Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH nft] nft: memcg accounting for dynamically allocated objects, (continued)
  • Re: [PATCH nft] nft: memcg accounting for dynamically allocated objects, Roman Gushchin
    • Re: [PATCH nft] nft: memcg accounting for dynamically allocated objects, Florian Westphal
  • Re: [PATCH nft] nft: memcg accounting for dynamically allocated objects, Vasily Averin
    • [PATCH v2] nft: memcg accounting for dynamically allocated objects, Vasily Averin
      • Re: [PATCH v2] nft: memcg accounting for dynamically allocated objects, Pablo Neira Ayuso
• [PATCH nf] netfilter: egress: silence egress hook lockdep splats, Florian Westphal
  • Re: [PATCH nf] netfilter: egress: silence egress hook lockdep splats, Pablo Neira Ayuso
• [PATCH nf] netfilter: fix use-after-free in __nf_register_net_hook(), Eric Dumazet
  • Re: [PATCH nf] netfilter: fix use-after-free in __nf_register_net_hook(), Florian Westphal
  • Re: [PATCH nf] netfilter: fix use-after-free in __nf_register_net_hook(), Pablo Neira Ayuso
• [PATCH v2 nf] netfilter: nf_queue: don't assume sk is full socket, Florian Westphal
  • Re: [PATCH v2 nf] netfilter: nf_queue: don't assume sk is full socket, Eric Dumazet
    • Re: [PATCH v2 nf] netfilter: nf_queue: don't assume sk is full socket, Florian Westphal
• TCP connection fails in a asymmetric routing situation, Florian Westphal
  • Re: TCP connection fails in a asymmetric routing situation, Florian Westphal
    • Re: TCP connection fails in a asymmetric routing situation, H.Janssen
  • Re: TCP connection fails in a asymmetric routing situation, Pablo Neira Ayuso
    • Re: TCP connection fails in a asymmetric routing situation, Florian Westphal
• [PATCH v2 nf] selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test, Florian Westphal
• [PATCH nf-next v2 0/3] Conntrack GRE offload, Toshiaki Makita
  • [PATCH nf-next v2 2/3] act_ct: Support GRE offload, Toshiaki Makita
  • [PATCH nf-next v2 1/3] netfilter: flowtable: Support GRE, Toshiaki Makita
  • [PATCH nf-next v2 3/3] net/mlx5: Support GRE conntrack offload, Toshiaki Makita
  • Re: [PATCH nf-next v2 0/3] Conntrack GRE offload, Pablo Neira Ayuso
• Re: [netfilter-nf:master 47/47] nf_queue.c:undefined reference to `sock_gen_put', Florian Westphal
  • Re: [netfilter-nf:master 47/47] nf_queue.c:undefined reference to `sock_gen_put', Florian Westphal
• [PATCH 1/2] libnftables.map: export new nft_ctx_{get,set}_optimize API, Sam James
  • [PATCH 2/2] build: explicitly pass --version-script to linker, Sam James
    • Re: [PATCH 2/2] build: explicitly pass --version-script to linker, Pablo Neira Ayuso
  • Re: [PATCH 1/2] libnftables.map: export new nft_ctx_{get,set}_optimize API, Sam James
    • Re: [PATCH 1/2] libnftables.map: export new nft_ctx_{get,set}_optimize API, Sam James
  • Re: [PATCH 1/2] libnftables.map: export new nft_ctx_{get,set}_optimize API, Pablo Neira Ayuso
• [PATCH nf-next v2 0/7] netfilter: remove pcpu dying list, Florian Westphal
  • [PATCH nf-next v2 3/7] netfilter: ecache: move to separate structure, Florian Westphal
  • [PATCH nf-next v2 6/7] netfilter: conntrack: include ecache dying list in dumps, Florian Westphal
  • [PATCH nf-next v2 2/7] netfilter: ctnetlink: make ecache event cb global again, Florian Westphal
  • [PATCH nf-next v2 7/7] netfilter: conntrack: remove the percpu dying list, Florian Westphal
  • [PATCH nf-next v2 4/7] netfilter: ecache: use dedicated list for event redelivery, Florian Westphal
  • [PATCH nf-next v2 1/7] nfnetlink: handle already-released nl socket, Florian Westphal
  • [PATCH nf-next v2 5/7] netfilter: conntrack: split inner loop of list dumping to own function, Florian Westphal
  • Re: [PATCH nf-next v2 0/7] netfilter: remove pcpu dying list, Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test, Florian Westphal
• [PATCH] netfilter: nf_tables: fix error code in nf_tables_updobj(), Dan Carpenter
  • Re: [PATCH] netfilter: nf_tables: fix error code in nf_tables_updobj(), Florian Westphal
• [PATCH v2] conntrack: fix build with kernel 5.15 and musl, Robert Marko
  • Re: [PATCH v2] conntrack: fix build with kernel 5.15 and musl, Florian Westphal
• [PATCH] conntrack: fix build with kernel 5.15 and musl, Robert Marko
• [PATCH nf] netfilter: nf_queue: don't assume sk is full socket, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_queue: don't assume sk is full socket, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_queue: don't assume sk is full socket, Oleksandr Natalenko
• [PATCH net] netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant, Eric Dumazet
  • Re: [PATCH net] netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant, Florian Westphal
    • Re: [PATCH net] netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant, Eric Dumazet
      • Re: [PATCH net] netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant, Pablo Neira Ayuso
• [PATCH net-next 0/8] Conntrack offload debuggability improvements, Vlad Buslov
  • [PATCH net-next 2/8] netfilter: introduce total count of hw offloaded flow table entries, Vlad Buslov
    • Re: [PATCH net-next 2/8] netfilter: introduce total count of hw offloaded flow table entries, Pablo Neira Ayuso
      • Re: [PATCH net-next 2/8] netfilter: introduce total count of hw offloaded flow table entries, Vlad Buslov
        • Re: [PATCH net-next 2/8] netfilter: introduce total count of hw offloaded flow table entries, Pablo Neira Ayuso
          • Re: [PATCH net-next 2/8] netfilter: introduce total count of hw offloaded flow table entries, Vlad Buslov
    • Re: [PATCH net-next 2/8] netfilter: introduce total count of hw offloaded flow table entries, Pablo Neira Ayuso
      • Re: [PATCH net-next 2/8] netfilter: introduce total count of hw offloaded flow table entries, Vlad Buslov
        • Re: [PATCH net-next 2/8] netfilter: introduce total count of hw offloaded flow table entries, Pablo Neira Ayuso
          • Re: [PATCH net-next 2/8] netfilter: introduce total count of hw offloaded flow table entries, Vlad Buslov
  • [PATCH net-next 3/8] netfilter: introduce max count of hw offloaded flow table entries, Vlad Buslov
    • Re: [PATCH net-next 3/8] netfilter: introduce max count of hw offloaded flow table entries, Pablo Neira Ayuso
      • Re: [PATCH net-next 3/8] netfilter: introduce max count of hw offloaded flow table entries, Vlad Buslov
  • [PATCH net-next 4/8] netfilter: introduce total count of hw offload 'add' workqueue tasks, Vlad Buslov
    • Re: [PATCH net-next 4/8] netfilter: introduce total count of hw offload 'add' workqueue tasks, Pablo Neira Ayuso
  • [PATCH net-next 5/8] netfilter: introduce max count of hw offload 'add' workqueue tasks, Vlad Buslov
    • Re: [PATCH net-next 5/8] netfilter: introduce max count of hw offload 'add' workqueue tasks, Pablo Neira Ayuso
      • Re: [PATCH net-next 5/8] netfilter: introduce max count of hw offload 'add' workqueue tasks, Vlad Buslov
  • [PATCH net-next 6/8] netfilter: introduce total count of hw offload 'del' workqueue tasks, Vlad Buslov
  • [PATCH net-next 8/8] netfilter: flowtable: add hardware offload tracepoints, Vlad Buslov
    • Re: [PATCH net-next 8/8] netfilter: flowtable: add hardware offload tracepoints, Pablo Neira Ayuso
      • Re: [PATCH net-next 8/8] netfilter: flowtable: add hardware offload tracepoints, Vlad Buslov
        • Re: [PATCH net-next 8/8] netfilter: flowtable: add hardware offload tracepoints, Pablo Neira Ayuso
          • Re: [PATCH net-next 8/8] netfilter: flowtable: add hardware offload tracepoints, Vlad Buslov
  • [PATCH net-next 1/8] net/sched: act_ct: set 'net' pointer when creating new nf_flow_table, Vlad Buslov
    • Re: [PATCH net-next 1/8] net/sched: act_ct: set 'net' pointer when creating new nf_flow_table, Pablo Neira Ayuso
  • [PATCH net-next 7/8] netfilter: introduce total count of hw offload 'stats' wq tasks, Vlad Buslov
• [PATCH net 0/5,v2] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 1/5] netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency, Pablo Neira Ayuso
  • [PATCH net 4/5] netfilter: nft_limit: fix stateful object memory leak, Pablo Neira Ayuso
  • [PATCH net 3/5] netfilter: nf_tables: unregister flowtable hooks on netns exit, Pablo Neira Ayuso
  • [PATCH net 5/5] netfilter: nf_tables: fix memory leak during stateful obj update, Pablo Neira Ayuso
  • [PATCH net 2/5] netfilter: nf_tables_offload: incorrect flow offload action array size, Pablo Neira Ayuso
  • Re: [PATCH net 0/5,v2] Netfilter fixes for net, Jakub Kicinski
• [PATCH] build: add missing AM_CPPFLAGS to examples/, Jan Engelhardt
  • Re: [PATCH] build: add missing AM_CPPFLAGS to examples/, Pablo Neira Ayuso
• [PATCH nft] examples: compile with `make check' and add AM_CPPFLAGS, Pablo Neira Ayuso
• Re: [PATCH 5.16 000/227] 5.16.11-rc1 review, Naresh Kamboju
• [PATCH nf] netfilter: nf_tables: make sure err is initialised to sane value, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: make sure err is initialised to sane value, Pablo Neira Ayuso
• [ANNOUNCE] nftables 1.0.2 release, Pablo Neira Ayuso
  • Re: [ANNOUNCE] nftables 1.0.2 release, Arturo Borrero Gonzalez
    • Re: [ANNOUNCE] nftables 1.0.2 release, Pablo Neira Ayuso
      • Re: [ANNOUNCE] nftables 1.0.2 release, Pablo Neira Ayuso
      • Re: [ANNOUNCE] nftables 1.0.2 release, Arturo Borrero Gonzalez
• [PATCH nf 0/5] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH nf 1/5] netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency, Pablo Neira Ayuso
  • [PATCH nf 2/5] netfilter: nf_tables_offload: incorrect flow offload action array size, Pablo Neira Ayuso
    • Re: [PATCH nf 2/5] netfilter: nf_tables_offload: incorrect flow offload action array size, Dominique Martinet
  • [PATCH nf 4/5] netfilter: nft_limit: fix stateful object memory leak, Pablo Neira Ayuso
  • [PATCH nf 3/5] netfilter: nf_tables: unregister flowtable hooks on netns exit, Pablo Neira Ayuso
  • [PATCH nf 5/5] netfilter: nf_tables: fix memory leak during stateful obj update, Pablo Neira Ayuso
    • Re: [PATCH nf 5/5] netfilter: nf_tables: fix memory leak during stateful obj update, Jakub Kicinski
      • Re: [PATCH nf 5/5] netfilter: nf_tables: fix memory leak during stateful obj update, Florian Westphal
• [PATCH v3] netfilter: nf_tables: fix memory leak during stateful obj update, Florian Westphal
  • Re: [PATCH v3] netfilter: nf_tables: fix memory leak during stateful obj update, Pablo Neira Ayuso
• [PATCH bpf-next v1 00/15] Introduce typed pointer support in BPF maps, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 02/15] bpf: Make btf_find_field more generic, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 01/15] bpf: Factor out fd returning from bpf_btf_find_by_name_kind, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v1 01/15] bpf: Factor out fd returning from bpf_btf_find_by_name_kind, Alexei Starovoitov
      • Re: [PATCH bpf-next v1 01/15] bpf: Factor out fd returning from bpf_btf_find_by_name_kind, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 05/15] bpf: Allow storing PTR_TO_PERCPU_BTF_ID in map, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v1 05/15] bpf: Allow storing PTR_TO_PERCPU_BTF_ID in map, kernel test robot
  • [PATCH bpf-next v1 03/15] bpf: Allow storing PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v1 03/15] bpf: Allow storing PTR_TO_BTF_ID in map, Alexei Starovoitov
      • Re: [PATCH bpf-next v1 03/15] bpf: Allow storing PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v1 03/15] bpf: Allow storing PTR_TO_BTF_ID in map, Alexei Starovoitov
  • [PATCH bpf-next v1 04/15] bpf: Allow storing referenced PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v1 04/15] bpf: Allow storing referenced PTR_TO_BTF_ID in map, Alexei Starovoitov
      • Re: [PATCH bpf-next v1 04/15] bpf: Allow storing referenced PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v1 04/15] bpf: Allow storing referenced PTR_TO_BTF_ID in map, Alexei Starovoitov
          • Re: [PATCH bpf-next v1 04/15] bpf: Allow storing referenced PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
            • Re: [PATCH bpf-next v1 04/15] bpf: Allow storing referenced PTR_TO_BTF_ID in map, Alexei Starovoitov
              • Re: [PATCH bpf-next v1 04/15] bpf: Allow storing referenced PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 06/15] bpf: Allow storing __user PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 07/15] bpf: Prevent escaping of pointers loaded from maps, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 10/15] bpf: Wire up freeing of referenced PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v1 10/15] bpf: Wire up freeing of referenced PTR_TO_BTF_ID in map, kernel test robot
    • Re: [PATCH bpf-next v1 10/15] bpf: Wire up freeing of referenced PTR_TO_BTF_ID in map, kernel test robot
    • Re: [PATCH bpf-next v1 10/15] bpf: Wire up freeing of referenced PTR_TO_BTF_ID in map, kernel test robot
  • [PATCH bpf-next v1 14/15] selftests/bpf: Add C tests for PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 08/15] bpf: Adapt copy_map_value for multiple offset case, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v1 08/15] bpf: Adapt copy_map_value for multiple offset case, Alexei Starovoitov
      • Re: [PATCH bpf-next v1 08/15] bpf: Adapt copy_map_value for multiple offset case, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v1 08/15] bpf: Adapt copy_map_value for multiple offset case, Alexei Starovoitov
  • [PATCH bpf-next v1 09/15] bpf: Populate pairs of btf_id and destructor kfunc in btf, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 12/15] net/netfilter: Add bpf_ct_kptr_get helper, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v1 12/15] net/netfilter: Add bpf_ct_kptr_get helper, kernel test robot
  • [PATCH bpf-next v1 11/15] bpf: Teach verifier about kptr_get style kfunc helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 13/15] libbpf: Add __kptr* macros to bpf_helpers.h, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v1 15/15] selftests/bpf: Add verifier tests for PTR_TO_BTF_ID in map, Kumar Kartikeya Dwivedi
  • Re: [PATCH bpf-next v1 00/15] Introduce typed pointer support in BPF maps, Song Liu
    • Re: [PATCH bpf-next v1 00/15] Introduce typed pointer support in BPF maps, Kumar Kartikeya Dwivedi
      • Re: [PATCH bpf-next v1 00/15] Introduce typed pointer support in BPF maps, Song Liu
• [PATCH v2 nf] netfilter: nf_tables: fix memory leak during stateful obj update, Florian Westphal
  • Re: [PATCH v2 nf] netfilter: nf_tables: fix memory leak during stateful obj update, Pablo Neira Ayuso
    • Re: [PATCH v2 nf] netfilter: nf_tables: fix memory leak during stateful obj update, Florian Westphal
      • Re: [PATCH v2 nf] netfilter: nf_tables: fix memory leak during stateful obj update, Florian Westphal
        • Re: [PATCH v2 nf] netfilter: nf_tables: fix memory leak during stateful obj update, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: fix memory leak during stateful obj update, Florian Westphal
• [PATCH net v2 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Paul Blakey
  • Re: [PATCH net v2 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Pablo Neira Ayuso
    • Re: [PATCH net v2 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Paul Blakey
• [PATCH nft,v2 1/5] src: add EXPR_F_KERNEL to identify expression in the kernel, Pablo Neira Ayuso
  • [PATCH nft,v2 4/5] mnl: update mnl_nft_setelem_del() to allow for more reuse, Pablo Neira Ayuso
  • [PATCH nft,v2 5/5] intervals: add support to automerge with kernel elements, Pablo Neira Ayuso
  • [PATCH nft,v2 3/5] src: remove rbtree datastructure, Pablo Neira Ayuso
  • [PATCH nft,v2 2/5] src: replace interval segment tree overlap and automerge, Pablo Neira Ayuso
• [PATCH libnftnl] exthdr: tcp option reset support, Florian Westphal
• [PATCH nft] src: add tcp option reset support, Florian Westphal
  • Re: [PATCH nft] src: add tcp option reset support, Jan Engelhardt
    • Re: [PATCH nft] src: add tcp option reset support, Florian Westphal
• [nft PATCH 00/26] scanner: Some fixes, many new scopes, Phil Sutter
  • [nft PATCH 21/26] scanner: flags: move to own scope, Phil Sutter
  • [nft PATCH 23/26] scanner: nat: Move to own scope, Phil Sutter
  • [nft PATCH 12/26] scanner: osf: Move to own scope, Phil Sutter
  • [nft PATCH 15/26] scanner: type: Move to own scope, Phil Sutter
  • [nft PATCH 11/26] scanner: dccp, th: Move to own scopes, Phil Sutter
  • [nft PATCH 20/26] scanner: reject: Move to own scope, Phil Sutter
  • [nft PATCH 19/26] scanner: import, export: Move to own scopes, Phil Sutter
  • [nft PATCH 13/26] scanner: ah, esp: Move to own scopes, Phil Sutter
  • [nft PATCH 25/26] scanner: meta: Move to own scope, Phil Sutter
  • [nft PATCH 02/26] scanner: Move 'maps' keyword into list cmd scope, Phil Sutter
  • [nft PATCH 10/26] scanner: udp{,lite}: Move to own scope, Phil Sutter
  • [nft PATCH 09/26] scanner: comp: Move to own scope., Phil Sutter
  • [nft PATCH 07/26] scanner: tcp: Move to own scope, Phil Sutter
  • [nft PATCH 01/26] tests: py: Test connlimit statement, Phil Sutter
  • [nft PATCH 16/26] scanner: rt: Extend scope over rt0, rt2 and srh, Phil Sutter
  • [nft PATCH 17/26] scanner: monitor: Move to own Scope, Phil Sutter
  • [nft PATCH 24/26] scanner: at: Move to own scope, Phil Sutter
  • [nft PATCH 14/26] scanner: dst, frag, hbh, mh: Move to own scopes, Phil Sutter
  • [nft PATCH 22/26] scanner: policy: move to own scope, Phil Sutter
  • [nft PATCH 06/26] scanner: igmp: Move to own scope, Phil Sutter
  • [nft PATCH 18/26] scanner: reset: move to own Scope, Phil Sutter
  • [nft PATCH 03/26] scanner: Some time units are only used in limit scope, Phil Sutter
    • Re: [nft PATCH 03/26] scanner: Some time units are only used in limit scope, Pablo Neira Ayuso
      • Re: [nft PATCH 03/26] scanner: Some time units are only used in limit scope, Pablo Neira Ayuso
      • Re: [nft PATCH 03/26] scanner: Some time units are only used in limit scope, Phil Sutter
  • [nft PATCH 04/26] scanner: rt: Move seg-left keyword into scope, Phil Sutter
  • [nft PATCH 05/26] scanner: icmp{,v6}: Move to own scope, Phil Sutter
  • [nft PATCH 26/26] scanner: dup, fwd, tproxy: Move to own scopes, Phil Sutter
  • [nft PATCH 08/26] scanner: synproxy: Move to own scope, Phil Sutter
  • Re: [nft PATCH 00/26] scanner: Some fixes, many new scopes, Pablo Neira Ayuso
    • Re: [nft PATCH 00/26] scanner: Some fixes, many new scopes, Phil Sutter
    • Re: [nft PATCH 00/26] scanner: Some fixes, many new scopes, Pablo Neira Ayuso
      • Re: [nft PATCH 00/26] scanner: Some fixes, many new scopes, Phil Sutter
        • Re: [nft PATCH 00/26] scanner: Some fixes, many new scopes, Pablo Neira Ayuso
          • Re: [nft PATCH 00/26] scanner: Some fixes, many new scopes, Phil Sutter
• [nf-next PATCH] netfilter: conntrack: Relax helper auto-assignment warning for nftables, Phil Sutter
  • Re: [nf-next PATCH] netfilter: conntrack: Relax helper auto-assignment warning for nftables, Florian Westphal
    • Re: [nf-next PATCH] netfilter: conntrack: Relax helper auto-assignment warning for nftables, Phil Sutter
      • Re: [nf-next PATCH] netfilter: conntrack: Relax helper auto-assignment warning for nftables, Florian Westphal
        • Re: [nf-next PATCH] netfilter: conntrack: Relax helper auto-assignment warning for nftables, Phil Sutter
• [PATCH nf] netfilter: nf_tables: fix memory leak during stateful obj update, Florian Westphal
• [PATCH nf] netfilter: nft_limit: fix stateful object memory leak, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_limit: fix stateful object memory leak, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: unregister flowtable hooks on netns exit, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables_offload: incorrect flow offload action array size, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables_offload: incorrect flow offload action array size, Nick Gregory
• [PATCH nft,v1 0/5] revisit overlap/automerge codebase, Pablo Neira Ayuso
  • [PATCH nft,v1 4/5] mnl: update mnl_nft_setelem_del() to allow for more reuse, Pablo Neira Ayuso
  • [PATCH nft,v1 5/5] intervals: add support to automerge with kernel elements, Pablo Neira Ayuso
  • [PATCH nft,v1 2/5] src: replace interval segment tree overlap and automerge, Pablo Neira Ayuso
  • [PATCH nft,v1 1/5] src: add EXPR_F_KERNEL to identify expression in the kernel, Pablo Neira Ayuso
  • [PATCH nft,v1 3/5] src: remove rbtree datastructure, Pablo Neira Ayuso
  • [PATCH nft,v1 1/1] intervals: add support to automerge with kernel elements, Pablo Neira Ayuso
• [PATCH nft] netlink: check key is EXPR_CONCAT before accessing field, Pablo Neira Ayuso
• [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding, Christophe Leroy
  • Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding, Jakub Kicinski
    • Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding, Christophe Leroy
      • Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding, Jakub Kicinski
        • Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding, Christophe Leroy
          • Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding, Jakub Kicinski
  • Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding, kernel test robot
  • Re: [PATCH net-next v1] net: Use csum_replace_... and csum_sub() helpers instead of opencoding, kernel test robot
• [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Paul Blakey
  • Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Pablo Neira Ayuso
    • Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Marcelo Ricardo Leitner
      • Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Pablo Neira Ayuso
        • Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Pablo Neira Ayuso
          • Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Paul Blakey
  • Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Jakub Kicinski
  • Re: [PATCH net 1/1] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Marcelo Ricardo Leitner
• [PATCH v2 0/3] conntrack: use libmnl for various operations, Mikhail Sennikovsky
  • [PATCH v2 1/3] conntrack: use libmnl for updating conntrack table, Mikhail Sennikovsky
  • [PATCH v2 2/3] conntrack: use libmnl for ct entries deletion, Mikhail Sennikovsky
  • [PATCH v2 3/3] conntrack: use libmnl for flushing conntrack table, Mikhail Sennikovsky
  • Re: [PATCH v2 0/3] conntrack: use libmnl for various operations, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: revisit gc autotuning, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: revisit gc autotuning, Pablo Neira Ayuso
• [nf-next PATCH v3] netfilter: nf_tables: Reject tables of unsupported family, Phil Sutter
  • Re: [nf-next PATCH v3] netfilter: nf_tables: Reject tables of unsupported family, Pablo Neira Ayuso
• [nf-next PATCH v2] netfilter: nf_tables: Reject tables of unsupported family, Phil Sutter
• [PATCH AUTOSEL 5.10 06/23] netfilter: conntrack: don't refresh sctp entries in closed state, Sasha Levin
• [PATCH AUTOSEL 4.19 04/11] netfilter: conntrack: don't refresh sctp entries in closed state, Sasha Levin
• [PATCH AUTOSEL 5.4 05/17] netfilter: conntrack: don't refresh sctp entries in closed state, Sasha Levin
• [PATCH AUTOSEL 5.15 09/33] netfilter: conntrack: don't refresh sctp entries in closed state, Sasha Levin
• [PATCH AUTOSEL 5.16 09/34] netfilter: conntrack: don't refresh sctp entries in closed state, Sasha Levin
• [PATCH nft] segtree: memleak get element command, Pablo Neira Ayuso
• [nf-next PATCH] netfilter: nf_tables: Reject tables of unsupported family, Phil Sutter
• [PATCH nft 0/2] add example folder, Pablo Neira Ayuso
  • [PATCH nft 1/2] examples: add libnftables example program, Pablo Neira Ayuso
  • [PATCH nft 2/2] examples: load ruleset from JSON, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_conntrack 1.0.9 release, Florian Westphal
• [PATCH v2] xshared: Implement xtables lock timeout using signals, Jethro Beekman
  • Re: [PATCH v2] xshared: Implement xtables lock timeout using signals, Florian Westphal
• [iptables PATCH 0/4] Re-enable NFLOG tests, Jeremy Sowden
  • [iptables PATCH 1/4] tests: iptables-test: rename variable, Jeremy Sowden
  • [iptables PATCH 4/4] tests: NFLOG: enable `--nflog-range` tests, Jeremy Sowden
  • [iptables PATCH 3/4] tests: support explicit variant test result, Jeremy Sowden
  • [iptables PATCH 2/4] tests: add `NOMATCH` test result, Jeremy Sowden
    • Re: [iptables PATCH 2/4] tests: add `NOMATCH` test result, Phil Sutter
      • Re: [iptables PATCH 2/4] tests: add `NOMATCH` test result, Jeremy Sowden
        • Re: [iptables PATCH 2/4] tests: add `NOMATCH` test result, Phil Sutter
  • Re: [iptables PATCH 0/4] Re-enable NFLOG tests, Florian Westphal
• [PATCH nf] netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency, Florian Westphal
  • Re: [PATCH nf] netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency, Eric Dumazet
• [iptables PATCH 0/2] Improve error messages for unsupported extensions, Phil Sutter
  • [iptables PATCH 1/2] libxtables: Register only the highest revision extension, Phil Sutter
  • [iptables PATCH 2/2] Improve error messages for unsupported extensions, Phil Sutter
  • Re: [iptables PATCH 0/2] Improve error messages for unsupported extensions, Phil Sutter
    • Re: [iptables PATCH 0/2] Improve error messages for unsupported extensions, Florian Westphal
      • Re: [iptables PATCH 0/2] Improve error messages for unsupported extensions, Phil Sutter
• [PATCHv2 nf] selftests: netfilter: disable rp_filter on router, Hangbin Liu
  • Re: [PATCHv2 nf] selftests: netfilter: disable rp_filter on router, Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: synproxy test requires nf_conntrack, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_synproxy: unregister hooks on init error path, Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: disable rp_filter on router, Hangbin Liu
  • Re: [PATCH nf] selftests: netfilter: disable rp_filter on router, Hangbin Liu
    • Re: [PATCH nf] selftests: netfilter: disable rp_filter on router, Pablo Neira Ayuso
  • Re: [PATCH nf] selftests: netfilter: disable rp_filter on router, Pablo Neira Ayuso
• [PATCH nf-next 0/7] metfilter: remove pcpu dying list, Florian Westphal
  • [PATCH nf-next 1/7] nfnetlink: handle already-released nl socket, Florian Westphal
  • [PATCH nf-next 2/7] netfilter: ctnetlink: make ecache event cb global again, Florian Westphal
  • [PATCH nf-next 3/7] netfilter: ecache: move to separate structure, Florian Westphal
  • [PATCH nf-next 4/7] netfilter: ecache: use dedicated list for event redelivery, Florian Westphal
  • [PATCH nf-next 5/7] netfilter: conntrack: split inner loop of list dumping to own function, Florian Westphal
  • [PATCH nf-next 6/7] netfilter: conntrack: include ecache dying list in dumps, Florian Westphal
  • [PATCH nf-next 7/7] netfilter: conntrack: remove the percpu dying list, Florian Westphal
  • Re: [PATCH nf-next 0/7] metfilter: remove pcpu dying list, Florian Westphal
  • Re: [PATCH nf-next 0/7] metfilter: remove pcpu dying list, Pablo Neira Ayuso
    • Re: [PATCH nf-next 0/7] metfilter: remove pcpu dying list, Florian Westphal
• [iptables PATCH v2] tests: iptables-test: Support variant deviation, Phil Sutter
  • Re: [iptables PATCH v2] tests: iptables-test: Support variant deviation, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_ct: track register operations, Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: fix exit value for nft_concat_range, Hangbin Liu
  • Re: [PATCH nf] selftests: netfilter: fix exit value for nft_concat_range, Stefano Brivio
    • Re: [PATCH nf] selftests: netfilter: fix exit value for nft_concat_range, Pablo Neira Ayuso
• [PATCH net] netfilter: xt_socket: fix a typo in socket_mt_destroy(), Eric Dumazet
  • Re: [PATCH net] netfilter: xt_socket: fix a typo in socket_mt_destroy(), Florian Westphal
    • Re: [PATCH net] netfilter: xt_socket: fix a typo in socket_mt_destroy(), Pablo Neira Ayuso
• [conntrack-tools PATCH] nfct: Support for non-lazy binding, Phil Sutter
  • Re: [conntrack-tools PATCH] nfct: Support for non-lazy binding, Pablo Neira Ayuso
    • Re: [conntrack-tools PATCH] nfct: Support for non-lazy binding, Phil Sutter
• [iptables PATCH] iptables.8: Describe the effect of multiple -v flags, Phil Sutter
• [PATCH nf-next] netfilter: cttimeout: use option structure, Florian Westphal
  • Re: [PATCH nf-next] netfilter: cttimeout: use option structure, Pablo Neira Ayuso
• [PATCH nf-next,v3] netfilter: nft_cmp: optimize comparison for 16-bytes, Pablo Neira Ayuso
• [libnetfilter_conntrack PATCH 1/2] tests: Fix for missing qa-connlabel.conf in tarball, Phil Sutter
  • [libnetfilter_conntrack PATCH 2/2] tests: Add simple tests to TESTS variable, Phil Sutter
  • Re: [libnetfilter_conntrack PATCH 1/2] tests: Fix for missing qa-connlabel.conf in tarball, Pablo Neira Ayuso
• [PATCH nft 0/3] flowtable json fixes, Florian Westphal
  • [PATCH nft 2/3] parser_json: fix flowtable device datatype, Florian Westphal
  • [PATCH nft 3/3] parser_json: permit empty device list, Florian Westphal
  • [PATCH nft 1/3] json: add flow statement json export + parser, Florian Westphal
    • Re: [PATCH nft 1/3] json: add flow statement json export + parser, Florian Westphal
      • Re: [PATCH nft 1/3] json: add flow statement json export + parser, Pablo Neira Ayuso
        • Re: [PATCH nft 1/3] json: add flow statement json export + parser, Phil Sutter
        • Re: [PATCH nft 1/3] json: add flow statement json export + parser, Florian Westphal
          • Re: [PATCH nft 1/3] json: add flow statement json export + parser, Pablo Neira Ayuso
  • Re: [PATCH nft 0/3] flowtable json fixes, Phil Sutter
• [PATCH nf-next,v2] netfilter: nft_cmp: optimize comparison for 16-bytes, Pablo Neira Ayuso
• [Patch] document nft statements undefine/redefine, Pierre Ducroquet
  • Re: [Patch] document nft statements undefine/redefine, Florian Westphal
• [PATCH] Document the undefine and redefine syntax, Pierre Ducroquet
• [libnetfilter_conntrack PATCH] build: update obsolete autoconf macros, Jeremy Sowden
  • Re: [libnetfilter_conntrack PATCH] build: update obsolete autoconf macros, Pablo Neira Ayuso
• Time for a libnetfilter_conntrack release?, Jeremy Sowden
• [PATCH nf-next v2] netfilter: ecache: don't use nf_conn spinlock, Florian Westphal
  • Re: [PATCH nf-next v2] netfilter: ecache: don't use nf_conn spinlock, Pablo Neira Ayuso
• [PATCH v4 net-next 0/7] net: use kfree_skb_reason() for ip/udp packet receive, menglong8 . dong
  • [PATCH v4 net-next 2/7] net: netfilter: use kfree_drop_reason() for NF_DROP, menglong8 . dong
  • [PATCH v4 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), menglong8 . dong
    • Re: [PATCH v4 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), David Ahern
  • [PATCH v4 net-next 1/7] net: skb_drop_reason: add document for drop reasons, menglong8 . dong
  • [PATCH v4 net-next 4/7] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), menglong8 . dong
  • [PATCH v4 net-next 5/7] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), menglong8 . dong
  • [PATCH v4 net-next 6/7] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), menglong8 . dong
  • [PATCH v4 net-next 7/7] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb(), menglong8 . dong
  • Re: [PATCH v4 net-next 0/7] net: use kfree_skb_reason() for ip/udp packet receive, patchwork-bot+netdevbpf
• [iptables PATCH] tests: iptables-test: Support variant deviation, Phil Sutter
  • Re: [iptables PATCH] tests: iptables-test: Support variant deviation, Pablo Neira Ayuso
    • Re: [iptables PATCH] tests: iptables-test: Support variant deviation, Phil Sutter
• [iptables PATCH 1/4] nft: Set NFTNL_CHAIN_FAMILY in new chains, Phil Sutter
  • [iptables PATCH 2/4] ebtables: Support verbose mode, Phil Sutter
  • [iptables PATCH 4/4] nft: cache: Dump rules if debugging, Phil Sutter
  • [iptables PATCH 3/4] nft: Add debug output to table creation, Phil Sutter
  • Re: [iptables PATCH 1/4] nft: Set NFTNL_CHAIN_FAMILY in new chains, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_cmp: optimize comparison for up to 16-bytes, Pablo Neira Ayuso
• [xtables-addons PATCH 0/2] 5.17 Kernel Support, Jeremy Sowden
  • [xtables-addons PATCH 1/2] extensions: replace `PDE_DATA`, Jeremy Sowden
  • [xtables-addons PATCH 2/2] build: bump supported kernel version to 5.17, Jeremy Sowden
  • Re: [xtables-addons PATCH 0/2] 5.17 Kernel Support, Jan Engelhardt
• [PATCH nf] selftests: netfilter: add synproxy test, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: add synproxy test, Pablo Neira Ayuso
  • Re: [PATCH nf] selftests: netfilter: add synproxy test, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: ecache: don't use nf_conn spinlock, Florian Westphal
  • Re: [PATCH nf-next] netfilter: ecache: don't use nf_conn spinlock, kernel test robot
• [PATCH nf-next] netfilter: ctnetlink: use dump structure instead of raw args, Florian Westphal
  • Re: [PATCH nf-next] netfilter: ctnetlink: use dump structure instead of raw args, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: ctnetlink: use dump structure instead of raw args, Florian Westphal
      • Re: [PATCH nf-next] netfilter: ctnetlink: use dump structure instead of raw args, Pablo Neira Ayuso
• [PATCH AUTOSEL 4.14 4/9] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Sasha Levin
• [PATCH AUTOSEL 4.9 3/7] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Sasha Levin
  • Re: [PATCH AUTOSEL 4.9 3/7] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Pavel Machek
• [PATCH AUTOSEL 5.10 05/25] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Sasha Levin
• [PATCH AUTOSEL 4.19 04/10] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Sasha Levin
• [PATCH AUTOSEL 5.4 04/15] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Sasha Levin
• [PATCH AUTOSEL 5.15 05/41] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Sasha Levin
• [PATCH AUTOSEL 5.16 05/52] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Sasha Levin
  • Re: [PATCH AUTOSEL 5.16 05/52] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Jakub Kicinski
    • Re: [PATCH AUTOSEL 5.16 05/52] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Florian Westphal
      • Re: [PATCH AUTOSEL 5.16 05/52] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Sasha Levin
• [PATCH 4.14.y 0/2] netfilter: nat: fix soft lockup when most ports are used, Florian Westphal
  • [PATCH 4.14.y 1/2] netfilter: nat: remove l4 protocol port rovers, Florian Westphal
  • [PATCH 4.14.y 2/2] netfilter: nat: limit port clash resolution attempts, Florian Westphal
  • Re: [PATCH 4.14.y 0/2] netfilter: nat: fix soft lockup when most ports are used, Greg KH
• [PATCH 4.9.y 0/2] netfilter: nat fix soft lockup when most ports are used, Florian Westphal
  • [PATCH 4.9.y 1/2] netfilter: nat: remove l4 protocol port rovers, Florian Westphal
  • [PATCH 4.9.y 2/2] netfilter: nat: limit port clash resolution attempts, Florian Westphal
• [PATCH net-next 0/3] Conntrack GRE offload, Toshiaki Makita
  • [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Toshiaki Makita
    • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Pablo Neira Ayuso
      • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Toshiaki Makita
        • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Pablo Neira Ayuso
          • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Toshiaki Makita
            • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Toshiaki Makita
              • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Pablo Neira Ayuso
  • [PATCH net-next 2/3] act_ct: Support GRE offload, Toshiaki Makita
    • Re: [PATCH net-next 2/3] act_ct: Support GRE offload, Paul Blakey
  • [PATCH net-next 3/3] net/mlx5: Support GRE conntrack offload, Toshiaki Makita
    • Re: [PATCH net-next 3/3] net/mlx5: Support GRE conntrack offload, Paul Blakey
• [PATCH] netfilter: nat: limit port clash resolution attempts, Vimal Agrawal
  • Re: [PATCH] netfilter: nat: limit port clash resolution attempts, Vimal Agrawal
  • Re: [PATCH] netfilter: nat: limit port clash resolution attempts, Florian Westphal
• [PATCH v32 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v32 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v32 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v32 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v32 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• commit a504b703bb1da526a01593da0e4be2af9d9f5fa8 missing from 4.x LTS, Vimal Agrawal
  • Re: commit a504b703bb1da526a01593da0e4be2af9d9f5fa8 missing from 4.x LTS, Pablo Neira Ayuso
• [PATCH nf] netfilter: ctnetlink: disable helper autoassign, Florian Westphal
  • Re: [PATCH nf] netfilter: ctnetlink: disable helper autoassign, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_compat: suppress comment match, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nft_compat: suppress comment match, Pablo Neira Ayuso
• Re: PROBLEM: Injected conntrack lost helper, Florian Westphal
  • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
    • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
  • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
    • Re: PROBLEM: Injected conntrack lost helper, Pablo Neira Ayuso
      • Re: PROBLEM: Injected conntrack lost helper, Florian Westphal
        • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
          • Re: PROBLEM: Injected conntrack lost helper, Florian Westphal
            • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
        • Re: PROBLEM: Injected conntrack lost helper, Pablo Neira Ayuso
• [PATCH nf] MAINTAINERS: netfilter: update git links, Florian Westphal
• [PATCH nf 1/2] netfilter: conntrack: move synack init code to helper, Florian Westphal
  • [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack, Florian Westphal
    • Re: [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack, Jozsef Kadlecsik
      • Re: [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack, Florian Westphal
      • Re: [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack, Pablo Neira Ayuso
  • Re: [PATCH nf 1/2] netfilter: conntrack: move synack init code to helper, Jozsef Kadlecsik
    • Re: [PATCH nf 1/2] netfilter: conntrack: move synack init code to helper, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_payload: don't allow th access for fragments, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_payload: don't allow th access for fragments, Pablo Neira Ayuso
• new iptables release?, First Mate Rummey
• [iptables PATCH 1/2] nft: Use verbose flag to toggle debug output, Phil Sutter
  • [iptables PATCH 2/2] iptables-restore: Support for extra debug output, Phil Sutter
  • Re: [iptables PATCH 1/2] nft: Use verbose flag to toggle debug output, Pablo Neira Ayuso
    • Re: [iptables PATCH 1/2] nft: Use verbose flag to toggle debug output, Phil Sutter
• [PATCH nf] netfilter: conntrack: don't refresh sctp entries in closed state, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: don't refresh sctp entries in closed state, Pablo Neira Ayuso
• [PATCH v2 nf-next] netfilter: exthdr: add support for tcp option removal, Florian Westphal
  • Re: [PATCH v2 nf-next] netfilter: exthdr: add support for tcp option removal, Pablo Neira Ayuso
• [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Florian Westphal
  • Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Pablo Neira Ayuso
  • Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Greg KH
    • Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Florian Westphal
      • Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Greg KH
• [PATCH v3 net-next 0/7] net: use kfree_skb_reason() for ip/udp packet receive, menglong8 . dong
  • [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, menglong8 . dong
    • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, David Ahern
      • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Menglong Dong
        • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Jakub Kicinski
          • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Menglong Dong
            • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Jakub Kicinski
              • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Eric Dumazet
                • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Menglong Dong
              • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Menglong Dong
  • [PATCH v3 net-next 2/7] net: netfilter: use kfree_drop_reason() for NF_DROP, menglong8 . dong
  • [PATCH v3 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), menglong8 . dong
    • Re: [PATCH v3 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), David Ahern
      • Re: [PATCH v3 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), Menglong Dong
  • [PATCH v3 net-next 4/7] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), menglong8 . dong
    • Re: [PATCH v3 net-next 4/7] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), David Ahern
  • [PATCH v3 net-next 5/7] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), menglong8 . dong
    • Re: [PATCH v3 net-next 5/7] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), David Ahern
  • [PATCH v3 net-next 6/7] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), menglong8 . dong
    • Re: [PATCH v3 net-next 6/7] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), David Ahern
  • [PATCH v3 net-next 7/7] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb(), menglong8 . dong
    • Re: [PATCH v3 net-next 7/7] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb(), David Ahern
• [PATCH nftables,v2] iface: handle EINTR case when creating the cache, Pablo Neira Ayuso
  • Re: [PATCH nftables,v2] iface: handle EINTR case when creating the cache, Eugene Crosser
• [PATCH nftables] iface: handle EINTR case when creating the cache, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: remove assignment with no effect in chain blob builder, Pablo Neira Ayuso
• [PATCH v2 net-next 0/8] net: use kfree_skb_reason() for ip/udp packet receive, menglong8 . dong
  • [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER, menglong8 . dong
    • Re: [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER, David Ahern
      • Re: [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER, Jakub Kicinski
        • Re: [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER, Menglong Dong
  • [PATCH v2 net-next 2/8] net: skb_drop_reason: add document for drop reasons, menglong8 . dong
    • Re: [PATCH v2 net-next 2/8] net: skb_drop_reason: add document for drop reasons, David Ahern
  • [PATCH v2 net-next 3/8] net: netfilter: use kfree_drop_reason() for NF_DROP, menglong8 . dong
  • [PATCH v2 net-next 4/8] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), menglong8 . dong
    • Re: [PATCH v2 net-next 4/8] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), David Ahern
  • [PATCH v2 net-next 5/8] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), menglong8 . dong
  • [PATCH v2 net-next 6/8] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), menglong8 . dong
  • [PATCH v2 net-next 7/8] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), menglong8 . dong
  • [PATCH v2 net-next 8/8] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb(), menglong8 . dong
• [conntrack-tools PATCH] Merge nfct tool into conntrackd, Phil Sutter
• [PATCH nftables 0/4] optimization updates, Pablo Neira Ayuso
  • [PATCH nftables 1/4] optimize: add __expr_cmp(), Pablo Neira Ayuso
  • [PATCH nftables 3/4] optimize: check for payload base and offset when searching for mergers, Pablo Neira Ayuso
  • [PATCH nftables 2/4] optimize: merge verdict maps with same lookup key, Pablo Neira Ayuso
  • [PATCH nftables 4/4] optimize: do not merge raw payload expressions, Pablo Neira Ayuso
• [PATCH nf] selftests: nft_concat_range: add test for reload with no element add/del, Florian Westphal
  • Re: [PATCH nf] selftests: nft_concat_range: add test for reload with no element add/del, Stefano Brivio
• [PATCH nf] netfilter: nft_byteorder: track register operations, Pablo Neira Ayuso
• [nf PATCH] netfilter: nft_reject_bridge: Fix for missing reply from prerouting, Phil Sutter
  • Re: [nf PATCH] netfilter: nft_reject_bridge: Fix for missing reply from prerouting, Pablo Neira Ayuso
• [PATCH iptables-nft 0/7] iptables: prefer native expressions for udp and tcp matches, Florian Westphal
  • [PATCH iptables-nft 2/7] nft-shared: support native tcp port range delinearize, Florian Westphal
  • [PATCH iptables-nft 1/7] nft-shared: support native tcp port delinearize, Florian Westphal
  • [PATCH iptables-nft 5/7] nft: prefer native expressions instead of tcp match, Florian Westphal
  • [PATCH iptables-nft 3/7] nft-shared: support native udp port delinearize, Florian Westphal
  • [PATCH iptables-nft 4/7] nft: prefer native expressions instead of udp match, Florian Westphal
  • [PATCH iptables-nft 7/7] nft: add support for native tcp flag matching, Florian Westphal
  • [PATCH iptables-nft 6/7] nft-shared: add tcp flag dissection, Florian Westphal
  • Re: [PATCH iptables-nft 0/7] iptables: prefer native expressions for udp and tcp matches, Florian Westphal
• [PATCH nf] selftests: netfilter: check stateless nat udp checksum fixup, Florian Westphal
• [PATCH net-next 0/6] net: use kfree_skb_reason() for ip/udp packet receive, menglong8 . dong
  • [PATCH net-next 1/6] net: netfilter: use kfree_drop_reason() for NF_DROP, menglong8 . dong
    • Re: [PATCH net-next 1/6] net: netfilter: use kfree_drop_reason() for NF_DROP, Jakub Kicinski
      • Re: [PATCH net-next 1/6] net: netfilter: use kfree_drop_reason() for NF_DROP, Pablo Neira Ayuso
  • [PATCH net-next 2/6] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), menglong8 . dong
    • Re: [PATCH net-next 2/6] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), David Ahern
      • Re: [PATCH net-next 2/6] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), Menglong Dong
  • [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), menglong8 . dong
    • Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), David Ahern
      • Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), Menglong Dong
        • Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), David Ahern
          • Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), Menglong Dong
  • [PATCH net-next 4/6] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), menglong8 . dong
    • Re: [PATCH net-next 4/6] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), David Ahern
      • Re: [PATCH net-next 4/6] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), Menglong Dong
  • [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), menglong8 . dong
    • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), David Ahern
      • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), Menglong Dong
        • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), David Ahern
          • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), Jakub Kicinski
            • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), David Ahern
  • [PATCH net-next 6/6] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb(), menglong8 . dong
• [ANNOUNCE] Settlement with Patrick McHardy, Pablo Neira Ayuso
• [PATCH] net: fix duplicate logs of iptables TRACE target, kai zhang
  • Re: [PATCH] net: fix duplicate logs of iptables TRACE target, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] net: fix duplicate logs of iptables TRACE target, kai zhang
    • Re: [PATCH] net: fix duplicate logs of iptables TRACE target, Florian Westphal
• [PATCH nf] selftests: netfilter: reduce zone stress test running time, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: reduce zone stress test running time, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_ct: fix use after free when attaching zone template, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_ct: fix use after free when attaching zone template, Pablo Neira Ayuso
• [PATCH] netfilter: Remove flowtable relics, Geert Uytterhoeven
  • Re: [PATCH] netfilter: Remove flowtable relics, Pablo Neira Ayuso
• [PATCH 28/31] net: netfilter: changing LED_* from enum led_brightness to actual value, Luiz Sampaio
• [PATCH nf-next] netfilter: conntrack: pptp: use single option structure, Florian Westphal
• [PATCH nf-next 0/4] netfilter: conntrack: remove extension register api, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: conntrack: make all extensions 8-byte alignned, Florian Westphal
  • [PATCH nf-next 2/4] netfilter: conntrack: move extension sizes into core, Florian Westphal
  • [PATCH nf-next 3/4] netfilter: conntrack: hande ->destroy hook via nat_ops instead, Florian Westphal
  • [PATCH nf-next 4/4] netfilter: conntrack: remove extension register api, Florian Westphal
  • Re: [PATCH nf-next 0/4] netfilter: conntrack: remove extension register api, Pablo Neira Ayuso
• [iptables PATCH] extensions: libxt_NFLOG: fix typo, Jeremy Sowden
  • Re: [iptables PATCH] extensions: libxt_NFLOG: fix typo, Florian Westphal
• [iptables PATCH] xshared: Fix response to unprivileged users, Phil Sutter
  • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Florian Westphal
  • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Pablo Neira Ayuso
    • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Phil Sutter
      • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Pablo Neira Ayuso
        • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Phil Sutter
          • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Pablo Neira Ayuso
• [PATCH libnftnl 0/3] add description infrastructure, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3] desc: add datatype description, Pablo Neira Ayuso
  • [PATCH libnftnl 1/3] desc: add expression description, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] desc: add set description, Pablo Neira Ayuso
    • Re: [PATCH libnftnl 3/3] desc: add set description, Phil Sutter
      • Re: [PATCH libnftnl 3/3] desc: add set description, Pablo Neira Ayuso
        • Re: [PATCH libnftnl 3/3] desc: add set description, Phil Sutter
  • Re: [PATCH libnftnl 0/3] add description infrastructure, Phil Sutter
    • Re: [PATCH libnftnl 0/3] add description infrastructure, Pablo Neira Ayuso
  • Re: [PATCH libnftnl 0/3] add description infrastructure, Phil Sutter
    • Re: [PATCH libnftnl 0/3] add description infrastructure, Pablo Neira Ayuso
• [PATCH nft] parser_bison: missing synproxy support in map declarations, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrack: add --reliable option, Florian Westphal
• [PATCH nf-next] nfqueue: enable to get skb->priority, Nicolas Dichtel
  • Re: [PATCH nf-next] nfqueue: enable to get skb->priority, Florian Westphal
  • Re: [PATCH nf-next] nfqueue: enable to get skb->priority, Pablo Neira Ayuso
    • Re: [PATCH nf-next] nfqueue: enable to get skb->priority, Pablo Neira Ayuso
      • [PATCH nf-next] nfqueue: enable to set skb->priority, Nicolas Dichtel
        • Re: [PATCH nf-next] nfqueue: enable to set skb->priority, Florian Westphal
        • Re: [PATCH nf-next] nfqueue: enable to set skb->priority, kernel test robot
        • Re: [PATCH nf-next] nfqueue: enable to set skb->priority, Pablo Neira Ayuso
    • [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Nicolas Dichtel
      • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Nicolas Dichtel
        • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Florian Westphal
          • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Pablo Neira Ayuso
            • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Nicolas Dichtel
              • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Pablo Neira Ayuso
                • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Nicolas Dichtel
• [PATCH conntrack-tools] conntrack: fix compiler warnings, Florian Westphal
  • Re: [PATCH conntrack-tools] conntrack: fix compiler warnings, Pablo Neira Ayuso
• [nft PATCH v2 0/5] Store multiple payload dependencies, Jeremy Sowden
  • [nft PATCH v2 2/5] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
  • [nft PATCH v2 1/5] tests: py: fix inet/ip.t bridge payload, Jeremy Sowden
  • [nft PATCH v2 4/5] tests: py: remove redundant payload expressions, Jeremy Sowden
  • [nft PATCH v2 3/5] src: store more than one payload dependency, Jeremy Sowden
  • [nft PATCH v2 5/5] tests: shell: remove redundant payload expressions, Jeremy Sowden
  • Re: [nft PATCH v2 0/5] Store multiple payload dependencies, Florian Westphal
• [PATCH nft] nft-shared: support native tcp port delinearize, Florian Westphal
  • Re: [PATCH nft] nft-shared: support native tcp port delinearize, Pablo Neira Ayuso
    • Re: [PATCH nft] nft-shared: support native tcp port delinearize, Florian Westphal
• [PATCH 0/1] UDP traceroute packets with no checksum, Kevin Mitchell
  • [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Kevin Mitchell
    • Re: [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Florian Westphal
    • Re: [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Pablo Neira Ayuso
• [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 01/10] bpf: Fix UAF due to race between btf_try_get_module and load_module, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 03/10] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 04/10] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 06/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 07/10] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 08/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests, Benjamin Poirier
      • Re: [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests, Benjamin Poirier
  • [PATCH bpf-next v8 10/10] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v8 10/10] selftests/bpf: Add test for race in btf_try_get_module, Alexei Starovoitov
  • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Alexander Egorenkov
    • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
      • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Alexander Egorenkov
        • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Andrii Nakryiko
• [PATCH nf] netfilter: conntrack: don't increment invalid counter on NF_REPEAT, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: don't increment invalid counter on NF_REPEAT, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: set last expression in register tracking area, Pablo Neira Ayuso
• [bug report] netfilter: nf_tables: add register tracking infrastructure, Dan Carpenter
  • Re: [bug report] netfilter: nf_tables: add register tracking infrastructure, Pablo Neira Ayuso
• [PATCH nft 0/4] fix list chain x y with anonymous chains, Pablo Neira Ayuso
  • [PATCH nft 1/4] src: do not use the nft_cache_filter object from mnl.c, Pablo Neira Ayuso
  • [PATCH nft 3/4] cache: add helper function to fill up the rule cache, Pablo Neira Ayuso
  • [PATCH nft 2/4] cache: do not set error code twice, Pablo Neira Ayuso
  • [PATCH nft 4/4] src: 'nft list chain' prints anonymous chains correctly, Pablo Neira Ayuso
• [PATCH bpf-next v7 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 04/10] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 01/10] bpf: Fix UAF due to race between btf_try_get_module and load_module, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Alexei Starovoitov
      • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
          • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Alexei Starovoitov
            • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 03/10] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 06/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 08/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API, Alexei Starovoitov
      • Re: [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 10/10] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 09/10] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
• [iptables PATCH v2 00/11] Share do_parse() between nft and legacy, Phil Sutter
  • [iptables PATCH v2 11/11] ip6tables: Use the shared do_parse, too, Phil Sutter
  • [iptables PATCH v2 05/11] xtables: Pass xtables_args to check_inverse(), Phil Sutter
  • [iptables PATCH v2 03/11] xtables: Move struct nft_xt_cmd_parse to xshared.h, Phil Sutter
  • [iptables PATCH v2 09/11] nft: Move proto_parse and post_parse callbacks to xshared, Phil Sutter
  • [iptables PATCH v2 10/11] iptables: Use xtables' do_parse() function, Phil Sutter
  • [iptables PATCH v2 02/11] xtables: Pull table validity check out of do_parse(), Phil Sutter
  • [iptables PATCH v2 08/11] xshared: Store parsed wait and wait_interval in xtables_args, Phil Sutter
  • [iptables PATCH v2 01/11] xtables: Drop xtables' family on demand feature, Phil Sutter
  • [iptables PATCH v2 06/11] xtables: Do not pass nft_handle to do_parse(), Phil Sutter
  • [iptables PATCH v2 04/11] xtables: Pass xtables_args to check_empty_interface(), Phil Sutter
  • [iptables PATCH v2 07/11] xshared: Move do_parse to shared space, Phil Sutter
  • Re: [iptables PATCH v2 00/11] Share do_parse() between nft and legacy, Pablo Neira Ayuso
    • Re: [iptables PATCH v2 00/11] Share do_parse() between nft and legacy, Phil Sutter
• [PATCH nft] evaluate: attempt to set_eval flag if dynamic updates requested, Florian Westphal
  • Re: [PATCH nft] evaluate: attempt to set_eval flag if dynamic updates requested, Pablo Neira Ayuso
• [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions, Dan Carpenter