Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- [PATCH v2 3/5] ipset: add set match "inner" flag support, Dash Four
- [PATCH v2 2/5] ipset: add "inner" flag implementation,
Dash Four
- [PATCH v2 1/5] iptables: bugfix: prevent wrong syntax being accepted by the set match, Dash Four
- [PATCH v2 0/5] ipset: add "inner" flag support, Dash Four
- libnetfilter_queue: Another Valgrind complaint with nfq_set_mode, Tamas Lengyel
- [libnftables PATCH 1/3] nat: xml: fix xml_snprintf buffer offset,
Arturo Borrero
- [libnftables PATCH] expr: bitwise: xml_parse: fix casting,
Arturo Borrero
- [libnftables PATCH 0/2] Series to add JSON output support for rules,
Alvaro Neira
- [PATCH next] netfilter: conntrack: avoid large timeout for mid-stream pickup,
Florian Westphal
- Huge timeout with loose=1 pickup tcp connections,
Florian Westphal
- [PATCH nf-next] netfilter: ct: check return code from nla_parse_tested,
Daniel Borkmann
- [PATCH] netfilter: xt_TCPMSS: Add IPv6 default MSS,
Phil Oester
- [PATCH] iptables: Fix connlabel.conf install location,
Phil Oester
- [PATCH] netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr(), Pablo Neira Ayuso
- [PATCH] netfilter: xt_TCPMSS: Add safe fragmentation handling,
Phil Oester
- [PATCH] Remove redundant TCP header checks from xt_TCPOPTSTRIP,
Phil Oester
- [PATCH 0/5] netfilter fixes for 3.10-rc5,
Pablo Neira Ayuso
- [nftables PATCH 0/2] work on restoration,
Eric Leblond
- [libnftables PATCH] data_reg: xml: delete unreachable code in _veredict_xml_parse(),
Arturo Borrero
- [PATCH] fix leak of iter in nft_rule_list,
Giuseppe Longo
- [PATCH v2] nft: fix leak of iterators,
Giuseppe Longo
- [libnftables PATCH] src: xml: implement helper function nft_strtol, Arturo Borrero
- [PATCH] netfilter: nfnetlink_queue: fix missing HW protocol, Pablo Neira Ayuso
- [libnftables PATCH v3] src: add _unset functions,
Arturo Borrero
- [libnftables PATCH 0/2] Series short description,
Alvaro Neira
- [libnftables PATCH v2] src: add _unset functions, Arturo Borrero
- [libnftables PATCH 1/4] Add functions for to export tables to JSON format,
Alvaro Neira
- [libnftables PATCH 0/4] Series short description, Alvaro Neira
- [PATCH] datatype: concat expression only releases dynamically allocated datatype,
Pablo Neira Ayuso
- [libnftables PATCH 1/2] src: add _unset functions,
Arturo Borrero
- [PATCH 09/12] netfilter: nfnetlink_queue: avoid peer_portid test, Pablo Neira Ayuso
- [PATCH 00/12] Netfilter/IPVS updates for net-next,
Pablo Neira Ayuso
- [PATCH 01/12] netfilter: xt_CT: optimize XT_CT_NOTRACK, Pablo Neira Ayuso
- [PATCH 05/12] netfilter: {ipt,ebt}_ULOG: rise warning on deprecation, Pablo Neira Ayuso
- [PATCH 06/12] sched: add cond_resched_rcu() helper, Pablo Neira Ayuso
- [PATCH 12/12] netfilter: nfnetlink_queue: only add CAP_LEN attr when needed, Pablo Neira Ayuso
- [PATCH 08/12] ipvs: change type of netns_ipvs->sysctl_sync_qlen_max, Pablo Neira Ayuso
- [PATCH 11/12] netfilter: nfnetlink_queue: cleanup copy_range usage, Pablo Neira Ayuso
- [PATCH 07/12] ipvs: use cond_resched_rcu() helper when walking connections, Pablo Neira Ayuso
- [PATCH 10/12] netfilter: Implement RFC 1123 for FTP conntrack, Pablo Neira Ayuso
- [PATCH 04/12] netfilter: don't panic on error while walking through the init path, Pablo Neira Ayuso
- [PATCH 03/12] bridge: netfilter: using strlcpy() instead of strncpy(), Pablo Neira Ayuso
- [PATCH 02/12] netfilter: xt_socket: use IP early demux, Pablo Neira Ayuso
- Re: [PATCH 00/12] Netfilter/IPVS updates for net-next, David Miller
- <Possible follow-ups>
- [PATCH 00/12] netfilter/IPVS updates for net-next, Pablo Neira Ayuso
- [PATCH 01/12] netfilter: avoid get_random_bytes calls, Pablo Neira Ayuso
- [PATCH 02/12] netfilter: ctnetlink: honor CTA_MARK_MASK when setting ctmark, Pablo Neira Ayuso
- [PATCH 03/12] netfilter: nfnetlink_queue: enable UID/GID socket info retrieval, Pablo Neira Ayuso
- [PATCH 06/12] netfilter: nf_nat: add full port randomization support, Pablo Neira Ayuso
- [PATCH 08/12] netfilter: nf_conntrack: remove dead code, Pablo Neira Ayuso
- [PATCH 04/12] netfilter: add IPv4/6 IPComp extension match support, Pablo Neira Ayuso
- [PATCH 05/12] ipvs: Remove unused variable ret from sync_thread_master(), Pablo Neira Ayuso
- [PATCH 09/12] netfilter: xt_CT: fix error value in xt_ct_tg_check(), Pablo Neira Ayuso
- [PATCH 11/12] net: netprio: rename config to be more consistent with cgroup configs, Pablo Neira Ayuso
- [PATCH 10/12] net: net_cls: move cgroupfs classid handling into core, Pablo Neira Ayuso
- [PATCH 12/12] netfilter: x_tables: lightweight process control group matching, Pablo Neira Ayuso
- [PATCH 07/12] netfilter: ipset: remove unused code, Pablo Neira Ayuso
- Re: [PATCH 00/12] netfilter/IPVS updates for net-next, David Miller
- [PATCH 00/12] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
- [PATCH 01/12] netfilter: introduce support for reject at prerouting stage, Pablo Neira Ayuso
- [PATCH 03/12] ipvs: register hooks only with services, Pablo Neira Ayuso
- [PATCH 07/12] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute, Pablo Neira Ayuso
- [PATCH 09/12] netfilter: nf_tables: expose enum nft_chain_flags through UAPI, Pablo Neira Ayuso
- [PATCH 10/12] netfilter: nf_tables: add nft_chain_add(), Pablo Neira Ayuso
- [PATCH 12/12] netfilter: nf_tables: reject unsupported chain flags, Pablo Neira Ayuso
- [PATCH 11/12] netfilter: nf_tables: add NFT_CHAIN_BINDING, Pablo Neira Ayuso
- [PATCH 08/12] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute, Pablo Neira Ayuso
- [PATCH 05/12] ipvs: allow connection reuse for unconfirmed conntrack, Pablo Neira Ayuso
- [PATCH 06/12] netfilter: nf_tables: add NFTA_CHAIN_ID attribute, Pablo Neira Ayuso
- [PATCH 04/12] ipvs: avoid expiring many connections from timer, Pablo Neira Ayuso
- [PATCH 02/12] netfilter: nft_set_pipapo: Drop useless assignment of scratch map index on insert, Pablo Neira Ayuso
- Re: [PATCH 00/12] Netfilter/IPVS updates for net-next, David Miller
- [PATCH 1/2] conntrack: nfct_cmp: also compare labels,
Florian Westphal
- [PATCH] nft: fix leak of iterators, Giuseppe Longo
- Locally transmitted Multicast packets are being looped back, even if IP_MULTICAST_LOOP option is set to zero,
Vijay Tandeker
- [PATCH -next 1/2] netfilter: nf_queue: cleanup copy_range usage,
Florian Westphal
- [PATCH 1/2] netfilter: nfnetlink_acct: fix incomplete dumping of objects,
Pablo Neira Ayuso
- [libnftables] nft_*_attr_unset() functions, Arturo Borrero Gonzalez
- [RFC PATCH -next] netfilter: nfqueue: add ability to dump list of supported attributes,
Florian Westphal
- [PATCH] netfilter: xt_TCPMSS: Avoid violating RFC 879 in absence of MSS option,
Phil Oester
- [libnftables PATCH 0/3] small fixes,
Eric Leblond
- [PATCH nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag,
Eric Dumazet
- [libnftables PATCH 1/5] data_reg: xml: fix bytes movements,
Arturo Borrero
- [libnftables PATCH] data_reg: delete unreachable code,
Arturo Borrero
- [libnftables PATCH v3] src: xml: add versioning,
Arturo Borrero
- [PATCH 1/1] netfilter: nf_ct_tcp: extend CLOSE_WAIT timeout,
Zang MingJie
- [PATCH] xtables-addons: xt_DHCPMAC: correct mac setting and comparing, Boris Figovsky
- [PATCH 1/2] conntrackd: fix compiler warnings,
Florian Westphal
- [patch] ipvs: info leak in __ip_vs_get_dest_entries(),
Dan Carpenter
- [nftables PATCH 0/5] misc fixes,
Eric Leblond
- ulog: ulogd.conf.5 man page,
Chris Boot
- [PATCH lnf-conntrack 1/3] qa: add api test for nfct_cmp and nfct_exp functions,
Florian Westphal
- [PATCH] libnetfilter_queue: Fix Valgrind errors of unitialized byte(s) during call to nfq_unbind_pf,
Tamas Lengyel
- [PATCH v4] xtables: Add locking to prevent concurrent instances,
Phil Oester
- [PATCH net-next] sctp: Correct byte order of access to skb->{network, transport}_header,
Simon Horman
- [PATCH net-next v3] netfilter: Correct calculation using skb->tail and skb-network_header,
Simon Horman
- [PATCH v2] netfilter: Correct calculation using skb->tail and skb-network_header,
Simon Horman
- [PATCH] netfilter: Correct calculation using skb->tail and skb-network_header,
Simon Horman
- iptables-nftables: Invalid argument,
Giuseppe Longo
- [libnftables PATCH] data_reg: xml: fix invalid veredict validation,
Arturo Borrero
- [libnftables PATCH] data_reg: xml: fix using bad temp variable,
Arturo Borrero
- [PATCH 0/5] netfilter fixes for 3.10-rc3,
Pablo Neira Ayuso
- [ANNOUNCE] iptables 1.4.19 release,
Pablo Neira Ayuso
- [PATCH -next] netfilter: nfnetlink_queue: only add CAP_LEN attr when needed,
Florian Westphal
- [PATCH nf] netfilter: xt_LOG: fix mark logging for IPv6 packets,
Michal Kubecek
- [PATCH -next] Revert "netfilter: tproxy: do not assign timewait sockets to skb->sk",
Florian Westphal
- [PATCH 4/4] iptables (userspace): add set match "inner" flag support, Dash Four
- [PATCH 3/4] iptables: add set match "inner" flag support, Dash Four
- [PATCH 2/4] ipset: add "inner" flag implementation,
Dash Four
- [PATCH 1/4] ipset: minor variable-naming corrections, Dash Four
- [PATCH 0/4] ipset: add "inner" flag support,
Dash Four
- [Ulogd PATCH] pgsql: add var to specify arbitrary conn params, Eric Leblond
- [libnftables PATCH] data_reg: Delete trailing space in snprintf_xml,
Arturo Borrero
- [libnftables PATCH] data_reg: Add generic interface for parsing: nft_data_reg_parse().,
Arturo Borrero
- [libnftables PATCH] data_reg: Fix conditional code in XML parsing functions,
Arturo Borrero
- [libnftables PATCH] data_reg: conditional XML code for snprintf_xml,
Arturo Borrero
- [libnftables PATCH] rule: fix table flag not being set at XML parsing,
Arturo Borrero
- [nftables] handle when adding new chain/rule, Arturo Borrero Gonzalez
- [libnftables PATCH] data_reg: fix XML operations,
Arturo Borrero
- [libnftables PATCH v2] src: xml: add versioning,
Arturo Borrero
- [PATCH] xtables: improve get_modprobe handling,
Phil Oester
- [PATCH v3] xtables: Add locking to prevent concurrent instances,
Phil Oester
- Re: [PATCH -resend 4/6] netfilter: Implement RFC 1123 for FTP conntrack, Pablo Neira Ayuso
- nfqueue: detect when packet has already been checksummed?,
Florian Westphal
- Negative value in /proc/net/netfilter/nfnetlink_queue,
Alex Maltinsky
- [GIT PULL nf-next v2] IPVS for v3.11,
Simon Horman
- [GIT PULL nf] IPVS fixes for v3.10,
Simon Horman
- [PATCH -next, resend] netfilter: nfnetlink_queue: avoid peer_portid test,
Florian Westphal
- [libnftables PATCH 0/2] small fixes for libnftables XML,
Arturo Borrero
- [PATCH 1/3] netfilter: ctnetlink: attach expectations to unconfirmed conntracks,
Pablo Neira Ayuso
- [PATCH v2] xtables: Add locking to prevent concurrent instances, Phil Oester
- [PATCH net-next] netfilter: xt_socket: use IP early demux,
Eric Dumazet
- [PATCH] xtables: Add locking to prevent concurrent instances,
Phil Oester
- [libnftables PATCH v2] examples: XML parsing examples,
Arturo Borrero
- [GIT PULL nf-next] IPVS for v3.11,
Simon Horman
- [PATCH ipvs-next v3 0/2] sched: Add cond_resched_rcu_lock() helper,
Simon Horman
- [nftables PATCH] rule: display rule handle as comment,
Eric Leblond
- [RFC 1/2] netfilter: nfnetlink: add commit operation to nfnl_subsystems,
Pablo Neira Ayuso
- [PATCH] iptables: use autoconf to process .in man pages,
Andy Spencer
- [PATCH] doc: mention SNAT in INPUT chain since kernel 2.6.36,
Michael Roth
- [PATCH v2] netfilter: add and use nf_ipv6_ops in xt_addrtype,
Florian Westphal
- Re: [PATCH 1/2] ulogd: Perform nice() before giving up root, Eric Leblond
- [PATCH] ipv4: netfilter: always let NUL terminated string ended by '\0',
Chen Gang
- [PATCH] bridge: netfilter: using strlcpy() instead of strncpy(),
Chen Gang
- [PATCH next v2] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS,
Afschin Hormozdiary
- MSRP Protocol, twear
- [PATCH 0/4] Netfilter fixes for net (3.10-rc1),
Pablo Neira Ayuso
- [PATCH next] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS,
Afschin Hormozdiary
- Suspicious iptables snapshot in NF FTP,
Jan Engelhardt
- [PATCH v4] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
- [PATCH v3] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
- [PATCH v2] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary, Pablo Neira Ayuso
- [PATCH] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary,
Pablo Neira Ayuso
- [PATCH] netfilter: log: netns NULL ptr bug when calling from conntrack.,
Hans Schillstrom
- [libnftables PATCH] examples: XML parsing examples, Arturo Borrero
- [PATCH] cli: complete basic functionality of the interactive mode, Pablo Neira Ayuso
- v3.10-rc1 regression notice. (bug #818: NULL pointer dereference ipt_log_packet+0x2e/0x2b0),
Ronald
- Query: No-flush support for ebtables-restore in v2.0.10-4,
Ankit
- [libnftables PATCH v4] src: support for XML parsing,
Arturo Borrero
- Delivery Status Notification, pradipta
- [iptables-nftables/libnfables PATCHES] Target translation to nftables,
Tomasz Bursztyka
- Some netfilter compile errors when CONFIG_IPV6=m,
Cong Wang
- [PATCH] netfilter: add and use nf_afinfo in xt_addrtype,
Florian Westphal
- [PATCH] ipset: Fix hyphen used as minus sign in manpage,
Neutron Soutmun
- [PATCH] ipset: Fix syntax error of bash completion in Debian environment,
Neutron Soutmun
- [PATCH 0/2] Introductions, some tweaks to ulogd,
Chris Boot
- [PATCH] ipset: fix syntax error in bash completion and hyphen used as minus sign in manpage,
Neutron Soutmun
- [PATCH] libipset.pc must be installed via 'make install',
Eric Leblond
- [PATCH RFC 0/11] ulogd2 db rework,
Eric Leblond
- [PATCH 01/11] ulogd: display stack during configuration, Eric Leblond
- [PATCH 02/11] Fix automagic support of dbi, pcap and sqlite3, Eric Leblond
- [PATCH 03/11] postgresql: add sanity checking, Eric Leblond
- [PATCH 04/11] mysql: add sanity checking, Eric Leblond
- [PATCH 05/11] sqlite3: add sanity checking, Eric Leblond
- [PATCH 06/11] db: store data in memory during database downtime, Eric Leblond
- [PATCH 07/11] db: suppress field in db structure, Eric Leblond
- [PATCH 08/11] db: use offset instead of direct pointer., Eric Leblond
- [PATCH 09/11] db: add ring buffer for DB query, Eric Leblond
- [PATCH 11/11] db: db ring has precedence over backlog., Eric Leblond
- [PATCH 10/11] db: disable SIGHUP if ring buffer is used., Eric Leblond
- [PATCH nf-next] netfilter: xt_CT: optimize XT_CT_NOTRACK,
Eric Dumazet
- [ANNOUNCE] ipset 6.19 released, Jozsef Kadlecsik
- ip6tables: Memory allocation problem with xt_geoip on debian wheezy, Chris
- [PATCH nf-next] netfilter: conntrack: remove the central spinlock,
Eric Dumazet
- [PATCH v2 nf-next] netfilter: conntrack: remove the central spinlock, Eric Dumazet
[PATCH] libxtables: fix parsing of dotted network mask format, Pablo Neira Ayuso
[nfacct PATCH] Improve 'flush' man page entry, Thomas Jarosch
iptables upgrade: netmask parsing trouble,
Thomas Jarosch
Re: [PATCH 05/15] connection tracking helper for SLP, Pablo Neira Ayuso
nfacct version dependency,
Thomas Jarosch
[xtables-addons][PATCH 1/1] xt_DHCPMAC: correct mac setting and comparing, Boris Figovsky
[xtables-addons][PATCH 0/1] xt_DHCPMAC: correct mac setting and comparing, Boris Figovsky
[-stable-3.8.y 1/9] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value,
Pablo Neira Ayuso
- [-stable-3.8.y 3/9] netfilter: ipset: list:set: fix reference counter update, Pablo Neira Ayuso
- [-stable-3.8.y 2/9] netfilter: nf_nat: fix race when unloading protocol modules, Pablo Neira Ayuso
- [-stable-3.8.y 6/9] netfilter: nf_ct_helper: don't discard helper if it is actually the same, Pablo Neira Ayuso
- [-stable-3.8.y 5/9] netfilter: ipset: "Directory not empty" error message, Pablo Neira Ayuso
- [-stable-3.8.y 9/9] netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths, Pablo Neira Ayuso
- [-stable-3.8.y 8/9] netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too, Pablo Neira Ayuso
- [-stable-3.8.y 7/9] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
- [-stable-3.8.y 4/9] netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet, Pablo Neira Ayuso
- Re: [-stable-3.8.y 1/9] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Greg KH
[ANNOUNCE] Linux Security Summit 2013 - CFP,
James Morris
Allow DNPT target from raw table?,
Oliver
[PATCH] xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case).,
Dmitry Popov
xt_addrtype limit-iface-in is broken for ipv6,
Florian Westphal
[PATCH 0/6] ipset updates for nf-next,
Jozsef Kadlecsik
[PATCH v3 0/2] sched: Add cond_resched_rcu_lock() helper,
Simon Horman
Re: net/netfilter/nf_log.c:373:38: error: 'struct netns_nf' has no member named 'proc_netfilter',
Pablo Neira Ayuso
Re: [PATCH] netfilter: ipset: support package fragments for IPv4 protos without ports,
Jozsef Kadlecsik
Bug fixes only now please., David Miller
[PATCH v2 0/2] sched: Add cond_resched_rcu_lock() helper,
Simon Horman
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
