Linux Netfilter / IP Tables Devel

• [PATCH] netfilter: nf_ct_helper: better logging for dropped packets, pablo
• [PATCH 0/5] Netfilter/IPVS fixes for 3.8-rc7, pablo
  • [PATCH 1/5] ipvs: freeing uninitialized pointer on error, pablo
  • [PATCH 2/5] ipvs: sctp: fix checksumming on snat and dnat handlers, pablo
  • [PATCH 3/5] netfilter: ip6t_NPT: Fix adjustment calculation, pablo
  • [PATCH 4/5] netfilter: ip6t_NPT: Fix prefix mangling, pablo
  • [PATCH 5/5] netfilter: ip6t_NPT: Ensure to check lower part of prefixes are zero, pablo
  • Re: [PATCH 0/5] Netfilter/IPVS fixes for 3.8-rc7, David Miller
• [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Gao feng
  • [PATCH 03/10] netfilter: ebt_log: add net namespace support for ebt_log, Gao feng
  • [PATCH 04/10] netfilter: xt_LOG: add net namespace support for xt_LOG, Gao feng
  • [PATCH 07/10] netfilter: nfnetlink_log: add net namespace support for nfnetlink_log, Gao feng
  • [PATCH 08/10] netfilter: nf_log: enable nflog in un-init net namespace, Gao feng
  • [PATCH 09/10] netfilter: nfnetlink_queue: add net namespace support for nfnetlink_queue, Gao feng
  • [PATCH 10/10] netfilter: remove useless variable proc_net_netfilter, Gao feng
  • [PATCH 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Gao feng
    • Re: [PATCH 06/10] netfilter: ipt_ulog: add net namespace support for ipt_ulog, Gao feng
  • [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Gao feng
    • Re: [PATCH 02/10] netfilter: nf_log: prepar net namespace support for nf_log, Pablo Neira Ayuso
  • [PATCH 05/10] netfilter: ebt_ulog: add net namesapce support for ebt_ulog, Gao feng
  • Re: [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Pablo Neira Ayuso
    • Re: [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Gao feng
      • Re: [PATCH 01/10] netfilter: make /proc/net/netfilter pernet, Pablo Neira Ayuso
• [GIT PULL nf] IPVS fixes #2, Simon Horman
  • [PATCH] ipvs: sctp: fix checksumming on snat and dnat handlers, Simon Horman
    • RE: [PATCH] ipvs: sctp: fix checksumming on snat and dnat handlers, David Laight
      • Re: [PATCH] ipvs: sctp: fix checksumming on snat and dnat handlers, Daniel Borkmann
  • Re: [GIT PULL nf] IPVS fixes #2, Pablo Neira Ayuso
    • Re: [GIT PULL nf] IPVS fixes #2, Pablo Neira Ayuso
      • Re: [GIT PULL nf] IPVS fixes #2, Daniel Borkmann
• Assorted fixes v3, Jan Engelhardt
  • [PATCH 4/4] iptables: fall back to using save function when print is not defined, Jan Engelhardt
  • [PATCH 3/4] extensions: eui64: set userspacesize=0, Jan Engelhardt
  • [PATCH 1/4] build: bump SONAME for libxtables, Jan Engelhardt
  • [PATCH 2/4] libxtables: centralize checking for a .save function, Jan Engelhardt
  • Re: Assorted fixes v3, Pablo Neira Ayuso
    • Re: Assorted fixes v3, Jan Engelhardt
• [PATCH net] ipvs: sctp: fix checksumming on snat and dnat handlers, Daniel Borkmann
  • Re: [PATCH net] ipvs: sctp: fix checksumming on snat and dnat handlers, Julian Anastasov
• [PATCH] ulog: add protection when remove ipt_ULOG, Gao feng
  • [PATCH 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Gao feng
    • Re: [PATCH 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Pablo Neira Ayuso
      • Re: [PATCH 2/2] netfilter: ipt_ULOG: make spinlock per nlgroup, Gao feng
  • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Pablo Neira Ayuso
    • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Gao feng
      • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Pablo Neira Ayuso
        • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Gao feng
  • Re: [PATCH] ulog: add protection when remove ipt_ULOG, Pablo Neira Ayuso
• [PATCH net] ipvs: sctp: fix checksumming by adding hardware offload support, Daniel Borkmann
  • Re: [PATCH net] ipvs: sctp: fix checksumming by adding hardware offload support, Julian Anastasov
    • Re: [PATCH net] ipvs: sctp: fix checksumming by adding hardware offload support, Daniel Borkmann
• Re: linux-next: Tree for Feb 2 (netfilter), Randy Dunlap
  • [PATCH] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, Florian Westphal
    • Re: [PATCH] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, Randy Dunlap
      • Re: [PATCH] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL, Pablo Neira Ayuso
• Re: [ 82/89] netfilter: xt_hashlimit: fix race that results in duplicated entries, Pablo Neira Ayuso
• [stable-3.7] netfilter: xt_CT: fix unset return value if conntrack zone are disabled, pablo
• New target to manage L2 QoS (802.1p) in a no VLAN (i.e home user) environment, Pedro Garcia
  • Re: New target to manage L2 QoS (802.1p) in a no VLAN (i.e home user) environment, Maciej Żenczykowski
• [v2] netfilter: nfnetlink: add mutex per subsystem, pablo
• [v2-nftables 1/2] netfilter: nf_tables: add packet and byte counters per chain, pablo
  • [v2-nftables 2/2] netfilter: nf_tables: add trace support, pablo
• [PATCH] netfilter: nfnetlink: add mutex per subsystem, pablo
• [nftables 1/9] netfilter: nf_tables: fix compilation if CONFIG_COMPAT is disabled, pablo
  • [nftables 2/9] netfilter: nf_tables: fix chain after rule deletion, pablo
  • [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, pablo
    • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Tomasz Bursztyka
      • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Pablo Neira Ayuso
        • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Tomasz Bursztyka
          • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Pablo Neira Ayuso
    • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Patrick McHardy
      • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Pablo Neira Ayuso
      • Re: [nftables 3/9] netfilter: nf_tables: atomic rule updates and dumps, Tomasz Bursztyka
  • [nftables 4/9] netfilter: nf_tables: fix error path in newchain, pablo
  • [nftables 5/9] netfilter: nf_tables: add packet and byte counters per chain, pablo
  • [nftables 6/9] netfilter: nf_tables: add protocol and flags for xtables over nf_tables, pablo
  • [nftables 7/9] netfilter: nf_tables: add trace support, pablo
  • [nftables 8/9] netfilter: nf_tables: add missing code in route chain type, pablo
  • [nftables 9/9] netfilter: nf_tables: statify chain definition to fix sparse warning, pablo
• [nftables 01/10] netfilter: nf_tables: fix alias for xtables over nftables module, pablo
• [PATCH 1/2] netfilter: xt_CT: merge common code of revision 0 and 1, pablo
  • [PATCH 2/2] netfilter: xt_CT: add alias flag, pablo
    • Re: [PATCH 2/2] netfilter: xt_CT: add alias flag, Jozsef Kadlecsik
• [iptables-nftables PATCH v2] nft: Split nft core to become family independant, Tomasz Bursztyka
  • Re: [iptables-nftables PATCH v2] nft: Split nft core to become family independant, Pablo Neira Ayuso
• [iptables-nftables RFC PATCH] nft: Split nft core to become family independant, Tomasz Bursztyka
• [PATCH 0/1] netfilter: iptables alias support, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: Add flags and compatibility revision in order to support aliases., Jozsef Kadlecsik
• [PATCH 0/3] Introduce aliases for matches and targets, Jozsef Kadlecsik
  • [PATCH 3/3] Add the "NOTRACK" alias to the "CT" target, Jozsef Kadlecsik
  • [PATCH 1/3] Introduce match/target aliases, Jozsef Kadlecsik
  • [PATCH 2/3] Add the "state" alias to the "conntrack" match, Jozsef Kadlecsik
  • Re: [PATCH 0/3] Introduce aliases for matches and targets, Jozsef Kadlecsik
    • Re: [PATCH 0/3] Introduce aliases for matches and targets, Pablo Neira Ayuso
      • Re: [PATCH 0/3] Introduce aliases for matches and targets, Jozsef Kadlecsik
  • Re: [PATCH 0/3] Introduce aliases for matches and targets, Pablo Neira Ayuso
• [stable-3.7 00/14] netfilter stable fixes for 3.7, pablo
  • [stable-3.7 01/14] netfilter: ip[6]t_REJECT: fix wrong transport header pointer in TCP reset, pablo
  • [stable-3.7 02/14] netfilter: nf_ct_reasm: fix conntrack reassembly expire code, pablo
  • [stable-3.7 03/14] netfilter: nfnetlink_log: fix mac address for 6in4 tunnels, pablo
  • [stable-3.7 07/14] netfilter: xt_recent: fix namespace destroy path, pablo
  • [stable-3.7 05/14] netfilter: xt_CT: recover NOTRACK target support, pablo
  • [stable-3.7 06/14] netfilter: fix missing dependencies for the NOTRACK target, pablo
  • [stable-3.7 10/14] netfilter: xt_hashlimit: fix race that results in duplicated entries, pablo
  • [stable-3.7 09/14] netfilter: xt_hashlimit: fix namespace destroy path, pablo
  • [stable-3.7 12/14] netfilter: nf_conntrack: fix BUG_ON while removing nf_conntrack with netns, pablo
  • [stable-3.7 08/14] netfilter: xt_recent: avoid high order page allocations, pablo
  • [stable-3.7 14/14] netfilter: ctnetlink: fix leak in error path of ctnetlink_create_expect, pablo
  • [stable-3.7 13/14] netfilter: x_tables: print correct hook names for ARP, pablo
  • [stable-3.7 11/14] netfilter: xt_CT: fix unset return value if conntrack zone are disabled, pablo
  • [stable-3.7 04/14] netfilter: nfnetlink_log: fix possible compilation issue due to missing include, pablo
  • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, David Miller
  • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, Greg KH
    • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, Pablo Neira Ayuso
      • Re: [stable-3.7 00/14] netfilter stable fixes for 3.7, Greg KH
• Accumulated fixes v2, Jan Engelhardt
  • [PATCH 2/6] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 4/6] extensions: eui64: set userspacesize=0, Jan Engelhardt
  • [PATCH 1/6] build: also use libtool for install stage, Jan Engelhardt
    • Re: [PATCH 1/6] build: also use libtool for install stage, Pablo Neira Ayuso
      • Re: [PATCH 1/6] build: also use libtool for install stage, Jan Engelhardt
      • Re: [PATCH 1/6] build: also use libtool for install stage, Dmitry V. Levin
        • Re: [PATCH 1/6] build: also use libtool for install stage, Jan Engelhardt
        • Re: [PATCH 1/6] build: also use libtool for install stage, Pablo Neira Ayuso
  • [PATCH 6/6] iptables: reword warning on using an alias, Jan Engelhardt
  • [PATCH 3/6] libxtables: centralize checking for a .save function, Jan Engelhardt
  • [PATCH 5/6] iptables: fall back to using save function when print is not defined, Jan Engelhardt
  • Re: Accumulated fixes v2, Jan Engelhardt
    • Re: Accumulated fixes v2, Pablo Neira Ayuso
• [RFC PATCH 4/4] netfilter: ip6t_NPT: Do not mix two prefixes., YOSHIFUJI Hideaki
  • Re: [RFC PATCH 4/4] netfilter: ip6t_NPT: Do not mix two prefixes., Pablo Neira Ayuso
• [RFC PATCH 3/4] netfilter ip6t_NPT: Ensure to check lower part of prefixes are zero., YOSHIFUJI Hideaki
  • Re: [RFC PATCH 3/4] netfilter ip6t_NPT: Ensure to check lower part of prefixes are zero., Pablo Neira Ayuso
• [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., YOSHIFUJI Hideaki
  • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Ulrich Weber
    • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Pablo Neira Ayuso
      • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Ulrich Weber
        • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Jean-Michel DILLY
        • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Jean-Michel DILLY
  • Re: [RFC PATCH 1/4] netfilter: ip6t_NPT: Fix checksuming., Pablo Neira Ayuso
• [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., YOSHIFUJI Hideaki
  • <Possible follow-ups>
  • [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., YOSHIFUJI Hideaki
    • Re: [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., Pablo Neira Ayuso
    • Re: [RFC PATCH 2/4] netfilter: ip6t_NPT: Use csum_partial()., Pablo Neira Ayuso
• [iptables PATCH] configure: display summary at end of configure, Eric Leblond
  • Re: [iptables PATCH] configure: display summary at end of configure, Jan Engelhardt
    • [iptables PATCH v2] configure: display summary at end of configure, Eric Leblond
  • Re: [iptables PATCH] configure: display summary at end of configure, Mr Dash Four
• [patch] ipvs: freeing uninitialized pointer on error, Dan Carpenter
  • Re: [patch] ipvs: freeing uninitialized pointer on error, Julian Anastasov
• [PATCH 00/21] netfilter updates for net-next, pablo
  • [PATCH 03/21] netfilter: ctnetlink: deliver labels to userspace, pablo
  • [PATCH 04/21] netfilter: ctnetlink: allow userspace to modify labels, pablo
  • [PATCH 02/21] netfilter: add connlabel conntrack extension, pablo
  • [PATCH 01/21] netfilter: nf_ct_sip: support Cisco 7941/7945 IP phones, pablo
  • [PATCH 05/21] netfilter: nf_ct_snmp: add include file, pablo
  • [PATCH 14/21] netfilter: nf_ct_ecache: move initialization out of pernet_operations, pablo
  • [PATCH 15/21] netfilter: nf_ct_timeout: move initialization out of pernet_operations, pablo
  • [PATCH 21/21] netfilter: nf_conntrack: fix compilation if sysctl are disabled, pablo
  • [PATCH 20/21] netfilter: nf_conntrack: refactor l4proto support for netns, pablo
  • [PATCH 13/21] netfilter: nf_ct_tstamp: move initialization out of pernet_operations, pablo
  • [PATCH 16/21] netfilter: nf_ct_helper: move initialization out of pernet_operations, pablo
  • [PATCH 19/21] netfilter: nf_conntrack: refactor l3proto support for netns, pablo
  • [PATCH 18/21] netfilter: nf_ct_proto: move initialization out of pernet_operations, pablo
  • [PATCH 17/21] netfilter: nf_ct_labels: move initialization out of pernet_operations, pablo
  • [PATCH 12/21] netfilter: nf_ct_acct: move initialization out of pernet_operations, pablo
  • [PATCH 09/21] netfilter: add missing xt_connlabel.h header in installation, pablo
  • [PATCH 11/21] netfilter: nf_ct_expect: move initialization out of pernet_operations, pablo
  • [PATCH 08/21] netfilter: doc: add nf_conntrack sysctl api documentation, pablo
  • [PATCH 06/21] netfilter: x_tables: add xt_bpf match, pablo
  • [PATCH 07/21] netfilter: add missing xt_bpf.h header in installation, pablo
  • [PATCH 10/21] netfilter: nf_conntrack: move initialization out of pernet operations, pablo
  • Re: [PATCH 00/21] netfilter updates for net-next, David Miller
• Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23., Florian Westphal
  • Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23., Jan Engelhardt
    • Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23., Florian Westphal
• Accumulated fixes, Jan Engelhardt
  • [PATCH 1/8] build: also use libtool for install stage, Jan Engelhardt
    • Re: [PATCH 1/8] build: also use libtool for install stage, Pablo Neira Ayuso
      • Re: [PATCH 1/8] build: also use libtool for install stage, Jan Engelhardt
  • [PATCH 2/8] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 5/8] extensions: S/DNPT: add missing save function, Jan Engelhardt
    • Re: [PATCH 5/8] extensions: S/DNPT: add missing save function, Pablo Neira Ayuso
  • [PATCH 6/8] iptables: fall back to using save function when print is not defined, Jan Engelhardt
    • Re: [PATCH 6/8] iptables: fall back to using save function when print is not defined, Pablo Neira Ayuso
  • [PATCH 7/8] iptables: reword warning on using an alias, Jan Engelhardt
  • [PATCH 3/8] libxtables: centralize checking for a .save function, Jan Engelhardt
    • Re: [PATCH 3/8] libxtables: centralize checking for a .save function, Pablo Neira Ayuso
      • Re: [PATCH 3/8] libxtables: centralize checking for a .save function, Jan Engelhardt
  • [PATCH 8/8] build: fix libiptc build failure on old linux-glibc-devel headers, Jan Engelhardt
    • Re: [PATCH 8/8] build: fix libiptc build failure on old linux-glibc-devel headers, Pablo Neira Ayuso
  • [PATCH 4/8] extensions: eui64: set userspacesize=0, Jan Engelhardt
• [PATCH 0/4] libnetfilter_conntrack: connlabel support, Florian Westphal
  • [PATCH 1/4] api: add nfct_bitmask object, Florian Westphal
  • [PATCH 2/4] api: add connlabel api and attribute, Florian Westphal
    • Re: api: add connlabel api and attribute, Florian Westphal
      • Re: api: add connlabel api and attribute, Pablo Neira Ayuso
        • Re: api: add connlabel api and attribute, Florian Westphal
  • [PATCH 3/4] examples: add connlabel dump/set/clear demo programs, Florian Westphal
  • [PATCH 4/4] api: add CTA_LABEL_MASK attribute handling, Florian Westphal
• Add packet statistics to ipset?, Jonathan
  • Re: Add packet statistics to ipset?, Jozsef Kadlecsik
• [nf-next:master 10/20] net/netfilter/nf_conntrack_standalone.c:566:2: error: 'nf_ct_netfilter_header' undeclared, kbuild test robot
  • Re: [nf-next:master 10/20] net/netfilter/nf_conntrack_standalone.c:566:2: error: 'nf_ct_netfilter_header' undeclared, Pablo Neira Ayuso
    • Re: [nf-next:master 10/20] net/netfilter/nf_conntrack_standalone.c:566:2: error: 'nf_ct_netfilter_header' undeclared, Gao feng
• [PATCH nf-next 01/11] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • [PATCH nf-next 02/11] netfilter: expect: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 02/11] netfilter: expect: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 04/11] netfilter: tstamp: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 04/11] netfilter: tstamp: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 06/11] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 06/11] netfilter: timeout: move initial codes out of pernet_operations, Pablo Neira Ayuso
      • Re: [PATCH nf-next 06/11] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
  • [PATCH nf-next 09/11] netfilter: proto: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 09/11] netfilter: proto: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 05/11] netfilter: ecache: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 05/11] netfilter: ecache: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 11/11] netfilter: l4proto: refactor l4proto support for netns, Gao feng
    • Re: [PATCH nf-next 11/11] netfilter: l4proto: refactor l4proto support for netns, Pablo Neira Ayuso
  • [PATCH nf-next 07/11] netfilter: helper: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 07/11] netfilter: helper: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 08/11] netfilter: labels: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 08/11] netfilter: labels: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • [PATCH nf-next 10/11] netfilter: l3proto: refactor l3proto support for netns, Gao feng
    • Re: [PATCH nf-next 10/11] netfilter: l3proto: refactor l3proto support for netns, Pablo Neira Ayuso
  • [PATCH nf-next 03/11] netfilter: acct: move initial codes out of pernet_operations, Gao feng
    • Re: [PATCH nf-next 03/11] netfilter: acct: move initial codes out of pernet_operations, Pablo Neira Ayuso
  • Re: [PATCH nf-next 01/11] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
• [ulogd patch 0/4] minor code cleaning, Eric Leblond
  • [PATCH 1/4] Get rid of SVN tag in comment., Eric Leblond
  • [PATCH 2/4] Fix warning on format, Eric Leblond
  • [PATCH 4/4] graphite: fix warning about gnu extension usage, Eric Leblond
  • [PATCH 3/4] base: fix warning on pointer handling, Eric Leblond
  • Re: [ulogd patch 0/4] minor code cleaning, Eric Leblond
• [ulogd patch 0/3] improve ulogd command line, Eric Leblond
  • [PATCH 3/3] Add -l option to set log level from command line, Eric Leblond
  • [PATCH 2/3] conf: add flag to allow option setup tuning, Eric Leblond
  • [PATCH 1/3] ulogd: add -v option to display message on stderr., Eric Leblond
  • Re: [ulogd patch 0/3] improve ulogd command line, Eric Leblond
• [PATCH RESEND 01/10] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • [PATCH RESEND 02/10] netfilter: expect: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 04/10] netfilter: tstamp: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 07/10] netfilter: helper: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 10/10] netfilter: l4proto: refactor l4proto support for netns, Gao feng
  • [PATCH RESEND 08/10] netfilter: proto: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 09/10] netfilter: l3proto: refactor l3proto support for netns, Gao feng
  • [PATCH RESEND 06/10] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 05/10] netfilter: ecache: move initial codes out of pernet_operations, Gao feng
  • [PATCH RESEND 03/10] netfilter: acct: move initial codes out of pernet_operations, Gao feng
  • Re: [PATCH RESEND 01/10] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
    • Re: [PATCH RESEND 01/10] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
• [patch v3] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
  • Re: [patch v3] doc: add nf_conntrack sysctl api documentation, Pablo Neira Ayuso
    • Re: [patch v3] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
• [PATCH] iptables: extensions: fix iptables extensions build error in cross-compilation environments, Cristian Iorga
  • Re: [PATCH] iptables: extensions: fix iptables extensions build error in cross-compilation environments, Pablo Neira Ayuso
• [patch net-next v2] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
  • Re: [patch net-next v2] doc: add nf_conntrack sysctl api documentation, Simon Horman
  • Re: [patch net-next v2] doc: add nf_conntrack sysctl api documentation, Pablo Neira Ayuso
• [patch net-next] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
  • Re: [patch net-next] doc: add nf_conntrack sysctl api documentation, Florian Westphal
    • Re: [patch net-next] doc: add nf_conntrack sysctl api documentation, Jiri Pirko
• [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Cong Ding
  • Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Waskiewicz Jr, Peter P
    • Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Cong Ding
  • Re: [PATCH] net: netfilter/xt_CT.c: fix uninitialized variable, Pablo Neira Ayuso
• Build fixes for old Linuxes, Jan Engelhardt
  • [PATCH 1/2] build: fix libiptc build failure on old linux-glibc-devel headers, Jan Engelhardt
  • [PATCH 2/2] parser: workaround glibc-2.3.2 bug 358, Jan Engelhardt
  • Re: Build fixes for old Linuxes, Pablo Neira Ayuso
    • Re: Build fixes for old Linuxes, Jan Engelhardt
      • Re: Build fixes for old Linuxes, Pablo Neira Ayuso
        • Re: Build fixes for old Linuxes, Jan Engelhardt
• Re: state match is obsolete 1.4.17, Jozsef Kadlecsik
  • Re: state match is obsolete 1.4.17, Born Without
  • Re: state match is obsolete 1.4.17, Jan Engelhardt
    • Re: state match is obsolete 1.4.17, Jozsef Kadlecsik
      • Re: state match is obsolete 1.4.17, Jan Engelhardt
        • Re: state match is obsolete 1.4.17, Jozsef Kadlecsik
          • [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
            • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Pablo Neira Ayuso
              • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
                • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jan Engelhardt
                  • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
                • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Pablo Neira Ayuso
                  • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Jozsef Kadlecsik
                    • Re: [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17], Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: state match is obsolete 1.4.17, Jan Engelhardt
• [PATCH 0/3] netfilter fixes for 3.8-rc3, pablo
  • [PATCH 3/3] netfilter: x_tables: print correct hook names for ARP, pablo
  • [PATCH 2/3] netfilter: nf_conntrack: fix BUG_ON while removing nf_conntrack with netns, pablo
  • [PATCH 1/3] netfilter: xt_CT: fix unset return value if conntrack zone are disabled, pablo
  • Re: [PATCH 0/3] netfilter fixes for 3.8-rc3, David Miller
• [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark, Pablo Neira Ayuso
  • Re: [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark, Jan Engelhardt
    • Re: [ANNOUNCE] 9th Netfilter Workshop in Copenhagen, Denmark, Jesper Dangaard Brouer
• [libnetfilter_queue PATCH 1/2] doxygen: improve fail-open documentation., Eric Leblond
  • [libnetfilter_queue PATCH 2/2] doxygen: improve documentation, Eric Leblond
• warning: (BRIDGE_NF_EBTABLES) selects NETFILTER_XTABLES which has unmet direct dependencies (NET && INET && NETFILTER), Fengguang Wu
• [PATCH next] extensions: add connlabel match, Florian Westphal
• [PATCH next V2] netfilter connlabel extension, Florian Westphal
  • [PATCH 1/3] netfilter: add connlabel conntrack extension, Florian Westphal
    • Re: [PATCH 1/3] netfilter: add connlabel conntrack extension, Pablo Neira Ayuso
  • [PATCH 2/3] netfilter: ctnetlink: deliver labels to userspace, Florian Westphal
    • Re: [PATCH 2/3] netfilter: ctnetlink: deliver labels to userspace, Pablo Neira Ayuso
  • [PATCH 3/3] netfilter: ctnetlink: allow userspace to modify labels, Florian Westphal
    • Re: [PATCH 3/3] netfilter: ctnetlink: allow userspace to modify labels, Pablo Neira Ayuso
• [PATCH] netfilter: x_tables: print correct hook names for ARP, Jan Engelhardt
  • Re: [PATCH] netfilter: x_tables: print correct hook names for ARP, Pablo Neira Ayuso
• [RELEASE] arptables v0.0.4, Bart De Schuymer
• xtadm 1.5.0 released, Jan Engelhardt
• [PATCH 1/7] netfilter: nf_tables: nft_compat: release cached matches/targets, pablo
  • [PATCH 2/7] netfilter: nf_tables: move filter chain definition to layer 3 modules, pablo
    • Re: [PATCH 2/7] netfilter: nf_tables: move filter chain definition to layer 3 modules, Patrick McHardy
  • [PATCH 5/7] netfilter: nf_tables: x_tables support as a compile time option, pablo
  • [PATCH 4/7] netfilter: nf_tables: move specific layer 3 compat code to nf_tables_ipv[4|6], pablo
    • Re: [PATCH 4/7] netfilter: nf_tables: move specific layer 3 compat code to nf_tables_ipv[4|6], Patrick McHardy
      • Re: [PATCH 4/7] netfilter: nf_tables: move specific layer 3 compat code to nf_tables_ipv[4|6], Pablo Neira Ayuso
  • [PATCH 3/7] netfilter: nf_tables: remove hook definitions from struct nft_af_info, pablo
    • Re: [PATCH 3/7] netfilter: nf_tables: remove hook definitions from struct nft_af_info, Patrick McHardy
      • Re: [PATCH 3/7] netfilter: nf_tables: remove hook definitions from struct nft_af_info, Pablo Neira Ayuso
  • [PATCH 7/7] netfilter: nf_tables: fix alias for xtables over nftables module, pablo
  • [PATCH 6/7] netfilter: nf_tables: support 32bits-64bits x_tables compat, pablo
    • Re: [PATCH 6/7] netfilter: nf_tables: support 32bits-64bits x_tables compat, Patrick McHardy
• iptables: build fixes, Jan Engelhardt
  • [PATCH 2/2] build: do not dereference symlinks on installation, Jan Engelhardt
  • [PATCH 1/2] build: also use libtool for install stage, Jan Engelhardt
  • Re: iptables: build fixes, Dmitry V. Levin
    • Re: iptables: build fixes, Dmitry V. Levin
      • Re: iptables: build fixes, Jan Engelhardt
• [iptables-nftables RFC PATCH 0/6] IPv6 Support, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 1/6] nft: Add a family attribute to nft_handle, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 2/6] xtables: Combine IPv6 support with IPv4 support, Tomasz Bursztyka
    • [iptables-nftables RFC PATCH - v2 - 2/6] xtables: Combine IPv6 support with IPv4 support, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 3/6] nft: Use handle's family attribute instead of hardcoded AF_INET one, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 4/6] nft: Support IPv6 rules manipulation, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 5/6] nft: Use the right payload parsing function when saving a rule, Tomasz Bursztyka
  • [iptables-nftables RFC PATCH 6/6] nft: Handle IPv6 when printing out firewall rules, Tomasz Bursztyka
  • Re: [iptables-nftables RFC PATCH 0/6] IPv6 Support, Pablo Neira Ayuso
• [libnftables PATCH] rule: Add a function to get rule's family, Tomasz Bursztyka
  • Re: [libnftables PATCH] rule: Add a function to get rule's family, Pablo Neira Ayuso
• v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c, Borislav Petkov
  • Re: v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c, Pablo Neira Ayuso
    • Re: v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c, Borislav Petkov
      • Re: v3.8-rc3: uninitialized warnings in net/netfilter/xt_CT.c, Pablo Neira Ayuso
• Possible arptables bug., Steven Jan Springl
  • Re: Possible arptables bug., Pablo Neira Ayuso
    • Re: Possible arptables bug., Pablo Neira Ayuso
      • Re: Possible arptables bug., Steven Jan Springl
• [PATCH 0/3] Netfilter fixes for 3.8-rc2, pablo
  • [PATCH 1/3] netfilter: ip6t_NPT: fix IPv6 NTP checksum calculation, pablo
  • [PATCH 3/3] netfilter: xt_recent: avoid high order page allocations, pablo
  • [PATCH 2/3] netfilter: fix missing dependencies for the NOTRACK target, pablo
  • Re: [PATCH 0/3] Netfilter fixes for 3.8-rc2, David Miller
• libipset usage, Josh Hunt
  • Re: libipset usage, Jozsef Kadlecsik
• arptables bug., Steven Jan Springl
  • Re: arptables bug., Pablo Neira Ayuso
    • Re: arptables bug., Bart De Schuymer
    • Re: arptables bug., Steven Jan Springl
• [PATCH] netfilter: xt_recent: avoid high order page allocations, Eric Dumazet
  • Re: [PATCH] netfilter: xt_recent: avoid high order page allocations, Pablo Neira Ayuso
• [PATCH next V2] netfilter: remove extra timer from ecache extension, Florian Westphal
  • Re: [PATCH next V2] netfilter: remove extra timer from ecache extension, Pablo Neira Ayuso
• [PATCH -v2 22/26] net/netfilter: rename random32() to prandom_u32(), Akinobu Mita
• [PATCH] iptables: set IPv6 DNAT --to-destination, Ulrich Weber
  • Re: [PATCH] iptables: set IPv6 DNAT --to-destination, Pablo Neira Ayuso
• Re: linux-next: Tree for Jan 2 (netfilter), Randy Dunlap
  • Re: linux-next: Tree for Jan 2 (netfilter), Pablo Neira Ayuso
    • Re: linux-next: Tree for Jan 2 (netfilter), Pablo Neira Ayuso
      • Re: linux-next: Tree for Jan 2 (netfilter), Randy Dunlap
• [PATCH] iptables: fix wording in DNPT target, Ulrich Weber
  • [PATCH v2] iptables: merge libip6t SNPT and DNPT to NPT, Ulrich Weber
    • Re: [PATCH v2] iptables: merge libip6t SNPT and DNPT to NPT, Jan Engelhardt
  • Re: [PATCH] iptables: fix wording in DNPT target, Pablo Neira Ayuso
• [PATCH] iptables: allow IPv6 port NAT without address NAT, Ulrich Weber
  • Re: [PATCH] iptables: allow IPv6 port NAT without address NAT, Pablo Neira Ayuso
    • Re: [PATCH] iptables: allow IPv6 port NAT without address NAT, Ulrich Weber
    • [PATCH v2] iptables: allow IPv6 port NAT without address NAT, Ulrich Weber
      • Re: [PATCH v2] iptables: allow IPv6 port NAT without address NAT, Pablo Neira Ayuso
• [PATCH] netfilter: fix IPv6 NTP checksum calculation, Ulrich Weber
  • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Patrick McHardy
    • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Jean-Michel DILLY
    • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Florian Westphal
      • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Jean-Michel DILLY
        • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, YOSHIFUJI Hideaki
          • Re: [PATCH] netfilter: fix IPv6 NTP checksum calculation, Ulrich Weber
• [PATCH 1/4] netfilter: nf_tables: rise maximum number of expressions from 12 to 128, pablo
  • [PATCH 2/4] netfilter: nf_tables: nft_compat: private data of target and matches in contiguous area, pablo
  • [PATCH 4/4] netfilter: nf_tables: complete net namespace support, pablo
  • [PATCH 3/4] netfilter: nf_tables: validate hooks for compat match/target, pablo
• [PATCH] extensions: fix linking against -lip6tc, Mike Frysinger
  • Re: [PATCH] extensions: fix linking against -lip6tc, Pablo Neira Ayuso
    • Re: [PATCH] extensions: fix linking against -lip6tc, Mike Frysinger
      • [PATCH] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
        • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Mike Frysinger
          • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
            • [PATCH] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
              • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Mike Frysinger
                • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Pablo Neira Ayuso
              • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Dmitry V. Levin
                • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Dmitry V. Levin
                • Re: [PATCH] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
• [PATCH] net: fix checking boundary of valid vlan id, akong
  • <Possible follow-ups>
  • Re: [PATCH] net: fix checking boundary of valid vlan id, Pablo Neira Ayuso
    • Re: [PATCH] net: fix checking boundary of valid vlan id, Ben Hutchings
• [PATCH] netfilter: add include file to nf_conntrack_snmp.c, Stephen Hemminger
  • Re: [PATCH] netfilter: add include file to nf_conntrack_snmp.c, Pablo Neira Ayuso
• [Ulogd PATCH 0/4] Implement filter for NFCT, Eric Leblond
  • [PATCH 1/4] nfct: call register callback on opened handler, Eric Leblond
  • [PATCH 2/4] addr: add file containing addr utility functions., Eric Leblond
  • [PATCH 3/4] nfct: implement src and dst filter, Eric Leblond
  • [PATCH 4/4] nfct: add protocol filter, Eric Leblond
  • Re: [Ulogd PATCH 0/4] Implement filter for NFCT, Eric Leblond
• [PATCH 00/12] netfilter fixes for 3.8-rc1, pablo
  • [PATCH 02/12] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, pablo
  • [PATCH 01/12] netfilter: ip[6]t_REJECT: fix wrong transport header pointer in TCP reset, pablo
  • [PATCH 06/12] netfilter: xt_CT: fix crash while destroy ct templates, pablo
  • [PATCH 09/12] netfilter: xt_hashlimit: fix race that results in duplicated entries, pablo
  • [PATCH 10/12] netfilter: xt_recent: fix namespace destroy path, pablo
  • [PATCH 11/12] netfilter: xt_hashlimit: fix namespace destroy path, pablo
  • [PATCH 12/12] netfilter: ctnetlink: fix leak in error path of ctnetlink_create_expect, pablo
  • [PATCH 08/12] netfilter: xt_CT: recover NOTRACK target support, pablo
  • [PATCH 03/12] netfilter: nf_conntrack_ipv6: fix comment for packets without data, pablo
  • [PATCH 05/12] netfilter: nfnetlink_log: fix mac address for 6in4 tunnels, pablo
  • [PATCH 04/12] netfilter: nf_ct_reasm: fix conntrack reassembly expire code, pablo
  • [PATCH 07/12] netfilter: nfnetlink_log: fix possible compilation issue due to missing include, pablo
  • Re: [PATCH 00/12] netfilter fixes for 3.8-rc1, David Miller
• [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • [PATCH 13/19] netfilter: ipv4: move registration codes out of pernet_operations, Gao feng
  • [PATCH 14/19] netfilter: ipv6: move registration codes out of pernet_operations, Gao feng
  • [PATCH 17/19] netfilter: dccp: move registration codes out of pernet_operations, Gao feng
  • [PATCH 12/19] netfilter: l4proto: prepare reworking l4proto support for netns, Gao feng
  • [PATCH 15/19] netfilter: sctp: move registration codes out of pernet_operations, Gao feng
  • [PATCH 16/19] netfilter: udplite: move registration codes out of pernet_operations, Gao feng
  • [PATCH 18/19] netfilter: gre: move registration codes out of pernet_operations, Gao feng
  • [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
    • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Pablo Neira Ayuso
      • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
        • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Pablo Neira Ayuso
          • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Pablo Neira Ayuso
            • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
              • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
                • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Pablo Neira Ayuso
                  • Re: [PATCH 19/19] netfilter: gre: fix resource leak when unregister gre proto, Gao feng
  • [PATCH 11/19] netfilter: ipv6: register l3proto ipv6 in module_init, Gao feng
  • [PATCH 10/19] netfilter: ipv4: register l3proto ipv4 in module_init, Gao feng
  • [PATCH 09/19] netfilter: l3proto: prepare reworking l3proto support for netns, Gao feng
  • [PATCH 03/19] netfilter: acct: move initial codes out of pernet_operations, Gao feng
  • [PATCH 10/19] netfilter: ipv4: register ipv4 in module_init, Gao feng
  • [PATCH 08/19] netfilter: proto: move initial codes out of pernet_operations, Gao feng
  • [PATCH 07/19] netfilter: helper: move initial codes out of pernet_operations, Gao feng
  • [PATCH 04/19] netfilter: tstamp: move initial codes out of pernet_operations, Gao feng
  • [PATCH 02/19] netfilter: expect: move initial codes out of pernet_operations, Gao feng
  • [PATCH 06/19] netfilter: timeout: move initial codes out of pernet_operations, Gao feng
  • [PATCH 05/19] netfilter: ecache: move initial codes out of pernet_operations, Gao feng
  • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, canqun zhang
    • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Eric W. Biederman
      • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, canqun zhang
        • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Eric W. Biederman
      • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
    • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
      • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, canqun zhang
        • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
  • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
    • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Gao feng
      • Re: [PATCH 01/19] netfilter: move nf_conntrack initialize out of pernet operations, Pablo Neira Ayuso
• [ipset PATCH] Fix wrong bracket placing, Thomas Jarosch
  • Re: [ipset PATCH] Fix wrong bracket placing, Jozsef Kadlecsik
• [libnetfilter_conntrack PATCH] Fix logic typo in cmp_secctx, Thomas Jarosch
  • Re: [libnetfilter_conntrack PATCH] Fix logic typo in cmp_secctx, Florian Westphal
• [nfacct PATCH] Add restore command, Eric Leblond
  • Re: [nfacct PATCH] Add restore command, Pablo Neira Ayuso
    • Re: [nfacct PATCH] Add restore command, Eric Leblond
• [PATCH 0/3] netfilter: nf_tables: minor fixes, kaber
  • =?a?q?=5BPATCH=201/3=5D=20netfilter=3A=20nf=5Ftables=3A=20fix=20NLM=5FF=5FMULTI=20usage=20in=20netlink=20notifications?=, kaber
  • =?a?q?=5BPATCH=202/3=5D=20netfilter=3A=20nf=5Ftables=3A=20include=20NLM=5FF=5FAPPEND=20in=20rule=20dumps?=, kaber
  • =?a?q?=5BPATCH=203/3=5D=20netfilter=3A=20nf=5Ftables=3A=20check=20for=20duplicate=20names=20on=20chain=20rename?=, kaber
  • Re: [PATCH 0/3] netfilter: nf_tables: minor fixes, Pablo Neira Ayuso
• [PATCH 2/3] libxtables: add xtables_rule_matches_free, pablo
  • [PATCH 3/3] libxtables: add xtables_print_num, pablo
• [PATCH 1/4] iptables: remove unused leftover definitions, pablo
• [libnetfilter_acct PATCH] Fix packets and bytes inversion., Eric Leblond
  • Re: [libnetfilter_acct PATCH] Fix packets and bytes inversion., Eric Leblond
• [PATCH] netfilter: Don't leak 'exp' in ctnetlink_create_expect(), Jesper Juhl
  • Re: [PATCH] netfilter: Don't leak 'exp' in ctnetlink_create_expect(), Pablo Neira Ayuso
• Documentation and a build fix, Jan Engelhardt
  • [PATCH 03/13] doc: document iptables-restore's -t option, Jan Engelhardt
  • [PATCH 02/13] doc: fixup omissions in ip6tables-restore.8, Jan Engelhardt
  • [PATCH 08/13] src: remove faulty deprecated marker in libipt_LOG source, Jan Engelhardt
  • [PATCH 04/13] doc: document iptables-restore's -v option, Jan Engelhardt
  • [PATCH 06/13] doc: document iptables-restore's -h option, Jan Engelhardt
  • [PATCH 05/13] doc: document iptables-restore's -M option, Jan Engelhardt
  • [PATCH 01/13] doc: add package version to all manpages, Jan Engelhardt
    • Re: [PATCH 01/13] doc: add package version to all manpages, Pablo Neira Ayuso
      • Re: [PATCH 01/13] doc: add package version to all manpages, Pablo Neira Ayuso
  • [PATCH 11/13] doc: mention -m in the manpage, Jan Engelhardt
  • [PATCH 09/13] iptables: fix order of internal commands list, Jan Engelhardt
    • Re: [PATCH 09/13] iptables: fix order of internal commands list, Pablo Neira Ayuso
  • [PATCH 07/13] doc: name the supported log levels for ipt_LOG, Jan Engelhardt
  • [PATCH 10/13] iptables: implement --line-numbers for iptables -S, Jan Engelhardt
  • [PATCH 12/13] doc: document the -4 and -6 options, Jan Engelhardt
    • Re: [PATCH 12/13] doc: document the -4 and -6 options, Maciej Żenczykowski
  • [PATCH 13/13] build: resolve link failure for ip6t_NETMAP, Jan Engelhardt
  • Re: Documentation and a build fix, Pablo Neira Ayuso
• [libnl-nft PATCH] Fix out of bounds buffer access in rtnl_netem_set_delay_distribution(), Thomas Jarosch
  • Re: [libnl-nft PATCH] Fix out of bounds buffer access in rtnl_netem_set_delay_distribution(), Pablo Neira Ayuso
  • Re: [libnl-nft PATCH] Fix out of bounds buffer access in rtnl_netem_set_delay_distribution(), Patrick McHardy
    • Re: [libnl-nft PATCH] Fix out of bounds buffer access in rtnl_netem_set_delay_distribution(), Thomas Jarosch
• [libnl-nft PATCH] Fix file descriptor leak on error, Thomas Jarosch
  • Re: [libnl-nft PATCH] Fix file descriptor leak on error, Patrick McHardy
    • Re: [libnl-nft PATCH] Fix file descriptor leak on error, Thomas Jarosch
• [ANNOUNCE] iptables 1.4.17 release, Pablo Neira Ayuso
• kernel panic when running /etc/init.d/iptables restart, canqun zhang
  • Re: kernel panic when running /etc/init.d/iptables restart, Gao feng
    • Re: kernel panic when running /etc/init.d/iptables restart, canqun zhang
      • Re: kernel panic when running /etc/init.d/iptables restart, Gao feng
      • Re: kernel panic when running /etc/init.d/iptables restart, Gao feng
        • Re: kernel panic when running /etc/init.d/iptables restart, canqun zhang
          • Re: kernel panic when running /etc/init.d/iptables restart, canqun zhang
        • Re: kernel panic when running /etc/init.d/iptables restart, canqun zhang
• [PATCH 25/29] net/netfilter: rename random32() and net_random() to prandom_u32(), Akinobu Mita
• [ULOGD PATCH 0/2] Add Graphite output module, Eric Leblond
  • [PATCH 1/2] Add missing u64 function., Eric Leblond
  • [PATCH 2/2] Add GRAPHITE output module., Eric Leblond
  • Re: [ULOGD PATCH 0/2] Add Graphite output module, Eric Leblond
• [ulogd patches 0/3] IPv6 improvements, Eric Leblond
  • [PATCH 1/3] Fix parsing of ipv6 flowlabel and tc fields, Eric Leblond
  • [PATCH 2/3] Handle postgresql schemas correctly, Eric Leblond
  • [PATCH 3/3] Add additional ip6 header fields to database scripts, Eric Leblond
  • Re: [ulogd patches 0/3] IPv6 improvements, Eric Leblond
• NOTRACK removal breaks working configurations, Florian Westphal
  • Re: NOTRACK removal breaks working configurations, Pablo Neira Ayuso
    • Re: NOTRACK removal breaks working configurations, Florian Westphal
      • Re: NOTRACK removal breaks working configurations, Pablo Neira Ayuso
• NAT pool, Miguel Alejandro González
  • Re: NAT pool, Jan Engelhardt
    • Re: NAT pool, Miguel Alejandro González
      • Re: NAT pool, Pablo Neira Ayuso
• BUG: NFLOG not working in the container., Vitaly E. Lavrov
  • Re: BUG: NFLOG not working in the container., Pablo Neira Ayuso
• [PATCH] netfilter: xtables: remove table restrictions from some modules, Jan Engelhardt
  • Re: [PATCH] netfilter: xtables: remove table restrictions from some modules, Maciej Żenczykowski
    • Re: [PATCH] netfilter: xtables: remove table restrictions from some modules, Jan Engelhardt
• [PATCH v4] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones, Kevin Cernekee
  • Re: [PATCH v4] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones, Pablo Neira Ayuso
• Re: Resend: One bug in the xt_hashlimit.c, Jan Engelhardt
  • Re: Resend: One bug in the xt_hashlimit.c, Pablo Neira Ayuso
• Re: tc ipt action, Jamal Hadi Salim
  • Re: tc ipt action, Jan Engelhardt
    • Re: tc ipt action, Jan Engelhardt
      • [PATCH] build: unbreak linkage of m_xt.so, Jan Engelhardt
        • Re: [PATCH] build: unbreak linkage of m_xt.so, Jamal Hadi Salim
          • Re: [PATCH] build: unbreak linkage of m_xt.so, Jamal Hadi Salim
            • Re: [PATCH] build: unbreak linkage of m_xt.so, Jan Engelhardt
              • Re: [PATCH] build: unbreak linkage of m_xt.so, Jamal Hadi Salim
        • Re: [PATCH] build: unbreak linkage of m_xt.so, Mike Frysinger
        • Re: [PATCH] build: unbreak linkage of m_xt.so, Stephen Hemminger
          • Re: [PATCH] build: unbreak linkage of m_xt.so, Mike Frysinger
            • Re: [PATCH] build: unbreak linkage of m_xt.so, Stephen Hemminger
    • Re: tc ipt action, Jamal Hadi Salim
    • Message not available
      • Re: tc ipt action, Jamal Hadi Salim
        • Re: tc ipt action, Jamal Hadi Salim
          • Re: tc ipt action, Jan Engelhardt
            • Re: tc ipt action, Jamal Hadi Salim
            • [PATCH] iproute2: act_ipt fix xtables breakage, Jamal Hadi Salim
              • RFC [PATCH] iproute2: temporary solution to fix xt breakage, Jamal Hadi Salim
                • Re: RFC [PATCH] iproute2: temporary solution to fix xt breakage, Stephen Hemminger
                  • Re: RFC [PATCH] iproute2: temporary solution to fix xt breakage, Jamal Hadi Salim
                • Message not available
                  • Re: RFC [PATCH] iproute2: temporary solution to fix xt breakage, Jamal Hadi Salim
                    • Message not available
                      • Re: RFC [PATCH] iproute2: temporary solution to fix xt breakage, Jamal Hadi Salim
                        • [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jan Engelhardt
                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                          • Message not available
                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                              • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                  • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                                    • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                      • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                                        • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jan Engelhardt
                                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Yury Stankevich
                                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Florian Westphal
                                            • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                              • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Felix Fietkau
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Pablo Neira Ayuso
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Pablo Neira Ayuso
                                                • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Pablo Neira Ayuso
                                      • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jan Engelhardt
                                        • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Eric Dumazet
                                          • Re: [PATCH] pkt_sched: act_xt support new Xtables interface, Jamal Hadi Salim
  • Re: tc ipt action, Pablo Neira Ayuso
    • Re: tc ipt action, Jan Engelhardt
      • Re: tc ipt action, Jamal Hadi Salim
        • Re: tc ipt action, Jan Engelhardt
          • Re: tc ipt action, Jamal Hadi Salim
            • Re: tc ipt action, Jan Engelhardt
              • Re: tc ipt action, Jamal Hadi Salim
                • Re: tc ipt action, Jan Engelhardt
                  • Re: tc ipt action, Jamal Hadi Salim
                    • Re: tc ipt action, Jan Engelhardt
                      • Re: tc ipt action, Jamal Hadi Salim
                        • Re: tc ipt action, Jan Engelhardt
                          • Re: tc ipt action, Jamal Hadi Salim
    • Re: tc ipt action, Jamal Hadi Salim
• [PATCH] Fix comment for packets without data, Florent Fourcot
  • Re: [PATCH] Fix comment for packets without data, Rick Jones
    • [PATCH] Fix comment for packets without data, Florent Fourcot
      • Re: [PATCH] Fix comment for packets without data, Rick Jones
        • Re: [PATCH] Fix comment for packets without data, Pablo Neira Ayuso
    • Re: [PATCH] Fix comment for packets without data, Florent Fourcot
• Formal submission of Xtables2, Jan Engelhardt
  • Re: Formal submission of Xtables2, Pablo Neira Ayuso
    • Re: Formal submission of Xtables2, Jan Engelhardt
      • Re: Formal submission of Xtables2, Pablo Neira Ayuso
        • Re: Formal submission of Xtables2, Jan Engelhardt
          • Re: Formal submission of Xtables2, Pablo Neira Ayuso
            • Re: Formal submission of Xtables2, Jan Engelhardt
              • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                • Re: Formal submission of Xtables2, Jan Engelhardt
                  • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                    • Re: Formal submission of Xtables2, Jan Engelhardt
                      • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                        • Re: Formal submission of Xtables2, Jan Engelhardt
                          • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                            • Re: Formal submission of Xtables2, Maciej Żenczykowski
                            • Re: Formal submission of Xtables2, Jan Engelhardt
                              • Re: Formal submission of Xtables2, Pablo Neira Ayuso
                                • Re: Formal submission of Xtables2, Jan Engelhardt
                                  • Re: Formal submission of Xtables2, Jozsef Kadlecsik
                                    • Re: Formal submission of Xtables2, Jan Engelhardt
                                    • Re: Formal submission of Xtables2, David Miller
    • Message not available
      • Re: Formal submission of Xtables2, Pablo Neira Ayuso
• [PATCH v2] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Andrew Collins
  • Re: [PATCH v2] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Jozsef Kadlecsik
    • Re: [PATCH v2] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Pablo Neira Ayuso
• [PATCH] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Andrew Collins
  • Re: [PATCH] netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE, Andrew Collins
• [PATCH 00/11] netfilter: nf_tables: small cleanups and netlink fixes, kaber
  • [PATCH 02/11] netfilter: nf_tables: revert commit 2a3c360f, kaber
  • [PATCH 01/11] netfilter: nf_tables: rename pid variables to portid, kaber
  • [PATCH 03/11] netfilter: nf_tables: move hgenerator from chain to table, kaber
  • [PATCH 04/11] netfilter: nf_tables: move policy to struct nft_base_chain, kaber
  • [PATCH 05/11] netfilter: nf_tables: send notifications for base chain policy changes, kaber
  • [PATCH 07/11] netfilter: nf_tables: fix invalid event type in nf_tables_getrule(), kaber
  • [PATCH 09/11] netfilter: nf_tables: return error for rule change request, kaber
  • [PATCH 11/11] netfilter: nf_tables: include NLM_F_APPEND/NLM_F_REPLACE flags in rule notification, kaber
  • [PATCH 10/11] netfilter: nf_tables: return error for NLM_F_REPLACE without rule handle, kaber
  • [PATCH 06/11] netfilter: nf_tables: introduce chain handles and fix chain rename, kaber
  • [PATCH 08/11] netfilter: nf_tables: remove ability to specify handles for new rules, kaber
  • Re: [PATCH 00/11] netfilter: nf_tables: small cleanups and netlink fixes, Pablo Neira Ayuso
• NET development closed..., David Miller
• [PATCH] xt_hashlimit fix BUG(), Vitaly E. Lavrov
• [PATCH] xt_recent fix BUG(), Vitaly E. Lavrov
  • Re: [PATCH] xt_recent fix BUG(), Pablo Neira Ayuso
• [PATCH] netfilter: xt_CT: fix crash while destroy ct templates, pablo
• [PATCH 2/2] net: remove obsolete simple_strto<foo>, Abhijit Pawar
  • Re: [PATCH 2/2] net: remove obsolete simple_strto<foo>, David Miller