Linux TCP/IP Netfilter

• Thread Index

• [ANNOUNCE] nftables 1.0.6.1 (stable) release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: 'nft' crashes.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• 'nft' crashes.
  • From: S Egbert <s.egbert@xxxxxxxxxxxxx>
• Re: Query on nftables DNAT for localhost-to-localhost traffic in IPv6 or without route_localnet
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• nft for bridge.
  • From: ratheesh kannoth <ratheesh.ksz@xxxxxxxxx>
• Re: nft for bridge.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables 1.0.6.y stable branch updates (strike 2)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Hardware flowtable offload from multiple tables?
  • From: Davíð Steinn Geirsson <david@xxxxxx>
• Implicit add conflicts with declarative add
  • From: S Egbert <s.egbert@xxxxxxxxxxxxx>
• Re: Implicit add conflicts with declarative add
  • From: Gordon Fisher <gordfisherman@xxxxxxxxx>
• repeated 'add chain'/'delete chain' 5x and ...
  • From: S Egbert <s.egbert@xxxxxxxxxxxxx>
• Re: repeated 'add chain'/'delete chain' 5x and ...
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nft error Could not process rule: No buffer space available
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft error Could not process rule: No buffer space available
  • From: lilydjwg <lilydjwg@xxxxxxxxx>
• Re: nft error Could not process rule: No buffer space available
  • From: lilydjwg <lilydjwg@xxxxxxxxx>
• Re: nft error Could not process rule: No buffer space available
  • From: lilydjwg <lilydjwg@xxxxxxxxx>
• Re: nft error Could not process rule: No buffer space available
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft error Could not process rule: No buffer space available
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nft error Could not process rule: No buffer space available
  • From: lilydjwg <lilydjwg@xxxxxxxxx>
• [NATHELPER] Dealing CGN Public 1:1 mode from ISP
  • From: Panagiotis Plessas <plessas@xxxxxxxxxx>
• [ANNOUNCE] nftables 1.1.5 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Segmentation fault when adding a simple rule
  • From: Arno DUBOIS <arno.du@xxxxxxxxx>
• Re: Segmentation fault when adding a simple rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• Vim script highlighter, beta; 850 keywords; 2,400 states
  • From: S Egbert <s.egbert@xxxxxxxxxxxxx>
• "nft reset counters" bug on 32-bit systems
  • From: Andreas Fried <afried@xxxxxxxxx>
• Re: "nft reset counters" bug on 32-bit systems
  • From: Florian Westphal <fw@xxxxxxxxx>
• Stateless NAT in nftables with maps for performance
  • From: Juan Carlos Lazcano <juan@xxxxxxxxxxxxxxxxxx>
• Re: Stateless NAT in nftables with maps for performance
  • From: Juan Carlos Lazcano <juan@xxxxxxxxxxxxxxxxxx>
• Re: Stateless NAT in nftables with maps for performance
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Stateless NAT in nftables with maps for performance
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Stateless NAT in nftables with maps for performance
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Query on nftables DNAT for localhost-to-localhost traffic in IPv6 or without route_localnet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Query on nftables DNAT for localhost-to-localhost traffic in IPv6 or without route_localnet
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Query on nftables DNAT for localhost-to-localhost traffic in IPv6 or without route_localnet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libnftnl 1.3.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] libnftnl 1.3.0 release
  • From: Jan Engelhardt <ej@xxxxxxx>
• [ANNOUNCE] nftables 1.1.4 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.3.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Query on nftables DNAT for localhost-to-localhost traffic in IPv6 or without route_localnet
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: another netfilter-initiated martian source
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• nftables 1.0.6.y stable branch updates (strike 2)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Query on nftables DNAT for localhost-to-localhost traffic in IPv6 or without route_localnet
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• zoombinis
  • From: Eray Bilgin <bilgin@xxxxxxx>
• Re: TCPOPTSTROP can be repalced with undocumented "reset tcp option opt"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] doc: expand on gc-interval, size and a few other set/map keywords
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• TCPOPTSTROP can be repalced with undocumented "reset tcp option opt"
  • From: Niklas Beierl <niklasbeierl@xxxxxxxxxx>
• [PATCH nft] doc: expand on gc-interval, size and a few other set/map keywords
  • From: Florian Westphal <fw@xxxxxxxxx>
• Let me write your new guest post
  • From: Savannah Bush <sbush@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
• Question about how Sets work in nftables
  • From: Павел Прибылов <pavelpribylov01@xxxxxxxxx>
• another netfilter-initiated martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• Re: Element-Level Logging Support in nftables Sets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Element-Level Logging Support in nftables Sets
  • From: sontu mazumdar <sontu21@xxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• [no subject]
  • From: Unknown
• Re: order of netfilter hooks and check for martian source
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Pavel Penaz <pavel.penaz@xxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• order of netfilter hooks and check for martian source
  • From: Michael Tokarev <mjt@xxxxxxxxxx>
• CPU usage problem for offloaded flows with mlx5
  • From: Pavel Horáček <horacek.pavel@xxxxxxxxxxxxxx>
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: Jan Engelhardt <ej@xxxxxxx>
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: webmaster@xxxxxxxxxxx
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: Phil Sutter <phil@xxxxxx>
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: Klaus Frank <vger.kernel.org@xxxxxxxxx>
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: Phil Sutter <phil@xxxxxx>
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: Phil Sutter <phil@xxxxxx>
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Status of native NAT64/NAT46 in Netfilter?
  • From: Phil Sutter <phil@xxxxxx>
• Status of native NAT64/NAT46 in Netfilter?
  • From: Klaus Frank <vger.kernel.org@xxxxxxxxx>
• [ANNOUNCE] knft testing/fuzzer utility for nftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Command Line Interface Usage and Documentation Query
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Command Line Interface Usage and Documentation Query
  • From: Andrew Latham <lathama@xxxxxxxxx>
• Re: Issue with delayed segments despite TCP_NODELAY
  • From: Dennis Baurichter <dennisba@xxxxxxxxxxxxxxxxxxxxx>
• Re: Issue with delayed segments despite TCP_NODELAY
  • From: Neal Cardwell <ncardwell@xxxxxxxxxx>
• Issue with delayed segments despite TCP_NODELAY
  • From: Dennis Baurichter <dennisba@xxxxxxxxxxxxxxxxxxxxx>
• Re: Log ARP headers
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: Log ARP headers
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ulogd2, sqlite3 and negative TCP Seq numbers
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Log ARP headers
  • From: Slavko <linux@xxxxxxxxxx>
• documentation/explaination on the syntax of the set_elem data arrangement.
  • From: Pierre Wielders <pierre@xxxxxxxxxxxx>
• [ANNOUNCE] ulogd 2.0.9 release
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ANNOUNCE] ipset 7.24 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: Repeated SYN+ACK count
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Repeated SYN+ACK count
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Repeated SYN+ACK count
  • From: Slavko <linux@xxxxxxxxxx>
• Re: send all traffic to a specific address
  • From: Marco Moock <mm@xxxxxxxxxx>
• send all traffic to a specific address
  • From: Mohsen Pahlevanzadeh <mohsen@xxxxxxxxxxxxxxxxx>
• Vmap lookup transiently fails during atomic ruleset reload under load, leading to rule bypass
  • From: Pavel Peňáz <pavel.penaz@xxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Slavko <linux@xxxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Slavko <linux@xxxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Slavko <linux@xxxxxxxxxx>
• UNSUBSCRIBE
  • From: "Vink, Ronald" <ronald.vink@xxxxxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Slavko <linux@xxxxxxxxxx>
• [ANNOUNCE] nftables 1.1.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables RP filter and loopback
  • From: Florian Westphal <fw@xxxxxxxxx>
• nftables RP filter and loopback
  • From: Slavko <linux@xxxxxxxxxx>
• Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
  • From: Chen Linxuan <chenlinxuan@xxxxxxxxxxxxx>
• Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Can the PCP field be set in the netdev table?
  • From: Kevin Vigouroux <ke.vigouroux@xxxxxxxxxxx>
• Re: Can the PCP field be set in the netdev table?
  • From: Kevin Vigouroux <ke.vigouroux@xxxxxxxxxxx>
• subscribe
  • From: bootloader <bootloaderlost@xxxxxxxxx>
• Re: Log ARP headers
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: Log ARP headers
  • From: Slavko <linux@xxxxxxxxxx>
• Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
  • From: Chen Linxuan <chenlinxuan@xxxxxxxxxxxxx>
• Re: Replace flow offload by flow add in wiki
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Can the PCP field be set in the netdev table?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Can the PCP field be set in the netdev table?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Can the PCP field be set in the netdev table?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Can the PCP field be set in the netdev table?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Can the PCP field be set in the netdev table?
  • From: Kevin Vigouroux <ke.vigouroux@xxxxxxxxxxx>
• Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.1.2 release
  • From: Slavko <linux@xxxxxxxxxx>
• Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
  • From: Chen Linxuan <chenlinxuan@xxxxxxxxxxxxx>
• Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.1.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.1.2 release
  • From: Slavko <linux@xxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.1.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.1.2 release
  • From: Slavko <linux@xxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.1.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.1.2 release
  • From: Slavko <linux@xxxxxxxxxx>
• How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
  • From: Chen Linxuan <chenlinxuan@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.1.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.1.2 release
  • From: Jan Engelhardt <ej@xxxxxxx>
• [ANNOUNCE] nftables 1.1.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.2.9 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Log ARP headers
  • From: Slavko <linux@xxxxxxxxxx>
• Replace flow offload by flow add in wiki
  • From: Anthony Ruhier <aruhier@xxxxxxxxxxx>
• Re: Nftables v6 address not matched properly in nftable set
  • From: sontu mazumdar <sontu21@xxxxxxxxx>
• Re: Nftables v6 address not matched properly in nftable set
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Nftables v6 address not matched properly in nftable set
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Nftables v6 address not matched properly in nftable set
  • From: sontu mazumdar <sontu21@xxxxxxxxx>
• Re: Nftables v6 address not matched properly in nftable set
  • From: Bradley Hook <bhook@xxxxxxxxxxxxxx>
• Nftables v6 address not matched properly in nftable set
  • From: sontu mazumdar <sontu21@xxxxxxxxx>
• Re: Packets not traversing postrouting chain
  • From: Bradley Hook <bhook@xxxxxxxxxxxxxx>
• Re: Packets not traversing postrouting chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Packets not traversing postrouting chain
  • From: Bradley Hook <bhook@xxxxxxxxxxxxxx>
• Can you look at this blog article pitch I have for you?
  • From: Gloria Martinez <gloria@xxxxxxxxxxxx>
• Re: Dynamically appending addresses to a named set
  • From: Lars Noodén <lars.nooden@xxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Dynamically appending addresses to a named set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Dynamically appending addresses to a named set
  • From: Lars Noodén <lars.nooden@xxxxxxx>
• Re: Dynamically appending addresses to a named set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Dynamically appending addresses to a named set
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Dynamically appending addresses to a named set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Dynamically appending addresses to a named set
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Florian Westphal <fw@xxxxxxxxx>
• Dynamically appending addresses to a named set
  • From: Lars Noodén <lars.nooden@xxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: netfilter expected behavior for established connections
  • From: Florian Westphal <fw@xxxxxxxxx>
• netfilter expected behavior for established connections
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: connection tracking fails to update udp timer
  • From: Eray Bilgin <bilgin@xxxxxxx>
• Re: connection tracking fails to update udp timer
  • From: Florian Westphal <fw@xxxxxxxxx>
• connection tracking fails to update udp timer
  • From: Eray Bilgin <bilgin@xxxxxxx>
• Re: ulogd2, sqlite3 and negative TCP Seq numbers
  • From: Slavko <linux@xxxxxxxxxx>
• Re: ulogd2, sqlite3 and negative TCP Seq numbers
  • From: Slavko <linux@xxxxxxxxxx>
• Re: ulogd2, sqlite3 and negative TCP Seq numbers
  • From: Adam Nielsen <a.nielsen@xxxxxxxxxxx>
• Re: Translation for iptables raw rules that targert rtsp / Conntrack helper,
  • From: Laurent ARNAL <laurent@xxxxxxxx>
• ulogd2, sqlite3 and negative TCP Seq numbers
  • From: Slavko <linux@xxxxxxxxxx>
• Translation for iptables raw rules that targert rtsp / Conntrack helper,
  • From: Laurent ARNAL <laurent@xxxxxxxx>
• subscribe
  • From: Laurent ARNAL <laurent@xxxxxxxx>
• subscribe
  • From: Laurent ARNAL <laurent@xxxxxxxx>
• tcp_hdr_kind_and_field window COUNT vs. tcp_hdr_option_type window LENGTH
  • From: S Egbert <s.egbert@xxxxxxxxxxxxx>
• Yet another Syntax Highlighter for NFTABLES
  • From: S Egbert <s.egbert@xxxxxxxxxxxxx>
• Re: nft reset element crashes with error BUG: unhandled op 8
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nft reset element crashes with error BUG: unhandled op 8
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Log ARP headers
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Log ARP headers
  • From: Slavko <linux@xxxxxxxxxx>
• Re: nft reset element crashes with error BUG: unhandled op 8
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Log ARP headers
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: Log ARP headers
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Log ARP headers
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Log ARP headers
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Log ARP headers
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: snat and Port Numbers
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• snat and Port Numbers
  • From: Chris Hall <netfilter@xxxxxxx>
• Re: nft reset element crashes with error BUG: unhandled op 8
  • From: Michael Menge <michael.menge@xxxxxxxxxxxxxxxxxxxx>
• Re: named counters vs flush ruleset
  • From: Victor Julien <lists@xxxxxxxxxxxx>
• Re: Using netfilter to intercept packets written to an ipvtap device
  • From: "David Arroyo" <david@xxxxxxxxx>
• Re: nft reset element crashes with error BUG: unhandled op 8
  • From: Michael Menge <michael.menge@xxxxxxxxxxxxxxxxxxxx>
• [SOLVED] Generic map, also with L4 protocol
  • From: Marc SCHAEFER <schaefer@xxxxxxxxxxx>
• Re: nft reset element crashes with error BUG: unhandled op 8
  • From: Florian Westphal <fw@xxxxxxxxx>
• nft reset element crashes with error BUG: unhandled op 8
  • From: Michael Menge <michael.menge@xxxxxxxxxxxxxxxxxxxx>
• Log ARP headers
  • From: Slavko <linux@xxxxxxxxxx>
• Using netfilter to intercept packets written to an ipvtap device
  • From: "David Arroyo" <david@xxxxxxxxx>
• Re: named counters vs flush ruleset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: What is *supposed* to happen with automated nftables accept rules?
  • From: Dan Winship <danwinship@xxxxxxxxxx>
• Re: What is *supposed* to happen with automated nftables accept rules?
  • From: Robin Powell <robinleepowell@xxxxxxxxx>
• Re: What is *supposed* to happen with automated nftables accept rules?
  • From: Slavko <linux@xxxxxxxxxx>
• What is *supposed* to happen with automated nftables accept rules?
  • From: robinleepowell@xxxxxxxxx
• Re: NAT and ICMP
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Cannot browse SQL files in ulog2 git
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Cannot browse SQL files in ulog2 git
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: NAT and ICMP
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• ICMP Raw Payload Expressions
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Static bidirectional static NAT for duplicate IP devices using iptables
  • From: Adam Nielsen <a.nielsen@xxxxxxxxxxx>
• Re: Static bidirectional static NAT for duplicate IP devices using iptables
  • From: Alon Bar-Lev <alon.barlev@xxxxxxxxx>
• Re: Static bidirectional static NAT for duplicate IP devices using iptables
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Static bidirectional static NAT for duplicate IP devices using iptables
  • From: Adam Nielsen <a.nielsen@xxxxxxxxxxx>
• Re: Static bidirectional static NAT for duplicate IP devices using iptables
  • From: Alon Bar-Lev <alon.barlev@xxxxxxxxx>
• Re: Static bidirectional static NAT for duplicate IP devices using iptables
  • From: Adam Nielsen <a.nielsen@xxxxxxxxxxx>
• Re: Static bidirectional static NAT for duplicate IP devices using iptables
  • From: Alon Bar-Lev <alon.barlev@xxxxxxxxx>
• Cannot browse SQL files in ulog2 git
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Static bidirectional static NAT for duplicate IP devices using iptables
  • From: Alon Bar-Lev <alon.barlev@xxxxxxxxx>
• Static bidirectional static NAT for duplicate IP devices using iptables
  • From: Alon Bar-Lev <alon.barlev@xxxxxxxxx>
• NAT and ICMP
  • From: Chris Hall <netfilter@xxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: named counters vs flush ruleset
  • From: Victor Julien <lists@xxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: named counters vs flush ruleset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• named counters vs flush ruleset
  • From: Victor Julien <lists@xxxxxxxxxxxx>
• Re: Documentation regarding priorities possibly wrong - clarification / update appreciated
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Documentation regarding priorities possibly wrong - clarification / update appreciated
  • From: Binarus <lists@xxxxxxxxxx>
• Documentation regarding priorities possibly wrong - clarification / update appreciated
  • From: Binarus <lists@xxxxxxxxxx>
• Re: Netfilter not dropping packets as it should
  • From: Binarus <lists@xxxxxxxxxx>
• Re: Netfilter not dropping packets as it should
  • From: Binarus <lists@xxxxxxxxxx>
• Re: Netfilter not dropping packets as it should (addendum: netfilter and kernel versions)
  • From: Binarus <lists@xxxxxxxxxx>
• Re: Netfilter not dropping packets as it should
  • From: Binarus <lists@xxxxxxxxxx>
• Re: Netfilter not dropping packets as it should
  • From: "Berto Furth" <bf2025@xxxxxxxx>
• Re: Clarification of the procedure for filtering IP option fields
  • From: Alexey Kashavkin <akashavkin@xxxxxxxxx>
• Re: Netfilter not dropping packets as it should
  • From: Slavko <linux@xxxxxxxxxx>
• Netfilter not dropping packets as it should
  • From: Binarus <lists@xxxxxxxxxx>
• Re: Clarification of the procedure for filtering IP option fields
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Clarification of the procedure for filtering IP option fields
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Clarification of the procedure for filtering IP option fields
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Clarification of the procedure for filtering IP option fields
  • From: Alexey Kashavkin <akashavkin@xxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Raw payload expressions are mangled
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: Raw payload expressions are mangled
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Generic map, also with L4 protocol
  • From: Marc SCHAEFER <schaefer@xxxxxxxxxxx>
• SNAT vs ip rule
  • From: Marc SCHAEFER <schaefer@xxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Raw Payload Expressions - out of bounds write?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables DNAT routes to wrong iface
  • From: Marc SCHAEFER <schaefer@xxxxxxxxxxx>
• Re: nftables DNAT routes to wrong iface
  • From: Marc SCHAEFER <schaefer@xxxxxxxxxxx>
• Re: nftables DNAT routes to wrong iface
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: DROP rule is ignored for multicast traffic, but only via Wireguard
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• nftables DNAT routes to wrong iface
  • From: Marc SCHAEFER <schaefer@xxxxxxxxxxx>
• DROP rule is ignored for multicast traffic, but only via Wireguard
  • From: Adam Nielsen <a.nielsen@xxxxxxxxxxx>
• Re: aggressive firewalling via nftables
  • From: Alessandro Vesely <vesely@xxxxxxx>
• Raw Payload Expressions - out of bounds write?
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• nft includepath directory - directory on a separate partition / disk
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• [ANNOUNCE] nftlb 1.1.0 release
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• IPv6 source address randomization?
  • From: lukaro <lists@xxxxxxxx>
• Delay replying to SYN (or requires two SYN to react)
  • From: Marc SCHAEFER <schaefer@xxxxxxxxxxx>
• Re: list sets
  • From: Slavko <linux@xxxxxxxxxx>
• Re: list sets
  • From: Florian Westphal <fw@xxxxxxxxx>
• list sets
  • From: Slavko <linux@xxxxxxxxxx>
• Aw: Re: aggressive firewalling via nftables
  • From: potatojuggler@xxxxxxx
• Re: aggressive firewalling via nftables
  • From: "Kevin P. Fleming" <lists.netfilter@xxxxxxxxxxxxx>
• aggressive firewalling via nftables
  • From: potatojuggler@xxxxxxx
• Re: General questions about priorities - Clarification appreciated
  • From: Slavko <linux@xxxxxxxxxx>
• General questions about priorities - Clarification appreciated
  • From: Binarus <lists@xxxxxxxxxx>
• Clarification of the procedure for filtering IP option fields
  • From: Alexey Kashavkin <akashavkin@xxxxxxxxx>
• Re: expires larger than timeout causes error
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: expires larger than timeout causes error
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: expires larger than timeout causes error
  • From: lilydjwg <lilydjwg@xxxxxxxxx>
• Re: expires larger than timeout causes error
  • From: lilydjwg <lilydjwg@xxxxxxxxx>
• Re: expires larger than timeout causes error
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: expires larger than timeout causes error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• flowtable ipv4-via-ipv6 routing
  • From: Aksel Nyman <nyman.aksel@xxxxxxxxx>
• Re: expires larger than timeout causes error
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: expires larger than timeout causes error
  • From: Harshit Mogalapalli <harshit.m.mogalapalli@xxxxxxxxxx>
• expires larger than timeout causes error
  • From: lilydjwg <lilydjwg@xxxxxxxxx>
• Re: nftables portmap map
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: nftables portmap map
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables portmap map
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: nftables portmap map
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: nftables portmap map
  • From: Florian Westphal <fw@xxxxxxxxx>
• nftables portmap map
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: nft table flags documentation
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: nft table flags documentation
  • From: Jan Kasprzak <kas@xxxxxxxxxx>
• Re: nft table flags documentation
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• nft table flags documentation
  • From: Jan Kasprzak <kas@xxxxxxxxxx>
• [ANNOUNCE] ipset 7.23 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: Regression 1.0.9..1.1.1 in glob inclusion behaviour
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Regression 1.0.9..1.1.1 in glob inclusion behaviour
  • From: caskd <caskd@xxxxxxxxx>
• Re: Regression 1.0.9..1.1.1 in glob inclusion behaviour
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: conntrack-tools conntrack cli json output option?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• conntrack-tools conntrack cli json output option?
  • From: eldon-nfv@xxxxxxxxxxxx
• Re: Regression 1.0.9..1.1.1 in glob inclusion behaviour
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Regression 1.0.9..1.1.1 in glob inclusion behaviour
  • From: caskd <caskd@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• an idea about flow tables
  • From: ye4 yu3 <ye4yu3@xxxxxxxxxxx>
• Re: logging to a different place than kernel ring buffer
  • From: Marco Moock <mm@xxxxxxxxxx>
• Re: [DNAT] Port forwarding with Port range
  • From: Mokhtar BEN MESSAOUD <mbmessaoud@xxxxxxxxx>
• [DNAT] Port forwarding with Port range
  • From: Mokhtar BEN MESSAOUD <mbmessaoud@xxxxxxxxx>
• Re: Adding set elements
  • From: Thomas Köller <thomas@xxxxxxxxxxxxxxxxxx>
• Re: Adding set elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: set with limit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: logging to a different place than kernel ring buffer
  • From: Jordan Dohms <Jordan@xxxxxxxxxxxxxxxxxx>
• Re: logging to a different place than kernel ring buffer
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• logging to a different place than kernel ring buffer
  • From: Marco Moock <mm@xxxxxxxxxx>
• Re: set with limit
  • From: Slavko <linux@xxxxxxxxxx>
• Re: set with limit
  • From: Slavko <linux@xxxxxxxxxx>
• Re: set with limit
  • From: Florian Westphal <fw@xxxxxxxxx>
• set with limit
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Adding set elements
  • From: Thomas Köller <thomas@xxxxxxxxxxxxxxxxxx>
• Re: rule insertion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: rule insertion
  • From: Florian Westphal <fw@xxxxxxxxx>
• rule insertion
  • From: Thomas Köller <thomas@xxxxxxxxxxxxxxxxxx>
• Re: Adding set elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Dropping of the end of a chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Dropping of the end of a chain
  • From: <imnozi@xxxxxxxxx>
• Re: Dropping of the end of a chain
  • From: Daniel Lakeland <dlakelan@xxxxxxxxxxxxxxxxxx>
• Re: Dropping of the end of a chain
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Dropping of the end of a chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Dropping of the end of a chain
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Dropping of the end of a chain
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Dropping of the end of a chain
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Dropping of the end of a chain
  • From: Daniel Lakeland <dlakelan@xxxxxxxxxxxxxxxxxx>
• Dropping of the end of a chain
  • From: Thomas Köller <thomas@xxxxxxxxxxxxxxxxxx>
• Adding set elements
  • From: Thomas Köller <thomas@xxxxxxxxxxxxxxxxxx>
• Re: connection tracking state in rules
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: ipset vs. nftables set
  • From: Slavko <linux@xxxxxxxxxx>
• Re: ipset vs. nftables set
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: connection tracking state in rules
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ipset vs. nftables set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset vs. nftables set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset vs. nftables set
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: ipset vs. nftables set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: connection tracking state in rules
  • From: Thomas Köller <thomas@xxxxxxxxxxxxxxxxxx>
• Re: ipset vs. nftables set
  • From: Slavko <linux@xxxxxxxxxx>
• iptables SYNPROXY small packet size transmission performance issue
  • From: Vincent Li <vincent.mc.li@xxxxxxxxx>
• Re: connection tracking state in rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ipset vs. nftables set
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ipset vs. nftables set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• connection tracking state in rules
  • From: Thomas Köller <thomas@xxxxxxxxxxxxxxxxxx>
• Re: ipset vs. nftables set
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• ipset vs. nftables set
  • From: Thomas Koeller <thomas@xxxxxxxxxxxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: connection tracking and kernel dropping packets
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: connection tracking and kernel dropping packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: connection tracking and kernel dropping packets
  • From: Slavko <linux@xxxxxxxxxx>
• [ANNOUNCE] iptables 1.8.11 release
  • From: Phil Sutter <phil@xxxxxxxxxxxxx>
• Re: connection tracking and kernel dropping packets
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: Countering some types of SSH spoofing with NFTables
  • From: Lars Noodén <lars.nooden@xxxxxxx>
• Re: Countering some types of SSH spoofing with NFTables
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Countering some types of SSH spoofing with NFTables
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Countering some types of SSH spoofing with NFTables
  • From: Lars Noodén <lars.nooden@xxxxxxx>
• Re: Unusual packet forwarding task
  • From: Logan B <mrbojangles3@xxxxxxxxx>
• Re: IPtables rate limiting question
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: IPtables rate limiting question
  • From: Francisco Agostinho <f.agostinho123@xxxxxxxxx>
• Re: IPtables rate limiting question
  • From: Francisco Agostinho <f.agostinho123@xxxxxxxxx>
• Re: connection tracking and kernel dropping packets
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: connection tracking and kernel dropping packets
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: connection tracking and kernel dropping packets
  • From: Slavko <linux@xxxxxxxxxx>
• connection tracking and kernel dropping packets
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: IPtables rate limiting question
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: IPtables rate limiting question
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: IPtables rate limiting question
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: IPtables rate limiting question
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: IPtables rate limiting question
  • From: Slavko <linux@xxxxxxxxxx>
• Re: IPtables rate limiting question
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• IPtables rate limiting question
  • From: Francisco Agostinho <f.agostinho123@xxxxxxxxx>
• Re: Unusual packet forwarding task
  • From: Rob Roschewsk <rob@xxxxxxxxx>
• Re: Unusual packet forwarding task
  • From: Martin Tonusoo <martin@xxxxxxxxxx>
• Unusual packet forwarding task
  • From: Rob Roschewsk <rob@xxxxxxxxx>
• Re: location of conntrack rules
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: location of conntrack rules
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: location of conntrack rules
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: location of conntrack rules
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• location of conntrack rules
  • From: Matt Zagrabelny <mzagrabe@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Benny Lyne Amorsen <benny+usenet@xxxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: filesystem access to add/remove/view ip addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: filesystem access to add/remove/view ip addresses
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: filesystem access to add/remove/view ip addresses
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• filesystem access to add/remove/view ip addresses
  • From: Telbat Diordna <diordnatelbat2@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Most optimal method to dump UDP conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Most optimal method to dump UDP conntrack entries
  • From: Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx>
• [UPDATE] Renewing Netfilter coreteam PGP keys
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: VPN nftables
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: VPN nftables
  • From: Martin Brampton <martin@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: VPN nftables
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: VPN nftables
  • From: Martin Brampton <martin@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: issues when trying to inspect payload > 250 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: issues when trying to inspect payload > 250 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: VPN nftables
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: VPN nftables
  • From: Martin Brampton <martin@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: VPN nftables
  • From: Daniel <tech@xxxxxxxxxx>
• VPN nftables
  • From: Martin Brampton <martin@xxxxxxxxxxxxxxxxxxxxxxxx>
• issues when trying to inspect payload > 250 bytes
  • From: Graham Bartlett <graham.ietf@xxxxxxxxx>
• Re: Problem with ipv6
  • From: Daniel <tech@xxxxxxxxxx>
• Re: Problem with ipv6
  • From: Carl Lei <me@xxxxxxxxxxxx>
• Re: Problem with ipv6
  • From: Carl Lei <me@xxxxxxxxxxxx>
• Re: Problem with ipv6
  • From: Daniel <tech@xxxxxxxxxx>
• Re: Problem with ipv6
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Problem with ipv6
  • From: Martin Brampton <martin@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: Problem with ipv6
  • From: "Kevin P. Fleming" <lists.netfilter@xxxxxxxxxxxxx>
• Re: Unsuccessful adding policy to a regular chain
  • From: Kerin Millar <kfm@xxxxxxxxxxxxx>
• Problem with ipv6
  • From: Martin Brampton <martin@xxxxxxxxxxxxxxxxxxxxxxxx>
• Re: Unsuccessful adding policy to a regular chain
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Unsuccessful adding policy to a regular chain
  • From: "Kevin P. Fleming" <lists.netfilter@xxxxxxxxxxxxx>
• Unsuccessful adding policy to a regular chain
  • From: Robin Bussell <RobinB@xxxxxxxxxxxxxxx>
• Re: Allowing closed connections time to drain before logging packets
  • From: "Brian J. Murrell" <brian@xxxxxxxxxxxxxxx>
• Re: Allowing closed connections time to drain before logging packets
  • From: "Brian J. Murrell" <brian@xxxxxxxxxxxxxxx>
• [ANNOUNCE] nftables 1.1.1 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.2.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• How to count bytes?
  • From: "Ronan Pigott" <ronan@xxxxxx>
• Re: Allowing closed connections time to drain before logging packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Clarification on the functioning of "ct count"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [no subject]
  • From: Unknown
• [no subject]
  • From: Unknown
• Clarification on the functioning of "ct count"
  • From: Avinash Dige <avinash.dige@xxxxxxxxx>
• Clarification on the functioning of "ct count"
  • From: Avinash Dige <avinash.dige@xxxxxxxxx>
• Re: Allowing closed connections time to drain before logging packets
  • From: Slavko <linux@xxxxxxxxxx>
• Allowing closed connections time to drain before logging packets
  • From: "Brian J. Murrell" <brian@xxxxxxxxxxxxxxx>
• unsubscribe
  • From: michael.steinmann@xxxxxxxxxxx
• [ANNOUNCE] libnetfilter_conntrack 1.1.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Nomnclature - Roman
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Nomnclature - Roman
  • From: Thomas Sadłowskí <thomas@xxxxxxxxx>
• Re: Wiki entry on Element timeouts in NFtables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Wiki entry on Element timeouts in NFtables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Wiki entry on Element timeouts in NFtables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re_School Contacts List 2024
  • From: Lily Green <lily.green@xxxxxxxxxxxxxxxxxxx>
• Re: Issue Setting meta broute
  • From: Florian Westphal <fw@xxxxxxxxx>
• Issue Setting meta broute
  • From: "Dustin Lieu" <whale_163@xxxxxxxxxxxx>
• Re: Wiki entry on Element timeouts in NFtables
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Wiki entry on Element timeouts in NFtables
  • From: Lars Noodén <lars.nooden@xxxxxxx>
• Re: nftables are non-deterministic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nftables are non-deterministic
  • From: "Artem S. Tashkinov" <aros@xxxxxxx>
• Re: Raw payload expressions are mangled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Raw payload expressions are mangled
  • From: Sunny73Cr <Sunny73Cr@xxxxxxxxxxxxxx>
• Re: Stateless NAT ICMP Payload Mismatch
  • From: Echo Nar <echo@xxxxxxxxxxxxx>
• Re: Stateless NAT ICMP Payload Mismatch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Stateless NAT ICMP Payload Mismatch
  • From: Echo Nar <echo@xxxxxxxxxxxxx>
• RE: Understanding output from "nft list"
  • From: "Atkins, Brian" <Brian.Atkins@xxxxxxxxxx>
• RE: Understanding output from "nft list"
  • From: Slavko <linux@xxxxxxxxxx>
• RE: Understanding output from "nft list"
  • From: Slavko <linux@xxxxxxxxxx>
• RE: Understanding output from "nft list"
  • From: "Atkins, Brian" <Brian.Atkins@xxxxxxxxxx>
• RE: Understanding output from "nft list"
  • From: Slavko <linux@xxxxxxxxxx>
• RE: Understanding output from "nft list"
  • From: "Atkins, Brian" <Brian.Atkins@xxxxxxxxxx>
• RE: Understanding output from "nft list"
  • From: Slavko <linux@xxxxxxxxxx>
• RE: Understanding output from "nft list"
  • From: "Atkins, Brian" <Brian.Atkins@xxxxxxxxxx>
• Re: Understanding output from "nft list"
  • From: Brian Sammon <bds@xxxxxxxxxxxxxxx>
• Re: Understanding output from "nft list"
  • From: Eric <evil.function@xxxxxxxxx>
• Re: Understanding output from "nft list"
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Understanding output from "nft list"
  • From: Brian Sammon <bds@xxxxxxxxxxxxxxx>
• nftables' ulogd2 group "#" usage -- variable substitution possible?
  • From: pgnd <pgnd@xxxxxxxxxxxx>
• [ANNOUNCE] Security evaluation by ANSSI of nftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: Output port redirect going to loopback?
  • From: "Atkins, Brian" <Brian.Atkins@xxxxxxxxxx>
• Re: Output port redirect going to loopback?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Output port redirect going to loopback?
  • From: "Atkins, Brian" <Brian.Atkins@xxxxxxxxxx>
• correct nft v1.1.0 usage for flowtable h/w offload? `flags offload` &/or `devices=`
  • From: pgnd <pgnd@xxxxxxxxxxxx>
• Hardware Offloading Mellanox
  • From: "Ritterhoff, Florian" <florian.ritterhoff@xxxxxx>
• Can't set meta priority for some packets in netdev family!
  • From: Kevin Vigouroux <ke.vigouroux@xxxxxxxxxxx>
• Re: libnftables way of deleting a rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• libnftables way of deleting a rule
  • From: Arne Zachlod <arne@xxxxxxxxxxxxxx>
• Re: Unknown option "--to-ports"
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• How to set packet priority in the netdev table?
  • From: Kevin Vigouroux <ke.vigouroux@xxxxxxxxxxx>
• Re: Unknown option "--to-ports"
  • From: Tom Isaacson <thomas.isaacson@xxxxxxxxxxxxxxxxxxxxx>
• How do you set packet priority in the netdev table?
  • From: Kevin Vigouroux <ke.vigouroux@xxxxxxxxxxx>
• Re: Unknown option "--to-ports"
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: Unknown option "--to-ports"
  • From: Tom Isaacson <thomas.isaacson@xxxxxxxxxxxxxxxxxxxxx>
• Re: Unknown option "--to-ports"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Unknown option "--to-ports"
  • From: Tom Isaacson <thomas.isaacson@xxxxxxxxxxxxxxxxxxxxx>
• [no subject]
  • From: Tom Isaacson <thomas.isaacson@xxxxxxxxxxxxxxxxxxxxx>
• Re: Sets update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Sets update
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Sets update
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Sets update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Sets update
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Sets update
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Sets update
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Sets update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Sets update
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Sets update
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Sets update
  • From: Eric <evil.function@xxxxxxxxx>
• Re: Sets update
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Sets update
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Sets update
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Sets update
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Sets update
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Sets update
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Sets update
  • From: Slavko <linux@xxxxxxxxxx>
• Re: syntax issues when reducing rules through grouping ?
  • From: Florian Westphal <fw@xxxxxxxxx>
• syntax issues when reducing rules through grouping ?
  • From: pgnd <pgnd@xxxxxxxxxxxx>
• [ANNOUNCE] nftables 1.1.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.2.7 release
  • From: Phil Sutter <phil@xxxxxxxxxxxxx>
• Re: Regarding ulogd_output_SYSLOG.so
  • From: Harald Welte <laforge@xxxxxxxxxxxx>
• Re: nftables rule optimization - evaluating efficiency
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: nftables rule optimization - evaluating efficiency
  • From: "William N." <netfilter@xxxxxxxxxx>
• Transparent SNAT bridge with physdev module
  • From: Matt Ayre <maayr3@xxxxxxxxx>
• Re: nftables rule optimization - evaluating efficiency
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables rule optimization - evaluating efficiency
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: nftables rule optimization - evaluating efficiency
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Understanding and debugging conntrack source code
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Understanding and debugging conntrack source code
  • From: Kevin Johnson <kevinamiel100@xxxxxxxxx>
• Does Nftables nft_fib check fib only in the main routing table?
  • From: Stanislav Tretyakov <tsv1991@xxxxxxxxx>
• Re: nftables rule optimization - evaluating efficiency
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: nftables rule optimization - evaluating efficiency
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• nftables rule optimization - evaluating efficiency
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: conntrackd: Trouble using multiple Accept addresses in kernel filter
  • From: Yoann Congal <yoann.congal@xxxxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: Teodor Milkov <tm@xxxxxx>
• Re: conntrackd: Trouble using multiple Accept addresses in kernel filter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• conntrackd: Trouble using multiple Accept addresses in kernel filter
  • From: Yoann Congal <yoann.congal@xxxxxxxx>
• subscribe
  • From: netfilter@xxxxxxxx
• Re: How to have a counter for vmap verdicts?
  • From: "William N." <netfilter@xxxxxxxxxx>
• bidge not working. Missing rules?
  • From: Paulo Ricardo Bruck <pauloric@xxxxxxxxxxxxxxxxxxxx>
• Re: How to have a counter for vmap verdicts?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: How to have a counter for vmap verdicts?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: How to have a counter for vmap verdicts?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: How to have a counter for vmap verdicts?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Writing own match module for modern ebtables.
  • From: Pawel Kraszewski <pawel@xxxxxxxxxxxxxx>
• How to have a counter for vmap verdicts?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Writing own match module for modern ebtables.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Writing own match module for modern ebtables.
  • From: Pawel Kraszewski <pawel@xxxxxxxxxxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Problem with migration from iptables+ipset to nftables
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Problem with migration from iptables+ipset to nftables
  • From: Aleksey Nikapli <excusemysmile@xxxxxxxxx>
• [ANNOUNCE] ipset 7.22 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: nftables rule where IPv6 source and destination addr are the same?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• nftables rule where IPv6 source and destination addr are the same?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Problems understanding nftables part 2
  • From: Wolfgang <netfilter-user@xxxxxxxxxx>
• Re: Problems understanding nftables part 2
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Problems understanding nftables part 2
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Problems understanding nftables part 2
  • From: Wolfgang <netfilter-user@xxxxxxxxxx>
• Re: Problems understanding nftables part 2
  • From: "Kevin P. Fleming" <lists.netfilter@xxxxxxxxxxxxx>
• Re: Problems understanding nftables part 2
  • From: Wolfgang <netfilter-user@xxxxxxxxxx>
• Fwd: ebtables rule rewriten to nft 'set host' does not work
  • From: Oto BREZINA <otik@xxxxxxxxxx>
• Re: Problems understanding nftables part 2
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Cant get "tcp dport 22 @ih,0,32 0x5353482d" to work/match
  • From: Pascal Ernster <netfilter@xxxxxxxxxxxxxx>
• Re: ebtables rule rewriten to nft 'set host' does not work
  • From: netfilter@xxxxxxxxxx
• Re: ebtables rule rewriten to nft 'set host' does not work
  • From: Florian Westphal <fw@xxxxxxxxx>
• Fwd: ebtables rule rewriten to nft 'set host' does not work
  • From: netfilter@xxxxxxxxxx
• Re: Cant get "tcp dport 22 @ih,0,32 0x5353482d" to work/match
  • From: Valentijn Sessink <valentijn@xxxxxxxxxx>
• Re: Cant get "tcp dport 22 @ih,0,32 0x5353482d" to work/match
  • From: Florian Westphal <fw@xxxxxxxxx>
• Cant get "tcp dport 22 @ih,0,32 0x5353482d" to work/match
  • From: Pascal Ernster <netfilter@xxxxxxxxxxxxxx>
• Re: ebtables rule rewriten to nft 'set host' does not work
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Problems understanding nftables part 2
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Problems understanding nftables part 2
  • From: Wolfgang <netfilter-user@xxxxxxxxxx>
• ebtables rule rewriten to nft 'set host' does not work
  • From: netfilter@xxxxxxxxxx
• Problems understanding nftables
  • From: Wolfgang <netfilter-user@xxxxxxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: "William N." <netfilter@xxxxxxxxxx>
• [wiki] typo in Nftables families
  • From: 谢致邦 (XIE Zhibang) <Yeking@xxxxxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: Teodor Milkov <tm@xxxxxx>
• Re: connection refused from DNATted host (libvirt guests!)
  • From: Giovanni Biscuolo <giovanni@xxxxxxxxxxxx>
• Using NAT engine information to apply fwmark to packet
  • From: "Tobias Jakobi (Compleo)" <tobias.jakobi.compleo@xxxxxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: "William N." <netfilter@xxxxxxxxxx>
• connection refused from DNATted host
  • From: Giovanni Biscuolo <giovanni@xxxxxxxxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: Teodor Milkov <tm@xxxxxx>
• Re: nft not logging some layer 2 frames?
  • From: "William N." <netfilter@xxxxxxxxxx>
• nft not logging some layer 2 frames?
  • From: Teodor Milkov <tm@xxxxxx>
• Re: Clash Resolve Counter Increasing
  • From: Tim Harman <tim@xxxxxxxxxxx>
• Clash Resolve Counter Increasing
  • From: Tim Harman <tim@xxxxxxxxxxx>
• Nftables rules for kernel threads (cifsd)
  • From: Mikhail Morfikov <mmorfikov@xxxxxxxxx>
• Re: Sets nesting/reference? Complex concatenations in vmaps?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Sets nesting/reference? Complex concatenations in vmaps?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Sets nesting/reference? Complex concatenations in vmaps?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Kernel panic in nf_nat_setup_info, with re injected packet from libnfml
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Kernel panic in nf_nat_setup_info, with re injected packet from libnfml
  • From: shibu samuel <msshibu@xxxxxxxxx>
• Sets nesting/reference? Complex concatenations in vmaps?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Retrieve L2 header or MAR from packet
  • From: La Rus <zator@xxxxxxxxx>
• Re: IPv4 NAT and lo, and iptables
  • From: <imnozi@xxxxxxxxx>
• Re: IPv4 NAT and lo, and iptables
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• IPv4 NAT and lo, and iptables
  • From: <imnozi@xxxxxxxxx>
• HW Offloading Mellanox ConnectX-6DX
  • From: "Ritterhoff, Florian" <florian.ritterhoff@xxxxxx>
• Re: [Thread split] nftables rule optimization - dropping invalid in ingress?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: How to have a dynamic ingress device(s) list?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: How to have a dynamic ingress device(s) list?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• RE: Drop to Docker bridge
  • From: "Alberto" <alberto@xxxxxxxxxxx>
• Re: How to have a dynamic ingress device(s) list?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: How to have a dynamic ingress device(s) list?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: How to have a dynamic ingress device(s) list?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: How to have a dynamic ingress device(s) list?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• How to have a dynamic ingress device(s) list?
  • From: "William N." <netfilter@xxxxxxxxxx>
• NFT: Drop to Docker bridge
  • From: "Alberto" <alberto@xxxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: Quentin Deslandes <qde@xxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: Quentin Deslandes <qde@xxxxxxxx>
• Re: [Thread split] nftables rule optimization - dropping invalid in ingress?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: [Thread split] nftables rule optimization - dropping invalid in ingress?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: [Thread split] nftables rule optimization - dropping invalid in ingress?
  • From: Slavko <linux@xxxxxxxxxx>
• Re: [Thread split] nftables rule optimization - dropping invalid in ingress?
  • From: Eric <evil.function@xxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: [Thread split] nftables rule optimization - dropping invalid in ingress?
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: [Thread split] nftables rule optimization - dropping invalid in ingress?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Rewrite arp response with nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "William N." <netfilter@xxxxxxxxxx>
• [Thread split] nftables rule optimization - dropping invalid in ingress?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: How to measure/profile ruleset performance?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Rewrite arp response with nft
  • From: G H <uothrawn@xxxxxxxxx>
• Re: How to measure/profile ruleset performance?
  • From: Serhii <lists@xxxxxxxxxxxx>
• Re: How to measure/profile ruleset performance?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: How to measure/profile ruleset performance?
  • From: Serhii <lists@xxxxxxxxxxxx>
• How to measure/profile ruleset performance?
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: Serhii <lists@xxxxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: Serhii <lists@xxxxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: Serhii <lists@xxxxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: Florian Kauer <florian.kauer@xxxxxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: Joshua Moore <j@xxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: DoS/DDoS protection for end nodes
  • From: Serg <lists@xxxxxxxxxxxx>
• DoS/DDoS protection for end nodes
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "William N." <netfilter@xxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "Kerin Millar" <kfm@xxxxxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: Slavko <linux@xxxxxxxxxx>
• Re: Combining/compacting 2 rules into 1
  • From: "William N." <netfilter@xxxxxxxxxx>