Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- Re: [PATCH nf,v2] netfilter: nf_tables: wait for rcu grace period on net_device removal, (continued)
- [PATCH nf] netfilter: nf_tables: wait for rcu grace period on net_device removal,
Pablo Neira Ayuso
- [PATCH nf-next] netfilter: conntrack: collect start time as early as possible,
Florian Westphal
- BUSINESS LAUNCH , Chan Moo Bahk
- [PATCH nf-next 0/7] netfilter: nf_tables: avoid PROVE_RCU_LIST splats,
Florian Westphal
- [PATCH nf] netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6(),
Eric Dumazet
- [PATCH nft] src: allow to map key to nfqueue number,
Florian Westphal
- [PATCH] src: allow to map key to nfqueue number, Florian Westphal
- [PATCH for-next 4/7] selftests/net: Add missing gitignore file,
Li Zhijian
- Netfilter: suspicious RCU usage in __nft_rule_lookup,
Matthieu Baerts
- [PATCH nft,v2 1/4] mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc(),
Pablo Neira Ayuso
- [PATCH bpf-next v4 0/9] net: ip: add drop reasons to input route,
Menglong Dong
- [PATCH bpf-next v4 1/9] net: ip: make fib_validate_source() support drop reasons, Menglong Dong
- [PATCH bpf-next v4 2/9] net: ip: make ip_route_input_mc() return drop reason, Menglong Dong
- [PATCH bpf-next v4 3/9] net: ip: make ip_mc_validate_source() return drop reason, Menglong Dong
- [PATCH bpf-next v4 4/9] net: ip: make ip_route_input_slow() return drop reasons, Menglong Dong
- [PATCH bpf-next v4 5/9] net: ip: make ip_route_input_rcu() return drop reasons, Menglong Dong
- [PATCH bpf-next v4 6/9] net: ip: make ip_route_input_noref() return drop reasons, Menglong Dong
- [PATCH bpf-next v4 7/9] net: ip: make ip_route_input() return drop reasons, Menglong Dong
- [PATCH bpf-next v4 8/9] net: ip: make ip_mkroute_input/__mkroute_input return drop reasons, Menglong Dong
- [PATCH bpf-next v4 9/9] net: ip: make ip_route_use_hint() return drop reasons, Menglong Dong
- Re: [PATCH bpf-next v4 0/9] net: ip: add drop reasons to input route, Jakub Kicinski
- [PATCH net v2] net: netfilter: Fix use-after-free in get_info(),
Dong Chenchen
- [PATCH nft 1/4] mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc(),
Pablo Neira Ayuso
- [PATCH v3 2/5] LSM: Replace context+len with lsm_context,
Casey Schaufler
- [PATCH v3 1/5] LSM: Ensure the correct LSM context releaser,
Casey Schaufler
- [libnftnl PATCH v2] Introduce struct nftnl_str_array,
Phil Sutter
- [libnftnl PATCH] Use SPDX License Identifiers in headers,
Phil Sutter
- [libnftnl PATCH] Introduce struct nftnl_str_array,
Phil Sutter
- [nf-next PATCH v6 0/7] Dynamic hook interface binding part 1,
Phil Sutter
- [no subject], Unknown
- [PATCH nft] src: collapse set element commands from parser,
Pablo Neira Ayuso
- [PATCH iptables,v3] tests: iptables-test: extend coverage for ip6tables, Pablo Neira Ayuso
- [PATCH net] selftests: netfilter: nft_flowtable.sh: make first pass deterministic,
Florian Westphal
- [iptables PATCH] tests: iptables-test: Fix for duplicate supposed-to-fail errors,
Phil Sutter
- [PATCH nft] tests: shell: don't rely on writable test directory,
Florian Westphal
- [PATCH net] net: netfilter: Fix use-after-free in get_info(),
Dong Chenchen
- [PATCH v4 net-next 00/14] AccECN protocol preparation patch series,
chia-yu . chang
- [PATCH v4 net-next 01/14] tcp: reorganize tcp_in_ack_event() and tcp_count_delivered(), chia-yu . chang
- [PATCH v4 net-next 02/14] tcp: create FLAG_TS_PROGRESS, chia-yu . chang
- [PATCH v4 net-next 03/14] tcp: use BIT() macro in include/net/tcp.h, chia-yu . chang
- [PATCH v4 net-next 05/14] tcp: reorganize SYN ECN code, chia-yu . chang
- [PATCH v4 net-next 04/14] tcp: extend TCP flags to allow AE bit/ACE field, chia-yu . chang
- [PATCH v4 net-next 06/14] tcp: rework {__,}tcp_ecn_check_ce() -> tcp_data_ecn_check(), chia-yu . chang
- [PATCH v4 net-next 08/14] gso: AccECN support, chia-yu . chang
- [PATCH v4 net-next 09/14] gro: prevent ACE field corruption & better AccECN handling, chia-yu . chang
- [PATCH v4 net-next 07/14] tcp: helpers for ECN mode handling, chia-yu . chang
- [PATCH v4 net-next 10/14] tcp: AccECN support to tcp_add_backlog, chia-yu . chang
- [PATCH v4 net-next 12/14] tcp: Pass flags to __tcp_send_ack, chia-yu . chang
- [PATCH v4 net-next 11/14] tcp: allow ECN bits in TOS/traffic class, chia-yu . chang
- [PATCH v4 net-next 14/14] net: sysctl: introduce sysctl SYSCTL_FIVE, chia-yu . chang
- [PATCH v4 net-next 13/14] tcp: fast path functions later, chia-yu . chang
- [PATCH iptables,v2] tests: iptables-test: extend coverage for ip6tables, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net (v2),
Pablo Neira Ayuso
- [PATCH] selftests: netfilter: remove unused parameter,
Liu Jing
- [PATCH iptables] tests: iptables-test: extend coverage for ip6tables,
Pablo Neira Ayuso
- [syzbot] [netfilter?] INFO: task hung in do_arpt_get_ctl (2), syzbot
- [PATCH nf] netfilter: xtables: fix typo causing some targets to not load on IPv6,
Pablo Neira Ayuso
- 6.6.57-stable regression: "netfilter: xtables: avoid NFPROTO_UNSPEC where needed" broke NFLOG on IPv6,
Krzysztof Olędzki
- [PATCH v3] netfilter: xtables: fix a bunch of typos causing some targets to not load on IPv6,
Ilya Katsnelson
- [PATCH v2] netfilter: xtables: fix typo causing some targets to not load on IPv6,
Ilya Katsnelson
- strange error from the xt_mark module for kernels 6.1.113 & 6.11.4,
Fred Richards
- [PATCH net] netfilter: xtables: fix a bad copypaste in xt_nflog module,
Ignat Korchagin
- [PATCH] netfliter: xtables: fix typo causing some targets to not load on IPv6,
Ilya Katsnelson
[PATCH] netfilter: bridge: fix build failures in nf_ct_bridge_pre(), Vladimir Oltean
[PATCH] selftests: netfilter: remove unused rplnlh parameter,
Liu Jing
[PATCH nf-next] netfilter: bpf: Pass string literal as format argument of request_module(),
Simon Horman
KASAN: use-after-free Read in __nf_hook_entries_try_shrink,
Xia Chu
[PATCH nftables] libnftables-json: fix raw payload expression documentation,
Eric Long via B4 Relay
[RFC PATCH v2 0/8] Fix non-TCP restriction and inconsistency of TCP errors,
Mikhail Ivanov
0x19: Dates And Location for upcoming conference, Jamal Hadi Salim
[libnftnl PATCH] examples: Fix for incomplete license text in nft-ruleset-get.c,
Phil Sutter
[libnftnl PATCH] src/utils: Add a common dev_array parser,
Phil Sutter
Re: [PATCH v1] netfilter: x_tables: fix ordering of get and update table private,
Pablo Neira Ayuso
[PATCH nf-next v3 0/5] netfilter: nf_tables: reduce set element transaction size,
Florian Westphal
linux-next: duplicate patches in the ipvs-next tree,
Stephen Rothwell
[PATCH net-next v3 00/10] net: ip: add drop reasons to input route,
Menglong Dong
- [PATCH net-next v3 01/10] net: ip: refactor fib_validate_source/__fib_validate_source, Menglong Dong
- [PATCH net-next v3 02/10] net: ip: make fib_validate_source() return drop reason, Menglong Dong
- [PATCH net-next v3 03/10] net: ip: make ip_route_input_mc() return drop reason, Menglong Dong
- [PATCH net-next v3 04/10] net: ip: make ip_mc_validate_source() return drop reason, Menglong Dong
- [PATCH net-next v3 05/10] net: ip: make ip_route_input_slow() return drop reasons, Menglong Dong
- [PATCH net-next v3 06/10] net: ip: make ip_route_input_rcu() return drop reasons, Menglong Dong
- [PATCH net-next v3 07/10] net: ip: make ip_route_input_noref() return drop reasons, Menglong Dong
- [PATCH net-next v3 08/10] net: ip: make ip_route_input() return drop reasons, Menglong Dong
- [PATCH net-next v3 09/10] net: ip: make ip_mkroute_input/__mkroute_input return drop reasons, Menglong Dong
- [PATCH net-next v3 10/10] net: ip: make ip_route_use_hint() return drop reasons, Menglong Dong
[PATCH 5.10 046/518] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 5.10 045/518] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH 5.15 082/691] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 5.15 081/691] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH v2 2/6] LSM: Replace context+len with lsm_context, Casey Schaufler
[PATCH v2 1/6] LSM: Ensure the correct LSM context releaser,
Casey Schaufler
[PATCH net-next 0/9] Netfilter updates for net-net,
Pablo Neira Ayuso
- [PATCH net-next 1/9] netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c, Pablo Neira Ayuso
- [PATCH net-next 6/9] netfilter: nf_tables: switch trans_elem to real flex array, Pablo Neira Ayuso
- [PATCH net-next 5/9] netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structure, Pablo Neira Ayuso
- [PATCH net-next 8/9] netfilter: Make legacy configs user selectable, Pablo Neira Ayuso
- [PATCH net-next 7/9] netfilter: nf_tables: allocate element update information dynamically, Pablo Neira Ayuso
- [PATCH net-next 2/9] netfilter: nf_tables: replace deprecated strncpy with strscpy_pad, Pablo Neira Ayuso
- [PATCH net-next 9/9] netfilter: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Pablo Neira Ayuso
- [PATCH net-next 4/9] netfilter: nf_tables: add nft_trans_commit_list_add_elem helper, Pablo Neira Ayuso
- [PATCH net-next 3/9] netfilter: nf_tables: prefer nft_trans_elem_alloc helper, Pablo Neira Ayuso
- Re: [PATCH net-next 0/9] Netfilter updates for net-net, Jakub Kicinski
[UPDATE] Renewing Netfilter coreteam PGP keys, Pablo Neira Ayuso
[PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback,
Julia Lawall
- [PATCH 15/17] netfilter: nf_conncount: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Julia Lawall
- [PATCH 16/17] netfilter: expect: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Julia Lawall
- [PATCH 17/17] netfilter: xt_hashlimit: replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Julia Lawall
- Re: (subset) [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Jens Axboe
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Paul E. McKenney
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Vlastimil Babka
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Pablo Neira Ayuso
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, patchwork-bot+netdevbpf
- Re: [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, patchwork-bot+netdevbpf
- Re: (subset) [PATCH 00/17] replace call_rcu by kfree_rcu for simple kmem_cache_free callback, Michael Ellerman
[PATCH libmnl,v2] attr: expand mnl_attr_get_uint() documentation,
Pablo Neira Ayuso
[PATCH libmnl,v2] build: do not build documentation automatically,
Pablo Neira Ayuso
[PATCH RFC v1 net-next 00/12] bridge-fastpath and related improvements,
Eric Woudstra
- [PATCH RFC v1 net-next 01/12] netfilter: nf_flow_table_offload: Add nf_flow_encap_push() for xmit direct, Eric Woudstra
- [PATCH RFC v1 net-next 02/12] netfilter: bridge: Add conntrack double vlan and pppoe, Eric Woudstra
- [PATCH RFC v1 net-next 03/12] netfilter: nft_chain_filter: Add bridge double vlan and pppoe, Eric Woudstra
- [PATCH RFC v1 net-next 04/12] bridge: br_vlan_fill_forward_path_pvid: Add port to port, Eric Woudstra
- [PATCH RFC v1 net-next 05/12] bridge: br_fill_forward_path add port to port, Eric Woudstra
- [PATCH RFC v1 net-next 06/12] net: core: dev: Add dev_fill_bridge_path(), Eric Woudstra
- [PATCH RFC v1 net-next 07/12] netfilter :nf_flow_table_offload: Add nf_flow_rule_bridge(), Eric Woudstra
- [PATCH RFC v1 net-next 08/12] netfilter: nf_flow_table_inet: Add nf_flowtable_type flowtable_bridge, Eric Woudstra
- [PATCH RFC v1 net-next 09/12] netfilter: nft_flow_offload: Add NFPROTO_BRIDGE to validate, Eric Woudstra
- [PATCH RFC v1 net-next 10/12] netfilter: nft_flow_offload: Add DEV_PATH_MTK_WDMA to nft_dev_path_info(), Eric Woudstra
- [PATCH RFC v1 net-next 11/12] bridge: br_vlan_fill_forward_path_mode no _UNTAG_HW for dsa, Eric Woudstra
- [PATCH RFC v1 net-next 12/12] netfilter: nft_flow_offload: Add bridgeflow to nft_flow_offload_eval(), Eric Woudstra
- Re: [PATCH RFC v1 net-next 00/12] bridge-fastpath and related improvements, Nikolay Aleksandrov
[PATCH libnetfilter_queue v3 00/15] Convert libnetfilter_queue to not need libnfnetlink,
Duncan Roe
- [PATCH libnetfilter_queue v3 01/15] src: Convert nfq_open() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 02/15] src: Convert nfq_open_nfnl() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 04/15] src: Convert nfq_create_queue(), nfq_bind_pf() & nfq_unbind_pf() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 03/15] src: Convert nfq_close() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 05/15] src: Convert nfq_set_queue_flags(), nfq_set_queue_maxlen() & nfq_set_mode() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 06/15] src: Convert nfq_handle_packet(), nfq_get_secctx(), nfq_get_payload() and all the nfq_get_ functions to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 07/15] src: Convert nfq_set_verdict() and nfq_set_verdict2() to use libmnl if there is no data, Duncan Roe
- [PATCH libnetfilter_queue v3 08/15] src: Incorporate nfnl_rcvbufsiz() in libnetfilter_queue, Duncan Roe
- [PATCH libnetfilter_queue v3 09/15] src: Convert nfq_fd() to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 10/15] src: Convert remaining nfq_* functions to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 11/15] src: Copy nlif-related files from libnfnetlink, Duncan Roe
- [PATCH libnetfilter_queue v3 12/15] doc: Add iftable.c to the doxygen system, Duncan Roe
- [PATCH libnetfilter_queue v3 14/15] include: Use libmnl.h instead of libnfnetlink.h, Duncan Roe
- [PATCH libnetfilter_queue v3 13/15] src: Convert all nlif_* functions to use libmnl, Duncan Roe
- [PATCH libnetfilter_queue v3 15/15] build: Remove libnfnetlink from the build, Duncan Roe
[PATCH libmnl] attr: expand mnl_attr_get_uint() documentation,
Pablo Neira Ayuso
[PATCH conntrack,v2 1/2] conntrack: improve --secmark,--id,--zone parser,
Pablo Neira Ayuso
[PATCH libmnl] build: do not build documentation automatically,
Pablo Neira Ayuso
[PATCH conntrack 1/3] conntrack: improve --secmark,--id,--zone parser,
Pablo Neira Ayuso
[syzbot] [bridge?] INFO: rcu detected stall in br_handle_frame (5), syzbot
Building libnetfilter_queue has required kernel headers for some time,
Duncan Roe
[PATCH bpf v1 1/2] bpf: fix link info netfilter flags to populate defrag flag,
Tyrone Wu
[nft PATCH] tests: shell: Join arithmetic statements in maps/vmap_timeout,
Phil Sutter
[PATCH nf-next v2 0/5] netfilter: nf_tables: reduce set element transaction size,
Florian Westphal
[PATCH nft] tests: shell: fix spurious dump failure in vmap timeout test,
Florian Westphal
[PATCH net] netfilter: nf_tables: Fix memory leak in nf_flow_offload_xdp_setup(), Lorenzo Bianconi
[PATCH nf] netfilter: bpf: must hold reference on net namespace,
Florian Westphal
[PATCH nft] doc: extend description of fib expression,
Florian Westphal
[PATCH libnftnl] include: refresh nf_tables.h copy,
Pablo Neira Ayuso
[syzbot] [netfilter?] INFO: rcu detected stall in NF_HOOK (2), syzbot
[PATCH] nf_conntrack_proto_udp: Set ASSURED for NAT_CLASH entries to avoid packets dropped,
Yadan Fan
[PATCH] netfilter: Record uid and gid in xt_AUDIT,
Richard Weinberger
[iptables PATCH 1/3] ebtables: Fix for -S with rule number,
Phil Sutter
[PATCH nft,v2] libnftables: remove set element uncollapse for error reporting, Pablo Neira Ayuso
[iptables PATCH v2 0/8] nft: Implement forward compat for future binaries,
Phil Sutter
- [iptables PATCH v2 7/8] nft: Embed compat extensions in rule userdata, Phil Sutter
- [iptables PATCH v2 1/8] nft: Make add_log() static, Phil Sutter
- [iptables PATCH v2 3/8] nft: __add_{match,target}() can't fail, Phil Sutter
- [iptables PATCH v2 4/8] nft: Introduce UDATA_TYPE_COMPAT_EXT, Phil Sutter
- [iptables PATCH v2 5/8] nft-ruleparse: Fallback to compat expressions in userdata, Phil Sutter
- [iptables PATCH v2 2/8] nft: ruleparse: Introduce nft_parse_rule_expr(), Phil Sutter
- [iptables PATCH v2 6/8] nft: Pass nft_handle into add_{action,match}(), Phil Sutter
- [iptables PATCH v2 8/8] tests: iptables-test: Add nft-compat variant, Phil Sutter
[iptables PATCH 0/5] Some minor fixes,
Phil Sutter
[PATCH nft] libnftables: remove set element uncollapse for error reporting, Pablo Neira Ayuso
kmemleak in flowtable xdp, Pablo Neira Ayuso
[PATCH nf 1/2] netfilter: fib: check correct rtable in vrf setups,
Florian Westphal
Argument -S (--list-rules) in ebtables,
Nicola Serafini
[syzbot] [netfilter?] WARNING in __nf_unregister_net_hook (7), syzbot
[RFC libnftnl/nft 0/5] nftables: indicate presence of unsupported netlink attributes,
Florian Westphal
[PATCH nf v3] netfilter: xtables: avoid NFPROTO_UNSPEC where needed,
Florian Westphal
[PATCH] doc: don't suggest to disable GSO, Ronan Pigott
[PATCH nf v2] netfilter: xtables: avoid NFPROTO_UNSPEC where needed,
Florian Westphal
[PATCH AUTOSEL 6.1 33/42] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
[PATCH AUTOSEL 6.6 47/58] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
[PATCH AUTOSEL 6.6 46/58] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Sasha Levin
[PATCH AUTOSEL 6.10 54/70] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
[PATCH AUTOSEL 6.10 53/70] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Sasha Levin
[PATCH AUTOSEL 6.11 60/76] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
[PATCH AUTOSEL 6.11 59/76] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Sasha Levin
[PATCH] netfilter: xt_cluster: restrict it to NFPROTO_IPV4 and NFPROTO_IPV6, Pablo Neira Ayuso
[PATCH libnetfilter_queue] build: add missing backslash to build_man.sh,
Duncan Roe
[PATCH] xt_cluster: add logic for use from NFPROTO_BRIDGE, Jan Engelhardt
[PATCH nf] netfilter: xt_cluster: restrict to ip/ip6tables,
Florian Westphal
[syzbot] [netfilter?] WARNING in xt_cluster_mt (2), syzbot
[RFC PATCH v1 0/2] Fix non-TCP sockets restriction,
Mikhail Ivanov
Re: [syzbot] [tipc?] BUG: soft lockup in do_sock_setsockopt, syzbot
[ANNOUNCE] nftables 1.1.1 release, Pablo Neira Ayuso
[ANNOUNCE] libnftnl 1.2.8 release, Pablo Neira Ayuso
[nft PATCH 0/9] Support wildcard netdev hooks and events,
Phil Sutter
- [nft PATCH 3/9] monitor: Recognize flowtable add/del events, Phil Sutter
- [nft PATCH 5/9] mnl: Support simple wildcards in netdev hooks, Phil Sutter
- [nft PATCH 8/9] tests: monitor: Support running external commands, Phil Sutter
- [nft PATCH 6/9] parser_bison: Accept ASTERISK_STRING in flowtable_expr_member, Phil Sutter
- [nft PATCH 1/9] json: Support typeof in set and map types, Phil Sutter
- [nft PATCH 7/9] tests: shell: Adjust to ifname-based flowtables, Phil Sutter
- [nft PATCH 2/9] tests: py: Fix for storing payload into missing file, Phil Sutter
- [nft PATCH 9/9] monitor: Support NFT_MSG_(NEW|DEL)DEV events, Phil Sutter
- [nft PATCH 4/9] tests: monitor: Run in own netns, Phil Sutter
- Re: [nft PATCH 0/9] Support wildcard netdev hooks and events, Florian Westphal
- Re: [nft PATCH 0/9] Support wildcard netdev hooks and events, Phil Sutter
[libnftnl PATCH 0/4] Support wildcard netdev hooks and events,
Phil Sutter
[PATCH nf-next 0/4] netfilter: use skb_drop_reason in more places,
Florian Westphal
[iptables PATCH] tests: shell: Adjust for recent changes in libnftnl,
Phil Sutter
[libnftnl PATCH] rule: Don't append a newline when printing a rule,
Phil Sutter
[libnftnl PATCH] Partially revert "rule, set_elem: remove trailing \n in userdata snprintf",
Phil Sutter
[PATCH nf-next v6] netfilter: Make legacy configs user selectable,
Breno Leitao
[PATCH] nf_conntrack_proto_udp: do not accept packets with IPS_NAT_CLASH,
Hannes Reinecke
iptables 1.8.10 translate error,
imnozi
[PATCH 6.1 62/73] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 6.1 61/73] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH 6.6 46/54] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
[PATCH 6.6 45/54] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
[PATCH] selftests: netfilter: Add missing resturn value.,
zhangjiao2
[PATCH nf] netfilter: nf_tables: prevent nf_skb_duplicated corruption,
Eric Dumazet
[nf PATCH] selftests: netfilter: Fix nft_audit.sh for newer nft binaries,
Phil Sutter
[PATCH net,v2 00/14] Netfilter fixes for net,
Pablo Neira Ayuso
- [PATCH net 03/14] selftests: netfilter: add reverse-clash resolution test case, Pablo Neira Ayuso
- [PATCH net 01/14] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Pablo Neira Ayuso
- [PATCH net 04/14] selftests: netfilter: nft_tproxy.sh: add tcp tests, Pablo Neira Ayuso
- [PATCH net 07/14] netfilter: nf_tables: Keep deleted flowtable hooks until after RCU, Pablo Neira Ayuso
- [PATCH net 08/14] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Pablo Neira Ayuso
- [PATCH net 12/14] netfilter: nfnetlink_queue: remove old clash resolution logic, Pablo Neira Ayuso
- [PATCH net 05/14] netfilter: ctnetlink: Guard possible unused functions, Pablo Neira Ayuso
- [PATCH net 14/14] selftests: netfilter: Avoid hanging ipvs.sh, Pablo Neira Ayuso
- [PATCH net 11/14] netfilter: nf_tables: missing objects with no memcg accounting, Pablo Neira Ayuso
- [PATCH net 06/14] docs: tproxy: ignore non-transparent sockets in iptables, Pablo Neira Ayuso
- [PATCH net 10/14] netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path, Pablo Neira Ayuso
- [PATCH net 02/14] netfilter: conntrack: add clash resolution for reverse collisions, Pablo Neira Ayuso
- [PATCH net 09/14] netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS, Pablo Neira Ayuso
- [PATCH net 13/14] kselftest: add test for nfqueue induced conntrack race, Pablo Neira Ayuso
[nf-next PATCH v5 00/18] Dynamic hook interface binding,
Phil Sutter
- [nf-next PATCH v5 07/18] netfilter: nf_tables: Introduce functions freeing nft_hook objects, Phil Sutter
- [nf-next PATCH v5 03/18] netfilter: nf_tables: Use stored ifname in netdev hook dumps, Phil Sutter
- [nf-next PATCH v5 17/18] netfilter: nf_tables: Add notications for hook changes, Phil Sutter
- [nf-next PATCH v5 10/18] netfilter: nf_tables: Drop __nft_unregister_flowtable_net_hooks(), Phil Sutter
- [nf-next PATCH v5 16/18] netfilter: nf_tables: Support wildcard netdev hook specs, Phil Sutter
- [nf-next PATCH v5 12/18] netfilter: nf_tables: chain: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v5 13/18] netfilter: nf_tables: flowtable: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v5 01/18] netfilter: nf_tables: Flowtable hook's pf value never varies, Phil Sutter
- [nf-next PATCH v5 02/18] netfilter: nf_tables: Store user-defined hook ifname, Phil Sutter
- [nf-next PATCH v5 04/18] netfilter: nf_tables: Compare netdev hooks based on stored name, Phil Sutter
- [nf-next PATCH v5 11/18] netfilter: nf_tables: Have a list of nf_hook_ops in nft_hook, Phil Sutter
- [nf-next PATCH v5 18/18] selftests: netfilter: Torture nftables netdev hooks, Phil Sutter
- [nf-next PATCH v5 15/18] netfilter: nf_tables: Handle NETDEV_CHANGENAME events, Phil Sutter
- [nf-next PATCH v5 08/18] netfilter: nf_tables: Introduce nft_hook_find_ops(), Phil Sutter
- [nf-next PATCH v5 09/18] netfilter: nf_tables: Introduce nft_register_flowtable_ops(), Phil Sutter
- [nf-next PATCH v5 14/18] netfilter: nf_tables: Wrap netdev notifiers, Phil Sutter
- [nf-next PATCH v5 05/18] netfilter: nf_tables: Tolerate chains with no remaining hooks, Phil Sutter
- [nf-next PATCH v5 06/18] netfilter: nf_tables: Simplify chain netdev notifier, Phil Sutter
- Re: [nf-next PATCH v5 00/18] Dynamic hook interface binding, Florian Westphal
[bug report] netfilter: nf_tables: no size estimation if number of set elements is unknown, Dan Carpenter
[nf PATCH] netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED,
Phil Sutter
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
