Linux TCP/IP Netfilter Devel
[Prev Page][Next Page]
- Re: [PATCH v11 11/12] samples/landlock: Add network demo
- From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
- Re: [PATCH nf v2] netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- From: Eric Dumazet <edumazet@xxxxxxxxxx>
- [PATCH nf-next] netfilter: nf_tables: limit allowed range via nla_policy
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: vs conntrack changes TCP ports mid-stream
- From: Julian Anastasov <ja@xxxxxx>
- vs conntrack changes TCP ports mid-stream
- From: Sven Bartscher <sven.bartscher@xxxxxxxxxxxxxxxxxxxx>
- [PATCH nf v2] netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- From: Eric Dumazet <edumazet@xxxxxxxxxx>
- [PATCH nf] netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [nft PATCH] cli: Make valgrind happy
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] src: avoid IPPROTO_MAX for array definitions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- From: Florent Revest <revest@xxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- From: Florent Revest <revest@xxxxxxxxxxxx>
- Re: [nft PATCH] cli: Make valgrind happy
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH 06/11] sysctl: Add size to register_net_sysctl function
- From: Joel Granados <j.granados@xxxxxxxxxxx>
- Re: [iptables PATCH] iptables: Fix handling of non-existent chains
- From: Phil Sutter <phil@xxxxxx>
- Re: [iptables PATCH] iptables: Fix setting of ipv6 counters
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH 06/11] sysctl: Add size to register_net_sysctl function
- From: Joel Granados <j.granados@xxxxxxxxxxx>
- Re: [PATCH 06/11] sysctl: Add size to register_net_sysctl function
- From: Joel Granados <j.granados@xxxxxxxxxxx>
- Re: [PATCH nft] src: avoid IPPROTO_MAX for array definitions
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 09/11] sysctl: Remove the end element in sysctl table arrays
- From: Jani Nikula <jani.nikula@xxxxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 06/11] sysctl: Add size to register_net_sysctl function
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [lvc-project] [PATCH] netfilter: ebtables: remove unnecessary NULL check
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [lvc-project] [PATCH] netfilter: ebtables: remove unnecessary NULL check
- From: "Igor A. Artemiev" <Igor.A.Artemiev@xxxxxxx>
- Re: [PATCH 06/11] sysctl: Add size to register_net_sysctl function
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- From: Florent Revest <revest@xxxxxxxxxxxx>
- [PATCH net 13/14] netfilter: nfnetlink_osf: fix module autoload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 04/14] netfilter: nf_tables: drop map element references from preparation phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 12/14] netfilter: nf_tables: drop module reference after updating chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 07/14] netfilter: nf_tables: disallow element updates of bound anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net,v3 00/14] Netfilter/IPVS fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 14/14] netfilter: nf_tables: Fix for deleting base chains with payload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 09/14] netfilter: nf_tables: reject unbound chain set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 10/14] netfilter: nf_tables: disallow updates of anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 08/14] netfilter: nf_tables: reject unbound anonymous set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 06/14] netfilter: nf_tables: fix underflow in object reference counter
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 02/14] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 05/14] netfilter: nft_set_pipapo: .walk does not deal with generations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 11/14] netfilter: nf_tables: disallow timeout for anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 01/14] ipvs: align inner_mac_header for encapsulation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 03/14] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 09/11] sysctl: Remove the end element in sysctl table arrays
- From: Joel Granados <j.granados@xxxxxxxxxxx>
- Re: [PATCH 06/11] sysctl: Add size to register_net_sysctl function
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- [PATCH 06/11] sysctl: Add size to register_net_sysctl function
- From: Joel Granados <j.granados@xxxxxxxxxxx>
- Re: [PATCH] netfilter: Don't parse CTCP message if shorter than minimum length
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH] netfilter: Don't parse CTCP message if shorter than minimum length
- From: Sohom <sohomdatta1@xxxxxxxxx>
- [PATCH nf,v3 01/14] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] src: avoid IPPROTO_MAX for array definitions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: ipset: Replace strlcpy with strscpy
- From: Kees Cook <keescook@xxxxxxxxxxxx>
- [PATCH nft] src: avoid IPPROTO_MAX for array definitions
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next v2] lib/ts_bm: add helper to reduce indentation and improve readability
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH nf-next] lib/ts_bm: add helper to reduce indentation and improve readability
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nf-next] lib/ts_bm: add helper to reduce indentation and improve readability
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH net 00/14,v2] Netfilter/IPVS fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [lvc-project] [PATCH] netfilter: ebtables: remove unnecessary NULL check
- From: Florian Westphal <fw@xxxxxxxxx>
- [lvc-project] [PATCH] netfilter: ebtables: remove unnecessary NULL check
- From: Igor Artemiev <Igor.A.Artemiev@xxxxxxx>
- Re: [nft PATCH] cli: Make valgrind happy
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 4/6] parser: reject zero-length interface names
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf PATCH] netfilter: nf_tables: Fix for deleting base chains with payload
- From: Phil Sutter <phil@xxxxxx>
- [nft PATCH] cli: Make valgrind happy
- From: Phil Sutter <phil@xxxxxx>
- [PATCH nft] json: add inner payload support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- CFS for Netdev 0x17 open!
- From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
- Re: [PATCH nf-next] lib/ts_bm: add helper to reduce indentation and improve readability
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH nf-next] lib/ts_bm: add helper to reduce indentation and improve readability
- From: kernel test robot <lkp@xxxxxxxxx>
- [PATCH nft] src: add json support for last statement
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 14/14] netfilter: nf_tables: Fix for deleting base chains with payload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 11/14] netfilter: nf_tables: disallow timeout for anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 08/14] netfilter: nf_tables: reject unbound anonymous set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 13/14] netfilter: nfnetlink_osf: fix module autoload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 12/14] netfilter: nf_tables: drop module reference after updating chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 10/14] netfilter: nf_tables: disallow updates of anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 07/14] netfilter: nf_tables: disallow element updates of bound anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 09/14] netfilter: nf_tables: reject unbound chain set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 04/14] netfilter: nf_tables: drop map element references from preparation phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 02/14] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 05/14] netfilter: nft_set_pipapo: .walk does not deal with generations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 01/14] ipvs: align inner_mac_header for encapsulation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 06/14] netfilter: nf_tables: fix underflow in object reference counter
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 03/14] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 00/14,v2] Netfilter/IPVS fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] cache: include set elements in "nft set list"
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH net 02/14] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 6/6] ct timeout: fix 'list object x' vs. 'list objects in table' confusion
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft 5/6] parser: reject zero-length interface names in flowtables
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft 4/6] parser: reject zero-length interface names
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft 3/6] parser: don't assert on scope underflows
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft 2/6] evaluate: do not abort when prefix map has non-map element
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft 1/6] json: dccp: remove erroneous const qualifier
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft 0/6] Misc parser fixes
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH net 08/14] netfilter: nf_tables: reject unbound anonymous set before commit phase
- From: Simon Horman <simon.horman@xxxxxxxxxxxx>
- Re: [PATCH net 02/14] netfilter: nf_tables: fix chain binding transaction logic
- From: Simon Horman <simon.horman@xxxxxxxxxxxx>
- [PATCH nf-next] lib/ts_bm: add helper to reduce indentation and improve readability
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nf v2] lib/ts_bm: reset initial match offset for every block of text
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH v11 00/12] Network support for Landlock
- From: Mickaël Salaün <mic@xxxxxxxxxxx>
- Re: [PATCH v11 11/12] samples/landlock: Add network demo
- From: Mickaël Salaün <mic@xxxxxxxxxxx>
- [PATCH net 13/14] netfilter: nfnetlink_osf: fix module autoload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 14/14] netfilter: nf_tables: Fix for deleting base chains with payload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 11/14] netfilter: nf_tables: disallow timeout for anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 12/14] netfilter: nf_tables: drop module reference after updating chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 10/14] netfilter: nf_tables: disallow updates of anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 08/14] netfilter: nf_tables: reject unbound anonymous set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 09/14] netfilter: nf_tables: reject unbound chain set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 06/14] netfilter: nf_tables: fix underflow in object reference counter
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 07/14] netfilter: nf_tables: disallow element updates of bound anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 05/14] netfilter: nft_set_pipapo: .walk does not deal with generations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 04/14] netfilter: nf_tables: drop map element references from preparation phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 03/14] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 02/14] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 01/14] ipvs: align inner_mac_header for encapsulation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 00/14] Netfilter/IPVS fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v11 00/12] Network support for Landlock
- From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
- Re: [PATCH v11 12/12] landlock: Document Landlock's network support
- From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
- Re: [PATCH v11 11/12] samples/landlock: Add network demo
- From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
- Re: [PATCH nf] lib/ts_bm: reset initial match offset for every block of text
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH nf] lib/ts_bm: reset initial match offset for every block of text
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [iptables PATCH] iptables: Fix handling of non-existent chains
- From: Jacek Tomasiak <jacek.tomasiak@xxxxxxxxx>
- [iptables PATCH] iptables: Fix setting of ipv6 counters
- From: Jacek Tomasiak <jacek.tomasiak@xxxxxxxxx>
- Re: [nf PATCH] netfilter: nf_tables: Fix for deleting base chains with payload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf PATCH] netfilter: nf_tables: Fix for deleting base chains with payload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] cache: include set elements in "nft set list"
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] cache: include set elements in "nft set list"
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] cache: include set elements in "nft set list"
- From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
- [PATCH nft] cache: include set elements in "nft set list"
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: nft list sets changed behavior
- From: Kerin Millar <kfm@xxxxxxxxxxxxx>
- Re: nft list sets changed behavior
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nf PATCH] netfilter: nf_tables: Fix for deleting base chains with payload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: nft list sets changed behavior
- From: nft.ogxzcrqhuhgchbvxcs4j7wws@xxxxxxxxxxxxxxxxxxxxxx
- Re: nft list sets changed behavior
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [iptables PATCH] xshared: fix memory leak in should_load_proto
- From: Phil Sutter <phil@xxxxxx>
- [nf PATCH] netfilter: nf_tables: Fix for deleting base chains with payload
- From: Phil Sutter <phil@xxxxxx>
- [PATCH nf,v4 09/10] netfilter: nf_tables: disallow updates of anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v4 03/10] netfilter: nf_tables: drop map element references from preparation phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v4 10/10] netfilter: nf_tables: disallow timeout for anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v4 04/10] netfilter: nft_set_pipapo: .walk does not deal with generations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v4 06/10] netfilter: nf_tables: disallow element updates of bound anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v4 07/10] netfilter: nf_tables: reject unbound anonymous set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v4 01/10] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v4 08/10] netfilter: nf_tables: reject unbound chain set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v4 02/10] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v4 05/10] netfilter: nf_tables: fix underflow in object reference counter
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH iptables] nft: use payload matching for layer 4 protocol
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH iptables v2] man: string: document BM false negatives
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH] netfilter: ipset: Replace strlcpy with strscpy
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- From: Florent Revest <revest@xxxxxxxxxxxx>
- [nft PATCH 3/3] Implement 'reset {set,map,element}' commands
- From: Phil Sutter <phil@xxxxxx>
- [nft PATCH 1/3] evaluate: Merge some cases in cmd_evaluate_list()
- From: Phil Sutter <phil@xxxxxx>
- [nft PATCH 2/3] evaluate: Cache looked up set for list commands
- From: Phil Sutter <phil@xxxxxx>
- [nft PATCH 0/3] Implement 'reset {set,map,element}' commands
- From: Phil Sutter <phil@xxxxxx>
- [nf-next PATCH] netfilter: nf_tables: Introduce NFT_MSG_GETSETELEM_RESET
- From: Phil Sutter <phil@xxxxxx>
- Re: [conntrack-tools PATCH] conntrack: Don't override mark in non-list mode
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [conntrack-tools PATCH] conntrack: Don't override mark in non-list mode
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [conntrack-tools PATCH] conntrack: Don't override mark in non-list mode
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: nfnetlink_osf: fix module autoload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2] ipvs: align inner_mac_header for encapsulation
- From: Simon Horman <horms@xxxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: drop module reference after updating chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [conntrack-tools PATCH] conntrack: Don't override mark in non-list mode
- From: Jacek Tomasiak <jacek.tomasiak@xxxxxxxxx>
- [PATCH nf,v3 08/10] netfilter: nf_tables: drop map element references from preparation phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3 02/10] netfilter: nf_tables: disallow element updates of bound anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3 01/10] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3 09/10] netfilter: nft_set_pipapo: .walk does not deal with generations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3 05/10] netfilter: nf_tables: disallow updates of anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3 10/10] netfilter: nf_tables: fix underflow in object reference counter
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3 06/10] netfilter: nf_tables: disallow timeout for anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3 03/10] netfilter: nf_tables: reject unbound anonymous set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3 07/10] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3 04/10] netfilter: nf_tables: reject unbound chain set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] tests: shell: bogus EBUSY errors in transactions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: ipset: Replace strlcpy with strscpy
- From: Simon Horman <simon.horman@xxxxxxxxxxxx>
- Re: [PATCH net 1/1] net/sched: act_ct: Fix promotion of offloaded unreplied tuple
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH v11 11/12] samples/landlock: Add network demo
- From: Mickaël Salaün <mic@xxxxxxxxxxx>
- Re: [PATCH v11 12/12] landlock: Document Landlock's network support
- From: Mickaël Salaün <mic@xxxxxxxxxxx>
- Re: [PATCH v11 12/12] landlock: Document Landlock's network support
- From: Mickaël Salaün <mic@xxxxxxxxxxx>
- Re: [PATCH] netfilter: ipset: Replace strlcpy with strscpy
- From: Kees Cook <keescook@xxxxxxxxxxxx>
- Re: [PATCH net 1/1] net/sched: act_ct: Fix promotion of offloaded unreplied tuple
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH v11 11/12] samples/landlock: Add network demo
- From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
- Re: [PATCH v11 12/12] landlock: Document Landlock's network support
- From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
- Re: [PATCH xtables-addons] xt_ipp2p: change text-search algo to KMP
- From: Jan Engelhardt <jengelh@xxxxxxx>
- [PATCH] netfilter: ipset: Replace strlcpy with strscpy
- From: Azeem Shaikh <azeemshaikh38@xxxxxxxxx>
- [PATCH xtables-addons] xt_ipp2p: change text-search algo to KMP
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH v2] ipvs: align inner_mac_header for encapsulation
- From: Julian Anastasov <ja@xxxxxx>
- [PATCH nf,v2 6/7] netfilter: nf_tables: disallow timeout for anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v2 7/7] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v2 2/7] netfilter: nf_tables: disallow element updates of bound anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v2 3/7] netfilter: nf_tables: reject unbound anonymous set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v2 4/7] netfilter: nf_tables: reject unbound chain set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v2 5/7] netfilter: nf_tables: disallow updates of anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v2 1/7] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] tests: shell: add test case for chain-in-use-splat
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf 1/6] netfilter: nf_tables: fix chain binding transaction logic
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf,v3] netfilter: nf_tables: integrate pipapo into commit protocol
- From: Stefano Brivio <sbrivio@xxxxxxxxxx>
- [PATCH nft] tests: shell: fix spurious errors in terse listing in json
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 5/6] netfilter: nf_tables: disallow updates of anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 4/6] netfilter: nf_tables: reject unbound chain set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 1/6] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 6/6] netfilter: nf_tables: disallow timeout for anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 3/6] netfilter: nf_tables: reject unbound anonymous set before commit phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 2/6] netfilter: nf_tables: disallow element updates of bound anonymous sets
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH iptables v2] man: string: document BM false negatives
- From: Jan Engelhardt <jengelh@xxxxxxx>
- [PATCH iptables v2] man: string: document BM false negatives
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH iptables] man: string: document BM false negatives
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH iptables] man: string: document BM false negatives
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nf] lib/ts_bm: reset initial match offset for every block of text
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH net 1/3] netfilter: nf_tables: integrate pipapo into commit protocol
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- [PATCH v2] ipvs: align inner_mac_header for encapsulation
- From: Terin Stock <terin@xxxxxxxxxxxxxx>
- [PATCH net 1/1] net/sched: act_ct: Fix promotion of offloaded unreplied tuple
- From: Paul Blakey <paulb@xxxxxxxxxx>
- [PATCH nf 1/3] netfilter: nf_tables: fix chain binding transaction logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 2/3] netfilter: nf_tables: disallow unbound anonymous set from commit step
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf 3/3] netfilter: nf_tables: disallow unbound chain from commit step
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH iptables] nft: use payload matching for layer 4 protocol
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net 1/3] netfilter: nf_tables: integrate pipapo into commit protocol
- From: Simon Horman <simon.horman@xxxxxxxxxxxx>
- [PATCH net 1/3] netfilter: nf_tables: integrate pipapo into commit protocol
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 3/3] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 2/3] netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 0/3] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf,v3] netfilter: nf_tables: integrate pipapo into commit protocol
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf,v2] netfilter: nf_tables: integrate pipapo into commit protocol
- From: kernel test robot <lkp@xxxxxxxxx>
- Re: String matcher "algo bm" broken in OUTPUT since 5.3.x
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nf,v2] netfilter: nf_tables: integrate pipapo into commit protocol
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- xtables-addons passes through an IP from RU
- From: Oláh Ambrus Sándor <aolah76@xxxxxxxxxxx>
- Re: [PATCH v11 12/12] landlock: Document Landlock's network support
- From: Jeff Xu <jeffxu@xxxxxxxxxxxx>
- Re: [PATCH net 1/5] netfilter: nf_tables: Add null check for nla_nest_start_noflag() in nft_dump_basechain_hook()
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- [PATCH net 4/5] netfilter: ipset: Add schedule point in call_ad().
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 0/5] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 2/5] netfilter: nft_bitwise: fix register tracking
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 1/5] netfilter: nf_tables: Add null check for nla_nest_start_noflag() in nft_dump_basechain_hook()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 3/5] netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 5/5] netfilter: nf_tables: out-of-bound check in chain blob
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v1 nf] netfilter: ipset: Add schedule point in call_ad().
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next,v2 5/7] netfilter: nf_tables: add meta + cmp combo match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next v2] netfilter: snat: evict closing tcp entries on reply tuple collision
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: snat: evict closing tcp entries on reply tuple collision
- From: kernel test robot <lkp@xxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: out-of-bound check in chain blob
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 1/7] netfilter: nf_tables: remove expression reduce infrastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 5/7] netfilter: nf_tables: add meta + cmp combo match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 6/7] netfilter: nf_tables: add payload + bitwise + cmp combo match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 3/7] netfilter: nf_tables: track register store and load operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 7/7] netfilter: nf_tables: skip comment match when building blob
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 2/7] netfilter: nf_tables: remove fast bitwise and fast cmp16
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 0/7] nf_tables combo match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 4/7] netfilter: nf_tables: add payload + cmp combo match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v11 11/12] samples/landlock: Add network demo
- From: "Günther Noack" <gnoack@xxxxxxxxxx>
- Re: [PATCH v11 12/12] landlock: Document Landlock's network support
- From: "Günther Noack" <gnoack@xxxxxxxxxx>
- [PATCH nf-next] netfilter: snat: evict closing tcp entries on reply tuple collision
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH xtables-addons v2 0/7] xt_ipp2p: support for non-linear packets
- From: Jan Engelhardt <jengelh@xxxxxxx>
- [PATCH nf-next] netfilter: nf_tables: permit update of set size
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next] netfilter: ipset: remove rcu_read_lock_bh pair from ip_set_test
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH v11 00/12] Network support for Landlock
- From: Mickaël Salaün <mic@xxxxxxxxxxx>
- Re: [PATCH v11 00/12] Network support for Landlock
- From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH nf-next] nft_payload: rebuild vlan header when needed
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH xtables-addons v2 6/7] xt_ipp2p: use `skb_header_pointer` and `skb_find_text`
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons v2 5/7] xt_ipp2p: use textsearch API for substring searching
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons v2 3/7] xt_ipp2p: add helper for matching "\r\n"
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons v2 4/7] xt_ipp2p: rearrange some conditionals and a couple of loops
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons v2 7/7] xt_ipp2p: drop requirement that skb is linear
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons v2 2/7] xt_ipp2p: change byte-orer conversion
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons v2 1/7] xt_ipp2p: fix Soulseek false-positive matches
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons v2 0/7] xt_ipp2p: support for non-linear packets
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH xtables-addons 5/8] xt_ipp2p: rearrange some conditionals and a couple of loops
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH xtables-addons 5/8] xt_ipp2p: rearrange some conditionals and a couple of loops
- From: Jan Engelhardt <jengelh@xxxxxxx>
- [PATCH xtables-addons 6/8] xt_ipp2p: use textsearch API for substring searching
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons 0/8] xt_ipp2p: support for non-linear packets
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons 2/8] xt_ipp2p: fix Soulseek false-positive matches
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons 8/8] xt_ipp2p: drop requirement that skb is linear
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons 5/8] xt_ipp2p: rearrange some conditionals and a couple of loops
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons 7/8] xt_ipp2p: use `skb_header_pointer` and `skb_find_text`
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons 1/8] xt_ipp2p: fix an off-by-one error
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons 4/8] xt_ipp2p: add helper for matching "\r\n"
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH xtables-addons 3/8] xt_ipp2p: change byte-orer conversion
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH] add some test cases to improve code coverage
- From: tongxiaoge1001@xxxxxxx
- [PATCH] define "i" only if attr is NFTNL_CHAIN_DEVICES. When attr isn't NFTNL_CHAIN_DEVICES, "i" is useless.
- From: tongxiaoge1001@xxxxxxx
- [PATCH] define "i" only if attr is NFTNL_CHAIN_DEVICES. When attr isn't NFTNL_CHAIN_DEVICES, "i" is useless.
- From: tongxiaoge1001@xxxxxxx
- Re: [PATCH v11 00/12] Network support for Landlock
- From: Mickaël Salaün <mic@xxxxxxxxxxx>
- [PATCH] add some test cases to improve code coverage
- From: tongxiaoge1001@xxxxxxx
- Re: [PATCH] fix typo
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH] fix typo
- From: tongxiaoge1001@xxxxxxx
- Re: [PATCH nftables v2] exthdr: add boolean DCCP option matching
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH nftables v2] exthdr: add boolean DCCP option matching
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH nftables v2] exthdr: add boolean DCCP option matching
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nftables v2] exthdr: add boolean DCCP option matching
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: nft transaction semantics and flowtable hw offload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: nftables: Writers starve readers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: nftables: Writers starve readers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: nftables: Writers starve readers
- From: Phil Sutter <phil@xxxxxx>
- [PATCH] fix typo
- From: tongxiaoge1001@xxxxxxx
- Re: [PATCH iptables] nft: check for source and destination address in first place
- From: Phil Sutter <phil@xxxxxx>
- Re: nftables: Writers starve readers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH iptables] nft: check for source and destination address in first place
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next] ipvs: dynamically limit the connection hash table
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v3] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] tests: extend tests for destroy command
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnftnl PATCH] set: Do not leave free'd expr_list elements in place
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: xtables-addons: ipp2p does not block TCP traffic with nonlinear skb
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] fix typo
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: nftables: Writers starve readers
- From: Phil Sutter <phil@xxxxxx>
- [PATCH] fix typo
- From: tongxiaoge1001@xxxxxxx
- [PATCH] Add test cases to improve code coverage
- From: tongxiaoge1001@xxxxxxx
- [PATCH] fix typo
- From: tongxiaoge1001@xxxxxxx
- Re: nftables: Writers starve readers
- From: Florian Westphal <fw@xxxxxxxxx>
- nftables: Writers starve readers
- From: Phil Sutter <phil@xxxxxx>
- Re: xtables-addons: ipp2p does not block TCP traffic with nonlinear skb
- From: Jan Engelhardt <jengelh@xxxxxxx>
- Re: xtables-addons: ipp2p does not block TCP traffic with nonlinear skb
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [libnftnl PATCH] set: Do not leave free'd expr_list elements in place
- From: Phil Sutter <phil@xxxxxx>
- Re: [iptables PATCH 3/4] Add --compat option to *tables-nft and *-nft-restore commands
- From: Phil Sutter <phil@xxxxxx>
- Re: [iptables PATCH 3/4] Add --compat option to *tables-nft and *-nft-restore commands
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 2/3] netfilter: nf_tables: validate register loads never access unitialised registers
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: xtables-addons: ipp2p does not block TCP traffic with nonlinear skb
- From: Jan Engelhardt <jengelh@xxxxxxx>
- Re: [iptables PATCH 3/4] Add --compat option to *tables-nft and *-nft-restore commands
- From: Phil Sutter <phil@xxxxxx>
- String matcher "algo bm" broken in OUTPUT since 5.3.x
- From: ValdikSS <iam@xxxxxxxxxxxxxxx>
- xtables-addons: ipp2p does not block TCP traffic with nonlinear skb
- From: ValdikSS <iam@xxxxxxxxxxxxxxx>
- Re: [PATCH v1 nf] netfilter: ipset: Add schedule point in call_ad().
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
- Re: [iptables PATCH 3/4] Add --compat option to *tables-nft and *-nft-restore commands
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 2/3] netfilter: nf_tables: validate register loads never access unitialised registers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH] xshared: fix memory leak in should_load_proto
- From: Jan Engelhardt <jengelh@xxxxxxx>
- Re: [iptables PATCH] xshared: fix memory leak in should_load_proto
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH] xshared: fix memory leak in should_load_proto
- From: Christian Marangi <ansuelsmth@xxxxxxxxx>
- [PATCH 4.14 70/86] netfilter: nf_tables: fix register ordering
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 69/86] netfilter: nf_tables: do not allow SET_ID to refer to another table
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 68/86] netfilter: nf_tables: do not allow RULE_ID to refer to another chain
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 67/86] netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 66/86] netfilter: nf_tables: stricter validation of element data
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 65/86] netfilter: nf_tables: allow up to 64 bytes in the set element data area
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 64/86] netfilter: nf_tables: add nft_setelem_parse_key()
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 63/86] netfilter: nf_tables: validate registers coming from userspace.
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 62/86] netfilter: nftables: statify nft_parse_register()
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 61/86] netfilter: nftables: add nft_parse_register_store() and use it
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 60/86] netfilter: nftables: add nft_parse_register_load() and use it
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH nft v5 8/8] tests: add tests for binops with variable RHS operands
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft v5 1/8] netlink: support (de)linearization of new bitwise boolean operations
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft v5 6/8] evaluate: allow binop expressions with variable right-hand operands
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft v5 2/8] netlink_delinearize: refactor stmt_payload_binop_postprocess
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft v5 7/8] parser_json: allow RHS mark and payload expressions
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft v5 5/8] evaluate: preserve existing binop properties
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft v5 3/8] netlink_delinearize: add support for processing variable payload statement arguments
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft v5 4/8] evaluate: prevent nested byte-order conversions
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft v5 0/8] Bitwise boolean operations with variable RHS operands
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH libnftnl v3 3/5] expr: bitwise: add support for kernel space AND, OR and XOR operations
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH libnftnl v3 1/5] include: add new bitwise boolean attributes to nf_tables.h
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH libnftnl v3 5/5] tests: bitwise: add tests for new boolean operations
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH libnftnl v3 2/5] expr: bitwise: rename some boolean operation functions
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH libnftnl v3 4/5] tests: bitwise: refactor shift tests
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH libnftnl v3 0/5] bitwise: support for boolean operations with variable RHS operands
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nf-next v4 2/2] netfilter: bitwise: add support for doing AND, OR and XOR directly
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nf-next v4 1/2] netfilter: bitwise: rename some boolean operation functions
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nf-next v4 0/2] netfilter: bitwise: support boolean operations with variable RHS operands
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH -stable,4.14 00/11] more stable fixes for 4.14
- From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
- [PATCH nft] tests: extend tests for destroy command
- From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
- [PATCH -stable,4.14 09/11] netfilter: nf_tables: do not allow RULE_ID to refer to another chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 10/11] netfilter: nf_tables: do not allow SET_ID to refer to another table
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 11/11] netfilter: nf_tables: fix register ordering
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 07/11] netfilter: nf_tables: stricter validation of element data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 06/11] netfilter: nf_tables: allow up to 64 bytes in the set element data area
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 01/11] netfilter: nftables: add nft_parse_register_load() and use it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 08/11] netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 05/11] netfilter: nf_tables: add nft_setelem_parse_key()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 00/11] more stable fixes for 4.14
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 04/11] netfilter: nf_tables: validate registers coming from userspace.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 02/11] netfilter: nftables: add nft_parse_register_store() and use it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 03/11] netfilter: nftables: statify nft_parse_register()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next,v1 4/6] netfilter: nf_tables: add meta combo match
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next,v1 1/6] netfilter: nf_tables: remove expression reduce infrastructure
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next,v1 2/6] netfilter: nf_tables: remove fast bitwise and cmp operations
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 4.14 1/1] netfilter: nf_tables: bogus EBUSY in helper removal from transaction
- From: Greg KH <greg@xxxxxxxxx>
- Re: [PATCH nf-next,v1 2/6] netfilter: nf_tables: remove fast bitwise and cmp operations
- From: kernel test robot <lkp@xxxxxxxxx>
- [PATCH AUTOSEL 4.14 17/20] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.4 24/27] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 4.19 24/27] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.10 27/31] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 6.3 56/67] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.15 36/43] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 6.1 46/57] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Sasha Levin <sashal@xxxxxxxxxx>
- Re: [PATCH nf-next,v1 0/6] nf_tables combo match
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next,v1 1/6] netfilter: nf_tables: remove expression reduce infrastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 2/6] netfilter: nf_tables: remove fast bitwise and cmp operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 6/6] netfilter: nf_tables: skip comment match when building blob
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 5/6] netfilter: nf_tables: add payload bitwise combo match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 3/6] netfilter: nf_tables: add payload combo match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 4/6] netfilter: nf_tables: add meta combo match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 0/6] nf_tables combo match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: bitwise: fix register tracking
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft] src: permit use of constant values in set lookup keys
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net] netfilter: nf_tables: Add null check for nla_nest_start_noflag() in nft_dump_basechain_hook()
- From: Gavrilov Ilia <Ilia.Gavrilov@xxxxxxxxxxx>
- Re: nftables; key update with symbolic values/immediates
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: nftables; key update with symbolic values/immediates
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- nftables; key update with symbolic values/immediates
- From: Florian Westphal <fw@xxxxxxxxx>
- RE: [PATCH 4.14] netfilter: nf_tables: fix register ordering
- From: Andrew Paniakin <apanyaki@xxxxxxxxxx>
- Re: [PATCH 4.14] netfilter: nf_tables: fix register ordering
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH -stable,4.14 0/8] more stable fixes for 4.14
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: New Linux kernel NetFilter flaw gives attackers root privileges
- From: Bagas Sanjaya <bagasdotme@xxxxxxxxx>
- [PATCH 4.14] netfilter: nf_tables: fix register ordering
- From: Andrew Paniakin <apanyaki@xxxxxxxxxx>
- Re: [PATCH] netfilter: nf_tables: fix register ordering
- From: Andrew Paniakin <apanyaki@xxxxxxxxxx>
- [PATCH] netfilter: nf_tables: fix register ordering
- From: Andrew Paniakin <apanyaki@xxxxxxxxxx>
- Re: [PATCH -stable,4.14 0/8] more stable fixes for 4.14
- From: Sasha Levin <sashal@xxxxxxxxxx>
- Re: Patch for -stable, 6.3.x
- From: Sasha Levin <sashal@xxxxxxxxxx>
- Re: [libmnl, PATCH 1/1] examples: update .gitignore files
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [libmnl, PATCH 1/1] examples: update .gitignore files
- From: Dario Binacchi <dario.binacchi@xxxxxxxxxxxxxxxxxxxx>
- [libmnl, PATCH 1/1] include: cache copy of can.h and can/netlink.h
- From: Dario Binacchi <dario.binacchi@xxxxxxxxxxxxxxxxxxxx>
- [PATCH 4.14 1/1] netfilter: nf_tables: bogus EBUSY in helper removal from transaction
- From: Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx>
- [PATCH 4.14 0/1] netfilter: Fix EBUSY when removing objref
- From: Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 3/9] netfilter: nft_exthdr: add boolean DCCP option matching
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH net-next 3/9] netfilter: nft_exthdr: add boolean DCCP option matching
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- Re: [PATCH net-next 3/9] netfilter: nft_exthdr: add boolean DCCP option matching
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH net-next 1/9] netfilter: nf_tables: relax set/map validation checks
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH net-next 3/9] netfilter: nft_exthdr: add boolean DCCP option matching
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- Re: [PATCH v3] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- From: Simon Horman <horms@xxxxxxxxxx>
- [PATCH v1 nf] netfilter: ipset: Add schedule point in call_ad().
- From: Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
- Re: [nft PATCH] evaluate: Reject set stmt refs to sets without dynamic flag
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft] evaluate: set NFT_SET_EVAL flag if dynamic set already exists
- From: Eric Garver <eric@xxxxxxxxxxx>
- [PATCH nft] evaluate: set NFT_SET_EVAL flag if dynamic set already exists
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH RESEND 4/4] leds: Clear LED_INIT_DEFAULT_TRIGGER when clearing current trigger
- From: Lee Jones <lee@xxxxxxxxxx>
- Re: [PATCH RESEND 3/4] leds: Fix oops about sleeping in led_trigger_blink()
- From: Lee Jones <lee@xxxxxxxxxx>
- Re: [PATCH RESEND 2/4] leds: Fix set_brightness_delayed() race
- From: Lee Jones <lee@xxxxxxxxxx>
- Re: [PATCH RESEND 1/4] leds: Change led_trigger_blink[_oneshot]() delay parameters to pass-by-value
- From: Lee Jones <lee@xxxxxxxxxx>
- Re: [nft PATCH] evaluate: Reject set stmt refs to sets without dynamic flag
- From: Phil Sutter <phil@xxxxxx>
- [PATCH net-next 8/9] netfilter: flowtable: split IPv4 datapath in helper functions
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 9/9] netfilter: flowtable: split IPv6 datapath in helper functions
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 7/9] netfilter: flowtable: simplify route logic
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 6/9] netfilter: conntrack: allow insertion clash of gre protocol
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 5/9] netfilter: nft_set_pipapo: Use struct_size()
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 4/9] netfilter: Reorder fields in 'struct nf_conntrack_expect'
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 3/9] netfilter: nft_exthdr: add boolean DCCP option matching
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 2/9] netfilter: nf_tables: always increment set element count
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 1/9] netfilter: nf_tables: relax set/map validation checks
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 0/9] Netfilter updates for net-next
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 9/9] netfilter: flowtable: split IPv6 datapath in helper functions
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 8/9] netfilter: flowtable: split IPv4 datapath in helper functions
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 7/9] netfilter: flowtable: simplify route logic
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 6/9] netfilter: conntrack: allow insertion clash of gre protocol
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 5/9] netfilter: nft_set_pipapo: Use struct_size()
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 4/9] netfilter: Reorder fields in 'struct nf_conntrack_expect'
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 3/9] netfilter: nft_exthdr: add boolean DCCP option matching
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 2/9] netfilter: nf_tables: always increment set element count
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 1/9] netfilter: nf_tables: relax set/map validation checks
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 0/9] Netfilter updates for net-next
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [nft PATCH] evaluate: Reject set stmt refs to sets without dynamic flag
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH conntrackd 1/3] build: don't suppress various warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH conntrack,v2] conntrack: do not silence EEXIST error, use NLM_F_EXCL
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH conntrack 1/2] conntrack: do not ignore errors coming from the kernel
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH conntrack 2/2] conntrack: do not silence EEXIST error, use NLM_F_EXCL
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH conntrackd 1/3] build: don't suppress various warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH conntrackd 2/3] network: Fix -Wstrict-prototypes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH conntrack 1/2] conntrack: do not ignore errors coming from the kernel
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH conntrack 2/2] conntrack: do not silence EEXIST error, use NLM_F_EXCL
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net 1/3] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- [PATCH net 3/3] netfilter: nft_set_rbtree: fix null deref on element insertion
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net 2/3] netfilter: nf_tables: fix nft_trans type confusion
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net 1/3] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net 0/3] Netfilter fixes for net
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next] ipvs: dynamically limit the connection hash table
- From: Julian Anastasov <ja@xxxxxx>
- Re: [PATCH v3] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- From: Julian Anastasov <ja@xxxxxx>
- Re: [PATCH v2] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- From: Abhijeet Rastogi <abhijeet.1989@xxxxxxxxx>
- [PATCH v3] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- From: Abhijeet Rastogi <abhijeet.1989@xxxxxxxxx>
- Re: How to configure "full cone" NAT using iptables
- [PATCH nft] mnl: support bpf id decode in nft list hooks
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH -stable,4.14 6/8] netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 4/8] netfilter: nf_tables: allow up to 64 bytes in the set element data area
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 8/8] netfilter: nf_tables: do not allow SET_ID to refer to another table
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 3/8] netfilter: nf_tables: add nft_setelem_parse_key()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 5/8] netfilter: nf_tables: stricter validation of element data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 7/8] netfilter: nf_tables: do not allow RULE_ID to refer to another chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 2/8] netfilter: nf_tables: validate registers coming from userspace.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 0/8] more stable fixes for 4.14
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 1/8] netfilter: nftables: statify nft_parse_register()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 8/9] netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 6/9] netfilter: nf_tables: allow up to 64 bytes in the set element data area
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 7/9] netfilter: nf_tables: stricter validation of element data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 9/9] netfilter: nf_tables: do not allow RULE_ID to refer to another chain
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 5/9] netfilter: nf_tables: add nft_setelem_parse_key()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 3/9] netfilter: nftables: statify nft_parse_register()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 2/9] netfilter: nftables: add nft_parse_register_store() and use it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 1/9] netfilter: nftables: add nft_parse_register_load() and use it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 4/9] netfilter: nf_tables: validate registers coming from userspace.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.19 0/9] stable fixes for 4.19
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 9/9] netfilter: nf_tables: hold mutex on netns pre_exit path
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 8/9] netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 2/9] netfilter: nftables: add nft_parse_register_store() and use it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 5/9] netfilter: nf_tables: add nft_setelem_parse_key()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 7/9] netfilter: nf_tables: stricter validation of element data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 6/9] netfilter: nf_tables: allow up to 64 bytes in the set element data area
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 4/9] netfilter: nf_tables: validate registers coming from userspace.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 3/9] netfilter: nftables: statify nft_parse_register()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 1/9] netfilter: nftables: add nft_parse_register_load() and use it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,5.4 0/9] stable fixes for 5.4
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nf_tables: disable delset and delsetelem on anonymous sets
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH v2] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- From: Julian Anastasov <ja@xxxxxx>
- Patch for -stable, 6.3.x
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- From: Abhijeet Rastogi <abhijeet.1989@xxxxxxxxx>
- Re: ct state vmap no longer works on 6.3 kernel
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- [PATCH v11 11/12] samples/landlock: Add network demo
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 08/12] landlock: Add network rules and TCP hooks support
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 10/12] selftests/landlock: Add 11 new test suites dedicated to network
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 12/12] landlock: Document Landlock's network support
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 06/12] landlock: Refactor layer helpers
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 07/12] landlock: Refactor landlock_add_rule() syscall
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 09/12] selftests/landlock: Share enforce_ruleset()
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 05/12] landlock: Move and rename layer helpers
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 04/12] landlock: Refactor merge/inherit_ruleset functions
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 03/12] landlock: Refactor landlock_find_rule/insert_rule
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 02/12] landlock: Allow filesystem layout changes for domains without such rule type
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 01/12] landlock: Make ruleset's access masks more generic
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- [PATCH v11 00/12] Network support for Landlock
- From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
- Re: [PATCH v2] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- From: Julian Anastasov <ja@xxxxxx>
- Re: [PATCH] ipvs: change ip_vs_conn_tab_bits range to [8,31]
- From: Abhijeet Rastogi <abhijeet.1989@xxxxxxxxx>
- [PATCH v2] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- From: Abhijeet Rastogi <abhijeet.1989@xxxxxxxxx>
- Re: [PATCH] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Simon Horman <simon.horman@xxxxxxxxxxxx>
- [PATCH] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
- From: Tom Rix <trix@xxxxxxxxxx>
- Re: [PATCH netfilter -stable,4.14 0/6] stable fixes for 4.14
- From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
- Re: [PATCH netfilter -stable,4.14 0/6] stable fixes for 4.14
- From: "luwei (O)" <luwei32@xxxxxxxxxx>
- [PATCH nf-next] netfilter: nf_tables: relax set/map validation checks
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH netfilter -stable,4.14 0/6] stable fixes for 4.14
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH nf-next] netfilter: nf_tables: always increment set element count
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] netfilter: nft_set_rbtree: fix null deref on element insertion
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH AUTOSEL 5.15 4/5] netfilter: nf_tables: deactivate anonymous set from preparation phase
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 4.19 2/2] netfilter: nf_tables: deactivate anonymous set from preparation phase
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.4 2/2] netfilter: nf_tables: deactivate anonymous set from preparation phase
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.10 3/3] netfilter: nf_tables: deactivate anonymous set from preparation phase
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 6.1 7/9] netfilter: nf_tables: deactivate anonymous set from preparation phase
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 6.2 08/10] netfilter: nf_tables: deactivate anonymous set from preparation phase
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 6.3 09/11] netfilter: nf_tables: deactivate anonymous set from preparation phase
- From: Sasha Levin <sashal@xxxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH -stable,4.14 5/6] netfilter: nf_tables: bogus EBUSY when deleting set after flush
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 3/6] netfilter: nft_hash: fix nft_hash_deactivate
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 2/6] netfilter: nf_tables: unbind set in rule from commit path
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 6/6] netfilter: nf_tables: deactivate anonymous set from preparation phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 4/6] netfilter: nf_tables: use-after-free in failing rule with bound set
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH -stable,4.14 1/6] netfilter: nf_tables: split set destruction in deactivate and destroy phase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH netfilter -stable,4.14 0/6] stable fixes for 4.14
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: fix nft_trans type confusion
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH net-next] netfilter: Reorder fields in 'struct nf_conntrack_expect'
- From: Simon Horman <simon.horman@xxxxxxxxxxxx>
- [PATCH nf-next,v2 2/3] netfilter: flowtable: split IPv4 datapath in helper functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 3/3] netfilter: flowtable: split IPv6 datapath in helper functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 1/3] netfilter: flowtable: simplify route logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net 1/7] netfilter: nf_tables: always release netdev hooks from notifier
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH RESEND 1/4] leds: Change led_trigger_blink[_oneshot]() delay parameters to pass-by-value
- From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
- Re: [PATCH RESEND 1/4] leds: Change led_trigger_blink[_oneshot]() delay parameters to pass-by-value
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH RESEND 1/4] leds: Change led_trigger_blink[_oneshot]() delay parameters to pass-by-value
- From: Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxx>
- [PATCH RESEND 4/4] leds: Clear LED_INIT_DEFAULT_TRIGGER when clearing current trigger
- From: Hans de Goede <hdegoede@xxxxxxxxxx>
- [PATCH RESEND 1/4] leds: Change led_trigger_blink[_oneshot]() delay parameters to pass-by-value
- From: Hans de Goede <hdegoede@xxxxxxxxxx>
- [PATCH RESEND 3/4] leds: Fix oops about sleeping in led_trigger_blink()
- From: Hans de Goede <hdegoede@xxxxxxxxxx>
- [PATCH RESEND 2/4] leds: Fix set_brightness_delayed() race
- From: Hans de Goede <hdegoede@xxxxxxxxxx>
- [PATCH RESEND 0/4] Fix oops about sleeping in led_trigger_blink()
- From: Hans de Goede <hdegoede@xxxxxxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Florian Westphal <fw@xxxxxxxxx>
- Anouncement: Netdevconf 0x17
- From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
- Re: [nft PATCH] evaluate: Reject set stmt refs to sets without dynamic flag
- From: Phil Sutter <phil@xxxxxx>
- Re: [nft PATCH] evaluate: Reject set stmt refs to sets without dynamic flag
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 1/7] netfilter: nf_tables: always release netdev hooks from notifier
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 5/7] selftests: nft_flowtable.sh: wait for specific nc pids
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 4/7] selftests: nft_flowtable.sh: no need for ps -x option
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 7/7] selftests: nft_flowtable.sh: check ingress/egress chain too
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 3/7] selftests: nft_flowtable.sh: use /proc for pid checking
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 2/7] netfilter: conntrack: fix possible bug_on with enable_hooks=1
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 6/7] selftests: nft_flowtable.sh: monitor result file sizes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 0/7] Netfilter updates for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next 3/3] netfilter: flowtable: split IPv6 datapath in helper functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 1/3] netfilter: flowtable: simplify route logic
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 2/3] netfilter: flowtable: split IPv4 datapath in helper functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next v2 0/4] selftest: netfilter: small test tweaks
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] testing: selftests: nft_flowtable.sh: check ingress/egress chain too
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: fix possible bug_on with enable_hooks=1
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: always release netdev hooks from notifier
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next v4] netfilter: nft_exthdr: add boolean DCCP option matching
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nft 2/2] datatype: add hint on error handler
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 1/2] datatype: misspell support with symbol table parser for error reporting
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf] testing: selftests: nft_flowtable.sh: check ingress/egress chain too
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 00/11 nf-next,v1] track, reduce and prefetch expression
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 0/2] netfilter: nfnetlink_log & nfnetlink_queue: enable cgroup id socket info
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: nft transaction semantics and flowtable hw offload
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nftables 8/8] test: py: add tests for shifted nat port-ranges
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: nft transaction semantics and flowtable hw offload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nftables 8/8] test: py: add tests for shifted nat port-ranges
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH net-next] netfilter: Reorder fields in 'struct nf_conntrack_expect'
- From: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables: integrate pipapo into commit protocol
- From: Stefano Brivio <sbrivio@xxxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- Re: [PATCH 2/2] netfilter: nfnetlink_queue: enable cgroup id socket info retrieval
- From: kernel test robot <lkp@xxxxxxxxx>
- [PATCH nft 3/3] optimize: do not remove counter in verdict maps
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 2/3] evaluate: skip optimization if anonymous set uses stateful statement
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 1/3] evaluate: allow stateful statements with anonymous verdict maps
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 2/2] netfilter: nfnetlink_queue: enable cgroup id socket info retrieval
- From: Patryk Sondej <patryk.sondej@xxxxxxxxx>
- [PATCH 1/2] netfilter: nfnetlink_log: enable cgroup id socket info retrieval
- From: Patryk Sondej <patryk.sondej@xxxxxxxxx>
- [PATCH 0/2] netfilter: nfnetlink_log & nfnetlink_queue: enable cgroup id socket info
- From: Patryk Sondej <patryk.sondej@xxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH v2 net-next] netfilter: nft_set_pipapo: Use struct_size()
- From: Simon Horman <simon.horman@xxxxxxxxxxxx>
- [PATCH net-next] netfilter: nft_set_pipapo: Use struct_size()
- From: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
- [PATCH v2 net-next] netfilter: nft_set_pipapo: Use struct_size()
- From: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
- [iptables PATCH 0/4] Implement a best-effort forward compat solution
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 2/4] nft: Introduce and use bool nft_handle::compat
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 3/4] Add --compat option to *tables-nft and *-nft-restore commands
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 4/4] tests: Test compat mode
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 1/4] nft: Pass nft_handle to add_{target,action}()
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 10/12] netfilter: nf_tables: add track infrastructure to prepare for expression prefetch
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 12/12] netfilter: nf_tables: re-enable expression reduction
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 11/12] netfilter: nf_tables: add expression prefetch infrastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 09/12] netfilter: nf_tables: cancel tracking when register differs from expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 07/12] netfilter: nf_tables: split expression comparison and reduction
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 08/12] netfilter: nf_tables: remove bitwise register tracking
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 05/12] netfilter: nf_tables: check if register contains valid data before access
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 04/12] netfilter: nf_tables: add nft_reg_load*() and use it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 06/12] netfilter: nf_tables: add struct nft_reg_track and use it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 02/12] netfilter: nf_tables: add nft_reg_store_*() and use it
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 03/12] netfilter: nf_tables: update nft_copy_data() to take struct nft_regs
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v1 01/12] netfilter: nf_tables: add nft_expr_info_setup() helper function
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 00/11 nf-next,v1] track, reduce and prefetch expression
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Phil Sutter <phil@xxxxxx>
- nft transaction semantics and flowtable hw offload
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 1/3] netfilter: nf_tables: pass context structure to nft_parse_register_load
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 2/3] netfilter: nf_tables: validate register loads never access unitialised registers
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 3/3] netfilter: nf_tables: don't initialize registers in nft_do_chain()
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH AUTOSEL 5.10 22/24] ipvs: Update width of source for ip_vs_sync_conn_options
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 6.1 39/49] ipvs: Update width of source for ip_vs_sync_conn_options
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.15 27/30] ipvs: Update width of source for ip_vs_sync_conn_options
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 6.2 43/53] ipvs: Update width of source for ip_vs_sync_conn_options
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 6.3 49/59] ipvs: Update width of source for ip_vs_sync_conn_options
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH nf] netfilter: fix possible bug_on with enable_hooks=1
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: always release netdev hooks from notifier
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH net 1/1] netfilter: nf_tables: fix ct untracked match breakage
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH nf-next 01/19] selftest: netfilter: use /proc for pid checking
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next v2 1/4] selftest: netfilter: use /proc for pid checking
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next v2 0/4] selftest: netfilter: small test tweaks
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next v2 3/4] selftest: netfilter: wait for specific nc pids
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next v2 4/4] selftest: netfilter: monitor result file sizes
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next v2 2/4] selftest: netfilter: no need for ps -x option
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- Re: [PATCH nf-next 15/19] netfilter: nft: add payload application
- From: kernel test robot <lkp@xxxxxxxxx>
- Re: [PATCH nf-next 15/19] netfilter: nft: add payload application
- From: kernel test robot <lkp@xxxxxxxxx>
- Re: [PATCH nftables 8/8] test: py: add tests for shifted nat port-ranges
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 1/1] netfilter: nf_tables: fix ct untracked match breakage
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 0/1] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 04/19] selftest: netfilter: monitor result file sizes
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 02/19] selftest: netfilter: no need for ps -x option
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 01/19] selftest: netfilter: use /proc for pid checking
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [iptables PATCH 0/3] Extract nftnl_rule parsing code
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH nf-next 16/19] netfilter: nftables: fast path payload mangle
- From: kernel test robot <lkp@xxxxxxxxx>
- [PATCH nft] payload: add offload flag to the statements
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next 18/19] netfilter: nft_payload: save payload if needed
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next 19/19] selftests: netfilter: dscp offload test
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next 17/19] netfilter: nftables: payload save mechanism
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next 15/19] netfilter: nft: add payload application
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next 16/19] netfilter: nftables: fast path payload mangle
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next 13/19] netfilter: conntrack: register nft extension
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next 14/19] netfilter: nft: add payload context into extension
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
- [PATCH nf-next 10/19] netfilter: nft_payload: allow offload in the netlink
- From: Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite News]
[Samba]