Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [iptables PATCH] iptables: xshared: Ouptut '--' in the opt field in ipv6's fake mode
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nf-next 01/18] netfilter: conntrack: use fallthrough to cleanup
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH nf-next 17/18] netfilter: flowtable: prefer refcount_inc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 13/18] netfilter: nf_tables: use correct integer types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 16/18] netfilter: ipvs: Use the bitmap API to allocate bitmaps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 14/18] netfilter: nf_tables: move nft_cmp_fast_mask to where its used
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 15/18] netfilter: nf_nat: in nf_nat_initialized(), use const struct nf_conn *
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 18/18] netfilter: xt_TPROXY: remove pr_debug invocations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 12/18] netfilter: nf_tables: add and use BE register load-store helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 11/18] netfilter: nf_tables: use the correct get/put helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 09/18] netfilter: nfnetlink: add missing __be16 cast
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 10/18] netfilter: x_tables: use correct integer types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 03/18] net/sched: act_ct: set 'net' pointer when creating new nf_flow_table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 07/18] netfilter: h323: merge nat hook pointers into one
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 02/18] netfilter: conntrack: use correct format characters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 08/18] netfilter: nft_set_bitmap: Fix spelling mistake
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 05/18] netfilter: nf_conntrack: add missing __rcu annotations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 06/18] netfilter: nf_conntrack: use rcu accessors where needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 04/18] netfilter: nf_flow_table: count pending offload workqueue tasks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 01/18] netfilter: conntrack: use fallthrough to cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 00/18] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipvs: Use the bitmap API to allocate bitmaps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: prefer refcount_inc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH bpf-next v6 05/13] bpf: Add documentation for kfuncs
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v6 01/13] bpf: Introduce BTF ID flags and 8-byte BTF set
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: conntrack: remove unneeded indent level
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: conntrack: ignore overly delayed tcp packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: conntrack: prepare tcp_in_window for ternary return value
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: conntrack: ignore overly delayed tcp packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH bpf-next v6 05/13] bpf: Add documentation for kfuncs
  • From: Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
• Re: [iptables PATCH] iptables: xshared: Ouptut '--' in the opt field in ipv6's fake mode
  • From: Erik Skultety <eskultet@xxxxxxxxxx>
• Re: [iptables PATCH] iptables: xshared: Ouptut '--' in the opt field in ipv6's fake mode
  • From: Erik Skultety <eskultet@xxxxxxxxxx>
• Re: [iptables PATCH] iptables: xshared: Ouptut '--' in the opt field in ipv6's fake mode
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [iptables PATCH] iptables: xshared: Ouptut '--' in the opt field in ipv6's fake mode
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] iptables: xshared: Ouptut '--' in the opt field in ipv6's fake mode
  • From: Erik Skultety <eskultet@xxxxxxxxxx>
• Re: [PATCH v2] net-next: improve handling of ICMP_EXT_ECHO icmp type
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH v2] net-next: improve handling of ICMP_EXT_ECHO icmp type
  • From: Mathias Lark <mathiaslark@xxxxxxxxx>
• Re: [PATCH bpf-next v6 01/13] bpf: Introduce BTF ID flags and 8-byte BTF set
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH bpf-next v6 03/13] bpf: Switch to new kfunc flags infrastructure
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 05/13] bpf: Add documentation for kfuncs
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 11/13] selftests/bpf: Add tests for new nf_conntrack kfuncs
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 13/13] selftests/bpf: Fix test_verifier failed test in unprivileged mode
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 07/13] net: netfilter: Add kfuncs to allocate and insert CT
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 04/13] bpf: Add support for forcing kfunc args to be trusted
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 12/13] selftests/bpf: Add negative tests for new nf_conntrack kfuncs
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 06/13] net: netfilter: Deduplicate code in bpf_{xdp,skb}_ct_lookup
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 09/13] net: netfilter: Add kfuncs to set and change CT status
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 10/13] selftests/bpf: Add verifier tests for trusted kfunc args
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 08/13] net: netfilter: Add kfuncs to set and change CT timeout
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 02/13] tools/resolve_btfids: Add support for resolving kfunc flags
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 01/13] bpf: Introduce BTF ID flags and 8-byte BTF set
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 00/13] New nf_conntrack kfuncs for insertion, changing timeout, status
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_TPROXY: remove pr_debug invocations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_TPROXY: remove pr_debug invocations
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• [PATCH nft 2/2,v4] cache: validate handle string length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] cache: report an error message if cache initialization fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Add support for new bitmask parameter
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH nft 2/2,v3] cache: validate handle string length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] cache: validate handle string length
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] cache: prepare nft_cache_evaluate() to return error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_bison: bail out on too long names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_bison: bail out on too long names
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] parser_bison: bail out on too long names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH net-next] improve handling of ICMP_EXT_ECHO icmp type
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: libnftnl broken examples
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft] parser_bison: bail out on too long names
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ipvs: Use the bitmap API to allocate bitmaps
  • From: Simon Horman <horms@xxxxxxxxxx>
• [PATCH nft] parser_bison: bail out on too long names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] improve handling of ICMP_EXT_ECHO icmp type
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] improve handling of ICMP_EXT_ECHO icmp type
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• LPC 2022 Networking and BPF Track CFP (Reminder)
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH net-next] improve handling of ICMP_EXT_ECHO icmp type
  • From: Mathias Lark <mathiaslark@xxxxxxxxx>
• Re: [PATCH] netfilter: ipset: ipset list may return wrong member count on bitmap types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: ipset list may return wrong member count on bitmap types
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 1/6] netfilter: ipset: include linux/nf_inet_addr.h
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: regression in ip_set_hash_ip.c
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH 1/6] netfilter: ipset: include linux/nf_inet_addr.h
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Add support for new bitmask parameter
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [IPTABLES][PATCHv3] xt_sctp: support a couple of new chunk types
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ipset: regression in ip_set_hash_ip.c
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: ipset list may return wrong member count on bitmap types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: xt_TPROXY: remove pr_debug invocations
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• Re: [PATCH] netfilter: xt_TPROXY: remove pr_debug invocations
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• Re: [PATCH] netfilter: xt_TPROXY: remove pr_debug invocations
  • From: Nathan Chancellor <nathan@xxxxxxxxxx>
• [PATCH] netfilter: xt_TPROXY: remove pr_debug invocations
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• Re: [PATCH nf, v2 1/2] netfilter: nf_tables: release element key when parser fails
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [PATCH] netfilter: xt_TPROXY: fix clang -Wformat warnings:
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_TPROXY: fix clang -Wformat warnings:
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• Re: [PATCH nf v3] netfilter: conntrack: fix crash due to confirmed bit load reordering
  • From: Kajetan Puchalski <kajetan.puchalski@xxxxxxx>
• [IPTABLES][PATCHv3] xt_sctp: support a couple of new chunk types
  • From: Yuxuan Luo <luoyuxuan.carl@xxxxxxxxx>
• Re: [PATCH] netfilter: Fix spelling mistake
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: in nf_nat_initialized(), use const struct nf_conn *
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/6] netfilter: sparse fixups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 0/3] netfilter: conntrack sparse annotations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v4 0/2] Conntrack offload debuggability improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 12/12] netfilter: conntrack: use correct format characters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: use fallthrough to cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [IPTABLES][PATCHv2] xt_sctp: support a couple of new chunk types
  • From: Yuxuan Luo <luoyuxuan.carl@xxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH net 1/3] netfilter: conntrack: fix crash due to confirmed bit load reordering
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH v2] src: proto: support DF, LE PHB, VA for DSCP
  • From: Oleksandr Natalenko <oleksandr@xxxxxxxxxxxxxx>
• Re: [PATCH] src: proto: support DF, LE, VA for DSCP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] xt_sctp: support a couple of new chunk types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/3] netfilter: nf_log: incorrect offset to network header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/3] netfilter: conntrack: fix crash due to confirmed bit load reordering
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/3] netfilter: nf_tables: replace BUG_ON by element length check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_TPROXY: fix clang -Wformat warnings:
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: FTBS on Debian Bullseye with xtables-addons-dkms 3.13-1 and kernel 5.10.0-16-amd64
  • From: Lupe Christoph <lupe@xxxxxxxxxxxxxxxxx>
• Re: FTBS on Debian Bullseye with xtables-addons-dkms 3.13-1 and kernel 5.10.0-16-amd64
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• FTBS on Debian Bullseye with xtables-addons-dkms 3.13-1 and kernel 5.10.0-16-amd64
  • From: Lupe Christoph <lupe@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nf,v2 1/2] netfilter: nf_tables: release element key when parser fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v3] netfilter: nf_tables: replace BUG_ON by element length check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v2 1/2] netfilter: nf_tables: release element key when parser fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_TPROXY: fix clang -Wformat warnings:
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: Intermittent performance regression related to ipset between 5.10 and 5.15
  • From: "U'ren, Aaron" <Aaron.U'ren@xxxxxxxx>
• libnftnl broken examples
  • From: Serg <jpo39rxtfl@xxxxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v6 01/17] landlock: renames access mask
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [PATCH v2 0/3] conntrack: -A command implementation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools 1/3] conntrack: update manpage with new -A command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools 2/3] conntrack: use IPPROTO_RAW
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools 3/3] conntrack: slightly simplify parse_proto_num() by using strtoul()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 2/2] netfilter: nf_tables: replace BUG_ON by element length check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 1/2] netfilter: nf_tables: release element key when parser fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [linux-next:master] BUILD REGRESSION 088b9c375534d905a4d337c78db3b3bfbb52c4a0
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: release key_end if element deletion fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: validate variable length element extension
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: release key if get element fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: flowtable: prefer refcount_inc
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: xt_TPROXY: fix clang -Wformat warnings:
  • From: Justin Stitt <justinstitt@xxxxxxxxxx>
• Re: [PATCH nf v3] netfilter: conntrack: fix crash due to confirmed bit load reordering
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• [PATCH] Extends py/nftables.py
  • From: Peter Collinson <pc@xxxxxxxxxxxxxx>
• Re: [linux-next:master] BUILD REGRESSION 088b9c375534d905a4d337c78db3b3bfbb52c4a0
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• [PATCH nft] rule: crash when uncollapsing command with unexisting table or set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v3] netfilter: conntrack: fix crash due to confirmed bit load reordering
  • From: Thorsten Leemhuis <regressions@xxxxxxxxxxxxx>
• Re: [linux-next:master] BUILD REGRESSION 088b9c375534d905a4d337c78db3b3bfbb52c4a0
  • From: "Chen, Rong A" <rong.a.chen@xxxxxxxxx>
• Re: [PATCH nf v3] netfilter: conntrack: fix crash due to confirmed bit load reordering
  • From: Will Deacon <will@xxxxxxxxxx>
• Re: [linux-next:master] BUILD REGRESSION 088b9c375534d905a4d337c78db3b3bfbb52c4a0
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [linux-next:master] BUILD REGRESSION 088b9c375534d905a4d337c78db3b3bfbb52c4a0
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• [PATCH nft] scanner: allow prefix in ip6 scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• [PATCH AUTOSEL 4.14 3/8] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 3/8] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.4 3/9] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.10 03/11] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.15 07/18] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.18 08/22] netfilter: nf_tables: avoid skb access on nf_stolen
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.18 09/22] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH nf v3] netfilter: conntrack: fix crash due to confirmed bit load reordering
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Will Deacon <will@xxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• [PATCH nft] cache: release pending rules when chain binding lookup fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Kajetan Puchalski <kajetan.puchalski@xxxxxxx>
• [linux-next:master] BUILD REGRESSION 2a2aa3f05338270aecbe2492fda910d6c17e0102
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: replace BUG_ON by element length check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Kajetan Puchalski <kajetan.puchalski@xxxxxxx>
• Re: [PATCH v6 01/17] landlock: renames access mask
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_log: incorrect offset to network header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v6 01/17] landlock: renames access mask
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Will Deacon <will@xxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Will Deacon <will@xxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Will Deacon <will@xxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Kajetan Puchalski <kajetan.puchalski@xxxxxxx>
• Re: [PATCH] netfilter: ipvs: Use the bitmap API to allocate bitmaps
  • From: Julian Anastasov <ja@xxxxxx>
• [linux-next:master] BUILD REGRESSION b6f1f2fa2bddd69ff46a190b8120bd440fd50563
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH] netfilter: ipvs: Use the bitmap API to allocate bitmaps
  • From: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
• Re: [PATCH nftables] Allow resetting the include search path
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Kajetan Puchalski <kajetan.puchalski@xxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Kajetan Puchalski <kajetan.puchalski@xxxxxxx>
• Re: [PATCH v6 01/17] landlock: renames access mask
  • From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@xxxxxxxxxx>
• [BUG] ARP packet "parsing" broken in output hook of arp and netdev family table
  • From: Tom Yan <tom.ty89@xxxxxxxxx>
• Re: [PATCH net 1/2] netfilter: nf_tables: stricter validation of element data
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH resend] ebtables: extend the 'static' build target fix.
  • From: Justin Swartz <justin.swartz@xxxxxxxxxxxxxxxx>
• Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v1] netfilter: nf_tables: fix nft_set_elem_init heap buffer overflow
  • From: Hugues ANGUELKOV <hanguelkov@xxxxxxxxxxxxx>
• Re: [PATCH v1] netfilter: nf_tables: fix nft_set_elem_init heap buffer overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/2] netfilter: nf_tables: stricter validation of element data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/2] netfilter: nft_set_pipapo: release elements in clone from abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v1] netfilter: nf_tables: fix nft_set_elem_init heap buffer overflow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Intermittent performance regression related to ipset between 5.10 and 5.15
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Willy Tarreau <w@xxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Kajetan Puchalski <kajetan.puchalski@xxxxxxx>
• Re: [PATCH nf] netfilter: nft_set_pipapo: release elements in clone from abort path
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_set_pipapo: release elements in clone from abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nft_set_pipapo: release elements in clone from abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: stricter validation of element data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [linux-next:master] BUILD REGRESSION 6cc11d2a1759275b856e464265823d94aabd5eaf
  • From: Roman Gushchin <roman.gushchin@xxxxxxxxx>
• [linux-next:master] BUILD REGRESSION c4185b16aba73929aa76f0d030efbe79ae867808
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: Intermittent performance regression related to ipset between 5.10 and 5.15
  • From: "U'ren, Aaron" <Aaron.U'ren@xxxxxxxx>
• Re: [iptables PATCH] libxtables: Fix unsupported extension warning corner case
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_set_pipapo: release elements in clone from abort path
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v6 01/17] landlock: renames access mask
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• [vs] Netfilter vulnerability disclosure
  • From: Hugues ANGUELKOV <hanguelkov@xxxxxxxxxxxxx>
• Re: [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra #forregzbot
  • From: Thorsten Leemhuis <regressions@xxxxxxxxxxxxx>
• [Regression] stress-ng udp-flood causes kernel panic on Ampere Altra
  • From: Kajetan Puchalski <kajetan.puchalski@xxxxxxx>
• Re: [PATCH nftables] Allow resetting the include search path
  • From: Peter Tirsek <peter@xxxxxxxxxx>
• [linux-next:master] BUILD REGRESSION 6cc11d2a1759275b856e464265823d94aabd5eaf
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nftables] Allow resetting the include search path
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• Re: Intermittent performance regression related to ipset between 5.10 and 5.15
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [iptables PATCH] libxtables: Fix unsupported extension warning corner case
  • From: Phil Sutter <phil@xxxxxx>
• Re: Intermittent performance regression related to ipset between 5.10 and 5.15
  • From: "U'ren, Aaron" <Aaron.U'ren@xxxxxxxx>
• Re: [PATCH net 0/3] Netfilter fixes for net
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH] xt_sctp: support a couple of new chunk types
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• [PATCH 4/6] netfilter: ipset: Add bitmask support to hash:ipport
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 6/6] netfilter: ipset: Update the man page to include netmask/bitmask options
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 1/6] netfilter: ipset: include linux/nf_inet_addr.h
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 0/6] netfilter: ipset: Add support for new bitmask parameter
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 5/6] netfilter: ipset: Add bitmask support to hash:netnet
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 2/6] netfilter: ipset: Add support for new bitmask parameter
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH 3/6] netfilter: ipset: Add bitmask support to hash:ip
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] netfilter: ipset: Add support for new bitmask parameter
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] netfilter: ipset: ipset list may return wrong member count on bitmap types
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• [PATCH] netfilter: ipset: regression in ip_set_hash_ip.c
  • From: Vishwanath Pai <vpai@xxxxxxxxxx>
• Re: [PATCH] xt_sctp: support a couple of new chunk types
  • From: Xin Long <lucien.xin@xxxxxxxxx>
• [PATCH] xt_sctp: support a couple of new chunk types
  • From: Yuxuan Luo <luoyuxuan.carl@xxxxxxxxx>
• [PATCH] netfilter: in nf_nat_initialized(), use const struct nf_conn *
  • From: James Yonan <james@xxxxxxxxxxx>
• Re: [PATCH] src: proto: support DF, LE, VA for DSCP
  • From: Oleksandr Natalenko <oleksandr@xxxxxxxxxxxxxx>
• Re: [PATCH] src: proto: support DF, LE, VA for DSCP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] Allow resetting the include search path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/3] netfilter: nf_tables: avoid skb access on nf_stolen
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/3] netfilter: nft_dynset: restore set element counter when failing to update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/3] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 0/3] conntrack: -A command implementation
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v2 1/3] conntrack: generalize command parsing
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v2 2/3] conntrack: use C99 initializer syntax for opts map
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v2 3/3] conntrack: introduce new -A command
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH libmnl] nlmsg: Only print ECMA-48 colour sequences to terminals
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: report missing interval flag when using prefix/range in concatenation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH nftables] Allow resetting the include search path
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: Jason Gunthorpe <jgg@xxxxxxxx>
• Re: [PATCH] src: proto: support DF, LE, VA for DSCP
  • From: Oleksandr Natalenko <oleksandr@xxxxxxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH nftables] Allow resetting the include search path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] Allow resetting the include search path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: avoid skb access on nf_stolen
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_dynset: restore set element counter when failing to update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_set_pipapo: release elements in clone from abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries
  • From: Oz Shlomo <ozsh@xxxxxxxxxx>
• Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: Jason Gunthorpe <jgg@xxxxxxxx>
• Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries
  • From: Oz Shlomo <ozsh@xxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• [PATCH v37 19/33] LSM: security_secid_to_secctx in netlink netfilter
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v37 15/33] LSM: Ensure the correct LSM context releaser
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v37 16/33] LSM: Use lsmcontext in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v37 09/33] LSM: Use lsmblob in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v37 08/33] LSM: Use lsmblob in security_secctx_to_secid
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: Jason Gunthorpe <jgg@xxxxxxxx>
• [PATCH nftables] Allow resetting the include search path
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• RE: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: Dan Williams <dan.j.williams@xxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH] src: proto: support DF, LE, VA for DSCP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_esp: add support for ESP match in NAT Traversal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries
  • From: Oz Shlomo <ozsh@xxxxxxxxxx>
• [PATCH nf-next] flow_table: do not try to add already offloaded entries
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• [PATCH nft] segtree: fix map listing with interface wildcard
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/2] intervals: fix crash when trying to remove element in empty set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/3] parser_bison: fix error location for set elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/3] parser: fix scope closing with > 1 nested scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] evaluate: fix segfault when adding elements to invalid set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 0/3] conntrack: fixes for handling unknown protocols
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] evaluate: fix segfault when adding elements to invalid set
  • From: Peter Tirsek <peter@xxxxxxxxxx>
• [PATCH] ebtables: extend the 'static' build target fix.
  • From: Justin Swartz <justin.swartz@xxxxxxxxxxxxxxxx>
• [PATCH v2 1/3] conntrack: set reply l4 proto for unknown protocol
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v2 0/3] conntrack: fixes for handling unknown protocols
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v2 2/3] conntrack: fix protocol number parsing
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v2 3/3] conntrack: fix -o save dump for unknown protocols
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_esp: add support for ESP match in NAT Traversal
  • From: Wei Han <lailitty@xxxxxxxxxxx>
• [PATCH nft 3/3] scanner: don't pop active flex scanner scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] tests/py: Add a test for failing ipsec after counter
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/3] parser: fix scope closing with > 1 nested scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] parser: add missing synproxy scope closure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_esp: add support for ESP match in NAT Traversal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/6] conntrack: set reply l4 proto for unknown protocol
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 5/6] tests/conntrack: ct -o save for unknown protocols
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/6] tests/conntrack: invalid protocol values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 4/6] conntrack: fix protocol number parsing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/6] conntrack: fix -o save dump for unknown protocols
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH bpf-next v5 5/8] net: netfilter: Add kfuncs to set and change CT status
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 0/8] New nf_conntrack kfuncs for insertion, changing timeout, status
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 4/8] net: netfilter: Add kfuncs to set and change CT timeout
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 8/8] selftests/bpf: Add negative tests for new nf_conntrack kfuncs
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 7/8] selftests/bpf: Add tests for new nf_conntrack kfuncs
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 3/8] net: netfilter: Add kfuncs to allocate and insert CT
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 6/8] selftests/bpf: Add verifier tests for forced kfunc ref args
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 2/8] net: netfilter: Deduplicate code in bpf_{xdp,skb}_ct_lookup
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH nft 1/2] intervals: fix crash when trying to remove element in empty set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] intervals: check for EXPR_F_REMOVE in case of element mismatch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink_delinearize: memleak when parsing concatenation data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] tests/conntrack: ct -o save for unknown protocols
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 3/6] tests/conntrack: invalid protocol values
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 4/6] conntrack: fix protocol number parsing
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 2/6] conntrack: set reply l4 proto for unknown protocol
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 6/6] conntrack: fix -o save dump for unknown protocols
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 0/6] conntrack: fixes for handling unknown protocols
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 1/6] tests/conntrack: ct create for unknown protocols
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 00/18] fixes and improvements for -o/--optimize
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH v2] Revert "scanner: remove saddr/daddr from initial state"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] tests: shell: large set overlap and automerge
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] tests: shell: large set overlap and automerge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] tests: shell: large set overlap and automerge
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft,v2 1/2] rule: collapse set element commands
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2] Revert "scanner: remove saddr/daddr from initial state"
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] doc: Document limitations of ipsec expression with xfrm_interface
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 2/2] Revert "scanner: remove saddr/daddr from initial state"
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 2/2] Revert "scanner: remove saddr/daddr from initial state"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 2/2] Revert "scanner: remove saddr/daddr from initial state"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 0/2] Fix for failing 'counter ipsec ...' rule
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/2] Revert "scanner: remove saddr/daddr from initial state"
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/2] tests/py: Add a test for failing ipsec after counter
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next 3/6] netfilter: nf_tables: use the correct get/put helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/6] netfilter: nf_tables: add and use BE register load-store helpers
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 5/6] netfilter: nf_tables: use correct integer types
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 6/6] netfilter: nf_tables: move nft_cmp_fast_mask to where its used
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/6] netfilter: x_tables: use correct integer types
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/6] netfilter: sparse fixups
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/6] netfilter: nfnetlink: add missing __be16 cast
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: xt_esp: add support for ESP match in NAT Traversal
  • From: Wei Han <lailitty@xxxxxxxxxxx>
• Re: [PATCH] xtables-monitor: add missing spaces in printed str
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] nft: allow deletion of rule by full statement form
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: allow deletion of rule by full statement form
  • From: Chander Govindarajan <mail@xxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: Fix spelling mistake
  • From: Zhang Jiaming <jiaming@xxxxxxxxxxxx>
• [PATCH] xtables-monitor: add missing spaces in printed str
  • From: Anton Luka Šijanec <anton@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: avoid skb access on nf_stolen
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/3] conntrack: introduce new -A command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] conntrack: introduce new -A command
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH nf] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_dynset: restore set element counter when failing to update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v2 2/3] netfilter: nf_conntrack: use rcu accessors where needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 0/3] netfilter: conntrack sparse annotations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 1/3] netfilter: nf_conntrack: add missing __rcu annotations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 3/3] netfilter: h323: merge nat hook pointers into one
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/3] conntrack: introduce new -A command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] conntrack: introduce new -A command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/5] netfilter: use get_random_u32 instead of prandom
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH 3/3] tests/conntrack: -A command support
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 0/3] conntrack: -A command implementation
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 2/3] conntrack.8: man update for -A command support
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 1/3] conntrack: introduce new -A command
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH nf-next 3/3] netfilter: h323: merge nat hook pointers into one
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nf] netfilter: br_netfilter: do not skip all hooks with 0 priority
  • From: Florian Westphal <fw@xxxxxxxxx>
• large number of sparse warnings in nf_flow_table_offload
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: nf_conntrack: add missing __rcu annotations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: h323: merge nat hook pointers into one
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: conntrack sparse annotations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: nf_conntrack: use rcu accessors where needed
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 5/5] netfilter: nf_dup_netdev: add and use recursion counter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/5] selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/5] netfilter: nf_dup_netdev: do not push mac header a second time
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: use get_random_u32 instead of prandom
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] netfilter: fix two nf_dup bugs with egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v6 17/17] samples/landlock: adds network demo
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 16/17] seltests/landlock: adds invalid input data test
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 15/17] seltests/landlock: adds ruleset expanding test
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 11/17] seltests/landlock: adds tests for bind() hooks
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 12/17] seltests/landlock: adds tests for connect() hooks
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 14/17] seltests/landlock: adds rules overlapping test
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 08/17] landlock: adds support network rules
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 13/17] seltests/landlock: adds AF_UNSPEC family test
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 10/17] seltests/landlock: moves helper function
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 04/17] landlock: moves helper functions
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 07/17] landlock: user space API network support
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 03/17] landlock: refactors merge and inherit functions
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 06/17] landlock: refactors landlock_add_rule syscall
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 01/17] landlock: renames access mask
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 09/17] landlock: implements TCP network hooks
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 05/17] landlock: refactors helper functions
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH v6 00/17] Network support for Landlock
  • From: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx>
• [PATCH] src: proto: support DF, LE, VA for DSCP
  • From: Oleksandr Natalenko <oleksandr@xxxxxxxxxxxxxx>
• Re: [PATCH 12/12] netfilter: conntrack: use correct format characters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/1] conntrack: use same modifier socket for bulk ops
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_dup_netdev: add and use recursion counter
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: nf_dup_netdev: do not push mac header a second time
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/2] netfilter: fix two nf_dup bugs with egress hook
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Support for String Match Blocking in NFTables
  • From: Gmail Support <testingforadept@xxxxxxxxx>
• [PATCH nft,v2 1/2] rule: collapse set element commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 18/18] libnftables: release top level scope
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 07/18] optimize: add osf expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 10/18] optimize: add binop expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 15/18] optimize: only merge OP_IMPLICIT and OP_EQ relational
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 12/18] optimize: add hash expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 17/18] optimize: limit statement is not supported yet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 14/18] tests: shell: run -c -o on ruleset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 13/18] optimize: add unsupported statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 16/18] optimize: assume verdict is same when rules have no verdict
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 11/18] optimize: add numgen expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 05/18] optimize: fix reject statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 00/18] fixes and improvements for -o/--optimize
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 03/18] optimize: do not print stateful information
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 08/18] optimize: add xfrm expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 09/18] optimize: add fib expression support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 04/18] optimize: remove comment after merging
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 02/18] optimize: do not merge rules with set reference in rhs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 06/18] optimize: fix verdict map merging
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 01/18] optimize: do not compare relational expression rhs when collecting statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Intermittent performance regression related to ipset between 5.10 and 5.15
  • From: Thorsten Leemhuis <regressions@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4] src: eliminate packet copy when constructing struct pktbuff
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: Support for String Match Blocking in NFTables
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH] netfilter: add nf_log.h
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH] netfilter: add nf_log.h
  • From: Markus Mayer <mmayer@xxxxxxxxxxxx>
• Re: [PATCH] selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [nft PATCH] intervals: Do not sort cached set elements over and over again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] intervals: Do not sort cached set elements over and over again
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: large set overlap and automerge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] intervals: do not empty cache for maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] intervals: Do not sort cached set elements over and over again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] intervals: Do not sort cached set elements over and over again
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf] netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [syzbot] KASAN: slab-out-of-bounds Read in cttimeout_net_exit
  • From: syzbot <syzbot+92968395eedbdbd3617d@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2] build: fix clang+glibc snprintf substitution error
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] build: fix clang+glibc snprintf substitution error
  • From: Nicholas Vinson <nvinson234@xxxxxxxxx>
• Re: [PATCH] build: fix clang+glibc snprintf substitution error
  • From: Nicholas Vinson <nvinson234@xxxxxxxxx>
• [PATCH net-next v4 0/2] Conntrack offload debuggability improvements
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v4 1/2] net/sched: act_ct: set 'net' pointer when creating new nf_flow_table
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [PATCH net-next v4 2/2] netfilter: nf_flow_table: count pending offload workqueue tasks
  • From: Vlad Buslov <vladbu@xxxxxxxxxx>
• [iptables PATCH v2] nft: Exit if nftnl_alloc_expr fails
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Exit if nftnl_alloc_expr fails
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] build: fix clang+glibc snprintf substitution error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Exit if nftnl_alloc_expr fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] build: fix clang+glibc snprintf substitution error
  • From: Nicholas Vinson <nvinson234@xxxxxxxxx>
• [iptables PATCH] nft: Exit if nftnl_alloc_expr fails
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 08/12] cdrom: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• Re: [PATCH 07/12] driver/char: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH conntrack-tools 1/2] conntrack: pass command object to nfct_mnl_request()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools 2/2] conntrack: update CT_GET to use libmnl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH nft 2/2] intervals: do not report exact overlaps for new elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] rule: collapse set element commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: runtime set element automerge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] rule: collapse set element commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] intervals: do not report exact overlaps for new elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: allow deletion of rule by full statement form
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 08/12] cdrom: use correct format characters
  • From: Phillip Potter <phil@xxxxxxxxxxxxxxxx>
• Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• [iptables PATCH 0/2] Review xtables.h vs. xshared.h
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] libxtables: Define XT_OPTION_OFFSET_SCALE in xtables.h
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/2] libxtables: Move struct xtables_afinfo into xtables.h
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH nft] Revert "scanner: flags: move to own scope"
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• RE: [PATCH 00/12] Clang -Wformat warning fixes
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_conntrack_tcp: re-init for syn packets only
  • From: Jaco Kroon <jaco@xxxxxxxxx>
• RE: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• RE: [PATCH 00/12] Clang -Wformat warning fixes
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH 04/12] blk-cgroup: use correct format characters
  • From: Christoph Hellwig <hch@xxxxxxxxxxxxx>
• Re: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 07/12] driver/char: use correct format characters
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [PATCH 01/12] x86/mce: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• Re: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• Re: [PATCH 01/12] x86/mce: use correct format characters
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH v36 19/33] LSM: security_secid_to_secctx in netlink netfilter
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v36 16/33] LSM: Use lsmcontext in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v36 15/33] LSM: Ensure the correct LSM context releaser
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v36 09/33] LSM: Use lsmblob in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v36 08/33] LSM: Use lsmblob in security_secctx_to_secid
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• Re: [PATCH 00/12] Clang -Wformat warning fixes
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: conntrack: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 11/12] ALSA: control: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 10/12] ALSA: seq: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 09/12] ALSA: seq: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 08/12] cdrom: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 07/12] driver/char: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 06/12] PNP: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 05/12] fs: quota: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 04/12] blk-cgroup: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 03/12] x86/e820: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 02/12] x86/CPU/AMD: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 01/12] x86/mce: use correct format characters
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH 00/12] Clang -Wformat warning fixes
  • From: Bill Wendling <morbo@xxxxxxxxxx>
• [PATCH v2 1/1] conntrack: use same modifier socket for bulk ops
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v2 0/1] Reusing modifier socket for bulk ct loads
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [iptables PATCH 1/2] iptables-legacy: Drop redundant include of xtables-multi.h
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] xshared: Make some functions static
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH 1/9] Makefile: Add --enable-profiling configure option
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/9] tests: shell: Extend zero counters test a bit further
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/9] tests: shell: Extend iptables-xml test a bit
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 7/9] extensions: string: Do not print default --to value
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 6/9] ebtables-restore: Deny --init-table
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 9/9] extensions: string: Fix and enable tests
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/9] tests: shell: Add some more rules to 0002-verbose-output_0
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 8/9] extensions: string: Review parse_string() function
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 5/9] extensions: libebt_standard.t: Test logical-{in,out} as well
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/9] Improve testsuites' code coverage
  • From: Phil Sutter <phil@xxxxxx>
• Re: Add action to "finally" accept packets?
  • From: Nick <vincent@xxxxxxxxxxxx>
• Add action to "finally" accept packets?
  • From: Nick <vincent@xxxxxxxxxxxx>
• Re: Add action to "finally" accept packets?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH nf] netfilter: use get_random_u32 instead of prandom
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 7/7] netfilter: nf_tables: bail out early if hardware offload is not supported
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrackd: build: always add ports to sync message
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/7] netfilter: nat: really support inet nat without l3 address
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net 7/7] netfilter: nf_tables: bail out early if hardware offload is not supported
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: conntrack: Fix clang -Wformat warning in print_tuple()
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• [iptables PATCH v2] arptables: Support -x/--exact flag
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] arptables: Support -x/--exact flag
  • From: Phil Sutter <phil@xxxxxx>
• CFS for Netdev 0x16 open!
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [ANNOUNCE] nftables 1.0.4 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.2.2 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4.9.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH v4.9.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier
  • From: Ajay Kaher <akaher@xxxxxxxxxx>
• [PATCH v4.14.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier
  • From: Ajay Kaher <akaher@xxxxxxxxxx>
• [PATCH net 3/7] netfilter: nf_tables: delete flowtable hooks via transaction list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/7] netfilter: nf_tables: release new hooks on unsupported flowtable flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/7] netfilter: nat: really support inet nat without l3 address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 6/7] netfilter: nf_tables: memleak flow rule from commit path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/7] netfilter: nf_tables: always initialize flowtable hook list in transaction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/7] netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 7/7] netfilter: nf_tables: bail out early if hardware offload is not supported
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/7] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v3] netfilter: nf_tables: bail out early if hardware offload is not supported
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: xtables: Bring SPDX identifier back
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: netfilter: xtables: Bring SPDX identifier back
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: xtables: Bring SPDX identifier back
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: bail out early if hardware offload is not supported
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: netfilter: xtables: Bring SPDX identifier back
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• netfilter: xtables: Bring SPDX identifier back
  • From: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: memleak flow rule from commit path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5.4.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier
  • From: Greg KH <greg@xxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: release new hooks on unsupported flowtable flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v4.19.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier
  • From: Ajay Kaher <akaher@xxxxxxxxxx>
• [PATCH v5.4.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier
  • From: Ajay Kaher <akaher@xxxxxxxxxx>
• Re: Expired Cert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Expired Cert
  • From: Scott Wisniewski <scott@xxxxxxxxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [iptables PATCH] libxtables: Unexport init_extensions*() declarations
  • From: Nick <vincent@xxxxxxxxxxxx>
• Re: [iptables PATCH] libxtables: Unexport init_extensions*() declarations
  • From: Nick <vincent@xxxxxxxxxxxx>
• Re: [PATCH nf 2/3] netfilter: nf_tables: memleak in nft_expr_init() path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] libxtables: Unexport init_extensions*() declarations
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 1/1] conntrack: use same modifier socket for bulk ops
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 0/1] Reusing modifier socket for bulk ct loads
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: Alternative SCTP l4 tracker?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: bail out early if hardware offload is not supported
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] tests: shell: Check overhead in iptables-save and -restore
  • From: Phil Sutter <phil@xxxxxx>
• Alternative SCTP l4 tracker?
  • From: Sriram Yagnaraman <sriram.yagnaraman@xxxxxxxx>
• rebasing libnftnl git
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: remove leftover modules on cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 3/3] netfilter: nf_tables: always initialize flowtable hook list in transaction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/3,v3] netfilter: nf_tables: delete flowtable hooks via transaction list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/3] netfilter: nf_tables: memleak in nft_expr_init() path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: reset ctx->set after set interval evaluation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Revert "Simplify static build extension loading"
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] Revert "Simplify static build extension loading"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH nft] tests: shell: sets_with_ifnames release netns on exit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Revert "Simplify static build extension loading"
  • From: Nick <vincent@xxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: really support inet nat without l3 address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Revert "Simplify static build extension loading"
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] Revert "Simplify static build extension loading"
  • From: Nick Hainke <vincent@xxxxxxxxxxxx>
• Re: [nf PATCH] netfilter: nft_nat: Fix inet l4-only NAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf PATCH] netfilter: nft_nat: Fix inet l4-only NAT
  • From: Phil Sutter <phil@xxxxxx>
• [nf PATCH] netfilter: nft_nat: Fix inet l4-only NAT
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nat: really support inet nat without l3 address
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] optimize: segfault when releasing unsupported statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/5] netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net 3/5] netfilter: nf_tables: double hook unregistration in netns path
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net 3/5] netfilter: nf_tables: double hook unregistration in netns path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/5] netfilter: flowtable: fix nft_flow_route source address for nat case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/5] netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] netfilter: nf_tables: hold mutex on netns pre_exit path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 2/2] netfilter: flowtable: fix nft_flow_route use saddr for nat case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/2] netfilter: flowtable: fix nft_flow_route miss FLOWI_FLAG_ANYSRC flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] treewide: use uint* instead of u_int*
  • From: Nick <vincent@xxxxxxxxxxxx>
• [ANNOUNCE] nftables 1.0.3 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Intermittent performance regression related to ipset between 5.10 and 5.15
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [RFC] netfilter: nf_tables: ignore errors on flowtable device hw offload setup
  • From: Felix Fietkau <nbd@xxxxxxxx>
• [PATCH nft] intervals: fix compilation --with-mini-gmp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC] netfilter: nf_tables: ignore errors on flowtable device hw offload setup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: simplify chain lookup in do_list_chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/2,v2] netfilter: nf_tables: delete flowtable hooks via transaction list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 2/2] netfilter: nf_tables: double hook unregistration in netns path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 1/2] netfilter: nf_tables: hold mutex on netns pre_exit path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nf_tables: double hook unregistration in netns path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_tables: delete flowtable hooks via transaction list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Intermittent performance regression related to ipset between 5.10 and 5.15
  • From: Thorsten Leemhuis <regressions@xxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: nfnetlink: fix warn in nfnetlink_unbind
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net 3/4] netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/4] netfilter: conntrack: re-fetch conntrack after insertion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/4] netfilter: nf_tables: set element extended ACK reporting support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/4] netfilter: nfnetlink: fix warn in nfnetlink_unbind
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH net 1/2] netfilter: nf_tables: disallow non-stateful expression in sets earlier
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v4 bpf-next 04/14] bpf: Support storing rdonly PTR_TO_BTF_ID in BPF maps
  • From: Lorenzo Bianconi <lorenzo@xxxxxxxxxx>