Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH nft] table: rework flags printing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• increasing ip_list_tot in net/netfilter/xt_recent.c for a non-modular kernel
  • From: Toralf Förster <toralf.foerster@xxxxxx>
• Re: [nft PATCH 2/2] doc: nft: fix some typos and formatting issues
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] main: fix nft --help output fallout from 719e4427
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: allow use of 'verdict' in typeof definitions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH 2/2] doc: nft: fix some typos and formatting issues
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• [nft PATCH 1/2] main: fix nft --help output fallout from 719e4427
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• [PATCH] xtables-addons 3.15 doesn't compile on 32-bit x86
  • From: <andy@xxxxxxxxxxxxx>
• [PATCH] netfilter: Remove a double space in a log message
  • From: Klemen Košir <klemen.kosir@xxxxxxxx>
• [ANNOUNCE] ipset 7.11 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [iptables PATCH] nft: Fix bitwise expression avoidance detection
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] json: init parser state for every new buffer/file
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] json: init parser state for every new buffer/file
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3] src: fix IPv6 header handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 2/2 v2] Avoid out of bounds read from data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [libnftnl PATCH 2/2 v2] Avoid out of bounds read from data
  • From: Maya Rashish <mrashish@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [libnftnl PATCH 1/2] Avoid out of bound reads in tests.
  • From: Maya Rashish <mrashish@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [libnftnl PATCH 2/2] Avoid out of bounds read from data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/2] Avoid out of bound reads in tests.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ebtables PATCH] Open the lockfile with O_CLOEXEC
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 1/3] netfilter: nftables: add helper function to release one table
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [ebtables PATCH] Open the lockfile with O_CLOEXEC
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [libnftnl PATCH 2/2] Avoid out of bounds read from data
  • From: Maya Rashish <mrashish@xxxxxxxxxx>
• [libnftnl PATCH 1/2] Avoid out of bound reads in tests.
  • From: Maya Rashish <mrashish@xxxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net-next 0/3] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 2/3] netfilter: nftables: add helper function to release hooks of one single table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 3/3] netfilter: nftables: introduce table ownership
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 1/3] netfilter: nftables: add helper function to release one table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] src: fix IPv6 header handling
  • From: Etan Kissling <etan_kissling@xxxxxxxxx>
• [nft PATCH] monitor: Don't print newgen message with JSON output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] include: Drop libipulog.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] include: Drop libipulog.h
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 0/3] nft: fix ct zone handling in sets and maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• traffic shaping with tc on Linux 5.4.x
  • From: Lars Noodén <lars.nooden@xxxxxxx>
• [PATCH nf-next,v3 3/3] netfilter: nftables: introduce table ownership
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 2/3] netfilter: nftables: allow to release hooks of one single table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 1/3] netfilter: nftables: allow to release one table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2] netfilter: nftables: introduce table ownership
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Question about using NFT_GOTO in kernel module
  • From: "Bob @ gmail" <bob.zscharnagk@xxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Phil Sutter <phil@xxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Phil Sutter <phil@xxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Phil Sutter <phil@xxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Phil Sutter <phil@xxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnetfilter_queue v3] src: fix IPv6 header handling
  • From: Etan Kissling <etan_kissling@xxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [PATCH net 1/2] netfilter: conntrack: skip identical origin tuple in same zone only
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/2] netfilter: nftables: relax check for stateful expressions in set definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/2] netfilter: conntrack: skip identical origin tuple in same zone only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_queue v2] src: fix IPv6 header handling
  • From: Etan Kissling <etan_kissling@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: skip identical origin tuple in same zone only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] src: add pkt_buff function for ICMP
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] src: fix IPv6 header handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] erec: Sanitize erec location indesc
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] evaluate: incorrect usage of stmt_binary_error() in reject
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] erec: Sanitize erec location indesc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] erec: Sanitize erec location indesc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] erec: Sanitize erec location indesc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] erec: Sanitize erec location indesc
  • From: Phil Sutter <phil@xxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH] erec: Sanitize erec location indesc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] erec: Sanitize erec location indesc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v3] netfilter: nftables: relax check for stateful expressions in set definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nftables: relax check for stateful expressions in set definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Phil Sutter <phil@xxxxxx>
• Re: Unable to create a chain called "trace"
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] trace: do not remove icmp type from packet dump
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nftables: relax check for stateful expressions in set definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [PATCH net-next 1/7] netfilter: ctnetlink: remove get_ct indirection
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net-next 4/7] netfilter: nftables: add nft_parse_register_load() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 5/7] netfilter: nftables: add nft_parse_register_store() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 6/7] netfilter: nftables: statify nft_parse_register()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 3/7] netfilter: flowtable: add hash offset field to tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 1/7] netfilter: ctnetlink: remove get_ct indirection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 2/7] ipvs: add weighted random twos choice algorithm
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 7/7] netfilter: nftables: remove redundant assignment of variable err
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 0/7] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC conntrack-tools PATCH] conntrack-tools: introduce conntrackdctl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [RFC conntrack-tools PATCH] conntrack-tools: introduce conntrackdctl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: skip identical origin tuple in same zone only
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net-next v2 0/4] Fix W=1 compilation warnings in net/* folder
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net 2/4] selftests: netfilter: fix current year
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/4] netfilter: flowtable: fix tcp and udp header checksum update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/4] netfilter: nftables: fix possible UAF over chains from packet path in netns
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [RFC conntrack-tools PATCH] conntrack-tools: introduce conntrackdctl
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nft,v2] src: add negation match on singleton bitmask value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: remove redundant assignment of variable err
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: remove redundant assignment of variable err
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Fix attempt to update deleted entry in xt_recent
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 2/2] tests/py: Add a test sanitizer and fix its findings
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/2] tests/py: Write dissenting payload into the right file
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 3/3] evaluate: do not crash if dynamic set has no statements
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] tests: add empty dynamic set
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] testcases: move two dump files to correct location
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/3] evaluate: fix crash on empty set restore
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/3] nft: fix ct zone handling in sets and maps
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/3] evaluate: set evaluation context for set elements
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] extend_test
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] evaluate: pick data element byte order, not dtype one
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] tests: extend dtype test case to cover expression with integer type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next v2 4/4] netfilter: move handlers to net/ip_vs.h
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net-next v2 2/4] ipv6: move udp declarations to net/udp.h
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net-next v2 3/4] net/core: move gro function declarations to separate header
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net-next v2 1/4] ipv6: silence compilation warning for non-IPV6 builds
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net-next v2 0/4] Fix W=1 compilation warnings in net/* folder
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• Re: [PATCH net-next v1 3/4] net/core: move gro function declarations to separate header
  • From: Leon Romanovsky <leonro@xxxxxxxxxx>
• Re: [nft PATCH] erec: Sanitize erec location indesc
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net-next v1 2/4] ipv6: move udp declarations to net/udp.h
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net-next v1 4/4] netfilter: move handlers to net/ip_vs.h
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net-next v1 3/4] net/core: move gro function declarations to separate header
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net-next v1 1/4] ipv6: silence compilation warning for non-IPV6 builds
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net-next v1 0/4] Fix W=1 compilation warnings in net/* folder
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• Re: [nft PATCH] erec: Sanitize erec location indesc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: flowtable: fix tcp and udp header checksum update
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] json: Do not abbreviate reject statement object
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net 1/4] ipv6: silence compilation warning for non-IPV6 builds
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net 1/4] ipv6: silence compilation warning for non-IPV6 builds
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• Re: [PATCH nft 2/2] payload: check icmp dependency before removing previous icmp expression
  • From: Michael Biebl <biebl@xxxxxxxxxx>
• [PATCH] netfilter: flowtable: fix tcp and udp header checksum update
  • From: sven.auhagen@xxxxxxxxxxxx
• Re: [PATCH net 1/4] ipv6: silence compilation warning for non-IPV6 builds
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net 3/4] net/core: move ipv6 gro function declarations to net/ipv6
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• Re: [PATCH net 0/4] Fix W=1 compilation warnings in net/* folder
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• Re: [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nftables: fix possible UAF over chains from packet path in netns
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 0/4] Fix W=1 compilation warnings in net/* folder
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH net 0/4] Fix W=1 compilation warnings in net/* folder
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• Re: [PATCH net 3/4] net/core: move ipv6 gro function declarations to net/ipv6
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH net 0/4] Fix W=1 compilation warnings in net/* folder
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• [PATCH net 1/4] ipv6: silence compilation warning for non-IPV6 builds
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net 0/4] Fix W=1 compilation warnings in net/* folder
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net 3/4] net/core: move ipv6 gro function declarations to net/ipv6
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net 4/4] netfilter: move handlers to net/ip_vs.h
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• [PATCH net 2/4] ipv6: move udp declarations to net/udp.h
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• Re: [PATCH nft 2/2] payload: check icmp dependency before removing previous icmp expression
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [conntrack-tools PATCH 1/3] tests: introduce new python-based framework for running tests
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] tests: conntrackd: move basic netns scenario setup to shell script
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] payload: check icmp dependency before removing previous icmp expression
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/2] tests: add icmp/6 test where dependency should be left alone
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: add negation match on singleton bitmask value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH 1/3] tests: introduce new python-based framework for running tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] tests: conntrackd: move basic netns scenario setup to shell script
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nftables: introduce table ownership
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nftables: introduce table ownership
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nftables: introduce table ownership
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [conntrack-tools PATCH 1/3] tests: introduce new python-based framework for running tests
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH 1/3] tests: introduce new python-based framework for running tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH] conntrackd: introduce yes & no config values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v4 5/5] af_packet: Introduce egress hook
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• Re: [PATCH nf-next v4 5/5] af_packet: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH nf-next v4 1/5] net: sched: Micro-optimize egress handling
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH 1/1 nf] selftests: netfilter: fix current year
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH v3 8/8] tests: conntrack -L/-D ip family filtering
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v3 7/8] tests: saving and loading ct entries, save format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v3 6/8] conntrack.8: man update for --load-file support
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v3 5/8] conntrack: accept commands from file
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v3 3/8] conntrack: per-command entries counters
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v3 4/8] conntrack: introduce ct_cmd_list
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v3 2/8] conntrack: move global options to struct ct_cmd
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v3 1/8] conntrack: reset optind in do_parse
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v3 0/8] conntrack: save output format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH] netfilter: Fix attempt to update deleted entry in xt_recent
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxx>
• [PATCH] netfilter: nf_tables: remove redundant assignment of variable err
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: [PATCH] tests: monitor: use correct $nft value in EXIT trap
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• Re: [PATCH net 1/3] netfilter: nft_dynset: honor stateful expressions in set definition
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [iptables PATCH] ebtables: Exit gracefully on invalid table names
  • From: Phil Sutter <phil@xxxxxx>
• Re: https://bugzilla.kernel.org/show_bug.cgi?id=207773
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: https://bugzilla.kernel.org/show_bug.cgi?id=207773
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH] tests: monitor: use correct $nft value in EXIT trap
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] tests: monitor: use correct $nft value in EXIT trap
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• Re: https://bugzilla.kernel.org/show_bug.cgi?id=207773
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: https://bugzilla.kernel.org/show_bug.cgi?id=207773
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: https://bugzilla.kernel.org/show_bug.cgi?id=207773
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• [PATCH net 3/3] netfilter: nft_dynset: dump expressions when set definition contains no expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• https://bugzilla.kernel.org/show_bug.cgi?id=207773
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• [PATCH net 2/3] netfilter: nft_dynset: add timeout extension to template
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/3] netfilter: nft_dynset: honor stateful expressions in set definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v24 07/25] LSM: Use lsmblob in security_secctx_to_secid
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v24 08/25] LSM: Use lsmblob in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [nft PATCH] erec: Sanitize erec location indesc
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] json: limit: Always include burst value
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next v4 4/5] netfilter: Introduce egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nftables: introduce table ownership
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nftables: introduce table ownership
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 2/2] reject: Unify inet, netdev and bridge delinearization
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/2] reject: Fix for missing dependencies in netdev family
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v24 18/25] LSM: security_secid_to_secctx in netlink netfilter
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v24 16/25] LSM: Use lsmcontext in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v24 15/25] LSM: Ensure the correct LSM context releaser
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH nft] src: evaluate: reset context maxlen value before prio evaluation
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next v4 1/5] net: sched: Micro-optimize egress handling
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [netfilter-core] [PATCH nft v4] src: Support netdev egress hook
  • From: Phil Sutter <phil@xxxxxx>
• Re: [netfilter-core] [PATCH nft v4] src: Support netdev egress hook
  • From: Phil Sutter <phil@xxxxxx>
• Re: KASAN: use-after-free Read in dump_schedule
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: [netfilter-core] [PATCH nft v4] src: Support netdev egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v4 1/5] net: sched: Micro-optimize egress handling
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH v6] ipvs: add weighted random twos choice algorithm
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: ctnetlink: remove get_ct indirection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2,v2] netfilter: nftables: add nft_parse_register_store()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v4 2/3] netfilter: nftables: add nft_parse_register_store() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v4 1/3] netfilter: nftables: add nft_parse_register_load() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v4 3/3] netfilter: nftables: statify nft_parse_register()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/2] netfilter: nftables: statify nft_parse_register()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2,v3] netfilter: nftables: add nft_parse_register_store()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nftables: add nft_parse_register_store()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nftables: add nft_parse_register_load() and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: flowtable: add hash offset field to tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [netfilter-core] [PATCH nft v4] src: Support netdev egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [netfilter-core] [PATCH nft v4] src: Support netdev egress hook
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [netfilter-core] [PATCH nft v4] src: Support netdev egress hook
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next v4 5/5] af_packet: Introduce egress hook
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• [PATCH nft v4] src: Support netdev egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH nf-next v4 5/5] af_packet: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH nf-next v4 1/5] net: sched: Micro-optimize egress handling
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH v6] ipvs: add weighted random twos choice algorithm
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf-next v4 1/5] net: sched: Micro-optimize egress handling
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH nf-next v4 1/5] net: sched: Micro-optimize egress handling
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [conntrack-tools PATCH 3/3] tests: introduce replicating scenario and simple icmp test case
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [conntrack-tools PATCH 2/3] tests: introduce some basic testcases for the new conntrack-tools testing framework
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [conntrack-tools PATCH 1/3] tests: introduce new python-based framework for running tests
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: KASAN: use-after-free Read in dump_schedule
  • From: syzbot <syzbot+621fd33c0b53d15ee8de@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next v4 5/5] af_packet: Introduce egress hook
  • From: Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx>
• [PATCH nf-next v4 5/5] af_packet: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH nf-next v4 1/5] net: sched: Micro-optimize egress handling
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• [PATCH nf-next v4 1/5] net: sched: Micro-optimize egress handling
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nf-next v4 3/5] netfilter: Generalize ingress hook include file
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nf-next v4 4/5] netfilter: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nf-next v4 2/5] netfilter: Rename ingress hook include file
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nf-next v4 0/5] Netfilter egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nft] json: icmp: move expected parts to json.output
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] evaluate: disallow ct original {s,d}ddr from concatenations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] exthdr: remove tcp dependency for tcp option matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] exthdr: remove tcp dependency for tcp option matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/4] json: fix icmpv6.t test cases
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 3/4] json: ct: add missing rule
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/4] json: limit: set default burst to 5
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 4/4] json: icmp: refresh json output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/4] json: limit: set default burst to 5
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/4] json: limit: set default burst to 5
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/4] json: limit: set default burst to 5
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 1/4] json: fix icmpv6.t test cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/4] json: limit: set default burst to 5
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/4] json: ct: add missing rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 4/4] json: icmp: refresh json output
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/4] json test case fixups
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2] netfilter: ctnetlink: remove get_ct indirection
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ctnetlink: remove get_ct indirection
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ctnetlink: remove get_ct indirection
  • From: kernel test robot <lkp@xxxxxxxxx>
• [conntrack-tools PATCH] conntrackd: introduce yes & no config values
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: ctnetlink: remove get_ct indirection
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnetfilter_queue] src: fix IPv6 header handling
  • From: Etan Kissling <etan_kissling@xxxxxxxxx>
• [PATCH libnetfilter_queue] src: add pkt_buff function for ICMP
  • From: Etan Kissling <etan_kissling@xxxxxxxxx>
• Re: [PATCH] netfilter: Reverse nft_set_lookup_byid list traversal
  • From: Jan-Philipp Litza <jpl@xxxxxxxxx>
• Re: [PATCH] ipset: fix print format warning
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH] ipset: fix print format warning
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• [PATCH nf] netfilter: nft_dynset: dump expressions when set definition contains no expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_dynset: add timeout extension to template
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_dynset: honor stateful expressions in set definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] iptables 1.8.7 release
  • From: Phil Sutter <phil@xxxxxxxxxxxxx>
• [ANNOUNCE] nftables 0.9.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] tests/shell: Fix nft-only/0009-needless-bitwise_0
  • From: Phil Sutter <phil@xxxxxx>
• [ANNOUNCE] libnftnl 1.1.9 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: disallow ct original {s,d}ddr from maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Reverse nft_set_lookup_byid list traversal
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools 1/3] conntrack: add struct ct_cmd
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools 2/3] conntrack: add struct ct_tmpl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools 3/3] conntrack: add do_command_ct()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools 0/3] preparing support for command batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• KMSAN: uninit-value in nf_conntrack_udplite_packet (2)
  • From: syzbot <syzbot+e5b49f0d1e69d0c0fcb4@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH libnetfilter_queue] src: fix IPv6 header handling
  • From: Etan Kissling <etan_kissling@xxxxxxxxx>
• [PATCH libnetfilter_queue] src: fix header handling in nfq_ip6_set_transport_header
  • From: Etan Kissling <etan_kissling@xxxxxxxxx>
• [PATCH libnetfilter_queue] src: fix IPv6 header handling
  • From: Etan Kissling <etan_kissling@xxxxxxxxx>
• [PATCH libnetfilter_queue] src: add pkt_buff function for ICMP
  • From: Etan Kissling <etan_kissling@xxxxxxxxx>
• Re: [PATCH net 0/3] Netfilter fixes for net
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net 1/3] selftests: netfilter: Pass family parameter "-f" to conntrack tool
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/3] netfilter: nf_nat: Fix memleak in nf_nat_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/3] netfilter: conntrack: fix reading nf_conntrack_buckets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ghak90 v11 08/11] audit: add support for containerid to network namespaces
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 11/11] audit: add capcontid to set contid outside init_user_ns
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 10/11] audit: track container nesting
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 09/11] audit: contid check descendancy and nesting
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 07/11] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 06/11] audit: add containerid support for user records
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 05/11] audit: add support for non-syscall auxiliary records
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 04/11] audit: add contid support for signalling the audit daemon
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 03/11] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 02/11] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 00/11] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v11 01/11] audit: collect audit task parameters
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH AUTOSEL 5.10 08/51] netfilter: ipset: fixes possible oops in mtype_resize
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.4 05/28] netfilter: ipset: fixes possible oops in mtype_resize
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [PATCH] netfilter: Fix memleak in nf_nat_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: conntrack: fix reading nf_conntrack_buckets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Fix memleak in nf_nat_init
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: Fix memleak in nf_nat_init
  • From: Dinghao Liu <dinghao.liu@xxxxxxxxxx>
• Re: [PATCH net] netfilter: conntrack: fix reading nf_conntrack_buckets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] netfilter: conntrack: fix reading nf_conntrack_buckets
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• Re: [PATCH net 0/3] net: fix netfilter defrag/ip tunnel pmtu blackhole
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net 0/3] net: fix netfilter defrag/ip tunnel pmtu blackhole
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: Reverse nft_set_lookup_byid list traversal
  • From: Jan-Philipp Litza <jpl@xxxxxxxxx>
• Re: [PATCH net 3/3] net: ip: always refragment ip defragmented packets
  • From: Christian Perle <christian.perle@xxxxxxxxxxx>
• Re: [PATCH v6] ipvs: add weighted random twos choice algorithm
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nft] segtree: honor set element expiration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] cli: use plain readline() interface with libedit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] main: fix typo in cli definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/2] libedit support followup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] main: fix typo in cli definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] cli: use plain readline() interface
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/2] follow up work on the libedit support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/3] net: ip: always refragment ip defragmented packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 1/3] selftests: netfilter: add selftest for ipip pmtu discovery with enabled connection tracking
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 2/3] net: fix pmtu check in nopmtudisc mode
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net 0/3] net: fix netfilter defrag/ip tunnel pmtu blackhole
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net 0/3] Netfilter fixes for net
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH nft] cli: add libedit support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: set on flags to request multi-statement support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Potential licensing issue with libreadline
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Potential licensing issue with libreadline
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH net 3/3] netfilter: nftables: add set expression flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/3] netfilter: nft_dynset: report EOPNOTSUPP on missing set feature
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/3] netfilter: xt_RATEEST: reject non-null terminated string from userspace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/3] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_conntrack] examples: check return value of nfct_nlmsg_build()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack] examples: check return value of nfct_nlmsg_build()
  • From: Eyal Birger <eyal.birger@xxxxxxxxx>
• WARNING: suspicious RCU usage in xt_obj_to_user
  • From: syzbot <syzbot+00399fa030c641ffc5ae@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Announcing Netdev 0x15
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nftables: add set expression flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nft_dynset: report EOPNOTSUPP on missing set feature
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: xt_RATEEST: reject non-null terminated string from userspace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrackd: add ip netns test script
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrackd: add ip netns test script
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• stack corruption with EBT_ENTRY_ITERATE
  • From: sharathv@xxxxxxxxxxxxxx
• [PATCH conntrack-tools] conntrackd: add ip netns test script
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: kernel BUG at lib/string.c:LINE! (6)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: xt_RATEEST: reject non-null terminated string from userspace
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: xt_RATEEST: reject non-null terminated string from userspace
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: xt_RATEEST: reject non-null terminated string from userspace
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: kernel BUG at lib/string.c:LINE! (6)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: kernel BUG at lib/string.c:LINE! (6)
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• kernel BUG at lib/string.c:LINE! (6)
  • From: syzbot <syzbot+e86f7c428c8c50db65b4@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH ghak90 v10 01/11] audit: collect audit task parameters
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 v10 01/11] audit: collect audit task parameters
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 11/11] audit: add capcontid to set contid outside init_user_ns
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 10/11] audit: track container nesting
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 09/11] audit: contid check descendancy and nesting
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 08/11] audit: add support for containerid to network namespaces
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 07/11] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 05/11] audit: add support for non-syscall auxiliary records
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 06/11] audit: add containerid support for user records
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 04/11] audit: add contid support for signalling the audit daemon
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 03/11] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 02/11] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 01/11] audit: collect audit task parameters
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 v10 00/11] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: INFO: rcu detected stall in tipc_release
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• [ANNOUNCE] ipset 7.10 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: INFO: rcu detected stall in tipc_release
  • From: syzbot <syzbot+3654c027d861c6df4b06@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: nftables: fix incorrect increment of loop counter
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net 2/4] netfilter: x_tables: Update remaining dereference to RCU
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/4] netfilter: ipset: fixes possible oops in mtype_resize
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/4] netfilter: nftables: fix incorrect increment of loop counter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/4] netfilter: ipset: fix shift-out-of-bounds in htable_bits()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: set element multistatement support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: fix shift-out-of-bounds in htable_bits()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: fixes possible oops in mtype_resize
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: Update remaining dereference to RCU
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: ipset: fix shift-out-of-bounds in htable_bits()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: fixes possible oops in mtype_resize
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: add set element multi-statement support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2,v2] src: add support for multi-statement in dynamic sets and maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2] src: disallow burst 0 in ratelimits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3 libnftnl,v2] src: add NFTNL_EXPR_DYNSET_EXPRESSIONS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/3 libnftnl,v2] src: add NFTNL_SET_EXPRESSIONS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/3 libnftnl,v2] src: add NFTNL_SET_ELEM_EXPRESSIONS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] netfilter: ipset: fix shift-out-of-bounds in htable_bits()
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [nft PATCH] evaluate: Reject quoted strings containing only wildcard
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] evaluate: Reject quoted strings containing only wildcard
  • From: Phil Sutter <phil@xxxxxx>
• Re: [ovs-dev] [PATCH] conntrack: fix zone sync issue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] parser_bison: disallow burst 0 in ratelimits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: Update remaining dereference to RCU
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/2] src: add set element multi-statement support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: add support for multi-statement in dynamic sets and maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/2] multi-statement support for set elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: KASAN: use-after-free Write in __sco_sock_close
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• [PATCH] netfilter: ipset: fixes possible oops in mtype_resize
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: x_tables: Update remaining dereference to RCU
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [ovs-dev] [PATCH] conntrack: fix zone sync issue
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [ovs-dev] [PATCH] conntrack: fix zone sync issue
  • From: Flavio Leitner <fbl@xxxxxxxxxxxx>
• Re: [PATCH][next] netfilter: nftables: fix incorrect increment of loop counter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: KASAN: use-after-free Write in __sco_sock_close
  • From: syzbot <syzbot+077eca30d3cb7c02b273@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrack: pretty-print the portid
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH][next] netfilter: nftables: fix incorrect increment of loop counter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• UBSAN: shift-out-of-bounds in hash_ipmark_create
  • From: syzbot <syzbot+d81819ac03d8c36e3974@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH][next] netfilter: nftables: fix incorrect increment of loop counter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• WARNING: suspicious RCU usage in nf_ct_iterate_cleanup
  • From: syzbot <syzbot+dced7c2d89dde957f7dd@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/2] set_elem: Use nftnl_data_reg_snprintf()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] tests: py: Fix for changed concatenated ranges output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next 00/10] Netfilter/IPVS updates for net-next
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH][next] netfilter: nftables: fix incorrect increment of loop counter
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/2] set_elem: Use nftnl_data_reg_snprintf()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH 2/2] set_elem: Include key_end data reg in print output
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 1/2] set_elem: Use nftnl_data_reg_snprintf()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] nft: trace: print packet unconditionally
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH xtables-nft 3/3] xtables-monitor: print packet first
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] json: don't leave dangling pointers on hlist
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH xtables-nft 1/3] xtables-monitor: fix rule printing
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH xtables-nft 3/3] xtables-monitor: print packet first
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v3 0/9] nft: Sorted chain listing et al.
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Tom Rix <trix@xxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Joe Perches <joe@xxxxxxxxxxx>
• UBSAN: shift-out-of-bounds in hash_mac_create
  • From: syzbot <syzbot+d66bfadebca46cf61a2b@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Tom Rix <trix@xxxxxxxxxx>
• [PATCH net-next 02/10] ipvs: replace atomic_add_return()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 03/10] netfilter: Remove unnecessary conversion to bool
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 01/10] netfilter: nft_reject_bridge: fix build errors due to code movement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 00/10] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 08/10] netfilter: nftables: move nft_expr before nft_set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 05/10] netfilter: use actual socket sk for REJECT action
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 07/10] netfilter: nftables: generalize set expressions support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 10/10] netfilter: nftables: netlink support for several set element expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 06/10] netfilter: ctnetlink: add timeout and protoinfo to destroy events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 09/10] netfilter: nftables: generalize set extension to support for several expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 04/10] netfilter: nfnl_acct: remove data from struct net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 3/3] src: add NFTNL_EXPR_DYNSET_EXPRESSIONS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/3] src: add NFTNL_SET_ELEM_EXPRESSIONS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 2/3] src: add NFTNL_SET_EXPRESSIONS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] nft: trace: print packet unconditionally
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 3/3] xtables-monitor: print packet first
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 2/3] xtables-monitor: fix packet family protocol
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 1/3] xtables-monitor: fix rule printing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 0/3] xt-monitor fixes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next,v4 1/4] netfilter: nftables: generalize set expressions support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v4 4/4] netfilter: nftables: netlink support for several set element expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v4 3/4] netfilter: nftables: generalize set extension to support for several expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v4 2/4] netfilter: nftables: move nft_expr before nft_set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/10] nft: add automatic icmp/icmpv6 dependencies
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next,v3] netfilter: ctnetlink: add timeout and protoinfo to destroy events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset 7.9 compilation fix on kernel 4.14
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 1/1] netfilter: ctnetlink: add timeout and protoinfo to destroy events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next,v3 3/4] netfilter: nftables: generalize set extension to support for several expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 1/4] netfilter: nftables: generalize set expressions support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 2/4] netfilter: nftables: move nft_expr before nft_set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 4/4] netfilter: nftables: netlink support for several set element expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v2 1/1] netfilter: ctnetlink: add timeout and protoinfo to destroy events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ctnetlink: always include remaining timeout
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ctnetlink: always include remaining timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [iptables PATCH v3 9/9] nft: Avoid pointless table/chain creation
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 1/9] nft: Fix selective chain compatibility checks
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 5/9] nft: Introduce struct nft_chain
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 3/9] nft: Implement nft_chain_foreach()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 4/9] nft: cache: Move nft_chain_find() over
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 8/9] tests: shell: Drop any dump sorting in place
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 6/9] nft: Introduce a dedicated base chain array
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 0/9] nft: Sorted chain listing et al.
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 2/9] nft: cache: Introduce nft_cache_add_chain()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 7/9] nft: cache: Sort custom chains by name
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Eyal Birger <eyal.birger@xxxxxxxxx>
• [PATCH nf-next] netfilter: ctnetlink: always include remaining timeout
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_dynset: fix timeouts layer than 23 days
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH net 0/4] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• linux-next: manual merge of the net-next tree with the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH net] net: sched: incorrect Kconfig dependencies on Netfilter modules
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/4] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/4] netfilter: nft_dynset: fix timeouts later than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/4] netfilter: nftables: comment indirect serialization of commit_mutex with rtnl_mutex
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/4] netfilter: x_tables: Switch synchronization to RCU
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 09/10] tests: ip: add one test case to cover both id and sequence
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 10/10] tests: icmp, icmpv6: check we don't add second dependency
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 08/10] tests: icmp, icmpv6: avoid remaining warnings
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 06/10] tests: fix exepcted payload of icmpv6 expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 02/10] proto: reduce size of proto_desc structure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 07/10] payload: auto-remove simple icmp/icmpv6 dependency expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 05/10] src: add auto-dependencies for ipv6 icmp6
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 04/10] tests: fix exepcted payload of icmp expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 03/10] src: add auto-dependencies for ipv4 icmp
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 01/10] exthdr: remove unused proto_key member from struct
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/10] nft: add automatic icmp/icmpv6 dependencies
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Eyal Birger <eyal.birger@xxxxxxxxx>
• Re: [iptables PATCH v2 03/10] nft: cache: Introduce nft_cache_add_chain()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 5/5 nf-next,v2] netfilter: nftables: netlink support for several set element expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nftables: fix incorrect element timeout
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID
  • From: Brett Mastbergen <brett.mastbergen@xxxxxxxxx>
• Re: [PATCH] Remove IP_NF_IPTABLES dependency for NET_ACT_CONNMARK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: timeouts later than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] net: sched: incorrect Kconfig dependencies on Netfilter modules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nftables: comment indirect serialization of commit_mutex with rtnl_mutex
  • From: Vladimir Oltean <olteanv@xxxxxxxxx>
• [PATCH nf,v4] netfilter: nft_dynset: fix timeouts later than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Remove IP_NF_IPTABLES dependency for NET_ACT_CONNMARK
  • From: Andreas Sundstrom <sunkan@xxxxxxxx>
• [PATCH nf,v4] netfilter: nft_dynset: fix timeouts later than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] tests: shell: timeouts later than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v3] netfilter: nft_dynset: fix timeouts later than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2] netfilter: nft_dynset: fix timeouts later than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nftables: comment indirect serialization of commit_mutex with rtnl_mutex
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nftables: fix incorrect element timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_dynset: fix timeouts layer than 23 days
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nftables: fix incorrect element timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: double close_scope() call for implicit chains
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Remove IP_NF_IPTABLES dependency for NET_ACT_CONNMARK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Eyal Birger <eyal.birger@xxxxxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH libnetfilter_queue 1/2] build: choose right automake variables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_conntrack 1/2] build: use the right automake variables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] Remove IP_NF_IPTABLES dependency for NET_ACT_CONNMARK
  • From: Andreas Sundstrom <sunkan@xxxxxxxx>
• Re: [PATCH nf v2] netfilter: x_tables: Switch synchronization to RCU
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_log] build: choose right automake variables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH v2 2/2] conntrackd: external_inject: report inject issues as warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH v2 1/2] .gitignore: add nano swap file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 2/2] monitor: fix formatting of if statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 1/2] monitor: add assignment check for json_echo
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 5/5] netfilter: nftables: netlink support for several set element expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: (subset) [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Martin K. Petersen" <martin.petersen@xxxxxxxxxx>
• [PATCH nf-next 3/5] netfilter: nftables: generalize set extension to support for several expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: nftables: netlink support for several set element expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: nftables: move nft_expr before nft_set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: nftables: add nft_expr_parse() helper function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: nftables: generalize set expressions support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/5] support for several expression in set elements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 7.8 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH v2] xfrm: interface: Don't hide plain packets from netfilter
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] xfrm: interface: Don't hide plain packets from netfilter
  • From: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
• [PATCH] xfrm: interface: Don't hide plain packets from netfilter
  • From: Phil Sutter <phil@xxxxxx>
• Re: XFRM interface and NF_INET_LOCAL_OUT hook
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: XFRM interface and NF_INET_LOCAL_OUT hook
  • From: Phil Sutter <phil@xxxxxx>
• Re: XFRM interface and NF_INET_LOCAL_OUT hook
  • From: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
• [PATCH nftables 2/2] monitor: fix formatting of if statements
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nftables 1/2] monitor: add assignment check for json_echo
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [iptables PATCH] tests/shell: Test for fixed extension registration
  • From: Phil Sutter <phil@xxxxxx>
• Re: [ANNOUNCE] ipset 7.8 released
  • From: Ed W <lists@xxxxxxxxxxxxxx>
• [conntrack-tools PATCH v2 2/2] conntrackd: external_inject: report inject issues as warning
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [conntrack-tools PATCH v2 1/2] .gitignore: add nano swap file
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [nft PATCH] json: Fix seqnum_to_json() functionality
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libftnl,RFC] src: add infrastructure to infer byteorder from keys
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libftnl,RFC] src: add infrastructure to infer byteorder from keys
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: System crash on Ubuntu 18, in netlink code when using iptables / netfilter
  • From: Yuri Lipnesh <yuri.lipnesh@xxxxxxxxx>
• Re: [PATCH libftnl,RFC] src: add infrastructure to infer byteorder from keys
  • From: Phil Sutter <phil@xxxxxx>
• Re: [conntrack-tools PATCH 2/2] conntrackd: external_inject: report inject issues as warning
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft] src: report EPERM for non-root users
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [conntrack-tools PATCH 2/2] conntrackd: external_inject: report inject issues as warning
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [conntrack-tools PATCH 1/2] .gitignore: add nano swap file
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nft] src: report EPERM for non-root users
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Tom Rix <trix@xxxxxxxxxx>
• [PATCH nft] mnl: reply netlink error message might be larger than MNL_SOCKET_BUFFER_SIZE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v3] extensions: dccp: Fix for DCCP type 'INVALID'
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• [nft PATCH] json: Fix seqnum_to_json() functionality
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] doc: Document 'dccp type' match
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2] extensions: dccp: Fix for DCCP type 'INVALID'
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] parser_bison: allow to restore limit from dynamic set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] extensions: dccp: Fix translation of --dccp-type
  • From: Phil Sutter <phil@xxxxxx>
• Re: KMSAN: uninit-value in __skb_checksum_complete (5)
  • From: syzbot <syzbot+b024befb3ca7990fea37@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [nft PATCH] json: echo: Speedup seqnum_to_json()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn
  • From: Masami Hiramatsu <mhiramat@xxxxxxxxxx>
• Re: UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: use actual socket sk for REJECT action
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [PATCH] netfilter: use actual socket sk for REJECT action
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH] netfilter: use actual socket sk for REJECT action
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: use actual socket sk for REJECT action
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] netfilter: use actual socket sk for REJECT action
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nfnl_acct: remove data from struct net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Remove unnecessary conversion to bool
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Martin K. Petersen" <martin.petersen@xxxxxxxxxx>
• Re: [nft PATCH] json: echo: Speedup seqnum_to_json()
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• Re: System crash on Ubuntu 18, in netlink code when using iptables / netfilter
  • From: Florian Westphal <fw@xxxxxxxxx>
• System crash on Ubuntu 18, in netlink code when using iptables / netfilter
  • From: Yuri Lipnesh <yuri.lipnesh@xxxxxxxxx>
• [PATCH libnetfilter_conntrack 2/2] Update .gitignore
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH libnetfilter_conntrack 1/2] build: use the right automake variables
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH libnetfilter_queue 2/2] Update .gitignore
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH libnetfilter_queue 1/2] build: choose right automake variables
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH libnetfilter_log] build: choose right automake variables
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH libnetfilter_log 0/2] build: a couple of `-lnfnetlink` fixes.
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnetfilter_log 2/2] build: link libnetfilter_log_libipulog.so explicitly to libnfnetlink.so.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_log 0/2] build: a couple of `-lnfnetlink` fixes.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnetfilter_log 1/2] build: remove duplicate `-lnfnetlink` from LDFLAGS.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• WARNING: suspicious RCU usage in get_counters
  • From: syzbot <syzbot+5cfc290df4bbf069bc65@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net 0/5] Netfilter fixes for net
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [FYI] summary of Netfilter workshop 2020 virtual
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: remove trailing semicolon in macro definition
  • From: trix@xxxxxxxxxx
• Re: [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/5] netfilter: nftables_offload: set address type in control dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: ipset: prevent uninit-value in hash_ip6_add
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/5] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/5] netfilter: nftables_offload: build mask based from the matching bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] netfilter: nf_tables: avoid false-postive lockdep splat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: XFRM interface and NF_INET_LOCAL_OUT hook
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net v3] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: XFRM interface and NF_INET_LOCAL_OUT hook
  • From: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Karol Herbst <kherbst@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: XFRM interface and NF_INET_LOCAL_OUT hook
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libftnl,RFC] src: add infrastructure to infer byteorder from keys
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: XFRM interface and NF_INET_LOCAL_OUT hook
  • From: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
• Re: [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH nf,v2 2/2] netfilter: nftables_offload: build mask based from the matching bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Edward Cree <ecree.xilinx@xxxxxxxxx>
• [HEADS UP] Rebasing nf tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Edward Cree <ecree.xilinx@xxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH nf v2] netfilter: x_tables: Switch synchronization to RCU
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>