Linux TCP/IP Netfilter Devel
[Prev Page][Next Page]
- Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers
- From: Alexander Egorenkov <egorenar@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_tables_offload: incorrect flow offload action array size
- From: Nick Gregory <Nick.Gregory@xxxxxxxxxx>
- Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- Re: [syzbot] KMSAN: uninit-value in nf_nat_setup_info (2)
- From: syzbot <syzbot+cbcd154fce7c6d953d1c@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers
- From: Alexander Egorenkov <Alexander.Egorenkov@xxxxxxx>
- [PATCH nf] netfilter: nf_tables: fix memory leak during stateful obj update
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] netfilter: nft_limit: fix stateful object memory leak
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: unregister flowtable hooks on netns exit
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding
- From: kernel test robot <lkp@xxxxxxxxx>
- Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex
- From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
- Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex
- From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
- [PATCH nf] netfilter: nf_tables_offload: incorrect flow offload action array size
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding
- From: Christophe Leroy <christophe.leroy@xxxxxxxxxx>
- Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding
- From: Christophe Leroy <christophe.leroy@xxxxxxxxxx>
- Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- [PATCH nft,v1 1/1] intervals: add support to automerge with kernel elements
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft,v1 3/5] src: remove rbtree datastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft,v1 0/5] revisit overlap/automerge codebase
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft,v1 1/5] src: add EXPR_F_KERNEL to identify expression in the kernel
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft,v1 2/5] src: replace interval segment tree overlap and automerge
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft,v1 5/5] intervals: add support to automerge with kernel elements
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft,v1 4/5] mnl: update mnl_nft_setelem_del() to allow for more reuse
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] netlink: check key is EXPR_CONCAT before accessing field
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding
- From: Christophe Leroy <christophe.leroy@xxxxxxxxxx>
- Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex
- From: Paul Blakey <paulb@xxxxxxxxxx>
- Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v2 3/3] conntrack: use libmnl for flushing conntrack table
- From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
- [PATCH v2 2/3] conntrack: use libmnl for ct entries deletion
- From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
- [PATCH v2 1/3] conntrack: use libmnl for updating conntrack table
- From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
- [PATCH v2 0/3] conntrack: use libmnl for various operations
- From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
- Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: Gal Pressman <gal@xxxxxxxxxx>
- Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: conntrack: revisit gc autotuning
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: Florian Westphal <fw@xxxxxxxxx>
- [nf-next PATCH v3] netfilter: nf_tables: Reject tables of unsupported family
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: Gal Pressman <gal@xxxxxxxxxx>
- [nf-next PATCH v2] netfilter: nf_tables: Reject tables of unsupported family
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH v2] xshared: Implement xtables lock timeout using signals
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH AUTOSEL 5.10 06/23] netfilter: conntrack: don't refresh sctp entries in closed state
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 4.19 04/11] netfilter: conntrack: don't refresh sctp entries in closed state
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.4 05/17] netfilter: conntrack: don't refresh sctp entries in closed state
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.15 09/33] netfilter: conntrack: don't refresh sctp entries in closed state
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.16 09/34] netfilter: conntrack: don't refresh sctp entries in closed state
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH nft] segtree: memleak get element command
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [nf-next PATCH] netfilter: nf_tables: Reject tables of unsupported family
- From: Phil Sutter <phil@xxxxxx>
- [PATCH nft 2/2] examples: load ruleset from JSON
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 1/2] examples: add libnftables example program
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 0/2] add example folder
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [ANNOUNCE] libnetfilter_conntrack 1.0.9 release
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [iptables PATCH 2/4] tests: add `NOMATCH` test result
- From: Phil Sutter <phil@xxxxxx>
- [PATCH v2] xshared: Implement xtables lock timeout using signals
- From: Jethro Beekman <jethro@xxxxxxxxxxxx>
- Re: [iptables PATCH 0/4] Re-enable NFLOG tests
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH iptables] xshared: Implement xtables lock timeout using signals
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [syzbot] INFO: task hung in usb_get_descriptor
- From: syzbot <syzbot+31ae6d17d115e980fd14@xxxxxxxxxxxxxxxxxxxxxxxxx>
- [iptables PATCH 2/4] tests: add `NOMATCH` test result
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [iptables PATCH 3/4] tests: support explicit variant test result
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [iptables PATCH 4/4] tests: NFLOG: enable `--nflog-range` tests
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [iptables PATCH 0/4] Re-enable NFLOG tests
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [iptables PATCH 1/4] tests: iptables-test: rename variable
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH nf] netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE
- From: Toshiaki Makita <toshiaki.makita1@xxxxxxxxx>
- Re: [PATCH nf] netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [iptables PATCH 2/2] Improve error messages for unsupported extensions
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 0/2] Improve error messages for unsupported extensions
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 1/2] libxtables: Register only the highest revision extension
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH AUTOSEL 5.16 05/52] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Sasha Levin <sashal@xxxxxxxxxx>
- Re: [PATCH net 1/6] selftests: netfilter: add synproxy test
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- [PATCH net 6/6] selftests: netfilter: disable rp_filter on router
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 5/6] selftests: netfilter: synproxy test requires nf_conntrack
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 4/6] netfilter: nft_synproxy: unregister hooks on init error path
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 1/6] selftests: netfilter: add synproxy test
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 0/6] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 3/6] selftests: netfilter: fix exit value for nft_concat_range
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 2/6] netfilter: xt_socket: fix a typo in socket_mt_destroy()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCHv2 nf] selftests: netfilter: disable rp_filter on router
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: Eric Dumazet <edumazet@xxxxxxxxxx>
- Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- Re: [iptables PATCH v2] tests: iptables-test: Support variant deviation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- Re: [PATCH net-next 2/3] act_ct: Support GRE offload
- From: Paul Blakey <paulb@xxxxxxxxxx>
- Re: [PATCH net-next 3/3] net/mlx5: Support GRE conntrack offload
- From: Paul Blakey <paulb@xxxxxxxxxx>
- [PATCHv2 nf] selftests: netfilter: disable rp_filter on router
- From: Hangbin Liu <liuhangbin@xxxxxxxxx>
- Re: [PATCH nf] selftests: netfilter: disable rp_filter on router
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] selftests: netfilter: synproxy test requires nf_conntrack
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: nft_synproxy: unregister hooks on init error path
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] selftests: netfilter: disable rp_filter on router
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] selftests: netfilter: disable rp_filter on router
- From: Hangbin Liu <liuhangbin@xxxxxxxxx>
- Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- [PATCH nf] selftests: netfilter: disable rp_filter on router
- From: Hangbin Liu <liuhangbin@xxxxxxxxx>
- Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- Re: [PATCH nf-next 0/7] metfilter: remove pcpu dying list
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 7/7] netfilter: conntrack: remove the percpu dying list
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 6/7] netfilter: conntrack: include ecache dying list in dumps
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 5/7] netfilter: conntrack: split inner loop of list dumping to own function
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 4/7] netfilter: ecache: use dedicated list for event redelivery
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 3/7] netfilter: ecache: move to separate structure
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 2/7] netfilter: ctnetlink: make ecache event cb global again
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 1/7] nfnetlink: handle already-released nl socket
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 0/7] metfilter: remove pcpu dying list
- From: Florian Westphal <fw@xxxxxxxxx>
- [iptables PATCH v2] tests: iptables-test: Support variant deviation
- From: Phil Sutter <phil@xxxxxx>
- Re: [iptables PATCH] tests: iptables-test: Support variant deviation
- From: Phil Sutter <phil@xxxxxx>
- Re: [iptables PATCH] tests: iptables-test: Support variant deviation
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nft_ct: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 14/14] netfilter: ctnetlink: use dump structure instead of raw args
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 11/14] netfilter: cttimeout: use option structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 12/14] netfilter: nft_cmp: optimize comparison for 16-bytes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 13/14] nfqueue: enable to set skb->priority
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 09/14] netfilter: nft_compat: suppress comment match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 10/14] netfilter: ecache: don't use nf_conn spinlock
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 08/14] netfilter: exthdr: add support for tcp option removal
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 07/14] netfilter: conntrack: pptp: use single option structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 04/14] netfilter: conntrack: move extension sizes into core
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 05/14] netfilter: conntrack: handle ->destroy hook via nat_ops instead
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 06/14] netfilter: conntrack: remove extension register api
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 03/14] netfilter: conntrack: make all extensions 8-byte alignned
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 02/14] netfilter: nfqueue: enable to get skb->priority
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 00/14] Netfilter updates for net-next
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: ctnetlink: use dump structure instead of raw args
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] nfqueue: enable to set skb->priority
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: cttimeout: use option structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next v2] netfilter: ecache: don't use nf_conn spinlock
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: ctnetlink: use dump structure instead of raw args
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: ctnetlink: use dump structure instead of raw args
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net] netfilter: xt_socket: fix a typo in socket_mt_destroy()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] selftests: netfilter: add synproxy test
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] selftests: netfilter: fix exit value for nft_concat_range
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] selftests: netfilter: fix exit value for nft_concat_range
- From: Stefano Brivio <sbrivio@xxxxxxxxxx>
- Re: [PATCH net] netfilter: xt_socket: fix a typo in socket_mt_destroy()
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] selftests: netfilter: fix exit value for nft_concat_range
- From: Hangbin Liu <liuhangbin@xxxxxxxxx>
- [PATCH net] netfilter: xt_socket: fix a typo in socket_mt_destroy()
- From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
- [conntrack-tools PATCH] nfct: Support for non-lazy binding
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE
- From: Toshiaki Makita <toshiaki.makita1@xxxxxxxxx>
- [iptables PATCH] iptables.8: Describe the effect of multiple -v flags
- From: Phil Sutter <phil@xxxxxx>
- [PATCH nf-next] netfilter: cttimeout: use option structure
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [iptables PATCH 1/2] nft: Use verbose flag to toggle debug output
- From: Phil Sutter <phil@xxxxxx>
- [PATCH nf-next,v3] netfilter: nft_cmp: optimize comparison for 16-bytes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH 1/2] nft: Use verbose flag to toggle debug output
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH 1/4] nft: Set NFTNL_CHAIN_FAMILY in new chains
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [libnetfilter_conntrack PATCH 1/2] tests: Fix for missing qa-connlabel.conf in tarball
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 1/3] json: add flow statement json export + parser
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 0/3] flowtable json fixes
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH nft 1/3] json: add flow statement json export + parser
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nft 1/3] json: add flow statement json export + parser
- From: Phil Sutter <phil@xxxxxx>
- [libnetfilter_conntrack PATCH 2/2] tests: Add simple tests to TESTS variable
- From: Phil Sutter <phil@xxxxxx>
- [libnetfilter_conntrack PATCH 1/2] tests: Fix for missing qa-connlabel.conf in tarball
- From: Phil Sutter <phil@xxxxxx>
- Re: [Patch] document nft statements undefine/redefine
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [libnetfilter_conntrack PATCH] build: update obsolete autoconf macros
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft 1/3] json: add flow statement json export + parser
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 1/3] json: add flow statement json export + parser
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft 0/3] flowtable json fixes
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next,v2] netfilter: nft_cmp: optimize comparison for 16-bytes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 3/3] parser_json: permit empty device list
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nft 2/3] parser_json: fix flowtable device datatype
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nft 1/3] json: add flow statement json export + parser
- From: Florian Westphal <fw@xxxxxxxxx>
- [Patch] document nft statements undefine/redefine
- From: Pierre Ducroquet <pducroquet@xxxxxxxxxxxxxx>
- Re: [PATCH v4 net-next 0/7] net: use kfree_skb_reason() for ip/udp packet receive
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH] Document the undefine and redefine syntax
- From: Pierre Ducroquet <pducroquet@xxxxxxxxxxxxxx>
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- Re: [PATCH AUTOSEL 4.9 3/7] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Pavel Machek <pavel@xxxxxx>
- Re: [PATCH v4 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: David Ahern <dsahern@xxxxxxxxx>
- [libnetfilter_conntrack PATCH] build: update obsolete autoconf macros
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Time for a libnetfilter_conntrack release?
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [xtables-addons PATCH 0/2] 5.17 Kernel Support
- From: Jan Engelhardt <jengelh@xxxxxxx>
- [PATCH nf-next v2] netfilter: ecache: don't use nf_conn spinlock
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: ecache: don't use nf_conn spinlock
- From: kernel test robot <lkp@xxxxxxxxx>
- [PATCH v4 net-next 7/7] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v4 net-next 6/7] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v4 net-next 5/7] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v4 net-next 4/7] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v4 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: menglong8.dong@xxxxxxxxx
- [PATCH v4 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v4 net-next 2/7] net: netfilter: use kfree_drop_reason() for NF_DROP
- From: menglong8.dong@xxxxxxxxx
- [PATCH v4 net-next 0/7] net: use kfree_skb_reason() for ip/udp packet receive
- From: menglong8.dong@xxxxxxxxx
- Re: [PATCH nf-next] netfilter: nft_cmp: optimize comparison for up to 16-bytes
- From: kernel test robot <lkp@xxxxxxxxx>
- [iptables PATCH] tests: iptables-test: Support variant deviation
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH net 1/6] netfilter: conntrack: don't refresh sctp entries in closed state
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH nf-next] nfqueue: enable to set skb->priority
- From: kernel test robot <lkp@xxxxxxxxx>
- [iptables PATCH 3/4] nft: Add debug output to table creation
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 4/4] nft: cache: Dump rules if debugging
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 1/4] nft: Set NFTNL_CHAIN_FAMILY in new chains
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 2/4] ebtables: Support verbose mode
- From: Phil Sutter <phil@xxxxxx>
- [PATCH net 4/6] netfilter: conntrack: re-init state for retransmitted syn-ack
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 5/6] MAINTAINERS: netfilter: update git links
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 6/6] netfilter: ctnetlink: disable helper autoassign
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 3/6] netfilter: conntrack: move synack init code to helper
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 2/6] netfilter: nft_payload: don't allow th access for fragments
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nft_cmp: optimize comparison for up to 16-bytes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 1/6] netfilter: conntrack: don't refresh sctp entries in closed state
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 0/6] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v3 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- Re: [PATCH nf] selftests: netfilter: add synproxy test
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: nft_cmp: optimize comparison for up to 16-bytes
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [xtables-addons PATCH 2/2] build: bump supported kernel version to 5.17
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [xtables-addons PATCH 1/2] extensions: replace `PDE_DATA`
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [xtables-addons PATCH 0/2] 5.17 Kernel Support
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nf] selftests: netfilter: add synproxy test
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next] netfilter: ecache: don't use nf_conn spinlock
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next] netfilter: ctnetlink: use dump structure instead of raw args
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf-next] nfqueue: enable to set skb->priority
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority
- From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
- [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority
- From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
- [PATCH nf-next] nfqueue: enable to set skb->priority
- From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
- Re: [PATCH nf-next] netfilter: nft_compat: suppress comment match
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2 nf-next] netfilter: exthdr: add support for tcp option removal
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 0/4] netfilter: conntrack: remove extension register api
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] nfqueue: enable to get skb->priority
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] nfqueue: enable to get skb->priority
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: ctnetlink: disable helper autoassign
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf 1/2] netfilter: conntrack: move synack init code to helper
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nft_payload: don't allow th access for fragments
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: don't refresh sctp entries in closed state
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH AUTOSEL 5.16 05/52] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH AUTOSEL 5.16 05/52] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- [PATCH AUTOSEL 4.14 4/9] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 4.9 3/7] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.10 05/25] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 4.19 04/10] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.4 04/15] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.15 05/41] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Sasha Levin <sashal@xxxxxxxxxx>
- [PATCH AUTOSEL 5.16 05/52] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Sasha Levin <sashal@xxxxxxxxxx>
- Re: [PATCH 4.14.y 0/2] netfilter: nat: fix soft lockup when most ports are used
- From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
- Re: [PATCH] netfilter: nat: limit port clash resolution attempts
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 4.14.y 2/2] netfilter: nat: limit port clash resolution attempts
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 4.14.y 1/2] netfilter: nat: remove l4 protocol port rovers
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 4.14.y 0/2] netfilter: nat: fix soft lockup when most ports are used
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 4.9.y 2/2] netfilter: nat: limit port clash resolution attempts
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 4.9.y 1/2] netfilter: nat: remove l4 protocol port rovers
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 4.9.y 0/2] netfilter: nat fix soft lockup when most ports are used
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 3/3] net/mlx5: Support GRE conntrack offload
- From: Toshiaki Makita <toshiaki.makita1@xxxxxxxxx>
- [PATCH net-next 2/3] act_ct: Support GRE offload
- From: Toshiaki Makita <toshiaki.makita1@xxxxxxxxx>
- [PATCH net-next 1/3] netfilter: flowtable: Support GRE
- From: Toshiaki Makita <toshiaki.makita1@xxxxxxxxx>
- [PATCH net-next 0/3] Conntrack GRE offload
- From: Toshiaki Makita <toshiaki.makita1@xxxxxxxxx>
- Re: [PATCH] netfilter: nat: limit port clash resolution attempts
- From: Vimal Agrawal <avimalin@xxxxxxxxx>
- [PATCH] netfilter: nat: limit port clash resolution attempts
- From: Vimal Agrawal <avimalin@xxxxxxxxx>
- [PATCH v32 18/28] LSM: security_secid_to_secctx in netlink netfilter
- From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
- [PATCH v32 16/28] LSM: Use lsmcontext in security_secid_to_secctx
- From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
- [PATCH v32 15/28] LSM: Ensure the correct LSM context releaser
- From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
- [PATCH v32 09/28] LSM: Use lsmblob in security_secid_to_secctx
- From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
- [PATCH v32 08/28] LSM: Use lsmblob in security_secctx_to_secid
- From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
- Re: commit a504b703bb1da526a01593da0e4be2af9d9f5fa8 missing from 4.x LTS
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- commit a504b703bb1da526a01593da0e4be2af9d9f5fa8 missing from 4.x LTS
- From: Vimal Agrawal <avimalin@xxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: ctnetlink: disable helper autoassign
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Pham Thanh Tuyen <phamtyn@xxxxxxxxx>
- Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
- From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
- Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
- From: Jan Engelhardt <jengelh@xxxxxxx>
- [PATCH nf-next] netfilter: nft_compat: suppress comment match
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Pham Thanh Tuyen <phamtyn@xxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Pham Thanh Tuyen <phamtyn@xxxxxxxxx>
- Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
- From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
- Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
- From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
- Re: [PATCH v3 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH v3 net-next 7/7] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH v3 net-next 6/7] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH v3 net-next 5/7] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH v3 net-next 4/7] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Pham Thanh Tuyen <phamtyn@xxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Pham Thanh Tuyen <phamtyn@xxxxxxxxx>
- Re: PROBLEM: Injected conntrack lost helper
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
- From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
- Re: [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
- Re: [PATCH nf 1/2] netfilter: conntrack: move synack init code to helper
- From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
- [PATCH nf] MAINTAINERS: netfilter: update git links
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf 1/2] netfilter: conntrack: move synack init code to helper
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] netfilter: nft_payload: don't allow th access for fragments
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
- From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
- new iptables release?
- From: First Mate Rummey <fmrummey@xxxxxxxxx>
- Re: [PATCH iptables-nft 0/7] iptables: prefer native expressions for udp and tcp matches
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
- From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
- [iptables PATCH 1/2] nft: Use verbose flag to toggle debug output
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH 2/2] iptables-restore: Support for extra debug output
- From: Phil Sutter <phil@xxxxxx>
- [PATCH nf] netfilter: conntrack: don't refresh sctp entries in closed state
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH v2 nf-next] netfilter: exthdr: add support for tcp option removal
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nftables,v2] iface: handle EINTR case when creating the cache
- From: Eugene Crosser <crosser@xxxxxxxxxxx>
- Re: [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- [PATCH v3 net-next 7/7] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v3 net-next 6/7] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v3 net-next 5/7] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v3 net-next 4/7] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v3 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v3 net-next 2/7] net: netfilter: use kfree_drop_reason() for NF_DROP
- From: menglong8.dong@xxxxxxxxx
- [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons
- From: menglong8.dong@xxxxxxxxx
- [PATCH v3 net-next 0/7] net: use kfree_skb_reason() for ip/udp packet receive
- From: menglong8.dong@xxxxxxxxx
- Re: [PATCH net 1/8] netfilter: Remove flowtable relics
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- [PATCH net 8/8] netfilter: nf_tables: remove assignment with no effect in chain blob builder
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 5/8] netfilter: nft_reject_bridge: Fix for missing reply from prerouting
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 7/8] selftests: nft_concat_range: add test for reload with no element add/del
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 6/8] netfilter: nft_byteorder: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 3/8] selftests: netfilter: reduce zone stress test running time
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 4/8] selftests: netfilter: check stateless nat udp checksum fixup
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 2/8] netfilter: nft_ct: fix use after free when attaching zone template
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 0/8] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 1/8] netfilter: Remove flowtable relics
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nftables,v2] iface: handle EINTR case when creating the cache
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft v2 2/2] Handle retriable errors from mnl functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nft v2 2/2] Handle retriable errors from mnl functions
- From: Eugene Crosser <crosser@xxxxxxxxxxx>
- Re: [PATCH nft v2 2/2] Handle retriable errors from mnl functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nftables] iface: handle EINTR case when creating the cache
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH] xshared: Fix response to unprivileged users
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH] xshared: Fix response to unprivileged users
- From: Phil Sutter <phil@xxxxxx>
- Re: [iptables PATCH] xshared: Fix response to unprivileged users
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH] xshared: Fix response to unprivileged users
- From: Phil Sutter <phil@xxxxxx>
- [PATCH nf] netfilter: nf_tables: remove assignment with no effect in chain blob builder
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- Re: [PATCH v2 net-next 4/8] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [iptables PATCH] xshared: Fix response to unprivileged users
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2 net-next 2/8] net: skb_drop_reason: add document for drop reasons
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER
- From: David Ahern <dsahern@xxxxxxxxx>
- [PATCH v2 net-next 8/8] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v2 net-next 7/8] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v2 net-next 6/8] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v2 net-next 5/8] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v2 net-next 4/8] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: menglong8.dong@xxxxxxxxx
- [PATCH v2 net-next 3/8] net: netfilter: use kfree_drop_reason() for NF_DROP
- From: menglong8.dong@xxxxxxxxx
- [PATCH v2 net-next 2/8] net: skb_drop_reason: add document for drop reasons
- From: menglong8.dong@xxxxxxxxx
- [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER
- From: menglong8.dong@xxxxxxxxx
- [PATCH v2 net-next 0/8] net: use kfree_skb_reason() for ip/udp packet receive
- From: menglong8.dong@xxxxxxxxx
- Re: [nf PATCH] netfilter: nft_reject_bridge: Fix for missing reply from prerouting
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] selftests: netfilter: reduce zone stress test running time
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nft_ct: fix use after free when attaching zone template
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: Remove flowtable relics
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [conntrack-tools PATCH] Merge nfct tool into conntrackd
- From: Phil Sutter <phil@xxxxxx>
- [PATCH nftables 4/4] optimize: do not merge raw payload expressions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nftables 2/4] optimize: merge verdict maps with same lookup key
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nftables 3/4] optimize: check for payload base and offset when searching for mergers
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nftables 0/4] optimization updates
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nftables 1/4] optimize: add __expr_cmp()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH nf] selftests: nft_concat_range: add test for reload with no element add/del
- From: Stefano Brivio <sbrivio@xxxxxxxxxx>
- [PATCH nf] selftests: nft_concat_range: add test for reload with no element add/del
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core()
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- Re: [PATCH net-next 4/6] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu()
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core()
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- Re: [PATCH net-next 2/6] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: Menglong Dong <menglong8.dong@xxxxxxxxx>
- Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH net-next 4/6] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH net-next 2/6] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: David Ahern <dsahern@xxxxxxxxx>
- Re: [PATCH nft v2 1/2] Use abort() in case of netlink_abi_error
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 1/6] net: netfilter: use kfree_drop_reason() for NF_DROP
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: nft_byteorder: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 1/6] net: netfilter: use kfree_drop_reason() for NF_DROP
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- [nf PATCH] netfilter: nft_reject_bridge: Fix for missing reply from prerouting
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH bpf-next v6 01/11] kernel: Implement try_module_get_live
- From: Luis Chamberlain <mcgrof@xxxxxxxxxx>
- [PATCH iptables-nft 6/7] nft-shared: add tcp flag dissection
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH iptables-nft 0/7] iptables: prefer native expressions for udp and tcp matches
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH iptables-nft 7/7] nft: add support for native tcp flag matching
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH iptables-nft 4/7] nft: prefer native expressions instead of udp match
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH iptables-nft 3/7] nft-shared: support native udp port delinearize
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH iptables-nft 5/7] nft: prefer native expressions instead of tcp match
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH iptables-nft 1/7] nft-shared: support native tcp port delinearize
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH iptables-nft 2/7] nft-shared: support native tcp port range delinearize
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] selftests: netfilter: check stateless nat udp checksum fixup
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next 6/6] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb()
- From: menglong8.dong@xxxxxxxxx
- [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb()
- From: menglong8.dong@xxxxxxxxx
- [PATCH net-next 4/6] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu()
- From: menglong8.dong@xxxxxxxxx
- [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core()
- From: menglong8.dong@xxxxxxxxx
- [PATCH net-next 2/6] net: ipv4: use kfree_skb_reason() in ip_rcv_core()
- From: menglong8.dong@xxxxxxxxx
- [PATCH net-next 1/6] net: netfilter: use kfree_drop_reason() for NF_DROP
- From: menglong8.dong@xxxxxxxxx
- [PATCH net-next 0/6] net: use kfree_skb_reason() for ip/udp packet receive
- From: menglong8.dong@xxxxxxxxx
- [ANNOUNCE] Settlement with Patrick McHardy
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] net: fix duplicate logs of iptables TRACE target
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] net: fix duplicate logs of iptables TRACE target
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH] net: fix duplicate logs of iptables TRACE target
- From: kai zhang <zhangkaiheb@xxxxxxx>
- [PATCH] net: fix duplicate logs of iptables TRACE target
- From: kai zhang <zhangkaiheb@xxxxxxx>
- [PATCH nf] selftests: netfilter: reduce zone stress test running time
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] netfilter: nft_ct: fix use after free when attaching zone template
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH] netfilter: Remove flowtable relics
- From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- [PATCH 28/31] net: netfilter: changing LED_* from enum led_brightness to actual value
- From: Luiz Sampaio <sampaio.ime@xxxxxxxxx>
- Re: [PATCH net 1/5] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- [PATCH nf-next] netfilter: conntrack: pptp: use single option structure
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net 5/5] netfilter: conntrack: don't increment invalid counter on NF_REPEAT
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 3/5] netfilter: nf_tables: set last expression in register tracking area
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 2/5] netfilter: nf_tables: remove unused variable
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 1/5] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 4/5] netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 0/5] Netfilter fixes for net
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next 4/4] netfilter: conntrack: remove extension register api
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 3/4] netfilter: conntrack: hande ->destroy hook via nat_ops instead
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 2/4] netfilter: conntrack: move extension sizes into core
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 1/4] netfilter: conntrack: make all extensions 8-byte alignned
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 0/4] netfilter: conntrack: remove extension register api
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nf] netfilter: conntrack: don't increment invalid counter on NF_REPEAT
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH] extensions: libxt_NFLOG: fix typo
- From: Florian Westphal <fw@xxxxxxxxx>
- [iptables PATCH] extensions: libxt_NFLOG: fix typo
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [iptables PATCH] xshared: Fix response to unprivileged users
- From: Florian Westphal <fw@xxxxxxxxx>
- [iptables PATCH] xshared: Fix response to unprivileged users
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 3/3] desc: add set description
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 1/3] desc: add expression description
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 2/3] desc: add datatype description
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH libnftnl 0/3] add description infrastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] parser_bison: missing synproxy support in map declarations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH conntrack-tools] conntrack: add --reliable option
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH bpf-next v8 10/10] selftests/bpf: Add test for race in btf_try_get_module
- From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
- Re: [PATCH nf-next] nfqueue: enable to get skb->priority
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH iptables v2 2/8] extensions: libxt_NFLOG: use nft built-in logging instead of xt_NFLOG
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH nf-next] nfqueue: enable to get skb->priority
- From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
- Re: [PATCH conntrack-tools] conntrack: fix compiler warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [syzbot] KASAN: use-after-free Read in nf_hook_entries_grow
- From: syzbot <syzbot+e918523f77e62790d6d9@xxxxxxxxxxxxxxxxxxxxxxxxx>
- [PATCH conntrack-tools] conntrack: fix compiler warnings
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nft] nft-shared: support native tcp port delinearize
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [nft PATCH v2 0/5] Store multiple payload dependencies
- From: Florian Westphal <fw@xxxxxxxxx>
- [nft PATCH v2 5/5] tests: shell: remove redundant payload expressions
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [nft PATCH v2 3/5] src: store more than one payload dependency
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [nft PATCH v2 4/5] tests: py: remove redundant payload expressions
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [nft PATCH v2 0/5] Store multiple payload dependencies
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [nft PATCH v2 1/5] tests: py: fix inet/ip.t bridge payload
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [nft PATCH v2 2/5] src: add a helper that returns a payload dependency for a particular base
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [iptables PATCH] extensions: *NAT: Kill multiple IPv4 range support
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH nft] nft-shared: support native tcp port delinearize
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] nft-shared: support native tcp port delinearize
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
- From: Kevin Mitchell <kevmitch@xxxxxxxxxx>
- [PATCH 0/1] UDP traceroute packets with no checksum
- From: Kevin Mitchell <kevmitch@xxxxxxxxxx>
- [PATCH bpf-next v8 10/10] selftests/bpf: Add test for race in btf_try_get_module
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 08/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 07/10] selftests/bpf: Add test for unstable CT lookup API
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 06/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 05/10] bpf: Add reference tracking support to kfunc
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 04/10] bpf: Introduce mem, size argument pair support for kfunc
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 03/10] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 02/10] bpf: Populate kfunc BTF ID sets in struct btf
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 01/10] bpf: Fix UAF due to race between btf_try_get_module and load_module
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
- From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
- Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- Re: [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- Re: [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API
- From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
- Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
- From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
- [PATCH nf] netfilter: conntrack: don't increment invalid counter on NF_REPEAT
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf] netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH v2 00/11] Share do_parse() between nft and legacy
- From: Phil Sutter <phil@xxxxxx>
- Re: [iptables PATCH v2 00/11] Share do_parse() between nft and legacy
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [bug report] netfilter: nf_tables: add register tracking infrastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf] netfilter: nf_tables: set last expression in register tracking area
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [bug report] netfilter: nf_tables: add register tracking infrastructure
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- [PATCH nft 4/4] src: 'nft list chain' prints anonymous chains correctly
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 2/4] cache: do not set error code twice
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 3/4] cache: add helper function to fill up the rule cache
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 1/4] src: do not use the nft_cache_filter object from mnl.c
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft 0/4] fix list chain x y with anonymous chains
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ulogd2 PATCH 00/10] Add pkg-config support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH bpf-next v7 09/10] selftests/bpf: Extend kfunc selftests
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 10/10] selftests/bpf: Add test for race in btf_try_get_module
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 08/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 06/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 05/10] bpf: Add reference tracking support to kfunc
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 03/10] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 01/10] bpf: Fix UAF due to race between btf_try_get_module and load_module
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 04/10] bpf: Introduce mem, size argument pair support for kfunc
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH bpf-next v7 00/10] Introduce unstable CT lookup helpers
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [iptables PATCH v2 07/11] xshared: Move do_parse to shared space
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 04/11] xtables: Pass xtables_args to check_empty_interface()
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 06/11] xtables: Do not pass nft_handle to do_parse()
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 01/11] xtables: Drop xtables' family on demand feature
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 08/11] xshared: Store parsed wait and wait_interval in xtables_args
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 02/11] xtables: Pull table validity check out of do_parse()
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 00/11] Share do_parse() between nft and legacy
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 10/11] iptables: Use xtables' do_parse() function
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 09/11] nft: Move proto_parse and post_parse callbacks to xshared
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 03/11] xtables: Move struct nft_xt_cmd_parse to xshared.h
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 05/11] xtables: Pass xtables_args to check_inverse()
- From: Phil Sutter <phil@xxxxxx>
- [iptables PATCH v2 11/11] ip6tables: Use the shared do_parse, too
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks
- From: Tom Rix <trix@xxxxxxxxxx>
- Re: [ulogd2 PATCH 00/10] Add pkg-config support
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [PATCH nft] evaluate: attempt to set_eval flag if dynamic updates requested
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nft] evaluate: attempt to set_eval flag if dynamic updates requested
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse()
- From: Phil Sutter <phil@xxxxxx>
- Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next] netfilter: nf_tables: fix compile warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 10/32] netfilter: flowtable: remove ipv4/ipv6 modules
- From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
- Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [PATCH net-next] netfilter: nf_tables: typo NULL check in _clone() function
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [PATCH net-next] netfilter: nft_connlimit: fix nft_connlimit_clone()
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- [PATCH net-next] netfilter: nft_connlimit: fix nft_connlimit_clone()
- From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
- Re: [PATCH net-next] netfilter: nf_tables: fix compile warnings
- From: Jakub Kicinski <kuba@xxxxxxxxxx>
- [PATCH net-next] netfilter: nf_tables: fix compile warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse()
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ulogd2 PATCH 00/10] Add pkg-config support
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next] netfilter: nf_tables: typo NULL check in _clone() function
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 19/32] netfilter: nft_connlimit: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH net-next 19/32] netfilter: nft_connlimit: move stateful fields out of expression data
- From: Julian Wiedmann <jwiedmann.dev@xxxxxxxxx>
- Re: nft -f fails to restore ruleset listing with cetain dynamic set types
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: nft -f fails to restore ruleset listing with cetain dynamic set types
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [iptables PATCH] extensions: *NAT: Kill multiple IPv4 range support
- From: Phil Sutter <phil@xxxxxx>
- nft -f fails to restore ruleset listing with cetain dynamic set types
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH net-next] netfilter: nf_tables: fix compile warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [syzbot] WARNING: suspicious RCU usage in __dev_queue_xmit
- From: Florian Westphal <fw@xxxxxxxxx>
- [syzbot] WARNING: suspicious RCU usage in __dev_queue_xmit
- From: syzbot <syzbot+e163f2ff7c3f7efd8203@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Re: [PATCH net-next 01/32] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 23/32] netfilter: nft_limit: rename stateful structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 27/32] netfilter: nf_tables: add register tracking infrastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 24/32] netfilter: nft_limit: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 26/32] netfilter: nf_tables: add NFT_REG32_NUM
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 29/32] netfilter: nft_meta: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 32/32] netfilter: nft_meta: cancel register tracking after meta update
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 30/32] netfilter: nft_bitwise: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 31/32] netfilter: nft_payload: cancel register tracking after payload update
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 28/32] netfilter: nft_payload: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 25/32] netfilter: nf_tables: add rule blob layout
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 22/32] netfilter: nft_numgen: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 20/32] netfilter: nft_last: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 21/32] netfilter: nft_quota: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 19/32] netfilter: nft_connlimit: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 17/32] net: prefer nf_ct_put instead of nf_conntrack_put
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 18/32] netfilter: egress: avoid a lockdep splat
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 13/32] netfilter: conntrack: convert to refcount_t api
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 15/32] netfilter: make function op structures const
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 16/32] netfilter: conntrack: avoid useless indirection during conntrack destruction
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 12/32] netfilter: conntrack: Use max() instead of doing it manually
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 14/32] netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 09/32] netfilter: nat: force port remap to prevent shadowing well-known ports
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 10/32] netfilter: flowtable: remove ipv4/ipv6 modules
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 08/32] netfilter: conntrack: tag conntracks picked up in local out hook
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 07/32] netfilter: nf_tables: make counter support built-in
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 11/32] netfilter: nft_set_pipapo_avx2: remove redundant pointer lt
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 03/32] netfilter: nf_tables: remove rcu read-size lock
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 06/32] netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdicts
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 02/32] netfilter: nf_nat_masquerade: add netns refcount tracker to masq_dev_work
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 04/32] netfilter: nft_payload: WARN_ON_ONCE instead of BUG
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 05/32] netfilter: nf_tables: consolidate rule verdict trace call
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 01/32] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net-next 00/32] Netfilter updates for net-next
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next] netfilter: egress: avoid a lockdep splat
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH nf-next 0/5] netfilter: conntrack related cleanups
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH] netfilter: conntrack: Use max() instead of doing it manually
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [conntrack-tools PATCH] conntrackd: cthelper: ssdp: Fix parsing of IPv6 M-SEARCH requests.
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 14/14] netfilter: nft_meta: cancel register tracking after meta update
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 12/14] netfilter: nft_bitwise: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 09/14] netfilter: nf_tables: add register tracking infrastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 10/14] netfilter: nft_payload: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 13/14] netfilter: nft_payload: cancel register tracking after payload update
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 07/14] netfilter: nf_tables: add rule blob layout
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 11/14] netfilter: nft_meta: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 06/14] netfilter: nft_limit: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 05/14] netfilter: nft_limit: rename stateful structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 08/14] netfilter: nf_tables: add NFT_REG32_NUM
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 04/14] netfilter: nft_numgen: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 03/14] netfilter: nft_quota: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 02/14] netfilter: nft_last: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH 01/14] netfilter: nft_connlimit: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v3 00/14] nf_tables datapath ruleset blob and register tracking
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2
- From: Florian Westphal <fw@xxxxxxxxx>
- [ulogd2 PATCH v2 10/10] build: if `--enable-sqlite3` is `yes`, abort if libsqlite3 is not found
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH v2 09/10] build: if `--enable-pgsql` is `yes`, abort if libpq is not found
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH v2 06/10] build: if `--enable-dbi` is `yes`, abort if libdbi is not found
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH v2 07/10] build: if `--enable-mysql` is `yes`, abort if libmysqlclient is not found
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH v2 08/10] build: if `--enable-pcap` is `yes`, abort if libpcap is not found
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH v2 04/10] build: use pkg-config or pcap-config for libpcap
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH v2 05/10] build: use pkg-config or pg_config for libpq
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH v2 03/10] build: use pkg-config or mysql_config for libmysqlclient
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH v2 01/10] build: use `--enable-XXX` options for output plugins
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH v2 02/10] build: use pkg-config for libdbi
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [ulogd2 PATCH 00/10] Add pkg-config support
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [PATCH libnetfilter_queue v3 5/5] src: struct pktbuff is no longer opaque
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- [PATCH libnetfilter_queue v3 3/5] src: Use more meaningful name in callback.c
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- [PATCH libnetfilter_queue v3 4/5] build: doc: Eliminate doxygen warnings
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- [PATCH libnetfilter_queue v3 2/5] src: Avoid compiler warning
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- [PATCH libnetfilter_queue v3 1/5] src: eliminate packet copy when constructing struct pkt_buff
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- [PATCH libnetfilter_queue v3 0/5] Speed-up
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- [PATCH nf-next,v2 11/14] netfilter: nft_meta: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 13/14] netfilter: nft_payload: cancel register tracking after payload update
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 12/14] netfilter: nft_bitwise: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 14/14] netfilter: nft_meta: cancel register tracking after meta update
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 09/14] netfilter: nf_tables: add register tracking infrastructure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 10/14] netfilter: nft_payload: track register operations
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 06/14] netfilter: nft_limit: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 08/14] netfilter: nf_tables: add NFT_REG32_NUM
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 07/14] netfilter: nf_tables: add rule blob layout
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 04/14] netfilter: nft_numgen: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 05/14] netfilter: nft_limit: rename stateful structure
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 03/14] netfilter: nft_quota: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 02/14] netfilter: nft_last: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 01/14] netfilter: nft_connlimit: move stateful fields out of expression data
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH nf-next,v2 00/14] nf_tables datapath ruleset blob and register tracking
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql
- From: Jeremy Sowden <jeremy@xxxxxxxxxx>
- [conntrack-tools PATCH] conntrackd: cthelper: ssdp: Fix parsing of IPv6 M-SEARCH requests.
- From: Aaron Thompson <dev@xxxxxxxxxx>
- Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module
- From: Andrii Nakryiko <andrii.nakryiko@xxxxxxxxx>
- [syzbot] KMSAN: uninit-value in nf_nat_setup_info (2)
- From: syzbot <syzbot+cbcd154fce7c6d953d1c@xxxxxxxxxxxxxxxxxxxxxxxxx>
- [PATCH nf] netfilter: nf_conntrack_netbios_ns: fix helper module alias
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next] netfilter: egress: avoid a lockdep splat
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf
- From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
- [PATCH nf-next 5/5] net: prefer nf_ct_put instead of nf_conntrack_put
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 4/5] netfilter: conntrack: avoid useless indirection during conntrack destruction
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 3/5] netfilter: make function op structures const
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 2/5] netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 1/5] netfilter: conntrack: convert to refcount_t api
- From: Florian Westphal <fw@xxxxxxxxx>
- [PATCH nf-next 0/5] netfilter: conntrack related cleanups
- From: Florian Westphal <fw@xxxxxxxxx>
- Re: [PATCH net 1/4] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
- From: patchwork-bot+netdevbpf@xxxxxxxxxx
- Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql
- From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
- Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf
- From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
- Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql
- From: Jan Engelhardt <jengelh@xxxxxxx>
- Re: [PATCH] netfilter: seqadj: check seq offset before update
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 4/4] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
- [PATCH net 3/4] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
- From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite News]
[Samba]