Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [PATCH] net/netfilter/Kconfig: use 'default y' instead of 'm' for bool config option
  • From: Vegard Nossum <vegard.nossum@xxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: "Paul E. McKenney" <paulmck@xxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
• [PATCH AUTOSEL 5.14 20/40] netfilter: conntrack: serialize hash resizes and cleanups
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.14 18/40] netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.14 19/40] netfilter: nf_nat_masquerade: defer conntrack walk to work queue
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.14 17/40] netfilter: nf_tables: Fix oversized kvmalloc() calls
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.14 12/40] netfilter: ip6_tables: zero-initialize fragment offset
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.14 09/40] netfilter: ipset: Fix oversized kvmalloc() calls
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Linux 5.14 breaks wlan-ap traffic between wlan device
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [PATCH v1 net-next 1/1] net: Mark possible unused variables on stack with __maybe_unused
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf v2] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
  • From: Juhee Kang <claudiajkang@xxxxxxxxx>
• Re: [PATCH nf] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
  • From: Juhee Kang <claudiajkang@xxxxxxxxx>
• Re: [PATCH nf] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
  • From: Juhee Kang <claudiajkang@xxxxxxxxx>
• Re: [PATCH RFC 2/2] netfilter: nf_nat: don't allow source ports that shadow local port
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC 2/2] netfilter: nf_nat: don't allow source ports that shadow local port
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] parser: extend limit statement syntax.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH libnetfilter_log v2] build: doc: `make` generates requested documentation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log v2] build: doc: `make` generates requested documentation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [nft PATCH] rule: remove fake stateless output of named counters
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  • From: <kaskada@xxxxxxxx>
• Re: [PATCH net 1/4] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [nft PATCH] parser: extend limit statement syntax.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft] cache: unset NFT_CACHE_SETELEM with --terse listing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v4] net: ipvs: add sysctl_run_estimation to support disable estimation
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH net 4/4] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/4] netfilter: nf_tables: add position handle in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/4] netfilter: nf_tables: reverse order in rule replacement expansion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/4] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/4] Netfilter fixes for net (v2)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] tests: shell: fix bashism
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] tests: shell: fix bashism
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH iptables v2 8/8] tests: iptables-test: correct misspelt variable
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH iptables v2 3/8] extensions: libxt_NFLOG: don't truncate log prefix on print/save
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH iptables v2 4/8] extensions: libxt_NFLOG: disable `--nflog-range` Python test-cases
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH iptables v2 5/8] extensions: libxt_NFLOG: fix `--nflog-prefix` Python test-cases
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH iptables v2 2/8] extensions: libxt_NFLOG: use nft built-in logging instead of xt_NFLOG
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH iptables v2 6/8] extensions: libxt_NFLOG: remove extra space when saving targets with prefixes
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH iptables v2 1/8] nft: fix indentation error.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH iptables v2 7/8] build: replace `AM_PROG_LIBTOOL` and `AC_DISABLE_STATIC` with `LT_INIT`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• [PATCH v1 net-next 1/1] net: Mark possible unused variables on stack with __maybe_unused
  • From: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
• Re: [PATCH RFC 2/2] netfilter: nf_nat: don't allow source ports that shadow local port
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/3] extensions: libtxt_NFLOG: use nft built-in logging instead of xt_NFLOG
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [syzbot] WARNING in __nf_unregister_net_hook (4)
  • From: syzbot <syzbot+154bd5be532a63aa778b@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [iptables PATCH v2 07/17] libxtables: Introduce xtables_globals print_help callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 03/17] nft-shared: Introduce init_cs family ops callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 14/17] xtables: arptables accepts but ignores '-m'
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 01/17] nft: Introduce builtin_tables_lookup()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 13/17] xtables: arptables doesn't warn about empty interface
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 05/17] nft: Add family ops callbacks wrapping different nft_cmd_* functions
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 17/17] nft: Store maximum allowed chain name length in family ops
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 02/17] xshared: Store optstring in xtables_globals
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 12/17] nft: Merge xtables-arp-standalone.c into xtables-standalone.c
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 06/17] xtables-standalone: Drop version number from init errors
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 10/17] nft-shared: Make nft_check_xt_legacy() family agnostic
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 16/17] xtables: Support '!' betwen option and argument
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 11/17] xtables: Derive xtables_globals from family
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 09/17] nft-arp: Introduce post_parse callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 04/17] xtables: Simplify addr_mask freeing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 15/17] xtables: arptables ignores wrong -t values
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 00/17] Eliminate dedicated arptables-nft parser
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 08/17] arptables: Use standard data structures when parsing
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ebtables behaving weirdly on MIPS platform
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ebtables behaving weirdly on MIPS platform
  • From: Senthil Kumar Balasubramanian <senthilb@xxxxxxxxxxxxx>
• Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: ebtables behaving weirdly on MIPS platform
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: ebtables behaving weirdly on MIPS platform
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3] extensions: libtxt_NFLOG: use nft built-in logging instead of xt_NFLOG
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• ebtables behaving weirdly on MIPS platform
  • From: Senthil Kumar Balasubramanian <senthilb@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net 5/5] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/5] netfilter: nf_tables: reverse order in rule replacement expansion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/5] netfilter: nft_dynset: relax superfluous check on set updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_netportnet_create
  • From: syzbot <syzbot+60c1bad54e53f88e8c4f@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] cache: filter out sets and maps that are not requested
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] cache: finer grain cache population for list commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] cache: filter out tables that are not requested
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] cache: set on cache flags for nested notation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Fix typo in ipset-translate man page
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 2/2] evaluate: check for missing transport protocol match in nat map with concatenations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] evaluate: check for missing transport protocol match in nat map with concatenations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] evaluate: check for concatenation in set data datatype
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH][net-next] netfilter: ebtables: use array_size() helper in copy_{from,to}_user()
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• [PATCH nft] netlink: dynset: set compound expr dtype based on set key definition
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnetfilter_log v2] src: doc: revise doxygen for all other modules
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [syzbot] KASAN: use-after-free Read in nf_tables_fill_table_info
  • From: syzbot <syzbot+46f298a3b7ae01600a54@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] payload: don't adjust offsets of autogenerated dependency expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools v2] conntrack.8: minor copy edit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log 2/2] utils: nfulnl_test: Add rather extensive test of nflog_get_packet_hw()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log 1/2] utils: nfulnl_test: Agree with man pages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 0/1] build: doc: Allow to specify whether to produce man pages, html, neither or both
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v5 6/6] netfilter: nf_tables: add egress support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v5 4/6] netfilter: Introduce egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v5 5/6] af_packet: Introduce egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v5 3/6] netfilter: nf_tables: move netdev ingress filter chain to nf_tables_netdev.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v5 2/6] netfilter: Generalize ingress hook include file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v5 1/6] netfilter: Rename ingress hook include file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v5 0/6] Netfilter egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH libnetfilter_log v2] build: doc: `make` generates requested documentation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1/4] src: doc: revise doxygen for all other modules
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH conntrack-tools v2] conntrack.8: minor copy edit
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• [PATCH conntrack-tools] conntrack.8: minor copy edit
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• [iptables PATCH 07/12] libxtables: Introduce xtables_globals print_help callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/12] arptables: Use standard data structures when parsing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/12] nft-arp: Introduce post_parse callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/12] nft: Introduce builtin_tables_lookup()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/12] nft-shared: Make nft_check_xt_legacy() family agnostic
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/12] xtables: Derive xtables_globals from family
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 00/12] Eliminate dedicated arptables-nft parser
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 04/12] xtables: Simplify addr_mask freeing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 05/12] nft: Add family ops callbacks wrapping different nft_cmd_* functions
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 06/12] xtables-standalone: Drop version number from init errors
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 12/12] nft: Merge xtables-arp-standalone.c into xtables-standalone.c
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/12] nft-shared: Introduce init_cs family ops callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/12] xshared: Store optstring in xtables_globals
  • From: Phil Sutter <phil@xxxxxx>
• Re: [conntrack-tools 0/6] Build fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 4/4] nft: Delete builtin chains compatibly
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnetfilter_queue v3 4/4] src: doc: Document nflog_callback_register() and nflog_handle_packet()
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 3/4] src: doc: Add \return for nflog_get_packet_hw()
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 2/4] src: doc: Insert SYNOPSIS sections for man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 1/4] src: doc: revise doxygen for all other modules
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
  • From: "Philip Prindeville" <philipp@xxxxxxxxxxxxxxxxxxxxx>
• [PATCH 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
  • From: "Philip Prindeville" <philipp@xxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] monitor: honor NLM_F_EXCL netlink flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] xtables-translate: add missing argument and option to usage
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] evaluate: provide a hint on missing dynamic flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3] monitor: honor NLM_F_APPEND flag for rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] tests: monitor: update insert and replace commands
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3] monitor: display rule position handle
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_dynset: relax superfluous check on set updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools 6/6] build: fix dependency-tracking of yacc-generated header
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [conntrack-tools 6/6] build: fix dependency-tracking of yacc-generated header
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [conntrack-tools 5/6] build: clean yacc- and lex-generated files with maintainer-clean
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools 4/6] build: remove yacc-generated header from EXTRA_DIST
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools 6/6] build: fix dependency-tracking of yacc-generated header
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools 2/6] build: quote AC_INIT arguments
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools 3/6] build: replace `AM_PROG_LIBTOOL` and `AC_DISABLE_STATIC` with `LT_INIT`
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools 0/6] Build fixes
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [conntrack-tools 1/6] build: remove commented-out macros from configure.ac
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net 01/15] netfilter: ipset: Fix oversized kvmalloc() calls
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [syzbot] general protection fault in nf_tables_dump_tables
  • From: syzbot <syzbot+0e3358e5ebb1956c271d@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_tables: reverse order in rule replacement expansion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v3 1/2] netfilter: nf_tables: add position handle in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 14/15] netfilter: log: work around missing softdep backend module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 13/15] netfilter: iptable_raw: drop bogus net_init annotation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 15/15] netfilter: conntrack: serialize hash resizes and cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 10/15] netfilter: nf_tables: Fix oversized kvmalloc() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 12/15] netfilter: nf_nat_masquerade: defer conntrack walk to work queue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 11/15] netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 09/15] netfilter: nf_tables: unlink table before deleting it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 07/15] selftests: netfilter: add selftest for directional zone support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 08/15] selftests: netfilter: add zone stress test with colliding tuples
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 04/15] netfilter: conntrack: make max chain length random
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 05/15] netfilter: conntrack: include zone id in tuple hash again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 06/15] netfilter: nat: include zone id in nat table hash again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 03/15] netfilter: ip6_tables: zero-initialize fragment offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 01/15] netfilter: ipset: Fix oversized kvmalloc() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 02/15] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 00/15] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v29 18/28] LSM: security_secid_to_secctx in netlink netfilter
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v29 16/28] LSM: Use lsmcontext in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v29 15/28] LSM: Ensure the correct LSM context releaser
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v29 08/28] LSM: Use lsmblob in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v29 07/28] LSM: Use lsmblob in security_secctx_to_secid
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v4 1/1] build: doc: Allow to specify whether to produce man pages, html, neither or both
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v4 0/1] build: doc: Allow to specify whether to produce man pages, html, neither or both
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH RFC 2/2] netfilter: nf_nat: don't allow source ports that shadow local port
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] selftests: nft_nat: add udp hole punch test case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/1.5 RFC] netfilter: nat: source port shadowing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH 1/4] nft: cache: Avoid double free of unrecognized base-chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/4] nft: Check base-chain compatibility when adding to cache
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/4] nft: Fix and improve base chain handling
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/4] nft: Delete builtin chains compatibly
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/4] nft-chain: Introduce base_slot field
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables] xtables-translate: add missing argument and option to usage
  • From: "mizuta.takeshi@xxxxxxxxxxx" <mizuta.takeshi@xxxxxxxxxxx>
• [iptables PATCH] tests: iptables-test: Fix conditional colors on stderr
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH libnetfilter_log] src: doc: revise doxygen for all other modules
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 2/2] utils: nfulnl_test: Add rather extensive test of nflog_get_packet_hw()
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 1/2] utils: nfulnl_test: Agree with man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 0/2] utils: nfulnl_test: Test nflog_get_packet_hw
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: serialize hash resizes and cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: iptable_raw: drop bogus net_init annotation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] netfilter: nf_nat_masquerade: don't block rtnl lock
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: unlink table before deleting it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/5] netfilter: conntrack: make zone id part of conntrack hash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net v6 1/2] net: netfilter: Limit the number of ftp helper port attempts
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [PATCH nft,v2 2/2] monitor: honor NLM_F_APPEND flag for rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] monitor: honor NLM_F_APPEND flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] monitor: display rule position handle
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: add position handle in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net v6 2/2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [PATCH net v6 0/2] Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: add position handle in event notification
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log] src: make nflog_open_nfnl() static
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log] utils: nfulnl_test: Print meaningful error messages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] src: build: Stop build_man.sh from deleting short Detailed Descriptions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnetfilter_log v3] src: doc: revise doxygen for module "Netlink message helper functions"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] libnetfilter_queue: src/nlmsg.c: SECCTX can be of any length
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [syzbot] WARNING in __percpu_ref_exit (2)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: [PATCH net v5 2/2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net v5 1/2] net: netfilter: Limit the number of ftp helper port attempts
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net v5 1/2] net: netfilter: Limit the number of ftp helper port attempts
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH net v5 1/2] net: netfilter: Limit the number of ftp helper port attempts
  • From: kernel test robot <lkp@xxxxxxxxx>
• [RESEND PATCH net-next v4] extensions: masquerade: Add RFC-7597 section 5.1 PSID support
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [RESEND PATCH net-next v7 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [RESEND PATCH net-next v7 1/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [RESEND PATCH net-next v7 0/3] Add RFC-7597 Section 5.1 PSID support
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [RESEND PATCH net-next v7 3/3] selftests: netfilter: Add RFC-7597 Section 5.1 PSID selftests
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [PATCH net v5 1/2] net: netfilter: Limit the number of ftp helper port attempts
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [PATCH net v5 2/2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [PATCH net v5 0/2] Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: serialize hash resizes and cleanups
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: conntrack: serialize hash resizes and cleanups
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH ulogd] NFLOG: fix seq global flag setting
  • From: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
• [PATCH ulogd] XML: support nflog pkt output
  • From: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
• [RFC PATCH libnetfilter_log] src: support conntrack XML output
  • From: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
• Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  • From: <kaskada@xxxxxxxx>
• [PATCH nf] netfilter: log: work around missing softdep backend module
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: iptable_raw: drop bogus net_init annotation
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnetfilter_queue] src: build: Stop build_man.sh from deleting short Detailed Descriptions
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [syzbot] general protection fault in nf_tables_dump_rules
  • From: syzbot <syzbot+bd637e7821f7afda67c4@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log v2] src: doc: revise doxygen for all other modules
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net-next 09/10] netfilter: x_tables: never register tables by default
  • From: youling 257 <youling257@xxxxxxxxx>
• Re: [syzbot] WARNING in __percpu_ref_exit (2)
  • From: syzbot <syzbot+d6218cb2fae0b2411e9d@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [syzbot] WARNING in __percpu_ref_exit (2)
  • From: Pavel Begunkov <asml.silence@xxxxxxxxx>
• Re: [PATCH net-next 09/10] netfilter: x_tables: never register tables by default
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: list vmap counter errot
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink: reset temporary set element stmt list after list splice
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft,v2] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,v2] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft,v2] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: list vmap counter errot
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• list vmap counter errot
  • From: Martin Zatloukal <slezi2@xxxxxxxxxx>
• Re: [syzbot] WARNING in __percpu_ref_exit (2)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• [PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log] src: doc: revise doxygen for all other modules
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log v3] src: doc: revise doxygen for module "Netlink message helper functions"
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [iptables PATCH] ebtables: Avoid dropping policy when flushing
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next 09/10] netfilter: x_tables: never register tables by default
  • From: youling 257 <youling257@xxxxxxxxx>
• [iptables PATCH] ebtables: Avoid dropping policy when flushing
  • From: Phil Sutter <phil@xxxxxx>
• Re: Python bindings crash when more than one Nftables is instantiated
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_nat_masquerade: defer conntrack walk to work queue
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/2] netfilter: nf_nat_masquerade: don't block rtnl lock
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 09/10] netfilter: x_tables: never register tables by default
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 09/10] netfilter: x_tables: never register tables by default
  • From: youling 257 <youling257@xxxxxxxxx>
• Re: [PATCH net-next 09/10] netfilter: x_tables: never register tables by default
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 09/10] netfilter: x_tables: never register tables by default
  • From: youling257 <youling257@xxxxxxxxx>
• Re: [PATCH nf-next v4 4/5] netfilter: Introduce egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH net v3] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net v3] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• [PATCH nft] src: revert hashtable for expression handlers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Python bindings crash when more than one Nftables is instantiated
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [xtables-addons] xt_ipp2p: add ipv6 module alias
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• Re: [PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: ipset: Fix oversized kvmalloc() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: Fix oversized kvmalloc() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [xtables-addons 0/4] IPv6 support for xt_ipp2p
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_ipportip_create
  • From: syzbot <syzbot+30aea515bdd9616dd4e9@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH iptabes-nft] iptables-nft: allow removal of empty builtin chains
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptabes-nft] iptables-nft: allow removal of empty builtin chains
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  • From: Phil Sutter <phil@xxxxxx>
• Re: [xtables-addons 0/4] IPv6 support for xt_ipp2p
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: unlink table before deleting it
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [xtables-addons 1/4] xt_ipp2p: don't search haystack if it's empty
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [xtables-addons 0/4] IPv6 support for xt_ipp2p
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [xtables-addons 3/4] xt_ipp2p: move result printing code into separate functions
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [xtables-addons 4/4] xt_ipp2p: add ipv6 support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [xtables-addons 2/4] xt_ipp2p: move the protocol-specific code out into separate functions
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [syzbot] WARNING in __percpu_ref_exit (2)
  • From: syzbot <syzbot+d6218cb2fae0b2411e9d@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [syzbot] KASAN: use-after-free Read in nft_table_lookup (2)
  • From: syzbot <syzbot+f31660cf279b0557160c@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log] src: make nflog_open_nfnl() static
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nf-next v4 4/5] netfilter: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: module ipp2p (xtables) for ip6tables? No such file or directory...
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y
  • From: Salvatore Bonaccorso <carnil@xxxxxxxxxx>
• module ipp2p (xtables) for ip6tables? No such file or directory...
  • From: <kaskada@xxxxxxxx>
• Re: [PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
  • From: Andrea Claudi <aclaudi@xxxxxxxxxx>
• [PATCH] libnetfilter_queue: src/nlmsg.c: SECCTX can be of any length
  • From: Topi Miettinen <toiwoton@xxxxxxxxx>
• Re: [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [syzbot] general protection fault in nft_set_elem_expr_alloc
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 5.10.y 2/3] netfilter: nf_tables: initialize set before expression setup
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 5.10.y 3/3] netfilter: nftables: clone set element expression template
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 5.10.y 1/3] netfilter: nftables: avoid potential overflows on 32bit arches
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH AUTOSEL 5.10 124/176] net: Fix offloading indirect devices dependency on qdisc order creation
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.13 156/219] net: Fix offloading indirect devices dependency on qdisc order creation
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.13 082/219] netfilter: nft_compat: use nfnetlink_unicast()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.14 176/252] net: Fix offloading indirect devices dependency on qdisc order creation
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.14 096/252] netfilter: nft_compat: use nfnetlink_unicast()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_ipport_create
  • From: syzbot <syzbot+a568bbab323b96631e61@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [syzbot] general protection fault in nft_set_elem_expr_alloc
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_ipport_create
  • From: syzbot <syzbot+a568bbab323b96631e61@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [syzbot] general protection fault in nft_set_elem_expr_alloc
  • From: Salvatore Bonaccorso <carnil@xxxxxxxxxx>
• [PATCH nf 5/5] selftests: netfilter: add zone stress test with colliding tuples
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 4/5] selftests: netfilter: add selftest for directional zone support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 3/5] netfilter: nat: include zone id in nat table hash again
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/5] netfilter: conntrack: include zone id in tuple hash again
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/5] netfilter: conntrack: make max chain length random
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/5] netfilter: conntrack: make connection tracking table less predictable
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/5] netfilter: conntrack: make zone id part of conntrack hash
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnetfilter_log] utils: nfulnl_test: Print meaningful error messages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnetfilter_log v2] src: doc: revise doxygen for module "Netlink message helper functions"
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log] src: doc: revise doxygen for module "Netlink message helper functions"
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log] src: doc: revise doxygen for module "Netlink message helper functions"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] doc: nfnetlink_log allows one single process through unicast
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink: rework range_expr_to_prefix()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: Check range bounds before converting to prefix
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH 3/7] tests: xlate-test: Print errors to stderr
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 7/7] tests: shell: Return non-zero on error
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/7] tests: iptables-test: Fix missing chain case
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 6/7] tests: iptables-test: Exit non-zero on error
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 5/7] tests: xlate-test: Exit non-zero on error
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/7] tests: iptables-test: Print errors to stderr
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/7] tests: xlate-test: Don't skip any input after the first empty line
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 1/1] netfilter: ipset: Fix oversized kvmalloc() calls
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_net_create
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_ip_create
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: Check range bounds before converting to prefix
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• [PATCH nft] doc: refer to ulogd manpage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] tests/conntrack: script for stress-testing ct load
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log] src: consistently use `gh` in code, code snippets and examples
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] doc: libnflog handles `log group`, not libnfq
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] build: doc: Fix rendering of verbatim '\n"' in man pages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log 1/1] src: doc: Eliminate doxygen warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log 0/3] Miscellaneous cleanups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: Check range bounds before converting to prefix
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• [PATCH nft] doc: Missing NFT_CTX_OUTPUT_NUMERIC_SYMBOL in libnftables documentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] meta: skip -T for hour and date format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in nf_tables_newset
  • From: syzbot <syzbot+cd43695a64bcd21b8596@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log] src: consistently use `gh` in code, code snippets and examples
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nftables] doc: libnflog handles `log group`, not libnfq
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nft] src: Check range bounds before converting to prefix
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• [net-next v4] extensions: masquerade: Add RFC-7597 section 5.1 PSID support
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_ip_create
  • From: syzbot <syzbot+3493b1873fb3ea827986@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_mac_create
  • From: syzbot <syzbot+ee5cb15f4a0e85e0d54e@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue] build: doc: Fix rendering of verbatim '\n"' in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log] src: doc: revise doxygen for module "Netlink message helper functions"
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_ipportnet_create
  • From: syzbot <syzbot+0e73f839b35d0973fb97@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_netport_create
  • From: syzbot <syzbot+3f5904753c2388727c6c@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_net_create
  • From: syzbot <syzbot+2b8443c35458a617c904@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net 1/5] netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [syzbot] WARNING: kmalloc bug in hash_ipmac_create
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_netport_create
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_ipmark_create
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_netport_create
  • From: syzbot <syzbot+3f5904753c2388727c6c@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_ipmark_create
  • From: syzbot <syzbot+5a5a70ab7329b98649e7@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in nf_tables_newset
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_ip_create
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [syzbot] WARNING: kmalloc bug in hash_net_create
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_ipmac_create
  • From: syzbot <syzbot+cf28dc7802e9fcee1305@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_net_create
  • From: syzbot <syzbot+2b8443c35458a617c904@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in nf_tables_newset
  • From: syzbot <syzbot+cd43695a64bcd21b8596@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [syzbot] WARNING: kmalloc bug in hash_ip_create
  • From: syzbot <syzbot+3493b1873fb3ea827986@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH net 4/5] netfilter: refuse insertion if chain has grown too large
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/5] netfilter: socket: icmp6: fix use-after-scope
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/5] netfilter: conntrack: switch to siphash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] netfilter: conntrack: sanitize table size default settings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: socket: icmp6: fix use-after-scope
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: socket: icmp6: fix use-after-scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: socket: icmp6: fix use-after-scope
  • From: Benjamin Hesmans <benjamin.hesmans@xxxxxxxxxxxx>
• Re: [PATCH iptables] Fix a few doc typos
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] include: add NFT_CTX_OUTPUT_NUMERIC_TIME to NFT_CTX_OUTPUT_NUMERIC_ALL
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] datatype: time_print() ignores -T
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_queue] build: doc: Fix rendering of verbatim '\n"' in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH iptables] Fix a few doc typos
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• [PATCH libnetfilter_log 1/1] build: doc: `make` generates requested documentation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 0/1] build: doc: `make` generates requested documentation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [nft PATCH] parser_json: Fix error reporting for invalid syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_log 1/1] src: doc: Eliminate doxygen warnings
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 0/1] src: doc: Eliminate doxygen warnings
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v2] build: doc: Fix NAME entry in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v2] build: doc: Fix NAME entry in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Netdevconf 0x15 videos, slides and papers up
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Netdevconf 0x15 slides and papers up
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [iptables PATCH 2/2] nft: Use xtables_{m,c}alloc() everywhere
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/2] nft: Use xtables_malloc() in mnl_err_list_node_add()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 3/3] build: doc: remove trailing whitespace from doxygen.cfg.in
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 2/3] build: doc: reduce doxygen.cfg.in to non-default entries only
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 1/3] src: whitespace: Remove trailing whitespace and inconsistent indents
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 0/3] Miscellaneous cleanups
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nft 2/2] rule: remove redundant meta protocol from the evaluation step
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] netlink_delinearize: incorrect meta protocol dependency kill again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] extensions: libxt_mac: Fix for missing space in listing
  • From: Phil Sutter <phil@xxxxxx>
• Re: System crash in netfilter 5.10.25
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill
  • From: Phil Sutter <phil@xxxxxx>
• Re: System crash in netfilter 5.10.25
  • From: Yuri Lipnesh <yuri.lipnesh@xxxxxxxxx>
• Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net-next 1/8] netfilter: ecache: remove one indent level
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH nf 0/3] netfilter: conntrack: switch to siphash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 3/8] netfilter: ecache: add common helper for nf_conntrack_eventmask_report
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 7/8] netfilter: x_tables: handle xt_register_template() returning an error value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 6/8] netfilter: ctnetlink: missing counters and timestamp in nfnetlink_{log,queue}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 8/8] netfilter: add netfilter hooks to SRv6 data plane
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 5/8] netfilter: ecache: remove nf_exp_event_notifier structure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 4/8] netfilter: ecache: prepare for event notifier merge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 1/8] netfilter: ecache: remove one indent level
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 2/8] netfilter: ecache: remove another indent level
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 0/8] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Patch for iptables v 1.8.7 mac extension
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Patch for iptables v 1.8.7 mac extension
  • From: "a.wojcik hyp.home.pl" <a.wojcik@xxxxxxxxxxx>
• Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 5/6] build: doc: Allow to specify whether to produce man pages, html, neither or both
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] build: doc: Be sure to rerun doxygen after ./configure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v2] build: doc: Eliminate warning from ./autogen.sh
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v7 0/2] netfilter: add netfilter hooks to track SRv6-encapsulated flows
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• Re: libnetfilter_queue: automake portability warning
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue] build: doc: Be sure to rerun doxygen after ./configure
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v2] build: doc: Eliminate warning from ./autogen.sh
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: libnetfilter_queue: automake portability warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: libnetfilter_queue: automake portability warning
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log 4/6] src: use calloc instead of malloc + memset.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_log 5/6] libipulog: use correct index to find attribute in packet.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_log 6/6] libipulog: fill in missing packet fields.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_log 3/6] doc: fix typo's in example.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_log 1/6] Add doxygen directory to .gitignore.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_log 2/6] build: remove references to non-existent man-pages.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: libnetfilter_queue: automake portability warning
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH libnetfilter_queue v2] build: doc: Fix NAME entry in man pages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v2] build: doc: Fix NAME entry in man pages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log] build: remove broken code from autogen.sh.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 4/6] build: doc: fix `make distcleancheck`
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 3/6] build: doc: Avoid having to special-case `make distcheck`
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 2/6] build: doc: Add a man page post-processor to build_man.sh
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1/6] build: doc: Fix man pages
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Verion info
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 6/6] build: doc: Eliminate warning from ./autogen.sh
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 5/6] build: doc: Allow to specify whether to produce man pages, html, neither or both
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 4/6] build: doc: fix `make distcleancheck`
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 3/6] build: doc: Avoid having to special-case `make distcheck`
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 2/6] build: doc: Add a man page post-processor to build_man.sh
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 1/6] build: doc: Fix man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: libnetfilter_queue: automake portability warning
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• libnetfilter_queue: automake portability warning
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v2] build: doc: Fix NAME entry in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_log] build: remove broken code from autogen.sh.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf 3/3] netfilter: refuse insertion if chain has grown too large
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 3/3] netfilter: conntrack: refuse insertion if chain has grown too large
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/3] netfilter: conntrack: switch to siphash
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/3] netfilter: conntrack: sanitize table size default settings
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/3] netfilter: conntrack: switch to siphash
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug] Reverse translation skips "leading" meta protocol match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Bug] Reverse translation skips "leading" meta protocol match
  • From: Tom Yan <tom.ty89@xxxxxxxxx>
• [Bug] Reverse translation skips "leading" meta protocol match
  • From: Tom Yan <tom.ty89@xxxxxxxxx>
• [PATCH libnetfilter_queue v2 5/5] build: doc: Allow to specify whether to produce man pages, html, neither or both
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v2 4/5] build: doc: fix `make distcleancheck`
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v2 3/5] build: doc: Avoid having to special-case `make distcheck`
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v2 2/5] build: doc: Add a man page post-processor to build_man.sh
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v2 1/5] build: doc: Fix man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH net-next 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] cache: provide a empty list for flowtables and objects when request fails
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: x_tables: handle xt_register_template() returning an error value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/5] netfilter: ecache: simplify event registration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 4/4] build: doc: split off shell script from within doxygen/Makefile.am
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 3/4] build: doc: VPATH builds work again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 4/4] build: doc: split off shell script from within doxygen/Makefile.am
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_queue] build: doc: Fix man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 4/4] build: doc: split off shell script from within doxygen/Makefile.am
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 3/4] build: doc: VPATH builds work again
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 3/4] build: doc: VPATH builds work again
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 2/4] build: doc: can choose what to build and install
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: Request for a backport to Linux v5.4
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: Request for a backport to Linux v5.4
  • From: Florian Westphal <fw@xxxxxxxxx>
• Request for a backport to Linux v5.4
  • From: Gianluca Anzolin <gianluca@xxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 2/4] build: doc: can choose what to build and install
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 4/4] build: doc: split off shell script from within doxygen/Makefile.am
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v4 3/4] build: doc: VPATH builds work again
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] cache: skip set element netlink dump for add/delete element command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v2] build: doc: Fix NAME entry in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: x_tables: handle xt_register_template() returning an error value
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Suspicious pattern for use of function xt_register_template()
  • From: Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
• [PATCH] netfilter: x_tables: handle xt_register_template() returning an error value
  • From: Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
• Re: Suspicious pattern for use of function xt_register_template()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Suspicious pattern for use of function xt_register_template()
  • From: Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
• [PATCH 2/2] conntrack: use same nfct handle for all entries
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 1/2] tests/conntrack: script for stress-testing ct load
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH 0/2] Reusing nfct handle for bulk ct loads
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH nftables] src: Optimize prefix match only if is big-endian
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH xtables-addons 0/8] xt_condition: per-net improvements
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH xtables-addons 1/8] build: bump minimum supported kernel version from 4.15 to 4.16.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Seemingly random crashes with CONFIG_HARDENED_USERCOPY=y on ppc64be
  • From: Stijn Tintel <stijn@xxxxxxxxxxxxx>
• [PATCH xtables-addons 3/8] xt_condition: use `xt_check_proc_name` to validate /proc file-name.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 7/8] xt_condition: don't delete variables in `condition_net_exit`.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 8/8] xt_condition: simplify clean-up of variables.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 4/8] xt_condition: make mutex per-net.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 6/8] xt_condition: use `proc_net_condition` member of `struct condition_net`to signal that `condition_net_exit` has been called.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 5/8] xt_condition: remove `wmb` when adding new variable.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 2/8] xt_condition: use sizeof_field macro to size variable name.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 1/8] build: bump minimum supported kernel version from 4.15 to 4.16.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 0/8] xt_condition: per-net improvements
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH] xtables-addons 3.18 condition - Improved network namespace support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Old good cBPF and program size
  • From: <alexandre.ferrieux@xxxxxxxxxx>
• Re: [PATCH] xtables-addons 3.18 condition - Improved network namespace support
  • From: Grzegorz Kuczyński <grzegorz.kuczynski@xxxxxxxxxx>
• Re: [PATCH] xtables-addons 3.18 condition - Improved network namespace support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH] xtables-addons 3.18 condition - Improved network namespace support
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] Add DWARF object files to .gitignore.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1/3] build: doc: Fix NAME entry in man pages
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_queue v4 4/4] build: doc: split off shell script from within doxygen/Makefile.am
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v4 3/4] build: doc: VPATH builds work again
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v4 2/4] build: doc: can choose what to build and install
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v4 1/4] build: doc: Fix NAME entry in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1/3] build: doc: Fix NAME entry in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1/3] build: doc: Fix NAME entry in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] Add DWARF object files to .gitignore.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH] Add DWARF object files to .gitignore.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3 1/3] build: doc: Fix NAME entry in man pages
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net-next v4] net: ipvs: add sysctl_run_estimation to support disable estimation
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH libnetfilter_queue v3 3/3] build: doc: VPATH builds work again
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 2/3] build: doc: can choose what to build and install
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v3 1/3] build: doc: Fix NAME entry in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [syzbot] KASAN: use-after-free Read in nf_tables_dump_sets
  • From: syzbot <syzbot+8cc940a9689599e10587@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH] xtables-addons 3.18 condition - Improved network namespace support
  • From: Grzegorz Kuczyński <grzegorz.kuczynski@xxxxxxxxxx>
• [PATCH nftables] src: Optimize prefix match only if is big-endian
  • From: Xiao Liang <shaw.leon@xxxxxxxxx>
• [PATCH nft,v3] src: queue: consolidate queue statement syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2] src: queue: consolidate queue statement syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: add nft-f/0022variables_0 dump file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: queue: consolidate queue statement syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: restore variable expression in queue statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser: permit symbolic defines for 'queue num' again
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [ANNOUNCE] nftables 1.0.0 release
  • From: Amish <anon.amish@xxxxxxxxx>
• [ANNOUNCE] nftables 1.0.0 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: ctnetlink: missing counters and timestamp in nfnetlink_{log,queue}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 40/63] netfilter: conntrack: Use memset_startat() to zero struct nf_conn
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH v2 iptables] iptables-nft: allow removal of empty builtin chains
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v7 2/2] netfilter: add netfilter hooks to SRv6 data plane
  • From: Ryoga Saito <contact@xxxxxxxxxxxx>
• [PATCH v7 1/2] netfilter: add new sysctl toggle for lightweight tunnel netfilter hooks
  • From: Ryoga Saito <contact@xxxxxxxxxxxx>
• [PATCH v7 0/2] netfilter: add netfilter hooks to track SRv6-encapsulated flows
  • From: Ryoga Saito <contact@xxxxxxxxxxxx>
• Re: [PATCH v6 2/2] netfilter: add netfilter hooks to SRv6 data plane
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v6 2/2] netfilter: add netfilter hooks to SRv6 data plane
  • From: Ryoga Saito <contact@xxxxxxxxxxxx>
• [PATCH v6 1/2] netfilter: add new sysctl toggle for lightweight tunnel netfilter hooks
  • From: Ryoga Saito <contact@xxxxxxxxxxxx>
• [PATCH v6 0/2] netfilter: add netfilter hooks to track SRv6-encapsulated flows
  • From: Ryoga Saito <contact@xxxxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH AUTOSEL 5.4 3/5] netfilter: conntrack: collect all entries in one cycle
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 3/4] netfilter: conntrack: collect all entries in one cycle
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.10 5/9] netfilter: conntrack: collect all entries in one cycle
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.13 07/12] netfilter: conntrack: collect all entries in one cycle
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.13 06/12] netfilter: ipset: Limit the maximal range of consecutive elements to add/delete
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5 2/2] netfilter: add netfilter hooks to SRv6 data plane
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: ecache: remove nf_exp_event_notifier structure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: ecache: prepare for event notifier merge
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/5] netfilter: ecache: add common helper for nf_conntrack_eventmask_report
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: ecache: remove another indent level
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: ecache: remove one indent level
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/5] netfilter: ecache: simplify event registration
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: <alexandre.ferrieux@xxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: <alexandre.ferrieux@xxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v2] build: doc: Fix NAME entry in man pages
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: <alexandre.ferrieux@xxxxxxxxxx>
• Re: [PATCH iptabes-nft] iptables-nft: allow removal of empty builtin chains
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptabes-nft] iptables-nft: allow removal of empty builtin chains
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptabes-nft] iptables-nft: allow removal of empty builtin chains
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptabes-nft] iptables-nft: allow removal of empty builtin chains
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: <alexandre.ferrieux@xxxxxxxxxx>
• Re: nfnetlink_queue -- why linear lookup ?
  • From: <alexandre.ferrieux@xxxxxxxxxx>