Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH v2 2/7] netfilter: ipset: Support comments in hash-type ipsets., (continued)
  • Re: [PATCH v2 2/7] netfilter: ipset: Support comments in hash-type ipsets., Jozsef Kadlecsik
    • Re: [PATCH v2 2/7] netfilter: ipset: Support comments in hash-type ipsets., Jozsef Kadlecsik
  • [PATCH v2 4/7] netfilter: ipset: Support comments in the list-type ipset., Oliver
  • [PATCH v2 5/7] ipset: Rework the "fake" argument parsing for ipset restore., Oliver
    • Re: [PATCH v2 5/7] ipset: Rework the "fake" argument parsing for ipset restore., Jozsef Kadlecsik
  • [PATCH v2 6/7] ipset: Support comments in the userspace library., Oliver
    • Re: [PATCH v2 6/7] ipset: Support comments in the userspace library., Jozsef Kadlecsik
  • [PATCH v2 7/7] ipset: Add new userspace set revisions for comment support, Oliver
  • Message not available
    • Re: [PATCH v2 0/7] Add new comments extension to ipset., Oliver
• [PATCH v2 0/2] Add new hash:net,net type to ipset., Oliver
  • [PATCH v2 1/2] netfilter: ipset: Add hash:net,net module to kernel., Oliver
    • Re: [PATCH v2 1/2] netfilter: ipset: Add hash:net,net module to kernel., Jozsef Kadlecsik
  • [PATCH v2 2/2] ipset: Add userspace code to support hash:net,net kernel module., Oliver
    • Re: [PATCH v2 2/2] ipset: Add userspace code to support hash:net,net kernel module., Jozsef Kadlecsik
• [PATCH -nftables 1/3] netfilter: nf_tables: allow to dump all existing sets, Pablo Neira Ayuso
  • [PATCH -nftables 2/3] netfilter: nf_tables: nft_meta: fix socket uid,gid handling, Pablo Neira Ayuso
  • [PATCH -nftables 3/3] netfilter: fix missing dependency, Pablo Neira Ayuso
• Problem compiling nftables kernel, Bjørnar Ness
  • Re: Problem compiling nftables kernel, Pablo Neira Ayuso
• [GIT PULL 0/5] IPVS fixes for v3.12, Simon Horman
  • [PATCH 4/5] ipvs: do not use dest after ip_vs_dest_put in LBLCR, Simon Horman
  • [PATCH 3/5] ipvs: do not use dest after ip_vs_dest_put in LBLC, Simon Horman
  • [PATCH 5/5] ipvs: stats should not depend on CPU 0, Simon Horman
  • [PATCH 2/5] ipvs: make the service replacement more robust, Simon Horman
  • [PATCH 1/5] ipvs: fix overflow on dest weight multiply, Simon Horman
  • Re: [GIT PULL 0/5] IPVS fixes for v3.12, Pablo Neira Ayuso
• Conntrack events using SMP, Sébastien LAVEZE
• [PATCH 1/2] netfilter: nf_tables: attach replacement rule after stale one, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: nf_tables: do not allow deletion/replacement of stale rules, Pablo Neira Ayuso
• [PATCH -nftables v3 1/4] netfilter: nf_tables: get rid of per rule list_head for commits, Pablo Neira Ayuso
  • [PATCH -nftables v3 4/4] netfilter: nf_tables: all rule updates are transactional, Pablo Neira Ayuso
• [PATCH 0/7] netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 3/7] netfilter: ipset: Skip really non-first fragments for IPv6 when getting port/protocol, Pablo Neira Ayuso
  • [PATCH 1/7] netfilter: nf_conntrack: use RCU safe kfree for conntrack extensions, Pablo Neira Ayuso
  • [PATCH 7/7] netfilter: nfnetlink_queue: use network skb for sequence adjustment, Pablo Neira Ayuso
  • [PATCH 2/7] netfilter: nf_nat_proto_icmpv6:: fix wrong comparison in icmpv6_manip_pkt, Pablo Neira Ayuso
  • [PATCH 5/7] netfilter: ipset: Validate the set family and not the set type family at swapping, Pablo Neira Ayuso
  • [PATCH 6/7] netfilter: ipset: Fix serious failure in CIDR tracking, Pablo Neira Ayuso
  • [PATCH 4/7] netfilter: ipset: Consistent userspace testing with nomatch flag, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH 0/7] netfilter fixes for net, Pablo Neira Ayuso
    • Re: [PATCH 0/7] netfilter fixes for net, David Miller
  • [PATCH 0/7] netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: fix connlimit Kconfig prompt string, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: fix wrong byte order in nf_ct_seqadj_set internal information, Pablo Neira Ayuso
      • Re: [PATCH 4/7] netfilter: fix wrong byte order in nf_ct_seqadj_set internal information, Sergei Shtylyov
    • [PATCH 7/7] netfilter: ebt_ip6: fix source and destination matching, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nf_conntrack: decrement global counter after object release, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nft_compat: fix error path in nft_parse_compat(), Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: synproxy: correct wscale option passing, Pablo Neira Ayuso
      • Re: [PATCH 3/7] netfilter: synproxy: correct wscale option passing, Sergei Shtylyov
    • [PATCH 2/7] netfilter: synproxy: send mss option to backend, Pablo Neira Ayuso
    • Re: [PATCH 0/7] netfilter fixes for net, David Miller
  • [PATCH 0/7] netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: nf_tables: restrict nat/masq expressions to nat chain type, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nft_nat: dump attributes if they are set, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nft_nat: NFTA_NAT_REG_ADDR_MAX depends on NFTA_NAT_REG_ADDR_MIN, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: nft_compat: fix hook validation for non-base chains, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nft_nat: insufficient attribute validation, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: nft_compat: validate chain type in match/target, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: missing module license in the nf_reject_ipvX modules, Pablo Neira Ayuso
      • Re: [PATCH 1/7] netfilter: missing module license in the nf_reject_ipvX modules, Sergei Shtylyov
        • Re: [PATCH 1/7] netfilter: missing module license in the nf_reject_ipvX modules, Pablo Neira Ayuso
    • Re: [PATCH 0/7] netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: arptables: use percpu jumpstack, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nfnetlink: keep going batch handling on missing modules, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nf_queue: Don't recompute the hook_list head, Pablo Neira Ayuso
    • [PATCH 6/7] MAINTAINER: add bridge netfilter, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: bridge: Use __in6_dev_get rather than in6_dev_get in br_validate_ipv6, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: bridge: don't leak skb in error paths, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: bridge: fix CONFIG_NF_DEFRAG_IPV4/6 related warnings/errors, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: nf_ct_helper: Fix helper unregister count., Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nfnetlink_queue: fix timestamp attribute, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: conntrack: remove leftover binary sysctl define, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nf_dup_ipv6: set again FLOWI_FLAG_KNOWN_NH at flowi6_flags, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nf_tables: validate NFTA_SET_TABLE parameter, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nf_ct_helper: bail out on duplicated helpers, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: nf_queue: Make the queue_handler pernet, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: xt_SYNPROXY: add missing header to Kbuild, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nf_tables: fix a wrong check to skip the inactive rules, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: nf_tables: reject loops from set element jump to chain, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: xt_SYNPROXY: include missing <linux/types.h>, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: nf_tables: fix wrong destroy anonymous sets if binding fails, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: conntrack: destroy kmemcache on module removal, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: nf_tables: fix wrong check of NFT_SET_MAP in nf_tables_bind_set, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nft_meta: improve the validity check of pkttype set expr, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: ebtables: put module reference when an incorrect extension is found, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: cttimeout: put back l4proto when replacing timeout policy, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: nfnetlink: use list_for_each_entry_safe to delete all objects, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: cttimeout: unlink timeout objs in the unconfirmed ct lists, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nf_tables_netdev: remove redundant ip_hdr assignment, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nf_tables: do not hold reference on netdevice from preparation phase, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nf_tables: meter: pick a set backend that supports updates, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: nf_tables: add missing netlink attrs to policies, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: nf_tables: permit second nat hook if colliding hook is going away, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6}, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nf_tables: cache device name in flowtable object, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: drop template ct when conntrack is skipped., Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nf_tables: Fix for endless loop when dumping ruleset, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nft_flow_offload: fix checking method of conntrack helper, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nft_flow_offload: fix interaction with vrf slave device, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: nf_tables: selective rule dump needs table to be specified, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: ebtables: account ebt_table_info to kmemcg, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: nft_flow_offload: Fix reverse route lookup, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: nf_tables: fix leaking object reference count, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: nf_flow_table: fix offload for flows that are subject to xfrm, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nft_flow_offload: skip tcp rst and fin packets, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: conntrack: Use consistent ct id hash calculation, Pablo Neira Ayuso
    • [PATCH 1/7] selftests: netfilter: extend flowtable test script for ipsec, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nf_flow_table: teardown flow timeout race, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: nf_flow_table: conntrack picks up expired flows, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: nf_tables: use-after-free in failing rule with bound set, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nft_osf: add missing check for DREG attribute, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: conntrack: sctp: use distinct states for new SCTP connections, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nf_tables: add __nft_chain_type_get(), Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nf_tables: autoload modules from the abort path, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: ipset: use bitmap infrastructure completely, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: nf_tables_offload: fix check the chain offload flag, Pablo Neira Ayuso
    • [PATCH 7/7] net: Fix skb->csum update in inet_proto_csum_replace16()., Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: nft_set_pipapo: Separate partial and complete overlap cases on insertion, Pablo Neira Ayuso
    • [PATCH 7/7] selftests: netfilter: add nfqueue test case, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start(), Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nft_fwd_netdev: allow to redirect to ifb via ingress, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: nft_set_rbtree: Detect partial overlaps on insertion, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: nft_fwd_netdev: validate family and chain type, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nf_tables: Allow set back-ends to report partial overlaps on insertion, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: nf_tables: do not update stateful expressions if lookup is inverted, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: xt_IDLETIMER: target v1 - match Android layout, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: ipset: Pass lockdep expression to RCU lists, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nf_tables: reintroduce the NFT_SET_CONCAT flag, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nft_set_rbtree: Drop spurious condition for overlap detection on insertion, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: iptables: Split ipt_unregister_table() into pre_exit and exit helpers., Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: ip6tables: Split ip6t_unregister_table() into pre_exit and exit helpers., Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: Add MODULE_DESCRIPTION entries to kernel modules, Pablo Neira Ayuso
    • [PATCH 7/7] selftests: netfilter: add test case for conntrack helper assignment, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c., Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: iptables: Add a .pre_exit hook in all iptable_foo.c., Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: ipset: fix unaligned atomic access, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, David Miller
  • [PATCH 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/7] ipvs: adjust the debug info in function set_tcp_state, Pablo Neira Ayuso
      • Re: [PATCH 1/7] ipvs: adjust the debug info in function set_tcp_state, patchwork-bot+netdevbpf
    • [PATCH 4/7] netfilter: ebtables: Fixes dropping of small packets in bridge nat, Pablo Neira Ayuso
    • [PATCH 5/7] docs: nf_flowtable: fix typo., Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nf_fwd_netdev: clear timestamp in forwarding path, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create, Pablo Neira Ayuso
    • [PATCH 2/7] netfilter: conntrack: connection timeout after re-register, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: Drop fragmented ndisc packets assembled in netfilter, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter fixes for net, Jakub Kicinski
• ip6_finish_output2 change broke netfilter xt_TEE target, Phil Oester
• [PATCH 1/1] ipset: Add net namespace for ipset, V. Lavrov
  • Re: [PATCH 1/1] ipset: Add net namespace for ipset, Jozsef Kadlecsik
  • <Possible follow-ups>
  • [PATCH 1/1] ipset: Add net namespace for ipset, Vitaly Lavrov
    • Re: [PATCH 1/1] ipset: Add net namespace for ipset, Gao feng
    • Re: [PATCH 1/1] ipset: Add net namespace for ipset, Jozsef Kadlecsik
• [PATCH 0/6] Add new comments extension to ipset., Oliver
  • [PATCH 1/6] netfilter: ipset: Support comments for ipset entries in the core., Oliver
    • Re: [PATCH 1/6] netfilter: ipset: Support comments for ipset entries in the core., Jozsef Kadlecsik
  • [PATCH 2/6] netfilter: ipset: Support comments in hash-type ipsets., Oliver
    • Re: [PATCH 2/6] netfilter: ipset: Support comments in hash-type ipsets., Jozsef Kadlecsik
  • [PATCH 3/6] netfilter: ipset: Support comments in bitmap-type ipsets., Oliver
  • [PATCH 4/6] ipset: Rework the "fake" argument parsing for ipset restore., Oliver
    • Re: [PATCH 4/6] ipset: Rework the "fake" argument parsing for ipset restore., Jozsef Kadlecsik
      • Re: [PATCH 4/6] ipset: Rework the "fake" argument parsing for ipset restore., Oliver
  • [PATCH 5/6] ipset: Support comments in the userspace library., Oliver
    • Re: [PATCH 5/6] ipset: Support comments in the userspace library., Jozsef Kadlecsik
      • Re: [PATCH 5/6] ipset: Support comments in the userspace library., Jozsef Kadlecsik
      • Re: [PATCH 5/6] ipset: Support comments in the userspace library., Oliver
        • Re: [PATCH 5/6] ipset: Support comments in the userspace library., Jozsef Kadlecsik
          • Re: [PATCH 5/6] ipset: Support comments in the userspace library., Oliver
  • [PATCH 6/6] ipset: Add new userspace set revisions for comment support, Oliver
• [PATCH 0/2] Add new hash:net,net type to ipset., Oliver
  • [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel., Oliver
    • Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel., Jozsef Kadlecsik
      • Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel., Oliver
        • Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel., Jozsef Kadlecsik
          • Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel., Oliver
            • Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel., Jozsef Kadlecsik
              • Re: [PATCH 1/2] netfilter: ipset: Add hash:net,net module to kernel., Oliver
  • [PATCH 2/2] ipset: Add userspace code to support hash:net,net kernel module., Oliver
    • Re: [PATCH 2/2] ipset: Add userspace code to support hash:net,net kernel module., Jozsef Kadlecsik
• [PATCH 0/4 -nftables v2] nf_tables atomic rule-set update, Pablo Neira Ayuso
  • [PATCH -nftables v2 1/4] netfilter: nf_tables: get rid of per rule list_head for commits, Pablo Neira Ayuso
  • [PATCH -nftables v2 2/4] netfilter: nf_tables: use per netns commit list, Pablo Neira Ayuso
  • [PATCH -nftables v2 3/4] netfilter: nfnetlink: add batch support and use it from nf_tables, Pablo Neira Ayuso
  • [PATCH -nftables v2 4/4] netfilter: nf_tables: all rule updates are transactional, Pablo Neira Ayuso
• nfnetlink_queue: shouldn't it be entry->skb?, Gao feng
  • Re: nfnetlink_queue: shouldn't it be entry->skb?, Pablo Neira Ayuso
• [libnftables PATCH] examples: add nft-ruleset-get, Arturo Borrero Gonzalez
• [ANNOUNCE] 10th Netfilter Workshop in Montpellier, France, Eric Leblond
  • <Possible follow-ups>
  • [ANNOUNCE] 10th Netfilter Workshop in Montpellier, France, Eric Leblond
• [libnftables PATCH] src: add ruleset API, Arturo Borrero Gonzalez
• [PATCH 0/4] ipset patches for nf, Jozsef Kadlecsik
  • [PATCH 3/4] netfilter: ipset: Validate the set family and not the set type family at swapping, Jozsef Kadlecsik
  • [PATCH 4/4] netfilter: ipset: Fix serious failure in CIDR tracking, Jozsef Kadlecsik
  • [PATCH 2/4] netfilter: ipset: Consistent userspace testing with nomatch flag, Jozsef Kadlecsik
  • [PATCH 1/4] netfilter: ipset: Skip really non-first fragments for IPv6 when getting port/protocol, Jozsef Kadlecsik
  • Re: [PATCH 0/4] ipset patches for nf, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH 0/4] ipset patches for nf, Jozsef Kadlecsik
    • [PATCH 1/4] netfilter: xt_set: Check hook mask correctly, Jozsef Kadlecsik
    • [PATCH 3/4] netfilter: ipset: Limit max timeout value, Jozsef Kadlecsik
    • [PATCH 4/4] netfilter: ipset: forbid family for hash:mac sets, Jozsef Kadlecsik
    • [PATCH 2/4] netfilter: ipset: List timing out entries with "timeout 1" instead of zero, Jozsef Kadlecsik
    • Re: [PATCH 0/4] ipset patches for nf, Pablo Neira Ayuso
• [libnftables PATCH] src: xml: refactor XML parsing code, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] src: xml: refactor XML parsing code, Pablo Neira Ayuso
• [libnftables PATCH] build: fix build error, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] build: fix build error, Pablo Neira Ayuso
• [nftables 0/4] misc improvements and cleaning, Eric Leblond
  • [nftables PATCH 4/4] display family in table listing., Eric Leblond
  • [nftables PATCH 1/4] nat: add mandatory family attribute, Eric Leblond
  • [nftables PATCH 2/4] Suppress non working examples., Eric Leblond
  • [nftables PATCH 3/4] Update chain creation format., Eric Leblond
    • Re: [nftables PATCH 3/4] Update chain creation format., Florian Westphal
      • Re: [nftables PATCH 3/4] Update chain creation format., Eric Leblond
  • Re: [nftables 0/4] misc improvements and cleaning, Pablo Neira Ayuso
• [PATCH v5] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
  • Re: [PATCH v5] netfilter: ipset: Fix serious failure in CIDR tracking, Jozsef Kadlecsik
    • Re: [PATCH v5] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
      • Re: [PATCH v5] netfilter: ipset: Fix serious failure in CIDR tracking, Jozsef Kadlecsik
• [PATCH nftables kernel 1/3] netfilter: nft_log: group is u16, snaplen u32, Florian Westphal
  • [PATCH libnftables 2/3] expr: log: use real length when fetching attributes, Florian Westphal
    • Re: [PATCH libnftables 2/3] expr: log: use real length when fetching attributes, Pablo Neira Ayuso
  • [PATCH nftables 3/3] log: s/threshold/queue-threshold/, Florian Westphal
    • Re: [PATCH nftables 3/3] log: s/threshold/queue-threshold/, Pablo Neira Ayuso
  • Re: [PATCH nftables kernel 1/3] netfilter: nft_log: group is u16, snaplen u32, Pablo Neira Ayuso
• [arptables] please include license file in tarball, Jiri Popelka
• [PATCH] netfilter: ipv6: icmpv6_manip_pkt comparing codes to types, Phil Oester
  • Re: [PATCH] netfilter: ipv6: icmpv6_manip_pkt comparing codes to types, Pablo Neira Ayuso
• [PATCH v4] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
• [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
  • Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking, Jozsef Kadlecsik
    • Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
      • Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking, Jozsef Kadlecsik
        • Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
          • Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking, Jozsef Kadlecsik
            • Re: [PATCH v3] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
• [PATCH v2] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
  • Re: [PATCH v2] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
• [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions, Michal Kubecek
  • Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions, Phil Oester
    • Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions, Michal Kubecek
      • Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions, Phil Oester
        • Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions, Michal Kubecek
          • Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions, Eric Dumazet
        • Re: [PATCH nf] netfilter: use RCU safe kfree for conntrack extensions, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
  • Re: [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
      • Re: [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking, Jozsef Kadlecsik
        • Re: [PATCH] netfilter: ipset: Fix serious failure in CIDR tracking, Oliver
• [libmnl PATCH] configure: uclinux is also linux, Gustavo Zacarias
  • [ipset PATCH] configure: uclinux is also linux, Gustavo Zacarias
    • Re: [ipset PATCH] configure: uclinux is also linux, Jozsef Kadlecsik
  • [libnetfilter_acct PATCH] configure: uclinux is also linux, Gustavo Zacarias
  • [libnfnetlink PATCH] configure: uclinux is also linux, Gustavo Zacarias
  • [libnetfilter_conntrack PATCH] configure: uclinux is also linux, Gustavo Zacarias
  • [libnetfilter_log PATCH] configure: uclinux is also linux, Gustavo Zacarias
  • [libnetfilter_cthelper PATCH] configure: uclinux is also linux, Gustavo Zacarias
  • [libnetfilter_cttimeout PATCH] configure: uclinux is also linux, Gustavo Zacarias
  • [libnetfilter_queue PATCH] configure: uclinux is also linux, Gustavo Zacarias
  • [nfacct PATCH] configure: uclinux is also linux, Gustavo Zacarias
  • Re: [libmnl PATCH] configure: uclinux is also linux, Pablo Neira Ayuso
• BUG: kernel 3.10 + ipset + NET_NS, V. Lavrov
  • Re: BUG: kernel 3.10 + ipset + NET_NS, Jozsef Kadlecsik
• added new hash:ip,net ipset type, David Gervais
• netfilter: active obj WARN when cleaning up, Sasha Levin
  • Re: netfilter: active obj WARN when cleaning up, Sasha Levin
    • Re: netfilter: active obj WARN when cleaning up, Pablo Neira Ayuso
      • Re: netfilter: active obj WARN when cleaning up, Sasha Levin
      • Re: netfilter: active obj WARN when cleaning up, Thomas Gleixner
        • Re: netfilter: active obj WARN when cleaning up, Russell King - ARM Linux
          • Re: netfilter: active obj WARN when cleaning up, Thomas Gleixner
            • Re: netfilter: active obj WARN when cleaning up, Russell King - ARM Linux
              • Re: netfilter: active obj WARN when cleaning up, Russell King - ARM Linux
                • Re: netfilter: active obj WARN when cleaning up, Thomas Gleixner
                  • Re: netfilter: active obj WARN when cleaning up, Greg KH
                    • Re: netfilter: active obj WARN when cleaning up, Christoph Lameter
                      • Re: netfilter: active obj WARN when cleaning up, Greg KH
                        • Re: netfilter: active obj WARN when cleaning up, Christoph Lameter
                          • Re: netfilter: active obj WARN when cleaning up, Greg KH
                            • Re: netfilter: active obj WARN when cleaning up, Christoph Lameter
                              • Re: netfilter: active obj WARN when cleaning up, Greg KH
                                • Re: netfilter: active obj WARN when cleaning up, Christoph Lameter
                                  • Re: netfilter: active obj WARN when cleaning up, Greg KH
                                    • Re: netfilter: active obj WARN when cleaning up, Christoph Lameter
                                      • Re: netfilter: active obj WARN when cleaning up, Greg KH
                                        • Re: netfilter: active obj WARN when cleaning up, Christoph Lameter
                                          • Re: netfilter: active obj WARN when cleaning up, Sasha Levin
                                            • Re: netfilter: active obj WARN when cleaning up, Christoph Lameter
                                              • Re: netfilter: active obj WARN when cleaning up, Sasha Levin
                                            • Re: netfilter: active obj WARN when cleaning up, Thomas Gleixner
                                            • Re: netfilter: active obj WARN when cleaning up, Bart Van Assche
                                              • Re: netfilter: active obj WARN when cleaning up, Bart Van Assche
              • Re: netfilter: active obj WARN when cleaning up, Thomas Gleixner
• [iptables PATCH] docs: use generic syslog reference in libxt_LOG.man, Laurence J. Lane
  • Re: [iptables PATCH] docs: use generic syslog reference in libxt_LOG.man, Pablo Neira Ayuso
• [iptables PATCH] build: add DESTDIR to vx_bin_links, Laurence J. Lane
  • Re: [iptables PATCH] build: add DESTDIR to vx_bin_links, Jan Engelhardt
    • Re: [iptables PATCH] build: add DESTDIR to vx_bin_links, Laurence J. Lane
      • Re: [iptables PATCH] build: add DESTDIR to vx_bin_links, Maciej Żenczykowski
• Fwd: tproxy and NAT incompatible?, umesh sirsiwal
• [iptables-nftables PATCH 0/3] NFPROTO_ARP and arp mangle target support (+ one minor fix), Tomasz Bursztyka
  • [iptables-nftables PATCH 1/3] nft: Fix a minor compilation warning, Tomasz Bursztyka
  • [iptables-nftables PATCH 2/3] libxtables: Add NFPROTO_ARP support for libarpt_* prefixed extensions, Tomasz Bursztyka
  • [iptables-nftables PATCH 3/3] libxtables: Port libarptc mangle target into libxtables, Tomasz Bursztyka
  • Re: [iptables-nftables PATCH 0/3] NFPROTO_ARP and arp mangle target support (+ one minor fix), Tomasz Bursztyka
    • Re: [iptables-nftables PATCH 0/3] NFPROTO_ARP and arp mangle target support (+ one minor fix), Pablo Neira Ayuso
      • Re: [iptables-nftables PATCH 0/3] NFPROTO_ARP and arp mangle target support (+ one minor fix), Tomasz Bursztyka
• Re: linux-next: Tree for Sep 5 (netfilter: xt_socket.c), Randy Dunlap
  • Re: linux-next: Tree for Sep 5 (netfilter: xt_socket.c), David Miller
    • Re: linux-next: Tree for Sep 5 (netfilter: xt_socket.c), Randy Dunlap
• [PATCH 1/3] conntrack: support multiple -l options, Florian Westphal
  • [PATCH 3/3] conntrack: do not exit when update returns an error, Florian Westphal
  • [PATCH 2/3] conntrack: support add/delete of conntrack labels, Florian Westphal
• [libnftables PATCH] src: xml: get rid of mxml parsing flags, Arturo Borrero Gonzalez
• Re: linux-next: Tree for Sep 4 (netfilter: xt_TPROXY), Randy Dunlap
  • Re: linux-next: Tree for Sep 4 (netfilter: xt_TPROXY), Florian Westphal
• merge window warning, David Miller
  • Re: merge window warning, Jeff Kirsher
    • Re: merge window warning, David Miller
• [libnftables PATCH] set: xml: fix key_type parsing, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] set: xml: fix key_type parsing, Pablo Neira Ayuso
    • Re: [libnftables PATCH] set: xml: fix key_type parsing, Arturo Borrero Gonzalez
      • Re: [libnftables PATCH] set: xml: fix key_type parsing, Pablo Neira Ayuso
• [PATCH 0/4] netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 1/4] netfilter: more strict TCP flag matching in SYNPROXY, Pablo Neira Ayuso
  • [PATCH 4/4] netfilter: xt_TCPMSS: correct return value in tcpmss_mangle_packet, Pablo Neira Ayuso
  • [PATCH 3/4] netfilter: SYNPROXY: let unrelated packets continue, Pablo Neira Ayuso
  • [PATCH 2/4] netfilter: synproxy_core: fix warning in __nf_ct_ext_add_length(), Pablo Neira Ayuso
  • Re: [PATCH 0/4] netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 0/4] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: default CONFIG_NETFILTER_INGRESS to y, Pablo Neira Ayuso
      • Re: [PATCH 2/4] netfilter: default CONFIG_NETFILTER_INGRESS to y, Jan Engelhardt
        • Re: [PATCH 2/4] netfilter: default CONFIG_NETFILTER_INGRESS to y, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: remove unused comefrom hookmask argument, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_tables: add netdev table to filter from ingress, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: nf_tables: allow to bind table to net_device, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter updates for net-next, David Miller
• [iptables-nftables PATCH 1/1 v4] nft: refactoring parse operations for more genericity, Giuseppe Longo
  • Re: [iptables-nftables PATCH 1/1 v4] nft: refactoring parse operations for more genericity, Pablo Neira Ayuso
• [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications, valentina . giusti
  • [PATCH 4/4] nfacct: Add man page section for the 'notify' commands, valentina . giusti
  • [PATCH 2/4] libnetfilter-acct: Introduce support for notifications, valentina . giusti
    • Re: [PATCH 2/4] libnetfilter-acct: Introduce support for notifications, Pablo Neira Ayuso
      • Re: [PATCH 2/4] libnetfilter-acct: Introduce support for notifications, Valentina Giusti
  • [PATCH 1/4] nfnetlink_acct: Traffic-based and periodic notifications, valentina . giusti
  • [PATCH 3/4] nfacct: Add 'notify' commands for notifications, valentina . giusti
  • Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications, Pablo Neira Ayuso
    • Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications, Valentina Giusti
      • Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications, Pablo Neira Ayuso
        • Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications, Valentina Giusti
          • Re: [PATCH 0/4] [RFC] nfnetlink_acct: Traffic-based and periodic notifications, Pablo Neira Ayuso
• [nftables tool v2 PATCH 0/4] Easier base chain declaration, Tomasz Bursztyka
  • [nftables tool v2 PATCH 1/4] src: Wrap netfilter hooks around human readable strings, Tomasz Bursztyka
    • Re: [nftables tool v2 PATCH 1/4] src: Wrap netfilter hooks around human readable strings, Pablo Neira Ayuso
  • [nftables tool v2 PATCH 2/4] src: Ensure given base chain type is a valid one, Tomasz Bursztyka
    • Re: [nftables tool v2 PATCH 2/4] src: Ensure given base chain type is a valid one, Pablo Neira Ayuso
      • Re: [nftables tool v2 PATCH 2/4] src: Ensure given base chain type is a valid one, Tomasz Bursztyka
        • Re: [nftables tool v2 PATCH 2/4] src: Ensure given base chain type is a valid one, Pablo Neira Ayuso
  • [nftables tool v2 PATCH 3/4] src: Add priority keyword on base chain description, Tomasz Bursztyka
    • Re: [nftables tool v2 PATCH 3/4] src: Add priority keyword on base chain description, Pablo Neira Ayuso
  • [nftables tool v2 PATCH 4/4] tests: Update bate chain creation according to latest syntax changes, Tomasz Bursztyka
    • Re: [nftables tool v2 PATCH 4/4] tests: Update bate chain creation according to latest syntax changes, Pablo Neira Ayuso
• [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays., Oliver
  • Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays., Jozsef Kadlecsik
    • Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays., Jozsef Kadlecsik
      • Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays., Oliver
        • Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays., Jozsef Kadlecsik
          • Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays., Oliver
            • Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays., Jozsef Kadlecsik
              • Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays., Oliver
                • Re: [PATCH v2] netfilter: ipset: refactor hash types to use address/cidr arrays., Jozsef Kadlecsik
• [PATCH 1/3] conntrack: minor cleanup, Florian Westphal
  • [PATCH 2/3] conntrack: favor multiple -l options over -l foo,bar, Florian Westphal
    • Re: [PATCH 2/3] conntrack: favor multiple -l options over -l foo,bar, Pablo Neira Ayuso
  • [PATCH 3/3] conntrack: allow adding/deleting labels from conntrack entries, Florian Westphal
• [iptables-nftables PATCH v3] nft: refactoring parse operations for more genericity, Giuseppe Longo
  • Re: [iptables-nftables PATCH v3] nft: refactoring parse operations for more genericity, Giuseppe Longo
• [PATCH] netfilter: ipset: refactor hash types to use address/cidr arrays., Oliver
  • Re: [PATCH] netfilter: ipset: refactor hash types to use address/cidr arrays., Oliver
• [PATCH 0/2 v2] cleanup and shrink ipset handling code., Oliver
  • [PATCH 1/2 v2] netfilter: ipset: rework hash ext. handling to be more manageable., Oliver
  • [PATCH 2/2 v2] netfilter: ipset: rework bitmap ext. handling to be more manageable., Oliver
  • Re: [PATCH 0/2 v2] cleanup and shrink ipset handling code., Oliver
• [PATCH net-next 2/2] net: use reciprocal_divide instead of reimplementing it, Daniel Borkmann
  • Re: [PATCH net-next 2/2] net: use reciprocal_divide instead of reimplementing it, Eric Dumazet
    • Re: [PATCH net-next 2/2] net: use reciprocal_divide instead of reimplementing it, Daniel Borkmann
• [PATCH net] bridge: netfiler: update find_inlist_lock_noload() more accurate, Ding Tianhong
• [PATCH 0/1] netfilter: Ignore bogus SACK option values in TCP conntrack, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack, Jozsef Kadlecsik
    • Re: [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack, Corey Hickey
    • Re: [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack, Phil Oester
      • Re: [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack, Jozsef Kadlecsik
        • Re: [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack, Phil Oester
          • Re: [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack, Jozsef Kadlecsik
            • Re: [PATCH 1/1] netfilter: Ignore bogus SACK option values in TCP conntrack, Phil Oester
• [iptables-nftables PATCH v2] nft: refactoring parse operations for more genericity, Giuseppe Longo
  • Re: [iptables-nftables PATCH v2] nft: refactoring parse operations for more genericity, Pablo Neira Ayuso
  • Re: [iptables-nftables PATCH v2] nft: refactoring parse operations for more genericity, Tomasz Bursztyka
• [PATCH 0/6] Ipset comment extension - provide annotation of ipset entries, Oliver
  • [PATCH 1/6] netfilter: ipset: Support comments for ipset entries in the core., Oliver
    • Re: [PATCH 1/6] netfilter: ipset: Support comments for ipset entries in the core., Oliver
    • Re: [PATCH 1/6] netfilter: ipset: Support comments for ipset entries in the core., Oliver
  • [PATCH 3/6] netfilter: ipset: Support comments in bitmap-type ipsets., Oliver
  • [PATCH 2/6] netfilter: ipset: Support comments in hash-type ipsets., Oliver
  • [PATCH 4/6] ipset: Rework the "fake" argument parsing for ipset restore., Oliver
  • [PATCH 5/6] ipset: Support comments in the userspace library., Oliver
  • [PATCH 6/6] ipset: Add new userspace set revisions for comment support, Oliver
  • [PATCH 1/6 v2] netfilter: ipset: Support comments for ipset entries in the core., Oliver
  • Re: [PATCH 0/6] Ipset comment extension - provide annotation of ipset entries, Jozsef Kadlecsik
    • Re: [PATCH 0/6] Ipset comment extension - provide annotation of ipset entries, Oliver
      • Re: [PATCH 0/6] Ipset comment extension - provide annotation of ipset entries, Jozsef Kadlecsik
• [PATCH v3] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Oliver
  • [PATCH v3] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Oliver
• [libnftables PATCH] chain: xml: optional attributes, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] chain: xml: optional attributes, Pablo Neira Ayuso
• [PATCH v2 0/2] ipset: rework extension handling to be more manageable., Oliver
  • [PATCH v2 1/2] netfilter: ipset: rework hash ext. handling to be more manageable., Oliver
  • [PATCH v2 2/2] netfilter: ipset: rework bitmap ext. handling to be more manageable., Oliver
  • Re: [PATCH v2 0/2] ipset: rework extension handling to be more manageable., Jozsef Kadlecsik
    • Re: [PATCH v2 0/2] ipset: rework extension handling to be more manageable., Oliver
• [PATCH] netfilter: xt_TCPMSS: correct return value in tcpmss_mangle_packet, Phil Oester
  • Re: [PATCH] netfilter: xt_TCPMSS: correct return value in tcpmss_mangle_packet, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: rework extensions handling to be more manageable., Oliver
• [iptables-nftables PATCH] nft: refactoring parse operations for more genericity, Giuseppe Longo
  • Re: [iptables-nftables PATCH] nft: refactoring parse operations for more genericity, Pablo Neira Ayuso
  • Re: [iptables-nftables PATCH] nft: refactoring parse operations for more genericity, Tomasz Bursztyka
• [PATCH] [RFC] xt_owner: enable xt_owner on INPUT chain, valentina . giusti
  • [PATCH] xt_owner: enable xt_owner on INPUT chain, valentina . giusti
    • Re: [PATCH] xt_owner: enable xt_owner on INPUT chain, Pablo Neira Ayuso
      • Re: [PATCH] xt_owner: enable xt_owner on INPUT chain, Valentina Giusti
  • Re: [PATCH] [RFC] xt_owner: enable xt_owner on INPUT chain, Phil Oester
    • Re: [PATCH] [RFC] xt_owner: enable xt_owner on INPUT chain, Florian Westphal
• [nftables-kernel PATCH] netfilter: nf_tables: Fixes how a table is checked to be in use, Tomasz Bursztyka
  • Re: [nftables-kernel PATCH] netfilter: nf_tables: Fixes how a table is checked to be in use, Pablo Neira Ayuso
    • Re: [nftables-kernel PATCH] netfilter: nf_tables: Fixes how a table is checked to be in use, Tomasz Bursztyka
      • Re: [nftables-kernel PATCH] netfilter: nf_tables: Fixes how a table is checked to be in use, Pablo Neira Ayuso
        • Re: [nftables-kernel PATCH] netfilter: nf_tables: Fixes how a table is checked to be in use, Tomasz Bursztyka
• [PATCH nf-next] Second round of IPVS updates for v3.12, Simon Horman
  • [PATCH nf-next] ipvs: fix the IPVS_CMD_ATTR_MAX definition, Simon Horman
• [PATCH nf 0/5] IPVS fixes for v3.11, Simon Horman
  • [PATCH nf 5/5] ipvs: fix overflow on dest weight multiply, Simon Horman
  • [PATCH nf 4/5] ipvs: stats should not depend on CPU 0, Simon Horman
  • [PATCH nf 3/5] ipvs: make the service replacement more robust, Simon Horman
  • [PATCH nf 2/5] ipvs: do not use dest after ip_vs_dest_put in LBLCR, Simon Horman
  • [PATCH nf 1/5] ipvs: do not use dest after ip_vs_dest_put in LBLC, Simon Horman
  • Re: [PATCH nf 0/5] IPVS fixes for v3.11, Pablo Neira Ayuso
    • Re: [PATCH nf 0/5] IPVS fixes for v3.11, Simon Horman
      • Re: [PATCH nf 0/5] IPVS fixes for v3.11, Simon Horman
• xt_recent.c bug - and cleanup, Valentijn Sessink
  • Re: xt_recent.c bug - and cleanup, Phil Oester
    • Re: xt_recent.c bug - and cleanup, Valentijn Sessink
      • Re: xt_recent.c bug - and cleanup, Phil Oester
        • Re: xt_recent.c bug - and cleanup, Valentijn Sessink
• [nf-next PATCH] netfilter: SYNPROXY let unrelated packets continue, Jesper Dangaard Brouer
  • Re: [nf-next PATCH] netfilter: SYNPROXY let unrelated packets continue, Patrick McHardy
  • Re: [nf-next PATCH] netfilter: SYNPROXY let unrelated packets continue, Pablo Neira Ayuso
• [PATCH] netfilter: SYNPROXY core: fix warning in __nf_ct_ext_add_length(), Patrick McHardy
  • Re: [PATCH] netfilter: SYNPROXY core: fix warning in __nf_ct_ext_add_length(), Jesper Dangaard Brouer
    • Re: [PATCH] netfilter: SYNPROXY core: fix warning in __nf_ct_ext_add_length(), Pablo Neira Ayuso
  • Re: [PATCH] netfilter: SYNPROXY core: fix warning in __nf_ct_ext_add_length(), Pablo Neira Ayuso
• [nftables tool PATCH] INSTALL: Update dependency list and repository URLs, Tomasz Bursztyka
  • Re: [nftables tool PATCH] INSTALL: Update dependency list and repository URLs, Pablo Neira Ayuso
• [nf-next PATCH] netfilter: Extend SYNPROXY with a --continue option, Jesper Dangaard Brouer
  • Re: [nf-next PATCH] netfilter: Extend SYNPROXY with a --continue option, Patrick McHardy
    • Re: [nf-next PATCH] netfilter: Extend SYNPROXY with a --continue option, Jesper Dangaard Brouer
• [nf-next PATCH] netfilter: more strict TCP flag matching in SYNPROXY, Jesper Dangaard Brouer
  • Re: [nf-next PATCH] netfilter: more strict TCP flag matching in SYNPROXY, Patrick McHardy
• [nftables tool PATCH 0/5] Easier base chain declaration, Tomasz Bursztyka
  • [nftables tool PATCH 1/5] src: Fix base chain print out, Tomasz Bursztyka
    • Re: [nftables tool PATCH 1/5] src: Fix base chain print out, Pablo Neira Ayuso
  • [nftables tool PATCH 2/5] src: Wrap netfilter hooks around human readable strings, Tomasz Bursztyka
    • Re: [nftables tool PATCH 2/5] src: Wrap netfilter hooks around human readable strings, Pablo Neira Ayuso
      • Re: [nftables tool PATCH 2/5] src: Wrap netfilter hooks around human readable strings, Tomasz Bursztyka
  • [nftables tool PATCH 3/5] syntax: Add priority keyword on base chain description, Tomasz Bursztyka
  • [nftables tool PATCH 4/5] src: Ensure given base chain type is a valid one, Tomasz Bursztyka
  • [nftables tool PATCH 5/5] tests: Update bate chain creation according to latest syntax changes, Tomasz Bursztyka
• [PATCH] tcp: tcp_make_synack() should use sock_wmalloc, Phil Oester
  • Re: [PATCH] tcp: tcp_make_synack() should use sock_wmalloc, David Miller
• [PATCH 0/8] netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 1/8] netfilter: ip[6]t_REJECT: tcp-reset using wrong MAC source if bridged, Pablo Neira Ayuso
  • [PATCH 2/8] netfilter: nf_defrag_ipv6.o included twice, Pablo Neira Ayuso
  • [PATCH 8/8] netfilter: ctnetlink: fix uninitialized variable, Pablo Neira Ayuso
  • [PATCH 6/8] net: syncookies: export cookie_v6_init_sequence/cookie_v6_check, Pablo Neira Ayuso
  • [PATCH 4/8] net: syncookies: export cookie_v4_init_sequence/cookie_v4_check, Pablo Neira Ayuso
  • [PATCH 7/8] netfilter: add IPv6 SYNPROXY target, Pablo Neira Ayuso
  • [PATCH 5/8] netfilter: add SYNPROXY core/target, Pablo Neira Ayuso
  • [PATCH 3/8] netfilter: nf_conntrack: make sequence number adjustments usuable without NAT, Pablo Neira Ayuso
  • Re: [PATCH 0/8] netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 0/8] netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: conntrack: adjust nf_conntrack_buckets default value, Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: conntrack: Flush connections with a given mark, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: conntrack: Remove nf_ct_conntrack_flush_report, Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warnings, Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: nf_ct_seqadj: print ack seq in the right host byte order, Pablo Neira Ayuso
    • [PATCH 4/8] netfilter: nfnetlink: remove redundant variable nskb, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: xt_osf: Use continue to reduce indentation, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: log: remove unnecessary sizeof(char), Pablo Neira Ayuso
    • Re: [PATCH 0/8] netfilter updates for net-next, David Miller
      • Re: [PATCH 0/8] netfilter updates for net-next, Oliver Hartkopp
        • Re: [PATCH 0/8] netfilter updates for net-next, Pablo Neira Ayuso
          • Re: [PATCH 0/8] netfilter updates for net-next, Oliver Hartkopp
  • [PATCH 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: Remove uses of seq_<foo> return values, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: bridge: remove BRNF_STATE_BRIDGED flag, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: ip6t_REJECT: check for IP6T_F_PROTO, Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: nft_rbtree: fix locking, Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: nf_tables: reject NFT_SET_ELEM_INTERVAL_END flag for non-interval sets, Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: bridge: kill nf_bridge_pad, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: bridge: query conntrack about skb dnat, Pablo Neira Ayuso
    • [PATCH 4/8] netfilter: nf_tables: consolidate error path of nf_tables_newtable(), Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter updates for net-next, David Miller
  • [PATCH 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: nf_conntrack: Uses pr_fmt() for logging., Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: ipv6: unnecessary to check whether ip6_route_output() returns NULL, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: conntrack: move expectation event helper to ecache.c, Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: conntrack: de-inline nf_conntrack_eventmask_report, Pablo Neira Ayuso
    • [PATCH 4/8] netfilter: bridge: nf queue verdict to use NFQA_VLAN and NFQA_L2HDR, Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: ip6t_SYNPROXY: remove magic number for hop_limit, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: bridge: add nf_afinfo to enable queuing to userspace, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to userspace, Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter updates for net-next, David Miller
  • [PATCH 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: cttimeout: decouple timeout policy from nfnetlink_cttimeout object, Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: nft_ct: add ct timeout support, Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: nft_ct: enable conntrack for helpers, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: nfnetlink_osf: fix using plain integer as NULL warning, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: nft_osf: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ, Pablo Neira Ayuso
    • [PATCH 4/8] netfilter: remove ifdef around cttimeout in struct nf_conntrack_l4proto, Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: nfnetlink_osf: add missing enum in nfnetlink_osf uapi header, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack, Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter updates for net-next, David Miller
  • [PATCH 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 1/8] netfilter: nf_tables: Introduce new 64-bit helper register functions, Pablo Neira Ayuso
    • [PATCH 7/8] netfilter: nft_quota: add quota object update support, Pablo Neira Ayuso
    • [PATCH 8/8] netfilter: nf_tables: fix possible null-pointer dereference in object update, Pablo Neira Ayuso
    • [PATCH 6/8] netfilter: nf_tables: Introduce stateful object update operation, Pablo Neira Ayuso
    • [PATCH 2/8] netfilter: nft_meta: support for time matching, Pablo Neira Ayuso
    • [PATCH 5/8] netfilter: not mark a spinlock as __read_mostly, Pablo Neira Ayuso
    • [PATCH 3/8] netfilter: nfnetlink_log: add support for VLAN information, Pablo Neira Ayuso
    • [PATCH 4/8] netfilter: nft_dynset: support for element deletion, Pablo Neira Ayuso
    • Re: [PATCH 0/8] Netfilter updates for net-next, David Miller
• Netfilter owner match breakage, Phil Oester
  • Re: Netfilter owner match breakage, Eric Dumazet
• spurious errors with protocol names used as chain names, Laurence J. Lane
• [libnftables PATCH 1/4] tests: remove unnecessary variable initialization, Alvaro Neira
  • [libnftables PATCH 2/4] set: Add json parser support, Alvaro Neira
    • Re: [libnftables PATCH 2/4] set: Add json parser support, Pablo Neira Ayuso
  • [libnftables PATCH 3/4] tests: set: add json parsing support, Alvaro Neira
    • Re: [libnftables PATCH 3/4] tests: set: add json parsing support, Pablo Neira Ayuso
  • [libnftables PATCH 4/4] examples: Add nft-set-json-add, Alvaro Neira
    • Re: [libnftables PATCH 4/4] examples: Add nft-set-json-add, Pablo Neira Ayuso
  • Re: [libnftables PATCH 1/4] tests: remove unnecessary variable initialization, Pablo Neira Ayuso
• [PATCH next] netfilter: ctnetlink: fix uninitialized variable, Florian Westphal
  • Re: [PATCH next] netfilter: ctnetlink: fix uninitialized variable, Pablo Neira Ayuso
• [PATCH] extensions: add SYNPROXY extension, Patrick McHardy
• [PATCH 0/5] netfilter: SYNPROXY target v3, Patrick McHardy
  • [PATCH 5/5] netfilter: add IPv6 SYNPROXY target, Patrick McHardy
  • [PATCH 1/5] netfilter: nf_conntrack: make sequence number adjustments usuable without NAT, Patrick McHardy
  • [PATCH 4/5] net: syncookies: export cookie_v6_init_sequence/cookie_v6_check, Patrick McHardy
  • [PATCH 2/5] net: syncookies: export cookie_v4_init_sequence/cookie_v4_check, Patrick McHardy
  • [PATCH 3/5] netfilter: add SYNPROXY core/target, Patrick McHardy
  • Re: [PATCH 0/5] netfilter: SYNPROXY target v3, Jesper Dangaard Brouer
    • Re: [PATCH 0/5] netfilter: SYNPROXY target v3, Patrick McHardy
    • Re: [PATCH 0/5] netfilter: SYNPROXY target v3, Jesper Dangaard Brouer
  • Re: [PATCH 0/5] netfilter: SYNPROXY target v3, Martin Topholm
  • Re: [PATCH 0/5] netfilter: SYNPROXY target v3, Pablo Neira Ayuso
• [PATCH] iptables: libxt_recent.{c,man} dead URL, Laurence J. Lane
  • Re: [PATCH] iptables: libxt_recent.{c,man} dead URL, Florian Westphal
• travelling..., David Miller
  • Re: travelling..., Hannes Frederic Sowa
    • Re: travelling..., Antonio Quartulli
      • Re: travelling..., David Miller
  • <Possible follow-ups>
  • travelling..., David Miller
• [PATCH] netfilter: avoid array overflow in nf_register_hook, Dong Fang
  • Re: [PATCH] netfilter: avoid array overflow in nf_register_hook, Eric Dumazet
  • <Possible follow-ups>
  • [PATCH] netfilter: avoid array overflow in nf_register_hook, Dong Fang
    • Re: [PATCH] netfilter: avoid array overflow in nf_register_hook, Sergei Shtylyov
• [libnftables PATCH] rule: complete print/parse position attr, Arturo Borrero Gonzalez
• [PATCH RFC 0/6] SYNPROXY target v2, Patrick McHardy
  • [PATCH 5/6] netfilter: add IPv6 SYNPROXY target, Patrick McHardy
  • [PATCH 3/6] netfilter: add SYNPROXY core/target, Patrick McHardy
  • [PATCH 4/6] net: syncookies: export cookie_v6_init_sequence/cookie_v6_check, Patrick McHardy
  • [PATCH 6/6] netfilter: synproxy: fix handling of retransmissions before established state, Patrick McHardy
  • [PATCH 2/6] net: syncookies: export cookie_v4_init_sequence/cookie_v4_check, Patrick McHardy
  • [PATCH 1/6] netfilter: nf_conntrack: make sequence number adjustments usuable without NAT, Patrick McHardy
  • Re: [PATCH RFC 0/6] SYNPROXY target v2, David Miller
  • Re: [PATCH RFC 0/6] SYNPROXY target v2, Pablo Neira Ayuso
    • Re: [PATCH RFC 0/6] SYNPROXY target v2, Patrick McHardy
• [PATCH] iptables: libxt_string.man add example, Laurence J. Lane
  • Re: [PATCH] iptables: libxt_string.man add example, Laurence J. Lane
    • [PATCH v2] iptables: libxt_string.man add example, Laurence J. Lane
      • Re: [PATCH v2] iptables: libxt_string.man add example, Florian Westphal
        • [PATCH v3] iptables: libxt_string.man add examples, Laurence J. Lane
          • [PATCH v4] iptables: libxt_string.man add examples, Laurence J. Lane
          • Re: [PATCH v3] iptables: libxt_string.man add examples, Florian Westphal
• [PATCH] netfilter: nf_defrag_ipv6.o included twice, Nathan Hintz
  • Re: [PATCH] netfilter: nf_defrag_ipv6.o included twice, Pablo Neira Ayuso
• [PATCH] [RFC] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Oliver
  • [PATCH] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Oliver
    • Re: [PATCH] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Jozsef Kadlecsik
      • Re: [PATCH] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Oliver
        • [PATCH v2] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Oliver
          • Re: [PATCH v2] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Jozsef Kadlecsik
            • Re: [PATCH v2] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Oliver
              • Re: [PATCH v2] Add hash:net,net ipset for storage of v4/v6 CIDR pairs., Jozsef Kadlecsik
• [PATCH nft] src: allow to specify the base chain type, Pablo Neira Ayuso
  • Re: [PATCH nft] src: allow to specify the base chain type, Tomasz Bursztyka
    • Re: [PATCH nft] src: allow to specify the base chain type, Pablo Neira Ayuso
• [PATCH lnf-queue] api: add nfq_nlmsg_get_timestamp helper, Florian Westphal
  • Re: [PATCH lnf-queue] api: add nfq_nlmsg_get_timestamp helper, Pablo Neira Ayuso
    • Re: [PATCH lnf-queue] api: add nfq_nlmsg_get_timestamp helper, Florian Westphal
• [libnftables PATCH] src: constify nft_*_parse input data, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] src: constify nft_*_parse input data, Pablo Neira Ayuso
    • Re: [libnftables PATCH] src: constify nft_*_parse input data, Arturo Borrero Gonzalez
      • Re: [libnftables PATCH] src: constify nft_*_parse input data, Pablo Neira Ayuso
• [libnftables PATCH 1/3] rule: Add json parser support, Alvaro Neira
  • [libnftables PATCH 2/3] tests: rule: add json parsing support, Alvaro Neira
  • [libnftables PATCH 3/3] examples: Add nft-rule-json-add, Alvaro Neira
  • Re: [libnftables PATCH 1/3] rule: Add json parser support, Pablo Neira Ayuso
• ipvsadm: One-packet scheduling with UDP service is unstable, Drunkard Zhang
  • Re: ipvsadm: One-packet scheduling with UDP service is unstable, Julian Anastasov
    • Re: ipvsadm: One-packet scheduling with UDP service is unstable, Drunkard Zhang
      • Re: ipvsadm: One-packet scheduling with UDP service is unstable, Julian Anastasov
        • Re: ipvsadm: One-packet scheduling with UDP service is unstable, Drunkard Zhang
• [PATCH 00/19] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH 13/19] ipvs: fixed spacing at for statements, Pablo Neira Ayuso
  • [PATCH 10/19] netfilter: nf_nat: change sequence number adjustments to 32 bits, Pablo Neira Ayuso
  • [PATCH 07/19] netfilter: tproxy: remove nf_tproxy_core.h, Pablo Neira Ayuso
  • [PATCH 04/19] netfilter: connlabels: remove unneeded includes, Pablo Neira Ayuso
  • [PATCH 09/19] netfilter: nf_nat: fix locking in nf_nat_seq_adjust(), Pablo Neira Ayuso
  • [PATCH 14/19] ipvs: ip_vs_sh: ip_vs_sh_get_port: check skb_header_pointer for NULL, Pablo Neira Ayuso
  • [PATCH 11/19] netfilter: nf_nat: use per-conntrack locking for sequence number adjustments, Pablo Neira Ayuso
  • [PATCH 18/19] netfilter: export xt_rpfilter.h to userland, Pablo Neira Ayuso
  • [PATCH 17/19] netfilter: nfnetlink_queue: allow to attach expectations to conntracks, Pablo Neira Ayuso
  • [PATCH 19/19] netfilter: export xt_HMARK.h to userland, Pablo Neira Ayuso
  • [PATCH 12/19] netfilter: tproxy: fix build with IP6_NF_IPTABLES=n, Pablo Neira Ayuso
  • [PATCH 16/19] netfilter: ctnetlink: refactor ctnetlink_create_expect, Pablo Neira Ayuso
  • [PATCH 08/19] netfilter: nf_conntrack: remove duplicate code in ctnetlink, Pablo Neira Ayuso
  • [PATCH 15/19] netfilter: nf_conntrack: don't send destroy events from iterator, Pablo Neira Ayuso
  • [PATCH 02/19] netfilter: nf_conntrack: remove net_ratelimit() for LOG_INVALID(), Pablo Neira Ayuso
  • [PATCH 06/19] netfilter: tproxy: remove nf_tproxy_core, keep tw sk assigned to skb, Pablo Neira Ayuso