Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- [PATCH nf-next 3/5] netfilter: nf_tables: expose opaque set element as struct nft_elem_priv, (continued)
- [PATCH libnetfilter_queue 0/1] libnfnetlink dependency elimination,
Duncan Roe
- [PATCH nft 1/3] tests/shell: add "bogons/nft-f/zero_length_devicename2_assert",
Thomas Haller
- [PATCH nft 1/2] tests/shell: inline input data in "single_anon_set" test,
Thomas Haller
- [PATCH nft 1/1] tests/shell: test for maximum length of "comment" in "comments_objects_0", Thomas Haller
- [PATCH nft] tests/shell: add missing "elem_opts_compat_0.nodump" file,
Thomas Haller
- [PATCH netfilter] Fix hw flow offload from nftables,
Donald Hunter
- Re: KASAN: vmalloc-out-of-bounds in ipt_do_table,
Pablo Neira Ayuso
- [PATCH libnetfilter_queue] include: all: remove trailing spaces, Duncan Roe
- Netfilter queue is unable to mangle fragmented UDP6: bug?,
Duncan Roe
- [PATCH libnetfilter_queue v2 0/1] New example program nfq6,
Duncan Roe
- [PATCH] treewide: Add SPDX identifier to IETF ASN.1 modules,
Lukas Wunner
- [nf-next PATCH 0/6] Refactor nft_obj_filter into nft_obj_dump_ctx,
Phil Sutter
- [PATCH nf-next] netfilter: conntrack: switch connlabels to atomic_t,
Florian Westphal
- [PATCH nf-next] br_netfilter: use single forward hook for ip and arp,
Florian Westphal
- [PATCH RFC] netfilter: nf_tables: add flowtable map for xdp offload,
Florian Westphal
- [PATCH 0/1] ipset patch to fix race condition between swap/destroy and add/del/test,
Jozsef Kadlecsik
- [PATCH v5 05/12] x86/bugs: Rename RETPOLINE to MITIGATION_RETPOLINE, Breno Leitao
- [nft PATCH v2] parser_bison: Fix for broken compatibility with older dumps,
Phil Sutter
- [nft PATCH] parser_bison: Fix for broken compatibility with older dumps, Phil Sutter
- [PATCH nf-next,RFC 0/8] nf_tables set updates,
Pablo Neira Ayuso
- [PATCH nf-next,RFC 1/8] netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flush, Pablo Neira Ayuso
- [PATCH nf-next,RFC 2/8] netfilter: nf_tables: set backend .flush always succeeds, Pablo Neira Ayuso
- [PATCH nf-next,RFC 7/8] netfilter: nf_tables: add timeout extension to elements to prepare for updates, Pablo Neira Ayuso
- [PATCH nf-next,RFC 6/8] netfilter: nf_tables: use timestamp to check for set element timeout, Pablo Neira Ayuso
- [PATCH nf-next,RFC 5/8] netfilter: nf_tables: set->ops->insert returns opaque set element in case of EEXIST, Pablo Neira Ayuso
- [PATCH nf-next,RFC 8/8] netfilter: nf_tables: set element timeout update support, Pablo Neira Ayuso
- [PATCH nf-next,RFC 3/8] netfilter: nf_tables: expose opaque set element as struct nft_elem_priv, Pablo Neira Ayuso
- [PATCH nf-next,RFC 4/8] netfilter: nf_tables: shrink memory consumption of set elements, Pablo Neira Ayuso
- [nf-next PATCH v4 0/3] Introduce locking for rule reset requests,
Phil Sutter
- [PATCH nft v2 0/7] no recursive make,
Thomas Haller
- [ANNOUNCE] nftables 1.0.9 release, Pablo Neira Ayuso
- [nf-next PATCH v3 0/3] Introduce locking for rule reset requests,
Phil Sutter
- [PATCH nf-next,RFC 2/2] netfilter: nf_tables: set element timeout update support, Pablo Neira Ayuso
- [PATCH nf-next,RFC 1/2] netfilter: nf_tables: add timeout extension to elements to prepare for updates, Pablo Neira Ayuso
- [PATCH net 0/4] netfilter: updates for net,
Florian Westphal
- [PATCH nf] Revert "netfilter: nf_tables: do not remove elements if set backend implements .abort", Pablo Neira Ayuso
- Re: [nftables/nft] nft equivalent of "ipset test",
imnozi
- [PATCH nft 1/1] tests/shell: add NFT_TEST_FAIL_ON_SKIP_EXCEPT for allow-list of skipped tests (XFAIL),
Thomas Haller
- [syzbot] [netfilter?] WARNING in __nf_unregister_net_hook (6), syzbot
- [PATCH nft] evaluate: validate maximum log statement prefix length, Pablo Neira Ayuso
- [PATCH] netfilter: ipset: fix race condition in ipset swap, destroy and test/add/del,
xiaolinkui
- [PATCH nf] netfilter: nft_set_rbtree: .deactivate fails if element has expired, Pablo Neira Ayuso
- [net-next PATCH v2] net: skb_find_text: Ignore patterns extending past 'to',
Phil Sutter
- [PATCH nft v2 0/3] add "eval-exit-code" and skip tests based on kernel version,
Thomas Haller
- 0x17: Schedule is now up, Jamal Hadi Salim
- [PATCH 1/2] netfilter: ipset: rename ref_netlink to ref_swapping,
xiaolinkui
- [PATCH nft 1/2] tests/shell: use bash instead of /bin/sh for tests,
Thomas Haller
- [PATCH nft 1/3] tests/shell: skip "table_onoff" test if kernel patch is missing,
Thomas Haller
- [PATCH libnetfilter_queue 0/1] New example program nfq6,
Duncan Roe
- [PATCH v13 00/12] Network support for Landlock,
Konstantin Meskhidze
- [PATCH v13 01/12] landlock: Make ruleset's access masks more generic, Konstantin Meskhidze
- [PATCH v13 03/12] landlock: Refactor landlock_find_rule/insert_rule, Konstantin Meskhidze
- [PATCH v13 02/12] landlock: Allow FS topology changes for domains without such rule type, Konstantin Meskhidze
- [PATCH v13 04/12] landlock: Refactor merge/inherit_ruleset functions, Konstantin Meskhidze
- [PATCH v13 05/12] landlock: Move and rename layer helpers, Konstantin Meskhidze
- [PATCH v13 06/12] landlock: Refactor layer helpers, Konstantin Meskhidze
- [PATCH v13 09/12] selftests/landlock: Share enforce_ruleset(), Konstantin Meskhidze
- [PATCH v13 08/12] landlock: Add network rules and TCP hooks support, Konstantin Meskhidze
- [PATCH v13 07/12] landlock: Refactor landlock_add_rule() syscall, Konstantin Meskhidze
- [PATCH v13 11/12] samples/landlock: Add network demo, Konstantin Meskhidze
- [PATCH v13 10/12] selftests/landlock: Add 7 new test variants dedicated to network, Konstantin Meskhidze
- [PATCH v13 12/12] landlock: Document Landlock's network support, Konstantin Meskhidze
- [nf PATCH] selftests: netfilter: Run nft_audit.sh in its own netns, Phil Sutter
- [net-next PATCH] net: skb_find_text: Ignore patterns extending past 'to',
Phil Sutter
- [PATCH nf-next,RFC] netfilter: nf_tables: shrink memory consumption of set elements,
Pablo Neira Ayuso
- [PATCH nf-next 0/3] netfilter: nf_tables: remove rbtree async garbage collection,
Florian Westphal
- [PATCH nft] evaluate: suggest != in negation error message,
Florian Westphal
- [PATCH conntrack,v6] conntrack: ct label update requires proper ruleset, Pablo Neira Ayuso
- [PATCH conntrack,v4] conntrack: label update requires a previous label in place, Pablo Neira Ayuso
- [iptables PATCH] extensions: string: Clarify description of --to,
Phil Sutter
- [iptables PATCH] libiptc: Fix for another segfault due to chain index NULL pointer,
Phil Sutter
- [nf PATCH v2] netfilter: nf_tables: audit log object reset once per table, Phil Sutter
- [PATCH conntrack,v3] conntrack: label update requires a previous label in place, Pablo Neira Ayuso
- [PATCH conntrack] conntrack: label update requires a previous label in place,
Pablo Neira Ayuso
- [PATCH nf-next 0/6] netfilter: more accurate drop statistics,
Florian Westphal
- [PATCH nft,v2] doc: remove references to timeout in reset command,
Pablo Neira Ayuso
- [PATCH net-next 0/8] netfilter updates for next,
Florian Westphal
- [PATCH nft] doc: remove references to timeout in reset command,
Pablo Neira Ayuso
- [ANNOUNCE] iptables 1.8.10 release, Phil Sutter
- [RFC] nftables 1.0.6 -stable backports,
Pablo Neira Ayuso
- [PATCH nf 1/2] nf_tables: fix NULL pointer dereference in nft_inner_init(),
Xingyuan Mo
- [PATCH nf] netfilter: nft_payload: fix wrong mac header matching, Florian Westphal
- [PATCH libnetfilter_queue] src: Fix IPv6 Fragment Header processing,
Duncan Roe
- iptales-restore cmd crash, wenli xie
- [PATCH] netfilter: remove inaccurate code comments from struct nft_table,
George Guo
- [nft PATCH 1/3] tests/shell: mount all of "/var/run" in "test-wrapper.sh",
Thomas Haller
- [PATCH nf-next] netfilter: conntrack: prefer tcp_error_log to pr_debug, Florian Westphal
- [PATCH nf-next] netfilter: conntrack: simplify nf_conntrack_alter_reply, Florian Westphal
- [PATCH] netfilter: ipset: wait for xt_recseq on all cpus,
xiaolinkui
- [PATCH nf] netfilter: nf_tables: work around newrule after chain binding, Florian Westphal
- [PATCH nf] netfilter: nfnetlink_log: silence bogus compiler warning, Florian Westphal
- [PATCH net 0/6] netfilter patches for net,
Florian Westphal
- [PATCH nf] netfilter: nf_tables: do not remove elements if set backend implements .abort, Pablo Neira Ayuso
- [PATCH] netfilter: nf_tables: Annotate struct nft_pipapo_match with __counted_by,
Kees Cook
- [PATCHv2 nf 0/2] netfilter: handle the sctp collision properly and add selftest,
Xin Long
- [PATCH nf,v2] netfilter: nf_tables: do not refresh timeout when resetting element, Pablo Neira Ayuso
- [PATCH nf] netfilter: nf_tables: do not refresh timeout when resetting element,
Pablo Neira Ayuso
- [PATCH nf] netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp,
Xin Long
- [nf-next PATCH 0/5] nf_tables: nft_rule_dump_ctx fits into netlink_callback,
Phil Sutter
- [nft PATCH] tests: shell: sets/reset_command_0: Fix drop_seconds(),
Phil Sutter
- [PATCH nf 1/2] netfilter: nft_set_rbtree: move sync GC from insert path to set->ops->commit,
Pablo Neira Ayuso
- [ANNOUNCE] conntrack-tools 1.4.8 release, Pablo Neira Ayuso
- [PATCH nft] rule: never merge across non-expr statements, Florian Westphal
- [PATCH libnetfilter_conntrack] src: reverse calloc() invocation, Pablo Neira Ayuso
- [PATCH nft] tests: shell: add vlan match test case, Florian Westphal
- [PATCH nf] netfilter: nft_payload: rebuild vlan header on h_proto access,
Florian Westphal
- [PATCH libnetfilter_queue v3] make the HTML main page available as `man 7 libnetfilter_queue`, Duncan Roe
- [nf PATCH v2 0/8] Introduce locking for reset requests,
Phil Sutter
- [nft PATCH] tests: shell: Fix for failing nft-f/sample-ruleset, Phil Sutter
- [PATCH nf] netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure,
Florian Westphal
- [PATCH nft 0/5] more various cleanups related to struct datatype,
Thomas Haller
- [PATCH nft 1/1] include: include <string.h> in <nft.h>,
Thomas Haller
- [PATCH v3 0/2] Prevent potential write out of bounds,
joao
- [PATCH nft,v3] tests: shell: fix spurious errors in sets/0036add_set_element_expiration_0,
Pablo Neira Ayuso
- [PATCH -stable,5.10 0/2] Netfilter stable fixes for 5.10,
Pablo Neira Ayuso
- [PATCH nft,v2] tests: shell: fix spurious errors in sets/0036add_set_element_expiration_0, Pablo Neira Ayuso
- [PATCH nft] tests: shell: fix spurious errors in sets/0036add_set_element_expiration_0,
Pablo Neira Ayuso
- [PATCH] netfilter: ipset: add ip_set lock to ip_set_test,
xiaolinkui
- [PATCH nft 0/3] Two fixes to avoid "-Wstrict-overflow" warnings,
Thomas Haller
- [PATCH nft v2 1/1] mergesort: avoid cloning value in expr_msort_cmp(),
Thomas Haller
- [PATCH nft] mergesort: avoid cloning value in expr_msort_cmp(),
Thomas Haller
- [PATCH] netfilter: Clean up errors in nf_conntrack_h323_asn1.h,
chenguohua
- [PATCH libnetfilter_queue] Fix typo in examples/nf-queue.c from patch 9a8e4c3,
Duncan Roe
- [PATCH v2 0/2] Prevent potential write out of bounds,
joao
- [PATCH net v6 0/3] Insulate Kernel Space From SOCK_ADDR Hooks,
Jordan Rife
- [nft PATCH] tests: shell: features: Fix table owner flag check,
Phil Sutter
- [PATCH nft 3/3,v2] netlink_linearize: skip set element expression in map statement key,
Pablo Neira Ayuso
- [PATCH nft 1/3] tests: py: add map support,
Pablo Neira Ayuso
- [PATCH conntrack-tools] conntrackd: consolidate check for maximum number of channels, Pablo Neira Ayuso
- Re: [syzbot] [netfilter?] INFO: rcu detected stall in gc_worker (3),
syzbot
- [nf PATCH 0/3] Review nf_tables audit logging,
Phil Sutter
- [nf PATCH 0/5] Introduce locking for reset requests,
Phil Sutter
- [PATCH -stable,5.10 00/17] Netfilter stable fixes for 5.10,
Pablo Neira Ayuso
- [PATCH -stable,5.10 03/17] netfilter: nf_tables: GC transaction API to avoid race with control plane, Pablo Neira Ayuso
- [PATCH -stable,5.10 02/17] netfilter: nf_tables: don't skip expired elements during walk, Pablo Neira Ayuso
- [PATCH -stable,5.10 01/17] netfilter: nf_tables: integrate pipapo into commit protocol, Pablo Neira Ayuso
- [PATCH -stable,5.10 11/17] netfilter: nf_tables: use correct lock to protect gc_list, Pablo Neira Ayuso
- [PATCH -stable,5.10 10/17] netfilter: nf_tables: GC transaction race with abort path, Pablo Neira Ayuso
- [PATCH -stable,5.10 09/17] netfilter: nf_tables: GC transaction race with netns dismantle, Pablo Neira Ayuso
- [PATCH -stable,5.10 05/17] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Pablo Neira Ayuso
- [PATCH -stable,5.10 06/17] netfilter: nf_tables: remove busy mark and gc batch API, Pablo Neira Ayuso
- [PATCH -stable,5.10 04/17] netfilter: nf_tables: adapt set backend to use GC transaction API, Pablo Neira Ayuso
- [PATCH -stable,5.10 08/17] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path, Pablo Neira Ayuso
- [PATCH -stable,5.10 07/17] netfilter: nf_tables: don't fail inserts if duplicate has expired, Pablo Neira Ayuso
- [PATCH -stable,5.10 12/17] netfilter: nf_tables: defer gc run if previous batch is still pending, Pablo Neira Ayuso
- [PATCH -stable,5.10 14/17] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention, Pablo Neira Ayuso
- [PATCH -stable,5.10 15/17] netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails, Pablo Neira Ayuso
- [PATCH -stable,5.10 17/17] netfilter: nf_tables: fix memleak when more than 255 elements expired, Pablo Neira Ayuso
- [PATCH -stable,5.10 16/17] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration, Pablo Neira Ayuso
- [PATCH -stable,5.10 13/17] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction, Pablo Neira Ayuso
- [PATCH -stable,5.15 00/17] Netfilter stable fixes for 5.15,
Pablo Neira Ayuso
- [PATCH -stable,5.15 03/17] netfilter: nf_tables: adapt set backend to use GC transaction API, Pablo Neira Ayuso
- [PATCH -stable,5.15 12/17] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction, Pablo Neira Ayuso
- [PATCH -stable,5.15 09/17] netfilter: nf_tables: GC transaction race with abort path, Pablo Neira Ayuso
- [PATCH -stable,5.15 15/17] netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails, Pablo Neira Ayuso
- [PATCH -stable,5.15 11/17] netfilter: nf_tables: defer gc run if previous batch is still pending, Pablo Neira Ayuso
- [PATCH -stable,5.15 06/17] netfilter: nf_tables: don't fail inserts if duplicate has expired, Pablo Neira Ayuso
- [PATCH -stable,5.15 13/17] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention, Pablo Neira Ayuso
- [PATCH -stable,5.15 01/17] netfilter: nf_tables: don't skip expired elements during walk, Pablo Neira Ayuso
- [PATCH -stable,5.15 04/17] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Pablo Neira Ayuso
- [PATCH -stable,5.15 16/17] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration, Pablo Neira Ayuso
- [PATCH -stable,5.15 07/17] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path, Pablo Neira Ayuso
- [PATCH -stable,5.15 02/17] netfilter: nf_tables: GC transaction API to avoid race with control plane, Pablo Neira Ayuso
- [PATCH -stable,5.15 10/17] netfilter: nf_tables: use correct lock to protect gc_list, Pablo Neira Ayuso
- [PATCH -stable,5.15 14/17] netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC, Pablo Neira Ayuso
- [PATCH -stable,5.15 08/17] netfilter: nf_tables: GC transaction race with netns dismantle, Pablo Neira Ayuso
- [PATCH -stable,5.15 05/17] netfilter: nf_tables: remove busy mark and gc batch API, Pablo Neira Ayuso
- [PATCH -stable,5.15 17/17] netfilter: nf_tables: fix memleak when more than 255 elements expired, Pablo Neira Ayuso
- [PATCH -stable,6.1 00/17] Netfilter stable fixes for 6.1,
Pablo Neira Ayuso
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
