Linux Netfilter / IP Tables Devel

Date Index

[Prev Page][Next Page]

[libnftables PATCH 17/21] exthdr: xml: use string for type node, (continued)
- [libnftables PATCH 17/21] exthdr: xml: use string for type node, Arturo Borrero Gonzalez
- [libnftables PATCH 21/21] exthdr: xml: rename type node to exthdr_type, Arturo Borrero Gonzalez
- [libnftables PATCH 19/21] nat: snprintf: fix buffer offset, Arturo Borrero Gonzalez
- [libnftables PATCH 18/21] meta: xml: use string to represent key attribute, Arturo Borrero Gonzalez
- [libnftables PATCH 20/21] nat: xml: rename node type to nat_type, Arturo Borrero Gonzalez
- [libnftables PATCH 12/21] chain: xml: use string for policy, Arturo Borrero Gonzalez
- [libnftables PATCH 13/21] data_reg: xml: len node shows byte length, Arturo Borrero Gonzalez
- [libnftables PATCH 14/21] data_reg: xml: fix bytes movements, Arturo Borrero Gonzalez
- Re: [libnftables PATCH 00/21] Small fixes for XML, Pablo Neira Ayuso
[GIT PULL 0/8] IPVS updates for v3.11 #2, Simon Horman
- [PATCH 8/8] netns: exclude ipvs from struct net when IPVS disabled, Simon Horman
- [PATCH 5/8] ipvs: SH fallback and L4 hashing, Simon Horman
- [PATCH 7/8] kernel: remove unnecessary head file, Simon Horman
- [PATCH 4/8] ipvs: drop SCTP connections depending on state, Simon Horman
- [PATCH 6/8] ipvs: add sync_persist_mode flag, Simon Horman
- [PATCH 1/8] ipvs: provide iph to schedulers, Simon Horman
- [PATCH 3/8] ipvs: replace the SCTP state machine, Simon Horman
- [PATCH 2/8] ipvs: sloppy TCP and SCTP, Simon Horman
- Re: [GIT PULL 0/8] IPVS updates for v3.11 #2, Pablo Neira Ayuso
[PATCH 1/2] nft: print counter issues, Giuseppe Longo
- [PATCH 2/2] nft: mem leak in nft_rule_list_cb, Giuseppe Longo
  - Re: [PATCH 2/2] nft: mem leak in nft_rule_list_cb, Pablo Neira Ayuso
- Re: [PATCH 1/2] nft: print counter issues, Pablo Neira Ayuso
[PATCH 4/5] netfilter: ctnetlink: send event when conntrack label was modified, Pablo Neira Ayuso
- [PATCH 5/5] netfilter: ipt_ULOG: fix incorrect setting of ulog timer, Pablo Neira Ayuso
[PATCH 0/5] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
- [PATCH 3/5] netfilter: nf_nat_sip: fix mangling, Pablo Neira Ayuso
- [PATCH 1/5] ipvs: SCTP ports should be writable in ICMP packets, Pablo Neira Ayuso
- [PATCH 2/5] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Pablo Neira Ayuso
- Re: [PATCH 0/5] Netfilter/IPVS fixes for net, David Miller
- <Possible follow-ups>
- [PATCH 0/5] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  - [PATCH 2/5] netfilter: nf_tables_offload: restore basechain deletion, Pablo Neira Ayuso
  - [PATCH 1/5] netfilter: nf_flow_table: set timeout before insertion into hashes, Pablo Neira Ayuso
  - [PATCH 3/5] ipvs: don't ignore errors in case refcounting ip_vs module fails, Pablo Neira Ayuso
  - [PATCH 5/5] netfilter: nft_payload: fix missing check for matching length in offloads, Pablo Neira Ayuso
  - [PATCH 4/5] ipvs: move old_secure_tcp into struct netns_ipvs, Pablo Neira Ayuso
  - Re: [PATCH 0/5] Netfilter/IPVS fixes for net, David Miller
Re: v3.10-rc7 oops soon after boot, Pablo Neira Ayuso
- Re: v3.10-rc7 oops soon after boot, Borislav Petkov
  - Re: v3.10-rc7 oops soon after boot, George Spelvin
    - Re: v3.10-rc7 oops soon after boot, Borislav Petkov
    - Re: v3.10-rc7 oops soon after boot, Gao feng
[PATCH conntrack-tools 1/2] conntrackd: support replication of connlabels, Florian Westphal
- [PATCH conntrack-tools 2/2] conntrack: add connlabel format attribute, Florian Westphal
[PATCH lnf-ct 1/2] conntrack: labels: skip labels with non-alnum characters, Florian Westphal
- [PATCH V2 lnf-ct 2/2] conntrack: snprintf: add connlabel format specifier, Florian Westphal
  - Re: [PATCH V2 lnf-ct 2/2] conntrack: snprintf: add connlabel format specifier, Pablo Neira Ayuso
    - Re: [PATCH V2 lnf-ct 2/2] conntrack: snprintf: add connlabel format specifier, Florian Westphal
[PATCHv2] nft: netlink: fix network address prefix, Pablo Neira Ayuso
[nft] netlink: fix network address prefix, Pablo Neira Ayuso
[PATCH] nftables kernel tree: nf_tables_ipv4.c: typo in struct filter_ipv4 initialization, gapsf
- Re: [PATCH] nftables kernel tree: nf_tables_ipv4.c: typo in struct filter_ipv4 initialization, Pablo Neira Ayuso
[PATCH ] nftables kernel tree: nf_tables_ipv4.c: typo in struct filter_ipv4 initialization, gapsf
[PATCH] ip6tables: don't print out /128, Phil Oester
- Re: [PATCH] ip6tables: don't print out /128, Pablo Neira Ayuso
  - Re: [PATCH] ip6tables: don't print out /128, Phil Oester
    - Re: [PATCH] ip6tables: don't print out /128, Pablo Neira Ayuso
[PATCH] iptables: iptables-xml: Fix various parsing bugs, Phil Oester
- Re: [PATCH] iptables: iptables-xml: Fix various parsing bugs, Pablo Neira Ayuso
[PATCH 1/1] netfilter: ctnetlink: send event when conntrack label was modified, Florian Westphal
- Re: [PATCH 1/1] netfilter: ctnetlink: send event when conntrack label was modified, Pablo Neira Ayuso
[PATCH 1/5] src: get it sync with current include/linux/netfilter/nf_tables.h, Pablo Neira Ayuso
- [PATCH 3/5] meta: use if_nametoindex and if_indextoname, Pablo Neira Ayuso
- [PATCH 2/5] rule: family field in struct handle is unsigned, Pablo Neira Ayuso
- [PATCH 4/5] meta: replace rtnl_tc_handle2str and rtnl_tc_str2handle, Pablo Neira Ayuso
- [PATCH 5/5] src: use libnftables, Pablo Neira Ayuso
- Re: [PATCH 1/5] src: get it sync with current include/linux/netfilter/nf_tables.h, Giuseppe Longo
  - Re: [PATCH 1/5] src: get it sync with current include/linux/netfilter/nf_tables.h, Pablo Neira Ayuso
[PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
- [PATCH 2/2] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Pablo Neira Ayuso
- [PATCH 1/2] ipvs: SCTP ports should be writable in ICMP packets, Pablo Neira Ayuso
- Re: [PATCH 0/2] Netfilter/IPVS fixes for net, David Miller
  - Re: [PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  - [PATCH 2/2] ipvs: update real-server binding of outgoing connections in SIP-pe, Pablo Neira Ayuso
  - [PATCH 1/2] netfilter: x_tables: don't reject valid target size on some architectures, Pablo Neira Ayuso
  - Re: [PATCH 0/2] Netfilter/IPVS fixes for net, David Miller
- [PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  - [PATCH 1/2] netfilter: nf_tables: fix flush after rule deletion in the same batch, Pablo Neira Ayuso
  - [PATCH 2/2] ipvs: fix warning on unused variable, Pablo Neira Ayuso
  - Re: [PATCH 0/2] Netfilter/IPVS fixes for net, David Miller
- [PATCH 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  - [PATCH 1/2] netfilter: nf_tables: fix nat hook table deletion, Pablo Neira Ayuso
  - [PATCH 2/2] ipvs: fix the connection sync failed in some cases, Pablo Neira Ayuso
  - Re: [PATCH 0/2] Netfilter/IPVS fixes for net, David Miller
[PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Phil Oester
- Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Florian Westphal
  - Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Pablo Neira Ayuso
    - Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Phil Oester
      - Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Florian Westphal
- Re: [PATCH] netfilter: remove redundant skb check in nf_conntrack_put_reasm, Pablo Neira Ayuso
[PATCH] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Phil Oester
- Re: [PATCH] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Florian Westphal
  - Re: [PATCH] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling, Pablo Neira Ayuso
[PATCH] nft: loop optimization, Giuseppe Longo
- Re: [PATCH] nft: loop optimization, Pablo Neira Ayuso
[RFC PATCH 0/1] add insert after to nf_tables, Eric Leblond
- [PATCH] netfilter: nf_tables: add insert operation, Eric Leblond
- [libnftables PATCH] examples: add insert rule example, Eric Leblond
- Re: [RFC PATCH 0/1] add insert after to nf_tables, Tomasz Bursztyka
  - Re: [RFC PATCH 0/1] add insert after to nf_tables, Pablo Neira Ayuso
    - Re: [RFC PATCH 0/1] add insert after to nf_tables, Tomasz Bursztyka
      - Re: [RFC PATCH 0/1] add insert after to nf_tables, Pablo Neira Ayuso
        
        Re: [RFC PATCH 0/1] add insert after to nf_tables, Tomasz Bursztyka
        
        Re: [RFC PATCH 0/1] add insert after to nf_tables, Patrick McHardy
        
        Re: [RFC PATCH 0/1] add insert after to nf_tables, Tomasz Bursztyka
        
        Re: [RFC PATCH 0/1] add insert after to nf_tables, Eric Leblond
        
        [RFC PATCHv2] netfilter: nf_tables: add insert operation, Eric Leblond
        
        Re: [RFC PATCHv2] netfilter: nf_tables: add insert operation, Pablo Neira Ayuso
        
        [PATCHv3 nftables insert operation], Eric Leblond
        
        [PATCH] netfilter: nf_tables: add insert operation, Eric Leblond
        
        Re: [PATCH] netfilter: nf_tables: add insert operation, Pablo Neira Ayuso
        
        [PATCHv4 nftables insert operation 0/1], Eric Leblond
        
        [PATCHv4] netfilter: nf_tables: add insert operation, Eric Leblond
        
        Re: [PATCHv4] netfilter: nf_tables: add insert operation, Pablo Neira Ayuso
        
        Re: [PATCHv4] netfilter: nf_tables: add insert operation, Eric Leblond
        
        Re: [PATCHv4] netfilter: nf_tables: add insert operation, Pablo Neira Ayuso
        
        Re: [PATCHv4] netfilter: nf_tables: add insert operation, Eric Leblond
        
        Re: [PATCHv4] netfilter: nf_tables: add insert operation, Pablo Neira Ayuso
        
        Re: [PATCHv4] netfilter: nf_tables: add insert operation, Eric Leblond
        
        [PATCHv5] netfilter: nf_tables: add insert operation, Eric Leblond
        
        Re: [PATCHv5] netfilter: nf_tables: add insert operation, Pablo Neira Ayuso
        
        [nftables PATCH] rule: honor flag argument during rule creation, Eric Leblond
        
        [libnftables PATCH 1/4] rule: add support for position attribute, Eric Leblond
        
        [libnftables PATCH 2/4] examples: add insert rule example, Eric Leblond
        
        Re: [libnftables PATCH 2/4] examples: add insert rule example, Pablo Neira Ayuso
        
        [libnftables PATCH 3/4] rule: display position in default printf, Eric Leblond
        
        Re: [libnftables PATCH 3/4] rule: display position in default printf, Pablo Neira Ayuso
        
        [libnftables PATCH 4/4] rule: change type of function to use const, Eric Leblond
        
        Re: [libnftables PATCH 4/4] rule: change type of function to use const, Pablo Neira Ayuso
        
        Re: [libnftables PATCH 1/4] rule: add support for position attribute, Pablo Neira Ayuso
        
        [nftables PATCH] Add support for insertion inside rule list, Eric Leblond
        
        Re: [nftables PATCH] Add support for insertion inside rule list, Pablo Neira Ayuso
        
        Re: [nftables PATCH] Add support for insertion inside rule list, Eric Leblond
        
        Re: [nftables PATCH] Add support for insertion inside rule list, Pablo Neira Ayuso
        
        Re: [RFC PATCHv2] netfilter: nf_tables: add insert operation, Tomasz Bursztyka
[PATCH] fix filenames typo in print_usage and file header, gapsf
- Re: [PATCH] fix filenames typo in print_usage and file header, Pablo Neira Ayuso
[GIT PULL nf] IPVS fix for v3.10, Simon Horman
- [PATCH nf] ipvs: SCTP ports should be writable in ICMP packets, Simon Horman
- Re: [GIT PULL nf] IPVS fix for v3.10, Pablo Neira Ayuso
[libnftables PATCH] test: add testbench for XML, Arturo Borrero Gonzalez
- Re: [libnftables PATCH] test: add testbench for XML, Pablo Neira Ayuso
  - Re: [libnftables PATCH] test: add testbench for XML, Arturo Borrero Gonzalez
    - Re: [libnftables PATCH] test: add testbench for XML, Pablo Neira Ayuso
[PATCH lnfct-ct 1/2] conntrack: snprintf: add labels in hex representation by default, Florian Westphal
- [PATCH 2/2] conntrack: snprintf: add connlabel format specifier, Florian Westphal
  - Re: [PATCH 2/2] conntrack: snprintf: add connlabel format specifier, Pablo Neira Ayuso
    - Re: [PATCH 2/2] conntrack: snprintf: add connlabel format specifier, Florian Westphal
      - Re: [PATCH 2/2] conntrack: snprintf: add connlabel format specifier, Pablo Neira Ayuso
- Re: [PATCH lnfct-ct 1/2] conntrack: snprintf: add labels in hex representation by default, Pablo Neira Ayuso
  - Re: [PATCH lnfct-ct 1/2] conntrack: snprintf: add labels in hex representation by default, Florian Westphal
    - Re: [PATCH lnfct-ct 1/2] conntrack: snprintf: add labels in hex representation by default, Pablo Neira Ayuso
Bridge-nf and iptables SNAT, Tsachi
- Re: Bridge-nf and iptables SNAT, Bart De Schuymer
[patch] netfilter: prevent harmless integer overflow, Dan Carpenter
- Re: [patch] netfilter: prevent harmless integer overflow, Pablo Neira Ayuso
  - Re: [patch] netfilter: prevent harmless integer overflow, Dan Carpenter
[PATCH v3] iptables-nftables: function nft_chain_zero_counters added., Giuseppe Longo
- Re: [PATCH v3] iptables-nftables: function nft_chain_zero_counters added., Pablo Neira Ayuso
[PATCH 0/3] netfilter fixes for net, Pablo Neira Ayuso
- [PATCH 1/3] netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr(), Pablo Neira Ayuso
  - Re: [PATCH 1/3] netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr(), Julian Anastasov
- [PATCH 3/3] netfilter: xt_TCPMSS: Fix missing fragmentation handling, Pablo Neira Ayuso
  - Re: [PATCH 3/3] netfilter: xt_TCPMSS: Fix missing fragmentation handling, Julian Anastasov
- [PATCH 2/3] netfilter: xt_TCPMSS: Fix IPv6 default MSS too, Pablo Neira Ayuso
- Re: [PATCH 0/3] netfilter fixes for net, David Miller
- <Possible follow-ups>
- [PATCH 0/3] netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: ipt_ULOG: fix info leaks, Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: ebt_ulog: fix info leaks, Pablo Neira Ayuso
  - [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update, Pablo Neira Ayuso
    - RE: [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update, David Laight
      - RE: [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update, Eric Dumazet
      - Re: [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update, Will Deacon
        
        Re: [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update, Eric Dumazet
  - Re: [PATCH 0/3] netfilter fixes for net, David Miller
- [PATCH 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: ipset: fix incorret comparison in hash_netnet4_data_equal(), Pablo Neira Ayuso
  - [PATCH 3/3] netfilter: nf_tables: fix missing rules flushing per table, Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: xt_hashlimit: fix proc entry leak in netns destroy path, Pablo Neira Ayuso
  - Re: [PATCH 0/3] Netfilter fixes for net, David Miller
- [PATCH 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: nf_conntrack: flush net_gre->keymap_list only from gre helper, Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: nf_conntrack: initialize net.ct.generation, Pablo Neira Ayuso
  - [PATCH 3/3] netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4, Pablo Neira Ayuso
  - Re: [PATCH 0/3] Netfilter fixes for net, David Miller
- [PATCH 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: nfnetlink_{log,queue}: Register pernet in first place, Pablo Neira Ayuso
  - [PATCH 3/3] Revert "netfilter: bridge: query conntrack about skb dnat", Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: ensure number of counters is >0 in do_replace(), Pablo Neira Ayuso
  - Re: [PATCH 0/3] Netfilter fixes for net, David Miller
- [PATCH 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: xt_TEE: fix NULL dereference, Pablo Neira Ayuso
  - [PATCH 3/3] netfilter: nfnetlink: don't probe module if it exists, Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: nf_nat_redirect: add missing NULL pointer check, Pablo Neira Ayuso
  - Re: [PATCH 0/3] Netfilter fixes for net, David Miller
- [PATCH 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options, Pablo Neira Ayuso
  - [PATCH 3/3] netfilter: ebtables: Fix extension lookup with identical name, Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: arp_tables: register table in initns, Pablo Neira Ayuso
  - Re: [PATCH 0/3] Netfilter fixes for net, David Miller
- [PATCH 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: conntrack: init all_locks to avoid debug warning, Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: IDLETIMER: fix race condition when destroy the target, Pablo Neira Ayuso
  - [PATCH 3/3] netfilter: nfnetlink_acct: validate NFACCT_QUOTA parameter, Pablo Neira Ayuso
  - Re: [PATCH 0/3] Netfilter fixes for net, David Miller
- [PATCH 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: uapi: correct UNTRACKED conntrack state bit number, Pablo Neira Ayuso
  - [PATCH 3/3] netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done(), Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: nf_tables: fix chain filter in nf_tables_dump_rules(), Pablo Neira Ayuso
  - Re: [PATCH 0/3] Netfilter fixes for net, David Miller
- [PATCH 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: nf_tables: fix module autoload with inet family, Pablo Neira Ayuso
  - [PATCH 3/3] netfilter: ipv6: nf_defrag: accept duplicate fragments again, Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments, Pablo Neira Ayuso
- [PATCH 0/3] Netfilter fixes for net, Pablo Neira Ayuso
  - [PATCH 1/3] netfilter: conntrack: Pass value of ctinfo to __nf_conntrack_update, Pablo Neira Ayuso
  - [PATCH 3/3] netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build, Pablo Neira Ayuso
  - [PATCH 2/3] netfilter: conntrack: comparison of unsigned in cthelper confirmation, Pablo Neira Ayuso
  - Re: [PATCH 0/3] Netfilter fixes for net, David Miller
[PATCH v3 1/2] iptables-nftables: function nft_chain_zero_counters added., Giuseppe Longo
- [PATCH v3 2/2] xtables: function zero_entries removed, Giuseppe Longo
- Re: [PATCH v3 1/2] iptables-nftables: function nft_chain_zero_counters added., Tomasz Bursztyka
  - Re: [PATCH v3 1/2] iptables-nftables: function nft_chain_zero_counters added., Pablo Neira Ayuso
    - Re: [PATCH v3 1/2] iptables-nftables: function nft_chain_zero_counters added., Giuseppe Longo
      - Re: [PATCH v3 1/2] iptables-nftables: function nft_chain_zero_counters added., Tomasz Bursztyka
  - Re: [PATCH v3 1/2] iptables-nftables: function nft_chain_zero_counters added., Giuseppe Longo
    - Re: [PATCH v3 1/2] iptables-nftables: function nft_chain_zero_counters added., Tomasz Bursztyka
[PATCH v2 5/5] iptables (userspace): add set match "inner" flag support, Dash Four
[PATCH v2 4/5] iptables: add set match "inner" flag support, Dash Four
[PATCH v2 3/5] ipset: add set match "inner" flag support, Dash Four
[PATCH v2 2/5] ipset: add "inner" flag implementation, Dash Four
- Re: [PATCH v2 2/5] ipset: add "inner" flag implementation, Jozsef Kadlecsik
  - Re: [PATCH v2 2/5] ipset: add "inner" flag implementation, Dash Four
    - RE: [PATCH v2 2/5] ipset: add "inner" flag implementation, Jeff Haran
      - Re: [PATCH v2 2/5] ipset: add "inner" flag implementation, Dash Four
      - RE: [PATCH v2 2/5] ipset: add "inner" flag implementation, Jozsef Kadlecsik
        
        RE: [PATCH v2 2/5] ipset: add "inner" flag implementation, Jeff Haran
    - Re: [PATCH v2 2/5] ipset: add "inner" flag implementation, Jozsef Kadlecsik
      - Re: [PATCH v2 2/5] ipset: add "inner" flag implementation, Dash Four
        
        Re: [PATCH v2 2/5] ipset: add "inner" flag implementation, Jozsef Kadlecsik
[PATCH v2 1/5] iptables: bugfix: prevent wrong syntax being accepted by the set match, Dash Four
[PATCH v2 0/5] ipset: add "inner" flag support, Dash Four
libnetfilter_queue: Another Valgrind complaint with nfq_set_mode, Tamas Lengyel
[libnftables PATCH 1/3] nat: xml: fix xml_snprintf buffer offset, Arturo Borrero
- [libnftables PATCH 2/3] nat: xml: fix non-mandatory element, Arturo Borrero
  - Re: [libnftables PATCH 2/3] nat: xml: fix non-mandatory element, Pablo Neira Ayuso
- [libnftables PATCH 3/3] rule: xml: delete trailing space, Arturo Borrero
  - Re: [libnftables PATCH 3/3] rule: xml: delete trailing space, Pablo Neira Ayuso
- Re: [libnftables PATCH 1/3] nat: xml: fix xml_snprintf buffer offset, Pablo Neira Ayuso
[libnftables PATCH] expr: bitwise: xml_parse: fix casting, Arturo Borrero
- Re: [libnftables PATCH] expr: bitwise: xml_parse: fix casting, Pablo Neira Ayuso
[libnftables PATCH 0/2] Series to add JSON output support for rules, Alvaro Neira
- [libnftables PATCH 1/2] Add function for exporting rule to JSON format, Alvaro Neira
- [libnftables PATCH 2/2] Add code for testing the new functions for exporting rules to JSON Format, Alvaro Neira
- <Possible follow-ups>
- [libnftables PATCH 0/2] Series to add JSON output support for rules, Alvaro Neira
  - [libnftables PATCH 2/2] Add code for testing the new functions for exporting rules to JSON Format, Alvaro Neira
    - Re: [libnftables PATCH 2/2] Add code for testing the new functions for exporting rules to JSON Format, Pablo Neira Ayuso
  - [libnftables PATCH 1/2] Add function for exporting rule to JSON format and Order the switch values in the right order, Alvaro Neira
    - Re: [libnftables PATCH 1/2] Add function for exporting rule to JSON format and Order the switch values in the right order, Pablo Neira Ayuso
[PATCH next] netfilter: conntrack: avoid large timeout for mid-stream pickup, Florian Westphal
- Re: [PATCH next] netfilter: conntrack: avoid large timeout for mid-stream pickup, Jozsef Kadlecsik
- Re: [PATCH next] netfilter: conntrack: avoid large timeout for mid-stream pickup, Pablo Neira Ayuso
Huge timeout with loose=1 pickup tcp connections, Florian Westphal
- Re: Huge timeout with loose=1 pickup tcp connections, Pablo Neira Ayuso
- Re: Huge timeout with loose=1 pickup tcp connections, Jozsef Kadlecsik
[PATCH nf-next] netfilter: ct: check return code from nla_parse_tested, Daniel Borkmann
- Re: [PATCH nf-next] netfilter: ct: check return code from nla_parse_tested, Pablo Neira Ayuso
  - Re: [PATCH nf-next] netfilter: ct: check return code from nla_parse_tested, Daniel Borkmann
[PATCH] netfilter: xt_TCPMSS: Add IPv6 default MSS, Phil Oester
- Re: [PATCH] netfilter: xt_TCPMSS: Add IPv6 default MSS, Pablo Neira Ayuso
[PATCH] iptables: Fix connlabel.conf install location, Phil Oester
- Re: [PATCH] iptables: Fix connlabel.conf install location, Florian Westphal
  - Re: [PATCH] iptables: Fix connlabel.conf install location, Pablo Neira Ayuso
    - Re: [PATCH] iptables: Fix connlabel.conf install location, Pablo Neira Ayuso
      - Re: [PATCH] iptables: Fix connlabel.conf install location, Florian Westphal
        
        Re: [PATCH] iptables: Fix connlabel.conf install location, Pablo Neira Ayuso
        
        Re: [PATCH] iptables: Fix connlabel.conf install location, Florian Westphal
        
        Re: [PATCH] iptables: Fix connlabel.conf install location, Pablo Neira Ayuso
- Re: [PATCH] iptables: Fix connlabel.conf install location, Pablo Neira Ayuso
[PATCH] netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr(), Pablo Neira Ayuso
[PATCH] netfilter: xt_TCPMSS: Add safe fragmentation handling, Phil Oester
- Re: [PATCH] netfilter: xt_TCPMSS: Add safe fragmentation handling, Pablo Neira Ayuso
[PATCH] Remove redundant TCP header checks from xt_TCPOPTSTRIP, Phil Oester
- Re: [PATCH] Remove redundant TCP header checks from xt_TCPOPTSTRIP, Pablo Neira Ayuso
  - Re: [PATCH] Remove redundant TCP header checks from xt_TCPOPTSTRIP, Florian Westphal
[PATCH 0/5] netfilter fixes for 3.10-rc5, Pablo Neira Ayuso
- [PATCH 4/5] netfilter: nfnetlink_queue: fix missing HW protocol, Pablo Neira Ayuso
- [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, Pablo Neira Ayuso
  - RE: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, David Laight
    - Re: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, Phil Oester
      - RE: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, David Laight
        
        Re: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, Phil Oester
        
        RE: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, David Laight
        
        Re: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, Pablo Neira Ayuso
        
        RE: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, Jeff Haran
        
        Re: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, Rick Jones
        
        RE: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, Jeff Haran
        
        RE: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, Jan Engelhardt
  - Re: [PATCH 3/5] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option, John Heffner
- [PATCH 5/5] ipvs: info leak in __ip_vs_get_dest_entries(), Pablo Neira Ayuso
- [PATCH 2/5] netfilter: nfnetlink_cttimeout: fix incomplete dumping of objects, Pablo Neira Ayuso
- [PATCH 1/5] netfilter: nfnetlink_acct: fix incomplete dumping of objects, Pablo Neira Ayuso
- Re: [PATCH 0/5] netfilter fixes for 3.10-rc5, David Miller
[nftables PATCH 0/2] work on restoration, Eric Leblond
- [nftables PATCH 1/2] rule: display hook info, Eric Leblond
  - Re: [nftables PATCH 1/2] rule: display hook info, Pablo Neira Ayuso
- [nftables PATCH 2/2] counter: fix restoration, Eric Leblond
  - Re: [nftables PATCH 2/2] counter: fix restoration, Pablo Neira Ayuso
[libnftables PATCH] data_reg: xml: delete unreachable code in _veredict_xml_parse(), Arturo Borrero
- Re: [libnftables PATCH] data_reg: xml: delete unreachable code in _veredict_xml_parse(), Pablo Neira Ayuso
[PATCH] fix leak of iter in nft_rule_list, Giuseppe Longo
- Re: [PATCH] fix leak of iter in nft_rule_list, Pablo Neira Ayuso
[PATCH v2] nft: fix leak of iterators, Giuseppe Longo
- Re: [PATCH v2] nft: fix leak of iterators, Pablo Neira Ayuso
[libnftables PATCH] src: xml: implement helper function nft_strtol, Arturo Borrero
[PATCH] netfilter: nfnetlink_queue: fix missing HW protocol, Pablo Neira Ayuso
[libnftables PATCH v3] src: add _unset functions, Arturo Borrero
- Re: [libnftables PATCH v3] src: add _unset functions, Pablo Neira Ayuso
  - Re: [libnftables PATCH v3] src: add _unset functions, Arturo Borrero Gonzalez
    - Re: [libnftables PATCH v3] src: add _unset functions, Pablo Neira Ayuso
[libnftables PATCH 0/2] Series short description, Alvaro Neira
- [libnftables PATCH 1/2] Add functions for exporting tables to JSON format, Alvaro Neira
  - Re: [libnftables PATCH 1/2] Add functions for exporting tables to JSON format, Pablo Neira Ayuso
- [libnftables PATCH 2/2] Add implementation for to proof the JSON export function, Alvaro Neira
  - Re: [libnftables PATCH 2/2] Add implementation for to proof the JSON export function, Pablo Neira Ayuso
- <Possible follow-ups>
- [libnftables PATCH 0/2] Series short description, Alvaro Neira
  - [libnftables PATCH 1/2] Add function for exporting chain to JSON Format, Alvaro Neira
    - Re: [libnftables PATCH 1/2] Add function for exporting chain to JSON Format, Pablo Neira Ayuso
  - [libnftables PATCH 2/2] Implementation for to test the function for exporting chains to JSON format, Alvaro Neira
    - Re: [libnftables PATCH 2/2] Implementation for to test the function for exporting chains to JSON format, Pablo Neira Ayuso
[libnftables PATCH v2] src: add _unset functions, Arturo Borrero
[libnftables PATCH 1/4] Add functions for to export tables to JSON format, Alvaro Neira
- [libnftables PATCH 2/4] Add implementation for to proof the JSON export function, Alvaro Neira
- [libnftables PATCH 3/4] Add JSON Constant for to use the Json export function, Alvaro Neira
  - Re: [libnftables PATCH 3/4] Add JSON Constant for to use the Json export function, Pablo Neira Ayuso
- [libnftables PATCH 4/4] Add a constant for to put the JSON Version, Alvaro Neira
[libnftables PATCH 0/4] Series short description, Alvaro Neira
[PATCH] datatype: concat expression only releases dynamically allocated datatype, Pablo Neira Ayuso
- Re: [PATCH] datatype: concat expression only releases dynamically allocated datatype, Eric Leblond
  - Re: [PATCH] datatype: concat expression only releases dynamically allocated datatype, Pablo Neira Ayuso
[libnftables PATCH 1/2] src: add _unset functions, Arturo Borrero
- [libnftables PATCH 2/2] examples: unset chain & rule handle, Arturo Borrero
- Re: [libnftables PATCH 1/2] src: add _unset functions, Pablo Neira Ayuso
  - Re: [libnftables PATCH 1/2] src: add _unset functions, Arturo Borrero Gonzalez
    - Re: [libnftables PATCH 1/2] src: add _unset functions, Pablo Neira Ayuso
[PATCH 09/12] netfilter: nfnetlink_queue: avoid peer_portid test, Pablo Neira Ayuso
[PATCH 00/12] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
- [PATCH 01/12] netfilter: xt_CT: optimize XT_CT_NOTRACK, Pablo Neira Ayuso
- [PATCH 05/12] netfilter: {ipt,ebt}_ULOG: rise warning on deprecation, Pablo Neira Ayuso
- [PATCH 06/12] sched: add cond_resched_rcu() helper, Pablo Neira Ayuso
  - Re: [PATCH 06/12] sched: add cond_resched_rcu() helper, Paul E. McKenney
- [PATCH 12/12] netfilter: nfnetlink_queue: only add CAP_LEN attr when needed, Pablo Neira Ayuso
- [PATCH 08/12] ipvs: change type of netns_ipvs->sysctl_sync_qlen_max, Pablo Neira Ayuso
- [PATCH 11/12] netfilter: nfnetlink_queue: cleanup copy_range usage, Pablo Neira Ayuso
- [PATCH 07/12] ipvs: use cond_resched_rcu() helper when walking connections, Pablo Neira Ayuso
- [PATCH 10/12] netfilter: Implement RFC 1123 for FTP conntrack, Pablo Neira Ayuso
- [PATCH 04/12] netfilter: don't panic on error while walking through the init path, Pablo Neira Ayuso
- [PATCH 03/12] bridge: netfilter: using strlcpy() instead of strncpy(), Pablo Neira Ayuso
- [PATCH 02/12] netfilter: xt_socket: use IP early demux, Pablo Neira Ayuso
- Re: [PATCH 00/12] Netfilter/IPVS updates for net-next, David Miller
- <Possible follow-ups>
- [PATCH 00/12] netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  - [PATCH 01/12] netfilter: avoid get_random_bytes calls, Pablo Neira Ayuso
  - [PATCH 02/12] netfilter: ctnetlink: honor CTA_MARK_MASK when setting ctmark, Pablo Neira Ayuso
  - [PATCH 03/12] netfilter: nfnetlink_queue: enable UID/GID socket info retrieval, Pablo Neira Ayuso
  - [PATCH 06/12] netfilter: nf_nat: add full port randomization support, Pablo Neira Ayuso
  - [PATCH 08/12] netfilter: nf_conntrack: remove dead code, Pablo Neira Ayuso
  - [PATCH 04/12] netfilter: add IPv4/6 IPComp extension match support, Pablo Neira Ayuso
  - [PATCH 05/12] ipvs: Remove unused variable ret from sync_thread_master(), Pablo Neira Ayuso
  - [PATCH 09/12] netfilter: xt_CT: fix error value in xt_ct_tg_check(), Pablo Neira Ayuso
  - [PATCH 11/12] net: netprio: rename config to be more consistent with cgroup configs, Pablo Neira Ayuso
  - [PATCH 10/12] net: net_cls: move cgroupfs classid handling into core, Pablo Neira Ayuso
  - [PATCH 12/12] netfilter: x_tables: lightweight process control group matching, Pablo Neira Ayuso
  - [PATCH 07/12] netfilter: ipset: remove unused code, Pablo Neira Ayuso
  - Re: [PATCH 00/12] netfilter/IPVS updates for net-next, David Miller
- [PATCH 00/12] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  - [PATCH 01/12] netfilter: introduce support for reject at prerouting stage, Pablo Neira Ayuso
  - [PATCH 03/12] ipvs: register hooks only with services, Pablo Neira Ayuso
  - [PATCH 07/12] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute, Pablo Neira Ayuso
  - [PATCH 09/12] netfilter: nf_tables: expose enum nft_chain_flags through UAPI, Pablo Neira Ayuso
  - [PATCH 10/12] netfilter: nf_tables: add nft_chain_add(), Pablo Neira Ayuso
  - [PATCH 12/12] netfilter: nf_tables: reject unsupported chain flags, Pablo Neira Ayuso
  - [PATCH 11/12] netfilter: nf_tables: add NFT_CHAIN_BINDING, Pablo Neira Ayuso
  - [PATCH 08/12] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute, Pablo Neira Ayuso
  - [PATCH 05/12] ipvs: allow connection reuse for unconfirmed conntrack, Pablo Neira Ayuso
  - [PATCH 06/12] netfilter: nf_tables: add NFTA_CHAIN_ID attribute, Pablo Neira Ayuso
  - [PATCH 04/12] ipvs: avoid expiring many connections from timer, Pablo Neira Ayuso
  - [PATCH 02/12] netfilter: nft_set_pipapo: Drop useless assignment of scratch map index on insert, Pablo Neira Ayuso
  - Re: [PATCH 00/12] Netfilter/IPVS updates for net-next, David Miller
[PATCH 1/2] conntrack: nfct_cmp: also compare labels, Florian Westphal
- [PATCH 2/2] qa: nfct_cmp: verify individual attr comparision, Florian Westphal
[PATCH] nft: fix leak of iterators, Giuseppe Longo
Locally transmitted Multicast packets are being looped back, even if IP_MULTICAST_LOOP option is set to zero, Vijay Tandeker
- Re: Locally transmitted Multicast packets are being looped back, even if IP_MULTICAST_LOOP option is set to zero, Eric Dumazet
  - Re: Locally transmitted Multicast packets are being looped back, even if IP_MULTICAST_LOOP option is set to zero, Vijay Tandeker
    - Re: Locally transmitted Multicast packets are being looped back, even if IP_MULTICAST_LOOP option is set to zero, Eric Dumazet
[PATCH -next 1/2] netfilter: nf_queue: cleanup copy_range usage, Florian Westphal
- [PATCH -next 2/2] netfilter: nfnetlink_queue: only add CAP_LEN attr when needed, Florian Westphal
  - Re: [PATCH -next 2/2] netfilter: nfnetlink_queue: only add CAP_LEN attr when needed, Pablo Neira Ayuso
- Re: [PATCH -next 1/2] netfilter: nf_queue: cleanup copy_range usage, Pablo Neira Ayuso
[PATCH 1/2] netfilter: nfnetlink_acct: fix incomplete dumping of objects, Pablo Neira Ayuso
- [PATCH 2/2] netfilter: nfnetlink_cttimeout: fix incomplete dumping of objects, Pablo Neira Ayuso
[libnftables] nft_*_attr_unset() functions, Arturo Borrero Gonzalez
[RFC PATCH -next] netfilter: nfqueue: add ability to dump list of supported attributes, Florian Westphal
- Re: [RFC PATCH -next] netfilter: nfqueue: add ability to dump list of supported attributes, Pablo Neira Ayuso
  - Re: [RFC PATCH -next] netfilter: nfqueue: add ability to dump list of supported attributes, Florian Westphal
[PATCH] netfilter: xt_TCPMSS: Avoid violating RFC 879 in absence of MSS option, Phil Oester
- Re: [PATCH] netfilter: xt_TCPMSS: Avoid violating RFC 879 in absence of MSS option, Pablo Neira Ayuso
[libnftables PATCH 0/3] small fixes, Eric Leblond
- [libnftables PATCH 2/3] nft-events: add newline to output, Eric Leblond
  - Re: [libnftables PATCH 2/3] nft-events: add newline to output, Pablo Neira Ayuso
- [libnftables PATCH 1/3] examples: delete payload code in nft-chain-add, Eric Leblond
  - Re: [libnftables PATCH 1/3] examples: delete payload code in nft-chain-add, Pablo Neira Ayuso
- [libnftables PATCH 3/3] expr: fix display of dreg expression, Eric Leblond
  - Re: [libnftables PATCH 3/3] expr: fix display of dreg expression, Pablo Neira Ayuso
- Re: [libnftables PATCH 0/3] small fixes, Arturo Borrero Gonzalez
[PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Eric Dumazet
- Re: [PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Jesper Dangaard Brouer
  - Re: [PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Eric Dumazet
    - Re: [PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Jesper Dangaard Brouer
- Re: [PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Eric Dumazet
  - Re: [PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Pablo Neira Ayuso
    - Re: [PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Eric Dumazet
- [PATCH v2 nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Eric Dumazet
  - Re: [PATCH v2 nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Pablo Neira Ayuso
- [PATCH iptables] xt_socket: add --nowildcard flag, Eric Dumazet
  - Re: [PATCH iptables] xt_socket: add --nowildcard flag, Pablo Neira Ayuso
[libnftables PATCH 1/5] data_reg: xml: fix bytes movements, Arturo Borrero
- [libnftables PATCH 2/5] rule: fix snprintf return value, Arturo Borrero
  - Re: [libnftables PATCH 2/5] rule: fix snprintf return value, Pablo Neira Ayuso
- [libnftables PATCH 3/5] src: xml: set errno to EINVAL when invalid parsing, Arturo Borrero
  - Re: [libnftables PATCH 3/5] src: xml: set errno to EINVAL when invalid parsing, Pablo Neira Ayuso
- [libnftables PATCH 4/5] expr: xml: don't print target&match info, Arturo Borrero
- [libnftables PATCH 5/5] examples: get XML ruleset, Arturo Borrero
[libnftables PATCH] data_reg: delete unreachable code, Arturo Borrero
- Re: [libnftables PATCH] data_reg: delete unreachable code, Pablo Neira Ayuso
[libnftables PATCH v3] src: xml: add versioning, Arturo Borrero
- Re: [libnftables PATCH v3] src: xml: add versioning, Pablo Neira Ayuso
  - Re: [libnftables PATCH v3] src: xml: add versioning, Arturo Borrero Gonzalez
    - Re: [libnftables PATCH v3] src: xml: add versioning, Pablo Neira Ayuso
[PATCH 1/1] netfilter: nf_ct_tcp: extend CLOSE_WAIT timeout, Zang MingJie
- Re: [PATCH 1/1] netfilter: nf_ct_tcp: extend CLOSE_WAIT timeout, Jozsef Kadlecsik
[PATCH] xtables-addons: xt_DHCPMAC: correct mac setting and comparing, Boris Figovsky
[PATCH 1/2] conntrackd: fix compiler warnings, Florian Westphal
- [PATCH 2/2] include: kill unused PLD_* macros, Florian Westphal
  - Re: [PATCH 2/2] include: kill unused PLD_* macros, Pablo Neira Ayuso
- Re: [PATCH 1/2] conntrackd: fix compiler warnings, Pablo Neira Ayuso
[patch] ipvs: info leak in __ip_vs_get_dest_entries(), Dan Carpenter
- Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries(), Julian Anastasov
- Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries(), Simon Horman
  - Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries(), Dan Carpenter
- Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries(), Simon Horman
  - Re: [patch] ipvs: info leak in __ip_vs_get_dest_entries(), Pablo Neira Ayuso
[nftables PATCH 0/5] misc fixes, Eric Leblond
- [nftables PATCH 1/5] doc: fix inversion of operator and object., Eric Leblond
- [nftables PATCH 2/5] expression: don't free TYPE_INVALID datatype, Eric Leblond
- [nftables PATCH 3/5] rule: list elements in set in any case, Eric Leblond
- [nftables PATCH 4/5] cli: add quit command, Eric Leblond
- [nftables PATCH 5/5] cli: reset terminal when CTRL+d is pressed, Eric Leblond
- Re: [nftables PATCH 0/5] misc fixes, Pablo Neira Ayuso
  - Re: [nftables PATCH 0/5] misc fixes, Pablo Neira Ayuso
    - Re: [nftables PATCH 0/5] misc fixes, Eric Leblond
ulog: ulogd.conf.5 man page, Chris Boot
- Re: ulog: ulogd.conf.5 man page, Eric Leblond
[PATCH lnf-conntrack 1/3] qa: add api test for nfct_cmp and nfct_exp functions, Florian Westphal
- [PATCH 3/3] expect: consider all expect attributes when comparing, Florian Westphal
  - Re: [PATCH 3/3] expect: consider all expect attributes when comparing, Pablo Neira Ayuso
    - Re: [PATCH 3/3] expect: consider all expect attributes when comparing, Florian Westphal
      - Re: [PATCH 3/3] expect: consider all expect attributes when comparing, Florian Westphal
        
        Re: [PATCH 3/3] expect: consider all expect attributes when comparing, Pablo Neira Ayuso
        
        Re: [PATCH 3/3] expect: consider all expect attributes when comparing, Florian Westphal
- [PATCH 2/3] conntrack, expect: fix _cmp api with STRICT checking, Florian Westphal
[PATCH] libnetfilter_queue: Fix Valgrind errors of unitialized byte(s) during call to nfq_unbind_pf, Tamas Lengyel
- Re: [PATCH] libnetfilter_queue: Fix Valgrind errors of unitialized byte(s) during call to nfq_unbind_pf, Florian Westphal
[PATCH v4] xtables: Add locking to prevent concurrent instances, Phil Oester
- Re: [PATCH v4] xtables: Add locking to prevent concurrent instances, Pablo Neira Ayuso
[PATCH net-next] sctp: Correct byte order of access to skb->{network, transport}_header, Simon Horman
- Re: [PATCH net-next] sctp: Correct byte order of access to skb->{network, transport}_header, David Miller
[PATCH net-next v3] netfilter: Correct calculation using skb->tail and skb-network_header, Simon Horman
- Re: [PATCH net-next v3] netfilter: Correct calculation using skb->tail and skb-network_header, David Miller
- Re: [PATCH net-next v3] netfilter: Correct calculation using skb->tail and skb-network_header, Chen Gang
[PATCH v2] netfilter: Correct calculation using skb->tail and skb-network_header, Simon Horman
- Re: [PATCH v2] netfilter: Correct calculation using skb->tail and skb-network_header, Simon Horman
[PATCH] netfilter: Correct calculation using skb->tail and skb-network_header, Simon Horman
- Re: [PATCH] netfilter: Correct calculation using skb->tail and skb-network_header, Simon Horman
iptables-nftables: Invalid argument, Giuseppe Longo
- Re: iptables-nftables: Invalid argument, Arturo Borrero Gonzalez
  - Re: iptables-nftables: Invalid argument, Pablo Neira Ayuso
[libnftables PATCH] data_reg: xml: fix invalid veredict validation, Arturo Borrero
- Re: [libnftables PATCH] data_reg: xml: fix invalid veredict validation, Pablo Neira Ayuso
[libnftables PATCH] data_reg: xml: fix using bad temp variable, Arturo Borrero
- Re: [libnftables PATCH] data_reg: xml: fix using bad temp variable, Pablo Neira Ayuso
[PATCH 0/5] netfilter fixes for 3.10-rc3, Pablo Neira Ayuso
- [PATCH 1/5] netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6, Pablo Neira Ayuso
  - Re: [PATCH 1/5] netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6, Lorenzo Colitti
    - Re: [PATCH 1/5] netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6, Florian Westphal
- [PATCH 3/5] ipvs: Fix reuse connection if real server is dead, Pablo Neira Ayuso
- [PATCH 4/5] netfilter: xt_LOG: fix mark logging for IPv6 packets, Pablo Neira Ayuso
- [PATCH 2/5] netfilter: ipt_ULOG: fix non-null terminated string in the nf_log path, Pablo Neira Ayuso
- [PATCH 5/5] ipvs: ip_vs_sh: fix build, Pablo Neira Ayuso
- Re: [PATCH 0/5] netfilter fixes for 3.10-rc3, David Miller
[ANNOUNCE] iptables 1.4.19 release, Pablo Neira Ayuso
- [ANNOUNCE] iptables 1.4.19.1 release, Pablo Neira Ayuso
[PATCH -next] netfilter: nfnetlink_queue: only add CAP_LEN attr when needed, Florian Westphal
- Re: [PATCH -next] netfilter: nfnetlink_queue: only add CAP_LEN attr when needed, Pablo Neira Ayuso
[PATCH nf] netfilter: xt_LOG: fix mark logging for IPv6 packets, Michal Kubecek
- Re: [PATCH nf] netfilter: xt_LOG: fix mark logging for IPv6 packets, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: xt_LOG: fix mark logging for IPv6 packets, Michal Kubecek
[PATCH -next] Revert "netfilter: tproxy: do not assign timewait sockets to skb->sk", Florian Westphal
- Re: [PATCH -next] Revert "netfilter: tproxy: do not assign timewait sockets to skb->sk", Eric Dumazet
- Re: [PATCH -next] Revert "netfilter: tproxy: do not assign timewait sockets to skb->sk", Pablo Neira Ayuso
  - Re: [PATCH -next] Revert "netfilter: tproxy: do not assign timewait sockets to skb->sk", Florian Westphal
[PATCH 4/4] iptables (userspace): add set match "inner" flag support, Dash Four
[PATCH 3/4] iptables: add set match "inner" flag support, Dash Four
[PATCH 2/4] ipset: add "inner" flag implementation, Dash Four
- Re: [PATCH 2/4] ipset: add "inner" flag implementation, Jozsef Kadlecsik
  - Re: [PATCH 2/4] ipset: add "inner" flag implementation, Dash Four
    - Re: [PATCH 2/4] ipset: add "inner" flag implementation, Jozsef Kadlecsik
[PATCH 1/4] ipset: minor variable-naming corrections, Dash Four
[PATCH 0/4] ipset: add "inner" flag support, Dash Four
- Head up [was Re: [PATCH 0/4] ipset: add "inner" flag support], Pablo Neira Ayuso
  - Re: Head up [was Re: [PATCH 0/4] ipset: add "inner" flag support], Jozsef Kadlecsik
    - Re: Head up [was Re: [PATCH 0/4] ipset: add "inner" flag support], Jozsef Kadlecsik
- Re: [PATCH 0/4] ipset: add "inner" flag support, Jozsef Kadlecsik
[Ulogd PATCH] pgsql: add var to specify arbitrary conn params, Eric Leblond
[libnftables PATCH] data_reg: Delete trailing space in snprintf_xml, Arturo Borrero
- Re: [libnftables PATCH] data_reg: Delete trailing space in snprintf_xml, Pablo Neira Ayuso
[libnftables PATCH] data_reg: Add generic interface for parsing: nft_data_reg_parse()., Arturo Borrero
- Re: [libnftables PATCH] data_reg: Add generic interface for parsing: nft_data_reg_parse()., Pablo Neira Ayuso
[libnftables PATCH] data_reg: Fix conditional code in XML parsing functions, Arturo Borrero
- Re: [libnftables PATCH] data_reg: Fix conditional code in XML parsing functions, Pablo Neira Ayuso
[libnftables PATCH] data_reg: conditional XML code for snprintf_xml, Arturo Borrero
- Re: [libnftables PATCH] data_reg: conditional XML code for snprintf_xml, Pablo Neira Ayuso
[libnftables PATCH] rule: fix table flag not being set at XML parsing, Arturo Borrero
- Re: [libnftables PATCH] rule: fix table flag not being set at XML parsing, Pablo Neira Ayuso
[nftables] handle when adding new chain/rule, Arturo Borrero Gonzalez
[libnftables PATCH] data_reg: fix XML operations, Arturo Borrero
- Re: [libnftables PATCH] data_reg: fix XML operations, Pablo Neira Ayuso
[libnftables PATCH v2] src: xml: add versioning, Arturo Borrero
- Re: [libnftables PATCH v2] src: xml: add versioning, Arturo Borrero Gonzalez
[PATCH] xtables: improve get_modprobe handling, Phil Oester
- Re: [PATCH] xtables: improve get_modprobe handling, Pablo Neira Ayuso
[PATCH v3] xtables: Add locking to prevent concurrent instances, Phil Oester
- Re: [PATCH v3] xtables: Add locking to prevent concurrent instances, Pablo Neira Ayuso
  - Re: [PATCH v3] xtables: Add locking to prevent concurrent instances, Phil Oester
    - Re: [PATCH v3] xtables: Add locking to prevent concurrent instances, Pablo Neira Ayuso
Re: [PATCH -resend 4/6] netfilter: Implement RFC 1123 for FTP conntrack, Pablo Neira Ayuso
nfqueue: detect when packet has already been checksummed?, Florian Westphal
- [PATCH] netfilter: nf_queue: add NFQA_SKB_CSUM_NOTVERIFIED info flag, Florian Westphal
  - Re: [PATCH] netfilter: nf_queue: add NFQA_SKB_CSUM_NOTVERIFIED info flag, Pablo Neira Ayuso
- Re: nfqueue: detect when packet has already been checksummed?, Pablo Neira Ayuso
  - Re: nfqueue: detect when packet has already been checksummed?, Florian Westphal
    - Re: nfqueue: detect when packet has already been checksummed?, Pablo Neira Ayuso
      - Re: nfqueue: detect when packet has already been checksummed?, Florian Westphal
        
        Re: nfqueue: detect when packet has already been checksummed?, Pablo Neira Ayuso
        
        Re: nfqueue: detect when packet has already been checksummed?, Florian Westphal
Negative value in /proc/net/netfilter/nfnetlink_queue, Alex Maltinsky
- Re: Negative value in /proc/net/netfilter/nfnetlink_queue, Florian Westphal
  - Re: Negative value in /proc/net/netfilter/nfnetlink_queue, Alex Maltinsky
    - Re: Negative value in /proc/net/netfilter/nfnetlink_queue, Florian Westphal
      - Re: Negative value in /proc/net/netfilter/nfnetlink_queue, Alex Maltinsky
[GIT PULL nf-next v2] IPVS for v3.11, Simon Horman
- [PATCH] ipvs: change type of netns_ipvs->sysctl_sync_qlen_max, Simon Horman
- Re: [GIT PULL nf-next v2] IPVS for v3.11, Pablo Neira Ayuso
[GIT PULL nf] IPVS fixes for v3.10, Simon Horman
- [PATCH] ipvs: Fix reuse connection if real server is dead, Simon Horman
  - Re: [PATCH] ipvs: Fix reuse connection if real server is dead, Pablo Neira Ayuso
    - Re: [PATCH] ipvs: Fix reuse connection if real server is dead, Simon Horman
[PATCH -next, resend] netfilter: nfnetlink_queue: avoid peer_portid test, Florian Westphal
- Re: [PATCH -next, resend] netfilter: nfnetlink_queue: avoid peer_portid test, Pablo Neira Ayuso
[libnftables PATCH 0/2] small fixes for libnftables XML, Arturo Borrero
- [libnftables PATCH 1/2] src: chain: delete useless castings, Arturo Borrero
  - Re: [libnftables PATCH 1/2] src: chain: delete useless castings, Pablo Neira Ayuso
- [libnftables PATCH 2/2] src: xml: add versioning, Arturo Borrero
  - Re: [libnftables PATCH 2/2] src: xml: add versioning, Pablo Neira Ayuso
[PATCH 1/3] netfilter: ctnetlink: attach expectations to unconfirmed conntracks, Pablo Neira Ayuso
- [PATCH 2/3] netfilter: don't panic on error while walking through the init path, Pablo Neira Ayuso
  - Re: [PATCH 2/3] netfilter: don't panic on error while walking through the init path, Gao feng
    - Re: [PATCH 2/3] netfilter: don't panic on error while walking through the init path, Pablo Neira Ayuso
- [PATCH 3/3] netfilter: {ipt,ebt}_ULOG: rise warning on deprecation, Pablo Neira Ayuso
  - Re: [PATCH 3/3] netfilter: {ipt,ebt}_ULOG: rise warning on deprecation, Gao feng
    - Re: [PATCH 3/3] netfilter: {ipt,ebt}_ULOG: rise warning on deprecation, Pablo Neira Ayuso
- Re: [PATCH 1/3] netfilter: ctnetlink: attach expectations to unconfirmed conntracks, Gao feng
[PATCH v2] xtables: Add locking to prevent concurrent instances, Phil Oester
[PATCH net-next] netfilter: xt_socket: use IP early demux, Eric Dumazet
- Re: [PATCH net-next] netfilter: xt_socket: use IP early demux, David Miller
  - Re: [PATCH net-next] netfilter: xt_socket: use IP early demux, Pablo Neira Ayuso
[PATCH] xtables: Add locking to prevent concurrent instances, Phil Oester
- Re: [PATCH] xtables: Add locking to prevent concurrent instances, Patrick McHardy
  - Re: [PATCH] xtables: Add locking to prevent concurrent instances, Phil Oester
    - Re: [PATCH] xtables: Add locking to prevent concurrent instances, Patrick McHardy
[libnftables PATCH v2] examples: XML parsing examples, Arturo Borrero
- Re: [libnftables PATCH v2] examples: XML parsing examples, Pablo Neira Ayuso
[GIT PULL nf-next] IPVS for v3.11, Simon Horman
- [PATCH 1/2] ipvs: change type of netns_ipvs->sysctl_sync_qlen_max, Simon Horman
- [PATCH 2/2] ipvs: Fix reuse connection if real server is dead, Simon Horman
  - Re: [PATCH 2/2] ipvs: Fix reuse connection if real server is dead, Julian Anastasov
  - Re: [PATCH 2/2] ipvs: Fix reuse connection if real server is dead, Sergei Shtylyov
  - Re: [PATCH 2/2] ipvs: Fix reuse connection if real server is dead, Pablo Neira Ayuso
    - Re: [PATCH 2/2] ipvs: Fix reuse connection if real server is dead, Simon Horman
[PATCH ipvs-next v3 0/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
- [PATCH ipvs-next v3 2/2] ipvs: use cond_resched_rcu() helper when walking connections, Simon Horman
  - Re: [PATCH ipvs-next v3 2/2] ipvs: use cond_resched_rcu() helper when walking connections, Pablo Neira Ayuso
- [PATCH ipvs-next v3 1/2] sched: add cond_resched_rcu() helper, Simon Horman
  - Re: [PATCH ipvs-next v3 1/2] sched: add cond_resched_rcu() helper, Pablo Neira Ayuso
- Re: [PATCH ipvs-next v3 0/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
  - Re: [PATCH ipvs-next v3 0/2] sched: Add cond_resched_rcu_lock() helper, David Miller
    - Re: [PATCH ipvs-next v3 0/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
      - Re: [PATCH ipvs-next v3 0/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
    - Re: [PATCH ipvs-next v3 0/2] sched: Add cond_resched_rcu_lock() helper, Pablo Neira Ayuso
    - Re: [PATCH ipvs-next v3 0/2] sched: Add cond_resched_rcu_lock() helper, Ingo Molnar
[nftables PATCH] rule: display rule handle as comment, Eric Leblond
- Re: [nftables PATCH] rule: display rule handle as comment, Pablo Neira Ayuso
  - [nftables PATCH] rule: add flag to display rule handle as comment, Eric Leblond
    - Re: [nftables PATCH] rule: add flag to display rule handle as comment, Pablo Neira Ayuso
- Re: [nftables PATCH] rule: display rule handle as comment, Patrick McHardy
- Re: [nftables PATCH] rule: display rule handle as comment, Jesper Dangaard Brouer
  - Re: [nftables PATCH] rule: display rule handle as comment, Patrick McHardy
[RFC 1/2] netfilter: nfnetlink: add commit operation to nfnl_subsystems, Pablo Neira Ayuso
- [RFC 2/2] netfilter: nf_tables: improvements for the existing transaction approach, Pablo Neira Ayuso
  - Re: [RFC 2/2] netfilter: nf_tables: improvements for the existing transaction approach, Pablo Neira Ayuso
[PATCH] iptables: use autoconf to process .in man pages, Andy Spencer
- Re: [PATCH] iptables: use autoconf to process .in man pages, Pablo Neira Ayuso
[PATCH] doc: mention SNAT in INPUT chain since kernel 2.6.36, Michael Roth
- Re: [PATCH] doc: mention SNAT in INPUT chain since kernel 2.6.36, Florian Westphal
[PATCH v2] netfilter: add and use nf_ipv6_ops in xt_addrtype, Florian Westphal
- Re: [PATCH v2] netfilter: add and use nf_ipv6_ops in xt_addrtype, Pablo Neira Ayuso
Re: [PATCH 1/2] ulogd: Perform nice() before giving up root, Eric Leblond
[PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0', Chen Gang
- Re: [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0', Pablo Neira Ayuso
  - Re: [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0', Chen Gang
    - Re: [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0', Pablo Neira Ayuso
      - Re: [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0', Chen Gang
  - [PATCH v2] ipv4: netfilter: always let NUL terminated string ended by '\0', Chen Gang
    - Re: [PATCH v2] ipv4: netfilter: always let NUL terminated string ended by '\0', Pablo Neira Ayuso
      - Re: [PATCH v2] ipv4: netfilter: always let NUL terminated string ended by '\0', Chen Gang
[PATCH] bridge: netfilter: using strlcpy() instead of strncpy(), Chen Gang
- Re: [PATCH] bridge: netfilter: using strlcpy() instead of strncpy(), Bart De Schuymer
  - Re: [PATCH] bridge: netfilter: using strlcpy() instead of strncpy(), Chen Gang
- Re: [PATCH] bridge: netfilter: using strlcpy() instead of strncpy(), Pablo Neira Ayuso
  - Re: [PATCH] bridge: netfilter: using strlcpy() instead of strncpy(), Chen Gang
[PATCH next v2] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS, Afschin Hormozdiary
- Re: [PATCH next v2] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS, Florian Westphal
MSRP Protocol, twear
[PATCH 0/4] Netfilter fixes for net (3.10-rc1), Pablo Neira Ayuso
- [PATCH 1/4] netfilter: nf_{log,queue}: fix compilation without CONFIG_PROC_FS, Pablo Neira Ayuso
- [PATCH 3/4] netfilter: log: netns NULL ptr bug when calling from conntrack, Pablo Neira Ayuso
- [PATCH 4/4] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
- [PATCH 2/4] netfilter: update MAINTAINERS file, Pablo Neira Ayuso
- Re: [PATCH 0/4] Netfilter fixes for net (3.10-rc1), David Miller
[PATCH next] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS, Afschin Hormozdiary
- Re: [PATCH next] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS, Pablo Neira Ayuso
  - Re: [PATCH next] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS, Afschin Hormozdiary
Suspicious iptables snapshot in NF FTP, Jan Engelhardt
- Re: Suspicious iptables snapshot in NF FTP, Jozsef Kadlecsik
[PATCH v4] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
[PATCH v3] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
[PATCH v2] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
[PATCH] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
- Re: [PATCH] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Florian Westphal
  - Re: [PATCH] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
    - Re: [PATCH] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Florian Westphal
      - Re: [PATCH] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
[PATCH] netfilter: log: netns NULL ptr bug when calling from conntrack., Hans Schillstrom
- Re: [PATCH] netfilter: log: netns NULL ptr bug when calling from conntrack., Pablo Neira Ayuso
  - Re: [PATCH] netfilter: log: netns NULL ptr bug when calling from conntrack., Hans Schillstrom

[Index of Archives] [LARTC] [Berkeley Packet Filter] [Bugtraq] [Yosemite Discussion]