Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH nf] netfilter: nf_tables: disallow rule removal from chain binding, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: skip deactivation of deleted rules in bound chain, Pablo Neira Ayuso
• [iptables PATCH] include: linux: Update kernel.h, Phil Sutter
  • Re: [iptables PATCH] include: linux: Update kernel.h, Phil Sutter
• [iptables PATCH] nft: Fix for useless meta expressions in rule, Phil Sutter
  • Re: [iptables PATCH] nft: Fix for useless meta expressions in rule, Phil Sutter
• [PATCH nft v5 00/19] tests/shell: allow running tests as non-root, Thomas Haller
  • [PATCH nft v5 01/19] tests/shell: rework command line parsing in "run-tests.sh", Thomas Haller
  • [PATCH nft v5 02/19] tests/shell: rework finding tests and add "--list-tests" option, Thomas Haller
  • [PATCH nft v5 04/19] tests/shell: export NFT_TEST_BASEDIR and NFT_TEST_TMPDIR for tests, Thomas Haller
  • [PATCH nft v5 03/19] tests/shell: check test names before start and support directories, Thomas Haller
  • [PATCH nft v5 09/19] tests/shell: support --keep-logs option (NFT_TEST_KEEP_LOGS=y) to preserve test output, Thomas Haller
  • [PATCH nft v5 07/19] tests/shell: run each test in separate namespace and allow rootless, Thomas Haller
  • [PATCH nft v5 05/19] tests/shell: normalize boolean configuration in environment variables, Thomas Haller
  • [PATCH nft v5 10/19] tests/shell: move the dump diff handling inside "test-wrapper.sh", Thomas Haller
  • [PATCH nft v5 11/19] tests/shell: rework printing of test results, Thomas Haller
  • [PATCH nft v5 08/19] tests/shell: interpret an exit code of 77 from scripts as "skipped", Thomas Haller
  • [PATCH nft v5 06/19] tests/shell: print test configuration, Thomas Haller
  • [PATCH nft v5 13/19] tests/shell: move valgrind wrapper script to separate script, Thomas Haller
  • [PATCH nft v5 16/19] tests/shell: skip test in rootless that hit socket buffer size limit, Thomas Haller
  • [PATCH nft v5 17/19] tests/shell: record the test duration (wall time) in the result data, Thomas Haller
  • [PATCH nft v5 12/19] tests/shell: move taint check to "test-wrapper.sh", Thomas Haller
  • [PATCH nft v5 14/19] tests/shell: support running tests in parallel, Thomas Haller
  • [PATCH nft v5 19/19] tests/shell: set TMPDIR for tests in "test-wrapper.sh", Thomas Haller
  • [PATCH nft v5 15/19] tests/shell: bind mount private /var/run/netns in test container, Thomas Haller
  • [PATCH nft v5 18/19] tests/shell: fix "0003includepath_0" for different TMPDIR, Thomas Haller
  • Re: [PATCH nft v5 00/19] tests/shell: allow running tests as non-root, Florian Westphal
• [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Phil Sutter
    • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Phil Sutter
        • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Pablo Neira Ayuso
          • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Paul Moore
            • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Phil Sutter
              • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Pablo Neira Ayuso
                • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Paul Moore
                  • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Pablo Neira Ayuso
                    • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Paul Moore
              • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Paul Moore
      • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Richard Guy Briggs
        • Re: [PATCH nf] netfilter: nf_tables: Unbreak audit log reset, Richard Guy Briggs
• [PATCH nft] evaluate: fix get element for concatenated set, Florian Westphal
  • Re: [PATCH nft] evaluate: fix get element for concatenated set, Pablo Neira Ayuso
• [PATCH nft v4 00/17] tests/shell: allow running tests as, Thomas Haller
  • [PATCH nft v4 17/17] tests/shell: set TMPDIR for tests in "test-wrapper.sh", Thomas Haller
  • [PATCH nft v4 09/17] tests/shell: support --keep-logs option (NFT_TEST_KEEP_LOGS=y) to preserve test output, Thomas Haller
  • [PATCH nft v4 01/17] tests/shell: rework command line parsing in "run-tests.sh", Thomas Haller
  • [PATCH nft v4 05/17] tests/shell: normalize boolean configuration in environment variables, Thomas Haller
  • [PATCH nft v4 16/17] tests/shell: record the test duration for investigation, Thomas Haller
  • [PATCH nft v4 08/17] tests/shell: interpret an exit code of 77 from scripts as "skipped", Thomas Haller
  • [PATCH nft v4 13/17] tests/shell: support running tests in parallel, Thomas Haller
  • [PATCH nft v4 03/17] tests/shell: check test names before start and support directories, Thomas Haller
  • [PATCH nft v4 10/17] tests/shell: move the dump diff handling inside "test-wrapper.sh", Thomas Haller
  • [PATCH nft v4 11/17] tests/shell: rework printing of test results, Thomas Haller
  • [PATCH nft v4 04/17] tests/shell: export NFT_TEST_BASEDIR and NFT_TEST_TMPDIR for tests, Thomas Haller
  • [PATCH nft v4 06/17] tests/shell: print test configuration, Thomas Haller
  • [PATCH nft v4 15/17] tests/shell: skip test in rootless that hit socket buffer size limit, Thomas Haller
  • [PATCH nft v4 12/17] tests/shell: move taint check to "test-wrapper.sh", Thomas Haller
  • [PATCH nft v4 14/17] tests/shell: bind mount private /var/run/netns in test container, Thomas Haller
  • [PATCH nft v4 02/17] tests/shell: rework finding tests and add "--list-tests" option, Thomas Haller
  • [PATCH nft v4 07/17] tests/shell: run each test in separate namespace and allow rootless, Thomas Haller
• [PATCH nft] tests: shell: 0043concatenated_ranges_0: re-enable all tests, Florian Westphal
• Race between IPSET_CMD_CREATE and IPSET_CMD_SWAP, Kyle Zeng
  • Re: Race between IPSET_CMD_CREATE and IPSET_CMD_SWAP, Jozsef Kadlecsik
    • Re: Race between IPSET_CMD_CREATE and IPSET_CMD_SWAP, Kyle Zeng
• [PATCH nft v3 00/11] tests/shell: allow running tests as, Thomas Haller
  • [PATCH nft v3 04/11] tests/shell: export NFT_TEST_BASEDIR and NFT_TEST_TMPDIR for tests, Thomas Haller
  • [PATCH nft v3 01/11] tests/shell: rework command line parsing in "run-tests.sh", Thomas Haller
  • [PATCH nft v3 02/11] tests/shell: rework finding tests and add "--list-tests" option, Thomas Haller
  • [PATCH nft v3 03/11] tests/shell: check test names before start and support directories, Thomas Haller
  • [PATCH nft v3 06/11] tests/shell: interpret an exit code of 77 from scripts as "skipped", Thomas Haller
  • [PATCH nft v3 09/11] tests/shell: rework printing of test results, Thomas Haller
  • [PATCH nft v3 08/11] tests/shell: move the dump diff handling inside "test-wrapper.sh", Thomas Haller
  • [PATCH nft v3 07/11] tests/shell: support --keep-logs option (NFT_TEST_KEEP_LOGS=y) to preserve test output, Thomas Haller
  • [PATCH nft v3 10/11] tests/shell: move taint check to "test-wrapper.sh", Thomas Haller
  • [PATCH nft v3 05/11] tests/shell: run each test in separate namespace and allow rootless, Thomas Haller
  • [PATCH nft v3 11/11] tests/shell: support running tests in parallel, Thomas Haller
  • Re: [PATCH nft v3 00/11] tests/shell: allow running tests as, Florian Westphal
    • Re: [PATCH nft v3 00/11] tests/shell: allow running tests as, Thomas Haller
      • Re: [PATCH nft v3 00/11] tests/shell: allow running tests as, Florian Westphal
• [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum, David Wang
  • Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum, Daniel Xu
    • Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum, David Wang
      • Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum, Duncan Roe
      • Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum, Florian Westphal
      • Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum, Florian Westphal
        • Re:Re: [PATCH] uapi/netfilter: Change netfilter hook verdict code definition from macro to enum, David Wang
• [PATCH nft 0/5] tests: shell: add and use feature probing, Florian Westphal
  • [PATCH nft 1/5] tests: add feature probing, Florian Westphal
    • Re: [PATCH nft 1/5] tests: add feature probing, Phil Sutter
      • Re: [PATCH nft 1/5] tests: add feature probing, Florian Westphal
        • Re: [PATCH nft 1/5] tests: add feature probing, Phil Sutter
          • Re: [PATCH nft 1/5] tests: add feature probing, Florian Westphal
            • Re: [PATCH nft 1/5] tests: add feature probing, Phil Sutter
      • Re: [PATCH nft 1/5] tests: add feature probing, Thomas Haller
    • Re: [PATCH nft 1/5] tests: add feature probing, Thomas Haller
  • [PATCH nft 2/5] tests: shell: let netdev_chain_0 test indicate SKIP if kernel requires netdev device, Florian Westphal
    • Re: [PATCH nft 2/5] tests: shell: let netdev_chain_0 test indicate SKIP if kernel requires netdev device, Phil Sutter
    • Re: [PATCH nft 2/5] tests: shell: let netdev_chain_0 test indicate SKIP if kernel requires netdev device, Thomas Haller
  • [PATCH nft 3/5] tests: shell: typeof_integer/raw: prefer @nh for payload matching, Florian Westphal
  • [PATCH nft 4/5] tests: shell: add and use feature probe for map query like a set, Florian Westphal
    • Re: [PATCH nft 4/5] tests: shell: add and use feature probe for map query like a set, Thomas Haller
  • [PATCH nft 5/5] tests: shell skip inner matching tests if unsupported, Florian Westphal
• [PATCH nf] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction, Pablo Neira Ayuso
• [PATCH libnetfilter_log] libipulog: remove debugging printfs, Jeremy Sowden
  • Re: [PATCH libnetfilter_log] libipulog: remove debugging printfs, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack 1/2] Ignore `configure~`, Jeremy Sowden
  • [PATCH libnetfilter_conntrack 2/2] conntrack: fix BPF for filtering IPv6 addresses, Jeremy Sowden
• [PATCH nft] doc: describe behaviour of {ip,ip6} length, Pablo Neira Ayuso
• [PATCH nft,v2] evaluate: revisit anonymous set with single element optimization, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: ensure audit reset access to table under rcu read side lock, Pablo Neira Ayuso
• [PATCH nft] evaluate: revisit anonymous set with single element optimization, Pablo Neira Ayuso
• [PATCH nft v2 0/3] tests/shell: allow running tests as non-root, Thomas Haller
  • [PATCH nft v2 1/3] tests/shell: rework command line parsing in "run-tests.sh", Thomas Haller
  • [PATCH nft v2 2/3] tests/shell: rework finding tests and add "--list-tests" option, Thomas Haller
  • [PATCH nft v2 3/3] tests/shell: run each test in separate namespace and allow rootless, Thomas Haller
    • Re: [PATCH nft v2 3/3] tests/shell: run each test in separate namespace and allow rootless, Florian Westphal
  • Re: [PATCH nft v2 0/3] tests/shell: allow running tests as non-root, Thomas Haller
• [PATH nf v3] netfilter/osf: avoid OOB read, Wander Lairson Costa
  • Re: [PATH nf v3] netfilter/osf: avoid OOB read, Florian Westphal
• [nf-next PATCH] netfilter: nf_tables: Utilize NLA_POLICY_NESTED_ARRAY, Phil Sutter
• [nf PATCH] netfilter: nf_tables: uapi: Describe NFTA_RULE_CHAIN_ID, Phil Sutter
• [PATCH 0/2] Prevent potential write out of bounds, joao
  • [PATCH 1/2] Make loop indexes unsigned, joao
  • [PATCH 2/2] Ensure num_actions is not a negative, joao
    • Re: [PATCH 2/2] Ensure num_actions is not a negative, Pablo Neira Ayuso
  • Re: [PATCH 0/2] Prevent potential write out of bounds, Jakub Kicinski
    • Re: [PATCH 0/2] Prevent potential write out of bounds, Joao Moreira
    • Re: [PATCH 0/2] Prevent potential write out of bounds, Pablo Neira Ayuso
• [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup, Felix Fietkau
  • Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup, Pablo Neira Ayuso
    • Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup, Felix Fietkau
      • Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup, Pablo Neira Ayuso
        • Re: [RFC] netfilter: nf_tables: ignore -EOPNOTSUPP on flowtable device offload setup, Felix Fietkau
• [PATCH RFC] tests: add feature probing, Florian Westphal
  • Re: [PATCH RFC] tests: add feature probing, Florian Westphal
  • Re: [PATCH RFC] tests: add feature probing, Thomas Haller
    • Re: [PATCH RFC] tests: add feature probing, Florian Westphal
      • Re: [PATCH RFC] tests: add feature probing, Thomas Haller
        • Re: [PATCH RFC] tests: add feature probing, Florian Westphal
          • Re: [PATCH RFC] tests: add feature probing, Pablo Neira Ayuso
          • Re: [PATCH RFC] tests: add feature probing, Thomas Haller
• [PATCH nf v2] netfilter/osf: avoid OOB read, Wander Lairson Costa
  • Re: [PATCH nf v2] netfilter/osf: avoid OOB read, Florian Westphal
    • Re: [PATCH nf v2] netfilter/osf: avoid OOB read, Wander Lairson Costa
      • Re: [PATCH nf v2] netfilter/osf: avoid OOB read, Florian Westphal
  • Re: [PATCH nf v2] netfilter/osf: avoid OOB read, Fernando F. Mancera
• MASQ leak?, Ian Kumlien
  • Re: MASQ leak?, Jan Engelhardt
    • Re: MASQ leak?, Ian Kumlien
      • Re: MASQ leak?, Jan Engelhardt
        • Re: MASQ leak?, Ian Kumlien
          • Re: MASQ leak?, Ian Kumlien
• [PATCH nf] netfilter/osf: avoid OOB read, Wander Lairson Costa
  • Re: [PATCH nf] netfilter/osf: avoid OOB read, Florian Westphal
• [PATCH nft] tests/shell: allow running tests as non-root users, Thomas Haller
  • Re: [PATCH nft] tests/shell: allow running tests as non-root users, Florian Westphal
    • Re: [PATCH nft] tests/shell: allow running tests as non-root users, Thomas Haller
      • Re: [PATCH nft] tests/shell: allow running tests as non-root users, Florian Westphal
        • Re: [PATCH nft] tests/shell: allow running tests as non-root users, Thomas Haller
• [PATCH nft 1/2] src: use internal_location for unspecified location at allocation time, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: remove check for NULL before calling expr_free(), Pablo Neira Ayuso
• [PATCH nft 1/2] src: simplify chain_alloc(), Pablo Neira Ayuso
  • [PATCH nft 2/2] rule: set internal_location for table and chain, Pablo Neira Ayuso
• [GIT PULL] sysctl changes for v6.6-rc1, Luis Chamberlain
  • Re: [GIT PULL] sysctl changes for v6.6-rc1, Alexey Gladkov
    • Re: [GIT PULL] sysctl changes for v6.6-rc1, Joel Granados
• [PATCH nft 0/5] fix compiler warnings with clang and "-Wextra", Thomas Haller
  • [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup(), Thomas Haller
    • Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup(), Pablo Neira Ayuso
      • Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup(), Pablo Neira Ayuso
        • Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup(), Thomas Haller
          • Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup(), Pablo Neira Ayuso
            • Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup(), Thomas Haller
              • Re: [PATCH nft 5/5] datatype: check against negative "type" argument in datatype_lookup(), Pablo Neira Ayuso
  • [PATCH nft 2/5] utils: call abort() after BUG() macro, Thomas Haller
  • [PATCH nft 3/5] src: silence "implicit-fallthrough" warnings, Thomas Haller
  • [PATCH nft 1/5] rule: fix "const static" declaration, Thomas Haller
  • [PATCH nft 4/5] xt: avoid "-Wmissing-field-initializers" for "original_opts", Thomas Haller
• [PATCH nft 1/2] proto: use hexadecimal to display ip frag-off field, Pablo Neira Ayuso
  • [PATCH nft 2/2] tests: py: extend ip frag-off coverage, Pablo Neira Ayuso
• [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Phil Sutter
  • [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset, Phil Sutter
    • Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset, Pablo Neira Ayuso
    • Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset, Pablo Neira Ayuso
    • Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset, Paul Moore
  • Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Pablo Neira Ayuso
    • Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Phil Sutter
  • Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Pablo Neira Ayuso
    • Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Richard Guy Briggs
      • Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Paul Moore
• [PATCH nft] evaluate: do not remove anonymous set with protocol flags and single element, Pablo Neira Ayuso
• [nft PATCH 1/4] tests: monitor: Fix monitor JSON output for insert command, Phil Sutter
  • [nft PATCH 3/4] tests: monitor: Fix for wrong syntax in set-interval.t, Phil Sutter
  • [nft PATCH 2/4] tests: monitor: Fix time format in ct timeout test, Phil Sutter
  • [nft PATCH 4/4] tests: monitor: Fix for wrong ordering in expected JSON output, Phil Sutter
  • Re: [nft PATCH 1/4] tests: monitor: Fix monitor JSON output for insert command, Phil Sutter
• [PATCH] doc: fix example of xt_cpu, Victor Julien
  • Re: [PATCH] doc: fix example of xt_cpu, Florian Westphal
• [PATCH nft v2 0/8] fix compiler warnings with clang, Thomas Haller
  • [PATCH nft v2 5/8] src: rework SNPRINTF_BUFFER_SIZE() and handle truncation, Thomas Haller
  • [PATCH nft v2 2/8] netlink: avoid "-Wenum-conversion" warning in parser_bison.y, Thomas Haller
  • [PATCH nft v2 3/8] datatype: avoid cast-align warning with struct sockaddr result from getaddrinfo(), Thomas Haller
  • [PATCH nft v2 1/8] netlink: avoid "-Wenum-conversion" warning in dtype_map_from_kernel(), Thomas Haller
  • [PATCH nft v2 4/8] evaluate: fix check for truncation in stmt_evaluate_log_prefix(), Thomas Haller
  • [PATCH nft v2 7/8] src: suppress "-Wunused-but-set-variable" warning with "parser_bison.c", Thomas Haller
  • [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix(), Thomas Haller
    • Re: [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix(), Pablo Neira Ayuso
      • Re: [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix(), Thomas Haller
  • [PATCH nft v2 8/8] include: drop "format" attribute from nft_gmp_print(), Thomas Haller
  • Re: [PATCH nft v2 0/8] fix compiler warnings with clang, Pablo Neira Ayuso
    • Re: [PATCH nft v2 0/8] fix compiler warnings with clang, Thomas Haller
• [syzbot] Monthly netfilter report (Aug 2023), syzbot
• [syzbot] [netfilter?] INFO: rcu detected stall in tcp_setsockopt, syzbot
• [PATCH nf] netfilter/xt_sctp: validate the flag_info count, Wander Lairson Costa
  • Re: [PATCH nf] netfilter/xt_sctp: validate the flag_info count, Pablo Neira Ayuso
• [nft PATCH] evaluate: place byteorder conversion after numgen for IP address datatypes, Jorge Ortiz
  • Re: [nft PATCH] evaluate: place byteorder conversion after numgen for IP address datatypes, Pablo Neira Ayuso
• [PATCH nft 0/8] fix compiler warnings with clang, Thomas Haller
  • [PATCH nft 6/8] src: suppress "-Wunused-but-set-variable" warning with "parser_bison.c", Thomas Haller
  • [PATCH nft 7/8] utils: add _NFT_PRAGMA_WARNING_DISABLE()/_NFT_PRAGMA_WARNING_REENABLE helpers, Thomas Haller
  • [PATCH nft 3/8] src: use "%zx" format instead of "%Zx", Thomas Haller
  • [PATCH nft 2/8] netlink: avoid "-Wenum-conversion" warning in parser_bison.y, Thomas Haller
  • [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Thomas Haller
    • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Pablo Neira Ayuso
      • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Thomas Haller
        • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Pablo Neira Ayuso
          • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Thomas Haller
            • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Pablo Neira Ayuso
              • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Thomas Haller
  • [PATCH nft 1/8] netlink: avoid "-Wenum-conversion" warning in dtype_map_from_kernel(), Thomas Haller
  • [PATCH nft 4/8] datatype: avoid cast-align warning with struct sockaddr result from getaddrinfo(), Thomas Haller
  • [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Thomas Haller
    • Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Pablo Neira Ayuso
      • Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Thomas Haller
        • Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Pablo Neira Ayuso
          • Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Thomas Haller
• [PATCH nf] netfilter/xt_u32: validate user space input, Wander Lairson Costa
  • Re: [PATCH nf] netfilter/xt_u32: validate user space input, Wander Lairson Costa
  • Re: [PATCH nf] netfilter/xt_u32: validate user space input, Pablo Neira Ayuso
• [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, syzbot
  • Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, Will Deacon
    • Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, Robin Murphy
      • Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, Will Deacon
        • Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, Robin Murphy
• Fwd: Since 6.1: flow_dissector.c __skb_flow_dissect+0xa91/0x1cd0 raises WARNING in specific circumstances, Bagas Sanjaya
• Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets, Bagas Sanjaya
  • Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets, Volodymyr Litovka
    • Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets, Volodymyr Litovka
• [PATCH conntrack-tools 0/4] Fixes for yacc parser compilation warnings, Jeremy Sowden
  • [PATCH conntrack-tools 3/4] read_config_yy: correct `yyerror` prototype, Jeremy Sowden
  • [PATCH conntrack-tools 2/4] build: stop suppressing warnings for generated sources, Jeremy Sowden
  • [PATCH conntrack-tools 4/4] read_config_yy: correct arguments passed to `inet_aton`, Jeremy Sowden
  • [PATCH conntrack-tools 1/4] build: reformat and sort `conntrack_LDADD` and `conntrackd_SOURCES`, Jeremy Sowden
  • Re: [PATCH conntrack-tools 0/4] Fixes for yacc parser compilation warnings, Pablo Neira Ayuso
• [PATCH v4.19.y] netfilter: nf_queue: fix socket leak, Vamsi Krishna Brahmajosyula
• [PATCH nft 0/4] add operation cache for timestamp, Thomas Haller
  • [PATCH nft 1/4] evaluate: add and use parse_ctx_init() helper method, Thomas Haller
  • [PATCH nft 4/4] src: cache GMT offset for current time during parsing/output, Thomas Haller
  • [PATCH nft 2/4] src: add ops_cache struct for caching information during parsing, Thomas Haller
    • Re: [PATCH nft 2/4] src: add ops_cache struct for caching information during parsing, Pablo Neira Ayuso
  • [PATCH nft 3/4] src: cache result of time() during parsing/output, Thomas Haller
    • Re: [PATCH nft 3/4] src: cache result of time() during parsing/output, Pablo Neira Ayuso
  • Re: [PATCH nft 0/4] add operation cache for timestamp, Pablo Neira Ayuso
• [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping(), Phil Sutter
  • <Possible follow-ups>
  • [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping(), Phil Sutter
    • Re: [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping(), Phil Sutter
• [PATCH nft v2 0/6] cleanup base includes and add <nft.h> header, Thomas Haller
  • [PATCH nft v2 3/6] include: don't define _GNU_SOURCE in public header, Thomas Haller
  • [PATCH nft v2 1/6] meta: define _GNU_SOURCE to get strptime() from <time.h>, Thomas Haller
  • [PATCH nft v2 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE, Thomas Haller
  • [PATCH nft v2 5/6] include: include <std{bool,int}.h> via <nft.h>, Thomas Haller
  • [PATCH nft v2 2/6] src: add <nft.h> header and include it as first, Thomas Haller
  • [PATCH nft v2 6/6] configure: drop AM_PROG_CC_C_O autoconf check, Thomas Haller
  • Re: [PATCH nft v2 0/6] cleanup base includes and add <nft.h> header, Pablo Neira Ayuso
• [PATCH nft 0/6] no recursive make, Thomas Haller
  • [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am", Thomas Haller
    • Re: [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am", Phil Sutter
      • Re: [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am", Thomas Haller
  • [PATCH nft 2/6] build: drop recursive make for "py/Makefile.am", Thomas Haller
  • [PATCH nft 4/6] build: drop recursive make for "src/Makefile.am", Thomas Haller
  • [PATCH nft 3/6] build: drop recursive make for "files/**/Makefile.am", Thomas Haller
  • [PATCH nft 6/6] build: drop recursive make for "doc/Makefile.am", Thomas Haller
  • [PATCH nft 1/6] build: drop recursive make for "include/**/Makefile.am", Thomas Haller
• [PATCH nf v2] netfilter: nft_exthdr: Fix non-linear header modification, Xiao Liang
  • Re: [PATCH nf v2] netfilter: nft_exthdr: Fix non-linear header modification, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Xiao Liang
  • Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Florian Westphal
    • Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Xiao Liang
    • Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Xiao Liang
      • Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Florian Westphal
• [PATCH nft] tests: 30s-stress: add failslab and abort phase tests, Florian Westphal
• [PATCH conntrack-tools] conntrack, nfct: fix some typo's, Jeremy Sowden
  • Re: [PATCH conntrack-tools] conntrack, nfct: fix some typo's, Pablo Neira Ayuso
• [PATCH -stable,4.14.y,4.19.y 0/1] ipvs: backport 1b90af292e71 and 5310760af1d4, Julian Anastasov
  • [PATCH -stable,4.14.y,4.19.y 1/1] ipvs: Improve robustness to the ipvs sysctl, Julian Anastasov
  • Re: [PATCH -stable,4.14.y,4.19.y 0/1] ipvs: backport 1b90af292e71 and 5310760af1d4, Greg KH
• [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header, Thomas Haller
  • [PATCH nft 1/6] meta: define _GNU_SOURCE to get strptime() from <time.h>, Thomas Haller
  • [PATCH nft 6/6] configure: drop AM_PROG_CC_C_O autoconf check, Thomas Haller
  • [PATCH nft 2/6] src: add <nftdefault.h> header and include it as first, Thomas Haller
  • [PATCH nft 5/6] include: include <std{bool,int}.h> via nftdefault.h, Thomas Haller
  • [PATCH nft 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE, Thomas Haller
    • Re: [PATCH nft 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE, Thomas Haller
  • [PATCH nft 3/6] include: don't define _GNU_SOURCE in public header, Thomas Haller
  • Re: [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header, Pablo Neira Ayuso
    • Re: [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header, Thomas Haller
• [nft PATCH] tests: shell: Stabilize sets/0043concatenated_ranges_0 test, Phil Sutter
  • Re: [nft PATCH] tests: shell: Stabilize sets/0043concatenated_ranges_0 test, Phil Sutter
• [PATCH net 0/6] netfilter updates for net, Florian Westphal
  • [PATCH net 1/6] netfilter: nf_tables: validate all pending tables, Florian Westphal
    • Re: [PATCH net 1/6] netfilter: nf_tables: validate all pending tables, patchwork-bot+netdevbpf
  • [PATCH net 2/6] netfilter: nf_tables: flush pending destroy work before netlink notifier, Florian Westphal
  • [PATCH net 3/6] netfilter: nf_tables: GC transaction race with abort path, Florian Westphal
  • [PATCH net 5/6] netfilter: nf_tables: fix out of memory error handling, Florian Westphal
  • [PATCH net 4/6] netfilter: nf_tables: use correct lock to protect gc_list, Florian Westphal
  • [PATCH net 6/6] netfilter: nf_tables: defer gc run if previous batch is still pending, Florian Westphal
  • <Possible follow-ups>
  • [PATCH net 0/6] netfilter updates for net, Florian Westphal
    • [PATCH net 1/6] netfilter: nftables: exthdr: fix 4-byte stack OOB write, Florian Westphal
      • Re: [PATCH net 1/6] netfilter: nftables: exthdr: fix 4-byte stack OOB write, patchwork-bot+netdevbpf
    • [PATCH net 2/6] netfilter: nfnetlink_osf: avoid OOB read, Florian Westphal
    • [PATCH net 3/6] netfilter: nf_tables: uapi: Describe NFTA_RULE_CHAIN_ID, Florian Westphal
    • [PATCH net 4/6] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction, Florian Westphal
    • [PATCH net 5/6] netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c, Florian Westphal
    • [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset, Florian Westphal
      • Re: [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset, Phil Sutter
        • Re: [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset, Florian Westphal
          • Re: [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset, Phil Sutter
• [PATCH nft] tests: shell: use minutes granularity in sets/0036add_set_element_expiration_0, Pablo Neira Ayuso
  • Re: [PATCH nft] tests: shell: use minutes granularity in sets/0036add_set_element_expiration_0, Phil Sutter
• [PATCH nft] evaluate: error out on meter overlap with an existing set/map declaration, Pablo Neira Ayuso
• [nft PATCH] tests: shell: Stabilize sets/reset_command_0 test, Phil Sutter
  • Re: [nft PATCH] tests: shell: Stabilize sets/reset_command_0 test, Phil Sutter
• [PATCH nf] netfilter: nf_tables: defer gc run if previous batch is still pending, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: defer gc run if previous batch is still pending, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling, Stefano Brivio
  • Re: [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling, Pablo Neira Ayuso
• [nft PATCH] clang-format: add clang-format configuration file from Linux kernel, Thomas Haller
  • Re: [nft PATCH] clang-format: add clang-format configuration file from Linux kernel, Pablo Neira Ayuso
    • Re: [nft PATCH] clang-format: add clang-format configuration file from Linux kernel, Thomas Haller
• [nft PATCH] gitignore: ignore cscope files, Thomas Haller
  • Re: [nft PATCH] gitignore: ignore cscope files, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: missing extended netlink error in lookup functions, Pablo Neira Ayuso
• [PATCH nft] cache: chain listing implicitly sets on terse option, Pablo Neira Ayuso
• [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print(), Thomas Haller
  • [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Thomas Haller
    • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Pablo Neira Ayuso
      • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Thomas Haller
        • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Thomas Haller
          • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Pablo Neira Ayuso
        • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Pablo Neira Ayuso
  • Re: [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print(), Pablo Neira Ayuso
  • Re: [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print(), Pablo Neira Ayuso
• [PATCH conntrack] tests/conntrack: add initial stress test for conntrack, Pablo Neira Ayuso
• [PATCH ulogd2 v3 00/11] Fixes for handling and output of IP addresses, Jeremy Sowden
  • [PATCH ulogd2 v3 01/11] src: record length of integer key values, Jeremy Sowden
  • [PATCH ulogd2 v3 03/11] printpkt, raw2packet_BASE: keep gateway address in NBO, Jeremy Sowden
  • [PATCH ulogd2 v3 02/11] printpkt: fix statement punctuator, Jeremy Sowden
  • [PATCH ulogd2 v3 04/11] raw2packet_BASE: store ARP address values as integers, Jeremy Sowden
  • [PATCH ulogd2 v3 05/11] ip2hbin: store ipv6 address as integer, Jeremy Sowden
  • [PATCH ulogd2 v3 06/11] ipfix: skip non-ipv4 addresses, Jeremy Sowden
  • [PATCH ulogd2 v3 09/11] sqlite3: correct binding of ipv4 addresses and 64-bit integers, Jeremy Sowden
  • [PATCH ulogd2 v3 08/11] gprint, oprint: add support for printing ipv6 addresses, Jeremy Sowden
  • [PATCH ulogd2 v3 07/11] gprint, oprint: use inet_ntop to format ip addresses, Jeremy Sowden
  • [PATCH ulogd2 v3 10/11] sqlite3: insert ipv6 addresses as null rather than garbage, Jeremy Sowden
  • [PATCH ulogd2 v3 11/11] db: insert ipv6 addresses in the same format as ip2bin, Jeremy Sowden
• [PATCH nf-next] netfilter: nf_tables: allow loop termination for pending fatal signal, Florian Westphal
• [PATCH nft] tests/shell: expand vmap test case to also cause batch abort, Florian Westphal
• [PATCH nft] parser: permit gc-interval in map declarations, Florian Westphal
• Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed, Bagas Sanjaya
  • Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed, Phil Sutter
    • Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed, Bagas Sanjaya
• [PATCH nf] netfilter: nf_tables: use correct lock to protect gc_list, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: use correct lock to protect gc_list, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: do not set on NLM_F_ACK in IPCTNL_MSG_CT_GET requests, Pablo Neira Ayuso
• [PATCH nft,v2] INSTALL: provide examples to install python bindings, Pablo Neira Ayuso
  • Re: [PATCH nft,v2] INSTALL: provide examples to install python bindings, Jeremy Sowden
    • Re: [PATCH nft,v2] INSTALL: provide examples to install python bindings, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: skip ENOENT when -U/-D finds a stale conntrack entry, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: unbreak -U command, use correct family, Pablo Neira Ayuso
• [PATCH nft] INSTALL: provide examples to install python bindings, Pablo Neira Ayuso
  • Re: [PATCH nft] INSTALL: provide examples to install python bindings, Jeremy Sowden
• libnetfilter_queue patch ping, Duncan Roe
  • Re: libnetfilter_queue patch ping, Pablo Neira Ayuso
    • Re: libnetfilter_queue patch ping, Duncan Roe
  • <Possible follow-ups>
  • libnetfilter_queue patch ping, Duncan Roe
  • libnetfilter_queue patch ping, Duncan Roe
• [PATCH] json: use strtok_r() instead of strtok(), Thomas Haller
  • Re: [PATCH] json: use strtok_r() instead of strtok(), Florian Westphal
• [PATCH xtables-addons] doc: fix version number in xtables-addons.8, Jeremy Sowden
  • Re: [PATCH xtables-addons] doc: fix version number in xtables-addons.8, Jan Engelhardt
• [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
  • [nft PATCH v3 1/3] nftutils: add new internal file for general utilities, Thomas Haller
  • [nft PATCH v3 3/3] src: use wrappers for getprotoby{name,number}_r(), getservbyport_r(), Thomas Haller
  • [nft PATCH v3 2/3] nftutils: add wrappers for getprotoby{name,number}_r(), getservbyport_r(), Thomas Haller
  • Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
    • Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
      • Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
• [PATCH xtables-addons 0/5] Autoools silent-rules fixes, Jeremy Sowden
  • [PATCH xtables-addons 3/5] build: update `AM_V_*` definitions to match autotools, Jeremy Sowden
    • Re: [PATCH xtables-addons 3/5] build: update `AM_V_*` definitions to match autotools, Jan Engelhardt
  • [PATCH xtables-addons 4/5] build: don't hard-code `AM_DEFAULT_VERBOSITY` in Makefile.iptrules, Jeremy Sowden
  • [PATCH xtables-addons 5/5] build: define `AM_V_GEN` where it is needed, Jeremy Sowden
  • [PATCH xtables-addons 2/5] build: replace `AM_V_silent` with `AM_V_at`, Jeremy Sowden
  • [PATCH xtables-addons 1/5] build: use `$(top_srcdir)` when including Makefile.extra, Jeremy Sowden
• [nft PATCH v5 0/6] add input flags and "no-dns"/"json" flags, Thomas Haller
  • [nft PATCH v5 1/6] src: add input flags for nft_ctx, Thomas Haller
  • [nft PATCH v5 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing, Thomas Haller
  • [nft PATCH v5 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
  • [nft PATCH v5 4/6] py: fix exception during cleanup of half-initialized Nftables, Thomas Haller
  • [nft PATCH v5 5/6] py: extract flags helper functions for set_debug()/get_debug(), Thomas Haller
  • [nft PATCH v5 6/6] py: add Nftables.{get,set}_input_flags() API, Thomas Haller
  • Re: [nft PATCH v5 0/6] add input flags and "no-dns"/"json" flags, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: GC transaction race with abort path, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path, kernel test robot
    • Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path, Liu, Yujie
• [PATCH nf] netfilter: nf_tables: flush pending destroy work before netlink notifier, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: validate all pending tables, Florian Westphal
• Re: [PATCH v4] Bluetooth: Fix for ACL disconnect when pairing fails, Muhammad Usama Anjum
• [PATCH net-next v2] netfilter: ebtables: replace zero-length array members, GONG, Ruiqi
  • Re: [PATCH net-next v2] netfilter: ebtables: replace zero-length array members, Simon Horman
    • Re: [PATCH net-next v2] netfilter: ebtables: replace zero-length array members, Gong Ruiqi
• [PATCH net-next v4] netfilter: ebtables: fix fortify warnings in size_entry_mwt(), GONG, Ruiqi
• [PATCHv2 nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Xin Long
  • Re: [PATCHv2 nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Marcelo Ricardo Leitner
• [PATCH RFC net-next 00/14] ipvs: per-net tables and optimizations, Julian Anastasov
  • [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Julian Anastasov
    • Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Paul E. McKenney
      • Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Julian Anastasov
        • Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Paul E. McKenney
  • [PATCH RFC net-next 02/14] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Julian Anastasov
  • [PATCH RFC net-next 04/14] ipvs: use single svc table, Julian Anastasov
  • [PATCH RFC net-next 03/14] ipvs: some service readers can use RCU, Julian Anastasov
  • [PATCH RFC net-next 14/14] ipvs: add conn_lfactor and svc_lfactor sysctl vars, Julian Anastasov
  • [PATCH RFC net-next 10/14] ipvs: show the current conn_tab size to users, Julian Anastasov
  • [PATCH RFC net-next 05/14] ipvs: do not keep dest_dst after dest is removed, Julian Anastasov
  • [PATCH RFC net-next 11/14] ipvs: no_cport and dropentry counters can be per-net, Julian Anastasov
  • [PATCH RFC net-next 07/14] ipvs: add resizable hash tables, Julian Anastasov
  • [PATCH RFC net-next 06/14] ipvs: use more counters to avoid service lookups, Julian Anastasov
  • [PATCH RFC net-next 13/14] ipvs: add ip_vs_status info, Julian Anastasov
  • [PATCH RFC net-next 12/14] ipvs: use more keys for connection hashing, Julian Anastasov
  • [PATCH RFC net-next 08/14] ipvs: use resizable hash table for services, Julian Anastasov
  • [PATCH RFC net-next 09/14] ipvs: switch to per-net connection table, Julian Anastasov
• [iptables PATCH] Revert --compat option related commits, Phil Sutter
  • Re: [iptables PATCH] Revert --compat option related commits, Phil Sutter
• [PATCH nf 1/3] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path, Pablo Neira Ayuso
  • [PATCH nf 2/3] netfilter: nf_tables: GC transaction race with netns dismantle, Pablo Neira Ayuso
  • [PATCH nf 3/3] netfilter: nft_dynset: disallow object maps, Pablo Neira Ayuso
• [PATCH nft] tests: add transaction stress test with parallel delete/add/flush and netns deletion, Florian Westphal
• [PATCH nf 0/2] netfilter: nf_nat: fix yet another bizarre early demux corner case, Florian Westphal
  • [PATCH nf 1/2] netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash, Florian Westphal
  • [PATCH nf 2/2] selftests: netfilter: test nat source port clash resolution interaction with tcp early demux, Florian Westphal
• [PATCH 5.4 32/39] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH 5.10 59/68] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH 5.15 76/89] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH 4.19 25/33] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush, Greg Kroah-Hartman
• [PATCH 4.19 26/33] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH 4.14 20/26] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Xin Long
  • Re: [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Simon Horman
  • RE: [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Sriram Yagnaraman
    • Re: [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Xin Long
• [PATCH -stable,4.14 0/1] netfilter stable fix for 4.14, Pablo Neira Ayuso
  • [PATCH -stable,4.14 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
  • Re: [PATCH -stable,4.14 0/1] netfilter stable fix for 4.14, Greg KH
• [PATCH -stable,4.19 0/2] netfilter stable fixes for 4.19, Pablo Neira Ayuso
  • [PATCH -stable,4.19 1/2] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush, Pablo Neira Ayuso
  • [PATCH -stable,4.19 2/2] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH -stable,4.19 0/2] netfilter stable fixes for 4.19, Pablo Neira Ayuso
    • [PATCH -stable,4.19 2/2] netfilter: nf_tables: missing NFT_TRANS_PREPARE_ERROR in flowtable deactivatation, Pablo Neira Ayuso
    • [PATCH -stable,4.19 1/2] netfilter: nft_flow_offload: fix underflow in flowtable reference counter, Pablo Neira Ayuso
    • Re: [PATCH -stable,4.19 0/2] netfilter stable fixes for 4.19, Greg KH
• [PATCH -stable,5.4 0/1] netfilter stable fix for 5.4, Pablo Neira Ayuso
  • [PATCH -stable,5.4 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
• [PATCH -stable,5.10 0/1] netfilter stable fix for 5.10, Pablo Neira Ayuso
  • [PATCH -stable,5.10 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
• [PATCH -stable,5.15 0/1] netfilter stable fix for 5.15, Pablo Neira Ayuso
  • [PATCH -stable,5.15 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
• [PATCH -stable,6.1 0/1] netfilter stable fix for 6.1, Pablo Neira Ayuso
  • [PATCH -stable,6.1 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: don't fail inserts if duplicate has expired, Florian Westphal
• Re: [PATCH] ipvs: fix racy memcpy in proc_do_sync_threshold, Simon Horman
  • <Possible follow-ups>
  • Re: [PATCH] ipvs: fix racy memcpy in proc_do_sync_threshold, Julian Anastasov
• [PATCH nf] netfilter: nf_tables: deactivate catchall elements in next generation, Florian Westphal
• [PATCH nf] netfilter: nf_tables: fix kdoc warnings after gc rework, Florian Westphal
• [PATCH nft] tests: add test with concatenation, vmap and timeout, Florian Westphal
• [iptables PATCH v2 0/4] Implement a best-effort forward compat solution, Phil Sutter
  • [iptables PATCH v2 2/4] nft: Introduce and use bool nft_handle::compat, Phil Sutter
  • [iptables PATCH v2 3/4] Add --compat option to *tables-nft and *-nft-restore commands, Phil Sutter
  • [iptables PATCH v2 4/4] tests: Test compat mode, Phil Sutter
  • [iptables PATCH v2 1/4] nft: Pass nft_handle to add_{target,action}(), Phil Sutter
  • Re: [iptables PATCH v2 0/4] Implement a best-effort forward compat solution, Phil Sutter
• Fwd: kernel: WARNING: CPU: 0 PID: 16269 at net/netfilter/nf_conntrack_core.c:1210, Bagas Sanjaya
  • Re: Fwd: kernel: WARNING: CPU: 0 PID: 16269 at net/netfilter/nf_conntrack_core.c:1210, Florian Westphal
• [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
  • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Jan Engelhardt
    • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
  • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
    • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
      • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
  • [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
    • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
      • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
        • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
          • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
          • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
• [iptables PATCH] tests: iptables-test: Fix command segfault reports, Phil Sutter
  • Re: [iptables PATCH] tests: iptables-test: Fix command segfault reports, Phil Sutter
• [iptables PATCH] Use SOCK_CLOEXEC/O_CLOEXEC where available, Phil Sutter
  • Re: [iptables PATCH] Use SOCK_CLOEXEC/O_CLOEXEC where available, Phil Sutter
• [iptables PATCH v2 0/3] Chain counter fixes here and there, Phil Sutter
  • [iptables PATCH v2 1/3] nft: Create builtin chains with counters enabled, Phil Sutter
  • [iptables PATCH v2 3/3] tests: shell: Test chain policy counter behaviour, Phil Sutter
  • [iptables PATCH v2 2/3] Revert "libiptc: fix wrong maptype of base chain counters on restore", Phil Sutter
  • Re: [iptables PATCH v2 0/3] Chain counter fixes here and there, Phil Sutter
• [PATCH nf 1/5] netfilter: nf_tables: don't skip expired elements during walk, Pablo Neira Ayuso
  • [PATCH nf 4/5] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Pablo Neira Ayuso
  • [PATCH nf 5/5] netfilter: nf_tables: remove busy mark and gc batch API, Pablo Neira Ayuso
  • [PATCH nf 2/5] netfilter: nf_tables: GC transaction API to avoid race with control plane, Pablo Neira Ayuso
  • [PATCH nf 3/5] netfilter: nf_tables: adapt set backend to use GC transaction API, Pablo Neira Ayuso
    • Re: [PATCH nf 3/5] netfilter: nf_tables: adapt set backend to use GC transaction API, kernel test robot
• [PATCH 4.19 133/323] netfilter: nf_tables: fix scheduling-while-atomic splat, Greg Kroah-Hartman
• [PATCH 4.19 132/323] netfilter: nf_tables: unbind non-anonymous set if rule construction fails, Greg Kroah-Hartman
• [PATCH 4.19 131/323] netfilter: nf_tables: reject unbound anonymous set before commit phase, Greg Kroah-Hartman
• [PATCH 4.19 130/323] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain, Greg Kroah-Hartman
• [PATCH 4.19 129/323] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE, Greg Kroah-Hartman
• [PATCH 4.19 128/323] netfilter: nf_tables: use net_generic infra for transaction data, Greg Kroah-Hartman
• [PATCH 4.19 127/323] netfilter: add helper function to set up the nfnetlink header and use it, Greg Kroah-Hartman
• [PATCH 4.19 126/323] netfilter: nftables: add helper function to set the base sequence number, Greg Kroah-Hartman
• [PATCH 4.19 125/323] netfilter: nf_tables: add rescheduling points during loop detection walks, Greg Kroah-Hartman
• [PATCH 4.19 124/323] netfilter: nf_tables: fix nat hook table deletion, Greg Kroah-Hartman
• [PATCH 4.14 088/204] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain, Greg Kroah-Hartman
• [PATCH 4.14 089/204] netfilter: nf_tables: unbind non-anonymous set if rule construction fails, Greg Kroah-Hartman
• [PATCH 4.14 087/204] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE, Greg Kroah-Hartman
• [PATCH v3 00/14] sysctl: Add a size argument to register functions in sysctl, Joel Granados
  • [PATCH v3 01/14] sysctl: Prefer ctl_table_header in proc_sysctl, Joel Granados
  • [PATCH v3 02/14] sysctl: Use ctl_table_header in list_for_each_table_entry, Joel Granados
  • [PATCH v3 06/14] sysctl: Add size to register_sysctl, Joel Granados
  • [PATCH v3 05/14] sysctl: Add a size arg to __register_sysctl_table, Joel Granados
  • [PATCH v3 07/14] sysctl: Add size arg to __register_sysctl_init, Joel Granados
  • [PATCH v3 09/14] ax.25: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v3 08/14] sysctl: Add size to register_net_sysctl function, Joel Granados
  • [PATCH v3 03/14] sysctl: Add ctl_table_size to ctl_table_header, Joel Granados
  • [PATCH v3 04/14] sysctl: Add size argument to init_header, Joel Granados
  • [PATCH v3 10/14] netfilter: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v3 11/14] networking: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v3 13/14] sysctl: SIZE_MAX->ARRAY_SIZE in register_net_sysctl, Joel Granados
  • [PATCH v3 12/14] vrf: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v3 14/14] sysctl: Use ctl_table_size as stopping criteria for list macro, Joel Granados
  • Re: [PATCH v3 00/14] sysctl: Add a size argument to register functions in sysctl, Luis Chamberlain
• [PATCH] netfilter: ebtables: replace zero-length array members, GONG, Ruiqi
  • Re: [PATCH] netfilter: ebtables: replace zero-length array members, Phil Sutter
  • Re: [PATCH] netfilter: ebtables: replace zero-length array members, Kees Cook
• [PATCH v3] netfilter: ebtables: fix fortify warnings in size_entry_mwt(), GONG, Ruiqi
  • Re: [PATCH v3] netfilter: ebtables: fix fortify warnings in size_entry_mwt(), Simon Horman
  • Re: [PATCH v3] netfilter: ebtables: fix fortify warnings in size_entry_mwt(), Kees Cook
• [PATCH v2 0/7] netfilter: refactor deprecated strncpy, Justin Stitt
  • [PATCH v2 2/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
  • [PATCH v2 7/7] netfilter: xtables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH v2 7/7] netfilter: xtables: refactor deprecated strncpy, Florian Westphal
  • [PATCH v2 3/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
  • [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Florian Westphal
      • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Justin Stitt
        • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Jan Engelhardt
          • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Kees Cook
        • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Florian Westphal
          • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Justin Stitt
  • [PATCH v2 6/7] netfilter: x_tables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH v2 6/7] netfilter: x_tables: refactor deprecated strncpy, Florian Westphal
  • [PATCH v2 5/7] netfilter: nft_osf: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH v2 5/7] netfilter: nft_osf: refactor deprecated strncpy, Florian Westphal
  • [PATCH v2 4/7] netfilter: nft_meta: refactor deprecated strncpy, Justin Stitt
• [PATCH 0/7] netfilter: refactor deprecated strncpy, Justin Stitt
  • [PATCH 1/7] netfilter: ipset: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 1/7] netfilter: ipset: refactor deprecated strncpy, Florian Westphal
      • Re: [PATCH 1/7] netfilter: ipset: refactor deprecated strncpy, Kees Cook
  • [PATCH 6/7] netfilter: x_tables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 6/7] netfilter: x_tables: refactor deprecated strncpy, Florian Westphal
    • Re: [PATCH 6/7] netfilter: x_tables: refactor deprecated strncpy, Kees Cook
  • [PATCH 3/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 3/7] netfilter: nf_tables: refactor deprecated strncpy, Florian Westphal
  • [PATCH 4/7] netfilter: nft_meta: refactor deprecated strncpy, Justin Stitt
  • [PATCH 2/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 2/7] netfilter: nf_tables: refactor deprecated strncpy, Florian Westphal
      • Re: [PATCH 2/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
  • [PATCH 5/7] netfilter: nft_osf: refactor deprecated strncpy to strscpy, Justin Stitt
  • [PATCH 7/7] netfilter: xtables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 7/7] netfilter: xtables: refactor deprecated strncpy, Jan Engelhardt
• [PATCH v2] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
  • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, Gustavo A. R. Silva
    • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, Kees Cook
      • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
      • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
    • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, Kees Cook
    • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
• [PATCH nf] netfilter: nf_tables: fix false-positive lockdep splat, Florian Westphal
• [PATCH] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
  • Re: [PATCH] netfilter: ebtables: fix fortify warnings, Florian Westphal
    • Re: [PATCH] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
  • Re: [PATCH] netfilter: ebtables: fix fortify warnings, kernel test robot
• [PATCH net-next] netfilter: h323: Remove unused function declarations, Yue Haibing
• [PATCH nft 0/2] doc: fix cleaning of man-pages, Jeremy Sowden
  • [PATCH nft 1/2] doc: move man-pages to `dist_man_MANS`, Jeremy Sowden
  • [PATCH nft 2/2] doc: move man-pages to `MAINTAINERCLEANFILES`, Jeremy Sowden
  • Re: [PATCH nft 0/2] doc: fix cleaning of man-pages, Pablo Neira Ayuso
• [iptables PATCH v2 1/2] nft-ruleparse: Introduce nft_create_target(), Phil Sutter
  • [iptables PATCH v2 2/2] nft-ruleparse: parse meta mark set as MARK target, Phil Sutter
  • Re: [iptables PATCH v2 1/2] nft-ruleparse: Introduce nft_create_target(), Phil Sutter
• [PATCH net-next] netfilter: conntrack: Remove unused function declarations, Yue Haibing
  • Re: [PATCH net-next] netfilter: conntrack: Remove unused function declarations, Simon Horman
• [nft PATCH v4 0/6] add input flags and "no-dns"/"json" flags, Thomas Haller
  • [nft PATCH v4 1/6] src: add input flags for nft_ctx, Thomas Haller
    • Re: [nft PATCH v4 1/6] src: add input flags for nft_ctx, Phil Sutter
  • [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
    • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
      • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
        • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
          • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
            • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
              • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
                • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
                  • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
    • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
  • [nft PATCH v4 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing, Thomas Haller
    • Re: [nft PATCH v4 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing, Phil Sutter
  • [nft PATCH v4 4/6] py: fix exception during cleanup of half-initialized Nftables, Thomas Haller
    • Re: [nft PATCH v4 4/6] py: fix exception during cleanup of half-initialized Nftables, Phil Sutter
  • [nft PATCH v4 5/6] py: extract flags helper functions for set_debug()/get_debug(), Thomas Haller
    • Re: [nft PATCH v4 5/6] py: extract flags helper functions for set_debug()/get_debug(), Phil Sutter
  • [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Thomas Haller
    • Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Phil Sutter
      • Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Thomas Haller
    • Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Phil Sutter
      • Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Thomas Haller
• [PATCH iptables] nft-ruleparse: parse meta mark set as MARK target, Florian Westphal
  • Re: [PATCH iptables] nft-ruleparse: parse meta mark set as MARK target, Phil Sutter
    • Re: [PATCH iptables] nft-ruleparse: parse meta mark set as MARK target, Florian Westphal
• Solution Bugzilla Issue 1659 - iptables-nft v1.8.9 Error: meta sreg key not supported, Robert
  • Re: Solution Bugzilla Issue 1659 - iptables-nft v1.8.9 Error: meta sreg key not supported, Florian Westphal
• [iptables PATCH] Revert "libiptc: fix wrong maptype of base chain counters on restore", Phil Sutter
• [iptables PATCH] extensions: libip6t_icmp: Add names for mld-listener types, Phil Sutter
  • Re: [iptables PATCH] extensions: libip6t_icmp: Add names for mld-listener types, Phil Sutter
• [iptables PATCH] nft: move processing logic out of asserts, Phil Sutter
  • Re: [iptables PATCH] nft: move processing logic out of asserts, Phil Sutter
• [nft PATCH v2] tests: shell: Review test-cases for destroy command, Phil Sutter
  • Re: [nft PATCH v2] tests: shell: Review test-cases for destroy command, Fernando F. Mancera
    • Re: [nft PATCH v2] tests: shell: Review test-cases for destroy command, Phil Sutter
• [nft PATCH] doc: document add chain device parameter, Brennan Paciorek
  • Re: [nft PATCH] doc: document add chain device parameter, Pablo Neira Ayuso
• [iptables PATCH v2 00/15] Man pages review, Phil Sutter
  • [iptables PATCH v2 07/15] man: iptables-restore.8: Fix --modprobe description, Phil Sutter
  • [iptables PATCH v2 11/15] man: iptables-restore.8: Start paragraphs in upper-case, Phil Sutter
  • [iptables PATCH v2 12/15] man: Trivial: Missing space after comma, Phil Sutter
  • [iptables PATCH v2 14/15] man: iptables-save.8: Fix --modprobe description, Phil Sutter
  • [iptables PATCH v2 02/15] man: iptables.8: Trivial spelling fixes, Phil Sutter
  • [iptables PATCH v2 10/15] man: iptables-restore.8: Put 'file' in italics in synopsis, Phil Sutter
  • [iptables PATCH v2 09/15] man: iptables-restore.8: Drop -W option from synopsis, Phil Sutter
  • [iptables PATCH v2 03/15] man: iptables.8: Fix intra page reference, Phil Sutter
  • [iptables PATCH v2 01/15] man: iptables.8: Extend exit code description, Phil Sutter
  • [iptables PATCH v2 05/15] man: Use HTTPS for links to netfilter.org, Phil Sutter
  • [iptables PATCH v2 08/15] man: iptables-restore.8: Consistently document -w option, Phil Sutter
  • [iptables PATCH v2 04/15] man: iptables.8: Clarify --goto description, Phil Sutter
  • [iptables PATCH v2 13/15] man: iptables-save.8: Clarify 'available tables', Phil Sutter