Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Edward Cree <ecree.xilinx@xxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH nf v2] netfilter: x_tables: Switch synchronization to RCU
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• XFRM interface and NF_INET_LOCAL_OUT hook
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Andy Shevchenko <andy.shevchenko@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Sean Young <sean@xxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU
  • From: subashab@xxxxxxxxxxxxxx
• Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH net v3] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH xtables-addons 0/4] geoip: script fixes
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH xtables-addons 0/4] geoip: script fixes
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH 108/141] netfilter: ipt_REJECT: Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: "wanghai (M)" <wanghai38@xxxxxxxxxx>
• [PATCH net v3] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: Wang Hai <wanghai38@xxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 015/141] netfilter: Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Jason Gunthorpe <jgg@xxxxxxxxxx>
• Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next] netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal
  • From: Antoine Tenart <atenart@xxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Tom Rix <trix@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Rafael J. Wysocki" <rafael@xxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Jani Nikula <jani.nikula@xxxxxxxxxxxxxxx>
• Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: "wanghai (M)" <wanghai38@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH] json: echo: Speedup seqnum_to_json()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Sam Ravnborg <sam@xxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU
  • From: subashab@xxxxxxxxxxxxxx
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH nf] netfilter: x_tables: Switch synchronization to RCU
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH xtables-addons 0/4] geoip: script fixes
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Tom Rix <trix@xxxxxxxxxx>
• Re: [PATCH xtables-addons 2/4] geoip: fix man-page typo'.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Tom Rix <trix@xxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Matthew Wilcox <willy@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Alexander Lobakin <alobakin@xxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Tom Rix <trix@xxxxxxxxxx>
• [PATCH xtables-addons 4/4] geoip: use correct download URL for MaxMind DB's.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 3/4] geoip: add man-pages for MaxMind scripts.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 1/4] geoip: remove superfluous xt_geoip_fetch_maxmind script.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 2/4] geoip: fix man-page typo'.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 0/4] geoip: script fixes
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH] ipvs: replace atomic_add_return()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: Julian Anastasov <ja@xxxxxx>
• Re: ipset 7.7 modules fail to build on kernel 4.19.152
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: nftables_offload: set address type in control dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Alexander Lobakin <alobakin@xxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Matthew Wilcox <willy@xxxxxxxxxxxxx>
• Re: [PATCH net 1/4] netfilter: nftables_offload: set address type in control dissector
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
• Re: [RFC] MAINTAINERS tag for cleanup robot
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [RFC] MAINTAINERS tag for cleanup robot
  • From: trix@xxxxxxxxxx
• [PATCH net 3/4] netfilter: ipset: prevent uninit-value in hash_ip6_add
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 4/4] netfilter: nf_tables: avoid false-postive lockdep splat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/4] netfilter: nftables_offload: set address type in control dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/4] netfilter: nftables_offload: build mask based from the matching bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] json: echo: Speedup seqnum_to_json()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: use actual socket sk for REJECT action
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: subashab@xxxxxxxxxxxxxx
• Re: [PATCH 108/141] netfilter: ipt_REJECT: Fix fall-through warnings for Clang
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 015/141] netfilter: Fix fall-through warnings for Clang
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH v23 16/23] LSM: security_secid_to_secctx in netlink netfilter
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v23 14/23] LSM: Use lsmcontext in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v23 13/23] LSM: Ensure the correct LSM context releaser
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v23 06/23] LSM: Use lsmblob in security_secid_to_secctx
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v23 05/23] LSM: Use lsmblob in security_secctx_to_secid
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavo@xxxxxxxxxxxxxx>
• Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavo@xxxxxxxxxxxxxx>
• [nft PATCH] json: echo: Speedup seqnum_to_json()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 108/141] netfilter: ipt_REJECT: Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH 000/141] Fix fall-through warnings for Clang
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH 015/141] netfilter: Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• [PATCH 000/141] Fix fall-through warnings for Clang
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack.
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Alexander Lobakin <alobakin@xxxxx>
• Re: [ANNOUNCE] ipset 7.8 released
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: avoid false-postive lockdep splat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 5/9] bridge: resolve forwarding path for bridge devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 2/9] netfilter: flowtable: add xmit path types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 7/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 9/9] selftests: netfilter: flowtable bridge and VLAN support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 8/9] netfilter: flowtable: add vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 3/9] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 4/9] net: 8021q: resolve forwarding path for vlan devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v5 1/9] netfilter: flowtable: add hash offset field to tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
• Re: [PATCH net] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: "wanghai (M)" <wanghai38@xxxxxxxxxx>
• [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: Wang Hai <wanghai38@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 7.8 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack.
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: subashab@xxxxxxxxxxxxxx
• Re: [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack.
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [ANNOUNCE] ipset 7.8 released
  • From: Neutron Soutmun <neo.neutron@xxxxxxxxx>
• Re: [ANNOUNCE] ipset 7.8 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [ANNOUNCE] ipset 7.8 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [ANNOUNCE] ipset 7.8 released
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [ANNOUNCE] ipset 7.8 released
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: ipset 7.7 modules fail to build on kernel 4.19.152
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: avoid false-postive lockdep splat
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: ipset 7.7 modules fail to build on kernel 4.19.152
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH 5.9 000/255] 5.9.9-rc1 review
  • From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: Issues w/ db-ip country database
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH net] ipvs: fix possible memory leak in ip_vs_control_net_init
  • From: Wang Hai <wanghai38@xxxxxxxxxx>
• Re: [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module
  • From: Georg Kohmann <geokohma@xxxxxxxxx>
• Re: [MPTCP] WARNING: net/mptcp/protocol.c:719 mptcp_reset_timer+0x40/0x50
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• WARNING: net/mptcp/protocol.c:719 mptcp_reset_timer+0x40/0x50
  • From: Naresh Kamboju <naresh.kamboju@xxxxxxxxxx>
• Re: [PATCH net] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH net] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module
  • From: Georg Kohmann <geokohma@xxxxxxxxx>
• Re: [PATCH net-next,v4 2/9] netfilter: flowtable: add xmit path types
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next,v4 3/9] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers
  • From: "Georg Kohmann (geokohma)" <geokohma@xxxxxxxxx>
• [PATCH net-next,v4 3/9] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 8/9] netfilter: flowtable: add vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 9/9] selftests: netfilter: flowtable bridge and VLAN support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 5/9] bridge: resolve forwarding path for bridge devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 7/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 4/9] net: 8021q: resolve forwarding path for vlan devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 2/9] netfilter: flowtable: add xmit path types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v4 1/9] netfilter: flowtable: add hash offset field to tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: subashab@xxxxxxxxxxxxxx
• Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Nov 18 (net/ipv6/netfilter/nf_conntrack_reasm.o)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Will Deacon <will@xxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Will Deacon <will@xxxxxxxxxx>
• Re: [PATCH 5.9 000/255] 5.9.9-rc1 review
  • From: Naresh Kamboju <naresh.kamboju@xxxxxxxxxx>
• Re: Issues w/ db-ip country database
  • From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipvs: replace atomic_add_return()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: Issues w/ db-ip country database
  • From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
• Re: Issues w/ db-ip country database
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Issues w/ db-ip country database
  • From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
• [iptables PATCH 2/2] iptables-test.py: Try to unshare netns by default
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/2] iptables-test.py: Accept multiple test files on commandline
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] ebtables: Fix for broken chain renaming
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] ebtables: Fix for broken chain renaming
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] ebtables: Fix for broken chain renaming
  • From: Phil Sutter <phil@xxxxxx>
• Re: Issues w/ db-ip country database
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Issues w/ db-ip country database
  • From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: subashab@xxxxxxxxxxxxxx
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_reject: bridge: fix build errors due to code movement
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: subashab@xxxxxxxxxxxxxx
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH 0/3] Merge some common code
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/3] xshared: Merge some command option-related code
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/3] libxtables: Extend MAC address printing/parsing support
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/3] xtables-arp: Don't use ARPT_INV_*
  • From: Phil Sutter <phil@xxxxxx>
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis.
  • From: Numan Siddique <nusiddiq@xxxxxxxxxx>
• [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack.
  • From: nusiddiq@xxxxxxxxxx
• Re: [PATCH] tests: py: update format of registers in bitwise payloads.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_reject: bridge: fix build errors due to code movement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] MAINTAINERS: rectify file patterns for NETFILTER
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ipvs: replace atomic_add_return()
  • From: Yejune Deng <yejune.deng@xxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: subashab@xxxxxxxxxxxxxx
• [PATCH v2] netfilter: nfnl_acct: remove data from struct net
  • From: Wang Shanker <shankerwangmiao@xxxxxxxxx>
• Re: [PATCH] MAINTAINERS: rectify file patterns for NETFILTER
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH net-next] netfilter: nf_reject: bridge: fix build errors due to code movement
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH] tests: py: update format of registers in bitwise payloads.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH libnftnl 1/1] bitwise: improve formatting of registers in bitwise dumps.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH RFC v3] ipvs: add genetlink cmd to dump all services and destinations
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH] MAINTAINERS: rectify file patterns for NETFILTER
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl 1/1] bitwise: improve formatting of registers in bitwise dumps.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nfnl_acct: remove data from struct net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH] netfilter: nfnl_acct: remove data from struct net
  • From: Wang Shanker <shankerwangmiao@xxxxxxxxx>
• [PATCH libnftnl 0/1] Bitwise dump format fix.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnftnl 1/1] bitwise: improve formatting of registers in bitwise dumps.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Tobias Waldekranz <tobias@xxxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 3/9] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] x_tables: Properly close read section with read_seqcount_retry
  • From: Sean Tranchetti <stranche@xxxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next,v3 3/9] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next,v3 5/9] bridge: resolve forwarding path for bridge devices
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH nf,v2 2/2] netfilter: nftables_offload: build mask based from the matching bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v3 5/9] bridge: resolve forwarding path for bridge devices
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxx>
• Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 3/9] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 5/9] bridge: resolve forwarding path for bridge devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 9/9] selftests: netfilter: flowtable bridge and VLAN support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 8/9] netfilter: flowtable: add vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 7/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 2/9] netfilter: flowtable: add xmit path types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 1/9] netfilter: flowtable: add hash offset field to tuple
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 4/9] net: 8021q: resolve forwarding path for vlan devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers
  • From: Georg Kohmann <geokohma@xxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [PATCH v22 16/23] LSM: security_secid_to_secctx in netlink netfilter
  • From: James Morris <jmorris@xxxxxxxxx>
• Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules
  • From: Martin Willi <martin@xxxxxxxxxxxxxx>
• [PATCH RFC v3] ipvs: add genetlink cmd to dump all services and destinations
  • From: Cezar Sa Espinola <cezarsa@xxxxxxxxx>
• [iptables PATCH] tests/shell: Add test for bitwise avoidance fixes
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v22 16/23] LSM: security_secid_to_secctx in netlink netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis.
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis.
  • From: Numan Siddique <nusiddiq@xxxxxxxxxx>
• [nft PATCH] proto: Fix ARP header field ordering
  • From: Phil Sutter <phil@xxxxxx>
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis.
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis.
  • From: Numan Siddique <nusiddiq@xxxxxxxxxx>
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis.
  • From: Numan Siddique <nusiddiq@xxxxxxxxxx>
• Re: [PATCH v22 06/23] LSM: Use lsmblob in security_secid_to_secctx
  • From: James Morris <jmorris@xxxxxxxxx>
• Re: [PATCH v22 05/23] LSM: Use lsmblob in security_secctx_to_secid
  • From: James Morris <jmorris@xxxxxxxxx>
• Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers
  • From: "Georg Kohmann (geokohma)" <geokohma@xxxxxxxxx>
• Re: [PATCH] tests: py: remove duplicate payloads.
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC v2] ipvs: add genetlink cmd to dump all services and destinations
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis.
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH v2 4/4] tests: conntrack -L/-D ip family filtering
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v2 1/4] conntrack: accept commands from file
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v2 3/4] tests: saving and loading ct entries, save format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v2 2/4] conntrack.8: man update for --load-file support
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v2 0/4] conntrack: accept commands from file + tests
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH] tests: py: remove duplicate payloads.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers
  • From: Georg Kohmann <geokohma@xxxxxxxxx>
• Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] MAINTAINERS: rectify file patterns for NETFILTER
  • From: Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
• Re: ipset 7.7 modules fail to build on kernel 4.19.152
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: ipset 7.7 modules fail to build on kernel 4.19.152
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: ipset 7.7 modules fail to build on kernel 4.19.152
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: fix -Wformat
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH] netfilter: conntrack: fix -Wformat
  • From: Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
• Re: [PATCH] netfilter: nf_nat: Support fullcone NAT
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nf_nat: Support fullcone NAT
  • From: Paul Menzel <pmenzel@xxxxxxxxxxxxx>
• Re: [PATCH net v2] ipv6/netfilter: Discard first fragment not including all headers
  • From: "Georg Kohmann (geokohma)" <geokohma@xxxxxxxxx>
• Re: [PATCH net v2] ipv6/netfilter: Discard first fragment not including all headers
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH RFC v2] ipvs: add genetlink cmd to dump all services and destinations
  • From: Cezar Sa Espinola <cezarsa@xxxxxxxxx>
• [PATCH net v2] ipv6/netfilter: Discard first fragment not including all headers
  • From: Georg Kohmann <geokohma@xxxxxxxxx>
• [PATCH] netfilter: remove unused macro DUMP_INIT to tame gcc
  • From: Alex Shi <alex.shi@xxxxxxxxxxxxxxxxx>
• [PATCH] netfilter: Remove unnecessary conversion to bool
  • From: xiakaixu1987@xxxxxxxxx
• [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules
  • From: Martin Willi <martin@xxxxxxxxxxxxxx>
• Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nft 1/7] parser: merge sack-perm/sack-permitted and maxseg/mss
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft 1/7] parser: merge sack-perm/sack-permitted and maxseg/mss
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft 7/7] json: tcp: add raw tcp option match support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 6/7] tcp: add raw tcp option match support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 4/7] tcpopt: split tcpopt_hdr_fields into per-option enum
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/7] tcpopt: rename noop to nop
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/7] tcpopts: clean up parser -> tcpopt.c plumbing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/7] parser: merge sack-perm/sack-permitted and maxseg/mss
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/7] rework tcp option handling
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 0/8] Netfilter updates for net-next
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH v22 16/23] LSM: security_secid_to_secctx in netlink netfilter
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH nf 2/2] netfilter: nftables_offload: build mask based from the matching bytes
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH net] ipv6/netfilter: Discard first fragment not including all headers
  • From: "Georg Kohmann (geokohma)" <geokohma@xxxxxxxxx>
• [PATCH net-next 2/8] netfilter: nft_reject: unify reject init and dump into nft_reject
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 1/8] netfilter: nf_reject: add reject skbuff creation helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 6/8] netfilter: ipset: Expose the initval hash parameter to userspace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 8/8] netfilter: nft_reject_inet: allow to use reject from inet ingress
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 5/8] netfilter: ipset: Add bucketsize parameter to all hash types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 4/8] netfilter: ipset: Support the -exist flag with the destroy command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 7/8] netfilter: nftables: Add __printf() attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 3/8] netfilter: nft_reject: add reject verdict support for netdev
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 0/8] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/8] conntrack: accept parameters from stdin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] ipv6/netfilter: Discard first fragment not including all headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 2/2] ebtables: Optimize masked MAC address matches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 1/2] nft: Optimize class-based IP prefix matches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/2] src: Optimize prefix matches on byte-boundaries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/3] json: resolve multiple test case failures
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] ipv6/netfilter: Discard first fragment not including all headers
  • From: Georg Kohmann <geokohma@xxxxxxxxx>
• [PATCH nf 2/2] netfilter: nftables_offload: build mask based from the matching bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 1/2] netfilter: nftables_offload: set address type in control dissector
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 0/2] fixes for nftables offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nft 3/3] json: add missing nat_type flag and netmap nat flag
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/3] tests: avoid warning and add missing json test cases
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/3] tests: json: add missing test case output
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/3] json: resolve multiple test case failures
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations
  • From: Cezar Sá Espinola <cezarsa@xxxxxxxxx>
• Re: [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH conntrack] conntrack: do not allow to update offload status bits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack] conntrack: do not allow to update offload status bits
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 2/2] conntrack.8: man update for opts format support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] conntrack: implement save output format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 5/5] tests: py: add netdev folder and reject.t icmp cases
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 4/5] evaluate: add netdev support for reject default
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset 7.7 modules fail to build on kernel 4.19.152
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• ipset 7.7 modules fail to build on kernel 4.19.152
  • From: Oskar Berggren <oskar.berggren@xxxxxxxxx>
• Re: [PATCH] doc: correct chain name in example of adding a rule.
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] doc: correct chain name in example of adding a rule.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nf-next,v2] netfilter: nft_reject_inet: allow to use reject from inet ingress
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2] netfilter: nft_reject_inet: allow to use reject from inet ingress
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net 0/5] Netfilter fixes for net
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH net 4/5] netfilter: nf_tables: missing validation from the abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 5/5] netfilter: ipset: Update byte and packet counters regardless of whether they match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 3/5] netfilter: use actual socket sk rather than skb sk when routing harder
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 2/5] wireguard: selftests: check that route_me_harder packets use the right sk
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 1/5] netfilter: nftables: fix netlink report logic in flowtable and genid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] netfilter: ipset: Update byte and packet counters regardless of whether they match
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [ANNOUNCE] iptables 1.8.6 release
  • From: Phil Sutter <phil@xxxxxxxxxxxxx>
• Re: [PATCH 0/5] add support for reject verdict in netdev
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_reject_inet: allow to use reject from inet ingress
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] netfilter: ipset: Update byte and packet counters regardless of whether they match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations
  • From: Cezar Sa Espinola <cezarsa@xxxxxxxxx>
• [PATCH nft] tests: shell: exercise validate with nft -c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] raw2packet: fix comma instead of semicolon
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v2 1/2] nft: Optimize class-based IP prefix matches
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/2] ebtables: Optimize masked MAC address matches
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf] netfilter: nf_tables: missing validation from the abort path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/4] netfilter: ipset: Expose the initval hash parameter to userspace
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 2/4] netfilter: ipset: Support the -exist flag with the destroy command
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: ipset: Add bucketsize parameter to all hash types
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 1/4] netfilter: ipset: Update byte and packet counters regardless of whether they match
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [PATCH 0/4] ipset patches for nf-next
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• [nft PATCH] tests/shell: Improve fix in sets/0036add_set_element_expiration_0
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• [PATCH v2 2/2] conntrack.8: man update for opts format support
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v2 0/2] conntrack: save output format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH v2 1/2] conntrack: implement save output format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack] conntrack: add flush filter command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack] conntrack: add flush filter command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack-tools] conntrack: allow to flush per family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• [PATCH nf 1/2] wireguard: selftests: check that route_me_harder packets use the right sk
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• [PATCH nf 0/2] route_me_harder routing loop with tunnels
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH conntrack] conntrack: allow to filter event by family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH conntrack] conntrack: allow to filter event by family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 2/2] src: Optimize prefix matches on byte-boundaries
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/2] src: Optimize prefix matches on byte-boundaries
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/2] src: Support odd-sized payload matches
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH conntrack] conntrack: default to unspec family for dualstack setups
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] nftables 0.9.7 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [ANNOUNCE] libnftnl 1.1.8 release
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [UPDATES] Renewing Netfilter coreteam PGP keys
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• [iptables PATCH] tests: shell: Improve concurrent noflush restore test a bit
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls
  • From: Phil Sutter <phil@xxxxxx>
• Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH xtables-addons] pnock: pknlusr: mention the group ID command-line paramater in the man-page.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Saeed Mirzamohammadi <saeed.mirzamohammadi@xxxxxxxxxx>
• Re: [PATCH v3 1/1] uapi: Move constants from <linux/kernel.h> to <linux/const.h>
  • From: Petr Vorel <petr.vorel@xxxxxxxxx>
• [PATCH xtables-addons] pnock: pknlusr: mention the group ID command-line paramater in the man-page.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH xtables-addons v2 00/13] pknlusr improvements
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH xtables-addons v2 09/13] pknock: pknlusr: fix hard-coded netlink multicast group ID.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 10/13] pknock: xt_pknock: use IS_ENABLED.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 11/13] pknock: xt_pknock: use kzalloc.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 13/13] pknock: xt_pknock: remove DEBUG definition and disable debug output.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 12/13] pknock: xt_pknock: use `pr_err`.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 02/13] pknock: pknlusr: remove dest_addr and rename src_addr.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 03/13] pknock: pknlusr: tighten up variable scopes.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 08/13] pknock: pknlusr: always close socket.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 07/13] pknock: pknlusr: don't treat recv return value of zero as an error.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 05/13] pknock: pknlusr: use NLMSG macros and proper types, rather than arithmetic on char pointers.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 06/13] pknock: pknlusr: use macro to define inet_ntop buffer size.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 04/13] pknock: pknlusr: tidy up initialization of local address.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 00/13] pknlusr improvements
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 00/13] pknlusr improvements
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons v2 01/13] pknock: pknlusr: ensure man-page is included by `make dist`.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH xtables-addons 3/3] pknock: pknlusr: add man-page.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH xtables-addons 2/3] pknock: pknlusr: fix hard-coded netlink multicast group ID.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nft] Revert "monitor: do not print generation ID with --echo"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/8] conntrack: implement options output format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• Re: [PATCH xtables-addons 3/3] pknock: pknlusr: add man-page.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH xtables-addons 2/3] pknock: pknlusr: fix hard-coded netlink multicast group ID.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nftables: fix netlink report logic in flowtable and genid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/5] add support for reject verdict in netdev
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nftables 5/5] tests: py: add netdev folder and reject.t icmp cases
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nftables 4/5] evaluate: add netdev support for reject default
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nf-next 3/5] net: netfilter: add reject verdict support for netdev
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nf-next 2/5] net: netfilter: unify reject init and dump into nft_reject
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nf-next 1/5] net: netfilter: add reject skbuff creation helpers
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH 1/7] ipvs: adjust the debug info in function set_tcp_state
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH 0/7] Netfilter fixes for net
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH xtables-addons 0/3] pknlusr improvements
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 3/3] pknock: pknlusr: add man-page.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 2/3] pknock: pknlusr: fix hard-coded netlink multicast group ID.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH xtables-addons 1/3] pknock: pknlusr: fix formatting.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH 3/7] netfilter: Drop fragmented ndisc packets assembled in netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/7] netfilter: conntrack: connection timeout after re-register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] netfilter: nf_fwd_netdev: clear timestamp in forwarding path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] docs: nf_flowtable: fix typo.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: ebtables: Fixes dropping of small packets in bridge nat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] ipvs: adjust the debug info in function set_tcp_state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf,v3] netfilter: nf_fwd_netdev: clear timestamp in forwarding path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/8] conntrack: implement options output format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 6/8] conntrack: implement options output format
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v2 4/9] bridge: resolve forwarding path for bridge devices
  • From: Nikolay Aleksandrov <razor@xxxxxxxxxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Saeed Mirzamohammadi <saeed.mirzamohammadi@xxxxxxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nf,v2] netfilter: nf_dup_netdev: clear timestamp in forwarding path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_dup_netdev: clear timestamp in forwarding path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Network namespace, ipvlan and IPVS source NAT
  • From: Mahesh Bandewar (महेश बंडेवार) <maheshb@xxxxxxxxxx>
• [PATCH nft] monitor: do not print generation ID with --echo
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Network namespace, ipvlan and IPVS source NAT
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Saeed Mirzamohammadi <saeed.mirzamohammadi@xxxxxxxxxx>
• Re: [PATCH v5] ipvs: adjust the debug info in function set_tcp_state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net V2] netfilter: Drop fragmented ndisc packets assembled in netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] docs: nf_flowtable: fix typo.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Fixes dropping of small packets in bridge nat
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: Fix inconsistent of format with argument type in nf_nat_sip.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Network namespace, ipvlan and IPVS source NAT
  • From: Damien Claisse <d.claisse@xxxxxxxxxx>
• Re: [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] conntrack: fix zone sync issue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH linux-5.9 1/1] net: netfilter: fix KASAN: slab-out-of-bounds Read in nft_flow_rule_create
  • From: saeed.mirzamohammadi@xxxxxxxxxx
• [PATCH nft 2/2] src: improve rule error reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] rule: larger number of error locations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] expr: add nftnl_rule_del_expr()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v2 8/9] netfilter: flowtable: bridge port support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net-next,v2 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH] conntrack: fix zone sync issue
  • From: yang_y_yi@xxxxxxx
• [PATCH] conntrack: fix zone sync issue
  • From: yang_y_yi@xxxxxxx
• [PATCH AUTOSEL 5.8 086/101] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.4 69/80] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 50/56] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 46/52] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.4 29/33] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.9 37/41] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.9 092/111] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [PATCH] docs: nf_flowtable: fix typo.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH] docs: nf_flowtable: fix typo.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH libnfnl] expr: expose nftnl_expr_build_payload()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [bugreport] [5.10] warning at net/netfilter/nf_tables_api.c:622
  • From: Mikhail Gavrilov <mikhail.v.gavrilov@xxxxxxxxx>
• Re: bpf-next test error: BUG: program execution failed: executor 0: exit status 67
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• [bugreport] [5.10] warning at net/netfilter/nf_tables_api.c:622
  • From: Mikhail Gavrilov <mikhail.v.gavrilov@xxxxxxxxx>
• Re: [PATCH net-next,v2 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,v2 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [nft] Bug 1444 - Segfault
  • From: Gopal Yadav <gopunop@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH net-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: bpf-next test error: BUG: program execution failed: executor 0: exit status 67
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: bpf-next test error: BUG: program execution failed: executor 0: exit status 67
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: bpf-next test error: BUG: program execution failed: executor 0: exit status 67
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 7/9] netfilter: flowtable: add direct xmit path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 5/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 9/9] netfilter: flowtable: add vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 8/9] netfilter: flowtable: bridge port support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 4/9] bridge: resolve forwarding path for bridge devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 2/9] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 3/9] net: 8021q: resolve forwarding path for vlan devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 1/9] netfilter: flowtable: add xmit path types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,v2 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 9/9] netfilter: flowtable: add vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 9/9] netfilter: flowtable: add vlan support
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH nft] segtree: copy expr data to closing element
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: Fix kmemleak false positive reports
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: conntrack: Fix kmemleak false positive reports
  • From: Kavana Ravindra <kavana.c.ravindra@xxxxxxxxx>
• Re: selftests: netfilter: nft_nat.sh: /dev/stdin:2:9-15: Error: syntax error, unexpected counter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: ingress inet support
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 3/9] net: 8021q: resolve forwarding path for vlan devices
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH net-next] netfilter: restore NF_INET_NUMHOOKS
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: selftests: netfilter: nft_nat.sh: /dev/stdin:2:9-15: Error: syntax error, unexpected counter
  • From: Naresh Kamboju <naresh.kamboju@xxxxxxxxxx>
• [PATCH net-next 3/9] net: 8021q: resolve forwarding path for vlan devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 5/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 9/9] netfilter: flowtable: add vlan support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 7/9] netfilter: flowtable: add direct xmit path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 8/9] netfilter: flowtable: bridge port support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 4/9] bridge: resolve forwarding path for bridge devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 2/9] net: resolve forwarding path from virtual netdevice and HW destination address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 1/9] netfilter: flowtable: add xmit path types
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 0/9] netfilter: flowtable bridge and vlan enhancements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next] netfilter: restore NF_INET_NUMHOOKS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: selftests: netfilter: nft_nat.sh: /dev/stdin:2:9-15: Error: syntax error, unexpected counter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: ingress inet support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: ingress inet support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register
  • From: Francesco Ruggeri <fruggeri@xxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: restore NF_INET_NUMHOOKS
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: [PATCH nft] src: ingress inet support
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: restore NF_INET_NUMHOOKS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• iptables userspace API broken due to added value in nf_inet_hooks
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: iptables userspace API broken due to added value in nf_inet_hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables userspace API broken due to added value in nf_inet_hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Fixes dropping of small packets in bridge nat
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] Fixes dropping of small packets in bridge nat
  • From: <timothee.cocault@xxxxxxxxxx>
• selftests: netfilter: nft_nat.sh: /dev/stdin:2:9-15: Error: syntax error, unexpected counter
  • From: Naresh Kamboju <naresh.kamboju@xxxxxxxxxx>
• Re: WARNING: at net/netfilter/nf_tables_api.c:622 lockdep_nfnl_nft_mutex_not_held+0x28/0x38 [nf_tables]
  • From: Naresh Kamboju <naresh.kamboju@xxxxxxxxxx>
• Re: Bug: ebtables snat drops small packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls
  • From: Phil Sutter <phil@xxxxxx>
• Bug: ebtables snat drops small packets
  • From: <timothee.cocault@xxxxxxxxxx>
• WARNING: at net/netfilter/nf_tables_api.c:622 lockdep_nfnl_nft_mutex_not_held+0x28/0x38 [nf_tables]
  • From: Naresh Kamboju <naresh.kamboju@xxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] selftests: netfilter: extend nfqueue test case
  • From: patchwork-bot+netdevbpf@xxxxxxxxxx
• Re: [PATCH 0/4] Netfilter fixes for net
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/4] netfilter: nftables: extend error reporting for chain updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/4] ipvs: clear skb->tstamp in forwarding path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/4] netfilter: nf_log: missing vlan offload tag and proto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/4] selftests: netfilter: extend nfqueue test case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/4] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/8] conntrack: fix icmp entry creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/8] tests: icmp entry create/delete
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net V2] netfilter: Drop fragmented ndisc packets assembled in netfilter
  • From: Georg Kohmann <geokohma@xxxxxxxxx>
• [PATCH nft] src: ingress inet support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 06/10] nft: Introduce struct nft_chain
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 04/10] nft: Eliminate nft_chain_list_get()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 02/10] nft: Implement nft_chain_foreach()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH v2 01/10] nft: Fix selective chain compatibility checks
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 0/6] Netfilter/IPVS updates for net-next
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH nf] netfilter: nftables: extend error reporting for chain updates
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_log: missing vlan offload tag and proto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v21 16/23] LSM: security_secid_to_secctx in netlink netfilter
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: Drop fragmented ndisc packets assembled in netfilter
  • From: "Georg Kohmann (geokohma)" <geokohma@xxxxxxxxx>
• Re: [nft PATCH] json: Fix memleak in set_dtype_json()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: Drop fragmented ndisc packets assembled in netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 06/10] nft: Introduce struct nft_chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 04/10] nft: Eliminate nft_chain_list_get()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 03/10] nft: cache: Introduce nft_cache_add_chain()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 02/10] nft: Implement nft_chain_foreach()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 01/10] nft: Fix selective chain compatibility checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: flowtable: reduce calls to pskb_may_pull()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/6] netfilter: add nf_static_key_{inc,dec}
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: add inet ingress support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: add nf_ingress_hook() helper function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] netfilter: nf_tables: add inet ingress support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/6] ipvs: inspect reply packets from DR/TUN real servers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/6] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 0/3] tests: py: fixes for failing JSON tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v8 net-next] ipvs: inspect reply packets from DR/TUN real servers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] ipvs: clear skb->tstamp in forwarding path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] selftests: netfilter: extend nfqueue test case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: flowtable: reduce calls to pskb_may_pull()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] tests: py: add missing test JSON output for TCP flag tests.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft 2/3] tests: py: correct order of set elements in test JSON output.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH nft 1/3] tests: py: add missing JSON output for ct test.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>