Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH v3, -next] netfilter: ctnetlink: attach expectations to unconfirmed conntracks, Pablo Neira Ayuso
  • Re: [PATCH v3, -next] netfilter: ctnetlink: attach expectations to unconfirmed conntracks, Florian Westphal
• [GIT PULL 0/2] IPVS enhancement for v3.12, Simon Horman
  • [GIT PULL 2/2] ipvs: ip_vs_sh: ip_vs_sh_get_port: check skb_header_pointer for NULL, Simon Horman
  • [GIT PULL 1/2] ipvs: fixed spacing at for statements, Simon Horman
  • Re: [GIT PULL 0/2] IPVS enhancement for v3.12, Pablo Neira Ayuso
• [iptables-nftables PATCH 0/3] Generalize nft_rule_list() (+ 2 fixes), Tomasz Bursztyka
  • [iptables-nftables PATCH 1/3] nft: Remove useless test on rulenum in nft_rule_list(), Tomasz Bursztyka
    • Re: [iptables-nftables PATCH 1/3] nft: Remove useless test on rulenum in nft_rule_list(), Pablo Neira Ayuso
  • [iptables-nftables PATCH 3/3] nft: Print unknown target data only when relevant, Tomasz Bursztyka
    • Re: [iptables-nftables PATCH 3/3] nft: Print unknown target data only when relevant, Pablo Neira Ayuso
  • [iptables-nftables PATCH 2/3] nft: Generalize nft_rule_list() against current family, Tomasz Bursztyka
    • Re: [iptables-nftables PATCH 2/3] nft: Generalize nft_rule_list() against current family, Pablo Neira Ayuso
      • Re: [iptables-nftables PATCH 2/3] nft: Generalize nft_rule_list() against current family, Tomasz Bursztyka
• [PATCH] iptables: correctly reference generated file, Lutz Jaenicke
  • Re: [PATCH] iptables: correctly reference generated file, Pablo Neira Ayuso
• [PATCH v3 00/11] Add namespace support for syslog, Rui Xiang
  • [PATCH v3 10/11] syslog_ns: implement ns_console_unlock for specific syslog_ns, Rui Xiang
  • [PATCH v3 11/11] netfilter: use ns_printk in iptable context, Rui Xiang
    • Re: [PATCH v3 11/11] netfilter: use ns_printk in iptable context, Pablo Neira Ayuso
  • [PATCH v3 04/11] syslog_ns: make syslog handling per namespace, Rui Xiang
    • Re: [PATCH v3 04/11] syslog_ns: make syslog handling per namespace, Ben Hutchings
  • [PATCH v3 09/11] syslog_ns: implement ns_printk_emit for specific syslog_ns, Rui Xiang
  • [PATCH v3 05/11] syslog_ns: make permisiion check per user namespace, Rui Xiang
    • Re: [PATCH v3 05/11] syslog_ns: make permisiion check per user namespace, Ben Hutchings
  • [PATCH v3 03/11] syslog_ns: add init syslog_ns for global syslog, Rui Xiang
  • [PATCH v3 08/11] syslog_ns: implement ns_printk for specific syslog_ns, Rui Xiang
  • [PATCH v3 01/11] syslog_ns: add syslog_namespace and put/get_syslog_ns, Rui Xiang
  • [PATCH v3 07/11] syslog_ns: implement function for creating syslog ns, Rui Xiang
    • Re: [PATCH v3 07/11] syslog_ns: implement function for creating syslog ns, Ben Hutchings
  • [PATCH v3 06/11] syslog_ns: use init syslog_ns for console action, Rui Xiang
  • [PATCH v3 02/11] syslog_ns: add syslog_ns into user_namespace, Rui Xiang
  • Re: [PATCH v3 00/11] Add namespace support for syslog, Eric W. Biederman
    • Re: [PATCH v3 00/11] Add namespace support for syslog, Serge Hallyn
    • Re: [PATCH v3 00/11] Add namespace support for syslog, Gao feng
      • Re: [PATCH v3 00/11] Add namespace support for syslog, Rui Xiang
        • Re: [PATCH v3 00/11] Add namespace support for syslog, Serge E. Hallyn
          • Re: [PATCH v3 00/11] Add namespace support for syslog, Eric W. Biederman
            • Re: [PATCH v3 00/11] Add namespace support for syslog, Serge E. Hallyn
• state match incompatibilty across versions, Laurence J. Lane
  • Re: state match incompatibilty across versions, Laurence J. Lane
  • Re: state match incompatibilty across versions, Phil Oester
  • Re: state match incompatibilty across versions, Laurence J. Lane
    • Re: state match incompatibilty across versions, Phil Oester
      • Re: state match incompatibilty across versions, Laurence J. Lane
• [ANNOUNCE] conntrack-tools 1.4.2 release, Pablo Neira Ayuso
• [ANNOUNCE] iptables 1.4.20 release, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_conntrack 1.0.4 release, Pablo Neira Ayuso
• [PATCH] (fix_led_parse_delay) value will now be set, Florian Eckert
  • Re: [PATCH] (fix_led_parse_delay) value will now be set, Pablo Neira Ayuso
• [PATCH v2 -next] netfilter: ctnetlink: attach expectations to unconfirmed conntracks, Pablo Neira Ayuso
  • Re: [PATCH v2 -next] netfilter: ctnetlink: attach expectations to unconfirmed conntracks, Gao feng
    • Re: [PATCH v2 -next] netfilter: ctnetlink: attach expectations to unconfirmed conntracks, Pablo Neira Ayuso
      • Re: [PATCH v2 -next] netfilter: ctnetlink: attach expectations to unconfirmed conntracks, Florian Westphal
        • Re: [PATCH v2 -next] netfilter: ctnetlink: attach expectations to unconfirmed conntracks, Pablo Neira Ayuso
• [PATCH v2 1/2] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options, Pablo Neira Ayuso
  • [PATCH v2 2/2] netfilter: xt_TCPOPTSTRIP: fix possible off by one access, Pablo Neira Ayuso
  • Re: [PATCH v2 1/2] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options, Julian Anastasov
• [PATCH] xtables: trivial spelling fix, Stephen Hemminger
  • Re: [PATCH] xtables: trivial spelling fix, Pablo Neira Ayuso
• [PATCH -next] netfilter: tproxy: fix build with IP6_NF_IPTABLES=n, Florian Westphal
  • Re: [PATCH -next] netfilter: tproxy: fix build with IP6_NF_IPTABLES=n, Pablo Neira Ayuso
• [PATCH V3 0/3] networking: Use ETH_ALEN where appropriate, Joe Perches
  • [PATCH V3 1/3] uapi: Convert some uses of 6 to ETH_ALEN, Joe Perches
  • Re: [PATCH V3 0/3] networking: Use ETH_ALEN where appropriate, David Miller
• [PATCH V2 0/3] networking: Use ETH_ALEN where appropriate, Joe Perches
  • [PATCH V2 1/3] uapi: Convert some uses of 6 to ETH_ALEN, Joe Perches
• [libnftables PATCH] table: add nft_table_list_del function, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] table: add nft_table_list_del function, Pablo Neira Ayuso
    • Re: [libnftables PATCH] table: add nft_table_list_del function, Arturo Borrero Gonzalez
• [patch] netfilter: information leaks building packet message, Dan Carpenter
  • Re: [patch] netfilter: information leaks building packet message, Pablo Neira Ayuso
• [PATCH v3] iptables: Sort table names in ip[6]tables-save, Phil Oester
  • Re: [PATCH v3] iptables: Sort table names in ip[6]tables-save, Pablo Neira Ayuso
• [PATCH v3] iptables: allow service names in [DS]NAT targets, Phil Oester
• [PATCH 1/2] netfilter: xt_TCPMSS: fix handling of malformed TCP header, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: xt_TCPOPTSTRIP: fix off by one access, Pablo Neira Ayuso
  • Re: [PATCH 1/2] netfilter: xt_TCPMSS: fix handling of malformed TCP header, Julian Anastasov
    • Re: [PATCH 1/2] netfilter: xt_TCPMSS: fix handling of malformed TCP header, Pablo Neira Ayuso
• [libnftables PATCH 1/7] chain: change policy2str function to nft_verdict2str function, Alvaro Neira
  • [libnftables PATCH 2/7] jansson: Add helper function for building the tree, Alvaro Neira
  • [libnftables PATCH 3/7] table: remove the properties node in Json output, Alvaro Neira
  • [libnftables PATCH 4/7] chain: remove the properties node in Json output, Alvaro Neira
  • [libnftables PATCH 5/7] chain:Add json parser support, Alvaro Neira
  • [libnftables PATCH 6/7] test:chain:test json parsing support, Alvaro Neira
  • [libnftables PATCH 7/7] examples: Add nft-chain-json-add, Alvaro Neira
  • Re: [libnftables PATCH 1/7] chain: change policy2str function to nft_verdict2str function, Pablo Neira Ayuso
• [iptables-nftables - PATCH] xtables: Do not dump before command parsing has been finished, Tomasz Bursztyka
  • Re: [iptables-nftables - PATCH] xtables: Do not dump before command parsing has been finished, Pablo Neira Ayuso
• PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same, Henry Lee
  • Re: PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same, Michal Kubecek
    • Re: PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same, Maciej Żenczykowski
      • Re: PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same, Henry Lee
        • Re: PROBLEM: Netfilter time matching matches all packets when time start and time stop is the same, Pablo Neira Ayuso
• libnetfilter_queue callback and verdict order, medialy
  • Re: libnetfilter_queue callback and verdict order, Eric Leblond
• [PATCH 0/7 -next] rm tproxy_core, ct event redelivery via workqueue, Florian Westphal
  • [PATCH 2/7] netfilter: nf_queue: relax NFQA_CT attribute check, Florian Westphal
    • Re: [PATCH 2/7] netfilter: nf_queue: relax NFQA_CT attribute check, Pablo Neira Ayuso
  • [PATCH 1/7] netfilter: connlabels: remove unneeded includes, Florian Westphal
    • Re: [PATCH 1/7] netfilter: connlabels: remove unneeded includes, Pablo Neira Ayuso
  • [PATCH 7/7] netfilter: conntrack: remove timer from ecache extension, Florian Westphal
  • [PATCH 6/7] netfilter: conntrack: don't send destroy events from iterator, Florian Westphal
    • Re: [PATCH 6/7] netfilter: conntrack: don't send destroy events from iterator, Pablo Neira Ayuso
      • Re: [PATCH 6/7] netfilter: conntrack: don't send destroy events from iterator, Florian Westphal
        • Re: [PATCH 6/7] netfilter: conntrack: don't send destroy events from iterator, Pablo Neira Ayuso
  • [PATCH 4/7] netfilter: tproxy: remove nf_tproxy_core.h, Florian Westphal
    • Re: [PATCH 4/7] netfilter: tproxy: remove nf_tproxy_core.h, Pablo Neira Ayuso
  • [PATCH 3/7] netfilter: tproxy: remove nf_tproxy_core, keep tw sk assigned to skb, Florian Westphal
    • Re: [PATCH 3/7] netfilter: tproxy: remove nf_tproxy_core, keep tw sk assigned to skb, Pablo Neira Ayuso
  • [PATCH 5/7] netfilter: conntrack: remove duplicate code in conntrack_netlink, Florian Westphal
    • Re: [PATCH 5/7] netfilter: conntrack: remove duplicate code in conntrack_netlink, Pablo Neira Ayuso
• [PATCH 0/3] networking: Use ETH_ALEN where appropriate, Joe Perches
  • [PATCH 1/3] uapi: Convert some uses of 6 to ETH_ALEN, Joe Perches
• [nftables PATCH] Add icmpv6 support., Eric Leblond
  • Re: [nftables PATCH] Add icmpv6 support., Pablo Neira Ayuso
• [PATCH 0/5] netfilter: NAT sequence number adjustment fixes/improvements, Patrick McHardy
  • [PATCH 4/5] netfilter: nf_nat: change sequence number adjustments to 32 bits, Patrick McHardy
    • Re: [PATCH 4/5] netfilter: nf_nat: change sequence number adjustments to 32 bits, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: nf_nat: fix locking in nf_nat_seq_adjust(), Patrick McHardy
    • Re: [PATCH 3/5] netfilter: nf_nat: fix locking in nf_nat_seq_adjust(), Pablo Neira Ayuso
      • Re: [PATCH 3/5] netfilter: nf_nat: fix locking in nf_nat_seq_adjust(), Patrick McHardy
        • Re: [PATCH 3/5] netfilter: nf_nat: fix locking in nf_nat_seq_adjust(), Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: nf_conntrack: remove net_ratelimit() for LOG_INVALID(), Patrick McHardy
    • Re: [PATCH 1/5] netfilter: nf_conntrack: remove net_ratelimit() for LOG_INVALID(), Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: nf_nat: use per-conntrack locking for sequence number adjustments, Patrick McHardy
    • Re: [PATCH 5/5] netfilter: nf_nat: use per-conntrack locking for sequence number adjustments, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nf_conntrack: constify sk_buff argument to nf_ct_attach(), Patrick McHardy
    • Re: [PATCH 2/5] netfilter: nf_conntrack: constify sk_buff argument to nf_ct_attach(), Pablo Neira Ayuso
• [PATCH libnftables] src: remove version from XML and JSON representations, Pablo Neira Ayuso
• [iptables-nftables PATCH v2] nft: load only the tables of the current family., Giuseppe Longo
• [libnftables PATCH v3] set: XML parse, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH v3] set: XML parse, Pablo Neira Ayuso
• [libnftables PATCH] set: xml: change XML attributes to nodes., Arturo Borrero Gonzalez
• [libnftables PATCH] xml: expr: fix public interface for parsing XML, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] xml: expr: fix public interface for parsing XML, Pablo Neira Ayuso
    • Re: [libnftables PATCH] xml: expr: fix public interface for parsing XML, Arturo Borrero Gonzalez
      • Re: [libnftables PATCH] xml: expr: fix public interface for parsing XML, Pablo Neira Ayuso
• [iptables-nftables PATCH] nft: load only the tables of the current family., Giuseppe Longo
  • Re: [iptables-nftables PATCH] nft: load only the tables of the current family., Tomasz Bursztyka
• [iptables-nftables PATCH 1/5] nft: let nft_handle struct own the builtin table pointer, Giuseppe Longo
  • [iptables-nftables PATCH 2/5] nft: search builtin tables via nft_handle tables pointer, Giuseppe Longo
  • [iptables-nftables PATCH 3/5] nft: nft_xtables_config_load() called only in nft_init(), Giuseppe Longo
    • Re: [iptables-nftables PATCH 3/5] nft: nft_xtables_config_load() called only in nft_init(), Pablo Neira Ayuso
      • Re: [iptables-nftables PATCH 3/5] nft: nft_xtables_config_load() called only in nft_init(), Giuseppe Longo
        • Re: [iptables-nftables PATCH 3/5] nft: nft_xtables_config_load() called only in nft_init(), Tomasz Bursztyka
    • Re: [iptables-nftables PATCH 3/5] nft: nft_xtables_config_load() called only in nft_init(), Tomasz Bursztyka
  • [iptables-nftables PATCH 4/5] nft: export functions reusability, Giuseppe Longo
    • Re: [iptables-nftables PATCH 4/5] nft: export functions reusability, Pablo Neira Ayuso
  • [iptables-nftables PATCH 5/5] nft: fix family operation lookup, Giuseppe Longo
    • Re: [iptables-nftables PATCH 5/5] nft: fix family operation lookup, Pablo Neira Ayuso
  • Re: [iptables-nftables PATCH 1/5] nft: let nft_handle struct own the builtin table pointer, Pablo Neira Ayuso
  • [iptables-nftables PATCH 4/5] nft: export functions reusability, Tomasz Bursztyka
• [libnftables PATCH v2] set: XML parse, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH v2] set: XML parse, Pablo Neira Ayuso
• [libnftables PATCH] immediate: xml: fix name inconsistency, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] immediate: xml: fix name inconsistency, Pablo Neira Ayuso
• [libnftables PATCH 1/6] table: json: Add Json parser support, Alvaro Neira
  • [libnftables PATCH 2/6] table : tests: test the table json parser support, Alvaro Neira
    • Re: [libnftables PATCH 2/6] table : tests: test the table json parser support, Pablo Neira Ayuso
  • [libnftables PATCH 3/6] examples: Add nft-table-json-add, Alvaro Neira
    • Re: [libnftables PATCH 3/6] examples: Add nft-table-json-add, Pablo Neira Ayuso
  • [libnftables PATCH 4/6] chain: json: add function for parsing chain, Alvaro Neira
    • Re: [libnftables PATCH 4/6] chain: json: add function for parsing chain, Pablo Neira Ayuso
  • [libnftables PATCH 5/6] chain: test: test the chain parser support, Alvaro Neira
  • [libnftables PATCH 6/6] examples: Add nft-chain-json-add, Alvaro Neira
  • Re: [libnftables PATCH 1/6] table: json: Add Json parser support, Pablo Neira Ayuso
• [libnftables PATCH] tests: xml: add realistic XML tests files, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] tests: xml: add realistic XML tests files, Pablo Neira Ayuso
• [libnftables PATCH 1/2] src: utils: add verdict2str, Arturo Borrero Gonzalez
  • [libnftables PATCH 2/2] set: XML parse, Arturo Borrero Gonzalez
    • Re: [libnftables PATCH 2/2] set: XML parse, Pablo Neira Ayuso
  • Re: [libnftables PATCH 1/2] src: utils: add verdict2str, Pablo Neira Ayuso
• [iptables-nftables - RFC v2 PATCH 00/17] Xtables extensions: full support (pure nft or compat layer), Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 01/17] nft: Remove useless function, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 02/17] xtables: Add support for injecting xtables target into nft rule, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 03/17] xtables: add support for injecting xtables matches into nft rule, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 04/17] nft: Add nft expressions translation engine as a library, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 05/17] nft: Integrate nft translator engine in current core, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 06/17] nft: Manage xtables target parsing through translation tree, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 07/17] nft: Manage xtables matches through nft translation tree, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 08/17] nft: Add support for xtables extensions callback to change cs, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 09/17] xtables: Add support for registering nft translation function for target, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 10/17] xtables: Add support for registering nft translation function for match, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 11/17] nft: Register all relevant xtables extensions into translation tree, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 12/17] nft: Refactor firewall printing so it reuses already parsed cs struct, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 13/17] nft: Refactor rule deletion so it compares both cs structure, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 15/17] xtables: Support pure nft expressions for DNAT extension, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 14/17] xtables: nft: Complete refactoring on how rules are saved, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 16/17] nft: Add a function to reset the counters of an existing rule, Tomasz Bursztyka
  • [iptables-nftables - RFC v2 PATCH 17/17] xtables: Support -Z options for a given rule number, Tomasz Bursztyka
• [libnftables PATCH] src: xml: consolidate common XML code via nft_mxml_num_parse, Arturo Borrero Gonzalez
• [libnftables PATCH] log: fix qthreshold data type, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] log: fix qthreshold data type, Arturo Borrero Gonzalez
• [PATCH 0/4] Generalize DEBUGP macros, Alexey Perevalov
  • [PATCH 1/4] iptables: Introduce header for keeping debug and trace entities, Alexey Perevalov
  • [PATCH 2/4] extensions: Use DEBUGP macro from trace.h, Alexey Perevalov
  • [PATCH 3/4] iptables: Use DEBUGP macro from trace.h, Alexey Perevalov
  • [PATCH 4/4] libiptc: Use DEBUGP macro from trace.h, Alexey Perevalov
  • Re: [PATCH 0/4] Generalize DEBUGP macros, Pablo Neira Ayuso
• [PATCH v2 net-next] net/sctp: Refactor SCTP skb checksum computation, Joe Stringer
  • Re: [PATCH v2 net-next] net/sctp: Refactor SCTP skb checksum computation, Julian Anastasov
    • Re: [PATCH v2 net-next] net/sctp: Refactor SCTP skb checksum computation, Simon Horman
      • Re: [PATCH v2 net-next] net/sctp: Refactor SCTP skb checksum computation, David Miller
  • Re: [PATCH v2 net-next] net/sctp: Refactor SCTP skb checksum computation, David Miller
• [PATCH conntrack-tools] conntrack: fix reporting of unknown arguments, Florian Westphal
• iptables-nftables rebased upon 1.4.19.1, Pablo Neira Ayuso
• [xtables-arptables PATCH] xtables: Bootstrap xtables-arptables compatible tool for nftables, Giuseppe Longo
  • Re: [xtables-arptables PATCH] xtables: Bootstrap xtables-arptables compatible tool for nftables, Tomasz Bursztyka
• [xtables-arptables PATCH v2 0/5] nft changes for xtables-arptables, Giuseppe Longo
  • [xtables-arptables PATCH v2 1/5] nft: add builtin_table pointer, Giuseppe Longo
    • Re: [xtables-arptables PATCH v2 1/5] nft: add builtin_table pointer, Pablo Neira Ayuso
  • [xtables-arptables PATCH v2 2/5] nft: search builtin tables via nft_handle tables pointer, Giuseppe Longo
    • Re: [xtables-arptables PATCH v2 2/5] nft: search builtin tables via nft_handle tables pointer, Pablo Neira Ayuso
  • [xtables-arptables PATCH v2 3/5] nft: nft_xtables_config_load() called only in nft_init(), Giuseppe Longo
    • Re: [xtables-arptables PATCH v2 3/5] nft: nft_xtables_config_load() called only in nft_init(), Pablo Neira Ayuso
      • Re: [xtables-arptables PATCH v2 3/5] nft: nft_xtables_config_load() called only in nft_init(), Tomasz Bursztyka
        • Re: [xtables-arptables PATCH v2 3/5] nft: nft_xtables_config_load() called only in nft_init(), Pablo Neira Ayuso
          • Re: [xtables-arptables PATCH v2 3/5] nft: nft_xtables_config_load() called only in nft_init(), Tomasz Bursztyka
            • Re: [xtables-arptables PATCH v2 3/5] nft: nft_xtables_config_load() called only in nft_init(), Pablo Neira Ayuso
    • Re: [xtables-arptables PATCH v2 3/5] nft: nft_xtables_config_load() called only in nft_init(), Pablo Neira Ayuso
  • [xtables-arptables PATCH v2 4/5] nft: make functions public, Giuseppe Longo
  • [xtables-arptables PATCH v2 5/5] nft: replace args.family, Giuseppe Longo
    • Re: [xtables-arptables PATCH v2 5/5] nft: replace args.family, Pablo Neira Ayuso
      • Re: [xtables-arptables PATCH v2 5/5] nft: replace args.family, Tomasz Bursztyka
  • Re: [xtables-arptables PATCH v2 0/5] nft changes for xtables-arptables, Tomasz Bursztyka
• [net-next] net/sctp: Refactor SCTP skb checksum computation, Joe Stringer
  • Re: [net-next] net/sctp: Refactor SCTP skb checksum computation, Julian Anastasov
    • Re: [net-next] net/sctp: Refactor SCTP skb checksum computation, Joe Stringer
• [xtables-arptables PATCH 0/4] nft changes for xtables-arptables, Giuseppe Longo
  • [xtables-arptables PATCH 1/4] nft: add builtin_table pointer, Giuseppe Longo
  • [xtables-arptables PATCH 2/4] nft: search builtin tables via nft_handle tables pointer, Giuseppe Longo
  • [xtables-arptables PATCH 3/4] nft: nft_xtables_config_load() called only in nft_init(), Giuseppe Longo
    • Re: [xtables-arptables PATCH 3/4] nft: nft_xtables_config_load() called only in nft_init(), Tomasz Bursztyka
    • Re: [xtables-arptables PATCH 3/4] nft: nft_xtables_config_load() called only in nft_init(), Tomasz Bursztyka
  • [xtables-arptables PATCH 4/4] nft: make functions public, Giuseppe Longo
  • Re: [xtables-arptables PATCH 0/4] nft changes for xtables-arptables, Tomasz Bursztyka
• [PATCH] ebtables: Adding --noflush command line support for ebtables-restore, Sanket Shah
  • Re: [PATCH] ebtables: Adding --noflush command line support for ebtables-restore, Bart De Schuymer
• [PATCH 0/2] Netfilter fixes for net (3.11-rc1), Pablo Neira Ayuso
  • [PATCH 1/2] netfilter: ctnetlink: fix incorrect NAT expectation dumping, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: xt_socket: fix broken v0 support, Pablo Neira Ayuso
  • Re: [PATCH 0/2] Netfilter fixes for net (3.11-rc1), David Miller
• [PATCH] build: fail in configure on missing dependency for optional component, Willem de Bruijn
  • Re: [PATCH] build: fail in configure on missing dependency for optional component, Pablo Neira Ayuso
• [PATCH] iptables: additional include path required after UAPI changes, Phil Oester
  • Re: [PATCH] iptables: additional include path required after UAPI changes, Pablo Neira Ayuso
• nftables rebased upon 3.10, Pablo Neira Ayuso
• [iptables-nftables - RFC PATCH 00/15] Xtables extensions: full support (pure nft or compat layer), Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 01/15] xtables: Add support for injecting xtables target into nft rule, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 02/15] xtables: add support for injecting xtables matches into nft rule, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 03/15] nft: Add nft expressions translation engine as a library, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 04/15] nft: Integrate nft translator engine in current core, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 05/15] nft: Manage xtables target parsing through translation tree, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 06/15] nft: Manage xtables matches through nft translation tree, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 08/15] xtables: Add support for registering nft translation function for target, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 07/15] nft: Add support for xtables extensions callback to change cs, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 10/15] nft: Register all relevant xtables extensions into translation tree, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 09/15] xtables: Add support for registering nft translation function for match, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 11/15] nft: Refactor firewall printing so it reuses already parsed cs struct, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 12/15] nft: Refactor rule deletion so it compares both cs structure, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 13/15] nft: Remove useless function, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 14/15] xtables: nft: Complete refactoring on how rules are saved, Tomasz Bursztyka
  • [iptables-nftables - RFC PATCH 15/15] xtables: Support pure nft expressions for DNAT extension, Tomasz Bursztyka
• [PATCH conntrack-tools] conntrack: introduce -l option to filter by labels, Florian Westphal
  • Message not available
    • Re: [PATCH conntrack-tools] conntrack: introduce -l option to filter by labels, Florian Westphal
• [iptables-nftables - PATCH] nft: A non valid if index should not be handled, Tomasz Bursztyka
  • Re: [iptables-nftables - PATCH] nft: A non valid if index should not be handled, Pablo Neira Ayuso
    • Re: [iptables-nftables - PATCH] nft: A non valid if index should not be handled, Tomasz Bursztyka
• net-next is now OPEN, David Miller
  • Re: net-next is now OPEN, Eliezer Tamir
    • Re: net-next is now OPEN, Eric Dumazet
      • Re: net-next is now OPEN, Eric Dumazet
  • <Possible follow-ups>
  • net-next is now OPEN, David Miller
  • net-next is now OPEN, David Miller
• Packet loss when using NFQUEUE and nf_conntrack_ipv4, Daniel Collins
  • Re: Packet loss when using NFQUEUE and nf_conntrack_ipv4, Florian Westphal
    • Re: Packet loss when using NFQUEUE and nf_conntrack_ipv4, Daniel Collins
• [libnftables PATCH] chain: json: fix family and table error, Alvaro Neira
  • Re: [libnftables PATCH] chain: json: fix family and table error, Pablo Neira Ayuso
• Regarding Nat-reservation and tproxy feature in latest netfilter code, SaRaVanAn
• Conntrack vs. TCP-stack timout differences: quickfix howto, Fiedler Roman
• [iptables-nftables - PATCH 0/2] fixes, Tomasz Bursztyka
  • [iptables-nftables - PATCH 2/2] nft: Fix code style issues, Tomasz Bursztyka
    • Re: [iptables-nftables - PATCH 2/2] nft: Fix code style issues, Pablo Neira Ayuso
      • Re: [iptables-nftables - PATCH 2/2] nft: Fix code style issues, Tomasz Bursztyka
  • [iptables-nftables - PATCH 1/2] nft: Optimize chain listing if only one is looked for, Tomasz Bursztyka
    • Re: [iptables-nftables - PATCH 1/2] nft: Optimize chain listing if only one is looked for, Pablo Neira Ayuso
      • Re: [iptables-nftables - PATCH 1/2] nft: Optimize chain listing if only one is looked for, Tomasz Bursztyka
• [iptables-nftables - PATCH 0/9] Various fixes, Tomasz Bursztyka
  • [iptables-nftables - PATCH 3/9] nft: Refactor and optimize nft_rule_list, Tomasz Bursztyka
    • Re: [iptables-nftables - PATCH 3/9] nft: Refactor and optimize nft_rule_list, Pablo Neira Ayuso
      • Re: [iptables-nftables - PATCH 3/9] nft: Refactor and optimize nft_rule_list, Tomasz Bursztyka
  • [iptables-nftables - PATCH 2/9] nft: Handle error on adding rule expressions, Tomasz Bursztyka
    • Re: [iptables-nftables - PATCH 2/9] nft: Handle error on adding rule expressions, Pablo Neira Ayuso
  • [iptables-nftables - PATCH 1/9] nft: Set the rule family when creating a new one, Tomasz Bursztyka
    • Re: [iptables-nftables - PATCH 1/9] nft: Set the rule family when creating a new one, Pablo Neira Ayuso
  • [iptables-nftables - PATCH 4/9] xtables: Remove useless parameter to nft_chain_list_find, Tomasz Bursztyka
    • Re: [iptables-nftables - PATCH 4/9] xtables: Remove useless parameter to nft_chain_list_find, Pablo Neira Ayuso
  • [iptables-nftables - PATCH 5/9] nft: Une one unique function to test for a builtin chain, Tomasz Bursztyka
    • Re: [iptables-nftables - PATCH 5/9] nft: Une one unique function to test for a builtin chain, Pablo Neira Ayuso
  • [iptables-nftables - PATCH 7/9] nft: Print chains in right order when saving rules, Tomasz Bursztyka
  • [iptables-nftables - PATCH 6/9] nft: Print chains in right order when listing rules, Tomasz Bursztyka
    • Re: [iptables-nftables - PATCH 6/9] nft: Print chains in right order when listing rules, Pablo Neira Ayuso
      • Re: [iptables-nftables - PATCH 6/9] nft: Print chains in right order when listing rules, Tomasz Bursztyka
  • [iptables-nftables - PATCH 8/9] xtables-save: Print chains in right order, Tomasz Bursztyka
  • [iptables-nftables - PATCH 9/9] nft: Fix small memory leaks, Tomasz Bursztyka
    • Re: [iptables-nftables - PATCH 9/9] nft: Fix small memory leaks, Pablo Neira Ayuso
• [PATCH net] ipv4: set transport header earlier, Eric Dumazet
  • Re: [PATCH net] ipv4: set transport header earlier, Sergei Shtylyov
    • Re: [PATCH net] ipv4: set transport header earlier, Eric Dumazet
  • Re: [PATCH net] ipv4: set transport header earlier, David Miller
• [libnftables PATCH 1/2] set: json: fix incomplete output, Alvaro Neira
  • [libnftables PATCH 2/2] chain: json: use string to identify policy, Alvaro Neira
    • Re: [libnftables PATCH 2/2] chain: json: use string to identify policy, Pablo Neira Ayuso
  • Re: [libnftables PATCH 1/2] set: json: fix incomplete output, Pablo Neira Ayuso
• [PATCH V2 iptables] extensions: libxt_connlabel: use libnetfilter_conntrack, Florian Westphal
• [PATCH iptables next 1/4] extensions: libxt_socket: update man page, Florian Westphal
  • [PATCH 2/4] extensions: libipt_ULOG: man page should mention NFLOG, Florian Westphal
  • [PATCH 3/4] doc: add libnetfilter_queue pointer to libxt_NFQUEUE.man, Florian Westphal
  • [PATCH 4/4] doc: merge ip6table man pages into ipv4 ones, Florian Westphal
• [iptables-nftables PATCH v2] src: display rule by number, Giuseppe Longo
  • Re: [iptables-nftables PATCH v2] src: display rule by number, Tomasz Bursztyka
  • Re: [iptables-nftables PATCH v2] src: display rule by number, Pablo Neira Ayuso
• [PATCH] netfilter: xt_socket: fix broken v0 support, Eric Dumazet
  • Re: [PATCH] netfilter: xt_socket: fix broken v0 support, Pablo Neira Ayuso
• [PATCH] ipvs: fixed style errors and warnings in ip_vs_conn, Dragos Foianu
• [PATCH] ipvs: fixed style error in ip_vs_sched, Dragos Foianu
• [PATCH] ipvs: fixed style errors in ip_vs_dh, Dragos Foianu
  • Re: [PATCH] ipvs: fixed style errors in ip_vs_dh, Simon Horman
• [PATCH] netfilter: xt_addrtype: fix trivial typo, Phil Oester
  • Re: [PATCH] netfilter: xt_addrtype: fix trivial typo, Pablo Neira Ayuso
• [PATCH] netfilter: xt_pkttype: IPv6 has no broadcast, Phil Oester
  • Re: [PATCH] netfilter: xt_pkttype: IPv6 has no broadcast, Pablo Neira Ayuso
• [libnftables PATCH] src: add nft_*_list_is_empty() functions, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] src: add nft_*_list_is_empty() functions, Pablo Neira Ayuso
• [PATCH] ipvs: fixed spacing at for statements, Dragos Foianu
  • Re: [PATCH] ipvs: fixed spacing at for statements, Simon Horman
• [PATCH v3 0/29] nfacct changes and additions, Michael Zintakis
  • [PATCH v3 kernel 1/29] bugfix: pkts/bytes need to be specified simultaneously, Michael Zintakis
    • Re: [PATCH v3 kernel 1/29] bugfix: pkts/bytes need to be specified simultaneously, Florian Westphal
      • Re: [PATCH v3 kernel 1/29] bugfix: pkts/bytes need to be specified simultaneously, Michael Zintakis
  • [PATCH v3 kernel 2/29] bugfix: restore pkts/bytes counters in NLM_F_REPLACE, Michael Zintakis
  • [PATCH v3 libnetfilter_acct 3/29] bugfix: correct xml name parsing, Michael Zintakis
    • Re: [PATCH v3 libnetfilter_acct 3/29] bugfix: correct xml name parsing, Pablo Neira Ayuso
  • [PATCH v3 libnetfilter_acct 4/29] bugfix: correct (plain) name parsing, Michael Zintakis
    • Re: [PATCH v3 libnetfilter_acct 4/29] bugfix: correct (plain) name parsing, Pablo Neira Ayuso
  • [PATCH v3 nfacct 5/29] bugfix: prevent 0-sized parameter being accepted, Michael Zintakis
  • [PATCH v3 nfacct 6/29] bugfix: prevent 0-sized nfacct name being accepted, Michael Zintakis
  • [PATCH v3 nfacct 7/29] code-refactoring changes to the "command menu", Michael Zintakis
    • Re: [PATCH v3 nfacct 7/29] code-refactoring changes to the "command menu", Pablo Neira Ayuso
  • [PATCH v3 nfacct 8/29] add 2 new options: "replace" and "flush", Michael Zintakis
  • [PATCH v3 libnetfilter_acct 9/29] add *_SAVE template allowing save/restore, Michael Zintakis
  • [PATCH v3 libnetfilter_acct 10/29] add *_BONLY template to show bytes-only, Michael Zintakis
    • Re: [PATCH v3 libnetfilter_acct 10/29] add *_BONLY template to show bytes-only, Pablo Neira Ayuso
  • [PATCH v3 libnetfilter_acct 11/29] add variable width and on-the-fly formatting, Michael Zintakis
    • Re: [PATCH v3 libnetfilter_acct 11/29] add variable width and on-the-fly formatting, Pablo Neira Ayuso
  • [PATCH v3 nfacct 12/29] add variable width and on-the-fly number formatting, Michael Zintakis
  • [PATCH v3 nfacct 13/29] add new "save" and correct existing "restore" commands, Michael Zintakis
  • [PATCH v3 nfacct 14/29] add sort option to the "list" command, Michael Zintakis
  • [PATCH v3 nfacct 15/29] add "show bytes" option to "list" and "get" commands, Michael Zintakis
  • [PATCH v3 kernel 16/29] add permanent byte/packet format capability to nfacct, Michael Zintakis
    • Re: [PATCH v3 kernel 16/29] add permanent byte/packet format capability to nfacct, Florian Westphal
      • Re: [PATCH v3 kernel 16/29] add permanent byte/packet format capability to nfacct, Michael Zintakis
        • Re: [PATCH v3 kernel 16/29] add permanent byte/packet format capability to nfacct, Florian Westphal
          • Re: [PATCH v3 kernel 16/29] add permanent byte/packet format capability to nfacct, Michael Zintakis
  • [PATCH v3 libnetfilter_acct 17/29] add *permanent* number formatting support, Michael Zintakis
  • [PATCH v3 nfacct 18/29] add permanent number formatting to nfacct objects, Michael Zintakis
  • [PATCH v3 kernel 19/29] add byte threshold capability to nfacct, Michael Zintakis
    • Re: [PATCH v3 kernel 19/29] add byte threshold capability to nfacct, Florian Westphal
      • Re: [PATCH v3 kernel 19/29] add byte threshold capability to nfacct, Michael Zintakis
        • Re: [PATCH v3 kernel 19/29] add byte threshold capability to nfacct, Florian Westphal
          • RE: [PATCH v3 kernel 19/29] add byte threshold capability to nfacct, Alexey Perevalov
  • [PATCH v3 libnetfilter_acct 20/29] add byte threshold capability support, Michael Zintakis
  • [PATCH v3 nfacct 21/29] add byte threshold capabilities to nfacct objects, Michael Zintakis
  • [PATCH v3 libnetfilter_acct 22/29] add *_EXTENDED template support, Michael Zintakis
  • [PATCH v3 nfacct 23/29] add "show extended" option to "list" and "get" commands, Michael Zintakis
  • [PATCH v3 kernel 24/29] add packets and bytes mark capability to nfacct, Michael Zintakis
    • Re: [PATCH v3 kernel 24/29] add packets and bytes mark capability to nfacct, Florian Westphal
      • Re: [PATCH v3 kernel 24/29] add packets and bytes mark capability to nfacct, Michael Zintakis
    • Re: [PATCH v3 kernel 24/29] add packets and bytes mark capability to nfacct, Pablo Neira Ayuso
      • Re: [PATCH v3 kernel 24/29] add packets and bytes mark capability to nfacct, Michael Zintakis
  • [PATCH v3 libnetfilter_acct 25/29] add packets/bytes mark capability support, Michael Zintakis
  • [PATCH v3 nfacct 26/29] add setmark and clrmark to "get" and "list" commands, Michael Zintakis
  • [PATCH v3 libnetfilter_acct 27/29] add *_MONLY template support, Michael Zintakis
  • [PATCH v3 nfacct 28/29] add "show marks" option to "list" and "get" commands, Michael Zintakis
  • [PATCH v3 nfacct 29/29] change man page to describe all new features, Michael Zintakis
  • Re: [0/29] nfacct changes and additions, Pablo Neira Ayuso
• [libnftables PATCH] examples: give credits to Pablo Neira Ayuso, Arturo Borrero Gonzalez
• [PATCH iptables] extensions: libxt_connlabel: use libnetfilter_conntrack, Florian Westphal
  • Re: [PATCH iptables] extensions: libxt_connlabel: use libnetfilter_conntrack, Pablo Neira Ayuso
• nfnetlink_queue question, Phil Oester
  • Re: nfnetlink_queue question, Florian Westphal
• [PATCH] ip{6}tables-restore: fix breakage due to new locking approach, Pablo Neira Ayuso
• [PATCH v2] iptables: allow service names in [DS]NAT targets, Phil Oester
  • Re: [PATCH v2] iptables: allow service names in [DS]NAT targets, Pablo Neira Ayuso
    • Re: [PATCH v2] iptables: allow service names in [DS]NAT targets, Jozsef Kadlecsik
      • Re: [PATCH v2] iptables: allow service names in [DS]NAT targets, Phil Oester
• [libnftables PATCH] bitwise: xml: export len node, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] bitwise: xml: export len node, Pablo Neira Ayuso
• [no subject], Unknown
• ip6tables-save LOG target output is different to iptables-save, Scott Baillie
  • Re: ip6tables-save LOG target output is different to iptables-save, Phil Oester
    • Re: ip6tables-save LOG target output is different to iptables-save, Scott Baillie
      • Re: ip6tables-save LOG target output is different to iptables-save, Phil Oester
        • Re: ip6tables-save LOG target output is different to iptables-save, Pablo Neira Ayuso
• [libnftables PATCH] set: add xml output, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] set: add xml output, Pablo Neira Ayuso
• [PATCH v4 2/2] ipset (userspace): add "inner" flag version support, Dash Four
• [PATCH v4 1/2] ipset (kernel): add set match "inner" flag support, Dash Four
• [PATCH v4 0/2] ipset: add "inner" flag version support, Dash Four
  • Re: [PATCH v4 0/2] ipset: add "inner" flag version support, Jozsef Kadlecsik
    • Re: [PATCH v4 0/2] ipset: add "inner" flag version support, Jozsef Kadlecsik
      • Re: [PATCH v4 0/2] ipset: add "inner" flag version support, Dash Four
• [libnftables PATCH] src: consolidate XMl parsing of data_reg via nft_mxml_data_reg_parse, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH] src: consolidate XMl parsing of data_reg via nft_mxml_data_reg_parse, Pablo Neira Ayuso
• [libnftables PATCH 0/2] Series Add Json Support, Alvaro Neira
  • [libnftables PATCH 1/2] set: add Json Export Support, Alvaro Neira
    • Re: [libnftables PATCH 1/2] set: add Json Export Support, Pablo Neira Ayuso
  • [libnftables PATCH 2/2] examples: nft-table-get different families options, Alvaro Neira
    • Re: [libnftables PATCH 2/2] examples: nft-table-get different families options, Pablo Neira Ayuso
• [libnftables PATCH] src: improving default text output, Giuseppe Longo
  • Re: [libnftables PATCH] src: improving default text output, Pablo Neira Ayuso
• conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
  • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Florian Westphal
  • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
    • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
  • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Pablo Neira Ayuso
    • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
      • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
        • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Pablo Neira Ayuso
          • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
            • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Pablo Neira Ayuso
              • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Pablo Neira Ayuso
                • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
                • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
                  • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Pablo Neira Ayuso
                    • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
                      • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Pablo Neira Ayuso
                        • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Pablo Neira Ayuso
                        • Re: conntrackd segfault on EPSV IPv6 ftp command when using ftp ExpectationSync, Bill Fink
• [PATCH cttools V3] conntrack: add connlabel format attribute, Florian Westphal
  • Re: [PATCH cttools V3] conntrack: add connlabel format attribute, Pablo Neira Ayuso
• [PATCH 0/2] minor debugging fixes, Alexey Perevalov
  • [PATCH 1/2] Clarify DEBUG usage macro, Alexey Perevalov
  • [PATCH 2/2] extensions: libxt_dccp/libxt_sctp: enable debug tracing by DEBUG define, Alexey Perevalov
    • Re: [PATCH 2/2] extensions: libxt_dccp/libxt_sctp: enable debug tracing by DEBUG define, Pablo Neira Ayuso
• [PATCH] iptables: set errno correctly in iptcc_chain_index_alloc, Phil Oester
  • Re: [PATCH] iptables: set errno correctly in iptcc_chain_index_alloc, Florian Westphal
    • Re: [PATCH] iptables: set errno correctly in iptcc_chain_index_alloc, Phil Oester
      • Re: [PATCH] iptables: set errno correctly in iptcc_chain_index_alloc, Florian Westphal
        • Re: [PATCH] iptables: set errno correctly in iptcc_chain_index_alloc, Phil Oester
• [PATCH v2] iptables: Sort table names in ip[6]tables-save, Phil Oester
  • Re: [PATCH v2] iptables: Sort table names in ip[6]tables-save, Pablo Neira Ayuso
    • Re: [PATCH v2] iptables: Sort table names in ip[6]tables-save, Phil Oester
• [PATCH lnf-ct V3] conntrack: api: add nfct_snprintf_labels, Florian Westphal
  • Re: [PATCH lnf-ct V3] conntrack: api: add nfct_snprintf_labels, Pablo Neira Ayuso
• [PATCH lnf-ct] src: callback: fix memory leak when ct has dynamically allocated attr, Florian Westphal
  • Re: [PATCH lnf-ct] src: callback: fix memory leak when ct has dynamically allocated attr, Pablo Neira Ayuso
• [libnftables PATCH] expr: Fix header inclusion for integer types, Tomasz Bursztyka
  • Re: [libnftables PATCH] expr: Fix header inclusion for integer types, Pablo Neira Ayuso
• [PATCH -stable-3.9 01/15] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
  • [PATCH -stable-3.9 02/15] netfilter: ipt_ULOG: fix non-null terminated string in the nf_log path, Pablo Neira Ayuso
  • [PATCH -stable-3.9 03/15] netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6, Pablo Neira Ayuso
  • [PATCH -stable-3.9 04/15] ipvs: Fix reuse connection if real server is dead, Pablo Neira Ayuso
  • [PATCH -stable-3.9 05/15] netfilter: xt_LOG: fix mark logging for IPv6 packets, Pablo Neira Ayuso
  • [PATCH -stable-3.9 06/15] ipvs: info leak in __ip_vs_get_dest_entries(), Pablo Neira Ayuso
  • [PATCH -stable-3.9 07/15] netfilter: nfnetlink_cttimeout: fix incomplete dumping of objects, Pablo Neira Ayuso
  • [PATCH -stable-3.9 08/15] netfilter: nfnetlink_acct: fix incomplete dumping of objects, Pablo Neira Ayuso
  • [PATCH -stable-3.9 09/15] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, Pablo Neira Ayuso
  • [PATCH -stable-3.9 10/15] netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr(), Pablo Neira Ayuso
  • [PATCH -stable-3.9 11/15] netfilter: xt_TCPMSS: Fix missing fragmentation handling, Pablo Neira Ayuso
  • [PATCH -stable-3.9 12/15] netfilter: xt_TCPMSS: Fix IPv6 default MSS too, Pablo Neira Ayuso
  • [PATCH -stable-3.9 13/15] ipvs: SCTP ports should be writable in ICMP packets, Pablo Neira Ayuso
  • [PATCH -stable-3.9 14/15] netfilter: nf_nat_sip: fix mangling, Pablo Neira Ayuso
  • [PATCH -stable-3.9 15/15] netfilter: ctnetlink: send event when conntrack label was modified, Pablo Neira Ayuso
  • Re: [PATCH -stable-3.9 01/15] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Luis Henriques
    • Re: [PATCH -stable-3.9 01/15] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
      • Re: [PATCH -stable-3.9 01/15] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Luis Henriques
• merge window is CLOSED, David Miller
• iptables doesn't function properly with x32., Kyle Sanderson
  • Re: iptables doesn't function properly with x32., Kyle Sanderson
• ebtables-restore 2.0.10-4 IPv6 rule loading bug, Luis Fernando
  • Re: ebtables-restore 2.0.10-4 IPv6 rule loading bug, Thomas Jarosch
  • Message not available
    • Message not available
      • Re: ebtables-restore 2.0.10-4 IPv6 rule loading bug, tdthp
        • Re: ebtables-restore 2.0.10-4 IPv6 rule loading bug, Bart De Schuymer
• [PATCH conntracktools] conntrackd: support replication of connlabels, Florian Westphal
  • [PATCH 2/2] conntrack: add connlabel format attribute, Florian Westphal
    • Re: [PATCH 2/2] conntrack: add connlabel format attribute, Pablo Neira Ayuso
• [PATCH lnf-ct] conntrack: api: add nfct_snprintf_labels, Florian Westphal
  • Re: [PATCH lnf-ct] conntrack: api: add nfct_snprintf_labels, Pablo Neira Ayuso
• [PATCH nft] src: add xt compat support, Pablo Neira Ayuso
  • Re: [PATCH nft] src: add xt compat support, Tomasz Bursztyka
    • Re: [PATCH nft] src: add xt compat support, Pablo Neira Ayuso
      • Re: [PATCH nft] src: add xt compat support, Tomasz Bursztyka
        • Re: [PATCH nft] src: add xt compat support, Pablo Neira Ayuso
• C++ compile errors, Amos Jeffries
  • Re: C++ compile errors, Pablo Neira Ayuso
    • Re: C++ compile errors, Amos Jeffries
• [PATCH v3 5/5] iptables (userspace): add set match "inner" flag support, Dash Four
• [PATCH v3 4/5] iptables: add set match "inner" flag support, Dash Four
• [PATCH v3 3/5] ipset: add set match "inner" flag support, Dash Four
• [PATCH v3 2/5] ipset: add "inner" flag implementation, Dash Four
• [PATCH v3 1/5] iptables: bugfix - prevent wrong syntax being accepted by the set match, Dash Four
• [PATCH v3 0/5] ipset: add "inner" flag support, Dash Four
  • Re: [PATCH v3 0/5] ipset: add "inner" flag support, Jozsef Kadlecsik
    • Re: [PATCH v3 0/5] ipset: add "inner" flag support, Dash Four
      • Re: [PATCH v3 0/5] ipset: add "inner" flag support, Jozsef Kadlecsik
• [PATCH] iptables: allow service names in [DS]NAT targets, Phil Oester
  • Re: [PATCH] iptables: allow service names in [DS]NAT targets, Pablo Neira Ayuso
• Issue with latest nftables, Eric Leblond
  • Re: Issue with latest nftables, Pablo Neira Ayuso
    • Re: Issue with latest nftables, Tomasz Bursztyka
      • Re: Issue with latest nftables, Eric Leblond
• iptables upgrade: NOT operator parser trouble, Thomas Jarosch
  • Re: iptables upgrade: NOT operator parser trouble, Florian Westphal
    • Re: iptables upgrade: NOT operator parser trouble, Thomas Jarosch
• [PATCH] netfilter: Checksum of an IPv6 UDP packet is mandatory, Changli Gao
  • Re: [PATCH] netfilter: Checksum of an IPv6 UDP packet is mandatory, Pablo Neira Ayuso
• ipt_netflow, Stephen Clark
• [PATCH] netfilter: nf_tables: remove the duplicate NF_INET_LOCAL_OUT, Changli Gao
  • Re: [PATCH] netfilter: nf_tables: remove the duplicate NF_INET_LOCAL_OUT, Pablo Neira Ayuso
• xt_ipvs match does not translate source address for ipvs, Vincent Li
  • Re: xt_ipvs match does not translate source address for ipvs, Vincent Li
    • Re: xt_ipvs match does not translate source address for ipvs, Vincent Li
  • Re: xt_ipvs match does not translate source address for ipvs, Julian Anastasov
    • Re: xt_ipvs match does not translate source address for ipvs, Vincent Li
• [PATCH] iptables: Sort table names in ip[6]tables-save, Phil Oester
  • Re: [PATCH] iptables: Sort table names in ip[6]tables-save, Maciej Żenczykowski
    • Re: [PATCH] iptables: Sort table names in ip[6]tables-save, Phil Oester
      • Re: [PATCH] iptables: Sort table names in ip[6]tables-save, Maciej Żenczykowski
• [libnftables PATCH v2] test: add testbench for XML, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH v2] test: add testbench for XML, Pablo Neira Ayuso
• [PATCH] netfilter: ip[6]t_REJECT: tcp-reset using wrong MAC source if bridged, Phil Oester
  • Re: [PATCH] netfilter: ip[6]t_REJECT: tcp-reset using wrong MAC source if bridged, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: ip[6]t_REJECT: tcp-reset using wrong MAC source if bridged, Phil Oester
  • Re: [PATCH] netfilter: ip[6]t_REJECT: tcp-reset using wrong MAC source if bridged, Pablo Neira Ayuso
• [libnftables PATCH v2] src: xml: convert family values to string, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH v2] src: xml: convert family values to string, Pablo Neira Ayuso
• [libnftables PATCH v2] chain: add hooknum2str, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH v2] chain: add hooknum2str, Pablo Neira Ayuso
• [libnftables PATCH 00/21] Small fixes for XML, Arturo Borrero Gonzalez
  • [libnftables PATCH 01/21] chain: add hooknum2str, Arturo Borrero Gonzalez
  • [libnftables PATCH 05/21] expr: xml: validate registers < NFT_REG_MAX, Arturo Borrero Gonzalez
  • [libnftables PATCH 03/21] rule: xml: conditional compat info, Arturo Borrero Gonzalez
  • [libnftables PATCH 04/21] bitwise: xml: mask and xor use same number of data registers, Arturo Borrero Gonzalez
  • [libnftables PATCH 02/21] src: xml: convert family values to string, Arturo Borrero Gonzalez
  • [libnftables PATCH 08/21] byteorder: xml: op as string, Arturo Borrero Gonzalez
  • [libnftables PATCH 06/21] nat: xml: change nat types string to dnat/snat, Arturo Borrero Gonzalez
  • [libnftables PATCH 10/21] ct: xml: use key's name string instead of numbers, Arturo Borrero Gonzalez
  • [libnftables PATCH 07/21] nat: xml: change IP range node names, Arturo Borrero Gonzalez
  • [libnftables PATCH 11/21] exthdr: xml: fix mandatory elements, Arturo Borrero Gonzalez
  • [libnftables PATCH 09/21] ct: xml: add extra dir check, Arturo Borrero Gonzalez
  • [libnftables PATCH 15/21] target&match: xml: don't print rev number, Arturo Borrero Gonzalez
  • [libnftables PATCH 16/21] payload: xml: use string for base attribute, Arturo Borrero Gonzalez
  • [libnftables PATCH 17/21] exthdr: xml: use string for type node, Arturo Borrero Gonzalez
  • [libnftables PATCH 21/21] exthdr: xml: rename type node to exthdr_type, Arturo Borrero Gonzalez
  • [libnftables PATCH 19/21] nat: snprintf: fix buffer offset, Arturo Borrero Gonzalez
  • [libnftables PATCH 18/21] meta: xml: use string to represent key attribute, Arturo Borrero Gonzalez
  • [libnftables PATCH 20/21] nat: xml: rename node type to nat_type, Arturo Borrero Gonzalez
  • [libnftables PATCH 12/21] chain: xml: use string for policy, Arturo Borrero Gonzalez
  • [libnftables PATCH 13/21] data_reg: xml: len node shows byte length, Arturo Borrero Gonzalez
  • [libnftables PATCH 14/21] data_reg: xml: fix bytes movements, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH 00/21] Small fixes for XML, Pablo Neira Ayuso
• [GIT PULL 0/8] IPVS updates for v3.11 #2, Simon Horman
  • [PATCH 8/8] netns: exclude ipvs from struct net when IPVS disabled, Simon Horman
  • [PATCH 5/8] ipvs: SH fallback and L4 hashing, Simon Horman
  • [PATCH 7/8] kernel: remove unnecessary head file, Simon Horman
  • [PATCH 4/8] ipvs: drop SCTP connections depending on state, Simon Horman
  • [PATCH 6/8] ipvs: add sync_persist_mode flag, Simon Horman
  • [PATCH 1/8] ipvs: provide iph to schedulers, Simon Horman
  • [PATCH 3/8] ipvs: replace the SCTP state machine, Simon Horman
  • [PATCH 2/8] ipvs: sloppy TCP and SCTP, Simon Horman
  • Re: [GIT PULL 0/8] IPVS updates for v3.11 #2, Pablo Neira Ayuso
• [PATCH 1/2] nft: print counter issues, Giuseppe Longo
  • [PATCH 2/2] nft: mem leak in nft_rule_list_cb, Giuseppe Longo
    • Re: [PATCH 2/2] nft: mem leak in nft_rule_list_cb, Pablo Neira Ayuso
  • Re: [PATCH 1/2] nft: print counter issues, Pablo Neira Ayuso
• [PATCH 4/5] netfilter: ctnetlink: send event when conntrack label was modified, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: ipt_ULOG: fix incorrect setting of ulog timer, Pablo Neira Ayuso
• [PATCH 0/5] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: nf_nat_sip: fix mangling, Pablo Neira Ayuso
  • [PATCH 1/5] ipvs: SCTP ports should be writable in ICMP packets, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Pablo Neira Ayuso
  • Re: [PATCH 0/5] Netfilter/IPVS fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 0/5] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 2/5] netfilter: nf_tables_offload: restore basechain deletion, Pablo Neira Ayuso
    • [PATCH 1/5] netfilter: nf_flow_table: set timeout before insertion into hashes, Pablo Neira Ayuso
    • [PATCH 3/5] ipvs: don't ignore errors in case refcounting ip_vs module fails, Pablo Neira Ayuso
    • [PATCH 5/5] netfilter: nft_payload: fix missing check for matching length in offloads, Pablo Neira Ayuso
    • [PATCH 4/5] ipvs: move old_secure_tcp into struct netns_ipvs, Pablo Neira Ayuso
    • Re: [PATCH 0/5] Netfilter/IPVS fixes for net, David Miller
• Re: v3.10-rc7 oops soon after boot, Pablo Neira Ayuso
  • Re: v3.10-rc7 oops soon after boot, Borislav Petkov
    • Re: v3.10-rc7 oops soon after boot, George Spelvin
      • Re: v3.10-rc7 oops soon after boot, Borislav Petkov
      • Re: v3.10-rc7 oops soon after boot, Gao feng
• [PATCH conntrack-tools 1/2] conntrackd: support replication of connlabels, Florian Westphal
  • [PATCH conntrack-tools 2/2] conntrack: add connlabel format attribute, Florian Westphal
• [PATCH lnf-ct 1/2] conntrack: labels: skip labels with non-alnum characters, Florian Westphal
  • [PATCH V2 lnf-ct 2/2] conntrack: snprintf: add connlabel format specifier, Florian Westphal
    • Re: [PATCH V2 lnf-ct 2/2] conntrack: snprintf: add connlabel format specifier, Pablo Neira Ayuso
      • Re: [PATCH V2 lnf-ct 2/2] conntrack: snprintf: add connlabel format specifier, Florian Westphal
• [PATCHv2] nft: netlink: fix network address prefix, Pablo Neira Ayuso
• [nft] netlink: fix network address prefix, Pablo Neira Ayuso
• [PATCH] nftables kernel tree: nf_tables_ipv4.c: typo in struct filter_ipv4 initialization, gapsf
  • Re: [PATCH] nftables kernel tree: nf_tables_ipv4.c: typo in struct filter_ipv4 initialization, Pablo Neira Ayuso
• [PATCH ] nftables kernel tree: nf_tables_ipv4.c: typo in struct filter_ipv4 initialization, gapsf
• [PATCH] ip6tables: don't print out /128, Phil Oester
  • Re: [PATCH] ip6tables: don't print out /128, Pablo Neira Ayuso
    • Re: [PATCH] ip6tables: don't print out /128, Phil Oester
      • Re: [PATCH] ip6tables: don't print out /128, Pablo Neira Ayuso
• [PATCH] iptables: iptables-xml: Fix various parsing bugs, Phil Oester
  • Re: [PATCH] iptables: iptables-xml: Fix various parsing bugs, Pablo Neira Ayuso
• [PATCH 1/1] netfilter: ctnetlink: send event when conntrack label was modified, Florian Westphal
  • Re: [PATCH 1/1] netfilter: ctnetlink: send event when conntrack label was modified, Pablo Neira Ayuso
• [PATCH 1/5] src: get it sync with current include/linux/netfilter/nf_tables.h, Pablo Neira Ayuso
  • [PATCH 3/5] meta: use if_nametoindex and if_indextoname, Pablo Neira Ayuso
  • [PATCH 2/5] rule: family field in struct handle is unsigned, Pablo Neira Ayuso
  • [PATCH 4/5] meta: replace rtnl_tc_handle2str and rtnl_tc_str2handle, Pablo Neira Ayuso
  • [PATCH 5/5] src: use libnftables, Pablo Neira Ayuso
  • Re: [PATCH 1/5] src: get it sync with current include/linux/netfilter/nf_tables.h, Giuseppe Longo
    • Re: [PATCH 1/5] src: get it sync with current include/linux/netfilter/nf_tables.h, Pablo Neira Ayuso
• [PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Pablo Neira Ayuso
  • [PATCH 1/2] ipvs: SCTP ports should be writable in ICMP packets, Pablo Neira Ayuso
  • Re: [PATCH 0/2] Netfilter/IPVS fixes for net, David Miller
    • Re: [PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 2/2] ipvs: update real-server binding of outgoing connections in SIP-pe, Pablo Neira Ayuso
    • [PATCH 1/2] netfilter: x_tables: don't reject valid target size on some architectures, Pablo Neira Ayuso
    • Re: [PATCH 0/2] Netfilter/IPVS fixes for net, David Miller
  • [PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 1/2] netfilter: nf_tables: fix flush after rule deletion in the same batch, Pablo Neira Ayuso
    • [PATCH 2/2] ipvs: fix warning on unused variable, Pablo Neira Ayuso
    • Re: [PATCH 0/2] Netfilter/IPVS fixes for net, David Miller
  • [PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH 1/2] netfilter: nf_tables: fix nat hook table deletion, Pablo Neira Ayuso
    • [PATCH 2/2] ipvs: fix the connection sync failed in some cases, Pablo Neira Ayuso
    • Re: [PATCH 0/2] Netfilter/IPVS fixes for net, David Miller
• [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Phil Oester
  • Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Florian Westphal
    • Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Phil Oester
        • Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Florian Westphal
  • Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Phil Oester
  • Re: [PATCH] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Florian Westphal
    • Re: [PATCH] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Pablo Neira Ayuso
• [PATCH] nft: loop optimization, Giuseppe Longo
  • Re: [PATCH] nft: loop optimization, Pablo Neira Ayuso
• [RFC PATCH 0/1] add insert after to nf_tables, Eric Leblond
  • [PATCH] netfilter: nf_tables: add insert operation, Eric Leblond
  • [libnftables PATCH] examples: add insert rule example, Eric Leblond
  • Re: [RFC PATCH 0/1] add insert after to nf_tables, Tomasz Bursztyka
    • Re: [RFC PATCH 0/1] add insert after to nf_tables, Pablo Neira Ayuso
      • Re: [RFC PATCH 0/1] add insert after to nf_tables, Tomasz Bursztyka
        • Re: [RFC PATCH 0/1] add insert after to nf_tables, Pablo Neira Ayuso
          • Re: [RFC PATCH 0/1] add insert after to nf_tables, Tomasz Bursztyka
            • Re: [RFC PATCH 0/1] add insert after to nf_tables, Patrick McHardy
              • Re: [RFC PATCH 0/1] add insert after to nf_tables, Tomasz Bursztyka
              • Re: [RFC PATCH 0/1] add insert after to nf_tables, Eric Leblond
                • [RFC PATCHv2] netfilter: nf_tables: add insert operation, Eric Leblond
                  • Re: [RFC PATCHv2] netfilter: nf_tables: add insert operation, Pablo Neira Ayuso
                    • [PATCHv3 nftables insert operation], Eric Leblond
                      • [PATCH] netfilter: nf_tables: add insert operation, Eric Leblond