Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH nft 1/3] tests/shell: fix preserving ruleset diff after test
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/3] tests/shell: colorize NFT_TEST_HAS_SOCKET_LIMITS
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/3] tests/shell: set C locale in "run-tests.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/3] tests/shell: minor improvements to "run-tests.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/3] tests/shell: don't show the exit status for failed tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft] evaluate: update mark datatype compatibility check from maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: update mark datatype compatibility check from maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -stable,4.19 0/2] netfilter stable fixes for 4.19
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH -stable,4.19 0/2] netfilter stable fixes for 4.19
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,4.19 1/2] netfilter: nft_flow_offload: fix underflow in flowtable reference counter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -stable,4.19 2/2] netfilter: nf_tables: missing NFT_TRANS_PREPARE_ERROR in flowtable deactivatation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2] evaluate: expand sets and maps before evaluation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 01/14] tests/shell: add and use chain binding feature probe
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 13/14] tests/shell: implement NFT_TEST_HAVE_json feature detection as script
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 12/14] tests/shell: skip reset tests if kernel lacks support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 05/14] tests/shell: skip bitshift tests if kernel lacks support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 14/14] tests/shell: check diff in "maps/typeof_maps_0" and "sets/typeof_sets_0" test
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 10/14] tests/shell: skip test cases involving osf match if kernel lacks support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 11/14] tests/shell: skip test cases if ct expectation and/or timeout lacks support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 08/14] tests/shell: skip destroy tests if kernel lacks support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 09/14] tests/shell: skip catchall tests if kernel lacks support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 03/14] tests/shell: skip map query if kernel lacks support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 06/14] tests/shell: skip some tests if kernel lacks netdev egress support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 04/14] tests/shell: skip inner matching tests if unsupported
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 02/14] tests/shell: skip netdev_chain_0 if kernel requires netdev device
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 00/14] tests/shell: fix tests to skip on lacking feature support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 07/14] tests/shell: skip inet ingress tests if kernel lacks support
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 2/3] tests/shell: skip "sets/reset_command_0" on unsupported reset command
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: Issue with counter and interval map
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: expand sets and maps before evaluation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: fix memleak in prefix evaluation with wildcard interface name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: "Timo Sigurdsson" <public_timo.s@xxxxxxxxxxxxxx>
• Re: Issue with counter and interval map
  • From: Jann Haber <jannh@xxxxxxxxxx>
• [PATCH nft 1/3] tests/shell: cleanup creating dummy interfaces in tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/3] tests/shell: skip "sets/reset_command_0" on unsupported reset command
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/3] tests/shell: suggest 4Mb /proc/sys/net/core/{wmem_max,rmem_max} for rootless
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/3] shell/tests: cleanups and skip tests on Fedora 38
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/2] tests/shell: add feature probing via "features/*.nft" files
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/2] tests/shell: colorize NFT_TEST_SKIP_/NFT_TEST_HAVE_ in test output
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/2] tests/shell: add feature probing via "features/*.nft" files
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft] tests: add test for dormant on/off/on bug
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: disable toggling dormant table state more than once
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH nft 1/1] netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/1] tests/shell: honor CLICOLOR_FORCE to force coloring in run-tests.sh
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/1] tests/build: capture more output from "tests/build/run-tests.sh" script
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [RFC nft] icmpv6: Allow matching target address in NS/NA, redirect and MLD
  • From: Nicolas Cavallari <nicolas.cavallari@xxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2 libnetfilter_conntrack 2/2] utils: add NFCT_FILTER_DUMP_TUPLE example
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 libnetfilter_conntrack 1/2] Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] include: linux: Update kernel.h
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Fix for useless meta expressions in rule
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] tests: shell: Fix for ineffective 0007-mid-restore-flush_0
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] extensions: Fix checking of conntrack --ctproto 0
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] Revert --compat option related commits
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 2/2] scanner: restrict include directive to regular files
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/2] libnftables: refuse to open onput files other than named pipes or regular files
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• [iptables PATCH] tests: shell: Fix for ineffective 0007-mid-restore-flush_0
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] extensions: Fix checking of conntrack --ctproto 0
  • From: Phil Sutter <phil@xxxxxx>
• Re: Issue with counter and interval map
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 9/9] selftests: netfilter: Test nf_tables audit logging
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 8/9] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 7/9] netfilter: conntrack: fix extension size table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 6/9] netfilter: nf_tables: disallow element removal on anonymous sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/9] netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/9] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/9] netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/9] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/9] netfilter: nf_tables: disallow rule removal from chain binding
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/9] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH v3 1/2] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nf PATCH v3 0/2] nf_tables: follow-up on audit fix, add selftest
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: fix extension size table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH v3 1/2] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: Florian Westphal <fw@xxxxxxxxx>
• Issue with counter and interval map
  • From: Jann Haber <jannh@xxxxxxxxxx>
• [PATCH nft 1/2] tests/shell: exit 77 from "run-tests.sh" if all tests were skipped
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/2] tests/shell: accept $NFT_TEST_TMPDIR_TAG for the result directory
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/6] tests/shell: special handle base path starting with "./"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 6/6] tools: add "tools/check-tree.sh" script to check consistency of nft dumps
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/6] tests/shell: remove spurious .nft dump files
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/6] tests/shell: add missing nft/nodump files for tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/6] tests/shell: drop unstable dump for "transactions/0051map_0" test
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/6] adjust nft dump files and add check-tree script
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 5/6] tests/shell: in find_tests() use C locale for sorting tests names
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [ANNOUNCE] nftlb 1.0.9 release
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• [nf PATCH v3 2/2] selftests: netfilter: Test nf_tables audit logging
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH v3 1/2] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH v3 0/2] nf_tables: follow-up on audit fix, add selftest
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 3/3] tests/shell: add option to shuffle execution order of tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/3] tests/shell: export NFT_TEST_RANDOM_SEED variable for tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/3] tests/shell: add "random-source.sh" helper for random-source for sort/shuf
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/3] add NFT_TEST_RANDOM_SEED and shuffle tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/2] tests/shell: ensure vgdb-pipe files are deleted from "nft-valgrind-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/2] tests/shell: kill running child processes when aborting "run-tests.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nf-next RFC 2/2] selftests: netfilter: Test nf_tables audit logging
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: Salvatore Bonaccorso <carnil@xxxxxxxxxx>
• LPC 2023 Networking and BPF Track CFP (Reminder)
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: "Timo Sigurdsson" <public_timo.s@xxxxxxxxxxxxxx>
• [iproute2] xfrm: add udp standalone encapsulation mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: "Timo Sigurdsson" <public_timo.s@xxxxxxxxxxxxxx>
• Re: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: conntrack: fix extension size table
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: "Linux regression tracking (Thorsten Leemhuis)" <regressions@xxxxxxxxxxxxx>
• [PATCH nft v2] datatype: fix leak and cleanup reference counting for struct datatype
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH] datatype: fix leak and cleanup reference counting for struct datatype
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH RFC libnetfilter_queue] doc: Get rid of DEPRECATED tag (Work In Progress)
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: Race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  • From: Kyle Zeng <zengyhkyle@xxxxxxxxx>
• Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: "Timo Sigurdsson" <public_timo.s@xxxxxxxxxxxxxx>
• Re: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libmnl] nlmsg, attr: fix false positives when validating buffer sizes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] datatype: fix leak and cleanup reference counting for struct datatype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/2] parser_bison: include <nft.h> for base C environment to "parser_bison.y"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] include: include <stdlib.h> in <nft.h>
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libmnl] nlmsg, attr: fix false positives when validating buffer sizes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] datatype: fix leak and cleanup reference counting for struct datatype
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH libmnl] nlmsg, attr: fix false positives when validating buffer sizes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH AUTOSEL 4.14 6/8] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Pavel Machek <pavel@xxxxxxx>
• Re: [PATCH libmnl] nlmsg, attr: fix false positives when validating buffer sizes
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH RFC libnetfilter_queue] doc: Get rid of DEPRECATED tag (Work In Progress)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH RFC libnetfilter_queue] doc: Get rid of DEPRECATED tag (Work In Progress)
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libmnl] nlmsg, attr: fix false positives when validating buffer sizes
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: disallow element removal on anonymous sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH AUTOSEL 5.10 11/14] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 6.4 30/41] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.15 12/15] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 6/8] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 6.1 20/26] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 6.5 33/45] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH nft 1/1] datatype: rename "dtype_clone()" to datatype_clone()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/2] include: include <stdlib.h> in <nft.h>
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/2] parser_bison: include <nft.h> for base C environment to "parser_bison.y"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/1] cache: avoid accessing uninitialized varible in implicit_chain_cache()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nf-next RFC 2/2] selftests: netfilter: Test nf_tables audit logging
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 0/2] tests/shell: add mechanism for skipping (for no JSON and slow)
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/2] tests/shell: skip tests if nft does not support JSON mode
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/2] tests/shell: add "--quick" option to skip slow tests (via NFT_TEST_SKIP_slow=y)
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nf PATCH v2] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next RFC 2/2] selftests: netfilter: Test nf_tables audit logging
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH v2] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 1/1] tests/shell: set valgrind's "--vgdb-prefix=" to orignal TMPDIR
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/1] tests/shell: print number of completed tests to show progress
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 2/4] tests/shell: generate and add ".nft" dump files for existing tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 1/4] tests/shell: honor .nodump file for tests without nft dumps
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 4/4] tests/shell: add ".nft" dump files for tests without dumps/ directory
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 3/4] tests/shell: add missing ".nodump" file for tests without dumps
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 0/4] tests/shell: add missing .nft and .nodump files
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nf PATCH v2] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am"
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 2/2] tests/shell: add missing ".nodump" file for tests without dumps
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 2/2] tests/shell: add missing ".nodump" file for tests without dumps
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nf PATCH v2] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nf 4/4] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 3/4] netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/4] netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/4] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: disallow rule removal from chain binding
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf-next RFC 2/2] selftests: netfilter: Test nf_tables audit logging
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH 1/2] netfilter: nf_tables: Fix entries val in rule reset audit log
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH 0/2] nf_tables: follow-up on audit fix, propose kselftest
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 10/11] tests/shell: record wall time of test run in result data
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 08/11] tests/shell: print "kernel is tainted" separate from test result
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 11/11] tests/shell: set NFT_TEST_JOBS based on $(nproc)
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 09/11] tests/shell: no longer enable verbose output when selecting a test
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 05/11] tests/shell: print the NFT setting with the VALGRIND=y wrapper
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 07/11] tests/shell: redirect output of test script to file too
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 06/11] tests/shell: don't redirect error/warning messages to stderr
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 02/11] tests/shell: cleanup print_test_result() and show TAINTED error code
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 03/11] tests/shell: colorize terminal output with test result
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 04/11] tests/shell: fix handling failures with VALGRIND=y
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 01/11] tests/shell: cleanup result handling in "test-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 00/11] tests/shell: colorize output, fix VALGRIND mode
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft] tests/shell: return 77/skip for tests that fail to create dummy device
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/2] tests/shell: add missing ".nodump" file for tests without dumps
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/2] tests/shell: honor .nodump file for tests without nft dumps
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft v5 00/19] tests/shell: allow running tests as non-root
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net 1/6] netfilter: nftables: exthdr: fix 4-byte stack OOB write
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH nf] netfilter: nf_tables: disallow rule removal from chain binding
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum
  • From: Will Deacon <will@xxxxxxxxxx>
• Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum
  • From: Robin Murphy <robin.murphy@xxxxxxx>
• Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: skip deactivation of deleted rules in bound chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] include: linux: Update kernel.h
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] nft: Fix for useless meta expressions in rule
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 5/6] netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 4/6] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 3/6] netfilter: nf_tables: uapi: Describe NFTA_RULE_CHAIN_ID
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 2/6] netfilter: nfnetlink_osf: avoid OOB read
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 1/6] netfilter: nftables: exthdr: fix 4-byte stack OOB write
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 0/6] netfilter updates for net
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 4/5] tests: shell: add and use feature probe for map query like a set
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 1/5] tests: add feature probing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 2/5] tests: shell: let netdev_chain_0 test indicate SKIP if kernel requires netdev device
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [GIT PULL] sysctl changes for v6.6-rc1
  • From: Joel Granados <j.granados@xxxxxxxxxxx>
• [PATCH nft v5 18/19] tests/shell: fix "0003includepath_0" for different TMPDIR
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 15/19] tests/shell: bind mount private /var/run/netns in test container
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 19/19] tests/shell: set TMPDIR for tests in "test-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 14/19] tests/shell: support running tests in parallel
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 12/19] tests/shell: move taint check to "test-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 17/19] tests/shell: record the test duration (wall time) in the result data
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 16/19] tests/shell: skip test in rootless that hit socket buffer size limit
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 13/19] tests/shell: move valgrind wrapper script to separate script
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 06/19] tests/shell: print test configuration
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 08/19] tests/shell: interpret an exit code of 77 from scripts as "skipped"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 11/19] tests/shell: rework printing of test results
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 10/19] tests/shell: move the dump diff handling inside "test-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 05/19] tests/shell: normalize boolean configuration in environment variables
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 07/19] tests/shell: run each test in separate namespace and allow rootless
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 09/19] tests/shell: support --keep-logs option (NFT_TEST_KEEP_LOGS=y) to preserve test output
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 03/19] tests/shell: check test names before start and support directories
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 04/19] tests/shell: export NFT_TEST_BASEDIR and NFT_TEST_TMPDIR for tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 02/19] tests/shell: rework finding tests and add "--list-tests" option
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 00/19] tests/shell: allow running tests as non-root
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v5 01/19] tests/shell: rework command line parsing in "run-tests.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [GIT PULL] sysctl changes for v6.6-rc1
  • From: Alexey Gladkov <legion@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC] tests: add feature probing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH RFC] tests: add feature probing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC] tests: add feature probing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: Unbreak audit log reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC] tests: add feature probing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 1/5] tests: add feature probing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATH nf v3] netfilter/osf: avoid OOB read
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum
  • From: "David Wang" <00107082@xxxxxxx>
• Re: [PATCH nft 1/5] tests: add feature probing
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] evaluate: fix get element for concatenated set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum
  • From: Daniel Xu <dxu@xxxxxxxxx>
• [PATCH nft v4 07/17] tests/shell: run each test in separate namespace and allow rootless
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 02/17] tests/shell: rework finding tests and add "--list-tests" option
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft v3 00/11] tests/shell: allow running tests as
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 14/17] tests/shell: bind mount private /var/run/netns in test container
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 12/17] tests/shell: move taint check to "test-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 15/17] tests/shell: skip test in rootless that hit socket buffer size limit
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 06/17] tests/shell: print test configuration
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 04/17] tests/shell: export NFT_TEST_BASEDIR and NFT_TEST_TMPDIR for tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 11/17] tests/shell: rework printing of test results
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft] evaluate: fix get element for concatenated set
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/5] tests: add feature probing
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 2/5] tests: shell: let netdev_chain_0 test indicate SKIP if kernel requires netdev device
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v3 00/11] tests/shell: allow running tests as
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft v4 00/17] tests/shell: allow running tests as
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 10/17] tests/shell: move the dump diff handling inside "test-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 03/17] tests/shell: check test names before start and support directories
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 13/17] tests/shell: support running tests in parallel
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 08/17] tests/shell: interpret an exit code of 77 from scripts as "skipped"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum
  • From: Will Deacon <will@xxxxxxxxxx>
• [PATCH nft v4 16/17] tests/shell: record the test duration for investigation
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 05/17] tests/shell: normalize boolean configuration in environment variables
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum
  • From: Robin Murphy <robin.murphy@xxxxxxx>
• Re: [PATCH nft v3 00/11] tests/shell: allow running tests as
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/5] tests: add feature probing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft v4 01/17] tests/shell: rework command line parsing in "run-tests.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v4 09/17] tests/shell: support --keep-logs option (NFT_TEST_KEEP_LOGS=y) to preserve test output
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 1/5] tests: add feature probing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] tests: shell: 0043concatenated_ranges_0: re-enable all tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/5] tests: add feature probing
  • From: Phil Sutter <phil@xxxxxx>
• Re: Race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH nft v4 17/17] tests/shell: set TMPDIR for tests in "test-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  • From: Kyle Zeng <zengyhkyle@xxxxxxxxx>
• [PATCH nft v3 11/11] tests/shell: support running tests in parallel
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 05/11] tests/shell: run each test in separate namespace and allow rootless
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 10/11] tests/shell: move taint check to "test-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 07/11] tests/shell: support --keep-logs option (NFT_TEST_KEEP_LOGS=y) to preserve test output
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 08/11] tests/shell: move the dump diff handling inside "test-wrapper.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 09/11] tests/shell: rework printing of test results
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 06/11] tests/shell: interpret an exit code of 77 from scripts as "skipped"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 03/11] tests/shell: check test names before start and support directories
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 02/11] tests/shell: rework finding tests and add "--list-tests" option
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 01/11] tests/shell: rework command line parsing in "run-tests.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 04/11] tests/shell: export NFT_TEST_BASEDIR and NFT_TEST_TMPDIR for tests
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v3 00/11] tests/shell: allow running tests as
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum
  • From: David Wang <00107082@xxxxxxx>
• Re: [PATCH libnetfilter_log] libipulog: remove debugging printfs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/5] tests: shell skip inner matching tests if unsupported
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/5] tests: shell: add and use feature probe for map query like a set
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/5] tests: shell: typeof_integer/raw: prefer @nh for payload matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/5] tests: shell: let netdev_chain_0 test indicate SKIP if kernel requires netdev device
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/5] tests: add feature probing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/5] tests: shell: add and use feature probing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC] tests: add feature probing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft v2 3/3] tests/shell: run each test in separate namespace and allow rootless
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_log] libipulog: remove debugging printfs
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_conntrack 2/2] conntrack: fix BPF for filtering IPv6 addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_conntrack 1/2] Ignore `configure~`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft v2 0/3] tests/shell: allow running tests as non-root
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft] doc: describe behaviour of {ip,ip6} length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2] evaluate: revisit anonymous set with single element optimization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: ensure audit reset access to table under rcu read side lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: revisit anonymous set with single element optimization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC] tests: add feature probing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 0/3] tests/shell: allow running tests as non-root
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 3/3] tests/shell: run each test in separate namespace and allow rootless
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 2/3] tests/shell: rework finding tests and add "--list-tests" option
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 1/3] tests/shell: rework command line parsing in "run-tests.sh"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft] tests/shell: allow running tests as non-root users
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATH nf v3] netfilter/osf: avoid OOB read
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup
  • From: Felix Fietkau <nbd@xxxxxxxx>
• Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf-next PATCH] netfilter: nf_tables: Utilize NLA_POLICY_NESTED_ARRAY
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH] netfilter: nf_tables: uapi: Describe NFTA_RULE_CHAIN_ID
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH RFC] tests: add feature probing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup
  • From: Felix Fietkau <nbd@xxxxxxxx>
• Re: [PATCH 2/2] Ensure num_actions is not a negative
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] Prevent potential write out of bounds
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] Prevent potential write out of bounds
  • From: Joao Moreira <joao@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/2] Prevent potential write out of bounds
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH 2/2] Ensure num_actions is not a negative
  • From: joao@xxxxxxxxxxxxxxxxxx
• [PATCH 1/2] Make loop indexes unsigned
  • From: joao@xxxxxxxxxxxxxxxxxx
• [PATCH 0/2] Prevent potential write out of bounds
  • From: joao@xxxxxxxxxxxxxxxxxx
• Re: MASQ leak?
  • From: Ian Kumlien <ian.kumlien@xxxxxxxxx>
• [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup
  • From: Felix Fietkau <nbd@xxxxxxxx>
• Re: [PATCH nft] tests/shell: allow running tests as non-root users
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] tests/shell: allow running tests as non-root users
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft] tests/shell: allow running tests as non-root users
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: "Fernando F. Mancera" <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• [PATCH RFC] tests: add feature probing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf v2] netfilter/osf: avoid OOB read
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• Re: MASQ leak?
  • From: Ian Kumlien <ian.kumlien@xxxxxxxxx>
• Re: MASQ leak?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: MASQ leak?
  • From: Ian Kumlien <ian.kumlien@xxxxxxxxx>
• Re: MASQ leak?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• MASQ leak?
  • From: Ian Kumlien <ian.kumlien@xxxxxxxxx>
• Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH net 1/5] netfilter: nft_exthdr: Fix non-linear header modification
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net 3/5] netfilter: xt_u32: validate user space input
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/5] netfilter: nf_tables: Audit log rule reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/5] netfilter: nf_tables: Audit log setelem reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] netfilter: xt_sctp: validate the flag_info count
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter/osf: avoid OOB read
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nf] netfilter/osf: avoid OOB read
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• [PATCH nft 2/2] rule: set internal_location for table and chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests/shell: allow running tests as non-root users
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/2] src: use internal_location for unspecified location at allocation time
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] evaluate: place byteorder conversion after numgen for IP address datatypes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter/xt_u32: validate user space input
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter/xt_sctp: validate the flag_info count
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: simplify chain_alloc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: remove check for NULL before calling expr_free()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets
  • From: Volodymyr Litovka <doka@xxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [GIT PULL] sysctl changes for v6.6-rc1
  • From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/5] xt: avoid "-Wmissing-field-initializers" for "original_opts"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/5] rule: fix "const static" declaration
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/5] src: silence "implicit-fallthrough" warnings
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/5] utils: call abort() after BUG() macro
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/5] fix compiler warnings with clang and "-Wextra"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 0/8] fix compiler warnings with clang
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/2] proto: use hexadecimal to display ip frag-off field
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] tests: py: extend ip frag-off coverage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 1/4] tests: monitor: Fix monitor JSON output for insert command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 0/4] add operation cache for timestamp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: do not remove anonymous set with protocol flags and single element
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 0/8] fix compiler warnings with clang
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: fix example of xt_cpu
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/4] tests: monitor: Fix for wrong ordering in expected JSON output
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/4] tests: monitor: Fix monitor JSON output for insert command
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/4] tests: monitor: Fix time format in ct timeout test
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/4] tests: monitor: Fix for wrong syntax in set-interval.t
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] doc: fix example of xt_cpu
  • From: Victor Julien <victor@xxxxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 8/8] include: drop "format" attribute from nft_gmp_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 7/8] src: suppress "-Wunused-but-set-variable" warning with "parser_bison.c"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 4/8] evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 1/8] netlink: avoid "-Wenum-conversion" warning in dtype_map_from_kernel()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 3/8] datatype: avoid cast-align warning with struct sockaddr result from getaddrinfo()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 2/8] netlink: avoid "-Wenum-conversion" warning in parser_bison.y
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 5/8] src: rework SNPRINTF_BUFFER_SIZE() and handle truncation
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 0/8] fix compiler warnings with clang
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [syzbot] Monthly netfilter report (Aug 2023)
  • From: syzbot <syzbot+list815e32c42e38d564bf0e@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [syzbot] [netfilter?] INFO: rcu detected stall in tcp_setsockopt
  • From: syzbot <syzbot+1a11c39caf29450eac9f@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter/xt_sctp: validate the flag_info count
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] evaluate: place byteorder conversion after numgen for IP address datatypes
  • From: Jorge Ortiz <jorge.ortiz.escribano@xxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH conntrack-tools 0/4] Fixes for yacc parser compilation warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 3/4] src: cache result of time() during parsing/output
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/4] src: add ops_cache struct for caching information during parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/8] datatype: avoid cast-align warning with struct sockaddr result from getaddrinfo()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/8] netlink: avoid "-Wenum-conversion" warning in dtype_map_from_kernel()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/8] netlink: avoid "-Wenum-conversion" warning in parser_bison.y
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/8] src: use "%zx" format instead of "%Zx"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/8] fix compiler warnings with clang
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 7/8] utils: add _NFT_PRAGMA_WARNING_DISABLE()/_NFT_PRAGMA_WARNING_REENABLE helpers
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 6/8] src: suppress "-Wunused-but-set-variable" warning with "parser_bison.c"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nf] netfilter/xt_u32: validate user space input
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• [PATCH nf] netfilter/xt_u32: validate user space input
  • From: Wander Lairson Costa <wander@xxxxxxxxxx>
• [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum
  • From: syzbot <syzbot+4a9f9820bd8d302e22f7@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Fwd: Since 6.1: flow_dissector.c __skb_flow_dissect+0xa91/0x1cd0 raises WARNING in specific circumstances
  • From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
• Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets
  • From: Volodymyr Litovka <doka@xxxxxxxxx>
• Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets
  • From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
• Re: [PATCH -stable,4.14.y,4.19.y 0/1] ipvs: backport 1b90af292e71 and 5310760af1d4
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH conntrack-tools 1/4] build: reformat and sort `conntrack_LDADD` and `conntrackd_SOURCES`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack-tools 4/4] read_config_yy: correct arguments passed to `inet_aton`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack-tools 0/4] Fixes for yacc parser compilation warnings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack-tools 2/4] build: stop suppressing warnings for generated sources
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack-tools 3/4] read_config_yy: correct `yyerror` prototype
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH v4.19.y] netfilter: nf_queue: fix socket leak
  • From: Vamsi Krishna Brahmajosyula <vbrahmajosyula@xxxxxxxxxx>
• [PATCH nft 3/4] src: cache result of time() during parsing/output
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/4] src: add ops_cache struct for caching information during parsing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/4] add operation cache for timestamp
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/4] src: cache GMT offset for current time during parsing/output
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/4] evaluate: add and use parse_ctx_init() helper method
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nft v2 0/6] cleanup base includes and add <nft.h> header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft v2 6/6] configure: drop AM_PROG_CC_C_O autoconf check
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 2/6] src: add <nft.h> header and include it as first
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 5/6] include: include <std{bool,int}.h> via <nft.h>
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 0/6] cleanup base includes and add <nft.h> header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 1/6] meta: define _GNU_SOURCE to get strptime() from <time.h>
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft v2 3/6] include: don't define _GNU_SOURCE in public header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/6] build: drop recursive make for "include/**/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 6/6] build: drop recursive make for "doc/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/6] no recursive make
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/6] build: drop recursive make for "files/**/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/6] build: drop recursive make for "src/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/6] build: drop recursive make for "py/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am"
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nf v2] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• [PATCH nft] tests: 30s-stress: add failslab and abort phase tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed
  • From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
• Re: [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrack, nfct: fix some typo's
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrack, nfct: fix some typo's
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH -stable,4.14.y,4.19.y 1/1] ipvs: Improve robustness to the ipvs sysctl
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH -stable,4.14.y,4.19.y 0/1] ipvs: backport 1b90af292e71 and 5310760af1d4
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH nft 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 3/6] include: don't define _GNU_SOURCE in public header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 5/6] include: include <std{bool,int}.h> via nftdefault.h
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 2/6] src: add <nftdefault.h> header and include it as first
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 6/6] configure: drop AM_PROG_CC_C_O autoconf check
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 1/6] meta: define _GNU_SOURCE to get strptime() from <time.h>
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH net 1/6] netfilter: nf_tables: validate all pending tables
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [nft PATCH] clang-format: add clang-format configuration file from Linux kernel
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH] clang-format: add clang-format configuration file from Linux kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v5 0/6] add input flags and "no-dns"/"json" flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] gitignore: ignore cscope files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests: shell: Stabilize sets/0043concatenated_ranges_0 test
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH] tests: shell: Stabilize sets/reset_command_0 test
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] tests: shell: Stabilize sets/0043concatenated_ranges_0 test
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net 6/6] netfilter: nf_tables: defer gc run if previous batch is still pending
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 4/6] netfilter: nf_tables: use correct lock to protect gc_list
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 5/6] netfilter: nf_tables: fix out of memory error handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 3/6] netfilter: nf_tables: GC transaction race with abort path
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 2/6] netfilter: nf_tables: flush pending destroy work before netlink notifier
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 1/6] netfilter: nf_tables: validate all pending tables
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 0/6] netfilter updates for net
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] tests: shell: use minutes granularity in sets/0036add_set_element_expiration_0
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] tests: shell: use minutes granularity in sets/0036add_set_element_expiration_0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: error out on meter overlap with an existing set/map declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] tests: shell: Stabilize sets/reset_command_0 test
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: defer gc run if previous batch is still pending
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: defer gc run if previous batch is still pending
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH] clang-format: add clang-format configuration file from Linux kernel
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH] gitignore: ignore cscope files
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH net-next 01/10] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH nf-next] netfilter: nf_tables: missing extended netlink error in lookup functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 10/10] netfilter: nf_tables: allow loop termination for pending fatal signal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 06/10] netfilter: nft_osf: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 05/10] netfilter: nf_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 03/10] netfilter: ipset: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 08/10] netfilter: x_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 04/10] netfilter: nf_tables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 07/10] netfilter: nft_meta: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 09/10] netfilter: xtables: refactor deprecated strncpy
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 02/10] netfilter: ebtables: replace zero-length array members
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 00/10] netfilter updates for net-next
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 01/10] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH nft] cache: chain listing implicitly sets on terse option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ipset] bash-completion: fix syntax error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH conntrack] tests/conntrack: add initial stress test for conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v2] INSTALL: provide examples to install python bindings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ulogd2 v3 11/11] db: insert ipv6 addresses in the same format as ip2bin
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 10/11] sqlite3: insert ipv6 addresses as null rather than garbage
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 07/11] gprint, oprint: use inet_ntop to format ip addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 08/11] gprint, oprint: add support for printing ipv6 addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 09/11] sqlite3: correct binding of ipv4 addresses and 64-bit integers
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 06/11] ipfix: skip non-ipv4 addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 05/11] ip2hbin: store ipv6 address as integer
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 04/11] raw2packet_BASE: store ARP address values as integers
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 02/11] printpkt: fix statement punctuator
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 03/11] printpkt, raw2packet_BASE: keep gateway address in NBO
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 01/11] src: record length of integer key values
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v3 00/11] Fixes for handling and output of IP addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft,v2] INSTALL: provide examples to install python bindings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: allow loop termination for pending fatal signal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] tests/shell: expand vmap test case to also cause batch abort
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] parser: permit gc-interval in map declarations
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed
  • From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: use correct lock to protect gc_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: use correct lock to protect gc_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack] conntrack: do not set on NLM_F_ACK in IPCTNL_MSG_CT_GET requests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2] INSTALL: provide examples to install python bindings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] INSTALL: provide examples to install python bindings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH conntrack] conntrack: skip ENOENT when -U/-D finds a stale conntrack entry
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack] conntrack: unbreak -U command, use correct family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path
  • From: "Liu, Yujie" <yujie.liu@xxxxxxxxx>
• Re: libnetfilter_queue patch ping
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nft] INSTALL: provide examples to install python bindings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: libnetfilter_queue patch ping
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• libnetfilter_queue patch ping
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH xtables-addons] doc: fix version number in xtables-addons.8
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] json: use strtok_r() instead of strtok()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH xtables-addons 3/5] build: update `AM_V_*` definitions to match autotools
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] json: use strtok_r() instead of strtok()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [PATCH xtables-addons] doc: fix version number in xtables-addons.8
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v3 2/3] nftutils: add wrappers for getprotoby{name,number}_r(), getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v3 3/3] src: use wrappers for getprotoby{name,number}_r(), getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v3 1/3] nftutils: add new internal file for general utilities
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH] landlock: Fix and test network AF inconsistencies
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH xtables-addons 1/5] build: use `$(top_srcdir)` when including Makefile.extra
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 2/5] build: replace `AM_V_silent` with `AM_V_at`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 0/5] Autoools silent-rules fixes
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 5/5] build: define `AM_V_GEN` where it is needed
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 4/5] build: don't hard-code `AM_DEFAULT_VERBOSITY` in Makefile.iptrules
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 3/5] build: update `AM_V_*` definitions to match autotools
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 6/6] py: add Nftables.{get,set}_input_flags() API
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 5/6] py: extract flags helper functions for set_debug()/get_debug()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 4/6] py: fix exception during cleanup of half-initialized Nftables
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 1/6] src: add input flags for nft_ctx
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v5 0/6] add input flags and "no-dns"/"json" flags
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Thomas Haller <thaller@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: GC transaction race with abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: flush pending destroy work before netlink notifier
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: validate all pending tables
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCHv2 nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH] landlock: Fix and test network AF inconsistencies
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH] landlock: Fix and test network AF inconsistencies
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• [PATCH] landlock: Fix and test network AF inconsistencies
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v11.1] selftests/landlock: Add 11 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v4] Bluetooth: Fix for ACL disconnect when pairing fails
  • From: Muhammad Usama Anjum <usama.anjum@xxxxxxxxxxxxx>
• Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxx>
• Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 5/6] py: extract flags helper functions for set_debug()/get_debug()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 4/6] py: fix exception during cleanup of half-initialized Nftables
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [nft PATCH v4 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4 1/6] src: add input flags for nft_ctx
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next v2] netfilter: ebtables: replace zero-length array members
  • From: Gong Ruiqi <gongruiqi1@xxxxxxxxxx>
• Re: [PATCH net-next v2] netfilter: ebtables: replace zero-length array members
  • From: Simon Horman <horms@xxxxxxxxxx>
• Re: [PATCH net 1/9] netfilter: nf_tables: fix false-positive lockdep splat
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net-next v2] netfilter: ebtables: replace zero-length array members
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• [PATCH net-next v4] netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• [PATCH RFC net-next 09/14] ipvs: switch to per-net connection table
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 08/14] ipvs: use resizable hash table for services
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 12/14] ipvs: use more keys for connection hashing
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 13/14] ipvs: add ip_vs_status info
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 06/14] ipvs: use more counters to avoid service lookups
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 07/14] ipvs: add resizable hash tables
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 11/14] ipvs: no_cport and dropentry counters can be per-net
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 05/14] ipvs: do not keep dest_dst after dest is removed
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 10/14] ipvs: show the current conn_tab size to users
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH RFC net-next 14/14] ipvs: add conn_lfactor and svc_lfactor sysctl vars
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net 9/9] netfilter: nft_dynset: disallow object maps
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 8/9] netfilter: nf_tables: GC transaction race with netns dismantle
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 5/9] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 4/9] netfilter: nf_tables: don't fail inserts if duplicate has expired
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 7/9] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 1/9] netfilter: nf_tables: fix false-positive lockdep splat
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 0/9] netfilter fixes for net
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 3/9] netfilter: nf_tables: deactivate catchall elements in next generation
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 6/9] ipvs: fix racy memcpy in proc_do_sync_threshold
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 2/9] netfilter: nf_tables: fix kdoc warnings after gc rework
  • From: Florian Westphal <fw@xxxxxxxxx>