Linux Netfilter / IP Tables Devel

• Date Index

• Re: [nft PATCH 1/4] xt: Delay libxtables access until translation, (continued)
  • Re: [nft PATCH 1/4] xt: Delay libxtables access until translation, Phil Sutter
    • Re: [nft PATCH 1/4] xt: Delay libxtables access until translation, Pablo Neira Ayuso
  • [nft PATCH 2/4] xt: Purify enum nft_xt_type, Phil Sutter
  • [nft PATCH 4/4] xt: Fall back to generic printing from translation, Phil Sutter
  • Re: [nft PATCH 0/4] xt: Rewrite unsupported compat expression dumping, Phil Sutter
• [PATCH iptables-nft 0/3] remove escape_quotes support, Florian Westphal
  • [PATCH iptables-nft 3/3] extensions: remove trailing spaces, Florian Westphal
    • Re: [PATCH iptables-nft 3/3] extensions: remove trailing spaces, Phil Sutter
      • Re: [PATCH iptables-nft 3/3] extensions: remove trailing spaces, Florian Westphal
  • [PATCH iptables-nft 2/3] extensions: change expected output for new format, Florian Westphal
  • [PATCH iptables-nft 1/3] xlate: get rid of escape_quotes, Florian Westphal
    • Re: [PATCH iptables-nft 1/3] xlate: get rid of escape_quotes, Phil Sutter
      • Re: [PATCH iptables-nft 1/3] xlate: get rid of escape_quotes, Florian Westphal
• [PATCH nf] nft_set_pipapo: Actually validate intervals in fields after the first one, Stefano Brivio
  • Re: [PATCH nf] nft_set_pipapo: Actually validate intervals in fields after the first one, Pablo Neira Ayuso
• [PATCH nft] src: support for selectors with different byteorder with interval concatenations, Pablo Neira Ayuso
  • Re: [PATCH nft] src: support for selectors with different byteorder with interval concatenations, Eric Garver
• [PATCH conntrackd 1/3] build: don't suppress various warnings, Pablo Neira Ayuso
  • [PATCH conntrackd 2/3] network: Fix -Wstrict-prototypes, Pablo Neira Ayuso
  • [PATCH conntrackd 3/3] Fix -Wimplicit-function-declaration, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH conntrackd 1/3] build: don't suppress various warnings, Pablo Neira Ayuso
    • [PATCH conntrack 2/2] conntrack: do not silence EEXIST error, use NLM_F_EXCL, Pablo Neira Ayuso
    • [PATCH conntrack 1/2] conntrack: do not ignore errors coming from the kernel, Pablo Neira Ayuso
    • [PATCH conntrackd 2/3] network: Fix -Wstrict-prototypes, Pablo Neira Ayuso
    • Re: [PATCH conntrackd 1/3] build: don't suppress various warnings, Pablo Neira Ayuso
• [iptables PATCH 00/13] Extensions: Review xlate callbacks, Phil Sutter
  • [iptables PATCH 01/13] extensions: libebt_mark: Fix mark target xlate, Phil Sutter
  • [iptables PATCH 07/13] extensions: TCPMSS: Use xlate callback for IPv6, too, Phil Sutter
  • [iptables PATCH 08/13] extensions: TOS: Fix v1 xlate callback, Phil Sutter
  • [iptables PATCH 11/13] extensions: libebt_log: Add comment to clarify xlate callback, Phil Sutter
  • [iptables PATCH 10/13] extensions: tcp: Translate TCP option match, Phil Sutter
  • [iptables PATCH 09/13] extensions: ecn: Sanitize xlate callback, Phil Sutter
  • [iptables PATCH 03/13] extensions: libebt_redirect: Fix xlate return code, Phil Sutter
  • [iptables PATCH 02/13] extensions: libebt_mark: Fix xlate test case, Phil Sutter
  • [iptables PATCH 12/13] extensions: frag: Add comment to clarify xlate callback, Phil Sutter
  • [iptables PATCH 06/13] extensions: MARK: Sanitize MARK_xlate(), Phil Sutter
  • [iptables PATCH 13/13] extensions: ipcomp: Add comment to clarify xlate callback, Phil Sutter
  • [iptables PATCH 05/13] extensions: CONNMARK: Fix xlate callback, Phil Sutter
  • [iptables PATCH 04/13] extensions: libipt_ttl: Sanitize xlate callback, Phil Sutter
  • Re: [iptables PATCH 00/13] Extensions: Review xlate callbacks, Florian Westphal
    • Re: [iptables PATCH 00/13] Extensions: Review xlate callbacks, Phil Sutter
• [PATCH iptables-nft] iptables-nft: exit nonzero when iptables-save cannot decode all expressions, Florian Westphal
  • Re: [PATCH iptables-nft] iptables-nft: exit nonzero when iptables-save cannot decode all expressions, Phil Sutter
• [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Florian Westphal
  • Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Eric Garver
  • Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, kernel test robot
  • Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Pablo Neira Ayuso
    • Re: [PATCH v2 nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: set icmpv6 redirects as RELATED, Florian Westphal
• [PATCH 6.0 306/314] netlink: Bounds-check struct nlmsgerr creation, Greg Kroah-Hartman
• [PATCH 0/1] ipset patch for the nf-next tree, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: ipset: Add support for new bitmask parameter, Jozsef Kadlecsik
• [PATCHv7 0/6] ipvs: Use kthreads for stats, Julian Anastasov
  • [PATCHv7 1/6] ipvs: add rcu protection to stats, Julian Anastasov
  • [PATCHv7 5/6] ipvs: add est_cpulist and est_nice sysctl vars, Julian Anastasov
  • [PATCHv7 6/6] ipvs: run_estimation should control the kthread tasks, Julian Anastasov
  • [PATCHv7 3/6] ipvs: use u64_stats_t for the per-cpu counters, Julian Anastasov
  • [PATCHv7 2/6] ipvs: use common functions for stats allocation, Julian Anastasov
  • [PATCHv7 4/6] ipvs: use kthreads for stats estimation, Julian Anastasov
  • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Pablo Neira Ayuso
    • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Pablo Neira Ayuso
      • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Julian Anastasov
        • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Pablo Neira Ayuso
          • Re: [PATCHv7 0/6] ipvs: Use kthreads for stats, Julian Anastasov
• [PATCH ulogd2 00/34] Refactor of the DB output plug-ins, Jeremy Sowden
  • [PATCH ulogd2 08/34] src: parenthesize config-entry macro arguments, Jeremy Sowden
  • [PATCH ulogd2 06/34] src: remove some trailing white space, Jeremy Sowden
  • [PATCH ulogd2 01/34] ulogd: fix parse-error check, Jeremy Sowden
  • [PATCH ulogd2 03/34] output: JSON: remove incorrect config value check, Jeremy Sowden
  • [PATCH ulogd2 09/34] src: define constructors and destructors consistently, Jeremy Sowden
  • [PATCH ulogd2 02/34] filter: fix buffer overruns in filter plug-ins, Jeremy Sowden
  • [PATCH ulogd2 04/34] db: fix back-log capacity checks, Jeremy Sowden
  • [PATCH ulogd2 05/34] build: add checks to configure.ac, Jeremy Sowden
  • [PATCH ulogd2 07/34] src: remove zero-valued config-key fields, Jeremy Sowden
  • [PATCH ulogd2 11/34] src: remove superfluous casts, Jeremy Sowden
  • [PATCH ulogd2 22/34] db: refactor ring-buffer, Jeremy Sowden
  • [PATCH ulogd2 17/34] db: change return type of two functions to `void`, Jeremy Sowden
  • [PATCH ulogd2 15/34] db: reorganize source, Jeremy Sowden
  • [PATCH ulogd2 33/34] output: pgsql: add prep & exec support, Jeremy Sowden
  • [PATCH ulogd2 10/34] src: remove `TIME_ERR` macro, Jeremy Sowden
  • [PATCH ulogd2 26/34] db: avoid cancelling ring-buffer thread, Jeremy Sowden
  • [PATCH ulogd2 27/34] db, IP2BIN: defer formatting of raw strings, Jeremy Sowden
  • [PATCH ulogd2 23/34] db: refactor backlog, Jeremy Sowden
  • [PATCH ulogd2 31/34] output: pgsql: remove variable-length arrays, Jeremy Sowden
  • [PATCH ulogd2 32/34] output: pgsql: tidy up `open_db_pgsql` and fix memory leak, Jeremy Sowden
  • [PATCH ulogd2 19/34] db: improve calculation of sql statement length, Jeremy Sowden
  • [PATCH ulogd2 14/34] output: de-duplicate allocation of input keys, Jeremy Sowden
  • [PATCH ulogd2 29/34] output: mysql: add prep & exec support, Jeremy Sowden
  • [PATCH ulogd2 18/34] db: open-code `_loop_reconnect_db`, Jeremy Sowden
  • [PATCH ulogd2 34/34] output: sqlite3: reimplement using the common DB API, Jeremy Sowden
  • [PATCH ulogd2 20/34] db: refactor configuration, Jeremy Sowden
  • [PATCH ulogd2 13/34] output: remove zero-initialized `struct ulogd_plugin` members, Jeremy Sowden
  • [PATCH ulogd2 21/34] db: refactor ring-buffer initialization, Jeremy Sowden
  • [PATCH ulogd2 12/34] conffile: replace malloc+strcpy with strdup, Jeremy Sowden
  • [PATCH ulogd2 25/34] db: synchronize access to ring-buffer, Jeremy Sowden
  • [PATCH ulogd2 24/34] db: use `struct db_stmt` objects more widely, Jeremy Sowden
  • [PATCH ulogd2 30/34] output: pgsql: remove a couple of struct members, Jeremy Sowden
  • [PATCH ulogd2 28/34] db: add prep & exec support, Jeremy Sowden
  • [PATCH ulogd2 16/34] db: use consistent integer return values to indicate errors, Jeremy Sowden
• [ANNOUNCE] ipset 7.16 released, Jozsef Kadlecsik
• [PATCH] netfilter: nf_flow_table: add missing locking, Felix Fietkau
  • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Felix Fietkau
    • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Eric Dumazet
      • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Felix Fietkau
        • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Jakub Kicinski
          • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Felix Fietkau
  • Re: [PATCH] netfilter: nf_flow_table: add missing locking, Pablo Neira Ayuso
• [iptables-nft RFC 0/5] update iptables-nft dissector, Florian Westphal
  • [iptables-nft RFC 2/5] iptables-nft: do not refuse to decode table with unsupported expressions, Florian Westphal
  • [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Florian Westphal
    • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Phil Sutter
      • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Florian Westphal
        • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Phil Sutter
          • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Florian Westphal
            • Re: [iptables-nft RFC 1/5] nft-shared: dump errors on stdout to garble output, Phil Sutter
  • [iptables-nft RFC 3/5] nft: check for unknown meta keys, Florian Westphal
  • [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Florian Westphal
    • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Phil Sutter
      • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Florian Westphal
        • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Phil Sutter
          • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Florian Westphal
            • Re: [iptables-nft RFC 4/5] xlate-test: extra-escape of '"' for replay mode, Phil Sutter
  • [iptables-nft RFC 5/5] generic.xlate: make one replay test case work, Florian Westphal
    • Re: [iptables-nft RFC 5/5] generic.xlate: make one replay test case work, Phil Sutter
• [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
  • [nft PATCH v2 2/4] xt: Implement dump and restore support, Phil Sutter
  • [nft PATCH v2 1/4] xt: Delay libxtables access until translation, Phil Sutter
  • [nft PATCH v2 3/4] xt: Put match/target translation into own functions, Phil Sutter
  • [nft PATCH v2 4/4] xt: Detect xlate callback failure, Phil Sutter
  • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Florian Westphal
    • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Pablo Neira Ayuso
      • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
    • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
      • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Pablo Neira Ayuso
        • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
          • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Florian Westphal
            • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
              • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Pablo Neira Ayuso
                • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
                  • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Florian Westphal
                    • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Pablo Neira Ayuso
                      • Re: [nft PATCH v2 0/4] xt: Implement dump and restore support, Phil Sutter
• netfilter bpf-jit patchset: test results, Florian Westphal
• Missing definition of struct "pkt_buff" for libnetfilter_queue, Shockedder
  • Re: Missing definition of struct "pkt_buff" for libnetfilter_queue, Jeremy Sowden
    • Message not available
      • Re: Missing definition of struct "pkt_buff" for libnetfilter_queue, Jeremy Sowden
• [iptables PATCH] extensions: mark: Test double bitwise in a rule, Phil Sutter
  • Re: [iptables PATCH] extensions: mark: Test double bitwise in a rule, Phil Sutter
• [PATCH net-next/netfilter] netfilter: nft_inner: fix IS_ERR() vs NULL check, Dan Carpenter
  • <Possible follow-ups>
  • [PATCH net-next/netfilter] netfilter: nft_inner: fix IS_ERR() vs NULL check, Dan Carpenter
    • Re: [PATCH net-next/netfilter] netfilter: nft_inner: fix IS_ERR() vs NULL check, Pablo Neira Ayuso
• [PATCH libnftnl] src: replace nftnl_*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr(), Pablo Neira Ayuso
• [PATCH net-next,v2 0/6] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 1/6] netfilter: nft_payload: use __be16 to store gre version, Pablo Neira Ayuso
    • Re: [PATCH net-next 1/6] netfilter: nft_payload: use __be16 to store gre version, patchwork-bot+netdevbpf
  • [PATCH net-next 2/6] netfilter: nft_inner: fix return value check in nft_inner_parse_l2l3(), Pablo Neira Ayuso
  • [PATCH net-next 4/6] netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET, Pablo Neira Ayuso
  • [PATCH net-next 3/6] netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters, Pablo Neira Ayuso
  • [PATCH net-next 6/6] netfilter: conntrack: use siphash_4u64, Pablo Neira Ayuso
  • [PATCH net-next 5/6] netfilter: rpfilter/fib: clean up some inconsistent indenting, Pablo Neira Ayuso
• [PATCH iptables] nft-shared: replace nftnl_expr_get_data() by nftnl_expr_get(), Pablo Neira Ayuso
  • Re: [PATCH iptables] nft-shared: replace nftnl_expr_get_data() by nftnl_expr_get(), Phil Sutter
• [PATCH iptables] nft: replace nftnl_.*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr(), Pablo Neira Ayuso
  • Re: [PATCH iptables] nft: replace nftnl_.*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr(), Phil Sutter
• [PATCH libnftnl] example: remove nftnl_batch_is_supported() call, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: add __force annotation to silence harmless warning, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: add __force annotation to silence harmless warning, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: do not set up extensions for end interval, Pablo Neira Ayuso
• [iptables PATCH] Drop extra newline from xtables_error() calls, Phil Sutter
  • Re: [iptables PATCH] Drop extra newline from xtables_error() calls, Phil Sutter
• [iptables PATCH 0/7] De-duplicate code here and there, Phil Sutter
  • [iptables PATCH 6/7] extensions: Collate ICMP types/codes in libxt_icmp.h, Phil Sutter
  • [iptables PATCH 3/7] extensions: libip*t_LOG: Merge extensions, Phil Sutter
  • [iptables PATCH 4/7] extensions: libebt_ip: Include kernel header, Phil Sutter
  • [iptables PATCH 7/7] extensions: Unify ICMP parser into libxt_icmp.h, Phil Sutter
  • [iptables PATCH 1/7] xshared: Share make_delete_mask() between ip{,6}tables, Phil Sutter
  • [iptables PATCH 2/7] nft-shared: Introduce port_match_single_to_range(), Phil Sutter
  • [iptables PATCH 5/7] extensions: libebt_arp, libebt_ip: Use xtables_ipparse_any(), Phil Sutter
  • Re: [iptables PATCH 0/7] De-duplicate code here and there, Phil Sutter
• [nft PATCH 0/3] xt: Implement dump and restore support, Phil Sutter
  • [nft PATCH 1/3] xt: Delay libxtables access until translation, Phil Sutter
  • [nft PATCH 2/3] xt: Implement dump and restore support, Phil Sutter
  • [nft PATCH 3/3] xt: Put match/target translation into own functions, Phil Sutter
• [PATCH nft] monitor: missing cache and set handle initialization, Pablo Neira Ayuso
• [linux-next:master] BUILD REGRESSION 382d2f9e739bc6f151c718b38537ae522ff848cd, kernel test robot
• [PATCH v3 0/6] netfilter: ipset: Add support for new bitmask parameter (userspace), Vishwanath Pai
  • [PATCH v3 1/6] netfilter: ipset: Add support for new bitmask parameter, Vishwanath Pai
  • [PATCH v3 2/6] netfilter: ipset: Add bitmask support to hash:ip, Vishwanath Pai
  • [PATCH v3 3/6] netfilter: ipset: Add bitmask support to hash:ipport, Vishwanath Pai
  • [PATCH v3 4/6] netfilter: ipset: Add bitmask support to hash:netnet, Vishwanath Pai
  • [PATCH v3 5/6] netfilter: ipset: Update the man page to include netmask/bitmask options, Vishwanath Pai
  • [PATCH v3 6/6] netfilter: ipset: add tests for the new bitmask feature, Vishwanath Pai
  • Re: [PATCH v3 0/6] netfilter: ipset: Add support for new bitmask parameter (userspace), Jozsef Kadlecsik
• [PATCH v3] netfilter: ipset: Add support for new bitmask parameter, Vishwanath Pai
• RE: PATCH ulogd2 filter BASE ARP packet IP addresses, Robert O'Brien
  • Re: PATCH ulogd2 filter BASE ARP packet IP addresses, Pablo Neira Ayuso
    • RE: PATCH ulogd2 filter BASE ARP packet IP addresses, Robert O'Brien
      • Re: PATCH ulogd2 filter BASE ARP packet IP addresses, Pablo Neira Ayuso
        • Re: PATCH ulogd2 filter BASE ARP packet IP addresses, Jeremy Sowden
          • Re: PATCH ulogd2 filter BASE ARP packet IP addresses, Jeremy Sowden
• Avoid race between tcp_packet packet processing and timeout set by a netfilter CTA_TIMEOUT message, Tula Kraiser
  • Re: Avoid race between tcp_packet packet processing and timeout set by a netfilter CTA_TIMEOUT message, Pablo Neira Ayuso
• [ANNOUNCE] libnftnl 1.2.4 release, Pablo Neira Ayuso
• [PATCH v2] netfilter: ctmark: Fix data-races around ctmark, Daniel Xu
  • Re: [PATCH v2] netfilter: ctmark: Fix data-races around ctmark, Pablo Neira Ayuso
• [PATCH] netfilter: ctmark: Fix data-races around ctmark, Daniel Xu
  • Re: [PATCH] netfilter: ctmark: Fix data-races around ctmark, Florian Westphal
• [PATCH nf-next] netfilter: merge ipv4+ipv6 confirm functions, Florian Westphal
  • Re: [PATCH nf-next] netfilter: merge ipv4+ipv6 confirm functions, Pablo Neira Ayuso
• [PATCH nft] doc: document a few reset commands supported by the parser, Pablo Neira Ayuso
• [nf PATCH] selftests: netfilter: Fix and review rpath.sh, Phil Sutter
  • Re: [nf PATCH] selftests: netfilter: Fix and review rpath.sh, Pablo Neira Ayuso
• [iptables PATCH 0/3] Extend xlate-test to replay results, Phil Sutter
  • [iptables PATCH 3/3] tests: xlate-test: Replay results for reverse direction testing, Phil Sutter
  • [iptables PATCH 2/3] tests: xlate-test.py: Introduce run_proc(), Phil Sutter
  • [iptables PATCH 1/3] tests: xlate-test: Cleanup file reading loop, Phil Sutter
  • Re: [iptables PATCH 0/3] Extend xlate-test to replay results, Phil Sutter
• [GIT PULL] treewide: timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • Re: [GIT PULL] treewide: timers: Use timer_shutdown*() before freeing timers, Thomas Gleixner
• [PATCH v6a 0/5] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
• [PATCH v3] netfilter: conntrack: add sctp DATA_SENT state, Sriram Yagnaraman
  • Re: [PATCH v3] netfilter: conntrack: add sctp DATA_SENT state, Pablo Neira Ayuso
    • Re: [PATCH v3] netfilter: conntrack: add sctp DATA_SENT state, Sriram Yagnaraman
• [PATCH ulogd2] doc: mysql: declare MAC protocol columns unsigned, Jeremy Sowden
  • Re: [PATCH ulogd2] doc: mysql: declare MAC protocol columns unsigned, Pablo Neira Ayuso
• [PATCH nft] optimize: handle prefix and range when merging into set + concatenation, Pablo Neira Ayuso
• [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • [PATCH v4a 17/38] timers: net: Use timer_shutdown_sync() before freeing timer, Steven Rostedt
  • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
    • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
    • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
      • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
      • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
        • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
        • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
      • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Jason A. Donenfeld
        • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
          • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
          • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
    • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • Re: [PATCH v4a 00/38] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
• [nf-next RFC] netfilter: nf_tables: Compatibility interface for nft_rule, Phil Sutter
  • Re: [nf-next RFC] netfilter: nf_tables: Compatibility interface for nft_rule, Pablo Neira Ayuso
    • Re: [nf-next RFC] netfilter: nf_tables: Compatibility interface for nft_rule, Phil Sutter
• [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
  • [RFC][PATCH v3 19/33] timers: net: Use timer_shutdown_sync() before freeing timer, Steven Rostedt
  • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
  • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
    • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
      • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Linus Torvalds
      • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Steven Rostedt
        • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
      • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
  • Re: [RFC][PATCH v3 00/33] timers: Use timer_shutdown*() before freeing timers, Guenter Roeck
• [PATCH] netfilter: rpfilter/fib: clean up some inconsistent indenting, Jiapeng Chong
• [PATCH] netfilter: Cleanup nft_net->module_list from nf_tables_exit_net(), Shigeru Yoshida
  • Re: [PATCH] netfilter: Cleanup nft_net->module_list from nf_tables_exit_net(), Florian Westphal
• [iptables PATCH 0/6] Merge NAT extensions, Phil Sutter
  • [iptables PATCH 2/6] extensions: *NAT: Drop NF_NAT_RANGE_PROTO_RANDOM* flag checks, Phil Sutter
  • [iptables PATCH 1/6] extensions: DNAT: Fix bad IP address error reporting, Phil Sutter
  • [iptables PATCH 5/6] extensions: DNAT: Rename some symbols, Phil Sutter
  • [iptables PATCH 3/6] extensions: DNAT: Use __DNAT_xlate for REDIRECT, too, Phil Sutter
  • [iptables PATCH 6/6] extensions: Merge SNAT, DNAT, REDIRECT and MASQUERADE, Phil Sutter
  • [iptables PATCH 4/6] extensions: DNAT: Generate print, save and xlate callbacks, Phil Sutter
  • Re: [iptables PATCH 0/6] Merge NAT extensions, Phil Sutter
• [PATCH] netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg(), Ziyang Xuan
  • Re: [PATCH] netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg(), Florian Westphal
• [PATCH net 0/7] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH net 2/7] netfilter: nf_tables: release flow rule object from commit path, Pablo Neira Ayuso
  • [PATCH net 1/7] netfilter: nf_tables: netlink notifier might race to release objects, Pablo Neira Ayuso
    • Re: [PATCH net 1/7] netfilter: nf_tables: netlink notifier might race to release objects, patchwork-bot+netdevbpf
  • [PATCH net 3/7] ipvs: use explicitly signed chars, Pablo Neira Ayuso
  • [PATCH net 4/7] ipvs: fix WARNING in __ip_vs_cleanup_batch(), Pablo Neira Ayuso
  • [PATCH net 6/7] netfilter: nf_nat: Fix possible memory leak in nf_nat_init(), Pablo Neira Ayuso
  • [PATCH net 5/7] ipvs: fix WARNING in ip_vs_app_net_cleanup(), Pablo Neira Ayuso
  • [PATCH net 7/7] netfilter: ipset: enforce documented limit to prevent allocating huge memory, Pablo Neira Ayuso
• [PATCH nf-next v2] netfilter: conntrack: use siphash_4u64, Florian Westphal
• [ANNOUNCE] ulogd 2.0.8 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] ulogd 2.0.8 release, Jan Engelhardt
    • Re: [ANNOUNCE] ulogd 2.0.8 release, Pablo Neira Ayuso
• [PATCH v2] netfilter: ipset: enforce documented limit to prevent allocating huge memory, Jozsef Kadlecsik
  • Re: [PATCH v2] netfilter: ipset: enforce documented limit to prevent allocating huge memory, Pablo Neira Ayuso
• [PATCH net v2] netfilter: nf_nat: Fix possible memory leak in nf_nat_init(), Chen Zhongjin
  • Re: [PATCH net v2] netfilter: nf_nat: Fix possible memory leak in nf_nat_init(), Pablo Neira Ayuso
• [PATCH] netfilter: nf_nat: Fix possible memory leak in nf_nat_init(), Chen Zhongjin
  • Re: [PATCH] netfilter: nf_nat: Fix possible memory leak in nf_nat_init(), Chen Zhongjin
• [PATCH net,v2 0/2] fix WARNING when removing file in ipvs, Zhengchao Shao
  • [PATCH net,v2 2/2] ipvs: fix WARNING in ip_vs_app_net_cleanup(), Zhengchao Shao
  • [PATCH net,v2 1/2] ipvs: fix WARNING in __ip_vs_cleanup_batch(), Zhengchao Shao
  • Re: [PATCH net,v2 0/2] fix WARNING when removing file in ipvs, Julian Anastasov
• [PATCH nft 1/2] netlink_delinearize: complete payload expression in payload statement, Pablo Neira Ayuso
  • [PATCH nft 2/2] payload: do not kill dependency for proto_unknown, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2] payload: do not kill dependency for proto_unknown, Florian Westphal
• [PATCH net] ipvs: fix WARNING in __ip_vs_cleanup_batch(), Zhengchao Shao
  • Re: [PATCH net] ipvs: fix WARNING in __ip_vs_cleanup_batch(), Julian Anastasov
    • Re: [PATCH net] ipvs: fix WARNING in __ip_vs_cleanup_batch(), shaozhengchao
• ulogd2 release?, Jeremy Sowden
  • Re: ulogd2 release?, Pablo Neira Ayuso
• [PATCH v2 0/2] netfilter: conntrack: improve SCTP multihoming, sriram . yagnaraman
  • [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry, sriram . yagnaraman
    • Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry, Florian Westphal
      • Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry, Sriram Yagnaraman
        • Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry, Florian Westphal
          • Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry, Sriram Yagnaraman
            • Re: [PATCH v2 1/2] netfilter: conntrack: introduce no_random_port proc entry, Marcelo Ricardo Leitner
  • [PATCH v2 2/2] netfilter: conntrack: add sctp DATA_SENT state, sriram . yagnaraman
    • Re: [PATCH v2 2/2] netfilter: conntrack: add sctp DATA_SENT state, Florian Westphal
    • Re: [PATCH v2 2/2] netfilter: conntrack: add sctp DATA_SENT state, Marcelo Ricardo Leitner
• [syzbot] WARNING in nf_tables_exit_net, syzbot
• [PATCH nft v5] src: add support to command "destroy", Fernando Fernandez Mancera
• [PATCH nf-next v3] netfilter: nf_tables: add support to destroy operation, Fernando Fernandez Mancera
  • Re: [PATCH nf-next v3] netfilter: nf_tables: add support to destroy operation, Pablo Neira Ayuso
    • Re: [PATCH nf-next v3] netfilter: nf_tables: add support to destroy operation, Fernando Fernandez Mancera
• [PATCH 0/2] netfilter: nf_ct_sctp: improve SCTP multihoming, sriram . yagnaraman
  • [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry, sriram . yagnaraman
    • Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry, kernel test robot
    • Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry, kernel test robot
    • Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry, kernel test robot
    • Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry, kernel test robot
    • Re: [PATCH 1/2] netfilter: nf_ct_sctp: introduce no_random_port proc entry, kernel test robot
  • [PATCH 2/2] netfilter: nf_ct_sctp: add DATA_SENT conntrack state, sriram . yagnaraman
• [PATCH nf-next,v2] netfilter: nft_payload: use __be16 to store gre version, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_payload: use __b16 to store gre version, Pablo Neira Ayuso
• [PATCH nft v4] src: add support to command "destroy", Fernando Fernandez Mancera
  • Re: [PATCH nft v4] src: add support to command "destroy", Phil Sutter
    • Re: [PATCH nft v4] src: add support to command "destroy", Fernando Fernandez Mancera
• [PATCH nf-next v2] netfilter: nf_tables: add support to destroy operation, Fernando Fernandez Mancera
  • Re: [PATCH nf-next v2] netfilter: nf_tables: add support to destroy operation, Phil Sutter
    • Re: [PATCH nf-next v2] netfilter: nf_tables: add support to destroy operation, Fernando Fernandez Mancera
• [PATCH nf-next] netfilter: nf_tables: add support to destroy operation, Fernando Fernandez Mancera
• [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
  • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
    • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Linus Torvalds
      • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
        • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Linus Torvalds
          • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
            • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
            • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
              • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
                • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Jakub Kicinski
                  • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Paolo Abeni
                    • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
                      • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Eric Dumazet
                        • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
                          • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Guenter Roeck
        • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Steven Rostedt
          • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Guenter Roeck
  • <Possible follow-ups>
  • Re: [RFC][PATCH v2 19/31] timers: net: Use del_timer_shutdown() before freeing timer, Guenter Roeck
• [PATCH] netfilter: ipset: enforce documented limit to prevent allocating huge memory, Jozsef Kadlecsik
  • Re: [PATCH] netfilter: ipset: enforce documented limit to prevent allocating huge memory, Daniel Xu
• [PATCH] ipvs: use explicitly signed chars, Jason A. Donenfeld
  • Re: [PATCH] ipvs: use explicitly signed chars, Julian Anastasov
    • Re: [PATCH] ipvs: use explicitly signed chars, Jason A. Donenfeld
      • Re: [PATCH] ipvs: use explicitly signed chars, Julian Anastasov
  • Re: [PATCH] ipvs: use explicitly signed chars, Jason A. Donenfeld
  • Re: [PATCH] ipvs: use explicitly signed chars, Pablo Neira Ayuso
• [PATCH nf 1/2] netfilter: nf_tables: netlink notifier might race to release objects, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nf_tables: release flow rule object from commit path, Pablo Neira Ayuso
• ip_set_hash_netiface, Daniel Xu
  • Re: ip_set_hash_netiface, Jozsef Kadlecsik
    • Re: ip_set_hash_netiface, Daniel Xu
    • RE: ip_set_hash_netiface, David Laight
      • RE: ip_set_hash_netiface, Jozsef Kadlecsik
• [PATCH nf] netfilter: nf_tables: avoid access to free'd chain info in nft_commit_release, Florian Westphal
• [PATCH nft v3] src: add support to command "destroy", Fernando Fernandez Mancera
  • Re: [PATCH nft v3] src: add support to command "destroy", Pablo Neira Ayuso
• [PATCH nft v2] src: add support to command "destroy", Fernando Fernandez Mancera
• [PATCH nft] src: add support to command "destroy", Fernando Fernandez Mancera
• [PATCH] Periodically flow expire from flow offload tables, Michael Lilja
  • Re: [PATCH] Periodically flow expire from flow offload tables, Pablo Neira Ayuso
    • Re: [PATCH] Periodically flow expire from flow offload tables, Michael Lilja
      • Re: [PATCH] Periodically flow expire from flow offload tables, Pablo Neira Ayuso
        • Re: [PATCH] Periodically flow expire from flow offload tables, Michael Lilja
          • Re: [PATCH] Periodically flow expire from flow offload tables, Pablo Neira Ayuso
            • Re: [PATCH] Periodically flow expire from flow offload tables, Michael Lilja
              • Re: [PATCH] Periodically flow expire from flow offload tables, Michael Lilja
                • Re: [PATCH] Periodically flow expire from flow offload tables, Pablo Neira Ayuso
                  • Re: [PATCH] Periodically flow expire from flow offload tables, Michael Lilja
• [PATCH RFC xtables-addons] build: support for linux 6.1, John Thomson
  • [xtables-addons PATCH v1] build: support for linux 6.1, John Thomson
    • Re: [xtables-addons PATCH v1] build: support for linux 6.1, Jan Engelhardt
• [PATCH v8 00/12] Network support for Landlock, Konstantin Meskhidze
  • [PATCH v8 05/12] landlock: Refactor unmask_layers() and init_layer_masks(), Konstantin Meskhidze
    • Re: [PATCH v8 05/12] landlock: Refactor unmask_layers() and init_layer_masks(), Mickaël Salaün
      • Re: [PATCH v8 05/12] landlock: Refactor unmask_layers() and init_layer_masks(), Konstantin Meskhidze (A)
  • [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule, Konstantin Meskhidze
    • Re: [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule, Mickaël Salaün
      • [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Mickaël Salaün
        • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Mickaël Salaün
          • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Konstantin Meskhidze (A)
            • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Mickaël Salaün
              • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Konstantin Meskhidze (A)
              • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Konstantin Meskhidze (A)
                • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Mickaël Salaün
                  • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Konstantin Meskhidze (A)
        • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Konstantin Meskhidze (A)
          • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Mickaël Salaün
            • Re: [PATCH] landlock: Allow filesystem layout changes for domains without such rule type, Konstantin Meskhidze (A)
      • Re: [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule, Mickaël Salaün
        • Re: [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule, Konstantin Meskhidze (A)
      • Re: [PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule, Konstantin Meskhidze (A)
  • [PATCH v8 08/12] landlock: Implement TCP network hooks, Konstantin Meskhidze
    • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Mickaël Salaün
      • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Konstantin Meskhidze (A)
        • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Mickaël Salaün
          • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Konstantin Meskhidze (A)
            • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Mickaël Salaün
              • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Konstantin Meskhidze (A)
                • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Mickaël Salaün
      • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Konstantin Meskhidze (A)
        • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Mickaël Salaün
          • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Konstantin Meskhidze (A)
            • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Mickaël Salaün
              • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Konstantin Meskhidze (A)
                • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Mickaël Salaün
                  • Re: [PATCH v8 08/12] landlock: Implement TCP network hooks, Konstantin Meskhidze (A)
  • [PATCH v8 09/12] selftests/landlock: Share enforce_ruleset(), Konstantin Meskhidze
    • Re: [PATCH v8 09/12] selftests/landlock: Share enforce_ruleset(), Mickaël Salaün
      • Re: [PATCH v8 09/12] selftests/landlock: Share enforce_ruleset(), Konstantin Meskhidze (A)
  • [PATCH v8 07/12] landlock: Add network rules support, Konstantin Meskhidze
    • Re: [PATCH v8 07/12] landlock: Add network rules support, Mickaël Salaün
      • Re: [PATCH v8 07/12] landlock: Add network rules support, Konstantin Meskhidze (A)
        • Re: [PATCH v8 07/12] landlock: Add network rules support, Mickaël Salaün
          • Re: [PATCH v8 07/12] landlock: Add network rules support, Konstantin Meskhidze (A)
      • Re: [PATCH v8 07/12] landlock: Add network rules support, Konstantin Meskhidze (A)
      • Re: [PATCH v8 07/12] landlock: Add network rules support, Konstantin Meskhidze (A)
        • Re: [PATCH v8 07/12] landlock: Add network rules support, Mickaël Salaün
          • Re: [PATCH v8 07/12] landlock: Add network rules support, Konstantin Meskhidze (A)
            • Re: [PATCH v8 07/12] landlock: Add network rules support, Dan Carpenter
              • Re: [PATCH v8 07/12] landlock: Add network rules support, Konstantin Meskhidze (A)
                • Re: [PATCH v8 07/12] landlock: Add network rules support, Dan Carpenter
                  • Re: [PATCH v8 07/12] landlock: Add network rules support, Konstantin Meskhidze (A)
                    • Re: [PATCH v8 07/12] landlock: Add network rules support, Dan Carpenter
                      • Re: [PATCH v8 07/12] landlock: Add network rules support, Konstantin Meskhidze (A)
  • [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks(), Konstantin Meskhidze
    • Re: [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks(), Mickaël Salaün
      • Re: [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks(), Konstantin Meskhidze (A)
        • Re: [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks(), Mickaël Salaün
          • Re: [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks(), Konstantin Meskhidze (A)
  • [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network, Konstantin Meskhidze
    • Re: [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network, Mickaël Salaün
      • Re: [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network, Konstantin Meskhidze (A)
        • Re: [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network, Mickaël Salaün
          • Re: [PATCH v8 10/12] selftests/landlock: Add 10 new test suites dedicated to network, Konstantin Meskhidze (A)
  • [PATCH v8 01/12] landlock: Make ruleset's access masks more generic, Konstantin Meskhidze
    • Re: [PATCH v8 01/12] landlock: Make ruleset's access masks more generic, Mickaël Salaün
      • Re: [PATCH v8 01/12] landlock: Make ruleset's access masks more generic, Konstantin Meskhidze (A)
        • Re: [PATCH v8 01/12] landlock: Make ruleset's access masks more generic, Mickaël Salaün
          • Re: [PATCH v8 01/12] landlock: Make ruleset's access masks more generic, Konstantin Meskhidze (A)
  • [PATCH v8 06/12] landlock: Refactor landlock_add_rule() syscall, Konstantin Meskhidze
    • Re: [PATCH v8 06/12] landlock: Refactor landlock_add_rule() syscall, Mickaël Salaün
      • Re: [PATCH v8 06/12] landlock: Refactor landlock_add_rule() syscall, Konstantin Meskhidze (A)
  • [PATCH v8 03/12] landlock: Refactor merge/inherit_ruleset functions, Konstantin Meskhidze
    • Re: [PATCH v8 03/12] landlock: Refactor merge/inherit_ruleset functions, Mickaël Salaün
      • Re: [PATCH v8 03/12] landlock: Refactor merge/inherit_ruleset functions, Konstantin Meskhidze (A)
  • [PATCH v8 11/12] samples/landlock: Add network demo, Konstantin Meskhidze
    • Re: [PATCH v8 11/12] samples/landlock: Add network demo, Mickaël Salaün
      • Re: [PATCH v8 11/12] samples/landlock: Add network demo, Konstantin Meskhidze (A)
        • Re: [PATCH v8 11/12] samples/landlock: Add network demo, Mickaël Salaün
          • Re: [PATCH v8 11/12] samples/landlock: Add network demo, Konstantin Meskhidze (A)
      • Re: [PATCH v8 11/12] samples/landlock: Add network demo, Konstantin Meskhidze (A)
        • Re: [PATCH v8 11/12] samples/landlock: Add network demo, Mickaël Salaün
          • Re: [PATCH v8 11/12] samples/landlock: Add network demo, Konstantin Meskhidze (A)
  • [PATCH v8 12/12] landlock: Document Landlock's network support, Konstantin Meskhidze
    • Re: [PATCH v8 12/12] landlock: Document Landlock's network support, Mickaël Salaün
      • Re: [PATCH v8 12/12] landlock: Document Landlock's network support, Konstantin Meskhidze (A)
        • Re: [PATCH v8 12/12] landlock: Document Landlock's network support, Mickaël Salaün
          • Re: [PATCH v8 12/12] landlock: Document Landlock's network support, Konstantin Meskhidze (A)
• [PATCH nf-next] netfilter: nf_tables: nft_objref: make it builtin, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: nft_objref: make it builtin, Pablo Neira Ayuso
• [PATCH iptables-nft] nft: disscect basic icmp type/code match, Florian Westphal
  • Re: [PATCH iptables-nft] nft: disscect basic icmp type/code match, Phil Sutter
• Status of UID GID maching support in INPUT, Vincas Dargis
• netfilter+bpf road ahead, Florian Westphal
  • Re: netfilter+bpf road ahead, Toke Høiland-Jørgensen
• [RFC PATCH 0/1] libnftnl: Incorrect res_id byte order?, Ian Pilcher
  • [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Ian Pilcher
    • Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Pablo Neira Ayuso
      • Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Ian Pilcher
        • Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Pablo Neira Ayuso
    • Re: [RFC PATCH 1/1] libnftnl: Fix res_id byte order, Pablo Neira Ayuso
• [PATCH nf,v3] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements, Pablo Neira Ayuso
• [PATCH nft] tests: shell: deletion from interval concatenation, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements, Pablo Neira Ayuso
• [PATCH nf-next,v5 0/7] nf_tables inner tunnel header match support, Pablo Neira Ayuso
  • [PATCH nf-next,v5 5/7] netfilter: nft_meta: add inner match support, Pablo Neira Ayuso
  • [PATCH nf-next,v5 2/7] netfilter: nft_payload: access ipip payload for inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v5 3/7] netfilter: nft_inner: support for inner tunnel header matching, Pablo Neira Ayuso
  • [PATCH nf-next,v5 6/7] netfilter: nft_inner: add geneve support, Pablo Neira Ayuso
  • [PATCH nf-next,v5 7/7] netfilter: nft_inner: set tunnel offset to GRE header offset, Pablo Neira Ayuso
  • [PATCH nf-next,v5 1/7] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v5 4/7] netfilter: nft_inner: add percpu inner context, Pablo Neira Ayuso
• [PATCH nft,v2 00/16] vxlan, geneve, gre, gretap matching support, Pablo Neira Ayuso
  • [PATCH nft,v2 02/16] src: add dl_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft,v2 01/16] src: add eval_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft,v2 05/16] tests: shell: add vxlan set tests, Pablo Neira Ayuso
  • [PATCH nft,v2 04/16] tests: py: add vxlan tests, Pablo Neira Ayuso
  • [PATCH nft,v2 08/16] src: add gre support, Pablo Neira Ayuso
  • [PATCH nft,v2 07/16] src: display (inner) tag in --debug=proto-ctx, Pablo Neira Ayuso
  • [PATCH nft,v2 09/16] tests: py: add gre tests, Pablo Neira Ayuso
  • [PATCH nft,v2 13/16] doc: add geneve matching expression, Pablo Neira Ayuso
  • [PATCH nft,v2 14/16] src: add gretap support, Pablo Neira Ayuso
  • [PATCH nft,v2 06/16] doc: add vxlan matching expression, Pablo Neira Ayuso
  • [PATCH nft,v2 12/16] tests: py: add geneve tests, Pablo Neira Ayuso
  • [PATCH nft,v2 10/16] doc: add gre matching expression, Pablo Neira Ayuso
  • [PATCH nft,v2 15/16] tests: py: add gretap tests, Pablo Neira Ayuso
  • [PATCH nft,v2 03/16] src: add vxlan matching support, Pablo Neira Ayuso
  • [PATCH nft,v2 16/16] doc: add gretap matching expression, Pablo Neira Ayuso
  • [PATCH nft,v2 11/16] src: add geneve matching support, Pablo Neira Ayuso
  • Re: [PATCH nft,v2 00/16] vxlan, geneve, gre, gretap matching support, Pablo Neira Ayuso
• [iptables PATCH 1/2] tests: Adjust testsuite return codes to automake guidelines, Phil Sutter
  • [iptables PATCH 2/2] Makefile.am: Integrate testsuites, Phil Sutter
• [PATCH nf-next] netfilter: nf_tables: reduce nft_pktinfo by 8 bytes, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: reduce nft_pktinfo by 8 bytes, Pablo Neira Ayuso
• [nft PATCH] Implement 'reset rule' and 'reset rules' commands, Phil Sutter
• [nf-next PATCH 0/2] Support resetting rules' state, Phil Sutter
  • [nf-next PATCH 2/2] netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET, Phil Sutter
  • [nf-next PATCH 1/2] netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters, Phil Sutter
  • Re: [nf-next PATCH 0/2] Support resetting rules' state, Pablo Neira Ayuso
    • Re: [nf-next PATCH 0/2] Support resetting rules' state, Phil Sutter
      • Re: [nf-next PATCH 0/2] Support resetting rules' state, Pablo Neira Ayuso
        • Re: [nf-next PATCH 0/2] Support resetting rules' state, Phil Sutter
• [PATCH nf-next] netfilter: conntrack: use siphash_4u64, Florian Westphal
• [PATCH nf] netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces., Guillaume Nault
  • Re: [PATCH nf] netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces., Pablo Neira Ayuso
• [nft PATCH] Warn for tables with compat expressions in rules, Phil Sutter
• [iptables PATCH v2 00/12] Speed up iptables-test.py, Phil Sutter
  • [iptables PATCH v2 05/12] tests: *.t: Fix for hexadecimal output, Phil Sutter
  • [iptables PATCH v2 09/12] tests: libxt_tos.t, libxt_TOS.t: Add missing masks in output, Phil Sutter
  • [iptables PATCH v2 02/12] tests: iptables-test: Implement fast test mode, Phil Sutter
  • [iptables PATCH v2 12/12] tests: *.t: Add missing all-one's netmasks to expected output, Phil Sutter
  • [iptables PATCH v2 01/12] extensions: NFQUEUE: Document queue-balance limitation, Phil Sutter
  • [iptables PATCH v2 10/12] tests: libebt_vlan.t: Drop trailing whitespace from rules, Phil Sutter
  • [iptables PATCH v2 04/12] tests: *.t: Fix expected output for simple calls, Phil Sutter
  • [iptables PATCH v2 03/12] tests: iptables-test: Cover for obligatory -j CONTINUE in ebtables, Phil Sutter
  • [iptables PATCH v2 08/12] tests: libxt_recent.t: Add missing default values, Phil Sutter
  • [iptables PATCH v2 07/12] tests: libxt_length.t: Fix odd use-case output, Phil Sutter
  • [iptables PATCH v2 06/12] tests: libebt_redirect.t: Plain redirect prints with trailing whitespace, Phil Sutter
  • [iptables PATCH v2 11/12] tests: libxt_connlimit.t: Add missing default values, Phil Sutter
  • Re: [iptables PATCH v2 00/12] Speed up iptables-test.py, Phil Sutter
• [PATCH nft] netlink_delinearize: do not transfer binary operation to non-anonymous sets, Pablo Neira Ayuso
• [syzbot] KASAN: use-after-free Read in nf_tables_trans_destroy_work, syzbot
• [PATCH nf-next,v4 1/6] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
• [PATCH AUTOSEL 5.19 29/73] netlink: Bounds-check struct nlmsgerr creation, Sasha Levin
• [PATCH AUTOSEL 6.0 32/77] netlink: Bounds-check struct nlmsgerr creation, Sasha Levin
• [iptables PATCH] nft: Fix compile with -DDEBUG, Phil Sutter
• [iptables PATCH] libiptc: Fix for segfault when renaming a chain, Phil Sutter
• bridge:fragmented packets dropped by bridge, Vyacheslav Salnikov
  • Re: bridge:fragmented packets dropped by bridge, Slade Watkins
  • Re: bridge:fragmented packets dropped by bridge, Vadim Fedorenko
  • Re: bridge:fragmented packets dropped by bridge, Vadim Fedorenko
• [PATCH nf-next,v3 0/6] nf_tables inner tunnel header match support, Pablo Neira Ayuso
  • [PATCH nf-next,v3 1/6] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v3 2/6] netfilter: nft_payload: access ipip payload for inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v3 4/6] netfilter: nft_inner: add percpu inner context, Pablo Neira Ayuso
  • [PATCH nf-next,v3 3/6] netfilter: nft_inner: support for inner tunnel header matching, Pablo Neira Ayuso
  • [PATCH nf-next,v3 5/6] netfilter: nft_meta: add inner match support, Pablo Neira Ayuso
  • [PATCH nf-next,v3 6/6] netfilter: nft_inner: add geneve support, Pablo Neira Ayuso
• [PATCH nft 1/2] parser_bison: display too many levels of nesting error, Pablo Neira Ayuso
  • [PATCH nft 2/2] rule: do not display handle for implicit chain, Pablo Neira Ayuso
• [ANNOUNCE] conntrack-tools 1.4.7 release, Phil Sutter
• [PATCH conntrack-tools] build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9, Pablo Neira Ayuso
• Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible, Jason Gunthorpe
  • <Possible follow-ups>
  • Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible, Andy Shevchenko
  • Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible, Joe Perches
    • RE: [PATCH v1 3/5] treewide: use get_random_u32() when possible, David Laight
      • Re: [PATCH v1 3/5] treewide: use get_random_u32() when possible, Joe Perches
• Re: [f2fs-dev] [PATCH v1 3/5] treewide: use get_random_u32() when possible, Andy Shevchenko
  • Re: [f2fs-dev] [PATCH v1 3/5] treewide: use get_random_u32() when possible, Jason A. Donenfeld
• [iptables PATCH 00/12] Speed up iptables-tests.py, Phil Sutter
  • [iptables PATCH 02/12] tests: iptables-test: Cover for obligatory -j CONTINUE in ebtables, Phil Sutter
  • [iptables PATCH 11/12] extensions: Do not print all-one's netmasks, Phil Sutter
    • Re: [iptables PATCH 11/12] extensions: Do not print all-one's netmasks, Jan Engelhardt
      • Re: [iptables PATCH 11/12] extensions: Do not print all-one's netmasks, Phil Sutter
        • Re: [iptables PATCH 11/12] extensions: Do not print all-one's netmasks, Jan Engelhardt
  • [iptables PATCH 04/12] tests: *.t: Fix for hexadecimal output, Phil Sutter
  • [iptables PATCH 01/12] tests: iptables-test: Implement fast test mode, Phil Sutter
    • Re: [iptables PATCH 01/12] tests: iptables-test: Implement fast test mode, Jan Engelhardt
      • Re: [iptables PATCH 01/12] tests: iptables-test: Implement fast test mode, Phil Sutter
  • [iptables PATCH 05/12] tests: libebt_redirect.t: Plain redirect prints with trailing whitespace, Phil Sutter
  • [iptables PATCH 07/12] tests: libxt_recent.t: Add missing default values, Phil Sutter
  • [iptables PATCH 12/12] extensions: NFQUEUE: Do not print default queue number 0, Phil Sutter
  • [iptables PATCH 03/12] tests: *.t: Fix expected output for simple calls, Phil Sutter
  • [iptables PATCH 08/12] tests: libxt_tos.t, libxt_TOS.t: Add missing masks in output, Phil Sutter
  • [iptables PATCH 10/12] tests: libxt_connlimit.t: Add missing --connlimit-saddr, Phil Sutter
  • [iptables PATCH 06/12] tests: libxt_length.t: Fix odd use-case output, Phil Sutter
  • [iptables PATCH 09/12] tests: libebt_vlan.t: Drop trailing whitespace from rules, Phil Sutter
• [iptables PATCH 1/2] tests: shell: Fix expected output for ip6tables dst match, Phil Sutter
  • [iptables PATCH 2/2] tests: shell: Fix expected ebtables log target output, Phil Sutter
• Kernel 6.0.0 bug pptp not work, Martin Zaharinov
  • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
  • Re: Kernel 6.0.0 bug pptp not work, Pablo Neira Ayuso
  • Re: Kernel 6.0.0 bug pptp not work, Florian Westphal
    • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
      • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
        • Re: Kernel 6.0.0 bug pptp not work, Pablo Neira Ayuso
          • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
      • Re: Kernel 6.0.0 bug pptp not work, Pablo Neira Ayuso
      • Re: Kernel 6.0.0 bug pptp not work, Florian Westphal
        • Re: Kernel 6.0.0 bug pptp not work, Martin Zaharinov
• [PATCH nft 0/2] gre and ipip tunnel support, Pablo Neira Ayuso
  • [PATCH nft 1/2] src: add gre support, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: add ipip support, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2] src: add ipip support, Pablo Neira Ayuso
• [iptables PATCH] tests: libebt_stp.t: Drop duplicate whitespace, Phil Sutter
• [PATCH nf-next,v2 0/6] nf_tables inner tunnel header match support, Pablo Neira Ayuso
  • [PATCH nf-next,v2 3/6] netfilter: nft_inner: support for inner tunnel header matching, Pablo Neira Ayuso
  • [PATCH nf-next,v2 5/6] netfilter: nft_meta: add inner match support, Pablo Neira Ayuso
  • [PATCH nf-next,v2 1/6] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
  • [PATCH nf-next,v2 4/6] netfilter: nft_inner: add percpu inner context, Pablo Neira Ayuso
  • [PATCH nf-next,v2 6/6] netfilter: nft_inner: add geneve support, Pablo Neira Ayuso
  • [PATCH nf-next,v2 2/6] netfilter: nft_payload: access ipip payload for inner offset, Pablo Neira Ayuso
• [iptables PATCH] extensions: libebt_log: Avoid empty log-prefix in output, Phil Sutter
• [iptables PATCH] tests: IDLETIMER.t: Fix syntax, support for restore input, Phil Sutter
• [nf-next PATCH 1/2] selftests: netfilter: Test reverse path filtering, Phil Sutter
  • [nf-next PATCH 2/2] netfilter: rpfilter/fib: Populate flowic_l3mdev field, Phil Sutter
    • Re: [nf-next PATCH 2/2] netfilter: rpfilter/fib: Populate flowic_l3mdev field, David Ahern
    • Re: [nf-next PATCH 2/2] netfilter: rpfilter/fib: Populate flowic_l3mdev field, Guillaume Nault
  • Re: [nf-next PATCH 1/2] selftests: netfilter: Test reverse path filtering, Guillaume Nault
• [nf PATCH] selftests: netfilter: Fix nft_fib.sh for all.rp_filter=1, Phil Sutter
• [PATCH nft 1/2] evaluate: bogus datatype assertion in binary operation evaluation, Pablo Neira Ayuso
  • [PATCH nft 2/2] evaluate: datatype memleak after binop transfer, Pablo Neira Ayuso
• netdev conf 0x16 schedule posted, Jamal Hadi Salim
• [iptables PATCH 1/3] extensions: libebt_stp: Eliminate duplicate space in output, Phil Sutter
  • [iptables PATCH 3/3] extensions: TCPOPTSTRIP: Do not print empty options, Phil Sutter
  • [iptables PATCH 2/3] extensions: libip6t_dst: Fix output for empty options, Phil Sutter
• [iptables PATCH 1/2] extensions: among: Remove pointless fall through, Phil Sutter
  • [iptables PATCH 2/2] extensions: among: Fix for use with ebtables-restore, Phil Sutter
• [iptables PATCH 0/4] tests: iptables-test: Test both variants by default, Phil Sutter
  • [iptables PATCH 2/4] tests: iptables-test: Simplify execute_cmd() calling, Phil Sutter
  • [iptables PATCH 1/4] tests: iptables-test: Simplify '-N' option a bit, Phil Sutter
  • [iptables PATCH 3/4] tests: iptables-test: Pass netns to execute_cmd(), Phil Sutter
  • [iptables PATCH 4/4] tests: iptables-test: Test both variants by default, Phil Sutter
• Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1, Jakub Kicinski
  • Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1, David Ahern
  • Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1, Mike Manning
    • Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1, Maximilien Cuony
      • Re: [REGRESSION] Unable to NAT own TCP packets from another VRF with tcp_l3mdev_accept = 1 #forregzbot, Thorsten Leemhuis
• [PATCH nft 0/6,v2] support for vxlan matching, Pablo Neira Ayuso
  • [PATCH nft 4/6] tests: py: add vxlan tests, Pablo Neira Ayuso
  • [PATCH nft 2/6] src: add dl_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft 5/6] tests: shell: add vxlan set tests, Pablo Neira Ayuso
  • [PATCH nft 3/6] src: add vxlan matching support, Pablo Neira Ayuso
  • [PATCH nft 1/6] src: add eval_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft 6/6] src: display (inner) tag in --debug=proto-ctx, Pablo Neira Ayuso
• [PATCH v2 bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Lorenzo Bianconi
  • Re: [PATCH v2 bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, Martin KaFai Lau
    • Re: [PATCH v2 bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, John Fastabend
  • Re: [PATCH v2 bpf-next] net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c, patchwork-bot+netdevbpf
• [PATCH nft 0/3] vlan followup fixes, Florian Westphal
  • [PATCH nft 2/3] evaluate: add ethernet header size offset for implicit vlan dependency, Florian Westphal
  • [PATCH nft 1/3] doc: mention vlan matching in ip/ip6/inet families, Florian Westphal
  • [PATCH nft 3/3] tests: py: add vlan test case for ip/inet family, Florian Westphal
  • Re: [PATCH nft 0/3] vlan followup fixes, Pablo Neira Ayuso
• [nft PATCH] monitor: Sanitize startup race condition, Phil Sutter
  • Re: [nft PATCH] monitor: Sanitize startup race condition, Pablo Neira Ayuso
    • Re: [nft PATCH] monitor: Sanitize startup race condition, Phil Sutter
• [PATCH nft 1/4] src: add eval_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft 2/4] src: add dl_proto_ctx(), Pablo Neira Ayuso
  • [PATCH nft 4/4] src: display (inner) tag in --debug=proto-ctx, Pablo Neira Ayuso
  • [PATCH nft 3/4] src: add vxlan matching support, Pablo Neira Ayuso
• [PATCH libnftnl] expr: add inner support, Pablo Neira Ayuso
  • Re: [PATCH libnftnl] expr: add inner support, Pablo Neira Ayuso
• [PATCH nf-next 0/2] nf_tables inner tunnel header match support, Pablo Neira Ayuso