Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH nf-next v2 2/2] selftests: fib_tests: Add test cases for interaction with mangling
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH] mnl: Increase BATCH_PAGE_SIZE to support huge rulesets
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next v2 2/2] selftests: fib_tests: Add test cases for interaction with mangling
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• [PATCH nf-next v2 1/2] netfilter: Dissect flow after packet mangling
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• [PATCH nf-next v2 0/2] netfilter: Dissect flow after packet mangling
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec
  • From: Cole Dishington <Cole.Dishington@xxxxxxxxxxxxxxxxxxx>
• Re: [syzbot] WARNING: suspicious RCU usage in find_inlist_lock
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: [syzbot] KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state
  • From: Ali Abdallah <ali.abdallah@xxxxxxxx>
• Re: [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state
  • From: Ali Abdallah <ali.abdallah@xxxxxxxx>
• [PATCH nf-next,v3 2/3] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 3/3] netfilter: nftables_offload: special ethertype handling for VLAN
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 1/3] netfilter: nft_payload: fix C-VLAN offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 0/5] netfilter: conntrack: shrink size of netns_ct
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 2/2] netfilter: flowtable: add vlan pop action offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 1/2] netfilter: flowtable: add vlan match offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next,v2 2/3] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nft] parser: allow to load stateful ct connlimit elements in sets
  • From: nevola <nevola@xxxxxxxxx>
• Re: [PATCH net 1/7] netfilter: flowtable: fix NAT IPv6 offload mangling
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net 7/7] netfilter: nftables: clone set element expression template
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 6/7] netfilter: x_tables: fix compat match/target pad out-of-bound write
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/7] netfilter: arp_tables: add pre_exit hook for table unregister
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/7] netfilter: bridge: add pre_exit hooks for ebtable unregistration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/7] netfilter: nft_limit: avoid possible divide error in nft_limit_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/7] netfilter: conntrack: do not print icmpv6 as unknown via /proc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/7] netfilter: flowtable: fix NAT IPv6 offload mangling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/7] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: fix compat match/target pad out-of-bound write
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v2 5/5] netfilter: conntrack: convert sysctls to u8
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 4/5] netfilter: conntrack: move ct counter to net_generic data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 3/5] netfilter: conntrack: move expect counter to net_generic data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 2/5] netfilter: conntrack: move autoassign_helper sysctl to net_generic data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 1/5] netfilter: conntrack: move autoassign warning member to net_generic data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 0/5] netfilter: conntrack: shrink size of netns_ct
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• [PATCH nf-next,v2 2/3] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 3/3] netfilter: nftables_offload: special ethertype handling for VLAN
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 1/3] netfilter: nft_payload: fix C-VLAN offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/3] netfilter: nftables_offload: special ethertype handling for VLAN
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next 4/5] netfilter: conntrack: move ct counter to net_generic data
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling
  • From: Michal Soltys <msoltyspl@xxxxxxxxx>
• Re: linux-next: build failure after merge of the net-next tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: nftables_offload: special ethertype handling for VLAN
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: nft_payload: fix C-VLAN offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: build failure after merge of the net-next tree
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• linux-next: build failure after merge of the net-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling
  • From: David Ahern <dsahern@xxxxxxxxx>
• [PATCH nf-next] netfilter: Dissect flow after packet mangling
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• [PATCH nf,v4] netfilter: nftables: clone set element expression template
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v3] netfilter: nftables: clone set element expression template
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] arp,ebtables: add pre_exit hooks for arp/ebtable hook unregister
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: nft_limit: avoid possible divide error in nft_limit_init
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [syzbot] WARNING in __nf_unregister_net_hook (4)
  • From: syzbot <syzbot+154bd5be532a63aa778b@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH net] netfilter: nft_limit: avoid possible divide error in nft_limit_init
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nft_payload: fix the h_vlan_encapsulated_proto flow_dissector vlaue
  • From: wenxu <wenxu@xxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: conntrack: convert sysctls to u8
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: conntrack: move ct counter to net_generic data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/5] netfilter: conntrack: move expect counter to net_generic data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: conntrack: move autoassign_helper sysctl to net_generic data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: conntrack: move autoassign warning member to net_generic data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/5] netfilter: conntrack: shrink size of netns_ct
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nft_payload: fix the h_vlan_encapsulated_proto flow_dissector vlaue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nft_payload: fix the h_vlan_encapsulated_proto flow_dissector vlaue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta
  • From: wenxu@xxxxxxxxx
• [PATCH nf v2] netfilter: nft_payload: fix the h_vlan_encapsulated_proto flow_dissector vlaue
  • From: wenxu@xxxxxxxxx
• Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nftables: clone set element expression template
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state
  • From: Ali Abdallah <ali.abdallah@xxxxxxxx>
• [PATCH nf 2/2] netfilter: arp_tables: netfilter: bridge: add pre_exit hook for table unregister
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: bridge: add pre_exit hooks for ebtable unregistration
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/2] arp,ebtables: add pre_exit hooks for arp/ebtable hook unregister
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: x_tables: fix compat match/target pad out-of-bound write
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] evaluate: check if nat statement map specifies a transport header expr
  • From: Florian Westphal <fw@xxxxxxxxx>
• LPC 2021 Networking and BPF Track CFP
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH net-next 28/28] net: remove obsolete members from struct net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 27/28] netfilter: conntrack: move ecache dwork to net_generic infra
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 26/28] netfilter: conntrack: move sysctl pointer to net_generic infra
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 25/28] netfilter: x_tables: move known table lists to net_generic infra
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 21/28] netfilter: nf_defrag_ipv6: use net_generic infra
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 24/28] netfilter: nf_tables: use net_generic infra for transaction data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 19/28] netfilter: nfnetlink: use net_generic infra
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 23/28] netfilter: ebtables: use net_generic infra
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 11/28] netfilter: flowtable: dst_check() from garbage collector path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 14/28] netfilter: add helper function to set up the nfnetlink header and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 15/28] netfilter: ipvs: do not printk on netns creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 17/28] netfilter: nftables: remove documentation on static functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 18/28] netfilter: nfnetlink: add and use nfnetlink_broadcast
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 22/28] netfilter: nf_defrag_ipv4: use net_generic infra
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 20/28] netfilter: cttimeout: use net_generic infra
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 16/28] netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 13/28] netfilter: nftables: add helper function to set the base sequence number
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 09/28] audit: log nftables configuration change events once per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 10/28] netfilter: ipset: Remove duplicate declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 08/28] netfilter: nft_log: perform module load from nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 12/28] netfilter: nftables: remove unnecessary spin_lock_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 06/28] netfilter: nf_log_common: merge with nf_log_syslog
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 07/28] netfilter: nf_log: add module softdeps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 05/28] netfilter: nf_log_bridge: merge with nf_log_syslog
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 04/28] netfilter: nf_log_netdev: merge with nf_log_syslog
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 03/28] netfilter: nf_log_ipv6: merge with nf_log_syslog
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 02/28] netfilter: nf_log_arp: merge with nf_log_syslog
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 01/28] netfilter: nf_log_ipv4: rename to nf_log_syslog
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 00/28] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Firo Yang <firo.yang@xxxxxxxx>
• Re: Unused macro
  • From: "Alejandro Colomar (man-pages)" <alx.manpages@xxxxxxxxx>
• Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Simon Lees <sflees@xxxxxxx>
• [PATCH v4 5/5] tests: conntrack -L/-D ip family filtering
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v4 4/5] tests: saving and loading ct entries, save format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v4 3/5] conntrack.8: man update for --load-file support
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v4 2/5] conntrack: accept commands from file
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v4 1/5] conntrack: introduce ct_cmd_list
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• [PATCH v4 0/5] conntrack: save output format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v2] nft: Increase BATCH_PAGE_SIZE to support huge rulesets
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Simon Lees <sflees@xxxxxxx>
• Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Firo Yang <firo.yang@xxxxxxxx>
• Re: [PATCH nf-next v2 00/11] netfilter: reduce struct net size
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Unused macro
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Unused macro
  • From: "Alejandro Colomar (man-pages)" <alx.manpages@xxxxxxxxx>
• Re: Unused macro
  • From: Florian Westphal <fw@xxxxxxxxx>
• Unused macro
  • From: "Alejandro Colomar (man-pages)" <alx.manpages@xxxxxxxxx>
• Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ipvs: do not printk on netns creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] files: move example files away from /etc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto
  • From: wenxu <wenxu@xxxxxxxxx>
• [PATCH nf-next v2 1/2] netfilter: flowtable: add vlan match offload support
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next v2 2/2] netfilter: flowtable: add vlan pop action offload support
  • From: wenxu@xxxxxxxxx
• Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets
  • From: Phil Sutter <phil@xxxxxx>
• [syzbot] WARNING: suspicious RCU usage in find_inlist_lock
  • From: syzbot <syzbot+b221933e5f9ad5b0e2fd@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH netfilter] netfilter: xt_IDLETIMER: fix idletimer_tg_helper non-kosher casts
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH netfilter] netfilter: xt_IDLETIMER: fix idletimer_tg_helper non-kosher casts
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables] fix build for missing ETH_ALEN definition
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH netfilter] netfilter: xt_IDLETIMER: fix idletimer_tg_helper non-kosher casts
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] cache: bail out if chain list cannot be fetched from kernel
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] cache: add hashtable cache for sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [iptables PATCH v5 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [iptables PATCH v5 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH v5 1/2] extensions: libxt_conntrack: print xlate state as set
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• [PATCH nft 5/4] proto: replace vlan ether type with 8021q
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ipvs: do not printk on netns creation
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [iptables PATCH v5 PATCH 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto
  • From: wenxu@xxxxxxxxx
• Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: ipvs: do not printk on netns creation
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH nf-next 1/2] netfilter: flowtable: add vlan match offload support
  • From: wenxu <wenxu@xxxxxxxxx>
• [PATCH nft] cache: check for NULL chain in cache_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/4] cache: statify chain_cache_dump()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/4] evaluate: use chain hashtable for lookups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/4,v2] src: split chain list in table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/4] cache: rename chain_htable to cache_chain_ht
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] evaluate: use chain hashtable for lookups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/2] netfilter: flowtable: add vlan match offload support
  • From: kernel test robot <lkp@xxxxxxxxx>
• [iptables PATCH v5 PATCH 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [PATCH nf-next v2 07/11] netfilter: nf_tables: use net_generic infra for transaction data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH v5 1/2] extensions: libxt_conntrack: print xlate state as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH v5 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH v5 PATCH 1/2] extensions: libxt_conntrack: print xlate state as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 3/4] payload: be careful on vlan dependency removal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/4] tests: add 8021.AD vlan test cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/4] Add support for 8021.AD frame matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 11/11] net: remove obsolete members from struct net
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 05/11] netfilter: nf_defrag_ipv4: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: iptables-nft fails to restore huge rulesets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v2 09/11] netfilter: conntrack: move sysctl pointer to net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] evaluate: use chain hashtable for lookups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/4] src: vlan: allow matching vlan id insider 802.1ad frame
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next v2 06/11] netfilter: ebtables: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 01/11] netfilter: nfnetlink: add and use nfnetlink_broadcast
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 02/11] netfilter: nfnetlink: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/4] proto: add 8021ad as mnemonic for IEEE 802.1AD (0x88a8) ether type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 10/11] netfilter: conntrack: move ecache dwork to net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 03/11] netfilter: cttimeout: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 08/11] netfilter: x_tables: move known table lists to net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 00/11] netfilter: reduce struct net size
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v2 04/11] netfilter: nf_defrag_ipv6: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: iptables-nft fails to restore huge rulesets
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next 1/2] netfilter: flowtable: add vlan match offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: flowtable: add vlan match offload support
  • From: wenxu@xxxxxxxxx
• [PATCH nf-next 2/2] netfilter: flowtable: add vlan pop action offload support
  • From: wenxu@xxxxxxxxx
• [PATCH 2/2] libebtc: Fix an issue that '--concurrent' doesn't work with NFS
  • From: Firo Yang <firo.yang@xxxxxxxx>
• [PATCH 0/2] Two fixes related to '--concurrent'.
  • From: Firo Yang <firo.yang@xxxxxxxx>
• [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments
  • From: Firo Yang <firo.yang@xxxxxxxx>
• Re: [syzbot] KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2
  • From: syzbot <syzbot+845923d2172947529b58@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next 07/11] netfilter: nf_tables: use net_generic infra for transaction data
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nf-next] netfilter: nftables: remove documentation on static functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nf-next rebase...
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: iptables-nft fails to restore huge rulesets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 11/11] net: remove obsolete members from struct net
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 10/11] netfilter: conntrack: move ecache dwork to net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 09/11] netfilter: conntrack: move sysctl pointer to net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 07/11] netfilter: nf_tables: use net_generic infra for transaction data
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 08/11] netfilter: x_tables: move known table lists to net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 04/11] netfilter: nf_defrag_ipv6: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 05/11] netfilter: nf_defrag_ipv4: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 02/11] netfilter: nfnetlink: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 06/11] netfilter: ebtables: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 01/11] netfilter: nfnetlink: add and use nfnetlink_broadcast
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 03/11] netfilter: cttimeout: use net_generic infra
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 00/11] netfilter: reduce struct net size
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH][next] netfilter: nf_log_bridge: Fix missing assignment of ret on a call to nf_log_register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH][next] netfilter: nf_log_bridge: Fix missing assignment of ret on a call to nf_log_register
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: iptables-nft fails to restore huge rulesets
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH][next] netfilter: nf_log_bridge: Fix missing assignment of ret on a call to nf_log_register
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• [PATCH nft 2/2] parser_bison: simplify flowtable offload flag parser
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] mnl: do not set flowtable flags twice
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables-nft fails to restore huge rulesets
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH v5 PATCH 1/2] extensions: libxt_conntrack: print xlate state as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• Re: [iptables PATCH v3 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH v4 PATCH 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH v4 PATCH 1/2] extensions: libxt_conntrack: print xlate state as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• Re: [iptables PATCH v3 1/2] extensions: libxt_conntrack: print xlate state as set
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH v3 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH v3 1/2] extensions: libxt_conntrack: print xlate state as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH v3 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• iptables-nft fails to restore huge rulesets
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: flowtable: fix set software outdev on top of the net_device_path_stack
  • From: wenxu@xxxxxxxxx
• [PATCH] tcp: Reset tcp connections in SYN-SENT state
  • From: Manoj Basapathi <manojbm@xxxxxxxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: do not print icmpv6 as unknown via /proc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Remove duplicate declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next] netfilter: nftables: remove unnecessary spin_lock_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/8] netfilter: merge nf_log_proto modules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: add helper function to set up the nfnetlink header and use it
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nftables: add helper function to set the base sequence number
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] files: move example files away from /etc
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] netfilter: flowtable: fix NAT IPv6 offload mangling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH v2 1/2] extensions: libxt_conntrack: print xlate state as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH 1/2] extensions: libxt_conntrack: print xlate state as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [iptables PATCH 2/2] extensions: libxt_conntrack: print xlate status as set
  • From: Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: ipvs: do not printk on netns creation
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH AUTOSEL 5.4 12/19] netfilter: conntrack: Fix gre tunneling over ipv6
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.10 17/33] netfilter: nftables: skip hook overlap logic if flowtable is stale
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.10 16/33] netfilter: conntrack: Fix gre tunneling over ipv6
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.11 20/38] netfilter: nftables: skip hook overlap logic if flowtable is stale
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.11 19/38] netfilter: conntrack: Fix gre tunneling over ipv6
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH -next] netfilter: nftables: remove unnecessary spin_lock_init()
  • From: Yang Yingliang <yangyingliang@xxxxxxxxxx>
• Re: [PATCH v5] audit: log nftables configuration change events once per table
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: flowtable: dst_check() from garbage collector path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: Remove duplicate declaration
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH 08/19] netfilter: ipvs: A spello fix
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: ipvs: A spello fix
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH] netfilter: ipset: Remove duplicate declaration
  • From: Wan Jiabing <wanjiabing@xxxxxxxx>
• Re: [PATCH net-next] docs: nf_flowtable: fix compilation and warnings
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH v5] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [iptables PATCH] nft: cache: Sort chains on demand only
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 0/8] netfilter: merge nf_log_proto modules
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH net-next] docs: nf_flowtable: fix compilation and warnings
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• [PATCH net-next] docs: nf_flowtable: fix compilation and warnings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: nft_log: perform module load from nf_tables
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 7/8] netfilter: nf_log: add module softdeps
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 5/8] netfilter: nf_log_bridge: merge with nf_log_syslog
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 6/8] netfilter: nf_log_common: merge with nf_log_syslog
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 4/8] netfilter: nf_log_netdev: merge with nf_log_syslog
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/8] netfilter: nf_log_ipv4: rename to nf_log_syslog
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/8] netfilter: nf_log_arp: merge with nf_log_syslog
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/8] netfilter: nf_log_ipv6: merge with nf_log_syslog
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 0/8] netfilter: merge nf_log_proto modules
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] nftables: add flags offload to flowtable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser: fix scope closure of COUNTER token
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Oz Shlomo <ozsh@xxxxxxxxxx>
• Re: [PATCH v4] audit: log nftables configuration change events once per table
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH v4] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH v3] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• Re: [PATCH net-next,v2 00/24] netfilter: flowtable enhancements
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] audit: log nftables configuration change events once per table
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] src: add datatype->describe()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: DENG Qingfang <dqfext@xxxxxxxxx>
• Re: [PATCH v3 3/8] conntrack: per-command entries counters
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxx>
• Re: [PATCH] doc: use symbolic names for chain priorities
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 4/8] conntrack: introduce ct_cmd_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Oz Shlomo <ozsh@xxxxxxxxxx>
• Re: [PATCH v3 3/8] conntrack: per-command entries counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 1/8] conntrack: reset optind in do_parse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 6/6] src: allow arbitary chain name in implicit rule add case
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: DENG Qingfang <dqfext@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 23/24] net: ethernet: mtk_eth_soc: add flow offloading support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 24/24] docs: nf_flowtable: update documentation with enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 20/24] dsa: slave: add support for TC_SETUP_FT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 21/24] net: ethernet: mtk_eth_soc: fix parsing packets in GDM
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 22/24] net: ethernet: mtk_eth_soc: add support for initializing the PPE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 15/24] netfilter: flowtable: add offload support for xmit path types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 13/24] netfilter: flowtable: add dsa support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 12/24] netfilter: flowtable: add pppoe support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 17/24] netfilter: flowtable: bridge vlan hardware offload and switchdev
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 16/24] netfilter: nft_flow_offload: use direct xmit if hardware offload is enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 14/24] selftests: netfilter: flowtable bridge and vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 19/24] netfilter: flowtable: support for FLOW_ACTION_PPPOE_PUSH
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 18/24] net: flow_offload: add FLOW_ACTION_PPPOE_PUSH
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 08/24] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 10/24] netfilter: flowtable: add vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 07/24] netfilter: flowtable: add xmit path types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 09/24] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 06/24] net: dsa: resolve forwarding path for dsa slave ports
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 11/24] netfilter: flowtable: add bridge vlan filtering support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 04/24] net: bridge: resolve forwarding path for VLAN tag actions in bridge devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 03/24] net: bridge: resolve forwarding path for bridge devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 05/24] net: ppp: resolve forwarding path for bridge pppoe devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 00/24] netfilter: flowtable enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 02/24] net: 8021q: resolve forwarding path for vlan devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] audit: log nftables configuration change events once per table
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH v2] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH net-next 01/10] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• [PATCH net-next 10/10] netfilter: nftables: update table flags from the commit phase
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 04/10] netfilter: flowtable: consolidate skb_try_make_writable() call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 07/10] netfilter: flowtable: fast NAT functions never fail
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 09/10] netfilter: flowtable: refresh timeout after dst and writable checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 08/10] netfilter: flowtable: call dst_check() to fall back to classic forwarding
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 05/10] netfilter: flowtable: move skb_try_make_writable() before NAT in IPv4
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 06/10] netfilter: flowtable: move FLOW_OFFLOAD_DIR_MAX away from enumeration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 03/10] netfilter: conntrack: Remove unused variable declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 02/10] netfilter: Fix fall-through warnings for Clang
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 01/10] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 00/10] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] audit: log nftables configuration change events once per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Associate extra information to conntrack entries
  • From: Major Dávid <major.david@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
• [PATCH] nftables: add flags offload to flowtable
  • From: Frank Wunderlich <linux@xxxxxxxxx>
• Re: [PATCH libnetfilter_conntrack] conntrack: Don't use ICMP attrs in decision to build repl tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH] audit: log nftables configuration change events once per table
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net 8/9] netfilter: flowtable: Make sure GC works periodically in idle system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 9/9] netfilter: nftables: skip hook overlap logic if flowtable is stale
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/9] Revert "netfilter: x_tables: Update remaining dereference to RCU"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 6/9] netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 7/9] netfilter: nftables: allow to update flowtable flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/9] netfilter: x_tables: Use correct memory barriers.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/9] netfilter: conntrack: Fix gre tunneling over ipv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/9] Revert "netfilter: x_tables: Switch synchronization to RCU"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/9] netfilter: ctnetlink: fix dump of the expect mask attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/9] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack] conntrack: Don't use ICMP attrs in decision to build repl tuple
  • From: Luuk Paulussen <luuk.paulussen@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] audit: log nftables configuration change events once per table
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH] audit: log nftables configuration change events once per table
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] audit: log nftables configuration change events once per table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] audit: log nftables configuration change events once per table
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH nft 6/6] src: allow arbitary chain name in implicit rule add case
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft 6/6] src: allow arbitary chain name in implicit rule add case
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Bug when updating ICMP flows using conntrack tools
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 6/6] src: allow arbitary chain name in implicit rule add case
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 6/6] src: allow arbitary chain name in implicit rule add case
  • From: Phil Sutter <phil@xxxxxx>
• Bug when updating ICMP flows using conntrack tools
  • From: Luuk Paulussen <Luuk.Paulussen@xxxxxxxxxxxxxxxxxxx>
• [nf-next,v2] netfilter: nftables: update table flags from the commit phase
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nftables: update table flags from the commit phase
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: nftables: missing transaction object on flowtable deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: flowtable: Make sure GC works periodically in idle system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH][nft,v2] conntrack: Fix gre tunneling over ipv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: conntrack: Remove unused variable declaration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RESEND][next] netfilter: Fix fall-through warnings for Clang
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: shell: flowtable add after delete in batch
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nftables: missing transaction object on flowtable deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nftables: skip hook overlap logic if flowtable is stale
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 1/8] conntrack: reset optind in do_parse
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• Re: [PATCH v3 4/8] conntrack: introduce ct_cmd_list
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• Re: [PATCH v3 3/8] conntrack: per-command entries counters
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH nf-next,v2 5/6] netfilter: flowtable: call dst_check() to fall back to classic forwarding
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 1/6] netfilter: flowtable: consolidate skb_try_make_writable() call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 4/6] netfilter: flowtable: fast NAT functions never fail
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 3/6] netfilter: flowtable: move FLOW_OFFLOAD_DIR_MAX away from enumeration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 2/6] netfilter: flowtable: move skb_try_make_writable() before NAT in IPv4
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 6/6] netfilter: flowtable: refresh timeout after dst and writable checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: flowtable: Make sure GC works periodically in idle system
  • From: Simon Horman <simon.horman@xxxxxxxxxxxxx>
• Ethernet Frame capture with nfqueue
  • From: ilker <ilkery@xxxxxxxxx>
• [PATCH 2/2,v2] netfilter: nftables: allow to update flowtable flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: flowtable: move FLOW_OFFLOAD_DIR_MAX away from enumeration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: flowtable: fast NAT functions never fail
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: flowtable: consolidate skb_try_make_writable() call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nftables: allow to update flowtable flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [syzbot] KMSAN: uninit-value in iptable_mangle_hook (5)
  • From: syzbot <syzbot+9b5e12c49c015d4c1aeb@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] segtree: release single element already contained in an interval
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 5/6] scanner: support arbitrary chain names
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 6/6] src: allow arbitary chain name in implicit rule add case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/6] arbirary table/chain names
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/6] scanner: add support for scope nesting
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/6] scanner: support arbitary table names
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/6] scanner: counter: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/6] scanner: log: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• CFS for Netdev 0x15 open!
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: fix dump of the expect mask attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 0/3] Don't use RCU for x_tables synchronization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 1/8] conntrack: reset optind in do_parse
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 4/8] conntrack: introduce ct_cmd_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 3/8] conntrack: per-command entries counters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 4/6] conntrack: pass cmd to filter nat, mark and network functions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 5/6] conntrack: move options flag to ct_cmd object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 1/6] conntrack: pass command object to callbacks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 6/6] conntrack: add function to print command stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 3/6] conntrack: pass cmd to nfct_filter()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack 2/6] conntrack: pass ct_cmd to nfct_filter_init()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: ctnetlink: fix dump of the expect mask attribute
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: xtables-addons-3.17 fail build on armv7 with musl libc
  • From: Milan P. Stanić <mps@xxxxxxxxxxx>
• Re: [PATCH net-next 23/23] net: ethernet: mtk_eth_soc: fix parsing packets in GDM
  • From: Felix Fietkau <nbd@xxxxxxxx>
• Re: [PATCH net-next 00/23] netfilter: flowtable enhancements
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net-next 00/23] netfilter: flowtable enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 00/23] netfilter: flowtable enhancements
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: xtables-addons-3.17 fail build on armv7 with musl libc
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v2 0/3] Don't use RCU for x_tables synchronization
  • From: Tyler Hicks <tyhicks@xxxxxxxxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH 2/2] tests: conntrackd: silence sysctl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [conntrack-tools PATCH 1/2] tests: conntrackd: add testcase for missing hashtable buckets and max entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 12/12] scanner: secmark: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 11/12] scanner: move until,over,used keywords away from init state
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 10/12] scanner: quota: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 09/12] scanner: limit: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 06/12] scanner: arp: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 08/12] scanner: vlan: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 07/12] scanner: remove saddr/daddr from initial state
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 04/12] scanner: add fib scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 03/12] scanner: ip6: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 05/12] scanner: add ether scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 01/12] scanner: ct: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 02/12] scanner: ip: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 00/12] move more keywords away from initial scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: move remaining cache in rule.c function to cache.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] netfilter: conntrack: Remove unused variable declaration
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets
  • From: Marc Aurèle La France <tsi@xxxxxxxxxx>
• [PATCH net-next 23/23] net: ethernet: mtk_eth_soc: fix parsing packets in GDM
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 22/23] net: ethernet: mtk_eth_soc: add flow offloading support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 20/23] dsa: slave: add support for TC_SETUP_FT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 21/23] net: ethernet: mtk_eth_soc: add support for initializing the PPE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 19/23] netfilter: flowtable: support for FLOW_ACTION_PPPOE_PUSH
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 18/23] net: flow_offload: add FLOW_ACTION_PPPOE_PUSH
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 17/23] netfilter: flowtable: bridge vlan hardware offload and switchdev
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 16/23] netfilter: nft_flow_offload: use direct xmit if hardware offload is enabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 14/23] selftests: netfilter: flowtable bridge and vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 15/23] netfilter: flowtable: add offload support for xmit path types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 10/23] netfilter: flowtable: add vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 13/23] netfilter: flowtable: add dsa support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 12/23] netfilter: flowtable: add pppoe support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 11/23] netfilter: flowtable: add bridge vlan filtering support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 09/23] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 07/23] netfilter: flowtable: add xmit path types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 08/23] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 05/23] net: ppp: resolve forwarding path for bridge pppoe devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 06/23] net: dsa: resolve forwarding path for dsa slave ports
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 03/23] net: bridge: resolve forwarding path for bridge devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 04/23] net: bridge: resolve forwarding path for VLAN tag actions in bridge devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 02/23] net: 8021q: resolve forwarding path for vlan devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 01/23] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 00/23] netfilter: flowtable enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets
  • From: Marc Aurèle La France <tsi@xxxxxxxxxx>
• [conntrack-tools PATCH 2/2] tests: conntrackd: silence sysctl
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [conntrack-tools PATCH 1/2] tests: conntrackd: add testcase for missing hashtable buckets and max entries
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH RFC nf-next 0/2] ct helper object name matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC nf-next 0/2] ct helper object name matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH RFC nf-next 0/2] ct helper object name matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nftables: add NFT_CT_HELPER_OBJNAME
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nftables: rename NFT_CT_HELPER to NFT_CT_HELPER_TYPE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [libnftnl PATCH 04/10] object: Fix for wrong parameter passed to snprintf callback
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 03/10] obj/ct_timeout: Fix snprintf buffer length updates
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 02/10] obj/ct_expect: Fix snprintf buffer length updates
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 10/10] ruleset: Eliminate tag and separator helpers
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 07/10] obj: Drop type parameter from snprintf callback
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 08/10] Drop pointless local variable in snprintf callbacks
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 09/10] Get rid of single option switch statements
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 06/10] expr/data_reg: Drop output_format parameter
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 00/10] Kill non-default output leftovers
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 05/10] expr: Check output type once and for all
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 01/10] expr: Fix snprintf buffer length updates
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] nftables: xt: fix misprint in nft_xt_compatible_revision
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] nftables: xt: fix misprint in nft_xt_compatible_revision
  • From: Pavel Tikhomirov <ptikhomirov@xxxxxxxxxxxxx>
• [PATCH nft] nftables: xt: fix misprint in nft_xt_compatible_revision
  • From: Pavel Tikhomirov <ptikhomirov@xxxxxxxxxxxxx>
• [PATCH v25 18/25] LSM: security_secid_to_secctx in netlink netfilter
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v25 16/25] LSM: Use lsmcontext in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v25 15/25] LSM: Ensure the correct LSM context releaser
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v25 08/25] LSM: Use lsmblob in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v25 07/25] LSM: Use lsmblob in security_secctx_to_secid
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [libnftnl PATCH 5/5] expr: data_reg: Reduce indenting level a bit
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] net: bridge: fix error return code of do_update_counters()
  • From: Jia-Ju Bai <baijiaju1990@xxxxxxxxx>
• Re: [HEADS UP] bugzilla.netfilter.org is under maintainance
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 3/3] netfilter: x_tables: Use correct memory barriers.
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] net: bridge: fix error return code of do_update_counters()
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] doc: use symbolic names for chain priorities
  • From: Simon Ruderich <simon@xxxxxxxxxxxx>
• Re: [RFC PATCH] doc: use symbolic names for chain priorities
  • From: Simon Ruderich <simon@xxxxxxxxxxxx>
• Re: [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrackd: set default hashtable buckets and max entries if not specified
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH conntrack-tools] conntrackd: set default hashtable buckets and max entries if not specified
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets
  • From: Marc Aurèle La France <tsi@xxxxxxxxxx>
• [PATCH] net: bridge: fix error return code of do_update_counters()
  • From: Jia-Ju Bai <baijiaju1990@xxxxxxxxx>
• Re: [PATCH 0/3] Minor documentation improvements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [HEADS UP] bugzilla.netfilter.org is under maintainance
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• xtables-addons-3.17 fail build on armv7 with musl libc
  • From: Milan P. Stanić <mps@xxxxxxxxxxx>
• [PATCH nft 6/6] scanner: socket: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 5/6] scanner: rt: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/6] scanner: introduce start condition stack
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/6] scanner: ipsec: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/6] scanner: queue: move to own scope
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/6] scanner rework part 1
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/6] scanner: remove unused tokens
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets
  • From: Marc Aurèle La France <tsi@xxxxxxxxxx>
• Re: {PATCH nf] x_tables: Allow REJECT targets in PREROUTING chains
  • From: Marc Aurèle La France <tsi@xxxxxxxxxx>
• [PATCH conntrack-tools] conntrackd: set default hashtable buckets and max entries if not specified
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] tests/py: Fix for missing JSON equivalent in any/ct.t.json
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] mnl: Set NFTNL_SET_DATA_TYPE before dumping set elements
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] set_elem: Fix printing of verdict map elements
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] tests/py: Adjust payloads for fixed nat statement dumps
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] expr/{masq,nat}: Don't print unused regs
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 0/5] A few cosmetic changes
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 2/5] expr/tunnel: Kill dead code
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 5/5] expr: data_reg: Reduce indenting level a bit
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 3/5] expr/xfrm: Kill dead code
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 1/5] expr/socket: Kill dead code
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH 4/5] rule: Avoid printing trailing spaces
  • From: Phil Sutter <phil@xxxxxx>
• Re: {PATCH nf] x_tables: Allow REJECT targets in PREROUTING chains
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC PATCH] doc: use symbolic names for chain priorities
  • From: Frank Myhr <fmyhr@xxxxxxxxxxx>
• Re: [RFC PATCH] doc: use symbolic names for chain priorities
  • From: Simon Ruderich <simon@xxxxxxxxxxxx>
• [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets
  • From: Marc Aurèle La France <tsi@xxxxxxxxxx>
• [PATCH v2 3/3] netfilter: x_tables: Use correct memory barriers.
  • From: Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
• [PATCH v2 2/3] Revert "netfilter: x_tables: Switch synchronization to RCU"
  • From: Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
• [PATCH v2 1/3] Revert "netfilter: x_tables: Update remaining dereference to RCU"
  • From: Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
• [PATCH v2 0/3] Don't use RCU for x_tables synchronization
  • From: Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
• {PATCH nf] x_tables: Allow REJECT targets in PREROUTING chains
  • From: Marc Aurèle La France <tsi@xxxxxxxxxx>
• Re: [RFC PATCH] doc: use symbolic names for chain priorities
  • From: Frank Myhr <fmyhr@xxxxxxxxxxx>
• [RFC PATCH] doc: use symbolic names for chain priorities
  • From: Simon Ruderich <simon@xxxxxxxxxxxx>
• [PATCH 0/3] Minor documentation improvements
  • From: Simon Ruderich <simon@xxxxxxxxxxxx>
• [PATCH 2/3] doc: remove duplicate tables in synproxy example
  • From: Simon Ruderich <simon@xxxxxxxxxxxx>
• [PATCH 3/3] doc: move drop rule on a separate line in blackhole example
  • From: Simon Ruderich <simon@xxxxxxxxxxxx>
• [PATCH 1/3] doc: add * to include example to actually include files
  • From: Simon Ruderich <simon@xxxxxxxxxxxx>
• Re: [PATCH net 1/9] uapi: nfnetlink_cthelper.h: fix userspace compilation error
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net 3/9] netfilter: nf_nat: undo erroneous tcp edemux lookup
  • From: Mika Penttilä <mika.penttila@xxxxxxxxxxxx>
• Re: [PATCH net 3/9] netfilter: nf_nat: undo erroneous tcp edemux lookup
  • From: Mika Penttilä <mika.penttila@xxxxxxxxxxxx>
• [PATCH net 4/9] netfilter: conntrack: avoid misleading 'invalid' in log message
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 8/9] netfilter: nftables: fix possible double hook unregistration with table owner
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/9] netfilter: conntrack: Remove a double space in a log message
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/9] selftests: netfilter: test nat port clash resolution interaction with tcp early demux
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/9] netfilter: nf_nat: undo erroneous tcp edemux lookup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 9/9] netfilter: nftables: bogus check for netlink portID with table owner
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/9] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 6/9] netfilter: x_tables: gpf inside xt_find_revision()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/9] uapi: nfnetlink_cthelper.h: fix userspace compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 7/9] netfilter: nftables: disallow updates on table ownership
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 2/3] parser: compact map RHS type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] expression: memleak in verdict_expr_parse_udata()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Kernel Error FLOW OFFLOAD on nftables
  • From: Frank Myhr <fmyhr@xxxxxxxxxxx>
• Kernel Error FLOW OFFLOAD on nftables
  • From: Максим <maxbur89@xxxxxxxxx>
• [PATCH RESEND][next] netfilter: Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH 3/3] netfilter: x_tables: Use correct memory barriers.
  • From: Mark Tomlinson <Mark.Tomlinson@xxxxxxxxxxxxxxxxxxx>
• [PATCH nft,v2] mnl: remove nft_mnl_socket_reopen()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH][nft,v2] conntrack: Fix gre tunneling over ipv6
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH][nft,v2] conntrack: Fix gre tunneling over ipv6
  • From: Ludovic Senecaux <linuxludo@xxxxxxx>
• Re: [PATCH 3/3] netfilter: x_tables: Use correct memory barriers.
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/3] Revert "netfilter: x_tables: Switch synchronization to RCU"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/3] Revert "netfilter: x_tables: Update remaining dereference to RCU"
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/2] netfilter: nftables: bogus check for netlink portID with table owner
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2,v2] netfilter: nftables: fix possible double hook unregistration with table owner
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nftables: fix possible double hook unregistration with table owner
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/3] netfilter: x_tables: Use correct memory barriers.
  • From: Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
• [PATCH 2/3] Revert "netfilter: x_tables: Switch synchronization to RCU"
  • From: Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
• [PATCH 0/3] Don't use RCU for x_tables synchronization
  • From: Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
• [PATCH 1/3] Revert "netfilter: x_tables: Update remaining dereference to RCU"
  • From: Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Fix GRE over IPv6 with conntrack module
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/3] parser: compact ct obj list types
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] parser: compact map RHS type
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] parser: squash duplicated spec/specid rules
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: Fix GRE over IPv6 with conntrack module
  • From: linuxludo@xxxxxxx
• RE: [PATCH] netfilter: Fix GRE over IPv6 with conntrack module
  • From: Ludovic Sénécaux <linuxludo@xxxxxxx>
• Re: [PATCH] netfilter: Fix GRE over IPv6 with conntrack module
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: Fix GRE over IPv6 with conntrack module
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Fix GRE over IPv6 with conntrack module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues
  • From: Oz Shlomo <ozsh@xxxxxxxxxx>
• [PATCH] netfilter: Fix GRE over IPv6 with conntrack module
  • From: linuxludo@xxxxxxx
• Re: [nf:master 7/7] net/netfilter/nf_tables_api.c:920:15: warning: converting the enum constant to a boolean
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH 1/2] xtables-translate: Fix translation of odd netmasks
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] libxtables: Simplify xtables_ipmask_to_cidr() a bit
  • From: Phil Sutter <phil@xxxxxx>
• [nf:master 7/7] net/netfilter/nf_tables_api.c:920:15: warning: converting the enum constant to a boolean
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH nft] mnl: remove nft_mnl_socket_reopen()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] cache: memleak list of chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] table: support for the table owner flag
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] table: add table owner support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH] xtables-addons 3.15 doesn't compile on 32-bit x86
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• RE: [PATCH] xtables-addons 3.15 doesn't compile on 32-bit x86
  • From: <andy@xxxxxxxxxxxxx>
• linux-next: Fixes tag needs some work in the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Remove a double space in a log message
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: gpf inside xt_find_revision()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] uapi: nfnetlink_cthelper.h: fix userspace compilation error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/3] netfilter: nat: fix ancient dnat+edemux bug
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nftables: disallow updates on table ownership
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: gpf inside xt_find_revision()
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: gpf inside xt_find_revision()
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [PATCH nf 3/3] selftests: netfilter: test nat port clash resolution interaction with tcp early demux
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/3] netfilter: conntrack: avoid misleading 'invalid' in log message
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/3] netfilter: nf_nat: undo erroneous tcp edemux lookup
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 0/3] netfilter: nat: fix ancient dnat+edemux bug
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH iptables-nft] iptables-nft: fix -Z option
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables-nft] iptables-nft: fix -Z option
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] xtables-addons 3.15 doesn't compile on 32-bit x86
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: increasing ip_list_tot in net/netfilter/xt_recent.c for a non-modular kernel
  • From: Toralf Förster <toralf.foerster@xxxxxx>
• Re: increasing ip_list_tot in net/netfilter/xt_recent.c for a non-modular kernel
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: increasing ip_list_tot in net/netfilter/xt_recent.c for a non-modular kernel
  • From: Toralf Förster <toralf.foerster@xxxxxx>
• [PATCH] uapi: nfnetlink_cthelper.h: fix userspace compilation error
  • From: "Dmitry V. Levin" <ldv@xxxxxxxxxxxx>
• Re: increasing ip_list_tot in net/netfilter/xt_recent.c for a non-modular kernel
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH nft] table: rework flags printing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• increasing ip_list_tot in net/netfilter/xt_recent.c for a non-modular kernel
  • From: Toralf Förster <toralf.foerster@xxxxxx>
• Re: [nft PATCH 2/2] doc: nft: fix some typos and formatting issues
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 1/2] main: fix nft --help output fallout from 719e4427
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: allow use of 'verdict' in typeof definitions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH 2/2] doc: nft: fix some typos and formatting issues
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• [nft PATCH 1/2] main: fix nft --help output fallout from 719e4427
  • From: Štěpán Němec <snemec@xxxxxxxxxx>
• [PATCH] xtables-addons 3.15 doesn't compile on 32-bit x86
  • From: <andy@xxxxxxxxxxxxx>
• [PATCH] netfilter: Remove a double space in a log message
  • From: Klemen Košir <klemen.kosir@xxxxxxxx>
• [ANNOUNCE] ipset 7.11 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [iptables PATCH] nft: Fix bitwise expression avoidance detection
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] json: init parser state for every new buffer/file
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] json: init parser state for every new buffer/file
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH libnetfilter_queue v3] src: fix IPv6 header handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 2/2 v2] Avoid out of bounds read from data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [libnftnl PATCH 2/2 v2] Avoid out of bounds read from data
  • From: Maya Rashish <mrashish@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [libnftnl PATCH 1/2] Avoid out of bound reads in tests.
  • From: Maya Rashish <mrashish@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [libnftnl PATCH 2/2] Avoid out of bounds read from data
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH 1/2] Avoid out of bound reads in tests.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ebtables PATCH] Open the lockfile with O_CLOEXEC
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>