Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 07/21] netfilter: add missing xt_bpf.h header in installation, (continued)
  • [PATCH 07/21] netfilter: add missing xt_bpf.h header in installation, pablo
  • [PATCH 10/21] netfilter: nf_conntrack: move initialization out of pernet operations, pablo
  • Re: [PATCH 00/21] netfilter updates for net-next, David Miller
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: nf_tables: validate len in nft_validate_data_load(), Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: nf_tables: introduce nft_validate_register_load(), Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: nf_tables: kill nft_validate_output_register(), Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: nf_tables: get rid of the expression example code, Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: nf_tables: mark stateful expressions, Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: nf_tables: add helper functions for expression handling, Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: nft_dynset: dynamic stateful expression instantiation, Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: nf_tables: prepare for expressions associated to set elements, Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: nf_tables: add flag to indicate set contains expressions, Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: nf_tables: variable sized set element keys / data, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: nf_tables: add register parsing/dumping helpers, Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: nf_tables: support variable sized data in nft_data_init(), Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: nf_tables: switch registers to 32 bit addressing, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: nf_tables: convert expressions to u32 register pointers, Pablo Neira Ayuso
    • [PATCH 15/21] uapi: ebtables: don't include linux/if.h, Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: nf_tables: use struct nft_verdict within struct nft_data, Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: nf_tables: convert sets to u32 data pointers, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: nf_tables: rename nft_validate_data_load(), Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: nf_tables: kill nft_data_cmp(), Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: nft_lookup: use nft_validate_register_store() to validate types, Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: nf_tables: get rid of NFT_REG_VERDICT usage, Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: ipset: Properly calculate extensions offsets and total length, Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: ipset: Improve preprocessor macros checks, Pablo Neira Ayuso
    • [PATCH 15/21] netfilter: ipset: Use better include files in xt_set.c, Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: ipset: Fix hashing for ipv6 sets, Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: bridge: neigh_head and physoutdev can't be used at same time, Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: bridge: free nf_bridge info on xmit, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: ipset: Give a better name to a macro in ip_set_core.c, Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: Use correct return for seq_show functions, Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: xt_MARK: Add ARP support, Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: ipset: deinline ip_set_put_extensions(), Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: ipset: Fix ext_*() macros, Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: ipset: Return bool values instead of int, Pablo Neira Ayuso
      • Re: [PATCH 10/21] netfilter: ipset: Return bool values instead of int, Joe Perches
        • Re: [PATCH 10/21] netfilter: ipset: Return bool values instead of int, Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: ipset: Preprocessor directices cleanup, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: ipset: Check for comment netlink attribute length, Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: ipset: Use HOST_MASK literal to represent host address CIDR len, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: ipset: Check IPSET_ATTR_PORT only once, Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: ipset: Return ipset error instead of bool, Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: ipset: No need to make nomatch bitfield, Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: ipset: make ip_set_get_ip*_port to use skb_network_offset, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: ipset: Fix sparse warning, Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: nf_tables: pass netns to set->ops->remove(), Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: nft_exthdr: add TCP option matching, Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: nfnetlink: allow to check for generation ID, Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: nf_tables: honor NFT_SET_OBJECT in set backend selection, Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: nf_ct_sip: Use mod_timer_pending(), Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: nf_tables: add check_genid to the nfnetlink subsystem, Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: nf_ct_expect: nf_ct_expect_insert() returns void, Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: update MAINTAINERS, Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: nf_tables: add NFTA_RULE_ID attribute, Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: nfnetlink: add nfnetlink_rcv_skb_batch(), Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: nf_tables: rename struct nft_set_estimate class field, Pablo Neira Ayuso
    • [PATCH 15/21] netfilter: nfnetlink: get rid of u_intX_t types, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: nft_ct: add zone id set support, Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: nft_ct: prepare for key-dependent error unwind, Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: nf_tables: add space notation to sets, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: nf_tables: add bitmap set type, Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: nft_ct: add zone id get support, Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: nf_tables: add flush field to struct nft_set_iter, Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: nf_tables: rename deactivate_one() to flush(), Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: nf_tables: use struct nft_set_iter in set element flush, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: nft_exthdr: Add support for existence check, Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: nf_tables: handle meta/lookup with direct call, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: nf_osf: add nf_osf_find(), Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: nf_tables: flow event notifier must use transaction mutex, Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: nf_tables: remove unused variable, Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: cttimeout: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT, Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: nft_tproxy: Add missing config check, Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: bridge: Expose nf_tables bridge hook priorities through uapi, Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: nf_tables: match on tunnel metadata, Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: nf_tables: simplify NLM_F_CREATE handling, Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: kconfig: remove ct zone/label dependencies, Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: conntrack: avoid use-after free on rmmod, Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: nft_tunnel: fix sparse errors, Pablo Neira Ayuso
    • [PATCH 15/21] netfilter: nf_tables: add tunnel support, Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: nf_tables: Add native tproxy support, Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: nf_osf: move nf_osf_fingers to non-uapi header file, Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: nfnetlink_osf: rename nf_osf header file to nfnetlink_osf, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: use kvmalloc_array to allocate memory for hashtable, Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: nf_tables: implement Passive OS fingerprint module in nft_osf, Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c, Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: use PTR_ERR_OR_ZERO(), Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: nft_bitwise: correct uapi header comment., Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: flowtable: restrict flow dissector match on meta ingress device, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: flowtable: fetch stats only if flow is still alive, Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: flowtable: use atomic bitwise operations for flow flags, Pablo Neira Ayuso
    • [PATCH 15/21] netfilter: bitwise: add NFTA_BITWISE_OP netlink attribute., Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: bitwise: add NFTA_BITWISE_DATA attribute., Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: bitwise: add support for shifts., Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: bitwise: add helper for evaluating boolean operations., Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: bitwise: only offload boolean operations., Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: bitwise: add helper for dumping boolean operations., Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: bitwise: add helper for initializing boolean operations., Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: flowtable: add nf_flow_offload_tuple() helper, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: flowtable: add nf_flow_table_offload_cmd(), Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: bitwise: replace gotos with returns., Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: bitwise: remove NULL comparisons from attribute checks., Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: hashlimit: do not use indirect calls during gc, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: flowtable: refresh flow if hardware offload fails, Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: nf_tables: white-space fixes., Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: flowtable: add nf_flow_offload_work_alloc(), Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: flowtable: add nf_flowtable_hw_offload() helper function, Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: flowtable: remove dying bit, use teardown bit instead, Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
• Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23., Florian Westphal
  • Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23., Jan Engelhardt
    • Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23., Florian Westphal
• Accumulated fixes, Jan Engelhardt
  • [PATCH 1/8] build: also use libtool for install stage, Jan Engelhardt
    • Re: [PATCH 1/8] build: also use libtool for install stage, Pablo Neira Ayuso
      • Re: [PATCH 1/8] build: also use libtool for install stage, Jan Engelhardt
  • [PATCH 2/8] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 5/8] extensions: S/DNPT: add missing save function, Jan Engelhardt
    • Re: [PATCH 5/8] extensions: S/DNPT: add missing save function, Pablo Neira Ayuso
  • [PATCH 6/8] iptables: fall back to using save function when print is not defined, Jan Engelhardt
    • Re: [PATCH 6/8] iptables: fall back to using save function when print is not defined, Pablo Neira Ayuso
  • [PATCH 7/8] iptables: reword warning on using an alias, Jan Engelhardt
  • [PATCH 3/8] libxtables: centralize checking for a .save function, Jan Engelhardt
    • Re: [PATCH 3/8] libxtables: centralize checking for a .save function, Pablo Neira Ayuso
      • Re: [PATCH 3/8] libxtables: centralize checking for a .save function, Jan Engelhardt
  • [PATCH 8/8] build: fix libiptc build failure on old linux-glibc-devel headers, Jan Engelhardt
    • Re: [PATCH 8/8] build: fix libiptc build failure on old linux-glibc-devel headers, Pablo Neira Ayuso
  • [PATCH 4/8] extensions: eui64: set userspacesize=0, Jan Engelhardt
• [PATCH 0/4] libnetfilter_conntrack: connlabel support, Florian Westphal
  • [PATCH 1/4] api: add nfct_bitmask object, Florian Westphal
  • [PATCH 2/4] api: add connlabel api and attribute, Florian Westphal
    • Re: api: add connlabel api and attribute, Florian Westphal
      • Re: api: add connlabel api and attribute, Pablo Neira Ayuso
        • Re: api: add connlabel api and attribute, Florian Westphal
  • [PATCH 3/4] examples: add connlabel dump/set/clear demo programs, Florian Westphal
  • [PATCH 4/4] api: add CTA_LABEL_MASK attribute handling, Florian Westphal
• Add packet statistics to ipset?, Jonathan
  • Re: Add packet statistics to ipset?, Jozsef Kadlecsik
• [nf-next:master 10/20] net/netfilter/nf_conntrack_standalone.c:566:2: error: 'nf_ct_netfilter_header' undeclared, kbuild test robot
  • Re: [nf-next:master 10/20] net/netfilter/nf_conntrack_standalone.c:566:2: error: 'nf_ct_netfilter_header' undeclared, Pablo Neira Ayuso
    • Re: [nf-next:master 10/20] net/netfilter/nf_conntrack_standalone.c:566:2: error: 'nf_ct_netfilter_header' undeclared, Gao feng
• [PATCH nf-next 01/11] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • [PATCH nf-next 02/11] netfilter: expect: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 02/11] netfilter: expect: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 04/11] netfilter: tstamp: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 04/11] netfilter: tstamp: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 06/11] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 06/11] netfilter: timeout: move initial codes out of pernet_operations, Pablo Neira Ayuso
      • Re: [PATCH nf-next 06/11] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
  • [PATCH nf-next 09/11] netfilter: proto: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 09/11] netfilter: proto: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 05/11] netfilter: ecache: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 05/11] netfilter: ecache: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 11/11] netfilter: l4proto: refactor l4proto support for netns, Gao feng
    • Re: [PATCH nf-next 11/11] netfilter: l4proto: refactor l4proto support for netns, Pablo Neira Ayuso
  • [PATCH nf-next 07/11] netfilter: helper: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 07/11] netfilter: helper: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 08/11] netfilter: labels: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 08/11] netfilter: labels: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 10/11] netfilter: l3proto: refactor l3proto support for netns, Gao feng
    • Re: [PATCH nf-next 10/11] netfilter: l3proto: refactor l3proto support for netns, Pablo Neira Ayuso
  • [PATCH nf-next 03/11] netfilter: acct: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 03/11] netfilter: acct: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • Re: [PATCH nf-next 01/11] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
• [ulogd patch 0/4] minor code cleaning, Eric Leblond
  • [PATCH 1/4] Get rid of SVN tag in comment., Eric Leblond
  • [PATCH 2/4] Fix warning on format, Eric Leblond
  • [PATCH 4/4] graphite: fix warning about gnu extension usage, Eric Leblond
  • [PATCH 3/4] base: fix warning on pointer handling, Eric Leblond
  • Re: [ulogd patch 0/4] minor code cleaning, Eric Leblond
• [ulogd patch 0/3] improve ulogd command line, Eric Leblond
  • [PATCH 3/3] Add -l option to set log level from command line, Eric Leblond
  • [PATCH 2/3] conf: add flag to allow option setup tuning, Eric Leblond
  • [PATCH 1/3] ulogd: add -v option to display message on stderr., Eric Leblond
  • Re: [ulogd patch 0/3] improve ulogd command line, Eric Leblond
• [PATCH RESEND 01/10] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • [PATCH RESEND 02/10] netfilter: expect: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 04/10] netfilter: tstamp: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 07/10] netfilter: helper: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 10/10] netfilter: l4proto: refactor l4proto support for netns, Gao feng
  • [PATCH RESEND 08/10] netfilter: proto: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 09/10] netfilter: l3proto: refactor l3proto support for netns, Gao feng
  • [PATCH RESEND 06/10] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 05/10] netfilter: ecache: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 03/10] netfilter: acct: move initial codes out of pernet_operations, Gao feng
  • Re: [PATCH RESEND 01/10] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
    • Re: [PATCH RESEND 01/10] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
• [patch v3] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
  • Re: [patch v3] doc: add nf_conntrack sysctl api documentation, Pablo Neira Ayuso
    • Re: [patch v3] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
• [PATCH] iptables: extensions: fix iptables extensions build error in cross-compilation environments, Cristian Iorga
  • Re: [PATCH] iptables: extensions: fix iptables extensions build error in cross-compilation environments, Pablo Neira Ayuso
• [patch net-next v2] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
  • Re: [patch net-next v2] doc: add nf_conntrack sysctl api documentation, Simon Horman
  • Re: [patch net-next v2] doc: add nf_conntrack sysctl api documentation, Pablo Neira Ayuso
• [patch net-next] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
  • Re: [patch net-next] doc: add nf_conntrack sysctl api documentation, Florian Westphal
    • Re: [patch net-next] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
• [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Cong Ding
  • Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Waskiewicz Jr, Peter P
    • Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Cong Ding
  • Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Pablo Neira Ayuso
• Build fixes for old Linuxes, Jan Engelhardt
  • [PATCH 1/2] build: fix libiptc build failure on old linux-glibc-devel headers, Jan Engelhardt
  • [PATCH 2/2] parser: workaround glibc-2.3.2 bug 358, Jan Engelhardt
  • Re: Build fixes for old Linuxes, Pablo Neira Ayuso
    • Re: Build fixes for old Linuxes, Jan Engelhardt
      • Re: Build fixes for old Linuxes, Pablo Neira Ayuso
        • Re: Build fixes for old Linuxes, Jan Engelhardt
• Re: state match is obsolete 1.4.17, Jozsef Kadlecsik
  • Re: state match is obsolete 1.4.17, Born Without
  • Re: state match is obsolete 1.4.17, Jan Engelhardt
    • Re: state match is obsolete 1.4.17, Jozsef Kadlecsik
      • Re: state match is obsolete 1.4.17, Jan Engelhardt
        • Re: state match is obsolete 1.4.17, Jozsef Kadlecsik
          • [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
            • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Pablo Neira Ayuso
              • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
                • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jan Engelhardt
                  • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
                • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Pablo Neira Ayuso
                  • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
                    • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: state match is obsolete 1.4.17, Jan Engelhardt
• [PATCH 0/3] netfilter fixes for 3.8-rc3, pablo
  • [PATCH 3/3] netfilter: x_tables: print correct hook names for ARP, pablo
  • [PATCH 2/3] netfilter: nf_conntrack: fix BUG_ON while removing nf_conntrack with netns, pablo
  • [PATCH 1/3] netfilter: xt_CT: fix unset return value if conntrack zone are disabled, pablo
  • Re: [PATCH 0/3] netfilter fixes for 3.8-rc3, David Miller
• [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark, Pablo Neira Ayuso
  • Re: [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark, Jan Engelhardt
    • Re: [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark, Jesper Dangaard Brouer
• [libnetfilter_queue PATCH 1/2] doxygen: improve fail-open documentation., Eric Leblond
  • [libnetfilter_queue PATCH 2/2] doxygen: improve documentation, Eric Leblond
• warning: (BRIDGE_NF_EBTABLES) selects NETFILTER_XTABLES which has unmet direct dependencies (NET && INET && NETFILTER), Fengguang Wu
• [PATCH next] extensions: add connlabel match, Florian Westphal
• [PATCH next V2] netfilter connlabel extension, Florian Westphal
  • [PATCH 1/3] netfilter: add connlabel conntrack extension, Florian Westphal
    • Re: [PATCH 1/3] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: ctnetlink: deliver labels to userspace, Florian Westphal
    • Re: [PATCH 2/3] netfilter: ctnetlink: deliver labels to userspace, Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: ctnetlink: allow userspace to modify labels, Florian Westphal
    • Re: [PATCH 3/3] netfilter: ctnetlink: allow userspace to modify labels, Pablo Neira Ayuso
• [PATCH] netfilter: x_tables: print correct hook names for ARP, Jan Engelhardt
  • Re: [PATCH] netfilter: x_tables: print correct hook names for ARP, Pablo Neira Ayuso
• [RELEASE] arptables v0.0.4, Bart De Schuymer
• xtadm 1.5.0 released, Jan Engelhardt
• [PATCH 1/7] netfilter: nf_tables: nft_compat: release cached matches/targets, pablo
  • [PATCH 2/7] netfilter: nf_tables: move filter chain definition to layer 3 modules, pablo
    • Re: [PATCH 2/7] netfilter: nf_tables: move filter chain definition to layer 3 modules, Patrick McHardy
  • [PATCH 5/7] netfilter: nf_tables: x_tables support as a compile time option, pablo
  • [PATCH 4/7] netfilter: nf_tables: move specific layer 3 compat code to nf_tables_ipv[4|6], pablo
    • Re: [PATCH 4/7] netfilter: nf_tables: move specific layer 3 compat code to nf_tables_ipv[4|6], Patrick McHardy
      • Re: [PATCH 4/7] netfilter: nf_tables: move specific layer 3 compat code to nf_tables_ipv[4|6], Pablo Neira Ayuso
  • [PATCH 3/7] netfilter: nf_tables: remove hook definitions from struct nft_af_info, pablo
    • Re: [PATCH 3/7] netfilter: nf_tables: remove hook definitions from struct nft_af_info, Patrick McHardy
      • Re: [PATCH 3/7] netfilter: nf_tables: remove hook definitions from struct nft_af_info, Pablo Neira Ayuso
  • [PATCH 7/7] netfilter: nf_tables: fix alias for xtables over nftables module, pablo
  • [PATCH 6/7] netfilter: nf_tables: support 32bits-64bits x_tables compat, pablo
    • Re: [PATCH 6/7] netfilter: nf_tables: support 32bits-64bits x_tables compat, Patrick McHardy
• iptables: build fixes, Jan Engelhardt
  • [PATCH 2/2] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 1/2] build: also use libtool for install stage, Jan Engelhardt
  • Re: iptables: build fixes, Dmitry V. Levin
    • Re: iptables: build fixes, Dmitry V. Levin
      • Re: iptables: build fixes, Jan Engelhardt
• [iptables-nftables RFC PATCH 0/6] IPv6 Support, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 1/6] nft: Add a family attribute to nft_handle, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 2/6] xtables: Combine IPv6 support with IPv4 support, Tomasz Bursztyka
    • [iptables-nftables RFC PATCH - v2 - 2/6] xtables: Combine IPv6 support with IPv4 support, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 3/6] nft: Use handle's family attribute instead of hardcoded AF_INET one, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 4/6] nft: Support IPv6 rules manipulation, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 5/6] nft: Use the right payload parsing function when saving a rule, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 6/6] nft: Handle IPv6 when printing out firewall rules, Tomasz Bursztyka
  • Re: [iptables-nftables RFC PATCH 0/6] IPv6 Support, Pablo Neira Ayuso
• [libnftables PATCH] rule: Add a function to get rule's family, Tomasz Bursztyka
  • Re: [libnftables PATCH] rule: Add a function to get rule's family, Pablo Neira Ayuso
• v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c, Borislav Petkov
  • Re: v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c, Pablo Neira Ayuso
    • Re: v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c, Borislav Petkov
      • Re: v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c, Pablo Neira Ayuso
• Possible arptables bug., Steven Jan Springl
  • Re: Possible arptables bug., Pablo Neira Ayuso
    • Re: Possible arptables bug., Pablo Neira Ayuso
      • Re: Possible arptables bug., Steven Jan Springl
• [PATCH 0/3] Netfilter fixes for 3.8-rc2, pablo
  • [PATCH 1/3] netfilter: ip6t_NPT: fix IPv6 NTP checksum calculation, pablo
  • [PATCH 3/3] netfilter: xt_recent: avoid high order page allocations, pablo
  • [PATCH 2/3] netfilter: fix missing dependencies for the NOTRACK target, pablo
  • Re: [PATCH 0/3] Netfilter fixes for 3.8-rc2, David Miller
• libipset usage, Josh Hunt
  • Re: libipset usage, Jozsef Kadlecsik
• arptables bug., Steven Jan Springl
  • Re: arptables bug., Pablo Neira Ayuso
    • Re: arptables bug., Bart De Schuymer
    • Re: arptables bug., Steven Jan Springl
• [PATCH] netfilter: xt_recent: avoid high order page allocations, Eric Dumazet
  • Re: [PATCH] netfilter: xt_recent: avoid high order page allocations, Pablo Neira Ayuso
• [PATCH next V2] netfilter: remove extra timer from ecache extension, Florian Westphal
  • Re: [PATCH next V2] netfilter: remove extra timer from ecache extension, Pablo Neira Ayuso
• [PATCH -v2 22/26] net/netfilter: rename random32() to prandom_u32(), Akinobu Mita
• [PATCH] iptables: set IPv6 DNAT --to-destination, Ulrich Weber
  • Re: [PATCH] iptables: set IPv6 DNAT --to-destination, Pablo Neira Ayuso
• Re: linux-next: Tree for Jan 2 (netfilter), Randy Dunlap
  • Re: linux-next: Tree for Jan 2 (netfilter), Pablo Neira Ayuso
    • Re: linux-next: Tree for Jan 2 (netfilter), Pablo Neira Ayuso
      • Re: linux-next: Tree for Jan 2 (netfilter), Randy Dunlap
• [PATCH] iptables: fix wording in DNPT target, Ulrich Weber
  • [PATCH v2] iptables: merge libip6t SNPT and DNPT to NPT, Ulrich Weber
    • Re: [PATCH v2] iptables: merge libip6t SNPT and DNPT to NPT, Jan Engelhardt
  • Re: [PATCH] iptables: fix wording in DNPT target, Pablo Neira Ayuso
• [PATCH] iptables: allow IPv6 port NAT without address NAT, Ulrich Weber
  • Re: [PATCH] iptables: allow IPv6 port NAT without address NAT, Pablo Neira Ayuso
    • Re: [PATCH] iptables: allow IPv6 port NAT without address NAT, Ulrich Weber
    • [PATCH v2] iptables: allow IPv6 port NAT without address NAT, Ulrich Weber
      • Re: [PATCH v2] iptables: allow IPv6 port NAT without address NAT, Pablo Neira Ayuso
• [PATCH] netfilter: fix IPv6 NTP checksum calculation, Ulrich Weber
  • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Patrick McHardy
    • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Jean-Michel DILLY
    • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Florian Westphal
      • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Jean-Michel DILLY
        • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, YOSHIFUJI Hideaki
          • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Ulrich Weber
• [PATCH 1/4] netfilter: nf_tables: rise maximum number of expressions from 12 to 128, pablo
  • [PATCH 2/4] netfilter: nf_tables: nft_compat: private data of target and matches in contiguous area, pablo
  • [PATCH 4/4] netfilter: nf_tables: complete net namespace support, pablo
  • [PATCH 3/4] netfilter: nf_tables: validate hooks for compat match/target, pablo
• [PATCH] extensions: fix linking against -lip6tc, Mike Frysinger
  • Re: [PATCH] extensions: fix linking against -lip6tc, Pablo Neira Ayuso
    • Re: [PATCH] extensions: fix linking against -lip6tc, Mike Frysinger
      • [PATCH] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
        • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Mike Frysinger
          • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
            • [PATCH] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
              • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Mike Frysinger
                • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Pablo Neira Ayuso
              • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Dmitry V. Levin
                • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Dmitry V. Levin
                • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
• [PATCH] net: fix checking boundary of valid vlan id, akong
  • <Possible follow-ups>
  • Re: [PATCH] net: fix checking boundary of valid vlan id, Pablo Neira Ayuso
    • Re: [PATCH] net: fix checking boundary of valid vlan id, Ben Hutchings
• [PATCH] netfilter: add include file to nf_conntrack_snmp.c, Stephen Hemminger
  • Re: [PATCH] netfilter: add include file to nf_conntrack_snmp.c, Pablo Neira Ayuso
• [Ulogd PATCH 0/4] Implement filter for NFCT, Eric Leblond
  • [PATCH 1/4] nfct: call register callback on opened handler, Eric Leblond
  • [PATCH 2/4] addr: add file containing addr utility functions., Eric Leblond
  • [PATCH 3/4] nfct: implement src and dst filter, Eric Leblond
  • [PATCH 4/4] nfct: add protocol filter, Eric Leblond
  • Re: [Ulogd PATCH 0/4] Implement filter for NFCT, Eric Leblond
• [PATCH 00/12] netfilter fixes for 3.8-rc1, pablo
  • [PATCH 02/12] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, pablo
  • [PATCH 01/12] netfilter: ip[6]t_REJECT: fix wrong transport header pointer in TCP reset, pablo
  • [PATCH 06/12] netfilter: xt_CT: fix crash while destroy ct templates, pablo
  • [PATCH 09/12] netfilter: xt_hashlimit: fix race that results in duplicated entries, pablo
  • [PATCH 10/12] netfilter: xt_recent: fix namespace destroy path, pablo
  • [PATCH 11/12] netfilter: xt_hashlimit: fix namespace destroy path, pablo
  • [PATCH 12/12] netfilter: ctnetlink: fix leak in error path of ctnetlink_create_expect, pablo
  • [PATCH 08/12] netfilter: xt_CT: recover NOTRACK target support, pablo
  • [PATCH 03/12] netfilter: nf_conntrack_ipv6: fix comment for packets without data, pablo
  • [PATCH 05/12] netfilter: nfnetlink_log: fix mac address for 6in4 tunnels, pablo
  • [PATCH 04/12] netfilter: nf_ct_reasm: fix conntrack reassembly expire code, pablo
  • [PATCH 07/12] netfilter: nfnetlink_log: fix possible compilation issue due to missing include, pablo
  • Re: [PATCH 00/12] netfilter fixes for 3.8-rc1, David Miller
• [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • [PATCH 13/19] netfilter: ipv4: move registration codes out of pernet_operations, Gao feng
  • [PATCH 14/19] netfilter: ipv6: move registration codes out of pernet_operations, Gao feng
  • [PATCH 17/19] netfilter: dccp: move registration codes out of pernet_operations, Gao feng
  • [PATCH 12/19] netfilter: l4proto: prepare reworking l4proto support for netns, Gao feng
  • [PATCH 15/19] netfilter: sctp: move registration codes out of pernet_operations, Gao feng
  • [PATCH 16/19] netfilter: udplite: move registration codes out of pernet_operations, Gao feng
  • [PATCH 18/19] netfilter: gre: move registration codes out of pernet_operations, Gao feng
  • [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
    • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Pablo Neira Ayuso
      • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
        • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Pablo Neira Ayuso
          • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Pablo Neira Ayuso
            • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
              • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
                • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Pablo Neira Ayuso
                  • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
  • [PATCH 11/19] netfilter: ipv6: register l3proto ipv6 in module_init, Gao feng
  • [PATCH 10/19] netfilter: ipv4: register l3proto ipv4 in module_init, Gao feng
  • [PATCH 09/19] netfilter: l3proto: prepare reworking l3proto support for netns, Gao feng
  • [PATCH 03/19] netfilter: acct: move initial codes out of pernet_operations, Gao feng
  • [PATCH 10/19] netfilter: ipv4: register ipv4 in module_init, Gao feng
  • [PATCH 08/19] netfilter: proto: move initial codes out of pernet_operations, Gao feng
  • [PATCH 07/19] netfilter: helper: move initial codes out of pernet_operations, Gao feng
  • [PATCH 04/19] netfilter: tstamp: move initial codes out of pernet_operations, Gao feng
  • [PATCH 02/19] netfilter: expect: move initial codes out of pernet_operations, Gao feng
  • [PATCH 06/19] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
  • [PATCH 05/19] netfilter: ecache: move initial codes out of pernet_operations, Gao feng
  • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, canqun zhang
    • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Eric W. Biederman
      • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, canqun zhang
        • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Eric W. Biederman
      • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
    • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
      • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, canqun zhang
        • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
    • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
      • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
• [ipset PATCH] Fix wrong bracket placing, Thomas Jarosch
  • Re: [ipset PATCH] Fix wrong bracket placing, Jozsef Kadlecsik
• [libnetfilter_conntrack PATCH] Fix logic typo in cmp_secctx, Thomas Jarosch
  • Re: [libnetfilter_conntrack PATCH] Fix logic typo in cmp_secctx, Florian Westphal
• [nfacct PATCH] Add restore command, Eric Leblond
  • Re: [nfacct PATCH] Add restore command, Pablo Neira Ayuso
    • Re: [nfacct PATCH] Add restore command, Eric Leblond
• [PATCH 0/3] netfilter: nf_tables: minor fixes, kaber
  • =?a?q?=5BPATCH=201/3=5D=20netfilter=3A=20nf=5Ftables=3A=20fix=20NLM=5FF=5FMULTI=20usage=20in=20netlink=20notifications?=, kaber
  • =?a?q?=5BPATCH=202/3=5D=20netfilter=3A=20nf=5Ftables=3A=20include=20NLM=5FF=5FAPPEND=20in=20rule=20dumps?=, kaber
  • =?a?q?=5BPATCH=203/3=5D=20netfilter=3A=20nf=5Ftables=3A=20check=20for=20duplicate=20names=20on=20chain=20rename?=, kaber
  • Re: [PATCH 0/3] netfilter: nf_tables: minor fixes, Pablo Neira Ayuso
• [PATCH 2/3] libxtables: add xtables_rule_matches_free, pablo
  • [PATCH 3/3] libxtables: add xtables_print_num, pablo
• [PATCH 1/4] iptables: remove unused leftover definitions, pablo
• [libnetfilter_acct PATCH] Fix packets and bytes inversion., Eric Leblond
  • Re: [libnetfilter_acct PATCH] Fix packets and bytes inversion., Eric Leblond
• [PATCH] netfilter: Don't leak 'exp' in ctnetlink_create_expect(), Jesper Juhl
  • Re: [PATCH] netfilter: Don't leak 'exp' in ctnetlink_create_expect(), Pablo Neira Ayuso
• Documentation and a build fix, Jan Engelhardt
  • [PATCH 03/13] doc: document iptables-restore's -t option, Jan Engelhardt
  • [PATCH 02/13] doc: fixup omissions in ip6tables-restore.8, Jan Engelhardt
  • [PATCH 08/13] src: remove faulty deprecated marker in libipt_LOG source, Jan Engelhardt
  • [PATCH 04/13] doc: document iptables-restore's -v option, Jan Engelhardt
  • [PATCH 06/13] doc: document iptables-restore's -h option, Jan Engelhardt
  • [PATCH 05/13] doc: document iptables-restore's -M option, Jan Engelhardt
  • [PATCH 01/13] doc: add package version to all manpages, Jan Engelhardt
    • Re: [PATCH 01/13] doc: add package version to all manpages, Pablo Neira Ayuso
      • Re: [PATCH 01/13] doc: add package version to all manpages, Pablo Neira Ayuso
  • [PATCH 11/13] doc: mention -m in the manpage, Jan Engelhardt
  • [PATCH 09/13] iptables: fix order of internal commands list, Jan Engelhardt
    • Re: [PATCH 09/13] iptables: fix order of internal commands list, Pablo Neira Ayuso
  • [PATCH 07/13] doc: name the supported log levels for ipt_LOG, Jan Engelhardt
  • [PATCH 10/13] iptables: implement --line-numbers for iptables -S, Jan Engelhardt
  • [PATCH 12/13] doc: document the -4 and -6 options, Jan Engelhardt
    • Re: [PATCH 12/13] doc: document the -4 and -6 options, Maciej Żenczykowski
  • [PATCH 13/13] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
  • Re: Documentation and a build fix, Pablo Neira Ayuso
• [libnl-nft PATCH] Fix out of bounds buffer access in rtnl_netem_set_delay_distribution(), Thomas Jarosch
  • Re: [libnl-nft PATCH] Fix out of bounds buffer access in rtnl_netem_set_delay_distribution(), Pablo Neira Ayuso
  • Re: [libnl-nft PATCH] Fix out of bounds buffer access in rtnl_netem_set_delay_distribution(), Patrick McHardy
    • Re: [libnl-nft PATCH] Fix out of bounds buffer access in rtnl_netem_set_delay_distribution(), Thomas Jarosch
• [libnl-nft PATCH] Fix file descriptor leak on error, Thomas Jarosch
  • Re: [libnl-nft PATCH] Fix file descriptor leak on error, Patrick McHardy
    • Re: [libnl-nft PATCH] Fix file descriptor leak on error, Thomas Jarosch
• [ANNOUNCE] iptables 1.4.17 release, Pablo Neira Ayuso
• kernel panic when running /etc/init.d/iptables restart, canqun zhang
  • Re: kernel panic when running /etc/init.d/iptables restart, Gao feng
    • Re: kernel panic when running /etc/init.d/iptables restart, canqun zhang
      • Re: kernel panic when running /etc/init.d/iptables restart, Gao feng
      • Re: kernel panic when running /etc/init.d/iptables restart, Gao feng
        • Re: kernel panic when running /etc/init.d/iptables restart, canqun zhang
          • Re: kernel panic when running /etc/init.d/iptables restart, canqun zhang
        • Re: kernel panic when running /etc/init.d/iptables restart, canqun zhang
• [PATCH 25/29] net/netfilter: rename random32() and net_random() to prandom_u32(), Akinobu Mita
• [ULOGD PATCH 0/2] Add Graphite output module, Eric Leblond
  • [PATCH 1/2] Add missing u64 function., Eric Leblond
  • [PATCH 2/2] Add GRAPHITE output module., Eric Leblond
  • Re: [ULOGD PATCH 0/2] Add Graphite output module, Eric Leblond
• [ulogd patches 0/3] IPv6 improvements, Eric Leblond
  • [PATCH 1/3] Fix parsing of ipv6 flowlabel and tc fields, Eric Leblond
  • [PATCH 2/3] Handle postgresql schemas correctly, Eric Leblond
  • [PATCH 3/3] Add additional ip6 header fields to database scripts, Eric Leblond
  • Re: [ulogd patches 0/3] IPv6 improvements, Eric Leblond
• NOTRACK removal breaks working configurations, Florian Westphal
  • Re: NOTRACK removal breaks working configurations, Pablo Neira Ayuso
    • Re: NOTRACK removal breaks working configurations, Florian Westphal
      • Re: NOTRACK removal breaks working configurations, Pablo Neira Ayuso
• NAT pool, Miguel Alejandro González
  • Re: NAT pool, Jan Engelhardt
    • Re: NAT pool, Miguel Alejandro González
      • Re: NAT pool, Pablo Neira Ayuso
• BUG: NFLOG not working in the container., Vitaly E. Lavrov
  • Re: BUG: NFLOG not working in the container., Pablo Neira Ayuso
• [PATCH] netfilter: xtables: remove table restrictions from some modules, Jan Engelhardt
  • Re: [PATCH] netfilter: xtables: remove table restrictions from some modules, Maciej Żenczykowski
    • Re: [PATCH] netfilter: xtables: remove table restrictions from some modules, Jan Engelhardt
• [PATCH v4] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones, Kevin Cernekee
  • Re: [PATCH v4] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones, Pablo Neira Ayuso
• Re: Resend: One bug in the xt_hashlimit.c, Jan Engelhardt
  • Re: Resend: One bug in the xt_hashlimit.c, Pablo Neira Ayuso
• Re: tc ipt action, Jamal Hadi Salim
  • Re: tc ipt action, Jan Engelhardt
    • Re: tc ipt action, Jan Engelhardt
      • [PATCH] build: unbreak linkage of m_xt.so, Jan Engelhardt
        • Re: [PATCH] build: unbreak linkage of m_xt.so, Jamal Hadi Salim
          • Re: [PATCH] build: unbreak linkage of m_xt.so, Jamal Hadi Salim
            • Re: [PATCH] build: unbreak linkage of m_xt.so, Jan Engelhardt
              • Re: [PATCH] build: unbreak linkage of m_xt.so, Jamal Hadi Salim
        • Re: [PATCH] build: unbreak linkage of m_xt.so, Mike Frysinger
        • Re: [PATCH] build: unbreak linkage of m_xt.so, Stephen Hemminger
          • Re: [PATCH] build: unbreak linkage of m_xt.so, Mike Frysinger
            • Re: [PATCH] build: unbreak linkage of m_xt.so, Stephen Hemminger
    • Re: tc ipt action, Jamal Hadi Salim
    • Message not available
      • Re: tc ipt action, Jamal Hadi Salim
        • Re: tc ipt action, Jamal Hadi Salim
          • Re: tc ipt action, Jan Engelhardt
            • Re: tc ipt action, Jamal Hadi Salim
            • [PATCH] iproute2: act_ipt fix xtables breakage, Jamal Hadi Salim
              • RFC [PATCH] iproute2: temporary solution to fix xt breakage, Jamal Hadi Salim
                • Re: RFC [PATCH] iproute2: temporary solution to fix xt breakage, Stephen Hemminger
                  • Re: RFC [PATCH] iproute2: temporary solution to fix xt breakage, Jamal Hadi Salim
                • Message not available
                  • Re: RFC [PATCH] iproute2: temporary solution to fix xt breakage, Jamal Hadi Salim
                    • Message not available
                      • Re: RFC [PATCH] iproute2: temporary solution to fix xt breakage, Jamal Hadi Salim
                        • [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jan Engelhardt
                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                          • Message not available
                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                              • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                  • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                                    • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                      • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                                        • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jan Engelhardt
                                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Florian Westphal
                                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                              • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Felix Fietkau
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Pablo Neira Ayuso
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Pablo Neira Ayuso
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Pablo Neira Ayuso
                                      • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jan Engelhardt
                                        • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Eric Dumazet
                                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
  • Re: tc ipt action, Pablo Neira Ayuso
    • Re: tc ipt action, Jan Engelhardt
      • Re: tc ipt action, Jamal Hadi Salim
        • Re: tc ipt action, Jan Engelhardt
          • Re: tc ipt action, Jamal Hadi Salim
            • Re: tc ipt action, Jan Engelhardt
              • Re: tc ipt action, Jamal Hadi Salim
                • Re: tc ipt action, Jan Engelhardt
                  • Re: tc ipt action, Jamal Hadi Salim
                    • Re: tc ipt action, Jan Engelhardt
                      • Re: tc ipt action, Jamal Hadi Salim
                        • Re: tc ipt action, Jan Engelhardt
                          • Re: tc ipt action, Jamal Hadi Salim
    • Re: tc ipt action, Jamal Hadi Salim
• [PATCH] Fix comment for packets without data, Florent Fourcot
  • Re: [PATCH] Fix comment for packets without data, Rick Jones
    • [PATCH] Fix comment for packets without data, Florent Fourcot
      • Re: [PATCH] Fix comment for packets without data, Rick Jones
        • Re: [PATCH] Fix comment for packets without data, Pablo Neira Ayuso
    • Re: [PATCH] Fix comment for packets without data, Florent Fourcot
• Formal submission of Xtables2, Jan Engelhardt
  • Re: Formal submission of Xtables2, Pablo Neira Ayuso
    • Re: Formal submission of Xtables2, Jan Engelhardt
      • Re: Formal submission of Xtables2, Pablo Neira Ayuso
        • Re: Formal submission of Xtables2, Jan Engelhardt
          • Re: Formal submission of Xtables2, Pablo Neira Ayuso
            • Re: Formal submission of Xtables2, Jan Engelhardt
              • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                • Re: Formal submission of Xtables2, Jan Engelhardt
                  • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                    • Re: Formal submission of Xtables2, Jan Engelhardt
                      • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                        • Re: Formal submission of Xtables2, Jan Engelhardt
                          • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                            • Re: Formal submission of Xtables2, Maciej Żenczykowski
                            • Re: Formal submission of Xtables2, Jan Engelhardt
                              • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                                • Re: Formal submission of Xtables2, Jan Engelhardt
                                  • Re: Formal submission of Xtables2, Jozsef Kadlecsik
                                    • Re: Formal submission of Xtables2, Jan Engelhardt
                                    • Re: Formal submission of Xtables2, David Miller
    • Message not available
      • Re: Formal submission of Xtables2, Pablo Neira Ayuso
• [PATCH v2] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Andrew Collins
  • Re: [PATCH v2] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Jozsef Kadlecsik
    • Re: [PATCH v2] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Pablo Neira Ayuso
• [PATCH] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Andrew Collins
  • Re: [PATCH] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Andrew Collins
• [PATCH 00/11] netfilter: nf_tables: small cleanups and netlink fixes, kaber
  • [PATCH 02/11] netfilter: nf_tables: revert commit 2a3c360f, kaber
  • [PATCH 01/11] netfilter: nf_tables: rename pid variables to portid, kaber
  • [PATCH 03/11] netfilter: nf_tables: move hgenerator from chain to table, kaber
  • [PATCH 04/11] netfilter: nf_tables: move policy to struct nft_base_chain, kaber
  • [PATCH 05/11] netfilter: nf_tables: send notifications for base chain policy changes, kaber
  • [PATCH 07/11] netfilter: nf_tables: fix invalid event type in nf_tables_getrule(), kaber
  • [PATCH 09/11] netfilter: nf_tables: return error for rule change request, kaber
  • [PATCH 11/11] netfilter: nf_tables: include NLM_F_APPEND/NLM_F_REPLACE flags in rule notification, kaber
  • [PATCH 10/11] netfilter: nf_tables: return error for NLM_F_REPLACE without rule handle, kaber
  • [PATCH 06/11] netfilter: nf_tables: introduce chain handles and fix chain rename, kaber
  • [PATCH 08/11] netfilter: nf_tables: remove ability to specify handles for new rules, kaber
  • Re: [PATCH 00/11] netfilter: nf_tables: small cleanups and netlink fixes, Pablo Neira Ayuso
• NET development closed..., David Miller
• [PATCH] xt_hashlimit fix BUG(), Vitaly E. Lavrov
• [PATCH] xt_recent fix BUG(), Vitaly E. Lavrov
  • Re: [PATCH] xt_recent fix BUG(), Pablo Neira Ayuso
• [PATCH] netfilter: xt_CT: fix crash while destroy ct templates, pablo
• [PATCH 2/2] net: remove obsolete simple_strto<foo>, Abhijit Pawar
  • Re: [PATCH 2/2] net: remove obsolete simple_strto<foo>, David Miller
• [PATCH RESEND RESEND] net: remove obsolete simple_strto<foo>, Abhijit Pawar
  • Re: [PATCH RESEND RESEND] net: remove obsolete simple_strto<foo>, David Miller
    • Re: [PATCH RESEND RESEND] net: remove obsolete simple_strto<foo>, Abhijit Pawar
• [nf-next:nf_tables-experiments 22/24] net/netfilter/nft_nat.c:47:35: sparse: incorrect type in assignment (different base types), kbuild test robot
• [nf-next:nf_tables-experiments 20/24] net/netfilter/nf_tables_api.c:344:23: sparse: incorrect type in assignment (different base types), kbuild test robot
• problem: [PATCH] iptable_REJECT doesn't constructs the tcp reset packet cleanly, Mukund Jampala
  • Re: problem: [PATCH] iptable_REJECT doesn't constructs the tcp reset packet cleanly, Pablo Neira Ayuso
    • Re: problem: [PATCH] iptable_REJECT doesn't constructs the tcp reset packet cleanly, Pablo Neira Ayuso
• [PATCH 0/5] netfilter: nf_tables: nf_tables update, kaber
  • [PATCH 1/5] netfilter: nf_tables: fix anonymous sets, kaber
  • [PATCH 3/5] netfilter: nf_tables: destroy anonymous sets immediately if binding fails, kaber
  • [PATCH 2/5] netfilter: nf_tables: save 48 bits per rule, kaber
  • [PATCH 4/5] netfilter: nf_tables: propagate context to set iter callback, kaber
  • [PATCH 5/5] netfilter: nf_tables: add loop detection, kaber
  • Re: [PATCH 0/5] netfilter: nf_tables: nf_tables update, Pablo Neira Ayuso
• how to monitor changes in kernel tables, aalexh
  • Re: how to monitor changes in kernel tables, Nicolas Dichtel
• [PATCH RESEND] net: remove obsolete simple_strto<foo>, Abhijit Pawar
  • Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>, Neil Horman
  • Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>, David Miller
    • Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>, Abhijit Pawar
      • Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>, David Miller
    • Message not available
      • Re: [PATCH RESEND] net: remove obsolete simple_strto<foo>, David Miller
• [PATCH next] extensions: add libxt_bpf extension, Willem de Bruijn
  • [PATCH] extensions: add libxt_bpf extension, Willem de Bruijn
    • Re: [PATCH] extensions: add libxt_bpf extension, Pablo Neira Ayuso
      • Re: [PATCH] extensions: add libxt_bpf extension, Willem de Bruijn
    • [PATCH next] extensions: add libxt_bpf extension, Willem de Bruijn
      • Re: [PATCH next] extensions: add libxt_bpf extension, Pablo Neira Ayuso
• [PATCH next] extensions: add libxt_skbuff extension, Willem de Bruijn
  • [PATCH] [rfc] a bpf compilation tool for xt_bpf, Willem de Bruijn
• xt_recent BUG() in kernel 3.2/3.4 & patch, Vitaly E. Lavrov
  • Re: xt_recent BUG() in kernel 3.2/3.4 & patch, Pablo Neira Ayuso
• [PATCH 2/4] net: remove obsolete simple_strto<foo>, Abhijit Pawar
  • Re: [PATCH 2/4] net: remove obsolete simple_strto<foo>, Neil Horman
• [PATCH] fix conntrack reassembly expire code, haibbo
  • Re: [PATCH] fix conntrack reassembly expire code, Pablo Neira Ayuso
    • Message not available
      • Re: [PATCH] fix conntrack reassembly expire code, Pablo Neira Ayuso
• how to implement port triggering using iptables?, 胡磊
  • Re: how to implement port triggering using iptables?, Jozsef Kadlecsik
• [PATCH rfc] netfilter: two xtables matches, Willem de Bruijn
  • [PATCH 1/2] netfilter: add xt_priority xtables match, Willem de Bruijn
    • [PATCH] [RFC] netfilter: add xt_skbuff xtables match, Willem de Bruijn
      • Re: [PATCH] [RFC] netfilter: add xt_skbuff xtables match, Pablo Neira Ayuso
        • Re: [PATCH] [RFC] netfilter: add xt_skbuff xtables match, Willem de Bruijn
          • [PATCH] netfilter: add xt_skbuff xtables match, Willem de Bruijn
  • [PATCH 2/2] netfilter: add xt_bpf xtables match, Willem de Bruijn
    • Re: [PATCH 2/2] netfilter: add xt_bpf xtables match, Pablo Neira Ayuso
      • Re: [PATCH 2/2] netfilter: add xt_bpf xtables match, Willem de Bruijn
        • Re: [PATCH 2/2] netfilter: add xt_bpf xtables match, Pablo Neira Ayuso
          • Re: [PATCH 2/2] netfilter: add xt_bpf xtables match, Willem de Bruijn
            • Re: [PATCH 2/2] netfilter: add xt_bpf xtables match, Pablo Neira Ayuso
              • Re: [PATCH 2/2] netfilter: add xt_bpf xtables match, Daniel Borkmann