Linux TCP/IP Netfilter Devel

• Thread Index

• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• RE: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• Re: ebtables-nft: user-defined chain policies
  • From: Eric Garver <e@xxxxxxx>
• Re: ebtables-nft: user-defined chain policies
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] ebtables: Fix for listing of non-existent chains
  • From: Phil Sutter <phil@xxxxxx>
• Re: ebtables-nft: user-defined chain policies
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• RE: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• RE: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• Re: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_tproxy: Fix missing-braces warning
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [iptables PATCH] xtables: Fix for no output in iptables-nft -S
  • From: Phil Sutter <phil@xxxxxx>
• ebtables-nft: user-defined chain policies
  • From: Phil Sutter <phil@xxxxxx>
• Re: dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH v5 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• dropped SSH sessions with kernels >= 4.14 upon iptables clear then load [REGRESSION][BISECTED]
  • From: "Doug Smythies" <dsmythies@xxxxxxxxx>
• Re: [PATCH] doc: Remove double-spacing in text
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] build: remove PDF documentation generation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [nft PATCH] evaluate: reject: Allow icmpx in inet/bridge families
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nft v2] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5 nft] Set/print standard chain prios with textual names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nft v2] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] build: remove PDF documentation generation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: Remove double-spacing in text
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] doc: Remove double-spacing in text
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH] doc: Remove double-spacing in text
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [BUG] 4.18-rcX iptables regression
  • From: Bob Tracy <rct@xxxxxxxxxxxxxxxx>
• Re: Linux NATting does not support NAT hole punching?
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: David Ahern <dsahern@xxxxxxxxx>
• xtables-addon build with kernel 4.17/4.18 is (still) "not officially supported yet. continue at own luck"
  • From: PGNet Dev <pgnet.dev@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_ct: make l3 protocol field optional for timeout object
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v5 3/3] tests: shell: add tests for ct timeout objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v5 2/3] tests: py: add ct timeout tests
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v5 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl 2/2] examples: ct_timeout: remove unnecessary and non-existing include
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl 1/2] src: ct_timeout: remove unnecessary and non-existing include
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: nft equivalent of -m time
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• [nft PATCH] evaluate: reject: Allow icmpx in inet/bridge families
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 3/3 nft v2] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/3 nft v2] src: mnl: make nft_mnl_talk() public
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/3 nft v2] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH] uapi: fix linux/netfilter/nf_osf.h userspace compilation errors
  • From: "Dmitry V. Levin" <ldv@xxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• Re: [PATCH] nft: doc: fix make distcheck
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: nft equivalent of -m time
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: [PATCH] nft: doc: fix make distcheck
  • From: Pablo Neira Ayuso <git@xxxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH libnftnl v6 1/3] src: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: nft equivalent of -m time
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• [PATCH] nft: Fix configure.ac so --enable-pdf-doc actually works
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH v2] nft: doc: changes in configure file for PDF creation
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: nft equivalent of -m time
  • From: Florian Westphal <fw@xxxxxxxxx>
• nft equivalent of -m time
  • From: "Neal P. Murphy" <neal.p.murphy@xxxxxxxxxxxx>
• Re: [RFC/RFT, net-next, 00/17] net: Convert neighbor tables to per-namespace
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH] nft: doc: fix make distcheck
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [RFC/RFT, net-next, 00/17] net: Convert neighbor tables to per-namespace
  • From: Vasily Averin <vvs@xxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Saber Rezvani <irsaber@xxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH v2] nft: doc: Fixed typos in asciidoc
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nft] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 0/8] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_ct: make l3 protocol field optional for timeout object
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [iptables PATCH 0/3] libxt vs libebt fixes
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 1/3] xtables: Use native nftables limit expression
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 2/3] ebtables: Merge libebt_limit.c into libxt_limit.c
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/3] arptables: Drop extensions/libxt_mangle.c
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl v6 3/3] examples: Add test for assigning timeout objects via rule
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v6 2/3] examples: add nft-ct-timeout-{add,del,get}
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v6 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/3 nft] src: mnl: make nft_mnl_talk() public
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/3 nft] files: osf: copy iptables/utils/pf.os into nftables tree
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl v5 1/3] src: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/8] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/8] netfilter: nfnetlink_osf: add missing enum in nfnetlink_osf uapi header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/8] netfilter: remove ifdef around cttimeout in struct nf_conntrack_l4proto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/8] netfilter: nft_osf: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/8] netfilter: nfnetlink_osf: fix using plain integer as NULL warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/8] netfilter: nft_ct: enable conntrack for helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 5/8] netfilter: nft_ct: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/8] netfilter: cttimeout: decouple timeout policy from nfnetlink_cttimeout object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/8] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] doc: net: Add nf_tables part in tproxy.txt
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [iptables PATCH] ebtables: Remove flags misinterpretations
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] ebtables: Remove flags misinterpretations
  • From: Phil Sutter <phil@xxxxxx>
• Re: Creating custom ipsets
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: Creating custom ipsets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Creating custom ipsets
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: Creating custom ipsets
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Don't pass full invflags to add_compat()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH libnftnl v5 3/3] examples: Add test for assigning timeout objects via rule
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v5 2/3] examples: add nft-ct-timeout-{add,del,get}
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v5 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Creating custom ipsets
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: Creating custom ipsets
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: Creating custom ipsets
  • From: Akshat Kakkar <akshat.1984@xxxxxxxxx>
• [iptables PATCH] xtables: Don't pass full invflags to add_compat()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] tests: Fix skipping for recent nft-only tests
  • From: Phil Sutter <phil@xxxxxx>
• Re: Creating custom ipsets
  • From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
• [PATCH nft] tests: shell: validate too deep jumpstack from basechain
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2] nft: doc: changes in configure file for PDF creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: doc: Fixed all the typos in asciidoc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net-next] netfilter: nfnetlink_osf: fix using plain integer as NULL warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nfnetlink_osf: add missing enum in nfnetlink_osf uapi header
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: doc: Fixed all the typos in asciidoc
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH] netfilter/x_tables: do not fail xt_alloc_table_info too easilly
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [PATCH] netfilter/x_tables: do not fail xt_alloc_table_info too easilly
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [PATCH] nft: doc: Fixed all the typos in asciidoc
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH] nft: doc: fix make distcheck
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH] nft: doc: Fixed all the typos in asciidoc
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH] nft: doc: fix make distcheck
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH net-next] netfilter: nfnetlink_osf: fix using plain integer as NULL warning
  • From: Wei Yongjun <weiyongjun1@xxxxxxxxxx>
• [PATCH v2] nft: doc: changes in configure file for PDF creation
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH nf-next] netfilter: nfnetlink_osf: add missing enum in nfnetlink_osf uapi header
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH] netfilter/x_tables: do not fail xt_alloc_table_info too easilly
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] doc: user niggles
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: Add comment possibility to man page
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nft] doc: fix syntax for RULES
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft] parser_bison: allow to use new osf expression from assignment statement
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] expr: osf: modify _snprintf_default function
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft v2] src: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ in osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2] netfilter: nft_osf: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl v4 1/3] src: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_ct: enable conntrack for helpers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 4/4] netfilter: nft_ct: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/4] netfilter: cttimeout: decouple timeout policy from nfnetlink_cttimeout object
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 1/4,v5] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 3/4] netfilter: remove ifdef around cttimeout in struct nf_conntrack_l4proto
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Mike Rapoport <rppt@xxxxxxxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Saber Rezvani <irsaber@xxxxxxxx>
• Re: url filtering with netfiler
  • From: Laura Garcia <nevola@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [iptables PATCH] xtables: Spelling fixes in xtables-monitor
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] xtables: Spelling fixes in xtables-monitor
  • From: Phil Sutter <phil@xxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• [iptables PATCH] xtables: Improve xtables-monitor first impression
  • From: Phil Sutter <phil@xxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• [iptables PATCH] xtables: Fix for wrong counter format in -S output
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH 2/2 nft v2] tests: improve test cases for osf
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft v2] src: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ in osf.c
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next v2] netfilter: nft_osf: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH libnftnl] expr: osf: modify _snprintf_default function
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH] doc: user niggles
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [BUG] 4.18-rcX iptables regression
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• linux-next: manual merge of the net-next tree with the netfilter tree
  • From: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
• Re: [PATCH nft] doc: Add comment possibility to man page
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH nft] doc: fix syntax for RULES
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Jan Kara <jack@xxxxxxx>
• [PATCH nft] doc: Add comment possibility to man page
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft] doc: fix syntax for RULES
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Fix potential segfault in nft_rule_append()
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH v3 0/7] Fixes and tests for {eb,arp}tables-{save,restore}
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] xtables: Fix potential segfault in nft_rule_append()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v3 0/7] Fixes and tests for {eb,arp}tables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 5/7] xtables: Implement arptables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 7/7] tests: Add ebtables-{save,restore} testcases
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 2/7] xtables-restore: Make COMMIT support configurable
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 1/7] xtables-restore: Improve user-defined chain detection
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 4/7] ebtables: Review match/target lookup
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 3/7] ebtables-restore: Use xtables_restore_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 6/7] tests: Add arptables-{save,restore} testcases
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables] xtables: Match verbose ip{,6}tables output with legacy
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next] netfilter: nft_osf: use OSF_GENRE_SIZE instead of IFNAMSIZ
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/2 nft] tests: improve test cases for osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_osf: use OSF_GENRE_SIZE instead of IFNAMSIZ
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 1/2] obj: add tunnel support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH libnftnl 2/2] expr: add support for matching tunnel metadata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nft] src: use OSF_GENRE_SIZE instead of IFNAMSIZ in osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_osf: use OSF_GENRE_SIZE instead of IFNAMSIZ
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nft] tests: improve test cases for osf
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nft] src: use OSF_GENRE_SIZE instead of IFNAMSIZ in osf.c
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next] netfilter: nft_osf: use OSF_GENRE_SIZE instead of IFNAMSIZ
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH] doc: Changes following detailed comparison with last XML version
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• [PATCH] doc: Changes following detailed comparison with last XML version
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH 00/21] Netfilter updates for net-next
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 03/21] netfilter: use PTR_ERR_OR_ZERO()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 05/21] netfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 06/21] netfilter: nf_tables: implement Passive OS fingerprint module in nft_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 08/21] netfilter: use kvmalloc_array to allocate memory for hashtable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 10/21] netfilter: nfnetlink_osf: rename nf_osf header file to nfnetlink_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 09/21] netfilter: nf_osf: move nf_osf_fingers to non-uapi header file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 07/21] netfilter: nf_tables: Add native tproxy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 15/21] netfilter: nf_tables: add tunnel support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 21/21] netfilter: nft_tunnel: fix sparse errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 20/21] netfilter: conntrack: avoid use-after free on rmmod
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 19/21] netfilter: kconfig: remove ct zone/label dependencies
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 18/21] netfilter: nf_tables: simplify NLM_F_CREATE handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 16/21] netfilter: nf_tables: match on tunnel metadata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 17/21] netfilter: bridge: Expose nf_tables bridge hook priorities through uapi
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 14/21] netfilter: nft_tproxy: Add missing config check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 13/21] netfilter: cttimeout: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 12/21] netfilter: nf_tables: remove unused variable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 11/21] netfilter: nf_tables: flow event notifier must use transaction mutex
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 04/21] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 02/21] netfilter: nf_osf: add nf_osf_find()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 01/21] netfilter: nf_tables: handle meta/lookup with direct call
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 00/21] Netfilter updates for net-next
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft v4 3/3] tests: shell: add tests for ct timeout objects
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v4 2/3] tests: py: add ct timeout tests
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v4 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v4 3/3] examples: Add test for assigning timeout objects via rule
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v4 2/3] examples: add nft-ct-timeout-{add,del,get}
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH libnftnl v4 1/3] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [PATCH] doc: Miscellaneous spelling fixes
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables] xtables: Match verbose ip{,6}tables output with legacy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Match verbose ip{,6}tables output with legacy
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Print error when listing non-existent chains
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Fix for no output on first iptables-nft invocation
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH] xtables: Do not count rules as chain references
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH v2] xtables: Reserve space for 'opt' column in ip6tables output
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 21/27] xtables-restore: Make COMMIT support configurable
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 21/27] xtables-restore: Make COMMIT support configurable
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 25/27] ebtables: Support --init-table command
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 21/27] xtables-restore: Make COMMIT support configurable
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v11] netfilter: nft_ct: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v4] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [iptables PATCH] xtables: Match verbose ip{,6}tables output with legacy
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH] doc: Miscellaneous spelling fixes
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• Re: [PATCH] doc: resolve run-together IPv6 address specification headers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] doc: Remove UTF8(?) sequences
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] test: py: fix osf testcases warning
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] doc: resolve run-together IPv6 address specification headers
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH] doc: Remove UTF8(?) sequences
  • From: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx>
• [PATCH nftables] test: py: fix osf testcases warning
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nftables v2] doc: add osf expression to man page
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: nft_tunnel: fix sparse errors
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nftables] test: py: add test cases for "osf" matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nftables] test: py: add test cases for "osf" matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nftables] doc: add osf expression to man page
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [nf-next:master 15/20] net/netfilter/nft_tunnel.c:117:25: sparse: incorrect type in assignment (different base types)
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH nftables v2] doc: add osf expression to man page
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nftables] doc: add osf expression to man page
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] nft: doc: correct some typos in asciidoc
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: restore too deep jumpstack validation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/2 nftables] test: py: add test cases for "osf" matching
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/2 nftables] src: introduce passive OS fingerprint matching
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH nft v3 1/2] src: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH v2 nf-next] netfilter: conntrack: avoid use-after free on rmmod
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 nf-next] netfilter: conntrack: avoid use-after free on rmmod
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH][v3] netfilter: use kvmalloc_array to allocate memory for hashtable
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nf-next] netfilter: kconfig: remove ct zone/label dependencies
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH v2 nf-next] netfilter: kconfig: remove ct zone/label dependencies
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] nft: doc: changes in configure file for PDF creation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH v2] xtables: Reserve space for 'opt' column in ip6tables output
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [iptables PATCH] xtables: Reserve space for 'opt' column in ip6tables output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] xtables: Print error when listing non-existent chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] xtables: Fix for no output on first iptables-nft invocation
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH] xtables: Do not count rules as chain references
  • From: Phil Sutter <phil@xxxxxx>
• [PATCH nf-next] netfilter: nf_tables: simplify NLM_F_CREATE handling
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next] netfilter_bridge: uapi: Expose nf_tables bridge hook priorities
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH v3] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nf_tables: flow event notifier must use transaction mutex
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_tproxy: Add missing config check
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/2 nf-next] nfnetlink_osf: rename nf_osf header file to nfnetlink_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next 1/2] fixup: nf_osf: move nf_osf_fingers to non-uapi nf_osf header file
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH net v2 0/2] fix glitch in IPVS /proc handlers
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v3 1/2] netfilter: Kconfig: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nft] Expose socket mark via socket expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nft] Add tproxy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v3 nft] tests: py: Add test cases for tproxy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 nft] doc: Add tproxy statement to man page
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• [PATCH v5 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: url filtering with netfiler
  • From: Saber Rezvani <irsaber@xxxxxxxx>
• Re: [PATCH nf-next] netfilter: nft_tproxy: Add missing config check
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: url filtering with netfiler
  • From: Oleg <lego12239@xxxxxxxxx>
• [PATCH nf 0/2] netfilter: nf_tables: fix register ordering
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 2/2] netfilter: nf_tables: don't prevent event handler from device cleanup on netns exit
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf 1/2] netfilter: nf_tables: fix register ordering
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next] netfilter: nft_tproxy: Add missing config check
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: linux-next: Tree for Aug 2 (netfilter: tproxy)
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: linux-next: Tree for Aug 2 (netfilter: tproxy)
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: linux-next: Tree for Aug 2 (netfilter: tproxy)
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nf-next 1/2] netfilter: nf_tables: add tunnel support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 2/2] netfilter: nf_tables: match on tunnel metadata
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next 0/2] nf_tables lightweight tunneling support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH] netfilter: nf_nat: return the same reply tuple for matching CTs
  • From: Martynas Pumputis <martynas@weave.works>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: linux-next: Tree for Aug 2 (netfilter: tproxy)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [iptables PATCH 13/27] ebtables: Fix match_list insertion
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 17/27] arptables: Fix memleaks in do_commandarp()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 18/27] arptables: Fix for trailing spaces in output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/27] Consolidate DEBUGP macros
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 23/27] ebtables: Review match/target lookup
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 04/27] xtables: Free chains in NFT_COMPAT_CHAIN_ADD jobs
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 05/27] xtables: Fix compilation with NLDEBUG defined
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 12/27] ebtables: Fix for wrong program name in error messages
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 24/27] xtables: Implement arptables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/27] xtables: Allocate rule cache just once
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/27] xshared: Consolidate argv construction routines
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 20/27] xtables-restore: Improve user-defined chain detection
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 14/27] ebtables: Print non-standard target parameters
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 22/27] ebtables-restore: Use xtables_restore_parse()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 25/27] ebtables: Support --init-table command
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 16/27] arptables: Fix jumps into user-defined chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 19/27] arptables: Print policy only for base chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 27/27] tests: Add ebtables-{save,restore} testcases
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 26/27] tests: Add arptables-{save,restore} testcases
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 21/27] xtables-restore: Make COMMIT support configurable
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/27] xtables: Fix for nft_rule_flush() returning garbage
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/27] xtables: Fix symlinks/names for ebtables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/27] xshared: Consolidate parse_counters()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/27] xtables: Free chains in NFT_COMPAT_CHAIN_USER_DEL jobs
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 15/27] arptables: Fix opcode printing in numeric output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 00/27] Fixes and tests for {eb,arp}tables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH v2 06/27] xtables: Use correct built-in chain count
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 07/27] xtables: Fix program name in xtables_error()
  • From: Phil Sutter <phil@xxxxxx>
• url filtering with netfiler
  • From: Saber Rezvani <irsaber@xxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• [PATCH v2 nf] netfilter: conntrack: fix removal of conntrack entries when l4tracker is removed
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [PATCH nf-next v10] netfilter: nft_ct: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v10] netfilter: nft_ct: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v3 2/2] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v3 1/2] netfilter: Kconfig: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [iptables PATCH] nft: don't print rule counters unless verbose
  • From: Florian Westphal <fw@xxxxxxxxx>
• [iptables PATCH] nft: don't print rule counters unless verbose
  • From: Eric Garver <e@xxxxxxx>
• Re: [PATCH nf-next v10] netfilter: nft_ct: add ct timeout support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: [PATCH nft 0/5] doc: Wrap extra long lines to 80 chars
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH v3 nft] Expose socket mark via socket expression
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH v2 nft] doc: Add tproxy statement to man page
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [iptables PATCH 14/23] ebtables: Fix segfault when parsing a rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 13/23] ebtables: Fix loading of non-standard targets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nft 0/5] doc: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft 5/5] doc: statements.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH nft] doc: nft.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• [PATCH nft 4/5] doc: stateful-objects.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft 3/5] doc: primary-expression.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft 2/5] doc: payload-expression.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH nft 1/5] doc: data-types.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH nf-next v10] netfilter: nft_ct: add ct timeout support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• [PATCH] netfilter: ipset: fix ip_set_list allocation failure
  • From: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: [iptables PATCH 14/23] ebtables: Fix segfault when parsing a rule
  • From: Phil Sutter <phil@xxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Christopher Lameter <cl@xxxxxxxxx>
• Re: [iptables PATCH 13/23] ebtables: Fix loading of non-standard targets
  • From: Phil Sutter <phil@xxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Misuse of constructors
  • From: Matthew Wilcox <willy@xxxxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Christopher Lameter <cl@xxxxxxxxx>
• Re: [PATCH nft] doc: nft.txt: Wrap extra long lines to 80 chars
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nft] doc: nft.txt: Wrap extra long lines to 80 chars
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: don't prevent event handler from device cleanup on netns exit
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• [PATCH] netfilter: nf_tables: remove redundant variables 'create' and 'ext'
  • From: YueHaibing <yuehaibing@xxxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Rob Herring <robh@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 00/10] audit: implement container identifier
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 03/10] audit: log container info of syscalls
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 02/10] audit: add container id
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 01/10] audit: collect audit task parameters
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 04/10] audit: add containerid support for ptrace and signals
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 05/10] audit: add support for non-syscall auxiliary records
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 06/10] audit: add containerid support for tty_audit
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 08/10] audit: add support for containerid to network namespaces
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 07/10] audit: add containerid filtering
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 10/10] debug audit: read container ID of a process
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• [PATCH ghak90 (was ghak32) V4 09/10] audit: NETFILTER_PKT: record each container ID associated with a netNS
  • From: Richard Guy Briggs <rgb@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• [PATCH 2/2 nf-next] nfnetlink_osf: rename nf_osf header file to nfnetlink_osf
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH nf-next 1/2] fixup: nf_osf: move nf_osf_fingers to non-uapi nf_osf header file
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Christopher Lameter <cl@xxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Eric Dumazet <edumazet@xxxxxxxxxx>
• Re: SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Florian Westphal <fw@xxxxxxxxx>
• SLAB_TYPESAFE_BY_RCU without constructors (was Re: [PATCH v4 13/17] khwasan: add hooks implementation)
  • From: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
• Re: [PATCH v3] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH net v2 0/2] fix glitch in IPVS /proc handlers
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• Re: [PATCH net v2 1/2] jiffies: add utility function to calculate delta in ms
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [PATCH net v2 2/2] ipvs: don't show negative times in ip_vs_conn
  • From: Matteo Croce <mcroce@xxxxxxxxxx>
• [PATCH net v2 1/2] jiffies: add utility function to calculate delta in ms
  • From: Matteo Croce <mcroce@xxxxxxxxxx>
• [PATCH net v2 0/2] fix glitch in IPVS /proc handlers
  • From: Matteo Croce <mcroce@xxxxxxxxxx>
• [PATCH] nft: doc: changes in configure file for PDF creation
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH nf-next] netfilter: nf_tables: flow event notifier must use transaction mutex
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• [PATCH nf-next] netfilter: kconfig: make ct zone/labels selectable without xtables
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• [PATCH] nft: doc: correct some typos in asciidoc
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH nf] netfilter: fix memory leaks on netlink_dump_start error
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf-next v3 2/2] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v3 1/2] netfilter: Kconfig: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf-next v10] netfilter: nft_ct: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: [netfilter-core] [nf-next:master 5/7] ./usr/include/linux/netfilter/nf_osf.h:73: userspace cannot reference function or variable defined in the kernel
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [netfilter-core] [nf-next:master 5/7] ./usr/include/linux/netfilter/nf_osf.h:73: userspace cannot reference function or variable defined in the kernel
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] ipvs: don't show negative times in ip_vs_conn
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• [nf-next:master 5/7] ./usr/include/linux/netfilter/nf_osf.h:73: userspace cannot reference function or variable defined in the kernel
  • From: kbuild test robot <lkp@xxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [PATCH] ipvs: don't show negative times in ip_vs_conn
  • From: Matteo Croce <mcroce@xxxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Dmitry Safonov <dima@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• Re: [PATCH 1/3 nf-next v2] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• Re: [PATCH 1/3 nf-next v2] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl] Expose socket mark via socket expression
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v2 libnftnl] Add tproxy support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH libnftnl v3] expr: add osf support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v5 nf-next] netfilter: Add native tproxy support for nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nf-next v3] netfilter: nft_osf: implement Passive OS fingerprint module in nft_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3 nf-next v3] netfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nf-next v3] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netfilter: use PTR_ERR_OR_ZERO()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Dmitry Safonov <dima@xxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: export indexes via netlink
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH v5 nf-next] netfilter: Add native tproxy support for nf_tables
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH v4 nf-next] netfilter: Add native tproxy support for nf_tables
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 nf-next] netfilter: Add native tproxy support for nf_tables
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH PATCH net-next 15/18] sunrpc: whitespace fixes
  • From: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Nathan Harold <nharold@xxxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [iptables PATCH 00/23] Fixes and tests for {eb,arp}tables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ipset: export indexes via netlink
  • From: Florent Fourcot <florent.fourcot@xxxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Dmitry Safonov <dima@xxxxxxxxxx>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH v4 nft] Set/print standard chain prios with textual names
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH v4 nf-next] netfilter: Add native tproxy support for nf_tables
  • From: Máté Eckl <ecklm94@xxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Dmitry Safonov <dima@xxxxxxxxxx>
• KMSAN: uninit-value in iptable_mangle_hook (3)
  • From: syzbot <syzbot+60f2e2b690c5cf94e35d@xxxxxxxxxxxxxxxxxxxxxxxxx>
• Re: [iptables PATCH 14/23] ebtables: Fix segfault when parsing a rule
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [iptables PATCH 21/23] xtables: Always set FMT_NUMERIC when saving rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 13/23] ebtables: Fix loading of non-standard targets
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 14/23] ebtables: Fix segfault when parsing a rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 21/23] xtables: Always set FMT_NUMERIC when saving rules
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 11/23] xtables: Fix for empty quotes in add_params_to_argv()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 14/23] ebtables: Fix segfault when parsing a rule
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 11/23] xtables: Fix for empty quotes in add_params_to_argv()
  • From: Phil Sutter <phil@xxxxxx>
• Re: [iptables PATCH 21/23] xtables: Always set FMT_NUMERIC when saving rules
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 14/23] ebtables: Fix segfault when parsing a rule
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 11/23] xtables: Fix for empty quotes in add_params_to_argv()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [iptables PATCH 06/23] xtables: Fix ebtables-restore
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
• Re: [iptables PATCH 03/23] xtables: Use correct built-in chain count
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• [iptables PATCH 00/23] Fixes and tests for {eb,arp}tables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 10/23] xtables: Implement arptables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 03/23] xtables: Use correct built-in chain count
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 20/23] arptables: Fix opcode printing in numeric output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 18/23] arptables: Fix jumps into user-defined chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 04/23] xtables: Fix debug output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 14/23] ebtables: Fix segfault when parsing a rule
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 02/23] xtables: Fix memleak when adding builtin chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 07/23] ebtables: Fix memleak in do_commandeb()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 22/23] tests: Add arptables-{save,restore} testcase
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 15/23] arptables: Fix printing non-standard target parameters
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 23/23] tests: Add ebtables-{save,restore} testcase
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 01/23] xtables: Fix symlinks/names for ebtables-{save,restore}
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 08/23] arptables: Print policy only for base chains
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 19/23] arptables: Fix for trailing spaces in output
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 12/23] ebtables: Print non-standard target parameters
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 11/23] xtables: Fix for empty quotes in add_params_to_argv()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 05/23] ebtables: Fix match_list insertion
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 17/23] arptables: Fix memleaks in target handling
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 06/23] xtables: Fix ebtables-restore
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 13/23] ebtables: Fix loading of non-standard targets
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 21/23] xtables: Always set FMT_NUMERIC when saving rules
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 16/23] arptables: Fix memleak in do_commandarp()
  • From: Phil Sutter <phil@xxxxxx>
• [iptables PATCH 09/23] ebtables: Support --init-table command
  • From: Phil Sutter <phil@xxxxxx>
• Re: [PATCH] netfilter: ipset: export indexes via netlink
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• [PATCH nft v3 2/2] tests: py: add ct timeout tests
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nft v3 1/2] src: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• [PATCH nf] netfilter: conntrack: fix removal of conntrack entries when l4tracker is removed
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] iptables-restore: free the table lock when skipping a table
  • From: Joel Goguen <contact+netfilter@xxxxxxxxxx>
• Re: [PATCH] iptables-restore: free the table lock when skipping a table
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] nft: doc: Convert man page source to asciidoc
  • From: Florian Westphal <fw@xxxxxxxxx>
• RE: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: David Laight <David.Laight@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• Re: [PATCH 00/18] xfrm: Add compat layer
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Vlastimil Babka <vbabka@xxxxxxx>
• [PATCH 07/18] netlink: Pass groups pointer to .bind()
  • From: Dmitry Safonov <dima@xxxxxxxxxx>
• [PATCH 00/18] xfrm: Add compat layer
  • From: Dmitry Safonov <dima@xxxxxxxxxx>
• Re: [Bug 200651] New: cgroups iptables-restor: vmalloc: allocation failure
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• [PATCH nf] netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH v3] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: 4.14.54 regression: rpfilter and DHCPv6
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: 4.14.54 regression: rpfilter and DHCPv6
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: linux-next: Tree for Jul 25 (netfilter)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• [PATCH nf] netfilter: nft_set: fix allocation size overflow in privsize callback.
  • From: Taehee Yoo <ap420073@xxxxxxxxx>
• Re: 4.14.54 regression: rpfilter and DHCPv6
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Joe Perches <joe@xxxxxxxxxxx>
• Re: 4.14.54 regression: rpfilter and DHCPv6
  • From: Eric Garver <e@xxxxxxx>
• 4.14.54 regression: rpfilter and DHCPv6
  • From: Roman Mamedov <rm@xxxxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: [PATCH PATCH net-next 08/18] sctp: whitespace fixes
  • From: Neil Horman <nhorman@xxxxxxxxxxxxx>
• Re: [PATCH PATCH net-next 07/18] ceph: fix whitespace
  • From: Ilya Dryomov <idryomov@xxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: ebiederm@xxxxxxxxxxxx (Eric W. Biederman)
• Re: [PATCH] netfilter: ipset: export indexes via netlink
  • From: Florent Fourcot <florent.fourcot@xxxxxxxxxx>
• Re: netfilter xt_alloc_table_info regression
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• [PATCH nf-next] netfilter: conntrack: avoid use-after free on rmmod
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: netfilter xt_alloc_table_info regression
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• [PATCH] nft: doc: Convert man page source to asciidoc
  • From: Arushi Singhal <arushisinghal19971997@xxxxxxxxx>
• [PATCH][v3] netfilter: use kvmalloc_array to allocate memory for hashtable
  • From: Li RongQing <lirongqing@xxxxxxxxx>
• Re: Re: [PATCH v2] ipvs: fix race between ip_vs_conn_new() andip_vs_del_dest()
  • From: <tan.hu@xxxxxxxxxx>
• [PATCH v3] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Tan Hu <tan.hu@xxxxxxxxxx>
• 答复: [PATCH][v2] netfilter: use kvzalloc to allocate memory for hashtable
  • From: "Li,Rongqing" <lirongqing@xxxxxxxxx>
• Re: [PATCH v2] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Julian Anastasov <ja@xxxxxx>
• Re: [PATCH][v2] netfilter: use kvzalloc to allocate memory for hashtable
  • From: Eric Dumazet <eric.dumazet@xxxxxxxxx>
• Re:(3) $ 100, any 20 countries of your choice / $100 любые 20 стран на Ваш выбор...
  • From: "Business groups (cuexcech)" <dsnhzboeuh@xxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
• Re: Re: [PATCH] ipvs: fix race between ip_vs_conn_new() andip_vs_del_dest()
  • From: <tan.hu@xxxxxxxxxx>
• [PATCH v2] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Tan Hu <tan.hu@xxxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Joe Perches <joe@xxxxxxxxxxx>
• [PATCH libnftnl v3] expr: add osf support
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 3/3 nf-next v3] netfilter: nft_osf: implement Passive OS fingerprint module in nft_osf
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 2/3 nf-next v3] netfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• [PATCH 1/3 nf-next v3] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH 2/3 nf-next v2] netfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c
  • From: Fernando Fernandez Mancera <ffmancera@xxxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: Cong Wang <xiyou.wangcong@xxxxxxxxx>
• Re: [PATCH PATCH net-next 00/18] net whitespace cleanups
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Jonathan Cameron <jic23@xxxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Julian Anastasov <ja@xxxxxx>
• [PATCH PATCH net-next 00/18] net whitespace cleanups
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 01/18] sched: fix trailing whitespace
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 02/18] wimax: remove blank lines at EOF
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 04/18] llc: fix whitespace issues
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 03/18] rds: remove trailing whitespace and blank lines
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 06/18] xfrm: remove blank lines at EOF
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 07/18] ceph: fix whitespace
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 08/18] sctp: whitespace fixes
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 09/18] ila: remove blank lines at EOF
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 10/18] 9p: fix whitespace issues
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 13/18] x25: remove blank lines at EOF
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 14/18] decnet: whitespace fixes
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 16/18] bpfilter: remove trailing newline
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 17/18] l2tp: remove trailing newline
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 18/18] net: remove blank lines at end of file
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 15/18] sunrpc: whitespace fixes
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 12/18] ax25: remove blank line at EOF
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 11/18] atm: remove blank lines at EOF
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• [PATCH PATCH net-next 05/18] mpls: remove trailing whitepace
  • From: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH 0/9] Netfilter fixes for net
  • From: David Miller <davem@xxxxxxxxxxxxx>
• [PATCH 5/9] netfilter: nf_tables: free flow table struct too
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 7/9] netfilter: nf_tables: don't allow to rename to already-pending name
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 9/9] netfilter: nf_tables: move dumper state allocation into ->start
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 8/9] netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 4/9] netfilter: nf_tables: use dev->name directly
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 2/9] netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 6/9] netfilter: nf_tables: fix memory leaks on chain rename
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 3/9] netfilter: nft_set_rbtree: fix panic when destroying set by GC
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 1/9] netfilter: nf_tables: fix jumpstack depth validation
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH 0/9] Netfilter fixes for net
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Simon Horman <horms@xxxxxxxxxxxx>
• [PATCH xtables] xtables: avoid bogus 'is incompatible' warning
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace
  • From: David Ahern <dsahern@xxxxxxxxx>
• Re: [PATCH nf-next v9] netfilter: nft_ct: add ct timeout support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• [PATCH 1/4] treewide: convert ISO_8859-1 text comments to utf-8
  • From: Arnd Bergmann <arnd@xxxxxxxx>
• Re: netfilter xt_alloc_table_info regression
  • From: Michal Hocko <mhocko@xxxxxxxxxx>
• [PATCH] ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  • From: Tan Hu <tan.hu@xxxxxxxxxx>
• Re: [PATCH nf-next v9] netfilter: nft_ct: add ct timeout support
  • From: kbuild test robot <lkp@xxxxxxxxx>
• netfilter xt_alloc_table_info regression
  • From: Georgi Nikolov <gnikolov@xxxxxxxxxxx>
• Re: [PATCH] netfilter: ipset: export indexes via netlink
  • From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
• Re: [PATCH nf-next v9] netfilter: nft_ct: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf-next v2 2/2] netfilter: cttimeout: move ctnl_untimeout to nf_conntrack
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: move dumper state alloation into ->start
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• [PATCH nf-next v9] netfilter: nft_ct: add ct timeout support
  • From: Harsha Sharma <harshasharmaiitr@xxxxxxxxx>
• Re: linux-next: Tree for Jul 23 (netfilter)
  • From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: move dumper state alloation into ->start
  • From: David Miller <davem@xxxxxxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: move dumper state alloation into ->start
  • From: shaochun chen <cscnull@xxxxxxxxx>
• Re: [PATCH nf] netfilter: nf_tables: move dumper state alloation into ->start
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netlink: fix memory leak of dump
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netlink: fix memory leak of dump
  • From: Florian Westphal <fw@xxxxxxxxx>
• [PATCH nf] netfilter: nf_tables: move dumper state alloation into ->start
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netlink: fix memory leak of dump
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netlink: fix memory leak of dump
  • From: shaochun chen <cscnull@xxxxxxxxx>
• Re: [PATCH 1/3 nf-next v2] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c
  • From: Jan Engelhardt <jengelh@xxxxxxx>
• Re: [PATCH nf-next v8] netfilter: nft_ct: add ct timeout support
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 3/3 nf-next v2] netfilter: nft_osf: implement Passive OS fingerprint module in nft_osf
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 2/3 nf-next v2] netfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH 1/3 nf-next v2] netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] libnetfilter_conntrack: bsf.c: fix verdict
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netlink: fix memory leak of dump
  • From: shaochun chen <cscnull@xxxxxxxxx>
• Re: [PATCH] netlink: fix memory leak of dump
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
• Re: [PATCH] netlink: fix memory leak of dump
  • From: Florian Westphal <fw@xxxxxxxxx>
• Re: [PATCH] netlink: fix memory leak of dump
  • From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>