Linux TCP/IP Netfilter Devel

• Thread Index

• [PATCH nf] netfilter: cttimeout: ctnl_timeout_find_get() returns incorrect pointer to type
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] doc: Improve layout of u32 instructions
  • From: "Joseph C. Sible" <josephcsible@xxxxxxxxx>
• Re: netfilter mailing list abandoned
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: [iptables PATCH] xtables: Align return codes with legacy iptables
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Drop use of IP6T_F_PROTO
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: osf: load pf.os from expr_evaluate_osf()
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [iptables PATCH] xtables: Drop use of IP6T_F_PROTO
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: remove obsolete need_conntrack stub
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nft] src: osf: load pf.os from expr_evaluate_osf()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: release chain in flushing set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: kconfig: nat related expression depend on nftables core
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 2/2] obj: ct_timeout: don't skip zero value timeout
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/2] obj: ct_timeout: use fixed size array
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: timeout interface depend on CONFIG_NF_CONNTRACK_TIMEOUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] xtables: Align return codes with legacy iptables
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH ipset v3] Validate string type attributes in attr2data()
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH ipset v2] Check setname length in session code before copying it
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nft v5 1/3] src: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH ipset v2] Check setname length in session code before copying it
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nft] src: osf: load pf.os from expr_evaluate_osf()
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH ipset v2] Check setname length in session code before copying it
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH nft 3/4] src: tproxy: relax family restrictions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH ipset v2] Check setname length in session code before copying it
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [nft PATCH] parser_json: Fix crash in error reporting
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] py: trivial: Fix typo in comment string
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 8/9] JSON: Make match op mandatory, introduce 'in' operator
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH 0/9] JSON schema review
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft,libnftnl 0/2] rt ipsec support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_set_rbtree: add missing rb_erase() in GC routine
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH ipset] manpage: Add comment about matching on destination MAC address
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nft 2/2] test: shell: Test cases for standard prios for flowtables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft 1/2] test: shell: Test cases for standard chain prios
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/2] src: rt: add support to check if route will perform ipsec transformation
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH libnftnl 1/2] expr: rt: ipsec match support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft,libnftnl 0/2] rt ipsec support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] doc: Document implicit dependency creation for icmp/icmpv6
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nft PATCH] tests: py: Fix coloring of differences
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] ipset: Destination MAC match, consistent zero MAC checks
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nf-next v2 2/3] netfilter: nf_tables: warn when expr implements only one of activate/deactivate
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH 8/9] JSON: Make match op mandatory, introduce 'in' operator
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH ipset] manpage: Add comment about matching on destination MAC address
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH ipset v2] Check setname length in session code before copying it
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nft 2/2] tests: build: run make on each ./configure option
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/2] tests: build: run make distcheck from fresh clone
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft: Cache maintenance woes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [nft PATCH 0/2] tests/py: One enhancement and a fix
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/2] tests/py: Make nft-test.py a little more robust
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/2] tests/py: Check differing rule output for sanity
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] parser_json: Fix crash in error reporting
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] py: trivial: Fix typo in comment string
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 7/9] JSON: Rename mangle statement properties
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 8/9] JSON: Make match op mandatory, introduce 'in' operator
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 5/9] JSON: Review payload expression
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 3/9] JSON: Make meta statement/expression extensible
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 0/9] JSON schema review
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 9/9] JSON: Add metainfo object to all output
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 6/9] JSON: Rename (v)map expression properties
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 2/9] doc: Review libnftables-json.adoc
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 1/9] doc: Improve example in libnftables-json(5)
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH 4/9] JSON: Review verdict statement and expression
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 0/4] Added support for per-file variable scopes and global variables
  • From: David Fabian <david.fabian@xxxxxxxxx>
• [PATCH nf-next 3/3] netfilter: nf_tables: asynchronous release
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 2/3] netfilter: nf_tables: warn when expr implements only one of activate/deactivate
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 1/3] netfilter: nf_tables: split set destruction in deactivate and destroy phase
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next 0/3] netfilter: nf_tables: remove last synchronize_rcu from config path
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: nft: Cache maintenance woes
  • From: Phil Sutter <phil@xxxxxx>
• Re: nft: Cache maintenance woes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft: Cache maintenance woes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] tests: build: no need for root to run build tests
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf v2 2/2] netfilter: nf_tables: rework ct timeout set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 1/2] netfilter: conntrack: place 'new' timeout in first location too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• nft: Cache maintenance woes
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft 4/4] src: tproxy: add json support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 3/4] src: tproxy: relax family restrictions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 2/4] src: osf: add json support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 1/4] parser: avoid nf_key_proto redefinitions
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft 0/4] add json support for tproxy and osf expressions
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [nft PATCH] json: Fix compile error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: rt: allow checking if dst has xfrm attached
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net
  • From: Eric Westbrook <eric@xxxxxxxxxxxx>
• [nft PATCH] json: Fix compile error
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3] xtables: Fix for deleting rules with comment
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 0/4] Added support for per-file variable scopes and global variables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v2] xtables: Fix for deleting rules with comment
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] xtables: Fix for deleting rules with comment
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] xtables: Fix for deleting rules with comment
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [iptables PATCH] xtables: Fix for deleting rules with comment
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH v2 0/4] Added support for per-file variable scopes and global variables
  • From: David Fabian <david.fabian@xxxxxxxxx>
• Re: [PATCH ipset 1/4] Fix use-after-free in ipset_parse_name_compat()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset 1/4] Fix use-after-free in ipset_parse_name_compat()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset 1/4] Fix use-after-free in ipset_parse_name_compat()
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: release chain in flushing set
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: [PATCH ipset 1/4] Fix use-after-free in ipset_parse_name_compat()
  • From: Sven-Haegar Koch <haegar@xxxxxxxxx>
• Re: [PATCH nf] netfilter: kconfig: nat related expression depend on nftables core
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: kconfig: nat related expression depend on nftables core
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/2] ipset: Allow matching on destination MAC address for mac and ipmac sets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset 3/4] Check setname length in session code before copying it
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset 4/4] Fix leak in build_argv() on line parsing error
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset 2/4] Simplify return statement in ipset_mnl_query()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH ipset 1/4] Fix use-after-free in ipset_parse_name_compat()
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• RE: [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• RE: [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• Re: [PATCH ghak90 (was ghak32) V4 03/10] audit: log container info of syscalls
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• Re: [PATCH ghak90 (was ghak32) V4 02/10] audit: add container id
  • From: Steve Grubb <sgrubb@xxxxxxxxxx>
• [PATCH nft 2/2] test: shell: Test cases for standard prios for flowtables
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft 1/2] test: shell: Test cases for standard chain prios
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH 3/3 nft v4] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernández Mancera <ffmancera@xxxxxxxxxx>
• Re: mmotm 2018-08-23-17-26 uploaded (netfilter: undefined reference)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [nft PATCH] doc: Document implicit dependency creation for icmp/icmpv6
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] tests: py: Fix coloring of differences
  • From: Phil Sutter <phil@xxxxxx>
• [nft PATCH] parser_bison: Fix for ECN keyword in LHS of relational
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nft] src: honor /etc/services
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next v2 2/3] netfilter: Add support for IPv6 segment routing 'SEG6' target
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• Re: [PATCH v2 nft] Standard prios: Make invalid prio error more specific
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 00/10] Some fixes and enhancements around ebtables-translate
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf] netfilter: xt_checksum: ignore gso skbs
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nft v4] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf v2 2/2] netfilter: nf_tables: rework ct timeout set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: conntrack: place 'new' timeout in first location too
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• Re: [PATCH] netfilter: xt_cluster: add dependency on conntrack module
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: conntrack: remove duplicated include from nf_conntrack_proto_udp.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [nf-next v2 2/3] netfilter: Add support for IPv6 segment routing 'SEG6' target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH 00/10] Some fixes and enhancements around ebtables-translate
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 06/10] extensions: libebt_mark: Drop mark_supplied check
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/10] ebtables: trivial: Leverage C99-style initializers a bit more
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/10] ip6tables-translate: Fix libip6t_mh.txlate test
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/10] xtables: Add missing deinitialization
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 07/10] ebtables: Review match/target lookup once more
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/10] extensions: AUDIT: Provide translation
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/10] xlate-test: Fix for calling wrong command name
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 05/10] xtables: Add a few missing exit calls
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 04/10] ebtables-translate: Fix segfault while parsing extension options
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/10] ebtables-translate: Fix for libebt_limit.txlate
  • From: Phil Sutter <phil@xxxxxx>
• Re: Helper for RTSP connection tracking/NAT?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Helper for RTSP connection tracking/NAT?
  • From: Nicolas Boullis <nboullis@xxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: rework ct timeout set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: rework ct timeout set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 nft] Standard prios: Make invalid prio error more specific
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft] Standard prios: Make invalid prio error more specific
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: rework ct timeout set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: rework ct timeout set support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf v2] netfilter: conntrack: reset tcp maxwin on re-register
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• RE: [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• Re: Helper for RTSP connection tracking/NAT?
  • From: Nicolas Boullis <nboullis@xxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: rework ct timeout set support
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH 3/3 nft v4] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/3 nft v4] src: mnl: make nft_mnl_talk() public
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/3 nft v4] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [nf-next v2 3/3] netfilter: using ip6tables as L2/L3/L4 classifier for SRv6
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [nf-next v2 2/3] netfilter: Add support for IPv6 segment routing 'SEG6' target
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [nf-next v2 1/3] netfilter: export SRH processing functions from seg6local
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• Re: [PATCH v2 nf] netfilter: xt_checksum: ignore gso skbs
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: Helper for RTSP connection tracking/NAT?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: Helper for RTSP connection tracking/NAT?
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: xt_cluster: add dependency on conntrack module
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v2 nf] netfilter: xt_checksum: ignore gso skbs
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH ipset 4/4] Fix leak in build_argv() on line parsing error
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH ipset 3/4] Check setname length in session code before copying it
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH ipset 2/4] Simplify return statement in ipset_mnl_query()
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH ipset 1/4] Fix use-after-free in ipset_parse_name_compat()
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH ipset 0/4] Fix issues reported by Covscan
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH] netfilter: xt_cluster: add dependency on conntrack module
  • From: Martin Willi <martin@xxxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: xt_checksum: ignore gso skbs
  • From: Michal Kubecek <mkubecek@xxxxxxx>
• Re: [nf-next 2/3] netfilter: Add support for IPv6 segment routing 'SEG6' target
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [PATCH 3/3 nft v3] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/3 nft v3] src: mnl: make nft_mnl_talk() public
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/3 nft v3] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Helper for RTSP connection tracking/NAT?
  • From: Nicolas Boullis <nboullis@xxxxxxxxxx>
• Re: [nf-next 2/3] netfilter: Add support for IPv6 segment routing 'SEG6' target
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Use meta l4proto for -p match
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] netfilter: conntrack: remove duplicated include from nf_conntrack_proto_udp.c
  • From: Yue Haibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH] xtables: Fix for segfault when registering hashlimit extension
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH] xtables: Fix for segfault when registering hashlimit extension
  • From: Heena Sirwani <heenasirwani@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: conntrack: reset tcp maxwin on re-register
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netfilter: ipset: export indexes via netlink
  • From: Florent Fourcot <florent.fourcot@xxxxxxxxxx>
• [iptables PATCH] xtables: Use meta l4proto for -p match
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf] netfilter: xt_checksum: ignore gso skbs
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 1/2] ipset: Allow matching on destination MAC address for mac and ipmac sets
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• Re: [PATCH v2] nft: Fix build failure in rule.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/15] Netfilter/IPVS fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH] nft: Fix build failure in rule.c
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH v2] nft: Fix build failure in rule.c
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH 1/2] ipset: Allow matching on destination MAC address for mac and ipmac sets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH 14/15] netfilter: nft_tproxy: Fix missing-braces warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/15] netfilter: nft_dynset: allow dynamic updates of non-anonymous set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/15] netfilter: uapi: fix linux/netfilter/nf_osf.h userspace compilation errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/15] netfilter: nft_ct: make l3 protocol field optional for timeout object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/15] netfilter: doc: Add nf_tables part in tproxy.txt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/15] netfilter: x_tables: do not fail xt_alloc_table_info too easilly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/15] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/15] netfilter: nf_tables: don't prevent event handler from device cleanup on netns exit
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/15] netfilter: conntrack: fix removal of conntrack entries when l4tracker is removed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/15] netfilter: nf_tables: fix register ordering
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/15] netfilter: fix memory leaks on netlink_dump_start error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/15] netfilter: nft_set: fix allocation size overflow in privsize callback.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/15] netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 03/15] ipvs: don't show negative times in ip_vs_conn
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/15] jiffies: add utility function to calculate delta in ms
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/15] Netfilter/IPVS fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2] ipset: Make invalid MAC address checks consistent
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH 1/2] ipset: Allow matching on destination MAC address for mac and ipmac sets
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [PATCH 0/2] ipset: Destination MAC match, consistent zero MAC checks
  • From: Stefano Brivio <sbrivio@xxxxxxxxxx>
• [iptables PATCH] xtables: Fix for segfault in iptables-nft
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] nft: Fix build failure in rule.c
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] nft: Fix build failure in rule.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: Add script to build PDF files
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] doc: Add script to build PDF files
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH] nft: Fix build failure in rule.c
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH nft] build: remove PDF documentation generation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• linux-next: manual merge of the ipvs tree with the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [iptables] extensions: add support for 'SEG6' target
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• Re: [nf-next 2/3] netfilter: Add support for IPv6 segment routing 'SEG6' target
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• Re: [nf-next 2/3] netfilter: Add support for IPv6 segment routing 'SEG6' target
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] build: remove PDF documentation generation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] ebtables: Fix entries count in chain listing
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] xtables: Make 'iptables -S nonexisting' return non-zero
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] ebtables: Fix for listing of non-existent chains
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH] xtables: Fix for no output in iptables-nft -S
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 0/3] libxt vs libebt fixes
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] doc: net: Add nf_tables part in tproxy.txt
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_ct: make l3 protocol field optional for timeout object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_tproxy: Fix missing-braces warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: fix memory leaks on netlink_dump_start error
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nft_set: fix allocation size overflow in privsize callback.
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf] netfilter: conntrack: fix removal of conntrack entries when l4tracker is removed
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf 0/2] netfilter: nf_tables: fix register ordering
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter/x_tables: do not fail xt_alloc_table_info too easilly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] ebtables: Fix entries count in chain listing
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] xtables: Make 'iptables -S nonexisting' return non-zero
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables] extensions: add support for 'SEG6' target
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [iptables] extensions: add support for 'SEG6' target
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [nf-next 2/3] netfilter: Add support for IPv6 segment routing 'SEG6' target
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [nf-next 3/3] netfilter: using ip6tables as L2/L3/L4 classifier for SRv6
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• [nf-next 1/3] netfilter: export SRH processing functions from seg6local
  • From: Ahmed Abdelsalam <amsalam20@xxxxxxxxx>
• Re: ebtables-nft: user-defined chain policies
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: ebtables-nft: user-defined chain policies
  • From: Phil Sutter <phil@xxxxxx>
• Re: linux-next: manual merge of the net-next tree with the netfilter tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 4/4] src: integrate stateful expressions into sets and maps
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 3/4] src: simplify map statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 2/4] rule: do not print elements in dynamically populated sets with `-s'
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 1/4] statement: incorrect spacing in set reference
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_dynset: allow dynamic updates of non-anonymous set
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: manual merge of the net-next tree with the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: ebtables-nft: user-defined chain policies
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• RE: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• Re: ebtables-nft: user-defined chain policies
  • From: Eric Garver <e@xxxxxxx>
• Re: ebtables-nft: user-defined chain policies
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] ebtables: Fix for listing of non-existent chains
  • From: Phil Sutter <phil@xxxxxx>
• Re: ebtables-nft: user-defined chain policies
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• RE: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• RE: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• Re: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_tproxy: Fix missing-braces warning
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [iptables PATCH] xtables: Fix for no output in iptables-nft -S
  • From: Phil Sutter <phil@xxxxxx>
• ebtables-nft: user-defined chain policies
  • From: Phil Sutter <phil@xxxxxx>
• Re: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH v5 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• Re: [PATCH] doc: Remove double-spacing in text
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] build: remove PDF documentation generation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [nft PATCH] evaluate: reject: Allow icmpx in inet/bridge families
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nft v2] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5 nft] Set/print standard chain prios with textual names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nft v2] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] build: remove PDF documentation generation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: Remove double-spacing in text
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] doc: Remove double-spacing in text
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH] doc: Remove double-spacing in text
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [BUG] 4.18-rcX iptables regression
  • From: Bob Tracy <rct@xxxxxxxxxxxxxxxx>
• Re: Linux NATting does not support NAT hole punching?
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: David Ahern <dsahern@xxxxxxxxx>
• xtables-addon build with kernel 4.17/4.18 is (still) "not officially supported yet. continue at own luck"
  • From: PGNet Dev <pgnet.dev@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_ct: make l3 protocol field optional for timeout object
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v5 3/3] tests: shell: add tests for ct timeout objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v5 2/3] tests: py: add ct timeout tests
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v5 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl 2/2] examples: ct_timeout: remove unnecessary and non-existing include
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl 1/2] src: ct_timeout: remove unnecessary and non-existing include
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: nft equivalent of -m time
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• [nft PATCH] evaluate: reject: Allow icmpx in inet/bridge families
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/3 nft v2] src: mnl: make nft_mnl_talk() public
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/3 nft v2] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH] uapi: fix linux/netfilter/nf_osf.h userspace compilation errors
  • From: "Dmitry V. Levin" <ldv@xxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• Re: [PATCH] nft: doc: fix make distcheck
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: nft equivalent of -m time
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: [PATCH] nft: doc: fix make distcheck
  • From: Pablo Neira Ayuso <git@xxxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnftnl v6 1/3] src: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: nft equivalent of -m time
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• [PATCH] nft: Fix configure.ac so --enable-pdf-doc actually works
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH v2] nft: doc: changes in configure file for PDF creation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Florian Westphal <fw@xxxxxxxxx>
• nft equivalent of -m time
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: [RFC/RFT, net-next, 00/17] net: Convert neighbor tables to per-namespace
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH] nft: doc: fix make distcheck
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [RFC/RFT, net-next, 00/17] net: Convert neighbor tables to per-namespace
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Saber Rezvani <irsaber@xxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH v2] nft: doc: Fixed typos in asciidoc
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nft] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/8] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_ct: make l3 protocol field optional for timeout object
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [iptables PATCH 0/3] libxt vs libebt fixes
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/3] xtables: Use native nftables limit expression
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/3] ebtables: Merge libebt_limit.c into libxt_limit.c
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/3] arptables: Drop extensions/libxt_mangle.c
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl v6 3/3] examples: Add test for assigning timeout objects via rule
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v6 2/3] examples: add nft-ct-timeout-{add,del,get}
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v6 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/3 nft] src: mnl: make nft_mnl_talk() public
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/3 nft] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl v5 1/3] src: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/8] netfilter: nfnetlink_osf: add missing enum in nfnetlink_osf uapi header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/8] netfilter: remove ifdef around cttimeout in struct nf_conntrack_l4proto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/8] netfilter: nft_osf: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: nfnetlink_osf: fix using plain integer as NULL warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/8] netfilter: nft_ct: enable conntrack for helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/8] netfilter: nft_ct: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/8] netfilter: cttimeout: decouple timeout policy from nfnetlink_cttimeout object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/8] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] doc: net: Add nf_tables part in tproxy.txt
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [iptables PATCH] ebtables: Remove flags misinterpretations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] ebtables: Remove flags misinterpretations
  • From: Phil Sutter <phil@xxxxxx>
• Re: Creating custom ipsets
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: Creating custom ipsets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Creating custom ipsets
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: Creating custom ipsets
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Don't pass full invflags to add_compat()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl v5 3/3] examples: Add test for assigning timeout objects via rule
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v5 2/3] examples: add nft-ct-timeout-{add,del,get}
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v5 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Creating custom ipsets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Creating custom ipsets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Creating custom ipsets
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• [iptables PATCH] xtables: Don't pass full invflags to add_compat()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Phil Sutter <phil@xxxxxx>
• Re: Creating custom ipsets
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [PATCH nft] tests: shell: validate too deep jumpstack from basechain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] nft: doc: changes in configure file for PDF creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: doc: Fixed all the typos in asciidoc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nfnetlink_osf: fix using plain integer as NULL warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nfnetlink_osf: add missing enum in nfnetlink_osf uapi header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: doc: Fixed all the typos in asciidoc
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH] netfilter/x_tables: do not fail xt_alloc_table_info too easilly
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [PATCH] netfilter/x_tables: do not fail xt_alloc_table_info too easilly
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [PATCH] nft: doc: Fixed all the typos in asciidoc
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH] nft: doc: fix make distcheck
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH] nft: doc: Fixed all the typos in asciidoc
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] nft: doc: fix make distcheck
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH net-next] netfilter: nfnetlink_osf: fix using plain integer as NULL warning
  • From: Wei Yongjun <weiyongjun1@xxxxxxxxxx>
• [PATCH v2] nft: doc: changes in configure file for PDF creation
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH nf-next] netfilter: nfnetlink_osf: add missing enum in nfnetlink_osf uapi header
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH] netfilter/x_tables: do not fail xt_alloc_table_info too easilly
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] doc: user niggles
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: Add comment possibility to man page
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: fix syntax for RULES
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: allow to use new osf expression from assignment statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] expr: osf: modify _snprintf_default function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft v2] src: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ in osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: nft_osf: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl v4 1/3] src: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_ct: enable conntrack for helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/4] netfilter: nft_ct: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/4] netfilter: cttimeout: decouple timeout policy from nfnetlink_cttimeout object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/4,v5] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/4] netfilter: remove ifdef around cttimeout in struct nf_conntrack_l4proto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Mike Rapoport <rppt@xxxxxxxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Saber Rezvani <irsaber@xxxxxxxx>
• Re: url filtering with netfiler
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [iptables PATCH] xtables: Spelling fixes in xtables-monitor
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] xtables: Spelling fixes in xtables-monitor
  • From: Phil Sutter <phil@xxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• [iptables PATCH] xtables: Improve xtables-monitor first impression
  • From: Phil Sutter <phil@xxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• [iptables PATCH] xtables: Fix for wrong counter format in -S output
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 2/2 nft v2] tests: improve test cases for osf
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft v2] src: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ in osf.c
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v2] netfilter: nft_osf: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH libnftnl] expr: osf: modify _snprintf_default function
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH] doc: user niggles
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [BUG] 4.18-rcX iptables regression
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• linux-next: manual merge of the net-next tree with the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH nft] doc: Add comment possibility to man page
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH nft] doc: fix syntax for RULES
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Jan Kara <jack@xxxxxxx>
• [PATCH nft] doc: Add comment possibility to man page
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft] doc: fix syntax for RULES
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Fix potential segfault in nft_rule_append()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH v3 0/7] Fixes and tests for {eb,arp}tables-{save,restore}
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] xtables: Fix potential segfault in nft_rule_append()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 0/7] Fixes and tests for {eb,arp}tables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 5/7] xtables: Implement arptables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 7/7] tests: Add ebtables-{save,restore} testcases
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 2/7] xtables-restore: Make COMMIT support configurable
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 1/7] xtables-restore: Improve user-defined chain detection
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/7] ebtables: Review match/target lookup
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/7] ebtables-restore: Use xtables_restore_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 6/7] tests: Add arptables-{save,restore} testcases
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables] xtables: Match verbose ip{,6}tables output with legacy
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next] netfilter: nft_osf: use OSF_GENRE_SIZE instead of IFNAMSIZ
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] tests: improve test cases for osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_osf: use OSF_GENRE_SIZE instead of IFNAMSIZ
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/2] obj: add tunnel support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 2/2] expr: add support for matching tunnel metadata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft] src: use OSF_GENRE_SIZE instead of IFNAMSIZ in osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_osf: use OSF_GENRE_SIZE instead of IFNAMSIZ
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nft] tests: improve test cases for osf
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft] src: use OSF_GENRE_SIZE instead of IFNAMSIZ in osf.c
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_osf: use OSF_GENRE_SIZE instead of IFNAMSIZ
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH] doc: Changes following detailed comparison with last XML version
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• [PATCH] doc: Changes following detailed comparison with last XML version
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH 00/21] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 03/21] netfilter: use PTR_ERR_OR_ZERO()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/21] netfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/21] netfilter: nf_tables: implement Passive OS fingerprint module in nft_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/21] netfilter: use kvmalloc_array to allocate memory for hashtable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/21] netfilter: nfnetlink_osf: rename nf_osf header file to nfnetlink_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/21] netfilter: nf_osf: move nf_osf_fingers to non-uapi header file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/21] netfilter: nf_tables: Add native tproxy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/21] netfilter: nf_tables: add tunnel support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/21] netfilter: nft_tunnel: fix sparse errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/21] netfilter: conntrack: avoid use-after free on rmmod
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/21] netfilter: kconfig: remove ct zone/label dependencies
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/21] netfilter: nf_tables: simplify NLM_F_CREATE handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/21] netfilter: nf_tables: match on tunnel metadata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/21] netfilter: bridge: Expose nf_tables bridge hook priorities through uapi
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/21] netfilter: nft_tproxy: Add missing config check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/21] netfilter: cttimeout: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/21] netfilter: nf_tables: remove unused variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/21] netfilter: nf_tables: flow event notifier must use transaction mutex
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/21] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/21] netfilter: nf_osf: add nf_osf_find()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/21] netfilter: nf_tables: handle meta/lookup with direct call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/21] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v4 3/3] tests: shell: add tests for ct timeout objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v4 2/3] tests: py: add ct timeout tests
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v4 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v4 3/3] examples: Add test for assigning timeout objects via rule
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v4 2/3] examples: add nft-ct-timeout-{add,del,get}
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v4 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH] doc: Miscellaneous spelling fixes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables] xtables: Match verbose ip{,6}tables output with legacy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Match verbose ip{,6}tables output with legacy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Print error when listing non-existent chains
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Fix for no output on first iptables-nft invocation
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Do not count rules as chain references
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH v2] xtables: Reserve space for 'opt' column in ip6tables output
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 21/27] xtables-restore: Make COMMIT support configurable
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 21/27] xtables-restore: Make COMMIT support configurable
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 25/27] ebtables: Support --init-table command
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 21/27] xtables-restore: Make COMMIT support configurable
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v11] netfilter: nft_ct: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v4] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [iptables PATCH] xtables: Match verbose ip{,6}tables output with legacy
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] doc: Miscellaneous spelling fixes
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] doc: resolve run-together IPv6 address specification headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: Remove UTF8(?) sequences
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] test: py: fix osf testcases warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] doc: resolve run-together IPv6 address specification headers
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH] doc: Remove UTF8(?) sequences
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nftables] test: py: fix osf testcases warning
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nftables v2] doc: add osf expression to man page
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: nft_tunnel: fix sparse errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nftables] test: py: add test cases for "osf" matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nftables] test: py: add test cases for "osf" matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] doc: add osf expression to man page
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [nf-next:master 15/20] net/netfilter/nft_tunnel.c:117:25: sparse: incorrect type in assignment (different base types)
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nftables v2] doc: add osf expression to man page
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nftables] doc: add osf expression to man page
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: doc: correct some typos in asciidoc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: restore too deep jumpstack validation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nftables] test: py: add test cases for "osf" matching
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft v3 1/2] src: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH v2 nf-next] netfilter: conntrack: avoid use-after free on rmmod
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 nf-next] netfilter: conntrack: avoid use-after free on rmmod
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH][v3] netfilter: use kvmalloc_array to allocate memory for hashtable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next] netfilter: kconfig: remove ct zone/label dependencies
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 nf-next] netfilter: kconfig: remove ct zone/label dependencies
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] nft: doc: changes in configure file for PDF creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v2] xtables: Reserve space for 'opt' column in ip6tables output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] xtables: Reserve space for 'opt' column in ip6tables output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] xtables: Print error when listing non-existent chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] xtables: Fix for no output on first iptables-nft invocation
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] xtables: Do not count rules as chain references
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: nf_tables: simplify NLM_F_CREATE handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH v3] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: flow event notifier must use transaction mutex
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_tproxy: Add missing config check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nf-next] nfnetlink_osf: rename nf_osf header file to nfnetlink_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/2] fixup: nf_osf: move nf_osf_fingers to non-uapi nf_osf header file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net v2 0/2] fix glitch in IPVS /proc handlers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 1/2] netfilter: Kconfig: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nft] Expose socket mark via socket expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nft] Add tproxy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nft] tests: py: Add test cases for tproxy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nft] doc: Add tproxy statement to man page
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• [PATCH v5 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Saber Rezvani <irsaber@xxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_tproxy: Add missing config check
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• [PATCH nf 0/2] netfilter: nf_tables: fix register ordering
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_tables: don't prevent event handler from device cleanup on netns exit
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: nf_tables: fix register ordering
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: nft_tproxy: Add missing config check
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: linux-next: Tree for Aug 2 (netfilter: tproxy)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Aug 2 (netfilter: tproxy)
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: linux-next: Tree for Aug 2 (netfilter: tproxy)
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nf_tables: add tunnel support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nf_tables: match on tunnel metadata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/2] nf_tables lightweight tunneling support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_nat: return the same reply tuple for matching CTs
  • From: Martynas Pumputis <martynas@weave.works>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: linux-next: Tree for Aug 2 (netfilter: tproxy)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [iptables PATCH 13/27] ebtables: Fix match_list insertion
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 17/27] arptables: Fix memleaks in do_commandarp()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 18/27] arptables: Fix for trailing spaces in output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/27] Consolidate DEBUGP macros
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 23/27] ebtables: Review match/target lookup
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 04/27] xtables: Free chains in NFT_COMPAT_CHAIN_ADD jobs
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 05/27] xtables: Fix compilation with NLDEBUG defined
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 12/27] ebtables: Fix for wrong program name in error messages
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 24/27] xtables: Implement arptables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/27] xtables: Allocate rule cache just once
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/27] xshared: Consolidate argv construction routines
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 14/27] ebtables: Print non-standard target parameters
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 22/27] ebtables-restore: Use xtables_restore_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 25/27] ebtables: Support --init-table command
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 16/27] arptables: Fix jumps into user-defined chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 19/27] arptables: Print policy only for base chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 27/27] tests: Add ebtables-{save,restore} testcases
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 26/27] tests: Add arptables-{save,restore} testcases
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 21/27] xtables-restore: Make COMMIT support configurable
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/27] xtables: Fix for nft_rule_flush() returning garbage
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/27] xtables: Fix symlinks/names for ebtables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/27] xshared: Consolidate parse_counters()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/27] xtables: Free chains in NFT_COMPAT_CHAIN_USER_DEL jobs
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 15/27] arptables: Fix opcode printing in numeric output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 00/27] Fixes and tests for {eb,arp}tables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 06/27] xtables: Use correct built-in chain count
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 07/27] xtables: Fix program name in xtables_error()
  • From: Phil Sutter <phil@xxxxxx>
• url filtering with netfiler
  • From: Saber Rezvani <irsaber@xxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• [PATCH v2 nf] netfilter: conntrack: fix removal of conntrack entries when l4tracker is removed
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [PATCH nf-next v10] netfilter: nft_ct: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v10] netfilter: nft_ct: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v3 2/2] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v3 1/2] netfilter: Kconfig: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [iptables PATCH] nft: don't print rule counters unless verbose
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] nft: don't print rule counters unless verbose
  • From: Eric Garver <e@xxxxxxx>
• Re: [PATCH nf-next v10] netfilter: nft_ct: add ct timeout support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH nft 0/5] doc: Wrap extra long lines to 80 chars
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nft] Expose socket mark via socket expression
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH v2 nft] doc: Add tproxy statement to man page
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [iptables PATCH 14/23] ebtables: Fix segfault when parsing a rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 13/23] ebtables: Fix loading of non-standard targets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/5] doc: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft 5/5] doc: statements.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH nft] doc: nft.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• [PATCH nft 4/5] doc: stateful-objects.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft 3/5] doc: primary-expression.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft 2/5] doc: payload-expression.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft 1/5] doc: data-types.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH nf-next v10] netfilter: nft_ct: add ct timeout support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH] netfilter: ipset: fix ip_set_list allocation failure
  • From: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [iptables PATCH 14/23] ebtables: Fix segfault when parsing a rule
  • From: Phil Sutter <phil@xxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Christopher Lameter <cl@xxxxxxxxx>
• Re: [iptables PATCH 13/23] ebtables: Fix loading of non-standard targets
  • From: Phil Sutter <phil@xxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Misuse of constructors
  • From: Matthew Wilcox <willy@xxxxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Christopher Lameter <cl@xxxxxxxxx>
• Re: [PATCH nft] doc: nft.txt: Wrap extra long lines to 80 chars
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] doc: nft.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: don't prevent event handler from device cleanup on netns exit
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>