ruleset' before command, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: conntrack: fix infinite loop on rmmod, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nft_set_rbtree: Add missing expired checks, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: flowtable: set NF_FLOW_TEARDOWN flag on entry expiration, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: flowtable: Add pending bit for offload work, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: conntrack: avoid gcc-10 zero-length-bounds warning, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: flowtable: Remove WQ_MEM_RECLAIM from workqueue, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
  • [PATCH 0/6] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/6] netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match, Pablo Neira Ayuso
    • [PATCH 5/6] netfilter: nf_tables: incorrect enum nft_list_attributes definition, Pablo Neira Ayuso
    • [PATCH 6/6] netfilter: nf_tables: fix destination register zeroing, Pablo Neira Ayuso
    • [PATCH 2/6] netfilter: nft_set_rbtree: Handle outcomes of tree rotations in overlap detection, Pablo Neira Ayuso
    • [PATCH 4/6] netfilter: nf_tables: add NFTA_SET_USERDATA if not null, Pablo Neira Ayuso
    • [PATCH 1/6] netfilter: conntrack: allow sctp hearbeat after connection re-use, Pablo Neira Ayuso
    • Re: [PATCH 0/6] Netfilter fixes for net, David Miller
• [PATCH next] netfilter: nfnetlink_log: remove unused code, Florian Westphal
  • Re: [PATCH next] netfilter: nfnetlink_log: remove unused code, Pablo Neira Ayuso
• [PATCH 0/4] netfilter: minor cleanups and improvements, Patrick McHardy
  • [PATCH 1/4] netfilter: ip_set: rename nfnl_dereference()/nfnl_set(), Patrick McHardy
  • [PATCH 3/4] netfilter: nf_tables: add nft_dereference() macro, Patrick McHardy
  • [PATCH 2/4] netfilter: nfnetlink: add rcu_dereference_protected() helpers, Patrick McHardy
  • [PATCH 4/4] netfilter: nf_tables: accept QUEUE/DROP verdict parameters, Patrick McHardy
  • Re: [PATCH 0/4] netfilter: minor cleanups and improvements, Pablo Neira Ayuso
• [PATCH v5] netfilter: xtables: add quota support for nfacct, mathieu . poirier
  • Re: [PATCH v5] netfilter: xtables: add quota support for nfacct, Pablo Neira Ayuso
    • Re: [PATCH v5] netfilter: xtables: add quota support for nfacct, Mathieu Poirier
      • Re: [PATCH v5] netfilter: xtables: add quota support for nfacct, Mathieu Poirier
      • Re: [PATCH v5] netfilter: xtables: add quota support for nfacct, Pablo Neira Ayuso
        • Re: [PATCH v5] netfilter: xtables: add quota support for nfacct, Mathieu Poirier
          • Re: [PATCH v5] netfilter: xtables: add quota support for nfacct, Pablo Neira Ayuso
            • Re: [PATCH v5] netfilter: xtables: add quota support for nfacct, Mathieu Poirier
• [PATCH v2 -next] netfilter: nft_ct: labels get support, Florian Westphal
  • Re: [PATCH v2 -next] netfilter: nft_ct: labels get support, Patrick McHardy
    • Re: [PATCH v2 -next] netfilter: nft_ct: labels get support, Pablo Neira Ayuso
• Nftables HOWTO documentation updates, Pablo Neira Ayuso
  • Re: Nftables HOWTO documentation updates, Dennis Jacobfeuerborn
    • Re: Nftables HOWTO documentation updates, Arturo Borrero Gonzalez
    • Re: Nftables HOWTO documentation updates, Pablo Neira Ayuso
      • Re: Nftables HOWTO documentation updates, Patrick McHardy
• once again about crash in fins_appropriate_src()/same_src(), Vasily Averin
• [PATCH 1/3 -next] netfilter: nft_ct: labels get support, Florian Westphal
  • [PATCH 2/3 libnftnl] expr: add conntrack label match support, Florian Westphal
  • [PATCH 3/3 nft] ct: connlabel matching support, Florian Westphal
    • Re: [PATCH 3/3 nft] ct: connlabel matching support, Patrick McHardy
  • Re: [PATCH 1/3 -next] netfilter: nft_ct: labels get support, Patrick McHardy
    • Re: [PATCH 1/3 -next] netfilter: nft_ct: labels get support, Florian Westphal
      • Re: [PATCH 1/3 -next] netfilter: nft_ct: labels get support, Patrick McHardy
• [RFC PATCH] netfilter: nft_hash: bug fixes and resizing, Patrick McHardy
• [nft RFC PATCH 0/6] events, Arturo Borrero Gonzalez
  • [nft RFC PATCH 1/6] rule: make family2str() public, Arturo Borrero Gonzalez
    • Re: [nft RFC PATCH 1/6] rule: make family2str() public, Pablo Neira Ayuso
  • [nft RFC PATCH 2/6] rule: allow to print sets in plain format, Arturo Borrero Gonzalez
    • Re: [nft RFC PATCH 2/6] rule: allow to print sets in plain format, Patrick McHardy
  • [nft RFC PATCH 3/6] netlink: add netlink_delinearize_set() func, Arturo Borrero Gonzalez
    • Re: [nft RFC PATCH 3/6] netlink: add netlink_delinearize_set() func, Patrick McHardy
      • Re: [nft RFC PATCH 3/6] netlink: add netlink_delinearize_set() func, Arturo Borrero Gonzalez
        • Re: [nft RFC PATCH 3/6] netlink: add netlink_delinearize_set() func, Patrick McHardy
  • [nft RFC PATCH 4/6] rule: generalize chain_print(), Arturo Borrero Gonzalez
  • [nft RFC PATCH 5/6] netlink: add netlink_delinearize_rule() func, Arturo Borrero Gonzalez
  • [nft RFC PATCH 6/6] src: add events reporting, Arturo Borrero Gonzalez
    • Re: [nft RFC PATCH 6/6] src: add events reporting, Pablo Neira Ayuso
      • Re: [nft RFC PATCH 6/6] src: add events reporting, Patrick McHardy
        • Re: [nft RFC PATCH 6/6] src: add events reporting, Pablo Neira Ayuso
          • Re: [nft RFC PATCH 6/6] src: add events reporting, Patrick McHardy
            • Re: [nft RFC PATCH 6/6] src: add events reporting, Pablo Neira Ayuso
              • Re: [nft RFC PATCH 6/6] src: add events reporting, Patrick McHardy
                • Re: [nft RFC PATCH 6/6] src: add events reporting, Pablo Neira Ayuso
                  • Re: [nft RFC PATCH 6/6] src: add events reporting, Patrick McHardy
                    • Re: [nft RFC PATCH 6/6] src: add events reporting, Arturo Borrero Gonzalez
                      • Re: [nft RFC PATCH 6/6] src: add events reporting, Patrick McHardy
  • Re: [nft RFC PATCH 0/6] events, Pablo Neira Ayuso
  • Re: [nft RFC PATCH 0/6] events, Patrick McHardy
    • Re: [nft RFC PATCH 0/6] events, Arturo Borrero Gonzalez
      • Re: [nft RFC PATCH 0/6] events, Patrick McHardy
• [PATCH nft] ct: direction should be integer, not bitmask, Florian Westphal
  • Re: [PATCH nft] ct: direction should be integer, not bitmask, Pablo Neira Ayuso
  • Re: [PATCH nft] ct: direction should be integer, not bitmask, Patrick McHardy
• [PATCH libnftnl] src: compile queue expression support, Pablo Neira Ayuso
• nftables next-3.14 merged into master, Patrick McHardy
  • Re: nftables next-3.14 merged into master, Arturo Borrero Gonzalez
    • Re: nftables next-3.14 merged into master, Patrick McHardy
• [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Nikolay Aleksandrov
  • Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Patrick McHardy
    • Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Nikolay Aleksandrov
      • Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Patrick McHardy
        • Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Nikolay Aleksandrov
          • Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Patrick McHardy
            • Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Nikolay Aleksandrov
  • <Possible follow-ups>
  • [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Nikolay Aleksandrov
    • Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Patrick McHardy
      • Re: [RFC PATCH] netfilter: nf_tables: extend payload to support writing data, Nikolay Aleksandrov
• [PATCH 0/4] nftables: bitmask and prefix fixes, Patrick McHardy
  • [PATCH 1/4] evaluate: use flagcmp for single RHS bitmask expression, Patrick McHardy
  • [PATCH 2/4] binop: take care of operator precedence when printing binop arguments, Patrick McHardy
  • [PATCH 4/4] netlink: fix prefix expression handling, Patrick McHardy
  • [PATCH 3/4] netlink_delinarize: convert *all* bitmask values into individual bit values, Patrick McHardy
• [PATCH nft] netlink: meta: fix wrong type in attributes, Florian Westphal
  • Re: [PATCH nft] netlink: meta: fix wrong type in attributes, Patrick McHardy
    • Re: [PATCH nft] netlink: meta: fix wrong type in attributes, Pablo Neira Ayuso
      • Re: [PATCH nft] netlink: meta: fix wrong type in attributes, Patrick McHardy
    • Re: [PATCH nft] netlink: meta: fix wrong type in attributes, Florian Westphal
      • Re: [PATCH nft] netlink: meta: fix wrong type in attributes, Pablo Neira Ayuso
      • Re: [PATCH nft] netlink: meta: fix wrong type in attributes, Patrick McHardy
        • Re: [PATCH nft] netlink: meta: fix wrong type in attributes, Pablo Neira Ayuso
• [PATCH] src: proto: fixed a rreply symbol, Ana Rey
  • Re: [PATCH] src: proto: fixed a rreply symbol, Patrick McHardy
• [nft next-3.14 PATCH] netlink: delete unused function calls, Arturo Borrero Gonzalez
  • Re: [nft next-3.14 PATCH] netlink: delete unused function calls, Pablo Neira Ayuso
• [PATCH nft] netlink_linearize: fix wrong comparison in netlink_gen_flagcmp(), Pablo Neira Ayuso
  • Re: [PATCH nft] netlink_linearize: fix wrong comparison in netlink_gen_flagcmp(), Patrick McHardy
    • Re: [PATCH nft] netlink_linearize: fix wrong comparison in netlink_gen_flagcmp(), Pablo Neira Ayuso
      • Re: [PATCH nft] netlink_linearize: fix wrong comparison in netlink_gen_flagcmp(), Patrick McHardy
• [PATCH v3] netfilter: nf_tables: check if payload length is a power of 2, Nikolay Aleksandrov
  • Re: [PATCH v3] netfilter: nf_tables: check if payload length is a power of 2, Patrick McHardy
    • Re: [PATCH v3] netfilter: nf_tables: check if payload length is a power of 2, Pablo Neira Ayuso
• [PATCH v2] netfilter: nf_tables: check if payload offset is a power of 2, Nikolay Aleksandrov
  • Re: [PATCH v2] netfilter: nf_tables: check if payload offset is a power of 2, Nikolay Aleksandrov
• [PATCH] netfilter: nf_tables: check if payload offset is a power of 2, Nikolay Aleksandrov
  • Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2, Patrick McHardy
    • Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2, Nikolay Aleksandrov
      • Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2, Nikolay Aleksandrov
      • Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2, Patrick McHardy
        • Re: [PATCH] netfilter: nf_tables: check if payload offset is a power of 2, Nikolay Aleksandrov
• [PATCH V2] netfilter: ctnetlink: force null nat binding on insert, Florian Westphal
  • Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert, Pablo Neira Ayuso
    • Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert, Florian Westphal
      • Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert, Pablo Neira Ayuso
        • Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert, Florian Westphal
          • Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert, Pablo Neira Ayuso
            • Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert, Florian Westphal
              • Re: [PATCH V2] netfilter: ctnetlink: force null nat binding on insert, Pablo Neira Ayuso
• [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n, Florian Westphal
  • Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n, Florian Westphal
      • Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n, Patrick McHardy
        • Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n, Florian Westphal
  • Re: [PATCH] netfilter: nftables: fix nf_trace always-on with XT_TRACE=n, Pablo Neira Ayuso
• [RFC PATCH nft userspace] nft: connlabel matching support, Florian Westphal
  • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Patrick McHardy
    • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Florian Westphal
      • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Patrick McHardy
        • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Florian Westphal
          • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Patrick McHardy
        • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Florian Westphal
          • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Patrick McHardy
            • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Florian Westphal
              • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Patrick McHardy
                • Re: [RFC PATCH nft userspace] nft: connlabel matching support, Patrick McHardy
• [RFC PATCH] netfilter: nf_tables: add new write expression, Nikolay Aleksandrov
  • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Nikolay Aleksandrov
  • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Patrick McHardy
    • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Nikolay Aleksandrov
      • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Pablo Neira Ayuso
        • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Patrick McHardy
          • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Nikolay Aleksandrov
            • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Patrick McHardy
              • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Nikolay Aleksandrov
  • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Florian Westphal
    • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Nikolay Aleksandrov
    • Re: [RFC PATCH] netfilter: nf_tables: add new write expression, Patrick McHardy
• [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload, Patrick McHardy
    • Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload, Patrick McHardy
        • Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload, Patrick McHardy
            • Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload, Pablo Neira Ayuso
              • Re: [PATCH] netfilter: nf_tables: fix rule batch with anonymous set and module autoload, Patrick McHardy
• How to forward a modified packet by using libnetfilter_queue, Daehee Kim
• [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage, Florian Westphal
  • Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage, Pablo Neira Ayuso
    • Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage, Florian Westphal
      • Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage, Pablo Neira Ayuso
        • Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage, Jozsef Kadlecsik
          • Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage, Pablo Neira Ayuso
  • Re: [PATCH ipset] kernel: uapi: fix MARKMASK attr ABI breakage, Jozsef Kadlecsik
• [PATCH 1/2 nft] meta: remove line break when printing priority, Pablo Neira Ayuso
  • [PATCH 2/2 nft] scanner: fix parsing of tc handle, Pablo Neira Ayuso
    • Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle, Patrick McHardy
      • Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle, Patrick McHardy
        • Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle, Mart Frauenlob
          • Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle, Patrick McHardy
        • Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle, Pablo Neira Ayuso
          • Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle, Patrick McHardy
            • Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle, Patrick McHardy
              • Re: [PATCH 2/2 nft] scanner: fix parsing of tc handle, Pablo Neira Ayuso
• [PATCH] netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement, Patrick McHardy
  • Re: [PATCH] netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement, Pablo Neira Ayuso
• [PATCH] netfilter: nft_meta: fix typo "CONFIG_NET_CLS_ROUTE", Paul Bolle
  • Re: [PATCH] netfilter: nft_meta: fix typo "CONFIG_NET_CLS_ROUTE", Pablo Neira Ayuso
• [PATCH ipset 1/2] lib: fix ifname 'physdev:' prefix parsing, Florian Westphal
  • [PATCH ipset 2/2] lib: don't segfault when ipset_data_get returns NULL, Florian Westphal
    • Re: [PATCH ipset 2/2] lib: don't segfault when ipset_data_get returns NULL, Jozsef Kadlecsik
      • Re: [PATCH ipset 2/2] lib: don't segfault when ipset_data_get returns NULL, Florian Westphal
        • Re: [PATCH ipset 2/2] lib: don't segfault when ipset_data_get returns NULL, Jozsef Kadlecsik
  • Re: [PATCH ipset 1/2] lib: fix ifname 'physdev:' prefix parsing, Jozsef Kadlecsik
    • Re: [PATCH ipset 1/2] lib: fix ifname 'physdev:' prefix parsing, Florian Westphal
      • Re: [PATCH ipset 1/2] lib: fix ifname 'physdev:' prefix parsing, Jozsef Kadlecsik
• Netfilter Extension Development Queries, Duncan Eastoe
  • Re: Netfilter Extension Development Queries, Mart Frauenlob
    • Re: Netfilter Extension Development Queries, Arturo Borrero Gonzalez
      • Re: Netfilter Extension Development Queries, Duncan Eastoe
• [libftnl PATCH] rule: Reformat the string to output so it breaks line relevantly, Tomasz Bursztyka
• [iptables (nft-compat) PATCH 0/5] Various fixes version 2, Tomasz Bursztyka
  • [iptables (nft-compat) PATCH 1/5] nft: Add useful debug output when a builtin table is created, Tomasz Bursztyka
  • [iptables (nft-compat) PATCH 2/5] nft: A builtin chain might be created when restoring, Tomasz Bursztyka
  • [iptables (nft-compat) PATCH 3/5] nft: Initialize a table only once, Tomasz Bursztyka
  • [iptables (nft-compat) PATCH 4/5] nft: Remove useless error message, Tomasz Bursztyka
  • [iptables (nft-compat) PATCH 5/5] nft: Pass a line after printing out a debug message, Tomasz Bursztyka
  • Re: [iptables (nft-compat) PATCH 0/5] Various fixes version 2, Pablo Neira Ayuso
• [PATCH] netfilter: nf_nat_snmp_basic: fix duplicates in if/else branches, Francois-Xavier Le Bail
  • Re: [PATCH] netfilter: nf_nat_snmp_basic: fix duplicates in if/else branches, Patrick McHardy
    • Re: [PATCH] netfilter: nf_nat_snmp_basic: fix duplicates in if/else branches, Pablo Neira Ayuso
• [PATCH iptables] nft-compat: fix wrong protocol context in initialization, Pablo Neira Ayuso
• [PATCH libnftnl] chain: print usage counter for base chain via default output as well, Pablo Neira Ayuso
• [libnftnl/iptables PATCH 0/8] Various fixes, Tomasz Bursztyka
  • [libnftnl PATCH 1/8] chain: Break the line properly when printing out the chain, Tomasz Bursztyka
    • Re: [libnftnl PATCH 1/8] chain: Break the line properly when printing out the chain, Pablo Neira Ayuso
      • Re: [libnftnl PATCH 1/8] chain: Break the line properly when printing out the chain, Tomasz Bursztyka
        • Re: [libnftnl PATCH 1/8] chain: Break the line properly when printing out the chain, Pablo Neira Ayuso
  • [libnftnl PATCH 2/8] table: Break the line properly when printing out the table, Tomasz Bursztyka
  • [iptables (nft-compat) PATCH 5/8] nft: Fix error message to output proper origin, Tomasz Bursztyka
    • Re: [iptables (nft-compat) PATCH 5/8] nft: Fix error message to output proper origin, Pablo Neira Ayuso
  • [iptables (nft-compat) PATCH 4/8] xtables: Add backward compatibility with -w option, Tomasz Bursztyka
    • Re: [iptables (nft-compat) PATCH 4/8] xtables: Add backward compatibility with -w option, Pablo Neira Ayuso
  • [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family, Tomasz Bursztyka
    • Re: [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family, Pablo Neira Ayuso
      • Re: [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family, Tomasz Bursztyka
        • Re: [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family, Pablo Neira Ayuso
          • Re: [iptables (nft-compat) PATCH 3/8] xtables: Handle family is not related to Netlink family, Tomasz Bursztyka
  • [iptables (nft-compat) PATCH 8/8] nft: Initialize according to requested table, if any, Tomasz Bursztyka
    • Re: [iptables (nft-compat) PATCH 8/8] nft: Initialize according to requested table, if any, Pablo Neira Ayuso
      • Re: [iptables (nft-compat) PATCH 8/8] nft: Initialize according to requested table, if any, Tomasz Bursztyka
        • Re: [iptables (nft-compat) PATCH 8/8] nft: Initialize according to requested table, if any, Pablo Neira Ayuso
  • [iptables (nft-compat) PATCH 7/8] nft: A builtin chain might be created when restoring, Tomasz Bursztyka
  • [iptables (nft-compat) PATCH 6/8] nft: Add useful debug output when a builtin table is created, Tomasz Bursztyka
• [PATCH v4 0/2] Add quota capabilities to nfacct, mathieu . poirier
  • [PATCH v4 1/2] netfilter: nfnetlink_acct: make shared objects SMP safe, mathieu . poirier
  • [PATCH v4 2/2] netfilter: xtables: add quota support for nfacct, mathieu . poirier
• [PATCH v2] nft-shared: adds save_matches_and_target, Giuseppe Longo
  • [PATCH v2] xtables-events: prints arp rules, Giuseppe Longo
    • Re: [PATCH v2] xtables-events: prints arp rules, Pablo Neira Ayuso
  • Re: [PATCH v2] nft-shared: adds save_matches_and_target, Pablo Neira Ayuso
• [nftables RFC PATCH 0/1] implementing icmp code filtering, Eric Leblond
  • [nftables RFC PATCH] icmp: add code filtering with name, Eric Leblond
  • Re: [nftables RFC PATCH 0/1] implementing icmp code filtering, Patrick McHardy
• [PATCH] netfilter: ctnetlink: force null nat binding on insert, Florian Westphal
  • Re: [PATCH] netfilter: ctnetlink: force null nat binding on insert, Pablo Neira Ayuso
• [PATCH v2 12/13] net: Include appropriate header file in netfilter/nft_lookup.c, Rashika Kheria
• [PATCH 12/13] net: Include appropriate header file in netfilter/nft_lookup.c, Rashika Kheria
  • Re: [PATCH 12/13] net: Include appropriate header file in netfilter/nft_lookup.c, Josh Triplett
• [PATCH 00/18] Netfilter/nftables/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH 02/18] netfilter: nft_ct: fix unconditional dump of 'dir' attr, Pablo Neira Ayuso
  • [PATCH 01/18] ipvs: fix AF assignment in ip_vs_conn_new(), Pablo Neira Ayuso
  • [PATCH 03/18] netfilter: nf_tables: fix oops when deleting a chain with references, Pablo Neira Ayuso
  • [PATCH 18/18] netfilter: nf_tables: unininline nft_trace_packet(), Pablo Neira Ayuso
  • [PATCH 16/18] netfilter: nft_rbtree: fix data handling of end interval elements, Pablo Neira Ayuso
  • [PATCH 17/18] netfilter: nf_tables: fix loop checking with end interval elements, Pablo Neira Ayuso
  • [PATCH 15/18] netfilter: nf_tables: do not allow NFT_SET_ELEM_INTERVAL_END flag and data, Pablo Neira Ayuso
  • [PATCH 04/18] netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_get, Pablo Neira Ayuso
  • [PATCH 11/18] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts, Pablo Neira Ayuso
  • [PATCH 14/18] netfilter: nf_tables: fix racy rule deletion, Pablo Neira Ayuso
  • [PATCH 08/18] netfilter: nf_tables: fix potential oops when dumping sets, Pablo Neira Ayuso
  • [PATCH 10/18] netfilter: nf_tables: add AF specific expression support, Pablo Neira Ayuso
  • [PATCH 12/18] netfilter: nf_tables: add reject module for NFPROTO_INET, Pablo Neira Ayuso
  • [PATCH 13/18] netfilter: nf_tables: fix log/queue expressions for NFPROTO_INET, Pablo Neira Ayuso
  • [PATCH 06/18] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Pablo Neira Ayuso
  • [PATCH 09/18] netfilter: nft_ct: fix missing NFT_CT_L3PROTOCOL key in validity checks, Pablo Neira Ayuso
  • [PATCH 07/18] netfilter: nf_tables: fix overrun in nf_tables_set_alloc_name(), Pablo Neira Ayuso
  • [PATCH 05/18] netfilter: nf_nat_h323: fix crash in nf_ct_unlink_expect_report(), Pablo Neira Ayuso
  • Re: [PATCH 00/18] Netfilter/nftables/IPVS fixes for net, David Miller
• [PATCH 1/2 v2] netfilter: nf_tables: fix loop checking with end interval elements, Pablo Neira Ayuso
  • [PATCH 2/2 v2] netfilter: nf_tables: fix oops when using gotos, Pablo Neira Ayuso
    • Re: [PATCH 2/2 v2] netfilter: nf_tables: fix oops when using gotos, Patrick McHardy
• [PATCH] netfilter: nf_tables: fix oops when using gotos, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: fix oops when using gotos, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_tables: fix oops when using gotos, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_tables: fix oops when using gotos, Patrick McHardy
• [PATCH] netfilter: nf_tables: fix loop checking with set element data, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: fix loop checking with set element data, Patrick McHardy
    • Re: [PATCH] netfilter: nf_tables: fix loop checking with set element data, Patrick McHardy
      • Re: [PATCH] netfilter: nf_tables: fix loop checking with set element data, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: nf_tables: do not allow NFT_SET_ELEM_INTERVAL_END flag and data, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: nft_rbtree: fix data handling of end interval elements, Pablo Neira Ayuso
    • Re: [PATCH 2/2] netfilter: nft_rbtree: fix data handling of end interval elements, Patrick McHardy
• [PATCH] netfilter: nft_rbtree: fix chain use underflow with intervals and map, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nft_rbtree: fix chain use underflow with intervals and map, Patrick McHardy
    • Re: [PATCH] netfilter: nft_rbtree: fix chain use underflow with intervals and map, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nft_rbtree: fix chain use underflow with intervals and map, Patrick McHardy
• [PATCH 0/3] xtables-events segfault, Giuseppe Longo
  • [PATCH 1/3] nft-shared: adds save_matches_and_target, Giuseppe Longo
  • [PATCH 2/3] nft-arp: adds nft_arp_save_firewall, Giuseppe Longo
    • Re: [PATCH 2/3] nft-arp: adds nft_arp_save_firewall, Pablo Neira Ayuso
  • [PATCH 3/3] xtables-events: prints arp rules, Giuseppe Longo
    • Re: [PATCH 3/3] xtables-events: prints arp rules, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: fix log/queue expressions for NFPROTO_INET, Patrick McHardy
  • Re: [PATCH] netfilter: nf_tables: fix log/queue expressions for NFPROTO_INET, Pablo Neira Ayuso
• [PATCH] netlink: add netlink specific location, Patrick McHardy
• [RFC libnftnl PATCH 0/2] New mnlio functions, Arturo Borrero Gonzalez
  • [RFC libnftnl PATCH 1/2] src: add mnlio API functions, Arturo Borrero Gonzalez
    • Re: [RFC libnftnl PATCH 1/2] src: add mnlio API functions, Pablo Neira Ayuso
  • [RFC libnftnl PATCH 2/2] examples: use new mnlio API in nft-rule-add.c, Arturo Borrero Gonzalez
  • Re: [RFC libnftnl PATCH 0/2] New mnlio functions, Patrick McHardy
• [PATCH] cmd: initialize cmd list and use list_splice_tail() for adding to command list, Patrick McHardy
• [PATCH 0/2] xtables-eb for the compatibility layer, Giuseppe Longo
  • [PATCH 1/2] xtables: bootstrap xtables-eb for nftables, Giuseppe Longo
    • Re: [PATCH 1/2] xtables: bootstrap xtables-eb for nftables, Giuseppe Longo
  • [PATCH 2/2] Operations for bridge family, Giuseppe Longo
  • Re: [PATCH 0/2] xtables-eb for the compatibility layer, Bart De Schuymer
    • Re: [PATCH 0/2] xtables-eb for the compatibility layer, Giuseppe Longo
• [PATCH 0/5] netfilter: nf_tables fixes, Patrick McHardy
  • [PATCH 1/5] netfilter: nf_tables: fix potential oops when dumping sets, Patrick McHardy
    • Re: [PATCH 1/5] netfilter: nf_tables: fix potential oops when dumping sets, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nft_ct: fix missing NFT_CT_L3PROTOCOL key in validity checks, Patrick McHardy
    • Re: [PATCH 2/5] netfilter: nft_ct: fix missing NFT_CT_L3PROTOCOL key in validity checks, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: nf_tables: add AF specific expression support, Patrick McHardy
    • Re: [PATCH 3/5] netfilter: nf_tables: add AF specific expression support, Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts, Patrick McHardy
    • Re: [PATCH 4/5] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts, Pablo Neira Ayuso
      • Re: [PATCH 4/5] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts, Patrick McHardy
        • Re: [PATCH 4/5] netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: nf_tables: add reject module for NFPROTO_INET, Patrick McHardy
    • Re: [PATCH 5/5] netfilter: nf_tables: add reject module for NFPROTO_INET, Pablo Neira Ayuso
• [RFC libnetfilter_log][PATCH] configure: add --without-ipulog option to disable libipulog build, Matthieu Crapet
  • Re: [RFC libnetfilter_log][PATCH] configure: add --without-ipulog option to disable libipulog build, Pablo Neira Ayuso
• netfilter: REJECT: separate reusable code, Patrick McHardy
  • Re: netfilter: REJECT: separate reusable code, Pablo Neira Ayuso
    • Re: netfilter: REJECT: separate reusable code, Patrick McHardy
      • Re: netfilter: REJECT: separate reusable code, Pablo Neira Ayuso
        • Re: netfilter: REJECT: separate reusable code, Arturo Borrero Gonzalez
          • Re: netfilter: REJECT: separate reusable code, Arturo Borrero Gonzalez
          • Re: netfilter: REJECT: separate reusable code, Patrick McHardy
        • Re: netfilter: REJECT: separate reusable code, Patrick McHardy
• [PATCH 0/4 iptables-nftables] compat updates, Pablo Neira Ayuso
  • [PATCH 1/4] configure: rename --disable-xtables to --disable-nftables, Pablo Neira Ayuso
  • [PATCH 2/4] configure: conditional dependencies for nftables-compat, Pablo Neira Ayuso
  • [PATCH 3/4] xtables-restore: remove dependency with libip4tc, Pablo Neira Ayuso
  • [PATCH 4/4] xtables: add xtables-compat-multi for the nftables compatibility layer, Pablo Neira Ayuso
• [GIT PULL nf] IPVS Fixes for v3.14, Simon Horman
  • [PATCH nf] ipvs: fix AF assignment in ip_vs_conn_new(), Simon Horman
  • Re: [GIT PULL nf] IPVS Fixes for v3.14, Pablo Neira Ayuso
• [PATCH] parser: prohibit redefinitions of symbols and verify existance on use, Patrick McHardy
• [PATCH 0/8] nftables: fix and improve error reporting, Patrick McHardy
  • [PATCH 1/8] evaluate: determine implicit relational op before RHS constant checks, Patrick McHardy
  • [PATCH 2/8] scanner: don't update location's line_offset for newlines, Patrick McHardy
  • [PATCH 3/8] scanner: update last_line in struct location, Patrick McHardy
  • [PATCH 4/8] erec: skip includes with INDESC_INTERNAL, Patrick McHardy
  • [PATCH 5/8] parser: close scope when encountering an error in a table or chain block, Patrick McHardy
  • [PATCH 6/8] parser: recover from errors in any block, Patrick McHardy
  • [PATCH 7/8] parser: evaluate commands immediately after parsing, Patrick McHardy
  • [PATCH 8/8] tests: add two tests for error reporting, Patrick McHardy
• [libnetfilter_acct PATCH] xml: fix inversion between pkt and bytes, Eric Leblond
• [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Florian Westphal
    • Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Florian Westphal
        • Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Florian Westphal
  • Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Eric Dumazet
    • Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt, Andrew Vagin
• ULOG Packet Count, Sassy Natan
  • Re: ULOG Packet Count, Eric Leblond
    • Re: ULOG Packet Count, Sassy Natan
      • Re: ULOG Packet Count, Eric Leblond
• [nftables] rebase next-3.14, Arturo Borrero Gonzalez
  • Re: [nftables] rebase next-3.14, Pablo Neira Ayuso
    • Re: [nftables] rebase next-3.14, Pablo Neira Ayuso
      • Re: [nftables] rebase next-3.14, Arturo Borrero Gonzalez
• [PATCH] libxtables: Print meaninful error message for an invalid MAC address string, Mart Frauenlob
  • Re: [PATCH] libxtables: Print meaninful error message for an invalid MAC address string, Pablo Neira Ayuso
• [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, mathieu . poirier
  • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Florian Westphal
    • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Mathieu Poirier
      • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Florian Westphal
        • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Mathieu Poirier
          • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Pablo Neira Ayuso
            • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Mathieu Poirier
              • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Pablo Neira Ayuso
                • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Pablo Neira Ayuso
                • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Mathieu Poirier
                • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Mathieu Poirier
                  • Re: [PATCH RESEND v3] netfilter: xtables: add quota support to nfacct, Pablo Neira Ayuso
• [PATCH 0/2] ipset: forceadd support, Josh Hunt
  • [PATCH 1/2] ipset: add forceadd kernel support for hash set types, Josh Hunt
    • Re: [PATCH 1/2] ipset: add forceadd kernel support for hash set types, Jozsef Kadlecsik
  • [PATCH 2/2] ipset: add forceadd userspace support for hash set types, Josh Hunt
    • Re: [PATCH 2/2] ipset: add forceadd userspace support for hash set types, Jozsef Kadlecsik
      • Re: [PATCH 2/2] ipset: add forceadd userspace support for hash set types, Jozsef Kadlecsik
  • Re: [PATCH 0/2] ipset: forceadd support, Bourne Without
  • Re: [PATCH 0/2] ipset: forceadd support, Bourne Without
• Fwd: OOPS in nf_ct_unlink_expect_report using Polycom RealPresence Mobile, Daniel Borkmann
  • <Possible follow-ups>
  • Re: OOPS in nf_ct_unlink_expect_report using Polycom RealPresence Mobile, Alexey Dobriyan
  • Re: OOPS in nf_ct_unlink_expect_report using Polycom RealPresence Mobile, Pablo Neira Ayuso
    • Re: OOPS in nf_ct_unlink_expect_report using Polycom RealPresence Mobile, astx
• [PATCH]: libnetfilter_log: Uninitialized values in libnetfilter_log.c, Ivan Homoliak
  • Re: [PATCH]: libnetfilter_log: Uninitialized values in libnetfilter_log.c, Pablo Neira Ayuso
  • Fwd: [PATCH]: libnetfilter_log: Uninitialized values in libnetfilter_log.c, Ivan Homoliak
    • Re: Fwd: [PATCH]: libnetfilter_log: Uninitialized values in libnetfilter_log.c, Pablo Neira Ayuso
• [PATCH nftables] mnl: fix inclusion of last rule in batch page, Pablo Neira Ayuso
• [PATCH] extensions: libxt_SYNPROXY: initial manual page, Martin Topholm
  • Re: [PATCH] extensions: libxt_SYNPROXY: initial manual page, Florian Westphal
• [Patch resend nf] ipvs: fix AF assignment in ip_vs_conn_new(), Michal Kubecek
  • Re: [Patch resend nf] ipvs: fix AF assignment in ip_vs_conn_new(), Julian Anastasov
    • Re: [Patch resend nf] ipvs: fix AF assignment in ip_vs_conn_new(), Michal Kubecek
    • [PATCH nf v2] ipvs: fix AF assignment in ip_vs_conn_new(), Michal Kubecek
      • Re: [PATCH nf v2] ipvs: fix AF assignment in ip_vs_conn_new(), Julian Anastasov
        • Re: [PATCH nf v2] ipvs: fix AF assignment in ip_vs_conn_new(), Simon Horman
• TPROXY does not redirect to squid port, Peter Warasin
  • Re: TPROXY does not redirect to squid port, Florian Westphal
• nftables with ipset combined types, Brian Allen Vanderburg II
  • Re: nftables with ipset combined types, Pablo Neira Ayuso
    • Re: nftables with ipset combined types, Patrick Schaaf
      • Re: nftables with ipset combined types, Arturo Borrero Gonzalez
      • Re: nftables with ipset combined types, Pablo Neira Ayuso
        • Re: nftables with ipset combined types, Patrick McHardy
• [ulogd RFC PATCH 0/2] New JSON output plugin, Eric Leblond
  • [ulogd PATCH 1/2] store Common Information Model name in ulogd key, Eric Leblond
  • [ulogd PATCH 2/2] json: introduce new JSON output plugin, Eric Leblond
  • Re: [ulogd RFC PATCH 0/2] New JSON output plugin, Eric Leblond
• [PATCH v3] netfilter: xtables: add quota support to nfacct, mathieu . poirier
• [BUG PATCH] Memory leak on tcp_prot slab with TPROXY and TCP early demux, Holger Eitzenberger
  • <Possible follow-ups>
  • [BUG PATCH] Memory leak on tcp_prot slab with TPROXY and TCP early demux, Holger Eitzenberger
    • Re: [BUG PATCH] Memory leak on tcp_prot slab with TPROXY and TCP early demux, David Miller
• [PATCH RESEND v2 0/1] Add quota capabilities to nfacct, mathieu . poirier
  • [PATCH RESEND v2 1/1] netfilter: xtables: add quota support to nfacct, mathieu . poirier
    • Re: [PATCH RESEND v2 1/1] netfilter: xtables: add quota support to nfacct, Florian Westphal
      • Re: [PATCH RESEND v2 1/1] netfilter: xtables: add quota support to nfacct, Mathieu Poirier
        • Re: [PATCH RESEND v2 1/1] netfilter: xtables: add quota support to nfacct, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: fix racy rule deletion, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: fix racy rule deletion, Patrick McHardy
    • Re: [PATCH] netfilter: nf_tables: fix racy rule deletion, Patrick McHardy
      • Re: [PATCH] netfilter: nf_tables: fix racy rule deletion, Patrick McHardy
        • Re: [PATCH] netfilter: nf_tables: fix racy rule deletion, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_tables: fix racy rule deletion, Patrick McHardy
        • Re: [PATCH] netfilter: nf_tables: fix racy rule deletion, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: fix racy rule deletion, Patrick McHardy
    • Re: [PATCH] netfilter: nf_tables: fix racy rule deletion, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_tables: fix racy rule deletion, Patrick McHardy
• [PATCH] netfilter: nf_tables: fix oops when deleting a chain with references, Patrick McHardy
  • Re: [PATCH] netfilter: nf_tables: fix oops when deleting a chain with references, Pablo Neira Ayuso
• nftables: how to parse optional packet header fields?, James Chapman
  • Re: nftables: how to parse optional packet header fields?, Patrick McHardy
• [Question and PATCH] nfconntrack: clear counter at IPCTNL_MSG_CT_DELETE, Ken-ichirou MATSUZAWA
• [PATCH] iptables: iptables-xml segfault if missing -A, Phil Oester
  • Re: [PATCH] iptables: iptables-xml segfault if missing -A, Pablo Neira Ayuso
• [README] bug fixes only..., David Miller
  • Re: [README] bug fixes only..., Cong Wang
    • Re: [README] bug fixes only..., David Miller
  • Re: [README] bug fixes only..., Jiri Pirko
    • Re: [README] bug fixes only..., David Miller
      • Re: [README] bug fixes only..., Jiri Pirko
• nftables documentation, Patrick McHardy
  • Re: nftables documentation, Andreas Herz
    • Re: nftables documentation, Patrick McHardy
• [PATCH libnetfilter_conntrack] conntrack: fix parsing payload len, Ken-ichirou MATSUZAWA
  • Re: [PATCH libnetfilter_conntrack] conntrack: fix parsing payload len, Pablo Neira Ayuso
• [nft PATCH v3] This patch adds the following operation:, Arturo Borrero Gonzalez
  • Re: [nft PATCH v3] This patch adds the following operation:, Arturo Borrero Gonzalez
  • Re: [nft PATCH v3] This patch adds the following operation:, Patrick McHardy