Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH 0/7] ipset patches against net-next-2.6/nf-next-2.6, updated
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/3] ipset patches against net-2.6/nf-2.6, updated
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: ipset: fix ip_set_flush return code
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: ipset: Use proper timeout value to jiffies conversion
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/3] netfilter: ipset: remove unused variable from type_pf_tdel()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 10/13] libxt_rateest: avoid optional arguments
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 10/13] libxt_rateest: avoid optional arguments
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: The glorious NFCT "none" helper
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Force socket error on iptables reject with icmp semantics?
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 10/13] libxt_rateest: avoid optional arguments
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables release coming up
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables release coming up
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/10] libxtables: make multiint parser have greater range
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/10] libxtables: use uintmax for xtables_strtoul
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/10] libxtables: more detailed error message on multi-int parsing
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/10] libip6t_rt: restore --rt-type storing
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/10] libxt_u32: --u32 option is required
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/10] libxt_time: remove --localtz option
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/10] doc: remove redundant .IP calls in libxt_time
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/10] doc: use .IP list for TCPMSS
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/10] libxt_time: --utc and --localtz are mutually exclusive
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/10] libxt_time: always ignore libc timezone
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Option parsing fixes (t-10)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Force socket error on iptables reject with icmp semantics?
  • From: JP Abgrall <jpa@xxxxxxxxxx>
• Re: The glorious NFCT "none" helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: The glorious NFCT "none" helper
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: The glorious NFCT "none" helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/13] libxt_ipvs: restore network-byte order
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 12/13] libxt_rateest: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/13] libxt_rateest: fix rateest save operation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/13] libxt_rateest: avoid optional arguments
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/13] doc: clarify that -p all is a special keyword only
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/13] doc: make usage of libxt_rateest more obvious
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/13] doc: add some coded option examples to libxt_hashlimit
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/13] libxt_rateest: streamline case display of units
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/13] libxtables: check for negative numbers in xtables_strtou*
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/13] libxt_quota: make sure uint64 is not truncated
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/13] libxt_quota: readd missing XTOPT_PUT request
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/13] libipt_REDIRECT: "--to-ports" is not mandatory
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/13] libxtables: retract _NE types and use a flag instead
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• option parsing, run 9
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables release coming up
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: The glorious NFCT "none" helper
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] libxt_devgroup: actually set XT_DEVGROUP_OPT_???GROUP flags
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Guided option parser run 8
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] xt_AUDIT.c: remove ipv6 dependencies
  • From: Thomas Graf <tgraf@xxxxxxxxxx>
• Re: [PATCH] xt_AUDIT.c: remove ipv6 dependencies
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [PATCH] xt_AUDIT.c: remove ipv6 dependencies
  • From: Thomas Graf <tgraf@xxxxxxxxxx>
• Re: [PATCH] xt_AUDIT.c: remove ipv6 dependencies
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] xt_AUDIT.c: remove ipv6 dependencies
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 6.5 released
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Kernel panic nf_nat_setup_info+0x5b3/0x6e0
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_ftp: prevent integer overflows in get_port()
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• [PATCH] xt_AUDIT.c: add SELinux context support to AUDIT target
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• net-next-2.6 merged...
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 2/2] netfilter: ipset: remove unused variable from type_pf_tdel()
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: ipset: Support range for IPv4 at adding/deleting elements for hash:*net* types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 5/6] netfilter: ipset: Set type support with multiple revisions added
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/6] netfilter: ipset: Timeout can be modified for already added elements
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/6] netfilter: ipset: Options and flags support added to the kernel API
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: ipset: Fix adding ranges to hash types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: ipset: Support listing setnames and headers too
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/6] ipset patches against net-next-2.6/nf-next-2.6
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: ipset: remove unused variable from type_pf_tdel()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: ipset: Use proper timeout value to jiffies conversion
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/2] ipset patches against net-2.6/nf-2.6
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Porting libnetfilter_queue to Android
  • From: Shruti Sanadhya <shruti.sanadhya@xxxxxxxxxxxxx>
• Re: xtoptions + quota: parse and store 64bit values?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipset return value in type_pf_tdel()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH v3 resend] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones
  • From: Kevin Cernekee <cernekee@xxxxxxxxx>
• [PATCH] Add SELinux context support to AUDIT target
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• ipset return value in type_pf_tdel()
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] netfilter: Fix several warnings in compat_mtw_from_user().
  • From: David Miller <davem@xxxxxxxxxxxxx>
• net-2.6
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next-2.6] netfilter: add more values to enum ip_conntrack_info
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH net-next-2.6] netfilter: add more values to enum ip_conntrack_info
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] IPVS: Free resources on module removal
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: UDP DNAT to a broadcast address
  • From: Detlev Zundel <dzu@xxxxxxx>
• xtoptions + quota: parse and store 64bit values?
  • From: JP Abgrall <jpa@xxxxxxxxxx>
• [PATCH] netfilter: the "none" conntrack helper module
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• The glorious NFCT "none" helper
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: provide config option to disable ancient procfs parts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] libipt_REDIRECT: "--to-ports" is not mandatory
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: UDP DNAT to a broadcast address
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] libxt_devgroup: actually set XT_DEVGROUP_OPT_???GROUP flags
  • From: Lutz Jaenicke <ljaenicke@xxxxxxxxxxxxxx>
• UDP DNAT to a broadcast address
  • From: Detlev Zundel <dzu@xxxxxxx>
• Re: [PATCH 07/11] libipt_DNAT: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 07/11] libipt_DNAT: use guided option parser
  • From: Lutz Jaenicke <ljaenicke@xxxxxxxxxxxxxx>
• Re: [PATCH 07/11] libipt_DNAT: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 8/9] libxt_udp: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 07/11] libipt_DNAT: use guided option parser
  • From: Lutz Jaenicke <ljaenicke@xxxxxxxxxxxxxx>
• [PATCH] libipt_REDIRECT: "--to-ports" is not mandatory
  • From: Lutz Jaenicke <ljaenicke@xxxxxxxxxxxxxx>
• Re: [PATCH 8/9] libxt_udp: use guided option parser
  • From: Lutz Jaenicke <ljaenicke@xxxxxxxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Sam Roberts <vieuxtech@xxxxxxxxx>
• Re: [PATCH 0/2] netfilter: SIP conntrack fixes
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: netfilter 03/03: nf_queue: fix NF_STOLEN skb leak
  • From: Ondřej Slanina <oslanina@xxxxxxxxx>
• Re: ipset timeout problem
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset timeout problem
  • From: Lutfi <lutfio@xxxxxxxxxxx>
• About IPset 6.2 Time out problem
  • From: Lutfi <lutfio@xxxxxxxxxxx>
• [PATCH 2/2] netfilter: nf_ct_sip: fix SDP parsing in TCP SIP messages for some Cisco phones
  • From: kaber@xxxxxxxxx
• [PATCH 0/2] netfilter: SIP conntrack fixes
  • From: kaber@xxxxxxxxx
• [PATCH 1/2] netfilter: nf_ct_sip: validate Content-Length in TCP SIP messages
  • From: kaber@xxxxxxxxx
• Re: [PATCH] netfilter: netfilter fixes for 2.6.39-rc7 (2nd round)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 2/8] netfilter: fix ebtables compat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: netfilter fixes for 2.6.39-rc7 (2nd round)
  • From: pablo@xxxxxxxxxxxxx
• [PATCH] IPVS: fix netns if reading ip_vs_* procfs entries
  • From: pablo@xxxxxxxxxxxxx
• Re: [PATCH 1/1] IPVS: seq_release_net should be used.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] ipset 6.5 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/1] IPVS: seq_release_net should be used.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• Re: [PATCH] libnetfilter_conntrack: Add nfct_destroy() to all examples in utils
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] IPVS: seq_release_net should be used.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/1] IPVS: seq_release_net should be used.
  • From: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
• [PATCH 12/12] libip6t_rt: rt-0-not-strict should take no arg
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/12] libxt_conntrack: resolve erroneous rev-2 port range message
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/12] libxt_conntrack: fix assignment to wrong member
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/12] libxt_conntrack: correct printed module name
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/12] libipt_[SD]NAT: avoid false error about multiple destinations specified
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/12] libipt_[SD]NAT: flag up module name on error
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/12] libxtables: collapse double protocol parsing
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/12] libxt_policy: use XTTYPE_PROTOCOL type
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/12] libxtables: avoid running into .also checks when option not used
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/12] libxt_policy: option table fixes, improved error tracking
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/12] src: combine default_command functions
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/12] src: replace old IP*T_ALIGN macros
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Guided option parser run 8
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: guided option parser, run 7
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/8] netfilter: IPv6: initialize TOS field in REJECT target module
  • From: Fernando Luis Vázquez Cao <fernando@xxxxxxxxxxxxx>
• Re: [PATCH 6/8] netfilter: IPv6: initialize TOS field in REJECT target module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: GIT net-2.6 rolled back 8 commits...
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: GIT net-2.6 rolled back 8 commits...
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 06/11] libxt_iprange: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/11] libipt_SAME: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Should conntrack track *everything* into some "connection"?
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Fixes to opts, docs
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 10/11] libipt_REDIRECT: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/11] libipt_MASQUERADE: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/11] libipt_DNAT: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: guided option parser, run 6
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 6/8] netfilter: IPv6: initialize TOS field in REJECT target module
  • From: Fernando Luis Vázquez Cao <fernando@xxxxxxxxxxxxx>
• [PATCH 05/11] libipt_CLUSTERIP: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/11] libxt_mac: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/11] libip6t_rt: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/11] libip6t_mh: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/11] libxtables: XTTYPE_ETHERMAC support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• guided option parser, run 7
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/11] libipt_SNAT: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: GIT net-2.6 rolled back 8 commits...
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• GIT net-2.6 rolled back 8 commits...
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [ANNOUNCE] IPTV-Analyzer project released v0.9.0
  • From: Jesper Dangaard Brouer <hawk@xxxxxxx>
• Re: [PATCH 0/8] netfilter: netfilter fixes for 2.6.39-rc7
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 8/8] netfilter: revert a2361c8735e07322023aedc36e4938b35af31eb0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: revert a2361c8735e07322023aedc36e4938b35af31eb0
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 7/8] netfilter: IPv6: fix DSCP mangle code
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 6/8] netfilter: IPv6: initialize TOS field in REJECT target module
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 5/8] IPVS: init and cleanup restructuring
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 4/8] IPVS: Change of socket usage to enable name space exit.
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 3/8] netfilter: ebtables: only call xt_compat_add_offset once per rule
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 2/8] netfilter: fix ebtables compat support
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 1/8] netfilter: ctnetlink: fix timestamp support for new conntracks
  • From: pablo@xxxxxxxxxxxxx
• [PATCH 0/8] netfilter: netfilter fixes for 2.6.39-rc7
  • From: pablo@xxxxxxxxxxxxx
• Re: [PATCH 16/17] libxt_ipvs: use guided option parser
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 17/17] libxt_conntrack: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 16/17] libxt_ipvs: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 14/17] libxt_limit: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 15/17] libxtables: XTTYPE_PROTOCOL support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 12/17] libxt_multiport: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 13/17] libipt_NETMAP: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/17] libxt_osf: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/17] libxt_owner: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/17] libxtables: XTTYPE_HOSTMASK support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/17] libxt_policy: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/17] libxt_hashlimit: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/17] libxtables: XTTYPE_PLEN support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/17] libxtables: flag invalid uses of XTOPT_PUT
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/17] libxtables: do not overlay addr and mask parts, and cleanup
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/17] libxt_recent: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/17] libxt_connlimit: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/17] libxtables: support for XTTYPE_PLENMASK
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• guided option parser, run 6
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] doc: S/DNAT allows to omit IP addresses
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/2] iptables: fix the dead loop when meeting unknown options
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Fixes to opts, docs
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: guided option parser, run 5
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 12/13] libxt_IDLETIMER: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 13/13] libxt_NFLOG: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/13] libxt_statistic: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/13] libxtables: XTTYPE_DOUBLE support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/13] libxt_statistic: increase precision on create and dump
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/13] libxt_statistic: streamline and document possible placement of negation
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/13] extensions: const annotations
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/13] libxtables: output name of extension on rev detect failure
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/13] libxt_owner: remove ifdef IPT_COMM_OWNER
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/13] extensions: remove bogus use of XT_GETOPT_TABLEEND
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/13] libxt_u32: add missing call to xtables_option_parse
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/13] libxtables: fix assignment in wrong offset (XTTYPE_UINT*RC)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/13] libxt_tos: add inversion support back again
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• guided option parser, run 5
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS (take III)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: iptables: guided option parser, run 4
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 2/2] IPVS: init and cleanup restructuring
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/2] IPVS: Change of socket usage to enable name space exit.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-2.6] IPVS (take III)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] Fix reversed logic when implictly loading protocol matches
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] Fix reversed logic when implictly loading protocol matches
  • From: Lutz Jaenicke <ljaenicke@xxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Implement RFC 1123 for FTP conntrack
  • From: Jeff Mahoney <jeffm@xxxxxxxx>
• Re: [PATCH] netfilter: Implement RFC 1123 for FTP conntrack
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] netfilter: Implement RFC 1123 for FTP conntrack
  • From: Jeff Mahoney <jeffm@xxxxxxxx>
• Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook"
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: ip6tables breaks dnssec?
  • From: Leo Baltus <Leo.Baltus@xxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook"
  • From: Samir Bellabes <sam@xxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Fernando Luis Vázquez Cao <fernando@xxxxxxxxxxxxx>
• Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook"
  • From: Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
• Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook"
  • From: Paul Moore <paul.moore@xxxxxx>
• [RFC v4 08/11] snet: introduce snet_ticket
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 00/11] snet: Security for NETwork syscalls
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 03/11] snet: introduce snet_core
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 04/11] snet: introduce snet_event
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 01/11] lsm: add security_socket_closed()
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 11/11] snet: introduce security/snet, Makefile and Kconfig changes
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 09/11] snet: introduce snet_utils
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 07/11] snet: introduce snet_verdict
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 10/11] snet: introduce snet_stats
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 02/11] lsm: reintroduce security_socket_post_accept()
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 05/11] snet: introduce snet_hooks
  • From: y@xxxxxxxxxxxxxxx
• [RFC v4 06/11] snet: introduce snet_netlink
  • From: y@xxxxxxxxxxxxxxx
• Re: Feature request: ip_set for non-modular kernel
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Feature request: ip_set for non-modular kernel
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: iptables domain match
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: iptables domain match
  • From: tingwei liu <tingw.liu@xxxxxxxxx>
• Netfilter Module for NAT IVI available
  • From: Pierre Rondou <prondou@xxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_ftp: prevent integer overflows in get_port()
  • From: Mansour Moufid <mansourmoufid@xxxxxxxxx>
• Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook"
  • From: Samir Bellabes <sam@xxxxxxxxx>
• Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook"
  • From: Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS (Take II)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook"
  • From: Paul Moore <paul.moore@xxxxxx>
• Re: [RFC v3 00/10] snet: Security for NETwork syscalls
  • From: Samir Bellabes <sam@xxxxxxxxx>
• Re: [RFC v3 00/10] snet: Security for NETwork syscalls
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [RFC v3 01/10] lsm: add security_socket_closed()
  • From: Samir Bellabes <sam@xxxxxxxxx>
• Re: [RFC v3 01/10] lsm: add security_socket_closed()
  • From: Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
• [RFC v3 05/10] snet: introduce snet_hooks
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 06/10] snet: introduce snet_netlink
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 04/10] snet: introduce snet_event
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 03/10] snet: introduce snet_core
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 01/10] lsm: add security_socket_closed()
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 07/10] snet: introduce snet_verdict
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 02/10] Revert "lsm: Remove the socket_post_accept() hook"
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 00/10] snet: Security for NETwork syscalls
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 08/10] snet: introduce snet_ticket
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 10/10] snet: introduce security/snet, Makefile and Kconfig changes
  • From: Samir Bellabes <sam@xxxxxxxxx>
• [RFC v3 09/10] snet: introduce snet_utils
  • From: Samir Bellabes <sam@xxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS (Take II)
  • From: "Hans Schillstrom" <hans@xxxxxxxxxxxxxxx>
• iptables domain match
  • From: tingwei liu <tingw.liu@xxxxxxxxx>
• [PATCH 2/2] IPVS: init and cleanup restructuring.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/2] IPVS: Change of socket usage to enable name space exit.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-2.6] IPVS (Take II)
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Are pre- postrouting states device independent ?
  • From: Falk Nisius <f.nisius@xxxxxxxxxxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/2] IPVS: Change of socket usage to enable name space exit.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 2/2] IPVS: labels at pos 0
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Re: [v4 PATCH 1/6] IPVS: Change of socket usage to enable name space exit.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Re: [v4 PATCH 1/6] IPVS: Change of socket usage to enable name space exit.
  • From: "Hans Schillstrom" <hans@xxxxxxxxxxxxxxx>
• Re: [v4 PATCH 1/6] IPVS: Change of socket usage to enable name space exit.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: Are pre- postrouting states device independent ?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Are pre- postrouting states device independent ?
  • From: Falk Nisius <f.nisius@xxxxxxxxxxxxxxxxx>
• Re: [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Julian Anastasov <ja@xxxxxx>
• [v4 PATCH 5/6] IPVS: remove unused init and cleanup functions.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v4 PATCH 4/6] IPVS: rename of netns init and cleanup functions.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v4 PATCH 2/6] IPVS: labels at pos 0
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v4 PATCH 3/6] IPVS: init and cleanup restructuring.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v4 PATCH 6/6] IPVS: add debug functions
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v4 PATCH 1/6] IPVS: Change of socket usage to enable name space exit.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 9/9] libxt_dccp: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 8/9] libxt_udp: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 7/9] libxtables: XTTYPE_PORTRC support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 6/9] extensions: remove unused TOS code
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 5/9] libxt_tos: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 4/9] libxt_TOS: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 3/9] xtoptions: respect return value in xtables_getportbyname
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/9] libxt_TEE: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 1/9] build: bump libxtables ABI version
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• iptables: guided option parser, run 4
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• RE: [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Hans Schillström <hans.schillstrom@xxxxxxxxxxxx>
• Re: Re: [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: "Hans Schillstrom" <hans@xxxxxxxxxxxxxxx>
• Re: [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v3 PATCH 6/6] IPVS: add debug functions
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v3 PATCH 1/6] IPVS: Change of socket usage to enable name space exit.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v3 PATCH 3/6] IPVS: init and cleanup restructuring.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v3 PATCH 4/6] IPVS: rename of netns init and cleanup functions.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v3 PATCH 2/6] IPVS: labels at pos 0
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v3 PATCH 5/6] IPVS: remove unused init and cleanup functions.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• Re: "xt_conntrack: warn about use in raw table" and lo packets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ip6tables breaks dnssec?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ip6tables breaks dnssec?
  • From: Stephen Clark <sclark46@xxxxxxxxxxxxx>
• Re: ip6tables breaks dnssec?
  • From: Ulrich Weber <ulrich.weber@xxxxxxxxxxxxxx>
• Re: ip6tables breaks dnssec?
  • From: Leo Baltus <Leo.Baltus@xxxxxxxxx>
• Re: ip6tables breaks dnssec?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ip6tables breaks dnssec?
  • From: Leo Baltus <Leo.Baltus@xxxxxxxxx>
• Re: ip6tables breaks dnssec?
  • From: Ulrich Weber <ulrich.weber@xxxxxxxxxxxxxx>
• Re: ip6tables breaks dnssec?
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• ip6tables breaks dnssec?
  • From: Leo Baltus <Leo.Baltus@xxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx>
• Re: kernel source code files with same name (different case) xt_*
  • From: David Miller <davem@xxxxxxxxxxxxx>
• kernel source code files with same name (different case) xt_*
  • From: Jon Grant <jg@xxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: "xt_conntrack: warn about use in raw table" and lo packets
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Re: [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Julian Anastasov <ja@xxxxxx>
• Re: Re: [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: "Hans Schillstrom" <hans@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: initialize TOS field in REJECT target module
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: fix DSCP mangle code
  • From: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx>
• RE: [ANNOUNCE] ipset 6.4 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter/IPv6: fix DSCP mangle code
  • From: David Miller <davem@xxxxxxxxxxxxx>
• RE: [ANNOUNCE] ipset 6.4 released
  • From: Thomas Backlund <tmb@xxxxxxxxxx>
• netfilter: provide config option to disable ancient procfs parts
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• "xt_conntrack: warn about use in raw table" and lo packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Patches: don't call modprobe, ipv4/ipv6 flag support, xtables-multi unification.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: netfilter: xt_CT: provide info on why a rule was rejected
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ebtables: only call xt_compat_add_offset once per rule
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: fix timestamp support for new conntracks
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 4/6] IPVS: rename of netns init and cleanup functions.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 3/6] IPVS: init and cleanup restructuring.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 1/6] IPVS: Change of socket usage to enable name space exit.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 5/6] IPVS: remove unused init and cleanup functions.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [v2 PATCH 0/6] IPVS: init and cleanup.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 6/6] IPVS: add debug functions
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 2/6] IPVS: labels at pos 0
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: ctnetlink: fix timestamp support for new conntracks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] IPVS: init and cleanup restructuring.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• Re: [PATCH 3/3] IPVS: init and cleanup restructuring.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• Re: [PATCH 1/3] IPVS: Change of socket usage to enable name space exit.
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 3/3] IPVS: init and cleanup restructuring.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• Re: [PATCH 2/3] IPVS: Change of register_pernet_subsys to register_pernet_device
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH 1/3] IPVS: Change of socket usage to enable name space exit.
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• net-next-2.6.git merged
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 3/3] combine ip6?tables-multi into xtables-multi
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 2/3] Move common parts of libext{4,6}.a into libext.a
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 1/3] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Patches: don't call modprobe, ipv4/ipv6 flag support, xtables-multi unification.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH 3/3] IPVS: init and cleanup restructuring.
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 3/3] IPVS: init and cleanup restructuring.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 1/3] IPVS: Change of socket usage to enable name space exit.
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH 0/3] netfilter: netfilter fixes for 2.6.39-rc4
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/3] netfilter: netfilter update
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• [PATCH 1/3] IPVS: Change of socket usage to enable name space exit.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 2/3] IPVS: Change of register_pernet_subsys to register_pernet_device
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 3/3] IPVS: init and cleanup restructuring.
  • From: Hans Schillstrom <hans@xxxxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: ipset: bitmap:ip,mac type requires "src" for MAC
  • From: kaber@xxxxxxxxx
• [PATCH 3/3] netfilter: ipset: Fix the order of listing of sets
  • From: kaber@xxxxxxxxx
• [PATCH 0/3] netfilter: netfilter fixes for 2.6.39-rc4
  • From: kaber@xxxxxxxxx
• [PATCH 2/3] netfilter: ipset: set match and SET target fixes
  • From: kaber@xxxxxxxxx
• [PATCH 1/3] netfilter: get rid of atomic ops in fast path
  • From: kaber@xxxxxxxxx
• [PATCH 2/3] IPVS: combine consecutive #ifdef CONFIG_PROC_FS blocks
  • From: kaber@xxxxxxxxx
• [PATCH 0/3] netfilter: netfilter update
  • From: kaber@xxxxxxxxx
• [PATCH 3/3] netfilter: ipset: SCTP, UDPLITE support added
  • From: kaber@xxxxxxxxx
• Re: [PATCH 0/5] netfilter: ipset patches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: Fix the order of listing of sets
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ANNOUNCE] ipset 6.4 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH 5/5] add xtables-multi{32,64} recognition
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 1/1] netfilter: ipset: Fix the order of listing of sets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 5/5] add xtables-multi{32,64} recognition
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 2/5] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 5/5] add xtables-multi{32,64} recognition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/5] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH 5/5] add xtables-multi{32,64} recognition
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH 5/5] add xtables-multi{32,64} recognition
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/5] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] Don't load ip6?_tables module when already loaded.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] Don't load ip6?_tables module when already loaded.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH 1/5] Don't load ip6?_tables module when already loaded.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH 5/5] add xtables-multi{32,64} recognition
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 4/5] combine ip6?tables-multi into xtables-multi
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 3/5] Move common parts of libext{4,6}.a into libext.a
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 2/5] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 1/5] Don't load ip6?_tables module when already loaded.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Patches: don't call modprobe, ipv4/ipv6 flag support, xtables-multi unification.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH 0/5] netfilter: ipset patches
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Problem sending skb built from scratch with IPv6
  • From: Pierre Rondou <prondou@xxxxxxxxx>
• Re: [PATCH 0/5] netfilter: ipset patches
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: guided option parser, run 3
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• netfilter: xt_CT: provide info on why a rule was rejected
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] libnetfilter_conntrack: Add nfct_destroy() to all examples in utils
  • From: Andrew Beverley <andy@xxxxxxxxxxx>
• Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c
  • From: Simon Arlott <simon@xxxxxxxxxxx>
• Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c
  • From: Simon Arlott <simon@xxxxxxxxxxx>
• Defining and parsing SNAT and DNAT options
  • From: Terry Moës <T.Moes@xxxxxxxxxxxxxxxxx>
• Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: BUG: unable to handle kernel NULL pointer dereference at 000002c0 / IP: [<c04c70f2>] in6_dev_finish_destroy+0x35/0x8c
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• SNAT in NF_INET_PRE_ROUTING not working on kernel 2.6.35
  • From: Janis Dzerve <janisdz2@xxxxxxxxx>
• [PATCH] Move common parts of libext{4,6}.a into libext.a
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH] Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}.
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH] iptables: fix the dead loop when meeting unknown options
  • From: Changli Gao <xiaosuo@xxxxxxxxx>
• Re: [PATCH] iptables: fix the dead loop when meeting unknown options
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: How to get access to NAT info from userland
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: How to get access to NAT info from userland
  • From: Brian G <unixman83@xxxxxxxxx>
• Re: [PATCH] xtables-addon: Remove recursive function calls
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: How to get access to NAT info from userland
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Writing a mangle TARGET for iptables, questions about fragments, checksums
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/5] netfilter: ipset: Timeout can be modified for already added elements
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: ipset: references are protected by rwlock instead of mutex
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 5/5] netfilter: ipset: set match and SET target fixes
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: ipset: list:set timeout variant fixes
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 4/5] netfilter: ipset: bitmap:ip,mac type requires "src" for MAC
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/5] netfilter: ipset patches
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• [PATCH 02/26] libxt_MARK: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/26] libxt_CONNMARK: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 14/26] libxt_connbytes: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/26] libxt_tcpmss: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 25/26] libxt_TPROXY: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 26/26] libipt_ULOG: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 23/26] libxtables: XTTYPE_ONEHOST support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 24/26] libxtables: XTTYPE_PORT support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 22/26] libip[6]t_LOG: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 20/26] libxt_string: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 21/26] libxtables: XTTYPE_SYSLOGLEVEL support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 19/26] libxtables: pass struct xt_entry_{match,target} to x6 parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 18/26] libxt_TCPMSS: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 17/26] libxt_NFQUEUE: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 16/26] libxt_CT: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 15/26] libxtables: XTTYPE_UINT16 support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 13/26] libxtables: XTTYPE_UINT64RC support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/26] libxt_length: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 12/26] libxtables: XTTYPE_UINT8RC support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/26] libxt_devgroup: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/26] libxtables: XTTYPE_UINT16RC support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/26] libipt_realm: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/26] libxtables: XTTYPE_UINT64 support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/26] libxtables: linked-list name<->id map
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/26] libxt_quota: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/26] libxtables: XTTYPE_MARKMASK32 support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• guided option parser, run 3
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter: ipset: Timeout can be modified for already added elements
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: ipset: SCTP, UDPLITE support added
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] netfilter: ipset: set match and SET target fixes
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/3] netfilter: ipset: Whitespace fixes: some space before tab slipped in.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 1/3] netfilter: ipset: bitmap:ip,mac type requires "src" for MAC
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: guided option parser, run 2
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 0/2] rework of userspace expectation support
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] netfilter: nf_ct_expect: rework userspace expectation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: CT: allow to set userspace helper status flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] rework of userspace expectation support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Netfilter Hook and Multiqueue?
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Netfilter Hook and Multiqueue?
  • From: Justin Yaple <yaplej@xxxxxxxxx>
• Re: fix for userspace expectations
  • From: Sam Roberts <vieuxtech@xxxxxxxxx>
• [PATCH 28/28] libxt_u32: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 27/28] libxt_time: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 25/28] libxt_pkttype: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 24/28] libxt_physdev: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 26/28] libxt_state: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 23/28] libxt_helper: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 22/28] libxt_comment: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 21/28] libxt_TCPOPTSTRIP: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 20/28] libxt_SECMARK: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 18/28] libxt_DSCP: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 19/28] libxt_LED: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 17/28] libxt_CLASSIFY: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 16/28] libxt_AUDIT: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 15/28] libipt_addrtype: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 14/28] libipt_ECN: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 13/28] libip6t_ipv6header: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 12/28] libip[6]t_icmp: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 11/28] libip6t_hbh: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 10/28] libip6t_dst: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/28] libip[6]t_REJECT: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/28] libxtables: XTTYPE_STRING support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/28] libxt_esp: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/28] libip6t_frag: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/28] libip[6]t_ah: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/28] libxtables: XTTYPE_UINT32RC support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/28] libip[6]t_hl: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/28] libip[6]t_HL: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/28] libxtables: XTTYPE_UINT8 support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• guided option parser, run 2
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Guided option parser
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: One documentation fix
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: xtables-addons: pknock extension crashes the kernel
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipset-6.3 unexpected htable order
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset-6.2 testsuite failure
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset-6.3 unexpected htable order
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipt_NETFLOW and xtables-addons
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipset-6.2 testsuite failure
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: ipset-6.2 testsuite failure
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset-6.2 testsuite failure
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [ANNOUNCE] ipset 6.3 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset issues in 2.6.39-rc2
  • From: Lennert Buytenhek <buytenh@xxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: ipset issues in 2.6.39-rc2
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/3] netfilter: ipset: bitmap:ip,mac type requires "src" for MAC
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/3] netfilter: ipset: fixes
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: ipset: set match and SET target fixes
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 2/3] netfilter: ipset: Whitespace fixes: some space before tab slipped in.
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset issues in 2.6.39-rc2
  • From: Lennert Buytenhek <buytenh@xxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: Performance issue due to constant "modprobes"
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Performance issue due to constant "modprobes"
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• Re: ipset-6.2 testsuite failure
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: ipset-6.2 testsuite failure
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• ipset-6.2 testsuite failure
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 2/2] netfilter: ipset: Timeout can be modified for already added elements
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: ipset: SCTP, UDPLITE support added
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 0/2] netfilter: ipset: new features
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: ebtables: only call xt_compat_add_offset once per rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 0/8] netfilter: netfilter fixes for 2.6.39-rc1
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: dann frazier <dannf@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: dann frazier <dannf@xxxxxxxxx>
• Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 10/10] libxt_cluster: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 09/10] libxtables: min-max option support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 08/10] libxt_cpu: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 07/10] libxtables: XTTYPE_UINT32 support
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 06/10] libxt_CONNSECMARK: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 05/10] libxtables: provide better final_check
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 04/10] libxt_socket: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 03/10] libxt_CHECKSUM: use guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 02/10] libxtables: guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH 01/10] extensions: add missing checks for specific flags (2)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Guided option parser
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] doc: avoid duplicate entries in manpage
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• One documentation fix
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] combine ip6?tables-multi into xtables-multi
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: dann frazier <dannf@xxxxxxxxx>
• Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in
  • From: KOVACS Krisztian <hidden@xxxxxxxxxx>
• [PATCH 0/8] netfilter: netfilter fixes for 2.6.39-rc1
  • From: kaber@xxxxxxxxx
• [PATCH 1/8] netfilter: ipset: list:set timeout variant fixes
  • From: kaber@xxxxxxxxx
• [PATCH 5/8] netfilter: af_info: add network namespace parameter to route hook
  • From: kaber@xxxxxxxxx
• [PATCH 7/8] netfilter: xt_addrtype: replace rt6_lookup with nf_afinfo->route
  • From: kaber@xxxxxxxxx
• [PATCH 2/8] netfilter: ipset: references are protected by rwlock instead of mutex
  • From: kaber@xxxxxxxxx
• [PATCH 8/8] netfilter: xt_conntrack: fix inverted conntrack direction test
  • From: kaber@xxxxxxxxx
• [PATCH 6/8] netfilter: af_info: add 'strict' parameter to limit lookup to .oif
  • From: kaber@xxxxxxxxx
• [PATCH 3/8] netfilter: h323: bug in parsing of ASN1 SEQOF field
  • From: kaber@xxxxxxxxx
• [PATCH 4/8] IPVS: fix NULL ptr dereference in ip_vs_ctl.c ip_vs_genl_dump_daemons()
  • From: kaber@xxxxxxxxx
• Re: Kernel panic nf_nat_setup_info+0x5b3/0x6e0
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] convert ip6?tables-multi to actually use their own header files
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] move 'int line' definition from ip6?tables.c into xtables.c
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [GIT PULL nf-next-2.6] IPVS
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] RFC - introduce xtables-multi
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• [PATCH] RFC - introduce xtables-multi
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH] convert ip6?tables-multi to actually use their own header files
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH] move 'int line' definition from ip6?tables.c into xtables.c
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH] IPVS: combine consecutive #ifdef CONFIG_PROC_FS blocks
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [GIT PULL nf-next-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [Announce] New IPVS GIT trees
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: dann frazier <dannf@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: shutdown oops in xt_compat_calc_jump
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 17/17] v6: rename do_command() to do_command6()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 17/17] v6: rename do_command() to do_command6()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_conntrack: fix inverted conntrack direction test
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH net-next-2.6] netfilter: get rid of atomic ops in fast path
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 3/3] netfilter: xt_addrtype: replace rt6_lookup with nf_afinfo->route
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 2/3] netfilter: af_info: add 'strict' parameter to limit lookup to .oif
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2 1/3] netfilter: af_info: add network namespace parameter to route hook
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [PATCH] netfilter: xt_conntrack: fix inverted conntrack direction test
  • From: Florian Westphal <fwestphal@xxxxxxxxxx>
• Re: [PATCH] netfilter: Fix build failure when ipv6 but xt_tproxy is built in
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 17/17] v6: rename do_command() to do_command6()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 16/17] v4: rename do_command() to do_command4()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 15/17] v6: rename print_rule() to print_rule6()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 14/17] v4: rename print_rule() to print_rule4()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 13/17] v6: rename delete_chain() to delete_chain6()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 12/17] v4: rename delete_chain() to delete_chain4()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 11/17] v6: rename flush_entries() to flush_entries6()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 10/17] v4: rename flush_entries() to flush_entries4()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 09/17] v6: rename for_each_chain() to for_each_chain6()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 08/17] v4: rename for_each_chain() to for_each_chain4()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 07/17] xtables.h: init_extensions() no longer exists.
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 06/17] v6: rename init_extensions() to init_extensions6()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 05/17] v4: rename init_extensions() to init_extensions4()
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 04/17] Delay (statically built) match/target initialization
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 03/17] xtables_ip6addr_to_numeric: fix typo in comment
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 01/17] man pages: allow underscores in match and target names
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] IPVS Bug, Null ptr in ip_vs_ctl.c ip_vs_genl_dump_daemons().
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [GIT PULL nf-2.6] IPVS
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH] netfilter: h323: bug in parsing of ASN1 SEQOF field
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 2/2] netfilter:ipset: References are protected by rwlock instead of mutex
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec)
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• Re: [PATCH v2] iptables: documentation for iptables and ip6tables "security" tables
  • From: Patrick McHardy <kaber@xxxxxxxxx>
• [ANN] Linux Security Summit 2011 - Announcement and CFP
  • From: James Morris <jmorris@xxxxxxxxx>
• [PATCH net-next-2.6] netfilter: get rid of atomic ops in fast path
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Writing a mangle TARGET for iptables, questions about fragments, checksums
  • From: Brian G <unixman83@xxxxxxxxx>
• Re: How to get access to NAT info from userland
  • From: Brian G <unixman83@xxxxxxxxx>
• How to get access to NAT info from userland
  • From: Brian G <unixman83@xxxxxxxxx>
• Re: [PATCH 05/17] v4: rename init_extensions() to init_extensions4()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec)
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH 05/17] v4: rename init_extensions() to init_extensions4()
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: [PATCH 02/17] mark newly opened fds as FD_CLOEXEC (close on exec)
  • From: Jan Engelhardt <jengelh@xxxxxxxxxx>
• Re: Kernel panic nf_nat_setup_info+0x5b3/0x6e0
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH 06/17] v6: rename init_extensions() to init_extensions6()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 17/17] v6: rename do_command() to do_command6()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 16/17] v4: rename do_command() to do_command4()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 15/17] v6: rename print_rule() to print_rule6()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 14/17] v4: rename print_rule() to print_rule4()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 13/17] v6: rename delete_chain() to delete_chain6()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 12/17] v4: rename delete_chain() to delete_chain4()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 11/17] v6: rename flush_entries() to flush_entries6()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 10/17] v4: rename flush_entries() to flush_entries4()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH 09/17] v6: rename for_each_chain() to for_each_chain6()
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>