Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH nf-next 7/9] netfilter: nft_meta: place prandom handling in a helper, (continued)
  • [PATCH nf-next 7/9] netfilter: nft_meta: place prandom handling in a helper, Florian Westphal
  • [PATCH nf-next 8/9] netfilter: nft_meta: place rtclassid handling in a helper, Florian Westphal
  • [PATCH nf-next 9/9] netfilter: nft_meta: add support for slave device ifindex matching, Florian Westphal
    • Re: [PATCH nf-next 9/9] netfilter: nft_meta: add support for slave device ifindex matching, David Ahern
      • Re: [PATCH nf-next 9/9] netfilter: nft_meta: add support for slave device ifindex matching, Florian Westphal
        • Re: [PATCH nf-next 9/9] netfilter: nft_meta: add support for slave device ifindex matching, David Ahern
  • Re: [PATCH nf-next 0/9] netfilter: nft_meta: add support for slave device matching, Pablo Neira Ayuso
• Re: trying to duplicate udp packets destined for port 67 to port 6767 on same host, Duncan Roe
• [nf PATCH] netfilter: nft_tproxy: Fix port selector on Big Endian, Phil Sutter
  • Re: [nf PATCH] netfilter: nft_tproxy: Fix port selector on Big Endian, Florian Westphal
    • Re: [nf PATCH] netfilter: nft_tproxy: Fix port selector on Big Endian, Phil Sutter
      • Re: [nf PATCH] netfilter: nft_tproxy: Fix port selector on Big Endian, Florian Westphal
        • Re: [nf PATCH] netfilter: nft_tproxy: Fix port selector on Big Endian, Pablo Neira Ayuso
  • Re: [nf PATCH] netfilter: nft_tproxy: Fix port selector on Big Endian, Máté Eckl
  • Re: [nf PATCH] netfilter: nft_tproxy: Fix port selector on Big Endian, Pablo Neira Ayuso
• [PATCH nft 00/11] complete typeof support, Pablo Neira Ayuso
  • [PATCH nft 02/11] exthdr: add exthdr_desc_id enum and use it, Pablo Neira Ayuso
  • [PATCH nft 04/11] socket: add parse and build userdata interface, Pablo Neira Ayuso
  • [PATCH nft 03/11] exthdr: add parse and build userdata interface, Pablo Neira Ayuso
  • [PATCH nft 05/11] osf: add parse and build userdata interface, Pablo Neira Ayuso
  • [PATCH nft 11/11] xfrm: add parse and build userdata interface, Pablo Neira Ayuso
  • [PATCH nft 07/11] numgen: add parse and build userdata interface, Pablo Neira Ayuso
  • [PATCH nft 09/11] rt: add parse and build userdata interface, Pablo Neira Ayuso
  • [PATCH nft 08/11] hash: add parse and build userdata interface, Pablo Neira Ayuso
  • [PATCH nft 01/11] meta: add parse and build userdata interface, Pablo Neira Ayuso
  • [PATCH nft 06/11] ct: add parse and build userdata interface, Pablo Neira Ayuso
  • [PATCH nft 10/11] fib: add parse and build userdata interface, Pablo Neira Ayuso
• [PATCH netfilter/iptables] Add new slavedev match extension, Martin Willi
  • [PATCH iptables] extensions: Add new xt_slavedev input interface match extension, Martin Willi
  • [PATCH nf-next] netfilter: xt_slavedev: Add new L3master slave input device match, Martin Willi
  • Re: [PATCH netfilter/iptables] Add new slavedev match extension, Martin Willi
    • Re: [PATCH netfilter/iptables] Add new slavedev match extension, Pablo Neira Ayuso
      • Re: [PATCH netfilter/iptables] Add new slavedev match extension, Martin Willi
• [PATCH nft v3 00/10] add typeof keyword, Florian Westphal
  • [PATCH nft v3 01/10] parser: add a helper for concat expression handling, Florian Westphal
  • [PATCH nft v3 02/10] src: store expr, not dtype to track data in sets, Florian Westphal
  • [PATCH nft v3 03/10] proto: add proto_desc_id enumeration, Florian Westphal
  • [PATCH nft v3 04/10] expr: add expr_ops_by_type(), Florian Westphal
  • [PATCH nft v3 05/10] parser: add typeof keyword for declarations, Florian Westphal
  • [PATCH nft v3 06/10] src: add "typeof" build/parse/print support, Florian Westphal
  • [PATCH nft v3 07/10] mnl: round up the map data size too, Florian Westphal
  • [PATCH nft v3 08/10] evaluate: print a hint about 'typeof' syntax on 0 keylen, Florian Westphal
  • [PATCH nft v3 09/10] doc: mention 'typeof' as alternative to 'type' keyword, Florian Westphal
  • [PATCH nft v3 10/10] tests: add typeof test cases, Florian Westphal
• [PATCH nf v2 0/3] netfilter: nf_flow_table_offload: something fixes, wenxu
  • [PATCH nf v2 2/3] netfilter: nf_flow_table_offload: check the status of dst_neigh, wenxu
  • [PATCH nf v2 1/3] netfilter: nf_flow_table_offload: fix dst_neigh lookup, wenxu
    • Re: [PATCH nf v2 1/3] netfilter: nf_flow_table_offload: fix dst_neigh lookup, Pablo Neira Ayuso
      • Re: [PATCH nf v2 1/3] netfilter: nf_flow_table_offload: fix dst_neigh lookup, Pablo Neira Ayuso
      • Re: [PATCH nf v2 1/3] netfilter: nf_flow_table_offload: fix dst_neigh lookup, wenxu
        • Re: [PATCH nf v2 1/3] netfilter: nf_flow_table_offload: fix dst_neigh lookup, Pablo Neira Ayuso
          • Re: [PATCH nf v2 1/3] netfilter: nf_flow_table_offload: fix dst_neigh lookup, wenxu
            • Re: [PATCH nf v2 1/3] netfilter: nf_flow_table_offload: fix dst_neigh lookup, Pablo Neira Ayuso
              • Re: [PATCH nf v2 1/3] netfilter: nf_flow_table_offload: fix dst_neigh lookup, wenxu
  • [PATCH nf v2 3/3] netfilter: nf_flow_table_offload: fix the nat port mangle., wenxu
    • Re: [PATCH nf v2 3/3] netfilter: nf_flow_table_offload: fix the nat port mangle., Pablo Neira Ayuso
• [PATCH nft,RFC] main: remove need to escape quotes, Pablo Neira Ayuso
  • Re: [PATCH nft,RFC] main: remove need to escape quotes, Phil Sutter
    • Re: [PATCH nft,RFC] main: remove need to escape quotes, Pablo Neira Ayuso
      • Re: [PATCH nft,RFC] main: remove need to escape quotes, Phil Sutter
• [PATCH libnftnl 1/2] udata: add NFTNL_UDATA_SET_*TYPEOF* definitions, Pablo Neira Ayuso
  • [PATCH libnftnl 2/2] udata: support for TLV attribute nesting, Pablo Neira Ayuso
• [PATCH nft 0/3] typeof incremental enhancements, Pablo Neira Ayuso
  • [PATCH nft 2/3] expr: add expr_ops_by_type(), Pablo Neira Ayuso
  • [PATCH nft 1/3] proto: add proto_desc_id enumeration, Pablo Neira Ayuso
  • [PATCH nft 3/3] expr: add parse and build userdata interface, Pablo Neira Ayuso
  • Re: [PATCH nft 0/3] typeof incremental enhancements, Florian Westphal
    • Re: [PATCH nft 0/3] typeof incremental enhancements, Pablo Neira Ayuso
      • Re: [PATCH nft 0/3] typeof incremental enhancements, Florian Westphal
        • Re: [PATCH nft 0/3] typeof incremental enhancements, Pablo Neira Ayuso
          • Re: [PATCH nft 0/3] typeof incremental enhancements, Florian Westphal
            • Re: [PATCH nft 0/3] typeof incremental enhancements, Pablo Neira Ayuso
              • Re: [PATCH nft 0/3] typeof incremental enhancements, Pablo Neira Ayuso
• Introduction to Community, Jaswanth Bommidi
• KASAN: vmalloc-out-of-bounds Read in compat_copy_entries, syzbot
  • [PATCH nf] netfilter: ebtables: compat: reject all padding in matches/watchers, Florian Westphal
    • Re: [PATCH nf] netfilter: ebtables: compat: reject all padding in matches/watchers, Pablo Neira Ayuso
  • Re: KASAN: vmalloc-out-of-bounds Read in compat_copy_entries, syzbot
• [PATCH nft v2 00/10] add typeof keyword, Florian Westphal
  • [PATCH nft v2 01/11] parser: add a helper for concat expression handling, Florian Westphal
  • [PATCH nft v2 02/11] libnftnl: split nft_ctx_new/free, Florian Westphal
  • [PATCH nft v2 04/11] src: parser: add syntax to provide size of variable-sized data types, Florian Westphal
  • [PATCH nft v2 05/11] parser: add typeof keyword for declarations, Florian Westphal
  • [PATCH nft v2 03/11] src: store expr, not dtype to track data in sets, Florian Westphal
  • [PATCH nft v2 06/11] src: add "typeof" print support, Florian Westphal
  • [PATCH nft v2 07/11] mnl: round up the map data size too, Florian Westphal
  • [PATCH nft v2 08/11] src: netlink: remove assertion, Florian Westphal
  • [PATCH nft v2 09/11] evaluate: print a hint about 'type,width' syntax on 0 keylen, Florian Westphal
  • [PATCH nft v2 10/11] doc: mention 'typeof' as alternative to 'type' keyword, Florian Westphal
  • [PATCH nft v2 11/11] tests: add typeof test cases, Florian Westphal
• [PATCH nft] main: enforce options before commands, Pablo Neira Ayuso
  • Re: [PATCH nft] main: enforce options before commands, Florian Westphal
    • Re: [PATCH nft] main: enforce options before commands, Phil Sutter
• [PATCHv2 nf-next 0/5] netfilter: nft_tunnel: a bunch of fixes and improvements, Xin Long
  • [PATCHv2 nf-next 1/5] netfilter: nft_tunnel: no need to call htons() when dumping ports, Xin Long
    • [PATCHv2 nf-next 2/5] netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy, Xin Long
      • [PATCHv2 nf-next 3/5] netfilter: nft_tunnel: also dump ERSPAN_VERSION, Xin Long
        • [PATCHv2 nf-next 4/5] netfilter: nft_tunnel: also dump OPTS_ERSPAN/VXLAN, Xin Long
          • [PATCHv2 nf-next 5/5] netfilter: nft_tunnel: add the missing nla_nest_cancel(), Xin Long
            • Re: [PATCHv2 nf-next 5/5] netfilter: nft_tunnel: add the missing nla_nest_cancel(), Simon Horman
          • Re: [PATCHv2 nf-next 4/5] netfilter: nft_tunnel: also dump OPTS_ERSPAN/VXLAN, Simon Horman
        • Re: [PATCHv2 nf-next 3/5] netfilter: nft_tunnel: also dump ERSPAN_VERSION, Simon Horman
      • Re: [PATCHv2 nf-next 2/5] netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy, Simon Horman
        • Re: [PATCHv2 nf-next 2/5] netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy, Pablo Neira Ayuso
          • Re: [PATCHv2 nf-next 2/5] netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy, Simon Horman
    • Re: [PATCHv2 nf-next 1/5] netfilter: nft_tunnel: no need to call htons() when dumping ports, Simon Horman
  • Re: [PATCHv2 nf-next 0/5] netfilter: nft_tunnel: a bunch of fixes and improvements, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: remove two export symbols, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: remove two export symbols, Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: extend flowtable test script with dnat rule, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: extend flowtable test script with dnat rule, Pablo Neira Ayuso
• [PATCH nft] main: allow for getopt parser from top-level scope only, Pablo Neira Ayuso
  • Re: [PATCH nft] main: allow for getopt parser from top-level scope only, Phil Sutter
    • Re: [PATCH nft] main: allow for getopt parser from top-level scope only, Jan Engelhardt
      • Re: [PATCH nft] main: allow for getopt parser from top-level scope only, Pablo Neira Ayuso
        • Re: [PATCH nft] main: allow for getopt parser from top-level scope only, Jan Engelhardt
    • Re: [PATCH nft] main: allow for getopt parser from top-level scope only, Pablo Neira Ayuso
      • Re: [PATCH nft] main: allow for getopt parser from top-level scope only, Phil Sutter
        • Re: [PATCH nft] main: allow for getopt parser from top-level scope only, Pablo Neira Ayuso
          • Re: [PATCH nft] main: allow for getopt parser from top-level scope only, Phil Sutter
• [PATCH nf 0/3] netfilter: nf_flow_table_offload: something fixes, wenxu
  • [PATCH nf 1/3] netfilter: nf_flow_table_offload: fix dst_neigh lookup for dnat, wenxu
  • [PATCH nf 2/3] netfilter: nf_flow_table_offload: check the status of dst_neigh, wenxu
  • [PATCH nf 3/3] netfilter: nf_flow_table_offload: fix the nat port mangle., wenxu
• [PATCH nf 0/4] netfilter: nf_flow_table_offload: something fixes, wenxu
  • [PATCH nf 2/4] netfilter: nf_flow_table_offload: check the status of dst_neigh, wenxu
  • [PATCH nf 4/4] netfilter: nf_flow_table_offload: fix the nat port mangle., wenxu
  • [PATCH nf 1/4] netfilter: nf_flow_table_offload: fix dst_neigh lookup, wenxu
  • [PATCH nf 3/4] netfilter: nf_flow_table_offload: fix miss dst_neigh_lookup for ipv6, wenxu
  • Re: [PATCH nf 0/4] netfilter: nf_flow_table_offload: something fixes, wenxu
• [PATCH libnetfilter_queue 1/2] src: doc: udp.c: rename 1 more formal pkt arg to pktb, Duncan Roe
  • [PATCH libnetfilter_queue 2/2] src: doc: Eliminate doxygen warnings from udp.c, Duncan Roe
    • Re: [PATCH libnetfilter_queue 2/2] src: doc: Eliminate doxygen warnings from udp.c, Pablo Neira Ayuso
  • Re: [PATCH libnetfilter_queue 1/2] src: doc: udp.c: rename 1 more formal pkt arg to pktb, Pablo Neira Ayuso
• [nft PATCH] doc: nft.8: Add BUGS section about command line parsing, Phil Sutter
• [PATCH] netfilter: nf_flow_table: fix big-endian integer overflow, Arnd Bergmann
  • Re: [PATCH] netfilter: nf_flow_table: fix big-endian integer overflow, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_flow_table: fix big-endian integer overflow, Pablo Neira Ayuso
• Re: KASAN: slab-out-of-bounds Read in bit_putcs, syzbot
• [PATCH libnetfilter_queue 0/1] New pktb_usebuf() function, Duncan Roe
  • [PATCH libnetfilter_queue 1/1] src: Add alternative function to pktb_alloc to avoid malloc / free overhead, Duncan Roe
  • Re: [PATCH libnetfilter_queue 0/1] New pktb_usebuf() function, Duncan Roe
  • Re: [PATCH libnetfilter_queue 0/1] New pktb_usebuf() function, Duncan Roe
  • [PATCH libnetfilter_queue v2 0/1] New pktb_make() function, Duncan Roe
    • Re: [PATCH libnetfilter_queue v2 0/1] New pktb_make() function, Pablo Neira Ayuso
      • Re: [PATCH libnetfilter_queue v2 0/1] New pktb_make() function, Duncan Roe
        • Re: [PATCH libnetfilter_queue v2 0/1] New pktb_make() function, Pablo Neira Ayuso
          • Re: [PATCH libnetfilter_queue v2 0/1] New pktb_make() function, Duncan Roe
      • Re: [PATCH libnetfilter_queue v2 0/1] New pktb_make() function, Duncan Roe
      • [PATCH libnetfilter_queue v2] src: Add faster alternatives to pktb_alloc(), Duncan Roe
        • Re: [PATCH libnetfilter_queue v2] src: Add faster alternatives to pktb_alloc(), Duncan Roe
        • Re: [PATCH libnetfilter_queue v2] src: Add faster alternatives to pktb_alloc(), Pablo Neira Ayuso
          • Re: [PATCH libnetfilter_queue v2] src: Add faster alternatives to pktb_alloc(), Duncan Roe
            • Re: [PATCH libnetfilter_queue v2] src: Add faster alternatives to pktb_alloc(), Duncan Roe
          • Re: [PATCH libnetfilter_queue v2] src: Add faster alternatives to pktb_alloc(), Duncan Roe
          • [PATCH libnetfilter_queue 0/1] src & doc: pktb_alloc2, Duncan Roe
          • [PATCH libnetfilter_queue 1/1] New faster pktb_alloc2 replaces pktb_alloc & pktb_free, Duncan Roe
  • [PATCH libnetfilter_queue v2 1/1] src: Add alternative function to pktb_alloc to avoid malloc / free overhead, Duncan Roe
• [nft PATCH] py: load the SONAME-versioned shared object, Arturo Borrero Gonzalez
  • Re: [nft PATCH] py: load the SONAME-versioned shared object, Phil Sutter
• [PATCH nf-next v3 0/4] netfilter: nf_flow_table_offload: support tunnel offload, wenxu
  • [PATCH nf-next v3 1/4] netfilter: nf_flow_table_offload: refactor nf_flow_table_offload_setup to support indir setup, wenxu
  • [PATCH nf-next v3 2/4] netfilter: nf_flow_table_offload: add indr block setup support, wenxu
  • [PATCH nf-next v3 3/4] netfilter: nf_flow_table_offload: add tunnel match offload support, wenxu
  • [PATCH nf-next v3 4/4] netfilter: nf_flow_table_offload: add tunnel encap/decap action offload support, wenxu
  • Re: [PATCH nf-next v3 0/4] netfilter: nf_flow_table_offload: support tunnel offload, wenxu
    • Re: [PATCH nf-next v3 0/4] netfilter: nf_flow_table_offload: support tunnel offload, wenxu
  • Re: [PATCH nf-next v3 0/4] netfilter: nf_flow_table_offload: support tunnel offload, wenxu
• [PATCH 00/17] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH 01/17] netfilter: ctnetlink: netns exit must wait for callbacks, Pablo Neira Ayuso
  • [PATCH 13/17] netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init(), Pablo Neira Ayuso
  • [PATCH 15/17] netfilter: nf_tables_offload: return EOPNOTSUPP if rule specifies no actions, Pablo Neira Ayuso
  • [PATCH 17/17] netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle(), Pablo Neira Ayuso
  • [PATCH 16/17] netfilter: bridge: make sure to pull arp header in br_nf_forward_arp(), Pablo Neira Ayuso
  • [PATCH 14/17] netfilter: nf_tables: skip module reference count bump on object updates, Pablo Neira Ayuso
  • [PATCH 08/17] selftests: netfilter: use randomized netns names, Pablo Neira Ayuso
  • [PATCH 12/17] netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END, Pablo Neira Ayuso
  • [PATCH 11/17] netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets, Pablo Neira Ayuso
  • [PATCH 10/17] netfilter: uapi: Avoid undefined left-shift in xt_sctp.h, Pablo Neira Ayuso
  • [PATCH 03/17] netfilter: nf_flow_table_offload: Fix block_cb tc_setup_type as TC_SETUP_CLSFLOWER, Pablo Neira Ayuso
  • [PATCH 05/17] netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clash, Pablo Neira Ayuso
  • [PATCH 09/17] netfilter: nf_queue: enqueue skbs with NULL dst, Pablo Neira Ayuso
  • [PATCH 07/17] netfilter: nf_tables_offload: Check for the NETDEV_UNREGISTER event, Pablo Neira Ayuso
  • [PATCH 04/17] netfilter: nf_flow_table_offload: Don't use offset uninitialized in flow_offload_port_{d,s}nat, Pablo Neira Ayuso
  • [PATCH 06/17] netfilter: nf_flow_table_offload: add IPv6 match description, Pablo Neira Ayuso
  • [PATCH 02/17] netfilter: nf_flow_table_offload: Fix block setup as TC_SETUP_FT cmd, Pablo Neira Ayuso
  • Re: [PATCH 00/17] Netfilter fixes for net, David Miller
• Re: KASAN: global-out-of-bounds Read in fb_pad_aligned_buffer, syzbot
• [PATCH net] net: flow_dissector: fix tcp flags dissection on big-endian, Pablo Neira Ayuso
  • Re: [PATCH net] net: flow_dissector: fix tcp flags dissection on big-endian, Pablo Neira Ayuso
    • Re: [PATCH net] net: flow_dissector: fix tcp flags dissection on big-endian, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle(), Pablo Neira Ayuso
• [PATCH libnetfilter_queue 1/2] src: doc: Update sample code to agree with documentation, Duncan Roe
  • [PATCH libnetfilter_queue 2/2] src: doc: Fully document available verdicts, Duncan Roe
    • Re: [PATCH libnetfilter_queue 2/2] src: doc: Fully document available verdicts, Pablo Neira Ayuso
  • Re: [PATCH libnetfilter_queue 1/2] src: doc: Update sample code to agree with documentation, Pablo Neira Ayuso
• [PATCH nftables] doc: Remove repeated paragraph and fix typo, nl6720
  • Re: [PATCH nftables] doc: Remove repeated paragraph and fix typo, Pablo Neira Ayuso
• [PATCH nf-next 0/7] netfilter: nft_tunnel: reinforce key opts support, Xin Long
  • [PATCH nf-next 1/7] netfilter: nft_tunnel: parse ERSPAN_VERSION attr as u8, Xin Long
    • [PATCH nf-next 2/7] netfilter: nft_tunnel: parse VXLAN_GBP attr as u32 in nft_tunnel, Xin Long
      • [PATCH nf-next 3/7] netfilter: nft_tunnel: no need to call htons() when dumping ports, Xin Long
        • [PATCH nf-next 4/7] netfilter: nft_tunnel: also dump ERSPAN_VERSION, Xin Long
          • [PATCH nf-next 5/7] netfilter: nft_tunnel: also dump OPTS_ERSPAN/VXLAN, Xin Long
            • [PATCH nf-next 6/7] netfilter: nft_tunnel: add the missing nla_nest_cancel(), Xin Long
              • [PATCH nf-next 7/7] netfilter: nft_tunnel: add support for geneve opts, Xin Long
              • Re: [PATCH nf-next 6/7] netfilter: nft_tunnel: add the missing nla_nest_cancel(), Pablo Neira Ayuso
            • Re: [PATCH nf-next 5/7] netfilter: nft_tunnel: also dump OPTS_ERSPAN/VXLAN, Pablo Neira Ayuso
          • Re: [PATCH nf-next 4/7] netfilter: nft_tunnel: also dump ERSPAN_VERSION, Pablo Neira Ayuso
        • Re: [PATCH nf-next 3/7] netfilter: nft_tunnel: no need to call htons() when dumping ports, Pablo Neira Ayuso
          • Re: [PATCH nf-next 3/7] netfilter: nft_tunnel: no need to call htons() when dumping ports, Pablo Neira Ayuso
            • Re: [PATCH nf-next 3/7] netfilter: nft_tunnel: no need to call htons() when dumping ports, Pablo Neira Ayuso
        • Re: [PATCH nf-next 3/7] netfilter: nft_tunnel: no need to call htons() when dumping ports, Pablo Neira Ayuso
      • Re: [PATCH nf-next 2/7] netfilter: nft_tunnel: parse VXLAN_GBP attr as u32 in nft_tunnel, Pablo Neira Ayuso
    • Re: [PATCH nf-next 1/7] netfilter: nft_tunnel: parse ERSPAN_VERSION attr as u8, Simon Horman
      • Re: [PATCH nf-next 1/7] netfilter: nft_tunnel: parse ERSPAN_VERSION attr as u8, Xin Long
        • Re: [PATCH nf-next 1/7] netfilter: nft_tunnel: parse ERSPAN_VERSION attr as u8, Simon Horman
          • Re: [PATCH nf-next 1/7] netfilter: nft_tunnel: parse ERSPAN_VERSION attr as u8, Pablo Neira Ayuso
    • Re: [PATCH nf-next 1/7] netfilter: nft_tunnel: parse ERSPAN_VERSION attr as u8, Pablo Neira Ayuso
      • Re: [PATCH nf-next 1/7] netfilter: nft_tunnel: parse ERSPAN_VERSION attr as u8, Xin Long
        • Re: [PATCH nf-next 1/7] netfilter: nft_tunnel: parse ERSPAN_VERSION attr as u8, Pablo Neira Ayuso
  • Re: [PATCH nf-next 0/7] netfilter: nft_tunnel: reinforce key opts support, Xin Long
  • Re: [PATCH nf-next 0/7] netfilter: nft_tunnel: reinforce key opts support, Xin Long
    • Re: [PATCH nf-next 0/7] netfilter: nft_tunnel: reinforce key opts support, Pablo Neira Ayuso
• RFC: libnetfilter_queue: nfq_udp_get_payload_len() gives wrong answer, Duncan Roe
  • Re: RFC: libnetfilter_queue: nfq_udp_get_payload_len() gives wrong answer, Pablo Neira Ayuso
    • [PATCH libnetfilter_queue] src: Fix value returned by nfq_udp_get_payload_len(), Duncan Roe
      • Re: [PATCH libnetfilter_queue] src: Fix value returned by nfq_udp_get_payload_len(), Pablo Neira Ayuso
• [PATCH netfilter] netfilter: bridge: make sure to pull arp header in br_nf_forward_arp(), Eric Dumazet
  • Re: [PATCH netfilter] netfilter: bridge: make sure to pull arp header in br_nf_forward_arp(), Florian Westphal
    • Re: [PATCH netfilter] netfilter: bridge: make sure to pull arp header in br_nf_forward_arp(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables_offload: return EOPNOTSUPP if rule specifies no actions, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: skip module reference count bump on object updates, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets, Pablo Neira Ayuso
• Re: KASAN: use-after-free Read in soft_cursor, syzbot
  • Re: KASAN: use-after-free Read in soft_cursor, Dmitry Vyukov
• [iptables PATCH 0/6] A series of covscan-indicated fixes, Phil Sutter
  • [iptables PATCH 4/6] libxtables: Avoid buffer overrun in xtables_compatible_revision(), Phil Sutter
  • [iptables PATCH 6/6] extensions: among: Check call to fstat(), Phil Sutter
  • [iptables PATCH 5/6] xtables-translate: Guard strcpy() call in xlate_ifname(), Phil Sutter
  • [iptables PATCH 3/6] extensions: cluster: Avoid undefined shift, Phil Sutter
  • [iptables PATCH 2/6] extensions: time: Avoid undefined shift, Phil Sutter
  • [iptables PATCH 1/6] xtables-restore: Avoid access of uninitialized data, Phil Sutter
  • Re: [iptables PATCH 0/6] A series of covscan-indicated fixes, Pablo Neira Ayuso
• [PATCH nft] segtree: don't remove nul-root element from interval set, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets, Phil Sutter
    • Re: [PATCH nf] netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets, Pablo Neira Ayuso
        • Re: [PATCH nf] netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets, Phil Sutter
          • Re: [PATCH nf] netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets, Pablo Neira Ayuso
• [nf PATCH] uapi: netfilter: Avoid undefined left-shift in xt_sctp.h, Phil Sutter
  • Re: [nf PATCH] uapi: netfilter: Avoid undefined left-shift in xt_sctp.h, Pablo Neira Ayuso
• [PATCH] nftables: Bump dependency on libnftnl to 1.1.5, Jan-Philipp Litza
  • Re: [PATCH] nftables: Bump dependency on libnftnl to 1.1.5, Phil Sutter
    • Re: [PATCH] nftables: Bump dependency on libnftnl to 1.1.5, Jan-Philipp Litza
• [PATCH nft] build: nftables 0.9.3 depends on libnftnl 1.1.5, Pablo Neira Ayuso
  • Re: [PATCH nft] build: nftables 0.9.3 depends on libnftnl 1.1.5, Phil Sutter
• [iptables PATCH 1/7] iptables: install iptables-apply script and manpage, Arturo Borrero Gonzalez
  • [iptables PATCH 2/7] iptables: cleanup "allows to" usage, Arturo Borrero Gonzalez
  • [iptables PATCH 3/7] extensions: manpages: cleanup hyphens, Arturo Borrero Gonzalez
  • [iptables PATCH 4/7] libipq: fix spelling in manpage, Arturo Borrero Gonzalez
  • [iptables PATCH 5/7] iptables: mention iptables-apply(8) in manpages, Arturo Borrero Gonzalez
  • [iptables PATCH 6/7] extensions: libxt_sctp: add manpage description, Arturo Borrero Gonzalez
  • [iptables PATCH 7/7] iptables-apply: script and manpage update, Arturo Borrero Gonzalez
  • Re: [iptables PATCH 1/7] iptables: install iptables-apply script and manpage, Florian Westphal
    • Re: [iptables PATCH 1/7] iptables: install iptables-apply script and manpage, Pablo Neira Ayuso
• [libnftnl PATCH] examples: Replace use of deprecated symbols, Phil Sutter
  • Re: [libnftnl PATCH] examples: Replace use of deprecated symbols, Pablo Neira Ayuso
  • Re: [libnftnl PATCH] examples: Replace use of deprecated symbols, Arturo Borrero Gonzalez
• [iptables PATCH] extensions: CLUSTERIP: Mark as deprecated in man page, Phil Sutter
  • Re: [iptables PATCH] extensions: CLUSTERIP: Mark as deprecated in man page, Florian Westphal
• [iptables PATCH 1/2] Fix DEBUG build, Phil Sutter
  • [iptables PATCH 2/2] xtables-restore: Fix parser feed from line buffer, Phil Sutter
    • Re: [iptables PATCH 2/2] xtables-restore: Fix parser feed from line buffer, Pablo Neira Ayuso
  • Re: [iptables PATCH 1/2] Fix DEBUG build, Pablo Neira Ayuso
    • Re: [iptables PATCH 1/2] Fix DEBUG build, Phil Sutter
• Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
  • Re: Numen with reference to vmap, Phil Sutter
    • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
      • Re: Numen with reference to vmap, Phil Sutter
        • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
          • Re: Numen with reference to vmap, Phil Sutter
            • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
              • Re: Numen with reference to vmap, Phil Sutter
            • Re: Numen with reference to vmap, Arturo Borrero Gonzalez
              • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
                • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
              • Re: Numen with reference to vmap, Phil Sutter
                • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
                  • Re: Numen with reference to vmap, Phil Sutter
                    • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
                      • Re: Numen with reference to vmap, Phil Sutter
                        • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
                          • Re: Numen with reference to vmap, Phil Sutter
                            • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
                              • Re: Numen with reference to vmap, Laura Garcia
                                • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
                                • Re: Numen with reference to vmap, Phil Sutter
                                  • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
                                    • Re: Numen with reference to vmap, Phil Sutter
                                      • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
                                        • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
                                          • Re: Numen with reference to vmap, Serguei Bezverkhi (sbezverk)
• [PATCH 0/1] netfilter: connmark: introduce set-dscpmark, Kevin Darbyshire-Bryant
  • [PATCH 1/1] netfilter: connmark: introduce set-dscpmark, Kevin Darbyshire-Bryant
    • Re: [PATCH 1/1] netfilter: connmark: introduce set-dscpmark, Kevin 'ldir' Darbyshire-Bryant
  • Re: [PATCH 0/1] netfilter: connmark: introduce set-dscpmark, Jeremy Sowden
    • Re: [PATCH 0/1] netfilter: connmark: introduce set-dscpmark, Kevin 'ldir' Darbyshire-Bryant
      • Re: [PATCH 0/1] netfilter: connmark: introduce set-dscpmark, Jeremy Sowden
    • Re: [PATCH 0/1] netfilter: connmark: introduce set-dscpmark, Florian Westphal
      • Re: [PATCH 0/1] netfilter: connmark: introduce set-dscpmark, Jeremy Sowden
  • [RFC PATCH nf-next] netfilter: conntrack: add support for storing DiffServ code-point as CT mark., Jeremy Sowden
    • [RFC PATCH nftables] Add "ct dscpmark" conntrack statement., Jeremy Sowden
    • Re: [RFC PATCH nf-next] netfilter: conntrack: add support for storing DiffServ code-point as CT mark., Florian Westphal
      • Re: [RFC PATCH nf-next] netfilter: conntrack: add support for storing DiffServ code-point as CT mark., Jeremy Sowden
        • Re: [RFC PATCH nf-next] netfilter: conntrack: add support for storing DiffServ code-point as CT mark., Florian Westphal
          • Re: [RFC PATCH nf-next] netfilter: conntrack: add support for storing DiffServ code-point as CT mark., Jeremy Sowden
            • Re: [RFC PATCH nf-next] netfilter: conntrack: add support for storing DiffServ code-point as CT mark., Florian Westphal
              • Re: [RFC PATCH nf-next] netfilter: conntrack: add support for storing DiffServ code-point as CT mark., Jeremy Sowden
  • [PATCH nf-next v2] netfilter: connmark: introduce set-dscpmark, Kevin Darbyshire-Bryant
• [PATCH] netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle, Laura Abbott
  • Re: [PATCH] netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle, Marcelo Ricardo Leitner
    • Re: [PATCH] netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle, Laura Abbott
      • Re: [PATCH] netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle, Justin Forbes
        • Re: [PATCH] netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle, Justin Forbes
• [PATCH nft] include: include nf_tables_compat.h in tarball, Pablo Neira Ayuso
• [libnftnl PATCH 0/4] Fix covscan-detected issues, Phil Sutter
  • [libnftnl PATCH 3/4] flowtable: Correctly check realloc() call, Phil Sutter
  • [libnftnl PATCH 4/4] chain: Correctly check realloc() call, Phil Sutter
  • [libnftnl PATCH 1/4] flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs(), Phil Sutter
  • [libnftnl PATCH 2/4] chain: Fix memleak in error path of nftnl_chain_parse_devs(), Phil Sutter
  • Re: [libnftnl PATCH 0/4] Fix covscan-detected issues, Pablo Neira Ayuso
• [ANNOUNCE] nftables 0.9.3 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] nftables 0.9.3 release, Paweł Krawczyk
• [PATCH] build: remove stray @ sign in manpage, Jan Engelhardt
  • Re: [PATCH] build: remove stray @ sign in manpage, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_queue: enqueue skbs with NULL dst, Marco Oliverio
  • Re: [PATCH nf] netfilter: nf_queue: enqueue skbs with NULL dst, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_queue: enqueue skbs with NULL dst, Marco Oliverio
  • Re: [PATCH nf] netfilter: nf_queue: enqueue skbs with NULL dst, Pablo Neira Ayuso
• [PATCH nft] netlink: off-by-one write in netdev chain device array, Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: use randomized netns names, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: use randomized netns names, Phil Sutter
    • Re: [PATCH nf] selftests: netfilter: use randomized netns names, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: use randomized netns names, Stefano Brivio
  • Re: [PATCH nf] selftests: netfilter: use randomized netns names, Pablo Neira Ayuso
• [libnftnl PATCH] tests: flowtable: Don't check NFTNL_FLOWTABLE_SIZE, Phil Sutter
  • Re: [libnftnl PATCH] tests: flowtable: Don't check NFTNL_FLOWTABLE_SIZE, Pablo Neira Ayuso
• [PATCH iptables] build: bump dependency on libnftnl, Pablo Neira Ayuso
  • Re: [PATCH iptables] build: bump dependency on libnftnl, Phil Sutter
• [ANNOUNCE] iptables 1.8.4 release, Phil Sutter
  • Re: [ANNOUNCE] iptables 1.8.4 release, Arturo Borrero Gonzalez
    • Re: [ANNOUNCE] iptables 1.8.4 release, Jan Engelhardt
• [ANNOUNCE] ebtables 2.0.11 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] ebtables 2.0.11 release, Jan Engelhardt
    • Re: [ANNOUNCE] ebtables 2.0.11 release, Pablo Neira Ayuso
• [ANNOUNCE] arptables 0.0.5 release, Pablo Neira Ayuso
• [PATCH,nf-next RFC 0/2] add NFTA_SET_ELEM_KEY_END, Pablo Neira Ayuso
  • [PATCH,nf-next RFC 1/2] netfilter: nf_tables: add nft_setelem_parse_key(), Pablo Neira Ayuso
    • Re: [PATCH,nf-next RFC 1/2] netfilter: nf_tables: add nft_setelem_parse_key(), Stefano Brivio
      • Re: [PATCH,nf-next RFC 1/2] netfilter: nf_tables: add nft_setelem_parse_key(), Pablo Neira Ayuso
        • Re: [PATCH,nf-next RFC 1/2] netfilter: nf_tables: add nft_setelem_parse_key(), Stefano Brivio
          • Re: [PATCH,nf-next RFC 1/2] netfilter: nf_tables: add nft_setelem_parse_key(), Pablo Neira Ayuso
  • [PATCH,nf-next RFC 2/2] netfilter: nf_tables: add NFTA_SET_ELEM_KEY_END attribute, Pablo Neira Ayuso
    • Re: [PATCH,nf-next RFC 2/2] netfilter: nf_tables: add NFTA_SET_ELEM_KEY_END attribute, Stefano Brivio
      • Re: [PATCH,nf-next RFC 2/2] netfilter: nf_tables: add NFTA_SET_ELEM_KEY_END attribute, Pablo Neira Ayuso
        • Re: [PATCH,nf-next RFC 2/2] netfilter: nf_tables: add NFTA_SET_ELEM_KEY_END attribute, Stefano Brivio
  • Re: [PATCH,nf-next RFC 0/2] add NFTA_SET_ELEM_KEY_END, Stefano Brivio
    • Re: [PATCH,nf-next RFC 0/2] add NFTA_SET_ELEM_KEY_END, Pablo Neira Ayuso
      • Re: [PATCH,nf-next RFC 0/2] add NFTA_SET_ELEM_KEY_END, Stefano Brivio
• forwarded bridged packets enqueuing is broken, Marco Oliverio
  • Re: forwarded bridged packets enqueuing is broken, Florian Westphal
• Documentation question (verdicts), Duncan Roe
  • Re: Documentation question (verdicts), Duncan Roe
    • Re: Documentation question (verdicts), Florian Westphal
      • Re: Documentation question (verdicts), Duncan Roe
        • Re: Documentation question (verdicts), Florian Westphal
• [nft PATCH v3] src: Support maps as left side expressions, Phil Sutter
  • Re: [nft PATCH v3] src: Support maps as left side expressions, Pablo Neira Ayuso
• [PATCH nft v2 0/1] doc: fix inconsistency in set statement documentation., Jeremy Sowden
  • [PATCH nft v2] doc: fix inconsistency in set statement documentation., Jeremy Sowden
    • Re: [PATCH nft v2] doc: fix inconsistency in set statement documentation., Pablo Neira Ayuso
• [PATCH v2 nft] scanner: fix out-of-bound memory write in include_file(), Eric Jallot
  • Re: [PATCH v2 nft] scanner: fix out-of-bound memory write in include_file(), Eric Jallot
  • Re: [PATCH v2 nft] scanner: fix out-of-bound memory write in include_file(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_flow_table_offload: add IPv6 match description, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: tell compile to not inline nf_ct_resolve_clash, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: tell compile to not inline nf_ct_resolve_clash, Pablo Neira Ayuso
• Re: KASAN: use-after-free Read in ccid2_hc_tx_packet_recv, syzbot
• [nft PATCH] nft.8: Describe numgen expression, Phil Sutter
  • Re: [nft PATCH] nft.8: Describe numgen expression, Pablo Neira Ayuso
• [nft PATCH] nft.8: Fix nat family spec position, Phil Sutter
  • Re: [nft PATCH] nft.8: Fix nat family spec position, Pablo Neira Ayuso
• [PATCH] netfilter: nf_flow_table_offload: Don't use offset uninitialized in flow_offload_port_{d,s}nat, Nathan Chancellor
  • Re: [PATCH] netfilter: nf_flow_table_offload: Don't use offset uninitialized in flow_offload_port_{d,s}nat, Nick Desaulniers
  • Re: [PATCH] netfilter: nf_flow_table_offload: Don't use offset uninitialized in flow_offload_port_{d,s}nat, Pablo Neira Ayuso
• nf_flow on big-endian (was: Re: linux-next: build warning after merge of the net-next tree), Geert Uytterhoeven
  • Re: nf_flow on big-endian (was: Re: linux-next: build warning after merge of the net-next tree), Pablo Neira Ayuso
    • Re: nf_flow on big-endian (was: Re: linux-next: build warning after merge of the net-next tree), Geert Uytterhoeven
• [PATCH nft 1/2] Revert "segtree: Check ranges when deleting elements", Pablo Neira Ayuso
  • [PATCH nft 2/2] segtree: restore automerge, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2] segtree: restore automerge, Phil Sutter
      • Re: [PATCH nft 2/2] segtree: restore automerge, Pablo Neira Ayuso
• [PATCH nft] doc: fix inconsistency in set statement documentation., Jeremy Sowden
  • Re: [PATCH nft] doc: fix inconsistency in set statement documentation., Pablo Neira Ayuso
    • Re: [PATCH nft] doc: fix inconsistency in set statement documentation., Jeremy Sowden
• Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
  • Re: Operation not supported when adding jump command, Florian Westphal
    • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
      • Re: Operation not supported when adding jump command, Florian Westphal
      • Re: Operation not supported when adding jump command, Pablo Neira Ayuso
        • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
          • Re: Operation not supported when adding jump command, Phil Sutter
            • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
              • Re: Operation not supported when adding jump command, Phil Sutter
                • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                  • Re: Operation not supported when adding jump command, Phil Sutter
                  • Re: Operation not supported when adding jump command, Arturo Borrero Gonzalez
                    • Re: Operation not supported when adding jump command, Phil Sutter
                    • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                      • Re: Operation not supported when adding jump command, Phil Sutter
                        • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                          • Re: Operation not supported when adding jump command, Phil Sutter
                            • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                              • Re: Operation not supported when adding jump command, Phil Sutter
                                • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                                  • Re: Operation not supported when adding jump command, Laura Garcia
                                    • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                                  • Re: Operation not supported when adding jump command, Phil Sutter
                                    • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                                    • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                                      • Re: Operation not supported when adding jump command, Phil Sutter
                                        • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                                          • Re: Operation not supported when adding jump command, Phil Sutter
                                            • Re: Operation not supported when adding jump command, Serguei Bezverkhi (sbezverk)
                                              • Re: Operation not supported when adding jump command, Phil Sutter
  • Re: Operation not supported when adding jump command, Duncan Roe
    • [PATCH nft] doc: Clarify conditions under which a reject verdict is permissible, Duncan Roe
    • [PATCH nft v2] doc: Clarify conditions under which a reject verdict is permissible, Duncan Roe
      • Re: [PATCH nft v2] doc: Clarify conditions under which a reject verdict is permissible, Florian Westphal
• Re: KASAN: use-after-free Read in blkdev_get, syzbot
  • Re: KASAN: use-after-free Read in blkdev_get, Al Viro
    • Re: KASAN: use-after-free Read in blkdev_get, Duncan Roe
      • Re: KASAN: use-after-free Read in blkdev_get, Dmitry Vyukov
        • Re: KASAN: use-after-free Read in blkdev_get, Duncan Roe
          • Re: KASAN: use-after-free Read in blkdev_get, Dmitry Vyukov
            • Re: KASAN: use-after-free Read in blkdev_get, Duncan Roe
• [PATCH libnetfilter_queue] src: Fix test for IPv6 header, Duncan Roe
  • Re: [PATCH libnetfilter_queue] src: Fix test for IPv6 header, Duncan Roe
  • Re: [PATCH libnetfilter_queue] src: Fix test for IPv6 header, Pablo Neira Ayuso
• KMSAN: uninit-value in __skb_checksum_complete (4), syzbot
  • Re: KMSAN: uninit-value in __skb_checksum_complete (4), syzbot
    • Re: KMSAN: uninit-value in __skb_checksum_complete (4), Alexander Potapenko
• [PATCH nftables v2 1/2] src: add ability to set/get secmarks to/from connection, Christian Göttsche
  • [PATCH nftables v2 2/2] files: add example secmark config, Christian Göttsche
    • Re: [PATCH nftables v2 2/2] files: add example secmark config, Pablo Neira Ayuso
  • Re: [PATCH nftables v2 1/2] src: add ability to set/get secmarks to/from connection, Pablo Neira Ayuso
    • Re: [PATCH nftables v2 1/2] src: add ability to set/get secmarks to/from connection, Pablo Neira Ayuso
  • Re: [PATCH nftables v2 1/2] src: add ability to set/get secmarks to/from connection, Pablo Neira Ayuso
• Certificate of https://wiki.nftables.org expired, Christian Göttsche
• [PATCH libnetfilter_queue 0/1] src: Comment-out code not needed since Linux 3.8 in examples/nf-queue.c, Duncan Roe
  • [PATCH libnetfilter_queue 1/1] src: Comment-out code not needed since Linux 3.8 in examples/nf-queue.c, Duncan Roe
    • Re: [PATCH libnetfilter_queue 1/1] src: Comment-out code not needed since Linux 3.8 in examples/nf-queue.c, Florian Westphal
      • Re: [PATCH libnetfilter_queue 1/1] src: Comment-out code not needed since Linux 3.8 in examples/nf-queue.c, Duncan Roe
        • Re: [PATCH libnetfilter_queue 1/1] src: Comment-out code not needed since Linux 3.8 in examples/nf-queue.c, Pablo Neira Ayuso
          • [PATCH libnetfilter_queue v2] src: Delete code not needed since Linux 3.8 in examples/nf-queue.c, Duncan Roe
            • Re: [PATCH libnetfilter_queue v2] src: Delete code not needed since Linux 3.8 in examples/nf-queue.c, Pablo Neira Ayuso
• [PATCH nft] scanner: fix out-of-bound memory write in include_file(), Eric Jallot
• [PATCH nf-next v2 0/8] nftables: Set implementation for arbitrary concatenation of ranges, Stefano Brivio
  • [PATCH nf-next v2 1/8] netfilter: nf_tables: Support for subkeys, set with multiple ranged fields, Stefano Brivio
    • Re: [PATCH nf-next v2 1/8] netfilter: nf_tables: Support for subkeys, set with multiple ranged fields, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 1/8] netfilter: nf_tables: Support for subkeys, set with multiple ranged fields, Stefano Brivio
        • Re: [PATCH nf-next v2 1/8] netfilter: nf_tables: Support for subkeys, set with multiple ranged fields, Pablo Neira Ayuso
          • Re: [PATCH nf-next v2 1/8] netfilter: nf_tables: Support for subkeys, set with multiple ranged fields, Stefano Brivio
            • Re: [PATCH nf-next v2 1/8] netfilter: nf_tables: Support for subkeys, set with multiple ranged fields, Pablo Neira Ayuso
              • Re: [PATCH nf-next v2 1/8] netfilter: nf_tables: Support for subkeys, set with multiple ranged fields, Stefano Brivio
                • Re: [PATCH nf-next v2 1/8] netfilter: nf_tables: Support for subkeys, set with multiple ranged fields, Pablo Neira Ayuso
  • [PATCH nf-next v2 2/8] bitmap: Introduce bitmap_cut(): cut bits and shift remaining, Stefano Brivio
  • [PATCH nf-next v2 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
    • Re: [PATCH nf-next v2 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
        • Re: [PATCH nf-next v2 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Pablo Neira Ayuso
  • [PATCH nf-next v2 5/8] nft_set_pipapo: Provide unrolled lookup loops for common field sizes, Stefano Brivio
  • [PATCH nf-next v2 4/8] selftests: netfilter: Introduce tests for sets with range concatenation, Stefano Brivio
  • [PATCH nf-next v2 6/8] nft_set_pipapo: Prepare for vectorised implementation: alignment, Stefano Brivio
  • [PATCH nf-next v2 7/8] nft_set_pipapo: Prepare for vectorised implementation: helpers, Stefano Brivio
  • [PATCH nf-next v2 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Stefano Brivio
    • Re: [PATCH nf-next v2 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, kbuild test robot
  • Re: [PATCH nf-next v2 0/8] nftables: Set implementation for arbitrary concatenation of ranges, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2 0/8] nftables: Set implementation for arbitrary concatenation of ranges, Stefano Brivio
      • Re: [PATCH nf-next v2 0/8] nftables: Set implementation for arbitrary concatenation of ranges, Pablo Neira Ayuso
        • Re: [PATCH nf-next v2 0/8] nftables: Set implementation for arbitrary concatenation of ranges, Stefano Brivio
• [PATCH AUTOSEL 4.19 088/219] netfilter: nf_nat_sip: fix RTP/RTCP source port translations, Sasha Levin
• [PATCH AUTOSEL 4.19 158/219] netfilter: nf_tables: fix a missing check of nla_put_failure, Sasha Levin
• [iptables PATCH v4 00/12] Implement among match support, Phil Sutter
  • [iptables PATCH v4 07/12] nft: Introduce NFT_CL_SETS cache level, Phil Sutter
  • [iptables PATCH v4 06/12] nft: Eliminate pointless calls to nft_family_ops_lookup(), Phil Sutter
  • [iptables PATCH v4 10/12] nft: Embed rule's table name in nft_xt_ctx, Phil Sutter
  • [iptables PATCH v4 02/12] nft: family_ops: Pass nft_handle to 'rule_find' callback, Phil Sutter
  • [iptables PATCH v4 11/12] nft: Support parsing lookup expression, Phil Sutter
  • [iptables PATCH v4 09/12] nft: Bore up nft_parse_payload(), Phil Sutter
  • [iptables PATCH v4 03/12] nft: family_ops: Pass nft_handle to 'print_rule' callback, Phil Sutter
  • [iptables PATCH v4 04/12] nft: family_ops: Pass nft_handle to 'rule_to_cs' callback, Phil Sutter
  • [iptables PATCH v4 05/12] nft: Keep nft_handle pointer in nft_xt_ctx, Phil Sutter
  • [iptables PATCH v4 08/12] nft: Support NFT_COMPAT_SET_ADD, Phil Sutter
  • [iptables PATCH v4 12/12] nft: bridge: Rudimental among extension support, Phil Sutter
  • [iptables PATCH v4 01/12] nft: family_ops: Pass nft_handle to 'add' callback, Phil Sutter
  • Re: [iptables PATCH v4 00/12] Implement among match support, Pablo Neira Ayuso
• [PATCH libnftnl v2] set: Add support for NFTA_SET_SUBKEY attributes, Stefano Brivio
  • Re: [PATCH libnftnl v2] set: Add support for NFTA_SET_SUBKEY attributes, Phil Sutter
• [PATCH nft v2 0/3] Introduce support for concatenated ranges, Stefano Brivio
  • [PATCH nft v2 1/3] src: Add support for and export NFT_SET_SUBKEY attributes, Stefano Brivio
    • Re: [PATCH nft v2 1/3] src: Add support for and export NFT_SET_SUBKEY attributes, Phil Sutter
  • [PATCH nft v2 2/3] src: Add support for concatenated set ranges, Stefano Brivio
    • Re: [PATCH nft v2 2/3] src: Add support for concatenated set ranges, Phil Sutter
  • [PATCH nft v2 3/3] tests: Introduce test for set with concatenated ranges, Stefano Brivio
    • Re: [PATCH nft v2 3/3] tests: Introduce test for set with concatenated ranges, Phil Sutter
• [PATCH] net: Fix Kconfig indentation, continued, Krzysztof Kozlowski
  • Re: [PATCH] net: Fix Kconfig indentation, continued, David Miller
• [PATCH nft] mnl: Fix -Wimplicit-function-declaration warnings, Michal Rostecki
  • Re: [PATCH nft] mnl: Fix -Wimplicit-function-declaration warnings, Phil Sutter
  • Re: [PATCH nft] mnl: Fix -Wimplicit-function-declaration warnings, Pablo Neira Ayuso
• [libnftnl PATCH] utils: Define __visible even if not supported by compiler, Phil Sutter
  • Re: [libnftnl PATCH] utils: Define __visible even if not supported by compiler, Pablo Neira Ayuso
• [arptables PATCH 0/3] Some minor fixes, Phil Sutter
  • [arptables PATCH 2/3] Eliminate compiler warning about size passed to strncmp(), Phil Sutter
    • Re: [arptables PATCH 2/3] Eliminate compiler warning about size passed to strncmp(), Pablo Neira Ayuso
  • [arptables PATCH 3/3] libarptc: Simplify alloc_handle by using calloc(), Phil Sutter
    • Re: [arptables PATCH 3/3] libarptc: Simplify alloc_handle by using calloc(), Pablo Neira Ayuso
  • [arptables PATCH 1/3] Add .gitignore, Phil Sutter
    • Re: [arptables PATCH 1/3] Add .gitignore, Pablo Neira Ayuso
• [nft PATCH] segtree: Fix add and delete of element in same batch, Phil Sutter
  • Re: [nft PATCH] segtree: Fix add and delete of element in same batch, Pablo Neira Ayuso
• [PATCH nf-next v2 0/4] netfilter: nf_flow_table_offload: support tunnel offload, wenxu
  • [PATCH nf-next v2 1/4] netfilter: nf_flow_table_offload: refactor nf_flow_table_offload_setup to support indir setup, wenxu
    • Re: [PATCH nf-next v2 1/4] netfilter: nf_flow_table_offload: refactor nf_flow_table_offload_setup to support indir setup, wenxu
  • [PATCH nf-next v2 4/4] netfilter: nf_flow_table_offload: add tunnel encap/decap action offload support, wenxu
    • Re: [PATCH nf-next v2 4/4] netfilter: nf_flow_table_offload: add tunnel encap/decap action offload support, wenxu
  • [PATCH nf-next v2 2/4] netfilter: nf_flow_table_offload: add indr block setup support, wenxu
    • Re: [PATCH nf-next v2 2/4] netfilter: nf_flow_table_offload: add indr block setup support, wenxu
  • [PATCH nf-next v2 3/4] netfilter: nf_flow_table_offload: add tunnel match offload support, wenxu
    • Re: [PATCH nf-next v2 3/4] netfilter: nf_flow_table_offload: add tunnel match offload support, wenxu
    • Re: [PATCH nf-next v2 3/4] netfilter: nf_flow_table_offload: add tunnel match offload support, kbuild test robot
  • Re: [PATCH nf-next v2 0/4] netfilter: nf_flow_table_offload: support tunnel offload, wenxu
• [RFC 1/4] statement: make secmark statements idempotent, Christian Göttsche
  • [RFC 2/4] src: add ability to set/get secmarks to/from connection, Christian Göttsche
    • Re: [RFC 2/4] src: add ability to set/get secmarks to/from connection, Pablo Neira Ayuso
      • Re: [RFC 2/4] src: add ability to set/get secmarks to/from connection, Pablo Neira Ayuso
  • [RFC 3/4] files: add example secmark config, Christian Göttsche
    • Re: [RFC 3/4] files: add example secmark config, Pablo Neira Ayuso
  • [RFC 4/4] src: add ability to reset secmarks, Christian Göttsche
    • Re: [RFC 4/4] src: add ability to reset secmarks, Pablo Neira Ayuso
  • Re: [RFC 1/4] statement: make secmark statements idempotent, Pablo Neira Ayuso
• [PATCH nf-next 0/7] nf_tables encapsulation/decapsulation support, Pablo Neira Ayuso
  • [PATCH nf-next 1/7] netfilter: nft_objref: rename NFTA_OBJREF_IMM_TYPE to NFTA_OBJREF_TYPE, Pablo Neira Ayuso
  • [PATCH nf-next 2/7] netfilter: nft_objref: validate map object type, Pablo Neira Ayuso
  • [PATCH nf-next 3/7] netfilter: nft_objref: add nft_obj_ref structure and use it, Pablo Neira Ayuso
  • [PATCH nf-next 4/7] netfilter: nf_tables: pass nft_object_ref to object evaluation function, Pablo Neira Ayuso
  • [PATCH nf-next 5/7] netfilter: nft_objref: add support for operation on objects, Pablo Neira Ayuso
  • [PATCH nf-next 6/7] netfilter: nf_tables: add decapsulation support, Pablo Neira Ayuso
  • [PATCH nf-next 7/7] netfilter: nf_tables: add encapsulation support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: Document ingress hook, Lukas Wunner
  • Re: [PATCH nf-next] netfilter: Document ingress hook, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: Clean up unnecessary #ifdef, Lukas Wunner
  • Re: [PATCH nf-next] netfilter: Clean up unnecessary #ifdef, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_flow_table_offload: Fix block_cb tc_setup_type as TC_SETUP_CLSFLOWER, wenxu
  • Re: [nf-next] netfilter: nf_flow_table_offload: Fix block_cb tc_setup_type as TC_SETUP_CLSFLOWER, Paul Blakey
  • Re: [PATCH nf-next] netfilter: nf_flow_table_offload: Fix block_cb tc_setup_type as TC_SETUP_CLSFLOWER, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_flow_table_offload: Fix setup block as TC_SETUP_FT cmd, wenxu
  • Re: [nf-next] netfilter: nf_flow_table_offload: Fix setup block as TC_SETUP_FT cmd, Paul Blakey
  • Re: [PATCH nf-next] netfilter: nf_flow_table_offload: Fix setup block as TC_SETUP_FT cmd, Pablo Neira Ayuso
• [PATCH net-next 0/4] nf_tables_offload: vlan matching support, Pablo Neira Ayuso
  • [PATCH net-next 2/4] netfilter: nf_tables_offload: allow ethernet interface type only, Pablo Neira Ayuso
  • [PATCH net-next 4/4] netfilter: nft_payload: add C-VLAN offload support, Pablo Neira Ayuso
  • [PATCH net-next 3/4] netfilter: nft_payload: add VLAN offload support, Pablo Neira Ayuso
  • [PATCH net-next 1/4] netfilter: nf_tables: constify nft_reg_load{8,16,64}(), Pablo Neira Ayuso
  • Re: [PATCH net-next 0/4] nf_tables_offload: vlan matching support, David Miller
• Choosing best API-way to full dump/restore nftables, Alexander Mikhalitsyn
  • Re: Choosing best API-way to full dump/restore nftables, Pablo Neira Ayuso
• Mysql has problem with synproxy, İbrahim Ercan
  • Re: Mysql has problem with synproxy, Florian Westphal
• [PATCH libnftnl] set: Add support for NFTA_SET_SUBKEY attributes, Stefano Brivio
  • Re: [PATCH libnftnl] set: Add support for NFTA_SET_SUBKEY attributes, Phil Sutter
    • Re: [PATCH libnftnl] set: Add support for NFTA_SET_SUBKEY attributes, Stefano Brivio
      • Re: [PATCH libnftnl] set: Add support for NFTA_SET_SUBKEY attributes, Stefano Brivio
        • Re: [PATCH libnftnl] set: Add support for NFTA_SET_SUBKEY attributes, Phil Sutter
• [PATCH nft 0/3] Introduce support for concatenated ranges, Stefano Brivio
  • [PATCH nft 1/3] src: Add support for and export NFT_SET_SUBKEY attributes, Stefano Brivio
  • [PATCH nft 2/3] src: Add support for concatenated set ranges, Stefano Brivio
    • Re: [PATCH nft 2/3] src: Add support for concatenated set ranges, Phil Sutter
      • Re: [PATCH nft 2/3] src: Add support for concatenated set ranges, Stefano Brivio
        • Re: [PATCH nft 2/3] src: Add support for concatenated set ranges, Phil Sutter
          • Re: [PATCH nft 2/3] src: Add support for concatenated set ranges, Stefano Brivio
            • Re: [PATCH nft 2/3] src: Add support for concatenated set ranges, Phil Sutter
  • [PATCH nft 3/3] tests: Introduce test for set with concatenated ranges, Stefano Brivio
• [PATCH nf-next 0/8] nftables: Set implementation for arbitrary concatenation of ranges, Stefano Brivio
  • [PATCH nf-next 1/8] nf_tables: Support for subkeys, set with multiple ranged fields, Stefano Brivio
  • [PATCH nf-next 2/8] bitmap: Introduce bitmap_cut(): cut bits and shift remaining, Stefano Brivio
  • [PATCH nf-next 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
    • Re: [PATCH nf-next 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Florian Westphal
      • Re: [PATCH nf-next 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
        • Re: [PATCH nf-next 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Florian Westphal
          • Re: [PATCH nf-next 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
            • Re: [PATCH nf-next 3/8] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
  • [PATCH nf-next 4/8] selftests: netfilter: Introduce tests for sets with range concatenation, Stefano Brivio
  • [PATCH nf-next 5/8] nft_set_pipapo: Provide unrolled lookup loops for common field sizes, Stefano Brivio
  • [PATCH nf-next 6/8] nft_set_pipapo: Prepare for vectorised implementation: alignment, Stefano Brivio
  • [PATCH nf-next 7/8] nft_set_pipapo: Prepare for vectorised implementation: helpers, Stefano Brivio
  • [PATCH nf-next 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Stefano Brivio
    • Re: [PATCH nf-next 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Florian Westphal
      • Re: [PATCH nf-next 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Phil Sutter
        • Re: [PATCH nf-next 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Stefano Brivio
          • Re: [PATCH nf-next 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Pablo Neira Ayuso
            • Re: [PATCH nf-next 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Florian Westphal
              • Re: [PATCH nf-next 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Pablo Neira Ayuso
                • Re: [PATCH nf-next 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Pablo Neira Ayuso
      • Re: [PATCH nf-next 8/8] nft_set_pipapo: Introduce AVX2-based lookup implementation, Pablo Neira Ayuso
• [PATCH nft] tests: shell: set reference from variable definition, Pablo Neira Ayuso
  • Re: [PATCH nft] tests: shell: set reference from variable definition, Phil Sutter
• [PATCH nft,v2] parser_bison: Avoid set references in odd places, Pablo Neira Ayuso
  • Re: [PATCH nft,v2] parser_bison: Avoid set references in odd places, Phil Sutter
• [PATCH libnetfilter_queue 1/2] src: doc: Major re-work of user packet buffer documentation, Duncan Roe
  • [PATCH libnetfilter_queue 2/2] Minor tweak to pktb_len function description, Duncan Roe
    • Re: [PATCH libnetfilter_queue 2/2] Minor tweak to pktb_len function description, Pablo Neira Ayuso
  • Re: [PATCH libnetfilter_queue 1/2] src: doc: Major re-work of user packet buffer documentation, Duncan Roe
  • Re: [PATCH libnetfilter_queue 1/2] src: doc: Major re-work of user packet buffer documentation, Pablo Neira Ayuso
• [nft PATCH] tests/py: Set a fixed timezone in nft-test.py, Phil Sutter
  • Re: [nft PATCH] tests/py: Set a fixed timezone in nft-test.py, Ander Juaristi
  • Re: [nft PATCH] tests/py: Set a fixed timezone in nft-test.py, Pablo Neira Ayuso
    • Re: [nft PATCH] tests/py: Set a fixed timezone in nft-test.py, Phil Sutter
    • Re: [nft PATCH] tests/py: Set a fixed timezone in nft-test.py, Ander Juaristi
      • Re: [nft PATCH] tests/py: Set a fixed timezone in nft-test.py, Pablo Neira Ayuso
        • Re: [nft PATCH] tests/py: Set a fixed timezone in nft-test.py, Phil Sutter
          • Re: [nft PATCH] tests/py: Set a fixed timezone in nft-test.py, Pablo Neira Ayuso
            • Re: [nft PATCH] tests/py: Set a fixed timezone in nft-test.py, Phil Sutter
• [nft PATCH] parser_bison: Avoid set references in odd places, Phil Sutter
• [PATCH nf-next v2 0/4] netfilter: nft_tunnel: support tunnel match expr offload, wenxu
  • [PATCH nf-next v2 3/4] netfilter: nft_tunnel: support NFT_TUNNEL_IPV6_SRC/DST match, wenxu
  • [PATCH nf-next v2 1/4] netfilter: nft_tunnel: add nft_tunnel_mode_match function, wenxu
  • [PATCH nf-next v2 2/4] netfilter: nft_tunnel: support NFT_TUNNEL_IPV4_SRC/DST match, wenxu
  • [PATCH nf-next v2 4/4] netfilter: nft_tunnel: add nft_tunnel_get_offload support, wenxu
  • Re: [PATCH nf-next v2 0/4] netfilter: nft_tunnel: support tunnel match expr offload, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2 0/4] netfilter: nft_tunnel: support tunnel match expr offload, wenxu
• [PATCH libnetfilter_queue] src: Fix IPv4 checksum calculation in AF_BRIDGE packet buffer, Duncan Roe
  • [PATCH libnetfilter_queue v2] src: Fix IPv4 checksum calculation in AF_BRIDGE packet buffer, Duncan Roe
    • Re: [PATCH libnetfilter_queue v2] src: Fix IPv4 checksum calculation in AF_BRIDGE packet buffer, Pablo Neira Ayuso
• [PATCH libnftnl] flowtable: remove NFTA_FLOWTABLE_SIZE, Pablo Neira Ayuso
  • Re: [PATCH libnftnl] flowtable: remove NFTA_FLOWTABLE_SIZE, Eric Garver
    • Re: [PATCH libnftnl] flowtable: remove NFTA_FLOWTABLE_SIZE, Pablo Neira Ayuso
• [nft PATCH] scanner: Introduce numberstring, Phil Sutter
  • Re: [nft PATCH] scanner: Introduce numberstring, Pablo Neira Ayuso
• libnftnl: NFTA_FLOWTABLE_SIZE missing from kernel uapi headers, Eric Garver
  • Re: libnftnl: NFTA_FLOWTABLE_SIZE missing from kernel uapi headers, Pablo Neira Ayuso
• [PATCH nf-next 0/4] netfilter: nf_flow_table_offload: support tunnel match, wenxu
  • [PATCH nf-next 3/4] netfilter: nf_flow_table_offload: add tunnel match offload support, wenxu
  • [PATCH nf-next 1/4] netfilter: nf_flow_table_offload: refactor nf_flow_table_offload_setup to support indir setup, wenxu
  • [PATCH nf-next 4/4] netfilter: nf_flow_table_offload: add tunnel encap/decap action offload support, wenxu
  • [PATCH nf-next 2/4] netfilter: nf_flow_table_offload: add indr block setup support, wenxu
  • Re: [PATCH nf-next 0/4] netfilter: nf_flow_table_offload: support tunnel match, Pablo Neira Ayuso
    • Re: [PATCH nf-next 0/4] netfilter: nf_flow_table_offload: support tunnel match, wenxu
      • Re: [PATCH nf-next 0/4] netfilter: nf_flow_table_offload: support tunnel match, Pablo Neira Ayuso
        • Re: [PATCH nf-next 0/4] netfilter: nf_flow_table_offload: support tunnel match, wenxu