Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH v8 12/12] landlock: Document Landlock's network support, (continued)
  • Re: [PATCH v8 12/12] landlock: Document Landlock's network support, Konstantin Meskhidze (A)
• [PATCH nf-next] netfilter: nf_tables: nft_objref: make it builtin, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: nft_objref: make it builtin, Pablo Neira Ayuso
• [PATCH iptables-nft] nft: disscect basic icmp type/code match, Florian Westphal
  • Re: [PATCH iptables-nft] nft: disscect basic icmp type/code match, Phil Sutter
• Status of UID GID maching support in INPUT, Vincas Dargis
• netfilter+bpf road ahead, Florian Westphal
  • Re: netfilter+bpf road ahead, Toke Høiland-Jørgensen
• [RFC PATCH 0/1] libnftnl: Incorrect res_id byte order?, Ian Pilcher
  • [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Ian Pilcher
    • Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Pablo Neira Ayuso
      • Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Ian Pilcher
        • Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Pablo Neira Ayuso
    • Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Pablo Neira Ayuso
• [PATCH nf,v3] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements, Pablo Neira Ayuso
• [PATCH nft] tests: shell: deletion from interval concatenation, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements, Pablo Neira Ayuso
• [PATCH nf-next,v5 0/7] nf_tables inner tunnel header match support, Pablo Neira Ayuso
  • [PATCH nf-next,v5 5/7] netfilter: nft_meta: add inner match support, Pablo Neira Ayuso
  • [PATCH nf-next,v5 2/7] netfilter: nft_payload: access ipip payload for inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v5 3/7] netfilter: nft_inner: support for inner tunnel header matching, Pablo Neira Ayuso
  • [PATCH nf-next,v5 6/7] netfilter: nft_inner: add geneve support, Pablo Neira Ayuso
  • [PATCH nf-next,v5 7/7] netfilter: nft_inner: set tunnel offset to GRE header offset, Pablo Neira Ayuso
  • [PATCH nf-next,v5 1/7] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v5 4/7] netfilter: nft_inner: add percpu inner context, Pablo Neira Ayuso
• [PATCH nft,v2 00/16] vxlan, geneve, gre, gretap matching support, Pablo Neira Ayuso
  • [PATCH nft,v2 02/16] src: add dl_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft,v2 01/16] src: add eval_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft,v2 05/16] tests: shell: add vxlan set tests, Pablo Neira Ayuso
  • [PATCH nft,v2 04/16] tests: py: add vxlan tests, Pablo Neira Ayuso
  • [PATCH nft,v2 08/16] src: add gre support, Pablo Neira Ayuso
  • [PATCH nft,v2 07/16] src: display (inner) tag in --debug=proto-ctx, Pablo Neira Ayuso
  • [PATCH nft,v2 09/16] tests: py: add gre tests, Pablo Neira Ayuso
  • [PATCH nft,v2 13/16] doc: add geneve matching expression, Pablo Neira Ayuso
  • [PATCH nft,v2 14/16] src: add gretap support, Pablo Neira Ayuso
  • [PATCH nft,v2 06/16] doc: add vxlan matching expression, Pablo Neira Ayuso
  • [PATCH nft,v2 12/16] tests: py: add geneve tests, Pablo Neira Ayuso
  • [PATCH nft,v2 10/16] doc: add gre matching expression, Pablo Neira Ayuso
  • [PATCH nft,v2 15/16] tests: py: add gretap tests, Pablo Neira Ayuso
  • [PATCH nft,v2 03/16] src: add vxlan matching support, Pablo Neira Ayuso
  • [PATCH nft,v2 16/16] doc: add gretap matching expression, Pablo Neira Ayuso
  • [PATCH nft,v2 11/16] src: add geneve matching support, Pablo Neira Ayuso
  • Re: [PATCH nft,v2 00/16] vxlan, geneve, gre, gretap matching support, Pablo Neira Ayuso
• [iptables PATCH 1/2] tests: Adjust testsuite return codes to automake guidelines, Phil Sutter
  • [iptables PATCH 2/2] Makefile.am: Integrate testsuites, Phil Sutter
• [PATCH nf-next] netfilter: nf_tables: reduce nft_pktinfo by 8 bytes, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: reduce nft_pktinfo by 8 bytes, Pablo Neira Ayuso
• [nft PATCH] Implement 'reset rule' and 'reset rules' commands, Phil Sutter
• [nf-next PATCH 0/2] Support resetting rules' state, Phil Sutter
  • [nf-next PATCH 2/2] netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET, Phil Sutter
  • [nf-next PATCH 1/2] netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters, Phil Sutter
  • Re: [nf-next PATCH 0/2] Support resetting rules' state, Pablo Neira Ayuso
    • Re: [nf-next PATCH 0/2] Support resetting rules' state, Phil Sutter
      • Re: [nf-next PATCH 0/2] Support resetting rules' state, Pablo Neira Ayuso
        • Re: [nf-next PATCH 0/2] Support resetting rules' state, Phil Sutter
• [PATCH nf-next] netfilter: conntrack: use siphash_4u64, Florian Westphal
• [PATCH nf] netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces., Guillaume Nault
  • Re: [PATCH nf] netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces., Pablo Neira Ayuso
• [nft PATCH] Warn for tables with compat expressions in rules, Phil Sutter
• [iptables PATCH v2 00/12] Speed up iptables-test.py, Phil Sutter
  • [iptables PATCH v2 05/12] tests: *.t: Fix for hexadecimal output, Phil Sutter
  • [iptables PATCH v2 09/12] tests: libxt_tos.t, libxt_TOS.t: Add missing masks in output, Phil Sutter
  • [iptables PATCH v2 02/12] tests: iptables-test: Implement fast test mode, Phil Sutter
  • [iptables PATCH v2 12/12] tests: *.t: Add missing all-one's netmasks to expected output, Phil Sutter
  • [iptables PATCH v2 01/12] extensions: NFQUEUE: Document queue-balance limitation, Phil Sutter
  • [iptables PATCH v2 10/12] tests: libebt_vlan.t: Drop trailing whitespace from rules, Phil Sutter
  • [iptables PATCH v2 04/12] tests: *.t: Fix expected output for simple calls, Phil Sutter
  • [iptables PATCH v2 03/12] tests: iptables-test: Cover for obligatory -j CONTINUE in ebtables, Phil Sutter
  • [iptables PATCH v2 08/12] tests: libxt_recent.t: Add missing default values, Phil Sutter
  • [iptables PATCH v2 07/12] tests: libxt_length.t: Fix odd use-case output, Phil Sutter
  • [iptables PATCH v2 06/12] tests: libebt_redirect.t: Plain redirect prints with trailing whitespace, Phil Sutter
  • [iptables PATCH v2 11/12] tests: libxt_connlimit.t: Add missing default values, Phil Sutter
  • Re: [iptables PATCH v2 00/12] Speed up iptables-test.py, Phil Sutter
• [PATCH nft] netlink_delinearize: do not transfer binary operation to non-anonymous sets, Pablo Neira Ayuso
• [syzbot] KASAN: use-after-free Read in nf_tables_trans_destroy_work, syzbot
• [PATCH nf-next,v4 1/6] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
• [PATCH AUTOSEL 5.19 29/73] netlink: Bounds-check struct nlmsgerr creation, Sasha Levin
• [PATCH AUTOSEL 6.0 32/77] netlink: Bounds-check struct nlmsgerr creation, Sasha Levin
• [iptables PATCH] nft: Fix compile with -DDEBUG, Phil Sutter
• [iptables PATCH] libiptc: Fix for segfault when renaming a chain, Phil Sutter
• bridge:fragmented packets dropped by bridge, Vyacheslav Salnikov
  • Re: bridge:fragmented packets dropped by bridge, Slade Watkins
  • Re: bridge:fragmented packets dropped by bridge, Vadim Fedorenko
  • Re: bridge:fragmented packets dropped by bridge, Vadim Fedorenko
• [PATCH nf-next,v3 0/6] nf_tables inner tunnel header match support, Pablo Neira Ayuso
  • [PATCH nf-next,v3 1/6] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v3 2/6] netfilter: nft_payload: access ipip payload for inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v3 4/6] netfilter: nft_inner: add percpu inner context, Pablo Neira Ayuso
  • [PATCH nf-next,v3 3/6] netfilter: nft_inner: support for inner tunnel header matching, Pablo Neira Ayuso
  • [PATCH nf-next,v3 5/6] netfilter: nft_meta: add inner match support, Pablo Neira Ayuso
  • [PATCH nf-next,v3 6/6] netfilter: nft_inner: add geneve support, Pablo Neira Ayuso
• [PATCH nft 1/2] parser_bison: display too many levels of nesting error, Pablo Neira Ayuso
  • [PATCH nft 2/2] rule: do not display handle for implicit chain, Pablo Neira Ayuso
• [ANNOUNCE] conntrack-tools 1.4.7 release, Phil Sutter
• [PATCH conntrack-tools] build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9, Pablo Neira Ayuso
• Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible, Jason Gunthorpe
  • <Possible follow-ups>
  • Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible, Andy Shevchenko
  • Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible, Joe Perches
    • RE: [PATCH v1 3/5] treewide: use get_random_u32() when possible, David Laight
      • Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible, Joe Perches
• Re: [f2fs-dev] [PATCH v1 3/5] treewide: use get_random_u32() when possible, Andy Shevchenko
  • Re: [f2fs-dev] [PATCH v1 3/5] treewide: use get_random_u32() when possible, Jason A. Donenfeld
• [iptables PATCH 00/12] Speed up iptables-tests.py, Phil Sutter
  • [iptables PATCH 02/12] tests: iptables-test: Cover for obligatory -j CONTINUE in ebtables, Phil Sutter
  • [iptables PATCH 11/12] extensions: Do not print all-one's netmasks, Phil Sutter
    • Re: [iptables PATCH 11/12] extensions: Do not print all-one's netmasks, Jan Engelhardt
      • Re: [iptables PATCH 11/12] extensions: Do not print all-one's netmasks, Phil Sutter
        • Re: [iptables PATCH 11/12] extensions: Do not print all-one's netmasks, Jan Engelhardt
  • [iptables PATCH 04/12] tests: *.t: Fix for hexadecimal output, Phil Sutter
  • [iptables PATCH 01/12] tests: iptables-test: Implement fast test mode, Phil Sutter
    • Re: [iptables PATCH 01/12] tests: iptables-test: Implement fast test mode, Jan Engelhardt
      • Re: [iptables PATCH 01/12] tests: iptables-test: Implement fast test mode, Phil Sutter
  • [iptables PATCH 05/12] tests: libebt_redirect.t: Plain redirect prints with trailing whitespace, Phil Sutter
  • [iptables PATCH 07/12] tests: libxt_recent.t: Add missing default values, Phil Sutter
  • [iptables PATCH 12/12] extensions: NFQUEUE: Do not print default queue number 0, Phil Sutter
  • [iptables PATCH 03/12] tests: *.t: Fix expected output for simple calls, Phil Sutter
  • [iptables PATCH 08/12] tests: libxt_tos.t, libxt_TOS.t: Add missing masks in output, Phil Sutter
  • [iptables PATCH 10/12] tests: libxt_connlimit.t: Add missing --connlimit-saddr, Phil Sutter
  • [iptables PATCH 06/12] tests: libxt_length.t: Fix odd use-case output, Phil Sutter
  • [iptables PATCH 09/12] tests: libebt_vlan.t: Drop trailing whitespace from rules, Phil Sutter
• [iptables PATCH 1/2] tests: shell: Fix expected output for ip6tables dst match, Phil Sutter
  • [iptables PATCH 2/2] tests: shell: Fix expected ebtables log target output, Phil Sutter
• Kernel 6.0.0 bug pptp not work, Martin Zaharinov
  • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
  • Re: Kernel 6.0.0 bug pptp not work, Pablo Neira Ayuso
  • Re: Kernel 6.0.0 bug pptp not work, Florian Westphal
    • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
      • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
        • Re: Kernel 6.0.0 bug pptp not work, Pablo Neira Ayuso
          • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
      • Re: Kernel 6.0.0 bug pptp not work, Pablo Neira Ayuso
      • Re: Kernel 6.0.0 bug pptp not work, Florian Westphal
        • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
• [PATCH nft 0/2] gre and ipip tunnel support, Pablo Neira Ayuso
  • [PATCH nft 1/2] src: add gre support, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: add ipip support, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2] src: add ipip support, Pablo Neira Ayuso
• [iptables PATCH] tests: libebt_stp.t: Drop duplicate whitespace, Phil Sutter
• [PATCH nf-next,v2 0/6] nf_tables inner tunnel header match support, Pablo Neira Ayuso
  • [PATCH nf-next,v2 3/6] netfilter: nft_inner: support for inner tunnel header matching, Pablo Neira Ayuso
  • [PATCH nf-next,v2 5/6] netfilter: nft_meta: add inner match support, Pablo Neira Ayuso
  • [PATCH nf-next,v2 1/6] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v2 4/6] netfilter: nft_inner: add percpu inner context, Pablo Neira Ayuso
  • [PATCH nf-next,v2 6/6] netfilter: nft_inner: add geneve support, Pablo Neira Ayuso
  • [PATCH nf-next,v2 2/6] netfilter: nft_payload: access ipip payload for inner offset, Pablo Neira Ayuso
• [iptables PATCH] extensions: libebt_log: Avoid empty log-prefix in output, Phil Sutter
• [iptables PATCH] tests: IDLETIMER.t: Fix syntax, support for restore input, Phil Sutter
• [nf-next PATCH 1/2] selftests: netfilter: Test reverse path filtering, Phil Sutter
  • [nf-next PATCH 2/2] netfilter: rpfilter/fib: Populate flowic_l3mdev field, Phil Sutter
    • Re: [nf-next PATCH 2/2] netfilter: rpfilter/fib: Populate flowic_l3mdev field, David Ahern
    • Re: [nf-next PATCH 2/2] netfilter: rpfilter/fib: Populate flowic_l3mdev field, Guillaume Nault
  • Re: [nf-next PATCH 1/2] selftests: netfilter: Test reverse path filtering, Guillaume Nault
• [nf PATCH] selftests: netfilter: Fix nft_fib.sh for all.rp_filter=1, Phil Sutter
• [PATCH nft 1/2] evaluate: bogus datatype assertion in binary operation evaluation, Pablo Neira Ayuso
  • [PATCH nft 2/2] evaluate: datatype memleak after binop transfer, Pablo Neira Ayuso
• netdev conf 0x16 schedule posted, Jamal Hadi Salim
• [iptables PATCH 1/3] extensions: libebt_stp: Eliminate duplicate space in output, Phil Sutter
  • [iptables PATCH 3/3] extensions: TCPOPTSTRIP: Do not print empty options, Phil Sutter
  • [iptables PATCH 2/3] extensions: libip6t_dst: Fix output for empty options, Phil Sutter
• [iptables PATCH 1/2] extensions: among: Remove pointless fall through, Phil Sutter
  • [iptables PATCH 2/2] extensions: among: Fix for use with ebtables-restore, Phil Sutter
• [iptables PATCH 0/4] tests: iptables-test: Test both variants by default, Phil Sutter
  • [iptables PATCH 2/4] tests: iptables-test: Simplify execute_cmd() calling, Phil Sutter
  • [iptables PATCH 1/4] tests: iptables-test: Simplify '-N' option a bit, Phil Sutter
  • [iptables PATCH 3/4] tests: iptables-test: Pass netns to execute_cmd(), Phil Sutter
  • [iptables PATCH 4/4] tests: iptables-test: Test both variants by default, Phil Sutter
• Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1, Jakub Kicinski
  • Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1, David Ahern
  • Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1, Mike Manning
    • Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1, Maximilien Cuony
      • Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1 #forregzbot, Thorsten Leemhuis
• [PATCH nft 0/6,v2] support for vxlan matching, Pablo Neira Ayuso
  • [PATCH nft 4/6] tests: py: add vxlan tests, Pablo Neira Ayuso
  • [PATCH nft 2/6] src: add dl_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft 5/6] tests: shell: add vxlan set tests, Pablo Neira Ayuso
  • [PATCH nft 3/6] src: add vxlan matching support, Pablo Neira Ayuso
  • [PATCH nft 1/6] src: add eval_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft 6/6] src: display (inner) tag in --debug=proto-ctx, Pablo Neira Ayuso
• [PATCH v2 bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Lorenzo Bianconi
  • Re: [PATCH v2 bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Martin KaFai Lau
    • Re: [PATCH v2 bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, John Fastabend
  • Re: [PATCH v2 bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, patchwork-bot+netdevbpf
• [PATCH nft 0/3] vlan followup fixes, Florian Westphal
  • [PATCH nft 2/3] evaluate: add ethernet header size offset for implicit vlan dependency, Florian Westphal
  • [PATCH nft 1/3] doc: mention vlan matching in ip/ip6/inet families, Florian Westphal
  • [PATCH nft 3/3] tests: py: add vlan test case for ip/inet family, Florian Westphal
  • Re: [PATCH nft 0/3] vlan followup fixes, Pablo Neira Ayuso
• [nft PATCH] monitor: Sanitize startup race condition, Phil Sutter
  • Re: [nft PATCH] monitor: Sanitize startup race condition, Pablo Neira Ayuso
    • Re: [nft PATCH] monitor: Sanitize startup race condition, Phil Sutter
• [PATCH nft 1/4] src: add eval_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft 2/4] src: add dl_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft 4/4] src: display (inner) tag in --debug=proto-ctx, Pablo Neira Ayuso
  • [PATCH nft 3/4] src: add vxlan matching support, Pablo Neira Ayuso
• [PATCH libnftnl] expr: add inner support, Pablo Neira Ayuso
  • Re: [PATCH libnftnl] expr: add inner support, Pablo Neira Ayuso
• [PATCH nf-next 0/2] nf_tables inner tunnel header match support, Pablo Neira Ayuso
  • [PATCH nf-next 1/2] netfilter: nft_inner: support for inner tunnel header matching, Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: nft_meta: add inner match support, Pablo Neira Ayuso
• [PATCH nf-next 1/2] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: nft_payload: access ipip payload for inner offset, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_payload: move struct nft_payload_set definition where it belongs, Pablo Neira Ayuso
• [PATCH v2 0/6] Add support for new bitmask parameter (userspace), Vishwanath Pai
  • [PATCH v2 4/6] netfilter: ipset: Add bitmask support to hash:netnet, Vishwanath Pai
    • Re: [PATCH v2 4/6] netfilter: ipset: Add bitmask support to hash:netnet, Jozsef Kadlecsik
  • [PATCH v2 6/6] netfilter: ipset: add tests for the new bitmask feature, Vishwanath Pai
  • [PATCH v2 1/6] netfilter: ipset: Add support for new bitmask parameter, Vishwanath Pai
    • Re: [PATCH v2 1/6] netfilter: ipset: Add support for new bitmask parameter, Jozsef Kadlecsik
  • [PATCH v2 2/6] netfilter: ipset: Add bitmask support to hash:ip, Vishwanath Pai
  • [PATCH v2 5/6] netfilter: ipset: Update the man page to include netmask/bitmask options, Vishwanath Pai
  • [PATCH v2 3/6] netfilter: ipset: Add bitmask support to hash:ipport, Vishwanath Pai
  • Re: [PATCH v2 0/6] Add support for new bitmask parameter (userspace), Jozsef Kadlecsik
• [PATCH v2] netfilter: ipset: regression in ip_set_hash_ip.c, Vishwanath Pai
  • [PATCH v2] netfilter: ipset: Add support for new bitmask parameter (kernel), Vishwanath Pai
    • Re: [PATCH v2] netfilter: ipset: Add support for new bitmask parameter (kernel), Jozsef Kadlecsik
      • Re: [PATCH v2] netfilter: ipset: Add support for new bitmask parameter (kernel), Vishwanath Pai
  • Re: [PATCH v2] netfilter: ipset: regression in ip_set_hash_ip.c, Pablo Neira Ayuso
• [iptables PATCH] nft-bridge: Drop 'sreg_count' variable, Phil Sutter
  • Re: [iptables PATCH] nft-bridge: Drop 'sreg_count' variable, Florian Westphal
• [iptables PATCH] nft: Fix meta statement parsing, Phil Sutter
  • Re: [iptables PATCH] nft: Fix meta statement parsing, Florian Westphal
    • Re: [iptables PATCH] nft: Fix meta statement parsing, Phil Sutter
      • Re: [iptables PATCH] nft: Fix meta statement parsing, Florian Westphal
        • Re: [iptables PATCH] nft: Fix meta statement parsing, Phil Sutter
• [iptables PATCH] ebtables: Fix among match, Phil Sutter
  • Re: [iptables PATCH] ebtables: Fix among match, Florian Westphal
• [PATCH net-next 0/1] netfilter fix for net-next, Florian Westphal
  • [PATCH 1/1] netfilter: nft_fib: Fix for rpath check with VRF devices, Florian Westphal
    • Re: [PATCH 1/1] netfilter: nft_fib: Fix for rpath check with VRF devices, patchwork-bot+netdevbpf
    • Re: [PATCH 1/1] netfilter: nft_fib: Fix for rpath check with VRF devices, Guillaume Nault
      • Re: [PATCH 1/1] netfilter: nft_fib: Fix for rpath check with VRF devices, Florian Westphal
        • Re: [PATCH 1/1] netfilter: nft_fib: Fix for rpath check with VRF devices, David Ahern
    • Re: [PATCH 1/1] netfilter: nft_fib: Fix for rpath check with VRF devices, Guillaume Nault
      • Re: [PATCH 1/1] netfilter: nft_fib: Fix for rpath check with VRF devices, Florian Westphal
        • Re: [PATCH 1/1] netfilter: nft_fib: Fix for rpath check with VRF devices, Guillaume Nault
• [iptables PATCH 0/5] Fixes around ebtables' --proto match, Phil Sutter
  • [iptables PATCH 2/5] ebtables: Eliminate OPT_TABLE, Phil Sutter
  • [iptables PATCH 1/5] ebtables: Drop unused OPT_* defines, Phil Sutter
  • [iptables PATCH 5/5] ebtables: Support '-p Length', Phil Sutter
    • Re: [iptables PATCH 5/5] ebtables: Support '-p Length', Phil Sutter
  • [iptables PATCH 3/5] ebtables: Merge OPT_* flags with xshared ones, Phil Sutter
  • [iptables PATCH 4/5] nft-shared: Introduce __get_cmp_data(), Phil Sutter
  • Re: [iptables PATCH 0/5] Fixes around ebtables' --proto match, Florian Westphal
• [PATCH v38 25/39] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v38 22/39] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v38 21/39] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v38 15/39] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v38 14/39] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• [PATCH bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Lorenzo Bianconi
  • Re: [PATCH bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Yauheni Kaliuta
    • Re: [PATCH bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Yauheni Kaliuta
  • Re: [PATCH bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Yauheni Kaliuta
  • Re: [PATCH bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Martin KaFai Lau
    • Re: [PATCH bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Pablo Neira Ayuso
      • Re: [PATCH bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Lorenzo Bianconi
    • Re: [PATCH bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Lorenzo Bianconi
• [PATCH iptables-nft] nft: track each register individually, Florian Westphal
  • Re: [PATCH iptables-nft] nft: track each register individually, Phil Sutter
• [PATCH iptables-nft] tests: extend native delinearize script, Florian Westphal
  • Re: [PATCH iptables-nft] tests: extend native delinearize script, Phil Sutter
• [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Florian Westphal
  • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Michal Hocko
    • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Florian Westphal
      • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Uladzislau Rezki
        • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Florian Westphal
          • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Uladzislau Rezki
            • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Vlastimil Babka
              • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Sebastian Andrzej Siewior
      • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Michal Hocko
        • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Florian Westphal
          • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Michal Hocko
            • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Michal Hocko
              • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Florian Westphal
                • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Michal Hocko
                  • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Florian Westphal
                    • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Florian Westphal
                    • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Michal Hocko
                      • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Florian Westphal
                        • Re: [PATCH mm] mm: fix BUG with kvzalloc+GFP_ATOMIC, Michal Hocko
• [iptables PATCH] tests: shell: Test delinearization of native nftables expressions, Phil Sutter
  • Re: [iptables PATCH] tests: shell: Test delinearization of native nftables expressions, Florian Westphal
• [PATCH iptables-nft] nft: un-break among match with concatenation, Florian Westphal
• [PATCH] doc, src: make some spelling and grammatical improvements, Jeremy Sowden
• Bug Report Flowtable NFT with kernel 5.19.9, Martin Zaharinov
  • Re: Bug Report Flowtable NFT with kernel 5.19.9, Florian Westphal
    • Re: Bug Report Flowtable NFT with kernel 5.19.9, Martin Zaharinov
• [PATCH v3 bpf-next 0/3] Introduce bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
  • [PATCH v3 bpf-next 2/3] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
    • Re: [PATCH v3 bpf-next 2/3] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Nathan Chancellor
      • Re: [PATCH v3 bpf-next 2/3] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
        • Re: [PATCH v3 bpf-next 2/3] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
          • Re: [PATCH v3 bpf-next 2/3] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Nathan Chancellor
  • [PATCH v3 bpf-next 1/3] bpf: Tweak definition of KF_TRUSTED_ARGS, Lorenzo Bianconi
    • Re: [PATCH v3 bpf-next 1/3] bpf: Tweak definition of KF_TRUSTED_ARGS, Alexei Starovoitov
      • Re: [PATCH v3 bpf-next 1/3] bpf: Tweak definition of KF_TRUSTED_ARGS, Kumar Kartikeya Dwivedi
  • [PATCH v3 bpf-next 3/3] selftests/bpf: add tests for bpf_ct_set_nat_info kfunc, Lorenzo Bianconi
  • Re: [PATCH v3 bpf-next 0/3] Introduce bpf_ct_set_nat_info kfunc helper, patchwork-bot+netdevbpf
• [nf PATCH v2] netfilter: nft_fib: Fix for rpath check with VRF devices, Phil Sutter
• [PATCH net-next 0/4] netfilter patches for net-next, Florian Westphal
  • [PATCH net-next 2/4] netfilter: conntrack: revisit the gc initial rescheduling bias, Florian Westphal
  • [PATCH net-next 1/4] netfilter: conntrack: fix the gc rescheduling delay, Florian Westphal
    • Re: [PATCH net-next 1/4] netfilter: conntrack: fix the gc rescheduling delay, patchwork-bot+netdevbpf
  • [PATCH net-next 4/4] netfilter: rpfilter: Remove unused variable 'ret'., Florian Westphal
  • [PATCH net-next 3/4] headers: Remove some left-over license text in include/uapi/linux/netfilter/, Florian Westphal
• [PATCH net 0/5] netfilter: bugfixes for net, Florian Westphal
  • [PATCH net 1/5] netfilter: conntrack: remove nf_conntrack_helper documentation, Florian Westphal
    • Re: [PATCH net 1/5] netfilter: conntrack: remove nf_conntrack_helper documentation, patchwork-bot+netdevbpf
  • [PATCH net 3/5] netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain(), Florian Westphal
  • [PATCH net 2/5] netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain(), Florian Westphal
  • [PATCH net 5/5] netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed, Florian Westphal
  • [PATCH net 4/5] netfilter: ebtables: fix memory leak when blob is malformed, Florian Westphal
• [nf PATCH] netfilter: nft_fib: Fix for rpath check with VRF devices, Phil Sutter
  • Re: [nf PATCH] netfilter: nft_fib: Fix for rpath check with VRF devices, Florian Westphal
    • Re: [nf PATCH] netfilter: nft_fib: Fix for rpath check with VRF devices, Phil Sutter
• [PATCH nf] netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed, Florian Westphal
• [PATCH bpf-next v3 0/3] bpf: Small nf_conn cleanups, Daniel Xu
  • [PATCH bpf-next v3 2/3] bpf: Rename nfct_bsa to nfct_btf_struct_access, Daniel Xu
  • [PATCH bpf-next v3 1/3] bpf: Remove unused btf_struct_access stub, Daniel Xu
  • [PATCH bpf-next v3 3/3] bpf: Move nf_conn extern declarations to filter.h, Daniel Xu
    • Re: [PATCH bpf-next v3 3/3] bpf: Move nf_conn extern declarations to filter.h, Martin KaFai Lau
  • Re: [PATCH bpf-next v3 0/3] bpf: Small nf_conn cleanups, patchwork-bot+netdevbpf
• Question for table netdev set list, Martin Zaharinov
  • Re: Question for table netdev set list, Martin Zaharinov
• [PATCH nft] evaluate: un-break rule insert with intervals, Florian Westphal
  • Re: [PATCH nft] evaluate: un-break rule insert with intervals, Pablo Neira Ayuso
    • Re: [PATCH nft] evaluate: un-break rule insert with intervals, Florian Westphal
• [syzbot] memory leak in do_replace, syzbot
  • [PATCH nf] netfilter: ebtables: fix memory leak when blob is malformed, Florian Westphal
• [PATCH iptables-nft] iptables-nft: must withdraw PAYLOAD flag after parsing, Florian Westphal
  • Re: [PATCH iptables-nft] iptables-nft: must withdraw PAYLOAD flag after parsing, Florian Westphal
    • Re: [PATCH iptables-nft] iptables-nft: must withdraw PAYLOAD flag after parsing, Phil Sutter
      • Re: [PATCH iptables-nft] iptables-nft: must withdraw PAYLOAD flag after parsing, Florian Westphal
• [PATCH bpf-next v2 0/3] bpf: Small nf_conn cleanups, Daniel Xu
  • [PATCH bpf-next v2 1/3] bpf: Remove unused btf_struct_access stub, Daniel Xu
  • [PATCH bpf-next v2 2/3] bpf: Rename nfct_bsa to nfct_btf_struct_access, Daniel Xu
  • [PATCH bpf-next v2 3/3] bpf: Move nf_conn extern declarations to filter.h, Daniel Xu
    • Re: [PATCH bpf-next v2 3/3] bpf: Move nf_conn extern declarations to filter.h, Martin KaFai Lau
      • Re: [PATCH bpf-next v2 3/3] bpf: Move nf_conn extern declarations to filter.h, Daniel Xu
• ox16: First Workshop, Mini Netfilter workshop, Jamal Hadi Salim
• [PATCH nft 0/2] Fix listing of sets containing unclosed address prefix intervals, Jeremy Sowden
  • [PATCH nft 1/2] segtree: refactor decomposition of closed intervals, Jeremy Sowden
  • [PATCH nft 2/2] segtree: fix decomposition of unclosed intervals containing address prefixes, Jeremy Sowden
    • Re: [PATCH nft 2/2] segtree: fix decomposition of unclosed intervals containing address prefixes, Florian Westphal
      • Re: [PATCH nft 2/2] segtree: fix decomposition of unclosed intervals containing address prefixes, Jeremy Sowden
        • Re: [PATCH nft 2/2] segtree: fix decomposition of unclosed intervals containing address prefixes, Florian Westphal
  • Re: [PATCH nft 0/2] Fix listing of sets containing unclosed address prefix intervals, Jeremy Sowden
• [PATCH nft] tests: py: fix payloads for sets with user data, Jeremy Sowden
  • Re: [PATCH nft] tests: py: fix payloads for sets with user data, Jeremy Sowden
• [syzbot] WARNING: locking bug in tee_netdev_event, syzbot
  • Re: [syzbot] WARNING: locking bug in tee_netdev_event, Tetsuo Handa
• [PATCH nft,RFC] src: add vxlan matching support, Pablo Neira Ayuso
• [PATCH libnftnl,RFC] expr: add inner support, Pablo Neira Ayuso
• [PATCH nf-next,RFC 0/1] nf_tables inner match support, Pablo Neira Ayuso
  • [PATCH nf-next,RFC 1/1] netfilter: nft_inner: support for inner header matching, Pablo Neira Ayuso
• [PATCH nf 0/2] netfilter: conntrack: fix the gc rescheduling delay, Antoine Tenart
  • [PATCH nf 2/2] netfilter: conntrack: revisit the gc initial rescheduling bias, Antoine Tenart
  • [PATCH nf 1/2] netfilter: conntrack: fix the gc rescheduling delay, Antoine Tenart
  • Re: [PATCH nf 0/2] netfilter: conntrack: fix the gc rescheduling delay, Florian Westphal
• [PATCH] netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain(), Tetsuo Handa
  • Re: [PATCH] netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain(), Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain(), Florian Westphal
• [PATCH] netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain(), Tetsuo Handa
  • Re: [PATCH] netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain(), Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain(), Florian Westphal
• [PATCH 1/3 nft] py: extend python API to support libnftables API, Fernando Fernandez Mancera
  • [PATCH 2/3 nft] py: support variables management and fix formatting, Fernando Fernandez Mancera
  • [PATCH 3/3 nft] doc: add nft_ctx_add_var() and nft_ctx_clear_vars() docs, Fernando Fernandez Mancera
  • Re: [PATCH 1/3 nft] py: extend python API to support libnftables API, Pablo Neira Ayuso
• [PATCH iptables-nft 1/2] nft: support ttl/hoplimit dissection, Florian Westphal
  • [PATCH iptables-nft 2/2] nft: prefer payload to ttl/hl module, Florian Westphal
  • [PATCH iptables] tests: add ebtables among testcase, Florian Westphal
  • Re: [PATCH iptables-nft 1/2] nft: support ttl/hoplimit dissection, Phil Sutter
• [PATCH bpf-next] bpf: Move nf_conn extern declarations to filter.h, Daniel Xu
  • Re: [PATCH bpf-next] bpf: Move nf_conn extern declarations to filter.h, Kumar Kartikeya Dwivedi
  • Re: [PATCH bpf-next] bpf: Move nf_conn extern declarations to filter.h, Martin KaFai Lau
    • Re: [PATCH bpf-next] bpf: Move nf_conn extern declarations to filter.h, Kumar Kartikeya Dwivedi
      • Re: [PATCH bpf-next] bpf: Move nf_conn extern declarations to filter.h, Martin KaFai Lau
        • Re: [PATCH bpf-next] bpf: Move nf_conn extern declarations to filter.h, Martin KaFai Lau
      • Re: [PATCH bpf-next] bpf: Move nf_conn extern declarations to filter.h, Daniel Xu
• [PATCH] headers: Remove some left-over license text in include/uapi/linux/netfilter/, Christophe JAILLET
• [PATCH nft] json: add stateful object comment support, Fernando Fernandez Mancera
  • Re: [PATCH nft] json: add stateful object comment support, Pablo Neira Ayuso
• [PATCH nft] json: add secmark object reference support, Fernando Fernandez Mancera
  • Re: [PATCH nft] json: add secmark object reference support, Pablo Neira Ayuso
• removing conntrack helper toggle to enable auto-assignment [was Re: b118509076b3 (probably) breaks my firewall], Pablo Neira Ayuso
  • Re: removing conntrack helper toggle to enable auto-assignment [was Re: b118509076b3 (probably) breaks my firewall], Willy Tarreau
  • Re: removing conntrack helper toggle to enable auto-assignment [was Re: b118509076b3 (probably) breaks my firewall], Jakub Kicinski
    • Re: removing conntrack helper toggle to enable auto-assignment [was Re: b118509076b3 (probably) breaks my firewall], Florian Westphal
      • Re: removing conntrack helper toggle to enable auto-assignment [was Re: b118509076b3 (probably) breaks my firewall], Jakub Kicinski
        • Re: removing conntrack helper toggle to enable auto-assignment [was Re: b118509076b3 (probably) breaks my firewall], Florian Westphal
        • Re: removing conntrack helper toggle to enable auto-assignment [was Re: b118509076b3 (probably) breaks my firewall], Chris Clayton
          • Re: removing conntrack helper toggle to enable auto-assignment [was Re: b118509076b3 (probably) breaks my firewall], Thorsten Leemhuis
• [PATCH nf] netfilter: conntrack: remove nf_conntrack_helper documentation, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: remove nf_conntrack_helper, Pablo Neira Ayuso
• [PATCH net-next] netfilter: rpfilter: Remove unused variable 'ret'., Guillaume Nault
• [PATCH iptables-nft 0/3] nft: prefer meta pkttype to libxt_pkttype, Florian Westphal
  • [PATCH iptables-nft 2/3] nft: prefer native 'meta pkttype' instead of xt match, Florian Westphal
  • [PATCH iptables-nft 1/3] nft: support dissection of meta pkktype mode, Florian Westphal
  • [PATCH iptables-nft 3/3] extensions: libxt_pkttype: support otherhost, Florian Westphal
  • Re: [PATCH iptables-nft 0/3] nft: prefer meta pkttype to libxt_pkttype, Phil Sutter
    • Re: [PATCH iptables-nft 0/3] nft: prefer meta pkttype to libxt_pkttype, Florian Westphal
• [PATCH net 0/4] netfilter: bugfixes for net, Florian Westphal
  • [PATCH net 1/4] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers, Florian Westphal
    • Re: [PATCH net 1/4] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers, patchwork-bot+netdevbpf
  • [PATCH net 2/4] selftests: nft_concat_range: add socat support, Florian Westphal
  • [PATCH net 3/4] netfilter: nf_conntrack_irc: Tighten matching on DCC message, Florian Westphal
  • [PATCH net 4/4] netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find(), Florian Westphal
• [PATCH v2 bpf-next] selftests/bpf: fix ct status check in bpf_nf selftests, Lorenzo Bianconi
  • Re: [PATCH v2 bpf-next] selftests/bpf: fix ct status check in bpf_nf selftests, Song Liu
  • Re: [PATCH v2 bpf-next] selftests/bpf: fix ct status check in bpf_nf selftests, patchwork-bot+netdevbpf
• [PATCH bpf-next v5 0/6] Support direct writes to nf_conn:mark, Daniel Xu
  • [PATCH bpf-next v5 4/6] bpf: Export btf_type_by_id() and bpf_log(), Daniel Xu
  • [PATCH bpf-next v5 6/6] selftests/bpf: Add tests for writing to nf_conn:mark, Daniel Xu
  • [PATCH bpf-next v5 3/6] bpf: Use 0 instead of NOT_INIT for btf_struct_access() writes, Daniel Xu
  • [PATCH bpf-next v5 1/6] bpf: Remove duplicate PTR_TO_BTF_ID RO check, Daniel Xu
  • [PATCH bpf-next v5 2/6] bpf: Add stub for btf_struct_access(), Daniel Xu
  • [PATCH bpf-next v5 5/6] bpf: Add support for writing to nf_conn:mark, Daniel Xu
  • Re: [PATCH bpf-next v5 0/6] Support direct writes to nf_conn:mark, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v5 0/6] Support direct writes to nf_conn:mark, Daniel Xu
  • Re: [PATCH bpf-next v5 0/6] Support direct writes to nf_conn:mark, patchwork-bot+netdevbpf
• [PATCH net-next 0/8] netfilter: patches for net-next, Florian Westphal
  • [PATCH net-next 1/8] netfilter: conntrack: prepare tcp_in_window for ternary return value, Florian Westphal
    • Re: [PATCH net-next 1/8] netfilter: conntrack: prepare tcp_in_window for ternary return value, patchwork-bot+netdevbpf
  • [PATCH net-next 3/8] netfilter: conntrack: remove unneeded indent level, Florian Westphal
  • [PATCH net-next 7/8] netfilter: nat: move repetitive nat port reserve loop to a helper, Florian Westphal
  • [PATCH net-next 6/8] netfilter: move from strlcpy with unused retval to strscpy, Florian Westphal
  • [PATCH net-next 4/8] netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst, Florian Westphal
  • [PATCH net-next 2/8] netfilter: conntrack: ignore overly delayed tcp packets, Florian Westphal
  • [PATCH net-next 5/8] netfilter: remove NFPROTO_DECNET, Florian Westphal
  • [PATCH net-next 8/8] netfilter: nat: avoid long-running port range loop, Florian Westphal
• [PATCH bpf-next] selftests/bpf: fix ct status check in bpf_nf selftests, Lorenzo Bianconi
  • Re: [PATCH bpf-next] selftests/bpf: fix ct status check in bpf_nf selftests, Song Liu
    • Re: [PATCH bpf-next] selftests/bpf: fix ct status check in bpf_nf selftests, Lorenzo Bianconi
• [PATCH nf] netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find(), Pablo Neira Ayuso
• [PATCH nf-next 0/2] netfilter: nat: avoid long-running loops, Florian Westphal
  • [PATCH nf-next 1/2] netfilter: nat: move repetitive nat port reserve loop to a helper, Florian Westphal
  • [PATCH nf-next 2/2] netfilter: nat: avoid long-running port range loop, Florian Westphal
• [PATCH nf] selftests: nft_concat_range: add socat support, Florian Westphal
• [PATCH v2 nf] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers, Florian Westphal
• [PATCH v2 bpf-next 0/4] Introduce bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
  • [PATCH v2 bpf-next 2/4] selftests/bpf: Extend KF_TRUSTED_ARGS test for __ref annotation, Lorenzo Bianconi
    • Re: [PATCH v2 bpf-next 2/4] selftests/bpf: Extend KF_TRUSTED_ARGS test for __ref annotation, Song Liu
  • [PATCH v2 bpf-next 1/4] bpf: Add support for per-parameter trusted args, Lorenzo Bianconi
    • Re: [PATCH v2 bpf-next 1/4] bpf: Add support for per-parameter trusted args, Song Liu
  • [PATCH v2 bpf-next 4/4] selftests/bpf: add tests for bpf_ct_set_nat_info kfunc, Lorenzo Bianconi
    • Re: [PATCH v2 bpf-next 4/4] selftests/bpf: add tests for bpf_ct_set_nat_info kfunc, Song Liu
      • Re: [PATCH v2 bpf-next 4/4] selftests/bpf: add tests for bpf_ct_set_nat_info kfunc, Lorenzo Bianconi
  • [PATCH v2 bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
    • Re: [PATCH v2 bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Song Liu
      • Re: [PATCH v2 bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
    • Re: [PATCH v2 bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Alexei Starovoitov
      • Re: [PATCH v2 bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Kumar Kartikeya Dwivedi
        • Re: [PATCH v2 bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Alexei Starovoitov
          • Re: [PATCH v2 bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Kumar Kartikeya Dwivedi
            • Re: [PATCH v2 bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Alexei Starovoitov
              • Re: [PATCH v2 bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Kumar Kartikeya Dwivedi
• [PATCH net-next 0/2] netlink: add range checks for network byte integers, Florian Westphal
  • [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE, Florian Westphal
    • Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE, Jakub Kicinski
      • Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE, Johannes Berg
        • Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE, Florian Westphal
          • Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE, Jakub Kicinski
            • Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE, Florian Westphal
              • Re: [PATCH net-next 1/2] netlink: introduce NLA_POLICY_MAX_BE, Jakub Kicinski
  • [PATCH net-next 2/2] netfilter: nft_payload: reject out-of-range attributes via policy, Florian Westphal
  • Re: [PATCH net-next 0/2] netlink: add range checks for network byte integers, patchwork-bot+netdevbpf
• [PATCH nft v2] json: fix empty statement list output in sets and maps, Fernando Fernandez Mancera
  • Re: [PATCH nft v2] json: fix empty statement list output in sets and maps, Pablo Neira Ayuso
• [PATCH nft] json: fix empty statement list output in sets and maps, Fernando Fernandez Mancera
• CPE-ID?, Nick
  • Re: CPE-ID?, Jeremy Sowden
• [PATCH v4] netlink: Bounds-check struct nlmsgerr creation, Kees Cook
  • Re: [PATCH v4] netlink: Bounds-check struct nlmsgerr creation, patchwork-bot+netdevbpf
• [PATCH nft] json: fix json schema version verification, Fernando Fernandez Mancera
  • Re: [PATCH nft] json: fix json schema version verification, Pablo Neira Ayuso
• [PATCH nft] json: add table map statement support, Fernando Fernandez Mancera
  • Re: [PATCH nft] json: add table map statement support, Pablo Neira Ayuso
• [PATCH bpf-next 0/4] Introduce bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
  • [PATCH bpf-next 2/4] selftests/bpf: Extend KF_TRUSTED_ARGS test for __ref annotation, Lorenzo Bianconi
  • [PATCH bpf-next 1/4] bpf: Add support for per-parameter trusted args, Lorenzo Bianconi
  • [PATCH bpf-next 4/4] selftests/bpf: add tests for bpf_ct_set_nat_info kfunc, Lorenzo Bianconi
  • [PATCH bpf-next 3/4] net: netfilter: add bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
  • Re: [PATCH bpf-next 0/4] Introduce bpf_ct_set_nat_info kfunc helper, Daniel Borkmann
    • Re: [PATCH bpf-next 0/4] Introduce bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
      • Re: [PATCH bpf-next 0/4] Introduce bpf_ct_set_nat_info kfunc helper, Daniel Borkmann
        • Re: [PATCH bpf-next 0/4] Introduce bpf_ct_set_nat_info kfunc helper, Daniel Müller
          • Re: [PATCH bpf-next 0/4] Introduce bpf_ct_set_nat_info kfunc helper, Lorenzo Bianconi
• [PATCH nftables] rule: check address family in set collapse, Derek Hageman
  • Re: [PATCH nftables] rule: check address family in set collapse, Pablo Neira Ayuso
• [PATCH nft v2] json: add set statement list support, Fernando Fernandez Mancera
  • Re: [PATCH nft v2] json: add set statement list support, Pablo Neira Ayuso
  • Re: [PATCH nft v2] json: add set statement list support, Pablo Neira Ayuso
    • Re: [PATCH nft v2] json: add set statement list support, Fernando F. Mancera
• [PATCH v3] netlink: Bounds-check struct nlmsgerr creation, Kees Cook
  • Re: [PATCH v3] netlink: Bounds-check struct nlmsgerr creation, Jakub Kicinski
  • Re: [PATCH v3] netlink: Bounds-check struct nlmsgerr creation, Kees Cook
    • Re: [PATCH v3] netlink: Bounds-check struct nlmsgerr creation, Jakub Kicinski
• [PATCH net 0/4] netfilter: bug fixes for net, Florian Westphal
  • [PATCH net 3/4] netfilter: nf_tables: clean up hook list when offload flags check fails, Florian Westphal
  • [PATCH net 2/4] netfilter: br_netfilter: Drop dst references before setting., Florian Westphal
  • [PATCH net 1/4] netfilter: remove nf_conntrack_helper sysctl and modparam toggles, Florian Westphal
    • Re: [PATCH net 1/4] netfilter: remove nf_conntrack_helper sysctl and modparam toggles, Jakub Kicinski
      • Re: [PATCH net 1/4] netfilter: remove nf_conntrack_helper sysctl and modparam toggles, Florian Westphal
        • Re: [PATCH net 1/4] netfilter: remove nf_conntrack_helper sysctl and modparam toggles, Jakub Kicinski
    • Re: [PATCH net 1/4] netfilter: remove nf_conntrack_helper sysctl and modparam toggles, patchwork-bot+netdevbpf
  • [PATCH net 4/4] netfilter: nf_conntrack_irc: Fix forged IP logic, Florian Westphal
• [PATCH v2] netlink: Bounds-check struct nlmsgerr creation, Kees Cook
  • Re: [PATCH v2] netlink: Bounds-check struct nlmsgerr creation, Jozsef Kadlecsik
    • Re: [PATCH v2] netlink: Bounds-check struct nlmsgerr creation, Kees Cook
• [PATCH 0/2] netlink: Bounds-check struct nlmsgerr creation, Kees Cook
  • [PATCH 1/2] netlink: Bounds-check nlmsg_len(), Kees Cook
    • Re: [PATCH 1/2] netlink: Bounds-check nlmsg_len(), Jakub Kicinski
      • Re: [PATCH 1/2] netlink: Bounds-check nlmsg_len(), Kees Cook
        • Re: [PATCH 1/2] netlink: Bounds-check nlmsg_len(), Jakub Kicinski
          • Re: [PATCH 1/2] netlink: Bounds-check nlmsg_len(), Eric Dumazet
  • [PATCH 2/2] netlink: Bounds-check struct nlmsgerr creation, Kees Cook
    • Re: [PATCH 2/2] netlink: Bounds-check struct nlmsgerr creation, Jakub Kicinski
• [ANNOUNCE] 17th Netfilter Workshop in Seville, Spain, Pablo Neira Ayuso
  • RE: [ANNOUNCE] 17th Netfilter Workshop in Seville, Spain, Vink, Ronald
  • Re: [ANNOUNCE] 17th Netfilter Workshop in Seville, Spain, Arturo Borrero Gonzalez
• [PATCH nft] tests/py: missing userdata in netlink payload, Pablo Neira Ayuso
• [PATCH libnftnl] rule, set_elem: remove trailing \n in userdata snprintf, Pablo Neira Ayuso
• [PATCH nft] json: add set statement list support, Fernando Fernandez Mancera
  • Re: [PATCH nft] json: add set statement list support, Pablo Neira Ayuso
    • Re: [PATCH nft] json: add set statement list support, Fernando F. Mancera
• [PATCH nf] netfilter: nf_tables: clean up hook list when offload flags check fails, Pablo Neira Ayuso
• [conntrack-tools PATCH] local: Avoid sockaddr_un::sun_path buffer overflow, Phil Sutter
• [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Toke Høiland-Jørgensen
    • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
      • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Toke Høiland-Jørgensen
        • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
          • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Toke Høiland-Jørgensen
            • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Pablo Neira Ayuso
              • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
                • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Pablo Neira Ayuso
            • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
              • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Alexei Starovoitov
                • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
                  • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Alexei Starovoitov
                    • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Daniel Borkmann
                      • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Eyal Birger
                        • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Alexei Starovoitov
                          • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Eyal Birger
                      • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
                        • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Alexei Starovoitov
                          • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
                    • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
                      • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Nicolas Dichtel
                        • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Alexei Starovoitov
                          • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Nicolas Dichtel
                    • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Jan Engelhardt
              • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Toke Høiland-Jørgensen
      • Re: [PATCH nf-next] netfilter: nf_tables: add ebpf expression, Florian Westphal
• [PATCH bridge, v3] br_netfilter: Drop dst references before setting., Harsh Modi
  • Re: [PATCH bridge, v3] br_netfilter: Drop dst references before setting., Florian Westphal
    • Re: [PATCH bridge, v3] br_netfilter: Drop dst references before setting., Pablo Neira Ayuso
• [PATCH AUTOSEL 5.15 15/23] netfilter: conntrack: work around exceeded receive window, Sasha Levin
• [PATCH AUTOSEL 5.19 21/33] netfilter: conntrack: work around exceeded receive window, Sasha Levin
• [PATCH nft] src: allow burst 0 for byte ratelimit and use it as default, Pablo Neira Ayuso
  • Re: [PATCH nft] src: allow burst 0 for byte ratelimit and use it as default, Phil Sutter
• [PATCH nf,v3] netfilter: remove nf_conntrack_helper sysctl and modparam toggles, Pablo Neira Ayuso
• [nft PATCH] doc: nft.8: Add missing '-T' in synopsis, Phil Sutter
• [nft PATCH] erec: Dump locations' expressions only if set, Phil Sutter
• [PATCH nf,v2] netfilter: remove nf_conntrack_helper sysctl and modparam toggles, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: check offload flags before splicing hook list, Pablo Neira Ayuso
• [syzbot] memory leak in nft_chain_parse_hook, syzbot
• [PATCH v7 00/18] Network support for Landlock, Konstantin Meskhidze
  • [PATCH v7 02/18] landlock: refactor landlock_find_rule/insert_rule, Konstantin Meskhidze
    • Re: [PATCH v7 02/18] landlock: refactor landlock_find_rule/insert_rule, Mickaël Salaün
      • Re: [PATCH v7 02/18] landlock: refactor landlock_find_rule/insert_rule, Konstantin Meskhidze (A)
        • Re: [PATCH v7 02/18] landlock: refactor landlock_find_rule/insert_rule, Mickaël Salaün
      • Re: [PATCH v7 02/18] landlock: refactor landlock_find_rule/insert_rule, Konstantin Meskhidze (A)
        • Re: [PATCH v7 02/18] landlock: refactor landlock_find_rule/insert_rule, Mickaël Salaün
          • Re: [PATCH v7 02/18] landlock: refactor landlock_find_rule/insert_rule, Konstantin Meskhidze (A)
  • [PATCH v7 03/18] landlock: refactor merge/inherit_ruleset functions, Konstantin Meskhidze
    • Re: [PATCH v7 03/18] landlock: refactor merge/inherit_ruleset functions, Mickaël Salaün
      • Re: [PATCH v7 03/18] landlock: refactor merge/inherit_ruleset functions, Konstantin Meskhidze (A)
        • Re: [PATCH v7 03/18] landlock: refactor merge/inherit_ruleset functions, Mickaël Salaün
  • [PATCH v7 07/18] landlock: user space API network support, Konstantin Meskhidze
    • Re: [PATCH v7 07/18] landlock: user space API network support, Mickaël Salaün
      • Re: [PATCH v7 07/18] landlock: user space API network support, Konstantin Meskhidze (A)
  • [PATCH v7 06/18] landlock: refactor landlock_add_rule syscall, Konstantin Meskhidze
  • [PATCH v7 01/18] landlock: rename access mask, Konstantin Meskhidze
    • Re: [PATCH v7 01/18] landlock: rename access mask, Mickaël Salaün
      • Re: [PATCH v7 01/18] landlock: rename access mask, Konstantin Meskhidze (A)
        • Re: [PATCH v7 01/18] landlock: rename access mask, Mickaël Salaün
  • [PATCH v7 05/18] landlock: refactor helper functions, Konstantin Meskhidze
    • Re: [PATCH v7 05/18] landlock: refactor helper functions, Mickaël Salaün
      • Re: [PATCH v7 05/18] landlock: refactor helper functions, Konstantin Meskhidze (A)
        • Re: [PATCH v7 05/18] landlock: refactor helper functions, Mickaël Salaün
  • [PATCH v7 04/18] landlock: move helper functions, Konstantin Meskhidze
    • Re: [PATCH v7 04/18] landlock: move helper functions, Mickaël Salaün
      • Re: [PATCH v7 04/18] landlock: move helper functions, Konstantin Meskhidze (A)
  • [PATCH v7 09/18] landlock: implement TCP network hooks, Konstantin Meskhidze
    • Re: [PATCH v7 09/18] landlock: implement TCP network hooks, Mickaël Salaün
      • Re: [PATCH v7 09/18] landlock: implement TCP network hooks, Konstantin Meskhidze (A)
        • Re: [PATCH v7 09/18] landlock: implement TCP network hooks, Mickaël Salaün
  • [PATCH v7 10/18] seltests/landlock: move helper function, Konstantin Meskhidze
    • Re: [PATCH v7 10/18] seltests/landlock: move helper function, Mickaël Salaün
      • Re: [PATCH v7 10/18] seltests/landlock: move helper function, Konstantin Meskhidze (A)
  • [PATCH v7 11/18] seltests/landlock: add tests for bind() hooks, Konstantin Meskhidze
    • Re: [PATCH v7 11/18] seltests/landlock: add tests for bind() hooks, Mickaël Salaün
      • Re: [PATCH v7 11/18] seltests/landlock: add tests for bind() hooks, Konstantin Meskhidze (A)
  • [PATCH v7 14/18] seltests/landlock: add rules overlapping test, Konstantin Meskhidze
    • Re: [PATCH v7 14/18] seltests/landlock: add rules overlapping test, Mickaël Salaün
      • Re: [PATCH v7 14/18] seltests/landlock: add rules overlapping test, Konstantin Meskhidze (A)
  • [PATCH v7 13/18] seltests/landlock: add AF_UNSPEC family test, Konstantin Meskhidze
    • Re: [PATCH v7 13/18] seltests/landlock: add AF_UNSPEC family test, Mickaël Salaün
      • Re: [PATCH v7 13/18] seltests/landlock: add AF_UNSPEC family test, Konstantin Meskhidze (A)
  • [PATCH v7 12/18] seltests/landlock: add tests for connect() hooks, Konstantin Meskhidze
  • [PATCH v7 08/18] landlock: add network rules support, Konstantin Meskhidze
    • Re: [PATCH v7 08/18] landlock: add network rules support, Mickaël Salaün
      • Re: [PATCH v7 08/18] landlock: add network rules support, Konstantin Meskhidze (A)
        • Re: [PATCH v7 08/18] landlock: add network rules support, Mickaël Salaün
  • [PATCH v7 18/18] landlock: Document Landlock's network support, Konstantin Meskhidze
    • Re: [PATCH v7 18/18] landlock: Document Landlock's network support, Mickaël Salaün
      • Re: [PATCH v7 18/18] landlock: Document Landlock's network support, Konstantin Meskhidze (A)
        • Re: [PATCH v7 18/18] landlock: Document Landlock's network support, Mickaël Salaün
  • [PATCH v7 17/18] samples/landlock: add network demo, Konstantin Meskhidze
    • Re: [PATCH v7 17/18] samples/landlock: add network demo, Mickaël Salaün
      • Re: [PATCH v7 17/18] samples/landlock: add network demo, Konstantin Meskhidze (A)
        • Re: [PATCH v7 17/18] samples/landlock: add network demo, Mickaël Salaün
  • [PATCH v7 15/18] seltests/landlock: add ruleset expanding test, Konstantin Meskhidze
  • [PATCH v7 16/18] seltests/landlock: add invalid input data test, Konstantin Meskhidze
    • Re: [PATCH v7 16/18] seltests/landlock: add invalid input data test, Mickaël Salaün
      • Re: [PATCH v7 16/18] seltests/landlock: add invalid input data test, Konstantin Meskhidze (A)
        • Re: [PATCH v7 16/18] seltests/landlock: add invalid input data test, Mickaël Salaün
          • Re: [PATCH v7 16/18] seltests/landlock: add invalid input data test, Mickaël Salaün
            • Re: [PATCH v7 16/18] seltests/landlock: add invalid input data test, Konstantin Meskhidze (A)
              • Re: [PATCH v7 16/18] seltests/landlock: add invalid input data test, Mickaël Salaün
• [PATCH nft,v2] optimize: expand implicit set element when merging into concatenation, Pablo Neira Ayuso
• [PATCH 1/4] net-next: frags: move inetpeer from ip4 to inet, Richard Gobert
• [PATCH 4/4] net-next: frags: dynamic timeout under load, Richard Gobert
  • Re: [PATCH 4/4] net-next: frags: dynamic timeout under load, Eric Dumazet
• [PATCH 3/4] net-next: frags: add inetpeer frag_mem tracking, Richard Gobert
  • Re: [PATCH 3/4] net-next: frags: add inetpeer frag_mem tracking, Eric Dumazet
    • Re: [PATCH 3/4] net-next: frags: add inetpeer frag_mem tracking, Richard Gobert
      • Re: [PATCH 3/4] net-next: frags: add inetpeer frag_mem tracking, Eric Dumazet
        • Re: [PATCH 3/4] net-next: frags: add inetpeer frag_mem tracking, Richard Gobert
• [PATCH 2/4] net-next: ip6: fetch inetpeer in ip6frag_init, Richard Gobert
  • Re: [PATCH 2/4] net-next: ip6: fetch inetpeer in ip6frag_init, Eric Dumazet
    • Re: [PATCH 2/4] net-next: ip6: fetch inetpeer in ip6frag_init, Richard Gobert
• [PATCH 0/4] net-next: frags: add adaptive per-peer timeout under load, Richard Gobert
• [PATCH libnftnl] rule, set_elem: fix printing of user data, Jeremy Sowden
  • Re: [PATCH libnftnl] rule, set_elem: fix printing of user data, Pablo Neira Ayuso
• [iptables PATCH] nft: Expand extended error reporting to nft_cmd, too, Phil Sutter
• [PATCH v2 nf-next 0/4] netfilter: conntrack: ignore overly delayed tcp packets, Florian Westphal
  • [PATCH v2 nf-next 3/4] netfilter: conntrack: remove unneeded indent level, Florian Westphal
  • [PATCH v2 nf-next 2/4] netfilter: conntrack: ignore overly delayed tcp packets, Florian Westphal
  • [PATCH v2 nf-next 1/4] netfilter: conntrack: prepare tcp_in_window for ternary return value, Florian Westphal
  • [PATCH v2 nf-next 4/4] netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst, Florian Westphal
• [nft PATCH] doc: nft.8: Extend limit statement's burst value info, Phil Sutter
  • Re: [nft PATCH] doc: nft.8: Extend limit statement's burst value info, Pablo Neira Ayuso
    • Re: [nft PATCH] doc: nft.8: Extend limit statement's burst value info, Phil Sutter
• [PATCH nf] netfilter: remove nf_conntrack_helper sysctl toggle, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: remove nf_conntrack_helper sysctl toggle, Aaron Conole
• [PATCH 1/2] netfilter: nf_conntrack_irc: Tighten matching on DCC message, David Leadbeater
  • [PATCH 2/2] netfilter: nf_conntrack_irc: Fix forged IP logic, David Leadbeater
    • Re: [PATCH 2/2] netfilter: nf_conntrack_irc: Fix forged IP logic, Pablo Neira Ayuso
• [iptables PATCH] xtables-restore: Extend failure error message, Phil Sutter
• [PATCH AUTOSEL 4.14 3/4] netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y, Sasha Levin
• [PATCH AUTOSEL 4.9 2/3] netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y, Sasha Levin
• [PATCH AUTOSEL 4.19 4/5] netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y, Sasha Levin
• [PATCH AUTOSEL 5.4 6/8] netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y, Sasha Levin