Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- [PATCH 22/22] jiffies: Define secs_to_jiffies(), (continued)
- [PATCH net-next] net: reformat kdoc return statements,
Jakub Kicinski
- [PATCH nf-next,v2] netfilter: bitwise: add support for doing AND, OR and XOR directly, Pablo Neira Ayuso
- Re: Dropping of the end of a chain, imnozi
- [PATCH nf-next 0/2] nftables bitwise multiregister support,
Pablo Neira Ayuso
- [PATCH nf-next 0/5] netfilter: Prepare netfilter to future .flowi4_tos conversion.,
Guillaume Nault
- nft set statistics/info,
Florian Westphal
- [PATCH nf-next v5 0/5] netfilter: nf_tables: reduce set element transaction size,
Florian Westphal
- [PATCH net v2] netfilter: ipset: add missing range check in bitmap_ip_uadt,
Jeongjun Park
- [syzbot] Monthly netfilter report (Nov 2024), syzbot
- 0x19: Call For Submissions open!, Jamal Hadi Salim
- [PATCH net] netfilter: ipset: add missing range check in bitmap_ip_uadt,
Jeongjun Park
- [syzbot] [netfilter?] KASAN: slab-out-of-bounds Read in bitmap_ip_add (2), syzbot
- [PATCH libmnl v2] whitespace: remove spacing irregularities,
Duncan Roe
- [PATCH] netfilter: uapi: Fix file names for case-insensitive filesystem.,
egyszeregy
- [PATCH] ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init(),
Jinghao Jia
- [PATCH libmnl] whitespace: remove spacing irregularities,
Duncan Roe
- [PATCH iptables] ip[6]tables-translate: fix test failures when WESP is defined,
Jeremy Sowden
- [ANNOUNCE] iptables 1.8.11 release, Phil Sutter
- [iptables PATCH] xtables-translate: Use protocol name/value as user specified it, Phil Sutter
- [PATCH] selftests: netfilter: Fix the bug of missing return values, guanjing
- [PATCH nf-next] netfilter: conntrack: add conntrack event timestamp,
Florian Westphal
- [PATCH nf-next v4 0/5] netfilter: nf_tables: reduce set element transaction size,
Florian Westphal
- [iptables PATCH] libxtables: Hide xtables_strtoul_base() symbol,
Phil Sutter
- [nft PATCH] tests: monitor: Become $PWD agnostic,
Phil Sutter
- [PATCH nft] tests: monitor: run-tests.sh: restore cwd before unshare,
Florian Westphal
- [PATCH net-next v5 0/9] net: ip: add drop reasons to input route,
Menglong Dong
- [PATCH net-next v5 1/9] net: ip: make fib_validate_source() support drop reasons, Menglong Dong
- [PATCH net-next v5 2/9] net: ip: make ip_route_input_mc() return drop reason, Menglong Dong
- [PATCH net-next v5 3/9] net: ip: make ip_mc_validate_source() return drop reason, Menglong Dong
- [PATCH net-next v5 4/9] net: ip: make ip_route_input_slow() return drop reasons, Menglong Dong
- [PATCH net-next v5 5/9] net: ip: make ip_route_input_rcu() return drop reasons, Menglong Dong
- [PATCH net-next v5 6/9] net: ip: make ip_route_input_noref() return drop reasons, Menglong Dong
- [PATCH net-next v5 7/9] net: ip: make ip_route_input() return drop reasons, Menglong Dong
- [PATCH net-next v5 8/9] net: ip: make ip_mkroute_input/__mkroute_input return drop reasons, Menglong Dong
- [PATCH net-next v5 9/9] net: ip: make ip_route_use_hint() return drop reasons, Menglong Dong
- Re: [PATCH net-next v5 0/9] net: ip: add drop reasons to input route, patchwork-bot+netdevbpf
- [PATCH nft] mnl: restore --debug=netlink output with chains, Pablo Neira Ayuso
- [PATCH net 0/1] Netfilter fix for net,
Pablo Neira Ayuso
- [PATCH net-next] ipv4: Prepare ip_route_output() to future .flowi4_tos conversion.,
Guillaume Nault
- [iptables PATCH 1/5] tests: shell: iptables/0010-wait_0 is unreliable,
Phil Sutter
- [no subject], Unknown
- [conntrack-tools PATCH] src: Eliminate warnings with -Wcalloc-transposed-args,
Phil Sutter
- [conntrack-tools PATCH] conntrack: Fix for ENOENT in mnl_nfct_delete_cb(),
Phil Sutter
- [iptables PATCH 1/2] tests: iptables-test: Properly assert rule deletion errors,
Phil Sutter
- [iptables PATCH 1/3] ebtables: Clone extensions before modifying them,
Phil Sutter
- [PATCH nf,v4] netfilter: nf_tables: wait for rcu grace period on net_device removal, Pablo Neira Ayuso
- [PATCH v5 net-next 00/13] AccECN protocol preparation patch series,
chia-yu . chang
- [PATCH v5 net-next 01/13] tcp: reorganize tcp_in_ack_event() and tcp_count_delivered(), chia-yu . chang
- [PATCH v5 net-next 02/13] tcp: create FLAG_TS_PROGRESS, chia-yu . chang
- [PATCH v5 net-next 04/13] tcp: extend TCP flags to allow AE bit/ACE field, chia-yu . chang
- [PATCH v5 net-next 03/13] tcp: use BIT() macro in include/net/tcp.h, chia-yu . chang
- [PATCH v5 net-next 05/13] tcp: reorganize SYN ECN code, chia-yu . chang
- [PATCH v5 net-next 07/13] tcp: helpers for ECN mode handling, chia-yu . chang
- [PATCH v5 net-next 06/13] tcp: rework {__,}tcp_ecn_check_ce() -> tcp_data_ecn_check(), chia-yu . chang
- [PATCH v5 net-next 09/13] gro: prevent ACE field corruption & better AccECN handling, chia-yu . chang
- [PATCH v5 net-next 10/13] tcp: AccECN support to tcp_add_backlog, chia-yu . chang
- [PATCH v5 net-next 12/13] tcp: Pass flags to __tcp_send_ack, chia-yu . chang
- [PATCH v5 net-next 08/13] gso: AccECN support, chia-yu . chang
- [PATCH v5 net-next 13/13] tcp: fast path functions later, chia-yu . chang
- [PATCH v5 net-next 11/13] tcp: allow ECN bits in TOS/traffic class, chia-yu . chang
- [PATCH net-next] selftests: netfilter: nft_queue.sh: fix warnings with socat 1.8.0.0,
Florian Westphal
- [PATCH net-next] selftests: netfilter: run conntrack_dump_flush in netns,
Florian Westphal
- [PATCH net-next] selftests: net: include lib/sh/*.sh with lib.sh,
Matthieu Baerts (NGI0)
- [PATCH nf-next v3 0/7] netfilter: nf_tables: avoid PROVE_RCU_LIST splats,
Florian Westphal
- [Patch lsm/dev-staging] selinux: Fix pointer use in selinux_dentry_init_security,
Casey Schaufler
- [bug report] lsm: replace context+len with lsm_context,
Dan Carpenter
- [PATCH lsm/dev] netfilter: Use correct length value in ctnetlink_secctx_size,
Casey Schaufler
- [PATCH nf v1] netfilter: netlink: Report extack policy errors for batched ops,
Donald Hunter
- [PATCH nft] json: collapse set element commands from parser,
Pablo Neira Ayuso
- cttimeout: link to own gitweb instance broken,
Jan Engelhardt
- [PATCH nf] netfilter: nft_payload: sanitize offset and length before calling skb_checksum(), Pablo Neira Ayuso
- [PATCH nft v2] doc: extend description of fib expression,
Florian Westphal
- [PATCH nf-next v2] netfilter: conntrack: collect start time as early as possible,
Florian Westphal
- [PATCH v2 nf-next 0/7] netfilter: nf_tables: avoid PROVE_RCU_LIST splats,
Florian Westphal
- [PATCH RESEND net-next v4 0/9] net: ip: add drop reasons to input route,
Menglong Dong
- [PATCH v3] selftests/net: Add missing gitignore file, Li Zhijian
- [libnftnl PATCH v2] Use SPDX License Identifiers in headers,
Phil Sutter
- [PATCH nf,v3] netfilter: nf_tables: wait for rcu grace period on net_device removal, Pablo Neira Ayuso
- [PATCH nft] tests: monitor: fix up test case breakage,
Florian Westphal
- [libnftnl PATCH v4] Introduce struct nftnl_str_array,
Phil Sutter
- [libnftnl PATCH v3] Introduce struct nftnl_str_array,
Phil Sutter
- [iptables PATCH] tests: shell: Fix for 'make distcheck',
Phil Sutter
- [PATCH nft] tests: shell: move device to different namespace, Pablo Neira Ayuso
- [PATCH nf,v2] netfilter: nf_tables: wait for rcu grace period on net_device removal,
Pablo Neira Ayuso
- [PATCH nf] netfilter: nf_tables: wait for rcu grace period on net_device removal,
Pablo Neira Ayuso
- [PATCH nf-next] netfilter: conntrack: collect start time as early as possible,
Florian Westphal
- BUSINESS LAUNCH , Chan Moo Bahk
- [PATCH nf-next 0/7] netfilter: nf_tables: avoid PROVE_RCU_LIST splats,
Florian Westphal
- [PATCH nf] netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6(),
Eric Dumazet
- [PATCH nft] src: allow to map key to nfqueue number,
Florian Westphal
- [PATCH] src: allow to map key to nfqueue number, Florian Westphal
- [PATCH for-next 4/7] selftests/net: Add missing gitignore file,
Li Zhijian
- Netfilter: suspicious RCU usage in __nft_rule_lookup,
Matthieu Baerts
- [PATCH nft,v2 1/4] mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc(),
Pablo Neira Ayuso
- [PATCH bpf-next v4 0/9] net: ip: add drop reasons to input route,
Menglong Dong
- [PATCH bpf-next v4 1/9] net: ip: make fib_validate_source() support drop reasons, Menglong Dong
- [PATCH bpf-next v4 2/9] net: ip: make ip_route_input_mc() return drop reason, Menglong Dong
- [PATCH bpf-next v4 3/9] net: ip: make ip_mc_validate_source() return drop reason, Menglong Dong
- [PATCH bpf-next v4 4/9] net: ip: make ip_route_input_slow() return drop reasons, Menglong Dong
- [PATCH bpf-next v4 5/9] net: ip: make ip_route_input_rcu() return drop reasons, Menglong Dong
- [PATCH bpf-next v4 6/9] net: ip: make ip_route_input_noref() return drop reasons, Menglong Dong
- [PATCH bpf-next v4 7/9] net: ip: make ip_route_input() return drop reasons, Menglong Dong
- [PATCH bpf-next v4 8/9] net: ip: make ip_mkroute_input/__mkroute_input return drop reasons, Menglong Dong
- [PATCH bpf-next v4 9/9] net: ip: make ip_route_use_hint() return drop reasons, Menglong Dong
- Re: [PATCH bpf-next v4 0/9] net: ip: add drop reasons to input route, Jakub Kicinski
- [PATCH net v2] net: netfilter: Fix use-after-free in get_info(),
Dong Chenchen
- [PATCH nft 1/4] mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc(),
Pablo Neira Ayuso
- [PATCH v3 2/5] LSM: Replace context+len with lsm_context,
Casey Schaufler
- [PATCH v3 1/5] LSM: Ensure the correct LSM context releaser,
Casey Schaufler
- [libnftnl PATCH v2] Introduce struct nftnl_str_array,
Phil Sutter
- [libnftnl PATCH] Use SPDX License Identifiers in headers,
Phil Sutter
- [libnftnl PATCH] Introduce struct nftnl_str_array,
Phil Sutter
- [nf-next PATCH v6 0/7] Dynamic hook interface binding part 1,
Phil Sutter
- [no subject], Unknown
- [PATCH nft] src: collapse set element commands from parser,
Pablo Neira Ayuso
- [PATCH iptables,v3] tests: iptables-test: extend coverage for ip6tables, Pablo Neira Ayuso
- [PATCH net] selftests: netfilter: nft_flowtable.sh: make first pass deterministic,
Florian Westphal
- [iptables PATCH] tests: iptables-test: Fix for duplicate supposed-to-fail errors,
Phil Sutter
- [PATCH nft] tests: shell: don't rely on writable test directory,
Florian Westphal
- [PATCH net] net: netfilter: Fix use-after-free in get_info(),
Dong Chenchen
- [PATCH v4 net-next 00/14] AccECN protocol preparation patch series,
chia-yu . chang
- [PATCH v4 net-next 01/14] tcp: reorganize tcp_in_ack_event() and tcp_count_delivered(), chia-yu . chang
- [PATCH v4 net-next 02/14] tcp: create FLAG_TS_PROGRESS, chia-yu . chang
- [PATCH v4 net-next 03/14] tcp: use BIT() macro in include/net/tcp.h, chia-yu . chang
- [PATCH v4 net-next 05/14] tcp: reorganize SYN ECN code, chia-yu . chang
- [PATCH v4 net-next 04/14] tcp: extend TCP flags to allow AE bit/ACE field, chia-yu . chang
- [PATCH v4 net-next 06/14] tcp: rework {__,}tcp_ecn_check_ce() -> tcp_data_ecn_check(), chia-yu . chang
- [PATCH v4 net-next 08/14] gso: AccECN support, chia-yu . chang
- [PATCH v4 net-next 09/14] gro: prevent ACE field corruption & better AccECN handling, chia-yu . chang
- [PATCH v4 net-next 07/14] tcp: helpers for ECN mode handling, chia-yu . chang
- [PATCH v4 net-next 10/14] tcp: AccECN support to tcp_add_backlog, chia-yu . chang
- [PATCH v4 net-next 12/14] tcp: Pass flags to __tcp_send_ack, chia-yu . chang
- [PATCH v4 net-next 11/14] tcp: allow ECN bits in TOS/traffic class, chia-yu . chang
- [PATCH v4 net-next 14/14] net: sysctl: introduce sysctl SYSCTL_FIVE, chia-yu . chang
- [PATCH v4 net-next 13/14] tcp: fast path functions later, chia-yu . chang
- [PATCH iptables,v2] tests: iptables-test: extend coverage for ip6tables, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net (v2),
Pablo Neira Ayuso
- [PATCH] selftests: netfilter: remove unused parameter,
Liu Jing
- [PATCH iptables] tests: iptables-test: extend coverage for ip6tables,
Pablo Neira Ayuso
- [syzbot] [netfilter?] INFO: task hung in do_arpt_get_ctl (2), syzbot
- [PATCH nf] netfilter: xtables: fix typo causing some targets to not load on IPv6,
Pablo Neira Ayuso
- 6.6.57-stable regression: "netfilter: xtables: avoid NFPROTO_UNSPEC where needed" broke NFLOG on IPv6,
Krzysztof Olędzki
- [PATCH v3] netfilter: xtables: fix a bunch of typos causing some targets to not load on IPv6,
Ilya Katsnelson
- [PATCH v2] netfilter: xtables: fix typo causing some targets to not load on IPv6,
Ilya Katsnelson
- strange error from the xt_mark module for kernels 6.1.113 & 6.11.4,
Fred Richards
- [PATCH net] netfilter: xtables: fix a bad copypaste in xt_nflog module,
Ignat Korchagin
- [PATCH] netfliter: xtables: fix typo causing some targets to not load on IPv6,
Ilya Katsnelson
[PATCH] netfilter: bridge: fix build failures in nf_ct_bridge_pre(), Vladimir Oltean
[PATCH] selftests: netfilter: remove unused rplnlh parameter,
Liu Jing
[PATCH nf-next] netfilter: bpf: Pass string literal as format argument of request_module(),
Simon Horman
KASAN: use-after-free Read in __nf_hook_entries_try_shrink,
Xia Chu
[PATCH nftables] libnftables-json: fix raw payload expression documentation,
Eric Long via B4 Relay
[RFC PATCH v2 0/8] Fix non-TCP restriction and inconsistency of TCP errors,
Mikhail Ivanov
0x19: Dates And Location for upcoming conference, Jamal Hadi Salim
[libnftnl PATCH] examples: Fix for incomplete license text in nft-ruleset-get.c,
Phil Sutter
[libnftnl PATCH] src/utils: Add a common dev_array parser,
Phil Sutter
Re: [PATCH v1] netfilter: x_tables: fix ordering of get and update table private,
Pablo Neira Ayuso
[PATCH nf-next v3 0/5] netfilter: nf_tables: reduce set element transaction size,
Florian Westphal
linux-next: duplicate patches in the ipvs-next tree,
Stephen Rothwell
[PATCH net-next v3 00/10] net: ip: add drop reasons to input route,
Menglong Dong
- [PATCH net-next v3 01/10] net: ip: refactor fib_validate_source/__fib_validate_source, Menglong Dong
- [PATCH net-next v3 02/10] net: ip: make fib_validate_source() return drop reason, Menglong Dong
- [PATCH net-next v3 03/10] net: ip: make ip_route_input_mc() return drop reason, Menglong Dong
- [PATCH net-next v3 04/10] net: ip: make ip_mc_validate_source() return drop reason, Menglong Dong
- [PATCH net-next v3 05/10] net: ip: make ip_route_input_slow() return drop reasons, Menglong Dong
- [PATCH net-next v3 06/10] net: ip: make ip_route_input_rcu() return drop reasons, Menglong Dong
- [PATCH net-next v3 07/10] net: ip: make ip_route_input_noref() return drop reasons, Menglong Dong
- [PATCH net-next v3 08/10] net: ip: make ip_route_input() return drop reasons, Menglong Dong
- [PATCH net-next v3 09/10] net: ip: make ip_mkroute_input/__mkroute_input return drop reasons, Menglong Dong
- [PATCH net-next v3 10/10] net: ip: make ip_route_use_hint() return drop reasons, Menglong Dong
[PATCH 5.10 046/518] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 5.10 045/518] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH 5.15 082/691] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 5.15 081/691] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH v2 2/6] LSM: Replace context+len with lsm_context, Casey Schaufler
[PATCH v2 1/6] LSM: Ensure the correct LSM context releaser,
Casey Schaufler
[PATCH net-next 0/9] Netfilter updates for net-net,
Pablo Neira Ayuso
- [PATCH net-next 1/9] netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c, Pablo Neira Ayuso
- [PATCH net-next 6/9] netfilter: nf_tables: switch trans_elem to real flex array, Pablo Neira Ayuso
- [PATCH net-next 5/9] netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structure, Pablo Neira Ayuso
- [PATCH net-next 8/9] netfilter: Make legacy configs user selectable, Pablo Neira Ayuso
- [PATCH net-next 7/9] netfilter: nf_tables: allocate element update information dynamically, Pablo Neira Ayuso
- [PATCH net-next 2/9] netfilter: nf_tables: replace deprecated strncpy with strscpy_pad, Pablo Neira Ayuso
- [PATCH net-next 9/9] netfilter: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Pablo Neira Ayuso
- [PATCH net-next 4/9] netfilter: nf_tables: add nft_trans_commit_list_add_elem helper, Pablo Neira Ayuso
- [PATCH net-next 3/9] netfilter: nf_tables: prefer nft_trans_elem_alloc helper, Pablo Neira Ayuso
- Re: [PATCH net-next 0/9] Netfilter updates for net-net, Jakub Kicinski
[UPDATE] Renewing Netfilter coreteam PGP keys, Pablo Neira Ayuso
[PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback,
Julia Lawall
- [PATCH 15/17] netfilter: nf_conncount: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Julia Lawall
- [PATCH 16/17] netfilter: expect: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Julia Lawall
- [PATCH 17/17] netfilter: xt_hashlimit: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Julia Lawall
- Re: (subset) [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Jens Axboe
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Paul E. McKenney
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Vlastimil Babka
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Pablo Neira Ayuso
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, patchwork-bot+netdevbpf
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, patchwork-bot+netdevbpf
- Re: (subset) [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Michael Ellerman
[PATCH libmnl,v2] attr: expand mnl_attr_get_uint() documentation,
Pablo Neira Ayuso
[PATCH libmnl,v2] build: do not build documentation automatically,
Pablo Neira Ayuso
[PATCH RFC v1 net-next 00/12] bridge-fastpath and related improvements,
Eric Woudstra
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
