Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl] udata: add cookie support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH nft] tests: 0043concatenated_ranges_0: Fix checks for add/delete failures
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] tests: 0044interval_overlap_0: Repeat insertion tests with timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v4] src: enable json echo output when reading native syntax
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: "Jose M. Guisado" <guigom@xxxxxxxxxx>
• Re: [PATCH 0/7] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: kernel BUG at lib/list_debug.c:45!
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
  • From: Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
• Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum
  • From: William Mcvicker <willmcvicker@xxxxxxxxxx>
• Re: KASAN: use-after-free Read in hci_chan_del
  • From: syzbot <syzbot+305a91e025a73e4fd6ce@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] tests: 0043concatenated_ranges_0: Fix checks for add/delete failures
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nft v2] tests: 0044interval_overlap_0: Repeat insertion tests with timeout
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] src: fix obj list output when reset command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: KASAN: use-after-free Write in __sco_sock_close
  • From: syzbot <syzbot+077eca30d3cb7c02b273@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 3/7] netfilter: Use fallthrough pseudo-keyword
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] netfilter: nf_tables: extended netlink error reporting for expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] netfilter: ip6tables: Remove redundant null checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] netfilter: nf_tables: report EEXIST on overlaps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: Replace HTTP links with HTTPS ones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/7] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/7] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_meta: fix iifgroup matching
  • From: "Demi M. Obenour" <demiobenour@xxxxxxxxx>
• Re: WARNING in hci_conn_timeout
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_meta: fix iifgroup matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nf_tables: report EEXIST on overlaps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nf_tables: extended netlink error reporting for expressions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/2] improve error reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_meta: fix iifgroup matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] selftests: netfilter: add meta iif/oif match test
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: WARNING in hci_conn_timeout
  • From: syzbot <syzbot+2446dd3cb07277388db6@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft] src: fix obj list output when reset command
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: WARNING: ODEBUG bug in cancel_delayed_work
  • From: syzbot <syzbot+338f014a98367a08a114@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] evaluate: disregard ct address matching without family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[]
  • From: William Mcvicker <willmcvicker@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_compat: make sure xtables destructors have run
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• KASAN: null-ptr-deref Write in amp_read_loc_assoc_final_data
  • From: syzbot <syzbot+f4fb0eaafdb51c32a153@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [iptables PATCH] nft: Fix for ruleset flush while restoring
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft v3] src: enable output with "nft --echo --json" and nftables syntax
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[]
  • From: William Mcvicker <willmcvicker@xxxxxxxxxx>
• [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• [PATCH nft v2 0/1] src: enable output with "nft --echo --json" and nftables syntax
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: TEST Re: [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet
  • From: Florian Westphal <fw@xxxxxxxxx>
• TEST Re: [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet
  • From: Michael Zhou <mzhou@xxxxxxxxxxxxxxx>
• [PATCH nft] src: enable output with "nft --echo --json" and nftables syntax
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: Moving from ipset to nftables: Sets not ready for prime time yet?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] nft: Eliminate table list from cache
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] nft: Eliminate table list from cache
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[]
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ip6tables: Remove redundant null checks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Replace HTTP links with HTTPS ones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 02/13] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nft] netlink_delinearize: transform binary operation to prefix only with values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] netlink_delinearize: transform binary operation to prefix only with values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH] json: Expect refcount increment by json_array_extend()
  • From: Phil Sutter <phil@xxxxxx>
• KASAN: vmalloc-out-of-bounds Read in get_counters
  • From: syzbot <syzbot+a450cb4aa95912e62487@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH 1/1] Improve detecting the kernel version logic
  • From: "Philip Prindeville" <philipp@xxxxxxxxxxxxxxxxxxxxx>
• Re: Xtables-addons 3.10 (Re: [PATCH 1/1] geoip: add quiet flag to xt_geoip_build)
  • From: Philip Prindeville <philipp_subx@xxxxxxxxxxxxxxxxxxxxx>
• [PATCH nft 2/3] src: remove cache lookups after the evaluation phase
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] evaluate: remove table from cache on delete table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] evaluate: flush set cache from the evaluation phase
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] evaluate: UAF in hook priority expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] evaluate: memleak in invalid default policy definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] parser_bison: memleak symbol redefinition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/3] evaluate: UAF in hook priority expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/3] evaluate: memleak in invalid default policy definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/3] parser_bison: memleak symbol redefinition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Xtables-addons 3.10 (Re: [PATCH 1/1] geoip: add quiet flag to xt_geoip_build)
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• RE: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH xtables-addons v2] doc: fix quoted string in libxt_DNETMAP man-page.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[]
  • From: Will McVicker <willmcvicker@xxxxxxxxxx>
• [PATCH 0/1] Netfilter OOB memory access security patch
  • From: Will McVicker <willmcvicker@xxxxxxxxxx>
• Re: [PATCH libnftnl] examples: add support for NF_PROTO_INET family
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH nft] nft: rearrange help output to group related options together
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t
  • From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
• RE: get rid of the address_space override in setsockopt v2
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: get rid of the address_space override in setsockopt v2
  • From: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• RE: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t
  • From: Ido Schimmel <idosch@xxxxxxxxxx>
• Re: [iptables PATCH 00/18] nft: Sorted chain listing et al.
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl] examples: add support for NF_PROTO_INET family
  • From: "Jose M. Guisado Gomez" <guigom@xxxxxxxxxx>
• Re: [iptables PATCH 00/18] nft: Sorted chain listing et al.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: get rid of the address_space override in setsockopt v2
  • From: David Laight <David.Laight@xxxxxxxxxx>
• [PATCH] netfilter: ip6tables: Remove redundant null checks
  • From: Gaurav Singh <gaurav1086@xxxxxxxxx>
• Re: [PATCH 1/1] geoip: add quiet flag to xt_geoip_build
  • From: Philip Prindeville <philipp@xxxxxxxxxxxxxxxxxxxxx>
• Re: [nft PATCH] nft: rearrange help output to group related options together
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: get rid of the address_space override in setsockopt v2
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: get rid of the address_space override in setsockopt v2
  • From: Andreas Schwab <schwab@xxxxxxxxxxxxxx>
• Re: get rid of the address_space override in setsockopt v2
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH v2] netfilter: Replace HTTP links with HTTPS ones
  • From: "Alexander A. Klimov" <grandmaster@xxxxxxxxxxxx>
• Re: [iptables PATCH 00/18] nft: Sorted chain listing et al.
  • From: Phil Sutter <phil@xxxxxx>
• Re: get rid of the address_space override in setsockopt v2
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH for v5.9] netfilter: Replace HTTP links with HTTPS ones
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v3] iptables: accept lock file name at runtime
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] nft: rearrange help output to group related options together
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 2/2] ipvs: fix the connection sync failed in some cases
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: nf_tables: fix nat hook table deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 04/26] net: add a new sockptr_t type
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 04/26] net: add a new sockptr_t type
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH 04/26] net: add a new sockptr_t type
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• RE: [PATCH 03/26] bpfilter: reject kernel addresses
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH 03/26] bpfilter: reject kernel addresses
  • From: "'Christoph Hellwig'" <hch@xxxxxx>
• RE: [PATCH 03/26] bpfilter: reject kernel addresses
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [iptables PATCH 00/18] nft: Sorted chain listing et al.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables] iptables: replace libnftnl table list by linux list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 13/26] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t
  • From: "'Christoph Hellwig'" <hch@xxxxxx>
• RE: [PATCH 13/26] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH 01/26] bpfilter: fix up a sparse annotation
  • From: Luc Van Oostenryck <luc.vanoostenryck@xxxxxxxxx>
• [nft PATCH 2] nft: rearrange help output to group related options together
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [nft PATCH] nft: rearrange help output to group related options together
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• Re: [MPTCP] [PATCH 25/26] net: pass a sockptr_t into ->setsockopt
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• Re: [MPTCP] [PATCH 08/26] net: switch sock_set_timeout to sockptr_t
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• [PATCH 03/26] bpfilter: reject kernel addresses
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 05/26] net: switch copy_bpf_fprog_from_user to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 04/26] net: add a new sockptr_t type
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 08/26] net: switch sock_set_timeout to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 07/26] net: switch sock_set_timeout to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 01/26] bpfilter: fix up a sparse annotation
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 09/26] net/xfrm: switch xfrm_user_policy to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 02/26] net/bpfilter: split __bpfilter_process_sockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• get rid of the address_space override in setsockopt v2
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 06/26] net: switch sock_setbindtodevice to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 11/26] netfilter: switch xt_copy_counters to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 13/26] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 10/26] netfilter: remove the unused user argument to do_update_counters
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 20/26] net/ipv6: factor out a ipv6_set_opt_hdr helper
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 21/26] net/ipv6: switch do_ipv6_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 22/26] net/udp: switch udp_lib_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 23/26] net/tcp: switch ->md5_parse to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 15/26] net/ipv4: merge ip_options_get and ip_options_get_from_user
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 16/26] net/ipv4: switch do_ip_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 24/26] net/tcp: switch do_tcp_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 17/26] net/ipv6: switch ip6_mroute_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 18/26] net/ipv6: split up ipv6_flowlabel_opt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 25/26] net: pass a sockptr_t into ->setsockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 26/26] net: optimize the sockptr_t for unified kernel/user address spaces
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 14/26] net/ipv4: switch ip_mroute_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH nft 2/2] tests: extend 0043concatenated_ranges_0 to cover maps too
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nft 1/2] netlink: fix concat range expansion in map case
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• LPC 2020 Networking and BPF Track CFP (Reminder)
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: get rid of the address_space override in setsockopt
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: KMSAN: uninit-value in __skb_checksum_complete (4)
  • From: Alexander Potapenko <glider@xxxxxxxxxx>
• [PATCH nft] evaluate: bail out with concatenations and singleton values
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Netdev conf 0x14 update and logistics
  • From: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
• [PATCH nft 2/2] tests: extend 0043concatenated_ranges_0 to cover maps too
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/2] netlink: fix concat range expansion in map case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH iptables] extensions: libxt_conntrack: provide translation for DNAT and SNAT --ctstate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [MPTCP] [PATCH 24/24] net: pass a sockptr_t into ->setsockopt
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• RE: get rid of the address_space override in setsockopt
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: get rid of the address_space override in setsockopt
  • From: "'Christoph Hellwig'" <hch@xxxxxx>
• Re: get rid of the address_space override in setsockopt
  • From: "'Christoph Hellwig'" <hch@xxxxxx>
• Re: [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t
  • From: "'Christoph Hellwig'" <hch@xxxxxx>
• Re: [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t
  • From: "'Christoph Hellwig'" <hch@xxxxxx>
• Re: get rid of the address_space override in setsockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 03/24] net: add a new sockptr_t type
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH] ipvs: add missing struct name in ip_vs_enqueue_expire_nodest_conns when CONFIG_SYSCTL is disabled
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH,v2] ipvs: fix the connection sync failed in some cases
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: add missing struct name in ip_vs_enqueue_expire_nodest_conns when CONFIG_SYSCTL is disabled
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 10/13] audit: add support for containerid to network namespaces
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH nft] evaluate: permit get element on maps
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/2] src: allow for negative value in variable definitions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] evaluate: replace variable expression by the value expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH xtables-addons v2] doc: fix quoted string in libxt_DNETMAP man-page.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• Re: [PATCH xtables-addons] doc: fix quoted string in libxt_DNETMAP man-page.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• RE: get rid of the address_space override in setsockopt
  • From: David Laight <David.Laight@xxxxxxxxxx>
• RE: [PATCH 03/24] net: add a new sockptr_t type
  • From: David Laight <David.Laight@xxxxxxxxxx>
• RE: [PATCH 03/24] net: add a new sockptr_t type
  • From: David Laight <David.Laight@xxxxxxxxxx>
• RE: get rid of the address_space override in setsockopt
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH xtables-addons] doc: fix quoted string in libxt_DNETMAP man-page.
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH xtables-addons] doc: fix quoted string in libxt_DNETMAP man-page.
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• RE: [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [PATCH 02/24] bpfilter: fix up a sparse annotation
  • From: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH 02/24] bpfilter: fix up a sparse annotation
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 02/24] bpfilter: fix up a sparse annotation
  • From: Luc Van Oostenryck <luc.vanoostenryck@xxxxxxxxx>
• [PATCH nft] rule: missing map command expansion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2] rule: flush set cache before flush command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] rule: flush set cache after flush command
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 24/24] net: pass a sockptr_t into ->setsockopt
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: get rid of the address_space override in setsockopt
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 03/24] net: add a new sockptr_t type
  • From: Eric Biggers <ebiggers@xxxxxxxxxx>
• Re: get rid of the address_space override in setsockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH 03/24] net: add a new sockptr_t type
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: get rid of the address_space override in setsockopt
  • From: Eric Biggers <ebiggers@xxxxxxxxxx>
• Re: [PATCH 03/24] net: add a new sockptr_t type
  • From: Eric Biggers <ebiggers@xxxxxxxxxx>
• [PATCH v4 14/24] netfilter: conntrack: Use sequence counter with associated spinlock
  • From: "Ahmed S. Darwish" <a.darwish@xxxxxxxxxxxxx>
• [PATCH v4 15/24] netfilter: nft_set_rbtree: Use sequence counter with associated rwlock
  • From: "Ahmed S. Darwish" <a.darwish@xxxxxxxxxxxxx>
• Re: [PATCH 24/24] net: pass a sockptr_t into ->setsockopt
  • From: Stefan Schmidt <stefan@xxxxxxxxxxxxxxxxxx>
• [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet
  • From: Michael Zhou <mzhou@xxxxxxxxxxxxxxx>
• [PATCH 01/24] bpfilter: reject kernel addresses
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 02/24] bpfilter: fix up a sparse annotation
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 05/24] net: switch sock_setbindtodevice to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 06/24] net: switch sock_set_timeout to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 03/24] net: add a new sockptr_t type
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 04/24] net: switch copy_bpf_fprog_from_user to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 07/24] net: switch sock_set_timeout to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• get rid of the address_space override in setsockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 09/24] netfilter: remove the unused user argument to do_update_counters
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 10/24] netfilter: switch xt_copy_counters to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 11/24] netfilter: switch nf_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 14/24] net/ipv4: merge ip_options_get and ip_options_get_from_user
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 15/24] net/ipv4: switch do_ip_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 16/24] net/ipv6: switch ip6_mroute_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 18/24] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 17/24] net/ipv6: split up ipv6_flowlabel_opt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 21/24] net/udp: switch udp_lib_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 19/24] net/ipv6: factor out a ipv6_set_opt_hdr helper
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 23/24] net/tcp: switch do_tcp_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 20/24] net/ipv6: switch do_ipv6_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 24/24] net: pass a sockptr_t into ->setsockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 22/24] net/tcp: switch ->md5_parse to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 13/24] net/ipv4: switch ip_mroute_setsockopt to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 08/24] net/xfrm: switch xfrm_user_policy to sockptr_t
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: sockopt cleanups
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: KMSAN: uninit-value in __skb_checksum_complete (4)
  • From: syzbot <syzbot+721b564cd88ebb710182@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member
  • From: "Gustavo A. R. Silva" <gustavo@xxxxxxxxxxxxxx>
• [PATCH for v5.9] netfilter: xtables: Replace HTTP links with HTTPS ones
  • From: "Alexander A. Klimov" <grandmaster@xxxxxxxxxxxx>
• [PATCH for v5.9] netfilter: Replace HTTP links with HTTPS ones
  • From: "Alexander A. Klimov" <grandmaster@xxxxxxxxxxxx>
• [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH,v2] ipvs: fix the connection sync failed in some cases
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH ghak90 V9 08/13] audit: add containerid support for user records
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH] ipvs: add missing struct name in ip_vs_enqueue_expire_nodest_conns when CONFIG_SYSCTL is disabled
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] ipvs: add missing struct name in ip_vs_enqueue_expire_nodest_conns when CONFIG_SYSCTL is disabled
  • From: Andrew Sy Kim <kim.andrewsy@xxxxxxxxx>
• Re: [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• [PATCH net-next] ipvs: missing unlock in ip_vs_expire_nodest_conn_flush()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [iptables PATCH v3] iptables: accept lock file name at runtime
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH] netfilter: include: uapi: Use C99 flexible array member
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH v3] iptables: accept lock file name at runtime
  • From: Giuseppe Scrivano <gscrivan@xxxxxxxxxx>
• Re: [nf-next PATCH] netfilter: include: uapi: Use C99 flexible array member
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 05/22] net: remove compat_sock_common_{get,set}sockopt
  • From: Stefan Schmidt <stefan@xxxxxxxxxxxxxxxxxx>
• Re: [iptables PATCH v3] iptables: accept lock file name at runtime
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [MPTCP] [PATCH 05/22] net: remove compat_sock_common_{get,set}sockopt
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• [iptables PATCH v3] iptables: accept lock file name at runtime
  • From: Giuseppe Scrivano <gscrivan@xxxxxxxxxx>
• Re: [iptables PATCH v2] iptables: accept lock file name at runtime
  • From: Giuseppe Scrivano <gscrivan@xxxxxxxxxx>
• Re: [PATCH 22/22] net: make ->{get,set}sockopt in proto_ops optional
  • From: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
• [PATCH 04/22] net: simplify cBPF setsockopt compat handling
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 02/22] net: streamline __sys_setsockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 01/22] net/atm: remove the atmdev_ops {get,set}sockopt methods
  • From: Christoph Hellwig <hch@xxxxxx>
• sockopt cleanups
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 05/22] net: remove compat_sock_common_{get,set}sockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 08/22] netfilter/ip_tables: clean up compat {get,set}sockopt handling
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 09/22] netfilter/ip6_tables: clean up compat {get,set}sockopt handling
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 10/22] netfilter/ebtables: clean up compat {get,set}sockopt handling
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 13/22] netfilter: split nf_sockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 11/22] netfilter: remove the compat_{get,set} methods
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 14/22] net/ipv4: factor out MCAST_MSFILTER getsockopt helpers
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 15/22] net/ipv4: factor out MCAST_MSFILTER setsockopt helpers
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 16/22] net/ipv4: factor out mcast join/leave setsockopt helpers
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 17/22] net/ipv4: remove compat_ip_{get,set}sockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 18/22] net/ipv6: factor out MCAST_MSFILTER getsockopt helpers
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 20/22] net/ipv6: factor out mcast join/leave setsockopt helpers
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 19/22] net/ipv6: factor out MCAST_MSFILTER setsockopt helpers
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 22/22] net: make ->{get,set}sockopt in proto_ops optional
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 21/22] net/ipv6: remove compat_ipv6_{get,set}sockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 12/22] netfilter: remove the compat argument to xt_copy_counters_from_user
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 07/22] netfilter/arp_tables: clean up compat {get,set}sockopt handling
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 06/22] net: remove compat_sys_{get,set}sockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 03/22] net: streamline __sys_getsockopt
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [iptables PATCH v2] iptables: accept lock file name at runtime
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 2/4] src: allow to use variables in flowtable and chain devices
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/4] tests: shell: remove check for reject from prerouting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/4] evaluate: use evaluate_expr_variable() for chain policy evaluation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/4] tests: shell: chmod 755 testcases/chains/0030create_0
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: ensure RCU read unlock when connection flushing and ipvs is disabled
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net-next] ipvs: ensure RCU read unlock when connection flushing and ipvs is disabled
  • From: Andrew Sy Kim <kim.andrewsy@xxxxxxxxx>
• Re: [nf-next:master 2/3] net/netfilter/ipvs/ip_vs_conn.c:1394:6: sparse: sparse: context imbalance in 'ip_vs_expire_nodest_conn_flush' - wrong count at exit
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [nf-next:master 2/3] net/netfilter/ipvs/ip_vs_conn.c:1394:6: sparse: sparse: context imbalance in 'ip_vs_expire_nodest_conn_flush' - wrong count at exit
  • From: Andrew Kim <kim.andrewsy@xxxxxxxxx>
• Re: [nf-next:master 2/3] net/netfilter/ipvs/ip_vs_conn.c:1394:6: sparse: sparse: context imbalance in 'ip_vs_expire_nodest_conn_flush' - wrong count at exit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nf-next:master 2/3] net/netfilter/ipvs/ip_vs_conn.c:1394:6: sparse: sparse: context imbalance in 'ip_vs_expire_nodest_conn_flush' - wrong count at exit
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH,v2] ipvs: fix the connection sync failed in some cases
  • From: guodeqing <geffrey.guo@xxxxxxxxxx>
• 答复: [PATCH] ipvs: fix the connection sync failed in some cases
  • From: "Guodeqing (A)" <geffrey.guo@xxxxxxxxxx>
• Re: [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: [PATCH net-next] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2][next] netfilter: Use fallthrough pseudo-keyword
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix nat hook table deletion
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next PATCH] netfilter: include: uapi: Use C99 flexible array member
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs: fix the connection sync failed in some cases
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] ipvs: fix the connection sync failed in some cases
  • From: guodeqing <geffrey.guo@xxxxxxxxxx>
• [iptables PATCH v2] iptables: accept lock file name at runtime
  • From: Giuseppe Scrivano <gscrivan@xxxxxxxxxx>
• Re: [PATCH] iptables: accept lock file name at runtime
  • From: Giuseppe Scrivano <gscrivan@xxxxxxxxxx>
• Re: [PATCH] iptables: accept lock file name at runtime
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 2/2] tests: extend existing dormat test case to catch a kernel bug
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/2] monitor: print "dormant" flag in monitor mode
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] iptables: accept lock file name at runtime
  • From: Giuseppe Scrivano <gscrivan@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix nat hook table deletion
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy()
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• WARNING in __nf_unregister_net_hook (2)
  • From: syzbot <syzbot+2570f2c036e3da5db176@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [nf-next PATCH] netfilter: include: uapi: Use C99 flexible array member
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 05/18] nft: Turn nft_chain_save() into a foreach-callback
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/18] nft: Be lazy when flushing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 18/18] nft: Avoid pointless table/chain creation
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 16/18] nft: cache: Sort custom chains by name
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 17/18] tests: shell: Drop any dump sorting in place
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 15/18] nft: Introduce a dedicated base chain array
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/18] nft: Use nftnl_chain_foreach in nft_rule_save
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/18] nft: Use nftnl_chain_list_foreach in nft_rule_flush
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 04/18] nft: Drop pointless nft_xt_builtin_init() call
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 13/18] nft: Implement nft_chain_foreach()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/18] nft: cache: Fetch only interesting tables from kernel
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 06/18] nft: Use nft_chain_find() in two more places
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/18] nft: Use nftnl_chain_list_foreach in nft_rule_list{,_save}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/18] nft: Make table creation purely implicit
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/18] nft: cache: Drop duplicate chain check
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 00/18] nft: Sorted chain listing et al.
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 07/18] nft: Reorder enum nft_table_type
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 12/18] nft: Fold nftnl_rule_list_chain_save() into caller
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 14/18] nft: cache: Introduce nft_cache_add_chain()
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] chain: Implement chain list sorting
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] audit: use the proper gfp flags in the audit_log_nfcfg() calls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH v2][next] netfilter: Use fallthrough pseudo-keyword
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH 00/12] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH][next] netfilter: nf_tables: Use fallthrough pseudo-keyword
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• [PATCH 02/12] netfilter: nft_set_pipapo: Drop useless assignment of scratch map index on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/12] ipvs: avoid expiring many connections from timer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/12] netfilter: nf_tables: add NFTA_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/12] ipvs: allow connection reuse for unconfirmed conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/12] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: nf_tables: add NFT_CHAIN_BINDING
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: nf_tables: reject unsupported chain flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/12] netfilter: nf_tables: add nft_chain_add()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/12] netfilter: nf_tables: expose enum nft_chain_flags through UAPI
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/12] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/12] ipvs: register hooks only with services
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/12] netfilter: introduce support for reject at prerouting stage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/12] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net-next] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Andrew Sy Kim <kim.andrewsy@xxxxxxxxx>
• Re: [PATCHv2 net-next] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Andrew Kim <kim.andrewsy@xxxxxxxxx>
• Re: [PATCHv2 net-next] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH][next] netfilter: nf_tables: Use fallthrough pseudo-keyword
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCHv2 net-next] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Andrew Sy Kim <kim.andrewsy@xxxxxxxxx>
• Re: [PATCH net-next] netfilter/ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH net-next] netfilter/ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Andrew Sy Kim <kim.andrewsy@xxxxxxxxx>
• [PATCH nft 2/2] src: allow for variables in the log prefix string
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] src: use expression to store the log prefix
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH][next] netfilter: nf_tables: Use fallthrough pseudo-keyword
  • From: "Gustavo A. R. Silva" <gustavoars@xxxxxxxxxx>
• Re: [PATCH v4.10] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6
  • From: Greg KH <greg@xxxxxxxxx>
• [PATCH net-next v2 2/3] netfilter: nf_conntrack_reasm: make nf_ct_frag6_gather elide the CB clear
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v2 1/3] net: ip_fragment: Add ip_defrag_ignore_cb support
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v2 3/3] net/sched: act_ct: fix clobber qdisc_skb_cb in defrag
  • From: wenxu@xxxxxxxxx
• [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear
  • From: wenxu@xxxxxxxxx
• Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH] Replace HTTP links with HTTPS ones: IPv*
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH] Replace HTTP links with HTTPS ones: IPv*
  • From: "Alexander A. Klimov" <grandmaster@xxxxxxxxxxxx>
• Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support
  • From: wenxu <wenxu@xxxxxxxxx>
• Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] segtree: zap element statement when decomposing interval
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] tests: shell: Add help output to run-tests.sh
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: [PATCH ghak90 V9 13/13] audit: add capcontid to set contid outside init_user_ns
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 12/13] audit: track container nesting
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 10/13] audit: add support for containerid to network namespaces
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 08/13] audit: add containerid support for user records
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 07/13] audit: add support for non-syscall auxiliary records
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 04/13] audit: log drop of contid on exit of last task
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 02/13] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support
  • From: wenxu@xxxxxxxxx
• [PATCH net-next 0/3] make nf_ct_frag/6_gather elide the skb CB clear
  • From: wenxu@xxxxxxxxx
• [PATCH net-next 3/3] net/sched: act_ct: fix clobber qdisc_skb_cb in defrag
  • From: wenxu@xxxxxxxxx
• [PATCH net-next 2/3] netfilter: nf_conntrack_reasm: make nf_ct_frag6_gather elide the CB clear
  • From: wenxu@xxxxxxxxx
• Re: [PATCH 29/29] netfilter: nf_tables: merge ipv4 and ipv6 nat chain types
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 02/13] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH ghak90 V9 02/13] audit: add container id
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/1 v2] netfilter: Restore the CT mark in Flow Offload
  • From: Sven Auhagen <sven.auhagen@xxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: reject unsupported chain flags
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 2/2] src: support for implicit chain bindings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft,v2 1/2] datatype: convert chain name from gmp value to string
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] netfilter: conntrack: refetch conntrack after nf_conntrack_update()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/2] netfilter: ipset: call ip_set_free() instead of kfree()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/2] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/1 v2] netfilter: Restore the CT mark in Flow Offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH iptables] libxtables/xtables.c - compiler warning fixes for NO_SHARED_LIBS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] [net/ipv6] Remove redundant null check in ah_mt6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 6/6] netfilter: nf_tables: add NFT_CHAIN_BINDING
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 5/6] netfilter: nf_tables: add nft_chain_add()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 4/6] netfilter: nf_tables: expose enum nft_chain_flags through UAPI
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 3/6] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 2/6] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v3 1/6] netfilter: nf_tables: add NFTA_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: allow connection reuse for unconfirmed conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] audit: use the proper gfp flags in the audit_log_nfcfg() calls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: Moving from ipset to nftables: Sets not ready for prime time yet?
  • From: "Timo Sigurdsson" <public_timo.s@xxxxxxxxxxxxxx>
• Re: [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: Moving from ipset to nftables: Sets not ready for prime time yet?
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH] audit: use the proper gfp flags in the audit_log_nfcfg() calls
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nft] src: Allow for empty set variable definition
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg
  • From: Jones Desougi <jones.desougi+netfilter@xxxxxxxxx>
• Re: Moving from ipset to nftables: Sets not ready for prime time yet?
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: Moving from ipset to nftables: Sets not ready for prime time yet?
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Moving from ipset to nftables: Sets not ready for prime time yet?
  • From: "Timo Sigurdsson" <public_timo.s@xxxxxxxxxxxxxx>
• [PATCH nft] src: support for implicit chain bindings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: allow connection reuse for unconfirmed conntrack
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] netfilter/ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] netfilter/ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
  • From: Andrew Sy Kim <kim.andrewsy@xxxxxxxxx>
• [PATCH nf-next,v2 6/6] netfilter: nf_tables: add NFT_CHAIN_BINDING
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 5/6] netfilter: nf_tables: add nft_chain_add()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 4/6] netfilter: nf_tables: expose enum nft_chain_flags through UAPI
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 3/6] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 2/6] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next,v2 1/6] netfilter: nf_tables: add NFTA_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 6/6,v2] netfilter: nf_tables: add NFT_CHAIN_BINDING
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [fs] 140402bab8: stress-ng.splice.ops_per_sec -100.0% regression
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• [PATCH net-next] ipvs: allow connection reuse for unconfirmed conntrack
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [libnf_ct PATCH v2 1/9] Handle negative snprintf return values properly
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_conntrack: refetch conntrack after nf_conntrack_update()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [fs] 140402bab8: stress-ng.splice.ops_per_sec -100.0% regression
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [libnf_ct PATCH v2 1/9] Handle negative snprintf return values properly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [fs] 140402bab8: stress-ng.splice.ops_per_sec -100.0% regression
  • From: kernel test robot <rong.a.chen@xxxxxxxxx>
• Re: [PATCH net-next] ipvs: avoid expiring many connections from timer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: avoid expiring many connections from timer
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• LPC 2020 Networking and BPF Track CFP
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: ipset: call ip_set_free() instead of kfree()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] nft_set_pipapo: Drop useless assignment of scratch map index on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf-next] netfilter: introduce support for reject at prerouting stage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: register hooks only with services
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: avoid expiring many connections from timer
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH net-next] ipvs: register hooks only with services
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH net-next] ipvs: avoid expiring many connections from timer
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf-next 1/5] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute
  • From: kernel test robot <lkp@xxxxxxxxx>
• [PATCH v3 11/20] netfilter: nft_set_rbtree: Use sequence counter with associated rwlock
  • From: "Ahmed S. Darwish" <a.darwish@xxxxxxxxxxxxx>
• [PATCH v3 10/20] netfilter: conntrack: Use sequence counter with associated spinlock
  • From: "Ahmed S. Darwish" <a.darwish@xxxxxxxxxxxxx>
• [PATCH net] netfilter: ipset: call ip_set_free() instead of kfree()
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH nft WIP] src: support for implicit chain bindings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: nf_tables: add NFT_CHAIN_BINDING
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/5] netfilter: nf_tables: expose enum nft_chain_flags through UAPI
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: nf_tables: add nft_chain_add()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/5,v2] nftables: support for implicit chains binding
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [bug report] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• mDNS helper fails to add expectations if host joined 224.0.0.251 multicast group
  • From: Andrei Borzenkov <arvidjaar@xxxxxxxxx>
• [PATCH ghak90 V9 10/13] audit: add support for containerid to network namespaces
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 09/13] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 13/13] audit: add capcontid to set contid outside init_user_ns
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 12/13] audit: track container nesting
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 02/13] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 05/13] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 08/13] audit: add containerid support for user records
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 07/13] audit: add support for non-syscall auxiliary records
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 04/13] audit: log drop of contid on exit of last task
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 03/13] audit: read container ID of a process
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 01/13] audit: collect audit task parameters
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 V9 00/13] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [bug report] audit: log nftables configuration change events
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [PATCH 0/7] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/5] support for anonymous non-base chains in nftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/5] support for anonymous non-base chains in nftables
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 1/7] netfilter: ipset: fix unaligned atomic access
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/7] netfilter: iptables: Add a .pre_exit hook in all iptable_foo.c.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/7] netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/7] selftests: netfilter: add test case for conntrack helper assignment
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/7] netfilter: Add MODULE_DESCRIPTION entries to kernel modules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/7] netfilter: ip6tables: Split ip6t_unregister_table() into pre_exit and exit helpers.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/7] netfilter: iptables: Split ipt_unregister_table() into pre_exit and exit helpers.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/7] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 5/5] netfilter: nf_tables: add NFT_CHAIN_ANONYMOUS
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/5] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/5] netfilter: nf_tables: expose enum nft_chain_flags through UAPI
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/5] netfilter: nf_tables: add NFTA_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/5] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/5] support for anonymous non-base chains in nftables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] [net/ipv6] Remove redundant null check in rt_mt6
  • From: Gaurav Singh <gaurav1086@xxxxxxxxx>
• [PATCH] [net/ipv6] Remove redundant null check in hbh_mt6
  • From: Gaurav Singh <gaurav1086@xxxxxxxxx>
• [PATCH] [net/ipv6] remove redundant null check in frag_mt6
  • From: Gaurav Singh <gaurav1086@xxxxxxxxx>
• [PATCH] [net/ipv6] Remove redundant null check in ah_mt6
  • From: Gaurav Singh <gaurav1086@xxxxxxxxx>
• [PATCH 05/14] fs: check FMODE_WRITE in __kernel_write
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 04/14] fs: unexport __kernel_write
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 06/14] fs: implement kernel_write using __kernel_write
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 07/14] fs: remove __vfs_write
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 02/14] autofs: switch to kernel_write
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 03/14] bpfilter: switch to kernel_write
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 10/14] integrity/ima: switch to using __kernel_read
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 08/14] fs: don't change the address limit for ->write_iter in __kernel_write
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 11/14] fs: implement kernel_read using __kernel_read
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 09/14] fs: add a __kernel_read helper
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 14/14] fs: don't change the address limit for ->read_iter in __kernel_read
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 13/14] fs: implement default_file_splice_read using __kernel_read
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 12/14] fs: remove __vfs_read
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 01/14] cachefiles: switch to kernel_write
  • From: Christoph Hellwig <hch@xxxxxx>
• clean up kernel_{read,write} & friends v5
  • From: Christoph Hellwig <hch@xxxxxx>
• [libnf_ct PATCH v2 9/9] Fix buffer overflows in __snprintf_protoinfo* like in *2str fns
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH v2 8/9] Fix buffer overflow in protocol related snprintf functions
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH v2 2/9] Fix nfexp_snprintf return value docs
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH v2 7/9] Move icmp request>reply type mapping to common file
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH v2 5/9] Add ARRAY_SIZE() macro
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH v2 3/9] Replace strncpy with snprintf to improve null byte handling
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH v2 4/9] Fix incorrect snprintf size calculation
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH v2 6/9] Fix buffer overflow on invalid icmp type in setters
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH v2 1/9] Handle negative snprintf return values properly
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: [PATCH v4.10] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/1] selftests: netfilter: add test case for conntrack helper assignment
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] netfilter: Add MODULE_DESCRIPTION entries to kernel modules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v1 0/4] iptables: Module unload causing NULL pointer reference.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnf_ct resend PATCH 6/8] Fix buffer overflow on invalid icmp type in setters
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnf_ct resend PATCH 5/8] Add asizeof() macro
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnf_ct resend PATCH 1/8] Handle negative snprintf return values properly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH iptables] libxtables/xtables.c - compiler warning fixes for NO_SHARED_LIBS
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [PATCH iptables] libxtables/xtables.c - compiler warning fixes for NO_SHARED_LIBS
  • From: Maciej Żenczykowski <zenczykowski@xxxxxxxxx>
• [libnf_ct resend PATCH 5/8] Add asizeof() macro
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct resend PATCH 8/8] Fix buffer overflows in __snprintf_protoinfo* like in *2str fns
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct resend PATCH 6/8] Fix buffer overflow on invalid icmp type in setters
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct resend PATCH 7/8] Fix buffer overflow in protocol related snprintf functions
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct resend PATCH 4/8] Fix incorrect snprintf size calculation
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct resend PATCH 2/8] Fix nfexp_snprintf return value docs
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct resend PATCH 3/8] Replace strncpy with snprintf to improve null byte handling
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct resend PATCH 1/8] Handle negative snprintf return values properly
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• Various memory-safety related fixes
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• Various memory-safety related fixes
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH 3/8] Replace strncpy with snprintf to improve null byte handling
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• [libnf_ct PATCH 4/8] Fix incorrect snprintf size calculation
  • From: Daniel Gröber <dxld@xxxxxxxxxxxxx>
• Re: [MAINTENANCE] Shutting down FTP services at netfilter.org
  • From: trentbuck@xxxxxxxxx (Trent W. Buck)
• Re: Good idea to rename files in include/uapi/ ?
  • From: "Alexander A. Klimov" <grandmaster@xxxxxxxxxxxx>
• [PATCH v1 0/4] iptables: Module unload causing NULL pointer reference.
  • From: David Wilder <dwilder@xxxxxxxxxx>
• [PATCH v1 4/4] netfilter: Add a .pre_exit hook in all ip6table_foo.c.
  • From: David Wilder <dwilder@xxxxxxxxxx>
• [PATCH v1 2/4] netfilter: Add a .pre_exit hook in all iptable_foo.c.
  • From: David Wilder <dwilder@xxxxxxxxxx>
• [PATCH v1 3/4] netfilter: Split ip6t_unregister_table() into pre_exit and exit helpers.
  • From: David Wilder <dwilder@xxxxxxxxxx>
• [PATCH v1 1/4] netfilter: Split ipt_unregister_table() into pre_exit and exit helpers.
  • From: David Wilder <dwilder@xxxxxxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• KMSAN: uninit-value in hash_net6_add
  • From: syzbot <syzbot+5d32b2edaf5048e61de0@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] netfilter: Add MODULE_DESCRIPTION entries to kernel modules
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [nft PATCH] doc: Document notrack statement
  • From: Florian Westphal <fw@xxxxxxxxx>
• [nft PATCH] doc: Document notrack statement
  • From: Phil Sutter <phil@xxxxxx>
• Re: iptables user space performance benchmarks published
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Good idea to rename files in include/uapi/ ?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Good idea to rename files in include/uapi/ ?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] netfiler: ipset: fix unaligned atomic access
  • From: Russell King - ARM Linux admin <linux@xxxxxxxxxxxxxxx>
• [PATCH nft] doc: revisit meta/rt primary expressions and ct statement
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/1] selftests: netfilter: add test case for conntrack helper assignment
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfiler: ipset: fix unaligned atomic access
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Expose skb_gso_validate_network_len() [Was: ebtables: load-on-demand extensions]
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Re: Expose skb_gso_validate_network_len() [Was: ebtables: load-on-demand extensions]
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: Expose skb_gso_validate_network_len() [Was: ebtables: load-on-demand extensions]
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfiler: ipset: fix unaligned atomic access
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• Re: [PATCH] netfiler: ipset: fix unaligned atomic access
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfiler: ipset: fix unaligned atomic access
  • From: Russell King - ARM Linux admin <linux@xxxxxxxxxxxxxxx>
• Re: Expose skb_gso_validate_network_len() [Was: ebtables: load-on-demand extensions]
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• [PATCH net-next] ipvs: register hooks only with services
  • From: Julian Anastasov <ja@xxxxxx>
• Re: Expose skb_gso_validate_network_len() [Was: ebtables: load-on-demand extensions]
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH v3] netfilter: Add MODULE_DESCRIPTION entries to kernel modules
  • From: Rob Gill <rrobgill@xxxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: Add MODULE_DESCRIPTION entries to kernel modules
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Expose skb_gso_validate_network_len() [Was: ebtables: load-on-demand extensions]
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2] netfilter: Add MODULE_DESCRIPTION entries to kernel modules
  • From: Rob Gill <rrobgill@xxxxxxxxxxxxxx>
• Re: Expose skb_gso_validate_network_len() [Was: ebtables: load-on-demand extensions]
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Re: [PATCH] linux++, this: rename "struct notifier_block *this"
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: Add MODULE_DESCRIPTION entries to kernel modules
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH] netfilter: Add MODULE_DESCRIPTION entries to kernel modules
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: Expose skb_gso_validate_network_len() [Was: ebtables: load-on-demand extensions]
  • From: Florian Westphal <fw@xxxxxxxxx>
• Expose skb_gso_validate_network_len() [Was: ebtables: load-on-demand extensions]
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• [PATCH net-next] ipvs: avoid expiring many connections from timer
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] netfilter: Add MODULE_DESCRIPTION entries to kernel modules
  • From: Rob Gill <rrobgill@xxxxxxxxxxxxxx>
• Re: [PATCH] linux++, this: rename "struct notifier_block *this"
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• Re: [PATCH] linux++, this: rename "struct notifier_block *this"
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: ebtables: load-on-demand extensions
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Re: [PATCH ghak90 V8 07/16] audit: add contid support for signalling the audit daemon
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: ebtables: load-on-demand extensions
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ebtables-nft: introduce '-m <match_ext>' option
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Allow dynamic loading of extentions in ebtables (-m option)
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• iptables user space performance benchmarks published
  • From: Phil Sutter <phil@xxxxxx>
• Re: ebtables: load-on-demand extensions
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Re: [PATCH] linux++, this: rename "struct notifier_block *this"
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH] linux++, this: rename "struct notifier_block *this"
  • From: Christoph Hellwig <hch@xxxxxxxxxxxxx>
• [PATCH] linux++, this: rename "struct notifier_block *this"
  • From: Alexey Dobriyan <adobriyan@xxxxxxxxx>
• KMSAN: uninit-value in hash_ip6_add
  • From: syzbot <syzbot+89bacaf2be1277d1e6de@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: ipset restore for bitmap:port terrible slow
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: [PATCH ghak90 V8 07/16] audit: add contid support for signalling the audit daemon
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH nf-next] nft_set_pipapo: Drop useless assignment of scratch map index on insert
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nf-next] nft_set_pipapo: Drop useless assignment of scratch map index on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] nft_set_pipapo: Drop useless assignment of scratch map index on insert
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ipset restore for bitmap:port terrible slow
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
• RE: [PATCH 05/13] fs: check FMODE_WRITE in __kernel_write
  • From: David Laight <David.Laight@xxxxxxxxxx>
• ipset restore for bitmap:port terrible slow
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: ebtables: load-on-demand extensions
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: ebtables: load-on-demand extensions
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Re: ebtables: load-on-demand extensions
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• ebtables: load-on-demand extensions
  • From: Eugene Crosser <crosser@xxxxxxxxxxx>
• Re: [iptables PATCH] xtables-translate: don't fail if help was requested
  • From: Arturo Borrero Gonzalez <arturo@xxxxxxxxxxxxx>
• [iptables PATCH] xtables-translate: Use proper clear_cs function
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] xtables-translate: don't fail if help was requested
  • From: Phil Sutter <phil@xxxxxx>