Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH] netfilter: register pernet subsystem before register L4 proto, Gao feng
  • Re: [PATCH] netfilter: register pernet subsystem before register L4 proto, Pablo Neira Ayuso
• re L4 conntracking netns conversion, Alexey Dobriyan
  • Re: re L4 conntracking netns conversion, Gao feng
    • Re: re L4 conntracking netns conversion, Eric W. Biederman
      • Re: re L4 conntracking netns conversion, Gao feng
• [PATCH 0/3] netfilter fixes for your net tree, pablo
  • [PATCH 1/3] netfilter: nf_ct_helper: Fix logging for dropped packets, pablo
  • [PATCH 3/3] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set, pablo
  • [PATCH 2/3] netfilter: xt_AUDIT: only generate audit log when audit enabled, pablo
  • Re: [PATCH 0/3] netfilter fixes for your net tree, David Miller
• [PATCH iptables-nftables] iptables: fix compil when lib[mnl|nftables] are not in standard path, Nicolas Dichtel
  • Re: [PATCH iptables-nftables] iptables: fix compil when lib[mnl|nftables] are not in standard path, Pablo Neira Ayuso
• [PATCH nftables] nftables: fix compilation when nf-netlink is a module, Nicolas Dichtel
  • Re: [PATCH nftables] nftables: fix compilation when nf-netlink is a module, Nicolas Dichtel
    • [PATCH nftables v2] nftables: fix compilation when nf-netlink is a module, Nicolas Dichtel
      • Re: [PATCH nftables v2] nftables: fix compilation when nf-netlink is a module, Pablo Neira Ayuso
• [PATCH 2/2] iptables (kernel): add secmark match, Mr Dash Four
• [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
  • Re: [PATCH 1/2] iptables (userspace): add secmark match, Pablo Neira Ayuso
    • Re: [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
      • Re: [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
        • Re: [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
• [PATCH 0/2] iptables: add secmark match, Mr Dash Four
• [PATCH] ulogd2: raw2packet_BASE changes, Mr Dash Four
  • Re: [PATCH] ulogd2: raw2packet_BASE changes, Eric Leblond
    • Re: [PATCH] ulogd2: raw2packet_BASE changes, Mr Dash Four
      • Re: [PATCH] ulogd2: raw2packet_BASE changes, Eric Leblond
        • Re: [PATCH] ulogd2: raw2packet_BASE changes, Mr Dash Four
• [PATCH] nfacct: correct regressions in v1.0.1, Mr Dash Four
  • Re: [PATCH] nfacct: correct regressions in v1.0.1, Pablo Neira Ayuso
    • Re: [PATCH] nfacct: correct regressions in v1.0.1, Mr Dash Four
    • [PATCH] libnetfilter_acct: use PRIu64 and remove unnecessary cast, Mr Dash Four
      • Re: [PATCH] libnetfilter_acct: use PRIu64 and remove unnecessary cast, Pablo Neira Ayuso
        • Re: [PATCH] libnetfilter_acct: use PRIu64 and remove unnecessary cast, Mr Dash Four
• Save funcs, installation, const, Jan Engelhardt
  • [PATCH 2/5] extensions: eui64: set userspacesize=0, Jan Engelhardt
  • [PATCH 1/5] libxtables: centralize checking for a .save function, Jan Engelhardt
  • [PATCH 3/5] iptables: fall back to using save function when print is not defined, Jan Engelhardt
  • [PATCH 4/5] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 5/5] libxtables: constify xtables_option_[mt]fcall argument, Jan Engelhardt
• [ANNOUNCE] libnetfilter_conntrack 1.0.3 release, Pablo Neira Ayuso
• [PATCH -v3 19/23] net/netfilter: rename random32() to prandom_u32(), Akinobu Mita
• [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set, Paul Bolle
  • Re: [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set, Pablo Neira Ayuso
• [PATCH] netfilter: xt_AUDIT: only generate audit log when audit enabled, Gao feng
  • Re: [PATCH] netfilter: xt_AUDIT: only generate audit log when audit enabled, Thomas Graf
  • Re: [PATCH] netfilter: xt_AUDIT: only generate audit log when audit enabled, Pablo Neira Ayuso
• [ANNOUNCE] ulogd 2.0.2 release, Eric Leblond
• [ANNOUNCE] iptables 1.4.18 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] iptables 1.4.18 release, Jan Engelhardt
• [ulogd patch 0/1] use conntrack based timestamp, Eric Leblond
  • [PATCH] nfct: use timestamp of conntrack object., Eric Leblond
    • Re: [PATCH] nfct: use timestamp of conntrack object., Eric Leblond
• [ANNOUNCE] conntrack-tools 1.4.1 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] conntrack-tools 1.4.1 release, Gustavo Zacarias
    • Re: [ANNOUNCE] conntrack-tools 1.4.1 release, Pablo Neira Ayuso
• [ANNOUNCE] nfacct 1.0.1 release, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_acct 1.0.2 release, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: nf_tables: partially rework commit and abort operation, pablo
  • [PATCH 2/2] netfilter: nf_tables: don't skip inactive rules and dump generation mask, pablo
  • Re: [PATCH 1/2] netfilter: nf_tables: partially rework commit and abort operation, Tomasz Bursztyka
  • [RFC] Atomic rule manipulation part of transactions, Tomasz Bursztyka
    • [PATCH] nf_tables: Transaction API proposal, Tomasz Bursztyka
      • Re: [PATCH] nf_tables: Transaction API proposal, Pablo Neira Ayuso
        • Re: [PATCH] nf_tables: Transaction API proposal, Pablo Neira Ayuso
        • Re: [PATCH] nf_tables: Transaction API proposal, Tomasz Bursztyka
          • Re: [PATCH] nf_tables: Transaction API proposal, Pablo Neira Ayuso
            • [RFC v2] nf_tables: Transaction API proposal, Tomasz Bursztyka
              • Re: [RFC v2] nf_tables: Transaction API proposal, Pablo Neira Ayuso
                • Re: [RFC v2] nf_tables: Transaction API proposal, Tomasz Bursztyka
• Extending class handle from 16bit to 32bit, Karel Rericha
  • Re: Extending class handle from 16bit to 32bit, Stephen Hemminger
    • Re: Extending class handle from 16bit to 32bit, Karel Rericha
      • Re: Extending class handle from 16bit to 32bit, Stephen Hemminger
• [MAINTENANCE] netfilter.org infrastructure updates, Pablo Neira Ayuso
  • Re: [MAINTENANCE] netfilter.org infrastructure updates, Mr Dash Four
    • Re: [MAINTENANCE] netfilter.org infrastructure updates, Pablo Neira Ayuso
      • Re: [MAINTENANCE] netfilter.org infrastructure updates, Mr Dash Four
• Help on error message, Nicole
  • Re: Help on error message, Jan Engelhardt
    • Re: Help on error message, Nicole
      • Re: Help on error message, Jan Engelhardt
      • Re: Help on error message, Mr Dash Four
        • Re: Help on error message, Amos Jeffries
          • Re: Help on error message, Mr Dash Four
• [PATCH] iptables-save: add --chain argument, limits output to a chain, jonh . wendell
  • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jan Engelhardt
    • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jonh Wendell
    • Message not available
      • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jan Engelhardt
        • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jonh Wendell
          • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jan Engelhardt
            • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jonh Wendell
• [PATCH] conntrackd: cthelper: add DHCPv6 support, pablo
• iptables nfacct match question, Michael Zintakis
  • Re: iptables nfacct match question, Pablo Neira Ayuso
    • Re: iptables nfacct match question, Michael Zintakis
      • Re: iptables nfacct match question, Pablo Neira Ayuso
        • Re: iptables nfacct match question, Michael Zintakis
          • Re: iptables nfacct match question, Pablo Neira Ayuso
            • Re: iptables nfacct match question, Michael Zintakis
              • Re: iptables nfacct match question, Michael Zintakis
              • Re: iptables nfacct match question, Michael Zintakis
                • Re: iptables nfacct match question, Jozsef Kadlecsik
                  • Re: iptables nfacct match question, Michael Zintakis
                    • Re: iptables nfacct match question, Jozsef Kadlecsik
                      • Re: iptables nfacct match question, Michael Zintakis
                        • Re: iptables nfacct match question, Jozsef Kadlecsik
                          • Re: iptables nfacct match question, Michael Zintakis
                    • Re: iptables nfacct match question, Michael Zintakis
• [Ulogd2 PATCH 0/4] preparing 2.0.2 release, Eric Leblond
  • [Ulogd2 PATCH 1/4] Add Changes to extra dist., Eric Leblond
  • [Ulogd2 PATCH 2/4] Update man page., Eric Leblond
  • [Ulogd2 PATCH 3/4] Update README, Eric Leblond
  • [Ulogd2 PATCH 4/4] Prepare release number to 2.0.2, Eric Leblond
  • Re: [Ulogd2 PATCH 0/4] preparing 2.0.2 release, Eric Leblond
• [PATCH] arptables: build an libarptc.a archive, Jonh Wendell
  • Re: [PATCH] arptables: build an libarptc.a archive, Jan Engelhardt
    • Re: [PATCH] arptables: build an libarptc.a archive, Bart De Schuymer
• [ANNOUNCE] ipset 6.17 released, Jozsef Kadlecsik
• [PATCH stable] ipvs: sctp: fix checksumming on snat and dnat handlers, Daniel Borkmann
  • Re: [PATCH stable] ipvs: sctp: fix checksumming on snat and dnat handlers, Neil Horman
    • Re: [PATCH stable] ipvs: sctp: fix checksumming on snat and dnat handlers, Pablo Neira Ayuso
• netfilter: nf_tables: complete net namespace support, Patrick McHardy
  • Re: netfilter: nf_tables: complete net namespace support, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: timeout values corrupted on set resize, Josh Hunt
  • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Josh Hunt
      • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
        • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Josh Hunt
        • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Mr Dash Four
          • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Pablo Neira Ayuso
• ipset timeout values corrupt on set resize, Josh Hunt
  • Re: ipset timeout values corrupt on set resize, Josh Hunt
• [PATCH nf-next 1/2] netfilter: ebt_ulog: remove useless spin lock protection, Gao feng
  • [PATCH nf-next 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Gao feng
• [PATCH 0/7] netfilter updates for net-next, pablo
  • [PATCH 2/7] netfilter: xt_conntrack: Add flag to support aliases, pablo
  • [PATCH 4/7] netfilter: xt_CT: add alias flag, pablo
  • [PATCH 6/7] netfilter: nf_ct_pptp: Fix comment referring to incorrect RFC, pablo
  • [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, pablo
    • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Joe Perches
      • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Pablo Neira Ayuso
        • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Joe Perches
          • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Pablo Neira Ayuso
        • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Joe Perches
          • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Pablo Neira Ayuso
            • Re: [PATCH 7/7] netfilter: nf_ct_helper: Fix logging for dropped packets, Joe Perches
              • Re: [PATCH 7/7] netfilter: nf_ct_helper: Fix logging for dropped packets, Pablo Neira Ayuso
  • [PATCH 5/7] netfilter: nfnetlink: add mutex per subsystem, pablo
  • [PATCH 3/7] netfilter: xt_CT: merge common code of revision 0 and 1, pablo
  • [PATCH 1/7] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, pablo
  • Re: [PATCH 0/7] netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 0/7] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy(), Pablo Neira Ayuso
    • [PATCH 2/7] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: Replace HTTP links with HTTPS ones, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nf_tables: report EEXIST on overlaps, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: ip6tables: Remove redundant null checks, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nf_tables: extended netlink error reporting for expressions, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: Use fallthrough pseudo-keyword, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter updates for net-next, David Miller
• [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
  • Re: [nf-next/nf_tables8] Unable to compile kernel, Pablo Neira Ayuso
    • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
      • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
        • Re: [nf-next/nf_tables8] Unable to compile kernel, Pablo Neira Ayuso
          • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
            • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
              • Re: [nf-next/nf_tables8] Unable to compile kernel, Pablo Neira Ayuso
                • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
• [ulogd patch] small code cleaning, Eric Leblond
  • [PATCH 1/7] Update TODO., Eric Leblond
  • [PATCH 2/7] Suppress dead FIXME., Eric Leblond
  • [PATCH 3/7] Use access to ensure readability of config gile, Eric Leblond
  • [PATCH 5/7] Add handling of too long arguments., Eric Leblond
    • Re: [PATCH 5/7] Add handling of too long arguments., Mr Dash Four
      • Re: [PATCH 5/7] Add handling of too long arguments., Eric Leblond
  • [PATCH 4/7] Fix typo in comments., Eric Leblond
  • [PATCH 7/7] conf: error handling for too long line, Eric Leblond
    • Re: [PATCH 7/7] conf: error handling for too long line, Mr Dash Four
  • [PATCH 6/7] logemu: return error if configuration is invalid., Eric Leblond
  • Re: [ulogd patch] small code cleaning, Eric Leblond
• [RFC]: extend iptables' AUDIT target functionality, Mr Dash Four
• [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., YOSHIFUJI Hideaki
  • Re: [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., Erik Hugne
  • Re: [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., Hannes Frederic Sowa
    • Re: [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., YOSHIFUJI Hideaki
• [libnftables PATCH] change XML output format to element better than attributes, Arturo Borrero
  • Re: [libnftables PATCH] change XML output format to element better than attributes, Pablo Neira Ayuso
• tcp_use_frto crashes on empty tcp_write_queue, Zoltan Kiss
  • Re: tcp_use_frto crashes on empty tcp_write_queue, Zoltan Kiss
• [PATCH 0/3] netfilter fixes for 3.7-rc8, pablo
  • [PATCH 1/3] netfilter: ctnetlink: don't permit ct creation with random tuple, pablo
  • [PATCH 3/3] netfilter: nf_ct_reasm: fix per-netns sysctl initialization, pablo
  • [PATCH 2/3] netfilter: nf_ct_helper: don't discard helper if it is actually the same, pablo
  • Re: [PATCH 0/3] netfilter fixes for 3.7-rc8, David Miller
• [PATCH nf-next] netfilter: nf_ct_reasm: fix per-netns sysctl initialization, Michal Kubecek
  • Re: [PATCH nf-next] netfilter: nf_ct_reasm: fix per-netns sysctl initialization, Pablo Neira Ayuso
• [libnftables PATCH] Delete unused includes., Arturo Borrero
  • Re: [libnftables PATCH] Delete unused includes., Pablo Neira Ayuso
• limit the number of source ips connected?, Jose Luis Godoy
  • Re: limit the number of source ips connected?, Arturo Borrero Gonzalez
• [PATCH 1/1] netfilter: nf_ct_helper: don't discard helper if it is actually the same, Florian Westphal
  • Re: [PATCH 1/1] netfilter: nf_ct_helper: don't discard helper if it is actually the same, Pablo Neira Ayuso
• team driver MAC NAT, Jiri Pirko
  • Re: team driver MAC NAT, Jamal Hadi Salim
• [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Florian Westphal
  • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
    • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Florian Westphal
      • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
  • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
• [libnftables] Examples of XML output, Arturo Borrero
  • [libnftables PATCH] Added examples of functionality to print XML output of nftables rule/chain/table, Arturo Borrero
    • Re: [libnftables PATCH] Added examples of functionality to print XML output of nftables rule/chain/table, Pablo Neira Ayuso
• [PATCH] netfilter: nf_ct_helper: better logging for dropped packets, pablo
• [PATCH 0/5] Netfilter/IPVS fixes for 3.8-rc7, pablo
  • [PATCH 1/5] ipvs: freeing uninitialized pointer on error, pablo
  • [PATCH 2/5] ipvs: sctp: fix checksumming on snat and dnat handlers, pablo
  • [PATCH 3/5] netfilter: ip6t_NPT: Fix adjustment calculation, pablo
  • [PATCH 4/5] netfilter: ip6t_NPT: Fix prefix mangling, pablo
  • [PATCH 5/5] netfilter: ip6t_NPT: Ensure to check lower part of prefixes are zero, pablo
  • Re: [PATCH 0/5] Netfilter/IPVS fixes for 3.8-rc7, David Miller
• [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Gao feng
  • [PATCH 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Gao feng
  • [PATCH 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Gao feng
  • [PATCH 07/10] netfilter: nfnetlink_log: add net namespace support for nfnetlink_log, Gao feng
  • [PATCH 08/10] netfilter: nf_log: enable nflog in un-init net namespace, Gao feng
  • [PATCH 09/10] netfilter: nfnetlink_queue: add net namespace support for nfnetlink_queue, Gao feng
  • [PATCH 10/10] netfilter: remove useless variable proc_net_netfilter, Gao feng
  • [PATCH 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Gao feng
    • Re: [PATCH 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Gao feng
  • [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Gao feng
    • Re: [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Pablo Neira Ayuso
    • Re: [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Arnaldo Carvalho de Melo
      • Re: [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Gao feng
  • [PATCH 05/10] netfilter: ebt_ulog: add net namesapce support for ebt_ulog, Gao feng
  • Re: [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Pablo Neira Ayuso
    • Re: [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Gao feng
      • Re: [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Pablo Neira Ayuso
• [GIT PULL nf] IPVS fixes #2, Simon Horman
  • [PATCH] ipvs: sctp: fix checksumming on snat and dnat handlers, Simon Horman
    • RE: [PATCH] ipvs: sctp: fix checksumming on snat and dnat handlers, David Laight
      • Re: [PATCH] ipvs: sctp: fix checksumming on snat and dnat handlers, Daniel Borkmann
  • Re: [GIT PULL nf] IPVS fixes #2, Pablo Neira Ayuso
    • Re: [GIT PULL nf] IPVS fixes #2, Pablo Neira Ayuso
      • Re: [GIT PULL nf] IPVS fixes #2, Daniel Borkmann
• Assorted fixes v3, Jan Engelhardt
  • [PATCH 4/4] iptables: fall back to using save function when print is not defined, Jan Engelhardt
  • [PATCH 3/4] extensions: eui64: set userspacesize=0, Jan Engelhardt
  • [PATCH 1/4] build: bump SONAME for libxtables, Jan Engelhardt
  • [PATCH 2/4] libxtables: centralize checking for a .save function, Jan Engelhardt
  • Re: Assorted fixes v3, Pablo Neira Ayuso
    • Re: Assorted fixes v3, Jan Engelhardt
• [PATCH net] ipvs: sctp: fix checksumming on snat and dnat handlers, Daniel Borkmann
  • Re: [PATCH net] ipvs: sctp: fix checksumming on snat and dnat handlers, Julian Anastasov
• [PATCH] ulog: add protection when remove ipt_ULOG, Gao feng
  • [PATCH 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Gao feng
    • Re: [PATCH 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Pablo Neira Ayuso
      • Re: [PATCH 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Gao feng
  • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Pablo Neira Ayuso
    • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Gao feng
      • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Pablo Neira Ayuso
        • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Gao feng
  • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Pablo Neira Ayuso
• [PATCH net] ipvs: sctp: fix checksumming by adding hardware offload support, Daniel Borkmann
  • Re: [PATCH net] ipvs: sctp: fix checksumming by adding hardware offload support, Julian Anastasov
    • Re: [PATCH net] ipvs: sctp: fix checksumming by adding hardware offload support, Daniel Borkmann
• Re: linux-next: Tree for Feb 2 (netfilter), Randy Dunlap
  • [PATCH] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, Florian Westphal
    • Re: [PATCH] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, Randy Dunlap
      • Re: [PATCH] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, Pablo Neira Ayuso
• Re: [ 82/89] netfilter: xt_hashlimit: fix race that results in duplicated entries, Pablo Neira Ayuso
• [stable-3.7] netfilter: xt_CT: fix unset return value if conntrack zone are disabled, pablo
• New target to manage L2 QoS (802.1p) in a no VLAN (i.e home user) environment, Pedro Garcia
  • Re: New target to manage L2 QoS (802.1p) in a no VLAN (i.e home user) environment, Maciej Żenczykowski
• [v2] netfilter: nfnetlink: add mutex per subsystem, pablo
• [v2-nftables 1/2] netfilter: nf_tables: add packet and byte counters per chain, pablo
  • [v2-nftables 2/2] netfilter: nf_tables: add trace support, pablo
• [PATCH] netfilter: nfnetlink: add mutex per subsystem, pablo
• [nftables 1/9] netfilter: nf_tables: fix compilation if CONFIG_COMPAT is disabled, pablo
  • [nftables 2/9] netfilter: nf_tables: fix chain after rule deletion, pablo
  • [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, pablo
    • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Tomasz Bursztyka
      • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Pablo Neira Ayuso
        • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Tomasz Bursztyka
          • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Pablo Neira Ayuso
    • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Patrick McHardy
      • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Pablo Neira Ayuso
      • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Tomasz Bursztyka
  • [nftables 4/9] netfilter: nf_tables: fix error path in newchain, pablo
  • [nftables 5/9] netfilter: nf_tables: add packet and byte counters per chain, pablo
  • [nftables 6/9] netfilter: nf_tables: add protocol and flags for xtables over nf_tables, pablo
  • [nftables 7/9] netfilter: nf_tables: add trace support, pablo
  • [nftables 8/9] netfilter: nf_tables: add missing code in route chain type, pablo
  • [nftables 9/9] netfilter: nf_tables: statify chain definition to fix sparse warning, pablo
• [nftables 01/10] netfilter: nf_tables: fix alias for xtables over nftables module, pablo
• [PATCH 1/2] netfilter: xt_CT: merge common code of revision 0 and 1, pablo
  • [PATCH 2/2] netfilter: xt_CT: add alias flag, pablo
    • Re: [PATCH 2/2] netfilter: xt_CT: add alias flag, Jozsef Kadlecsik
• [iptables-nftables PATCH v2] nft: Split nft core to become family independant, Tomasz Bursztyka
  • Re: [iptables-nftables PATCH v2] nft: Split nft core to become family independant, Pablo Neira Ayuso
• [iptables-nftables RFC PATCH] nft: Split nft core to become family independant, Tomasz Bursztyka
• [PATCH 0/1] netfilter: iptables alias support, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: Add flags and compatibility revision in order to support aliases., Jozsef Kadlecsik
• [PATCH 0/3] Introduce aliases for matches and targets, Jozsef Kadlecsik
  • [PATCH 3/3] Add the "NOTRACK" alias to the "CT" target, Jozsef Kadlecsik
  • [PATCH 1/3] Introduce match/target aliases, Jozsef Kadlecsik
  • [PATCH 2/3] Add the "state" alias to the "conntrack" match, Jozsef Kadlecsik
  • Re: [PATCH 0/3] Introduce aliases for matches and targets, Jozsef Kadlecsik
    • Re: [PATCH 0/3] Introduce aliases for matches and targets, Pablo Neira Ayuso
      • Re: [PATCH 0/3] Introduce aliases for matches and targets, Jozsef Kadlecsik
  • Re: [PATCH 0/3] Introduce aliases for matches and targets, Pablo Neira Ayuso
• [stable-3.7 00/14] netfilter stable fixes for 3.7, pablo
  • [stable-3.7 01/14] netfilter: ip[6]t_REJECT: fix wrong transport header pointer in TCP reset, pablo
  • [stable-3.7 02/14] netfilter: nf_ct_reasm: fix conntrack reassembly expire code, pablo
  • [stable-3.7 03/14] netfilter: nfnetlink_log: fix mac address for 6in4 tunnels, pablo
  • [stable-3.7 07/14] netfilter: xt_recent: fix namespace destroy path, pablo
  • [stable-3.7 05/14] netfilter: xt_CT: recover NOTRACK target support, pablo
  • [stable-3.7 06/14] netfilter: fix missing dependencies for the NOTRACK target, pablo
  • [stable-3.7 10/14] netfilter: xt_hashlimit: fix race that results in duplicated entries, pablo
  • [stable-3.7 09/14] netfilter: xt_hashlimit: fix namespace destroy path, pablo
  • [stable-3.7 12/14] netfilter: nf_conntrack: fix BUG_ON while removing nf_conntrack with netns, pablo
  • [stable-3.7 08/14] netfilter: xt_recent: avoid high order page allocations, pablo
  • [stable-3.7 14/14] netfilter: ctnetlink: fix leak in error path of ctnetlink_create_expect, pablo
  • [stable-3.7 13/14] netfilter: x_tables: print correct hook names for ARP, pablo
  • [stable-3.7 11/14] netfilter: xt_CT: fix unset return value if conntrack zone are disabled, pablo
  • [stable-3.7 04/14] netfilter: nfnetlink_log: fix possible compilation issue due to missing include, pablo
  • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, David Miller
  • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, Greg KH
    • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, Pablo Neira Ayuso
      • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, Greg KH
• Accumulated fixes v2, Jan Engelhardt
  • [PATCH 2/6] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 4/6] extensions: eui64: set userspacesize=0, Jan Engelhardt
  • [PATCH 1/6] build: also use libtool for install stage, Jan Engelhardt
    • Re: [PATCH 1/6] build: also use libtool for install stage, Pablo Neira Ayuso
      • Re: [PATCH 1/6] build: also use libtool for install stage, Jan Engelhardt
      • Re: [PATCH 1/6] build: also use libtool for install stage, Dmitry V. Levin
        • Re: [PATCH 1/6] build: also use libtool for install stage, Jan Engelhardt
        • Re: [PATCH 1/6] build: also use libtool for install stage, Pablo Neira Ayuso
  • [PATCH 6/6] iptables: reword warning on using an alias, Jan Engelhardt
  • [PATCH 3/6] libxtables: centralize checking for a .save function, Jan Engelhardt
  • [PATCH 5/6] iptables: fall back to using save function when print is not defined, Jan Engelhardt
  • Re: Accumulated fixes v2, Jan Engelhardt
    • Re: Accumulated fixes v2, Pablo Neira Ayuso
• [RFC PATCH 4/4] netfilter: ip6t_NPT: Do not mix two prefixes., YOSHIFUJI Hideaki
  • Re: [RFC PATCH 4/4] netfilter: ip6t_NPT: Do not mix two prefixes., Pablo Neira Ayuso
• [RFC PATCH 3/4] netfilter ip6t_NPT: Ensure to check lower part of prefixes are zero., YOSHIFUJI Hideaki
  • Re: [RFC PATCH 3/4] netfilter ip6t_NPT: Ensure to check lower part of prefixes are zero., Pablo Neira Ayuso
• [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., YOSHIFUJI Hideaki
  • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Ulrich Weber
    • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Pablo Neira Ayuso
      • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Ulrich Weber
        • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Jean-Michel DILLY
        • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Jean-Michel DILLY
  • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Pablo Neira Ayuso
• [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., YOSHIFUJI Hideaki
  • <Possible follow-ups>
  • [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., YOSHIFUJI Hideaki
    • Re: [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., Pablo Neira Ayuso
    • Re: [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., Pablo Neira Ayuso
• [iptables PATCH] configure: display summary at end of configure, Eric Leblond
  • Re: [iptables PATCH] configure: display summary at end of configure, Jan Engelhardt
    • [iptables PATCH v2] configure: display summary at end of configure, Eric Leblond
  • Re: [iptables PATCH] configure: display summary at end of configure, Mr Dash Four
  • Re: [iptables PATCH] configure: display summary at end of configure, Pablo Neira Ayuso
• [patch] ipvs: freeing uninitialized pointer on error, Dan Carpenter
  • Re: [patch] ipvs: freeing uninitialized pointer on error, Julian Anastasov
• [PATCH 00/21] netfilter updates for net-next, pablo
  • [PATCH 03/21] netfilter: ctnetlink: deliver labels to userspace, pablo
  • [PATCH 04/21] netfilter: ctnetlink: allow userspace to modify labels, pablo
  • [PATCH 02/21] netfilter: add connlabel conntrack extension, pablo
  • [PATCH 01/21] netfilter: nf_ct_sip: support Cisco 7941/7945 IP phones, pablo
  • [PATCH 05/21] netfilter: nf_ct_snmp: add include file, pablo
  • [PATCH 14/21] netfilter: nf_ct_ecache: move initialization out of pernet_operations, pablo
  • [PATCH 15/21] netfilter: nf_ct_timeout: move initialization out of pernet_operations, pablo
  • [PATCH 21/21] netfilter: nf_conntrack: fix compilation if sysctl are disabled, pablo
  • [PATCH 20/21] netfilter: nf_conntrack: refactor l4proto support for netns, pablo
  • [PATCH 13/21] netfilter: nf_ct_tstamp: move initialization out of pernet_operations, pablo
  • [PATCH 16/21] netfilter: nf_ct_helper: move initialization out of pernet_operations, pablo
  • [PATCH 19/21] netfilter: nf_conntrack: refactor l3proto support for netns, pablo
  • [PATCH 18/21] netfilter: nf_ct_proto: move initialization out of pernet_operations, pablo
  • [PATCH 17/21] netfilter: nf_ct_labels: move initialization out of pernet_operations, pablo
  • [PATCH 12/21] netfilter: nf_ct_acct: move initialization out of pernet_operations, pablo
  • [PATCH 09/21] netfilter: add missing xt_connlabel.h header in installation, pablo
  • [PATCH 11/21] netfilter: nf_ct_expect: move initialization out of pernet_operations, pablo
  • [PATCH 08/21] netfilter: doc: add nf_conntrack sysctl api documentation, pablo
  • [PATCH 06/21] netfilter: x_tables: add xt_bpf match, pablo
  • [PATCH 07/21] netfilter: add missing xt_bpf.h header in installation, pablo
  • [PATCH 10/21] netfilter: nf_conntrack: move initialization out of pernet operations, pablo
  • Re: [PATCH 00/21] netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: nf_tables: validate len in nft_validate_data_load(), Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: nf_tables: introduce nft_validate_register_load(), Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: nf_tables: kill nft_validate_output_register(), Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: nf_tables: get rid of the expression example code, Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: nf_tables: mark stateful expressions, Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: nf_tables: add helper functions for expression handling, Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: nft_dynset: dynamic stateful expression instantiation, Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: nf_tables: prepare for expressions associated to set elements, Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: nf_tables: add flag to indicate set contains expressions, Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: nf_tables: variable sized set element keys / data, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: nf_tables: add register parsing/dumping helpers, Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: nf_tables: support variable sized data in nft_data_init(), Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: nf_tables: switch registers to 32 bit addressing, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: nf_tables: convert expressions to u32 register pointers, Pablo Neira Ayuso
    • [PATCH 15/21] uapi: ebtables: don't include linux/if.h, Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: nf_tables: use struct nft_verdict within struct nft_data, Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: nf_tables: convert sets to u32 data pointers, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: nf_tables: rename nft_validate_data_load(), Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: nf_tables: kill nft_data_cmp(), Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: nft_lookup: use nft_validate_register_store() to validate types, Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: nf_tables: get rid of NFT_REG_VERDICT usage, Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: ipset: Properly calculate extensions offsets and total length, Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: ipset: Improve preprocessor macros checks, Pablo Neira Ayuso
    • [PATCH 15/21] netfilter: ipset: Use better include files in xt_set.c, Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: ipset: Fix hashing for ipv6 sets, Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: bridge: neigh_head and physoutdev can't be used at same time, Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: bridge: free nf_bridge info on xmit, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: ipset: Give a better name to a macro in ip_set_core.c, Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: Use correct return for seq_show functions, Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: xt_MARK: Add ARP support, Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: x_tables: add context to know if extension runs from nft_compat, Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: ipset: deinline ip_set_put_extensions(), Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: ipset: Fix ext_*() macros, Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: ipset: Return bool values instead of int, Pablo Neira Ayuso
      • Re: [PATCH 10/21] netfilter: ipset: Return bool values instead of int, Joe Perches
        • Re: [PATCH 10/21] netfilter: ipset: Return bool values instead of int, Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: ipset: Preprocessor directices cleanup, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: ipset: Check for comment netlink attribute length, Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: ipset: Use HOST_MASK literal to represent host address CIDR len, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: ipset: Check IPSET_ATTR_PORT only once, Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: ipset: Return ipset error instead of bool, Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: ipset: No need to make nomatch bitfield, Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: ipset: make ip_set_get_ip*_port to use skb_network_offset, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: ipset: Fix sparse warning, Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: nf_tables: pass netns to set->ops->remove(), Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: nft_exthdr: add TCP option matching, Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: nfnetlink: allow to check for generation ID, Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: nf_tables: honor NFT_SET_OBJECT in set backend selection, Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: nf_ct_sip: Use mod_timer_pending(), Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: nf_tables: add check_genid to the nfnetlink subsystem, Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: nf_ct_expect: nf_ct_expect_insert() returns void, Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: update MAINTAINERS, Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: nf_tables: add NFTA_RULE_ID attribute, Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: nfnetlink: add nfnetlink_rcv_skb_batch(), Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: nf_tables: rename struct nft_set_estimate class field, Pablo Neira Ayuso
    • [PATCH 15/21] netfilter: nfnetlink: get rid of u_intX_t types, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: nft_ct: add zone id set support, Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: nft_ct: prepare for key-dependent error unwind, Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: nf_tables: add space notation to sets, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: nf_tables: add bitmap set type, Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: nft_ct: add zone id get support, Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: nf_tables: add flush field to struct nft_set_iter, Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: nf_tables: rename deactivate_one() to flush(), Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: nf_tables: use struct nft_set_iter in set element flush, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: nft_exthdr: Add support for existence check, Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: nf_tables: handle meta/lookup with direct call, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: nf_osf: add nf_osf_find(), Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: nf_tables: flow event notifier must use transaction mutex, Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: nf_tables: remove unused variable, Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: cttimeout: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT, Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: nft_tproxy: Add missing config check, Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: bridge: Expose nf_tables bridge hook priorities through uapi, Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: nf_tables: match on tunnel metadata, Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: nf_tables: simplify NLM_F_CREATE handling, Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: kconfig: remove ct zone/label dependencies, Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: conntrack: avoid use-after free on rmmod, Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: nft_tunnel: fix sparse errors, Pablo Neira Ayuso
    • [PATCH 15/21] netfilter: nf_tables: add tunnel support, Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: nf_tables: Add native tproxy support, Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: nf_osf: move nf_osf_fingers to non-uapi header file, Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: nfnetlink_osf: rename nf_osf header file to nfnetlink_osf, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: use kvmalloc_array to allocate memory for hashtable, Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: nf_tables: implement Passive OS fingerprint module in nft_osf, Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c, Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: use PTR_ERR_OR_ZERO(), Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
  • [PATCH 00/21] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/21] netfilter: nft_bitwise: correct uapi header comment., Pablo Neira Ayuso
    • [PATCH 03/21] netfilter: flowtable: restrict flow dissector match on meta ingress device, Pablo Neira Ayuso
    • [PATCH 02/21] netfilter: flowtable: fetch stats only if flow is still alive, Pablo Neira Ayuso
    • [PATCH 06/21] netfilter: flowtable: use atomic bitwise operations for flow flags, Pablo Neira Ayuso
    • [PATCH 15/21] netfilter: bitwise: add NFTA_BITWISE_OP netlink attribute., Pablo Neira Ayuso
    • [PATCH 20/21] netfilter: bitwise: add NFTA_BITWISE_DATA attribute., Pablo Neira Ayuso
    • [PATCH 21/21] netfilter: bitwise: add support for shifts., Pablo Neira Ayuso
    • [PATCH 17/21] netfilter: bitwise: add helper for evaluating boolean operations., Pablo Neira Ayuso
    • [PATCH 19/21] netfilter: bitwise: only offload boolean operations., Pablo Neira Ayuso
    • [PATCH 18/21] netfilter: bitwise: add helper for dumping boolean operations., Pablo Neira Ayuso
    • [PATCH 16/21] netfilter: bitwise: add helper for initializing boolean operations., Pablo Neira Ayuso
    • [PATCH 10/21] netfilter: flowtable: add nf_flow_offload_tuple() helper, Pablo Neira Ayuso
    • [PATCH 11/21] netfilter: flowtable: add nf_flow_table_offload_cmd(), Pablo Neira Ayuso
    • [PATCH 14/21] netfilter: bitwise: replace gotos with returns., Pablo Neira Ayuso
    • [PATCH 13/21] netfilter: bitwise: remove NULL comparisons from attribute checks., Pablo Neira Ayuso
    • [PATCH 09/21] netfilter: hashlimit: do not use indirect calls during gc, Pablo Neira Ayuso
    • [PATCH 08/21] netfilter: flowtable: refresh flow if hardware offload fails, Pablo Neira Ayuso
    • [PATCH 12/21] netfilter: nf_tables: white-space fixes., Pablo Neira Ayuso
    • [PATCH 04/21] netfilter: flowtable: add nf_flow_offload_work_alloc(), Pablo Neira Ayuso
    • [PATCH 07/21] netfilter: flowtable: add nf_flowtable_hw_offload() helper function, Pablo Neira Ayuso
    • [PATCH 05/21] netfilter: flowtable: remove dying bit, use teardown bit instead, Pablo Neira Ayuso
    • Re: [PATCH 00/21] Netfilter updates for net-next, David Miller
• Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23., Florian Westphal
  • Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23., Jan Engelhardt
    • Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23., Florian Westphal
• Accumulated fixes, Jan Engelhardt
  • [PATCH 1/8] build: also use libtool for install stage, Jan Engelhardt
    • Re: [PATCH 1/8] build: also use libtool for install stage, Pablo Neira Ayuso
      • Re: [PATCH 1/8] build: also use libtool for install stage, Jan Engelhardt
  • [PATCH 2/8] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 5/8] extensions: S/DNPT: add missing save function, Jan Engelhardt
    • Re: [PATCH 5/8] extensions: S/DNPT: add missing save function, Pablo Neira Ayuso
  • [PATCH 6/8] iptables: fall back to using save function when print is not defined, Jan Engelhardt
    • Re: [PATCH 6/8] iptables: fall back to using save function when print is not defined, Pablo Neira Ayuso
  • [PATCH 7/8] iptables: reword warning on using an alias, Jan Engelhardt
  • [PATCH 3/8] libxtables: centralize checking for a .save function, Jan Engelhardt
    • Re: [PATCH 3/8] libxtables: centralize checking for a .save function, Pablo Neira Ayuso
      • Re: [PATCH 3/8] libxtables: centralize checking for a .save function, Jan Engelhardt
  • [PATCH 8/8] build: fix libiptc build failure on old linux-glibc-devel headers, Jan Engelhardt
    • Re: [PATCH 8/8] build: fix libiptc build failure on old linux-glibc-devel headers, Pablo Neira Ayuso
  • [PATCH 4/8] extensions: eui64: set userspacesize=0, Jan Engelhardt
• [PATCH 0/4] libnetfilter_conntrack: connlabel support, Florian Westphal
  • [PATCH 1/4] api: add nfct_bitmask object, Florian Westphal
  • [PATCH 2/4] api: add connlabel api and attribute, Florian Westphal
    • Re: api: add connlabel api and attribute, Florian Westphal
      • Re: api: add connlabel api and attribute, Pablo Neira Ayuso
        • Re: api: add connlabel api and attribute, Florian Westphal
  • [PATCH 3/4] examples: add connlabel dump/set/clear demo programs, Florian Westphal
  • [PATCH 4/4] api: add CTA_LABEL_MASK attribute handling, Florian Westphal
• Add packet statistics to ipset?, Jonathan
  • Re: Add packet statistics to ipset?, Jozsef Kadlecsik
• [nf-next:master 10/20] net/netfilter/nf_conntrack_standalone.c:566:2: error: 'nf_ct_netfilter_header' undeclared, kbuild test robot
  • Re: [nf-next:master 10/20] net/netfilter/nf_conntrack_standalone.c:566:2: error: 'nf_ct_netfilter_header' undeclared, Pablo Neira Ayuso
    • Re: [nf-next:master 10/20] net/netfilter/nf_conntrack_standalone.c:566:2: error: 'nf_ct_netfilter_header' undeclared, Gao feng
• [PATCH nf-next 01/11] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • [PATCH nf-next 02/11] netfilter: expect: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 02/11] netfilter: expect: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 04/11] netfilter: tstamp: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 04/11] netfilter: tstamp: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 06/11] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 06/11] netfilter: timeout: move initial codes out of pernet_operations, Pablo Neira Ayuso
      • Re: [PATCH nf-next 06/11] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
  • [PATCH nf-next 09/11] netfilter: proto: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 09/11] netfilter: proto: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 05/11] netfilter: ecache: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 05/11] netfilter: ecache: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 11/11] netfilter: l4proto: refactor l4proto support for netns, Gao feng
    • Re: [PATCH nf-next 11/11] netfilter: l4proto: refactor l4proto support for netns, Pablo Neira Ayuso
  • [PATCH nf-next 07/11] netfilter: helper: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 07/11] netfilter: helper: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 08/11] netfilter: labels: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 08/11] netfilter: labels: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 10/11] netfilter: l3proto: refactor l3proto support for netns, Gao feng
    • Re: [PATCH nf-next 10/11] netfilter: l3proto: refactor l3proto support for netns, Pablo Neira Ayuso
  • [PATCH nf-next 03/11] netfilter: acct: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 03/11] netfilter: acct: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • Re: [PATCH nf-next 01/11] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
• [ulogd patch 0/4] minor code cleaning, Eric Leblond
  • [PATCH 1/4] Get rid of SVN tag in comment., Eric Leblond
  • [PATCH 2/4] Fix warning on format, Eric Leblond
  • [PATCH 4/4] graphite: fix warning about gnu extension usage, Eric Leblond
  • [PATCH 3/4] base: fix warning on pointer handling, Eric Leblond
  • Re: [ulogd patch 0/4] minor code cleaning, Eric Leblond
• [ulogd patch 0/3] improve ulogd command line, Eric Leblond
  • [PATCH 3/3] Add -l option to set log level from command line, Eric Leblond
  • [PATCH 2/3] conf: add flag to allow option setup tuning, Eric Leblond
  • [PATCH 1/3] ulogd: add -v option to display message on stderr., Eric Leblond
  • Re: [ulogd patch 0/3] improve ulogd command line, Eric Leblond
• [PATCH RESEND 01/10] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • [PATCH RESEND 02/10] netfilter: expect: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 04/10] netfilter: tstamp: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 07/10] netfilter: helper: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 10/10] netfilter: l4proto: refactor l4proto support for netns, Gao feng
  • [PATCH RESEND 08/10] netfilter: proto: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 09/10] netfilter: l3proto: refactor l3proto support for netns, Gao feng
  • [PATCH RESEND 06/10] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 05/10] netfilter: ecache: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 03/10] netfilter: acct: move initial codes out of pernet_operations, Gao feng
  • Re: [PATCH RESEND 01/10] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
    • Re: [PATCH RESEND 01/10] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
• [patch v3] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
  • Re: [patch v3] doc: add nf_conntrack sysctl api documentation, Pablo Neira Ayuso
    • Re: [patch v3] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
• [PATCH] iptables: extensions: fix iptables extensions build error in cross-compilation environments, Cristian Iorga
  • Re: [PATCH] iptables: extensions: fix iptables extensions build error in cross-compilation environments, Pablo Neira Ayuso
• [patch net-next v2] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
  • Re: [patch net-next v2] doc: add nf_conntrack sysctl api documentation, Simon Horman
  • Re: [patch net-next v2] doc: add nf_conntrack sysctl api documentation, Pablo Neira Ayuso
• [patch net-next] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
  • Re: [patch net-next] doc: add nf_conntrack sysctl api documentation, Florian Westphal
    • Re: [patch net-next] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
• [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Cong Ding
  • Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Waskiewicz Jr, Peter P
    • Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Cong Ding
  • Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Pablo Neira Ayuso
• Build fixes for old Linuxes, Jan Engelhardt
  • [PATCH 1/2] build: fix libiptc build failure on old linux-glibc-devel headers, Jan Engelhardt
  • [PATCH 2/2] parser: workaround glibc-2.3.2 bug 358, Jan Engelhardt
  • Re: Build fixes for old Linuxes, Pablo Neira Ayuso
    • Re: Build fixes for old Linuxes, Jan Engelhardt
      • Re: Build fixes for old Linuxes, Pablo Neira Ayuso
        • Re: Build fixes for old Linuxes, Jan Engelhardt
• Re: state match is obsolete 1.4.17, Jozsef Kadlecsik
  • Re: state match is obsolete 1.4.17, Born Without
  • Re: state match is obsolete 1.4.17, Jan Engelhardt
    • Re: state match is obsolete 1.4.17, Jozsef Kadlecsik
      • Re: state match is obsolete 1.4.17, Jan Engelhardt
        • Re: state match is obsolete 1.4.17, Jozsef Kadlecsik
          • [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
            • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Pablo Neira Ayuso
              • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
                • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jan Engelhardt
                  • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
                • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Pablo Neira Ayuso
                  • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
                    • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: state match is obsolete 1.4.17, Jan Engelhardt
• [PATCH 0/3] netfilter fixes for 3.8-rc3, pablo
  • [PATCH 3/3] netfilter: x_tables: print correct hook names for ARP, pablo
  • [PATCH 2/3] netfilter: nf_conntrack: fix BUG_ON while removing nf_conntrack with netns, pablo
  • [PATCH 1/3] netfilter: xt_CT: fix unset return value if conntrack zone are disabled, pablo
  • Re: [PATCH 0/3] netfilter fixes for 3.8-rc3, David Miller
• [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark, Pablo Neira Ayuso
  • Re: [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark, Jan Engelhardt
    • Re: [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark, Jesper Dangaard Brouer
• [libnetfilter_queue PATCH 1/2] doxygen: improve fail-open documentation., Eric Leblond
  • [libnetfilter_queue PATCH 2/2] doxygen: improve documentation, Eric Leblond
• warning: (BRIDGE_NF_EBTABLES) selects NETFILTER_XTABLES which has unmet direct dependencies (NET && INET && NETFILTER), Fengguang Wu
• [PATCH next] extensions: add connlabel match, Florian Westphal
• [PATCH next V2] netfilter connlabel extension, Florian Westphal
  • [PATCH 1/3] netfilter: add connlabel conntrack extension, Florian Westphal
    • Re: [PATCH 1/3] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: ctnetlink: deliver labels to userspace, Florian Westphal
    • Re: [PATCH 2/3] netfilter: ctnetlink: deliver labels to userspace, Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: ctnetlink: allow userspace to modify labels, Florian Westphal
    • Re: [PATCH 3/3] netfilter: ctnetlink: allow userspace to modify labels, Pablo Neira Ayuso
• [PATCH] netfilter: x_tables: print correct hook names for ARP, Jan Engelhardt
  • Re: [PATCH] netfilter: x_tables: print correct hook names for ARP, Pablo Neira Ayuso
• [RELEASE] arptables v0.0.4, Bart De Schuymer
• xtadm 1.5.0 released, Jan Engelhardt
• [PATCH 1/7] netfilter: nf_tables: nft_compat: release cached matches/targets, pablo
  • [PATCH 2/7] netfilter: nf_tables: move filter chain definition to layer 3 modules, pablo
    • Re: [PATCH 2/7] netfilter: nf_tables: move filter chain definition to layer 3 modules, Patrick McHardy
  • [PATCH 5/7] netfilter: nf_tables: x_tables support as a compile time option, pablo
  • [PATCH 4/7] netfilter: nf_tables: move specific layer 3 compat code to nf_tables_ipv[4|6], pablo
    • Re: [PATCH 4/7] netfilter: nf_tables: move specific layer 3 compat code to nf_tables_ipv[4|6], Patrick McHardy
      • Re: [PATCH 4/7] netfilter: nf_tables: move specific layer 3 compat code to nf_tables_ipv[4|6], Pablo Neira Ayuso
  • [PATCH 3/7] netfilter: nf_tables: remove hook definitions from struct nft_af_info, pablo
    • Re: [PATCH 3/7] netfilter: nf_tables: remove hook definitions from struct nft_af_info, Patrick McHardy
      • Re: [PATCH 3/7] netfilter: nf_tables: remove hook definitions from struct nft_af_info, Pablo Neira Ayuso
  • [PATCH 7/7] netfilter: nf_tables: fix alias for xtables over nftables module, pablo
  • [PATCH 6/7] netfilter: nf_tables: support 32bits-64bits x_tables compat, pablo
    • Re: [PATCH 6/7] netfilter: nf_tables: support 32bits-64bits x_tables compat, Patrick McHardy
• iptables: build fixes, Jan Engelhardt
  • [PATCH 2/2] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 1/2] build: also use libtool for install stage, Jan Engelhardt
  • Re: iptables: build fixes, Dmitry V. Levin
    • Re: iptables: build fixes, Dmitry V. Levin
      • Re: iptables: build fixes, Jan Engelhardt