Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH 03/12] netfilter: nfnetlink_queue: enable UID/GID socket info retrieval, (continued)
  • Re: [PATCH 03/12] netfilter: nfnetlink_queue: enable UID/GID socket info retrieval, David Miller
  • [PATCH 04/12] netfilter: add IPv4/6 IPComp extension match support, Pablo Neira Ayuso
  • [PATCH 01/12] netfilter: avoid get_random_bytes calls, Pablo Neira Ayuso
    • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Hannes Frederic Sowa
      • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Florian Westphal
        • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Hannes Frederic Sowa
          • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Pablo Neira Ayuso
          • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Florian Westphal
            • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Pablo Neira Ayuso
              • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Florian Westphal
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 08/12] netfilter: ipset: Alignment problem between 64bit kernel 32bit userspace, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: ipset: Simplify cidr handling for hash:*net* types, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: ipset: Explicitly add padding elements to hash:net, net and hash:net, port, net, Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: ipset: Support updating extensions when the set is full, Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: ipset: Indicate when /0 networks are supported, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: nf_log_ipv6: correct typo in module description, Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: ipset: Allocate the proper size of memory when /0 networks are supported, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: xt_recent: relax ip_pkt_list_tot restrictions, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: nf_tables_bridge: set the pktinfo for IPv4/IPv6 traffic, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: conntrack: avoid zeroing timer, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: nf_tables_bridge: export nft_reject_ip*hdr_validate functions, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: nf_tables: consolidate Kconfig options, Pablo Neira Ayuso
    • [PATCH 09/12] bridge: move mac header copying into br_netfilter, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: bridge: move nf_bridge_update_protocol to where its used, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: bridge: move DNAT helper to br_netfilter, Pablo Neira Ayuso
      • Re: [PATCH 12/12] netfilter: bridge: move DNAT helper to br_netfilter, Simon Horman
        • Re: [PATCH 12/12] netfilter: bridge: move DNAT helper to br_netfilter, Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: bridge: refactor conditional in br_nf_dev_queue_xmit, Pablo Neira Ayuso
    • [PATCH 08/12] netfilter: nf_tables: limit maximum table name length to 32 bytes, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: nf_tables: consolidate tracing invocations, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: nf_tables: cleanup nf_tables.h, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: bridge: rework reject handling, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: nf_tables: minor tracing cleanups, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: ipt_CLUSTERIP: deprecate it in favour of xt_cluster, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: reject: don't send icmp error if csum is invalid, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: nfnetlink_queue: add security context information, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: don't pull include/linux/netfilter.h from netns headers, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: xtables: fix warnings on 32bit platforms, Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: Remove spurios included of netfilter.h, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: x_tables: align per cpu xt_counter, Pablo Neira Ayuso
      • RE: [PATCH 03/12] netfilter: x_tables: align per cpu xt_counter, David Laight
        • Re: [PATCH 03/12] netfilter: x_tables: align per cpu xt_counter, Eric Dumazet
    • [PATCH 07/12] net: sched: Simplify em_ipset_match, Pablo Neira Ayuso
    • [PATCH 08/12] net: include missing headers in net/net_namespace.h, Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: use forward declaration instead of including linux/proc_fs.h, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flag, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: bridge: split ipv6 code into separated file, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: Kill unused copies of RCV_SKB_FAIL, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: bridge: rename br_netfilter.c to br_netfilter_hooks.c, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: xt_multiport: Use switch case instead of multiple condition checks, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: nfnetlink_log: Use GFP_NOWARN for skb allocation, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: nf_tables: allow expressions to return STOLEN, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: nft_numgen: start round robin from zero, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: nft_meta: permit pkttype mangling in ip/ip6 prerouting, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: nft_ct: add notrack support, Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: nf_tables: remove useless U8_MAX validation, Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: nf_queue: place volatile data in own cacheline, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: nf_tables: introduce routing expression, Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: nf_tables: add fib expression, Pablo Neira Ayuso
    • [PATCH 08/12] netfilter: nf_log: add packet logging for netdev family, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: nf_tables: fix implicit include of module.h, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: nf_tables: drop include of module.h from nf_tables.h, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: use macros to create module aliases., Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: nft_ct: Add ct id support, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: slightly optimize nf_inet_addr_mask, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: add API to manage NAT helpers., Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: nf_nat: register NAT helpers., Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: xt_hashlimit: use struct_size() helper, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking", Pablo Neira Ayuso
    • [PATCH 08/12] openvswitch: load and reference the NAT helper., Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: nf_tables: relocate header content to consumer, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: conntrack: limit sysctl setting for boolean options, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
• [PATCH nf-next v2 01/10] netfilter: make /proc/net/netfilter pernet, Gao feng
  • [PATCH nf-next v2 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Gao feng
    • Re: [PATCH nf-next v2 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Gao feng
  • [PATCH nf-next v2 05/10] netfilter: ebt_ulog: add net namesapce support for ebt_ulog, Gao feng
    • Re: [PATCH nf-next v2 05/10] netfilter: ebt_ulog: add net namesapce support for ebt_ulog, Pablo Neira Ayuso
  • [PATCH nf-next v2 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Gao feng
    • Re: [PATCH nf-next v2 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Gao feng
  • [PATCH nf-next v2 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Gao feng
    • Re: [PATCH nf-next v2 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Gao feng
  • [PATCH nf-next v2 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Gao feng
    • Re: [PATCH nf-next v2 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Pablo Neira Ayuso
  • [PATCH nf-next v2 07/10] netfilter: nfnetlink_log: add net namespace support for nfnetlink_log, Gao feng
    • Re: [PATCH nf-next v2 07/10] netfilter: nfnetlink_log: add net namespace support for nfnetlink_log, Pablo Neira Ayuso
  • [PATCH nf-next v2 08/10] netfilter: nf_log: enable nflog in un-init net namespace, Gao feng
    • Re: [PATCH nf-next v2 08/10] netfilter: nf_log: enable nflog in un-init net namespace, Pablo Neira Ayuso
  • [PATCH nf-next v2 10/10] netfilter: remove useless variable proc_net_netfilter, Gao feng
    • Re: [PATCH nf-next v2 10/10] netfilter: remove useless variable proc_net_netfilter, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 10/10] netfilter: remove useless variable proc_net_netfilter, Gao feng
  • [PATCH nf-next v2 09/10] netfilter: nfnetlink_queue: add net namespace support for nfnetlink_queue, Gao feng
    • Re: [PATCH nf-next v2 09/10] netfilter: nfnetlink_queue: add net namespace support for nfnetlink_queue, Pablo Neira Ayuso
  • Re: [PATCH nf-next v2 01/10] netfilter: make /proc/net/netfilter pernet, Pablo Neira Ayuso
• [PATCH net-next] netfilter: implement RFC3168 5.3 (ecn protection) for ipv6 fragmentation handling, Hannes Frederic Sowa
• ethernet filtering, Stephen Clark
• [PATCH] netfilter: xt_osf: fix inversion, pablo
• [PATCH 1/2] libxt_osf: fix missing --ttl and --log in save output, pablo
  • [PATCH 2/2] libxt_osf: fix bad location for location in --genre, pablo
• [PATCH v2 0/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
  • [PATCH v2 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
    • Re: [PATCH v2 1/3] NFQUEUE: introduce CPU fanout, Pablo Neira Ayuso
  • [PATCH v2 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Holger Eitzenberger
    • Re: [PATCH v2 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Pablo Neira Ayuso
      • Re: [PATCH v2 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Holger Eitzenberger
        • Re: [PATCH v2 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Pablo Neira Ayuso
  • [PATCH v2 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, Holger Eitzenberger
    • Re: [PATCH v2 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, Pablo Neira Ayuso
• [PATCH] netfilter: nfnetlink_acct: return -EINVAL if object name is empty, pablo
• [PATCH 3/3 nfacct] user space executable changes and additions, Michael Zintakis
  • Re: [PATCH 3/3 nfacct] user space executable changes and additions, Pablo Neira Ayuso
    • Re: [PATCH 3/3 nfacct] user space executable changes and additions, Bourne Without
      • osf bug report [was Re: [PATCH 3/3 nfacct] user space executable changes and additions], Pablo Neira Ayuso
        • Re: osf bug report [was Re: [PATCH 3/3 nfacct] user space executable changes and additions], Bourne Without
    • Re: [PATCH 3/3 nfacct] user space executable changes and additions, Michael Zintakis
• [PATCH 2/3 libnetfilter_acct] numerous changes and improvements in the user space library, Michael Zintakis
• [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
  • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Pablo Neira Ayuso
    • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
      • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Pablo Neira Ayuso
        • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
          • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Pablo Neira Ayuso
            • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
              • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Pablo Neira Ayuso
                • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
• [nftables] Git location for User space utilities, Vidya Chowdary
  • Re: [nftables] Git location for User space utilities, Tomasz Bursztyka
    • Re: [nftables] Git location for User space utilities, Pablo Neira Ayuso
• [PATCH -next] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init(), Wei Yongjun
  • Re: [PATCH -next] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init(), Pablo Neira Ayuso
• [PATCH 1/2] netfilter: reset nf_trace in nf_reset, Gao feng
  • [PATCH 2/2] netfilter: TRACE: use IS_ENABLE to replace if defined, Gao feng
    • Re: [PATCH 2/2] netfilter: TRACE: use IS_ENABLE to replace if defined, Pablo Neira Ayuso
  • Re: [PATCH 1/2] netfilter: reset nf_trace in nf_reset, Pablo Neira Ayuso
• [PATCH] expr: match: fix typo in function name, Arturo Borrero
  • Re: [PATCH] expr: match: fix typo in function name, Pablo Neira Ayuso
• [BUG NFQUEUE] NFQUEUE readers get -PERM from sys_sendto() if !root, Holger Eitzenberger
  • Re: [BUG NFQUEUE] NFQUEUE readers get -PERM from sys_sendto() if !root, Holger Eitzenberger
• [PATCH 1/2] libip6t_SNPT: add manpage, pablo
  • [PATCH 2/2] libip6t_DNPT: add manpage, pablo
• [announce] - Bash programmable completion for ip[6]tables, Bourne Without
• Drop a packet while keeping the conntrack alive, Nicolas Maître
  • Re: Drop a packet while keeping the conntrack alive, Pablo Neira Ayuso
    • Re: Drop a packet while keeping the conntrack alive, Nicolas Maître
      • Re: Drop a packet while keeping the conntrack alive, Pablo Neira Ayuso
        • Re: Drop a packet while keeping the conntrack alive, Nicolas Maître
  • Re: Drop a packet while keeping the conntrack alive, Jorge Dávila
• Re: conntrackd: fix IPv6 address pattern, Pablo Neira Ayuso
• [PATCH] ip[6]tables: show --protocol instead of --proto in usage, Mart Frauenlob
  • Re: [PATCH] ip[6]tables: show --protocol instead of --proto in usage, Mart Frauenlob
  • Re: [PATCH] ip[6]tables: show --protocol instead of --proto in usage, Pablo Neira Ayuso
• [PATCH 0/7] netfilter fixes for 3.9-rc, pablo
  • [PATCH 1/7] netfilter: nf_conntrack: register pernet subsystem before register L4 proto, pablo
  • [PATCH 3/7] netfilter: ip6t_NPT: restrict to mangle table, pablo
  • [PATCH 6/7] ipvs: remove extra rcu lock, pablo
  • [PATCH 5/7] ipvs: add backup_only flag to avoid loops, pablo
  • [PATCH 7/7] netfilter: remove unused "config IP_NF_QUEUE", pablo
  • [PATCH 4/7] ipvs: fix sctp chunk length order, pablo
  • [PATCH 2/7] netfilter: nfnetlink_queue: fix incorrect initialization of copy range field, pablo
    • Re: [PATCH 2/7] netfilter: nfnetlink_queue: fix incorrect initialization of copy range field, Sergei Shtylyov
  • Re: [PATCH 0/7] netfilter fixes for 3.9-rc, David Miller
• [PATCH 1/2] libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency, pablo
  • [PATCH 2/2] Revert "build: resolve link failure for ip6t_NETMAP", pablo
• [PATCH] netfilter: remove unused "config IP_NF_QUEUE", Paul Bolle
  • Re: [PATCH] netfilter: remove unused "config IP_NF_QUEUE", Pablo Neira Ayuso
• [PATCH] net: Add socket() system call self test., David Miller
  • Re: [PATCH] net: Add socket() system call self test., Julian Calaby
    • Re: [PATCH] net: Add socket() system call self test., David Miller
      • Re: [PATCH] net: Add socket() system call self test., Julian Calaby
  • Re: [PATCH] net: Add socket() system call self test., Daniel Baluta
    • Re: [PATCH] net: Add socket() system call self test., David Miller
      • Re: [PATCH] net: Add socket() system call self test., Daniel Baluta
• Can we rely on ethernet header padding?, Michal Kubecek
  • Re: Can we rely on ethernet header padding?, Eric Dumazet
    • Re: Can we rely on ethernet header padding?, Michal Kubecek
      • Re: Can we rely on ethernet header padding?, Stephen Hemminger
        • Re: Can we rely on ethernet header padding?, Michal Kubecek
• [PATCH RFC 0/3] NFQUEUE: introduce CPU fanout, holger
  • [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, holger
    • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, David Miller
      • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Jan Engelhardt
        • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, David Miller
          • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
        • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
          • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Jan Engelhardt
            • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
    • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Florian Westphal
      • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
  • [PATCH RFC 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, holger
    • Re: [PATCH RFC 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, David Miller
      • Re: [PATCH RFC 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, Holger Eitzenberger
  • [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, holger
    • Re: [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Eric Leblond
      • Re: [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Holger Eitzenberger
      • Re: [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Holger Eitzenberger
        • Re: [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Eric Leblond
• [GIT PULL nf-next] IPVS changes for v3.10, Simon Horman
  • [PATCH 2/2] ipvs: fix some sparse warnings, Simon Horman
  • [PATCH 1/2] ipvs: fix hashing in ip_vs_svc_hashkey, Simon Horman
  • Re: [GIT PULL nf-next] IPVS changes for v3.10, Pablo Neira Ayuso
• [GIT PULL nf v2] IPVS fixes for v3.9, Simon Horman
  • [PATCH 3/3] ipvs: remove extra rcu lock, Simon Horman
  • [PATCH 1/3] ipvs: fix sctp chunk length order, Simon Horman
  • [PATCH 2/3] ipvs: add backup_only flag to avoid loops, Simon Horman
  • Re: [GIT PULL nf v2] IPVS fixes for v3.9, Pablo Neira Ayuso
• [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vázquez Cao
  • [PATCH 2/2] man/send(2): document a long standing bug that can cause spurious EPERM errors, Fernando Luis Vázquez Cao
    • Re: [PATCH 2/2] man/send(2): document a long standing bug that can cause spurious EPERM errors, Pablo Neira Ayuso
      • Re: [PATCH 2/2] man/send(2): document a long standing bug that can cause spurious EPERM errors, Fernando Luis Vazquez Cao
  • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vazquez Cao
    • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Pablo Neira Ayuso
      • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vazquez Cao
        • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Pablo Neira Ayuso
          • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vazquez Cao
  • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Pablo Neira Ayuso
    • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vazquez Cao
• [GIT PULL nf-next] IPVS enhancements for v3.10, Simon Horman
  • [PATCH 2/2] ipvs: remove extra rcu lock, Simon Horman
  • [PATCH 1/2] ipvs: add backup_only flag to avoid loops, Simon Horman
• [GIT PULL nf] IPVS fixes for v3.9, Simon Horman
  • [PATCH 3/3] ipvs: fix some sparse warnings, Simon Horman
  • [PATCH 1/3] ipvs: fix sctp chunk length order, Simon Horman
  • [PATCH 2/3] ipvs: fix hashing in ip_vs_svc_hashkey, Simon Horman
  • Re: [GIT PULL nf] IPVS fixes for v3.9, Pablo Neira Ayuso
    • Re: [GIT PULL nf] IPVS fixes for v3.9, Simon Horman
• [PATCH] netfilter: ctnetlink: allow to dump expectation per master conntrack, pablo
• [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Eric Dumazet
  • Re: [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Eric Dumazet
      • Re: [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Pablo Neira Ayuso
• [Ulogd PATCH 0/4] Implement event loss prevention for db output, Eric Leblond
  • [Ulogd PATCH 2/4] mysql: add sanity checking, Eric Leblond
  • [Ulogd PATCH 1/4] postgresql: add sanity checking, Eric Leblond
  • [Ulogd PATCH 3/4] sqlite3: add sanity checking, Eric Leblond
  • [Ulogd PATCH 4/4] db: store data in memory during database downtime, Eric Leblond
• [PATCH] nf_conntrack: add include to fix sparse warning, Stephen Hemminger
  • Re: [PATCH] nf_conntrack: add include to fix sparse warning, Pablo Neira Ayuso
• strange result of iptables command under race condition, d tbsky
• [PATCH 1/2] netfilter: nfnetlink_queue: use xor hash function to distribute instances, pablo
  • [PATCH 2/2] netfilter: nfnetlink_queue: fix incorrect initialization of copy range field, pablo
• [libmnl PATCH] doxygen: fix a variable name., Eric Leblond
• [PATCH] netfilter: nf_conntrack: Batch cleanup, Vladimir Davydov
  • Re: [PATCH] netfilter: nf_conntrack: Batch cleanup, Gao feng
  • Re: [PATCH] netfilter: nf_conntrack: Batch cleanup, Pablo Neira Ayuso
• Re:a bpf compilation tool for xt_bpf, Roman Timofeev
  • Re: a bpf compilation tool for xt_bpf, Willem de Bruijn
• Need a way to match vlan / pcp fields in 802.1q header - from netfilter list, ggeorgiev
• [PATCH net-next] ipv6: use ipv6_iface_scope_id in conntrack to return scope id, Hannes Frederic Sowa
  • Re: [PATCH net-next] ipv6: use ipv6_iface_scope_id in conntrack to return scope id, Pablo Neira Ayuso
• [PATCH] bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, Silviu-Mihai Popescu
  • Re: [PATCH] bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, Pablo Neira Ayuso
• [PATCH] ipv4: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, Silviu-Mihai Popescu
  • Re: [PATCH] ipv4: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, Pablo Neira Ayuso
• [PATCH] xtables-addons: build against 3.8.y, Holger Eitzenberger
  • Re: [PATCH] xtables-addons: build against 3.8.y, Jan Engelhardt
• Unable to get NPTv6 to work with kernel 3.8.2, Matthias Schiffer
  • Re: Unable to get NPTv6 to work with kernel 3.8.2, Florian Westphal
    • Re: Unable to get NPTv6 to work with kernel 3.8.2, Matthias Schiffer
    • Re: Unable to get NPTv6 to work with kernel 3.8.2, Pablo Neira Ayuso
• conntrack-tools: dying and unconfirmed list not accessible, Jan Engelhardt
  • Re: conntrack-tools: dying and unconfirmed list not accessible, Pablo Neira Ayuso
• NAT64 - Netfilter module, Miguel Alejandro González
• [PATCH] netfilter: register pernet subsystem before register L4 proto, Gao feng
  • Re: [PATCH] netfilter: register pernet subsystem before register L4 proto, Pablo Neira Ayuso
• re L4 conntracking netns conversion, Alexey Dobriyan
  • Re: re L4 conntracking netns conversion, Gao feng
    • Re: re L4 conntracking netns conversion, Eric W. Biederman
      • Re: re L4 conntracking netns conversion, Gao feng
• [PATCH 0/3] netfilter fixes for your net tree, pablo
  • [PATCH 1/3] netfilter: nf_ct_helper: Fix logging for dropped packets, pablo
  • [PATCH 3/3] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set, pablo
  • [PATCH 2/3] netfilter: xt_AUDIT: only generate audit log when audit enabled, pablo
  • Re: [PATCH 0/3] netfilter fixes for your net tree, David Miller
• [PATCH iptables-nftables] iptables: fix compil when lib[mnl|nftables] are not in standard path, Nicolas Dichtel
  • Re: [PATCH iptables-nftables] iptables: fix compil when lib[mnl|nftables] are not in standard path, Pablo Neira Ayuso
• [PATCH nftables] nftables: fix compilation when nf-netlink is a module, Nicolas Dichtel
  • Re: [PATCH nftables] nftables: fix compilation when nf-netlink is a module, Nicolas Dichtel
    • [PATCH nftables v2] nftables: fix compilation when nf-netlink is a module, Nicolas Dichtel
      • Re: [PATCH nftables v2] nftables: fix compilation when nf-netlink is a module, Pablo Neira Ayuso
• [PATCH 2/2] iptables (kernel): add secmark match, Mr Dash Four
• [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
  • Re: [PATCH 1/2] iptables (userspace): add secmark match, Pablo Neira Ayuso
    • Re: [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
      • Re: [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
        • Re: [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
• [PATCH 0/2] iptables: add secmark match, Mr Dash Four
• [PATCH] ulogd2: raw2packet_BASE changes, Mr Dash Four
  • Re: [PATCH] ulogd2: raw2packet_BASE changes, Eric Leblond
    • Re: [PATCH] ulogd2: raw2packet_BASE changes, Mr Dash Four
      • Re: [PATCH] ulogd2: raw2packet_BASE changes, Eric Leblond
        • Re: [PATCH] ulogd2: raw2packet_BASE changes, Mr Dash Four
• [PATCH] nfacct: correct regressions in v1.0.1, Mr Dash Four
  • Re: [PATCH] nfacct: correct regressions in v1.0.1, Pablo Neira Ayuso
    • Re: [PATCH] nfacct: correct regressions in v1.0.1, Mr Dash Four
    • [PATCH] libnetfilter_acct: use PRIu64 and remove unnecessary cast, Mr Dash Four
      • Re: [PATCH] libnetfilter_acct: use PRIu64 and remove unnecessary cast, Pablo Neira Ayuso
        • Re: [PATCH] libnetfilter_acct: use PRIu64 and remove unnecessary cast, Mr Dash Four
• Save funcs, installation, const, Jan Engelhardt
  • [PATCH 2/5] extensions: eui64: set userspacesize=0, Jan Engelhardt
  • [PATCH 1/5] libxtables: centralize checking for a .save function, Jan Engelhardt
  • [PATCH 3/5] iptables: fall back to using save function when print is not defined, Jan Engelhardt
  • [PATCH 4/5] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 5/5] libxtables: constify xtables_option_[mt]fcall argument, Jan Engelhardt
• [ANNOUNCE] libnetfilter_conntrack 1.0.3 release, Pablo Neira Ayuso
• [PATCH -v3 19/23] net/netfilter: rename random32() to prandom_u32(), Akinobu Mita
• [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set, Paul Bolle
  • Re: [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set, Pablo Neira Ayuso
• [PATCH] netfilter: xt_AUDIT: only generate audit log when audit enabled, Gao feng
  • Re: [PATCH] netfilter: xt_AUDIT: only generate audit log when audit enabled, Thomas Graf
  • Re: [PATCH] netfilter: xt_AUDIT: only generate audit log when audit enabled, Pablo Neira Ayuso
• [ANNOUNCE] ulogd 2.0.2 release, Eric Leblond
• [ANNOUNCE] iptables 1.4.18 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] iptables 1.4.18 release, Jan Engelhardt
• [ulogd patch 0/1] use conntrack based timestamp, Eric Leblond
  • [PATCH] nfct: use timestamp of conntrack object., Eric Leblond
    • Re: [PATCH] nfct: use timestamp of conntrack object., Eric Leblond
• [ANNOUNCE] conntrack-tools 1.4.1 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] conntrack-tools 1.4.1 release, Gustavo Zacarias
    • Re: [ANNOUNCE] conntrack-tools 1.4.1 release, Pablo Neira Ayuso
• [ANNOUNCE] nfacct 1.0.1 release, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_acct 1.0.2 release, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: nf_tables: partially rework commit and abort operation, pablo
  • [PATCH 2/2] netfilter: nf_tables: don't skip inactive rules and dump generation mask, pablo
  • Re: [PATCH 1/2] netfilter: nf_tables: partially rework commit and abort operation, Tomasz Bursztyka
  • [RFC] Atomic rule manipulation part of transactions, Tomasz Bursztyka
    • [PATCH] nf_tables: Transaction API proposal, Tomasz Bursztyka
      • Re: [PATCH] nf_tables: Transaction API proposal, Pablo Neira Ayuso
        • Re: [PATCH] nf_tables: Transaction API proposal, Pablo Neira Ayuso
        • Re: [PATCH] nf_tables: Transaction API proposal, Tomasz Bursztyka
          • Re: [PATCH] nf_tables: Transaction API proposal, Pablo Neira Ayuso
            • [RFC v2] nf_tables: Transaction API proposal, Tomasz Bursztyka
              • Re: [RFC v2] nf_tables: Transaction API proposal, Pablo Neira Ayuso
                • Re: [RFC v2] nf_tables: Transaction API proposal, Tomasz Bursztyka
• Extending class handle from 16bit to 32bit, Karel Rericha
  • Re: Extending class handle from 16bit to 32bit, Stephen Hemminger
    • Re: Extending class handle from 16bit to 32bit, Karel Rericha
      • Re: Extending class handle from 16bit to 32bit, Stephen Hemminger
• [MAINTENANCE] netfilter.org infrastructure updates, Pablo Neira Ayuso
  • Re: [MAINTENANCE] netfilter.org infrastructure updates, Mr Dash Four
    • Re: [MAINTENANCE] netfilter.org infrastructure updates, Pablo Neira Ayuso
      • Re: [MAINTENANCE] netfilter.org infrastructure updates, Mr Dash Four
• Help on error message, Nicole
  • Re: Help on error message, Jan Engelhardt
    • Re: Help on error message, Nicole
      • Re: Help on error message, Jan Engelhardt
      • Re: Help on error message, Mr Dash Four
        • Re: Help on error message, Amos Jeffries
          • Re: Help on error message, Mr Dash Four
• [PATCH] iptables-save: add --chain argument, limits output to a chain, jonh . wendell
  • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jan Engelhardt
    • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jonh Wendell
    • Message not available
      • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jan Engelhardt
        • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jonh Wendell
          • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jan Engelhardt
            • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jonh Wendell
• [PATCH] conntrackd: cthelper: add DHCPv6 support, pablo
• iptables nfacct match question, Michael Zintakis
  • Re: iptables nfacct match question, Pablo Neira Ayuso
    • Re: iptables nfacct match question, Michael Zintakis
      • Re: iptables nfacct match question, Pablo Neira Ayuso
        • Re: iptables nfacct match question, Michael Zintakis
          • Re: iptables nfacct match question, Pablo Neira Ayuso
            • Re: iptables nfacct match question, Michael Zintakis
              • Re: iptables nfacct match question, Michael Zintakis
              • Re: iptables nfacct match question, Michael Zintakis
                • Re: iptables nfacct match question, Jozsef Kadlecsik
                  • Re: iptables nfacct match question, Michael Zintakis
                    • Re: iptables nfacct match question, Jozsef Kadlecsik
                      • Re: iptables nfacct match question, Michael Zintakis
                        • Re: iptables nfacct match question, Jozsef Kadlecsik
                          • Re: iptables nfacct match question, Michael Zintakis
                    • Re: iptables nfacct match question, Michael Zintakis
• [Ulogd2 PATCH 0/4] preparing 2.0.2 release, Eric Leblond
  • [Ulogd2 PATCH 1/4] Add Changes to extra dist., Eric Leblond
  • [Ulogd2 PATCH 2/4] Update man page., Eric Leblond
  • [Ulogd2 PATCH 3/4] Update README, Eric Leblond
  • [Ulogd2 PATCH 4/4] Prepare release number to 2.0.2, Eric Leblond
  • Re: [Ulogd2 PATCH 0/4] preparing 2.0.2 release, Eric Leblond
• [PATCH] arptables: build an libarptc.a archive, Jonh Wendell
  • Re: [PATCH] arptables: build an libarptc.a archive, Jan Engelhardt
    • Re: [PATCH] arptables: build an libarptc.a archive, Bart De Schuymer
• [ANNOUNCE] ipset 6.17 released, Jozsef Kadlecsik
• [PATCH stable] ipvs: sctp: fix checksumming on snat and dnat handlers, Daniel Borkmann
  • Re: [PATCH stable] ipvs: sctp: fix checksumming on snat and dnat handlers, Neil Horman
    • Re: [PATCH stable] ipvs: sctp: fix checksumming on snat and dnat handlers, Pablo Neira Ayuso
• netfilter: nf_tables: complete net namespace support, Patrick McHardy
  • Re: netfilter: nf_tables: complete net namespace support, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: timeout values corrupted on set resize, Josh Hunt
  • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Josh Hunt
      • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
        • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Josh Hunt
        • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Mr Dash Four
          • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Pablo Neira Ayuso
• ipset timeout values corrupt on set resize, Josh Hunt
  • Re: ipset timeout values corrupt on set resize, Josh Hunt
• [PATCH nf-next 1/2] netfilter: ebt_ulog: remove useless spin lock protection, Gao feng
  • [PATCH nf-next 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Gao feng
• [PATCH 0/7] netfilter updates for net-next, pablo
  • [PATCH 2/7] netfilter: xt_conntrack: Add flag to support aliases, pablo
  • [PATCH 4/7] netfilter: xt_CT: add alias flag, pablo
  • [PATCH 6/7] netfilter: nf_ct_pptp: Fix comment referring to incorrect RFC, pablo
  • [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, pablo
    • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Joe Perches
      • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Pablo Neira Ayuso
        • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Joe Perches
          • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Pablo Neira Ayuso
        • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Joe Perches
          • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Pablo Neira Ayuso
            • Re: [PATCH 7/7] netfilter: nf_ct_helper: Fix logging for dropped packets, Joe Perches
              • Re: [PATCH 7/7] netfilter: nf_ct_helper: Fix logging for dropped packets, Pablo Neira Ayuso
  • [PATCH 5/7] netfilter: nfnetlink: add mutex per subsystem, pablo
  • [PATCH 3/7] netfilter: xt_CT: merge common code of revision 0 and 1, pablo
  • [PATCH 1/7] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, pablo
  • Re: [PATCH 0/7] netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 0/7] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy(), Pablo Neira Ayuso
    • [PATCH 2/7] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: Replace HTTP links with HTTPS ones, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nf_tables: report EEXIST on overlaps, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: ip6tables: Remove redundant null checks, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nf_tables: extended netlink error reporting for expressions, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: Use fallthrough pseudo-keyword, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter updates for net-next, David Miller
• [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
  • Re: [nf-next/nf_tables8] Unable to compile kernel, Pablo Neira Ayuso
    • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
      • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
        • Re: [nf-next/nf_tables8] Unable to compile kernel, Pablo Neira Ayuso
          • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
            • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
              • Re: [nf-next/nf_tables8] Unable to compile kernel, Pablo Neira Ayuso
                • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
• [ulogd patch] small code cleaning, Eric Leblond
  • [PATCH 1/7] Update TODO., Eric Leblond
  • [PATCH 2/7] Suppress dead FIXME., Eric Leblond
  • [PATCH 3/7] Use access to ensure readability of config gile, Eric Leblond
  • [PATCH 5/7] Add handling of too long arguments., Eric Leblond
    • Re: [PATCH 5/7] Add handling of too long arguments., Mr Dash Four
      • Re: [PATCH 5/7] Add handling of too long arguments., Eric Leblond
  • [PATCH 4/7] Fix typo in comments., Eric Leblond
  • [PATCH 7/7] conf: error handling for too long line, Eric Leblond
    • Re: [PATCH 7/7] conf: error handling for too long line, Mr Dash Four
  • [PATCH 6/7] logemu: return error if configuration is invalid., Eric Leblond
  • Re: [ulogd patch] small code cleaning, Eric Leblond
• [RFC]: extend iptables' AUDIT target functionality, Mr Dash Four
• [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., YOSHIFUJI Hideaki
  • Re: [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., Erik Hugne
  • Re: [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., Hannes Frederic Sowa
    • Re: [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., YOSHIFUJI Hideaki
• [libnftables PATCH] change XML output format to element better than attributes, Arturo Borrero
  • Re: [libnftables PATCH] change XML output format to element better than attributes, Pablo Neira Ayuso
• tcp_use_frto crashes on empty tcp_write_queue, Zoltan Kiss
  • Re: tcp_use_frto crashes on empty tcp_write_queue, Zoltan Kiss
• [PATCH 0/3] netfilter fixes for 3.7-rc8, pablo
  • [PATCH 1/3] netfilter: ctnetlink: don't permit ct creation with random tuple, pablo
  • [PATCH 3/3] netfilter: nf_ct_reasm: fix per-netns sysctl initialization, pablo
  • [PATCH 2/3] netfilter: nf_ct_helper: don't discard helper if it is actually the same, pablo
  • Re: [PATCH 0/3] netfilter fixes for 3.7-rc8, David Miller
• [PATCH nf-next] netfilter: nf_ct_reasm: fix per-netns sysctl initialization, Michal Kubecek
  • Re: [PATCH nf-next] netfilter: nf_ct_reasm: fix per-netns sysctl initialization, Pablo Neira Ayuso
• [libnftables PATCH] Delete unused includes., Arturo Borrero
  • Re: [libnftables PATCH] Delete unused includes., Pablo Neira Ayuso
• limit the number of source ips connected?, Jose Luis Godoy
  • Re: limit the number of source ips connected?, Arturo Borrero Gonzalez
• [PATCH 1/1] netfilter: nf_ct_helper: don't discard helper if it is actually the same, Florian Westphal
  • Re: [PATCH 1/1] netfilter: nf_ct_helper: don't discard helper if it is actually the same, Pablo Neira Ayuso
• team driver MAC NAT, Jiri Pirko
  • Re: team driver MAC NAT, Jamal Hadi Salim
• [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Florian Westphal
  • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
    • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Florian Westphal
      • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
  • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
• [libnftables] Examples of XML output, Arturo Borrero
  • [libnftables PATCH] Added examples of functionality to print XML output of nftables rule/chain/table, Arturo Borrero
    • Re: [libnftables PATCH] Added examples of functionality to print XML output of nftables rule/chain/table, Pablo Neira Ayuso
• [PATCH] netfilter: nf_ct_helper: better logging for dropped packets, pablo
• [PATCH 0/5] Netfilter/IPVS fixes for 3.8-rc7, pablo
  • [PATCH 1/5] ipvs: freeing uninitialized pointer on error, pablo
  • [PATCH 2/5] ipvs: sctp: fix checksumming on snat and dnat handlers, pablo
  • [PATCH 3/5] netfilter: ip6t_NPT: Fix adjustment calculation, pablo
  • [PATCH 4/5] netfilter: ip6t_NPT: Fix prefix mangling, pablo
  • [PATCH 5/5] netfilter: ip6t_NPT: Ensure to check lower part of prefixes are zero, pablo
  • Re: [PATCH 0/5] Netfilter/IPVS fixes for 3.8-rc7, David Miller
• [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Gao feng
  • [PATCH 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Gao feng
  • [PATCH 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Gao feng
  • [PATCH 07/10] netfilter: nfnetlink_log: add net namespace support for nfnetlink_log, Gao feng
  • [PATCH 08/10] netfilter: nf_log: enable nflog in un-init net namespace, Gao feng
  • [PATCH 09/10] netfilter: nfnetlink_queue: add net namespace support for nfnetlink_queue, Gao feng
  • [PATCH 10/10] netfilter: remove useless variable proc_net_netfilter, Gao feng
  • [PATCH 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Gao feng
    • Re: [PATCH 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Gao feng
  • [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Gao feng
    • Re: [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Pablo Neira Ayuso
    • Re: [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Arnaldo Carvalho de Melo
      • Re: [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Gao feng
  • [PATCH 05/10] netfilter: ebt_ulog: add net namesapce support for ebt_ulog, Gao feng
  • Re: [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Pablo Neira Ayuso
    • Re: [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Gao feng
      • Re: [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Pablo Neira Ayuso
• [GIT PULL nf] IPVS fixes #2, Simon Horman
  • [PATCH] ipvs: sctp: fix checksumming on snat and dnat handlers, Simon Horman
    • RE: [PATCH] ipvs: sctp: fix checksumming on snat and dnat handlers, David Laight
      • Re: [PATCH] ipvs: sctp: fix checksumming on snat and dnat handlers, Daniel Borkmann
  • Re: [GIT PULL nf] IPVS fixes #2, Pablo Neira Ayuso
    • Re: [GIT PULL nf] IPVS fixes #2, Pablo Neira Ayuso
      • Re: [GIT PULL nf] IPVS fixes #2, Daniel Borkmann
• Assorted fixes v3, Jan Engelhardt
  • [PATCH 4/4] iptables: fall back to using save function when print is not defined, Jan Engelhardt
  • [PATCH 3/4] extensions: eui64: set userspacesize=0, Jan Engelhardt
  • [PATCH 1/4] build: bump SONAME for libxtables, Jan Engelhardt
  • [PATCH 2/4] libxtables: centralize checking for a .save function, Jan Engelhardt
  • Re: Assorted fixes v3, Pablo Neira Ayuso
    • Re: Assorted fixes v3, Jan Engelhardt
• [PATCH net] ipvs: sctp: fix checksumming on snat and dnat handlers, Daniel Borkmann
  • Re: [PATCH net] ipvs: sctp: fix checksumming on snat and dnat handlers, Julian Anastasov
• [PATCH] ulog: add protection when remove ipt_ULOG, Gao feng
  • [PATCH 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Gao feng
    • Re: [PATCH 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Pablo Neira Ayuso
      • Re: [PATCH 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Gao feng
  • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Pablo Neira Ayuso
    • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Gao feng
      • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Pablo Neira Ayuso
        • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Gao feng
  • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Pablo Neira Ayuso
• [PATCH net] ipvs: sctp: fix checksumming by adding hardware offload support, Daniel Borkmann
  • Re: [PATCH net] ipvs: sctp: fix checksumming by adding hardware offload support, Julian Anastasov
    • Re: [PATCH net] ipvs: sctp: fix checksumming by adding hardware offload support, Daniel Borkmann
• Re: linux-next: Tree for Feb 2 (netfilter), Randy Dunlap
  • [PATCH] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, Florian Westphal
    • Re: [PATCH] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, Randy Dunlap
      • Re: [PATCH] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, Pablo Neira Ayuso
• Re: [ 82/89] netfilter: xt_hashlimit: fix race that results in duplicated entries, Pablo Neira Ayuso
• [stable-3.7] netfilter: xt_CT: fix unset return value if conntrack zone are disabled, pablo
• New target to manage L2 QoS (802.1p) in a no VLAN (i.e home user) environment, Pedro Garcia
  • Re: New target to manage L2 QoS (802.1p) in a no VLAN (i.e home user) environment, Maciej Żenczykowski
• [v2] netfilter: nfnetlink: add mutex per subsystem, pablo
• [v2-nftables 1/2] netfilter: nf_tables: add packet and byte counters per chain, pablo
  • [v2-nftables 2/2] netfilter: nf_tables: add trace support, pablo
• [PATCH] netfilter: nfnetlink: add mutex per subsystem, pablo
• [nftables 1/9] netfilter: nf_tables: fix compilation if CONFIG_COMPAT is disabled, pablo
  • [nftables 2/9] netfilter: nf_tables: fix chain after rule deletion, pablo
  • [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, pablo
    • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Tomasz Bursztyka
      • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Pablo Neira Ayuso
        • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Tomasz Bursztyka
          • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Pablo Neira Ayuso
    • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Patrick McHardy
      • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Pablo Neira Ayuso
      • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Tomasz Bursztyka
  • [nftables 4/9] netfilter: nf_tables: fix error path in newchain, pablo
  • [nftables 5/9] netfilter: nf_tables: add packet and byte counters per chain, pablo
  • [nftables 6/9] netfilter: nf_tables: add protocol and flags for xtables over nf_tables, pablo
  • [nftables 7/9] netfilter: nf_tables: add trace support, pablo
  • [nftables 8/9] netfilter: nf_tables: add missing code in route chain type, pablo
  • [nftables 9/9] netfilter: nf_tables: statify chain definition to fix sparse warning, pablo
• [nftables 01/10] netfilter: nf_tables: fix alias for xtables over nftables module, pablo
• [PATCH 1/2] netfilter: xt_CT: merge common code of revision 0 and 1, pablo
  • [PATCH 2/2] netfilter: xt_CT: add alias flag, pablo
    • Re: [PATCH 2/2] netfilter: xt_CT: add alias flag, Jozsef Kadlecsik
• [iptables-nftables PATCH v2] nft: Split nft core to become family independant, Tomasz Bursztyka
  • Re: [iptables-nftables PATCH v2] nft: Split nft core to become family independant, Pablo Neira Ayuso
• [iptables-nftables RFC PATCH] nft: Split nft core to become family independant, Tomasz Bursztyka
• [PATCH 0/1] netfilter: iptables alias support, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: Add flags and compatibility revision in order to support aliases., Jozsef Kadlecsik
• [PATCH 0/3] Introduce aliases for matches and targets, Jozsef Kadlecsik
  • [PATCH 3/3] Add the "NOTRACK" alias to the "CT" target, Jozsef Kadlecsik
  • [PATCH 1/3] Introduce match/target aliases, Jozsef Kadlecsik
  • [PATCH 2/3] Add the "state" alias to the "conntrack" match, Jozsef Kadlecsik
  • Re: [PATCH 0/3] Introduce aliases for matches and targets, Jozsef Kadlecsik
    • Re: [PATCH 0/3] Introduce aliases for matches and targets, Pablo Neira Ayuso
      • Re: [PATCH 0/3] Introduce aliases for matches and targets, Jozsef Kadlecsik
  • Re: [PATCH 0/3] Introduce aliases for matches and targets, Pablo Neira Ayuso
• [stable-3.7 00/14] netfilter stable fixes for 3.7, pablo
  • [stable-3.7 01/14] netfilter: ip[6]t_REJECT: fix wrong transport header pointer in TCP reset, pablo
  • [stable-3.7 02/14] netfilter: nf_ct_reasm: fix conntrack reassembly expire code, pablo
  • [stable-3.7 03/14] netfilter: nfnetlink_log: fix mac address for 6in4 tunnels, pablo
  • [stable-3.7 07/14] netfilter: xt_recent: fix namespace destroy path, pablo
  • [stable-3.7 05/14] netfilter: xt_CT: recover NOTRACK target support, pablo
  • [stable-3.7 06/14] netfilter: fix missing dependencies for the NOTRACK target, pablo
  • [stable-3.7 10/14] netfilter: xt_hashlimit: fix race that results in duplicated entries, pablo
  • [stable-3.7 09/14] netfilter: xt_hashlimit: fix namespace destroy path, pablo
  • [stable-3.7 12/14] netfilter: nf_conntrack: fix BUG_ON while removing nf_conntrack with netns, pablo
  • [stable-3.7 08/14] netfilter: xt_recent: avoid high order page allocations, pablo
  • [stable-3.7 14/14] netfilter: ctnetlink: fix leak in error path of ctnetlink_create_expect, pablo
  • [stable-3.7 13/14] netfilter: x_tables: print correct hook names for ARP, pablo
  • [stable-3.7 11/14] netfilter: xt_CT: fix unset return value if conntrack zone are disabled, pablo
  • [stable-3.7 04/14] netfilter: nfnetlink_log: fix possible compilation issue due to missing include, pablo
  • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, David Miller
  • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, Greg KH
    • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, Pablo Neira Ayuso
      • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, Greg KH
• Accumulated fixes v2, Jan Engelhardt
  • [PATCH 2/6] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 4/6] extensions: eui64: set userspacesize=0, Jan Engelhardt
  • [PATCH 1/6] build: also use libtool for install stage, Jan Engelhardt
    • Re: [PATCH 1/6] build: also use libtool for install stage, Pablo Neira Ayuso
      • Re: [PATCH 1/6] build: also use libtool for install stage, Jan Engelhardt
      • Re: [PATCH 1/6] build: also use libtool for install stage, Dmitry V. Levin
        • Re: [PATCH 1/6] build: also use libtool for install stage, Jan Engelhardt
        • Re: [PATCH 1/6] build: also use libtool for install stage, Pablo Neira Ayuso
  • [PATCH 6/6] iptables: reword warning on using an alias, Jan Engelhardt
  • [PATCH 3/6] libxtables: centralize checking for a .save function, Jan Engelhardt
  • [PATCH 5/6] iptables: fall back to using save function when print is not defined, Jan Engelhardt
  • Re: Accumulated fixes v2, Jan Engelhardt
    • Re: Accumulated fixes v2, Pablo Neira Ayuso
• [RFC PATCH 4/4] netfilter: ip6t_NPT: Do not mix two prefixes., YOSHIFUJI Hideaki
  • Re: [RFC PATCH 4/4] netfilter: ip6t_NPT: Do not mix two prefixes., Pablo Neira Ayuso
• [RFC PATCH 3/4] netfilter ip6t_NPT: Ensure to check lower part of prefixes are zero., YOSHIFUJI Hideaki
  • Re: [RFC PATCH 3/4] netfilter ip6t_NPT: Ensure to check lower part of prefixes are zero., Pablo Neira Ayuso
• [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., YOSHIFUJI Hideaki
  • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Ulrich Weber
    • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Pablo Neira Ayuso
      • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Ulrich Weber
        • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Jean-Michel DILLY
        • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Jean-Michel DILLY
  • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Pablo Neira Ayuso
• [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., YOSHIFUJI Hideaki
  • <Possible follow-ups>
  • [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., YOSHIFUJI Hideaki
    • Re: [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., Pablo Neira Ayuso
    • Re: [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., Pablo Neira Ayuso
• [iptables PATCH] configure: display summary at end of configure, Eric Leblond
  • Re: [iptables PATCH] configure: display summary at end of configure, Jan Engelhardt
    • [iptables PATCH v2] configure: display summary at end of configure, Eric Leblond
  • Re: [iptables PATCH] configure: display summary at end of configure, Mr Dash Four
  • Re: [iptables PATCH] configure: display summary at end of configure, Pablo Neira Ayuso
• [patch] ipvs: freeing uninitialized pointer on error, Dan Carpenter
  • Re: [patch] ipvs: freeing uninitialized pointer on error, Julian Anastasov
• [PATCH 00/21] netfilter updates for net-next, pablo
  • [PATCH 03/21] netfilter: ctnetlink: deliver labels to userspace, pablo
  • [PATCH 04/21] netfilter: ctnetlink: allow userspace to modify labels, pablo
  • [PATCH 02/21] netfilter: add connlabel conntrack extension, pablo
  • [PATCH 01/21] netfilter: nf_ct_sip: support Cisco 7941/7945 IP phones, pablo
  • [PATCH 05/21] netfilter: nf_ct_snmp: add include file, pablo
  • [PATCH 14/21] netfilter: nf_ct_ecache: move initialization out of pernet_operations, pablo
  • [PATCH 15/21] netfilter: nf_ct_timeout: move initialization out of pernet_operations, pablo
  • [PATCH 21/21] netfilter: nf_conntrack: fix compilation if sysctl are disabled, pablo
  • [PATCH 20/21] netfilter: nf_conntrack: refactor l4proto support for netns, pablo
  • [PATCH 13/21] netfilter: nf_ct_tstamp: move initialization out of pernet_operations, pablo
  • [PATCH 16/21] netfilter: nf_ct_helper: move initialization out of pernet_operations, pablo
  • [PATCH 19/21] netfilter: nf_conntrack: refactor l3proto support for netns, pablo
  • [PATCH 18/21] netfilter: nf_ct_proto: move initialization out of pernet_operations, pablo
  • [PATCH 17/21] netfilter: nf_ct_labels: move initialization out of pernet_operations, pablo
  • [PATCH 12/21] netfilter: nf_ct_acct: move initialization out of pernet_operations, pablo
  • [PATCH 09/21] netfilter: add missing xt_connlabel.h header in installation, pablo
  • [PATCH 11/21] netfilter: nf_ct_expect: move initialization out of pernet_operations, pablo
  • [PATCH 08/21] netfilter: doc: add nf_conntrack sysctl api documentation, pablo
  • [PATCH 06/21] netfilter: x_tables: add xt_bpf match, pablo