Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH] netfilter: Remove flowtable relics
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH 28/31] net: netfilter: changing LED_* from enum led_brightness to actual value
  • From: Luiz Sampaio <sampaio.ime@xxxxxxxxx>
• Re: [PATCH net 1/5] netfilter: nf_conntrack_netbios_ns: fix helper module alias
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: pptp: use single option structure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 5/5] netfilter: conntrack: don't increment invalid counter on NF_REPEAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/5] netfilter: nf_tables: set last expression in register tracking area
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] netfilter: nf_tables: remove unused variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: nf_conntrack_netbios_ns: fix helper module alias
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/5] netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/4] netfilter: conntrack: remove extension register api
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/4] netfilter: conntrack: hande ->destroy hook via nat_ops instead
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/4] netfilter: conntrack: move extension sizes into core
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/4] netfilter: conntrack: make all extensions 8-byte alignned
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/4] netfilter: conntrack: remove extension register api
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: don't increment invalid counter on NF_REPEAT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] extensions: libxt_NFLOG: fix typo
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] extensions: libxt_NFLOG: fix typo
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [iptables PATCH] xshared: Fix response to unprivileged users
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] xshared: Fix response to unprivileged users
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 3/3] desc: add set description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/3] desc: add expression description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 2/3] desc: add datatype description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 0/3] add description infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: missing synproxy support in map declarations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrack: add --reliable option
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH bpf-next v8 10/10] selftests/bpf: Add test for race in btf_try_get_module
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH nf-next] nfqueue: enable to get skb->priority
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables v2 2/8] extensions: libxt_NFLOG: use nft built-in logging instead of xt_NFLOG
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf-next] nfqueue: enable to get skb->priority
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrack: fix compiler warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [syzbot] KASAN: use-after-free Read in nf_hook_entries_grow
  • From: syzbot <syzbot+e918523f77e62790d6d9@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrack: fix compiler warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] nft-shared: support native tcp port delinearize
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH v2 0/5] Store multiple payload dependencies
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH v2 5/5] tests: shell: remove redundant payload expressions
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH v2 3/5] src: store more than one payload dependency
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH v2 4/5] tests: py: remove redundant payload expressions
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH v2 0/5] Store multiple payload dependencies
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH v2 1/5] tests: py: fix inet/ip.t bridge payload
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH v2 2/5] src: add a helper that returns a payload dependency for a particular base
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [iptables PATCH] extensions: *NAT: Kill multiple IPv4 range support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] nft-shared: support native tcp port delinearize
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] nft-shared: support native tcp port delinearize
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY
  • From: Kevin Mitchell <kevmitch@xxxxxxxxxx>
• [PATCH 0/1] UDP traceroute packets with no checksum
  • From: Kevin Mitchell <kevmitch@xxxxxxxxxx>
• [PATCH bpf-next v8 10/10] selftests/bpf: Add test for race in btf_try_get_module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 08/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 07/10] selftests/bpf: Add test for unstable CT lookup API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 06/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 05/10] bpf: Add reference tracking support to kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 04/10] bpf: Introduce mem, size argument pair support for kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 03/10] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 02/10] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 01/10] bpf: Fix UAF due to race between btf_try_get_module and load_module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• [PATCH nf] netfilter: conntrack: don't increment invalid counter on NF_REPEAT
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 00/11] Share do_parse() between nft and legacy
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 00/11] Share do_parse() between nft and legacy
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [bug report] netfilter: nf_tables: add register tracking infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: set last expression in register tracking area
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [bug report] netfilter: nf_tables: add register tracking infrastructure
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• [PATCH nft 4/4] src: 'nft list chain' prints anonymous chains correctly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/4] cache: do not set error code twice
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/4] cache: add helper function to fill up the rule cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/4] src: do not use the nft_cache_filter object from mnl.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/4] fix list chain x y with anonymous chains
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH 00/10] Add pkg-config support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH bpf-next v7 09/10] selftests/bpf: Extend kfunc selftests
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 10/10] selftests/bpf: Add test for race in btf_try_get_module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 08/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 06/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 05/10] bpf: Add reference tracking support to kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 03/10] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 01/10] bpf: Fix UAF due to race between btf_try_get_module and load_module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 04/10] bpf: Introduce mem, size argument pair support for kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v7 00/10] Introduce unstable CT lookup helpers
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [iptables PATCH v2 07/11] xshared: Move do_parse to shared space
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 04/11] xtables: Pass xtables_args to check_empty_interface()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 06/11] xtables: Do not pass nft_handle to do_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 01/11] xtables: Drop xtables' family on demand feature
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 08/11] xshared: Store parsed wait and wait_interval in xtables_args
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 02/11] xtables: Pull table validity check out of do_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 00/11] Share do_parse() between nft and legacy
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 10/11] iptables: Use xtables' do_parse() function
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 09/11] nft: Move proto_parse and post_parse callbacks to xshared
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 03/11] xtables: Move struct nft_xt_cmd_parse to xshared.h
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 05/11] xtables: Pass xtables_args to check_inverse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 11/11] ip6tables: Use the shared do_parse, too
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks
  • From: Tom Rix <trix@xxxxxxxxxx>
• Re: [ulogd2 PATCH 00/10] Add pkg-config support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft] evaluate: attempt to set_eval flag if dynamic updates requested
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: attempt to set_eval flag if dynamic updates requested
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_conntrack_netbios_ns: fix helper module alias
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: fix compile warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 10/32] netfilter: flowtable: remove ipv4/ipv6 modules
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: typo NULL check in _clone() function
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net-next] netfilter: nft_connlimit: fix nft_connlimit_clone()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• [PATCH net-next] netfilter: nft_connlimit: fix nft_connlimit_clone()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables: fix compile warnings
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net-next] netfilter: nf_tables: fix compile warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH 00/10] Add pkg-config support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] netfilter: nf_tables: typo NULL check in _clone() function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 19/32] netfilter: nft_connlimit: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 19/32] netfilter: nft_connlimit: move stateful fields out of expression data
  • From: Julian Wiedmann <jwiedmann.dev@xxxxxxxxx>
• Re: nft -f fails to restore ruleset listing with cetain dynamic set types
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nft -f fails to restore ruleset listing with cetain dynamic set types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] extensions: *NAT: Kill multiple IPv4 range support
  • From: Phil Sutter <phil@xxxxxx>
• nft -f fails to restore ruleset listing with cetain dynamic set types
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next] netfilter: nf_tables: fix compile warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [syzbot] WARNING: suspicious RCU usage in __dev_queue_xmit
  • From: Florian Westphal <fw@xxxxxxxxx>
• [syzbot] WARNING: suspicious RCU usage in __dev_queue_xmit
  • From: syzbot <syzbot+e163f2ff7c3f7efd8203@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 01/32] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 23/32] netfilter: nft_limit: rename stateful structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 27/32] netfilter: nf_tables: add register tracking infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 24/32] netfilter: nft_limit: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 26/32] netfilter: nf_tables: add NFT_REG32_NUM
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 29/32] netfilter: nft_meta: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 32/32] netfilter: nft_meta: cancel register tracking after meta update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 30/32] netfilter: nft_bitwise: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 31/32] netfilter: nft_payload: cancel register tracking after payload update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 28/32] netfilter: nft_payload: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 25/32] netfilter: nf_tables: add rule blob layout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 22/32] netfilter: nft_numgen: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 20/32] netfilter: nft_last: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 21/32] netfilter: nft_quota: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 19/32] netfilter: nft_connlimit: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 17/32] net: prefer nf_ct_put instead of nf_conntrack_put
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 18/32] netfilter: egress: avoid a lockdep splat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 13/32] netfilter: conntrack: convert to refcount_t api
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 15/32] netfilter: make function op structures const
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 16/32] netfilter: conntrack: avoid useless indirection during conntrack destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 12/32] netfilter: conntrack: Use max() instead of doing it manually
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 14/32] netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 09/32] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 10/32] netfilter: flowtable: remove ipv4/ipv6 modules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 08/32] netfilter: conntrack: tag conntracks picked up in local out hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 07/32] netfilter: nf_tables: make counter support built-in
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 11/32] netfilter: nft_set_pipapo_avx2: remove redundant pointer lt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 03/32] netfilter: nf_tables: remove rcu read-size lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 06/32] netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdicts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 02/32] netfilter: nf_nat_masquerade: add netns refcount tracker to masq_dev_work
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 04/32] netfilter: nft_payload: WARN_ON_ONCE instead of BUG
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 05/32] netfilter: nf_tables: consolidate rule verdict trace call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 01/32] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 00/32] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: egress: avoid a lockdep splat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/5] netfilter: conntrack related cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: Use max() instead of doing it manually
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH] conntrackd: cthelper: ssdp: Fix parsing of IPv6 M-SEARCH requests.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/14] netfilter: nft_meta: cancel register tracking after meta update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/14] netfilter: nft_bitwise: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/14] netfilter: nf_tables: add register tracking infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/14] netfilter: nft_payload: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/14] netfilter: nft_payload: cancel register tracking after payload update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/14] netfilter: nf_tables: add rule blob layout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/14] netfilter: nft_meta: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/14] netfilter: nft_limit: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/14] netfilter: nft_limit: rename stateful structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/14] netfilter: nf_tables: add NFT_REG32_NUM
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/14] netfilter: nft_numgen: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/14] netfilter: nft_quota: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/14] netfilter: nft_last: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/14] netfilter: nft_connlimit: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 00/14] nf_tables datapath ruleset blob and register tracking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2
  • From: Florian Westphal <fw@xxxxxxxxx>
• [ulogd2 PATCH v2 10/10] build: if `--enable-sqlite3` is `yes`, abort if libsqlite3 is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH v2 09/10] build: if `--enable-pgsql` is `yes`, abort if libpq is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH v2 06/10] build: if `--enable-dbi` is `yes`, abort if libdbi is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH v2 07/10] build: if `--enable-mysql` is `yes`, abort if libmysqlclient is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH v2 08/10] build: if `--enable-pcap` is `yes`, abort if libpcap is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH v2 04/10] build: use pkg-config or pcap-config for libpcap
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH v2 05/10] build: use pkg-config or pg_config for libpq
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH v2 03/10] build: use pkg-config or mysql_config for libmysqlclient
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH v2 01/10] build: use `--enable-XXX` options for output plugins
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH v2 02/10] build: use pkg-config for libdbi
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 00/10] Add pkg-config support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_queue v3 5/5] src: struct pktbuff is no longer opaque
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 3/5] src: Use more meaningful name in callback.c
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 4/5] build: doc: Eliminate doxygen warnings
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 2/5] src: Avoid compiler warning
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 1/5] src: eliminate packet copy when constructing struct pkt_buff
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 0/5] Speed-up
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nf-next,v2 11/14] netfilter: nft_meta: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 13/14] netfilter: nft_payload: cancel register tracking after payload update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 12/14] netfilter: nft_bitwise: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 14/14] netfilter: nft_meta: cancel register tracking after meta update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 09/14] netfilter: nf_tables: add register tracking infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 10/14] netfilter: nft_payload: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 06/14] netfilter: nft_limit: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 08/14] netfilter: nf_tables: add NFT_REG32_NUM
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 07/14] netfilter: nf_tables: add rule blob layout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 04/14] netfilter: nft_numgen: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 05/14] netfilter: nft_limit: rename stateful structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 03/14] netfilter: nft_quota: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 02/14] netfilter: nft_last: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 01/14] netfilter: nft_connlimit: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 00/14] nf_tables datapath ruleset blob and register tracking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools PATCH] conntrackd: cthelper: ssdp: Fix parsing of IPv6 M-SEARCH requests.
  • From: Aaron Thompson <dev@xxxxxxxxxx>
• Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module
  • From: Andrii Nakryiko <andrii.nakryiko@xxxxxxxxx>
• [syzbot] KMSAN: uninit-value in nf_nat_setup_info (2)
  • From: syzbot <syzbot+cbcd154fce7c6d953d1c@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_conntrack_netbios_ns: fix helper module alias
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: egress: avoid a lockdep splat
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH nf-next 5/5] net: prefer nf_ct_put instead of nf_conntrack_put
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: conntrack: avoid useless indirection during conntrack destruction
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/5] netfilter: make function op structures const
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: conntrack: convert to refcount_t api
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/5] netfilter: conntrack related cleanups
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] netfilter: seqadj: check seq offset before update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/4] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/4] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/4] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/4] selftests: netfilter: switch to socat for tests using -q option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ulogd2 PATCH 10/10] build: if `--enable-sqlite3` is `yes` abort if libsqlite3 is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 09/10] build: if `--enable-pgsql` is `yes` abort if libpq is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 08/10] build: if `--enable-pcap` is `yes` abort if libpcap is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 07/10] build: if `--enable-mysql` is `yes` abort if MySQL is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 06/10] build: if `--enable-dbi` is `yes` abort if DBI is not found
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 05/10] build: use pkg-config for libpq if available
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 02/10] build: use pkg-config for libdbi
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 01/10] build: use `--enable-blah` flags for output plugins
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 04/10] build: use pkg-config or pcap-config for libpcap
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [ulogd2 PATCH 00/10] Add pkg-config support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module
  • From: Andrii Nakryiko <andrii.nakryiko@xxxxxxxxx>
• Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf] selftests/netfilter: switch to socat for tests using -q option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v6 02/11] bpf: Fix UAF due to race between btf_try_get_module and load_module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• BUG: unable to handle kernel NULL pointer dereference in iptable_nat_table_init
  • From: "Sabri N. Ferreiro" <snferreiro1@xxxxxxxxx>
• [PATCH nf] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nf] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v6 02/11] bpf: Fix UAF due to race between btf_try_get_module and load_module
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: nftables >= 0.9.8: atomic update (nft -f ...) of a set not possible any more
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: nftables >= 0.9.8: atomic update (nft -f ...) of a set not possible any more
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h
  • From: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
• [PATCH ulogd] GPRINT: fix it with NFLOG
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• INFO: task hung in xt_find_match
  • From: kvartet <xyru1999@xxxxxxxxx>
• INFO: task hung in do_ip6t_get_ctl
  • From: kvartet <xyru1999@xxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH ulogd2 2/2] output: JSON: remove bogus check for host and port
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ulogd2 1/2] output: JSON: fix possible truncation of socket path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables,v2 7/7] optimize: merge several selectors with different verdict into verdict map
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables,v2 6/7] optimize: merge same selector with different verdict into verdict map
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables,v2 4/7] src: add ruleset optimization infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables,v2 5/7] optimize: merge rules with same selectors into a concatenation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables,v2 3/7] src: remove '$' in symbol_expr_print
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables,v2 2/7] src: error reporting with -f and read from stdin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables,v2 1/7] erec: expose print_location() and line_location()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables,v2 0/7] ruleset optimization infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 10/11] selftests/bpf: Extend kfunc selftests
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 09/11] selftests/bpf: Add test_verifier support to fixup kfunc call insns
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 08/11] selftests/bpf: Add test for unstable CT lookup API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 07/11] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 06/11] bpf: Add reference tracking support to kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 05/11] bpf: Introduce mem, size argument pair support for kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 04/11] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 02/11] bpf: Fix UAF due to race between btf_try_get_module and load_module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 01/11] kernel: Implement try_module_get_live
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v6 00/11] Introduce unstable CT lookup helpers
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v5 1/9] kernel: Add kallsyms_on_each_symbol variant for single module
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• [PATCH] ipset: SCTP, UDPLITE support added to the bitmap:port type
  • From: Quan Tian <tianquan23@xxxxxxxxx>
• Re: [PATCH linux] netfilter: Remove unnecessary ret assignment
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH linux] netfilter: Remove unnecessary ret assignment
  • From: cgel.zte@xxxxxxxxx
• Re: [PATCH bpf-next v5 0/9] Introduce unstable CT lookup helpers
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 9/9] selftests/bpf: Extend kfunc selftests
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 8/9] selftests/bpf: Add test_verifier support to fixup kfunc call insns
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 7/9] selftests/bpf: Add test for unstable CT lookup API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 6/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 5/9] bpf: Add reference tracking support to kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 4/9] bpf: Introduce mem, size argument pair support for kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 3/9] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 1/9] kernel: Add kallsyms_on_each_symbol variant for single module
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v5 0/9] Introduce unstable CT lookup helpers
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h
  • From: Stefano Garzarella <sgarzare@xxxxxxxxxx>
• Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h
  • From: Florian Fainelli <f.fainelli@xxxxxxxxx>
• [PATCH bpf-next v2] net: don't include filter.h from net/sock.h
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH bpf-next] net: don't include filter.h from net/sock.h
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] selftests/netfilter: switch to socat for tests using -q option
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] selftests/netfilter: switch to socat for tests using -q option
  • From: Hangbin Liu <liuhangbin@xxxxxxxxx>
• [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks
  • From: trix@xxxxxxxxxx
• [PATCH] netfilter: conntrack: Use max() instead of doing it manually
  • From: Jiapeng Chong <jiapeng.chong@xxxxxxxxxxxxxxxxx>
• [iptables PATCH 00/11] Share do_parse() between nft and legacy
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 07/11] xshared: Move do_parse to shared space
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/11] iptables: Use xtables' do_parse() function
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 04/11] xtables: Pass xtables_args to check_empty_interface()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/11] nft: Move proto_parse and post_parse callbacks to xshared
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/11] xtables: Pull table validity check out of do_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/11] xtables: Move struct nft_xt_cmd_parse to xshared.h
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/11] xtables: Drop xtables' family on demand feature
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 05/11] xtables: Pass xtables_args to check_inverse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/11] ip6tables: Use the shared do_parse, too
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/11] xshared: Store parsed wait and wait_interval in xtables_args
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_set_pipapo_avx2: remove redundant pointer lt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 4/4] conntrack: pass sock to nfct_mnl_*() functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 2/4] conntrack: add netlink flags to nfct_mnl_nlmsghdr_put()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 3/4] conntrack: use libmnl to create entry
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 1/4] conntrack: add nfct_mnl_talk() and nfct_mnl_recv() helper functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 0/4] more updates to use libmnl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: seqadj: check seq offset before update
  • From: zhang kai <zhangkaiheb@xxxxxxx>
• Re: [PATCH netfilter] netfilter: xt_owner: use sk->sk_uid for owner lookup
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first
  • From: Vitaly Zuevsky <vzuevsky@xxxxxxx>
• [PATCH iptables] xshared: Implement xtables lock timeout using signals
  • From: Jethro Beekman <jethro@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH netfilter] netfilter: xt_owner: use sk->sk_uid for owner lookup
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH netfilter] netfilter: xt_owner: use sk->sk_uid for owner lookup
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
  • From: Xin Xiong <xiongx18@xxxxxxxxxxxx>
• Re: [PATCH nft 0/3] ruleset optimization infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v4 0/2] nat: force port remap to prevent shadowing well-known ports
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: remove ipv4/ipv6 modules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] nft-shared: set correc register value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] parser: allow quoted string in flowtable_expr_member
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 10/11] tests: py: remove redundant payload expressions
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 11/11] tests: shell: remove redundant payload expressions
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH] netfilter: nft_set_pipapo_avx2: remove redundant pointer lt
  • From: Colin Ian King <colin.i.king@xxxxxxxxx>
• [nft PATCH 07/11] src: simplify logic governing storing payload dependencies
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 09/11] src: store more than one payload dependency
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 06/11] src: reduce indentation
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 03/11] tests: py: fix inet/ip_tcp.t test
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 05/11] src: remove arithmetic on booleans
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 02/11] tests: py: fix inet/ip.t payloads
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 01/11] tests: py: fix inet/sets.t netdev payload
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 00/11] Store multiple payload dependencies
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 04/11] netlink_delinearize: fix typo
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nftables] parser: allow quoted string in flowtable_expr_member
  • From: Stijn Tintel <stijn@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: exthdr: add support for tcp option removal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [syzbot] KASAN: use-after-free Read in nf_hook_entries_grow
  • From: syzbot <syzbot+e918523f77e62790d6d9@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• netdevconf 0x16
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v4 03/10] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 04/10] bpf: Introduce mem, size argument pair support for kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v4 04/10] bpf: Introduce mem, size argument pair support for kfunc
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH bpf-next v4 03/10] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH iptables] nft-shared: set correc register value
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next,v2 5/5] netfilter: nf_tables: make counter support built-in
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first
  • From: Vitaly Zuevsky <vzuevsky@xxxxxxx>
• [PATCH nf-next,v3 5/5] netfilter: nf_tables: make counter support built-in
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next,v2 5/5] netfilter: nf_tables: make counter support built-in
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first
  • From: Vitaly Zuevsky <vzuevsky@xxxxxxx>
• Re: [PATCH bpf-next v4 00/10] Introduce unstable CT lookup helpers
  • From: Andrii Nakryiko <andrii.nakryiko@xxxxxxxxx>
• [PATCH nf-next] netfilter: flowtable: remove ipv4/ipv6 modules
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v4 nf-next 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [nft PATCH] build: remove scanner.c and parser_bison.c with `maintainer-clean`
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH 0/3] bison & flex autotools updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 5/5] netfilter: nf_tables: make counter support built-in
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 4/5] netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdicts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 2/5] netfilter: nft_payload: WARN_ON_ONCE instead of BUG
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 3/5] netfilter: nf_tables: consolidate rule verdict trace call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 1/5] netfilter: nf_tables: remove rcu read-size lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] src: propagate key datatype for anonymous sets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net 1/3] netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH v4 nf-next 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v4 1/2] netfilter: conntrack: tag conntracks picked up in local out hook
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v4 0/2] nat: force port remap to prevent shadowing well-known ports
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH bpf-next v4 00/10] Introduce unstable CT lookup helpers
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH net 2/3] netfilter: fix regression in looped (broad|multi)cast's MAC handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/3] netfilter: ctnetlink: remove expired entries first
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/3] netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH bpf-next v4 07/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v4 07/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] graphics/graphviz: Updated for version 2.50
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: graphviz.SlackBuild
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v2] build: doc: Update build_man.sh for doxygen 1.9.2
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH 1/1] graphics/graphviz: Updated for version 2.50
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: graphviz.SlackBuild
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH bpf-next v4 10/10] selftests/bpf: Extend kfunc selftests
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 09/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 08/10] selftests/bpf: Add test for unstable CT lookup API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 07/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 04/10] bpf: Introduce mem, size argument pair support for kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 03/10] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 02/10] bpf: Remove DEFINE_KFUNC_BTF_ID_SET
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 01/10] bpf: Refactor bpf_check_mod_kfunc_call
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v4 00/10] Introduce unstable CT lookup helpers
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH nf v3] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nft 2/2] Handle retriable errors from mnl functions
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Re: [PATCH nft] proto: revisit short-circuit loops over upper protocols
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools PATCH 0/3] bison & flex autotools updates
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools PATCH 2/3] build: remove MAINTAINERCLEANFILES
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools PATCH 3/3] build: replace `AM_PROG_LEX` with `AC_PROG_LEX`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools PATCH 1/3] build: only require bison and flex if the generated files do not exist
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH] build: remove scanner.c and parser_bison.c with `maintainer-clean`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nf v3] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf v3] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v2 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next v2 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [iptables PATCH v3 0/6] Some more code de-duplication
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v3 4/6] xtables_globals: Embed variant name in .program_version
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 6/6] iptables-*-restore: Drop pointless line reference
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 0/6] Some more code de-duplication
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 2/6] xshared: Share a common printhelp function
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 5/6] libxtables: Extend basic_exit_err()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 3/6] xshared: Share exit_tryhelp()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 1/6] xshared: Share print_match_save() between legacy ip*tables
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 4/6] xtables_globals: Introduce program_variant
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH libnetfilter_queue] build: doc: Update build_man.sh for doxygen 1.9.2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] build: doc: Update build_man.sh for doxygen 1.9.2
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH nft 0/3] ruleset optimization infrastructure
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 2/2] netfilter: nf_nat_masquerade: add netns refcount tracker to masq_dev_work
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 1/2] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/7] ipvs: remove unused variable for ip_vs_new_dest
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 7/7] netfilter: conntrack: Remove useless assignment statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 6/7] netfilter: bridge: add support for pppoe filtering
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 5/7] netfilter: nft_fwd_netdev: Support egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/7] netfilter: conntrack: Use memset_startat() to zero struct nf_conn
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/7] netfilter: ctnetlink: remove useless type conversion to bool
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/7] netfilter: nf_queue: remove leftover synchronize_rcu
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/7] ipvs: remove unused variable for ip_vs_new_dest
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/7] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: extend catchall tests for maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] proto: revisit short-circuit loops over upper protocols
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] build: doc: Update build_man.sh for doxygen 1.9.2
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] build: doc: Warn user if html docs will be missing diagrams
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] src: propagate key datatype for anonymous sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH linux-next] netfilter: Remove useless assignment statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: fix regression in looped (broad|multi)cast's MAC handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 1/2] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 1/2] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: nftables: fix use-after-free in nft_set_catchall_destroy()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 4/6] xtables_globals: Introduce program_variant
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] build: fix autoconf warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] tests: shell: remove stray debug flag.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/3] inet reject statement fix
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] optimize: merge rules with same selectors into a concatenation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] optimize: merge same selector with different verdict into verdict map
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] src: add ruleset optimization infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/3] ruleset optimization infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] build: fix autoconf warnings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH] tests: shell: remove stray debug flag.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH] build: fix autoconf warnings
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH] tests: shell: remove stray debug flag.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf-next v2 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 1/2] netfilter: conntrack: tag conntracks picked up in local out hook
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 0/2] nat: force port remap to prevent shadowing well-known ports
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] tests: shell: implicit chains simple coverage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH bpf-next v3 9/9] selftests/bpf: Add test for unstable CT lookup API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v3 9/9] selftests/bpf: Add test for unstable CT lookup API
  • From: Maxim Mikityanskiy <maximmi@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior
  • From: Eyal Birger <eyal.birger@xxxxxxxxx>
• [PATCH v31 18/28] LSM: security_secid_to_secctx in netlink netfilter
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v31 16/28] LSM: Use lsmcontext in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v31 15/28] LSM: Ensure the correct LSM context releaser
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v31 09/28] LSM: Use lsmblob in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v31 08/28] LSM: Use lsmblob in security_secctx_to_secid
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
• [iptables PATCH v2 5/6] libxtables: Extend basic_exit_err()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 0/6] Some more code de-duplication
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 2/6] xshared: Share a common printhelp function
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 4/6] xtables_globals: Introduce program_variant
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 1/6] xshared: Share print_match_save() between legacy ip*tables
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 3/6] xshared: Share exit_tryhelp()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 6/6] iptables-*-restore: Drop pointless line reference
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net-next 2/2] netfilter: nf_nat_masquerade: add netns refcount tracker to masq_dev_work
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH net-next 1/2] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH net] netfilter: nftables: fix use-after-free in nft_set_catchall_destroy()
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [libnftnl PATCH v2 1/7] src: add infrastructure to infer byteorder from keys
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 0/3] inet reject statement fix
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 3/3] evaluate: reject: support ethernet as L2 protcol for inet table
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 2/3] evaluate: correct typo's
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [nft PATCH 1/3] proto: short-circuit loops over upper protocols
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
• Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v3] netfilter: fix regression in looped (broad|multi)cast's MAC handling
  • From: Ignacy Gawędzki <ignacy.gawedzki@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH bpf-next v3 9/9] selftests/bpf: Add test for unstable CT lookup API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v3 8/9] selftests/bpf: Extend kfunc selftests
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v3 6/9] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v3 5/9] bpf: Add reference tracking support to kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v3 4/9] bpf: Introduce mem, size argument pair support for kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v3 3/9] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v3 2/9] bpf: Remove DEFINE_KFUNC_BTF_ID_SET
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v3 1/9] bpf: Refactor bpf_check_mod_kfunc_call
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v3 0/9] Introduce unstable CT lookup helpers
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH libnetfilter_conntrack] conntrack: don't cancel nest on unknown layer 4 protocols
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net/netfilter/x_tables.c: Use kvalloc to make your code better
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] net/netfilter/x_tables.c: Use kvalloc to make your code better
  • From: lizhe <sensor1010@xxxxxxx>
• [PATCH nf-next 11/11] netfilter: nft_bitwise: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 09/11] netfilter: nft_payload: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 10/11] netfilter: nft_meta: track register operations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 06/11] netfilter: nft_limit: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 05/11] netfilter: nft_limit: rename stateful structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 03/11] netfilter: nft_quota: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 08/11] netfilter: nf_tables: add register tracking infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 02/11] netfilter: nft_last: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 07/11] netfilter: nf_tables: add rule blob layout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 04/11] netfilter: nft_numgen: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 00/11] nf_tables datapath ruleset blob and register tracking
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 01/11] netfilter: nft_connlimit: move stateful fields out of expression data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: nf_tables: make counter support built-in
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdicts
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/5] netfilter: nf_tables: consolidate rule verdict trace call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: nft_payload: WARN_ON_ONCE instead of BUG
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: nf_tables: remove rcu read-size lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/5] nf_tables misc updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [GIT PULL] Networking for 5.16-rc5
  • From: pr-tracker-bot@xxxxxxxxxx
• [PATCH nft v2 2/2] Handle retriable errors from mnl functions
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• [PATCH nft v2 1/2] Use abort() in case of netlink_abi_error
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• [PATCH nft v2 0/2] Improve handling of errors from mnl* functions"
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first
  • From: Vitaly Zuevsky <vzuevsky@xxxxxxx>
• [GIT PULL] Networking for 5.16-rc5
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH bpf-next v2 9/9] selftests/bpf: Add test for unstable CT lookup API
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v2 8/9] selftests/bpf: Extend kfunc selftests
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v2 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v2 6/9] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v2 5/9] bpf: Add reference tracking support to kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v2 4/9] bpf: Introduce mem, size argument pair support for kfunc
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v2 3/9] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v2 2/9] bpf: Remove DEFINE_KFUNC_BTF_ID_SET
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v2 1/9] bpf: Refactor bpf_check_mod_kfunc_call
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• [PATCH bpf-next v2 0/9] Introduce unstable CT lookup helpers
  • From: Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first
  • From: Vitaly Zuevsky <vzuevsky@xxxxxxx>
• [PATCH nf] netfilter: ctnetlink: remove expired entries first
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Fwd: conntrack -L does not show the full table
  • From: Vitaly Zuevsky <vzuevsky@xxxxxxx>
• [PATCH nft 2/2] src: propagate key datatype for anonymous sets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/2] tcpopt: add phony mptcp suboption datatype
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 0/2 nft] mptcp: add mptcp subtype mnemonics
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Fwd: conntrack -L does not show the full table
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 3/6] libxtables: Add xtables_exit_tryhelp()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net 1/7] netfilter: nfnetlink_queue: silence bogus compiler warning
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [iptables PATCH 3/6] libxtables: Add xtables_exit_tryhelp()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/4] second batch of typeof fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH 2/6] xshared: Share a common printhelp function
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 6/6] iptables-*-restore: Drop pointless line reference
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/6] xshared: Share print_match_save() between legacy ip*tables
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/6] libxtables: Add xtables_exit_tryhelp()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 5/6] libxtables: Extend basic_exit_err()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/6] xtables_globals: Introduce program_variant
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/6] Some more code de-duplication
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net 6/7] selftests: netfilter: switch zone stress to socat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 7/7] netfilter: conntrack: annotate data-races around ct->timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/7] nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/7] netfilter: nft_exthdr: break evaluation if setting TCP option fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/7] vrf: don't run conntrack on vrf with !dflt qdisc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/7] selftests: netfilter: Add correctness test for mac,net set type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/7] netfilter: nfnetlink_queue: silence bogus compiler warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/7] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] Handle retriable errors from mnl functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] Handle retriable errors from mnl functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] Improve handling of errors from mnl* functions"
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• [PATCH nft 2/2] Handle retriable errors from mnl functions
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• [PATCH nft 1/2] Use abort() in case of netlink_abi_error
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• [PATCH nft] Improve handling of errors from mnl* functions"
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Fwd: conntrack -L does not show the full table
  • From: Vitaly Zuevsky <vzuevsky@xxxxxxx>
• Re: [PATCH nft] tests: shell: better parameters for the interval stack overflow test
  • From: Phil Sutter <phil@xxxxxx>
• Re: [syzbot] possible deadlock in blkdev_put (2)
  • From: syzbot <syzbot+643e4ce4b6ad1347d372@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH linux-next] netfilter: Remove useless assignment statements
  • From: cgel.zte@xxxxxxxxx
• [PATCH net-next] net: netfilter: fix code indentation
  • From: Jεan Sacren <sakiwit@xxxxxxxxx>
• [PATCH net-next] net: bridge: netfilter: fix code indentation
  • From: Jεan Sacren <sakiwit@xxxxxxxxx>
• Re: [PATCH nf] selftests: netfilter: switch zone stress to socat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: force port remap to prevent shadowing well-known ports
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: conntrack: annotate data-races around ct->timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] nft_set_pipapo: Fix AVX2 MAC address match, add test
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] vrf: don't run conntrack on vrf with !dflt qdisc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_queue] build: doc: Update build_man.sh for doxygen 1.9.2
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH net-next] net: Enable some sysctls for the userns root with privilege
  • From: Joanne Koong <joannekoong@xxxxxx>
• [PATCH net] netfilter: conntrack: annotate data-races around ct->timeout
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>