Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH 3/5] netfilter: nfnetlink_acct: return -EINVAL if object name is empty, (continued)
  • [PATCH 3/5] netfilter: nfnetlink_acct: return -EINVAL if object name is empty, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: reset nf_trace in nf_reset, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init(), Pablo Neira Ayuso
  • Re: [PATCH 0/5] netfilter updates for net, David Miller
• [PATCH RFC 0/2] icmpv6: match any ICMPv6 error/informational type, holger
  • [PATCH RFC 1/2] icmp6: match on errors and informational types, holger
  • [PATCH RFC 2/2] icmp6: match on errors and informational messages, holger
  • Re: [PATCH RFC 0/2] icmpv6: match any ICMPv6 error/informational type, Pablo Neira Ayuso
    • Re: [PATCH RFC 0/2] icmpv6: match any ICMPv6 error/informational type, Holger Eitzenberger
• How to modify conntrack accounting?, Ed W
  • Re: How to modify conntrack accounting?, Eric Leblond
    • Re: How to modify conntrack accounting?, Ed W
      • Re: How to modify conntrack accounting?, Eric Leblond
        • Re: How to modify conntrack accounting?, Ed W
• [libnftables] git repository, Arturo Borrero Gonzalez
  • Re: [libnftables] git repository, Pablo Neira Ayuso
• [nf-next] netfilter: fix struct ip6t_frag field description, Michal Kubecek
  • Re: [nf-next] netfilter: fix struct ip6t_frag field description, Pablo Neira Ayuso
• [libnftables PATCH] src: get and set NFT_*_ATTR_FAMILY, Arturo Borrero
  • Re: [libnftables PATCH] src: get and set NFT_*_ATTR_FAMILY, Pablo Neira Ayuso
• [PATCH] netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths, Matthias Schiffer
  • [PATCHv2] netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths, Matthias Schiffer
    • Re: [PATCHv2] netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths, Matthias Schiffer
    • Re: [PATCHv2] netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths, Pablo Neira Ayuso
• [libnftables PATCH 0/2], Arturo Borrero
  • [libnftables PATCH 1/2] Fix a typo in src/expr/match, Arturo Borrero
  • [libnftables PATCH 2/2] Basic support for printing nft_data_reg in XML format., Arturo Borrero
    • Re: [libnftables PATCH 2/2] Basic support for printing nft_data_reg in XML format., Pablo Neira Ayuso
      • Re: [libnftables PATCH 2/2] Basic support for printing nft_data_reg in XML format., Arturo Borrero Gonzalez
        • Re: [libnftables PATCH 2/2] Basic support for printing nft_data_reg in XML format., Pablo Neira Ayuso
          • Re: [libnftables PATCH 2/2] Basic support for printing nft_data_reg in XML format., Arturo Borrero Gonzalez
            • Re: [libnftables PATCH 2/2] Basic support for printing nft_data_reg in XML format., Pablo Neira Ayuso
• [PATCH iptables] nfnl_osf: use the right nfnetlink lib, Nicolas Dichtel
  • Re: [PATCH iptables] nfnl_osf: use the right nfnetlink lib, Jan Engelhardt
    • Re: [PATCH iptables] nfnl_osf: use the right nfnetlink lib, Nicolas Dichtel
      • Re: [PATCH iptables] nfnl_osf: use the right nfnetlink lib, Jan Engelhardt
        • [PATCH iptables v2] nfnl_osf: use the right nfnetlink lib, Nicolas Dichtel
• [GIT PULL nf-next] IPVS optimisations for v3.10, Simon Horman
  • [PATCH 03/34] ipvs: prefer NETDEV_DOWN event to free cached dsts, Simon Horman
  • [PATCH 31/34] ipvs: convert sched_lock to spin lock, Simon Horman
  • [PATCH 32/34] ipvs: convert dests to rcu, Simon Horman
  • [PATCH 29/34] ipvs: reorganize dest trash, Simon Horman
  • [PATCH 30/34] ipvs: do not expect result from done_service, Simon Horman
  • [PATCH 33/34] ipvs: convert services to rcu, Simon Horman
  • [PATCH 34/34] ipvs: do not disable bh for long time, Simon Horman
  • [PATCH 26/34] ipvs: convert sh scheduler to rcu, Simon Horman
  • [PATCH 28/34] ipvs: convert wrr scheduler to rcu, Simon Horman
  • [PATCH 21/34] ipvs: convert lblcr scheduler to rcu, Simon Horman
  • [PATCH 04/34] ipvs: convert the IP_VS_XMIT macros to functions, Simon Horman
  • [PATCH 19/34] ipvs: convert dh scheduler to rcu, Simon Horman
  • [PATCH 20/34] ipvs: convert lblc scheduler to rcu, Simon Horman
  • [PATCH 17/34] ipvs: preparations for using rcu in schedulers, Simon Horman
  • [PATCH 25/34] ipvs: convert sed scheduler to rcu, Simon Horman
  • [PATCH 27/34] ipvs: convert wlc scheduler to rcu, Simon Horman
  • [PATCH 24/34] ipvs: convert rr scheduler to rcu, Simon Horman
  • [PATCH 16/34] ipvs: change ip_vs_sched_lock to mutex, Simon Horman
  • [PATCH 18/34] ipvs: add ip_vs_dest_hold and ip_vs_dest_put, Simon Horman
  • [PATCH 23/34] ipvs: convert nq scheduler to rcu, Simon Horman
  • [PATCH 02/34] ipvs: avoid routing by TOS for real server, Simon Horman
  • [PATCH 14/34] ipvs: reorder keys in connection structure, Simon Horman
  • [PATCH 08/34] ipvs: consolidate all dst checks on transmit in one place, Simon Horman
  • [PATCH 13/34] ipvs: convert connection locking, Simon Horman
  • [PATCH 22/34] ipvs: convert lc scheduler to rcu, Simon Horman
  • [PATCH 15/34] ipvs: avoid kmem_cache_zalloc in ip_vs_conn_new, Simon Horman
  • [PATCH 01/34] net: add skb_dst_set_noref_force, Simon Horman
    • Re: [PATCH 01/34] net: add skb_dst_set_noref_force, Pablo Neira Ayuso
      • Re: [PATCH 01/34] net: add skb_dst_set_noref_force, David Miller
        • Re: [PATCH 01/34] net: add skb_dst_set_noref_force, Pablo Neira Ayuso
          • Re: [PATCH 01/34] net: add skb_dst_set_noref_force, Simon Horman
  • [PATCH 10/34] ipvs: convert app locks, Simon Horman
  • [PATCH 09/34] ipvs: optimize dst usage for real server, Simon Horman
  • [PATCH 12/34] ipvs: convert locks used in persistence engines, Simon Horman
  • [PATCH 11/34] ipvs: remove rs_lock by using RCU, Simon Horman
  • [PATCH 07/34] ipvs: do not use skb_share_check, Simon Horman
  • [PATCH 06/34] ipvs: no need to reroute anymore on DNAT over loopback, Simon Horman
    • Re: [PATCH 06/34] ipvs: no need to reroute anymore on DNAT over loopback, Sergei Shtylyov
      • Re: [PATCH 06/34] ipvs: no need to reroute anymore on DNAT over loopback, Julian Anastasov
  • [PATCH 05/34] ipvs: rename functions related to dst_cache reset, Simon Horman
  • Re: [GIT PULL nf-next] IPVS optimisations for v3.10, Pablo Neira Ayuso
• [PATCH 0/2] nf_tables: atomic transactional updates (v2), pablo
  • [PATCH 1/2] netfilter: nf_tables: rework atomic transaction updates, pablo
    • Re: [PATCH 1/2] netfilter: nf_tables: rework atomic transaction updates, Tomasz Bursztyka
  • [PATCH 2/2] netfilter: nf_tables: set NLM_F_DUMP_INTR if dump is invalid, pablo
• [PATCH 00/15 v3] IPVS optimizations (repost), Simon Horman
  • [PATCH 03/15] ipvs: prefer NETDEV_DOWN event to free cached dsts, Simon Horman
  • [PATCH 14/15] ipvs: reorder keys in connection structure, Simon Horman
  • [PATCH 13/15] ipvs: convert connection locking, Simon Horman
  • [PATCH 12/15] ipvs: convert locks used in persistence engines, Simon Horman
  • [PATCH 11/15] ipvs: remove rs_lock by using RCU, Simon Horman
  • [PATCH 15/15] ipvs: avoid kmem_cache_zalloc in ip_vs_conn_new, Simon Horman
  • [PATCH 10/15] ipvs: convert app locks, Simon Horman
  • [PATCH 07/15] ipvs: do not use skb_share_check, Simon Horman
  • [PATCH 08/15] ipvs: consolidate all dst checks on transmit in one place, Simon Horman
  • [PATCH 09/15] ipvs: optimize dst usage for real server, Simon Horman
  • [PATCH 01/15] net: add skb_dst_set_noref_force, Simon Horman
  • [PATCH 05/15] ipvs: rename functions related to dst_cache reset, Simon Horman
  • [PATCH 06/15] ipvs: no need to reroute anymore on DNAT over loopback, Simon Horman
  • [PATCH 04/15] ipvs: convert the IP_VS_XMIT macros to functions, Simon Horman
  • [PATCH 02/15] ipvs: avoid routing by TOS for real server, Simon Horman
  • Re: [PATCH 00/15 v3] IPVS optimizations (repost), Simon Horman
• [PATCH v2] net: add ETH_P_802_3_MIN, Simon Horman
  • Re: [PATCH v2] net: add ETH_P_802_3_MIN, David Miller
    • Re: [PATCH v2] net: add ETH_P_802_3_MIN, Simon Horman
• [PATCH -next] netfilter: nf_conntrack_standalone: fix error return code, Wei Yongjun
  • Re: [PATCH -next] netfilter: nf_conntrack_standalone: fix error return code, Pablo Neira Ayuso
• Question about xt_ipp2p module, Dmitry Korzhevin
• [PATCH] libmnl: Add filtering support to library as a convienience, Neil Horman
  • Re: [PATCH] libmnl: Add filtering support to library as a convienience, Pablo Neira Ayuso
    • Re: [PATCH] libmnl: Add filtering support to library as a convienience, Florian Weimer
      • Re: [PATCH] libmnl: Add filtering support to library as a convienience, Pablo Neira Ayuso
    • Re: [PATCH] libmnl: Add filtering support to library as a convienience, Neil Horman
• Android netfilter patches (xt_IDLETIMER) [3/3], dmitry pervushin
  • Re: Android netfilter patches (xt_IDLETIMER) [3/3], Pablo Neira Ayuso
• Android netfilter patches (xt_IDLETIMER) [2/3], dmitry pervushin
  • Re: Android netfilter patches (xt_IDLETIMER) [2/3], Pablo Neira Ayuso
• Android netfilter patches (xt_IDLETIMER) [1/3], dmitry pervushin
  • Re: Android netfilter patches (xt_IDLETIMER) [1/3], Pablo Neira Ayuso
• Android netfilter patches (xt_IDLETIMER) [0/3], dmitry pervushin
• [PATCH 00/12] Netfilter updates for net-next, pablo
  • [PATCH 01/12] netfilter: ip6t_NPT: Use csum_partial(), pablo
  • [PATCH 02/12] ipv4: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, pablo
  • [PATCH 03/12] bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, pablo
  • [PATCH 04/12] netfilter: nf_ct_ipv6: use ipv6_iface_scope_id in conntrack to return scope id, pablo
  • [PATCH 08/12] ipvs: fix some sparse warnings, pablo
  • [PATCH 07/12] ipvs: fix hashing in ip_vs_svc_hashkey, pablo
  • [PATCH 09/12] netfilter: ctnetlink: allow to dump expectation per master conntrack, pablo
  • [PATCH 10/12] netfilter: nfnetlink_queue: zero copy support, pablo
  • [PATCH 12/12] netfilter: nf_conntrack: speed up module removal path if netns in use, pablo
  • [PATCH 11/12] netfilter: nf_conntrack: add include to fix sparse warning, pablo
  • [PATCH 05/12] netfilter: ebt_ulog: remove unnecessary spin lock protection, pablo
  • [PATCH 06/12] netfilter: nfnetlink_queue: use xor hash function to distribute instances, pablo
  • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 00/12] netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: check return code from nla_parse_tested, Pablo Neira Ayuso
    • [PATCH 05/12] ipvs: sloppy TCP and SCTP, Pablo Neira Ayuso
    • [PATCH 10/12] kernel: remove unnecessary head file, Pablo Neira Ayuso
    • [PATCH 11/12] netns: exclude ipvs from struct net when IPVS disabled, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: nf_queue: add NFQA_SKB_CSUM_NOTVERIFIED info flag, Pablo Neira Ayuso
    • [PATCH 09/12] ipvs: add sync_persist_mode flag, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag, Pablo Neira Ayuso
    • [PATCH 06/12] ipvs: replace the SCTP state machine, Pablo Neira Ayuso
    • [PATCH 08/12] ipvs: SH fallback and L4 hashing, Pablo Neira Ayuso
    • [PATCH 07/12] ipvs: drop SCTP connections depending on state, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: nf_conntrack: avoid large timeout for mid-stream pickup, Pablo Neira Ayuso
    • [PATCH 04/12] ipvs: provide iph to schedulers, Pablo Neira Ayuso
    • Re: [PATCH 00/12] netfilter updates for net-next, David Miller
  • [PATCH 00/12] netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: ctnetlink: honor CTA_MARK_MASK when setting ctmark, Pablo Neira Ayuso
    • [PATCH 05/12] ipvs: Remove unused variable ret from sync_thread_master(), Pablo Neira Ayuso
    • [PATCH 10/12] net: net_cls: move cgroupfs classid handling into core, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: x_tables: lightweight process control group matching, Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: xt_CT: fix error value in xt_ct_tg_check(), Pablo Neira Ayuso
    • [PATCH 11/12] net: netprio: rename config to be more consistent with cgroup configs, Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: ipset: remove unused code, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: nf_nat: add full port randomization support, Pablo Neira Ayuso
    • [PATCH 08/12] netfilter: nf_conntrack: remove dead code, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: nfnetlink_queue: enable UID/GID socket info retrieval, Pablo Neira Ayuso
      • Re: [PATCH 03/12] netfilter: nfnetlink_queue: enable UID/GID socket info retrieval, Eric Dumazet
        • Re: [PATCH 03/12] netfilter: nfnetlink_queue: enable UID/GID socket info retrieval, Pablo Neira Ayuso
        • Re: [PATCH 03/12] netfilter: nfnetlink_queue: enable UID/GID socket info retrieval, David Miller
    • [PATCH 04/12] netfilter: add IPv4/6 IPComp extension match support, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: avoid get_random_bytes calls, Pablo Neira Ayuso
      • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Hannes Frederic Sowa
        • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Florian Westphal
          • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Hannes Frederic Sowa
            • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Pablo Neira Ayuso
            • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Florian Westphal
              • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Pablo Neira Ayuso
                • Re: [PATCH 01/12] netfilter: avoid get_random_bytes calls, Florian Westphal
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 08/12] netfilter: ipset: Alignment problem between 64bit kernel 32bit userspace, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: ipset: Simplify cidr handling for hash:*net* types, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: ipset: Explicitly add padding elements to hash:net, net and hash:net, port, net, Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: ipset: Support updating extensions when the set is full, Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: ipset: Indicate when /0 networks are supported, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: nf_log_ipv6: correct typo in module description, Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: ipset: Allocate the proper size of memory when /0 networks are supported, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: xt_recent: relax ip_pkt_list_tot restrictions, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: nf_tables_bridge: set the pktinfo for IPv4/IPv6 traffic, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: conntrack: avoid zeroing timer, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: nf_tables_bridge: export nft_reject_ip*hdr_validate functions, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: nf_tables: consolidate Kconfig options, Pablo Neira Ayuso
    • [PATCH 09/12] bridge: move mac header copying into br_netfilter, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: bridge: move nf_bridge_update_protocol to where its used, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: bridge: move DNAT helper to br_netfilter, Pablo Neira Ayuso
      • Re: [PATCH 12/12] netfilter: bridge: move DNAT helper to br_netfilter, Simon Horman
        • Re: [PATCH 12/12] netfilter: bridge: move DNAT helper to br_netfilter, Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: bridge: refactor conditional in br_nf_dev_queue_xmit, Pablo Neira Ayuso
    • [PATCH 08/12] netfilter: nf_tables: limit maximum table name length to 32 bytes, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: nf_tables: consolidate tracing invocations, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: nf_tables: cleanup nf_tables.h, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: bridge: rework reject handling, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: nf_tables: minor tracing cleanups, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: ipt_CLUSTERIP: deprecate it in favour of xt_cluster, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: reject: don't send icmp error if csum is invalid, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: nfnetlink_queue: add security context information, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: don't pull include/linux/netfilter.h from netns headers, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: xtables: fix warnings on 32bit platforms, Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: Remove spurios included of netfilter.h, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: x_tables: align per cpu xt_counter, Pablo Neira Ayuso
      • RE: [PATCH 03/12] netfilter: x_tables: align per cpu xt_counter, David Laight
        • Re: [PATCH 03/12] netfilter: x_tables: align per cpu xt_counter, Eric Dumazet
    • [PATCH 07/12] net: sched: Simplify em_ipset_match, Pablo Neira Ayuso
    • [PATCH 08/12] net: include missing headers in net/net_namespace.h, Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: use forward declaration instead of including linux/proc_fs.h, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flag, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: bridge: split ipv6 code into separated file, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: Kill unused copies of RCV_SKB_FAIL, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: bridge: rename br_netfilter.c to br_netfilter_hooks.c, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: xt_multiport: Use switch case instead of multiple condition checks, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: nfnetlink_log: Use GFP_NOWARN for skb allocation, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: nf_tables: allow expressions to return STOLEN, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: nft_numgen: start round robin from zero, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: nft_meta: permit pkttype mangling in ip/ip6 prerouting, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: nft_ct: add notrack support, Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: nf_tables: remove useless U8_MAX validation, Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: nf_queue: place volatile data in own cacheline, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: nf_tables: introduce routing expression, Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: nf_tables: add fib expression, Pablo Neira Ayuso
    • [PATCH 08/12] netfilter: nf_log: add packet logging for netdev family, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
  • [PATCH 00/12] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 02/12] netfilter: nf_tables: fix implicit include of module.h, Pablo Neira Ayuso
    • [PATCH 03/12] netfilter: nf_tables: drop include of module.h from nf_tables.h, Pablo Neira Ayuso
    • [PATCH 05/12] netfilter: use macros to create module aliases., Pablo Neira Ayuso
    • [PATCH 09/12] netfilter: nft_ct: Add ct id support, Pablo Neira Ayuso
    • [PATCH 12/12] netfilter: slightly optimize nf_inet_addr_mask, Pablo Neira Ayuso
    • [PATCH 06/12] netfilter: add API to manage NAT helpers., Pablo Neira Ayuso
    • [PATCH 07/12] netfilter: nf_nat: register NAT helpers., Pablo Neira Ayuso
    • [PATCH 11/12] netfilter: xt_hashlimit: use struct_size() helper, Pablo Neira Ayuso
    • [PATCH 10/12] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking", Pablo Neira Ayuso
    • [PATCH 08/12] openvswitch: load and reference the NAT helper., Pablo Neira Ayuso
    • [PATCH 01/12] netfilter: nf_tables: relocate header content to consumer, Pablo Neira Ayuso
    • [PATCH 04/12] netfilter: conntrack: limit sysctl setting for boolean options, Pablo Neira Ayuso
    • Re: [PATCH 00/12] Netfilter updates for net-next, David Miller
• [PATCH nf-next v2 01/10] netfilter: make /proc/net/netfilter pernet, Gao feng
  • [PATCH nf-next v2 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Gao feng
    • Re: [PATCH nf-next v2 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Gao feng
  • [PATCH nf-next v2 05/10] netfilter: ebt_ulog: add net namesapce support for ebt_ulog, Gao feng
    • Re: [PATCH nf-next v2 05/10] netfilter: ebt_ulog: add net namesapce support for ebt_ulog, Pablo Neira Ayuso
  • [PATCH nf-next v2 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Gao feng
    • Re: [PATCH nf-next v2 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Gao feng
  • [PATCH nf-next v2 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Gao feng
    • Re: [PATCH nf-next v2 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Gao feng
  • [PATCH nf-next v2 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Gao feng
    • Re: [PATCH nf-next v2 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Pablo Neira Ayuso
  • [PATCH nf-next v2 07/10] netfilter: nfnetlink_log: add net namespace support for nfnetlink_log, Gao feng
    • Re: [PATCH nf-next v2 07/10] netfilter: nfnetlink_log: add net namespace support for nfnetlink_log, Pablo Neira Ayuso
  • [PATCH nf-next v2 08/10] netfilter: nf_log: enable nflog in un-init net namespace, Gao feng
    • Re: [PATCH nf-next v2 08/10] netfilter: nf_log: enable nflog in un-init net namespace, Pablo Neira Ayuso
  • [PATCH nf-next v2 10/10] netfilter: remove useless variable proc_net_netfilter, Gao feng
    • Re: [PATCH nf-next v2 10/10] netfilter: remove useless variable proc_net_netfilter, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 10/10] netfilter: remove useless variable proc_net_netfilter, Gao feng
  • [PATCH nf-next v2 09/10] netfilter: nfnetlink_queue: add net namespace support for nfnetlink_queue, Gao feng
    • Re: [PATCH nf-next v2 09/10] netfilter: nfnetlink_queue: add net namespace support for nfnetlink_queue, Pablo Neira Ayuso
  • Re: [PATCH nf-next v2 01/10] netfilter: make /proc/net/netfilter pernet, Pablo Neira Ayuso
• [PATCH net-next] netfilter: implement RFC3168 5.3 (ecn protection) for ipv6 fragmentation handling, Hannes Frederic Sowa
• ethernet filtering, Stephen Clark
• [PATCH] netfilter: xt_osf: fix inversion, pablo
• [PATCH 1/2] libxt_osf: fix missing --ttl and --log in save output, pablo
  • [PATCH 2/2] libxt_osf: fix bad location for location in --genre, pablo
• [PATCH v2 0/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
  • [PATCH v2 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
    • Re: [PATCH v2 1/3] NFQUEUE: introduce CPU fanout, Pablo Neira Ayuso
  • [PATCH v2 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Holger Eitzenberger
    • Re: [PATCH v2 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Pablo Neira Ayuso
      • Re: [PATCH v2 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Holger Eitzenberger
        • Re: [PATCH v2 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Pablo Neira Ayuso
  • [PATCH v2 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, Holger Eitzenberger
    • Re: [PATCH v2 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, Pablo Neira Ayuso
• [PATCH] netfilter: nfnetlink_acct: return -EINVAL if object name is empty, pablo
• [PATCH 3/3 nfacct] user space executable changes and additions, Michael Zintakis
  • Re: [PATCH 3/3 nfacct] user space executable changes and additions, Pablo Neira Ayuso
    • Re: [PATCH 3/3 nfacct] user space executable changes and additions, Bourne Without
      • osf bug report [was Re: [PATCH 3/3 nfacct] user space executable changes and additions], Pablo Neira Ayuso
        • Re: osf bug report [was Re: [PATCH 3/3 nfacct] user space executable changes and additions], Bourne Without
    • Re: [PATCH 3/3 nfacct] user space executable changes and additions, Michael Zintakis
• [PATCH 2/3 libnetfilter_acct] numerous changes and improvements in the user space library, Michael Zintakis
• [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
  • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Pablo Neira Ayuso
    • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
      • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Pablo Neira Ayuso
        • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
          • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Pablo Neira Ayuso
            • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
              • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Pablo Neira Ayuso
                • Re: [PATCH 1/3 nfnetlink_acct] numerous changes and improvements to the kernel code, Michael Zintakis
• [nftables] Git location for User space utilities, Vidya Chowdary
  • Re: [nftables] Git location for User space utilities, Tomasz Bursztyka
    • Re: [nftables] Git location for User space utilities, Pablo Neira Ayuso
• [PATCH -next] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init(), Wei Yongjun
  • Re: [PATCH -next] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init(), Pablo Neira Ayuso
• [PATCH 1/2] netfilter: reset nf_trace in nf_reset, Gao feng
  • [PATCH 2/2] netfilter: TRACE: use IS_ENABLE to replace if defined, Gao feng
    • Re: [PATCH 2/2] netfilter: TRACE: use IS_ENABLE to replace if defined, Pablo Neira Ayuso
  • Re: [PATCH 1/2] netfilter: reset nf_trace in nf_reset, Pablo Neira Ayuso
• [PATCH] expr: match: fix typo in function name, Arturo Borrero
  • Re: [PATCH] expr: match: fix typo in function name, Pablo Neira Ayuso
• [BUG NFQUEUE] NFQUEUE readers get -PERM from sys_sendto() if !root, Holger Eitzenberger
  • Re: [BUG NFQUEUE] NFQUEUE readers get -PERM from sys_sendto() if !root, Holger Eitzenberger
• [PATCH 1/2] libip6t_SNPT: add manpage, pablo
  • [PATCH 2/2] libip6t_DNPT: add manpage, pablo
• [announce] - Bash programmable completion for ip[6]tables, Bourne Without
• Drop a packet while keeping the conntrack alive, Nicolas Maître
  • Re: Drop a packet while keeping the conntrack alive, Pablo Neira Ayuso
    • Re: Drop a packet while keeping the conntrack alive, Nicolas Maître
      • Re: Drop a packet while keeping the conntrack alive, Pablo Neira Ayuso
        • Re: Drop a packet while keeping the conntrack alive, Nicolas Maître
  • Re: Drop a packet while keeping the conntrack alive, Jorge Dávila
• Re: conntrackd: fix IPv6 address pattern, Pablo Neira Ayuso
• [PATCH] ip[6]tables: show --protocol instead of --proto in usage, Mart Frauenlob
  • Re: [PATCH] ip[6]tables: show --protocol instead of --proto in usage, Mart Frauenlob
  • Re: [PATCH] ip[6]tables: show --protocol instead of --proto in usage, Pablo Neira Ayuso
• [PATCH 0/7] netfilter fixes for 3.9-rc, pablo
  • [PATCH 1/7] netfilter: nf_conntrack: register pernet subsystem before register L4 proto, pablo
  • [PATCH 3/7] netfilter: ip6t_NPT: restrict to mangle table, pablo
  • [PATCH 6/7] ipvs: remove extra rcu lock, pablo
  • [PATCH 5/7] ipvs: add backup_only flag to avoid loops, pablo
  • [PATCH 7/7] netfilter: remove unused "config IP_NF_QUEUE", pablo
  • [PATCH 4/7] ipvs: fix sctp chunk length order, pablo
  • [PATCH 2/7] netfilter: nfnetlink_queue: fix incorrect initialization of copy range field, pablo
    • Re: [PATCH 2/7] netfilter: nfnetlink_queue: fix incorrect initialization of copy range field, Sergei Shtylyov
  • Re: [PATCH 0/7] netfilter fixes for 3.9-rc, David Miller
• [PATCH 1/2] libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency, pablo
  • [PATCH 2/2] Revert "build: resolve link failure for ip6t_NETMAP", pablo
• [PATCH] netfilter: remove unused "config IP_NF_QUEUE", Paul Bolle
  • Re: [PATCH] netfilter: remove unused "config IP_NF_QUEUE", Pablo Neira Ayuso
• [PATCH] net: Add socket() system call self test., David Miller
  • Re: [PATCH] net: Add socket() system call self test., Julian Calaby
    • Re: [PATCH] net: Add socket() system call self test., David Miller
      • Re: [PATCH] net: Add socket() system call self test., Julian Calaby
  • Re: [PATCH] net: Add socket() system call self test., Daniel Baluta
    • Re: [PATCH] net: Add socket() system call self test., David Miller
      • Re: [PATCH] net: Add socket() system call self test., Daniel Baluta
• Can we rely on ethernet header padding?, Michal Kubecek
  • Re: Can we rely on ethernet header padding?, Eric Dumazet
    • Re: Can we rely on ethernet header padding?, Michal Kubecek
      • Re: Can we rely on ethernet header padding?, Stephen Hemminger
        • Re: Can we rely on ethernet header padding?, Michal Kubecek
• [PATCH RFC 0/3] NFQUEUE: introduce CPU fanout, holger
  • [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, holger
    • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, David Miller
      • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Jan Engelhardt
        • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, David Miller
          • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
        • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
          • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Jan Engelhardt
            • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
    • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Florian Westphal
      • Re: [PATCH RFC 1/3] NFQUEUE: introduce CPU fanout, Holger Eitzenberger
  • [PATCH RFC 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, holger
    • Re: [PATCH RFC 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, David Miller
      • Re: [PATCH RFC 2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing, Holger Eitzenberger
  • [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, holger
    • Re: [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Eric Leblond
      • Re: [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Holger Eitzenberger
      • Re: [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Holger Eitzenberger
        • Re: [PATCH RFC 3/3] NFQUEUE: add --queue-cpu-fanout parameter, Eric Leblond
• [GIT PULL nf-next] IPVS changes for v3.10, Simon Horman
  • [PATCH 2/2] ipvs: fix some sparse warnings, Simon Horman
  • [PATCH 1/2] ipvs: fix hashing in ip_vs_svc_hashkey, Simon Horman
  • Re: [GIT PULL nf-next] IPVS changes for v3.10, Pablo Neira Ayuso
• [GIT PULL nf v2] IPVS fixes for v3.9, Simon Horman
  • [PATCH 3/3] ipvs: remove extra rcu lock, Simon Horman
  • [PATCH 1/3] ipvs: fix sctp chunk length order, Simon Horman
  • [PATCH 2/3] ipvs: add backup_only flag to avoid loops, Simon Horman
  • Re: [GIT PULL nf v2] IPVS fixes for v3.9, Pablo Neira Ayuso
• [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vázquez Cao
  • [PATCH 2/2] man/send(2): document a long standing bug that can cause spurious EPERM errors, Fernando Luis Vázquez Cao
    • Re: [PATCH 2/2] man/send(2): document a long standing bug that can cause spurious EPERM errors, Pablo Neira Ayuso
      • Re: [PATCH 2/2] man/send(2): document a long standing bug that can cause spurious EPERM errors, Fernando Luis Vazquez Cao
  • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vazquez Cao
    • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Pablo Neira Ayuso
      • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vazquez Cao
        • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Pablo Neira Ayuso
          • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vazquez Cao
  • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Pablo Neira Ayuso
    • Re: [PATCH 1/2] man/send(2): add EPERM to the list of possible errors, Fernando Luis Vazquez Cao
• [GIT PULL nf-next] IPVS enhancements for v3.10, Simon Horman
  • [PATCH 2/2] ipvs: remove extra rcu lock, Simon Horman
  • [PATCH 1/2] ipvs: add backup_only flag to avoid loops, Simon Horman
• [GIT PULL nf] IPVS fixes for v3.9, Simon Horman
  • [PATCH 3/3] ipvs: fix some sparse warnings, Simon Horman
  • [PATCH 1/3] ipvs: fix sctp chunk length order, Simon Horman
  • [PATCH 2/3] ipvs: fix hashing in ip_vs_svc_hashkey, Simon Horman
  • Re: [GIT PULL nf] IPVS fixes for v3.9, Pablo Neira Ayuso
    • Re: [GIT PULL nf] IPVS fixes for v3.9, Simon Horman
• [PATCH] netfilter: ctnetlink: allow to dump expectation per master conntrack, pablo
• [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Eric Dumazet
  • Re: [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Eric Dumazet
      • Re: [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nfnetlink_queue: zero copy support, Pablo Neira Ayuso
• [Ulogd PATCH 0/4] Implement event loss prevention for db output, Eric Leblond
  • [Ulogd PATCH 2/4] mysql: add sanity checking, Eric Leblond
  • [Ulogd PATCH 1/4] postgresql: add sanity checking, Eric Leblond
  • [Ulogd PATCH 3/4] sqlite3: add sanity checking, Eric Leblond
  • [Ulogd PATCH 4/4] db: store data in memory during database downtime, Eric Leblond
• [PATCH] nf_conntrack: add include to fix sparse warning, Stephen Hemminger
  • Re: [PATCH] nf_conntrack: add include to fix sparse warning, Pablo Neira Ayuso
• strange result of iptables command under race condition, d tbsky
• [PATCH 1/2] netfilter: nfnetlink_queue: use xor hash function to distribute instances, pablo
  • [PATCH 2/2] netfilter: nfnetlink_queue: fix incorrect initialization of copy range field, pablo
• [libmnl PATCH] doxygen: fix a variable name., Eric Leblond
• [PATCH] netfilter: nf_conntrack: Batch cleanup, Vladimir Davydov
  • Re: [PATCH] netfilter: nf_conntrack: Batch cleanup, Gao feng
  • Re: [PATCH] netfilter: nf_conntrack: Batch cleanup, Pablo Neira Ayuso
• Re:a bpf compilation tool for xt_bpf, Roman Timofeev
  • Re: a bpf compilation tool for xt_bpf, Willem de Bruijn
• Need a way to match vlan / pcp fields in 802.1q header - from netfilter list, ggeorgiev
• [PATCH net-next] ipv6: use ipv6_iface_scope_id in conntrack to return scope id, Hannes Frederic Sowa
  • Re: [PATCH net-next] ipv6: use ipv6_iface_scope_id in conntrack to return scope id, Pablo Neira Ayuso
• [PATCH] bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, Silviu-Mihai Popescu
  • Re: [PATCH] bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, Pablo Neira Ayuso
• [PATCH] ipv4: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, Silviu-Mihai Popescu
  • Re: [PATCH] ipv4: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR, Pablo Neira Ayuso
• [PATCH] xtables-addons: build against 3.8.y, Holger Eitzenberger
  • Re: [PATCH] xtables-addons: build against 3.8.y, Jan Engelhardt
• Unable to get NPTv6 to work with kernel 3.8.2, Matthias Schiffer
  • Re: Unable to get NPTv6 to work with kernel 3.8.2, Florian Westphal
    • Re: Unable to get NPTv6 to work with kernel 3.8.2, Matthias Schiffer
    • Re: Unable to get NPTv6 to work with kernel 3.8.2, Pablo Neira Ayuso
• conntrack-tools: dying and unconfirmed list not accessible, Jan Engelhardt
  • Re: conntrack-tools: dying and unconfirmed list not accessible, Pablo Neira Ayuso
• NAT64 - Netfilter module, Miguel Alejandro González
• [PATCH] netfilter: register pernet subsystem before register L4 proto, Gao feng
  • Re: [PATCH] netfilter: register pernet subsystem before register L4 proto, Pablo Neira Ayuso
• re L4 conntracking netns conversion, Alexey Dobriyan
  • Re: re L4 conntracking netns conversion, Gao feng
    • Re: re L4 conntracking netns conversion, Eric W. Biederman
      • Re: re L4 conntracking netns conversion, Gao feng
• [PATCH 0/3] netfilter fixes for your net tree, pablo
  • [PATCH 1/3] netfilter: nf_ct_helper: Fix logging for dropped packets, pablo
  • [PATCH 3/3] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set, pablo
  • [PATCH 2/3] netfilter: xt_AUDIT: only generate audit log when audit enabled, pablo
  • Re: [PATCH 0/3] netfilter fixes for your net tree, David Miller
• [PATCH iptables-nftables] iptables: fix compil when lib[mnl|nftables] are not in standard path, Nicolas Dichtel
  • Re: [PATCH iptables-nftables] iptables: fix compil when lib[mnl|nftables] are not in standard path, Pablo Neira Ayuso
• [PATCH nftables] nftables: fix compilation when nf-netlink is a module, Nicolas Dichtel
  • Re: [PATCH nftables] nftables: fix compilation when nf-netlink is a module, Nicolas Dichtel
    • [PATCH nftables v2] nftables: fix compilation when nf-netlink is a module, Nicolas Dichtel
      • Re: [PATCH nftables v2] nftables: fix compilation when nf-netlink is a module, Pablo Neira Ayuso
• [PATCH 2/2] iptables (kernel): add secmark match, Mr Dash Four
• [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
  • Re: [PATCH 1/2] iptables (userspace): add secmark match, Pablo Neira Ayuso
    • Re: [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
      • Re: [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
        • Re: [PATCH 1/2] iptables (userspace): add secmark match, Mr Dash Four
• [PATCH 0/2] iptables: add secmark match, Mr Dash Four
• [PATCH] ulogd2: raw2packet_BASE changes, Mr Dash Four
  • Re: [PATCH] ulogd2: raw2packet_BASE changes, Eric Leblond
    • Re: [PATCH] ulogd2: raw2packet_BASE changes, Mr Dash Four
      • Re: [PATCH] ulogd2: raw2packet_BASE changes, Eric Leblond
        • Re: [PATCH] ulogd2: raw2packet_BASE changes, Mr Dash Four
• [PATCH] nfacct: correct regressions in v1.0.1, Mr Dash Four
  • Re: [PATCH] nfacct: correct regressions in v1.0.1, Pablo Neira Ayuso
    • Re: [PATCH] nfacct: correct regressions in v1.0.1, Mr Dash Four
    • [PATCH] libnetfilter_acct: use PRIu64 and remove unnecessary cast, Mr Dash Four
      • Re: [PATCH] libnetfilter_acct: use PRIu64 and remove unnecessary cast, Pablo Neira Ayuso
        • Re: [PATCH] libnetfilter_acct: use PRIu64 and remove unnecessary cast, Mr Dash Four
• Save funcs, installation, const, Jan Engelhardt
  • [PATCH 2/5] extensions: eui64: set userspacesize=0, Jan Engelhardt
  • [PATCH 1/5] libxtables: centralize checking for a .save function, Jan Engelhardt
  • [PATCH 3/5] iptables: fall back to using save function when print is not defined, Jan Engelhardt
  • [PATCH 4/5] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 5/5] libxtables: constify xtables_option_[mt]fcall argument, Jan Engelhardt
• [ANNOUNCE] libnetfilter_conntrack 1.0.3 release, Pablo Neira Ayuso
• [PATCH -v3 19/23] net/netfilter: rename random32() to prandom_u32(), Akinobu Mita
• [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set, Paul Bolle
  • Re: [PATCH] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set, Pablo Neira Ayuso
• [PATCH] netfilter: xt_AUDIT: only generate audit log when audit enabled, Gao feng
  • Re: [PATCH] netfilter: xt_AUDIT: only generate audit log when audit enabled, Thomas Graf
  • Re: [PATCH] netfilter: xt_AUDIT: only generate audit log when audit enabled, Pablo Neira Ayuso
• [ANNOUNCE] ulogd 2.0.2 release, Eric Leblond
• [ANNOUNCE] iptables 1.4.18 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] iptables 1.4.18 release, Jan Engelhardt
• [ulogd patch 0/1] use conntrack based timestamp, Eric Leblond
  • [PATCH] nfct: use timestamp of conntrack object., Eric Leblond
    • Re: [PATCH] nfct: use timestamp of conntrack object., Eric Leblond
• [ANNOUNCE] conntrack-tools 1.4.1 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] conntrack-tools 1.4.1 release, Gustavo Zacarias
    • Re: [ANNOUNCE] conntrack-tools 1.4.1 release, Pablo Neira Ayuso
• [ANNOUNCE] nfacct 1.0.1 release, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_acct 1.0.2 release, Pablo Neira Ayuso
• [PATCH 1/2] netfilter: nf_tables: partially rework commit and abort operation, pablo
  • [PATCH 2/2] netfilter: nf_tables: don't skip inactive rules and dump generation mask, pablo
  • Re: [PATCH 1/2] netfilter: nf_tables: partially rework commit and abort operation, Tomasz Bursztyka
  • [RFC] Atomic rule manipulation part of transactions, Tomasz Bursztyka
    • [PATCH] nf_tables: Transaction API proposal, Tomasz Bursztyka
      • Re: [PATCH] nf_tables: Transaction API proposal, Pablo Neira Ayuso
        • Re: [PATCH] nf_tables: Transaction API proposal, Pablo Neira Ayuso
        • Re: [PATCH] nf_tables: Transaction API proposal, Tomasz Bursztyka
          • Re: [PATCH] nf_tables: Transaction API proposal, Pablo Neira Ayuso
            • [RFC v2] nf_tables: Transaction API proposal, Tomasz Bursztyka
              • Re: [RFC v2] nf_tables: Transaction API proposal, Pablo Neira Ayuso
                • Re: [RFC v2] nf_tables: Transaction API proposal, Tomasz Bursztyka
• Extending class handle from 16bit to 32bit, Karel Rericha
  • Re: Extending class handle from 16bit to 32bit, Stephen Hemminger
    • Re: Extending class handle from 16bit to 32bit, Karel Rericha
      • Re: Extending class handle from 16bit to 32bit, Stephen Hemminger
• [MAINTENANCE] netfilter.org infrastructure updates, Pablo Neira Ayuso
  • Re: [MAINTENANCE] netfilter.org infrastructure updates, Mr Dash Four
    • Re: [MAINTENANCE] netfilter.org infrastructure updates, Pablo Neira Ayuso
      • Re: [MAINTENANCE] netfilter.org infrastructure updates, Mr Dash Four
• Help on error message, Nicole
  • Re: Help on error message, Jan Engelhardt
    • Re: Help on error message, Nicole
      • Re: Help on error message, Jan Engelhardt
      • Re: Help on error message, Mr Dash Four
        • Re: Help on error message, Amos Jeffries
          • Re: Help on error message, Mr Dash Four
• [PATCH] iptables-save: add --chain argument, limits output to a chain, jonh . wendell
  • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jan Engelhardt
    • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jonh Wendell
    • Message not available
      • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jan Engelhardt
        • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jonh Wendell
          • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jan Engelhardt
            • Re: [PATCH] iptables-save: add --chain argument, limits output to a chain, Jonh Wendell
• [PATCH] conntrackd: cthelper: add DHCPv6 support, pablo
• iptables nfacct match question, Michael Zintakis
  • Re: iptables nfacct match question, Pablo Neira Ayuso
    • Re: iptables nfacct match question, Michael Zintakis
      • Re: iptables nfacct match question, Pablo Neira Ayuso
        • Re: iptables nfacct match question, Michael Zintakis
          • Re: iptables nfacct match question, Pablo Neira Ayuso
            • Re: iptables nfacct match question, Michael Zintakis
              • Re: iptables nfacct match question, Michael Zintakis
              • Re: iptables nfacct match question, Michael Zintakis
                • Re: iptables nfacct match question, Jozsef Kadlecsik
                  • Re: iptables nfacct match question, Michael Zintakis
                    • Re: iptables nfacct match question, Jozsef Kadlecsik
                      • Re: iptables nfacct match question, Michael Zintakis
                        • Re: iptables nfacct match question, Jozsef Kadlecsik
                          • Re: iptables nfacct match question, Michael Zintakis
                    • Re: iptables nfacct match question, Michael Zintakis
• [Ulogd2 PATCH 0/4] preparing 2.0.2 release, Eric Leblond
  • [Ulogd2 PATCH 1/4] Add Changes to extra dist., Eric Leblond
  • [Ulogd2 PATCH 2/4] Update man page., Eric Leblond
  • [Ulogd2 PATCH 3/4] Update README, Eric Leblond
  • [Ulogd2 PATCH 4/4] Prepare release number to 2.0.2, Eric Leblond
  • Re: [Ulogd2 PATCH 0/4] preparing 2.0.2 release, Eric Leblond
• [PATCH] arptables: build an libarptc.a archive, Jonh Wendell
  • Re: [PATCH] arptables: build an libarptc.a archive, Jan Engelhardt
    • Re: [PATCH] arptables: build an libarptc.a archive, Bart De Schuymer
• [ANNOUNCE] ipset 6.17 released, Jozsef Kadlecsik
• [PATCH stable] ipvs: sctp: fix checksumming on snat and dnat handlers, Daniel Borkmann
  • Re: [PATCH stable] ipvs: sctp: fix checksumming on snat and dnat handlers, Neil Horman
    • Re: [PATCH stable] ipvs: sctp: fix checksumming on snat and dnat handlers, Pablo Neira Ayuso
• netfilter: nf_tables: complete net namespace support, Patrick McHardy
  • Re: netfilter: nf_tables: complete net namespace support, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: timeout values corrupted on set resize, Josh Hunt
  • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Josh Hunt
      • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
        • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Josh Hunt
        • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Mr Dash Four
          • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: timeout values corrupted on set resize, Pablo Neira Ayuso
• ipset timeout values corrupt on set resize, Josh Hunt
  • Re: ipset timeout values corrupt on set resize, Josh Hunt
• [PATCH nf-next 1/2] netfilter: ebt_ulog: remove useless spin lock protection, Gao feng
  • [PATCH nf-next 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Gao feng
• [PATCH 0/7] netfilter updates for net-next, pablo
  • [PATCH 2/7] netfilter: xt_conntrack: Add flag to support aliases, pablo
  • [PATCH 4/7] netfilter: xt_CT: add alias flag, pablo
  • [PATCH 6/7] netfilter: nf_ct_pptp: Fix comment referring to incorrect RFC, pablo
  • [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, pablo
    • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Joe Perches
      • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Pablo Neira Ayuso
        • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Joe Perches
          • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Pablo Neira Ayuso
        • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Joe Perches
          • Re: [PATCH 7/7] netfilter: nf_ct_helper: better logging for dropped packets, Pablo Neira Ayuso
            • Re: [PATCH 7/7] netfilter: nf_ct_helper: Fix logging for dropped packets, Joe Perches
              • Re: [PATCH 7/7] netfilter: nf_ct_helper: Fix logging for dropped packets, Pablo Neira Ayuso
  • [PATCH 5/7] netfilter: nfnetlink: add mutex per subsystem, pablo
  • [PATCH 3/7] netfilter: xt_CT: merge common code of revision 0 and 1, pablo
  • [PATCH 1/7] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, pablo
  • Re: [PATCH 0/7] netfilter updates for net-next, David Miller
  • <Possible follow-ups>
  • [PATCH 0/7] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH 1/7] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy(), Pablo Neira Ayuso
    • [PATCH 2/7] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1, Pablo Neira Ayuso
    • [PATCH 4/7] netfilter: Replace HTTP links with HTTPS ones, Pablo Neira Ayuso
    • [PATCH 7/7] netfilter: nf_tables: report EEXIST on overlaps, Pablo Neira Ayuso
    • [PATCH 5/7] netfilter: ip6tables: Remove redundant null checks, Pablo Neira Ayuso
    • [PATCH 6/7] netfilter: nf_tables: extended netlink error reporting for expressions, Pablo Neira Ayuso
    • [PATCH 3/7] netfilter: Use fallthrough pseudo-keyword, Pablo Neira Ayuso
    • Re: [PATCH 0/7] Netfilter updates for net-next, David Miller
• [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
  • Re: [nf-next/nf_tables8] Unable to compile kernel, Pablo Neira Ayuso
    • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
      • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
        • Re: [nf-next/nf_tables8] Unable to compile kernel, Pablo Neira Ayuso
          • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
            • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
              • Re: [nf-next/nf_tables8] Unable to compile kernel, Pablo Neira Ayuso
                • Re: [nf-next/nf_tables8] Unable to compile kernel, Arturo Borrero Gonzalez
• [ulogd patch] small code cleaning, Eric Leblond
  • [PATCH 1/7] Update TODO., Eric Leblond
  • [PATCH 2/7] Suppress dead FIXME., Eric Leblond
  • [PATCH 3/7] Use access to ensure readability of config gile, Eric Leblond
  • [PATCH 5/7] Add handling of too long arguments., Eric Leblond
    • Re: [PATCH 5/7] Add handling of too long arguments., Mr Dash Four
      • Re: [PATCH 5/7] Add handling of too long arguments., Eric Leblond
  • [PATCH 4/7] Fix typo in comments., Eric Leblond
  • [PATCH 7/7] conf: error handling for too long line, Eric Leblond
    • Re: [PATCH 7/7] conf: error handling for too long line, Mr Dash Four
  • [PATCH 6/7] logemu: return error if configuration is invalid., Eric Leblond
  • Re: [ulogd patch] small code cleaning, Eric Leblond
• [RFC]: extend iptables' AUDIT target functionality, Mr Dash Four
• [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., YOSHIFUJI Hideaki
  • Re: [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., Erik Hugne
  • Re: [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., Hannes Frederic Sowa
    • Re: [RFC PATCH net-next (V2, RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses., YOSHIFUJI Hideaki
• [libnftables PATCH] change XML output format to element better than attributes, Arturo Borrero
  • Re: [libnftables PATCH] change XML output format to element better than attributes, Pablo Neira Ayuso
• tcp_use_frto crashes on empty tcp_write_queue, Zoltan Kiss
  • Re: tcp_use_frto crashes on empty tcp_write_queue, Zoltan Kiss
• [PATCH 0/3] netfilter fixes for 3.7-rc8, pablo
  • [PATCH 1/3] netfilter: ctnetlink: don't permit ct creation with random tuple, pablo
  • [PATCH 3/3] netfilter: nf_ct_reasm: fix per-netns sysctl initialization, pablo
  • [PATCH 2/3] netfilter: nf_ct_helper: don't discard helper if it is actually the same, pablo
  • Re: [PATCH 0/3] netfilter fixes for 3.7-rc8, David Miller
• [PATCH nf-next] netfilter: nf_ct_reasm: fix per-netns sysctl initialization, Michal Kubecek
  • Re: [PATCH nf-next] netfilter: nf_ct_reasm: fix per-netns sysctl initialization, Pablo Neira Ayuso
• [libnftables PATCH] Delete unused includes., Arturo Borrero
  • Re: [libnftables PATCH] Delete unused includes., Pablo Neira Ayuso
• limit the number of source ips connected?, Jose Luis Godoy
  • Re: limit the number of source ips connected?, Arturo Borrero Gonzalez
• [PATCH 1/1] netfilter: nf_ct_helper: don't discard helper if it is actually the same, Florian Westphal
  • Re: [PATCH 1/1] netfilter: nf_ct_helper: don't discard helper if it is actually the same, Pablo Neira Ayuso
• team driver MAC NAT, Jiri Pirko
  • Re: team driver MAC NAT, Jamal Hadi Salim
• [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Florian Westphal
  • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
    • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Florian Westphal
      • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
  • Re: [PATCH 1/1] netfilter: ctnetlink: don't permit ct creation with random tuple, Pablo Neira Ayuso
• [libnftables] Examples of XML output, Arturo Borrero
  • [libnftables PATCH] Added examples of functionality to print XML output of nftables rule/chain/table, Arturo Borrero
    • Re: [libnftables PATCH] Added examples of functionality to print XML output of nftables rule/chain/table, Pablo Neira Ayuso
• [PATCH] netfilter: nf_ct_helper: better logging for dropped packets, pablo
• [PATCH 0/5] Netfilter/IPVS fixes for 3.8-rc7, pablo
  • [PATCH 1/5] ipvs: freeing uninitialized pointer on error, pablo
  • [PATCH 2/5] ipvs: sctp: fix checksumming on snat and dnat handlers, pablo
  • [PATCH 3/5] netfilter: ip6t_NPT: Fix adjustment calculation, pablo
  • [PATCH 4/5] netfilter: ip6t_NPT: Fix prefix mangling, pablo
  • [PATCH 5/5] netfilter: ip6t_NPT: Ensure to check lower part of prefixes are zero, pablo
  • Re: [PATCH 0/5] Netfilter/IPVS fixes for 3.8-rc7, David Miller
• [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Gao feng
  • [PATCH 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Gao feng
  • [PATCH 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Gao feng
  • [PATCH 07/10] netfilter: nfnetlink_log: add net namespace support for nfnetlink_log, Gao feng
  • [PATCH 08/10] netfilter: nf_log: enable nflog in un-init net namespace, Gao feng
  • [PATCH 09/10] netfilter: nfnetlink_queue: add net namespace support for nfnetlink_queue, Gao feng