Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH] netfilter: log: netns NULL ptr bug when calling from conntrack., (continued)
  • Re: [PATCH] netfilter: log: netns NULL ptr bug when calling from conntrack., Gao feng
• [libnftables PATCH] examples: XML parsing examples, Arturo Borrero
• [PATCH] cli: complete basic functionality of the interactive mode, Pablo Neira Ayuso
• v3.10-rc1 regression notice. (bug #818: NULL pointer dereference ipt_log_packet+0x2e/0x2b0), Ronald
  • Re: v3.10-rc1 regression notice. (bug #818: NULL pointer dereference ipt_log_packet+0x2e/0x2b0), Hans Schillstrom
    • Re: v3.10-rc1 regression notice. (bug #818: NULL pointer dereference ipt_log_packet+0x2e/0x2b0), Florian Westphal
• Query: No-flush support for ebtables-restore in v2.0.10-4, Ankit
  • Re: Query: No-flush support for ebtables-restore in v2.0.10-4, Bart De Schuymer
• [libnftables PATCH v4] src: support for XML parsing, Arturo Borrero
  • Re: [libnftables PATCH v4] src: support for XML parsing, Pablo Neira Ayuso
  • Re: [libnftables PATCH v4] src: support for XML parsing, Pablo Neira Ayuso
    • Re: [libnftables PATCH v4] src: support for XML parsing, Arturo Borrero Gonzalez
• Delivery Status Notification, pradipta
• [iptables-nftables/libnfables PATCHES] Target translation to nftables, Tomasz Bursztyka
  • [libnftables PATCH 0/7] Fixes and features, Tomasz Bursztyka
    • [libnftables PATCH 1/7] git: add a .gitignore file, Tomasz Bursztyka
      • Re: [libnftables PATCH 1/7] git: add a .gitignore file, Pablo Neira Ayuso
        • Re: [libnftables PATCH 1/7] git: add a .gitignore file, Tomasz Bursztyka
          • Re: [libnftables PATCH 1/7] git: add a .gitignore file, Pablo Neira Ayuso
            • Re: [libnftables PATCH 1/7] git: add a .gitignore file, Tomasz Bursztyka
    • [libnftables PATCH 2/7] build: add an autogen.sh script, Tomasz Bursztyka
    • [libnftables PATCH 3/7] rule: declare nft_rule_list structure at a proper place, Tomasz Bursztyka
    • [libnftables PATCH 4/7] expr: remove inconsistent and non implemented function, Tomasz Bursztyka
    • [libnftables PATCH 5/7] map: fix nft_rule_expr_build_payload export, Tomasz Bursztyka
    • [libnftables PATCH 6/7] expr: add support for expr list and capability to add it into a rule, Tomasz Bursztyka
    • [libnftables PATCH 7/7] chain: handle attribute is relevant if only there is no name to use, Tomasz Bursztyka
      • Re: [libnftables PATCH 7/7] chain: handle attribute is relevant if only there is no name to use, Pablo Neira Ayuso
        • Re: [libnftables PATCH 7/7] chain: handle attribute is relevant if only there is no name to use, Tomasz Bursztyka
          • Re: [libnftables PATCH 7/7] chain: handle attribute is relevant if only there is no name to use, Pablo Neira Ayuso
            • Re: [libnftables PATCH 7/7] chain: handle attribute is relevant if only there is no name to use, Tomasz Bursztyka
              • Re: [libnftables PATCH 7/7] chain: handle attribute is relevant if only there is no name to use, Pablo Neira Ayuso
                • Re: [libnftables PATCH 7/7] chain: handle attribute is relevant if only there is no name to use, Tomasz Bursztyka
                  • Re: [libnftables PATCH 7/7] chain: handle attribute is relevant if only there is no name to use, Pablo Neira Ayuso
    • Re: [libnftables PATCH 0/7] Fixes and features, Pablo Neira Ayuso
  • [iptables-nftables PATCH 0/6] Fixes and features, Tomasz Bursztyka
    • [iptables-nftables PATCH 1/6] xtables: initialize xtables defaults even on listing rules, Tomasz Bursztyka
      • Re: [iptables-nftables PATCH 1/6] xtables: initialize xtables defaults even on listing rules, Pablo Neira Ayuso
    • [iptables-nftables PATCH 2/6] xtables: destroy list iterator relevantly, Tomasz Bursztyka
      • Re: [iptables-nftables PATCH 2/6] xtables: destroy list iterator relevantly, Pablo Neira Ayuso
    • [iptables-nftables PATCH 5/6] xtables: add support for translating xtables matches into nft expressions, Tomasz Bursztyka
    • [iptables-nftables PATCH 6/6] xtables: add suport for DNAT rule translation to nft extensions, Tomasz Bursztyka
      • Re: [iptables-nftables PATCH 6/6] xtables: add suport for DNAT rule translation to nft extensions, Pablo Neira Ayuso
        • Re: [iptables-nftables PATCH 6/6] xtables: add suport for DNAT rule translation to nft extensions, Tomasz Bursztyka
          • Re: [iptables-nftables PATCH 6/6] xtables: add suport for DNAT rule translation to nft extensions, Pablo Neira Ayuso
            • Re: [iptables-nftables PATCH 6/6] xtables: add suport for DNAT rule translation to nft extensions, Tomasz Bursztyka
              • Re: [iptables-nftables PATCH 6/6] xtables: add suport for DNAT rule translation to nft extensions, Pablo Neira Ayuso
    • [iptables-nftables PATCH 3/6] xtables: policy can be changed only on builtin chain, Tomasz Bursztyka
      • Re: [iptables-nftables PATCH 3/6] xtables: policy can be changed only on builtin chain, Pablo Neira Ayuso
    • [iptables-nftables PATCH 4/6] xtables: Add support for translating xtables target into nft expressions, Tomasz Bursztyka
• Some netfilter compile errors when CONFIG_IPV6=m, Cong Wang
  • Re: Some netfilter compile errors when CONFIG_IPV6=m, Cong Wang
    • Re: Some netfilter compile errors when CONFIG_IPV6=m, Pablo Neira Ayuso
  • Re: Some netfilter compile errors when CONFIG_IPV6=m, Cong Wang
  • Re: Some netfilter compile errors when CONFIG_IPV6=m, Pablo Neira Ayuso
    • Re: Some netfilter compile errors when CONFIG_IPV6=m, Cong Wang
• [PATCH] netfilter: add and use nf_afinfo in xt_addrtype, Florian Westphal
  • Re: [PATCH] netfilter: add and use nf_afinfo in xt_addrtype, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: add and use nf_afinfo in xt_addrtype, Florian Westphal
• [PATCH] ipset: Fix hyphen used as minus sign in manpage, Neutron Soutmun
  • Re: [PATCH] ipset: Fix hyphen used as minus sign in manpage, Jozsef Kadlecsik
  • <Possible follow-ups>
  • [PATCH] ipset: Fix hyphen used as minus sign in manpage, Neutron Soutmun
    • Re: [PATCH] ipset: Fix hyphen used as minus sign in manpage, Jozsef Kadlecsik
• [PATCH] ipset: Fix syntax error of bash completion in Debian environment, Neutron Soutmun
  • Re: [PATCH] ipset: Fix syntax error of bash completion in Debian environment, Neutron Soutmun
    • Re: [PATCH] ipset: Fix syntax error of bash completion in Debian environment, Bourne Without
      • Re: [PATCH] ipset: Fix syntax error of bash completion in Debian environment, Neutron Soutmun
• [PATCH 0/2] Introductions, some tweaks to ulogd, Chris Boot
  • [PATCH 1/2] ulogd: Perform nice() before giving up root, Chris Boot
    • Re: [PATCH 1/2] ulogd: Perform nice() before giving up root, Chris Boot
      • Re: [PATCH 1/2] ulogd: Perform nice() before giving up root, Eric Leblond
  • [PATCH 2/2] ulogd: Implement PID file writing, Chris Boot
    • Re: [PATCH 2/2] ulogd: Implement PID file writing, Pablo Neira Ayuso
      • Re: [PATCH 2/2] ulogd: Implement PID file writing, Chris Boot
        • Re: [PATCH 2/2] ulogd: Implement PID file writing, Pablo Neira Ayuso
          • Re: [PATCH 2/2] ulogd: Implement PID file writing, Chris Boot
            • Re: [PATCH 2/2] ulogd: Implement PID file writing, Pablo Neira Ayuso
              • Re: [PATCH 2/2] ulogd: Implement PID file writing, Chris Boot
                • Re: [PATCH 2/2] ulogd: Implement PID file writing, Pablo Neira Ayuso
                  • Re: [PATCH 2/2] ulogd: Implement PID file writing, Eric Leblond
              • Re: [PATCH 2/2] ulogd: Implement PID file writing, Eric Leblond
                • Re: [PATCH 2/2] ulogd: Implement PID file writing, Chris Boot
                • Re: [PATCH 2/2] ulogd: Implement PID file writing, Pablo Neira Ayuso
    • Re: [PATCH 2/2] ulogd: Implement PID file writing, Eric Leblond
      • Re: [PATCH 2/2] ulogd: Implement PID file writing, Chris Boot
        • [PATCH v2] ulogd: Implement PID file writing, Chris Boot
          • Re: [PATCH v2] ulogd: Implement PID file writing, Chris Boot
            • Re: [PATCH v2] ulogd: Implement PID file writing, Eric Leblond
              • [Ulogd PATCH] Improve pid file handling., Eric Leblond
                • Re: [Ulogd PATCH] Improve pid file handling., Chris Boot
• [PATCH] ipset: fix syntax error in bash completion and hyphen used as minus sign in manpage, Neutron Soutmun
  • Re: [PATCH] ipset: fix syntax error in bash completion and hyphen used as minus sign in manpage, Neutron Soutmun
  • Re: [PATCH] ipset: fix syntax error in bash completion and hyphen used as minus sign in manpage, Jozsef Kadlecsik
    • Re: [PATCH] ipset: fix syntax error in bash completion and hyphen used as minus sign in manpage, Neutron Soutmun
• [PATCH] libipset.pc must be installed via 'make install', Eric Leblond
  • Re: [PATCH] libipset.pc must be installed via 'make install', Jozsef Kadlecsik
• [PATCH RFC 0/11] ulogd2 db rework, Eric Leblond
  • [PATCH 01/11] ulogd: display stack during configuration, Eric Leblond
  • [PATCH 02/11] Fix automagic support of dbi, pcap and sqlite3, Eric Leblond
  • [PATCH 03/11] postgresql: add sanity checking, Eric Leblond
  • [PATCH 04/11] mysql: add sanity checking, Eric Leblond
  • [PATCH 05/11] sqlite3: add sanity checking, Eric Leblond
  • [PATCH 06/11] db: store data in memory during database downtime, Eric Leblond
  • [PATCH 07/11] db: suppress field in db structure, Eric Leblond
  • [PATCH 08/11] db: use offset instead of direct pointer., Eric Leblond
  • [PATCH 09/11] db: add ring buffer for DB query, Eric Leblond
    • Re: [PATCH 09/11] db: add ring buffer for DB query, Pablo Neira Ayuso
      • Re: [PATCH 09/11] db: add ring buffer for DB query, Eric Leblond
        • Re: [PATCH 09/11] db: add ring buffer for DB query, Pablo Neira Ayuso
  • [PATCH 11/11] db: db ring has precedence over backlog., Eric Leblond
  • [PATCH 10/11] db: disable SIGHUP if ring buffer is used., Eric Leblond
• [PATCH nf-next] netfilter: xt_CT: optimize XT_CT_NOTRACK, Eric Dumazet
  • [PATCH resend nf-next] netfilter: xt_CT: optimize XT_CT_NOTRACK, Eric Dumazet
    • Re: [PATCH resend nf-next] netfilter: xt_CT: optimize XT_CT_NOTRACK, Pablo Neira Ayuso
• [ANNOUNCE] ipset 6.19 released, Jozsef Kadlecsik
• ip6tables: Memory allocation problem with xt_geoip on debian wheezy, Chris
• [PATCH nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
  • Message not available
    • Re: [PATCH nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
      • Message not available
        • Re: [PATCH nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
  • [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
    • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Joe Perches
      • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
        • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Joe Perches
          • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
            • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Joe Perches
              • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
                • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Joe Perches
                  • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, David Miller
                  • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
    • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Jesper Dangaard Brouer
      • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
        • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Jesper Dangaard Brouer
          • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Pablo Neira Ayuso
            • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Jesper Dangaard Brouer
    • Re: [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Pablo Neira Ayuso
• [PATCH] libxtables: fix parsing of dotted network mask format, Pablo Neira Ayuso
• [nfacct PATCH] Improve 'flush' man page entry, Thomas Jarosch
• iptables upgrade: netmask parsing trouble, Thomas Jarosch
  • Re: iptables upgrade: netmask parsing trouble, Pablo Neira Ayuso
    • Re: iptables upgrade: netmask parsing trouble, Thomas Jarosch
• Re: [PATCH 05/15] connection tracking helper for SLP, Pablo Neira Ayuso
• nfacct version dependency, Thomas Jarosch
  • Re: nfacct version dependency, Pablo Neira Ayuso
    • Re: nfacct version dependency, Thomas Jarosch
• [xtables-addons][PATCH 1/1] xt_DHCPMAC: correct mac setting and comparing, Boris Figovsky
• [xtables-addons][PATCH 0/1] xt_DHCPMAC: correct mac setting and comparing, Boris Figovsky
• [-stable-3.8.y 1/9] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Pablo Neira Ayuso
  • [-stable-3.8.y 3/9] netfilter: ipset: list:set: fix reference counter update, Pablo Neira Ayuso
  • [-stable-3.8.y 2/9] netfilter: nf_nat: fix race when unloading protocol modules, Pablo Neira Ayuso
  • [-stable-3.8.y 6/9] netfilter: nf_ct_helper: don't discard helper if it is actually the same, Pablo Neira Ayuso
  • [-stable-3.8.y 5/9] netfilter: ipset: "Directory not empty" error message, Pablo Neira Ayuso
  • [-stable-3.8.y 9/9] netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths, Pablo Neira Ayuso
  • [-stable-3.8.y 8/9] netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too, Pablo Neira Ayuso
  • [-stable-3.8.y 7/9] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
  • [-stable-3.8.y 4/9] netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet, Pablo Neira Ayuso
  • Re: [-stable-3.8.y 1/9] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Greg KH
    • Re: [-stable-3.8.y 1/9] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Pablo Neira Ayuso
      • Re: [-stable-3.8.y 1/9] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Greg KH
• [ANNOUNCE] Linux Security Summit 2013 - CFP, James Morris
  • Re: [ANNOUNCE] Linux Security Summit 2013 - CFP, Casey Schaufler
• Allow DNPT target from raw table?, Oliver
  • Re: Allow DNPT target from raw table?, Florian Westphal
  • Re: Allow DNPT target from raw table?, Patrick McHardy
    • Re: Allow DNPT target from raw table?, Oliver
• [PATCH] xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case)., Dmitry Popov
  • Re: [PATCH] xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case)., Dmitry Popov
    • Re: [PATCH] xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case)., Jan Engelhardt
      • Re: [PATCH] xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case)., Dmitry Popov
        • Re: [PATCH] xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case)., Jan Engelhardt
          • Re: [PATCH] xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case)., Dmitry Popov
            • Re: [PATCH] xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case)., Pablo Neira Ayuso
• xt_addrtype limit-iface-in is broken for ipv6, Florian Westphal
  • Re: xt_addrtype limit-iface-in is broken for ipv6, Pablo Neira Ayuso
    • Re: xt_addrtype limit-iface-in is broken for ipv6, Florian Westphal
• [PATCH 0/6] ipset updates for nf-next, Jozsef Kadlecsik
  • [PATCH 6/6] netfilter: ipset: Use fix sized type for timeout in the extension part, Jozsef Kadlecsik
  • [PATCH 2/6] netfilter: ipset: Sparse warning about shadowed variable fixed, Jozsef Kadlecsik
  • [PATCH 1/6] netfilter: ipset: Don't call ip_nest_end needlessly in the error path, Jozsef Kadlecsik
  • [PATCH 5/6] netfilter: ipset: Fix "may be used uninitialized" warnings, Jozsef Kadlecsik
    • Re: [PATCH 5/6] netfilter: ipset: Fix "may be used uninitialized" warnings, Pablo Neira Ayuso
  • [PATCH 4/6] netfilter: ipset: Rename simple macro names to avoid namespace issues., Jozsef Kadlecsik
  • [PATCH 3/6] netfilter: ipset: Fix sparse warnings due to missing rcu annotations, Jozsef Kadlecsik
    • Re: [PATCH 3/6] netfilter: ipset: Fix sparse warnings due to missing rcu annotations, Pablo Neira Ayuso
  • Re: [PATCH 0/6] ipset updates for nf-next, Pablo Neira Ayuso
    • Re: [PATCH 0/6] ipset updates for nf-next, Jozsef Kadlecsik
      • Re: [PATCH 0/6] ipset updates for nf-next, Pablo Neira Ayuso
• [PATCH v3 0/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
  • [PATCH v3 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Simon Horman
  • [PATCH v3 1/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
• Re: net/netfilter/nf_log.c:373:38: error: 'struct netns_nf' has no member named 'proc_netfilter', Pablo Neira Ayuso
  • Re: net/netfilter/nf_log.c:373:38: error: 'struct netns_nf' has no member named 'proc_netfilter', Gao feng
• Re: [PATCH] netfilter: ipset: support package fragments for IPv4 protos without ports, Jozsef Kadlecsik
  • [PATCH V2] netfilter: ipset: support package fragments for IPv4 protos without ports, Anders K. Pedersen | Surftown
    • Re: [PATCH V2] netfilter: ipset: support package fragments for IPv4 protos without ports, Pablo Neira Ayuso
      • Re: [PATCH V2] netfilter: ipset: support package fragments for IPv4 protos without ports, Anders K. Pedersen | Surftown
    • Re: [PATCH V2] netfilter: ipset: support package fragments for IPv4 protos without ports, Jozsef Kadlecsik
• Bug fixes only now please., David Miller
• [PATCH v2 0/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
  • [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
    • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
      • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
        • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
          • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
            • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
              • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
                • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
              • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
                • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Eric Dumazet
                  • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
                  • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
                    • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
                      • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
            • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
              • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
                • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
                  • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
                  • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
                    • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
                    • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
                      • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
                        • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
                          • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
                          • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
                            • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
                              • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
                                • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
                                  • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
                                    • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
                                      • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
                                        • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
                                    • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
                                    • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
                                      • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
  • [PATCH v2 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Simon Horman
• [PATCH 00/18] netfilter updates for net-next (try 2), Pablo Neira Ayuso
  • [PATCH 02/18] netfilter: ipset: Move often used IPv6 address masking function to header file, Pablo Neira Ayuso
  • [PATCH 18/18] sctp: Correct type and usage of sctp_end_cksum(), Pablo Neira Ayuso
  • [PATCH 16/18] netfilter: nfnetlink_queue: add skb info attribute, Pablo Neira Ayuso
  • [PATCH 07/18] netfilter: ipset: Hash types using the unified code base, Pablo Neira Ayuso
  • [PATCH 08/18] netfilter: ipset: list:set type using the extension interface, Pablo Neira Ayuso
  • [PATCH 13/18] netfilter: ipset: set match: add support to match the counters, Pablo Neira Ayuso
  • [PATCH 12/18] netfilter: ipset: The list:set type with counter support, Pablo Neira Ayuso
  • [PATCH 15/18] netfilter: move skb_gso_segment into nfnetlink_queue module, Pablo Neira Ayuso
  • [PATCH 17/18] netfilter: nfnetlink_queue: avoid expensive gso segmentation and checksum fixup, Pablo Neira Ayuso
  • [PATCH 10/18] netfilter: ipset: The bitmap types with counter support, Pablo Neira Ayuso
  • [PATCH 11/18] netfilter: ipset: The hash types with counter support, Pablo Neira Ayuso
  • [PATCH 14/18] netfilter: nf_queue: move device refcount bump to extra function, Pablo Neira Ayuso
  • [PATCH 09/18] netfilter: ipset: Introduce the counter extension in the core, Pablo Neira Ayuso
  • [PATCH 05/18] netfilter: ipset: Bitmap types using the unified code base, Pablo Neira Ayuso
  • [PATCH 06/18] netfilter: ipset: Unified hash type generation, Pablo Neira Ayuso
  • [PATCH 04/18] netfilter: ipset: Unified bitmap type generation, Pablo Neira Ayuso
    • RE: [PATCH 04/18] netfilter: ipset: Unified bitmap type generation, David Laight
      • RE: [PATCH 04/18] netfilter: ipset: Unified bitmap type generation, Jozsef Kadlecsik
  • [PATCH 03/18] netfilter: ipset: Introduce extensions to elements in the core, Pablo Neira Ayuso
  • [PATCH 01/18] netfilter: ipset: Make possible to test elements marked with nomatch, Pablo Neira Ayuso
  • Re: [PATCH 00/18] netfilter updates for net-next (try 2), David Miller
• [libnftables PATCH 1/2] src: delete exporting internal flags in XML, Arturo Borrero
  • [libnftables PATCH 2/2] src: support for XML parsing, Arturo Borrero
    • Re: [libnftables PATCH 2/2] src: support for XML parsing, Pablo Neira Ayuso
      • Re: [libnftables PATCH 2/2] src: support for XML parsing, Arturo Borrero Gonzalez
        • Re: [libnftables PATCH 2/2] src: support for XML parsing, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH 1/2] src: delete exporting internal flags in XML, Pablo Neira Ayuso
• [PATCH 00/18] netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 02/18] netfilter: ipset: Move often used IPv6 address masking function to header file, Pablo Neira Ayuso
  • [PATCH 08/18] netfilter: ipset: list:set type using the extension interface, Pablo Neira Ayuso
  • [PATCH 15/18] netfilter: move skb_gso_segment into nfnetlink_queue module, Pablo Neira Ayuso
  • [PATCH 14/18] netfilter: nf_queue: move device refcount bump to extra function, Pablo Neira Ayuso
  • [PATCH 16/18] netfilter: nfnetlink_queue: add skb info attribute, Pablo Neira Ayuso
  • [PATCH 11/18] netfilter: ipset: The hash types with counter support, Pablo Neira Ayuso
  • [PATCH 18/18] sctp: Correct type and usage of sctp_end_cksum(), Pablo Neira Ayuso
  • [PATCH 17/18] netfilter: nfnetlink_queue: avoid expensive gso segmentation and checksum fixup, Pablo Neira Ayuso
  • [PATCH 07/18] netfilter: ipset: Hash types using the unified code base, Pablo Neira Ayuso
  • [PATCH 12/18] netfilter: ipset: The list:set type with counter support, Pablo Neira Ayuso
  • [PATCH 13/18] netfilter: ipset: set match: add support to match the counters, Pablo Neira Ayuso
  • [PATCH 03/18] netfilter: ipset: Introduce extensions to elements in the core, Pablo Neira Ayuso
  • [PATCH 10/18] netfilter: ipset: The bitmap types with counter support, Pablo Neira Ayuso
  • [PATCH 09/18] netfilter: ipset: Introduce the counter extension in the core, Pablo Neira Ayuso
  • [PATCH 05/18] netfilter: ipset: Bitmap types using the unified code base, Pablo Neira Ayuso
  • [PATCH 06/18] netfilter: ipset: Unified hash type generation, Pablo Neira Ayuso
  • [PATCH 04/18] netfilter: ipset: Unified bitmap type generation, Pablo Neira Ayuso
  • [PATCH 01/18] netfilter: ipset: Make possible to test elements marked with nomatch, Pablo Neira Ayuso
  • Re: [PATCH 00/18] netfilter updates for net-next, David Miller
    • Re: [PATCH 00/18] netfilter updates for net-next, Pablo Neira Ayuso
      • Re: [PATCH 00/18] netfilter updates for net-next, David Miller
    • Re: [PATCH 00/18] netfilter updates for net-next, Jozsef Kadlecsik
  • <Possible follow-ups>
  • [PATCH 00/18] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 08/18] netfilter: log: nf_log_packet() as real unified interface, Pablo Neira Ayuso
    • [PATCH 09/18] netfilter: add generic ARP packet logger, Pablo Neira Ayuso
    • [PATCH 15/18] netfilter: nft_log: fix coccinelle warnings, Pablo Neira Ayuso
    • [PATCH 18/18] ipvs: Remove dead debug code, Pablo Neira Ayuso
    • [PATCH 17/18] ipvs: remove null test before kfree, Pablo Neira Ayuso
    • [PATCH 16/18] netfilter: use IS_ENABLED() macro, Pablo Neira Ayuso
    • [PATCH 14/18] netfilter: xt_LOG: add missing string format in nf_log_packet(), Pablo Neira Ayuso
    • [PATCH 12/18] netfilter: nft_log: complete logging support, Pablo Neira Ayuso
    • [PATCH 13/18] netfilter: fix several Kconfig problems in NF_LOG_*, Pablo Neira Ayuso
    • [PATCH 06/18] netfilter: nf_log: move log buffering to core logging, Pablo Neira Ayuso
    • [PATCH 07/18] netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c files, Pablo Neira Ayuso
    • [PATCH 05/18] netfilter: nf_log: use an array of loggers instead of list, Pablo Neira Ayuso
    • [PATCH 10/18] netfilter: bridge: add generic packet logger, Pablo Neira Ayuso
    • [PATCH 11/18] netfilter: nft_log: request explicit logger when loading rules, Pablo Neira Ayuso
    • [PATCH 03/18] netfilter: conntrack: remove timer from ecache extension, Pablo Neira Ayuso
    • [PATCH 04/18] netfilter: kill ulog targets, Pablo Neira Ayuso
    • [PATCH 02/18] netfilter: x_tables: xt_free_table_info() cleanup, Pablo Neira Ayuso
    • [PATCH 01/18] netfilter: ctnetlink: remove null test before kfree, Pablo Neira Ayuso
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
  • [PATCH 00/18] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/18] netfilter: kill nf_hooks_active, Pablo Neira Ayuso
    • [PATCH 02/18] netfilter: Simply the tests for enabling and disabling the ingress queue hook, Pablo Neira Ayuso
    • [PATCH 03/18] netfilter: Factor out the hook list selection from nf_register_hook, Pablo Neira Ayuso
    • [PATCH 11/18] netfilter: Fix memory leak in nf_register_net_hook, Pablo Neira Ayuso
    • [PATCH 17/18] netfilter: bridge: do not initialize statics to 0 or NULL, Pablo Neira Ayuso
    • [PATCH 18/18] netfilter: ip6t_REJECT: Remove debug messages from reject_tg6(), Pablo Neira Ayuso
    • [PATCH 15/18] netfilter: nf_ct_sctp: minimal multihoming support, Pablo Neira Ayuso
    • [PATCH 16/18] netfilter: bridge: reduce nf_bridge_info to 32 bytes again, Pablo Neira Ayuso
    • [PATCH 12/18] netfilter: nf_queue: fix nf_queue_nf_hook_drop(), Pablo Neira Ayuso
    • [PATCH 14/18] netfilter: rename local nf_hook_list to hook_list, Pablo Neira Ayuso
    • [PATCH 13/18] netfilter: fix possible removal of wrong hook, Pablo Neira Ayuso
    • [PATCH 10/18] netfilter: xtables: remove __pure annotation, Pablo Neira Ayuso
    • [PATCH 09/18] netfilter: add and use jump label for xt_tee, Pablo Neira Ayuso
    • [PATCH 08/18] netfilter: xtables: don't save/restore jumpstack offset, Pablo Neira Ayuso
    • [PATCH 05/18] netfilter: nftables: Only run the nftables chains in the proper netns, Pablo Neira Ayuso
    • [PATCH 06/18] netfilter: xtables: compute exact size needed for jumpstack, Pablo Neira Ayuso
    • [PATCH 07/18] netfilter: move tee_active to core, Pablo Neira Ayuso
    • [PATCH 04/18] netfilter: Per network namespace netfilter hooks., Pablo Neira Ayuso
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
  • [PATCH 00/18] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 03/18] netfilter: nft_numgen: add map lookups for numgen random operations, Pablo Neira Ayuso
    • [PATCH 06/18] netfilter: xtables: allow table definitions not backed by hook_ops, Pablo Neira Ayuso
    • [PATCH 09/18] netfilter: nf_nat: add nat hook register functions to nf_nat, Pablo Neira Ayuso
    • [PATCH 18/18] netfilter: nf_tables: remove nft_af_info., Pablo Neira Ayuso
    • [PATCH 17/18] netfilter: nfnetlink_queue: resolve clash for unconfirmed conntracks, Pablo Neira Ayuso
    • [PATCH 16/18] netfilter: add struct nf_nat_hook and use it, Pablo Neira Ayuso
    • [PATCH 15/18] netfilter: add struct nf_ct_hook and use it, Pablo Neira Ayuso
    • [PATCH 14/18] netfilter: ip6t_rpfilter: provide input interface for route lookup, Pablo Neira Ayuso
    • [PATCH 13/18] netfilter: nft_set_rbtree: add timeout support, Pablo Neira Ayuso
    • [PATCH 10/18] netfilter: nf_nat: add nat type hooks to nat core, Pablo Neira Ayuso
    • [PATCH 07/18] netfilter: nf_tables: allow chain type to override hook register, Pablo Neira Ayuso
    • [PATCH 12/18] netfilter: make NF_OSF non-visible symbol, Pablo Neira Ayuso
    • [PATCH 11/18] netfilter: lift one-nat-hook-only restriction, Pablo Neira Ayuso
    • [PATCH 08/18] netfilter: core: export raw versions of add/delete hook functions, Pablo Neira Ayuso
    • [PATCH 05/18] netfilter: nf_nat: move common nat code to nat core, Pablo Neira Ayuso
    • [PATCH 04/18] netfilter: nft_hash: add map lookups for hashing operations, Pablo Neira Ayuso
    • [PATCH 01/18] netfilter: fix fallout from xt/nf osf separation, Pablo Neira Ayuso
    • [PATCH 02/18] netfilter: nf_tables: remove old nf_log based tracing, Pablo Neira Ayuso
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
  • [PATCH 00/18] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 06/18] netfilter: nft_payload: add C-VLAN support, Pablo Neira Ayuso
    • [PATCH 17/18] netfilter: nf_tables: check if bind callback fails and unbind if hook registration fails, Pablo Neira Ayuso
    • [PATCH 15/18] netfilter: nf_tables_offload: release flow_rule on error from commit path, Pablo Neira Ayuso
    • [PATCH 16/18] netfilter: nf_tables_offload: undo updates if transaction fails, Pablo Neira Ayuso
    • [PATCH 18/18] netfilter: nf_tables: add nft_unregister_flowtable_hook(), Pablo Neira Ayuso
    • [PATCH 14/18] netfilter: nf_tables_offload: remove reference to flow rule from deletion path, Pablo Neira Ayuso
    • [PATCH 11/18] netfilter: Support iif matches in POSTROUTING, Pablo Neira Ayuso
    • [PATCH 08/18] netfilter: nft_meta: use 64-bit time arithmetic, Pablo Neira Ayuso
    • [PATCH 13/18] netfilter: nf_flow_table: remove unnecessary parameter in flow_offload_fill_dir, Pablo Neira Ayuso
    • [PATCH 12/18] netfilter: nf_flow_table_offload: Fix check ndo_setup_tc when setup_block, Pablo Neira Ayuso
    • [PATCH 09/18] netfilter: nf_flow_table_offload: add flow_action_entry_next() and use it, Pablo Neira Ayuso
    • [PATCH 10/18] netfilter: nf_flow_table_offload: add IPv6 support, Pablo Neira Ayuso
    • [PATCH 02/18] netfilter: nft_meta: offload support for interface index, Pablo Neira Ayuso
    • [PATCH 04/18] netfilter: nf_tables: add nft_payload_rebuild_vlan_hdr(), Pablo Neira Ayuso
    • [PATCH 07/18] netfilter: xt_time: use time64_t, Pablo Neira Ayuso
    • [PATCH 05/18] netfilter: nf_tables_offload: pass extack to nft_flow_cls_offload_setup(), Pablo Neira Ayuso
    • [PATCH 03/18] netfilter: nft_payload: simplify vlan header handling, Pablo Neira Ayuso
    • [PATCH 01/18] netfilter: ipset: Add wildcard support to net,iface, Pablo Neira Ayuso
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
• [PATCH] IPVS fix for 3.9, Pablo Neira Ayuso
  • [PATCH] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Pablo Neira Ayuso
    • Re: [PATCH] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, David Miller
• [PATCH 00/13] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 02/13] netfilter: ipset: Move often used IPv6 address masking function to header file, Jozsef Kadlecsik
  • [PATCH 09/13] netfilter: ipset: Introduce the counter extension in the core, Jozsef Kadlecsik
  • [PATCH 04/13] netfilter: ipset: Unified bitmap type generation, Jozsef Kadlecsik
  • [PATCH 13/13] netfilter: ipset: set match: add support to match the counters, Jozsef Kadlecsik
    • Re: [PATCH 13/13] netfilter: ipset: set match: add support to match the counters, Pablo Neira Ayuso
      • Re: [PATCH 13/13] netfilter: ipset: set match: add support to match the counters, Jozsef Kadlecsik
  • [PATCH 03/13] netfilter: ipset: Introduce extensions to elements in the core, Jozsef Kadlecsik
  • [PATCH 12/13] netfilter: ipset: The list:set type with counter support, Jozsef Kadlecsik
  • [PATCH 10/13] netfilter: ipset: The bitmap types with counter support, Jozsef Kadlecsik
  • [PATCH 05/13] netfilter: ipset: Bitmap types using the unified code base, Jozsef Kadlecsik
  • [PATCH 11/13] netfilter: ipset: The hash types with counter support, Jozsef Kadlecsik
  • [PATCH 01/13] netfilter: ipset: Make possible to test elements marked with nomatch, Jozsef Kadlecsik
  • [PATCH 08/13] netfilter: ipset: list:set type using the extension interface, Jozsef Kadlecsik
  • [PATCH 07/13] netfilter: ipset: Hash types using the unified code base, Jozsef Kadlecsik
  • [PATCH 06/13] netfilter: ipset: Unified hash type generation, Jozsef Kadlecsik
  • Re: [PATCH 00/13] ipset patches for nf-next, Dash Four
    • Re: [PATCH 00/13] ipset patches for nf-next, Jozsef Kadlecsik
      • Re: [PATCH 00/13] ipset patches for nf-next, Dash Four
        • Re: [PATCH 00/13] ipset patches for nf-next, Jozsef Kadlecsik
  • Re: [PATCH 00/13] ipset patches for nf-next, Pablo Neira Ayuso
• [PATCH v2 0/4] libnetfilter_queue: gso handling support, Florian Westphal
  • [PATCH 1/4] build: don't install internal.h, Florian Westphal
  • [PATCH 3/4] src: add new GSO handling capabilities, Florian Westphal
  • [PATCH 2/4] examples/nf-queue: handle recv error, use larger buffer, Florian Westphal
  • [PATCH 4/4] examples/nf-queue: receive large gso packets, Florian Westphal
• [GIT PULL ipvs] ipvs fixes for v3.9 #2, Simon Horman
  • [PATCH ipvs 1/1] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Simon Horman
    • Re: [PATCH ipvs 1/1] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Sergei Shtylyov
  • Re: [GIT PULL ipvs] ipvs fixes for v3.9 #2, Pablo Neira Ayuso
• [PATCH 0/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
  • [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Simon Horman
    • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Ingo Molnar
      • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Simon Horman
    • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Peter Zijlstra
      • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
        • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Eric Dumazet
          • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
        • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Peter Zijlstra
          • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
            • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Eric Dumazet
              • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
                • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Peter Zijlstra
                  • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
              • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Julian Anastasov
                • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
                  • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Julian Anastasov
                    • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
                      • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Julian Anastasov
  • [PATCH 1/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
    • Re: [PATCH 1/2] sched: Add cond_resched_rcu_lock() helper, Ingo Molnar
• [ANNOUNCE] Netfilter is participating in the Google Summer of Code 2013, Pablo Neira Ayuso
  • Re: [ANNOUNCE] Netfilter is participating in the Google Summer of Code 2013, Arturo Borrero Gonzalez
• [PATCH 0/4] libnetfilter_queue: gso handling support, Florian Westphal
  • [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Florian Westphal
    • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Pablo Neira Ayuso
      • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Florian Westphal
        • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Pablo Neira Ayuso
          • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Florian Westphal
            • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Pablo Neira Ayuso
              • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Florian Westphal
  • [PATCH 3/4] src: add new GSO handling capabilities, Florian Westphal
  • [PATCH 4/4] examples/nf-queue: receive large gso packets, Florian Westphal
  • [PATCH 2/4] examples/nf-queue: handle recv error, use larger buffer, Florian Westphal
    • Re: [PATCH 2/4] examples/nf-queue: handle recv error, use larger buffer, Pablo Neira Ayuso
      • Re: [PATCH 2/4] examples/nf-queue: handle recv error, use larger buffer, Florian Westphal
• [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Hans Schillstrom
  • Re: [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Simon Horman
    • Re: [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Hans Schillstrom
  • Re: [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Julian Anastasov
    • Re: [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Simon Horman
• [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Simon Horman
  • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Julian Anastasov
    • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Hans Schillstrom
      • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Simon Horman
        • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Eric Dumazet
          • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Julian Anastasov
            • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Simon Horman
    • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Pablo Neira Ayuso
      • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Julian Anastasov
• [PATCH 00/10] netfilter fixes for net-next, Pablo Neira Ayuso
  • [PATCH 01/10] ipvs: properly dereference dest_dst in ip_vs_forget_dev, Pablo Neira Ayuso
  • [PATCH 03/10] ipvs: fix the remaining sparse warnings in ip_vs_ctl.c, Pablo Neira Ayuso
  • [PATCH 05/10] ipvs: fix sparse warnings for some parameters, Pablo Neira Ayuso
  • [PATCH 10/10] netfilter: nf_nat: missing condition in nf_xfrm_me_harder(), Pablo Neira Ayuso
  • [PATCH 09/10] ipvs: Use network byte order for sync message size, Pablo Neira Ayuso
  • [PATCH 08/10] ipvs: off by one in set_sctp_state(), Pablo Neira Ayuso
  • [PATCH 06/10] ipvs: Avoid shadowing net variable in ip_vs_leave(), Pablo Neira Ayuso
  • [PATCH 07/10] ipvs: Use min3() in ip_vs_dbg_callid(), Pablo Neira Ayuso
  • [PATCH 04/10] ipvs: fix sparse warnings in lblc and lblcr, Pablo Neira Ayuso
  • [PATCH 02/10] ipvs: fix sparse warnings for ip_vs_conn listing, Pablo Neira Ayuso
  • Re: [PATCH 00/10] netfilter fixes for net-next, David Miller
• [PATCH 1/1] ip_vs_sip_fill_param() uninitialized var, Hans Schillstrom
  • Re: [PATCH 1/1] ip_vs_sip_fill_param() uninitialized var, Julian Anastasov
    • Re: [PATCH 1/1] ip_vs_sip_fill_param() uninitialized var, Hans Schillstrom
      • Re: [PATCH 1/1] ip_vs_sip_fill_param() uninitialized var, Julian Anastasov
• [patch -next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder(), Dan Carpenter
  • Re: [patch -next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder(), Pablo Neira Ayuso
• [GIT PULL nf-next v2] IPVS fixes for v3.10, Simon Horman
  • [PATCH nf-next 3/9] ipvs: fix the remaining sparse warnings in ip_vs_ctl.c, Simon Horman
  • [PATCH nf-next 2/9] ipvs: fix sparse warnings for ip_vs_conn listing, Simon Horman
  • [PATCH nf-next 9/9] ipvs: Use network byte order for sync message size, Simon Horman
  • [PATCH nf-next 5/9] ipvs: fix sparse warnings for some parameters, Simon Horman
  • [PATCH nf-next 8/9] ipvs: off by one in set_sctp_state(), Simon Horman
  • [PATCH nf-next 6/9] ipvs: Avoid shadowing net variable in ip_vs_leave(), Simon Horman
  • [PATCH nf-next 7/9] ipvs: Use min3() in ip_vs_dbg_callid(), Simon Horman
  • [PATCH nf-next 1/9] ipvs: properly dereference dest_dst in ip_vs_forget_dev, Simon Horman
  • [PATCH nf-next 4/9] ipvs: fix sparse warnings in lblc and lblcr, Simon Horman
  • Re: [GIT PULL nf-next v2] IPVS fixes for v3.10, Pablo Neira Ayuso
• nftables kernel repo issue, Oliver
• [PATCH 0/2], dmitry pervushin
  • [PATCH 1/2] netfilter: idletimers, synchronize headers, dmitry pervushin
  • [PATCH 2/2] netfilter: idletimers, add v1 structures, dmitry pervushin
• [PATCH 0/2] netfilter: idletimers, dmitry pervushin
  • [PATCH 2/2] netfilter: idletimers - add send_nl_msg field, dmitry pervushin
    • Re: [PATCH 2/2] netfilter: idletimers - add send_nl_msg field, Pablo Neira Ayuso
  • [PATCH 1/2] netfilter: idletimers - fix the case of already expired timer, dmitry pervushin
    • Re: [PATCH 1/2] netfilter: idletimers - fix the case of already expired timer, Pablo Neira Ayuso
• Git commits possibly suitable for 3.8-stable tree?, Oliver
  • Re: Git commits possibly suitable for 3.8-stable tree?, Pablo Neira Ayuso
• [patch] ipvs: off by one in set_sctp_state(), Dan Carpenter
  • Re: [patch] ipvs: off by one in set_sctp_state(), Julian Anastasov
    • Re: [patch] ipvs: off by one in set_sctp_state(), Simon Horman
      • Re: [patch] ipvs: off by one in set_sctp_state(), Julian Anastasov
        • Re: [patch] ipvs: off by one in set_sctp_state(), Moahn Reddy
          • Re: [patch] ipvs: off by one in set_sctp_state(), Dan Carpenter
            • Re: [patch] ipvs: off by one in set_sctp_state(), Moahn Reddy
        • Re: [patch] ipvs: off by one in set_sctp_state(), Simon Horman
• Re: [PATCH nf-next 0/2] ipvs: minor clean ups flagged by sparse, Julian Anastasov
  • Re: [PATCH nf-next 0/2] ipvs: minor clean ups flagged by sparse, Simon Horman
• [PATCH -next v2 0/5] netfilter: nf_queue: avoid expensive gso/checksums, Florian Westphal
  • [PATCH 3/5] netfilter: move skb_gso_segment into nfnetlink_queue module, Florian Westphal
    • Re: [PATCH 3/5] netfilter: move skb_gso_segment into nfnetlink_queue module, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: nf_queue: move device refcount bump to extra function, Florian Westphal
    • Re: [PATCH 1/5] netfilter: nf_queue: move device refcount bump to extra function, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nfnetlink_queue: avoid peer_portid test, Florian Westphal
    • Re: [PATCH 2/5] netfilter: nfnetlink_queue: avoid peer_portid test, Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Florian Westphal
    • Re: [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: nfqueue: avoid expensive gso segmentation and checksum fixup, Florian Westphal
    • Re: [PATCH 5/5] netfilter: nfqueue: avoid expensive gso segmentation and checksum fixup, Pablo Neira Ayuso
• Re: [PATCH] sctp: Correct type and usage of sctp_end_cksum(), Neil Horman
  • Re: [PATCH] sctp: Correct type and usage of sctp_end_cksum(), Simon Horman
    • Re: [PATCH] sctp: Correct type and usage of sctp_end_cksum(), Pablo Neira Ayuso
      • Re: [PATCH] sctp: Correct type and usage of sctp_end_cksum(), Simon Horman
• [PATCH] netfilter: add my copyright statements, Pablo Neira Ayuso
• [PATCH 4/5] netfilter: add my copyright statements, Pablo Neira Ayuso
• xtables-addons compile error (DNETMAP), Dash Four
  • Re: xtables-addons compile error (DNETMAP), Dash Four
• xt_CHECKSUM doesn't work as expected, Jorge Ventura
  • Re: xt_CHECKSUM doesn't work as expected, Patrick McHardy
    • Re: xt_CHECKSUM doesn't work as expected, Jorge Ventura
    • Re: xt_CHECKSUM doesn't work as expected, Jorge Ventura
      • Re: xt_CHECKSUM doesn't work as expected, Jorge Ventura
• [PATCH] bridge: fix IP DNAT handling when packet is sent back via same bport, Florian Westphal
  • Re: [PATCH] bridge: fix IP DNAT handling when packet is sent back via same bport, Bart De Schuymer
    • Re: [PATCH] bridge: fix IP DNAT handling when packet is sent back via same bport, Florian Westphal
• [PATCH V2 1/2] netfilter: rpfilter: skip locally generated bcast, too, Florian Westphal
  • [PATCH 2/2] netfilter: rpfilter: depend on raw or mangle table, Florian Westphal
    • Re: [PATCH 2/2] netfilter: rpfilter: depend on raw or mangle table, Pablo Neira Ayuso
  • Re: [PATCH V2 1/2] netfilter: rpfilter: skip locally generated bcast, too, Pablo Neira Ayuso
• [PATCH 00/14]: netlink: memory mapped I/O, Patrick McHardy
  • [PATCH 01/14] netlink: add symbolic value for congested state, Patrick McHardy
    • Re: [PATCH 01/14] netlink: add symbolic value for congested state, Sergei Shtylyov
  • [PATCH 07/14] netlink: add mmap'ed netlink helper functions, Patrick McHardy
  • [PATCH 06/14] netlink: mmaped netlink: ring setup, Patrick McHardy
  • [PATCH 13/14] netfilter: rename netlink related "pid" variables to "portid", Patrick McHardy
  • [PATCH 14/14] nfnetlink: add support for memory mapped netlink, Patrick McHardy
    • Message not available
      • Re: [PATCH 14/14] nfnetlink: add support for memory mapped netlink, Nishit Shah
        • Re: [PATCH 14/14] nfnetlink: add support for memory mapped netlink, Florian Westphal
  • [PATCH 12/14] netlink: add documentation for memory mapped I/O, Patrick McHardy
    • Re: [PATCH 12/14] netlink: add documentation for memory mapped I/O, Daniel Borkmann
      • Re: [PATCH 12/14] netlink: add documentation for memory mapped I/O, Patrick McHardy
        • Re: [PATCH 12/14] netlink: add documentation for memory mapped I/O, Daniel Borkmann
    • Re: [PATCH 12/14] netlink: add documentation for memory mapped I/O, Andi Kleen
  • [PATCH 10/14] netlink: add flow control for memory mapped I/O, Patrick McHardy
  • [PATCH 11/14] netlink: add RX/TX-ring support to netlink diag, Patrick McHardy
    • Re: [PATCH 11/14] netlink: add RX/TX-ring support to netlink diag, Christoph Paasch
      • Re: [PATCH 11/14] netlink: add RX/TX-ring support to netlink diag, David Miller
        • Re: [PATCH 11/14] netlink: add RX/TX-ring support to netlink diag, Christoph Paasch
  • [PATCH 08/14] netlink: implement memory mapped sendmsg(), Patrick McHardy
    • Re: [PATCH 08/14] netlink: implement memory mapped sendmsg(), Ben Hutchings
      • Re: [PATCH 08/14] netlink: implement memory mapped sendmsg(), Patrick McHardy
        • Re: [PATCH 08/14] netlink: implement memory mapped sendmsg(), Ben Hutchings
          • Re: [PATCH 08/14] netlink: implement memory mapped sendmsg(), Patrick McHardy
  • [PATCH 09/14] netlink: implement memory mapped recvmsg(), Patrick McHardy
  • [PATCH 04/14] netlink: don't orphan skb in netlink_trim(), Patrick McHardy
  • [PATCH 05/14] netlink: add netlink_skb_set_owner_r(), Patrick McHardy
  • [PATCH 03/14] net: add function to allocate sk_buff head without data area, Patrick McHardy
  • [PATCH 02/14] netlink: rename ssk to sk in struct netlink_skb_params, Patrick McHardy
  • Re: [PATCH 00/14]: netlink: memory mapped I/O, Florian Westphal
    • Re: [PATCH 00/14]: netlink: memory mapped I/O, Patrick McHardy
      • Re: [PATCH 00/14]: netlink: memory mapped I/O, Florian Westphal
        • Re: [PATCH 00/14]: netlink: memory mapped I/O, Patrick McHardy
      • Re: [PATCH 00/14]: netlink: memory mapped I/O, Eric Dumazet
  • Re: [PATCH 00/14]: netlink: memory mapped I/O, David Miller
• [Nftables RFC] High level library proposal, Tomasz Bursztyka
  • Re: [Nftables RFC] High level library proposal, Victor Julien
    • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
  • Re: [Nftables RFC] High level library proposal, Pablo Neira Ayuso
    • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
      • Re: [Nftables RFC] High level library proposal, Pablo Neira Ayuso
        • Re: [Nftables RFC] High level library proposal, Eric Leblond
          • Re: [Nftables RFC] High level library proposal, Pablo Neira Ayuso
            • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
              • Re: [Nftables RFC] High level library proposal, Pablo Neira Ayuso
                • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
        • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
    • Re: [Nftables RFC] High level library proposal, Jesper Dangaard Brouer
      • Re: [Nftables RFC] High level library proposal, Eric Leblond
      • Re: [Nftables RFC] High level library proposal, Fabio M. Di Nitto
      • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
        • Re: [Nftables RFC] High level library proposal, Jesper Dangaard Brouer
          • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
            • Re: [Nftables RFC] High level library proposal, Jesper Dangaard Brouer
              • Re: [Nftables RFC] High level library proposal, Stephen Hemminger
• [GIT PULL nf-next] IPVS fixes for v3.10, Simon Horman
  • [PATCH] ipvs: fix sparse warnings reported by kbuild test robot, Simon Horman
    • Re: [PATCH] ipvs: fix sparse warnings reported by kbuild test robot, Pablo Neira Ayuso
• [PATCH 04/28] proc: Supply PDE attribute setting accessor functions [RFC], David Howells
  • Re: [PATCH 04/28] proc: Supply PDE attribute setting accessor functions [RFC], Mauro Carvalho Chehab
  • Re: [PATCH 04/28] proc: Supply PDE attribute setting accessor functions [RFC], Bjorn Helgaas
  • Re: [PATCH 04/28] proc: Supply PDE attribute setting accessor functions [RFC], Vasant Hegde
• [PATCH 24/28] proc: Supply an accessor to get the name in a proc_dir_entry struct [RFC], David Howells
  • Re: [PATCH 24/28] proc: Supply an accessor to get the name in a proc_dir_entry struct [RFC], Harald Welte
• [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], David Howells
  • Re: [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], Grant Likely
  • Re: [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], Bjorn Helgaas
  • Re: [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], David Howells
  • Re: [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], Rafael J. Wysocki
• [PATCH -next 0/5] netfilter: nf_queue: avoid expensive gso/checksumming, Florian Westphal
  • [PATCH 1/5] netfilter: nf_queue: move device refcount bump to extra function, Florian Westphal
  • [PATCH 2/5] netfilter: nfnetlink_queue: avoid peer_portid test, Florian Westphal
  • [PATCH 3/5] netfilter: move skb_gso_segment into nfnetlink_queue module, Florian Westphal
  • [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Florian Westphal
    • Re: [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Eric Dumazet
      • Re: [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Florian Westphal
  • [PATCH 5/5] netfilter: nfqueue: avoid expensive gso segmentation and checksum fixup, Florian Westphal
• If the SYN packets return with NS_STOLEN, TCP cannot successfully establish the connection, Lawrence Lee
• [ANNOUNCE] ipset 6.18 released, Jozsef Kadlecsik
• [PATCH nfnetlink_acct v2 2/2] add fmt & bthr properties to nfacct, Michael Zintakis
• [PATCH nfnetlink_acct v2 1/2] nfnl_acct_new: add packet/byte values check, Michael Zintakis
• [PATCH nfnetlink_acct v2 0/2] numerous changes and improvements, Michael Zintakis
• TCP packets sent by dev_queue_xmit cannot successfully establish the connection, Lawrence Lee
• [PATCH 0/1] ipset fix for nf/net, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: ipset: bitmap:ip,mac: fix listing with timeout, Jozsef Kadlecsik
    • Re: [PATCH 1/1] netfilter: ipset: bitmap:ip,mac: fix listing with timeout, Pablo Neira Ayuso
      • Re: [PATCH 1/1] netfilter: ipset: bitmap:ip,mac: fix listing with timeout, Jozsef Kadlecsik
        • Re: [PATCH 1/1] netfilter: ipset: bitmap:ip,mac: fix listing with timeout, Pablo Neira Ayuso
• [PATCH] netfilter: rpfilter: skip locally generated bcast, too, Florian Westphal
  • Re: [PATCH] netfilter: rpfilter: skip locally generated bcast, too, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: rpfilter: skip locally generated bcast, too, Florian Westphal
• [PATCH 0/4] netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 1/4] netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet, Pablo Neira Ayuso
  • [PATCH 3/4] netfilter: ipset: hash:*net*: nomatch flag not excluded on set resize, Pablo Neira Ayuso
  • [PATCH 4/4] netfilter: nf_nat: fix race when unloading protocol modules, Pablo Neira Ayuso
  • [PATCH 2/4] netfilter: ipset: list:set: fix reference counter update, Pablo Neira Ayuso
  • Re: [PATCH 0/4] netfilter fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: nf_tables: don't update chain with unset counters, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: nf_tables: uninitialize element key/data from the commit path, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: don't use mutex_lock_interruptible(), Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_tables: fix error return code, Pablo Neira Ayuso
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m, Pablo Neira Ayuso
      • Re: [PATCH 2/4] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m, Sergei Shtylyov
        • Re: [PATCH 2/4] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m, Pablo Neira Ayuso
    • [PATCH 3/4] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition, Pablo Neira Ayuso
    • [PATCH 1/4] ipvs: fix memory leak in ip_vs_ctl.c, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_tables: fix bogus warning in nft_data_uninit(), Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: bridge: fix routing of bridge frames with call-iptables=1, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: nf_log: don't zap all loggers on unregister, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_log: wait for rcu grace after logger unregistration, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: fix Kconfig dependencies for nf_dup_ipv{4,6}, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: sync with packet rx also after removing queue entries, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: ipset: Fix sleeping memory allocation in atomic context, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: nf_tables_trace: fix endiness when dump chain policy, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensions, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: nft_chain_route: re-route before skb is queued to userspace, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: nf_nat: handle NF_DROP from nfnetlink_parse_nat_setup(), Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: nft_set_rbtree: incorrect assumption on lower interval lookups, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_tables: don't call nfnetlink_set_err() if nfnetlink_send() fails, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: nf_conntrack_sip: fix wrong memory initialisation, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: use skb_to_full_sk in ip_route_me_harder, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: conntrack: fix false CRC32c mismatch using paged skb, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Pablo Neira Ayuso