Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Optimize class-based IP prefix matches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: INFO: task hung in hub_port_init
  • From: Oliver Neukum <oneukum@xxxxxxx>
• INFO: task hung in hub_port_init
  • From: syzbot <syzbot+74d6ef051d3d2eacf428@xxxxxxxxxxxxxxxxxxxxxxxxx>
• INFO: task hung in usb_get_descriptor
  • From: syzbot <syzbot+31ae6d17d115e980fd14@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: connection timeout after re-register
  • From: fruggeri@xxxxxxxxxx (Francesco Ruggeri)
• Re: [iptables PATCH 3/3] libxtables: Register multiple extensions in ascending order
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 2/3] libxtables: Simplify pending extension registration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 2/3] nft: Fix error reporting for refreshed transactions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 1/3] nft: Make batch_add_chain() return the added batch object
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v8 net-next] ipvs: inspect reply packets from DR/TUN real servers
  • From: Julian Anastasov <ja@xxxxxx>
• [iptables PATCH 2/3] nft: Fix error reporting for refreshed transactions
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/3] nft: Make batch_add_chain() return the added batch object
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/3] nft: Fix for concurrent noflush restore calls
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/3] nft: Fix transaction refreshing
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 00/11] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 10/11] netfilter: nf_tables: Enable fast nft_cmp for inverted matches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/11] netfilter: nfnetlink: place subsys mutexes in distinct lockdep classes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/11] netfilter: nf_tables: Implement fast bitwise expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/11] netfilter: nf_tables: Remove ununsed function nft_data_debug
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/11] netfilter: conntrack: proc: rename stat column
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/11] netfilter: nf_tables: use nla_memdup to copy udata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/11] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/11] netfilter: ipset: enable memory accounting for ipset allocations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/11] netfilter: nf_tables_offload: Remove unused macro FLOW_SETUP_BLOCK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/11] netfilter: nf_tables: fix userdata memleak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/11] ipvs: Remove unused macros
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/11] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [net-next PATCH 2/2] net: netfilter: Implement fast bitwise expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [net-next PATCH 1/2 v2] net: netfilter: Enable fast nft_cmp for inverted matches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nfnetlink: place subsys mutexes in distinct lockdep classes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] ipset: enable memory accounting for ipset allocations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nf_tables_offload: Remove unused macro FLOW_SETUP_BLOCK
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v6] ipvs: adjust the debug info in function set_tcp_state
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• [PATCH v6] ipvs: inspect reply packets from DR/TUN real servers
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v5] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH v5] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• [PATCH 1/1] Solves Bug 1462 - `nft -j list set` does not show counters
  • From: Gopal Yadav <gopunop@xxxxxxxxx>
• Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH v4] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• Re: [PATCH v4] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [iptables PATCH] iptables-nft: fix basechain policy configuration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [net-next PATCH 1/2 v2] net: netfilter: Enable fast nft_cmp for inverted matches
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] iptables-nft: fix basechain policy configuration
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] iptables-nft: fix basechain policy configuration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] iptables-nft: fix basechain policy configuration
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] iptables-nft: fix basechain policy configuration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] iptables-nft: fix basechain policy configuration
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: nfnetlink: place subsys mutexes in distinct lockdep classes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] iptables-nft: fix basechain policy configuration
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: iptables-nft-restore issue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Optimize class-based IP prefix matches
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables-nft-restore issue
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Optimize class-based IP prefix matches
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] nft: Optimize class-based IP prefix matches
  • From: Phil Sutter <phil@xxxxxx>
• Re: [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches
  • From: Florian Westphal <fw@xxxxxxxxx>
• [net-next PATCH 2/2] net: netfilter: Implement fast bitwise expression
  • From: Phil Sutter <phil@xxxxxx>
• [net-next PATCH 0/2] netfilter: Improve inverted IP prefix matches
  • From: Phil Sutter <phil@xxxxxx>
• [net-next PATCH 1/2] net: netfilter: Enable fast nft_cmp for inverted matches
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] nft: migrate man page examples with `meter` directive to sets
  • From: Devin Bayer <dev@xxxxxxxxx>
• Re: [PATCH] nft: migrate man page examples with `meter` directive to sets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] nft: migrate man page examples with `meter` directive to sets
  • From: Devin Bayer <dev@xxxxxxxxx>
• Re: [PATCH v3] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: Julian Anastasov <ja@xxxxxx>
• Re: iptables-nft-restore issue
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables-nft-restore issue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables-nft-restore issue
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables-nft-restore issue
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] evaluate: Reject quoted strings containing only wildcard
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: use nla_memdup to copy udata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: fix userdata memleak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• iptables-nft-restore issue
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Fix for broken address mask match detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1 nf] selftests: netfilter: add time counter check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5] ipvs: adjust the debug info in function set_tcp_state
  • From: yue longguang <yuelongguang@xxxxxxxxx>
• [PATCH libnetfilter_queue] doc: build: Reduce size of doxygen.cfg and doxygen build o/p
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH v5] ipvs: adjust the debug info in function set_tcp_state
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH libnetfilter_queue] src: doc: Fix doxygen warning
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH v3] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• Re: [PATCH v2] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: BUG: unable to handle kernel paging request in dqput
  • From: Jan Kara <jack@xxxxxxx>
• [PATCH 2/2] tests: conntrack -L/-D ip family filtering
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 1/2] conntrack: -L/-D both ipv4/6 if no family is given
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 0/2] conntrack: -L/-D both ipv4/6 if no family is given
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• nftables bug?? Maybe
  • From: Evgeniy Yakubov <yacudzer@xxxxxxx>
• [PATCH v2] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• Re: [PATCH] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: yue longguang <yuelongguang@xxxxxxxxx>
• [PATCH] ipvs: Add traffic statistic up even it is VS/DR or VS/TUN mode
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• Re: [PATCH v5] ipvs: adjust the debug info in function set_tcp_state
  • From: yue longguang <yuelongguang@xxxxxxxxx>
• Re: KASAN: use-after-free Read in tcf_action_init
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: general protection fault in strncasecmp
  • From: syzbot <syzbot+459a5dce0b4cb70fd076@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [iptables PATCH] nft: Fix for broken address mask match detection
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v4 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: use nla_memdup to copy udata
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [nftables] counter not working on kernel 5.6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] evaluate: Reject quoted strings containing only wildcard
  • From: Phil Sutter <phil@xxxxxx>
• KASAN: use-after-free Read in tcf_action_init
  • From: syzbot <syzbot+9f43bb6a66ff96a21931@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [nftables] counter not working on kernel 5.6
  • From: Gopal Yadav <gopunop@xxxxxxxxx>
• [PATCH v5] ipvs: adjust the debug info in function set_tcp_state
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• Re: [PATCH v4] ipvs: adjust the debug info in function set_tcp_state
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH v4] ipvs: adjust the debug info in function set_tcp_state
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: fix userdata memleak
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: BUG: unable to handle kernel paging request in dqput
  • From: Takashi Iwai <tiwai@xxxxxxx>
• BUG: unable to handle kernel paging request in dqput
  • From: syzbot <syzbot+f816042a7ae2225f25ba@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/8] Fast bulk transfers of large sets of ct entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/8] Fast bulk transfers of large sets of ct entries
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 2/8] conntrack: fix icmp entry creation
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 3/8] conntrack: accept parameters from stdin
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 5/8] tests: conntrack parameters from stdin
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 6/8] conntrack: implement options output format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 7/8] conntrack.8: man update for opts format support
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 4/8] conntrack.8: man update for stdin params support
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 1/8] tests: icmp entry create/delete
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 0/8] Fast bulk transfers of large sets of ct entries
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [PATCH 8/8] tests: dumping ct entries in opts format
  • From: Mikhail Sennikovsky <mikhail.sennikovskii@xxxxxxxxxxxxxxx>
• [nftables] dynamic flag missing from wiki and using counter
  • From: Gopal Yadav <gopunop@xxxxxxxxx>
• Re: [PATCH] ipset: enable memory accounting for ipset allocations
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH v2] ipset: enable memory accounting for ipset allocations
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: [PATCH] ipset: enable memory accounting for ipset allocations
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH] ipset: enable memory accounting for ipset allocations
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• [nft PATCH] evaluate: Reject quoted strings containing only wildcard
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] ipvs: adjust the debug order of src and dst
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH 1/1 nf] selftests: netfilter: add time counter check
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• Re: [PATCH] ipvs: adjust the debug order of src and dst
  • From: Julian Anastasov <ja@xxxxxx>
• [iptables PATCH v2 01/10] nft: Fix selective chain compatibility checks
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 04/10] nft: Eliminate nft_chain_list_get()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 05/10] nft: cache: Move nft_chain_find() over
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 08/10] nft: cache: Sort custom chains by name
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 07/10] nft: Introduce a dedicated base chain array
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 06/10] nft: Introduce struct nft_chain
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 00/10] nft: Sorted chain listing et al.
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 10/10] nft: Avoid pointless table/chain creation
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 02/10] nft: Implement nft_chain_foreach()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 03/10] nft: cache: Introduce nft_cache_add_chain()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 09/10] tests: shell: Drop any dump sorting in place
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 0/3] libxtables: Fix for pointless socket() calls
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v3 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH] ipvs: adjust the debug order of src and dst
  • From: Andrew Lunn <andrew@xxxxxxx>
• Re: [iptables PATCH 0/3] libxtables: Fix for pointless socket() calls
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH] ipvs: adjust the debug order of src and dst
  • From: yue longguang <yuelongguang@xxxxxxxxx>
• [PATCH] ipvs: adjust the debug order of src and dst
  • From: "longguang.yue" <bigclouds@xxxxxxx>
• [iptables PATCH 3/3] libxtables: Register multiple extensions in ascending order
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/3] libxtables: Fix for pointless socket() calls
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/3] libxtables: Simplify pending extension registration
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect (with test)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect (with test)
  • From: Gopal <gopunop@xxxxxxxxx>
• Re: UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn
  • From: syzbot <syzbot+9b64b619f10f19d19a7c@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_immediate: No increment ctx->level for NFT_GOTO
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nf] selftests: netfilter: add cpu counter check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: Remove unused macros
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: conntrack: proc: rename stat column
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] parser_bison: fail when specifying multiple comments
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libmnl] doxygen: Fixed link to the git source tree on the website.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• KMSAN: uninit-value in gc_worker (3)
  • From: syzbot <syzbot+b3dbc715a0b6201346f4@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nftables 3/3] src: add comment support for chains
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH libnftnl 2/3] chain: add userdata and comment support
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_chain
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH 0/3] add userdata and comment support for chains
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2
  • From: syzbot <syzbot+845923d2172947529b58@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: Remove unused macros
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• 0x14: slides and papers posted
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH iptables 1/4] xtables: Do not register matches/targets with incompatible revision
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net-next] netfilter: nf_tables_offload: Remove unused macro FLOW_SETUP_BLOCK
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• [PATCH net-next] ipvs: Remove unused macros
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• [PATCH AUTOSEL 5.4 215/330] netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Jacob Keller <jacob.e.keller@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• Re: [oss-drivers] [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Simon Horman <simon.horman@xxxxxxxxxxxxx>
• Re: [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] netfilter: nf_tables: Remove ununsed function nft_data_debug
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect
  • From: Gopal Yadav <gopunop@xxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Miquel Raynal <miquel.raynal@xxxxxxxxxxx>
• Re: [Intel-gfx] [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Jani Nikula <jani.nikula@xxxxxxxxxxxxxxx>
• [PATCH libmnl] doxygen: Fixed link to the git source tree on the website.
  • From: igo95862 <igo95862@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: context tracking for multiple transport protocols
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: py: flush log file output before running each command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] evaluate: remove one indent level in __expr_evaluate_payload()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• Re: [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] mnl: larger receive socket buffer for netlink errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] libnftables: avoid repeated command list traversal on errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables] TODO: Replace yy_switch_to_buffer by yypop_buffer_state and yypush_buffer_state
  • From: Gopal Yadav <gopunop@xxxxxxxxx>
• [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect
  • From: Gopal Yadav <gopunop@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Robin Murphy <robin.murphy@xxxxxxx>
• [iptables] Multiple labels simultaneously
  • From: Amiq Nahas <m992493@xxxxxxxxx>
• [PATCH nftables] parser_bison: fail when specifying multiple comments
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Matthias Brugger <matthias.bgg@xxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Ilya Dryomov <idryomov@xxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Steffen Maier <maier@xxxxxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Felipe Balbi <balbi@xxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: <Nicolas.Ferre@xxxxxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Wolfram Sang <wsa@xxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Jason Gunthorpe <jgg@xxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Keith Busch <kbusch@xxxxxxxxxx>
• Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: "Gustavo A. R. Silva" <gustavo@xxxxxxxxxxxxxx>
• [trivial PATCH] treewide: Convert switch/case fallthrough; to break;
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: [PATCH 1/3 nf] selftests: netfilter: add cpu counter check
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/3 nf] selftests: netfilter: remove unused cnt and simplify command testing
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH 2/3 nf] selftests: netfilter: fix nft_meta.sh error reporting
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH 1/3 nf] selftests: netfilter: add cpu counter check
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• Re: [PATCH 00/13] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] net/netfilter: fix a typo for nf_conntrack_proto_dccp.c
  • From: Simon Horman <simon.horman@xxxxxxxxxxxxx>
• Re: [nftables] TODO: Replace yy_switch_to_buffer by yypop_buffer_state and yypush_buffer_state
  • From: Gopal Yadav <gopunop@xxxxxxxxx>
• Re: [nftables] TODO: Replace yy_switch_to_buffer by yypop_buffer_state and yypush_buffer_state
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] net/netfilter: fix a typo for nf_conntrack_proto_dccp.c
  • From: Wang Qing <wangqing@xxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: proc: rename stat column
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 02/13] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/13] netfilter: ip6t_NPT: rewrite addresses in ICMPv6 original packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/13] netfilter: nf_tables: add userdata attributes to nft_table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/13] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/13] netfilter: conntrack: do not increment two error counters at same time
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/13] netfilter: conntrack: remove ignore stats
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/13] netfilter: conntrack: add clash resolution stat counter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/13] netfilter: xt_HMARK: Use ip_is_fragment() helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/13] ipvs: remove dependency on ip6_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/13] netfilter: conntrack: remove unneeded nf_ct_put
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/13] netfilter: ebt_stp: Remove unused macro BPDU_TYPE_TCN
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/13] netfilter: nf_tables: add userdata support for nft_object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/13] netfilter: nft_socket: add wildcard support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/13] selftests/net: replace obsolete NFT_CHAIN configuration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/5] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: ctnetlink: add a range check for l3/l4 protonum
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl 2/3] object: add userdata and comment support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 3/3] src: add comment support for objects
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3, v2] netfilter: nf_tables: add userdata support for nft_object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: John Fastabend <john.fastabend@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxx>
• [nftables] TODO: Replace yy_switch_to_buffer by yypop_buffer_state and yypush_buffer_state
  • From: Gopal Yadav <gopunop@xxxxxxxxx>
• [PATCH 3/5] netfilter: ctnetlink: fix mark based dump filtering regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/5] netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5] netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/3, v2] netfilter: nf_tables: add userdata support for nft_object
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH net-next] netfilter: ebt_stp: Remove unused macro BPDU_TYPE_TCN
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] build: check whether dot is available when configuring doxygen.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_tables: add userdata support for nft_object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1 net-next] selftests/net: replace obsolete NFT_CHAIN configuration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-net] netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: fix mark based dump filtering regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnetfilter_queue] build: check whether dot is available when configuring doxygen.
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• INFO: trying to register non-static key in update_defense_level
  • From: syzbot <syzbot+80eac45c3b92882289f6@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/1 net-next] selftests/net: replace obsolete NFT_CHAIN configuration
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [PATCH AUTOSEL 5.8 04/53] netfilter: conntrack: allow sctp hearbeat after connection re-use
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.8 06/53] netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.4 03/43] netfilter: conntrack: allow sctp hearbeat after connection re-use
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 03/26] netfilter: conntrack: allow sctp hearbeat after connection re-use
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH libnetfilter_queue] build: check whether dot is available when configuring doxygen.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH net-net] netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
  • From: Simon Horman <simon.horman@xxxxxxxxxxxxx>
• Re: Can someone please update libnetfilter_queue online documentation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: Can someone please update libnetfilter_queue online documentation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Can someone please update libnetfilter_queue online documentation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: John Fastabend <john.fastabend@xxxxxxxxx>
• [PATCH nf] netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next] netfilter: ebt_stp: Remove unused macro BPDU_TYPE_TCN
  • From: Wang Hai <wanghai38@xxxxxxxxxx>
• Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• [PATCH nft,v4] mergesort: find base value expression type via recursion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v3] mergesort: find base value expression type via recursion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] mergesort: find base value expression type via recursion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nftables 3/3, v2] src: add comment support for objects
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH nf,v3] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: nftables: fix documentation for dup statement
  • From: Quentin Armitage <quentin@xxxxxxxxxxxxxxx>
• RE: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: John Fastabend <john.fastabend@xxxxxxxxx>
• Re: [PATCH nf,v3] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v3] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf,v3] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v2] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v2] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nftables 3/3] src: add comment support for objects
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH libnftnl 2/3] object: add userdata and comment support
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: nf_tables: add userdata support for nft_object
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH 0/3] add object userdata and comment support
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: William Mcvicker <willmcvicker@xxxxxxxxxx>
• Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: Will Deacon <will@xxxxxxxxxx>
• [PATCH nf] netfilter: ctnetlink: fix mark based dump filtering regression
  • From: Martin Willi <martin@xxxxxxxxxxxxxx>
• Re: [PATCHv5 net-next] ipvs: remove dependency on ip6_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/8] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCHv5 net-next] ipvs: remove dependency on ip6_tables
  • From: Julian Anastasov <ja@xxxxxx>
• inserting rule at the top of the chain using libnftnl
  • From: JM <jeevhi@xxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix documentation for dup statement
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2] build: bump supported kernel version to 5.9.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 1/2] xt_ACCOUNT: update prototype of `struct nf_sockopt_ops` `.set` call-back.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH 2/2] build: bump supported kernel version to 5.9.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH xtables-addons] build: don't hard-code pkg-config.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH xtables-addons] build: don't hard-code pkg-config.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCH 3/8] selftests: netfilter: fix header example
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/8] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/8] selftests: netfilter: exit on invalid parameters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/8] selftests: netfilter: remove unused variable in make_file()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/8] selftests: netfilter: simplify command testing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/8] selftests: netfilter: add command usage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: conntrack: do not auto-delete clash entries on reply
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/8] netfilter: delete repeated words
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH xtables-addons] build: clean some extra build artefacts.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH xtables-addons] build: clean some extra build artefacts.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• KMSAN: uninit-value in translate_table
  • From: syzbot <syzbot+1b3443758a99dc0f4ac6@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH xtables-addons] build: clean some extra build artefacts.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH nftables v2 5/5] tests: allow tests/monitor to use a custom nft executable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv5 net-next] ipvs: remove dependency on ip6_tables
  • From: Yaroslav Bolyukin <iam@xxxxxxx>
• Re: [PATCH nftables v2 5/5] tests: allow tests/monitor to use a custom nft executable
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nftables v2 2/5] src/scanner.l: fix whitespace issue for the TRANSPARENT keyword
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables v2 1/5] socket: add support for "wildcard" key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables v2 3/5] doc: added documentation on "socket wildcard"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables v2 4/5] tests: added "socket wildcard" testcases
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables v2 5/5] tests: allow tests/monitor to use a custom nft executable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: nft_socket: add wildcard support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv4 net-next] Remove ipvs v6 dependency on iptables
  • From: Yaroslav Bolyukin <iam@xxxxxxx>
• Re: [PATCH] Remove ipvs v6 dependency on iptables
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] Remove ipvs v6 dependency on iptables
  • From: Yaroslav Bolyukin <iam@xxxxxxx>
• [PATCH nftables v2 5/5] tests: allow tests/monitor to use a custom nft executable
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [PATCH nftables v2 4/5] tests: added "socket wildcard" testcases
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [PATCH nftables v2 3/5] doc: added documentation on "socket wildcard"
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [PATCH nftables v2 2/5] src/scanner.l: fix whitespace issue for the TRANSPARENT keyword
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [PATCH nftables v2 1/5] socket: add support for "wildcard" key
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [no subject]
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [PATCH nf-next v2] netfilter: nft_socket: add wildcard support
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_socket: add wildcard support
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_socket: add wildcard support
  • From: kernel test robot <lkp@xxxxxxxxx>
• RE: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: John Fastabend <john.fastabend@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error
  • From: Tong Zhang <ztong0001@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error
  • From: Tong Zhang <ztong0001@xxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: xt_HMARK: Use ip_is_fragment() helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: revisit conntrack statistics
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables v2 3/3] src: add comment support when adding tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl 2/3] table: add userdata support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 1/3] netfilter: nf_tables: add userdata attributes to nft_table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: No increment ctx->level for NFT_GOTO
  • From: Steve Hill <steve@xxxxxxxxxxxx>
• Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH V2 1/5 nf] selftests: netfilter: fix header example
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net: netfilter: delete repeated words
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: do not auto-delete clash entries on reply
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables 1/4] socket: add support for "wildcard" key
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_socket: add wildcard support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] Remove ipvs v6 dependency on iptables
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH nf-next v3 0/3] Netfilter egress hook
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH nf-next v3 0/3] Netfilter egress hook
  • From: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
• [PATCH] Remove ipvs v6 dependency on iptables
  • From: Lach <iam@xxxxxxx>
• Re: [PATCH] Remove ipvs v6 dependency on iptables
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] Remove ipvs v6 dependency on iptables
  • From: Lach <iam@xxxxxxx>
• Re: [PATCH] netfilter: nftables: fix documentation for dup statement
  • From: Quentin Armitage <quentin@xxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix documentation for dup statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix documentation for dup statement
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: coalesce multiple notifications into one skbuff
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nftables: fix documentation for dup statement
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: nftables: fix documentation for dup statement
  • From: Quentin Armitage <quentin@xxxxxxxxxxxxxxx>
• Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net-next] netfilter: xt_HMARK: Use ip_is_fragment() helper
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH nf-next v3 0/3] Netfilter egress hook
  • From: Laura García Liébana <nevola@xxxxxxxxx>
• [PATCH nf-next v3 2/3] netfilter: Generalize ingress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nf-next v3 1/3] netfilter: Rename ingress hook include file
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nf-next v3 3/3] netfilter: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nf-next v3 0/3] Netfilter egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH lnf-conntrack] include: add CTA_STATS_CLASH_RESOLVE
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH conntrack-tools] conntrack: add support for CLASH_RESOLVED counter
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 4/4] netfilter: conntrack: remove unneeded nf_ct_put
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/4] netfilter: conntrack: add clash resolution stat counter
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/4] netfilter: conntrack: remove ignore stats
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/4] netfilter: conntrack: do not increment two error counters at same time
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/4] netfilter: revisit conntrack statistics
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: conntrack: do not auto-delete clash entries on reply
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: Will McVicker <willmcvicker@xxxxxxxxxx>
• [PATCH v3 0/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: Will McVicker <willmcvicker@xxxxxxxxxx>
• [PATCH AUTOSEL 5.8 23/63] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.7 22/54] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.4 18/38] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [PATCH 0/6] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Phil Sutter <phil@xxxxxx>
• Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/6] netfilter: conntrack: allow sctp hearbeat after connection re-use
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/6] netfilter: nf_tables: add NFTA_SET_USERDATA if not null
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/6] netfilter: nft_set_rbtree: Handle outcomes of tree rotations in overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/6] netfilter: nf_tables: fix destination register zeroing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/6] netfilter: nf_tables: incorrect enum nft_list_attributes definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/6] netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/6] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH V2 5/5 nf] selftests: netfilter: add command usage
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH V2 4/5 nf] selftests: netfilter: simplify command testing
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH V2 3/5 nf] selftests: netfilter: remove unused variable in make_file()
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH V2 2/5 nf] selftests: netfilter: exit on invalid parameters
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH V2 1/5 nf] selftests: netfilter: fix header example
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net: netfilter: delete repeated words
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] net: netfilter: delete repeated words
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nftables 1/4] socket: add support for "wildcard" key
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nftables 2/4] doc: added documentation on "socket wildcard"
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nftables 3/4] tests: added "socked wildcard" testcases
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nftables 4/4] tests: allow tests to use a custom nft executable
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nf-next v2 1/3] netfilter: nf_tables: add userdata attributes to nft_table
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_table
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• [PATCH nftables 0/4] socket: add support for "wildcard" key
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [PATCH nftables 3/4] tests: added "socked wildcard" testcases
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [PATCH nftables 4/4] tests: allow tests to use a custom nft executable
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [PATCH nftables 2/4] doc: added documentation on "socket wildcard"
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• [PATCH nftables 1/4] socket: add support for "wildcard" key
  • From: Balazs Scheidler <bazsi77@xxxxxxxxx>
• nfnetlink: Busy-loop in nfnetlink_rcv_msg()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 02/13] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 08/13] audit: add containerid support for user records
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] nft_set_rbtree: Two fixes for overlap detection on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH AUTOSEL 5.7 55/61] netfilter: nf_tables: report EEXIST on overlaps
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH nftables v2 3/3] src: add comment support when adding tables
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH AUTOSEL 5.8 56/62] netfilter: nf_tables: report EEXIST on overlaps
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nf_tables: fix destination register zeroing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2] src: add chain hashtable cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: add chain hashtable cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: add expression handler hashtable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf v2] netfilter: nf_tables: fix destination register zeroing
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: fix destination register zeroing
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 3/3] netfilter: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nft v2] nftables: dump raw element info from libnftnl when netlink debugging is on
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] nftables: dump raw element info from libnftnl when netlink debugging is on
  • From: Florian Westphal <fw@xxxxxxxxx>
• bridge firewall "bypass" using VLAN 0 stacking
  • From: Etienne Champetier <champetier.etienne@xxxxxxxxx>
• [PATCH libnftnl] libnftnl: export nftnl_set_elem_fprintf
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: nf_tables: add NFTA_SET_USERDATA if not null
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_tables: incorrect enum nft_list_attributes definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: conntrack: allow sctp hearbeat after connection re-use
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 3/3] netfilter: Introduce egress hook
  • From: Lukas Wunner <lukas@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_table
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nftables 3/3] src: add comment support when adding tables
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH 0/3] Add userdata and comment support for tables
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH libnftnl 2/3] table: add userdata support
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nft] mergesort: unbreak listing with binops
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: sets: Check rbtree overlap detection after tree rotations
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_set_rbtree: revisit partial overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nf 1/2] nft_set_rbtree: Handle outcomes of tree rotations in overlap detection
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nf 2/2] nft_set_rbtree: Detect partial overlap with start endpoint match
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nf 0/2] nft_set_rbtree: Two fixes for overlap detection on insert
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [iptables] connlabel, increase the number of labels supported
  • From: Amiq Nahas <m992493@xxxxxxxxx>
• [iptables PATCH 3/4] nft: Fold nftnl_rule_list_chain_save() into caller
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/4] nft: Use nft_chain_find() in nft_chain_builtin_init()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/4] nft: Extend use of nftnl_chain_list_foreach()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/4] nft: cache: Check consistency with NFT_CL_FAKE, too
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 0/4] ordered chain listing fallout
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2 nf] selftests: netfilter: exit on invalid parameters
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH nf v2] netfilter: conntrack: allow sctp hearbeat after connection re-use
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 2/2 nf] selftests: netfilter: exit on invalid parameters
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• KASAN: slab-out-of-bounds Write in xt_compat_target_from_user
  • From: syzbot <syzbot+cfc0247ac173f597aaaa@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [iptables] Use ipset with conntrack module
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables] Use ipset with conntrack module
  • From: Amiq Nahas <m992493@xxxxxxxxx>
• [PATCH nft] src: add comment support for map too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] Makefile: Add missing man pages to CLEANFILES
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] Makefile: Add missing man pages to CLEANFILES
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 0/8] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/8] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/8] selftests: netfilter: add checktool function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: nft_compat: remove flush counter optimization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/8] selftests: netfilter: add MTU arguments to flowtables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: ebtables: reject bogus getopt len value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/8] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/8] selftests: netfilter: kill running process only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/8] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/8] netfilter: nf_tables: free chain context when BINDING flag is missing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_conntrack_sip: fix parsing error
  • From: Tong Zhang <ztong0001@xxxxxxxxx>
• iptables: undefined symbol xtables_fini
  • From: Amiq Nahas <m992493@xxxxxxxxx>
• [PATCH nf] netfilter: nft_set_rbtree: revisit partial overlap detection
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nf] selftests: netfilter: exit on invalid parameters
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH 1/2 nf] selftests: netfilter: fix header example
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• KMSAN: uninit-value in __skb_checksum_complete (5)
  • From: syzbot <syzbot+b024befb3ca7990fea37@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nftables: permit any priority for nat hooks
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter/ebtables: reject bogus getopt len value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH lnf-conntrack] conntrack: sctp: update states
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH lnf-conntrack] conntrack: dccp print function should use dccp state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: allow sctp hearbeat after connection re-use
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH lnf-conntrack] conntrack: sctp: update states
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH lnf-conntrack] conntrack: dccp print function should use dccp state
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter/ebtables: reject bogus getopt len value
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH nf] netfilter/ebtables: reject bogus getopt len value
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH nf] netfilter/ebtables: reject bogus getopt len value
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: WARNING in compat_do_ebt_get_ctl
  • From: syzbot <syzbot+5accb5c62faa1d346480@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 3/3 linux-next] selftests: netfilter: kill running process only
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3 linux-next] selftests: netfilter: add MTU arguments to flowtables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 linux-next] selftests: netfilter: add checktool function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: free chain context when BINDING flag is missing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: add comment support for set declarations
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] udata: add NFTNL_UDATA_SET_COMMENT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Fix for ruleset flush while restoring
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] xtables-monitor: Fix ip6tables rule printing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 2/2] tests: shell: Merge and extend return codes test
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v2 1/2] nft: Fix command name in ip6tables error message
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: iptables memory leak
  • From: Phil Sutter <phil@xxxxxx>
• iptables memory leak
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH nf] netfilter: free chain context when BINDING flag is missing
  • From: Florian Westphal <fw@xxxxxxxxx>
• KASAN: wild-memory-access Read in do_ebt_set_ctl
  • From: syzbot <syzbot+64d60892aaa4d4c34812@xxxxxxxxxxxxxxxxxxxxxxxxx>
• memory leak in nf_tables_addchain
  • From: syzbot <syzbot+c99868fde67014f7e9f5@xxxxxxxxxxxxxxxxxxxxxxxxx>
• general protection fault in ip6t_do_table (2)
  • From: syzbot <syzbot+dcaf7e1befbc40105535@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] src: add comment support for set declarations
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH libnftnl] udata: add NFTNL_UDATA_SET_COMMENT
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Julian Anastasov <ja@xxxxxx>
• [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Peilin Ye <yepeilin.cs@xxxxxxxxx>
• Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Peilin Ye <yepeilin.cs@xxxxxxxxx>
• Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Peilin Ye <yepeilin.cs@xxxxxxxxx>
• Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  • From: Peilin Ye <yepeilin.cs@xxxxxxxxx>
• [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_compat: remove flush counter optimization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf,v2] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_compat: remove flush counter optimization
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt
  • From: David Laight <David.Laight@xxxxxxxxxx>
• [PATCH 3/3 linux-next] selftests: netfilter: kill running process only
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH 2/3 linux-next] selftests: netfilter: add MTU arguments to flowtables
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• [PATCH 1/3 linux-next] selftests: netfilter: add checktool function
  • From: Fabian Frederick <fabf@xxxxxxxxx>
• Re: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [iptables PATCH] xtables-monitor: Fix ip6tables rule printing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 1/2] nft: Fix command name in ip6tables error message
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 2/2] tests: shell: Merge and extend return codes test
  • From: Phil Sutter <phil@xxxxxx>
• RE: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• WARNING in compat_do_ebt_get_ctl
  • From: syzbot <syzbot+5accb5c62faa1d346480@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v2] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet
  • From: Michael Zhou <mzhou@xxxxxxxxxxxxxxx>
• Re: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH nft] src: cache gets out of sync in interactive mode
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] tests: shell: Merge and extend return codes test
  • From: Phil Sutter <phil@xxxxxx>
• Re: xtables-addon official website changed from sourceforge to inai.de?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: xtables-addon official website changed from sourceforge to inai.de?
  • From: Amish <anon.amish@xxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: xtables-addon official website changed from sourceforge to inai.de?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• xtables-addon official website changed from sourceforge to inai.de?
  • From: Amish <anon.amish@xxxxxxxxx>
• Re: WARNING: refcount bug in l2cap_global_chan_by_psm
  • From: syzbot <syzbot+39ad9f042519082fcec9@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] segtree: memleaks in interval_map_decompose()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf,v2] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• Re: [PATCH 0/5] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 3/5] selftests: netfilter: add meta iif/oif match test
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/5] netfilter: flowtable: Set offload timeout when adding flow
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/5] netfilter: conntrack: Move nf_ct_offload_timeout to header file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/5] netfilter: nft_meta: fix iifgroup matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/5] netfilter: nft_compat: make sure xtables destructors have run
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/5] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: add cookie support for rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: add cookie support for rules
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• [PATCH nft] src: add cookie support for rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] udata: add cookie support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nft] tests: 0043concatenated_ranges_0: Fix checks for add/delete failures
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] tests: 0044interval_overlap_0: Repeat insertion tests with timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• Re: [PATCH 0/7] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: kernel BUG at lib/list_debug.c:45!
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: William Mcvicker <willmcvicker@xxxxxxxxxx>
• Re: KASAN: use-after-free Read in hci_chan_del
  • From: syzbot <syzbot+305a91e025a73e4fd6ce@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] tests: 0043concatenated_ranges_0: Fix checks for add/delete failures
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nft v2] tests: 0044interval_overlap_0: Repeat insertion tests with timeout
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] src: fix obj list output when reset command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: KASAN: use-after-free Write in __sco_sock_close
  • From: syzbot <syzbot+077eca30d3cb7c02b273@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 3/7] netfilter: Use fallthrough pseudo-keyword
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] netfilter: nf_tables: extended netlink error reporting for expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] netfilter: ip6tables: Remove redundant null checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] netfilter: nf_tables: report EEXIST on overlaps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: Replace HTTP links with HTTPS ones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/7] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_meta: fix iifgroup matching
  • From: "Demi M. Obenour" <demiobenour@xxxxxxxxx>
• Re: WARNING in hci_conn_timeout
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_meta: fix iifgroup matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nf_tables: report EEXIST on overlaps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nf_tables: extended netlink error reporting for expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/2] improve error reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_meta: fix iifgroup matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] selftests: netfilter: add meta iif/oif match test
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: WARNING in hci_conn_timeout
  • From: syzbot <syzbot+2446dd3cb07277388db6@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] src: fix obj list output when reset command
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: WARNING: ODEBUG bug in cancel_delayed_work
  • From: syzbot <syzbot+338f014a98367a08a114@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] evaluate: disregard ct address matching without family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[]
  • From: William Mcvicker <willmcvicker@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_compat: make sure xtables destructors have run
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• KASAN: null-ptr-deref Write in amp_read_loc_assoc_final_data
  • From: syzbot <syzbot+f4fb0eaafdb51c32a153@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [iptables PATCH] nft: Fix for ruleset flush while restoring
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft v3] src: enable output with "nft --echo --json" and nftables syntax
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>