Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, (continued)
  • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
    • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
      • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Peter Zijlstra
  • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
  • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Julian Anastasov
    • Re: [PATCH v2 1/2] sched: Add cond_resched_rcu_lock() helper, Paul E. McKenney
  • [PATCH v2 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Simon Horman
• [PATCH 00/18] netfilter updates for net-next (try 2), Pablo Neira Ayuso
  • [PATCH 02/18] netfilter: ipset: Move often used IPv6 address masking function to header file, Pablo Neira Ayuso
  • [PATCH 18/18] sctp: Correct type and usage of sctp_end_cksum(), Pablo Neira Ayuso
  • [PATCH 16/18] netfilter: nfnetlink_queue: add skb info attribute, Pablo Neira Ayuso
  • [PATCH 07/18] netfilter: ipset: Hash types using the unified code base, Pablo Neira Ayuso
  • [PATCH 08/18] netfilter: ipset: list:set type using the extension interface, Pablo Neira Ayuso
  • [PATCH 13/18] netfilter: ipset: set match: add support to match the counters, Pablo Neira Ayuso
  • [PATCH 12/18] netfilter: ipset: The list:set type with counter support, Pablo Neira Ayuso
  • [PATCH 15/18] netfilter: move skb_gso_segment into nfnetlink_queue module, Pablo Neira Ayuso
  • [PATCH 17/18] netfilter: nfnetlink_queue: avoid expensive gso segmentation and checksum fixup, Pablo Neira Ayuso
  • [PATCH 10/18] netfilter: ipset: The bitmap types with counter support, Pablo Neira Ayuso
  • [PATCH 11/18] netfilter: ipset: The hash types with counter support, Pablo Neira Ayuso
  • [PATCH 14/18] netfilter: nf_queue: move device refcount bump to extra function, Pablo Neira Ayuso
  • [PATCH 09/18] netfilter: ipset: Introduce the counter extension in the core, Pablo Neira Ayuso
  • [PATCH 05/18] netfilter: ipset: Bitmap types using the unified code base, Pablo Neira Ayuso
  • [PATCH 06/18] netfilter: ipset: Unified hash type generation, Pablo Neira Ayuso
  • [PATCH 04/18] netfilter: ipset: Unified bitmap type generation, Pablo Neira Ayuso
    • RE: [PATCH 04/18] netfilter: ipset: Unified bitmap type generation, David Laight
      • RE: [PATCH 04/18] netfilter: ipset: Unified bitmap type generation, Jozsef Kadlecsik
  • [PATCH 03/18] netfilter: ipset: Introduce extensions to elements in the core, Pablo Neira Ayuso
  • [PATCH 01/18] netfilter: ipset: Make possible to test elements marked with nomatch, Pablo Neira Ayuso
  • Re: [PATCH 00/18] netfilter updates for net-next (try 2), David Miller
• [libnftables PATCH 1/2] src: delete exporting internal flags in XML, Arturo Borrero
  • [libnftables PATCH 2/2] src: support for XML parsing, Arturo Borrero
    • Re: [libnftables PATCH 2/2] src: support for XML parsing, Pablo Neira Ayuso
      • Re: [libnftables PATCH 2/2] src: support for XML parsing, Arturo Borrero Gonzalez
        • Re: [libnftables PATCH 2/2] src: support for XML parsing, Arturo Borrero Gonzalez
  • Re: [libnftables PATCH 1/2] src: delete exporting internal flags in XML, Pablo Neira Ayuso
• [PATCH 00/18] netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 02/18] netfilter: ipset: Move often used IPv6 address masking function to header file, Pablo Neira Ayuso
  • [PATCH 08/18] netfilter: ipset: list:set type using the extension interface, Pablo Neira Ayuso
  • [PATCH 15/18] netfilter: move skb_gso_segment into nfnetlink_queue module, Pablo Neira Ayuso
  • [PATCH 14/18] netfilter: nf_queue: move device refcount bump to extra function, Pablo Neira Ayuso
  • [PATCH 16/18] netfilter: nfnetlink_queue: add skb info attribute, Pablo Neira Ayuso
  • [PATCH 11/18] netfilter: ipset: The hash types with counter support, Pablo Neira Ayuso
  • [PATCH 18/18] sctp: Correct type and usage of sctp_end_cksum(), Pablo Neira Ayuso
  • [PATCH 17/18] netfilter: nfnetlink_queue: avoid expensive gso segmentation and checksum fixup, Pablo Neira Ayuso
  • [PATCH 07/18] netfilter: ipset: Hash types using the unified code base, Pablo Neira Ayuso
  • [PATCH 12/18] netfilter: ipset: The list:set type with counter support, Pablo Neira Ayuso
  • [PATCH 13/18] netfilter: ipset: set match: add support to match the counters, Pablo Neira Ayuso
  • [PATCH 03/18] netfilter: ipset: Introduce extensions to elements in the core, Pablo Neira Ayuso
  • [PATCH 10/18] netfilter: ipset: The bitmap types with counter support, Pablo Neira Ayuso
  • [PATCH 09/18] netfilter: ipset: Introduce the counter extension in the core, Pablo Neira Ayuso
  • [PATCH 05/18] netfilter: ipset: Bitmap types using the unified code base, Pablo Neira Ayuso
  • [PATCH 06/18] netfilter: ipset: Unified hash type generation, Pablo Neira Ayuso
  • [PATCH 04/18] netfilter: ipset: Unified bitmap type generation, Pablo Neira Ayuso
  • [PATCH 01/18] netfilter: ipset: Make possible to test elements marked with nomatch, Pablo Neira Ayuso
  • Re: [PATCH 00/18] netfilter updates for net-next, David Miller
    • Re: [PATCH 00/18] netfilter updates for net-next, Pablo Neira Ayuso
      • Re: [PATCH 00/18] netfilter updates for net-next, David Miller
    • Re: [PATCH 00/18] netfilter updates for net-next, Jozsef Kadlecsik
  • <Possible follow-ups>
  • [PATCH 00/18] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 08/18] netfilter: log: nf_log_packet() as real unified interface, Pablo Neira Ayuso
    • [PATCH 09/18] netfilter: add generic ARP packet logger, Pablo Neira Ayuso
    • [PATCH 15/18] netfilter: nft_log: fix coccinelle warnings, Pablo Neira Ayuso
    • [PATCH 18/18] ipvs: Remove dead debug code, Pablo Neira Ayuso
    • [PATCH 17/18] ipvs: remove null test before kfree, Pablo Neira Ayuso
    • [PATCH 16/18] netfilter: use IS_ENABLED() macro, Pablo Neira Ayuso
    • [PATCH 14/18] netfilter: xt_LOG: add missing string format in nf_log_packet(), Pablo Neira Ayuso
    • [PATCH 12/18] netfilter: nft_log: complete logging support, Pablo Neira Ayuso
    • [PATCH 13/18] netfilter: fix several Kconfig problems in NF_LOG_*, Pablo Neira Ayuso
    • [PATCH 06/18] netfilter: nf_log: move log buffering to core logging, Pablo Neira Ayuso
    • [PATCH 07/18] netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c files, Pablo Neira Ayuso
    • [PATCH 05/18] netfilter: nf_log: use an array of loggers instead of list, Pablo Neira Ayuso
    • [PATCH 10/18] netfilter: bridge: add generic packet logger, Pablo Neira Ayuso
    • [PATCH 11/18] netfilter: nft_log: request explicit logger when loading rules, Pablo Neira Ayuso
    • [PATCH 03/18] netfilter: conntrack: remove timer from ecache extension, Pablo Neira Ayuso
    • [PATCH 04/18] netfilter: kill ulog targets, Pablo Neira Ayuso
    • [PATCH 02/18] netfilter: x_tables: xt_free_table_info() cleanup, Pablo Neira Ayuso
    • [PATCH 01/18] netfilter: ctnetlink: remove null test before kfree, Pablo Neira Ayuso
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
  • [PATCH 00/18] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/18] netfilter: kill nf_hooks_active, Pablo Neira Ayuso
    • [PATCH 02/18] netfilter: Simply the tests for enabling and disabling the ingress queue hook, Pablo Neira Ayuso
    • [PATCH 03/18] netfilter: Factor out the hook list selection from nf_register_hook, Pablo Neira Ayuso
    • [PATCH 11/18] netfilter: Fix memory leak in nf_register_net_hook, Pablo Neira Ayuso
    • [PATCH 17/18] netfilter: bridge: do not initialize statics to 0 or NULL, Pablo Neira Ayuso
    • [PATCH 18/18] netfilter: ip6t_REJECT: Remove debug messages from reject_tg6(), Pablo Neira Ayuso
    • [PATCH 15/18] netfilter: nf_ct_sctp: minimal multihoming support, Pablo Neira Ayuso
    • [PATCH 16/18] netfilter: bridge: reduce nf_bridge_info to 32 bytes again, Pablo Neira Ayuso
    • [PATCH 12/18] netfilter: nf_queue: fix nf_queue_nf_hook_drop(), Pablo Neira Ayuso
    • [PATCH 14/18] netfilter: rename local nf_hook_list to hook_list, Pablo Neira Ayuso
    • [PATCH 13/18] netfilter: fix possible removal of wrong hook, Pablo Neira Ayuso
    • [PATCH 10/18] netfilter: xtables: remove __pure annotation, Pablo Neira Ayuso
    • [PATCH 09/18] netfilter: add and use jump label for xt_tee, Pablo Neira Ayuso
    • [PATCH 08/18] netfilter: xtables: don't save/restore jumpstack offset, Pablo Neira Ayuso
    • [PATCH 05/18] netfilter: nftables: Only run the nftables chains in the proper netns, Pablo Neira Ayuso
    • [PATCH 06/18] netfilter: xtables: compute exact size needed for jumpstack, Pablo Neira Ayuso
    • [PATCH 07/18] netfilter: move tee_active to core, Pablo Neira Ayuso
    • [PATCH 04/18] netfilter: Per network namespace netfilter hooks., Pablo Neira Ayuso
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
  • [PATCH 00/18] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 03/18] netfilter: nft_numgen: add map lookups for numgen random operations, Pablo Neira Ayuso
    • [PATCH 06/18] netfilter: xtables: allow table definitions not backed by hook_ops, Pablo Neira Ayuso
    • [PATCH 09/18] netfilter: nf_nat: add nat hook register functions to nf_nat, Pablo Neira Ayuso
    • [PATCH 18/18] netfilter: nf_tables: remove nft_af_info., Pablo Neira Ayuso
    • [PATCH 17/18] netfilter: nfnetlink_queue: resolve clash for unconfirmed conntracks, Pablo Neira Ayuso
    • [PATCH 16/18] netfilter: add struct nf_nat_hook and use it, Pablo Neira Ayuso
    • [PATCH 15/18] netfilter: add struct nf_ct_hook and use it, Pablo Neira Ayuso
    • [PATCH 14/18] netfilter: ip6t_rpfilter: provide input interface for route lookup, Pablo Neira Ayuso
    • [PATCH 13/18] netfilter: nft_set_rbtree: add timeout support, Pablo Neira Ayuso
    • [PATCH 10/18] netfilter: nf_nat: add nat type hooks to nat core, Pablo Neira Ayuso
    • [PATCH 07/18] netfilter: nf_tables: allow chain type to override hook register, Pablo Neira Ayuso
    • [PATCH 12/18] netfilter: make NF_OSF non-visible symbol, Pablo Neira Ayuso
    • [PATCH 11/18] netfilter: lift one-nat-hook-only restriction, Pablo Neira Ayuso
    • [PATCH 08/18] netfilter: core: export raw versions of add/delete hook functions, Pablo Neira Ayuso
    • [PATCH 05/18] netfilter: nf_nat: move common nat code to nat core, Pablo Neira Ayuso
    • [PATCH 04/18] netfilter: nft_hash: add map lookups for hashing operations, Pablo Neira Ayuso
    • [PATCH 01/18] netfilter: fix fallout from xt/nf osf separation, Pablo Neira Ayuso
    • [PATCH 02/18] netfilter: nf_tables: remove old nf_log based tracing, Pablo Neira Ayuso
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
  • [PATCH 00/18] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 06/18] netfilter: nft_payload: add C-VLAN support, Pablo Neira Ayuso
    • [PATCH 17/18] netfilter: nf_tables: check if bind callback fails and unbind if hook registration fails, Pablo Neira Ayuso
    • [PATCH 15/18] netfilter: nf_tables_offload: release flow_rule on error from commit path, Pablo Neira Ayuso
    • [PATCH 16/18] netfilter: nf_tables_offload: undo updates if transaction fails, Pablo Neira Ayuso
    • [PATCH 18/18] netfilter: nf_tables: add nft_unregister_flowtable_hook(), Pablo Neira Ayuso
    • [PATCH 14/18] netfilter: nf_tables_offload: remove reference to flow rule from deletion path, Pablo Neira Ayuso
    • [PATCH 11/18] netfilter: Support iif matches in POSTROUTING, Pablo Neira Ayuso
    • [PATCH 08/18] netfilter: nft_meta: use 64-bit time arithmetic, Pablo Neira Ayuso
    • [PATCH 13/18] netfilter: nf_flow_table: remove unnecessary parameter in flow_offload_fill_dir, Pablo Neira Ayuso
    • [PATCH 12/18] netfilter: nf_flow_table_offload: Fix check ndo_setup_tc when setup_block, Pablo Neira Ayuso
    • [PATCH 09/18] netfilter: nf_flow_table_offload: add flow_action_entry_next() and use it, Pablo Neira Ayuso
    • [PATCH 10/18] netfilter: nf_flow_table_offload: add IPv6 support, Pablo Neira Ayuso
    • [PATCH 02/18] netfilter: nft_meta: offload support for interface index, Pablo Neira Ayuso
    • [PATCH 04/18] netfilter: nf_tables: add nft_payload_rebuild_vlan_hdr(), Pablo Neira Ayuso
    • [PATCH 07/18] netfilter: xt_time: use time64_t, Pablo Neira Ayuso
    • [PATCH 05/18] netfilter: nf_tables_offload: pass extack to nft_flow_cls_offload_setup(), Pablo Neira Ayuso
    • [PATCH 03/18] netfilter: nft_payload: simplify vlan header handling, Pablo Neira Ayuso
    • [PATCH 01/18] netfilter: ipset: Add wildcard support to net,iface, Pablo Neira Ayuso
    • Re: [PATCH 00/18] Netfilter updates for net-next, David Miller
• [PATCH] IPVS fix for 3.9, Pablo Neira Ayuso
  • [PATCH] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Pablo Neira Ayuso
    • Re: [PATCH] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, David Miller
• [PATCH 00/13] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 02/13] netfilter: ipset: Move often used IPv6 address masking function to header file, Jozsef Kadlecsik
  • [PATCH 09/13] netfilter: ipset: Introduce the counter extension in the core, Jozsef Kadlecsik
  • [PATCH 04/13] netfilter: ipset: Unified bitmap type generation, Jozsef Kadlecsik
  • [PATCH 13/13] netfilter: ipset: set match: add support to match the counters, Jozsef Kadlecsik
    • Re: [PATCH 13/13] netfilter: ipset: set match: add support to match the counters, Pablo Neira Ayuso
      • Re: [PATCH 13/13] netfilter: ipset: set match: add support to match the counters, Jozsef Kadlecsik
  • [PATCH 03/13] netfilter: ipset: Introduce extensions to elements in the core, Jozsef Kadlecsik
  • [PATCH 12/13] netfilter: ipset: The list:set type with counter support, Jozsef Kadlecsik
  • [PATCH 10/13] netfilter: ipset: The bitmap types with counter support, Jozsef Kadlecsik
  • [PATCH 05/13] netfilter: ipset: Bitmap types using the unified code base, Jozsef Kadlecsik
  • [PATCH 11/13] netfilter: ipset: The hash types with counter support, Jozsef Kadlecsik
  • [PATCH 01/13] netfilter: ipset: Make possible to test elements marked with nomatch, Jozsef Kadlecsik
  • [PATCH 08/13] netfilter: ipset: list:set type using the extension interface, Jozsef Kadlecsik
  • [PATCH 07/13] netfilter: ipset: Hash types using the unified code base, Jozsef Kadlecsik
  • [PATCH 06/13] netfilter: ipset: Unified hash type generation, Jozsef Kadlecsik
  • Re: [PATCH 00/13] ipset patches for nf-next, Dash Four
    • Re: [PATCH 00/13] ipset patches for nf-next, Jozsef Kadlecsik
      • Re: [PATCH 00/13] ipset patches for nf-next, Dash Four
        • Re: [PATCH 00/13] ipset patches for nf-next, Jozsef Kadlecsik
  • Re: [PATCH 00/13] ipset patches for nf-next, Pablo Neira Ayuso
• [PATCH v2 0/4] libnetfilter_queue: gso handling support, Florian Westphal
  • [PATCH 1/4] build: don't install internal.h, Florian Westphal
  • [PATCH 3/4] src: add new GSO handling capabilities, Florian Westphal
  • [PATCH 2/4] examples/nf-queue: handle recv error, use larger buffer, Florian Westphal
  • [PATCH 4/4] examples/nf-queue: receive large gso packets, Florian Westphal
• [GIT PULL ipvs] ipvs fixes for v3.9 #2, Simon Horman
  • [PATCH ipvs 1/1] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Simon Horman
    • Re: [PATCH ipvs 1/1] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value, Sergei Shtylyov
  • Re: [GIT PULL ipvs] ipvs fixes for v3.9 #2, Pablo Neira Ayuso
• [PATCH 0/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
  • [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Simon Horman
    • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Ingo Molnar
      • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Simon Horman
    • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Peter Zijlstra
      • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
        • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Eric Dumazet
          • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
        • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Peter Zijlstra
          • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
            • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Eric Dumazet
              • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
                • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Peter Zijlstra
                  • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
              • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Julian Anastasov
                • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
                  • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Julian Anastasov
                    • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Paul E. McKenney
                      • Re: [PATCH 2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections, Julian Anastasov
  • [PATCH 1/2] sched: Add cond_resched_rcu_lock() helper, Simon Horman
    • Re: [PATCH 1/2] sched: Add cond_resched_rcu_lock() helper, Ingo Molnar
• [ANNOUNCE] Netfilter is participating in the Google Summer of Code 2013, Pablo Neira Ayuso
  • Re: [ANNOUNCE] Netfilter is participating in the Google Summer of Code 2013, Arturo Borrero Gonzalez
• [PATCH 0/4] libnetfilter_queue: gso handling support, Florian Westphal
  • [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Florian Westphal
    • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Pablo Neira Ayuso
      • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Florian Westphal
        • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Pablo Neira Ayuso
          • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Florian Westphal
            • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Pablo Neira Ayuso
              • Re: [PATCH 1/4] Revert: add new libnetfilter_queue API for libmnl, Florian Westphal
  • [PATCH 3/4] src: add new GSO handling capabilities, Florian Westphal
  • [PATCH 4/4] examples/nf-queue: receive large gso packets, Florian Westphal
  • [PATCH 2/4] examples/nf-queue: handle recv error, use larger buffer, Florian Westphal
    • Re: [PATCH 2/4] examples/nf-queue: handle recv error, use larger buffer, Pablo Neira Ayuso
      • Re: [PATCH 2/4] examples/nf-queue: handle recv error, use larger buffer, Florian Westphal
• [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Hans Schillstrom
  • Re: [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Simon Horman
    • Re: [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Hans Schillstrom
  • Re: [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Julian Anastasov
    • Re: [PATCH 1/1] ip_vs_sip_fill_param() BUG: bad check of return value, Simon Horman
• [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Simon Horman
  • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Julian Anastasov
    • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Hans Schillstrom
      • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Simon Horman
        • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Eric Dumazet
          • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Julian Anastasov
            • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Simon Horman
    • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Pablo Neira Ayuso
      • Re: [PATCH ipvs-next] ipvs: Remove rcu_read_unlock();rcu_read_lock();, Julian Anastasov
• [PATCH 00/10] netfilter fixes for net-next, Pablo Neira Ayuso
  • [PATCH 01/10] ipvs: properly dereference dest_dst in ip_vs_forget_dev, Pablo Neira Ayuso
  • [PATCH 03/10] ipvs: fix the remaining sparse warnings in ip_vs_ctl.c, Pablo Neira Ayuso
  • [PATCH 05/10] ipvs: fix sparse warnings for some parameters, Pablo Neira Ayuso
  • [PATCH 10/10] netfilter: nf_nat: missing condition in nf_xfrm_me_harder(), Pablo Neira Ayuso
  • [PATCH 09/10] ipvs: Use network byte order for sync message size, Pablo Neira Ayuso
  • [PATCH 08/10] ipvs: off by one in set_sctp_state(), Pablo Neira Ayuso
  • [PATCH 06/10] ipvs: Avoid shadowing net variable in ip_vs_leave(), Pablo Neira Ayuso
  • [PATCH 07/10] ipvs: Use min3() in ip_vs_dbg_callid(), Pablo Neira Ayuso
  • [PATCH 04/10] ipvs: fix sparse warnings in lblc and lblcr, Pablo Neira Ayuso
  • [PATCH 02/10] ipvs: fix sparse warnings for ip_vs_conn listing, Pablo Neira Ayuso
  • Re: [PATCH 00/10] netfilter fixes for net-next, David Miller
• [PATCH 1/1] ip_vs_sip_fill_param() uninitialized var, Hans Schillstrom
  • Re: [PATCH 1/1] ip_vs_sip_fill_param() uninitialized var, Julian Anastasov
    • Re: [PATCH 1/1] ip_vs_sip_fill_param() uninitialized var, Hans Schillstrom
      • Re: [PATCH 1/1] ip_vs_sip_fill_param() uninitialized var, Julian Anastasov
• [patch -next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder(), Dan Carpenter
  • Re: [patch -next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder(), Pablo Neira Ayuso
• [GIT PULL nf-next v2] IPVS fixes for v3.10, Simon Horman
  • [PATCH nf-next 3/9] ipvs: fix the remaining sparse warnings in ip_vs_ctl.c, Simon Horman
  • [PATCH nf-next 2/9] ipvs: fix sparse warnings for ip_vs_conn listing, Simon Horman
  • [PATCH nf-next 9/9] ipvs: Use network byte order for sync message size, Simon Horman
  • [PATCH nf-next 5/9] ipvs: fix sparse warnings for some parameters, Simon Horman
  • [PATCH nf-next 8/9] ipvs: off by one in set_sctp_state(), Simon Horman
  • [PATCH nf-next 6/9] ipvs: Avoid shadowing net variable in ip_vs_leave(), Simon Horman
  • [PATCH nf-next 7/9] ipvs: Use min3() in ip_vs_dbg_callid(), Simon Horman
  • [PATCH nf-next 1/9] ipvs: properly dereference dest_dst in ip_vs_forget_dev, Simon Horman
  • [PATCH nf-next 4/9] ipvs: fix sparse warnings in lblc and lblcr, Simon Horman
  • Re: [GIT PULL nf-next v2] IPVS fixes for v3.10, Pablo Neira Ayuso
• nftables kernel repo issue, Oliver
• [PATCH 0/2], dmitry pervushin
  • [PATCH 1/2] netfilter: idletimers, synchronize headers, dmitry pervushin
  • [PATCH 2/2] netfilter: idletimers, add v1 structures, dmitry pervushin
• [PATCH 0/2] netfilter: idletimers, dmitry pervushin
  • [PATCH 2/2] netfilter: idletimers - add send_nl_msg field, dmitry pervushin
    • Re: [PATCH 2/2] netfilter: idletimers - add send_nl_msg field, Pablo Neira Ayuso
  • [PATCH 1/2] netfilter: idletimers - fix the case of already expired timer, dmitry pervushin
    • Re: [PATCH 1/2] netfilter: idletimers - fix the case of already expired timer, Pablo Neira Ayuso
• Git commits possibly suitable for 3.8-stable tree?, Oliver
  • Re: Git commits possibly suitable for 3.8-stable tree?, Pablo Neira Ayuso
• [patch] ipvs: off by one in set_sctp_state(), Dan Carpenter
  • Re: [patch] ipvs: off by one in set_sctp_state(), Julian Anastasov
    • Re: [patch] ipvs: off by one in set_sctp_state(), Simon Horman
      • Re: [patch] ipvs: off by one in set_sctp_state(), Julian Anastasov
        • Re: [patch] ipvs: off by one in set_sctp_state(), Moahn Reddy
          • Re: [patch] ipvs: off by one in set_sctp_state(), Dan Carpenter
            • Re: [patch] ipvs: off by one in set_sctp_state(), Moahn Reddy
        • Re: [patch] ipvs: off by one in set_sctp_state(), Simon Horman
• Re: [PATCH nf-next 0/2] ipvs: minor clean ups flagged by sparse, Julian Anastasov
  • Re: [PATCH nf-next 0/2] ipvs: minor clean ups flagged by sparse, Simon Horman
• [PATCH -next v2 0/5] netfilter: nf_queue: avoid expensive gso/checksums, Florian Westphal
  • [PATCH 3/5] netfilter: move skb_gso_segment into nfnetlink_queue module, Florian Westphal
    • Re: [PATCH 3/5] netfilter: move skb_gso_segment into nfnetlink_queue module, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: nf_queue: move device refcount bump to extra function, Florian Westphal
    • Re: [PATCH 1/5] netfilter: nf_queue: move device refcount bump to extra function, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nfnetlink_queue: avoid peer_portid test, Florian Westphal
    • Re: [PATCH 2/5] netfilter: nfnetlink_queue: avoid peer_portid test, Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Florian Westphal
    • Re: [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: nfqueue: avoid expensive gso segmentation and checksum fixup, Florian Westphal
    • Re: [PATCH 5/5] netfilter: nfqueue: avoid expensive gso segmentation and checksum fixup, Pablo Neira Ayuso
• Re: [PATCH] sctp: Correct type and usage of sctp_end_cksum(), Neil Horman
  • Re: [PATCH] sctp: Correct type and usage of sctp_end_cksum(), Simon Horman
    • Re: [PATCH] sctp: Correct type and usage of sctp_end_cksum(), Pablo Neira Ayuso
      • Re: [PATCH] sctp: Correct type and usage of sctp_end_cksum(), Simon Horman
• [PATCH] netfilter: add my copyright statements, Pablo Neira Ayuso
• [PATCH 4/5] netfilter: add my copyright statements, Pablo Neira Ayuso
• xtables-addons compile error (DNETMAP), Dash Four
  • Re: xtables-addons compile error (DNETMAP), Dash Four
• xt_CHECKSUM doesn't work as expected, Jorge Ventura
  • Re: xt_CHECKSUM doesn't work as expected, Patrick McHardy
    • Re: xt_CHECKSUM doesn't work as expected, Jorge Ventura
    • Re: xt_CHECKSUM doesn't work as expected, Jorge Ventura
      • Re: xt_CHECKSUM doesn't work as expected, Jorge Ventura
• [PATCH] bridge: fix IP DNAT handling when packet is sent back via same bport, Florian Westphal
  • Re: [PATCH] bridge: fix IP DNAT handling when packet is sent back via same bport, Bart De Schuymer
    • Re: [PATCH] bridge: fix IP DNAT handling when packet is sent back via same bport, Florian Westphal
• [PATCH V2 1/2] netfilter: rpfilter: skip locally generated bcast, too, Florian Westphal
  • [PATCH 2/2] netfilter: rpfilter: depend on raw or mangle table, Florian Westphal
    • Re: [PATCH 2/2] netfilter: rpfilter: depend on raw or mangle table, Pablo Neira Ayuso
  • Re: [PATCH V2 1/2] netfilter: rpfilter: skip locally generated bcast, too, Pablo Neira Ayuso
• [PATCH 00/14]: netlink: memory mapped I/O, Patrick McHardy
  • [PATCH 01/14] netlink: add symbolic value for congested state, Patrick McHardy
    • Re: [PATCH 01/14] netlink: add symbolic value for congested state, Sergei Shtylyov
  • [PATCH 07/14] netlink: add mmap'ed netlink helper functions, Patrick McHardy
  • [PATCH 06/14] netlink: mmaped netlink: ring setup, Patrick McHardy
  • [PATCH 13/14] netfilter: rename netlink related "pid" variables to "portid", Patrick McHardy
  • [PATCH 14/14] nfnetlink: add support for memory mapped netlink, Patrick McHardy
    • Message not available
      • Re: [PATCH 14/14] nfnetlink: add support for memory mapped netlink, Nishit Shah
        • Re: [PATCH 14/14] nfnetlink: add support for memory mapped netlink, Florian Westphal
  • [PATCH 12/14] netlink: add documentation for memory mapped I/O, Patrick McHardy
    • Re: [PATCH 12/14] netlink: add documentation for memory mapped I/O, Daniel Borkmann
      • Re: [PATCH 12/14] netlink: add documentation for memory mapped I/O, Patrick McHardy
        • Re: [PATCH 12/14] netlink: add documentation for memory mapped I/O, Daniel Borkmann
    • Re: [PATCH 12/14] netlink: add documentation for memory mapped I/O, Andi Kleen
  • [PATCH 10/14] netlink: add flow control for memory mapped I/O, Patrick McHardy
  • [PATCH 11/14] netlink: add RX/TX-ring support to netlink diag, Patrick McHardy
    • Re: [PATCH 11/14] netlink: add RX/TX-ring support to netlink diag, Christoph Paasch
      • Re: [PATCH 11/14] netlink: add RX/TX-ring support to netlink diag, David Miller
        • Re: [PATCH 11/14] netlink: add RX/TX-ring support to netlink diag, Christoph Paasch
  • [PATCH 08/14] netlink: implement memory mapped sendmsg(), Patrick McHardy
    • Re: [PATCH 08/14] netlink: implement memory mapped sendmsg(), Ben Hutchings
      • Re: [PATCH 08/14] netlink: implement memory mapped sendmsg(), Patrick McHardy
        • Re: [PATCH 08/14] netlink: implement memory mapped sendmsg(), Ben Hutchings
          • Re: [PATCH 08/14] netlink: implement memory mapped sendmsg(), Patrick McHardy
  • [PATCH 09/14] netlink: implement memory mapped recvmsg(), Patrick McHardy
  • [PATCH 04/14] netlink: don't orphan skb in netlink_trim(), Patrick McHardy
  • [PATCH 05/14] netlink: add netlink_skb_set_owner_r(), Patrick McHardy
  • [PATCH 03/14] net: add function to allocate sk_buff head without data area, Patrick McHardy
  • [PATCH 02/14] netlink: rename ssk to sk in struct netlink_skb_params, Patrick McHardy
  • Re: [PATCH 00/14]: netlink: memory mapped I/O, Florian Westphal
    • Re: [PATCH 00/14]: netlink: memory mapped I/O, Patrick McHardy
      • Re: [PATCH 00/14]: netlink: memory mapped I/O, Florian Westphal
        • Re: [PATCH 00/14]: netlink: memory mapped I/O, Patrick McHardy
      • Re: [PATCH 00/14]: netlink: memory mapped I/O, Eric Dumazet
  • Re: [PATCH 00/14]: netlink: memory mapped I/O, David Miller
• [Nftables RFC] High level library proposal, Tomasz Bursztyka
  • Re: [Nftables RFC] High level library proposal, Victor Julien
    • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
  • Re: [Nftables RFC] High level library proposal, Pablo Neira Ayuso
    • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
      • Re: [Nftables RFC] High level library proposal, Pablo Neira Ayuso
        • Re: [Nftables RFC] High level library proposal, Eric Leblond
          • Re: [Nftables RFC] High level library proposal, Pablo Neira Ayuso
            • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
              • Re: [Nftables RFC] High level library proposal, Pablo Neira Ayuso
                • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
        • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
    • Re: [Nftables RFC] High level library proposal, Jesper Dangaard Brouer
      • Re: [Nftables RFC] High level library proposal, Eric Leblond
      • Re: [Nftables RFC] High level library proposal, Fabio M. Di Nitto
      • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
        • Re: [Nftables RFC] High level library proposal, Jesper Dangaard Brouer
          • Re: [Nftables RFC] High level library proposal, Tomasz Bursztyka
            • Re: [Nftables RFC] High level library proposal, Jesper Dangaard Brouer
              • Re: [Nftables RFC] High level library proposal, Stephen Hemminger
• [GIT PULL nf-next] IPVS fixes for v3.10, Simon Horman
  • [PATCH] ipvs: fix sparse warnings reported by kbuild test robot, Simon Horman
    • Re: [PATCH] ipvs: fix sparse warnings reported by kbuild test robot, Pablo Neira Ayuso
• [PATCH 04/28] proc: Supply PDE attribute setting accessor functions [RFC], David Howells
  • Re: [PATCH 04/28] proc: Supply PDE attribute setting accessor functions [RFC], Mauro Carvalho Chehab
  • Re: [PATCH 04/28] proc: Supply PDE attribute setting accessor functions [RFC], Bjorn Helgaas
  • Re: [PATCH 04/28] proc: Supply PDE attribute setting accessor functions [RFC], Vasant Hegde
• [PATCH 24/28] proc: Supply an accessor to get the name in a proc_dir_entry struct [RFC], David Howells
  • Re: [PATCH 24/28] proc: Supply an accessor to get the name in a proc_dir_entry struct [RFC], Harald Welte
• [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], David Howells
  • Re: [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], Grant Likely
  • Re: [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], Bjorn Helgaas
  • Re: [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], David Howells
  • Re: [PATCH 26/28] proc: Supply a function to remove a proc entry by PDE [RFC], Rafael J. Wysocki
• [PATCH -next 0/5] netfilter: nf_queue: avoid expensive gso/checksumming, Florian Westphal
  • [PATCH 1/5] netfilter: nf_queue: move device refcount bump to extra function, Florian Westphal
  • [PATCH 2/5] netfilter: nfnetlink_queue: avoid peer_portid test, Florian Westphal
  • [PATCH 3/5] netfilter: move skb_gso_segment into nfnetlink_queue module, Florian Westphal
  • [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Florian Westphal
    • Re: [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Eric Dumazet
      • Re: [PATCH 4/5] netfilter: nfnetlink_queue: add skb info attribute, Florian Westphal
  • [PATCH 5/5] netfilter: nfqueue: avoid expensive gso segmentation and checksum fixup, Florian Westphal
• If the SYN packets return with NS_STOLEN, TCP cannot successfully establish the connection, Lawrence Lee
• [ANNOUNCE] ipset 6.18 released, Jozsef Kadlecsik
• [PATCH nfnetlink_acct v2 2/2] add fmt & bthr properties to nfacct, Michael Zintakis
• [PATCH nfnetlink_acct v2 1/2] nfnl_acct_new: add packet/byte values check, Michael Zintakis
• [PATCH nfnetlink_acct v2 0/2] numerous changes and improvements, Michael Zintakis
• TCP packets sent by dev_queue_xmit cannot successfully establish the connection, Lawrence Lee
• [PATCH 0/1] ipset fix for nf/net, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: ipset: bitmap:ip,mac: fix listing with timeout, Jozsef Kadlecsik
    • Re: [PATCH 1/1] netfilter: ipset: bitmap:ip,mac: fix listing with timeout, Pablo Neira Ayuso
      • Re: [PATCH 1/1] netfilter: ipset: bitmap:ip,mac: fix listing with timeout, Jozsef Kadlecsik
        • Re: [PATCH 1/1] netfilter: ipset: bitmap:ip,mac: fix listing with timeout, Pablo Neira Ayuso
• [PATCH] netfilter: rpfilter: skip locally generated bcast, too, Florian Westphal
  • Re: [PATCH] netfilter: rpfilter: skip locally generated bcast, too, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: rpfilter: skip locally generated bcast, too, Florian Westphal
• [PATCH 0/4] netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 1/4] netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet, Pablo Neira Ayuso
  • [PATCH 3/4] netfilter: ipset: hash:*net*: nomatch flag not excluded on set resize, Pablo Neira Ayuso
  • [PATCH 4/4] netfilter: nf_nat: fix race when unloading protocol modules, Pablo Neira Ayuso
  • [PATCH 2/4] netfilter: ipset: list:set: fix reference counter update, Pablo Neira Ayuso
  • Re: [PATCH 0/4] netfilter fixes for net, David Miller
  • <Possible follow-ups>
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: nf_tables: don't update chain with unset counters, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: nf_tables: uninitialize element key/data from the commit path, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: don't use mutex_lock_interruptible(), Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_tables: fix error return code, Pablo Neira Ayuso
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m, Pablo Neira Ayuso
      • Re: [PATCH 2/4] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m, Sergei Shtylyov
        • Re: [PATCH 2/4] netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=m, Pablo Neira Ayuso
    • [PATCH 3/4] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition, Pablo Neira Ayuso
    • [PATCH 1/4] ipvs: fix memory leak in ip_vs_ctl.c, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_tables: fix bogus warning in nft_data_uninit(), Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: bridge: fix routing of bridge frames with call-iptables=1, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: nf_log: don't zap all loggers on unregister, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_log: wait for rcu grace after logger unregistration, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: fix Kconfig dependencies for nf_dup_ipv{4,6}, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: sync with packet rx also after removing queue entries, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: ipset: Fix sleeping memory allocation in atomic context, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverse, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: nf_tables_trace: fix endiness when dump chain policy, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensions, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: nft_chain_route: re-route before skb is queued to userspace, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: nf_nat: handle NF_DROP from nfnetlink_parse_nat_setup(), Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: nft_set_rbtree: incorrect assumption on lower interval lookups, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_tables: don't call nfnetlink_set_err() if nfnetlink_send() fails, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: nf_conntrack_sip: fix wrong memory initialisation, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: use skb_to_full_sk in ip_route_me_harder, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: conntrack: fix false CRC32c mismatch using paged skb, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: nft_set_rbtree: handle element re-addition after deletion, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: nat: use atomic bit op to clear the _SRC_NAT_DONE_BIT, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: nf_flow_table: fix big-endian integer overflow, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: ebtables: compat: reject all padding in matches/watchers, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nft_tproxy: Fix port selector on Big Endian, Pablo Neira Ayuso
    • [PATCH 2/4] selftests: netfilter: extend flowtable test script with dnat rule, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6}, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: flowtable: Fix flushing of offloaded flows on free, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: flowtable: populate addr_type mask, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: flowtable: reload ip{v6}h in nf_flow_nat_ip{v6}, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] netfilter: nft_set_rbtree: Don't account for expired elements on insertion, Pablo Neira Ayuso
    • [PATCH 4/4] netfilter: nf_tables: hook list memleak in flowtable deletion, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: ctnetlink: memleak in filter initialization error path, Pablo Neira Ayuso
    • [PATCH 2/4] netfilter: nft_set_pipapo: Disable preemption before getting per-CPU pointer, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, David Miller
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] selftests: netfilter: add cpu counter check, Pablo Neira Ayuso
    • [PATCH 2/4] selftests: netfilter: fix nft_meta.sh error reporting, Pablo Neira Ayuso
    • [PATCH 4/4] selftests: netfilter: add time counter check, Pablo Neira Ayuso
    • [PATCH 3/4] selftests: netfilter: remove unused cnt and simplify command testing, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, Jakub Kicinski
  • [PATCH 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH 1/4] selftests: netfilter: extend nfqueue test case, Pablo Neira Ayuso
      • Re: [PATCH 1/4] selftests: netfilter: extend nfqueue test case, patchwork-bot+netdevbpf
    • [PATCH 4/4] netfilter: nf_log: missing vlan offload tag and proto, Pablo Neira Ayuso
    • [PATCH 2/4] ipvs: clear skb->tstamp in forwarding path, Pablo Neira Ayuso
    • [PATCH 3/4] netfilter: nftables: extend error reporting for chain updates, Pablo Neira Ayuso
    • Re: [PATCH 0/4] Netfilter fixes for net, Jakub Kicinski
• [PATCH] netfilter: nf_nat: fix race when unloading protocol modules, Florian Westphal
  • Re: [PATCH] netfilter: nf_nat: fix race when unloading protocol modules, Patrick McHardy
    • Re: [PATCH] netfilter: nf_nat: fix race when unloading protocol modules, Pablo Neira Ayuso
• [libnftables PATCH 0/5] XML works, Arturo Borrero
  • [libnftables PATCH 2/5] src: expr: XML printing for binary data in targer and match, Arturo Borrero
  • [libnftables PATCH 1/5] src: rule: small fix XML output, Arturo Borrero
    • Re: [libnftables PATCH 1/5] src: rule: small fix XML output, Pablo Neira Ayuso
  • [libnftables PATCH 3/5] src: xml printing: delete text format, Arturo Borrero
    • Re: [libnftables PATCH 3/5] src: xml printing: delete text format, Pablo Neira Ayuso
  • [libnftables PATCH 4/5] src: expr: print flags in XML, Arturo Borrero
  • [libnftables PATCH 5/5] src: support for XML parsing, Arturo Borrero
• [PATCH] iptables manpage: Update SNAT target, Mart Frauenlob
  • Re: [PATCH] iptables manpage: Update SNAT target, Mart Frauenlob
    • Re: [PATCH] iptables manpage: Update SNAT target, Pablo Neira Ayuso
• [PATCH] iptables manpage: Update NETMAP target, Mart Frauenlob
  • Re: [PATCH] iptables manpage: Update NETMAP target, Mart Frauenlob
    • Re: [PATCH] iptables manpage: Update NETMAP target, Pablo Neira Ayuso
• [PATCH] iptables manpage: Update REDIRECT target, Mart Frauenlob
  • Re: [PATCH] iptables manpage: Update REDIRECT target, Mart Frauenlob
    • Re: [PATCH] iptables manpage: Update REDIRECT target, Pablo Neira Ayuso
• [PATCH] iptables manpage: Update LOG target, Mart Frauenlob
  • Re: [PATCH] iptables manpage: Update LOG target, Mart Frauenlob
    • Re: [PATCH] iptables manpage: Update LOG target, Pablo Neira Ayuso
• [PATCH] iptables manpage: Update DNAT target, Mart Frauenlob
  • Re: [PATCH] iptables manpage: Update DNAT target, Mart Frauenlob
    • Re: [PATCH] iptables manpage: Update DNAT target, Pablo Neira Ayuso
• [PATCH] iptables manpage: Update MASQUERADE target, Mart Frauenlob
  • Re: [PATCH] iptables manpage: Update MASQUERADE target, Mart Frauenlob
  • Re: [PATCH] iptables manpage: Update MASQUERADE target, Pablo Neira Ayuso
• Fwd: Re: [BUG] Fatal exception in interrupt - nf_nat_cleanup_conntrack during IPv6 tests, Florian Westphal
  • Re: Fwd: Re: [BUG] Fatal exception in interrupt - nf_nat_cleanup_conntrack during IPv6 tests, Patrick McHardy
    • Re: Fwd: Re: [BUG] Fatal exception in interrupt - nf_nat_cleanup_conntrack during IPv6 tests, Florian Westphal
      • Re: Fwd: Re: [BUG] Fatal exception in interrupt - nf_nat_cleanup_conntrack during IPv6 tests, Patrick McHardy
        • Re: Fwd: Re: [BUG] Fatal exception in interrupt - nf_nat_cleanup_conntrack during IPv6 tests, Florian Westphal
          • Re: Fwd: Re: [BUG] Fatal exception in interrupt - nf_nat_cleanup_conntrack during IPv6 tests, Patrick McHardy
            • Re: Fwd: Re: [BUG] Fatal exception in interrupt - nf_nat_cleanup_conntrack during IPv6 tests, Florian Westphal
              • Re: Fwd: Re: [BUG] Fatal exception in interrupt - nf_nat_cleanup_conntrack during IPv6 tests, Patrick McHardy
• Netfilter's tree at git.kernel.org, Pablo Neira Ayuso
  • Re: Netfilter's tree at git.kernel.org, Simon Horman
• [PATCH 00/15] ipset patches for nf-next, Jozsef Kadlecsik
  • [PATCH 01/15] netfilter: ipset: list:set: fix reference counter update, Jozsef Kadlecsik
  • [PATCH 14/15] netfilter: ipset: The list:set type with counter support, Jozsef Kadlecsik
  • [PATCH 04/15] netfilter: ipset: Move often used IPv6 address masking function to header file, Jozsef Kadlecsik
  • [PATCH 09/15] netfilter: ipset: Hash types using the unified code base, Jozsef Kadlecsik
  • [PATCH 08/15] netfilter: ipset: Unified hash type generation, Jozsef Kadlecsik
  • [PATCH 03/15] netfilter: ipset: Make possible to test elements marked with nomatch, Jozsef Kadlecsik
  • [PATCH 13/15] netfilter: ipset: The hash types with counter support, Jozsef Kadlecsik
  • [PATCH 02/15] netfilter: ipset: hash:*net*: nomatch flag not excluded on set resize, Jozsef Kadlecsik
  • [PATCH 10/15] netfilter: ipset: list:set type using the extension interface, Jozsef Kadlecsik
  • [PATCH 07/15] netfilter: ipset: Bitmap types using the unified code base, Jozsef Kadlecsik
  • [PATCH 15/15] netfilter: ipset: set match: add support to match the counters, Jozsef Kadlecsik
  • [PATCH 12/15] netfilter: ipset: The bitmap types with counter support, Jozsef Kadlecsik
  • [PATCH 06/15] netfilter: ipset: Unified bitmap type generation, Jozsef Kadlecsik
  • [PATCH 05/15] netfilter: ipset: Introduce extensions to elements in the core, Jozsef Kadlecsik
  • [PATCH 11/15] netfilter: ipset: Introduce the counter extension in the core, Jozsef Kadlecsik
  • Re: [PATCH 00/15] ipset patches for nf-next, Jozsef Kadlecsik
  • <Possible follow-ups>
  • [PATCH 00/15] ipset patches for nf-next, Jozsef Kadlecsik
    • [PATCH 01/15] netfilter: ipset: Use MSEC_PER_SEC consistently, Jozsef Kadlecsik
    • [PATCH 08/15] netfilter: ipset: Fix parallel resizing and listing of the same set, Jozsef Kadlecsik
    • [PATCH 02/15] netfilter: ipset: Use SET_WITH_*() helpers to test set extensions, Jozsef Kadlecsik
    • [PATCH 06/15] netfilter: ipset: Check CIDR value only when attribute is given, Jozsef Kadlecsik
    • [PATCH 03/15] netfilter: ipset: Check extensions attributes before getting extensions., Jozsef Kadlecsik
    • [PATCH 07/15] netfilter: ipset: Fix cidr handling for hash:*net* types, Jozsef Kadlecsik
    • [PATCH 04/15] netfilter: ipset: Permit CIDR equal to the host address CIDR in IPv6, Jozsef Kadlecsik
    • [PATCH 11/15] netfilter: ipset: Prepare the ipset core to use RCU at set level, Jozsef Kadlecsik
    • [PATCH 05/15] netfilter: ipset: Make sure we always return line number on batch, Jozsef Kadlecsik
    • [PATCH 13/15] netfilter: ipset: Introduce RCU locking in hash:* types, Jozsef Kadlecsik
    • [PATCH 09/15] netfilter: ipset: Make sure listing doesn't grab a set which is just being destroyed., Jozsef Kadlecsik
    • [PATCH 10/15] netfilter:ipset Remove rbtree from hash:net,iface, Jozsef Kadlecsik
    • [PATCH 12/15] netfilter: ipset: Introduce RCU locking in bitmap:* types, Jozsef Kadlecsik
    • [PATCH 14/15] netfilter: ipset: Introduce RCU locking in list type, Jozsef Kadlecsik
    • [PATCH 15/15] netfilter: ipset: Fix coding styles reported by checkpatch.pl, Jozsef Kadlecsik
    • Re: [PATCH 00/15] ipset patches for nf-next, Pablo Neira Ayuso
• [PATCH 0/2] ipset bugfix patches, Jozsef Kadlecsik
  • [PATCH 1/2] netfilter: ipset: list:set: fix reference counter update, Jozsef Kadlecsik
    • Re: [PATCH 1/2] netfilter: ipset: list:set: fix reference counter update, Pablo Neira Ayuso
  • [PATCH 2/2] netfilter: ipset: hash:*net*: nomatch flag not excluded on set resize, Jozsef Kadlecsik
    • Re: [PATCH 2/2] netfilter: ipset: hash:*net*: nomatch flag not excluded on set resize, Pablo Neira Ayuso
• [PATCH] libxt_multiport.man: Update list of valid protocols, Mart Frauenlob
  • Re: [PATCH] libxt_multiport.man: Update list of valid protocols, Pablo Neira Ayuso
• documentation bug: missing nat targets in man, Mart Frauenlob
  • Re: documentation bug: missing nat targets in man, Patrick McHardy
    • Re: documentation bug: missing nat targets in man, Mart Frauenlob
      • Re: documentation bug: missing nat targets in man, Patrick McHardy
        • Re: documentation bug: missing nat targets in man, Mart Frauenlob
          • Re: documentation bug: missing nat targets in man, Patrick McHardy
• [PATCH] libipt6_mh.man: Correct command to display named mh types, Mart Frauenlob
  • Re: [PATCH] libipt6_mh.man: Correct command to display named mh types, Patrick McHardy
    • Re: [PATCH] libipt6_mh.man: Correct command to display named mh types, Mart Frauenlob
      • Re: [PATCH] libipt6_mh.man: Correct command to display named mh types, Patrick McHardy
• [PATCH] iptables manpage: Update protocol list for MASQUERADE and REDIRECT, Mart Frauenlob
• [libnftables PATCH] src: rule: fix compat XML output, Arturo Borrero
  • Re: [libnftables PATCH] src: rule: fix compat XML output, Pablo Neira Ayuso
    • Re: [libnftables PATCH] src: rule: fix compat XML output, Arturo Borrero Gonzalez
      • Re: [libnftables PATCH] src: rule: fix compat XML output, Pablo Neira Ayuso
• [libnftables PATCH v2] Basic support for printing nft_data_reg in XML format., Arturo Borrero
  • Re: [libnftables PATCH v2] Basic support for printing nft_data_reg in XML format., Pablo Neira Ayuso
    • Re: [libnftables PATCH v2] Basic support for printing nft_data_reg in XML format., Arturo Borrero Gonzalez
      • Re: [libnftables PATCH v2] Basic support for printing nft_data_reg in XML format., Pablo Neira Ayuso
• [PATCH] - libxt_bpf: use correct shell term in man page description, Mart Frauenlob
  • Re: [PATCH] - libxt_bpf: use correct shell term in man page description, Pablo Neira Ayuso
• [PATCH] netfilter: add my copyright statements, Patrick McHardy
  • Re: [PATCH] netfilter: add my copyright statements, Pablo Neira Ayuso
• [PATCH 00/51] netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH 02/51] ipvs: prefer NETDEV_DOWN event to free cached dsts, Pablo Neira Ayuso
  • [PATCH 08/51] ipvs: optimize dst usage for real server, Pablo Neira Ayuso
  • [PATCH 01/51] ipvs: avoid routing by TOS for real server, Pablo Neira Ayuso
  • [PATCH 12/51] ipvs: convert connection locking, Pablo Neira Ayuso
  • [PATCH 11/51] ipvs: convert locks used in persistence engines, Pablo Neira Ayuso
  • [PATCH 22/51] ipvs: convert nq scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 29/51] ipvs: do not expect result from done_service, Pablo Neira Ayuso
  • [PATCH 17/51] ipvs: add ip_vs_dest_hold and ip_vs_dest_put, Pablo Neira Ayuso
  • [PATCH 38/51] netfilter: make /proc/net/netfilter pernet, Pablo Neira Ayuso
  • [PATCH 48/51] netfilter: implement RFC3168 5.3 (ecn protection) for ipv6 fragmentation handling, Pablo Neira Ayuso
  • [PATCH 49/51] netfilter: ipv4: propagate routing errors from ip_route_me_harder(), Pablo Neira Ayuso
  • [PATCH 46/51] netfilter: nfnetlink_queue: add net namespace support for nfnetlink_queue, Pablo Neira Ayuso
  • [PATCH 51/51] netfilter: nat: propagate errors from xfrm_me_harder(), Pablo Neira Ayuso
  • [PATCH 50/51] netfilter: ipv6: propagate routing errors from ip6_route_me_harder(), Pablo Neira Ayuso
  • [PATCH 47/51] netfilter: remove unneeded variable proc_net_netfilter, Pablo Neira Ayuso
  • [PATCH 27/51] ipvs: convert wrr scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 43/51] netfilter: ipt_ULOG: add net namespace support for ipt_ULOG, Pablo Neira Ayuso
  • [PATCH 44/51] netfilter: nfnetlink_log: add net namespace support for nfnetlink_log, Pablo Neira Ayuso
  • [PATCH 45/51] netfilter: enable per netns support for nf_loggers, Pablo Neira Ayuso
  • [PATCH 42/51] netfilter: ebt_ulog: add net namespace support for ebt_ulog, Pablo Neira Ayuso
  • [PATCH 40/51] netfilter: ebt_log: add net namespace support for ebt_log, Pablo Neira Ayuso
  • [PATCH 39/51] netfilter: nf_log: prepare net namespace support for loggers, Pablo Neira Ayuso
  • [PATCH 41/51] netfilter: xt_LOG: add net namespace support for xt_LOG, Pablo Neira Ayuso
  • [PATCH 33/51] ipvs: do not disable bh for long time, Pablo Neira Ayuso
  • [PATCH 36/51] netfilter: xt_NFQUEUE: coalesce IPv4 and IPv6 hashing, Pablo Neira Ayuso
  • [PATCH 37/51] netfilter: fix struct ip6t_frag field description, Pablo Neira Ayuso
  • [PATCH 34/51] netfilter: use IS_ENABLE to replace if defined in TRACE target, Pablo Neira Ayuso
  • [PATCH 35/51] netfilter: xt_NFQUEUE: introduce CPU fanout, Pablo Neira Ayuso
  • [PATCH 32/51] ipvs: convert services to rcu, Pablo Neira Ayuso
  • [PATCH 28/51] ipvs: reorganize dest trash, Pablo Neira Ayuso
  • [PATCH 26/51] ipvs: convert wlc scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 30/51] ipvs: convert sched_lock to spin lock, Pablo Neira Ayuso
  • [PATCH 31/51] ipvs: convert dests to rcu, Pablo Neira Ayuso
  • [PATCH 25/51] ipvs: convert sh scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 23/51] ipvs: convert rr scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 21/51] ipvs: convert lc scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 24/51] ipvs: convert sed scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 10/51] ipvs: remove rs_lock by using RCU, Pablo Neira Ayuso
  • [PATCH 20/51] ipvs: convert lblcr scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 18/51] ipvs: convert dh scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 19/51] ipvs: convert lblc scheduler to rcu, Pablo Neira Ayuso
  • [PATCH 09/51] ipvs: convert app locks, Pablo Neira Ayuso
  • [PATCH 15/51] ipvs: change ip_vs_sched_lock to mutex, Pablo Neira Ayuso
  • [PATCH 04/51] ipvs: rename functions related to dst_cache reset, Pablo Neira Ayuso
  • [PATCH 16/51] ipvs: preparations for using rcu in schedulers, Pablo Neira Ayuso
  • [PATCH 13/51] ipvs: reorder keys in connection structure, Pablo Neira Ayuso
  • [PATCH 07/51] ipvs: consolidate all dst checks on transmit in one place, Pablo Neira Ayuso
  • [PATCH 14/51] ipvs: avoid kmem_cache_zalloc in ip_vs_conn_new, Pablo Neira Ayuso
  • [PATCH 03/51] ipvs: convert the IP_VS_XMIT macros to functions, Pablo Neira Ayuso
  • [PATCH 06/51] ipvs: do not use skb_share_check, Pablo Neira Ayuso
  • [PATCH 05/51] ipvs: no need to reroute anymore on DNAT over loopback, Pablo Neira Ayuso
  • Re: [PATCH 00/51] netfilter updates for net-next, Julian Anastasov
    • Re: [PATCH 00/51] netfilter updates for net-next, Pablo Neira Ayuso
  • Re: [PATCH 00/51] netfilter updates for net-next, David Miller
    • Re: [PATCH 00/51] netfilter updates for net-next, Pablo Neira Ayuso
• [PATCH] xtables: Update copyright time range in license header, Mart Frauenlob
• [PATCH] iptables: Update copyright time range in license header, Mart Frauenlob
  • Re: [PATCH] iptables: Update copyright time range in license header, Patrick McHardy
    • Re: [PATCH] iptables: Update copyright time range in license header, Patrick McHardy
• [PATCH] iptables manpage: Fix missing space for recent match --mask option, Mart Frauenlob
  • Re: [PATCH] iptables manpage: Fix missing space for recent match --mask option, Mart Frauenlob
    • Re: [PATCH] iptables manpage: Fix missing space for recent match --mask option, Pablo Neira Ayuso
• [PATCH] netfilter: don't reset nf_trace in nf_reset(), Patrick McHardy
  • Re: [PATCH] netfilter: don't reset nf_trace in nf_reset(), David Miller
  • Re: [PATCH] netfilter: don't reset nf_trace in nf_reset(), Sergei Shtylyov
    • Re: [PATCH] netfilter: don't reset nf_trace in nf_reset(), Patrick McHardy
  • Re: [PATCH] netfilter: don't reset nf_trace in nf_reset(), Gao feng
• [PATCH] netfilter: nf_conntrack_sip: don't drop packets with offsets pointing outside the packet, Patrick McHardy
  • Re: [PATCH] netfilter: nf_conntrack_sip: don't drop packets with offsets pointing outside the packet, Pablo Neira Ayuso
• [PATCH 0/3] netfilter: propagate routing and XFRM errors, Patrick McHardy
  • [PATCH 2/3] netfilter: ipv6: propagate routing errors from ip6_route_me_harder(), Patrick McHardy
  • [PATCH 1/3] netfilter: ipv4: propagate routing errors from ip_route_me_harder(), Patrick McHardy
  • [PATCH 3/3] netfilter: nat: propagate errors from xfrm_me_harder(), Patrick McHardy
  • Re: [PATCH 0/3] netfilter: propagate routing and XFRM errors, Pablo Neira Ayuso
• [Ulog2 PATCH] Exec libmnl config check only if nfacct is enabled, Victor Julien
  • Re: [Ulog2 PATCH] Exec libmnl config check only if nfacct is enabled, Eric Leblond
• [ulogd2] lower netfilter library requirements, Victor Julien
  • [Ulogd2 PATCH 1/3] Remove configure check for libmnl, it is not used, Victor Julien
    • Re: [Ulogd2 PATCH 1/3] Remove configure check for libmnl, it is not used, Pablo Neira Ayuso
      • Re: [Ulogd2 PATCH 1/3] Remove configure check for libmnl, it is not used, Victor Julien
        • Re: [Ulogd2 PATCH 1/3] Remove configure check for libmnl, it is not used, Pablo Neira Ayuso
  • [Ulogd2 PATCH 2/3] Lower libnfnetlink requirement to 1.0.0, Victor Julien
    • Re: [Ulogd2 PATCH 2/3] Lower libnfnetlink requirement to 1.0.0, Pablo Neira Ayuso
      • Re: [Ulogd2 PATCH 2/3] Lower libnfnetlink requirement to 1.0.0, Victor Julien
        • Re: [Ulogd2 PATCH 2/3] Lower libnfnetlink requirement to 1.0.0, Pablo Neira Ayuso
  • [Ulogd2 PATCH 3/3] Lower libnetfilter_conntrack requirement to 0.9.1, Victor Julien
    • Re: [Ulogd2 PATCH 3/3] Lower libnetfilter_conntrack requirement to 0.9.1, Pablo Neira Ayuso
• [libnftables PATCH] Basic support for printing nft_data_reg in XML format., Arturo Borrero