Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup
  • From: Felix Fietkau <nbd@xxxxxxxx>
• Re: [PATCH 2/2] Ensure num_actions is not a negative
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] Prevent potential write out of bounds
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] Prevent potential write out of bounds
  • From: Joao Moreira <joao@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/2] Prevent potential write out of bounds
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH 2/2] Ensure num_actions is not a negative
  • From: joao@xxxxxxxxxxxxxxxxxx
• [PATCH 1/2] Make loop indexes unsigned
  • From: joao@xxxxxxxxxxxxxxxxxx
• [PATCH 0/2] Prevent potential write out of bounds
  • From: joao@xxxxxxxxxxxxxxxxxx
• Re: MASQ leak?
  • From: Ian Kumlien <ian.kumlien@xxxxxxxxx>
• [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup
  • From: Felix Fietkau <nbd@xxxxxxxx>
• Re: [PATCH nft] tests/shell: allow running tests as non-root users
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] tests/shell: allow running tests as non-root users
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft] tests/shell: allow running tests as non-root users
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: "Fernando F. Mancera" <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• [PATCH RFC] tests: add feature probing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• Re: MASQ leak?
  • From: Ian Kumlien <ian.kumlien@xxxxxxxxx>
• Re: MASQ leak?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: MASQ leak?
  • From: Ian Kumlien <ian.kumlien@xxxxxxxxx>
• Re: MASQ leak?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• MASQ leak?
  • From: Ian Kumlien <ian.kumlien@xxxxxxxxx>
• Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH net 1/5] netfilter: nft_exthdr: Fix non-linear header modification
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net 3/5] netfilter: xt_u32: validate user space input
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/5] netfilter: nf_tables: Audit log rule reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/5] netfilter: nf_tables: Audit log setelem reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] netfilter: xt_sctp: validate the flag_info count
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter/osf: avoid OOB read
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nf] netfilter/osf: avoid OOB read
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• [PATCH nft 2/2] rule: set internal_location for table and chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests/shell: allow running tests as non-root users
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/2] src: use internal_location for unspecified location at allocation time
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] evaluate: place byteorder conversion after numgen for IP address datatypes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter/xt_u32: validate user space input
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter/xt_sctp: validate the flag_info count
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: simplify chain_alloc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: remove check for NULL before calling expr_free()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets
  • From: Volodymyr Litovka <doka@xxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [GIT PULL] sysctl changes for v6.6-rc1
  • From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/5] xt: avoid "-Wmissing-field-initializers" for "original_opts"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/5] rule: fix "const static" declaration
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/5] src: silence "implicit-fallthrough" warnings
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/5] utils: call abort() after BUG() macro
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/5] fix compiler warnings with clang and "-Wextra"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 0/8] fix compiler warnings with clang
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/2] proto: use hexadecimal to display ip frag-off field
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] tests: py: extend ip frag-off coverage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 1/4] tests: monitor: Fix monitor JSON output for insert command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 0/4] add operation cache for timestamp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: do not remove anonymous set with protocol flags and single element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 0/8] fix compiler warnings with clang
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: fix example of xt_cpu
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/4] tests: monitor: Fix for wrong ordering in expected JSON output
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/4] tests: monitor: Fix monitor JSON output for insert command
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/4] tests: monitor: Fix time format in ct timeout test
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/4] tests: monitor: Fix for wrong syntax in set-interval.t
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] doc: fix example of xt_cpu
  • From: Victor Julien <victor@xxxxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 8/8] include: drop "format" attribute from nft_gmp_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 7/8] src: suppress "-Wunused-but-set-variable" warning with "parser_bison.c"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 4/8] evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 1/8] netlink: avoid "-Wenum-conversion" warning in dtype_map_from_kernel()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 3/8] datatype: avoid cast-align warning with struct sockaddr result from getaddrinfo()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 2/8] netlink: avoid "-Wenum-conversion" warning in parser_bison.y
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 5/8] src: rework SNPRINTF_BUFFER_SIZE() and handle truncation
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 0/8] fix compiler warnings with clang
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [syzbot] Monthly netfilter report (Aug 2023)
  • From: syzbot <syzbot+list815e32c42e38d564bf0e@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [syzbot] [netfilter?] INFO: rcu detected stall in tcp_setsockopt
  • From: syzbot <syzbot+1a11c39caf29450eac9f@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter/xt_sctp: validate the flag_info count
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] evaluate: place byteorder conversion after numgen for IP address datatypes
  • From: Jorge Ortiz <jorge.ortiz.escribano@xxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH conntrack-tools 0/4] Fixes for yacc parser compilation warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/4] src: cache result of time() during parsing/output
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/4] src: add ops_cache struct for caching information during parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/8] datatype: avoid cast-align warning with struct sockaddr result from getaddrinfo()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/8] netlink: avoid "-Wenum-conversion" warning in dtype_map_from_kernel()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/8] netlink: avoid "-Wenum-conversion" warning in parser_bison.y
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/8] src: use "%zx" format instead of "%Zx"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/8] fix compiler warnings with clang
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 7/8] utils: add _NFT_PRAGMA_WARNING_DISABLE()/_NFT_PRAGMA_WARNING_REENABLE helpers
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 6/8] src: suppress "-Wunused-but-set-variable" warning with "parser_bison.c"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nf] netfilter/xt_u32: validate user space input
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• [PATCH nf] netfilter/xt_u32: validate user space input
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum
  • From: syzbot <syzbot+4a9f9820bd8d302e22f7@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Fwd: Since 6.1: flow_dissector.c __skb_flow_dissect+0xa91/0x1cd0 raises WARNING in specific circumstances
  • From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
• Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets
  • From: Volodymyr Litovka <doka@xxxxxxxxx>
• Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets
  • From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
• Re: [PATCH -stable,4.14.y,4.19.y 0/1] ipvs: backport 1b90af292e71 and 5310760af1d4
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH conntrack-tools 1/4] build: reformat and sort `conntrack_LDADD` and `conntrackd_SOURCES`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack-tools 4/4] read_config_yy: correct arguments passed to `inet_aton`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack-tools 0/4] Fixes for yacc parser compilation warnings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack-tools 2/4] build: stop suppressing warnings for generated sources
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack-tools 3/4] read_config_yy: correct `yyerror` prototype
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH v4.19.y] netfilter: nf_queue: fix socket leak
  • From: Vamsi Krishna Brahmajosyula <vbrahmajosyula@xxxxxxxxxx>
• [PATCH nft 3/4] src: cache result of time() during parsing/output
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/4] src: add ops_cache struct for caching information during parsing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/4] add operation cache for timestamp
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/4] src: cache GMT offset for current time during parsing/output
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/4] evaluate: add and use parse_ctx_init() helper method
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft v2 0/6] cleanup base includes and add <nft.h> header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft v2 6/6] configure: drop AM_PROG_CC_C_O autoconf check
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 2/6] src: add <nft.h> header and include it as first
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 5/6] include: include <std{bool,int}.h> via <nft.h>
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 0/6] cleanup base includes and add <nft.h> header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 1/6] meta: define _GNU_SOURCE to get strptime() from <time.h>
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 3/6] include: don't define _GNU_SOURCE in public header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/6] build: drop recursive make for "include/**/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 6/6] build: drop recursive make for "doc/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/6] no recursive make
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/6] build: drop recursive make for "files/**/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/6] build: drop recursive make for "src/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/6] build: drop recursive make for "py/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nf v2] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• [PATCH nft] tests: 30s-stress: add failslab and abort phase tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed
  • From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
• Re: [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrack, nfct: fix some typo's
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrack, nfct: fix some typo's
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH -stable,4.14.y,4.19.y 1/1] ipvs: Improve robustness to the ipvs sysctl
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH -stable,4.14.y,4.19.y 0/1] ipvs: backport 1b90af292e71 and 5310760af1d4
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH nft 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/6] include: don't define _GNU_SOURCE in public header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 5/6] include: include <std{bool,int}.h> via nftdefault.h
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/6] src: add <nftdefault.h> header and include it as first
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 6/6] configure: drop AM_PROG_CC_C_O autoconf check
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/6] meta: define _GNU_SOURCE to get strptime() from <time.h>
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH net 1/6] netfilter: nf_tables: validate all pending tables
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [nft PATCH] clang-format: add clang-format configuration file from Linux kernel
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH] clang-format: add clang-format configuration file from Linux kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v5 0/6] add input flags and "no-dns"/"json" flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] gitignore: ignore cscope files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests: shell: Stabilize sets/0043concatenated_ranges_0 test
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH] tests: shell: Stabilize sets/reset_command_0 test
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] tests: shell: Stabilize sets/0043concatenated_ranges_0 test
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net 6/6] netfilter: nf_tables: defer gc run if previous batch is still pending
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 4/6] netfilter: nf_tables: use correct lock to protect gc_list
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 5/6] netfilter: nf_tables: fix out of memory error handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 3/6] netfilter: nf_tables: GC transaction race with abort path
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 2/6] netfilter: nf_tables: flush pending destroy work before netlink notifier
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 1/6] netfilter: nf_tables: validate all pending tables
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 0/6] netfilter updates for net
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] tests: shell: use minutes granularity in sets/0036add_set_element_expiration_0
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] tests: shell: use minutes granularity in sets/0036add_set_element_expiration_0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: error out on meter overlap with an existing set/map declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] tests: shell: Stabilize sets/reset_command_0 test
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: defer gc run if previous batch is still pending
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: defer gc run if previous batch is still pending
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH] clang-format: add clang-format configuration file from Linux kernel
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH] gitignore: ignore cscope files
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH net-next 01/10] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH nf-next] netfilter: nf_tables: missing extended netlink error in lookup functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 10/10] netfilter: nf_tables: allow loop termination for pending fatal signal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 06/10] netfilter: nft_osf: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 05/10] netfilter: nf_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 03/10] netfilter: ipset: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 08/10] netfilter: x_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 04/10] netfilter: nf_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 07/10] netfilter: nft_meta: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 09/10] netfilter: xtables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 02/10] netfilter: ebtables: replace zero-length array members
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 00/10] netfilter updates for net-next
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 01/10] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft] cache: chain listing implicitly sets on terse option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ipset] bash-completion: fix syntax error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH conntrack] tests/conntrack: add initial stress test for conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v2] INSTALL: provide examples to install python bindings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ulogd2 v3 11/11] db: insert ipv6 addresses in the same format as ip2bin
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 10/11] sqlite3: insert ipv6 addresses as null rather than garbage
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 07/11] gprint, oprint: use inet_ntop to format ip addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 08/11] gprint, oprint: add support for printing ipv6 addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 09/11] sqlite3: correct binding of ipv4 addresses and 64-bit integers
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 06/11] ipfix: skip non-ipv4 addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 05/11] ip2hbin: store ipv6 address as integer
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 04/11] raw2packet_BASE: store ARP address values as integers
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 02/11] printpkt: fix statement punctuator
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 03/11] printpkt, raw2packet_BASE: keep gateway address in NBO
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 01/11] src: record length of integer key values
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 00/11] Fixes for handling and output of IP addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft,v2] INSTALL: provide examples to install python bindings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: allow loop termination for pending fatal signal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] tests/shell: expand vmap test case to also cause batch abort
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] parser: permit gc-interval in map declarations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed
  • From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: use correct lock to protect gc_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: use correct lock to protect gc_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack] conntrack: do not set on NLM_F_ACK in IPCTNL_MSG_CT_GET requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2] INSTALL: provide examples to install python bindings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] INSTALL: provide examples to install python bindings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack] conntrack: skip ENOENT when -U/-D finds a stale conntrack entry
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack] conntrack: unbreak -U command, use correct family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path
  • From: "Liu, Yujie" <yujie.liu@xxxxxxxxx>
• Re: libnetfilter_queue patch ping
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nft] INSTALL: provide examples to install python bindings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_queue patch ping
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• libnetfilter_queue patch ping
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH xtables-addons] doc: fix version number in xtables-addons.8
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] json: use strtok_r() instead of strtok()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH xtables-addons 3/5] build: update `AM_V_*` definitions to match autotools
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] json: use strtok_r() instead of strtok()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH xtables-addons] doc: fix version number in xtables-addons.8
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v3 2/3] nftutils: add wrappers for getprotoby{name,number}_r(), getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v3 3/3] src: use wrappers for getprotoby{name,number}_r(), getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v3 1/3] nftutils: add new internal file for general utilities
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH] landlock: Fix and test network AF inconsistencies
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH xtables-addons 1/5] build: use `$(top_srcdir)` when including Makefile.extra
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 2/5] build: replace `AM_V_silent` with `AM_V_at`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 0/5] Autoools silent-rules fixes
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 5/5] build: define `AM_V_GEN` where it is needed
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 4/5] build: don't hard-code `AM_DEFAULT_VERBOSITY` in Makefile.iptrules
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 3/5] build: update `AM_V_*` definitions to match autotools
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 6/6] py: add Nftables.{get,set}_input_flags() API
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 5/6] py: extract flags helper functions for set_debug()/get_debug()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 4/6] py: fix exception during cleanup of half-initialized Nftables
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 1/6] src: add input flags for nft_ctx
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 0/6] add input flags and "no-dns"/"json" flags
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: GC transaction race with abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: flush pending destroy work before netlink notifier
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: validate all pending tables
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCHv2 nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH] landlock: Fix and test network AF inconsistencies
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH] landlock: Fix and test network AF inconsistencies
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• [PATCH] landlock: Fix and test network AF inconsistencies
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v4] Bluetooth: Fix for ACL disconnect when pairing fails
  • From: Muhammad Usama Anjum <usama.anjum@xxxxxxxxxxxxx>
• Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxx>
• Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 5/6] py: extract flags helper functions for set_debug()/get_debug()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 4/6] py: fix exception during cleanup of half-initialized Nftables
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [nft PATCH v4 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 1/6] src: add input flags for nft_ctx
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next v2] netfilter: ebtables: replace zero-length array members
  • From: Gong Ruiqi <gongruiqi1@xxxxxxxxxx>
• Re: [PATCH net-next v2] netfilter: ebtables: replace zero-length array members
  • From: Simon Horman <horms@xxxxxxxxxx>
• Re: [PATCH net 1/9] netfilter: nf_tables: fix false-positive lockdep splat
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net-next v2] netfilter: ebtables: replace zero-length array members
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• [PATCH net-next v4] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• [PATCH RFC net-next 09/14] ipvs: switch to per-net connection table
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 08/14] ipvs: use resizable hash table for services
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 12/14] ipvs: use more keys for connection hashing
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 13/14] ipvs: add ip_vs_status info
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 06/14] ipvs: use more counters to avoid service lookups
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 07/14] ipvs: add resizable hash tables
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 11/14] ipvs: no_cport and dropentry counters can be per-net
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 05/14] ipvs: do not keep dest_dst after dest is removed
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 10/14] ipvs: show the current conn_tab size to users
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 14/14] ipvs: add conn_lfactor and svc_lfactor sysctl vars
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net 9/9] netfilter: nft_dynset: disallow object maps
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 8/9] netfilter: nf_tables: GC transaction race with netns dismantle
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 5/9] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 4/9] netfilter: nf_tables: don't fail inserts if duplicate has expired
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 7/9] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 1/9] netfilter: nf_tables: fix false-positive lockdep splat
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 0/9] netfilter fixes for net
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 3/9] netfilter: nf_tables: deactivate catchall elements in next generation
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 6/9] ipvs: fix racy memcpy in proc_do_sync_threshold
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 2/9] netfilter: nf_tables: fix kdoc warnings after gc rework
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
• Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxx>
• [PATCHv2 nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH RFC net-next 03/14] ipvs: some service readers can use RCU
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 04/14] ipvs: use single svc table
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 02/14] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 00/14] ipvs: per-net tables and optimizations
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu
  • From: Julian Anastasov <ja@xxxxxx>
• [iptables PATCH] Revert --compat option related commits
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH nf 3/3] netfilter: nft_dynset: disallow object maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/3] netfilter: nf_tables: GC transaction race with netns dismantle
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/3] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: add transaction stress test with parallel delete/add/flush and netns deletion
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/2] selftests: netfilter: test nat source port clash resolution interaction with tcp early demux
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/2] netfilter: nf_nat: fix yet another bizarre early demux corner case
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  • From: Simon Horman <horms@xxxxxxxxxx>
• Re: [PATCH] ipvs: fix racy memcpy in proc_do_sync_threshold
  • From: Julian Anastasov <ja@xxxxxx>
• LPC 2023 Networking and BPF Track CFP (Reminder)
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH 5.4 32/39] netfilter: nf_tables: report use refcount overflow
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 5.10 59/68] netfilter: nf_tables: report use refcount overflow
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 5.15 76/89] netfilter: nf_tables: report use refcount overflow
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 25/33] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 26/33] netfilter: nf_tables: report use refcount overflow
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.14 20/26] netfilter: nf_tables: report use refcount overflow
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• Re: [PATCH -stable,4.14 0/1] netfilter stable fix for 4.14
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH -stable,4.14 1/1] netfilter: nf_tables: report use refcount overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,4.14 0/1] netfilter stable fix for 4.14
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,4.19 2/2] netfilter: nf_tables: report use refcount overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,4.19 1/2] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,4.19 0/2] netfilter stable fixes for 4.19
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,5.4 1/1] netfilter: nf_tables: report use refcount overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,5.4 0/1] netfilter stable fix for 5.4
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,5.10 1/1] netfilter: nf_tables: report use refcount overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,5.10 0/1] netfilter stable fix for 5.10
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,5.15 1/1] netfilter: nf_tables: report use refcount overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,5.15 0/1] netfilter stable fix for 5.15
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,6.1 1/1] netfilter: nf_tables: report use refcount overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,6.1 0/1] netfilter stable fix for 6.1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: don't fail inserts if duplicate has expired
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH] ipvs: fix racy memcpy in proc_do_sync_threshold
  • From: Simon Horman <horms@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: deactivate catchall elements in next generation
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [iptables PATCH v2 0/4] Implement a best-effort forward compat solution
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix kdoc warnings after gc rework
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v3] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: replace zero-length array members
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH nft] tests: add test with concatenation, vmap and timeout
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [iptables PATCH v2 1/4] nft: Pass nft_handle to add_{target,action}()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 4/4] tests: Test compat mode
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 0/4] Implement a best-effort forward compat solution
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 3/4] Add --compat option to *tables-nft and *-nft-restore commands
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 2/4] nft: Introduce and use bool nft_handle::compat
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net 1/5] netfilter: nf_tables: don't skip expired elements during walk
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: Fwd: kernel: WARNING: CPU: 0 PID: 16269 at net/netfilter/nf_conntrack_core.c:1210
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net 0/5] Netfilter fixes for net
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Fwd: kernel: WARNING: CPU: 0 PID: 16269 at net/netfilter/nf_conntrack_core.c:1210
  • From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
• [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [iptables PATCH v2 0/3] Chain counter fixes here and there
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] Use SOCK_CLOEXEC/O_CLOEXEC where available
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] tests: iptables-test: Fix command segfault reports
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] tests: iptables-test: Fix command segfault reports
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 1/2] nft-ruleparse: Introduce nft_create_target()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] Use SOCK_CLOEXEC/O_CLOEXEC where available
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 2/3] Revert "libiptc: fix wrong maptype of base chain counters on restore"
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 3/3] tests: shell: Test chain policy counter behaviour
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 0/3] Chain counter fixes here and there
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 1/3] nft: Create builtin chains with counters enabled
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH net 0/5] Netfilter fixes for net
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 0/2] doc: fix cleaning of man-pages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: nf_tables: don't skip expired elements during walk
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] netfilter: nf_tables: GC transaction API to avoid race with control plane
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/5] netfilter: nf_tables: remove busy mark and gc batch API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/5] netfilter: nf_tables: adapt set backend to use GC transaction API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/5] netfilter: nft_set_hash: mark set element as dead when deleting from packet path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• Re: [PATCH next-next 1/5] netfilter: gre: Remove unused function declaration nf_ct_gre_keymap_flush()
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH v2 5/7] netfilter: nft_osf: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 7/7] netfilter: xtables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 6/7] netfilter: x_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nf 3/5] netfilter: nf_tables: adapt set backend to use GC transaction API
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nf 3/5] netfilter: nf_tables: adapt set backend to use GC transaction API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/5] netfilter: nf_tables: GC transaction API to avoid race with control plane
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 5/5] netfilter: nf_tables: remove busy mark and gc batch API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 4/5] netfilter: nft_set_hash: mark set element as dead when deleting from packet path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/5] netfilter: nf_tables: don't skip expired elements during walk
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Simon Horman <horms@xxxxxxxxxx>
• [PATCH 4.19 133/323] netfilter: nf_tables: fix scheduling-while-atomic splat
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 132/323] netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 131/323] netfilter: nf_tables: reject unbound anonymous set before commit phase
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 130/323] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 129/323] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 128/323] netfilter: nf_tables: use net_generic infra for transaction data
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 127/323] netfilter: add helper function to set up the nfnetlink header and use it
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 126/323] netfilter: nftables: add helper function to set the base sequence number
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 125/323] netfilter: nf_tables: add rescheduling points during loop detection walks
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.19 124/323] netfilter: nf_tables: fix nat hook table deletion
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.14 088/204] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.14 089/204] netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH 4.14 087/204] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: replace zero-length array members
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v3 14/14] sysctl: Use ctl_table_size as stopping criteria for list macro
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 12/14] vrf: Update to register_net_sysctl_sz
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 13/14] sysctl: SIZE_MAX->ARRAY_SIZE in register_net_sysctl
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 11/14] networking: Update to register_net_sysctl_sz
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 10/14] netfilter: Update to register_net_sysctl_sz
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 04/14] sysctl: Add size argument to init_header
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 03/14] sysctl: Add ctl_table_size to ctl_table_header
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 08/14] sysctl: Add size to register_net_sysctl function
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 09/14] ax.25: Update to register_net_sysctl_sz
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 07/14] sysctl: Add size arg to __register_sysctl_init
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 05/14] sysctl: Add a size arg to __register_sysctl_table
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 06/14] sysctl: Add size to register_sysctl
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 02/14] sysctl: Use ctl_table_header in list_for_each_table_entry
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 01/14] sysctl: Prefer ctl_table_header in proc_sysctl
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v3 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: ebtables: replace zero-length array members
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• [PATCH v3] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ebtables: fix fortify warnings
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Joel Granados <j.granados@xxxxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Joel Granados <j.granados@xxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ebtables: fix fortify warnings
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ebtables: fix fortify warnings
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: fix fortify warnings
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• [PATCH v2 4/7] netfilter: nft_meta: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH v2 5/7] netfilter: nft_osf: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH v2 6/7] netfilter: x_tables: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH v2 3/7] netfilter: nf_tables: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH v2 7/7] netfilter: xtables: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH v2 2/7] netfilter: nf_tables: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH v2 0/7] netfilter: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• Re: [PATCH 2/7] netfilter: nf_tables: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• Re: [PATCH 6/7] netfilter: x_tables: refactor deprecated strncpy
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH 6/7] netfilter: x_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/7] netfilter: nf_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 7/7] netfilter: xtables: refactor deprecated strncpy
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 3/7] netfilter: nf_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ebtables: fix fortify warnings
  • From: Kees Cook <kees@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: ebtables: fix fortify warnings
  • From: Kees Cook <kees@xxxxxxxxxx>
• [PATCH 7/7] netfilter: xtables: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH 5/7] netfilter: nft_osf: refactor deprecated strncpy to strscpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH 2/7] netfilter: nf_tables: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH 4/7] netfilter: nft_meta: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH 3/7] netfilter: nf_tables: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH 6/7] netfilter: x_tables: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH 1/7] netfilter: ipset: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH 0/7] netfilter: refactor deprecated strncpy
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH v2] netfilter: ebtables: fix fortify warnings
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix false-positive lockdep splat
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ebtables: fix fortify warnings
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH v2 11/14] networking: Update to register_net_sysctl_sz
  • From: Przemek Kitszel <przemyslaw.kitszel@xxxxxxxxx>
• [PATCH next-next 1/5] netfilter: gre: Remove unused function declaration nf_ct_gre_keymap_flush()
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 0/5] netfilter updates for net-next
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH next-next 3/5] netfilter: conntrack: Remove unused function declarations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH next-next 5/5] netfilter: nfnetlink_log: always add a timestamp
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH next-next 2/5] netfilter: helper: Remove unused function declarations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 11/14] networking: Update to register_net_sysctl_sz
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH next-next 4/5] netfilter: h323: Remove unused function declarations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: fix fortify warnings
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH v2 11/14] networking: Update to register_net_sysctl_sz
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• Re: [PATCH] netfilter: ebtables: fix fortify warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Chris Maness <christopher.maness@xxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Chris Maness <christopher.maness@xxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH] netfilter: ebtables: fix fortify warnings
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
• [PATCH net-next] netfilter: h323: Remove unused function declarations
  • From: Yue Haibing <yuehaibing@xxxxxxxxxx>
• [PATCH nft 2/2] doc: move man-pages to `MAINTAINERCLEANFILES`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft 1/2] doc: move man-pages to `dist_man_MANS`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft 0/2] doc: fix cleaning of man-pages
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net-next] netfilter: conntrack: Remove unused function declarations
  • From: Simon Horman <horms@xxxxxxxxxx>
• Re: [iptables PATCH] extensions: libip6t_icmp: Add names for mld-listener types
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: move processing logic out of asserts
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 00/15] Man pages review
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 1/2] nft-ruleparse: Introduce nft_create_target()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 2/2] nft-ruleparse: parse meta mark set as MARK target
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH netfilter] netfilter: nfnetlink_log: always add a timestamp
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH netfilter] netfilter: nfnetlink_log: always add a timestamp
  • From: Maciej Żenczykowski <maze@xxxxxxxxxx>
• Re: [PATCH iptables] nft-ruleparse: parse meta mark set as MARK target
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables] nft-ruleparse: parse meta mark set as MARK target
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net-next] netfilter: conntrack: Remove unused function declarations
  • From: Yue Haibing <yuehaibing@xxxxxxxxxx>
• Re: nftables: syntax ambiguity with objref map and ct helper objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v4 5/6] py: extract flags helper functions for set_debug()/get_debug()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v4 4/6] py: fix exception during cleanup of half-initialized Nftables
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v4 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v4 1/6] src: add input flags for nft_ctx
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v4 0/6] add input flags and "no-dns"/"json" flags
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH iptables] nft-ruleparse: parse meta mark set as MARK target
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Solution Bugzilla Issue 1659 - iptables-nft v1.8.9 Error: meta sreg key not supported
  • From: Florian Westphal <fw@xxxxxxxxx>
• Solution Bugzilla Issue 1659 - iptables-nft v1.8.9 Error: meta sreg key not supported
  • From: Robert <robert.smith51@xxxxxxxxxxxxxx>
• [iptables PATCH] Revert "libiptc: fix wrong maptype of base chain counters on restore"
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] extensions: libip6t_icmp: Add names for mld-listener types
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] nft: move processing logic out of asserts
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] Makefile: Support 'make tags' and 'make cscope'
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 1/2] iptables-restore: Drop dead code
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v11 08/12] landlock: Add network rules and TCP hooks support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v11 08/12] landlock: Add network rules and TCP hooks support
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [nft PATCH v2] tests: shell: Review test-cases for destroy command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2] tests: shell: Review test-cases for destroy command
  • From: "Fernando F. Mancera" <ffmancera@xxxxxxxxxx>
• [nft PATCH v2] tests: shell: Review test-cases for destroy command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH] tests: shell: Review test-cases for destroy command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 0/3] Python Build Modernization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] doc: document add chain device parameter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests: shell: Review test-cases for destroy command
  • From: "Fernando F. Mancera" <ffmancera@xxxxxxxxxx>
• [nft PATCH] doc: document add chain device parameter
  • From: Brennan Paciorek <bpaciore@xxxxxxxxxx>
• Re: [PATCH net-next] netfilter: helper: Remove unused function declarations
  • From: Simon Horman <horms@xxxxxxxxxx>
• [iptables PATCH v2 06/15] man: iptables.8: Trivial font fixes
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 15/15] man: iptables-save.8: Start paragraphs in upper-case
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 13/15] man: iptables-save.8: Clarify 'available tables'
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 04/15] man: iptables.8: Clarify --goto description
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 08/15] man: iptables-restore.8: Consistently document -w option
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 05/15] man: Use HTTPS for links to netfilter.org
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 01/15] man: iptables.8: Extend exit code description
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 03/15] man: iptables.8: Fix intra page reference
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 09/15] man: iptables-restore.8: Drop -W option from synopsis
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 10/15] man: iptables-restore.8: Put 'file' in italics in synopsis
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 02/15] man: iptables.8: Trivial spelling fixes
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 14/15] man: iptables-save.8: Fix --modprobe description
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 12/15] man: Trivial: Missing space after comma
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 11/15] man: iptables-restore.8: Start paragraphs in upper-case
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 07/15] man: iptables-restore.8: Fix --modprobe description
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 00/15] Man pages review
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] parser: deduplicate map with data interval
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] parser: allow ct timeouts to use time_spec values
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] tests: fix inet nat prio tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] tests: add dynmap datapath add/delete test case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next] netfilter: helper: Remove unused function declarations
  • From: Yue Haibing <yuehaibing@xxxxxxxxxx>
• [PATCH net-next] netfilter: gre: Remove unused function declaration nf_ct_gre_keymap_flush()
  • From: Yue Haibing <yuehaibing@xxxxxxxxxx>
• Re: [iptables PATCH 06/16] man: iptables.8: Trivial font fixes
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: ulogd2 patch ping
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [iptables PATCH 06/16] man: iptables.8: Trivial font fixes
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 14/16] man: iptables-save.8: Fix --modprobe description
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [iptables PATCH 07/16] man: iptables-restore.8: Fix --modprobe description
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [iptables PATCH 06/16] man: iptables.8: Trivial font fixes
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/3] tests: libipt_icmp.t: Enable tests with numeric output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/3] extensions: libipt_icmp: --icmp-type is not mandatory
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/16] man: iptables.8: Trivial spelling fixes
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 12/16] man: iptables-restore.8: Trivial: Missing space after comma
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/16] man: iptables-restore.8: Consistently document -w option
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 04/16] man: iptables.8: Clarify --goto description
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 05/16] man: Use HTTPS for links to netfilter.org
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 00/16] Man pages review
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 14/16] man: iptables-save.8: Fix --modprobe description
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 13/16] man: iptables-save.8: Clarify 'available tables'
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 15/16] man: iptables-save.8: Start paragraphs in upper-case
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/16] man: iptables-restore.8: Drop -W option from synopsis
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/16] man: iptables-restore.8: Start paragraphs in upper-case
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 07/16] man: iptables-restore.8: Fix --modprobe description
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 16/16] man: iptables-save.8: Trivial: Missing space in enumeration
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/16] man: iptables-restore.8: Put 'file' in italics in synopsis
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/16] man: iptables.8: Extend exit code description
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/16] man: iptables.8: Fix intra page reference
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 06/16] man: iptables.8: Trivial font fixes
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: bpf_link: avoid unused-function warning
  • From: Daniel Xu <dxu@xxxxxxxxx>
• Re: [PATCH] netfilter: bpf_link: avoid unused-function warning
  • From: "Arnd Bergmann" <arnd@xxxxxxxx>
• [iptables PATCH] Makefile: Support 'make tags' and 'make cscope'
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: bpf_link: avoid unused-function warning
  • From: Daniel Xu <dxu@xxxxxxxxx>
• [iptables PATCH 1/2] iptables-restore: Drop dead code
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] iptables-apply: Eliminate shellcheck warnings
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: bpf_link: avoid unused-function warning
  • From: Arnd Bergmann <arnd@xxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH v3 net-next] net: flow_dissector: Use 64bits for used_keys
  • From: Alexander Lobakin <aleksander.lobakin@xxxxxxxxx>
• [nft PATCH] tests: shell: Review test-cases for destroy command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 03/14] sysctl: Add ctl_table_size to ctl_table_header
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• Re: ulogd2 patch ping
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH v2 10/14] netfilter: Update to register_net_sysctl_sz
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH] netfilter: bpf: Only define get_proto_defrag_hook() if necessary
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH] netfilter: bpf: Only define get_proto_defrag_hook() if necessary
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: ulogd2 patch ping
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: bpf: Only define get_proto_defrag_hook() if necessary
  • From: Daniel Xu <dxu@xxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
• Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl
  • From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
• Re: [PATCH v2 03/14] sysctl: Add ctl_table_size to ctl_table_header
  • From: Simon Horman <horms@xxxxxxxxxx>
• Re: [PATCH v2 03/14] sysctl: Add ctl_table_size to ctl_table_header
  • From: Simon Horman <horms@xxxxxxxxxx>
• Re: nftables: syntax ambiguity with objref map and ct helper objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nftables: syntax ambiguity with objref map and ct helper objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nftables: syntax ambiguity with objref map and ct helper objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/3] Python Build Modernization
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft 3/3] py: add pyproject.toml to support PEP-517-compatible build-systems
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft 2/3] py: use setup.cfg to configure setuptools
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft 1/3] py: move package source into src directory
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft] libnftables: Drop cache in -c/--check mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 net-next] net: flow_dissector: Use 64bits for used_keys
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH v2 13/14] sysctl: SIZE_MAX->ARRAY_SIZE in register_net_sysctl
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v2 14/14] sysctl: Use ctl_table_size as stopping criteria for list macro
  • From: Joel Granados <joel.granados@xxxxxxxxx>
• [PATCH v2 09/14] ax.25: Update to register_net_sysctl_sz
  • From: Joel Granados <joel.granados@xxxxxxxxx>