Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- Re: [PATCH] netfliter: xtables: fix typo causing some targets to not load on IPv6, (continued)
[PATCH] netfilter: bridge: fix build failures in nf_ct_bridge_pre(), Vladimir Oltean
[PATCH] selftests: netfilter: remove unused rplnlh parameter,
Liu Jing
[PATCH nf-next] netfilter: bpf: Pass string literal as format argument of request_module(),
Simon Horman
KASAN: use-after-free Read in __nf_hook_entries_try_shrink,
Xia Chu
[PATCH nftables] libnftables-json: fix raw payload expression documentation,
Eric Long via B4 Relay
[RFC PATCH v2 0/8] Fix non-TCP restriction and inconsistency of TCP errors,
Mikhail Ivanov
0x19: Dates And Location for upcoming conference, Jamal Hadi Salim
[libnftnl PATCH] examples: Fix for incomplete license text in nft-ruleset-get.c,
Phil Sutter
[libnftnl PATCH] src/utils: Add a common dev_array parser,
Phil Sutter
Re: [PATCH v1] netfilter: x_tables: fix ordering of get and update table private,
Pablo Neira Ayuso
[PATCH nf-next v3 0/5] netfilter: nf_tables: reduce set element transaction size,
Florian Westphal
linux-next: duplicate patches in the ipvs-next tree,
Stephen Rothwell
[PATCH net-next v3 00/10] net: ip: add drop reasons to input route,
Menglong Dong
- [PATCH net-next v3 01/10] net: ip: refactor fib_validate_source/__fib_validate_source, Menglong Dong
- [PATCH net-next v3 02/10] net: ip: make fib_validate_source() return drop reason, Menglong Dong
- [PATCH net-next v3 03/10] net: ip: make ip_route_input_mc() return drop reason, Menglong Dong
- [PATCH net-next v3 04/10] net: ip: make ip_mc_validate_source() return drop reason, Menglong Dong
- [PATCH net-next v3 05/10] net: ip: make ip_route_input_slow() return drop reasons, Menglong Dong
- [PATCH net-next v3 06/10] net: ip: make ip_route_input_rcu() return drop reasons, Menglong Dong
- [PATCH net-next v3 07/10] net: ip: make ip_route_input_noref() return drop reasons, Menglong Dong
- [PATCH net-next v3 08/10] net: ip: make ip_route_input() return drop reasons, Menglong Dong
- [PATCH net-next v3 09/10] net: ip: make ip_mkroute_input/__mkroute_input return drop reasons, Menglong Dong
- [PATCH net-next v3 10/10] net: ip: make ip_route_use_hint() return drop reasons, Menglong Dong
[PATCH 5.10 046/518] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 5.10 045/518] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH 5.15 082/691] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 5.15 081/691] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH v2 2/6] LSM: Replace context+len with lsm_context, Casey Schaufler
[PATCH v2 1/6] LSM: Ensure the correct LSM context releaser,
Casey Schaufler
[PATCH net-next 0/9] Netfilter updates for net-net,
Pablo Neira Ayuso
- [PATCH net-next 1/9] netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c, Pablo Neira Ayuso
- [PATCH net-next 6/9] netfilter: nf_tables: switch trans_elem to real flex array, Pablo Neira Ayuso
- [PATCH net-next 5/9] netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structure, Pablo Neira Ayuso
- [PATCH net-next 8/9] netfilter: Make legacy configs user selectable, Pablo Neira Ayuso
- [PATCH net-next 7/9] netfilter: nf_tables: allocate element update information dynamically, Pablo Neira Ayuso
- [PATCH net-next 2/9] netfilter: nf_tables: replace deprecated strncpy with strscpy_pad, Pablo Neira Ayuso
- [PATCH net-next 9/9] netfilter: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Pablo Neira Ayuso
- [PATCH net-next 4/9] netfilter: nf_tables: add nft_trans_commit_list_add_elem helper, Pablo Neira Ayuso
- [PATCH net-next 3/9] netfilter: nf_tables: prefer nft_trans_elem_alloc helper, Pablo Neira Ayuso
- Re: [PATCH net-next 0/9] Netfilter updates for net-net, Jakub Kicinski
[UPDATE] Renewing Netfilter coreteam PGP keys, Pablo Neira Ayuso
[PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback,
Julia Lawall
- [PATCH 15/17] netfilter: nf_conncount: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Julia Lawall
- [PATCH 16/17] netfilter: expect: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Julia Lawall
- [PATCH 17/17] netfilter: xt_hashlimit: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Julia Lawall
- Re: (subset) [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Jens Axboe
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Paul E. McKenney
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Vlastimil Babka
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Pablo Neira Ayuso
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, patchwork-bot+netdevbpf
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, patchwork-bot+netdevbpf
- Re: (subset) [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Michael Ellerman
[PATCH libmnl,v2] attr: expand mnl_attr_get_uint() documentation,
Pablo Neira Ayuso
[PATCH libmnl,v2] build: do not build documentation automatically,
Pablo Neira Ayuso
[PATCH RFC v1 net-next 00/12] bridge-fastpath and related improvements,
Eric Woudstra
- [PATCH RFC v1 net-next 01/12] netfilter: nf_flow_table_offload: Add nf_flow_encap_push() for xmit direct, Eric Woudstra
- [PATCH RFC v1 net-next 02/12] netfilter: bridge: Add conntrack double vlan and pppoe, Eric Woudstra
- [PATCH RFC v1 net-next 03/12] netfilter: nft_chain_filter: Add bridge double vlan and pppoe, Eric Woudstra
- [PATCH RFC v1 net-next 04/12] bridge: br_vlan_fill_forward_path_pvid: Add port to port, Eric Woudstra
- [PATCH RFC v1 net-next 05/12] bridge: br_fill_forward_path add port to port, Eric Woudstra
- [PATCH RFC v1 net-next 06/12] net: core: dev: Add dev_fill_bridge_path(), Eric Woudstra
- [PATCH RFC v1 net-next 07/12] netfilter :nf_flow_table_offload: Add nf_flow_rule_bridge(), Eric Woudstra
- [PATCH RFC v1 net-next 08/12] netfilter: nf_flow_table_inet: Add nf_flowtable_type flowtable_bridge, Eric Woudstra
- [PATCH RFC v1 net-next 09/12] netfilter: nft_flow_offload: Add NFPROTO_BRIDGE to validate, Eric Woudstra
- [PATCH RFC v1 net-next 10/12] netfilter: nft_flow_offload: Add DEV_PATH_MTK_WDMA to nft_dev_path_info(), Eric Woudstra
- [PATCH RFC v1 net-next 11/12] bridge: br_vlan_fill_forward_path_mode no _UNTAG_HW for dsa, Eric Woudstra
- [PATCH RFC v1 net-next 12/12] netfilter: nft_flow_offload: Add bridgeflow to nft_flow_offload_eval(), Eric Woudstra
- Re: [PATCH RFC v1 net-next 00/12] bridge-fastpath and related improvements, Nikolay Aleksandrov
[PATCH libnetfilter_queue v3 00/15] Convert libnetfilter_queue to not need libnfnetlink,
Duncan Roe
- [PATCH libnetfilter_queue v3 01/15] src: Convert nfq_open() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 02/15] src: Convert nfq_open_nfnl() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 04/15] src: Convert nfq_create_queue(), nfq_bind_pf() & nfq_unbind_pf() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 03/15] src: Convert nfq_close() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 05/15] src: Convert nfq_set_queue_flags(), nfq_set_queue_maxlen() & nfq_set_mode() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 06/15] src: Convert nfq_handle_packet(), nfq_get_secctx(), nfq_get_payload() and all the nfq_get_ functions to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 07/15] src: Convert nfq_set_verdict() and nfq_set_verdict2() to use libmnl if there is no data, Duncan Roe
- [PATCH libnetfilter_queue v3 08/15] src: Incorporate nfnl_rcvbufsiz() in libnetfilter_queue, Duncan Roe
- [PATCH libnetfilter_queue v3 09/15] src: Convert nfq_fd() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 10/15] src: Convert remaining nfq_* functions to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 11/15] src: Copy nlif-related files from libnfnetlink, Duncan Roe
- [PATCH libnetfilter_queue v3 12/15] doc: Add iftable.c to the doxygen system, Duncan Roe
- [PATCH libnetfilter_queue v3 14/15] include: Use libmnl.h instead of libnfnetlink.h, Duncan Roe
- [PATCH libnetfilter_queue v3 13/15] src: Convert all nlif_* functions to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 15/15] build: Remove libnfnetlink from the build, Duncan Roe
[PATCH libmnl] attr: expand mnl_attr_get_uint() documentation,
Pablo Neira Ayuso
[PATCH conntrack,v2 1/2] conntrack: improve --secmark,--id,--zone parser,
Pablo Neira Ayuso
[PATCH libmnl] build: do not build documentation automatically,
Pablo Neira Ayuso
[PATCH conntrack 1/3] conntrack: improve --secmark,--id,--zone parser,
Pablo Neira Ayuso
[syzbot] [bridge?] INFO: rcu detected stall in br_handle_frame (5), syzbot
Building libnetfilter_queue has required kernel headers for some time,
Duncan Roe
[PATCH bpf v1 1/2] bpf: fix link info netfilter flags to populate defrag flag,
Tyrone Wu
[nft PATCH] tests: shell: Join arithmetic statements in maps/vmap_timeout,
Phil Sutter
[PATCH nf-next v2 0/5] netfilter: nf_tables: reduce set element transaction size,
Florian Westphal
[PATCH nft] tests: shell: fix spurious dump failure in vmap timeout test,
Florian Westphal
[PATCH net] netfilter: nf_tables: Fix memory leak in nf_flow_offload_xdp_setup(), Lorenzo Bianconi
[PATCH nf] netfilter: bpf: must hold reference on net namespace,
Florian Westphal
[PATCH nft] doc: extend description of fib expression,
Florian Westphal
[PATCH libnftnl] include: refresh nf_tables.h copy,
Pablo Neira Ayuso
[syzbot] [netfilter?] INFO: rcu detected stall in NF_HOOK (2), syzbot
[PATCH] nf_conntrack_proto_udp: Set ASSURED for NAT_CLASH entries to avoid packets dropped,
Yadan Fan
[PATCH] netfilter: Record uid and gid in xt_AUDIT,
Richard Weinberger
[iptables PATCH 1/3] ebtables: Fix for -S with rule number,
Phil Sutter
[PATCH nft,v2] libnftables: remove set element uncollapse for error reporting, Pablo Neira Ayuso
[iptables PATCH v2 0/8] nft: Implement forward compat for future binaries,
Phil Sutter
- [iptables PATCH v2 7/8] nft: Embed compat extensions in rule userdata, Phil Sutter
- [iptables PATCH v2 1/8] nft: Make add_log() static, Phil Sutter
- [iptables PATCH v2 3/8] nft: __add_{match,target}() can't fail, Phil Sutter
- [iptables PATCH v2 4/8] nft: Introduce UDATA_TYPE_COMPAT_EXT, Phil Sutter
- [iptables PATCH v2 5/8] nft-ruleparse: Fallback to compat expressions in userdata, Phil Sutter
- [iptables PATCH v2 2/8] nft: ruleparse: Introduce nft_parse_rule_expr(), Phil Sutter
- [iptables PATCH v2 6/8] nft: Pass nft_handle into add_{action,match}(), Phil Sutter
- [iptables PATCH v2 8/8] tests: iptables-test: Add nft-compat variant, Phil Sutter
[iptables PATCH 0/5] Some minor fixes,
Phil Sutter
[PATCH nft] libnftables: remove set element uncollapse for error reporting, Pablo Neira Ayuso
kmemleak in flowtable xdp, Pablo Neira Ayuso
[PATCH nf 1/2] netfilter: fib: check correct rtable in vrf setups,
Florian Westphal
Argument -S (--list-rules) in ebtables,
Nicola Serafini
[syzbot] [netfilter?] WARNING in __nf_unregister_net_hook (7), syzbot
[RFC libnftnl/nft 0/5] nftables: indicate presence of unsupported netlink attributes,
Florian Westphal
[PATCH nf v3] netfilter: xtables: avoid NFPROTO_UNSPEC where needed,
Florian Westphal
[PATCH] doc: don't suggest to disable GSO, Ronan Pigott
[PATCH nf v2] netfilter: xtables: avoid NFPROTO_UNSPEC where needed,
Florian Westphal
[PATCH AUTOSEL 6.1 33/42] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
[PATCH AUTOSEL 6.6 47/58] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
[PATCH AUTOSEL 6.6 46/58] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Sasha Levin
[PATCH AUTOSEL 6.10 54/70] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
[PATCH AUTOSEL 6.10 53/70] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Sasha Levin
[PATCH AUTOSEL 6.11 60/76] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
[PATCH AUTOSEL 6.11 59/76] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Sasha Levin
[PATCH] netfilter: xt_cluster: restrict it to NFPROTO_IPV4 and NFPROTO_IPV6, Pablo Neira Ayuso
[PATCH libnetfilter_queue] build: add missing backslash to build_man.sh,
Duncan Roe
[PATCH] xt_cluster: add logic for use from NFPROTO_BRIDGE, Jan Engelhardt
[PATCH nf] netfilter: xt_cluster: restrict to ip/ip6tables,
Florian Westphal
[syzbot] [netfilter?] WARNING in xt_cluster_mt (2), syzbot
[RFC PATCH v1 0/2] Fix non-TCP sockets restriction,
Mikhail Ivanov
Re: [syzbot] [tipc?] BUG: soft lockup in do_sock_setsockopt, syzbot
[ANNOUNCE] nftables 1.1.1 release, Pablo Neira Ayuso
[ANNOUNCE] libnftnl 1.2.8 release, Pablo Neira Ayuso
[nft PATCH 0/9] Support wildcard netdev hooks and events,
Phil Sutter
- [nft PATCH 3/9] monitor: Recognize flowtable add/del events, Phil Sutter
- [nft PATCH 5/9] mnl: Support simple wildcards in netdev hooks, Phil Sutter
- [nft PATCH 8/9] tests: monitor: Support running external commands, Phil Sutter
- [nft PATCH 6/9] parser_bison: Accept ASTERISK_STRING in flowtable_expr_member, Phil Sutter
- [nft PATCH 1/9] json: Support typeof in set and map types, Phil Sutter
- [nft PATCH 7/9] tests: shell: Adjust to ifname-based flowtables, Phil Sutter
- [nft PATCH 2/9] tests: py: Fix for storing payload into missing file, Phil Sutter
- [nft PATCH 9/9] monitor: Support NFT_MSG_(NEW|DEL)DEV events, Phil Sutter
- [nft PATCH 4/9] tests: monitor: Run in own netns, Phil Sutter
- Re: [nft PATCH 0/9] Support wildcard netdev hooks and events, Florian Westphal
- Re: [nft PATCH 0/9] Support wildcard netdev hooks and events, Phil Sutter
[libnftnl PATCH 0/4] Support wildcard netdev hooks and events,
Phil Sutter
[PATCH nf-next 0/4] netfilter: use skb_drop_reason in more places,
Florian Westphal
[iptables PATCH] tests: shell: Adjust for recent changes in libnftnl,
Phil Sutter
[libnftnl PATCH] rule: Don't append a newline when printing a rule,
Phil Sutter
[libnftnl PATCH] Partially revert "rule, set_elem: remove trailing \n in userdata snprintf",
Phil Sutter
[PATCH nf-next v6] netfilter: Make legacy configs user selectable,
Breno Leitao
[PATCH] nf_conntrack_proto_udp: do not accept packets with IPS_NAT_CLASH,
Hannes Reinecke
iptables 1.8.10 translate error,
imnozi
[PATCH 6.1 62/73] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 6.1 61/73] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH 6.6 46/54] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 6.6 45/54] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH] selftests: netfilter: Add missing resturn value.,
zhangjiao2
[PATCH nf] netfilter: nf_tables: prevent nf_skb_duplicated corruption,
Eric Dumazet
[nf PATCH] selftests: netfilter: Fix nft_audit.sh for newer nft binaries,
Phil Sutter
[PATCH net,v2 00/14] Netfilter fixes for net,
Pablo Neira Ayuso
- [PATCH net 03/14] selftests: netfilter: add reverse-clash resolution test case, Pablo Neira Ayuso
- [PATCH net 01/14] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Pablo Neira Ayuso
- [PATCH net 04/14] selftests: netfilter: nft_tproxy.sh: add tcp tests, Pablo Neira Ayuso
- [PATCH net 07/14] netfilter: nf_tables: Keep deleted flowtable hooks until after RCU, Pablo Neira Ayuso
- [PATCH net 08/14] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Pablo Neira Ayuso
- [PATCH net 12/14] netfilter: nfnetlink_queue: remove old clash resolution logic, Pablo Neira Ayuso
- [PATCH net 05/14] netfilter: ctnetlink: Guard possible unused functions, Pablo Neira Ayuso
- [PATCH net 14/14] selftests: netfilter: Avoid hanging ipvs.sh, Pablo Neira Ayuso
- [PATCH net 11/14] netfilter: nf_tables: missing objects with no memcg accounting, Pablo Neira Ayuso
- [PATCH net 06/14] docs: tproxy: ignore non-transparent sockets in iptables, Pablo Neira Ayuso
- [PATCH net 10/14] netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path, Pablo Neira Ayuso
- [PATCH net 02/14] netfilter: conntrack: add clash resolution for reverse collisions, Pablo Neira Ayuso
- [PATCH net 09/14] netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS, Pablo Neira Ayuso
- [PATCH net 13/14] kselftest: add test for nfqueue induced conntrack race, Pablo Neira Ayuso
[nf-next PATCH v5 00/18] Dynamic hook interface binding,
Phil Sutter
- [nf-next PATCH v5 07/18] netfilter: nf_tables: Introduce functions freeing nft_hook objects, Phil Sutter
- [nf-next PATCH v5 03/18] netfilter: nf_tables: Use stored ifname in netdev hook dumps, Phil Sutter
- [nf-next PATCH v5 17/18] netfilter: nf_tables: Add notications for hook changes, Phil Sutter
- [nf-next PATCH v5 10/18] netfilter: nf_tables: Drop __nft_unregister_flowtable_net_hooks(), Phil Sutter
- [nf-next PATCH v5 16/18] netfilter: nf_tables: Support wildcard netdev hook specs, Phil Sutter
- [nf-next PATCH v5 12/18] netfilter: nf_tables: chain: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v5 13/18] netfilter: nf_tables: flowtable: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v5 01/18] netfilter: nf_tables: Flowtable hook's pf value never varies, Phil Sutter
- [nf-next PATCH v5 02/18] netfilter: nf_tables: Store user-defined hook ifname, Phil Sutter
- [nf-next PATCH v5 04/18] netfilter: nf_tables: Compare netdev hooks based on stored name, Phil Sutter
- [nf-next PATCH v5 11/18] netfilter: nf_tables: Have a list of nf_hook_ops in nft_hook, Phil Sutter
- [nf-next PATCH v5 18/18] selftests: netfilter: Torture nftables netdev hooks, Phil Sutter
- [nf-next PATCH v5 15/18] netfilter: nf_tables: Handle NETDEV_CHANGENAME events, Phil Sutter
- [nf-next PATCH v5 08/18] netfilter: nf_tables: Introduce nft_hook_find_ops(), Phil Sutter
- [nf-next PATCH v5 09/18] netfilter: nf_tables: Introduce nft_register_flowtable_ops(), Phil Sutter
- [nf-next PATCH v5 14/18] netfilter: nf_tables: Wrap netdev notifiers, Phil Sutter
- [nf-next PATCH v5 05/18] netfilter: nf_tables: Tolerate chains with no remaining hooks, Phil Sutter
- [nf-next PATCH v5 06/18] netfilter: nf_tables: Simplify chain netdev notifier, Phil Sutter
- Re: [nf-next PATCH v5 00/18] Dynamic hook interface binding, Florian Westphal
[bug report] netfilter: nf_tables: no size estimation if number of set elements is unknown, Dan Carpenter
[nf PATCH] netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED,
Phil Sutter
Unsubscribe, michael . steinmann
[ANNOUNCE] libnetfilter_conntrack 1.1.0 release, Pablo Neira Ayuso
[PATCH AUTOSEL 6.6 038/139] netfilter: nf_tables: don't initialize registers in nft_do_chain(), Sasha Levin
[PATCH AUTOSEL 6.10 040/197] netfilter: nf_tables: don't initialize registers in nft_do_chain(), Sasha Levin
[PATCH AUTOSEL 6.11 049/244] netfilter: nf_tables: don't initialize registers in nft_do_chain(),
Sasha Levin
[PATCH AUTOSEL 6.11 048/244] netfilter: nf_tables: do not remove elements if set backend implements .abort, Sasha Levin
[PATCH libnftnl] src: remove scaffolding around deprecated parser functions, Pablo Neira Ayuso
[PATCH libnetfilter_conntrack] src: remove unused parameter from build functions, Pablo Neira Ayuso
[PATCH v4] net/bridge: Optimizing read-write locks in ebtables.c,
yushengjin
[PATCH nf-next 0/7] netfilter: rework conntrack/flowtable interaction,
Florian Westphal
[PATCH v3] net/bridge: Optimizing read-write locks in ebtables.c,
yushengjin
[PATCH v2] net/bridge: Optimizing read-write locks in ebtables.c,
yushengjin
ct hardware offload ignores RST packet,
Chris Mi
[PATCH] net/bridge: Optimizing read-write locks in ebtables.c,
yushengjin
[PATCH libnftnl] expr: dynset: validate expressions are of nested type, Florian Westphal
[nf-next:testing 4/5] net/netfilter/nf_nat_masquerade.c:273:6: warning: variable 'ret' is uninitialized when used here, kernel test robot
[nf-next:testing 4/5] net/netfilter/nf_nat_masquerade.c:252:30: warning: variable 'newrange' set but not used, kernel test robot
Re: [syzbot] [netfilter] BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet,
syzbot
[nf-next PATCH v4 00/16] Dynamic hook interface binding,
Phil Sutter
- [nf-next PATCH v4 09/16] netfilter: nf_tables: Drop __nft_unregister_flowtable_net_hooks(), Phil Sutter
- [nf-next PATCH v4 06/16] netfilter: nf_tables: Introduce functions freeing nft_hook objects, Phil Sutter
- [nf-next PATCH v4 03/16] netfilter: nf_tables: Use stored ifname in netdev hook dumps, Phil Sutter
- [nf-next PATCH v4 07/16] netfilter: nf_tables: Introduce nft_hook_find_ops(), Phil Sutter
- [nf-next PATCH v4 10/16] netfilter: nf_tables: Have a list of nf_hook_ops in nft_hook, Phil Sutter
- [nf-next PATCH v4 14/16] netfilter: nf_tables: Support wildcard netdev hook specs, Phil Sutter
- [nf-next PATCH v4 04/16] netfilter: nf_tables: Compare netdev hooks based on stored name, Phil Sutter
- [nf-next PATCH v4 05/16] netfilter: nf_tables: Tolerate chains with no remaining hooks, Phil Sutter
- [nf-next PATCH v4 08/16] netfilter: nf_tables: Introduce nft_register_flowtable_ops(), Phil Sutter
- [nf-next PATCH v4 02/16] netfilter: nf_tables: Store user-defined hook ifname, Phil Sutter
- [nf-next PATCH v4 12/16] netfilter: nf_tables: flowtable: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v4 16/16] selftests: netfilter: Torture nftables netdev hooks, Phil Sutter
- [nf-next PATCH v4 13/16] netfilter: nf_tables: Handle NETDEV_CHANGENAME events, Phil Sutter
- [nf-next PATCH v4 01/16] netfilter: nf_tables: Flowtable hook's pf value never varies, Phil Sutter
- [nf-next PATCH v4 11/16] netfilter: nf_tables: chain: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v4 15/16] netfilter: nf_tables: Add notications for hook changes, Phil Sutter
stable request: netfilter: make cgroupsv2 matching work with namespaces,
Florian Westphal
[nf PATCH v2] selftests: netfilter: Avoid hanging ipvs.sh,
Phil Sutter
[nf PATCH] netfilter: nf_tables: nft_flowtable_find_dev() lacks rcu_read_lock(),
Phil Sutter
[nf PATCH] selftests: netfilter: Avoid hanging ipvs.sh,
Phil Sutter
[PATCH 5.4.y 1/1] inet: inet_defrag: prevent sk release while still in use, Saeed Mirzamohammadi
[PATCH 5.10.y 1/1] inet: inet_defrag: prevent sk release while still in use, Saeed Mirzamohammadi
[PATCH 5.15.y 1/1] inet: inet_defrag: prevent sk release while still in use, Saeed Mirzamohammadi
[PATCH nf] kselftest: add test for nfqueue induced conntrack race,
Florian Westphal
[PATCH nf] netfilter: nfnetlink_queue: remove old clash resolution logic,
Florian Westphal
[PATCH nf,v2] netfilter: nf_tables: missing objects with no memcg accounting,
Pablo Neira Ayuso
[PATCH 1/5] LSM: Replace context+len with lsm_context,
Casey Schaufler
[no subject], Unknown
[PATCH nf] netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path,
Pablo Neira Ayuso
[PATCH -stable,5.10 0/2] Netfilter fixes for -stable,
Pablo Neira Ayuso
[PATCH -stable,5.15 0/2] Netfilter fixes for -stable,
Pablo Neira Ayuso
[PATCH -stable,6.1 0/2] Netfilter fixes for -stable,
Pablo Neira Ayuso
[PATCH -stable,6.6 0/2] Netfilter fixes for -stable,
Pablo Neira Ayuso
[PATCH nft,v2] cache: initialize filter when fetching implicit chains, Pablo Neira Ayuso
[PATCH nft] cache: initialize filter when fetching implicit chains, Pablo Neira Ayuso
[PATCH nft,v3] doc: tproxy is non-terminal in nftables,
Pablo Neira Ayuso
[PATCH nft,v2] doc: tproxy is non-terminal in nftables, Pablo Neira Ayuso
[PATCH nf-next 0/2] netfilter: conntrack: label helpers conditional compilation updates,
Simon Horman
[PATCH nf-next] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Simon Horman
"libmnl" project doxygen-generated documentation,
Duncan Roe
[PATCH nft] doc: tproxy is non-terminal in nftables,
Pablo Neira Ayuso
[PATCH nft] tests: shell: more ransomization for timeout parameter, Florian Westphal
Re: [syzbot] [virt?] [netfilter?] INFO: rcu detected stall in ip_list_rcv (6), syzbot
[PATCH net] netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level(),
Dan Carpenter
[PATCH libnetfilter_queue] doc: Install libnetfilter_queue.7 man page, Duncan Roe
[PATCH net] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put(),
Eric Dumazet
[iptables PATCH] extensions: TPROXY: Fix for translation being non-terminal,
Phil Sutter
[PATCH nf] netfilter: nft_tproxy: make it terminal,
Pablo Neira Ayuso
[PATCH nf] netfilter: nfnetlink_queue: reroute reinjected packets from postrouting,
Pablo Neira Ayuso
[no subject], Unknown
[no subject], Unknown
[nf-next PATCH v3 00/16] Dynamic hook interface binding,
Phil Sutter
- [nf-next PATCH v3 11/16] netfilter: nf_tables: chain: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v3 02/16] netfilter: nf_tables: Flowtable hook's pf value never varies, Phil Sutter
- [nf-next PATCH v3 14/16] netfilter: nf_tables: Support wildcard netdev hook specs, Phil Sutter
- [nf-next PATCH v3 04/16] netfilter: nf_tables: Use stored ifname in netdev hook dumps, Phil Sutter
- [nf-next PATCH v3 09/16] netfilter: nf_tables: Introduce nft_register_flowtable_ops(), Phil Sutter
- [nf-next PATCH v3 07/16] netfilter: nf_tables: Introduce functions freeing nft_hook objects, Phil Sutter
- [nf-next PATCH v3 01/16] netfilter: nf_tables: Keep deleted flowtable hooks until after RCU, Phil Sutter
- [nf-next PATCH v3 03/16] netfilter: nf_tables: Store user-defined hook ifname, Phil Sutter
- [nf-next PATCH v3 06/16] netfilter: nf_tables: Tolerate chains with no remaining hooks, Phil Sutter
- [nf-next PATCH v3 05/16] netfilter: nf_tables: Compare netdev hooks based on stored name, Phil Sutter
- [nf-next PATCH v3 12/16] netfilter: nf_tables: flowtable: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v3 08/16] netfilter: nf_tables: Introduce nft_hook_find_ops(), Phil Sutter
- [nf-next PATCH v3 10/16] netfilter: nf_tables: Have a list of nf_hook_ops in nft_hook, Phil Sutter
- [nf-next PATCH v3 13/16] netfilter: nf_tables: Handle NETDEV_CHANGENAME events, Phil Sutter
- [nf-next PATCH v3 15/16] netfilter: nf_tables: Add notications for hook changes, Phil Sutter
- [nf-next PATCH v3 16/16] selftests: netfilter: Torture nftables netdev hooks, Phil Sutter
[PATCH] docs: tproxy: ipt: ignore non-transparent sockets, 谢致邦 (XIE Zhibang)
[PATCH v3] selftests: netfilter: nft_tproxy.sh: add tcp tests, Antonio Ojea
[PATCH net] net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_init(),
Lorenzo Bianconi
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
