Linux TCP/IP Netfilter Devel

• Thread Index

• [iptables PATCH 3/9] iptables-xml: Free allocated chain strings
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/9] Fix for shell testsuite '-V' option
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 6/9] xtables: Introduce xtables_clear_iptables_command_state()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 8/9] xshared: Free data after printing help
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 5/9] iptables: Plug memleaks in print_firewall()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 7/9] iptables: Properly clear iptables_command_state object
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: merge ipv4+ipv6 confirm functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: conntrack: add sctp DATA_SENT state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [linux-next:master] BUILD REGRESSION 700e0cd3a5ce6a2cb90d9a2aab729b52f092a7d6
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH ulogd2 v2 v2 00/34] Refactor of the DB output plug-ins
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [RFC ebtables-nft] unify ether type and meta protocol decoding
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH ebtables-nft] nft-bridge: work around recent "among" decode breakage
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v3 iptables-nft 1/3] xlate: get rid of escape_quotes
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net 4/4] netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/4] netfilter: conntrack: fix using __this_cpu_add in preemptible
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/4] netfilter: flowtable_offload: fix using __this_cpu_add in preemptible
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/4] netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC ebtables-nft] unify ether type and meta protocol decoding
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH ebtables-nft] nft-bridge: work around recent "among" decode breakage
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ulogd2 v2 v2 00/34] Refactor of the DB output plug-ins
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2 v2 v2 13/34] output: remove zero-initialized `struct ulogd_plugin` members
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH ulogd2 v2 v2 07/34] src: remove zero-valued config-key fields
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH ulogd2 v2 v2 05/34] build: add checks to configure.ac
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v2 iptables-nft 1/3] xlate: get rid of escape_quotes
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v3 iptables-nft 2/3] extensions: change expected output for new format
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 iptables-nft 1/3] xlate: get rid of escape_quotes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 iptables-nft 0/3] remove escape_quotes support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 iptables-nft 3/3] xlate-test: avoid shell entanglements
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 iptables-nft 2/3] extensions: change expected output for new format
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 iptables-nft 2/3] extensions: change expected output for new format
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 iptables-nft 1/3] xlate: get rid of escape_quotes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [linux-next:master] BUILD REGRESSION 13ee7ef407cfcf63f4f047460ac5bb6ba5a3447d
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH ulogd2 v2 v2 17/34] db: change return type of two functions to `void`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 23/34] db: refactor backlog
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 13/34] output: remove zero-initialized `struct ulogd_plugin` members
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 15/34] db: reorganize source
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 34/34] output: sqlite3: reimplement using the common DB API
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 29/34] output: mysql: add prep & exec support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 14/34] output: de-duplicate allocation of input keys
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 31/34] output: pgsql: remove variable-length arrays
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 19/34] db: improve calculation of sql statement length
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 33/34] output: pgsql: add prep & exec support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 12/34] conffile: replace malloc+strcpy with strdup
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 26/34] db: avoid cancelling ring-buffer thread
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 25/34] db: synchronize access to ring-buffer
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 22/34] db: refactor ring-buffer
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 27/34] db, IP2BIN: defer formatting of raw strings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 30/34] output: pgsql: remove a couple of struct members
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 10/34] src: remove `TIME_ERR` macro
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 20/34] db: refactor configuration
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 28/34] db: add prep & exec support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 32/34] output: pgsql: tidy up `open_db_pgsql` and fix memory leak
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 16/34] db: use consistent integer return values to indicate errors
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 11/34] src: remove superfluous casts
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 24/34] db: use `struct db_stmt` objects more widely
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 21/34] db: refactor ring-buffer initialization
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 18/34] db: open-code `_loop_reconnect_db`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 00/34] Refactor of the DB output plug-ins
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 06/34] src: remove some trailing white space
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 04/34] db: fix back-log capacity checks
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 09/34] src: define constructors and destructors consistently
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 02/34] filter: fix buffer sizes in filter plug-ins
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 05/34] build: add checks to configure.ac
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 08/34] src: parenthesize config-entry macro arguments
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 07/34] src: remove zero-valued config-key fields
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 03/34] output: JSON: remove incorrect config value check
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 v2 v2 01/34] ulogd: fix parse-error check
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2] pgsql: correct `ulog2.ip_totlen` type
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [iptables PATCH] tests: shell: Test selective ebtables flushing
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 iptables-nft 3/3] xlate-test: avoid shell entanglements
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 iptables-nft 2/3] extensions: change expected output for new format
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 iptables-nft 1/3] xlate: get rid of escape_quotes
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] tests: shell: Test selective ebtables flushing
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v2 iptables-nft 0/3] remove escape_quotes support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 iptables-nft 2/3] extensions: change expected output for new format
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 iptables-nft 1/3] xlate: get rid of escape_quotes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 iptables-nft 3/3] xlate-test: avoid shell entanglements
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 1/4] libxtables: xt_xlate_add() to take care of spacing
  • From: Phil Sutter <phil@xxxxxx>
• [syzbot] INFO: task hung in nfnetlink_rcv_msg (3)
  • From: syzbot <syzbot+9204e7399656300bf271@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 12/12] landlock: Document Landlock's network support
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 11/12] samples/landlock: Add network demo
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks()
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 01/12] landlock: Make ruleset's access masks more generic
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH nf] netfilter: fix using __this_cpu_add in preemptible in nf_flow_table_offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] nft_set_pipapo: Actually validate intervals in fields after the first one
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 12/12] landlock: Document Landlock's network support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 09/12] selftests/landlock: Share enforce_ruleset()
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 06/12] landlock: Refactor landlock_add_rule() syscall
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 05/12] landlock: Refactor unmask_layers() and init_layer_masks()
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks()
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 03/12] landlock: Refactor merge/inherit_ruleset functions
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 01/12] landlock: Make ruleset's access masks more generic
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v8 11/12] samples/landlock: Add network demo
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH ulogd2 3/3] src: keep IPv4 addresses internally in IPv4-in-IPv6 format
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 0/3] IP Address Formatting Fixes
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 1/3] filter: IP2BIN: correct spelling of variable
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 2/3] output: add missing support for int64_t values
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED
  • From: kernel test robot <lkp@xxxxxxxxx>
• [linux-next:master] BUILD REGRESSION 9e46a79967326efb03c481ddfd58902475bd920d
  • From: kernel test robot <lkp@xxxxxxxxx>
• [iptables PATCH 3/4] extensions: libxt_conntrack: Drop extra whitespace in xlate
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/4] extensions: Leverage xlate auto-spacing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/4] extensions: xlate: Format sets consistently
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/4] libxtables: xt_xlate_add() to take care of spacing
  • From: Phil Sutter <phil@xxxxxx>
• [linux-next:master] BUILD REGRESSION c35bd4e428856ed8c1fae7f7dfa08a9141c153d1
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nf] netfilter: fix using __this_cpu_add in preemptible in nf_flow_table_offload
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf] netfilter: fix using __this_cpu_add in preemptible in nf_conntrack_core
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• Re: [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH 0/4] xt: Rewrite unsupported compat expression dumping
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/4] xt: Fall back to generic printing from translation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/4] xt: Purify enum nft_xt_type
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/4] xt: Delay libxtables access until translation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/4] xt: Rewrite unsupported compat expression dumping
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables-nft 3/3] extensions: remove trailing spaces
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables-nft 1/3] xlate: get rid of escape_quotes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables-nft 3/3] extensions: remove trailing spaces
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables-nft 1/3] xlate: get rid of escape_quotes
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables-nft 1/3] xlate: get rid of escape_quotes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables-nft 2/3] extensions: change expected output for new format
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables-nft 3/3] extensions: remove trailing spaces
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables-nft 0/3] remove escape_quotes support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] nft_set_pipapo: Actually validate intervals in fields after the first one
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nft] src: support for selectors with different byteorder with interval concatenations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrackd 3/3] Fix -Wimplicit-function-declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrackd 2/3] network: Fix -Wstrict-prototypes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrackd 1/3] build: don't suppress various warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 00/13] Extensions: Review xlate callbacks
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net 1/3] netfilter: ipset: regression in ip_set_hash_ip.c
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [iptables PATCH 00/13] Extensions: Review xlate callbacks
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: PATCH ulogd2 filter BASE ARP packet IP addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [iptables PATCH 04/13] extensions: libipt_ttl: Sanitize xlate callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 05/13] extensions: CONNMARK: Fix xlate callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 13/13] extensions: ipcomp: Add comment to clarify xlate callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 06/13] extensions: MARK: Sanitize MARK_xlate()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 12/13] extensions: frag: Add comment to clarify xlate callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 00/13] Extensions: Review xlate callbacks
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/13] extensions: libebt_mark: Fix xlate test case
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/13] extensions: libebt_redirect: Fix xlate return code
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/13] extensions: ecn: Sanitize xlate callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/13] extensions: tcp: Translate TCP option match
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/13] extensions: libebt_log: Add comment to clarify xlate callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/13] extensions: TOS: Fix v1 xlate callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 07/13] extensions: TCPMSS: Use xlate callback for IPv6, too
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/13] extensions: libebt_mark: Fix mark target xlate
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED
  • From: Eric Garver <egarver@xxxxxxxxxx>
• Re: [PATCH iptables-nft] iptables-nft: exit nonzero when iptables-save cannot decode all expressions
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables-nft] iptables-nft: exit nonzero when iptables-save cannot decode all expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: conntrack: set icmpv6 redirects as RELATED
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 6.0 306/314] netlink: Bounds-check struct nlmsgerr creation
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH net-next/netfilter] netfilter: nft_inner: fix IS_ERR() vs NULL check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/3] netfilter: flowtable_offload: add missing locking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/3] netfilter: ipset: regression in ip_set_hash_ip.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/3] netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_flow_table: add missing locking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv7 4/6] ipvs: use kthreads for stats estimation
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH 0/1] ipset patch for the nf-next tree
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: ipset: Add support for new bitmask parameter
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 0/1] ipset patch for the nf tree
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 1/1] netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [iptables PATCH] extensions: mark: Test double bitwise in a rule
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output
  • From: Phil Sutter <phil@xxxxxx>
• [PATCHv7 0/6] ipvs: Use kthreads for stats
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• [PATCHv7 2/6] ipvs: use common functions for stats allocation
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv7 3/6] ipvs: use u64_stats_t for the per-cpu counters
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv7 6/6] ipvs: run_estimation should control the kthread tasks
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv7 5/6] ipvs: add est_cpulist and est_nice sysctl vars
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv7 1/6] ipvs: add rcu protection to stats
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables-nft RFC 5/5] generic.xlate: make one replay test case work
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH ulogd2 16/34] db: use consistent integer return values to indicate errors
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 28/34] db: add prep & exec support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 30/34] output: pgsql: remove a couple of struct members
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 24/34] db: use `struct db_stmt` objects more widely
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 25/34] db: synchronize access to ring-buffer
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 12/34] conffile: replace malloc+strcpy with strdup
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 21/34] db: refactor ring-buffer initialization
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 13/34] output: remove zero-initialized `struct ulogd_plugin` members
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 20/34] db: refactor configuration
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 34/34] output: sqlite3: reimplement using the common DB API
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 18/34] db: open-code `_loop_reconnect_db`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 29/34] output: mysql: add prep & exec support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 14/34] output: de-duplicate allocation of input keys
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 19/34] db: improve calculation of sql statement length
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 32/34] output: pgsql: tidy up `open_db_pgsql` and fix memory leak
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 31/34] output: pgsql: remove variable-length arrays
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 23/34] db: refactor backlog
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 27/34] db, IP2BIN: defer formatting of raw strings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 26/34] db: avoid cancelling ring-buffer thread
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 10/34] src: remove `TIME_ERR` macro
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 33/34] output: pgsql: add prep & exec support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 15/34] db: reorganize source
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 17/34] db: change return type of two functions to `void`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 22/34] db: refactor ring-buffer
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 11/34] src: remove superfluous casts
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: PATCH ulogd2 filter BASE ARP packet IP addresses
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_flow_table: add missing locking
  • From: Felix Fietkau <nbd@xxxxxxxx>
• [PATCH ulogd2 07/34] src: remove zero-valued config-key fields
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 05/34] build: add checks to configure.ac
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 00/34] Refactor of the DB output plug-ins
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 04/34] db: fix back-log capacity checks
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 02/34] filter: fix buffer overruns in filter plug-ins
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 09/34] src: define constructors and destructors consistently
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 03/34] output: JSON: remove incorrect config value check
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 01/34] ulogd: fix parse-error check
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 06/34] src: remove some trailing white space
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH ulogd2 08/34] src: parenthesize config-entry macro arguments
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_flow_table: add missing locking
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_flow_table: add missing locking
  • From: Felix Fietkau <nbd@xxxxxxxx>
• Re: [PATCH] netfilter: nf_flow_table: add missing locking
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_flow_table: add missing locking
  • From: Felix Fietkau <nbd@xxxxxxxx>
• [ANNOUNCE] ipset 7.16 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH v3 0/6] netfilter: ipset: Add support for new bitmask parameter (userspace)
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_flow_table: add missing locking
  • From: Felix Fietkau <nbd@xxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: regression in ip_set_hash_ip.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/2] netfilter: conntrack: Fix data-races around ct mark
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry
  • From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
• Re: [PATCH v2 2/2] netfilter: conntrack: add sctp DATA_SENT state
  • From: Marcelo Ricardo Leitner <mleitner@xxxxxxxxxx>
• [iptables-nft RFC 5/5] generic.xlate: make one replay test case work
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables-nft RFC 3/5] nft: check for unknown meta keys
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables-nft RFC 2/5] iptables-nft: do not refuse to decode table with unsupported expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables-nft RFC 0/5] update iptables-nft dissector
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Avoid race between tcp_packet packet processing and timeout set by a netfilter CTA_TIMEOUT message
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net 1/2] netfilter: conntrack: Fix data-races around ct mark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/2] netfilter: nf_tables: do not set up extensions for end interval
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] netfilter: ctmark: Fix data-races around ctmark
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] landlock: Allow filesystem layout changes for domains without such rule type
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 01/12] landlock: Make ruleset's access masks more generic
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 12/12] landlock: Document Landlock's network support
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 09/12] selftests/landlock: Share enforce_ruleset()
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 07/12] landlock: Add network rules support
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 06/12] landlock: Refactor landlock_add_rule() syscall
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 05/12] landlock: Refactor unmask_layers() and init_layer_masks()
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks()
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 03/12] landlock: Refactor merge/inherit_ruleset functions
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [nf-next RFC] netfilter: nf_tables: Compatibility interface for nft_rule
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 4/4] xt: Detect xlate callback failure
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 3/4] xt: Put match/target translation into own functions
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/4] xt: Delay libxtables access until translation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 2/4] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 0/4] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• netfilter bpf-jit patchset: test results
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Missing definition of struct "pkt_buff" for libnetfilter_queue
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: Missing definition of struct "pkt_buff" for libnetfilter_queue
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Missing definition of struct "pkt_buff" for libnetfilter_queue
  • From: Shockedder <shockedder@xxxxxxxxx>
• Re: [PATCH v8 11/12] samples/landlock: Add network demo
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• [iptables PATCH] extensions: mark: Test double bitwise in a rule
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next 1/6] netfilter: nft_payload: use __be16 to store gre version
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH iptables] nft-shared: replace nftnl_expr_get_data() by nftnl_expr_get()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables] nft: replace nftnl_.*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] Drop extra newline from xtables_error() calls
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 0/7] De-duplicate code here and there
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net-next/netfilter] netfilter: nft_inner: fix IS_ERR() vs NULL check
  • From: Dan Carpenter <error27@xxxxxxxxx>
• [PATCH net-next/netfilter] netfilter: nft_inner: fix IS_ERR() vs NULL check
  • From: Dan Carpenter <error27@xxxxxxxxx>
• [PATCH libnftnl] src: replace nftnl_*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 5/6] netfilter: rpfilter/fib: clean up some inconsistent indenting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 6/6] netfilter: conntrack: use siphash_4u64
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 3/6] netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 4/6] netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 2/6] netfilter: nft_inner: fix return value check in nft_inner_parse_l2l3()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 1/6] netfilter: nft_payload: use __be16 to store gre version
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 0/6] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: add __force annotation to silence harmless warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 3/6] netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 3/6] netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next 6/6] netfilter: conntrack: use siphash_4u64
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: PATCH ulogd2 filter BASE ARP packet IP addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: PATCH ulogd2 filter BASE ARP packet IP addresses
  • From: "Robert O'Brien" <robrien@xxxxxxxxxxxxxxxxxxxx>
• Re: [nf-next RFC] netfilter: nf_tables: Compatibility interface for nft_rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] nft-shared: replace nftnl_expr_get_data() by nftnl_expr_get()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] nft: replace nftnl_.*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] example: remove nftnl_batch_is_supported() call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: add __force annotation to silence harmless warning
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 5/6] netfilter: rpfilter/fib: clean up some inconsistent indenting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 3/6] netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 4/6] netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 2/6] netfilter: nft_inner: fix return value check in nft_inner_parse_l2l3()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 6/6] netfilter: conntrack: use siphash_4u64
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 1/6] netfilter: nft_payload: use __be16 to store gre version
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 0/6] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: do not set up extensions for end interval
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3] netfilter: nf_tables: add support to destroy operation
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [iptables PATCH] Drop extra newline from xtables_error() calls
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 5/7] extensions: libebt_arp, libebt_ip: Use xtables_ipparse_any()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/7] nft-shared: Introduce port_match_single_to_range()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/7] xshared: Share make_delete_mask() between ip{,6}tables
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 7/7] extensions: Unify ICMP parser into libxt_icmp.h
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/7] De-duplicate code here and there
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/7] extensions: libebt_ip: Include kernel header
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/7] extensions: libip*t_LOG: Merge extensions
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 6/7] extensions: Collate ICMP types/codes in libxt_icmp.h
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 0/3] Extend xlate-test to replay results
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 0/6] Merge NAT extensions
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/3] xt: Put match/target translation into own functions
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/3] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/3] xt: Implement dump and restore support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/3] xt: Delay libxtables access until translation
  • From: Phil Sutter <phil@xxxxxx>
• Re: PATCH ulogd2 filter BASE ARP packet IP addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] monitor: missing cache and set handle initialization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [linux-next:master] BUILD REGRESSION 382d2f9e739bc6f151c718b38537ae522ff848cd
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH v3 6/6] netfilter: ipset: add tests for the new bitmask feature
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH v3 5/6] netfilter: ipset: Update the man page to include netmask/bitmask options
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH v3 4/6] netfilter: ipset: Add bitmask support to hash:netnet
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH v3 3/6] netfilter: ipset: Add bitmask support to hash:ipport
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH v3 2/6] netfilter: ipset: Add bitmask support to hash:ip
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH v3 1/6] netfilter: ipset: Add support for new bitmask parameter
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH v3 0/6] netfilter: ipset: Add support for new bitmask parameter (userspace)
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH v3] netfilter: ipset: Add support for new bitmask parameter
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• RE: PATCH ulogd2 filter BASE ARP packet IP addresses
  • From: "Robert O'Brien" <robrien@xxxxxxxxxxxxxxxxxxxx>
• Avoid race between tcp_packet packet processing and timeout set by a netfilter CTA_TIMEOUT message
  • From: Tula Kraiser <tkraiser@xxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.2.4 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: ctmark: Fix data-races around ctmark
  • From: Daniel Xu <dxu@xxxxxxxxx>
• Re: [PATCH] netfilter: ctmark: Fix data-races around ctmark
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: ctmark: Fix data-races around ctmark
  • From: Daniel Xu <dxu@xxxxxxxxx>
• Re: [PATCH ulogd2] doc: mysql: declare MAC protocol columns unsigned
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/3] netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH nf-next v3] netfilter: nf_tables: add support to destroy operation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH 0/2] Support resetting rules' state
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: merge ipv4+ipv6 confirm functions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 1/3] netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/3] selftests: netfilter: Fix and review rpath.sh
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/3] netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] doc: document a few reset commands supported by the parser
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH 0/2] Support resetting rules' state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH] selftests: netfilter: Fix and review rpath.sh
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf PATCH] selftests: netfilter: Fix and review rpath.sh
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nf-next PATCH 0/2] Support resetting rules' state
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] netfilter: ipset: Add support for new bitmask parameter (kernel)
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [iptables PATCH 1/3] tests: xlate-test: Cleanup file reading loop
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/3] tests: xlate-test.py: Introduce run_proc()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/3] tests: xlate-test: Replay results for reverse direction testing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/3] Extend xlate-test to replay results
  • From: Phil Sutter <phil@xxxxxx>
• Re: [GIT PULL] treewide: timers: Use timer_shutdown*() before freeing timers
  • From: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: Add support for new bitmask parameter (kernel)
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH v2 4/6] netfilter: ipset: Add bitmask support to hash:netnet
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/6] netfilter: ipset: Add support for new bitmask parameter
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH v2 0/6] Add support for new bitmask parameter (userspace)
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [GIT PULL] treewide: timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [PATCH v6a 0/5] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• [PATCH v3] netfilter: conntrack: add sctp DATA_SENT state
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [PATCH ulogd2] doc: mysql: declare MAC protocol columns unsigned
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] optimize: handle prefix and range when merging into set + concatenation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• [PATCH v4a 17/38] timers: net: Use timer_shutdown_sync() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• [nf-next RFC] netfilter: nf_tables: Compatibility interface for nft_rule
  • From: Phil Sutter <phil@xxxxxx>
• Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [RFC][PATCH v3 19/33] timers: net: Use timer_shutdown_sync() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [PATCH] netfilter: rpfilter/fib: clean up some inconsistent indenting
  • From: Jiapeng Chong <jiapeng.chong@xxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH] netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
  • From: Shigeru Yoshida <syoshida@xxxxxxxxxx>
• Re: [PATCH] netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net 1/7] netfilter: nf_tables: netlink notifier might race to release objects
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [iptables PATCH 4/6] extensions: DNAT: Generate print, save and xlate callbacks
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 6/6] extensions: Merge SNAT, DNAT, REDIRECT and MASQUERADE
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/6] extensions: DNAT: Use __DNAT_xlate for REDIRECT, too
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 5/6] extensions: DNAT: Rename some symbols
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/6] Merge NAT extensions
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/6] extensions: DNAT: Fix bad IP address error reporting
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/6] extensions: *NAT: Drop NF_NAT_RANGE_PROTO_RANDOM* flag checks
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()
  • From: Ziyang Xuan <william.xuanziyang@xxxxxxxxxx>
• Re: [PATCH] Periodically flow expire from flow offload tables
  • From: Michael Lilja <michael.lilja@xxxxxxxxx>
• Re: [PATCH] Periodically flow expire from flow offload tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 7/7] netfilter: ipset: enforce documented limit to prevent allocating huge memory
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/7] ipvs: fix WARNING in ip_vs_app_net_cleanup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 6/7] netfilter: nf_nat: Fix possible memory leak in nf_nat_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/7] ipvs: fix WARNING in __ip_vs_cleanup_batch()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/7] ipvs: use explicitly signed chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/7] netfilter: nf_tables: netlink notifier might race to release objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/7] netfilter: nf_tables: release flow rule object from commit path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/7] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: enforce documented limit to prevent allocating huge memory
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ulogd 2.0.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 2/2] netfilter: conntrack: add sctp DATA_SENT state
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2] netfilter: conntrack: use siphash_4u64
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [ANNOUNCE] ulogd 2.0.8 release
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [ANNOUNCE] ulogd 2.0.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net v2] netfilter: nf_nat: Fix possible memory leak in nf_nat_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: ipset: enforce documented limit to prevent allocating huge memory
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: use explicitly signed chars
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: use explicitly signed chars
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: [nft PATCH v4 13/32] evaluate: support shifts larger than the width of the left operand
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH v4 11/32] netlink_delinearize: correct length of right bitwise operand
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH v4 10/32] netlink_delinearize: correct type and byte-order of shifts
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH v4 09/32] netlink_delinearize: add postprocessing for payload binops
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH v4 08/32] netlink: send bit-length of bitwise binops to kernel
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH net v2] netfilter: nf_nat: Fix possible memory leak in nf_nat_init()
  • From: Chen Zhongjin <chenzhongjin@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_nat: Fix possible memory leak in nf_nat_init()
  • From: Chen Zhongjin <chenzhongjin@xxxxxxxxxx>
• [PATCH] netfilter: nf_nat: Fix possible memory leak in nf_nat_init()
  • From: Chen Zhongjin <chenzhongjin@xxxxxxxxxx>
• Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• Re: [PATCH net,v2 0/2] fix WARNING when removing file in ipvs
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net,v2 1/2] ipvs: fix WARNING in __ip_vs_cleanup_batch()
  • From: Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
• [PATCH net,v2 2/2] ipvs: fix WARNING in ip_vs_app_net_cleanup()
  • From: Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
• [PATCH net,v2 0/2] fix WARNING when removing file in ipvs
  • From: Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
• Re: ulogd2 release?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] payload: do not kill dependency for proto_unknown
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/2] payload: do not kill dependency for proto_unknown
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] netlink_delinearize: complete payload expression in payload statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] ipvs: fix WARNING in __ip_vs_cleanup_batch()
  • From: shaozhengchao <shaozhengchao@xxxxxxxxxx>
• Re: [PATCH net] ipvs: fix WARNING in __ip_vs_cleanup_batch()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] ipvs: fix WARNING in __ip_vs_cleanup_batch()
  • From: Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
• ulogd2 release?
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Paolo Abeni <pabeni@xxxxxxxxxx>
• [PATCH v2 2/2] netfilter: conntrack: add sctp DATA_SENT state
  • From: sriram.yagnaraman@xxxxxxxx
• [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry
  • From: sriram.yagnaraman@xxxxxxxx
• [PATCH v2 0/2] netfilter: conntrack: improve SCTP multihoming
  • From: sriram.yagnaraman@xxxxxxxx
• [syzbot] WARNING in nf_tables_exit_net
  • From: syzbot <syzbot+178efee9e2d7f87f5103@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nft v5] src: add support to command "destroy"
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v3] netfilter: nf_tables: add support to destroy operation
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft v4] src: add support to command "destroy"
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: nf_tables: add support to destroy operation
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [PATCH 2/2] netfilter: nf_ct_sctp: add DATA_SENT conntrack state
  • From: sriram.yagnaraman@xxxxxxxx
• [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry
  • From: sriram.yagnaraman@xxxxxxxx
• [PATCH 0/2] netfilter: nf_ct_sctp: improve SCTP multihoming
  • From: sriram.yagnaraman@xxxxxxxx
• Re: [PATCH nf-next v2] netfilter: nf_tables: add support to destroy operation
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v4] src: add support to command "destroy"
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables-nft] nft: disscect basic icmp type/code match
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• [PATCH nf-next,v2] netfilter: nft_payload: use __be16 to store gre version
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_payload: use __b16 to store gre version
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: ip_set_hash_netiface
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft v4] src: add support to command "destroy"
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v2] netfilter: nf_tables: add support to destroy operation
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: add support to destroy operation
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• RE: ip_set_hash_netiface
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH net-next 01/10] netfilter: nft_payload: move struct nft_payload_set definition where it belongs
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net-next 04/10] netfilter: nft_payload: access GRE payload via inner offset
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: enforce documented limit to prevent allocating huge memory
  • From: Daniel Xu <dxu@xxxxxxxxx>
• [PATCH] netfilter: ipset: enforce documented limit to prevent allocating huge memory
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: ip_set_hash_netiface
  • From: Daniel Xu <dxu@xxxxxxxxx>
• Re: [iptables PATCH v2 00/12] Speed up iptables-test.py
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] Periodically flow expire from flow offload tables
  • From: Michael Lilja <michael.lilja@xxxxxxxxx>
• Re: [PATCH] Periodically flow expire from flow offload tables
  • From: Michael Lilja <michael.lilja@xxxxxxxxx>
• Re: [PATCH] ipvs: use explicitly signed chars
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH] ipvs: use explicitly signed chars
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: [PATCH] ipvs: use explicitly signed chars
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net-next 10/10] netfilter: nft_inner: set tunnel offset to GRE header offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 09/10] netfilter: nft_inner: add geneve support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 07/10] netfilter: nft_inner: add percpu inner context
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 08/10] netfilter: nft_meta: add inner match support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 06/10] netfilter: nft_inner: support for inner tunnel header matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 05/10] netfilter: nft_payload: access ipip payload for inner offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 04/10] netfilter: nft_payload: access GRE payload via inner offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 03/10] netfilter: nft_objref: make it builtin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 02/10] netfilter: nf_tables: reduce nft_pktinfo by 8 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 01/10] netfilter: nft_payload: move struct nft_payload_set definition where it belongs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 00/10] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ip_set_hash_netiface
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1 #forregzbot
  • From: Thorsten Leemhuis <regressions@xxxxxxxxxxxxx>
• [PATCH] ipvs: use explicitly signed chars
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: [PATCH] Periodically flow expire from flow offload tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_tables: release flow rule object from commit path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nf_tables: netlink notifier might race to release objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Periodically flow expire from flow offload tables
  • From: Michael Lilja <michael.lilja@xxxxxxxxx>
• Re: [PATCH] Periodically flow expire from flow offload tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Periodically flow expire from flow offload tables
  • From: Michael Lilja <michael.lilja@xxxxxxxxx>
• Re: [nf-next PATCH 0/2] Support resetting rules' state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: nft_objref: make it builtin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: reduce nft_pktinfo by 8 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Periodically flow expire from flow offload tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v3] src: add support to command "destroy"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] 17th Netfilter Workshop in Seville, Spain
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [xtables-addons PATCH v1] build: support for linux 6.1
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• ip_set_hash_netiface
  • From: "Daniel Xu" <dxu@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: avoid access to free'd chain info in nft_commit_release
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft v3] src: add support to command "destroy"
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [xtables-addons PATCH v1] build: support for linux 6.1
  • From: John Thomson <git@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft v2] src: add support to command "destroy"
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft] src: add support to command "destroy"
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH] Periodically flow expire from flow offload tables
  • From: Michael Lilja <michael.lilja@xxxxxxxxx>
• [PATCH RFC xtables-addons] build: support for linux 6.1
  • From: John Thomson <git@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v8 12/12] landlock: Document Landlock's network support
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 11/12] samples/landlock: Add network demo
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 03/12] landlock: Refactor merge/inherit_ruleset functions
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 06/12] landlock: Refactor landlock_add_rule() syscall
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 01/12] landlock: Make ruleset's access masks more generic
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks()
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 07/12] landlock: Add network rules support
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 09/12] selftests/landlock: Share enforce_ruleset()
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 08/12] landlock: Implement TCP network hooks
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 05/12] landlock: Refactor unmask_layers() and init_layer_masks()
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v8 00/12] Network support for Landlock
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: nft_objref: make it builtin
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables-nft] nft: disscect basic icmp type/code match
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order
  • From: Ian Pilcher <arequipeno@xxxxxxxxx>
• Re: [PATCH net 1/2] netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Status of UID GID maching support in INPUT
  • From: Vincas Dargis <vindrg@xxxxxxxxx>
• Re: netfilter+bpf road ahead
  • From: Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
• [PATCH net 2/2] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/2] netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• netfilter+bpf road ahead
  • From: Florian Westphal <fw@xxxxxxxxx>
• [RFC PATCH 0/1] libnftnl: Incorrect res_id byte order?
  • From: Ian Pilcher <arequipeno@xxxxxxxxx>
• [RFC PATCH 1/1] libnftnl: Fix res_id byte order
  • From: Ian Pilcher <arequipeno@xxxxxxxxx>
• [PATCH nf,v3] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: deletion from interval concatenation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 11/16] src: add geneve matching support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 16/16] doc: add gretap matching expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 03/16] src: add vxlan matching support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 15/16] tests: py: add gretap tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 10/16] doc: add gre matching expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 12/16] tests: py: add geneve tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 06/16] doc: add vxlan matching expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 14/16] src: add gretap support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 13/16] doc: add geneve matching expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 09/16] tests: py: add gre tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 07/16] src: display (inner) tag in --debug=proto-ctx
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 08/16] src: add gre support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 04/16] tests: py: add vxlan tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 05/16] tests: shell: add vxlan set tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 01/16] src: add eval_proto_ctx()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 02/16] src: add dl_proto_ctx()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v5 4/7] netfilter: nft_inner: add percpu inner context
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v5 1/7] netfilter: nft_payload: access GRE payload via inner offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v5 7/7] netfilter: nft_inner: set tunnel offset to GRE header offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v5 0/7] nf_tables inner tunnel header match support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v5 6/7] netfilter: nft_inner: add geneve support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v5 3/7] netfilter: nft_inner: support for inner tunnel header matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 00/16] vxlan, geneve, gre, gretap matching support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v5 2/7] netfilter: nft_payload: access ipip payload for inner offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v5 5/7] netfilter: nft_meta: add inner match support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH 1/2] tests: Adjust testsuite return codes to automake guidelines
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] Makefile.am: Integrate testsuites
  • From: Phil Sutter <phil@xxxxxx>
• Re: bridge:fragmented packets dropped by bridge
  • From: Vadim Fedorenko <vfedorenko@xxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: reduce nft_pktinfo by 8 bytes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH] Implement 'reset rule' and 'reset rules' commands
  • From: Phil Sutter <phil@xxxxxx>
• [nf-next PATCH 0/2] Support resetting rules' state
  • From: Phil Sutter <phil@xxxxxx>
• [nf-next PATCH 1/2] netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters
  • From: Phil Sutter <phil@xxxxxx>
• [nf-next PATCH 2/2] netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: conntrack: use siphash_4u64
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH bpf-next v4 2/3] selftests/bpf: Add connmark read test
  • From: Daniel Xu <dxu@xxxxxxxxx>
• [PATCH nf] netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
  • From: Guillaume Nault <gnault@xxxxxxxxxx>
• Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: bridge:fragmented packets dropped by bridge
  • From: Vadim Fedorenko <vfedorenko@xxxxxxxx>
• Re: [PATCH bpf-next v4 2/3] selftests/bpf: Add connmark read test
  • From: Martin KaFai Lau <martin.lau@xxxxxxxxx>
• Re: [PATCH bpf-next v4 2/3] selftests/bpf: Add connmark read test
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH bpf-next v4 2/3] selftests/bpf: Add connmark read test
  • From: Daniel Xu <dxu@xxxxxxxxx>
• RE: [PATCH v1 3/5] treewide: use get_random_u32() when possible
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [nft PATCH] Warn for tables with compat expressions in rules
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 11/12] tests: libxt_connlimit.t: Add missing default values
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 06/12] tests: libebt_redirect.t: Plain redirect prints with trailing whitespace
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 07/12] tests: libxt_length.t: Fix odd use-case output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 08/12] tests: libxt_recent.t: Add missing default values
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 00/12] Speed up iptables-test.py
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 03/12] tests: iptables-test: Cover for obligatory -j CONTINUE in ebtables
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 04/12] tests: *.t: Fix expected output for simple calls
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 10/12] tests: libebt_vlan.t: Drop trailing whitespace from rules
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 01/12] extensions: NFQUEUE: Document queue-balance limitation
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 12/12] tests: *.t: Add missing all-one's netmasks to expected output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 02/12] tests: iptables-test: Implement fast test mode
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 09/12] tests: libxt_tos.t, libxt_TOS.t: Add missing masks in output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 05/12] tests: *.t: Fix for hexadecimal output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net 1/3] selftests: netfilter: Test reverse path filtering
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1
  • From: Maximilien Cuony <maximilien.cuony@xxxxxxxxxxx>
• [PATCH net 3/3] selftests: netfilter: Fix nft_fib.sh for all.rp_filter=1
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 2/3] netfilter: rpfilter/fib: Populate flowic_l3mdev field
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 0/3] netfilter fixes for net
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 1/3] selftests: netfilter: Test reverse path filtering
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v7 02/18] landlock: refactor landlock_find_rule/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>