Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft v2] tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• Re: [PATCH 0/5] Extract SYNPROXY infrastructure
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH 5/5 nf-next] netfilter: add NF_SYNPROXY_IPV6 symbol
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 4/5 nf-next] netfilter: synproxy: extract IPv6 SYNPROXY infrastructure from ip6t_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 3/5 nf-next] netfilter: add NF_SYNPROXY_IPV4 symbol
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/5 nf-next] netfilter: synproxy: extract IPv4 SYNPROXY infrastructure from ipt_SYNPROXY
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/5 nf-next] netfilter: synproxy: add common uapi for SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 0/5] Extract SYNPROXY infrastructure
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Expectations
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Refcounts in libnftnl?
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/3] Resolve cache update woes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/3] src: Improve cache_needs_more() algorithm
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/3] libnftables: Keep list of commands in nft context
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/3] src: Restore local entries after cache update
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 1/2] py: Implement JSON validation in nftables module
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 2/2] tests/py: Support JSON validation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH v2 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl,v3 2/2] examples: add ct expectation examples
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH libnftnl,v3 1/2] src: add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nf-next,v3] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nftables,v3] add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• nftables flow offload possible mtu handling issue
  • From: <marcmicalizzi@xxxxxxxxx>
• [PATCH v2] ipvs: Fix use-after-free in ip_vs_in
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• oops in netfilter
  • From: David Howells <dhowells@xxxxxxxxxx>
• [nft PATCH 1/2] py: Implement JSON validation in nftables module
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/2] tests/py: Support JSON validation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH nft v3 2/2] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft] tests: py: fix python3.
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] src: update cache if cmd is more specific
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH] ipvs: Fix use-after-free in ip_vs_in
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf] netfilter: nft_fib: Fix existence check support
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH 2/2 nft v2] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft v2] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] tests: Fix ipt-restore/0004-restore-race_0 testcase
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] xtables: Don't leak iter in error path of __nft_chain_zero_counters()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] evaluate: force full cache update on rule index translation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft] tests: py: fix python3.
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] ipvs: Fix use-after-free in ip_vs_in
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v4] netfilter: nf_conntrack_sip: fix expectation clash
  • From: xiao ruizhu <katrina.xiaorz@xxxxxxxxx>
• [PATCH nft] tests: py: fix python3.
  • From: Shekhar Sharma <shekhar250198@xxxxxxxxx>
• [PATCH v2] selftests: netfilter: missing error check when setting up veth interface
  • From: Jeffrin Jose T <jeffrin@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft] jump: Introduce chain_expr in jump and goto statements
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nft] jump: Allow goto and jump to a variable using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft] jump: Introduce chain_expr in jump and goto statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/2 nft WIP v2] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft WIP v2] jump: Introduce chain_expr in jump statements
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• [PATCH iptables] man: refer to iptables-translate and ip6tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [libnftnl PATCH] include: Remove redundant declaration of nftnl_gen_nlmsg_parse()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] tests: Fix ipt-restore/0004-restore-race_0 testcase
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] xtables: Fix typo in nft_rebuild_cache()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v3] netfilter: nf_conntrack_sip: fix expectation clash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] xtables: Fix typo in nft_rebuild_cache()
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net v3] netfilter: nf_queue:fix reinject verdict handling
  • From: Jagdish Motwani <j.k.motwani@xxxxxxxxx>
• [PATCH net v2] netfilter: nf_queue:fix reinject verdict handling
  • From: Jagdish Motwani <j.k.motwani@xxxxxxxxx>
• [iptables PATCH] xtables: Don't leak iter in error path of __nft_chain_zero_counters()
  • From: Phil Sutter <phil@xxxxxx>
• [libnftnl PATCH] include: Remove redundant declaration of nftnl_gen_nlmsg_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] xtables: Fix for explicit rule flushes
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH 00/13] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: [PATCH v3] netfilter: nf_conntrack_sip: fix expectation clash
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• RE: [PATCH net] netfilter: nf_queue:fix reinject verdict handling
  • From: Jagdish Motwani <Jagdish.Motwani@xxxxxxxxxx>
• Re: [PATCH net] netfilter: nf_queue:fix reinject verdict handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/13] netfilter: nf_conntrack_h323: restore boundary check correctness
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/13] netfilter: nf_tables: fix base chain stat rcu_dereference usage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/13] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/13] netfilter: nf_flow_table: check ttl value in flow offload data path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/13] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/13] netfilter: nf_flow_table: do not flow offload deleted conntrack entries
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/13] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/13] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/13] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/13] netfilter: nf_tables: remove NFT_CT_TIMEOUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/13] netfilter: nf_flow_table: fix netdev refcnt leak
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/13] netfilter: nf_tables: delay chain policy update until transaction is complete
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/13] netfilter: nft_flow_offload: add entry to flowtable after confirmation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/13] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: nf_queue:fix reinject verdict handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Undefined reference?
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Undefined reference?
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nft] src: use definitions in include/linux/netfilter/nf_tables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: incorrect definition for NFT_LOGLEVEL_MAX
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] src: use definitions in include/linux/netfilter/nf_tables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft v2] py: fix missing decode/encode of strings
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [conntrack-tools PATCH] sync-mode: Also cancel flush timer in ALL_FLUSH_CACHE
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [ebtables PATCH] Fix incorrect IPv6 prefix formatting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Undefined reference?
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Undefined reference?
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: Undefined reference?
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: Undefined reference?
  • From: Florian Westphal <fw@xxxxxxxxx>
• Undefined reference?
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH nft v2] py: fix missing decode/encode of strings
  • From: Phil Sutter <phil@xxxxxx>
• [ebtables PATCH] Fix incorrect IPv6 prefix formatting
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl,v1 2/2] examples: add ct expectation examples
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH libnftnl,v1 1/2] src: add ct expectation support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nf-next,v2] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH nft v2] py: fix missing decode/encode of strings
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH v3] extensions: libxt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [PATCH v3] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• linux-next: manual merge of the netfilter tree with Linus' tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• [conntrack-tools PATCH] sync-mode: Also cancel flush timer in ALL_FLUSH_CACHE
  • From: Simon Kirby <sim@xxxxxxxxxx>
• Re: [PATCH net-next,RFC 0/2] netfilter: add hardware offload infrastructure
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 2/2] netfilter: nf_tables: add hardware offload support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 1/2] net: flow_offload: add flow_block_cb API
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 0/2] netfilter: add hardware offload infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le"
  • From: Phil Sutter <phil@xxxxxx>
• Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/9] Testsuite-indicated fixes for JSON
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft WIP] jump: Allow jump to a variable when using nft input files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [nft PATCH 6/9] parser_json: Fix ct timeout object support
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 8/9] tests/py: Fix JSON expexted output after expr merge change
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le"
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/9] json: Support nat in inet family
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/9] tests/py: Fix JSON equivalents of osf tests
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 5/9] json: Fix tproxy support regarding latest changes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/9] Testsuite-indicated fixes for JSON
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/9] netlink: Fix printing of zero-length prefixes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 9/9] tests/py: Fix JSON expected output for icmpv6 code values
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/9] parser_json: Fix igmp support
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft WIP] jump: Allow jump to a variable when using nft input files
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] netfilter: nf_queue:fix reinject verdict handling
  • From: Jagdish Motwani <j.k.motwani@xxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH v2] extensions: libxt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [PATCH v2] netfilter: xt_owner: Add supplementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: remove NFT_CT_TIMEOUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach
  • From: hujunwei <hujunwei4@xxxxxxxxxx>
• Re: [PATCHv2 net-next 0/3] Add UDP tunnel support for ICMP errors in IPVS
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_owner: Add complementary groups option
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] extensions: libxt_owner: Add complementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [nft PATCH] doc: Review man page synopses
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] py: Fix gitignore of lib/ directory
  • From: Phil Sutter <phil@xxxxxx>
• Re: Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH AUTOSEL 5.0 64/99] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 63/99] netfilter: ctnetlink: don't use conntrack/expect object addresses as id
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 62/99] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 65/99] netfilter: nat: fix icmp id randomization
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 75/99] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 74/99] netfilter: never get/set skb->tstamp
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 46/81] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 45/81] netfilter: ctnetlink: don't use conntrack/expect object addresses as id
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 44/81] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 52/81] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 71/81] netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 70/81] netfilter: nf_tables: use-after-free in dynamic operations
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 24/95] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 25/95] netfilter: ctnetlink: don't use conntrack/expect object addresses as id
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 81/95] netfilter: nf_tables: warn when expr implements only one of activate/deactivate
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.9 17/25] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.4 11/14] ipvs: do not schedule icmp errors from tunnels
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach
  • From: hujunwei <hujunwei4@xxxxxxxxxx>
• [PATCH nft v2] evaluate: force full cache update on rule index translation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH nft] evaluate: force full cache update on rule index translation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• linux-next: Fixes tag needs some work in the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH 00/12] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 04/12] netfilter: conntrack: limit sysctl setting for boolean options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/12] netfilter: nf_tables: relocate header content to consumer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/12] openvswitch: load and reference the NAT helper.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/12] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/12] netfilter: xt_hashlimit: use struct_size() helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/12] netfilter: nf_nat: register NAT helpers.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/12] netfilter: add API to manage NAT helpers.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/12] netfilter: slightly optimize nf_inet_addr_mask
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/12] netfilter: nft_ct: Add ct id support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/12] netfilter: use macros to create module aliases.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/12] netfilter: nf_tables: drop include of module.h from nf_tables.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/12] netfilter: nf_tables: fix implicit include of module.h
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/12] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH][nf-next] netfilter: slightly optimize nf_inet_addr_mask
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH][next] netfilter: xt_hashlimit: use struct_size() helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] extensions: libxt_owner: Add complementary groups option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nf] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_flow_table: fix missing err check for rhashtable_insert_fast
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix base chain stat rcu_dereference usage
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net] netfilter: nf_ct_h323: restore boundary check correctness
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] evaluate: force full cache update on rule index translation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] gmputil.h: Add missing header for va_list
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libmnl 1/1] examples: Add rtnl-addr-add.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libmnl 1/1] examples: Add rtnl-addr-add.c
  • From: Petr Vorel <pvorel@xxxxxxx>
• [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Jeremy Sowden <jeremy@xxxxxxxxxx>
• [PATCHv2 net-next 1/3] ipvs: allow rs_table to contain different real server types
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv2 net-next 2/3] ipvs: add function to find tunnels
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv2 net-next 0/3] Add UDP tunnel support for ICMP errors in IPVS
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCHv2 net-next 3/3] ipvs: strip udp tunnel headers from icmp errors
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH] netfilter: nft_ct: add ct expectations support
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH net-next 3/3] ipvs: strip udp tunnel headers from icmp errors
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH nf v2] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] gmputil.h: Add missing header for va_list
  • From: Rosen Penev <rosenp@xxxxxxxxx>
• [PATCH nf v2] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• Re: [nft PATCH] use UDATA defines from libnftnl
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] py: fix missing decode/encode of strings
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH libnetfilter_conntrack] conntrack: api: use libmnl API to build the netlink headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_json: fix crash on add rule to bad references
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_json: fix off by one index on rule add/replace
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] py: fix missing decode/encode of strings
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] parser_json: fix crash on add rule to bad references
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nft] parser_json: fix off by one index on rule add/replace
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [nftables,v2] proto: support for draft-ietf-tsvwg-le-phb-10.txt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_json: default to unspecified l3proto for ct helper/timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] parser_json: default to unspecified l3proto for ct helper/timeout
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH iptables] extensions: SYNPROXY: should not be needed anymore on current kernels
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH nf] netfilter: nf_conntrack_h323: Remove deprecated config check
  • From: Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_flow_table: fix missing err check for rhashtable_insert_fast
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nft] parser_json: default to unspecified l3proto for ct helper/timeout
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack 4/3] src: replace old libnfnetlink builder
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• [PATCH libnetfilter_conntrack 3/3] src: replace old libnfnetlink parser
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack 2/3] expect: add missing handling for CTA_EXPECT_* attributes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnetfilter_conntrack 1/3] src: introduce abi_breakage()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Port triggering
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: Port triggering
  • From: Stéphane Veyret <sveyret@xxxxxxxxx>
• [PATCH][next] netfilter: xt_hashlimit: use struct_size() helper
  • From: "Gustavo A. R. Silva" <gustavo@xxxxxxxxxxxxxx>
• [PATCH nft] evaluate: force full cache update on rule index translation
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] py: fix missing decode/encode of strings
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] parser_json: fix crash on add rule to bad references
  • From: Eric Garver <eric@xxxxxxxxxxx>
• [PATCH nft] parser_json: fix off by one index on rule add/replace
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH net-next 3/3] ipvs: strip udp tunnel headers from icmp errors
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH net-next 3/3] ipvs: strip udp tunnel headers from icmp errors
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [nftables,v2] proto: support for draft-ietf-tsvwg-le-phb-10.txt
  • From: Loganaden Velvindron <logan@xxxxxxxxxxxxx>
• Debian 9 vs Xtables-addons 3.3 and GeoLite2
  • From: Patrick Adam <patrickbln@xxxxxxxxxx>
• Problem in libnetfilter_conntrack library
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Kristian Evensen <kristian.evensen@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: fix oops during rule dump
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [RFC nf-next v2 1/2] netfilter: connmark: introduce savedscp
  • From: "Kevin 'ldir' Darbyshire-Bryant" <ldir@xxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH v3 nf] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH nf v2 3/3] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix oops during rule dump
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: fix base chain stat rcu_dereference usage
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nat: avoid unused-variable warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [RFC nf-next v2 1/2] netfilter: connmark: introduce savedscp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nftables v1] Add support for https://www.ietf.org/id/draft-ietf-tsvwg-le-phb-10.txt which is close to being published as an RFC.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/4] Misc minor fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: limit sysctl setting for boolean options
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking"
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2,v2 2/2] IPFIX: Introduce template record support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ulogd2,v2 1/2] IPFIX: Add IPFIX output plugin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH iptables,v2] xshared: check for maximum buffer length in add_param_to_argv()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v3 0/4] openvswitch: load and reference the NAT helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_ct: Add ct id support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2 3/3] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: delay chain policy update until transaction is complete
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2 0/3] netfilter: nf_flow_table: fix several flowtable bugs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH -next 0/3] netfilter: header cleanup
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] src: fix double free on xt stmt destruction
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] selftests : netfilter: Wrote a error and exit code for a command which needed veth kernel module.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Dexuan-Linux Cui <dexuan.linux@xxxxxxxxx>
• Re: [PATCH 7/9 net-next,v2] netfilter: bridge: add connection tracking system
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
• [PATCH 1/9 net-next,v2] net: ipv4: add skbuff fraglist splitter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/9 net-next,v2] netfilter: nf_conntrack: allow to register bridge support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/9 net-next,v2] net: ipv6: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/9 net-next,v2] net: ipv4: place cb handling away from fragmentation iterators
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/9 net-next,v2] net: ipv4: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/9 net-next,v2] netfilter: bridge: add connection tracking system
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 9/9 net-next,v2] netfilter: nf_conntrack_bridge: register inet conntrack for bridge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/9 net-next,v2] netfilter: nf_conntrack_bridge: add support for IPv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/9 net-next,v2] net: ipv6: add skbuff fraglist splitter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/9 net-next,v2] connection tracking support for bridge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf v2 3/3] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf v2 2/3] netfilter: nf_flow_table: check ttl value in flow offload data path
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf v2 1/3] netfilter: nf_flow_table: fix netdev refcnt leak
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf v2 0/3] netfilter: nf_flow_table: fix several flowtable bugs
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_flow_offload: add entry to flowtable after confirmation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_flow_offload: add entry to flowtable after confirmation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Netlink socket protocol NETLINK_NFLOG
  • From: Vijay Pasapuleti <vijaypas@xxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba <mespio@xxxxxxxxx>
• [PATCH][nf-next] netfilter: slightly optimize nf_inet_addr_mask
  • From: Li RongQing <lirongqing@xxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH v2] ipvs:set sock send/receive buffer correctly
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: Netfilter fixes for 4.19 -stable
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session.
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Netfilter fixes for 4.19 -stable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter
  • From: Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session.
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH nf 4/4] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH xtables-nft 0/6] handle parallel restore case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 4/4] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 2/3] ipset: drop ipset_nest_start() and ipset_nest_end()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf 4/4] netfilter: nf_flow_table: do not use deleted CT's flow offload
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf 3/4] netfilter: nf_flow_table: check ttl value in flow offload data path
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf 2/4] netfilter: nft_flow_offload: do not make un-established tcp flow_offload session.
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf 1/4] netfilter: nf_flow_table: fix netdev refcnt leak
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• [PATCH nf 0/4] netfilter: nf_flow_table: fix several flowtable bugs
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next,RFC 7/9] net: use tcf_block_setup() infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: David Ahern <dsahern@xxxxxxxxx>
• [PATCH] extensions: libxt_owner: Add complementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• [PATCH] netfilter: xt_owner: Add complementary groups option
  • From: Lukasz Pawelczyk <l.pawelczyk@xxxxxxxxxxx>
• Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 1/3] netlink: make nla_nest_start() add NLA_F_NESTED flag
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH net-next,RFC 7/9] net: use tcf_block_setup() infrastructure
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH nft] ct: Add support for the 'id' key
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH net-next 1/3] netlink: make nla_nest_start() add NLA_F_NESTED flag
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba <mespio@xxxxxxxxx>
• Re: [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [PATCH net-next 1/3] netlink: make nla_nest_start() add NLA_F_NESTED flag
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [PATCH net-next 2/3] ipset: drop ipset_nest_start() and ipset_nest_end()
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [PATCH net-next 3/3] net: fix two coding style issues
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [PATCH ulogd2,v2 2/2] IPFIX: Introduce template record support
  • From: a@xxxxxxxxxxxx
• [PATCH ulogd2,v2 1/2] IPFIX: Add IPFIX output plugin
  • From: a@xxxxxxxxxxxx
• Re: [nft PATCH RFC 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH net-next,RFC 2/9] net: sched: add tcf_block_cb_alloc()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 1/9] net: sched: move tcf_block_cb before indr_block
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 3/9] net: sched: add tcf_block_cb_free()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 6/9] net: sched: add tcf_setup_block_offload()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 8/9] net: sched: remove tcf_block_cb_{register,unregister}()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 4/9] net: sched: add tcf_block_setup()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 7/9] net: use tcf_block_setup() infrastructure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 8/9] net: cls_api: do not expose tcf_block to drivers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 9/9] net: cls_api: do not expose tcf_block to drivers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 5/9] net: sched: add release callback to struct tcf_block_cb
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next,RFC 0/9] net: sched: prepare to reuse per-block callbacks from netfilter
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net] netfilter: nf_ct_h323: restore boundary check correctness
  • From: Jakub Jankowski <shasta@xxxxxxxxxxx>
• Re: [nft PATCH RFC 0/2] JSON schema for nftables.py
  • From: Eric Garver <eric@xxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba <mespio@xxxxxxxxx>
• Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba <mespio@xxxxxxxxx>
• [nft PATCH RFC 0/2] JSON schema for nftables.py
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH RFC 2/2] tests/py: Support JSON validation
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH RFC 1/2] py: Implement JSON validation in nftables module
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH v3] net: netfilter: Fix rpfilter dropping vrf packets by mistake
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• [nft PATCH 1/4] tests: monitor: Adjust to changed events ordering
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/4] Misc minor fixes
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/4] parser_json: Fix typo in ct timeout policy parser
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/4] tests/py: Fix error messages in chain_delete()
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/4] parser_json: Fix parser for list maps command
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] use UDATA defines from libnftnl
  • From: Phil Sutter <phil@xxxxxx>
• Issue related to conntrack while insert new rule with conntrack command in linux
  • From: Mojtaba Esfandiari <Esfandiari@xxxxxxxxxxxxxxxx>
• Re: [PATCH 07/31] netfilter: ctnetlink: Support L3 protocol-filter on flush
  • From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
• Re: [RFC PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Jiri Pirko <jiri@xxxxxxxxxxx>
• Re: [PATCH v2] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: [PATCH v2] netfilter: nft_ct: Add ct id support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [RFC PATCH net-next 2/3] ipset: drop ipset_nest_start() and ipset_nest_end()
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [RFC PATCH net-next 3/3] net: fix two coding style issues
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [RFC PATCH net-next 1/3] netlink: make nla_nest_start() add NLA_F_NESTED flag
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• [RFC PATCH net-next 0/3] make nla_nest_start() add NLA_F_NESTED flag
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [PATCH v2] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake
  • From: David Ahern <dsahern@xxxxxxxxx>
• [PATCH v2] netfilter: nft_ct: Add ct id support
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• Re: [PATCH] IPFIX output plugin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] IPFIX output plugin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] IPFIX output plugin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] IPFIX output plugin
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] IPFIX output plugin
  • From: Ander Juaristi <a@xxxxxxxxxxxx>
• [PATCH v2] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: [PATCH] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: [PATCH] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] net: netfilter: Fix ipv6 rp_filter dropping vrf packets by mistake
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: KASAN: use-after-free Read in seccomp_notify_release (2)
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: KASAN: use-after-free Read in seccomp_notify_release (2)
  • From: Tycho Andersen <tycho@xxxxxxxx>
• Re: KASAN: use-after-free Read in seccomp_notify_release (2)
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH nft] ct: Add support for the 'id' key
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: nft_ct: Add ct id support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: dict: A netfilter expression for dictionary lookups
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• [PATCH nft] ct: Add support for the 'id' key
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• [PATCH libnftnl] src: Add ct id support
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• [PATCH] netfilter: nft_ct: Add ct id support
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• Re: [PATCH v2 61/79] docs: leds: convert to ReST
  • From: Jacek Anaszewski <jacek.anaszewski@xxxxxxxxx>
• [PATCH xtables-nft 6/6] tests: add test script for race-free restore
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 5/6] xtables: handle concurrent ruleset modifications
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 4/6] xtables: add and set "implict" flag on transaction objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 3/6] xtables: add and use nft_build_cache
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 2/6] xtables: add skip flag to objects
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 1/6] xtables: unify user chain add/flush for restore case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH xtables-nft 0/6] handle parallel restore case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] src: fix double free on xt stmt destruction
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Neil Horman <nhorman@xxxxxxxxxxxxx>
• Re: [PATCH 00/10] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH iptables] xshared: check for maximum buffer length in dd_param_to_argv()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/10] netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/10] selftests: netfilter: check icmp pkttoobig errors are set as related
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/10] netfilter: conntrack: initialize ct->timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/10] netfilter: nat: fix icmp id randomization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/10] netfilter: never get/set skb->tstamp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/10] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/10] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/10] netfilter: conntrack: don't set related state for different outer address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/10] netfilter: ctnetlink: don't use conntrack/expect object addresses as id
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/10] ipvs: do not schedule icmp errors from tunnels
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/10] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH AUTOSEL 5.0 16/98] netfilter: nft_set_rbtree: check for inactive element after flag mismatch
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 17/98] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 19/98] netfilter: ip6t_srh: fix NULL pointer dereferences
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 20/98] netfilter: nf_tables: bogus EBUSY in helper removal from transaction
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 5.0 18/98] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 10/68] netfilter: nft_set_rbtree: check for inactive element after flag mismatch
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 11/68] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 12/68] netfilter: fix NETFILTER_XT_TARGET_TEE dependencies
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 04/43] netfilter: nft_set_rbtree: check for inactive element after flag mismatch
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.14 05/43] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.9 05/29] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.9 04/29] netfilter: nft_set_rbtree: check for inactive element after flag mismatch
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.4 02/21] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• [PATCH AUTOSEL 4.19 13/68] netfilter: ip6t_srh: fix NULL pointer dereferences
  • From: Sasha Levin <sashal@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH v2 61/79] docs: leds: convert to ReST
  • From: Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Neil Horman <nhorman@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable
  • From: Rundong Ge <rdong.ge@xxxxxxxxx>
• Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable
  • From: Rundong Ge <rdong.ge@xxxxxxxxx>
• Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable
  • From: Rundong Ge <rdong.ge@xxxxxxxxx>
• Re: [PATCH] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: never get/set skb->tstamp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] ipvs:set sock send/receive buffer correctly
  • From: Julian Anastasov <ja@xxxxxx>
• standalone fuzzing tool to debug net/netfilter
  • From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
• Re: dict: A netfilter expression for dictionary lookups
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• Re: [PATCH] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking"
  • From: Mukesh Ojha <mojha@xxxxxxxxxxxxxx>
• [PATCH] netfilter: connlabels: fix spelling mistake "trackling" -> "tracking"
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• [tip:core/rcu] net/ipv4/netfilter: Update comment from call_rcu_bh() to call_rcu()
  • From: "tip-bot for Paul E. McKenney" <tipbot@xxxxxxxxx>
• Re: dict: A netfilter expression for dictionary lookups
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH net-next v3 0/4] openvswitch: load and reference the NAT helper
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: fix dangling pointer access of fake_rtable
  • From: Rundong Ge <rdong.ge@xxxxxxxxx>
• Re: [PATCH] netfilter:bridge: Hold bridge dev for fake_rtable to avoid the dangling pointer
  • From: Rundong Ge <rdong.ge@xxxxxxxxx>
• Re: [PATCH net-next v3 0/4] openvswitch: load and reference the NAT helper
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] ipvs:set sock send/receive buffer correctly
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: [PATCH] ipvs:set sock send/receive buffer correctly
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [PATCH] ipvs:set sock send/receive buffer correctly
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: [PATCH] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [External Email] Re: RFC: NAT's default behavior of forwarding un-NATed packets
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [PATCH] netfilter: fix nf_l4proto_log_invalid to log invalid packets
  • From: Andrei Vagin <avagin@xxxxxxxxx>
• [PATCH net-next v3 4/4] openvswitch: load and reference the NAT helper.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v3 3/4] netfilter: nf_nat: register NAT helpers.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v3 2/4] netfilter: add API to manage NAT helpers.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v3 1/4] netfilter: use macros to create module aliases.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v3 0/4] openvswitch: load and reference the NAT helper
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• Re: dict: A netfilter expression for dictionary lookups
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• Re: [PATCH] ipvs:set sock send/receive buffer correctly
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [External Email] Re: RFC: NAT's default behavior of forwarding un-NATed packets
  • From: Xiaozhou Liu <liuxiaozhou@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: never get/set skb->tstamp
  • From: Michal Soltys <soltys@xxxxxxxx>
• Re: RFC: NAT's default behavior of forwarding un-NATed packets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] ipvs:set sock send/receive buffer correctly
  • From: linmiaohe <linmiaohe@xxxxxxxxxx>
• Re: RFC: NAT's default behavior of forwarding un-NATed packets
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• RFC: NAT's default behavior of forwarding un-NATed packets
  • From: Xiaozhou Liu <liuxiaozhou@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: never get/set skb->tstamp
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH net-next 04/10] net: ipv6: split skbuff into fragments transformer
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: never get/set skb->tstamp
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH net-next 08/10] netfilter: bridge: add support for conntrack support
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
• Re: ESTABLISHED tcp conntrack timeout
  • From: Naruto Nguyen <narutonguyen2018@xxxxxxxxx>
• Re: ulogd2 question - meaning of flow.start.sec when hash_mode == 0 (NFCT input, JSON output)
  • From: Michal Soltys <soltys@xxxxxxxx>
• ulogd2 question - meaning of flow.start.sec when hash_mode == 0 (NCFT input, JSON output)
  • From: Michal Soltys <soltys@xxxxxxxx>
• Re: [PATCH] [NETFILTER]: nf_conntrack_h323: fix spelling mistake "authenticaton" -> "authentication"
  • From: Colin Ian King <colin.king@xxxxxxxxxxxxx>
• Re: [PATCH] [NETFILTER]: nf_conntrack_h323: fix spelling mistake "authenticaton" -> "authentication"
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] [NETFILTER]: nf_conntrack_h323: fix spelling mistake "authenticaton" -> "authentication"
  • From: Mukesh Ojha <mojha@xxxxxxxxxxxxxx>
• Re: linux-next: manual merge of the netfilter-next tree with the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: linux-next: manual merge of the netfilter-next tree with the netfiler tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: dict: A netfilter expression for dictionary lookups
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH net-next 04/10] net: ipv6: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 02/10] net: ipv6: add skbuff fraglist split iterator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 03/10] net: ipv4: split skbuff into fragments transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 05/10] net: ipv4: place cb handling away from fraglist iterator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 07/10] netfilter: nf_conntrack: allow to register bridge support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 06/10] net: ipv4: place cb handling away from fragment transformer
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 09/10] netfilter: nf_conntrack_bridge: add support for IPv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 10/10] netfilter: nf_conntrack_bridge: register inet conntrack for bridge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 08/10] netfilter: bridge: add support for conntrack support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 01/10] net: ipv4: add skbuff fraglist split iterator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH net-next 00/10] connection tracking support for bridge
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH -next 3/3] netfilter: nf_tables: drop include of module.h from nf_tables.h
  • From: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
• [PATCH -next 2/3] netfilter: nf_tables: fix implicit include of module.h
  • From: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
• [PATCH -next 0/3] netfilter: header cleanup
  • From: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
• [PATCH -next 1/3] netfilter: nf_tables: relocate header content to consumer
  • From: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
• Re: [PATCH 00/22] Netfilter/IPVS updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 06/22] netfilter: optimize nf_inet_addr_cmp
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/22] netfilter: nft_redir: add inet support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/22] netfilter: nf_tables: remove unused parameter ctx
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/22] netfilter: nf_flowtable: skip device lookup from interface index
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/22] time: Introduce jiffies64_to_msecs()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/22] ipvs: allow tunneling with gue encapsulation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/22] netfilter: nft_masq: add inet support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/22] netfilter: nf_tables: merge route type into core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/22] netfilter: nft_osf: Add version option support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/22] netfilter: nf_nat: merge ip/ip6 masquerade headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/22] netfilter: make two functions static
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/22] netfilter: nf_nat_masquerade: unify ipv4/6 notifier registration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/22] bridge: broute: make broute a real ebtables table
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 22/22] bridge: only include nf_queue.h if needed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/22] bridge: netfilter: unroll NF_HOOK helper in bridge input path
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/22] selftests: netfilter: add ebtables broute test case
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/22] netfilter: x_tables: merge ip and ipv6 masquerade modules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/22] bridge: reduce size of input cb to 16 bytes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/22] kselftests: extend nft_nat with inet family based nat hooks
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/22] netfilter: replace NF_NAT_NEEDED with IS_ENABLED(CONFIG_NF_NAT)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/22] netfilter: nat: add inet family nat support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/22] netfilter: nft_redir: Make nft_redir_dump static
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/22] Netfilter/IPVS updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• Re: [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH] [NETFILTER]: nf_conntrack_h323: fix spelling mistake "authenticaton" -> "authentication"
  • From: Colin King <colin.king@xxxxxxxxxxxxx>
• [PATCH v3] netfilter: nf_conntrack_sip: fix expectation clash
  • From: xiao ruizhu <katrina.xiaorz@xxxxxxxxx>
• [nf-next:nft-bridge8 8/8] net/netfilter/nf_conntrack_proto.c:557 nf_ct_netns_do_put() error: we previously assumed 'nf_ct_bridge_info' could be null (see line 552)
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• linux-next: build failure after merge of the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• linux-next: manual merge of the netfilter-next tree with the netfiler tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• linux-next: manual merge of the netfilter-next tree with the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: WARNING in compat_copy_entries (2)
  • From: Florian Westphal <fw@xxxxxxxxx>
• linux-next: build warning after merge of the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: WARNING in compat_copy_entries (2)
  • From: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
• Re: WARNING in compat_copy_entries (2)
  • From: syzbot <syzbot+659574e7bcc7f7eb4df7@xxxxxxxxxxxxxxxxxxxxxxxxx>
• [PATCH net-next v2 8/8] openvswitch: load and reference the NAT helper.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v2 7/8] netfilter: nf_nat: register tftp NAT helper.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v2 6/8] netfilter: nf_nat: register sip NAT helper.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v2 5/8] netfilter: nf_nat: register irc NAT helper.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v2 4/8] netfilter: nf_nat: register ftp NAT helper.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v2 3/8] netfilter: nf_nat: register amanda NAT helper.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v2 2/8] netfilter: add API to manage NAT helpers.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v2 1/8] netfilter: use macros to create module aliases.
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• [PATCH net-next v2 0/8] openvswitch: load and reference the NAT helper
  • From: Flavio Leitner <fbl@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: fix build on 32bit arches
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: fix icmp id endianness when protocol mapping was given
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v5 5/5] net: Replace CONFIG_DEBUG_KERNEL with CONFIG_DEBUG_MISC
  • From: Sinan Kaya <okaya@xxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: fix build on 32bit arches
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nat: fix icmp id endianness when protocol mapping was given
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: iptables: undefined symbol: xtables_find_target_revision
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• [nf:master 7/7] net/netfilter/nf_nat_core.c:422:29: sparse: incorrect type in assignment (different base types)
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [nf:master 5/7] net//netfilter/nf_conntrack_core.c:483:54: error: passing argument 3 of 'hsiphash' from incompatible pointer type
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH net] ipvs: do not schedule icmp errors from tunnels
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nat: fix icmp id randomization
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ctnetlink: don't use conntrack/expect object addresses as id
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: initialize ct->timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 2/2] netfilter: conntrack: don't set related state for different outer address
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] selftests: netfilter: check icmp pkttoobig errors are set as related
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: build failure after merge of the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• [PATCH netfilter-next] bridge: only include nf_queue.h if needed
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: linux-next: build failure after merge of the netfilter-next tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: dict: A netfilter expression for dictionary lookups
  • From: Brett Mastbergen <bmastbergen@xxxxxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: delay chain policy update until transaction is complete
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: linux-next: build failure after merge of the netfilter-next tree
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v4 5/5] net: Replace CONFIG_DEBUG_KERNEL with CONFIG_DEBUG_MISC
  • From: Florian Westphal <fw@xxxxxxxxx>
• linux-next: build failure after merge of the netfilter-next tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• [nf-next:master 20/21] include/net/netfilter/nf_queue.h:16:23: error: field 'state' has incomplete type
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH v4 5/5] net: Replace CONFIG_DEBUG_KERNEL with CONFIG_DEBUG_MISC
  • From: Sinan Kaya <okaya@xxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: bridge: remove broute hook
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: bridge: remove broute hook
  • From: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH RFC 4/4] netfilter: nf_tables: add netlink description
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: dict: A netfilter expression for dictionary lookups
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf-next 0/3] netfilter: masquerade: unify ip/ip6 notifier registration
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] parser_json: Disallow ct helper as type to map to
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next 1/8] netfilter: use macros to create module aliases.
  • From: Flavio Leitner <fbl@xxxxxxxxxxxx>
• Re: [PATCH net-next 2/8] netfilter: add API to manage NAT helpers.
  • From: Flavio Leitner <fbl@xxxxxxxxxxxx>
• Re: [PATCH nf-next 0/4] netfilter: bridge: remove broute hook
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nf-next 4/4] bridge: broute: make broute a real ebtables table
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 3/4] bridge: netfilter: unroll NF_HOOK helper in bridge input path
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/4] bridge: reduce size of input cb to 16 bytes
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/4] selftests: netfilter: add ebtables broute test case
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/4] netfilter: bridge: remove broute hook
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v4 1/2] iptables-save: add option to show zeroed counters when saving rulesets
  • From: Alban Vidal <alban.vidal@xxxxxxxxxx>
• Re: [PATCH ghak90 V6 00/10] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [nft PATCH] parser_json: Disallow ct helper as type to map to
  • From: Phil Sutter <phil@xxxxxx>