Linux Netfilter / IP Tables Devel

• Date Index

• Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, (continued)
  • Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Phil Sutter
  • Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Pablo Neira Ayuso
    • Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Richard Guy Briggs
      • Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset, Paul Moore
• [PATCH nft] evaluate: do not remove anonymous set with protocol flags and single element, Pablo Neira Ayuso
• [nft PATCH 1/4] tests: monitor: Fix monitor JSON output for insert command, Phil Sutter
  • [nft PATCH 3/4] tests: monitor: Fix for wrong syntax in set-interval.t, Phil Sutter
  • [nft PATCH 2/4] tests: monitor: Fix time format in ct timeout test, Phil Sutter
  • [nft PATCH 4/4] tests: monitor: Fix for wrong ordering in expected JSON output, Phil Sutter
  • Re: [nft PATCH 1/4] tests: monitor: Fix monitor JSON output for insert command, Phil Sutter
• [PATCH] doc: fix example of xt_cpu, Victor Julien
  • Re: [PATCH] doc: fix example of xt_cpu, Florian Westphal
• [PATCH nft v2 0/8] fix compiler warnings with clang, Thomas Haller
  • [PATCH nft v2 5/8] src: rework SNPRINTF_BUFFER_SIZE() and handle truncation, Thomas Haller
  • [PATCH nft v2 2/8] netlink: avoid "-Wenum-conversion" warning in parser_bison.y, Thomas Haller
  • [PATCH nft v2 3/8] datatype: avoid cast-align warning with struct sockaddr result from getaddrinfo(), Thomas Haller
  • [PATCH nft v2 1/8] netlink: avoid "-Wenum-conversion" warning in dtype_map_from_kernel(), Thomas Haller
  • [PATCH nft v2 4/8] evaluate: fix check for truncation in stmt_evaluate_log_prefix(), Thomas Haller
  • [PATCH nft v2 7/8] src: suppress "-Wunused-but-set-variable" warning with "parser_bison.c", Thomas Haller
  • [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix(), Thomas Haller
    • Re: [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix(), Pablo Neira Ayuso
      • Re: [PATCH nft v2 6/8] evaluate: don't needlessly clear full string buffer in stmt_evaluate_log_prefix(), Thomas Haller
  • [PATCH nft v2 8/8] include: drop "format" attribute from nft_gmp_print(), Thomas Haller
  • Re: [PATCH nft v2 0/8] fix compiler warnings with clang, Pablo Neira Ayuso
    • Re: [PATCH nft v2 0/8] fix compiler warnings with clang, Thomas Haller
• [syzbot] Monthly netfilter report (Aug 2023), syzbot
• [syzbot] [netfilter?] INFO: rcu detected stall in tcp_setsockopt, syzbot
• [PATCH nf] netfilter/xt_sctp: validate the flag_info count, Wander Lairson Costa
  • Re: [PATCH nf] netfilter/xt_sctp: validate the flag_info count, Pablo Neira Ayuso
• [nft PATCH] evaluate: place byteorder conversion after numgen for IP address datatypes, Jorge Ortiz
  • Re: [nft PATCH] evaluate: place byteorder conversion after numgen for IP address datatypes, Pablo Neira Ayuso
• [PATCH nft 0/8] fix compiler warnings with clang, Thomas Haller
  • [PATCH nft 6/8] src: suppress "-Wunused-but-set-variable" warning with "parser_bison.c", Thomas Haller
  • [PATCH nft 7/8] utils: add _NFT_PRAGMA_WARNING_DISABLE()/_NFT_PRAGMA_WARNING_REENABLE helpers, Thomas Haller
  • [PATCH nft 3/8] src: use "%zx" format instead of "%Zx", Thomas Haller
  • [PATCH nft 2/8] netlink: avoid "-Wenum-conversion" warning in parser_bison.y, Thomas Haller
  • [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Thomas Haller
    • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Pablo Neira Ayuso
      • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Thomas Haller
        • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Pablo Neira Ayuso
          • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Thomas Haller
            • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Pablo Neira Ayuso
              • Re: [PATCH nft 5/8] src: rework SNPRINTF_BUFFER_SIZE() and avoid "-Wunused-but-set-variable", Thomas Haller
  • [PATCH nft 1/8] netlink: avoid "-Wenum-conversion" warning in dtype_map_from_kernel(), Thomas Haller
  • [PATCH nft 4/8] datatype: avoid cast-align warning with struct sockaddr result from getaddrinfo(), Thomas Haller
  • [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Thomas Haller
    • Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Pablo Neira Ayuso
      • Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Thomas Haller
        • Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Pablo Neira Ayuso
          • Re: [PATCH nft 8/8] datatype: suppress "-Wformat-nonliteral" warning in integer_type_print(), Thomas Haller
• [PATCH nf] netfilter/xt_u32: validate user space input, Wander Lairson Costa
  • Re: [PATCH nf] netfilter/xt_u32: validate user space input, Wander Lairson Costa
  • Re: [PATCH nf] netfilter/xt_u32: validate user space input, Pablo Neira Ayuso
• [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, syzbot
  • Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, Will Deacon
    • Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, Robin Murphy
      • Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, Will Deacon
        • Re: [syzbot] [arm?] [netfilter?] KASAN: slab-out-of-bounds Read in do_csum, Robin Murphy
• Fwd: Since 6.1: flow_dissector.c __skb_flow_dissect+0xa91/0x1cd0 raises WARNING in specific circumstances, Bagas Sanjaya
• Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets, Bagas Sanjaya
  • Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets, Volodymyr Litovka
    • Re: [Networking] ERSPAN decapsulation drops DHCP unicast packets, Volodymyr Litovka
• [PATCH conntrack-tools 0/4] Fixes for yacc parser compilation warnings, Jeremy Sowden
  • [PATCH conntrack-tools 3/4] read_config_yy: correct `yyerror` prototype, Jeremy Sowden
  • [PATCH conntrack-tools 2/4] build: stop suppressing warnings for generated sources, Jeremy Sowden
  • [PATCH conntrack-tools 4/4] read_config_yy: correct arguments passed to `inet_aton`, Jeremy Sowden
  • [PATCH conntrack-tools 1/4] build: reformat and sort `conntrack_LDADD` and `conntrackd_SOURCES`, Jeremy Sowden
  • Re: [PATCH conntrack-tools 0/4] Fixes for yacc parser compilation warnings, Pablo Neira Ayuso
• [PATCH v4.19.y] netfilter: nf_queue: fix socket leak, Vamsi Krishna Brahmajosyula
• [PATCH nft 0/4] add operation cache for timestamp, Thomas Haller
  • [PATCH nft 1/4] evaluate: add and use parse_ctx_init() helper method, Thomas Haller
  • [PATCH nft 4/4] src: cache GMT offset for current time during parsing/output, Thomas Haller
  • [PATCH nft 2/4] src: add ops_cache struct for caching information during parsing, Thomas Haller
    • Re: [PATCH nft 2/4] src: add ops_cache struct for caching information during parsing, Pablo Neira Ayuso
  • [PATCH nft 3/4] src: cache result of time() during parsing/output, Thomas Haller
    • Re: [PATCH nft 3/4] src: cache result of time() during parsing/output, Pablo Neira Ayuso
  • Re: [PATCH nft 0/4] add operation cache for timestamp, Pablo Neira Ayuso
• [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping(), Phil Sutter
  • <Possible follow-ups>
  • [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping(), Phil Sutter
    • Re: [nft PATCH] evaluate: Drop dead code from expr_evaluate_mapping(), Phil Sutter
• [PATCH nft v2 0/6] cleanup base includes and add <nft.h> header, Thomas Haller
  • [PATCH nft v2 3/6] include: don't define _GNU_SOURCE in public header, Thomas Haller
  • [PATCH nft v2 1/6] meta: define _GNU_SOURCE to get strptime() from <time.h>, Thomas Haller
  • [PATCH nft v2 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE, Thomas Haller
  • [PATCH nft v2 5/6] include: include <std{bool,int}.h> via <nft.h>, Thomas Haller
  • [PATCH nft v2 2/6] src: add <nft.h> header and include it as first, Thomas Haller
  • [PATCH nft v2 6/6] configure: drop AM_PROG_CC_C_O autoconf check, Thomas Haller
  • Re: [PATCH nft v2 0/6] cleanup base includes and add <nft.h> header, Pablo Neira Ayuso
• [PATCH nft 0/6] no recursive make, Thomas Haller
  • [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am", Thomas Haller
    • Re: [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am", Phil Sutter
      • Re: [PATCH nft 5/6] build: drop recursive make for "examples/Makefile.am", Thomas Haller
  • [PATCH nft 2/6] build: drop recursive make for "py/Makefile.am", Thomas Haller
  • [PATCH nft 4/6] build: drop recursive make for "src/Makefile.am", Thomas Haller
  • [PATCH nft 3/6] build: drop recursive make for "files/**/Makefile.am", Thomas Haller
  • [PATCH nft 6/6] build: drop recursive make for "doc/Makefile.am", Thomas Haller
  • [PATCH nft 1/6] build: drop recursive make for "include/**/Makefile.am", Thomas Haller
• [PATCH nf v2] netfilter: nft_exthdr: Fix non-linear header modification, Xiao Liang
  • Re: [PATCH nf v2] netfilter: nft_exthdr: Fix non-linear header modification, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Xiao Liang
  • Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Florian Westphal
    • Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Xiao Liang
    • Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Xiao Liang
      • Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification, Florian Westphal
• [PATCH nft] tests: 30s-stress: add failslab and abort phase tests, Florian Westphal
• [PATCH conntrack-tools] conntrack, nfct: fix some typo's, Jeremy Sowden
  • Re: [PATCH conntrack-tools] conntrack, nfct: fix some typo's, Pablo Neira Ayuso
• [PATCH -stable,4.14.y,4.19.y 0/1] ipvs: backport 1b90af292e71 and 5310760af1d4, Julian Anastasov
  • [PATCH -stable,4.14.y,4.19.y 1/1] ipvs: Improve robustness to the ipvs sysctl, Julian Anastasov
  • Re: [PATCH -stable,4.14.y,4.19.y 0/1] ipvs: backport 1b90af292e71 and 5310760af1d4, Greg KH
• [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header, Thomas Haller
  • [PATCH nft 1/6] meta: define _GNU_SOURCE to get strptime() from <time.h>, Thomas Haller
  • [PATCH nft 6/6] configure: drop AM_PROG_CC_C_O autoconf check, Thomas Haller
  • [PATCH nft 2/6] src: add <nftdefault.h> header and include it as first, Thomas Haller
  • [PATCH nft 5/6] include: include <std{bool,int}.h> via nftdefault.h, Thomas Haller
  • [PATCH nft 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE, Thomas Haller
    • Re: [PATCH nft 4/6] configure: use AC_USE_SYSTEM_EXTENSIONS to get _GNU_SOURCE, Thomas Haller
  • [PATCH nft 3/6] include: don't define _GNU_SOURCE in public header, Thomas Haller
  • Re: [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header, Pablo Neira Ayuso
    • Re: [PATCH nft 0/6] cleanup base includes and add <nftdefault.h> header, Thomas Haller
• [nft PATCH] tests: shell: Stabilize sets/0043concatenated_ranges_0 test, Phil Sutter
  • Re: [nft PATCH] tests: shell: Stabilize sets/0043concatenated_ranges_0 test, Phil Sutter
• [PATCH net 0/6] netfilter updates for net, Florian Westphal
  • [PATCH net 1/6] netfilter: nf_tables: validate all pending tables, Florian Westphal
    • Re: [PATCH net 1/6] netfilter: nf_tables: validate all pending tables, patchwork-bot+netdevbpf
  • [PATCH net 2/6] netfilter: nf_tables: flush pending destroy work before netlink notifier, Florian Westphal
  • [PATCH net 3/6] netfilter: nf_tables: GC transaction race with abort path, Florian Westphal
  • [PATCH net 5/6] netfilter: nf_tables: fix out of memory error handling, Florian Westphal
  • [PATCH net 4/6] netfilter: nf_tables: use correct lock to protect gc_list, Florian Westphal
  • [PATCH net 6/6] netfilter: nf_tables: defer gc run if previous batch is still pending, Florian Westphal
  • <Possible follow-ups>
  • [PATCH net 0/6] netfilter updates for net, Florian Westphal
    • [PATCH net 1/6] netfilter: nftables: exthdr: fix 4-byte stack OOB write, Florian Westphal
      • Re: [PATCH net 1/6] netfilter: nftables: exthdr: fix 4-byte stack OOB write, patchwork-bot+netdevbpf
    • [PATCH net 2/6] netfilter: nfnetlink_osf: avoid OOB read, Florian Westphal
    • [PATCH net 3/6] netfilter: nf_tables: uapi: Describe NFTA_RULE_CHAIN_ID, Florian Westphal
    • [PATCH net 4/6] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction, Florian Westphal
    • [PATCH net 5/6] netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c, Florian Westphal
    • [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset, Florian Westphal
      • Re: [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset, Phil Sutter
        • Re: [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset, Florian Westphal
          • Re: [PATCH net 6/6] netfilter: nf_tables: Unbreak audit log reset, Phil Sutter
• [PATCH nft] tests: shell: use minutes granularity in sets/0036add_set_element_expiration_0, Pablo Neira Ayuso
  • Re: [PATCH nft] tests: shell: use minutes granularity in sets/0036add_set_element_expiration_0, Phil Sutter
• [PATCH nft] evaluate: error out on meter overlap with an existing set/map declaration, Pablo Neira Ayuso
• [nft PATCH] tests: shell: Stabilize sets/reset_command_0 test, Phil Sutter
  • Re: [nft PATCH] tests: shell: Stabilize sets/reset_command_0 test, Phil Sutter
• [PATCH nf] netfilter: nf_tables: defer gc run if previous batch is still pending, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: defer gc run if previous batch is still pending, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling, Stefano Brivio
  • Re: [PATCH nf] netfilter: nft_set_pipapo: fix out of memory error handling, Pablo Neira Ayuso
• [nft PATCH] clang-format: add clang-format configuration file from Linux kernel, Thomas Haller
  • Re: [nft PATCH] clang-format: add clang-format configuration file from Linux kernel, Pablo Neira Ayuso
    • Re: [nft PATCH] clang-format: add clang-format configuration file from Linux kernel, Thomas Haller
• [nft PATCH] gitignore: ignore cscope files, Thomas Haller
  • Re: [nft PATCH] gitignore: ignore cscope files, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: missing extended netlink error in lookup functions, Pablo Neira Ayuso
• [PATCH nft] cache: chain listing implicitly sets on terse option, Pablo Neira Ayuso
• [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print(), Thomas Haller
  • [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Thomas Haller
    • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Pablo Neira Ayuso
      • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Thomas Haller
        • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Thomas Haller
          • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Pablo Neira Ayuso
        • Re: [nft PATCH 2/2] meta: use reentrant localtime_r()/gmtime_r() functions, Pablo Neira Ayuso
  • Re: [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print(), Pablo Neira Ayuso
  • Re: [nft PATCH 1/2] meta: don't assume time_t is 64 bit in date_type_print(), Pablo Neira Ayuso
• [PATCH conntrack] tests/conntrack: add initial stress test for conntrack, Pablo Neira Ayuso
• [PATCH ulogd2 v3 00/11] Fixes for handling and output of IP addresses, Jeremy Sowden
  • [PATCH ulogd2 v3 01/11] src: record length of integer key values, Jeremy Sowden
  • [PATCH ulogd2 v3 03/11] printpkt, raw2packet_BASE: keep gateway address in NBO, Jeremy Sowden
  • [PATCH ulogd2 v3 02/11] printpkt: fix statement punctuator, Jeremy Sowden
  • [PATCH ulogd2 v3 04/11] raw2packet_BASE: store ARP address values as integers, Jeremy Sowden
  • [PATCH ulogd2 v3 05/11] ip2hbin: store ipv6 address as integer, Jeremy Sowden
  • [PATCH ulogd2 v3 06/11] ipfix: skip non-ipv4 addresses, Jeremy Sowden
  • [PATCH ulogd2 v3 09/11] sqlite3: correct binding of ipv4 addresses and 64-bit integers, Jeremy Sowden
  • [PATCH ulogd2 v3 08/11] gprint, oprint: add support for printing ipv6 addresses, Jeremy Sowden
  • [PATCH ulogd2 v3 07/11] gprint, oprint: use inet_ntop to format ip addresses, Jeremy Sowden
  • [PATCH ulogd2 v3 10/11] sqlite3: insert ipv6 addresses as null rather than garbage, Jeremy Sowden
  • [PATCH ulogd2 v3 11/11] db: insert ipv6 addresses in the same format as ip2bin, Jeremy Sowden
• [PATCH nf-next] netfilter: nf_tables: allow loop termination for pending fatal signal, Florian Westphal
• [PATCH nft] tests/shell: expand vmap test case to also cause batch abort, Florian Westphal
• [PATCH nft] parser: permit gc-interval in map declarations, Florian Westphal
• Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed, Bagas Sanjaya
  • Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed, Phil Sutter
    • Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed, Bagas Sanjaya
• [PATCH nf] netfilter: nf_tables: use correct lock to protect gc_list, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: use correct lock to protect gc_list, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: do not set on NLM_F_ACK in IPCTNL_MSG_CT_GET requests, Pablo Neira Ayuso
• [PATCH nft,v2] INSTALL: provide examples to install python bindings, Pablo Neira Ayuso
  • Re: [PATCH nft,v2] INSTALL: provide examples to install python bindings, Jeremy Sowden
    • Re: [PATCH nft,v2] INSTALL: provide examples to install python bindings, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: skip ENOENT when -U/-D finds a stale conntrack entry, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: unbreak -U command, use correct family, Pablo Neira Ayuso
• [PATCH nft] INSTALL: provide examples to install python bindings, Pablo Neira Ayuso
  • Re: [PATCH nft] INSTALL: provide examples to install python bindings, Jeremy Sowden
• libnetfilter_queue patch ping, Duncan Roe
  • Re: libnetfilter_queue patch ping, Pablo Neira Ayuso
    • Re: libnetfilter_queue patch ping, Duncan Roe
  • <Possible follow-ups>
  • libnetfilter_queue patch ping, Duncan Roe
  • libnetfilter_queue patch ping, Duncan Roe
• [PATCH] json: use strtok_r() instead of strtok(), Thomas Haller
  • Re: [PATCH] json: use strtok_r() instead of strtok(), Florian Westphal
• [PATCH xtables-addons] doc: fix version number in xtables-addons.8, Jeremy Sowden
  • Re: [PATCH xtables-addons] doc: fix version number in xtables-addons.8, Jan Engelhardt
• [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
  • [nft PATCH v3 1/3] nftutils: add new internal file for general utilities, Thomas Haller
  • [nft PATCH v3 3/3] src: use wrappers for getprotoby{name,number}_r(), getservbyport_r(), Thomas Haller
  • [nft PATCH v3 2/3] nftutils: add wrappers for getprotoby{name,number}_r(), getservbyport_r(), Thomas Haller
  • Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
    • Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
      • Re: [nft PATCH v3 0/3] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
• [PATCH xtables-addons 0/5] Autoools silent-rules fixes, Jeremy Sowden
  • [PATCH xtables-addons 3/5] build: update `AM_V_*` definitions to match autotools, Jeremy Sowden
    • Re: [PATCH xtables-addons 3/5] build: update `AM_V_*` definitions to match autotools, Jan Engelhardt
  • [PATCH xtables-addons 4/5] build: don't hard-code `AM_DEFAULT_VERBOSITY` in Makefile.iptrules, Jeremy Sowden
  • [PATCH xtables-addons 5/5] build: define `AM_V_GEN` where it is needed, Jeremy Sowden
  • [PATCH xtables-addons 2/5] build: replace `AM_V_silent` with `AM_V_at`, Jeremy Sowden
  • [PATCH xtables-addons 1/5] build: use `$(top_srcdir)` when including Makefile.extra, Jeremy Sowden
• [nft PATCH v5 0/6] add input flags and "no-dns"/"json" flags, Thomas Haller
  • [nft PATCH v5 1/6] src: add input flags for nft_ctx, Thomas Haller
  • [nft PATCH v5 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing, Thomas Haller
  • [nft PATCH v5 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
  • [nft PATCH v5 4/6] py: fix exception during cleanup of half-initialized Nftables, Thomas Haller
  • [nft PATCH v5 5/6] py: extract flags helper functions for set_debug()/get_debug(), Thomas Haller
  • [nft PATCH v5 6/6] py: add Nftables.{get,set}_input_flags() API, Thomas Haller
  • Re: [nft PATCH v5 0/6] add input flags and "no-dns"/"json" flags, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: GC transaction race with abort path, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path, kernel test robot
    • Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nf_tables: GC transaction race with abort path, Liu, Yujie
• [PATCH nf] netfilter: nf_tables: flush pending destroy work before netlink notifier, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: validate all pending tables, Florian Westphal
• Re: [PATCH v4] Bluetooth: Fix for ACL disconnect when pairing fails, Muhammad Usama Anjum
• [PATCH net-next v2] netfilter: ebtables: replace zero-length array members, GONG, Ruiqi
  • Re: [PATCH net-next v2] netfilter: ebtables: replace zero-length array members, Simon Horman
    • Re: [PATCH net-next v2] netfilter: ebtables: replace zero-length array members, Gong Ruiqi
• [PATCH net-next v4] netfilter: ebtables: fix fortify warnings in size_entry_mwt(), GONG, Ruiqi
• [PATCHv2 nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Xin Long
  • Re: [PATCHv2 nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Marcelo Ricardo Leitner
• [PATCH RFC net-next 00/14] ipvs: per-net tables and optimizations, Julian Anastasov
  • [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Julian Anastasov
    • Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Paul E. McKenney
      • Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Julian Anastasov
        • Re: [PATCH RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Paul E. McKenney
  • [PATCH RFC net-next 02/14] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Julian Anastasov
  • [PATCH RFC net-next 04/14] ipvs: use single svc table, Julian Anastasov
  • [PATCH RFC net-next 03/14] ipvs: some service readers can use RCU, Julian Anastasov
  • [PATCH RFC net-next 14/14] ipvs: add conn_lfactor and svc_lfactor sysctl vars, Julian Anastasov
  • [PATCH RFC net-next 10/14] ipvs: show the current conn_tab size to users, Julian Anastasov
  • [PATCH RFC net-next 05/14] ipvs: do not keep dest_dst after dest is removed, Julian Anastasov
  • [PATCH RFC net-next 11/14] ipvs: no_cport and dropentry counters can be per-net, Julian Anastasov
  • [PATCH RFC net-next 07/14] ipvs: add resizable hash tables, Julian Anastasov
  • [PATCH RFC net-next 06/14] ipvs: use more counters to avoid service lookups, Julian Anastasov
  • [PATCH RFC net-next 13/14] ipvs: add ip_vs_status info, Julian Anastasov
  • [PATCH RFC net-next 12/14] ipvs: use more keys for connection hashing, Julian Anastasov
  • [PATCH RFC net-next 08/14] ipvs: use resizable hash table for services, Julian Anastasov
  • [PATCH RFC net-next 09/14] ipvs: switch to per-net connection table, Julian Anastasov
• [iptables PATCH] Revert --compat option related commits, Phil Sutter
  • Re: [iptables PATCH] Revert --compat option related commits, Phil Sutter
• [PATCH nf 1/3] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path, Pablo Neira Ayuso
  • [PATCH nf 2/3] netfilter: nf_tables: GC transaction race with netns dismantle, Pablo Neira Ayuso
  • [PATCH nf 3/3] netfilter: nft_dynset: disallow object maps, Pablo Neira Ayuso
• [PATCH nft] tests: add transaction stress test with parallel delete/add/flush and netns deletion, Florian Westphal
• [PATCH nf 0/2] netfilter: nf_nat: fix yet another bizarre early demux corner case, Florian Westphal
  • [PATCH nf 1/2] netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash, Florian Westphal
  • [PATCH nf 2/2] selftests: netfilter: test nat source port clash resolution interaction with tcp early demux, Florian Westphal
• [PATCH 5.4 32/39] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH 5.10 59/68] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH 5.15 76/89] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH 4.19 25/33] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush, Greg Kroah-Hartman
• [PATCH 4.19 26/33] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH 4.14 20/26] netfilter: nf_tables: report use refcount overflow, Greg Kroah-Hartman
• [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Xin Long
  • Re: [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Simon Horman
  • RE: [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Sriram Yagnaraman
    • Re: [PATCH nf] netfilter: set default timeout to 3 secs for sctp shutdown send and recv state, Xin Long
• [PATCH -stable,4.14 0/1] netfilter stable fix for 4.14, Pablo Neira Ayuso
  • [PATCH -stable,4.14 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
  • Re: [PATCH -stable,4.14 0/1] netfilter stable fix for 4.14, Greg KH
• [PATCH -stable,4.19 0/2] netfilter stable fixes for 4.19, Pablo Neira Ayuso
  • [PATCH -stable,4.19 1/2] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush, Pablo Neira Ayuso
  • [PATCH -stable,4.19 2/2] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH -stable,4.19 0/2] netfilter stable fixes for 4.19, Pablo Neira Ayuso
    • [PATCH -stable,4.19 2/2] netfilter: nf_tables: missing NFT_TRANS_PREPARE_ERROR in flowtable deactivatation, Pablo Neira Ayuso
    • [PATCH -stable,4.19 1/2] netfilter: nft_flow_offload: fix underflow in flowtable reference counter, Pablo Neira Ayuso
    • Re: [PATCH -stable,4.19 0/2] netfilter stable fixes for 4.19, Greg KH
• [PATCH -stable,5.4 0/1] netfilter stable fix for 5.4, Pablo Neira Ayuso
  • [PATCH -stable,5.4 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
• [PATCH -stable,5.10 0/1] netfilter stable fix for 5.10, Pablo Neira Ayuso
  • [PATCH -stable,5.10 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
• [PATCH -stable,5.15 0/1] netfilter stable fix for 5.15, Pablo Neira Ayuso
  • [PATCH -stable,5.15 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
• [PATCH -stable,6.1 0/1] netfilter stable fix for 6.1, Pablo Neira Ayuso
  • [PATCH -stable,6.1 1/1] netfilter: nf_tables: report use refcount overflow, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: don't fail inserts if duplicate has expired, Florian Westphal
• Re: [PATCH] ipvs: fix racy memcpy in proc_do_sync_threshold, Simon Horman
  • <Possible follow-ups>
  • Re: [PATCH] ipvs: fix racy memcpy in proc_do_sync_threshold, Julian Anastasov
• [PATCH nf] netfilter: nf_tables: deactivate catchall elements in next generation, Florian Westphal
• [PATCH nf] netfilter: nf_tables: fix kdoc warnings after gc rework, Florian Westphal
• [PATCH nft] tests: add test with concatenation, vmap and timeout, Florian Westphal
• [iptables PATCH v2 0/4] Implement a best-effort forward compat solution, Phil Sutter
  • [iptables PATCH v2 2/4] nft: Introduce and use bool nft_handle::compat, Phil Sutter
  • [iptables PATCH v2 3/4] Add --compat option to *tables-nft and *-nft-restore commands, Phil Sutter
  • [iptables PATCH v2 4/4] tests: Test compat mode, Phil Sutter
  • [iptables PATCH v2 1/4] nft: Pass nft_handle to add_{target,action}(), Phil Sutter
  • Re: [iptables PATCH v2 0/4] Implement a best-effort forward compat solution, Phil Sutter
• Fwd: kernel: WARNING: CPU: 0 PID: 16269 at net/netfilter/nf_conntrack_core.c:1210, Bagas Sanjaya
  • Re: Fwd: kernel: WARNING: CPU: 0 PID: 16269 at net/netfilter/nf_conntrack_core.c:1210, Florian Westphal
• [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
  • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Jan Engelhardt
    • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
  • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
    • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
      • Re: [nft PATCH] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
  • [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
    • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
      • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
        • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
          • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Pablo Neira Ayuso
          • Re: [nft PATCH v2] src: use reentrant getprotobyname_r()/getprotobynumber_r()/getservbyport_r(), Thomas Haller
• [iptables PATCH] tests: iptables-test: Fix command segfault reports, Phil Sutter
  • Re: [iptables PATCH] tests: iptables-test: Fix command segfault reports, Phil Sutter
• [iptables PATCH] Use SOCK_CLOEXEC/O_CLOEXEC where available, Phil Sutter
  • Re: [iptables PATCH] Use SOCK_CLOEXEC/O_CLOEXEC where available, Phil Sutter
• [iptables PATCH v2 0/3] Chain counter fixes here and there, Phil Sutter
  • [iptables PATCH v2 1/3] nft: Create builtin chains with counters enabled, Phil Sutter
  • [iptables PATCH v2 3/3] tests: shell: Test chain policy counter behaviour, Phil Sutter
  • [iptables PATCH v2 2/3] Revert "libiptc: fix wrong maptype of base chain counters on restore", Phil Sutter
  • Re: [iptables PATCH v2 0/3] Chain counter fixes here and there, Phil Sutter
• [PATCH nf 1/5] netfilter: nf_tables: don't skip expired elements during walk, Pablo Neira Ayuso
  • [PATCH nf 4/5] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Pablo Neira Ayuso
  • [PATCH nf 5/5] netfilter: nf_tables: remove busy mark and gc batch API, Pablo Neira Ayuso
  • [PATCH nf 2/5] netfilter: nf_tables: GC transaction API to avoid race with control plane, Pablo Neira Ayuso
  • [PATCH nf 3/5] netfilter: nf_tables: adapt set backend to use GC transaction API, Pablo Neira Ayuso
    • Re: [PATCH nf 3/5] netfilter: nf_tables: adapt set backend to use GC transaction API, kernel test robot
• [PATCH 4.19 133/323] netfilter: nf_tables: fix scheduling-while-atomic splat, Greg Kroah-Hartman
• [PATCH 4.19 132/323] netfilter: nf_tables: unbind non-anonymous set if rule construction fails, Greg Kroah-Hartman
• [PATCH 4.19 131/323] netfilter: nf_tables: reject unbound anonymous set before commit phase, Greg Kroah-Hartman
• [PATCH 4.19 130/323] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain, Greg Kroah-Hartman
• [PATCH 4.19 129/323] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE, Greg Kroah-Hartman
• [PATCH 4.19 128/323] netfilter: nf_tables: use net_generic infra for transaction data, Greg Kroah-Hartman
• [PATCH 4.19 127/323] netfilter: add helper function to set up the nfnetlink header and use it, Greg Kroah-Hartman
• [PATCH 4.19 126/323] netfilter: nftables: add helper function to set the base sequence number, Greg Kroah-Hartman
• [PATCH 4.19 125/323] netfilter: nf_tables: add rescheduling points during loop detection walks, Greg Kroah-Hartman
• [PATCH 4.19 124/323] netfilter: nf_tables: fix nat hook table deletion, Greg Kroah-Hartman
• [PATCH 4.14 088/204] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain, Greg Kroah-Hartman
• [PATCH 4.14 089/204] netfilter: nf_tables: unbind non-anonymous set if rule construction fails, Greg Kroah-Hartman
• [PATCH 4.14 087/204] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE, Greg Kroah-Hartman
• [PATCH v3 00/14] sysctl: Add a size argument to register functions in sysctl, Joel Granados
  • [PATCH v3 01/14] sysctl: Prefer ctl_table_header in proc_sysctl, Joel Granados
  • [PATCH v3 02/14] sysctl: Use ctl_table_header in list_for_each_table_entry, Joel Granados
  • [PATCH v3 06/14] sysctl: Add size to register_sysctl, Joel Granados
  • [PATCH v3 05/14] sysctl: Add a size arg to __register_sysctl_table, Joel Granados
  • [PATCH v3 07/14] sysctl: Add size arg to __register_sysctl_init, Joel Granados
  • [PATCH v3 09/14] ax.25: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v3 08/14] sysctl: Add size to register_net_sysctl function, Joel Granados
  • [PATCH v3 03/14] sysctl: Add ctl_table_size to ctl_table_header, Joel Granados
  • [PATCH v3 04/14] sysctl: Add size argument to init_header, Joel Granados
  • [PATCH v3 10/14] netfilter: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v3 11/14] networking: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v3 13/14] sysctl: SIZE_MAX->ARRAY_SIZE in register_net_sysctl, Joel Granados
  • [PATCH v3 12/14] vrf: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v3 14/14] sysctl: Use ctl_table_size as stopping criteria for list macro, Joel Granados
  • Re: [PATCH v3 00/14] sysctl: Add a size argument to register functions in sysctl, Luis Chamberlain
• [PATCH] netfilter: ebtables: replace zero-length array members, GONG, Ruiqi
  • Re: [PATCH] netfilter: ebtables: replace zero-length array members, Phil Sutter
  • Re: [PATCH] netfilter: ebtables: replace zero-length array members, Kees Cook
• [PATCH v3] netfilter: ebtables: fix fortify warnings in size_entry_mwt(), GONG, Ruiqi
  • Re: [PATCH v3] netfilter: ebtables: fix fortify warnings in size_entry_mwt(), Simon Horman
  • Re: [PATCH v3] netfilter: ebtables: fix fortify warnings in size_entry_mwt(), Kees Cook
• [PATCH v2 0/7] netfilter: refactor deprecated strncpy, Justin Stitt
  • [PATCH v2 2/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
  • [PATCH v2 7/7] netfilter: xtables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH v2 7/7] netfilter: xtables: refactor deprecated strncpy, Florian Westphal
  • [PATCH v2 3/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
  • [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Florian Westphal
      • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Justin Stitt
        • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Jan Engelhardt
          • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Kees Cook
        • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Florian Westphal
          • Re: [PATCH v2 1/7] netfilter: ipset: refactor deprecated strncpy, Justin Stitt
  • [PATCH v2 6/7] netfilter: x_tables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH v2 6/7] netfilter: x_tables: refactor deprecated strncpy, Florian Westphal
  • [PATCH v2 5/7] netfilter: nft_osf: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH v2 5/7] netfilter: nft_osf: refactor deprecated strncpy, Florian Westphal
  • [PATCH v2 4/7] netfilter: nft_meta: refactor deprecated strncpy, Justin Stitt
• [PATCH 0/7] netfilter: refactor deprecated strncpy, Justin Stitt
  • [PATCH 1/7] netfilter: ipset: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 1/7] netfilter: ipset: refactor deprecated strncpy, Florian Westphal
      • Re: [PATCH 1/7] netfilter: ipset: refactor deprecated strncpy, Kees Cook
  • [PATCH 6/7] netfilter: x_tables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 6/7] netfilter: x_tables: refactor deprecated strncpy, Florian Westphal
    • Re: [PATCH 6/7] netfilter: x_tables: refactor deprecated strncpy, Kees Cook
  • [PATCH 3/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 3/7] netfilter: nf_tables: refactor deprecated strncpy, Florian Westphal
  • [PATCH 4/7] netfilter: nft_meta: refactor deprecated strncpy, Justin Stitt
  • [PATCH 2/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 2/7] netfilter: nf_tables: refactor deprecated strncpy, Florian Westphal
      • Re: [PATCH 2/7] netfilter: nf_tables: refactor deprecated strncpy, Justin Stitt
  • [PATCH 5/7] netfilter: nft_osf: refactor deprecated strncpy to strscpy, Justin Stitt
  • [PATCH 7/7] netfilter: xtables: refactor deprecated strncpy, Justin Stitt
    • Re: [PATCH 7/7] netfilter: xtables: refactor deprecated strncpy, Jan Engelhardt
• [PATCH v2] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
  • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, Gustavo A. R. Silva
    • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, Kees Cook
      • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
      • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
    • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, Kees Cook
    • Re: [PATCH v2] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
• [PATCH nf] netfilter: nf_tables: fix false-positive lockdep splat, Florian Westphal
• [PATCH] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
  • Re: [PATCH] netfilter: ebtables: fix fortify warnings, Florian Westphal
    • Re: [PATCH] netfilter: ebtables: fix fortify warnings, GONG, Ruiqi
  • Re: [PATCH] netfilter: ebtables: fix fortify warnings, kernel test robot
• [PATCH net-next] netfilter: h323: Remove unused function declarations, Yue Haibing
• [PATCH nft 0/2] doc: fix cleaning of man-pages, Jeremy Sowden
  • [PATCH nft 1/2] doc: move man-pages to `dist_man_MANS`, Jeremy Sowden
  • [PATCH nft 2/2] doc: move man-pages to `MAINTAINERCLEANFILES`, Jeremy Sowden
  • Re: [PATCH nft 0/2] doc: fix cleaning of man-pages, Pablo Neira Ayuso
• [iptables PATCH v2 1/2] nft-ruleparse: Introduce nft_create_target(), Phil Sutter
  • [iptables PATCH v2 2/2] nft-ruleparse: parse meta mark set as MARK target, Phil Sutter
  • Re: [iptables PATCH v2 1/2] nft-ruleparse: Introduce nft_create_target(), Phil Sutter
• [PATCH net-next] netfilter: conntrack: Remove unused function declarations, Yue Haibing
  • Re: [PATCH net-next] netfilter: conntrack: Remove unused function declarations, Simon Horman
• [nft PATCH v4 0/6] add input flags and "no-dns"/"json" flags, Thomas Haller
  • [nft PATCH v4 1/6] src: add input flags for nft_ctx, Thomas Haller
    • Re: [nft PATCH v4 1/6] src: add input flags for nft_ctx, Phil Sutter
  • [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
    • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
      • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
        • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
          • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
            • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
              • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
                • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
                  • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Thomas Haller
    • Re: [nft PATCH v4 2/6] src: add input flag NFT_CTX_INPUT_NO_DNS to avoid blocking, Phil Sutter
  • [nft PATCH v4 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing, Thomas Haller
    • Re: [nft PATCH v4 3/6] src: add input flag NFT_CTX_INPUT_JSON to enable JSON parsing, Phil Sutter
  • [nft PATCH v4 4/6] py: fix exception during cleanup of half-initialized Nftables, Thomas Haller
    • Re: [nft PATCH v4 4/6] py: fix exception during cleanup of half-initialized Nftables, Phil Sutter
  • [nft PATCH v4 5/6] py: extract flags helper functions for set_debug()/get_debug(), Thomas Haller
    • Re: [nft PATCH v4 5/6] py: extract flags helper functions for set_debug()/get_debug(), Phil Sutter
  • [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Thomas Haller
    • Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Phil Sutter
      • Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Thomas Haller
    • Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Phil Sutter
      • Re: [nft PATCH v4 6/6] py: add Nftables.{get,set}_input() API, Thomas Haller
• [PATCH iptables] nft-ruleparse: parse meta mark set as MARK target, Florian Westphal
  • Re: [PATCH iptables] nft-ruleparse: parse meta mark set as MARK target, Phil Sutter
    • Re: [PATCH iptables] nft-ruleparse: parse meta mark set as MARK target, Florian Westphal
• Solution Bugzilla Issue 1659 - iptables-nft v1.8.9 Error: meta sreg key not supported, Robert
  • Re: Solution Bugzilla Issue 1659 - iptables-nft v1.8.9 Error: meta sreg key not supported, Florian Westphal
• [iptables PATCH] Revert "libiptc: fix wrong maptype of base chain counters on restore", Phil Sutter
• [iptables PATCH] extensions: libip6t_icmp: Add names for mld-listener types, Phil Sutter
  • Re: [iptables PATCH] extensions: libip6t_icmp: Add names for mld-listener types, Phil Sutter
• [iptables PATCH] nft: move processing logic out of asserts, Phil Sutter
  • Re: [iptables PATCH] nft: move processing logic out of asserts, Phil Sutter
• [nft PATCH v2] tests: shell: Review test-cases for destroy command, Phil Sutter
  • Re: [nft PATCH v2] tests: shell: Review test-cases for destroy command, Fernando F. Mancera
    • Re: [nft PATCH v2] tests: shell: Review test-cases for destroy command, Phil Sutter
• [nft PATCH] doc: document add chain device parameter, Brennan Paciorek
  • Re: [nft PATCH] doc: document add chain device parameter, Pablo Neira Ayuso
• [iptables PATCH v2 00/15] Man pages review, Phil Sutter
  • [iptables PATCH v2 07/15] man: iptables-restore.8: Fix --modprobe description, Phil Sutter
  • [iptables PATCH v2 11/15] man: iptables-restore.8: Start paragraphs in upper-case, Phil Sutter
  • [iptables PATCH v2 12/15] man: Trivial: Missing space after comma, Phil Sutter
  • [iptables PATCH v2 14/15] man: iptables-save.8: Fix --modprobe description, Phil Sutter
  • [iptables PATCH v2 02/15] man: iptables.8: Trivial spelling fixes, Phil Sutter
  • [iptables PATCH v2 10/15] man: iptables-restore.8: Put 'file' in italics in synopsis, Phil Sutter
  • [iptables PATCH v2 09/15] man: iptables-restore.8: Drop -W option from synopsis, Phil Sutter
  • [iptables PATCH v2 03/15] man: iptables.8: Fix intra page reference, Phil Sutter
  • [iptables PATCH v2 01/15] man: iptables.8: Extend exit code description, Phil Sutter
  • [iptables PATCH v2 05/15] man: Use HTTPS for links to netfilter.org, Phil Sutter
  • [iptables PATCH v2 08/15] man: iptables-restore.8: Consistently document -w option, Phil Sutter
  • [iptables PATCH v2 04/15] man: iptables.8: Clarify --goto description, Phil Sutter
  • [iptables PATCH v2 13/15] man: iptables-save.8: Clarify 'available tables', Phil Sutter
  • [iptables PATCH v2 15/15] man: iptables-save.8: Start paragraphs in upper-case, Phil Sutter
  • [iptables PATCH v2 06/15] man: iptables.8: Trivial font fixes, Phil Sutter
  • Re: [iptables PATCH v2 00/15] Man pages review, Phil Sutter
• [PATCH nft] parser: deduplicate map with data interval, Florian Westphal
• [PATCH nft] parser: allow ct timeouts to use time_spec values, Florian Westphal
• [PATCH nft] tests: fix inet nat prio tests, Florian Westphal
• [PATCH nft] tests: add dynmap datapath add/delete test case, Florian Westphal
• [PATCH net-next] netfilter: helper: Remove unused function declarations, Yue Haibing
  • Re: [PATCH net-next] netfilter: helper: Remove unused function declarations, Simon Horman
• [PATCH net-next] netfilter: gre: Remove unused function declaration nf_ct_gre_keymap_flush(), Yue Haibing
• [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any, Phil Sutter
  • [iptables PATCH 2/3] extensions: libipt_icmp: --icmp-type is not mandatory, Phil Sutter
  • [iptables PATCH 3/3] tests: libipt_icmp.t: Enable tests with numeric output, Phil Sutter
  • Re: [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any, Jan Engelhardt
    • Re: [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any, Phil Sutter
      • Re: [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any, Jan Engelhardt
        • Re: [iptables PATCH 1/3] extensions: libipt_icmp: Fix confusion between 255/255 and any, Phil Sutter
• [iptables PATCH 00/16] Man pages review, Phil Sutter
  • [iptables PATCH 06/16] man: iptables.8: Trivial font fixes, Phil Sutter
    • Re: [iptables PATCH 06/16] man: iptables.8: Trivial font fixes, Jan Engelhardt
      • Re: [iptables PATCH 06/16] man: iptables.8: Trivial font fixes, Phil Sutter
        • Re: [iptables PATCH 06/16] man: iptables.8: Trivial font fixes, Jan Engelhardt
  • [iptables PATCH 03/16] man: iptables.8: Fix intra page reference, Phil Sutter
  • [iptables PATCH 01/16] man: iptables.8: Extend exit code description, Phil Sutter
  • [iptables PATCH 10/16] man: iptables-restore.8: Put 'file' in italics in synopsis, Phil Sutter
  • [iptables PATCH 16/16] man: iptables-save.8: Trivial: Missing space in enumeration, Phil Sutter
  • [iptables PATCH 07/16] man: iptables-restore.8: Fix --modprobe description, Phil Sutter
    • Re: [iptables PATCH 07/16] man: iptables-restore.8: Fix --modprobe description, Jan Engelhardt
  • [iptables PATCH 11/16] man: iptables-restore.8: Start paragraphs in upper-case, Phil Sutter
  • [iptables PATCH 09/16] man: iptables-restore.8: Drop -W option from synopsis, Phil Sutter
  • [iptables PATCH 15/16] man: iptables-save.8: Start paragraphs in upper-case, Phil Sutter
  • [iptables PATCH 13/16] man: iptables-save.8: Clarify 'available tables', Phil Sutter
  • [iptables PATCH 14/16] man: iptables-save.8: Fix --modprobe description, Phil Sutter
    • Re: [iptables PATCH 14/16] man: iptables-save.8: Fix --modprobe description, Jan Engelhardt
  • [iptables PATCH 05/16] man: Use HTTPS for links to netfilter.org, Phil Sutter
  • [iptables PATCH 04/16] man: iptables.8: Clarify --goto description, Phil Sutter
  • [iptables PATCH 08/16] man: iptables-restore.8: Consistently document -w option, Phil Sutter
  • [iptables PATCH 12/16] man: iptables-restore.8: Trivial: Missing space after comma, Phil Sutter
  • [iptables PATCH 02/16] man: iptables.8: Trivial spelling fixes, Phil Sutter
• [iptables PATCH] Makefile: Support 'make tags' and 'make cscope', Phil Sutter
  • Re: [iptables PATCH] Makefile: Support 'make tags' and 'make cscope', Phil Sutter
• [iptables PATCH 1/2] iptables-restore: Drop dead code, Phil Sutter
  • [iptables PATCH 2/2] iptables-apply: Eliminate shellcheck warnings, Phil Sutter
  • Re: [iptables PATCH 1/2] iptables-restore: Drop dead code, Phil Sutter
• [PATCH] netfilter: bpf_link: avoid unused-function warning, Arnd Bergmann
  • Re: [PATCH] netfilter: bpf_link: avoid unused-function warning, Daniel Xu
    • Re: [PATCH] netfilter: bpf_link: avoid unused-function warning, Arnd Bergmann
      • Re: [PATCH] netfilter: bpf_link: avoid unused-function warning, Daniel Xu
• [nft PATCH] tests: shell: Review test-cases for destroy command, Phil Sutter
  • Re: [nft PATCH] tests: shell: Review test-cases for destroy command, Fernando F. Mancera
    • Re: [nft PATCH] tests: shell: Review test-cases for destroy command, Phil Sutter
• [PATCH] netfilter: bpf: Only define get_proto_defrag_hook() if necessary, Daniel Xu
  • Re: [PATCH] netfilter: bpf: Only define get_proto_defrag_hook() if necessary, Alexei Starovoitov
  • Re: [PATCH] netfilter: bpf: Only define get_proto_defrag_hook() if necessary, patchwork-bot+netdevbpf
• [PATCH nft 0/3] Python Build Modernization, Jeremy Sowden
  • [PATCH nft 1/3] py: move package source into src directory, Jeremy Sowden
  • [PATCH nft 2/3] py: use setup.cfg to configure setuptools, Jeremy Sowden
  • [PATCH nft 3/3] py: add pyproject.toml to support PEP-517-compatible build-systems, Jeremy Sowden
  • Re: [PATCH nft 0/3] Python Build Modernization, Pablo Neira Ayuso
• [PATCH nft] libnftables: Drop cache in -c/--check mode, Pablo Neira Ayuso
• [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Joel Granados
  • [PATCH v2 01/14] sysctl: Prefer ctl_table_header in proc_sysctl, Joel Granados
  • [PATCH v2 08/14] sysctl: Add size to register_net_sysctl function, Joel Granados
  • [PATCH v2 10/14] netfilter: Update to register_net_sysctl_sz, Joel Granados
    • Re: [PATCH v2 10/14] netfilter: Update to register_net_sysctl_sz, Julian Anastasov
  • [PATCH v2 07/14] sysctl: Add size arg to __register_sysctl_init, Joel Granados
  • [PATCH v2 03/14] sysctl: Add ctl_table_size to ctl_table_header, Joel Granados
    • Re: [PATCH v2 03/14] sysctl: Add ctl_table_size to ctl_table_header, Simon Horman
      • Re: [PATCH v2 03/14] sysctl: Add ctl_table_size to ctl_table_header, Simon Horman
        • Re: [PATCH v2 03/14] sysctl: Add ctl_table_size to ctl_table_header, Joel Granados
  • [PATCH v2 11/14] networking: Update to register_net_sysctl_sz, Joel Granados
    • Re: [PATCH v2 11/14] networking: Update to register_net_sysctl_sz, Przemek Kitszel
      • Re: [PATCH v2 11/14] networking: Update to register_net_sysctl_sz, Joel Granados
      • Re: [PATCH v2 11/14] networking: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v2 05/14] sysctl: Add a size arg to __register_sysctl_table, Joel Granados
  • [PATCH v2 12/14] vrf: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v2 02/14] sysctl: Use ctl_table_header in list_for_each_table_entry, Joel Granados
  • [PATCH v2 06/14] sysctl: Add size to register_sysctl, Joel Granados
  • [PATCH v2 04/14] sysctl: Add size argument to init_header, Joel Granados
  • [PATCH v2 09/14] ax.25: Update to register_net_sysctl_sz, Joel Granados
  • [PATCH v2 14/14] sysctl: Use ctl_table_size as stopping criteria for list macro, Joel Granados
  • [PATCH v2 13/14] sysctl: SIZE_MAX->ARRAY_SIZE in register_net_sysctl, Joel Granados
  • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Luis Chamberlain
    • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Joel Granados
  • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Luis Chamberlain
    • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Joel Granados
    • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Luis Chamberlain
      • Message not available
        • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Luis Chamberlain
          • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Chris Maness
            • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Luis Chamberlain
              • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Chris Maness
                • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Joel Granados
            • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Joel Granados
      • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Jakub Kicinski
        • Re: [PATCH v2 00/14] sysctl: Add a size argument to register functions in sysctl, Luis Chamberlain
• [PATCH v3 net-next] net: flow_dissector: Use 64bits for used_keys, Ratheesh Kannoth
  • Re: [PATCH v3 net-next] net: flow_dissector: Use 64bits for used_keys, Vladimir Oltean
  • Re: [PATCH v3 net-next] net: flow_dissector: Use 64bits for used_keys, patchwork-bot+netdevbpf
  • Re: [Intel-wired-lan] [PATCH v3 net-next] net: flow_dissector: Use 64bits for used_keys, Alexander Lobakin
• nftables: syntax ambiguity with objref map and ct helper objects, Florian Westphal
  • Re: nftables: syntax ambiguity with objref map and ct helper objects, Pablo Neira Ayuso
    • Re: nftables: syntax ambiguity with objref map and ct helper objects, Florian Westphal
      • Re: nftables: syntax ambiguity with objref map and ct helper objects, Pablo Neira Ayuso
        • Re: nftables: syntax ambiguity with objref map and ct helper objects, Florian Westphal
• [PATCH nft] ct expectation: fix 'list object x' vs. 'list objects in table' confusion, Florian Westphal
• [PATCH nft] rule: allow src/dstnat prios in input and output, Florian Westphal
• [iptables PATCH 1/4] *tables-restore: Enforce correct counters syntax if present, Phil Sutter
  • [iptables PATCH 4/4] tests: shell: Fix and extend chain rename test, Phil Sutter
  • [iptables PATCH 2/4] *tables: Reject invalid chain names when renaming, Phil Sutter
  • [iptables PATCH 3/4] ebtables: Improve invalid chain name detection, Phil Sutter
  • Re: [iptables PATCH 1/4] *tables-restore: Enforce correct counters syntax if present, Phil Sutter
• [PATCH v2 net-next] dissector: Use 64bits for used_keys, Ratheesh Kannoth
  • Re: [PATCH v2 net-next] dissector: Use 64bits for used_keys, Martin Habets
  • Re: [PATCH v2 net-next] dissector: Use 64bits for used_keys, Simon Horman
• [syzbot] [netfilter?] WARNING in __nf_conntrack_confirm, syzbot
• Netfilter -stable patches for 6.1.y, Pablo Neira Ayuso
  • Re: Netfilter -stable patches for 6.1.y, Pablo Neira Ayuso
    • Re: Netfilter -stable patches for 6.1.y, Greg Kroah-Hartman
• [PATCH 10/14] netfilter: Update to register_net_sysctl_sz, Joel Granados
  • Re: [PATCH 10/14] netfilter: Update to register_net_sysctl_sz, Luis Chamberlain
• [PATCH -next] nf_conntrack: fix -Wunused-const-variable=, Zhu Wang
  • Re: [PATCH -next] nf_conntrack: fix -Wunused-const-variable=, Simon Horman
• [PATCH nft] netlink: delinearize: copy set keytype if needed, Florian Westphal
• ulogd2 patch ping, Jeremy Sowden
  • Re: ulogd2 patch ping, Pablo Neira Ayuso
    • Re: ulogd2 patch ping, Jeremy Sowden
  • Re: ulogd2 patch ping, Florian Westphal
    • Re: ulogd2 patch ping, Florian Westphal
      • Re: ulogd2 patch ping, Jeremy Sowden
• [PATCH 5.4 185/313] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain, Greg Kroah-Hartman
• [PATCH 5.4 188/313] netfilter: nf_tables: fix scheduling-while-atomic splat, Greg Kroah-Hartman
• [PATCH 5.4 187/313] netfilter: nf_tables: unbind non-anonymous set if rule construction fails, Greg Kroah-Hartman
• [PATCH 5.4 186/313] netfilter: nf_tables: reject unbound anonymous set before commit phase, Greg Kroah-Hartman
• [PATCH 5.4 181/313] netfilter: add helper function to set up the nfnetlink header and use it, Greg Kroah-Hartman
• [PATCH 5.4 179/313] netfilter: nf_tables: fix nat hook table deletion, Greg Kroah-Hartman
• [PATCH 5.4 182/313] netfilter: nf_tables: use net_generic infra for transaction data, Greg Kroah-Hartman
• [PATCH 5.4 183/313] netfilter: nf_tables: add rescheduling points during loop detection walks, Greg Kroah-Hartman
• [PATCH 5.4 180/313] netfilter: nftables: add helper function to set the base sequence number, Greg Kroah-Hartman
• [PATCH 5.4 184/313] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE, Greg Kroah-Hartman
• [PATCH 5.10 315/509] netfilter: nf_tables: fix chain binding transaction logic, Greg Kroah-Hartman
• [PATCH 5.10 320/509] netfilter: nf_tables: drop map element references from preparation phase, Greg Kroah-Hartman
• [PATCH 5.10 312/509] netfilter: nf_tables: use net_generic infra for transaction data, Greg Kroah-Hartman
• [PATCH 5.10 321/509] netfilter: nf_tables: unbind non-anonymous set if rule construction fails, Greg Kroah-Hartman
• [PATCH 5.10 317/509] netfilter: nf_tables: reject unbound anonymous set before commit phase, Greg Kroah-Hartman
• [PATCH 5.10 322/509] netfilter: nf_tables: fix scheduling-while-atomic splat, Greg Kroah-Hartman
• [PATCH 5.10 318/509] netfilter: nf_tables: reject unbound chain set before commit phase, Greg Kroah-Hartman
• [PATCH 5.10 319/509] netfilter: nftables: rename set element data activation/deactivation functions, Greg Kroah-Hartman
• [PATCH 5.10 316/509] netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain, Greg Kroah-Hartman
• [PATCH 5.10 313/509] netfilter: nf_tables: add rescheduling points during loop detection walks, Greg Kroah-Hartman
• [PATCH 5.10 314/509] netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE, Greg Kroah-Hartman
• [PATCH netfilter] netfilter: nfnetlink_log: always add a timestamp, Maciej Żenczykowski
  • Re: [PATCH netfilter] netfilter: nfnetlink_log: always add a timestamp, Florian Westphal
    • Re: [PATCH netfilter] netfilter: nfnetlink_log: always add a timestamp, Maciej Żenczykowski
      • Re: [PATCH netfilter] netfilter: nfnetlink_log: always add a timestamp, Florian Westphal
• Re: Kernel oops with 6.4.4 - flow offloads - NULL pointer deref, Jakub Kicinski
  • Re: Kernel oops with 6.4.4 - flow offloads - NULL pointer deref, Pablo Neira Ayuso
    • Re: Kernel oops with 6.4.4 - flow offloads - NULL pointer deref, Ian Kumlien
      • Re: Kernel oops with 6.4.4 - flow offloads - NULL pointer deref, Ian Kumlien
• [PATCH v3 net-next] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Dust Li
  • Re: [PATCH v3 net-next] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Julian Anastasov
• [PATCH v2 net-next] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Dust Li
  • Re: [PATCH v2 net-next] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Julian Anastasov
    • Re: [PATCH v2 net-next] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Dust Li
      • Re: [PATCH v2 net-next] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Julian Anastasov
• [PATCH nf] netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR, Pablo Neira Ayuso
• [PATCH ipset] bash-completion: fix syntax error, Jeremy Sowden
  • Re: [PATCH ipset] bash-completion: fix syntax error, Pablo Neira Ayuso
• [PATCH bpf-next v6 0/5] Support defragmenting IPv(4|6) packets in BPF, Daniel Xu
  • [PATCH bpf-next v6 1/5] netfilter: defrag: Add glue hooks for enabling/disabling defrag, Daniel Xu
    • Re: [PATCH bpf-next v6 1/5] netfilter: defrag: Add glue hooks for enabling/disabling defrag, Florian Westphal
  • [PATCH bpf-next v6 5/5] bpf: selftests: Add defrag selftests, Daniel Xu
  • [PATCH bpf-next v6 2/5] netfilter: bpf: Support BPF_F_NETFILTER_IP_DEFRAG in netfilter link, Daniel Xu
    • Re: [PATCH bpf-next v6 2/5] netfilter: bpf: Support BPF_F_NETFILTER_IP_DEFRAG in netfilter link, Alexei Starovoitov
      • Re: [PATCH bpf-next v6 2/5] netfilter: bpf: Support BPF_F_NETFILTER_IP_DEFRAG in netfilter link, Daniel Xu
    • Re: [PATCH bpf-next v6 2/5] netfilter: bpf: Support BPF_F_NETFILTER_IP_DEFRAG in netfilter link, Florian Westphal
  • [PATCH bpf-next v6 3/5] bpf: selftests: Support not connecting client socket, Daniel Xu
  • [PATCH bpf-next v6 4/5] bpf: selftests: Support custom type and proto for client sockets, Daniel Xu
  • Re: [PATCH bpf-next v6 0/5] Support defragmenting IPv(4|6) packets in BPF, patchwork-bot+netdevbpf
• [iptables PATCH 1/2] nft: Special casing for among match in compare_matches(), Phil Sutter
  • [iptables PATCH 2/2] nft: More verbose extension comparison debugging, Phil Sutter
  • Re: [iptables PATCH 1/2] nft: Special casing for among match in compare_matches(), Phil Sutter
• [PATCH bpf-next v5 0/5] Support defragmenting IPv(4|6) packets in BPF, Daniel Xu
  • [PATCH bpf-next v5 1/5] netfilter: defrag: Add glue hooks for enabling/disabling defrag, Daniel Xu
  • [PATCH bpf-next v5 2/5] netfilter: bpf: Support BPF_F_NETFILTER_IP_DEFRAG in netfilter link, Daniel Xu
    • Re: [PATCH bpf-next v5 2/5] netfilter: bpf: Support BPF_F_NETFILTER_IP_DEFRAG in netfilter link, Florian Westphal
      • Re: [PATCH bpf-next v5 2/5] netfilter: bpf: Support BPF_F_NETFILTER_IP_DEFRAG in netfilter link, Daniel Xu