Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] optimize: fix incorrect expansion into concatenation with verdict map
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] optimize: wrap code to build concatenation in helper function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: avoid kfree_rcu without 2nd arg
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] ipvs: avoid kfree_rcu without 2nd arg
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net-next v6 7/7] netfilter: nf_conntrack: allow early drop of offloaded UDP conns
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v6 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v6 4/7] netfilter: flowtable: cache info of last offload
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v6 5/7] net/sched: act_ct: set ctinfo in meta action depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v6 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v6 3/7] netfilter: flowtable: allow unidirectional rules
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v6 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v6 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH nf-next] netfilter: let reset rules clean out conntrack entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: conntrack: remote a return value of the 'seq_print_acct' function.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: udp: fix seen-reply test
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: fix wrong pointer passed to PTR_ERR()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/2] netfilter: br_netfilter: disable sabotage_in hook after first suppression
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [RFC] bpf: add bpf_link support for BPF_NETFILTER programs
  • From: Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
• Re: [iptables PATCH 0/7] Small ebtables-translate review + extras
  • From: Phil Sutter <phil@xxxxxx>
• Re: [RFC] bpf: add bpf_link support for BPF_NETFILTER programs
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 2/2] Revert "netfilter: conntrack: fix bug in for_each_sctp_chunk"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/2] netfilter: br_netfilter: disable sabotage_in hook after first suppression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: udp: fix seen-reply test
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: udp: fix seen-reply test
  • From: Roi Dayan <roid@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: br_netfilter: disable sabotage_in hook after first suppression
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: br_netfilter: disable sabotage_in hook after first suppression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC] bpf: add bpf_link support for BPF_NETFILTER programs
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [RFC] bpf: add bpf_link support for BPF_NETFILTER programs
  • From: Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
• Re: [RFC] bpf: add bpf_link support for BPF_NETFILTER programs
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC] bpf: add bpf_link support for BPF_NETFILTER programs
  • From: Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
• [RFC] bpf: add bpf_link support for BPF_NETFILTER programs
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v9 12/12] landlock: Document Landlock's network support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• allow user to offload tc action to net device : Question
  • From: Martin Zaharinov <micron10@xxxxxxxxx>
• [PATCH nf] netfilter: br_netfilter: disable sabotage_in hook after first suppression
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v9 12/12] landlock: Document Landlock's network support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH net-next v5 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v5 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v5 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v5 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v5 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v5 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v5 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v5 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v5 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v5 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next v5 7/7] netfilter: nf_conntrack: allow early drop of offloaded UDP conns
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v5 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v5 4/7] netfilter: flowtable: save ctinfo in flow_offload
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v5 5/7] net/sched: act_ct: set ctinfo in meta action depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v5 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v5 3/7] netfilter: flowtable: allow unidirectional rules
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v5 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v5 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH v9 12/12] landlock: Document Landlock's network support
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH net-next v4 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [iptables PATCH 5/7] ebtables-translate: Ignore '-j CONTINUE'
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/7] ebtables-translate: Drop exec_style
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 6/7] ebtables-translate: Print flush command after parsing is finished
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/7] ebtables: Refuse unselected targets' options
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/7] Small ebtables-translate review + extras
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/7] Proper fix for "unknown argument" error message
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/7] ebtables-translate: Use OPT_* from xshared.h
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 7/7] tests: xlate: Support testing multiple individual files
  • From: Phil Sutter <phil@xxxxxx>
• RE: [PATCH nf] Revert "netfilter: conntrack: fix bug in for_each_sctp_chunk"
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH net-next] net: Kconfig: fix spellos
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH nf] Revert "netfilter: conntrack: fix bug in for_each_sctp_chunk"
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH net 0/4] Netfilter fixes for net: manual merge
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH net 0/4] Netfilter fixes for net: manual merge
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• Re: [PATCH net-next v4 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net-next] netlink: fix spelling mistake in dump size assert
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net 3/4] Revert "netfilter: conntrack: add sctp DATA_SENT state"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/4] netfilter: conntrack: fix bug in for_each_sctp_chunk
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/4] netfilter: conntrack: unify established states for SCTP paths
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/4] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] net: Kconfig: fix spellos
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH net-next] net: Kconfig: fix spellos
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: [PATCH v4 0/4] sctp conntrack fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next v4 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v4 7/7] netfilter: nf_conntrack: allow early drop of offloaded UDP conns
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v4 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v4 3/7] netfilter: flowtable: allow unidirectional rules
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v4 5/7] net/sched: act_ct: set ctinfo in meta action depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v4 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v4 4/7] netfilter: flowtable: save ctinfo in flow_offload
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v4 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v3 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH nft] evaluate: set eval ctx for add/update statements with integer constants
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: fix wrong pointer passed to PTR_ERR()
  • From: "Fernando F. Mancera" <ffmancera@xxxxxxxxxx>
• Re: [PATCH net-next v3 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v3 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netlink: fix spelling mistake in dump size assert
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• Re: [PATCH net-next v3 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v3 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net 1/2] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH v4 4/4] netfilter: conntrack: unify established states for SCTP paths
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v4 3/4] Revert "netfilter: conntrack: add sctp DATA_SENT state"
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v4 2/4] netfilter: conntrack: fix bug in for_each_sctp_chunk
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v4 0/4] sctp conntrack fixes
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v4 1/4] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH net-next] netlink: fix spelling mistake in dump size assert
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net 2/2] netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/2] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: conntrack: remote a return value of the 'seq_print_acct' function.
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: udp: fix seen-reply test
  • From: Roi Dayan <roid@xxxxxxxxxx>
• [PATCH v2] netfilter: conntrack: remote a return value of the 'seq_print_acct' function.
  • From: Gavrilov Ilia <Ilia.Gavrilov@xxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: remote a return value of the 'seq_print_acct' function.
  • From: Gavrilov Ilia <Ilia.Gavrilov@xxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: remote a return value of the 'seq_print_acct' function.
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: udp: fix seen-reply test
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 3/9] netfilter: conntrack: avoid reload of ct->status
  • From: Roi Dayan <roid@xxxxxxxxxx>
• Re: [PATCH v9 12/12] landlock: Document Landlock's network support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH] netfilter: conntrack: remote a return value of the 'seq_print_acct' function.
  • From: Gavrilov Ilia <Ilia.Gavrilov@xxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: fix wrong pointer passed to PTR_ERR()
  • From: Simon Horman <horms@xxxxxxxxxx>
• Re: [PATCH v9 12/12] landlock: Document Landlock's network support
  • From: Günther Noack <gnoack3000@xxxxxxxxx>
• Re: [PATCH nf,v4 1/2] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH 1/2 nf,v3] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v3 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v3 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v3 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Stateless load-balancer
  • From: Armen Hovhannisyan <harmen.crd@xxxxxxxxx>
• Re: [PATCH net-next 9/9] netfilter: nf_tables: add support to destroy operation
  • From: "Fernando F. Mancera" <ffmancera@xxxxxxxxxx>
• Re: [PATCH net-next 9/9] netfilter: nf_tables: add support to destroy operation
  • From: "Fernando F. Mancera" <ffmancera@xxxxxxxxxx>
• Re: [PATCH net-next v3 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v3 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v3 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• [PATCH net-next v3 7/7] netfilter: nf_conntrack: allow early drop of offloaded UDP conns
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v3 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v3 5/7] net/sched: act_ct: set ctinfo in meta action depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v3 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v3 3/7] netfilter: flowtable: allow unidirectional rules
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v3 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v3 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v3 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH v3 4/4] netfilter: conntrack: unify established states for SCTP paths
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH v3 4/4] netfilter: conntrack: unify established states for SCTP paths
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH net-next 9/9] netfilter: nf_tables: add support to destroy operation
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next] netfilter: nf_tables: fix wrong pointer passed to PTR_ERR()
  • From: Yang Yingliang <yangyingliang@xxxxxxxxxx>
• Re: [PATCH net-next v2 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH net-next v2 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH v3 4/4] netfilter: conntrack: unify established states for SCTP paths
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v4 1/2] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v4 2/2] netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nf,v3] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] etc: Drop xtables.conf
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v4] Implement 'reset rule' and 'reset rules' commands
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net 1/1] netfilter: conntrack: handle tcp challenge acks during connection reuse
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next 1/9] netfilter: conntrack: sctp: use nf log infrastructure for invalid packets
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH 1/2 nf,v3] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH net-next 9/9] netfilter: nf_tables: add support to destroy operation
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 8/9] netfilter: nf_tables: avoid retpoline overhead for some ct expression calls
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 7/9] netfilter: nf_tables: avoid retpoline overhead for objref calls
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 1/9] netfilter: conntrack: sctp: use nf log infrastructure for invalid packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 5/9] netfilter: ip_tables: remove clusterip target
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 4/9] netfilter: conntrack: move rcu read lock to nf_conntrack_find_get
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 3/9] netfilter: conntrack: avoid reload of ct->status
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 6/9] netfilter: nf_tables: add static key to skip retpoline workarounds
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 0/9] Netfilter updates for net-next
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 2/9] netfilter: conntrack: remove pr_debug calls
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v4] Implement 'reset rule' and 'reset rules' commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3 4/4] netfilter: conntrack: unify established states for SCTP paths
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v3 3/4] Revert "netfilter: conntrack: add sctp DATA_SENT state"
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v3 2/4] netfilter: conntrack: fix bug in for_each_sctp_chunk
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v3 0/4] sctp conntrack fixes
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v3 1/4] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH v2 3/4] Revert "netfilter: conntrack: add sctp DATA_SENT state"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 1/4] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v2 3/4] Revert "netfilter: conntrack: add sctp DATA_SENT state"
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v2 0/4] sctp conntrack fixes
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v2 2/4] netfilter: conntrack: fix bug in for_each_sctp_chunk
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v2 4/4] netfilter: conntrack: unify established states for SCTP paths
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH 1/2 nf,v3] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nf,v3] netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/1] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/1] netfilter: conntrack: handle tcp challenge acks during connection reuse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH net 0/3] Netfilter fixes for net
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net 1/1] netfilter: conntrack: handle tcp challenge acks during connection reuse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/1] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH 3/3] netfilter: conntrack: unify established states for SCTP paths
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH net-next v2 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v2 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH net-next v2 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH net-next v2 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v2 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v2 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [nft PATCH v4] Implement 'reset rule' and 'reset rules' commands
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next v2 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v2 3/7] netfilter: flowtable: allow unidirectional rules
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH net-next v2 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [nft PATCH v2] Implement 'reset rule' and 'reset rules' commands
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] etc: Drop xtables.conf
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 6.1] netfilter: Null pointer dereference in nf_tables_updobj
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2] Implement 'reset rule' and 'reset rules' commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2 6.1] netfilter: Null pointer dereference in nf_tables_updobj
  • From: Alok Tiwari <alok.a.tiwari@xxxxxxxxxx>
• Re: [PATCH net-next v2 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH net-next v2 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH 6.1] netfilter: Null pointer dereference in nf_tables_updobj
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v2 1/2] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH v3] Implement 'reset rule' and 'reset rules' commands
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next v2 3/7] netfilter: flowtable: allow unidirectional rules
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH net-next v2 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH net-next v2 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [nft PATCH v2] Implement 'reset rule' and 'reset rules' commands
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next v2 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6.1] netfilter: Null pointer dereference in nf_tables_updobj
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6.1] netfilter: Null pointer dereference in nf_tables_updobj
  • From: Alok Tiwari <alok.a.tiwari@xxxxxxxxxx>
• Re: [PATCH 3/3] netfilter: conntrack: unify established states for SCTP paths
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3] netfilter: conntrack: unify established states for SCTP paths
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3] netfilter: conntrack: fix bug in for_each_sctp_chunk
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 2/2] netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 1/2] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nf 2/2] netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH net-next v1 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Simon Horman <simon.horman@xxxxxxxxxxxx>
• Proposal: Set nf_conn->tuplehash[IP_CT_DIR_REPLY] to the inverted address of packet when it is confirmed
  • From: Christian Worm Mortensen <opensource@xxxxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2] Implement 'reset rule' and 'reset rules' commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH 0/3] sctp conntrack fixes
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH 1/3] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH 2/3] netfilter: conntrack: fix bug in for_each_sctp_chunk
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH 3/3] netfilter: conntrack: unify established states for SCTP paths
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH v9 05/12] landlock: Move and rename umask_layers() and init_layer_masks()
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 08/12] landlock: Add network rules and TCP hooks support
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 12/12] landlock: Document Landlock's network support
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 06/12] landlock: Refactor _unmask_layers() and _init_layer_masks()
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 10/12] selftests/landlock: Add 10 new test suites dedicated to network
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 03/12] landlock: Refactor landlock_find_rule/insert_rule
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 11/12] samples/landlock: Add network demo
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 04/12] landlock: Refactor merge/inherit_ruleset functions
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 07/12] landlock: Refactor landlock_add_rule() syscall
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 09/12] selftests/landlock: Share enforce_ruleset()
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 01/12] landlock: Make ruleset's access masks more generic
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 02/12] landlock: Allow filesystem layout changes for domains without such rule type
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v9 00/12] Network support for Landlock
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.8.9 release
  • From: Phil Sutter <phil@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: extend runtime set element automerge to cover partial deletions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.8.9 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 0/2] nf_tables rbtree fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] iptables 1.8.9 release
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [iptables PATCH] iptables-test.py: make explicit use of python3
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_queue] build: doc: Fix doxygen obsolete option warning
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log] build: doc: Fix doxygen obsolete option warning
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH net-next v2 7/7] netfilter: nf_conntrack: allow early drop of offloaded UDP conns
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v2 5/7] net/sched: act_ct: set ctinfo in meta action depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v2 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v2 3/7] netfilter: flowtable: allow unidirectional rules
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v2 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v2 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v2 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v2 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net 3/3] netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/3] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/3] selftests: netfilter: fix transaction test script timeout handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/5] Fix some covscan findings
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next v1 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: 6.1: possible bug with netfilter conntrack?
  • From: "Russell King (Oracle)" <linux@xxxxxxxxxxxxxxx>
• Re: 6.1: possible bug with netfilter conntrack?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Phil Sutter <phil@xxxxxx>
• Re: 6.1: possible bug with netfilter conntrack?
  • From: "Russell King (Oracle)" <linux@xxxxxxxxxxxxxxx>
• Re: [PATCH net-next v1 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Simon Horman <simon.horman@xxxxxxxxxxxx>
• RE: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: 6.1: possible bug with netfilter conntrack?
  • From: "Russell King (Oracle)" <linux@xxxxxxxxxxxxxxx>
• Re: 6.1: possible bug with netfilter conntrack?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: 6.1: possible bug with netfilter conntrack?
  • From: "Russell King (Oracle)" <linux@xxxxxxxxxxxxxxx>
• Re: 6.1: possible bug with netfilter conntrack?
  • From: Florian Westphal <fw@xxxxxxxxx>
• 6.1: possible bug with netfilter conntrack?
  • From: "Russell King (Oracle)" <linux@xxxxxxxxxxxxxxx>
• [PATCH] build: put xtables.conf in EXTRA_DIST
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH nft] intervals: restrict check missing elements fix to sets with no auto-merge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ulogd2 v2] pcap: prevent crashes when output `FILE *` is null
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 4/5] meta: parse_iso_date() returns boolean
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/5] Fix some covscan findings
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/5] netlink: Fix for potential NULL-pointer deref
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/5] optimize: Do not return garbage from stack
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 5/5] mnl: dump_nf_hooks() leaks memory in error path
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/5] optimize: Clarify chain_optimize() array allocations
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2] Implement 'reset rule' and 'reset rules' commands
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] extensions: NAT: Fix for -Werror=format-security
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] extensions: NAT: Fix for -Werror=format-security
  • From: Phil Sutter <phil@xxxxxx>
• Re: build failure since commit 'xt: Rewrite unsupported compat expression dumping'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: build failure since commit 'xt: Rewrite unsupported compat expression dumping'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft] src: allow for updating devices on existing netdev chain - Test result
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft] src: allow for updating devices on existing netdev chain - Test result
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft] src: allow for updating devices on existing netdev chain - Test result
  • From: Martin Zaharinov <micron10@xxxxxxxxx>
• RE: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [ANNOUNCE] iptables 1.8.9 release
  • From: Phil Sutter <phil@xxxxxxxxxxxxx>
• Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] uapi: linux: restore IPPROTO_MAX to 256
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR
  • From: Phil Sutter <phil@xxxxxx>
• Re: build failure since commit 'xt: Rewrite unsupported compat expression dumping'
  • From: Neels Hofmeyr <nhofmeyr@xxxxxxxxxxx>
• [PATCH net] uapi: linux: restore IPPROTO_MAX to 256
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/3] netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/3] selftests: netfilter: fix transaction test script timeout handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/3] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_conntrack 1/1] conntrack: Allow setting of netlink buffer size
  • From: Bill Blough <devel@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] selftests: netfilter: fix transaction test script timeout handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack] conntrack: add sanity check to netlink socket filter API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_conntrack 1/1] conntrack: Allow setting of netlink buffer size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_payload: incorrect arithmetics when rebuiling VLAN header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4] netfilter: conntrack: simplify sctp state machine
  • From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: handle tcp challenge acks during connection reuse
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  • From: Simon Horman <simon.horman@xxxxxxxxxxxx>
• [PATCH v2] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  • From: Gavrilov Ilia <Ilia.Gavrilov@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  • From: Gavrilov Ilia <Ilia.Gavrilov@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  • From: Simon Horman <simon.horman@xxxxxxxxxxxx>
• [PATCH v4] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• RE: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: build failure since commit 'xt: Rewrite unsupported compat expression dumping'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• build failure since commit 'xt: Rewrite unsupported compat expression dumping'
  • From: Neels Hofmeyr <nhofmeyr@xxxxxxxxxxx>
• Re: [PATCH net-next v1 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH net-next v1 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH net-next v1 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [iptables PATCH] Makefile: Replace brace expansion
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] Makefile: Replace brace expansion
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next v1 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH net-next v1 6/7] net/sched: act_ct: offload UDP NEW connections
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v1 7/7] netfilter: nf_conntrack: allow early drop of offloaded UDP conns
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v1 5/7] net/sched: act_ct: set ctinfo in meta action depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v1 3/7] netfilter: flowtable: allow unidirectional rules
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v1 1/7] net: flow_offload: provision conntrack info in ct_metadata
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v1 4/7] netfilter: flowtable: allow updating offloaded rules asynchronously
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v1 2/7] netfilter: flowtable: fixup UDP timeout depending on ct state
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v1 0/7] Allow offloading of UDP NEW connections via act_ct
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• Re: [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [RFC PATCH v3] netfilter: conntrack: simplify sctp state machine
  • From: Florian Westphal <fw@xxxxxxxxx>
• [RFC PATCH v3] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [no subject]
  • From: Gavrilov Ilia <Ilia.Gavrilov@xxxxxxxxxxx>
• [PATCH] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  • From: Gavrilov Ilia <Ilia.Gavrilov@xxxxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: Dan Carpenter <error27@xxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: Dan Carpenter <error27@xxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: Dan Carpenter <error27@xxxxxxxxx>
• Re: [PATCH net-next] Remove DECnet support from kernel
  • From: "Arnd Bergmann" <arnd@xxxxxxxx>
• Re: [PATCH net-next] Remove DECnet support from kernel
  • From: Jiri Slaby <jirislaby@xxxxxxxxxx>
• Re: [PATCH net-next] Remove DECnet support from kernel
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 11/12] samples/landlock: Add network demo
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH net-next] Remove DECnet support from kernel
  • From: Jiri Slaby <jirislaby@xxxxxxxxxx>
• [PATCH libnetfilter_conntrack 1/1] conntrack: Allow setting of netlink buffer size
  • From: William Blough <devel@xxxxxxxxx>
• Re: [RFC PATCH v2] netfilter: conntrack: simplify sctp state machine
  • From: Long Xin <lxin@xxxxxxxxxx>
• Re: [PATCH v8 11/12] samples/landlock: Add network demo
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [nft] src: allow for updating devices on existing netdev chain - Test result
  • From: Martin Zaharinov <micron10@xxxxxxxxx>
• [nft] src: allow for updating devices on existing netdev chain - Test result
  • From: Martin Zaharinov <micron10@xxxxxxxxx>
• [PATCH nft] src: allow for updating devices on existing netdev chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 2/4] netfilter: nf_tables: support for adding new devices to an existing netdev chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 4/4] netfilter: nf_tables: allow to create netdev chain without device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 3/4] netfilter: nf_tables: support for deleting devices in an existing netdev chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 1/4] netfilter: nf_tables: rename function to destroy hook list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: do not send complete notification of deletions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: remove clusterip target
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC PATCH v2] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• RE: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• RE: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH nf] selftests: netfilter: fix transaction test script timeout handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH nf] selftests: netfilter: fix transaction test script timeout handling
  • From: Mirsad Goran Todorovac <mirsad.todorovac@xxxxxxxxxxxx>
• Re: [PATCH v8 11/12] samples/landlock: Add network demo
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] selftests: netfilter: fix transaction test script timeout handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [RFC PATCH] netfilter: conntrack: simplify sctp state machine
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH nft] optimize: payload expression requires inner_desc comparison
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 04/14] netlink: add macro for checking dump ctx size
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH net-next 04/14] netlink: add macro for checking dump ctx size
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH nf-next,v1 3/3] netfilter: nf_tables: support for deleting devices in an existing netdev chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v1 2/3] netfilter: nf_tables: support for adding new devices to an existing netdev chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v1 1/3] netfilter: nf_tables: rename function to destroy hook list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v1] src: allow for updating devices on existing netdev chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] chain: relax logic to build NFTA_CHAIN_HOOK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: nf_tables: extend retpoline workarounds
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: nf_tables: avoid retpoline overhead for objref calls
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: nf_tables: add static key to skip retpoline workarounds
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: nf_tables: avoid retpoline overhead for some ct expression calls
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH net 1/7] netfilter: conntrack: fix ipv6 exthdr error check
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net 7/7] netfilter: ipset: Rework long task execution when adding/deleting entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 6/7] netfilter: ipset: fix hash:net,port,net hang with /0 subnet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/7] netfilter: nf_tables: honor set timeout and garbage collection updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/7] netfilter: nf_tables: consolidate set description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/7] netfilter: nf_tables: perform type checking for existing sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/7] netfilter: nf_tables: add function to create set stateful expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/7] netfilter: conntrack: fix ipv6 exthdr error check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/7] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_conntrack 2/2] conntrack: simplify calculation of `struct sock_fprog` length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_conntrack 1/2] conntrack: fix BPF code for filtering on big-endian architectures
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v2 00/16] vxlan, geneve, gre, gretap matching support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: Add GPLv2+ header to .c files of recent creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v5] netfilter: nf_tables: add support to destroy operation
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft v6] src: add support to command "destroy"
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH libnftnl] expr: add inner support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] ipset patches for nf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] ipset patches for nf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: Update copyright header to GPLv2+ in socket.c
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v4] netfilter: nf_tables: add support to destroy operation
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH] pcap: prevent crashes when output `FILE *` is null
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: conntrack: avoid reload of ct->status
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: conntrack: cleanups
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: conntrack: remove pr_debug calls
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: conntrack: sctp: use nf log infrastructure for invalid packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH xtables-addons 0/3] Add Linux 6.2 Support
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [ANNOUNCE] ipset 7.17 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] ipset patches for nf
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: ipset: fix hash:net,port,net hang with /0 subnet
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 0/2] ipset patches for nf
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: ipset: Rework long task execution when adding/deleting entries
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH xtables-addons 2/3] build: replace `AC_DISABLE_STATIC` macro with an argument to `LT_INIT`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 3/3] build: support for Linux 6.2
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 1/3] build: replace obsolete `AC_PROG_LIBTOOL` macro with `LT_INIT`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 0/3] Add Linux 6.2 Support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: ipset bug (kernel hang)
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• WARNING: proc registration bug in clusterip_tg_check
  • From: Wei Chen <harperchen1110@xxxxxxxxx>
• Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• [PATCH libmnl v2] doc: fix some non-native English usages
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH libmnl] doc: fix some non-native English usages
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH libmnl] doc: fix some non-native English usages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH libmnl] doc: fix some non-native English usages
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_conntrack 2/2] conntrack: simplify calculation of `struct sock_fprog` length
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_conntrack 1/2] conntrack: fix BPF code for filtering on big-endian architectures
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH] treewide: Convert del_timer*() to timer_shutdown*()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [libnetfilter_conntrack PATCH] conntrack: increase the length of `l4proto_map`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• ipset bug (kernel hang)
  • From: Марк Коренберг <socketpair@xxxxxxxxx>
• "nft list hooks" in older kernels?
  • From: Simon Kirby <sim@xxxxxxxxxx>
• Re: [iptables PATCH 1/3] gitignore: Ignore utils/nfsynproxy
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/3] gitignore: Ignore generated ip6tables man pages
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/3] gitignore: Ignore utils/nfsynproxy
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/3] ebtables-translate: Install symlink
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Reject tcp/udp extension without proper protocol match
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] nft: Reject tcp/udp extension without proper protocol match
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 2/2] ct: use inet_service_type for proto-src and proto-dst
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2,v2] evaluate: fix shift exponent underflow in concatenation evaluation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] scanner: treat invalid octal strings as strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: fix shift exponent underflow in concatenation evaluation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.0.6 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.0.6 release
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH nft] scanner: treat invalid octal strings as strings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft] scanner: treat invalid octal strings as strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] scanner: treat invalid octal strings as strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] treewide: Convert del_timer*() to timer_shutdown*()
  • From: Paolo Abeni <pabeni@xxxxxxxxxx>
• [PATCH nf 4/4,v6] netfilter: nf_tables: honor set timeout and garbage collection updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] nftables 1.0.6 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] treewide: Convert del_timer*() to timer_shutdown*()
  • From: Kalle Valo <kvalo@xxxxxxxxxx>
• Re: [conntrack-tools PATCH 0/4] Fix some minor bugs
  • From: Phil Sutter <phil@xxxxxx>
• Re: [conntrack-tools PATCH 0/4] Fix some minor bugs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] owner: Fix potential array out of bounds access
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] owner: Fix potential array out of bounds access
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: fix ipv6 exthdr error check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v5 1/4] netfilter: nf_tables: consolidate set description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v5 2/4] netfilter: nf_tables: add function to create set stateful expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v5 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v5 3/4] netfilter: nf_tables: perform type checking for existing sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf-next PATCH v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 0/4] Make rule parsing strict
  • From: Phil Sutter <phil@xxxxxx>
• [iptables RFC] ebtables: among: Embed meta protocol match into set lookup
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] treewide: Convert del_timer*() to timer_shutdown*()
  • From: Pavel Machek <pavel@xxxxxx>
• [PATCH] treewide: Convert del_timer*() to timer_shutdown*()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [PATCH nf,v4 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [conntrack-tools PATCH 4/4] conntrack: Sanitize free_tmpl_objects()
  • From: Phil Sutter <phil@xxxxxx>
• [conntrack-tools PATCH 2/4] conntrack: Fix for unused assignment in do_command_ct()
  • From: Phil Sutter <phil@xxxxxx>
• [conntrack-tools PATCH 3/4] conntrack: Fix for unused assignment in ct_save_snprintf()
  • From: Phil Sutter <phil@xxxxxx>
• [conntrack-tools PATCH 0/4] Fix some minor bugs
  • From: Phil Sutter <phil@xxxxxx>
• [conntrack-tools PATCH 1/4] conntrack: Fix potential array out of bounds access
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf,v3 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v2 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 4/4] netfilter: nf_tables: honor set timeout and garbage collection updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 2/4] netfilter: nf_tables: add function to create set stateful expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 3/4] netfilter: nf_tables: perform type checking for existing sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 0/4] nf_tables: set updates type check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 1/4] netfilter: nf_tables: consolidate set description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v1] netfilter: nf_tables: perform type checking for existing sets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf,v1] netfilter: nf_tables: perform type checking for existing sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] scanner: treat invalid octal strings as strings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft] src: Update copyright header to GPLv2+ in socket.c
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [nf-next PATCH] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nf-next PATCH] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] ipvs: use div_s64 for signed division
  • From: "Arnd Bergmann" <arnd@xxxxxxxx>
• repeated nft set add ignores changed parameters
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ipvs: use div_s64 for signed division
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: move rcu read lock to nf_conntrack_find_get
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nf-next PATCH] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nf-next PATCH] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] ipvs: use div_s64 for signed division
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] ipvs: use div_s64 for signed division
  • From: Arnd Bergmann <arnd@xxxxxxxxxx>
• [iptables PATCH 4/4] nft: Make rule parsing errors fatal
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/4] arptables: Check the mandatory ar_pln match
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/4] nft: Increase rule parser strictness
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/4] Make rule parsing strict
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/4] nft: Parse icmp header matches
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf] netfilter: conntrack: fix ipv6 exthdr error check
  • From: Florian Westphal <fw@xxxxxxxxx>
• [RFC net-next 05/15] netlink: add macro for checking dump ctx size
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [iptables PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 00/11] Support 'make dist' and 'make check'
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net 1/3] netfilter: flowtable: really fix NAT IPv6 offload
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net 2/3] ipvs: add a 'default' case in do_ip_vs_set_ctl()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/3] netfilter: flowtable: really fix NAT IPv6 offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/3] netfilter: conntrack: document sctp timeouts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/4] xt: Rewrite unsupported compat expression dumping
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] doc: add/update can be used with maps too
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH] netfilter: conntrack: document sctp timeouts
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH v2] ipvs: add a 'default' case in do_ip_vs_set_ctl()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: document sctp timeouts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ulogd2 v2] build: fix pgsql fall-back configuration of CFLAGS
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net-next] ipvs: fix type warning in do_div() on 32 bit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] ipvs: fix type warning in do_div() on 32 bit
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next 01/12] netfilter: nft_inner: fix IS_ERR() vs NULL check
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH] ipvs: use u64 to silence do_div warnings
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH nft 0/3] fix map update with concatenation and timeouts
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] ipvs: add a 'default' case in do_ip_vs_set_ctl()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH nft 2/3] netlink_linearize: fix timeout with map updates
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 0/3] fix map update with concatenation and timeouts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/3] netlink_linearize: fix timeout with map updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: conntrack: document sctp timeouts
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• [PATCH nft 3/3] tests: add a test case for map update from packet path with concat
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] netlink_linearize: fix timeout with map updates
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] netlink_delinearize: fix decoding of concat data element
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/3] fix map update with concatenation and timeouts
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] evaluate: fix compilation warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] ipvs: add a 'default' case in do_ip_vs_set_ctl()
  • From: Li Qiong <liqiong@xxxxxxxxxxxx>
• Re: [PATCH] ipvs: initialize 'ret' variable in do_ip_vs_set_ctl()
  • From: liqiong <liqiong@xxxxxxxxxxxx>
• [PATCH ulogd2] build: fix pgsql fall-back configuration of CFLAGS
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH net-next 10/12] ipvs: use kthreads for stats estimation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 12/12] ipvs: run_estimation should control the kthread tasks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 09/12] ipvs: use u64_stats_t for the per-cpu counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 11/12] ipvs: add est_cpulist and est_nice sysctl vars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 07/12] ipvs: add rcu protection to stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 08/12] ipvs: use common functions for stats allocation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 05/12] netfilter: conntrack: set icmpv6 redirects as RELATED
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 06/12] netfilter: flowtable: add a 'default' case to flowtable datapath
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 04/12] netfilter: ipset: Add support for new bitmask parameter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 02/12] netfilter: conntrack: add sctp DATA_SENT state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 03/12] netfilter: conntrack: merge ipv4+ipv6 confirm functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 00/12] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 01/12] netfilter: nft_inner: fix IS_ERR() vs NULL check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] scanner: match full comment line in case of tie
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ipset PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCHv7 0/6] ipvs: Use kthreads for stats
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCHv7 0/6] ipvs: Use kthreads for stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 1/7] ebtables: Implement --check command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 1/7] ebtables: Implement --check command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/4] xt: Delay libxtables access until translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 1/7] ebtables: Implement --check command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] netlink: statify __netlink_gen_data()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3,v2] netlink: unfold function to generate concatenations for keys and data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] netlink: add function to generate set element key data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libmnl PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 1/7] ebtables: Implement --check command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 4/7] nft: Fix match generator for '! -i +'
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 1/4] xt: Delay libxtables access until translation
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH ulogd2 v2] src: keep IPv4 addresses internally in IPv4-in-IPv6 format
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH ulogd2 3/3] src: keep IPv4 addresses internally in IPv4-in-IPv6 format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2 2/3] output: add missing support for int64_t values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2 1/3] filter: IP2BIN: correct spelling of variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 1/7] ebtables: Implement --check command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2] pgsql: correct `ulog2.ip_totlen` type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] netlink: unfold function to generate concatenations for keys and data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v2] scanner: handle files with CRLF line terminators
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2 2/4] filter: fix buffer sizes in filter plug-ins
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft 2/2,v2] netlink: swap byteorder of value component in concatenation of intervals
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/4] xt: Delay libxtables access until translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: add a 'default' case to 'switch (tuplehash->tuple.xmit_type)'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2 2/4] filter: fix buffer sizes in filter plug-ins
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2 0/4] Some bug-fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: flowtable: really fix NAT IPv6 offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 4/7] nft: Fix match generator for '! -i +'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libmnl PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv7 0/6] ipvs: Use kthreads for stats
  • From: Julian Anastasov <ja@xxxxxx>
• [iptables PATCH v2 09/11] include/Makefile: xtables-version.h is generated
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 01/11] Drop INCOMPATIBILITIES file
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 11/11] Makefile.am: Integrate testsuites
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 10/11] tests: Adjust testsuite return codes to automake guidelines
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 06/11] iptables/Makefile: Split nft-variant man page list
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 05/11] iptables/Makefile: Reorg variable assignments
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 04/11] extensions: Makefile: Merge initext targets
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 03/11] Makefile: Generate ip6tables man pages on the fly
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 02/11] Drop libiptc/linux_stddef.h
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 00/11] Support 'make dist' and 'make check'
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 07/11] Makefile: Fix for 'make distcheck'
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 08/11] Makefile: Generate .tar.xz archive with 'make dist'
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 4/7] nft: Fix match generator for '! -i +'
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net] netfilter: flowtable: really fix NAT IPv6 offload
  • From: Qingfang DENG <dqfext@xxxxxxxxx>
• Re: [iptables PATCH 4/7] nft: Fix match generator for '! -i +'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv7 0/6] ipvs: Use kthreads for stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCHv7 0/6] ipvs: Use kthreads for stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2,v2] netlink: swap byteorder of value component in concatenation of intervals
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft,v2] scanner: handle files with CRLF line terminators
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink: unfold function to generate concatenations for keys and data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: do not crash on runaway number of concatenation components
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2,v2] netlink: swap byteorder of value component in concatenation of intervals
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [ulogd PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [ipset PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [nfacct PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [libmnl PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [libnetfilter_cthelper PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <psutter@xxxxxxxxxx>
• [conntrack-tools PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [libnetfilter_cttimeout PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [libnetfilter_conntrack PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [libnetfilter_queue PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [libnetfilter_log PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [libnetfilter_acct PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [libnfnetlink PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] Makefile: Create LZMA-compressed dist-files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] netlink: swap byteorder of value component in interval set with concatenation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] netlink: swap byteorder of value component in interval set with concatenation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] tests: py: missing json for different byteorder selector with interval concatenation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist'
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] src: support for selectors with different byteorder with interval concatenations
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] scanner: handle files with CRLF line terminators
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist'
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist'
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 03/11] Makefile: Generate ip6tables man pages on the fly
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 08/11] Makefile: Generate .tar.bz2 archive with 'make dist'
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [iptables PATCH 03/11] Makefile: Generate ip6tables man pages on the fly
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [iptables PATCH 00/11] Support 'make dist' and 'make check'
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/11] Makefile.am: Integrate testsuites
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/11] Drop INCOMPATIBILITIES file
  • From: Phil Sutter <phil@xxxxxx>