Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, (continued)
  • Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Gustavo A. R. Silva
    • Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Jason Gunthorpe
      • Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Gustavo A. R. Silva
  • Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Kees Cook
    • Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Jason Gunthorpe
  • Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Stephen Hemminger
    • Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Gustavo A. R. Silva
  • RE: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Dan Williams
  • Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Geert Uytterhoeven
    • Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members, Kees Cook
• [PATCH nf-next] flow_table: do not try to add already offloaded entries, Marcelo Ricardo Leitner
  • Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries, Oz Shlomo
    • Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries, Marcelo Ricardo Leitner
      • Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries, Oz Shlomo
        • Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries, Marcelo Ricardo Leitner
          • Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries, Oz Shlomo
            • Re: [PATCH nf-next] flow_table: do not try to add already offloaded entries, Marcelo Ricardo Leitner
• [PATCH nft] segtree: fix map listing with interface wildcard, Pablo Neira Ayuso
• [nft PATCH] evaluate: fix segfault when adding elements to invalid set, Peter Tirsek
  • Re: [nft PATCH] evaluate: fix segfault when adding elements to invalid set, Pablo Neira Ayuso
• [PATCH] ebtables: extend the 'static' build target fix., Justin Swartz
  • [PATCH resend] ebtables: extend the 'static' build target fix., Justin Swartz
    • Re: [PATCH resend] ebtables: extend the 'static' build target fix., Florian Westphal
      • Re: [PATCH resend] ebtables: extend the 'static' build target fix., Justin Swartz
        • Re: [PATCH resend] ebtables: extend the 'static' build target fix., Florian Westphal
• [PATCH v2 0/3] conntrack: fixes for handling unknown protocols, Mikhail Sennikovsky
  • [PATCH v2 3/3] conntrack: fix -o save dump for unknown protocols, Mikhail Sennikovsky
  • [PATCH v2 2/3] conntrack: fix protocol number parsing, Mikhail Sennikovsky
  • [PATCH v2 1/3] conntrack: set reply l4 proto for unknown protocol, Mikhail Sennikovsky
  • Re: [PATCH v2 0/3] conntrack: fixes for handling unknown protocols, Pablo Neira Ayuso
• [PATCH nft 0/3] parser: fix scope closing with > 1 nested scope, Florian Westphal
  • [PATCH nft 2/3] parser: add missing synproxy scope closure, Florian Westphal
  • [PATCH nft 1/3] tests/py: Add a test for failing ipsec after counter, Florian Westphal
  • [PATCH nft 3/3] scanner: don't pop active flex scanner scope, Florian Westphal
  • Re: [PATCH nft 0/3] parser: fix scope closing with > 1 nested scope, Florian Westphal
• [PATCH bpf-next v5 0/8] New nf_conntrack kfuncs for insertion, changing timeout, status, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Alexei Starovoitov
      • Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Kumar Kartikeya Dwivedi
          • Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Alexei Starovoitov
            • Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Kumar Kartikeya Dwivedi
              • Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Alexei Starovoitov
                • Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Alexei Starovoitov
                  • Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Kumar Kartikeya Dwivedi
                    • Re: [PATCH bpf-next v5 1/8] bpf: Add support for forcing kfunc args to be referenced, Alexei Starovoitov
  • [PATCH bpf-next v5 2/8] net: netfilter: Deduplicate code in bpf_{xdp,skb}_ct_lookup, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 6/8] selftests/bpf: Add verifier tests for forced kfunc ref args, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 3/8] net: netfilter: Add kfuncs to allocate and insert CT, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 7/8] selftests/bpf: Add tests for new nf_conntrack kfuncs, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 8/8] selftests/bpf: Add negative tests for new nf_conntrack kfuncs, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 4/8] net: netfilter: Add kfuncs to set and change CT timeout, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 5/8] net: netfilter: Add kfuncs to set and change CT status, Kumar Kartikeya Dwivedi
• [PATCH nft 1/2] intervals: fix crash when trying to remove element in empty set, Pablo Neira Ayuso
  • [PATCH nft 2/2] intervals: check for EXPR_F_REMOVE in case of element mismatch, Pablo Neira Ayuso
  • Re: [PATCH nft 1/2] intervals: fix crash when trying to remove element in empty set, Pablo Neira Ayuso
• [PATCH 0/6] conntrack: fixes for handling unknown protocols, Mikhail Sennikovsky
  • [PATCH 1/6] tests/conntrack: ct create for unknown protocols, Mikhail Sennikovsky
  • [PATCH 6/6] conntrack: fix -o save dump for unknown protocols, Mikhail Sennikovsky
    • Re: [PATCH 6/6] conntrack: fix -o save dump for unknown protocols, Pablo Neira Ayuso
  • [PATCH 2/6] conntrack: set reply l4 proto for unknown protocol, Mikhail Sennikovsky
    • Re: [PATCH 2/6] conntrack: set reply l4 proto for unknown protocol, Pablo Neira Ayuso
  • [PATCH 4/6] conntrack: fix protocol number parsing, Mikhail Sennikovsky
    • Re: [PATCH 4/6] conntrack: fix protocol number parsing, Pablo Neira Ayuso
  • [PATCH 3/6] tests/conntrack: invalid protocol values, Mikhail Sennikovsky
    • Re: [PATCH 3/6] tests/conntrack: invalid protocol values, Pablo Neira Ayuso
  • [PATCH 5/6] tests/conntrack: ct -o save for unknown protocols, Mikhail Sennikovsky
    • Re: [PATCH 5/6] tests/conntrack: ct -o save for unknown protocols, Pablo Neira Ayuso
• [nft PATCH v2] Revert "scanner: remove saddr/daddr from initial state", Phil Sutter
  • Re: [nft PATCH v2] Revert "scanner: remove saddr/daddr from initial state", Florian Westphal
• [nft PATCH] doc: Document limitations of ipsec expression with xfrm_interface, Phil Sutter
• [nft PATCH 0/2] Fix for failing 'counter ipsec ...' rule, Phil Sutter
  • [nft PATCH 1/2] tests/py: Add a test for failing ipsec after counter, Phil Sutter
  • [nft PATCH 2/2] Revert "scanner: remove saddr/daddr from initial state", Phil Sutter
    • Re: [nft PATCH 2/2] Revert "scanner: remove saddr/daddr from initial state", Pablo Neira Ayuso
      • Re: [nft PATCH 2/2] Revert "scanner: remove saddr/daddr from initial state", Pablo Neira Ayuso
        • Re: [nft PATCH 2/2] Revert "scanner: remove saddr/daddr from initial state", Phil Sutter
• [PATCH nf-next 0/6] netfilter: sparse fixups, Florian Westphal
  • [PATCH nf-next 1/6] netfilter: nfnetlink: add missing __be16 cast, Florian Westphal
  • [PATCH nf-next 2/6] netfilter: x_tables: use correct integer types, Florian Westphal
  • [PATCH nf-next 6/6] netfilter: nf_tables: move nft_cmp_fast_mask to where its used, Florian Westphal
  • [PATCH nf-next 5/6] netfilter: nf_tables: use correct integer types, Florian Westphal
  • [PATCH nf-next 4/6] netfilter: nf_tables: add and use BE register load-store helpers, Florian Westphal
  • [PATCH nf-next 3/6] netfilter: nf_tables: use the correct get/put helpers, Florian Westphal
  • Re: [PATCH nf-next 0/6] netfilter: sparse fixups, Pablo Neira Ayuso
• [PATCH] netfilter: xt_esp: add support for ESP match in NAT Traversal, Wei Han
  • Re: [PATCH] netfilter: xt_esp: add support for ESP match in NAT Traversal, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: xt_esp: add support for ESP match in NAT Traversal, Wei Han
      • Re: [PATCH] netfilter: xt_esp: add support for ESP match in NAT Traversal, Pablo Neira Ayuso
• [PATCH] netfilter: Fix spelling mistake, Zhang Jiaming
  • Re: [PATCH] netfilter: Fix spelling mistake, Pablo Neira Ayuso
• [PATCH] xtables-monitor: add missing spaces in printed str, Anton Luka Šijanec
  • Re: [PATCH] xtables-monitor: add missing spaces in printed str, Phil Sutter
• [PATCH nf] netfilter: nf_tables: avoid skb access on nf_stolen, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: avoid skb access on nf_stolen, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_dynset: restore set element counter when failing to update, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_dynset: restore set element counter when failing to update, Pablo Neira Ayuso
• [PATCH nf-next v2 0/3] netfilter: conntrack sparse annotations, Florian Westphal
  • [PATCH nf-next v2 3/3] netfilter: h323: merge nat hook pointers into one, Florian Westphal
  • [PATCH nf-next v2 1/3] netfilter: nf_conntrack: add missing __rcu annotations, Florian Westphal
  • [PATCH nf-next v2 2/3] netfilter: nf_conntrack: use rcu accessors where needed, Florian Westphal
  • Re: [PATCH nf-next v2 0/3] netfilter: conntrack sparse annotations, Pablo Neira Ayuso
• [PATCH 0/3] conntrack: -A command implementation, Mikhail Sennikovsky
  • [PATCH 1/3] conntrack: introduce new -A command, Mikhail Sennikovsky
    • Re: [PATCH 1/3] conntrack: introduce new -A command, Pablo Neira Ayuso
      • Re: [PATCH 1/3] conntrack: introduce new -A command, Pablo Neira Ayuso
      • Re: [PATCH 1/3] conntrack: introduce new -A command, Mikhail Sennikovsky
        • Re: [PATCH 1/3] conntrack: introduce new -A command, Pablo Neira Ayuso
  • [PATCH 2/3] conntrack.8: man update for -A command support, Mikhail Sennikovsky
  • [PATCH 3/3] tests/conntrack: -A command support, Mikhail Sennikovsky
• [PATCH nf] netfilter: br_netfilter: do not skip all hooks with 0 priority, Florian Westphal
  • Re: [PATCH nf] netfilter: br_netfilter: do not skip all hooks with 0 priority, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: br_netfilter: do not skip all hooks with 0 priority, Pablo Neira Ayuso
• large number of sparse warnings in nf_flow_table_offload, Florian Westphal
• [PATCH nf-next 0/3] netfilter: conntrack sparse annotations, Florian Westphal
  • [PATCH nf-next 2/3] netfilter: nf_conntrack: use rcu accessors where needed, Florian Westphal
  • [PATCH nf-next 3/3] netfilter: h323: merge nat hook pointers into one, Florian Westphal
    • Re: [PATCH nf-next 3/3] netfilter: h323: merge nat hook pointers into one, kernel test robot
  • [PATCH nf-next 1/3] netfilter: nf_conntrack: add missing __rcu annotations, Florian Westphal
• [PATCH v6 00/17] Network support for Landlock, Konstantin Meskhidze
  • [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Konstantin Meskhidze
    • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Mickaël Salaün
      • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Konstantin Meskhidze (A)
        • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Mickaël Salaün
          • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Konstantin Meskhidze (A)
          • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Konstantin Meskhidze (A)
            • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Mickaël Salaün
              • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Konstantin Meskhidze (A)
      • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Konstantin Meskhidze (A)
        • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Mickaël Salaün
          • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Konstantin Meskhidze (A)
            • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Mickaël Salaün
              • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Konstantin Meskhidze (A)
                • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Mickaël Salaün
    • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Mickaël Salaün
      • Re: [PATCH v6 02/17] landlock: refactors landlock_find/insert_rule, Konstantin Meskhidze (A)
  • [PATCH v6 05/17] landlock: refactors helper functions, Konstantin Meskhidze
  • [PATCH v6 09/17] landlock: implements TCP network hooks, Konstantin Meskhidze
  • [PATCH v6 01/17] landlock: renames access mask, Konstantin Meskhidze
    • Re: [PATCH v6 01/17] landlock: renames access mask, Mickaël Salaün
      • Re: [PATCH v6 01/17] landlock: renames access mask, Konstantin Meskhidze (A)
      • Re: [PATCH v6 01/17] landlock: renames access mask, Konstantin Meskhidze (A)
        • Re: [PATCH v6 01/17] landlock: renames access mask, Mickaël Salaün
          • Re: [PATCH v6 01/17] landlock: renames access mask, Konstantin Meskhidze (A)
  • [PATCH v6 06/17] landlock: refactors landlock_add_rule syscall, Konstantin Meskhidze
  • [PATCH v6 03/17] landlock: refactors merge and inherit functions, Konstantin Meskhidze
  • [PATCH v6 07/17] landlock: user space API network support, Konstantin Meskhidze
  • [PATCH v6 04/17] landlock: moves helper functions, Konstantin Meskhidze
  • [PATCH v6 10/17] seltests/landlock: moves helper function, Konstantin Meskhidze
  • [PATCH v6 13/17] seltests/landlock: adds AF_UNSPEC family test, Konstantin Meskhidze
  • [PATCH v6 08/17] landlock: adds support network rules, Konstantin Meskhidze
  • [PATCH v6 14/17] seltests/landlock: adds rules overlapping test, Konstantin Meskhidze
  • [PATCH v6 12/17] seltests/landlock: adds tests for connect() hooks, Konstantin Meskhidze
  • [PATCH v6 11/17] seltests/landlock: adds tests for bind() hooks, Konstantin Meskhidze
    • Re: [PATCH v6 11/17] seltests/landlock: adds tests for bind() hooks, Mickaël Salaün
  • [PATCH v6 15/17] seltests/landlock: adds ruleset expanding test, Konstantin Meskhidze
  • [PATCH v6 16/17] seltests/landlock: adds invalid input data test, Konstantin Meskhidze
  • [PATCH v6 17/17] samples/landlock: adds network demo, Konstantin Meskhidze
    • Re: [PATCH v6 17/17] samples/landlock: adds network demo, Mickaël Salaün
      • Re: [PATCH v6 17/17] samples/landlock: adds network demo, Konstantin Meskhidze (A)
  • Re: [PATCH v6 00/17] Network support for Landlock, Mickaël Salaün
    • Re: [PATCH v6 00/17] Network support for Landlock, Mickaël Salaün
      • Re: [PATCH v6 00/17] Network support for Landlock, Konstantin Meskhidze (A)
      • Re: [PATCH v6 00/17] Network support for Landlock, Konstantin Meskhidze (A)
        • Re: [PATCH v6 00/17] Network support for Landlock, Mickaël Salaün
          • Re: [PATCH v6 00/17] Network support for Landlock, Konstantin Meskhidze (A)
      • Re: [PATCH v6 00/17] Network support for Landlock, Mickaël Salaün
        • Re: [PATCH v6 00/17] Network support for Landlock, Konstantin Meskhidze (A)
        • Re: [PATCH v6 00/17] Network support for Landlock, Konstantin Meskhidze (A)
          • Re: [PATCH v6 00/17] Network support for Landlock, Mickaël Salaün
    • Re: [PATCH v6 00/17] Network support for Landlock, Mickaël Salaün
      • Re: [PATCH v6 00/17] Network support for Landlock, Konstantin Meskhidze (A)
• [PATCH] src: proto: support DF, LE, VA for DSCP, Oleksandr Natalenko
  • Re: [PATCH] src: proto: support DF, LE, VA for DSCP, Pablo Neira Ayuso
    • Re: [PATCH] src: proto: support DF, LE, VA for DSCP, Oleksandr Natalenko
      • Re: [PATCH] src: proto: support DF, LE, VA for DSCP, Pablo Neira Ayuso
        • Re: [PATCH] src: proto: support DF, LE, VA for DSCP, Oleksandr Natalenko
          • Re: [PATCH] src: proto: support DF, LE, VA for DSCP, Pablo Neira Ayuso
• [PATCH nf 0/2] netfilter: fix two nf_dup bugs with egress hook, Florian Westphal
  • [PATCH nf 1/2] netfilter: nf_dup_netdev: do not push mac header a second time, Florian Westphal
  • [PATCH nf 2/2] netfilter: nf_dup_netdev: add and use recursion counter, Florian Westphal
  • Re: [PATCH nf 0/2] netfilter: fix two nf_dup bugs with egress hook, Pablo Neira Ayuso
• [PATCH nft,v2 1/2] rule: collapse set element commands, Pablo Neira Ayuso
  • Re: [PATCH nft,v2 1/2] rule: collapse set element commands, Phil Sutter
• [PATCH nft 00/18] fixes and improvements for -o/--optimize, Pablo Neira Ayuso
  • [PATCH nft 01/18] optimize: do not compare relational expression rhs when collecting statements, Pablo Neira Ayuso
  • [PATCH nft 06/18] optimize: fix verdict map merging, Pablo Neira Ayuso
  • [PATCH nft 02/18] optimize: do not merge rules with set reference in rhs, Pablo Neira Ayuso
  • [PATCH nft 04/18] optimize: remove comment after merging, Pablo Neira Ayuso
  • [PATCH nft 09/18] optimize: add fib expression support, Pablo Neira Ayuso
  • [PATCH nft 08/18] optimize: add xfrm expression support, Pablo Neira Ayuso
  • [PATCH nft 03/18] optimize: do not print stateful information, Pablo Neira Ayuso
  • [PATCH nft 05/18] optimize: fix reject statement, Pablo Neira Ayuso
  • [PATCH nft 11/18] optimize: add numgen expression support, Pablo Neira Ayuso
  • [PATCH nft 16/18] optimize: assume verdict is same when rules have no verdict, Pablo Neira Ayuso
  • [PATCH nft 13/18] optimize: add unsupported statement, Pablo Neira Ayuso
  • [PATCH nft 14/18] tests: shell: run -c -o on ruleset, Pablo Neira Ayuso
  • [PATCH nft 17/18] optimize: limit statement is not supported yet, Pablo Neira Ayuso
  • [PATCH nft 12/18] optimize: add hash expression support, Pablo Neira Ayuso
  • [PATCH nft 15/18] optimize: only merge OP_IMPLICIT and OP_EQ relational, Pablo Neira Ayuso
  • [PATCH nft 10/18] optimize: add binop expression support, Pablo Neira Ayuso
  • [PATCH nft 07/18] optimize: add osf expression support, Pablo Neira Ayuso
  • [PATCH nft 18/18] libnftables: release top level scope, Pablo Neira Ayuso
  • Re: [PATCH nft 00/18] fixes and improvements for -o/--optimize, Pablo Neira Ayuso
• Re: Support for String Match Blocking in NFTables, Duncan Roe
  • Re: Support for String Match Blocking in NFTables, Gmail Support
• [PATCH] netfilter: add nf_log.h, Markus Mayer
  • Re: [PATCH] netfilter: add nf_log.h, Jeremy Sowden
• Re: [PATCH] selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh, Pablo Neira Ayuso
  • Re: [PATCH] selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh, Stefano Brivio
• [PATCH nft] tests: shell: large set overlap and automerge, Pablo Neira Ayuso
  • Re: [PATCH nft] tests: shell: large set overlap and automerge, Phil Sutter
    • Re: [PATCH nft] tests: shell: large set overlap and automerge, Pablo Neira Ayuso
      • Re: [PATCH nft] tests: shell: large set overlap and automerge, Phil Sutter
• [PATCH nft 1/2] intervals: do not empty cache for maps, Pablo Neira Ayuso
  • [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again, Pablo Neira Ayuso
    • Re: [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again, Phil Sutter
      • Re: [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again, Pablo Neira Ayuso
        • Re: [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again, Phil Sutter
          • Re: [PATCH nft 2/2,v2] intervals: Do not sort cached set elements over and over again, Pablo Neira Ayuso
• [nft PATCH] intervals: Do not sort cached set elements over and over again, Phil Sutter
  • Re: [nft PATCH] intervals: Do not sort cached set elements over and over again, Pablo Neira Ayuso
    • Re: [nft PATCH] intervals: Do not sort cached set elements over and over again, Phil Sutter
      • Re: [nft PATCH] intervals: Do not sort cached set elements over and over again, Pablo Neira Ayuso
• [PATCH v2] build: fix clang+glibc snprintf substitution error, Nicholas Vinson
  • Re: [PATCH v2] build: fix clang+glibc snprintf substitution error, Florian Westphal
• [PATCH net-next v4 0/2] Conntrack offload debuggability improvements, Vlad Buslov
  • [PATCH net-next v4 2/2] netfilter: nf_flow_table: count pending offload workqueue tasks, Vlad Buslov
  • [PATCH net-next v4 1/2] net/sched: act_ct: set 'net' pointer when creating new nf_flow_table, Vlad Buslov
  • Re: [PATCH net-next v4 0/2] Conntrack offload debuggability improvements, Pablo Neira Ayuso
• [iptables PATCH v2] nft: Exit if nftnl_alloc_expr fails, Phil Sutter
• [PATCH] build: fix clang+glibc snprintf substitution error, Nicholas Vinson
  • Re: [PATCH] build: fix clang+glibc snprintf substitution error, Pablo Neira Ayuso
    • Re: [PATCH] build: fix clang+glibc snprintf substitution error, Nicholas Vinson
• [iptables PATCH] nft: Exit if nftnl_alloc_expr fails, Phil Sutter
  • Re: [iptables PATCH] nft: Exit if nftnl_alloc_expr fails, Pablo Neira Ayuso
    • Re: [iptables PATCH] nft: Exit if nftnl_alloc_expr fails, Phil Sutter
• [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection, Stefano Brivio
  • Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection, Pablo Neira Ayuso
    • Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection, Stefano Brivio
    • Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection, Stefano Brivio
      • Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection, Pablo Neira Ayuso
        • Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection, Stefano Brivio
          • Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection, Pablo Neira Ayuso
            • Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection, Stefano Brivio
            • Re: [PATCH nf] nft_set_rbtree: Switch to node list walk for overlap detection, Stefano Brivio
• [PATCH conntrack-tools 1/2] conntrack: pass command object to nfct_mnl_request(), Pablo Neira Ayuso
  • [PATCH conntrack-tools 2/2] conntrack: update CT_GET to use libmnl, Pablo Neira Ayuso
• [PATCH nft] tests: shell: runtime set element automerge, Pablo Neira Ayuso
• [PATCH nft 1/2] rule: collapse set element commands, Pablo Neira Ayuso
  • [PATCH nft 2/2] intervals: do not report exact overlaps for new elements, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nft 1/2] rule: collapse set element commands, Pablo Neira Ayuso
    • [PATCH nft 2/2] intervals: do not report exact overlaps for new elements, Pablo Neira Ayuso
• [iptables PATCH 0/2] Review xtables.h vs. xshared.h, Phil Sutter
  • [iptables PATCH 1/2] libxtables: Move struct xtables_afinfo into xtables.h, Phil Sutter
  • [iptables PATCH 2/2] libxtables: Define XT_OPTION_OFFSET_SCALE in xtables.h, Phil Sutter
• [PATCH nft] Revert "scanner: flags: move to own scope", Florian Westphal
• [PATCH v36 19/33] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v36 16/33] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v36 15/33] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v36 09/33] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v36 08/33] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• [PATCH 00/12] Clang -Wformat warning fixes, Bill Wendling
  • [PATCH 01/12] x86/mce: use correct format characters, Bill Wendling
    • Re: [PATCH 01/12] x86/mce: use correct format characters, Randy Dunlap
      • Re: [PATCH 01/12] x86/mce: use correct format characters, Bill Wendling
  • [PATCH 02/12] x86/CPU/AMD: use correct format characters, Bill Wendling
  • [PATCH 03/12] x86/e820: use correct format characters, Bill Wendling
  • [PATCH 04/12] blk-cgroup: use correct format characters, Bill Wendling
    • Re: [PATCH 04/12] blk-cgroup: use correct format characters, Christoph Hellwig
  • [PATCH 05/12] fs: quota: use correct format characters, Bill Wendling
  • [PATCH 06/12] PNP: use correct format characters, Bill Wendling
  • [PATCH 07/12] driver/char: use correct format characters, Bill Wendling
    • Re: [PATCH 07/12] driver/char: use correct format characters, Greg Kroah-Hartman
      • Re: [PATCH 07/12] driver/char: use correct format characters, Bill Wendling
  • [PATCH 08/12] cdrom: use correct format characters, Bill Wendling
    • Re: [PATCH 08/12] cdrom: use correct format characters, Phillip Potter
      • Re: [PATCH 08/12] cdrom: use correct format characters, Bill Wendling
  • [PATCH 09/12] ALSA: seq: use correct format characters, Bill Wendling
  • [PATCH 10/12] ALSA: seq: use correct format characters, Bill Wendling
  • [PATCH 11/12] ALSA: control: use correct format characters, Bill Wendling
  • [PATCH 12/12] netfilter: conntrack: use correct format characters, Bill Wendling
    • Re: [PATCH 12/12] netfilter: conntrack: use correct format characters, Pablo Neira Ayuso
    • Re: [PATCH 12/12] netfilter: conntrack: use correct format characters, Pablo Neira Ayuso
  • Re: [PATCH 00/12] Clang -Wformat warning fixes, Andrew Morton
    • Re: [PATCH 00/12] Clang -Wformat warning fixes, Bill Wendling
      • Re: [PATCH 00/12] Clang -Wformat warning fixes, Jan Engelhardt
        • Re: [PATCH 00/12] Clang -Wformat warning fixes, Bill Wendling
          • Re: [PATCH 00/12] Clang -Wformat warning fixes, Andrew Morton
          • Re: [PATCH 00/12] Clang -Wformat warning fixes, Greg Kroah-Hartman
            • Re: [PATCH 00/12] Clang -Wformat warning fixes, Joe Perches
      • RE: [PATCH 00/12] Clang -Wformat warning fixes, David Laight
        • RE: [PATCH 00/12] Clang -Wformat warning fixes, Jan Engelhardt
          • RE: [PATCH 00/12] Clang -Wformat warning fixes, David Laight
            • RE: [PATCH 00/12] Clang -Wformat warning fixes, Jan Engelhardt
    • Re: [PATCH 00/12] Clang -Wformat warning fixes, Nick Desaulniers
• [PATCH v2 0/1] Reusing modifier socket for bulk ct loads, Mikhail Sennikovsky
  • [PATCH v2 1/1] conntrack: use same modifier socket for bulk ops, Mikhail Sennikovsky
    • Re: [PATCH v2 1/1] conntrack: use same modifier socket for bulk ops, Pablo Neira Ayuso
• [iptables PATCH 1/2] iptables-legacy: Drop redundant include of xtables-multi.h, Phil Sutter
  • [iptables PATCH 2/2] xshared: Make some functions static, Phil Sutter
• [iptables PATCH 0/9] Improve testsuites' code coverage, Phil Sutter
  • [iptables PATCH 5/9] extensions: libebt_standard.t: Test logical-{in,out} as well, Phil Sutter
  • [iptables PATCH 8/9] extensions: string: Review parse_string() function, Phil Sutter
  • [iptables PATCH 2/9] tests: shell: Add some more rules to 0002-verbose-output_0, Phil Sutter
  • [iptables PATCH 9/9] extensions: string: Fix and enable tests, Phil Sutter
  • [iptables PATCH 6/9] ebtables-restore: Deny --init-table, Phil Sutter
  • [iptables PATCH 7/9] extensions: string: Do not print default --to value, Phil Sutter
  • [iptables PATCH 3/9] tests: shell: Extend iptables-xml test a bit, Phil Sutter
  • [iptables PATCH 4/9] tests: shell: Extend zero counters test a bit further, Phil Sutter
  • [iptables PATCH 1/9] Makefile: Add --enable-profiling configure option, Phil Sutter
• Add action to "finally" accept packets?, Nick
  • Re: Add action to "finally" accept packets?, Florian Westphal
    • Re: Add action to "finally" accept packets?, Nick
• [PATCH conntrack-tools] conntrackd: build: always add ports to sync message, Pablo Neira Ayuso
• Re: [PATCH v2] netfilter: conntrack: Fix clang -Wformat warning in print_tuple(), Nick Desaulniers
• [iptables PATCH v2] arptables: Support -x/--exact flag, Phil Sutter
• [iptables PATCH] arptables: Support -x/--exact flag, Phil Sutter
• CFS for Netdev 0x16 open!, Jamal Hadi Salim
  • Re: CFS for Netdev 0x16 open!, Ferenc Fejes
• [ANNOUNCE] nftables 1.0.4 release, Pablo Neira Ayuso
• [ANNOUNCE] libnftnl 1.2.2 release, Pablo Neira Ayuso
• [PATCH v4.9.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier, Ajay Kaher
  • Re: [PATCH v4.9.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier, Greg KH
• [PATCH v4.14.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier, Ajay Kaher
• [PATCH nf,v3] netfilter: nf_tables: bail out early if hardware offload is not supported, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: bail out early if hardware offload is not supported, Pablo Neira Ayuso
• netfilter: xtables: Bring SPDX identifier back, Thomas Gleixner
  • Re: netfilter: xtables: Bring SPDX identifier back, Pablo Neira Ayuso
    • Re: netfilter: xtables: Bring SPDX identifier back, Greg KH
      • Re: netfilter: xtables: Bring SPDX identifier back, Pablo Neira Ayuso
        • Re: netfilter: xtables: Bring SPDX identifier back, Greg KH
• [PATCH nf] netfilter: nf_tables: memleak flow rule from commit path, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: release new hooks on unsupported flowtable flags, Pablo Neira Ayuso
• [PATCH v4.19.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier, Ajay Kaher
• [PATCH v5.4.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier, Ajay Kaher
  • Re: [PATCH v5.4.y] netfilter: nf_tables: disallow non-stateful expression in sets earlier, Greg KH
• Expired Cert, Scott Wisniewski
  • Re: Expired Cert, Pablo Neira Ayuso
• [iptables PATCH] libxtables: Unexport init_extensions*() declarations, Phil Sutter
  • Re: [iptables PATCH] libxtables: Unexport init_extensions*() declarations, Nick
    • Re: [iptables PATCH] libxtables: Unexport init_extensions*() declarations, Nick
• [PATCH 0/1] Reusing modifier socket for bulk ct loads, Mikhail Sennikovsky
  • [PATCH 1/1] conntrack: use same modifier socket for bulk ops, Mikhail Sennikovsky
    • Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops, Pablo Neira Ayuso
      • Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops, Mikhail Sennikovsky
        • Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops, Pablo Neira Ayuso
          • Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops, Pablo Neira Ayuso
            • Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops, Mikhail Sennikovsky
              • Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops, Pablo Neira Ayuso
                • Re: [PATCH 1/1] conntrack: use same modifier socket for bulk ops, Mikhail Sennikovsky
• [PATCH nf] netfilter: nf_tables: bail out early if hardware offload is not supported, Pablo Neira Ayuso
• [iptables PATCH] tests: shell: Check overhead in iptables-save and -restore, Phil Sutter
• Alternative SCTP l4 tracker?, Sriram Yagnaraman
  • Re: Alternative SCTP l4 tracker?, Pablo Neira Ayuso
• rebasing libnftnl git, Pablo Neira Ayuso
• [PATCH nft] tests: shell: remove leftover modules on cleanup, Pablo Neira Ayuso
• [PATCH nf 1/3,v3] netfilter: nf_tables: delete flowtable hooks via transaction list, Pablo Neira Ayuso
  • [PATCH nf 2/3] netfilter: nf_tables: memleak in nft_expr_init() path, Pablo Neira Ayuso
    • Re: [PATCH nf 2/3] netfilter: nf_tables: memleak in nft_expr_init() path, Pablo Neira Ayuso
  • [PATCH nf 3/3] netfilter: nf_tables: always initialize flowtable hook list in transaction, Pablo Neira Ayuso
• [PATCH nft] evaluate: reset ctx->set after set interval evaluation, Pablo Neira Ayuso
• [PATCH nft] tests: shell: sets_with_ifnames release netns on exit, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net path, Pablo Neira Ayuso
• [PATCH] Revert "Simplify static build extension loading", Nick Hainke
  • Re: [PATCH] Revert "Simplify static build extension loading", Phil Sutter
    • Re: [PATCH] Revert "Simplify static build extension loading", Nick
      • Re: [PATCH] Revert "Simplify static build extension loading", Jan Engelhardt
      • Re: [PATCH] Revert "Simplify static build extension loading", Phil Sutter
• [nf PATCH] netfilter: nft_nat: Fix inet l4-only NAT, Phil Sutter
  • Re: [nf PATCH] netfilter: nft_nat: Fix inet l4-only NAT, Phil Sutter
  • Re: [nf PATCH] netfilter: nft_nat: Fix inet l4-only NAT, Pablo Neira Ayuso
• [PATCH nf] netfilter: nat: really support inet nat without l3 address, Florian Westphal
  • Re: [PATCH nf] netfilter: nat: really support inet nat without l3 address, Pablo Neira Ayuso
• [PATCH nft] optimize: segfault when releasing unsupported statement, Pablo Neira Ayuso
• [ANNOUNCE] nftables 1.0.3 release, Pablo Neira Ayuso
• [PATCH nft] intervals: fix compilation --with-mini-gmp, Pablo Neira Ayuso
• [PATCH 3/2,v2] netfilter: nf_tables: delete flowtable hooks via transaction list, Pablo Neira Ayuso
• [PATCH nf,v2 1/2] netfilter: nf_tables: hold mutex on netns pre_exit path, Pablo Neira Ayuso
  • [PATCH nf,v2 2/2] netfilter: nf_tables: double hook unregistration in netns path, Pablo Neira Ayuso
• [PATCH nf 1/2] netfilter: nf_tables: double hook unregistration in netns path, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nf_tables: delete flowtable hooks via transaction list, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: sanitize nft_set_desc_concat_parse(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: sanitize nft_set_desc_concat_parse(), Pablo Neira Ayuso
• [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout, Lorenzo Bianconi
  • [PATCH v4 bpf-next 02/14] bpf: Print multiple type flags in verifier log, Lorenzo Bianconi
  • [PATCH v4 bpf-next 01/14] bpf: Add support for forcing kfunc args to be referenced, Lorenzo Bianconi
  • [PATCH v4 bpf-next 03/14] bpf: Support rdonly PTR_TO_BTF_ID for pointer to const return value, Lorenzo Bianconi
  • [PATCH v4 bpf-next 13/14] selftests/bpf: add selftest for bpf_xdp_ct_add and bpf_ct_refresh_timeout kfunc, Lorenzo Bianconi
  • [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE, Lorenzo Bianconi
    • Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE, Florian Westphal
      • Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE, Kumar Kartikeya Dwivedi
        • Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE, Florian Westphal
    • Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE, kernel test robot
    • Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE, kernel test robot
    • Re: [PATCH v4 bpf-next 06/14] bpf: Whitelist some fields in nf_conn for BPF_WRITE, kernel test robot
  • [PATCH v4 bpf-next 09/14] selftests/bpf: Add C tests for rdonly PTR_TO_BTF_ID, Lorenzo Bianconi
  • [PATCH v4 bpf-next 12/14] net: netfilter: add kfunc helpers to alloc and insert a new ct entry, Lorenzo Bianconi
  • [PATCH v4 bpf-next 08/14] selftests/bpf: Add verifier tests for forced kfunc ref args, Lorenzo Bianconi
  • [PATCH v4 bpf-next 07/14] bpf: Define acquire-release pairs for kfuncs, Lorenzo Bianconi
  • [PATCH v4 bpf-next 14/14] selftests/bpf: Add negative tests for bpf_nf, Lorenzo Bianconi
  • [PATCH v4 bpf-next 11/14] net: netfilter: add kfunc helper to update ct timeout, Lorenzo Bianconi
  • [PATCH v4 bpf-next 05/14] bpf: Support passing rdonly PTR_TO_BTF_ID to kfunc, Lorenzo Bianconi
  • [PATCH v4 bpf-next 10/14] selftests/bpf: Add verifier tests for rdonly PTR_TO_BTF_ID, Lorenzo Bianconi
  • [PATCH v4 bpf-next 04/14] bpf: Support storing rdonly PTR_TO_BTF_ID in BPF maps, Lorenzo Bianconi
  • Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout, Alexei Starovoitov
    • Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout, Kumar Kartikeya Dwivedi
      • Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout, Alexei Starovoitov
        • Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout, Kumar Kartikeya Dwivedi
          • Re: [PATCH v4 bpf-next 00/14] net: netfilter: add kfunc helper to update ct timeout, Alexei Starovoitov
• [PATCH] nft: allow deletion of rule by full statement form, Chander Govindarajan
  • Re: [PATCH] nft: allow deletion of rule by full statement form, Pablo Neira Ayuso
    • Re: [PATCH] nft: allow deletion of rule by full statement form, Chander Govindarajan
      • Re: [PATCH] nft: allow deletion of rule by full statement form, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: disallow non-stateful expression in sets earlier, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: disallow non-stateful expression in sets earlier, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: disallow non-stateful expression in sets earlier, kernel test robot
• [PATCH nf-next v2 1/3] nf_flow_table_offload: offload the vlan encap in the flowtable, wenxu
  • [PATCH nf-next v2 3/3] selftests: netfilter: flowtable vlan filtering bridge support, wenxu
  • [PATCH nf-next v2 2/3] nf_flow_table_offload: offload the PPPoE encap in the flowtable, wenxu
    • Re: [PATCH nf-next v2 2/3] nf_flow_table_offload: offload the PPPoE encap in the flowtable, Pablo Neira Ayuso
      • Re: Re: [PATCH nf-next v2 2/3] nf_flow_table_offload: offload the PPPoE encap in the flowtable, wenxu@xxxxxxxxxxxxxxx
  • Re: [PATCH nf-next v2 1/3] nf_flow_table_offload: offload the vlan encap in the flowtable, Pablo Neira Ayuso
    • Re: Re: [PATCH nf-next v2 1/3] nf_flow_table_offload: offload the vlan encap in the flowtable, wenxu@xxxxxxxxxxxxxxx
    • Re: Re: [PATCH nf-next v2 1/3] nf_flow_table_offload: offload the vlan encap in the flowtable, wenxu@xxxxxxxxxxxxxxx
• [PATCH nf-next 1/2] netfilter: flowtable: fix nft_flow_route miss FLOWI_FLAG_ANYSRC flag, wenxu
  • [PATCH nf-next 2/2] netfilter: flowtable: fix nft_flow_route use saddr for nat case, wenxu
    • Re: [PATCH nf-next 2/2] netfilter: flowtable: fix nft_flow_route use saddr for nat case, Pablo Neira Ayuso
  • Re: [PATCH nf-next 1/2] netfilter: flowtable: fix nft_flow_route miss FLOWI_FLAG_ANYSRC flag, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: flowtable: fix nft_flow_route use saddr for reverse route, wenxu
  • Re: [PATCH nf-next] netfilter: flowtable: fix nft_flow_route use saddr for reverse route, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: flowtable: fix nft_flow_route use saddr for reverse route, Sven Auhagen
      • Re: [PATCH nf-next] netfilter: flowtable: fix nft_flow_route use saddr for reverse route, wenxu
    • Re: [PATCH nf-next] netfilter: flowtable: fix nft_flow_route use saddr for reverse route, wenxu
• [iptables PATCH v2] build: Fix error during out of tree build, Ben Brown
  • Re: [iptables PATCH v2] build: Fix error during out of tree build, Phil Sutter
  • Re: [iptables PATCH v2] build: Fix error during out of tree build, Jan Engelhardt
• [PATCH] nft: simplify chain lookup in do_list_chain, Chander Govindarajan
  • Re: [PATCH] nft: simplify chain lookup in do_list_chain, Pablo Neira Ayuso
• [PATCH nf-next v2] selftests: netfilter: flowtable vlan filtering bridge support, wenxu
  • Re: [PATCH nf-next v2] selftests: netfilter: flowtable vlan filtering bridge support, wenxu
• [PATCH] netfilter: conntrack: use fallthrough to cleanup, Jackie Liu
  • Re: [PATCH] netfilter: conntrack: use fallthrough to cleanup, Pablo Neira Ayuso
• [nf PATCH] netfilter: nft_limit: Clone packet limits' cost value, Phil Sutter
  • Re: [nf PATCH] netfilter: nft_limit: Clone packet limits' cost value, Pablo Neira Ayuso
• [PATCH] nft: update json output ordering to place rules after chains, Chander Govindarajan
  • Re: [PATCH] nft: update json output ordering to place rules after chains, Pablo Neira Ayuso
• [PATCH nft] netlink_delinearize: memleak when parsing concatenation data, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nft] netlink_delinearize: memleak when parsing concatenation data, Pablo Neira Ayuso
• [iptables PATCH] build: Fix error during out of tree build, Ben Brown
  • Re: [iptables PATCH] build: Fix error during out of tree build, Phil Sutter
    • Re: [iptables PATCH] build: Fix error during out of tree build, Ben Brown
• [PATCH libnftnl 1/2] expr: fib: missing #include <assert.h>, Pablo Neira Ayuso
  • [PATCH libnftnl 2/2] set_elem: missing export symbol, Pablo Neira Ayuso
• [PATCH nf] netfilter: use get_random_u32 instead of prandom, Florian Westphal
  • Re: [PATCH nf] netfilter: use get_random_u32 instead of prandom, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: use get_random_u32 instead of prandom, Florian Westphal
  • Re: [PATCH nf] netfilter: use get_random_u32 instead of prandom, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: set element extended ACK reporting support, Pablo Neira Ayuso
• [PATCH nft 1/3] parser_bison: fix error location for set elements, Pablo Neira Ayuso
  • [PATCH nft 3/3] mnl: store netlink error location for set elements, Pablo Neira Ayuso
  • [PATCH nft 2/3] src: remove NFT_NLATTR_LOC_MAX limit for netlink location error reporting, Pablo Neira Ayuso
  • Re: [PATCH nft 1/3] parser_bison: fix error location for set elements, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: disable bh to update per-cpu rnd_state, Pablo Neira Ayuso
  • Re: [PATCH nf,v2] netfilter: nf_tables: disable bh to update per-cpu rnd_state, Florian Westphal
    • Re: [PATCH nf,v2] netfilter: nf_tables: disable bh to update per-cpu rnd_state, Pablo Neira Ayuso
• [iptables PATCH] Revert "fix build for missing ETH_ALEN definition", Phil Sutter
  • Re: [iptables PATCH] Revert "fix build for missing ETH_ALEN definition", Phil Sutter
    • Re: [iptables PATCH] Revert "fix build for missing ETH_ALEN definition", Maciej Żenczykowski
• [PATCH nf] netfilter: nf_tables: disable expression reduction infra, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nf] netfilter: nf_tables: disable expression reduction infra, Pablo Neira Ayuso
• [PATCH] nft: support for dynamic register allocation, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: restrict expression reduction to first expression, Pablo Neira Ayuso
• [PATCH v3 bpf-next 0/5] net: netfilter: add kfunc helper to update ct timeout, Lorenzo Bianconi
  • [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, Lorenzo Bianconi
    • Re: [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, Toke Høiland-Jørgensen
      • Re: [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, Lorenzo Bianconi
        • Re: [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, Alexei Starovoitov
          • Re: [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, Kumar Kartikeya Dwivedi
            • Re: [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, Toke Høiland-Jørgensen
              • Re: [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, Kumar Kartikeya Dwivedi
                • Re: [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, Yonghong Song
                  • Re: [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, Kumar Kartikeya Dwivedi
    • Re: [PATCH v3 bpf-next 4/5] net: netfilter: add kfunc helper to add a new ct entry, kernel test robot
  • [PATCH v3 bpf-next 1/5] bpf: Add support for forcing kfunc args to be referenced, Lorenzo Bianconi
    • Re: [PATCH v3 bpf-next 1/5] bpf: Add support for forcing kfunc args to be referenced, Yonghong Song
      • Re: [PATCH v3 bpf-next 1/5] bpf: Add support for forcing kfunc args to be referenced, Kumar Kartikeya Dwivedi
        • Re: [PATCH v3 bpf-next 1/5] bpf: Add support for forcing kfunc args to be referenced, Yonghong Song
  • [PATCH v3 bpf-next 3/5] net: netfilter: add kfunc helper to update ct timeout, Lorenzo Bianconi
    • Re: [PATCH v3 bpf-next 3/5] net: netfilter: add kfunc helper to update ct timeout, Toke Høiland-Jørgensen
  • [PATCH v3 bpf-next 2/5] selftests/bpf: Add verifier selftests for forced kfunc ref args, Lorenzo Bianconi
    • Re: [PATCH v3 bpf-next 2/5] selftests/bpf: Add verifier selftests for forced kfunc ref args, Yonghong Song
  • [PATCH v3 bpf-next 5/5] selftests/bpf: add selftest for bpf_xdp_ct_add and bpf_ct_refresh_timeout kfunc, Lorenzo Bianconi
    • Re: [PATCH v3 bpf-next 5/5] selftests/bpf: add selftest for bpf_xdp_ct_add and bpf_ct_refresh_timeout kfunc, Yonghong Song
      • Re: [PATCH v3 bpf-next 5/5] selftests/bpf: add selftest for bpf_xdp_ct_add and bpf_ct_refresh_timeout kfunc, Lorenzo Bianconi
    • Re: [PATCH v3 bpf-next 5/5] selftests/bpf: add selftest for bpf_xdp_ct_add and bpf_ct_refresh_timeout kfunc, Andrii Nakryiko
      • Re: [PATCH v3 bpf-next 5/5] selftests/bpf: add selftest for bpf_xdp_ct_add and bpf_ct_refresh_timeout kfunc, Lorenzo Bianconi
• [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Phil Sutter
    • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Phil Sutter
        • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Florian Westphal
          • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Pablo Neira Ayuso
            • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Florian Westphal
              • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Pablo Neira Ayuso
          • Re: [PATCH] netfilter: nf_tables: restrict expression reduction to first expression, Phil Sutter
• [syzbot] KASAN: slab-out-of-bounds Read in cttimeout_net_exit, syzbot
  • [PATCH nf-next] netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit, Florian Westphal
    • Re: [PATCH nf-next] netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit, Pablo Neira Ayuso
  • Re: [syzbot] KASAN: slab-out-of-bounds Read in cttimeout_net_exit, syzbot
    • [PATCH nf] netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit, Florian Westphal
• [PATCH nf-next] netfilter: conntrack: re-fetch conntrack after insertion, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: re-fetch conntrack after insertion, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nfnetlink: fix warn in nfnetlink_unbind, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nfnetlink: fix warn in nfnetlink_unbind, Pablo Neira Ayuso
• [syzbot] WARNING in nfnetlink_unbind, syzbot
• [syzbot] KASAN: use-after-free Read in nf_confirm, syzbot
  • Re: [syzbot] KASAN: use-after-free Read in nf_confirm, Florian Westphal
• [syzbot] UBSAN: array-index-out-of-bounds in nfnetlink_unbind, syzbot
• [nf-next PATCH v4 0/4] nf_tables: Export rule optimizer results to user space, Phil Sutter
  • [PATCH v4 4/4] netfilter: nf_tables: Annotate reduced expressions, Phil Sutter
  • [PATCH v4 1/4] netfilter: nf_tables: Store net size in nft_expr_ops::size, Phil Sutter
  • [PATCH v4 2/4] netfilter: nf_tables: Introduce struct nft_expr_dp, Phil Sutter
  • [PATCH v4 3/4] netfilter: nf_tables: Introduce expression flags, Phil Sutter
  • Re: [nf-next PATCH v4 0/4] nf_tables: Export rule optimizer results to user space, Phil Sutter
• [PATCH net-next v3 0/3] Conntrack offload debuggability improvements, Vlad Buslov
  • [PATCH net-next v3 1/3] net/sched: act_ct: set 'net' pointer when creating new nf_flow_table, Vlad Buslov
  • [PATCH net-next v3 2/3] netfilter: nf_flow_table: count and limit hw offloaded entries, Vlad Buslov
  • [PATCH net-next v3 3/3] netfilter: nf_flow_table: count pending offload workqueue tasks, Vlad Buslov
  • Re: [PATCH net-next v3 0/3] Conntrack offload debuggability improvements, Pablo Neira Ayuso
• [PATCH v3] netfilter: nf_flowtable: move dst_check to packet path, Ritaro Takenaka
  • Re: [PATCH v3] netfilter: nf_flowtable: move dst_check to packet path, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: flowtable: fix TCP flow teardown, Pablo Neira Ayuso
  • Re: [PATCH nf,v2] netfilter: flowtable: fix TCP flow teardown, Oz Shlomo
    • Re: [PATCH nf,v2] netfilter: flowtable: fix TCP flow teardown, Sven Auhagen
      • Re: [PATCH nf,v2] netfilter: flowtable: fix TCP flow teardown, Pablo Neira Ayuso
• [PATCH nf] netfilter: flowtable: fix TCP flow teardown, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: flowtable: fix TCP flow teardown, Oz Shlomo
• [PATCH net-next v2 0/3] Conntrack offload debuggability improvements, Vlad Buslov
  • [PATCH net-next v2 1/3] net/sched: act_ct: set 'net' pointer when creating new nf_flow_table, Vlad Buslov
  • [PATCH net-next v2 2/3] netfilter: nf_flow_table: count and limit hw offloaded entries, Vlad Buslov
    • Re: [PATCH net-next v2 2/3] netfilter: nf_flow_table: count and limit hw offloaded entries, Pablo Neira Ayuso
      • Re: [PATCH net-next v2 2/3] netfilter: nf_flow_table: count and limit hw offloaded entries, Vlad Buslov
  • [PATCH net-next v2 3/3] netfilter: nf_flow_table: count pending offload workqueue tasks, Vlad Buslov
    • Re: [PATCH net-next v2 3/3] netfilter: nf_flow_table: count pending offload workqueue tasks, Pablo Neira Ayuso
      • Re: [PATCH net-next v2 3/3] netfilter: nf_flow_table: count pending offload workqueue tasks, Vlad Buslov
        • Re: [PATCH net-next v2 3/3] netfilter: nf_flow_table: count pending offload workqueue tasks, Pablo Neira Ayuso
          • Re: [PATCH net-next v2 3/3] netfilter: nf_flow_table: count pending offload workqueue tasks, Vlad Buslov
• [PATCH conntrack-tools] conntrack: remove -o userspace, Florian Westphal
  • Re: [PATCH conntrack-tools] conntrack: remove -o userspace, Pablo Neira Ayuso
• [PATCH v5 00/15] Network support for Landlock, Konstantin Meskhidze
  • [PATCH v5 01/15] landlock: access mask renaming, Konstantin Meskhidze
    • Re: [PATCH v5 01/15] landlock: access mask renaming, Mickaël Salaün
      • Re: [PATCH v5 01/15] landlock: access mask renaming, Konstantin Meskhidze
  • [PATCH v5 06/15] landlock: user space API network support, Konstantin Meskhidze
  • [PATCH v5 07/15] landlock: add support network rules, Konstantin Meskhidze
    • Re: [PATCH v5 07/15] landlock: add support network rules, Mickaël Salaün
      • Re: [PATCH v5 07/15] landlock: add support network rules, Konstantin Meskhidze
        • Re: [PATCH v5 07/15] landlock: add support network rules, Mickaël Salaün
          • Re: [PATCH v5 07/15] landlock: add support network rules, Konstantin Meskhidze
  • [PATCH v5 04/15] landlock: helper functions refactoring, Konstantin Meskhidze
    • Re: [PATCH v5 04/15] landlock: helper functions refactoring, Mickaël Salaün
      • Re: [PATCH v5 04/15] landlock: helper functions refactoring, Konstantin Meskhidze
        • Re: [PATCH v5 04/15] landlock: helper functions refactoring, Mickaël Salaün
          • Re: [PATCH v5 04/15] landlock: helper functions refactoring, Konstantin Meskhidze
  • [PATCH v5 03/15] landlock: merge and inherit function refactoring, Konstantin Meskhidze
    • Re: [PATCH v5 03/15] landlock: merge and inherit function refactoring, Mickaël Salaün
      • Re: [PATCH v5 03/15] landlock: merge and inherit function refactoring, Konstantin Meskhidze
  • [PATCH v5 09/15] seltests/landlock: add tests for bind() hooks, Konstantin Meskhidze
    • Re: [PATCH v5 09/15] seltests/landlock: add tests for bind() hooks, Mickaël Salaün
      • Re: [PATCH v5 09/15] seltests/landlock: add tests for bind() hooks, Konstantin Meskhidze
        • Re: [PATCH v5 09/15] seltests/landlock: add tests for bind() hooks, Mickaël Salaün
          • Re: [PATCH v5 09/15] seltests/landlock: add tests for bind() hooks, Konstantin Meskhidze
  • [PATCH v5 10/15] seltests/landlock: add tests for connect() hooks, Konstantin Meskhidze
  • [PATCH v5 14/15] seltests/landlock: invalid user input data test, Konstantin Meskhidze
  • [PATCH v5 02/15] landlock: landlock_find/insert_rule refactoring, Konstantin Meskhidze
  • [PATCH v5 08/15] landlock: TCP network hooks implementation, Konstantin Meskhidze
    • Re: [PATCH v5 08/15] landlock: TCP network hooks implementation, Mickaël Salaün
      • Re: [PATCH v5 08/15] landlock: TCP network hooks implementation, Konstantin Meskhidze
  • [PATCH v5 13/15] seltests/landlock: ruleset expanding test, Konstantin Meskhidze
  • [PATCH v5 11/15] seltests/landlock: connect() with AF_UNSPEC tests, Konstantin Meskhidze
    • Re: [PATCH v5 11/15] seltests/landlock: connect() with AF_UNSPEC tests, Mickaël Salaün
      • Re: [PATCH v5 11/15] seltests/landlock: connect() with AF_UNSPEC tests, Konstantin Meskhidze
        • Re: [PATCH v5 11/15] seltests/landlock: connect() with AF_UNSPEC tests, Mickaël Salaün
          • Re: [PATCH v5 11/15] seltests/landlock: connect() with AF_UNSPEC tests, Konstantin Meskhidze
        • Re: [PATCH v5 11/15] seltests/landlock: connect() with AF_UNSPEC tests, Mickaël Salaün
          • Re: [PATCH v5 11/15] seltests/landlock: connect() with AF_UNSPEC tests, Konstantin Meskhidze
  • [PATCH v5 15/15] samples/landlock: adds network demo, Konstantin Meskhidze
    • Re: [PATCH v5 15/15] samples/landlock: adds network demo, Mickaël Salaün
      • Re: [PATCH v5 15/15] samples/landlock: adds network demo, Konstantin Meskhidze
        • Re: [PATCH v5 15/15] samples/landlock: adds network demo, Mickaël Salaün
          • Re: [PATCH v5 15/15] samples/landlock: adds network demo, Konstantin Meskhidze
  • [PATCH v5 12/15] seltests/landlock: rules overlapping test, Konstantin Meskhidze
    • Re: [PATCH v5 12/15] seltests/landlock: rules overlapping test, Mickaël Salaün
      • Re: [PATCH v5 12/15] seltests/landlock: rules overlapping test, Konstantin Meskhidze
        • Re: [PATCH v5 12/15] seltests/landlock: rules overlapping test, Mickaël Salaün
          • Re: [PATCH v5 12/15] seltests/landlock: rules overlapping test, Konstantin Meskhidze
  • [PATCH v5 05/15] landlock: landlock_add_rule syscall refactoring, Konstantin Meskhidze
    • Re: [PATCH v5 05/15] landlock: landlock_add_rule syscall refactoring, Mickaël Salaün
      • Re: [PATCH v5 05/15] landlock: landlock_add_rule syscall refactoring, Mickaël Salaün
        • Re: [PATCH v5 05/15] landlock: landlock_add_rule syscall refactoring, Konstantin Meskhidze
      • Re: [PATCH v5 05/15] landlock: landlock_add_rule syscall refactoring, Konstantin Meskhidze
        • Re: [PATCH v5 05/15] landlock: landlock_add_rule syscall refactoring, Mickaël Salaün
          • Re: [PATCH v5 05/15] landlock: landlock_add_rule syscall refactoring, Konstantin Meskhidze
  • Re: [PATCH v5 00/15] Network support for Landlock - UDP discussion, Mickaël Salaün
    • Re: [PATCH v5 00/15] Network support for Landlock - UDP discussion, Konstantin Meskhidze
• [PATCH nf] netfilter: nft_numgen: disable preempt to access per-cpu data, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_numgen: disable preempt to access per-cpu data, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nft_numgen: disable preempt to access per-cpu data, Pablo Neira Ayuso
• [PATCH libnftnl] expr: extend support for dynamic register allocation, Pablo Neira Ayuso
• [PATCH iptables 1/2] xtables: fix compilation with musl, Nick Hainke
  • [PATCH iptables 2/2] xshared: fix compilation with musl, Nick Hainke
    • Re: [PATCH iptables 2/2] xshared: fix compilation with musl, Phil Sutter
      • [PATCH] treewide: use uint* instead of u_int*, vincent
        • Re: [PATCH] treewide: use uint* instead of u_int*, Jan Engelhardt
          • [PATCH] treewide: use uint* instead of u_int*, vincent
            • Re: [PATCH] treewide: use uint* instead of u_int*, Phil Sutter
              • Re: [PATCH] treewide: use uint* instead of u_int*, Jan Engelhardt
                • Re: [PATCH] treewide: use uint* instead of u_int*, Phil Sutter
                  • Re: [PATCH] treewide: use uint* instead of u_int*, Nick
  • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Phil Sutter
    • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Maciej Żenczykowski
      • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Phil Sutter
        • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Maciej Żenczykowski
          • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Phil Sutter
            • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Maciej Żenczykowski
        • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Florian Westphal
          • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Maciej Żenczykowski
            • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Phil Sutter
        • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Nick
          • Re: [PATCH iptables 1/2] xtables: fix compilation with musl, Maciej Żenczykowski
            • [PATCH] xtables: fix compilation with musl, vincent
• [PATCH nft] netlink_delinearize: release last register on exit, Pablo Neira Ayuso
• [iptables PATCH] xshared: Fix build for -Werror=format-security, Phil Sutter
• [ANNOUNCE] iptables 1.8.8 release, Phil Sutter
• [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Stefano Brivio
  • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Pablo Neira Ayuso
    • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Stefano Brivio
      • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Stefano Brivio
        • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Pablo Neira Ayuso
          • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Stefano Brivio
            • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Pablo Neira Ayuso
              • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Stefano Brivio
                • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Pablo Neira Ayuso
                  • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Stefano Brivio
                    • Re: [PATCH nf] nft_set_rbtree: Move clauses for expired nodes, last active node as leaf, Pablo Neira Ayuso
• [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Oz Shlomo
  • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Pablo Neira Ayuso
    • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Sven Auhagen
      • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Pablo Neira Ayuso
        • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Pablo Neira Ayuso
          • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Sven Auhagen
            • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Pablo Neira Ayuso
    • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Pablo Neira Ayuso
      • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Sven Auhagen
        • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Pablo Neira Ayuso
          • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Sven Auhagen
            • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Pablo Neira Ayuso
              • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Sven Auhagen
                • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Pablo Neira Ayuso
                  • Re: [PATCH net v2] netfilter: nf_flow_table: fix teardown flow timeout, Sven Auhagen
• [nf-next PATCH v3 0/4] nf_tables: Export rule optimizer results to user space, Phil Sutter
  • [nf-next PATCH v3 1/4] netfilter: nf_tables: Store net size in nft_expr_ops::size, Phil Sutter
  • [nf-next PATCH v3 2/4] netfilter: nf_tables: Introduce struct nft_expr_dp, Phil Sutter