Linux Netfilter / IP Tables Devel

Date Index

[Prev Page][Next Page]

guided option parser, run 7, Jan Engelhardt
- [PATCH 08/11] libipt_SNAT: use guided option parser, Jan Engelhardt
- [PATCH 03/11] libxtables: XTTYPE_ETHERMAC support, Jan Engelhardt
- [PATCH 01/11] libip6t_mh: use guided option parser, Jan Engelhardt
- [PATCH 02/11] libip6t_rt: use guided option parser, Jan Engelhardt
- [PATCH 04/11] libxt_mac: use guided option parser, Jan Engelhardt
- [PATCH 05/11] libipt_CLUSTERIP: use guided option parser, Jan Engelhardt
- [PATCH 07/11] libipt_DNAT: use guided option parser, Jan Engelhardt
  - Re: [PATCH 07/11] libipt_DNAT: use guided option parser, Lutz Jaenicke
    - Re: [PATCH 07/11] libipt_DNAT: use guided option parser, Jan Engelhardt
      - Re: [PATCH 07/11] libipt_DNAT: use guided option parser, Lutz Jaenicke
        
        Re: [PATCH 07/11] libipt_DNAT: use guided option parser, Jan Engelhardt
- [PATCH 09/11] libipt_MASQUERADE: use guided option parser, Jan Engelhardt
- [PATCH 10/11] libipt_REDIRECT: use guided option parser, Jan Engelhardt
- [PATCH 11/11] libipt_SAME: use guided option parser, Jan Engelhardt
- [PATCH 06/11] libxt_iprange: use guided option parser, Jan Engelhardt
- Re: guided option parser, run 7, Patrick McHardy
GIT net-2.6 rolled back 8 commits..., David Miller
- Re: GIT net-2.6 rolled back 8 commits..., Eric Dumazet
  - Re: GIT net-2.6 rolled back 8 commits..., David Miller
    - Re: GIT net-2.6 rolled back 8 commits..., Eric Dumazet
[ANNOUNCE] IPTV-Analyzer project released v0.9.0, Jesper Dangaard Brouer
[PATCH 0/8] netfilter: netfilter fixes for 2.6.39-rc7, pablo
- [PATCH 1/8] netfilter: ctnetlink: fix timestamp support for new conntracks, pablo
- [PATCH 2/8] netfilter: fix ebtables compat support, pablo
  - Re: [PATCH 2/8] netfilter: fix ebtables compat support, Pablo Neira Ayuso
- [PATCH 3/8] netfilter: ebtables: only call xt_compat_add_offset once per rule, pablo
- [PATCH 4/8] IPVS: Change of socket usage to enable name space exit., pablo
- [PATCH 5/8] IPVS: init and cleanup restructuring, pablo
- [PATCH 6/8] netfilter: IPv6: initialize TOS field in REJECT target module, pablo
  - Re: [PATCH 6/8] netfilter: IPv6: initialize TOS field in REJECT target module, Fernando Luis Vázquez Cao
    - Re: [PATCH 6/8] netfilter: IPv6: initialize TOS field in REJECT target module, Pablo Neira Ayuso
      - Re: [PATCH 6/8] netfilter: IPv6: initialize TOS field in REJECT target module, Fernando Luis Vázquez Cao
- [PATCH 7/8] netfilter: IPv6: fix DSCP mangle code, pablo
- [PATCH 8/8] netfilter: revert a2361c8735e07322023aedc36e4938b35af31eb0, pablo
  - Re: [PATCH 8/8] netfilter: revert a2361c8735e07322023aedc36e4938b35af31eb0, Pablo Neira Ayuso
- Re: [PATCH 0/8] netfilter: netfilter fixes for 2.6.39-rc7, David Miller
guided option parser, run 6, Jan Engelhardt
- [PATCH 01/17] libxtables: support for XTTYPE_PLENMASK, Jan Engelhardt
- [PATCH 02/17] libxt_connlimit: use guided option parser, Jan Engelhardt
- [PATCH 03/17] libxt_recent: use guided option parser, Jan Engelhardt
- [PATCH 04/17] libxtables: do not overlay addr and mask parts, and cleanup, Jan Engelhardt
- [PATCH 05/17] libxtables: flag invalid uses of XTOPT_PUT, Jan Engelhardt
- [PATCH 06/17] libxtables: XTTYPE_PLEN support, Jan Engelhardt
- [PATCH 07/17] libxt_hashlimit: use guided option parser, Jan Engelhardt
- [PATCH 09/17] libxt_policy: use guided option parser, Jan Engelhardt
- [PATCH 08/17] libxtables: XTTYPE_HOSTMASK support, Jan Engelhardt
- [PATCH 10/17] libxt_owner: use guided option parser, Jan Engelhardt
- [PATCH 11/17] libxt_osf: use guided option parser, Jan Engelhardt
- [PATCH 13/17] libipt_NETMAP: use guided option parser, Jan Engelhardt
- [PATCH 12/17] libxt_multiport: use guided option parser, Jan Engelhardt
- [PATCH 15/17] libxtables: XTTYPE_PROTOCOL support, Jan Engelhardt
- [PATCH 14/17] libxt_limit: use guided option parser, Jan Engelhardt
- [PATCH 16/17] libxt_ipvs: use guided option parser, Jan Engelhardt
  - Re: [PATCH 16/17] libxt_ipvs: use guided option parser, Simon Horman
- [PATCH 17/17] libxt_conntrack: use guided option parser, Jan Engelhardt
- Re: guided option parser, run 6, Patrick McHardy
Fixes to opts, docs, Jan Engelhardt
- [PATCH 1/2] iptables: fix the dead loop when meeting unknown options, Jan Engelhardt
- [PATCH 2/2] doc: S/DNAT allows to omit IP addresses, Jan Engelhardt
- Re: Fixes to opts, docs, Patrick McHardy
guided option parser, run 5, Jan Engelhardt
- [PATCH 01/13] libxt_tos: add inversion support back again, Jan Engelhardt
- [PATCH 02/13] libxtables: fix assignment in wrong offset (XTTYPE_UINT*RC), Jan Engelhardt
- [PATCH 03/13] libxt_u32: add missing call to xtables_option_parse, Jan Engelhardt
- [PATCH 04/13] extensions: remove bogus use of XT_GETOPT_TABLEEND, Jan Engelhardt
- [PATCH 05/13] libxt_owner: remove ifdef IPT_COMM_OWNER, Jan Engelhardt
- [PATCH 06/13] libxtables: output name of extension on rev detect failure, Jan Engelhardt
- [PATCH 07/13] extensions: const annotations, Jan Engelhardt
- [PATCH 08/13] libxt_statistic: streamline and document possible placement of negation, Jan Engelhardt
- [PATCH 09/13] libxt_statistic: increase precision on create and dump, Jan Engelhardt
- [PATCH 10/13] libxtables: XTTYPE_DOUBLE support, Jan Engelhardt
- [PATCH 11/13] libxt_statistic: use guided option parser, Jan Engelhardt
- [PATCH 13/13] libxt_NFLOG: use guided option parser, Jan Engelhardt
- [PATCH 12/13] libxt_IDLETIMER: use guided option parser, Jan Engelhardt
- Re: guided option parser, run 5, Patrick McHardy
[GIT PULL nf-2.6] IPVS (take III), Simon Horman
- [PATCH 1/2] IPVS: Change of socket usage to enable name space exit., Simon Horman
- [PATCH 2/2] IPVS: init and cleanup restructuring, Simon Horman
- Re: [GIT PULL nf-2.6] IPVS (take III), Patrick McHardy
[PATCH] Fix reversed logic when implictly loading protocol matches, Lutz Jaenicke
- Re: [PATCH] Fix reversed logic when implictly loading protocol matches, Jan Engelhardt
[PATCH] netfilter: Implement RFC 1123 for FTP conntrack, Jeff Mahoney
- Re: [PATCH] netfilter: Implement RFC 1123 for FTP conntrack, Jan Engelhardt
  - Re: [PATCH] netfilter: Implement RFC 1123 for FTP conntrack, Jeff Mahoney
[RFC v4 00/11] snet: Security for NETwork syscalls, y
- [RFC v4 06/11] snet: introduce snet_netlink, y
- [RFC v4 05/11] snet: introduce snet_hooks, y
- [RFC v4 02/11] lsm: reintroduce security_socket_post_accept(), y
- [RFC v4 10/11] snet: introduce snet_stats, y
- [RFC v4 07/11] snet: introduce snet_verdict, y
- [RFC v4 09/11] snet: introduce snet_utils, y
- [RFC v4 11/11] snet: introduce security/snet, Makefile and Kconfig changes, y
- [RFC v4 01/11] lsm: add security_socket_closed(), y
- [RFC v4 04/11] snet: introduce snet_event, y
- [RFC v4 03/11] snet: introduce snet_core, y
- [RFC v4 08/11] snet: introduce snet_ticket, y
Feature request: ip_set for non-modular kernel, Ed W
- Re: Feature request: ip_set for non-modular kernel, Mr Dash Four
Netfilter Module for NAT IVI available, Pierre Rondou
- Re: Netfilter Module for NAT IVI available, Eric Dumazet
  - Re: Netfilter Module for NAT IVI available, Pierre Rondou
    - Re: Netfilter Module for NAT IVI available, Eric Dumazet
      - Re: Netfilter Module for NAT IVI available, Pierre Rondou
        
        Re: Netfilter Module for NAT IVI available, Maciej Żenczykowski
        
        Re: Netfilter Module for NAT IVI available, Eric Dumazet
        
        Re: Netfilter Module for NAT IVI available, Pierre Rondou
[PATCH] netfilter: nf_conntrack_ftp: prevent integer overflows in get_port(), Mansour Moufid
- Re: [PATCH] netfilter: nf_conntrack_ftp: prevent integer overflows in get_port(), Changli Gao
[RFC v3 00/10] snet: Security for NETwork syscalls, Samir Bellabes
- [RFC v3 09/10] snet: introduce snet_utils, Samir Bellabes
- [RFC v3 10/10] snet: introduce security/snet, Makefile and Kconfig changes, Samir Bellabes
- [RFC v3 08/10] snet: introduce snet_ticket, Samir Bellabes
- [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook", Samir Bellabes
  - Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook", Paul Moore
    - Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook", Tetsuo Handa
      - Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook", Samir Bellabes
      - Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook", Paul Moore
        
        Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook", Tetsuo Handa
        
        Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook", Samir Bellabes
        
        Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook", Paul Moore
- [RFC v3 07/10] snet: introduce snet_verdict, Samir Bellabes
- [RFC v3 01/10] lsm: add security_socket_closed(), Samir Bellabes
  - Re: [RFC v3 01/10] lsm: add security_socket_closed(), Tetsuo Handa
    - Re: [RFC v3 01/10] lsm: add security_socket_closed(), Samir Bellabes
- [RFC v3 03/10] snet: introduce snet_core, Samir Bellabes
- [RFC v3 04/10] snet: introduce snet_event, Samir Bellabes
- [RFC v3 06/10] snet: introduce snet_netlink, Samir Bellabes
- [RFC v3 05/10] snet: introduce snet_hooks, Samir Bellabes
- Re: [RFC v3 00/10] snet: Security for NETwork syscalls, Casey Schaufler
  - Re: [RFC v3 00/10] snet: Security for NETwork syscalls, Samir Bellabes
iptables domain match, tingwei liu
- Re: iptables domain match, tingwei liu
  - Re: iptables domain match, Jozsef Kadlecsik
[GIT PULL nf-2.6] IPVS (Take II), Simon Horman
- [PATCH 1/2] IPVS: Change of socket usage to enable name space exit., Simon Horman
- [PATCH 2/2] IPVS: init and cleanup restructuring., Simon Horman
- Re: [GIT PULL nf-2.6] IPVS (Take II), Simon Horman
- <Possible follow-ups>
- Re: [GIT PULL nf-2.6] IPVS (Take II), Hans Schillstrom
Re: Re: [v4 PATCH 1/6] IPVS: Change of socket usage to enable name space exit., Hans Schillstrom
- Re: Re: [v4 PATCH 1/6] IPVS: Change of socket usage to enable name space exit., Simon Horman
Are pre- postrouting states device independent ?, Falk Nisius
- Re: Are pre- postrouting states device independent ?, Jan Engelhardt
  - Re: Are pre- postrouting states device independent ?, Falk Nisius
iptables: guided option parser, run 4, Jan Engelhardt
- [PATCH 1/9] build: bump libxtables ABI version, Jan Engelhardt
- [PATCH 2/9] libxt_TEE: use guided option parser, Jan Engelhardt
- [PATCH 3/9] xtoptions: respect return value in xtables_getportbyname, Jan Engelhardt
- [PATCH 4/9] libxt_TOS: use guided option parser, Jan Engelhardt
- [PATCH 5/9] libxt_tos: use guided option parser, Jan Engelhardt
- [PATCH 6/9] extensions: remove unused TOS code, Jan Engelhardt
- [PATCH 7/9] libxtables: XTTYPE_PORTRC support, Jan Engelhardt
- [PATCH 8/9] libxt_udp: use guided option parser, Jan Engelhardt
  - Re: [PATCH 8/9] libxt_udp: use guided option parser, Lutz Jaenicke
    - Re: [PATCH 8/9] libxt_udp: use guided option parser, Jan Engelhardt
- [PATCH 9/9] libxt_dccp: use guided option parser, Jan Engelhardt
- Re: iptables: guided option parser, run 4, Patrick McHardy
ip6tables breaks dnssec?, Leo Baltus
- Re: ip6tables breaks dnssec?, Jan Engelhardt
  - Re: ip6tables breaks dnssec?, Ulrich Weber
    - Re: ip6tables breaks dnssec?, Leo Baltus
    - Re: ip6tables breaks dnssec?, Jan Engelhardt
      - Re: ip6tables breaks dnssec?, Leo Baltus
        
        Re: ip6tables breaks dnssec?, Leo Baltus
      - Re: ip6tables breaks dnssec?, Ulrich Weber
      - Re: ip6tables breaks dnssec?, Stephen Clark
        
        Re: ip6tables breaks dnssec?, Jan Engelhardt
kernel source code files with same name (different case) xt_*, Jon Grant
- Re: kernel source code files with same name (different case) xt_*, David Miller
[PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Fernando Luis Vazquez Cao
- Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Eric Dumazet
  - Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Fernando Luis Vazquez Cao
    - Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Eric Dumazet
      - Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Fernando Luis Vazquez Cao
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Eric Dumazet
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Pablo Neira Ayuso
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Fernando Luis Vazquez Cao
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, David Miller
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Fernando Luis Vazquez Cao
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Pablo Neira Ayuso
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Pablo Neira Ayuso
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Fernando Luis Vazquez Cao
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Fernando Luis Vázquez Cao
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Pablo Neira Ayuso
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, Jan Engelhardt
        
        Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module, David Miller
Re: [PATCH] netfilter/IPv6: fix DSCP mangle code, David Miller
- Re: [PATCH] netfilter/IPv6: fix DSCP mangle code, Fernando Luis Vazquez Cao
netfilter: provide config option to disable ancient procfs parts, Jan Engelhardt
"xt_conntrack: warn about use in raw table" and lo packets, Florian Westphal
- Re: "xt_conntrack: warn about use in raw table" and lo packets, Jan Engelhardt
  - Re: "xt_conntrack: warn about use in raw table" and lo packets, Jan Engelhardt
[v2 PATCH 0/6] IPVS: init and cleanup., Hans Schillstrom
- [PATCH 2/6] IPVS: labels at pos 0, Hans Schillstrom
- [PATCH 6/6] IPVS: add debug functions, Hans Schillstrom
- [PATCH 5/6] IPVS: remove unused init and cleanup functions., Hans Schillstrom
- [PATCH 1/6] IPVS: Change of socket usage to enable name space exit., Hans Schillstrom
- [PATCH 3/6] IPVS: init and cleanup restructuring., Hans Schillstrom
- [PATCH 4/6] IPVS: rename of netns init and cleanup functions., Hans Schillstrom
- Re: [v2 PATCH 0/6] IPVS: init and cleanup., Julian Anastasov
- <Possible follow-ups>
- Re: Re: [v2 PATCH 0/6] IPVS: init and cleanup., Hans Schillstrom
  - Re: Re: [v2 PATCH 0/6] IPVS: init and cleanup., Julian Anastasov
- [v2 PATCH 0/6] IPVS: init and cleanup., Hans Schillstrom
  - [v3 PATCH 5/6] IPVS: remove unused init and cleanup functions., Hans Schillstrom
  - [v3 PATCH 2/6] IPVS: labels at pos 0, Hans Schillstrom
  - [v3 PATCH 4/6] IPVS: rename of netns init and cleanup functions., Hans Schillstrom
  - [v3 PATCH 3/6] IPVS: init and cleanup restructuring., Hans Schillstrom
  - [v3 PATCH 1/6] IPVS: Change of socket usage to enable name space exit., Hans Schillstrom
  - [v3 PATCH 6/6] IPVS: add debug functions, Hans Schillstrom
  - Re: [v2 PATCH 0/6] IPVS: init and cleanup., Simon Horman
    - RE: [v2 PATCH 0/6] IPVS: init and cleanup., Hans Schillström
      - Re: [v2 PATCH 0/6] IPVS: init and cleanup., Simon Horman
  - Re: [v2 PATCH 0/6] IPVS: init and cleanup., Julian Anastasov
- Re: Re: [v2 PATCH 0/6] IPVS: init and cleanup., Hans Schillstrom
- [v2 PATCH 0/6] IPVS: init and cleanup., Hans Schillstrom
  - [v4 PATCH 1/6] IPVS: Change of socket usage to enable name space exit., Hans Schillstrom
    - Re: [v4 PATCH 1/6] IPVS: Change of socket usage to enable name space exit., Simon Horman
  - [v4 PATCH 6/6] IPVS: add debug functions, Hans Schillstrom
  - [v4 PATCH 3/6] IPVS: init and cleanup restructuring., Hans Schillstrom
  - [v4 PATCH 2/6] IPVS: labels at pos 0, Hans Schillstrom
  - [v4 PATCH 4/6] IPVS: rename of netns init and cleanup functions., Hans Schillstrom
  - [v4 PATCH 5/6] IPVS: remove unused init and cleanup functions., Hans Schillstrom
  - Re: [v2 PATCH 0/6] IPVS: init and cleanup., Julian Anastasov
  - Re: [v2 PATCH 0/6] IPVS: init and cleanup., Simon Horman
[PATCH] netfilter: ctnetlink: fix timestamp support for new conntracks, Pablo Neira Ayuso
- Re: [PATCH] netfilter: ctnetlink: fix timestamp support for new conntracks, Patrick McHardy
net-next-2.6.git merged, Patrick McHardy
[PATCH 1/3] IPVS: Change of socket usage to enable name space exit., Hans Schillstrom
- [PATCH 3/3] IPVS: init and cleanup restructuring., Hans Schillstrom
  - Re: [PATCH 3/3] IPVS: init and cleanup restructuring., Simon Horman
    - Re: [PATCH 3/3] IPVS: init and cleanup restructuring., Hans Schillstrom
  - Re: [PATCH 3/3] IPVS: init and cleanup restructuring., Julian Anastasov
    - Re: [PATCH 3/3] IPVS: init and cleanup restructuring., Hans Schillstrom
    - Re: [PATCH 3/3] IPVS: init and cleanup restructuring., Hans Schillstrom
- [PATCH 2/3] IPVS: Change of register_pernet_subsys to register_pernet_device, Hans Schillstrom
  - Re: [PATCH 2/3] IPVS: Change of register_pernet_subsys to register_pernet_device, Eric W. Biederman
- Re: [PATCH 1/3] IPVS: Change of socket usage to enable name space exit., Simon Horman
  - Re: [PATCH 1/3] IPVS: Change of socket usage to enable name space exit., Eric W. Biederman
- Re: [PATCH 1/3] IPVS: Change of socket usage to enable name space exit., Eric W. Biederman
[PATCH 0/3] netfilter: netfilter fixes for 2.6.39-rc4, kaber
- [PATCH 2/3] netfilter: ipset: set match and SET target fixes, kaber
- [PATCH 3/3] netfilter: ipset: Fix the order of listing of sets, kaber
- [PATCH 1/3] netfilter: ipset: bitmap:ip,mac type requires "src" for MAC, kaber
- Re: [PATCH 0/3] netfilter: netfilter fixes for 2.6.39-rc4, David Miller
[PATCH 0/3] netfilter: netfilter update, kaber
- [PATCH 3/3] netfilter: ipset: SCTP, UDPLITE support added, kaber
- [PATCH 2/3] IPVS: combine consecutive #ifdef CONFIG_PROC_FS blocks, kaber
- [PATCH 1/3] netfilter: get rid of atomic ops in fast path, kaber
- Re: [PATCH 0/3] netfilter: netfilter update, David Miller
[ANNOUNCE] ipset 6.4 released, Jozsef Kadlecsik
- <Possible follow-ups>
- RE: [ANNOUNCE] ipset 6.4 released, Thomas Backlund
  - RE: [ANNOUNCE] ipset 6.4 released, Jozsef Kadlecsik
[PATCH 1/1] netfilter: ipset: Fix the order of listing of sets, Jozsef Kadlecsik
- Re: [PATCH 1/1] netfilter: ipset: Fix the order of listing of sets, Patrick McHardy
Patches: don't call modprobe, ipv4/ipv6 flag support, xtables-multi unification., Maciej Żenczykowski
- [PATCH 1/5] Don't load ip6?_tables module when already loaded., Maciej Żenczykowski
  - Re: [PATCH 1/5] Don't load ip6?_tables module when already loaded., Patrick McHardy
    - [PATCH] Don't load ip6?_tables module when already loaded., Maciej Żenczykowski
      - Re: [PATCH] Don't load ip6?_tables module when already loaded., Patrick McHardy
- [PATCH 2/5] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}., Maciej Żenczykowski
  - Re: [PATCH 2/5] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}., Patrick McHardy
    - Re: [PATCH 2/5] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}., Maciej Żenczykowski
      - Re: [PATCH 2/5] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}., Patrick McHardy
- [PATCH 3/5] Move common parts of libext{4,6}.a into libext.a, Maciej Żenczykowski
- [PATCH 4/5] combine ip6?tables-multi into xtables-multi, Maciej Żenczykowski
- [PATCH 5/5] add xtables-multi{32,64} recognition, Maciej Żenczykowski
  - Re: [PATCH 5/5] add xtables-multi{32,64} recognition, Patrick McHardy
    - Re: [PATCH 5/5] add xtables-multi{32,64} recognition, Maciej Żenczykowski
      - Re: [PATCH 5/5] add xtables-multi{32,64} recognition, Patrick McHardy
  - Re: [PATCH 5/5] add xtables-multi{32,64} recognition, Jan Engelhardt
    - Re: [PATCH 5/5] add xtables-multi{32,64} recognition, Maciej Żenczykowski
- Re: Patches: don't call modprobe, ipv4/ipv6 flag support, xtables-multi unification., Maciej Żenczykowski
  - [PATCH 1/3] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}., Maciej Żenczykowski
  - [PATCH 2/3] Move common parts of libext{4,6}.a into libext.a, Maciej Żenczykowski
  - [PATCH 3/3] combine ip6?tables-multi into xtables-multi, Maciej Żenczykowski
  - Re: Patches: don't call modprobe, ipv4/ipv6 flag support, xtables-multi unification., Patrick McHardy
netfilter: xt_CT: provide info on why a rule was rejected, Jan Engelhardt
- Re: netfilter: xt_CT: provide info on why a rule was rejected, Patrick McHardy
[PATCH] libnetfilter_conntrack: Add nfct_destroy() to all examples in utils, Andrew Beverley
- Re: [PATCH] libnetfilter_conntrack: Add nfct_destroy() to all examples in utils, Pablo Neira Ayuso
Defining and parsing SNAT and DNAT options, Terry Moës
Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c, Eric Dumazet
- Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c, Eric Dumazet
  - Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c, Simon Arlott
    - Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c, Simon Arlott
    - Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c, Patrick McHardy
SNAT in NF_INET_PRE_ROUTING not working on kernel 2.6.35, Janis Dzerve
[PATCH] Move common parts of libext{4,6}.a into libext.a, Maciej Żenczykowski
[PATCH] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}., Maciej Żenczykowski
[PATCH 0/5] netfilter: ipset patches, Jozsef Kadlecsik
- [PATCH 1/5] netfilter: ipset: list:set timeout variant fixes, Jozsef Kadlecsik
  - [PATCH 2/5] netfilter: ipset: references are protected by rwlock instead of mutex, Jozsef Kadlecsik
    - [PATCH 3/5] netfilter: ipset: Timeout can be modified for already added elements, Jozsef Kadlecsik
      - [PATCH 4/5] netfilter: ipset: bitmap:ip,mac type requires "src" for MAC, Jozsef Kadlecsik
        
        [PATCH 5/5] netfilter: ipset: set match and SET target fixes, Jozsef Kadlecsik
- Re: [PATCH 0/5] netfilter: ipset patches, Patrick McHardy
  - Re: [PATCH 0/5] netfilter: ipset patches, Jozsef Kadlecsik
    - Re: [PATCH 0/5] netfilter: ipset patches, Patrick McHardy
guided option parser, run 3, Jan Engelhardt
- [PATCH 01/26] libxtables: XTTYPE_MARKMASK32 support, Jan Engelhardt
- [PATCH 05/26] libxt_quota: use guided option parser, Jan Engelhardt
- [PATCH 06/26] libxtables: linked-list name<->id map, Jan Engelhardt
- [PATCH 04/26] libxtables: XTTYPE_UINT64 support, Jan Engelhardt
- [PATCH 08/26] libipt_realm: use guided option parser, Jan Engelhardt
- [PATCH 09/26] libxtables: XTTYPE_UINT16RC support, Jan Engelhardt
- [PATCH 07/26] libxt_devgroup: use guided option parser, Jan Engelhardt
- [PATCH 12/26] libxtables: XTTYPE_UINT8RC support, Jan Engelhardt
- [PATCH 10/26] libxt_length: use guided option parser, Jan Engelhardt
- [PATCH 13/26] libxtables: XTTYPE_UINT64RC support, Jan Engelhardt
- [PATCH 15/26] libxtables: XTTYPE_UINT16 support, Jan Engelhardt
- [PATCH 16/26] libxt_CT: use guided option parser, Jan Engelhardt
- [PATCH 17/26] libxt_NFQUEUE: use guided option parser, Jan Engelhardt
- [PATCH 18/26] libxt_TCPMSS: use guided option parser, Jan Engelhardt
- [PATCH 19/26] libxtables: pass struct xt_entry_{match,target} to x6 parser, Jan Engelhardt
- [PATCH 21/26] libxtables: XTTYPE_SYSLOGLEVEL support, Jan Engelhardt
- [PATCH 20/26] libxt_string: use guided option parser, Jan Engelhardt
- [PATCH 22/26] libip[6]t_LOG: use guided option parser, Jan Engelhardt
- [PATCH 24/26] libxtables: XTTYPE_PORT support, Jan Engelhardt
- [PATCH 23/26] libxtables: XTTYPE_ONEHOST support, Jan Engelhardt
- [PATCH 26/26] libipt_ULOG: use guided option parser, Jan Engelhardt
- [PATCH 25/26] libxt_TPROXY: use guided option parser, Jan Engelhardt
- [PATCH 11/26] libxt_tcpmss: use guided option parser, Jan Engelhardt
- [PATCH 14/26] libxt_connbytes: use guided option parser, Jan Engelhardt
- [PATCH 03/26] libxt_CONNMARK: use guided option parser, Jan Engelhardt
- [PATCH 02/26] libxt_MARK: use guided option parser, Jan Engelhardt
- Re: guided option parser, run 3, Patrick McHardy
[PATCH 0/2] rework of userspace expectation support, Pablo Neira Ayuso
- [PATCH 1/2] netfilter: CT: allow to set userspace helper status flag, Pablo Neira Ayuso
- [PATCH 2/2] netfilter: nf_ct_expect: rework userspace expectation support, Pablo Neira Ayuso
- Re: [PATCH 0/2] rework of userspace expectation support, Patrick McHardy
  - Re: [PATCH 0/2] rework of userspace expectation support, Pablo Neira Ayuso
    - Re: [PATCH 0/2] rework of userspace expectation support, Patrick McHardy
      - Re: [PATCH 0/2] rework of userspace expectation support, Pablo Neira Ayuso
        
        Re: [PATCH 0/2] rework of userspace expectation support, Patrick McHardy
        
        Re: [PATCH 0/2] rework of userspace expectation support, Pablo Neira Ayuso
        
        Re: [PATCH 0/2] rework of userspace expectation support, Pablo Neira Ayuso
        
        Re: [PATCH 0/2] rework of userspace expectation support, Patrick McHardy
        
        Re: [PATCH 0/2] rework of userspace expectation support, Pablo Neira Ayuso
        
        Re: [PATCH 0/2] rework of userspace expectation support, Sam Roberts
        
        Re: [PATCH 0/2] rework of userspace expectation support, Sam Roberts
Netfilter Hook and Multiqueue?, Justin Yaple
- Re: Netfilter Hook and Multiqueue?, Eric Dumazet
guided option parser, run 2, Jan Engelhardt
- [PATCH 01/28] libxtables: XTTYPE_UINT8 support, Jan Engelhardt
- [PATCH 02/28] libip[6]t_HL: use guided option parser, Jan Engelhardt
- [PATCH 03/28] libip[6]t_hl: use guided option parser, Jan Engelhardt
- [PATCH 04/28] libxtables: XTTYPE_UINT32RC support, Jan Engelhardt
- [PATCH 05/28] libip[6]t_ah: use guided option parser, Jan Engelhardt
- [PATCH 06/28] libip6t_frag: use guided option parser, Jan Engelhardt
- [PATCH 07/28] libxt_esp: use guided option parser, Jan Engelhardt
- [PATCH 08/28] libxtables: XTTYPE_STRING support, Jan Engelhardt
- [PATCH 09/28] libip[6]t_REJECT: use guided option parser, Jan Engelhardt
- [PATCH 10/28] libip6t_dst: use guided option parser, Jan Engelhardt
- [PATCH 11/28] libip6t_hbh: use guided option parser, Jan Engelhardt
- [PATCH 12/28] libip[6]t_icmp: use guided option parser, Jan Engelhardt
- [PATCH 13/28] libip6t_ipv6header: use guided option parser, Jan Engelhardt
- [PATCH 14/28] libipt_ECN: use guided option parser, Jan Engelhardt
- [PATCH 15/28] libipt_addrtype: use guided option parser, Jan Engelhardt
- [PATCH 16/28] libxt_AUDIT: use guided option parser, Jan Engelhardt
- [PATCH 17/28] libxt_CLASSIFY: use guided option parser, Jan Engelhardt
- [PATCH 19/28] libxt_LED: use guided option parser, Jan Engelhardt
- [PATCH 18/28] libxt_DSCP: use guided option parser, Jan Engelhardt
- [PATCH 20/28] libxt_SECMARK: use guided option parser, Jan Engelhardt
- [PATCH 21/28] libxt_TCPOPTSTRIP: use guided option parser, Jan Engelhardt
- [PATCH 22/28] libxt_comment: use guided option parser, Jan Engelhardt
- [PATCH 23/28] libxt_helper: use guided option parser, Jan Engelhardt
- [PATCH 26/28] libxt_state: use guided option parser, Jan Engelhardt
- [PATCH 24/28] libxt_physdev: use guided option parser, Jan Engelhardt
- [PATCH 25/28] libxt_pkttype: use guided option parser, Jan Engelhardt
- [PATCH 27/28] libxt_time: use guided option parser, Jan Engelhardt
- [PATCH 28/28] libxt_u32: use guided option parser, Jan Engelhardt
- Re: guided option parser, run 2, Patrick McHardy
ipset-6.3 unexpected htable order, Jan Engelhardt
- Re: ipset-6.3 unexpected htable order, Jozsef Kadlecsik
[ANNOUNCE] ipset 6.3 released, Jozsef Kadlecsik
[PATCH 0/3] netfilter: ipset: fixes, Jozsef Kadlecsik
- [PATCH 1/3] netfilter: ipset: bitmap:ip,mac type requires "src" for MAC, Jozsef Kadlecsik
  - [PATCH 2/3] netfilter: ipset: Whitespace fixes: some space before tab slipped in., Jozsef Kadlecsik
    - [PATCH 3/3] netfilter: ipset: set match and SET target fixes, Jozsef Kadlecsik
      - Re: [PATCH 3/3] netfilter: ipset: set match and SET target fixes, Patrick McHardy
    - Re: [PATCH 2/3] netfilter: ipset: Whitespace fixes: some space before tab slipped in., Patrick McHardy
  - Re: [PATCH 1/3] netfilter: ipset: bitmap:ip,mac type requires "src" for MAC, Patrick McHardy
ipset issues in 2.6.39-rc2, Lennert Buytenhek
- Re: ipset issues in 2.6.39-rc2, Jozsef Kadlecsik
  - Re: ipset issues in 2.6.39-rc2, Lennert Buytenhek
Performance issue due to constant "modprobes", Ed W
- Re: Performance issue due to constant "modprobes", Jan Engelhardt
  - Re: Performance issue due to constant "modprobes", Ed W
- Re: Performance issue due to constant "modprobes", Maciej Żenczykowski
  - Re: Performance issue due to constant "modprobes", Ed W
    - Re: Performance issue due to constant "modprobes", Jan Engelhardt
      - Re: Performance issue due to constant "modprobes", Ed W
        
        Re: Performance issue due to constant "modprobes", Jan Engelhardt
        
        Re: Performance issue due to constant "modprobes", Ed W
        
        Re: Performance issue due to constant "modprobes", Jan Engelhardt
        
        Re: Performance issue due to constant "modprobes", Ed W
        
        Re: Performance issue due to constant "modprobes", Jan Engelhardt
        
        Re: Performance issue due to constant "modprobes", Ed W
        
        Re: Performance issue due to constant "modprobes", Jan Engelhardt
        
        Re: Performance issue due to constant "modprobes", Maciej Żenczykowski
        
        Re: Performance issue due to constant "modprobes", Ed W
        
        Re: Performance issue due to constant "modprobes", Jan Engelhardt
        
        Re: Performance issue due to constant "modprobes", Ed W
        
        Re: Performance issue due to constant "modprobes", Jan Engelhardt
        
        Re: Performance issue due to constant "modprobes", Ed W
        
        Re: Performance issue due to constant "modprobes", Mr Dash Four
        
        Re: Performance issue due to constant "modprobes", Maciej Żenczykowski
        
        Re: Performance issue due to constant "modprobes", Maciej Żenczykowski
        
        Re: Performance issue due to constant "modprobes", Jan Engelhardt
        
        Re: Performance issue due to constant "modprobes", Patrick McHardy
        
        Re: Performance issue due to constant "modprobes", Ed W
        
        Re: Performance issue due to constant "modprobes", Maciej Żenczykowski
        
        Re: Performance issue due to constant "modprobes", Maciej Żenczykowski
        
        Re: Performance issue due to constant "modprobes", Ed W
        
        Re: Performance issue due to constant "modprobes", Maciej Żenczykowski
        
        Re: Performance issue due to constant "modprobes", Maciej Żenczykowski
        
        Re: Performance issue due to constant "modprobes", Jozsef Kadlecsik
        
        Re: Performance issue due to constant "modprobes", Ed W
ipset-6.2 testsuite failure, Jan Engelhardt
- Re: ipset-6.2 testsuite failure, Jozsef Kadlecsik
- Re: ipset-6.2 testsuite failure, Jozsef Kadlecsik
  - Re: ipset-6.2 testsuite failure, Jan Engelhardt
    - Re: ipset-6.2 testsuite failure, Jozsef Kadlecsik
      - Re: ipset-6.2 testsuite failure, Jan Engelhardt
        
        Re: ipset-6.2 testsuite failure, Jozsef Kadlecsik
[PATCH 0/2] netfilter: ipset: new features, Jozsef Kadlecsik
- [PATCH 1/2] netfilter: ipset: SCTP, UDPLITE support added, Jozsef Kadlecsik
  - [PATCH 2/2] netfilter: ipset: Timeout can be modified for already added elements, Jozsef Kadlecsik
    - Re: [PATCH 2/2] netfilter: ipset: Timeout can be modified for already added elements, Patrick McHardy
  - Re: [PATCH 1/2] netfilter: ipset: SCTP, UDPLITE support added, Patrick McHardy
[PATCH 1/1] netfilter: ebtables: only call xt_compat_add_offset once per rule, Florian Westphal
- Re: [PATCH 1/1] netfilter: ebtables: only call xt_compat_add_offset once per rule, Patrick McHardy
Guided option parser, Jan Engelhardt
- [PATCH 01/10] extensions: add missing checks for specific flags (2), Jan Engelhardt
- [PATCH 02/10] libxtables: guided option parser, Jan Engelhardt
- [PATCH 03/10] libxt_CHECKSUM: use guided option parser, Jan Engelhardt
- [PATCH 04/10] libxt_socket: use guided option parser, Jan Engelhardt
- [PATCH 05/10] libxtables: provide better final_check, Jan Engelhardt
- [PATCH 06/10] libxt_CONNSECMARK: use guided option parser, Jan Engelhardt
- [PATCH 07/10] libxtables: XTTYPE_UINT32 support, Jan Engelhardt
- [PATCH 08/10] libxt_cpu: use guided option parser, Jan Engelhardt
- [PATCH 09/10] libxtables: min-max option support, Jan Engelhardt
- [PATCH 10/10] libxt_cluster: use guided option parser, Jan Engelhardt
- Re: Guided option parser, Patrick McHardy
One documentation fix, Jan Engelhardt
- [PATCH] doc: avoid duplicate entries in manpage, Jan Engelhardt
- Re: One documentation fix, Patrick McHardy
[PATCH 0/8] netfilter: netfilter fixes for 2.6.39-rc1, kaber
- [PATCH 4/8] IPVS: fix NULL ptr dereference in ip_vs_ctl.c ip_vs_genl_dump_daemons(), kaber
- [PATCH 3/8] netfilter: h323: bug in parsing of ASN1 SEQOF field, kaber
- [PATCH 6/8] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, kaber
- [PATCH 8/8] netfilter: xt_conntrack: fix inverted conntrack direction test, kaber
- [PATCH 2/8] netfilter: ipset: references are protected by rwlock instead of mutex, kaber
- [PATCH 7/8] netfilter: xt_addrtype: replace rt6_lookup with nf_afinfo->route, kaber
- [PATCH 5/8] netfilter: af_info: add network namespace parameter to route hook, kaber
- [PATCH 1/8] netfilter: ipset: list:set timeout variant fixes, kaber
- Re: [PATCH 0/8] netfilter: netfilter fixes for 2.6.39-rc1, David Miller
[PATCH] RFC - introduce xtables-multi, Maciej Żenczykowski
- Re: [PATCH] RFC - introduce xtables-multi, Jan Engelhardt
  - [PATCH] combine ip6?tables-multi into xtables-multi, Maciej Żenczykowski
[PATCH] convert ip6?tables-multi to actually use their own header files, Maciej Żenczykowski
- Re: [PATCH] convert ip6?tables-multi to actually use their own header files, Patrick McHardy
[PATCH] move 'int line' definition from ip6?tables.c into xtables.c, Maciej Żenczykowski
- Re: [PATCH] move 'int line' definition from ip6?tables.c into xtables.c, Patrick McHardy
[Announce] New IPVS GIT trees, Simon Horman
Re: shutdown oops in xt_compat_calc_jump, Patrick McHardy
- Re: shutdown oops in xt_compat_calc_jump, Eric Dumazet
  - Re: shutdown oops in xt_compat_calc_jump, dann frazier
  - Re: shutdown oops in xt_compat_calc_jump, Eric Dumazet
    - Re: shutdown oops in xt_compat_calc_jump, Eric Dumazet
      - Re: shutdown oops in xt_compat_calc_jump, Eric Dumazet
        
        Re: shutdown oops in xt_compat_calc_jump, Patrick McHardy
        
        Re: shutdown oops in xt_compat_calc_jump, dann frazier
        
        Re: shutdown oops in xt_compat_calc_jump, Florian Westphal
        
        Re: shutdown oops in xt_compat_calc_jump, Eric Dumazet
        
        Re: shutdown oops in xt_compat_calc_jump, Florian Westphal
        
        Re: shutdown oops in xt_compat_calc_jump, dann frazier
        
        Re: shutdown oops in xt_compat_calc_jump, Eric Dumazet
        
        Re: shutdown oops in xt_compat_calc_jump, Eric Dumazet
        
        Re: shutdown oops in xt_compat_calc_jump, dann frazier
        
        Re: shutdown oops in xt_compat_calc_jump, Patrick McHardy
[PATCH] netfilter: xt_conntrack: fix inverted conntrack direction test, Florian Westphal
- Re: [PATCH] netfilter: xt_conntrack: fix inverted conntrack direction test, Patrick McHardy
Re: [PATCH] netfilter: h323: bug in parsing of ASN1 SEQOF field, Patrick McHardy
[ANN] Linux Security Summit 2011 - Announcement and CFP, James Morris
- [ANN] Linux Security Summit 2012 - Announcement and CFP, James Morris
Writing a mangle TARGET for iptables, questions about fragments, checksums, Brian G
- Re: Writing a mangle TARGET for iptables, questions about fragments, checksums, Jan Engelhardt
How to get access to NAT info from userland, Brian G
- Message not available
  - Re: How to get access to NAT info from userland, Brian G
    - Re: How to get access to NAT info from userland, Jan Engelhardt
      - Re: How to get access to NAT info from userland, Brian G
        
        Re: How to get access to NAT info from userland, Jan Engelhardt
A small series of iptables userspace cleanups, Maciej Żenczykowski
- [PATCH 01/17] man pages: allow underscores in match and target names, Maciej Żenczykowski
  - Re: [PATCH 01/17] man pages: allow underscores in match and target names, Patrick McHardy
- [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec), Maciej Żenczykowski
  - Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec), Jan Engelhardt
    - Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec), Maciej Żenczykowski
      - Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec), Patrick McHardy
        
        Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec), Jan Engelhardt
  - Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec), Patrick McHardy
- [PATCH 03/17] xtables_ip6addr_to_numeric: fix typo in comment, Maciej Żenczykowski
  - Re: [PATCH 03/17] xtables_ip6addr_to_numeric: fix typo in comment, Patrick McHardy
- [PATCH 04/17] Delay (statically built) match/target initialization, Maciej Żenczykowski
  - Re: [PATCH 04/17] Delay (statically built) match/target initialization, Patrick McHardy
- [PATCH 05/17] v4: rename init_extensions() to init_extensions4(), Maciej Żenczykowski
  - Re: [PATCH 05/17] v4: rename init_extensions() to init_extensions4(), Jan Engelhardt
    - Re: [PATCH 05/17] v4: rename init_extensions() to init_extensions4(), Maciej Żenczykowski
  - Re: [PATCH 05/17] v4: rename init_extensions() to init_extensions4(), Patrick McHardy
- [PATCH 07/17] xtables.h: init_extensions() no longer exists., Maciej Żenczykowski
  - Re: [PATCH 07/17] xtables.h: init_extensions() no longer exists., Patrick McHardy
- [PATCH 08/17] v4: rename for_each_chain() to for_each_chain4(), Maciej Żenczykowski
  - Re: [PATCH 08/17] v4: rename for_each_chain() to for_each_chain4(), Patrick McHardy
- [PATCH 09/17] v6: rename for_each_chain() to for_each_chain6(), Maciej Żenczykowski
  - Re: [PATCH 09/17] v6: rename for_each_chain() to for_each_chain6(), Patrick McHardy
- [PATCH 10/17] v4: rename flush_entries() to flush_entries4(), Maciej Żenczykowski
  - Re: [PATCH 10/17] v4: rename flush_entries() to flush_entries4(), Patrick McHardy
- [PATCH 11/17] v6: rename flush_entries() to flush_entries6(), Maciej Żenczykowski
  - Re: [PATCH 11/17] v6: rename flush_entries() to flush_entries6(), Patrick McHardy
- [PATCH 12/17] v4: rename delete_chain() to delete_chain4(), Maciej Żenczykowski
  - Re: [PATCH 12/17] v4: rename delete_chain() to delete_chain4(), Patrick McHardy
- [PATCH 13/17] v6: rename delete_chain() to delete_chain6(), Maciej Żenczykowski
  - Re: [PATCH 13/17] v6: rename delete_chain() to delete_chain6(), Patrick McHardy
- [PATCH 14/17] v4: rename print_rule() to print_rule4(), Maciej Żenczykowski
  - Re: [PATCH 14/17] v4: rename print_rule() to print_rule4(), Patrick McHardy
- [PATCH 15/17] v6: rename print_rule() to print_rule6(), Maciej Żenczykowski
  - Re: [PATCH 15/17] v6: rename print_rule() to print_rule6(), Patrick McHardy
- [PATCH 16/17] v4: rename do_command() to do_command4(), Maciej Żenczykowski
  - Re: [PATCH 16/17] v4: rename do_command() to do_command4(), Patrick McHardy
- [PATCH 17/17] v6: rename do_command() to do_command6(), Maciej Żenczykowski
  - Re: [PATCH 17/17] v6: rename do_command() to do_command6(), Patrick McHardy
    - Re: [PATCH 17/17] v6: rename do_command() to do_command6(), Maciej Żenczykowski
      - Re: [PATCH 17/17] v6: rename do_command() to do_command6(), Patrick McHardy
- [PATCH 06/17] v6: rename init_extensions() to init_extensions6(), Maciej Żenczykowski
  - Re: [PATCH 06/17] v6: rename init_extensions() to init_extensions6(), Patrick McHardy
[PATCH] IPVS Bug, Null ptr in ip_vs_ctl.c ip_vs_genl_dump_daemons()., Hans Schillstrom
- Re: [PATCH] IPVS Bug, Null ptr in ip_vs_ctl.c ip_vs_genl_dump_daemons()., Simon Horman
Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in, David Miller
- Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in, Steven Rostedt
- Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in, Patrick McHardy
  - Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in, KOVACS Krisztian
    - Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in, Patrick McHardy
      - Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in, KOVACS Krisztian
[PATCH] iptables: documentation for iptables and ip6tables "security" tables, Mark Montague
- Re: [PATCH] iptables: documentation for iptables and ip6tables "security" tables, Patrick McHardy
- [PATCH v2] iptables: documentation for iptables and ip6tables "security" tables, Mark Montague
  - Re: [PATCH v2] iptables: documentation for iptables and ip6tables "security" tables, Patrick McHardy
Re: ctnetlink kernel dump while running multiple libnfct clients, Pablo Neira Ayuso
- Re: ctnetlink kernel dump while running multiple libnfct clients, Sam Roberts
  - Re: ctnetlink kernel dump while running multiple libnfct clients, Pablo Neira Ayuso
    - Message not available
      - Message not available
        
        Re: ctnetlink kernel dump while running multiple libnfct clients, Sam Roberts
        
        Re: ctnetlink kernel dump while running multiple libnfct clients, Pablo Neira Ayuso
        
        Message not available
        
        Message not available
        
        Message not available
        
        Re: fix for userspace expectations, Sam Roberts
[ANNOUNCE] ipset 6.2 released, Jozsef Kadlecsik
- Message not available
  - Re: [ANNOUNCE] ipset 6.2 released, Jozsef Kadlecsik
    - Re: [ANNOUNCE] ipset 6.2 released, Michael Tokarev
      - Re: [ANNOUNCE] ipset 6.2 released, Jozsef Kadlecsik
      - Re: [ANNOUNCE] ipset 6.2 released, Michael Tokarev
        
        Re: [ANNOUNCE] ipset 6.2 released, Jozsef Kadlecsik
        
        Re: [ANNOUNCE] ipset 6.2 released, Jozsef Kadlecsik
    - Re: [ANNOUNCE] ipset 6.2 released, Michael Tokarev
      - Re: [ANNOUNCE] ipset 6.2 released, Michael Tokarev
Re: [PATCH] ip_fragment:kernel may panic when replay big packet with RST flag, Changli Gao
- Re: [PATCH] ip_fragment:kernel may panic when replay big packet with RST flag, Patrick McHardy
Problem getting IPv6 port numbers, Mark Montague
- Re: Problem getting IPv6 port numbers, Jan Engelhardt
  - Re: Problem getting IPv6 port numbers, Mark Montague
    - Re: Problem getting IPv6 port numbers, Jan Engelhardt
[PATCH 0/2] netfilter:ipset fixes: list:set and refcounting, Jozsef Kadlecsik
- [PATCH 1/2] netfilter:ipset: list:set timeout variant fixes, Jozsef Kadlecsik
  - [PATCH 2/2] netfilter:ipset: References are protected by rwlock instead of mutex, Jozsef Kadlecsik
    - Re: [PATCH 2/2] netfilter:ipset: References are protected by rwlock instead of mutex, Patrick McHardy
      - Re: [PATCH 2/2] netfilter:ipset: References are protected by rwlock instead of mutex, Jozsef Kadlecsik
        
        Re: [PATCH 2/2] netfilter:ipset: References are protected by rwlock instead of mutex, Patrick McHardy
  - Re: [PATCH 1/2] netfilter:ipset: list:set timeout variant fixes, Patrick McHardy
[PATCH v2 1/3] netfilter: af_info: add network namespace parameter to route hook, Florian Westphal
- [PATCH v2 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, Florian Westphal
  - Re: [PATCH v2 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, David Miller
    - Re: [PATCH v2 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, Patrick McHardy
- [PATCH v2 3/3] netfilter: xt_addrtype: replace rt6_lookup with nf_afinfo->route, Florian Westphal
  - Re: [PATCH v2 3/3] netfilter: xt_addrtype: replace rt6_lookup with nf_afinfo->route, David Miller
    - Re: [PATCH v2 3/3] netfilter: xt_addrtype: replace rt6_lookup with nf_afinfo->route, Patrick McHardy
- Re: [PATCH v2 1/3] netfilter: af_info: add network namespace parameter to route hook, David Miller
  - Re: [PATCH v2 1/3] netfilter: af_info: add network namespace parameter to route hook, Patrick McHardy
is assert() an appropriate substitute for return -1?, Sam Roberts
- Re: is assert() an appropriate substitute for return -1?, Pablo Neira Ayuso
  - Re: is assert() an appropriate substitute for return -1?, Sam Roberts
can expectations be marked persistent, so they can match repeatedly until they timeout?, Sam Roberts
- Re: can expectations be marked persistent, so they can match repeatedly until they timeout?, Patrick McHardy
  - Re: can expectations be marked persistent, so they can match repeatedly until they timeout?, Sam Roberts
hardware specific extension to netfilter, xilinx microblaze, how to start, Jan Viktorin
ipt_owner pid match can be fixed, aletum
Problem sending skb built from scratch with IPv6, Pierre Rondou
- Re: Problem sending skb built from scratch with IPv6, Jan Engelhardt
  - Re: Problem sending skb built from scratch with IPv6, Pierre Rondou
Any suggestions for getting a pcap of traffic over netlink?, Sam Roberts
- Re: Any suggestions for getting a pcap of traffic over netlink?, Pablo Neira Ayuso
[PATCH 1/3] netfilter: af_info: add network namespace parameter to route hook, Florian Westphal
- [PATCH 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, Florian Westphal
  - Re: [PATCH 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, Eric Dumazet
    - Re: [PATCH 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, Eric Dumazet
      - Re: [PATCH 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, David Miller
        
        Re: [PATCH 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, Florian Westphal
        
        Re: [PATCH 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif, David Miller
- [PATCH 3/3] netfilter: xt_addrtype: replace rt6_lookup with nf_afinfo->route, Florian Westphal
iptables release plans, Patrick McHardy
- Re: iptables release plans, Jan Engelhardt
  - Re: iptables release plans, Patrick McHardy
    - Re: iptables release plans, Jan Engelhardt
- Re: iptables release plans, Jozsef Kadlecsik
  - Re: iptables release plans, Patrick McHardy
questions about variable-sized data in match rules, Mark Montague
[ANNOUNCE] ipset-6.1 released, Jozsef Kadlecsik
[PATCH] netfilter:ipset fix revision reporting, Jozsef Kadlecsik
- Re: [PATCH] netfilter:ipset fix revision reporting, Patrick McHardy
[PATCH 0/2] netfilter:ipset fixes, Jozsef Kadlecsik
- [PATCH 1/2] netfilter:ipset: fix address ranges at hash:*port* types, Jozsef Kadlecsik
  - [PATCH 2/2] netfilter:ipset: fix checking the type revision at create command, Jozsef Kadlecsik
  - Re: [PATCH 1/2] netfilter:ipset: fix address ranges at hash:*port* types, Patrick McHardy
[PATCH 2/2] netfilter: get rid of atomic ops in fast path, Eric Dumazet
- Re: [PATCH 2/2] netfilter: get rid of atomic ops in fast path, Patrick McHardy
  - Re: [PATCH 2/2] netfilter: get rid of atomic ops in fast path, Eric Dumazet
- [PATCH net-next-2.6] netfilter: get rid of atomic ops in fast path, Eric Dumazet
  - Re: [PATCH net-next-2.6] netfilter: get rid of atomic ops in fast path, Patrick McHardy
[PATCH 1/2] netfilter: xtables: fix reentrancy, Eric Dumazet
- Re: [PATCH 1/2] netfilter: xtables: fix reentrancy, Patrick McHardy
[PATCH 36/36] net,rcu: convert call_rcu(xt_osf_finger_free_rcu) to kfree_rcu(), Lai Jiangshan
- Re: [PATCH 36/36] net,rcu: convert call_rcu(xt_osf_finger_free_rcu) to kfree_rcu(), David Miller
[PATCH 25/36] net,rcu: convert call_rcu(__nf_ct_ext_free_rcu) to kfree_rcu(), Lai Jiangshan
- Re: [PATCH 25/36] net,rcu: convert call_rcu(__nf_ct_ext_free_rcu) to kfree_rcu(), David Miller
Poll about irqsafe_cpu_add and others, Eric Dumazet
- Re: Poll about irqsafe_cpu_add and others, David Miller
  - Re: Poll about irqsafe_cpu_add and others, Christoph Lameter
    - Re: Poll about irqsafe_cpu_add and others, Eric Dumazet
      - Re: Poll about irqsafe_cpu_add and others, Christoph Lameter
        
        Re: Poll about irqsafe_cpu_add and others, Eric Dumazet
        
        Re: Poll about irqsafe_cpu_add and others, Christoph Lameter
        
        Re: Poll about irqsafe_cpu_add and others, Eric Dumazet
        
        Re: Poll about irqsafe_cpu_add and others, Christoph Lameter
- Re: Poll about irqsafe_cpu_add and others, Christoph Lameter
- Re: Poll about irqsafe_cpu_add and others, Benjamin Herrenschmidt
[RFC] netfilter: get rid of atomic ops in fast path, Eric Dumazet
- Re: [RFC] netfilter: get rid of atomic ops in fast path, David Miller
  - [PATCH] netfilter: xtables: fix reentrancy, Eric Dumazet
    - Re: [PATCH] netfilter: xtables: fix reentrancy, Jesper Dangaard Brouer
      - Re: [PATCH] netfilter: xtables: fix reentrancy, Eric Dumazet
        
        Re: [PATCH] netfilter: xtables: fix reentrancy, Eric Dumazet
        
        Re: [PATCH] netfilter: xtables: fix reentrancy, Jesper Dangaard Brouer
        
        Re: [PATCH] netfilter: xtables: fix reentrancy, Eric Dumazet
- Re: [RFC] netfilter: get rid of atomic ops in fast path, Patrick McHardy
[PATCH 00/01] netfilter: netfilter fix for net-next, kaber
- [PATCH 01/01] netfilter ebtables: fix xt_AUDIT to work with ebtables, kaber
- Re: [PATCH 00/01] netfilter: netfilter fix for net-next, David Miller
[PATCH] ebtables: Clone xt_AUDIT to ebt_audit to return EBT_CONTINUE, Thomas Graf
- Re: [PATCH] ebtables: Clone xt_AUDIT to ebt_audit to return EBT_CONTINUE, Jan Engelhardt
  - Re: [PATCH] ebtables: Clone xt_AUDIT to ebt_audit to return EBT_CONTINUE, Patrick McHardy
    - Re: [PATCH] ebtables: Clone xt_AUDIT to ebt_audit to return EBT_CONTINUE, Thomas Graf
      - Re: [PATCH] ebtables: Clone xt_AUDIT to ebt_audit to return EBT_CONTINUE, Patrick McHardy
  - [PATCH] ebtables: Fix xt_AUDIT to work with ebtables, return EBT_CONTINUE if NFPROTO_BRIDGE, Thomas Graf
    - Re: [PATCH] ebtables: Fix xt_AUDIT to work with ebtables, return EBT_CONTINUE if NFPROTO_BRIDGE, Patrick McHardy
[PATCH] iptables: add manual page section for AUDIT target, Thomas Graf
- Re: [PATCH] iptables: add manual page section for AUDIT target, Stephen Hemminger
  - Re: [PATCH] iptables: add manual page section for AUDIT target, Stephen Hemminger
- Re: [PATCH] iptables: add manual page section for AUDIT target, Patrick McHardy
net-next-2.6 status..., David Miller

[Home] [Bugtraq] [Photo] [Yosemite Photos] [Yosemite Discussion] [Linux]