Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, (continued)
  • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Pablo Neira Ayuso
    • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Toshiaki Makita
      • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Toshiaki Makita
        • Re: [PATCH net-next 1/3] netfilter: flowtable: Support GRE, Pablo Neira Ayuso
  • [PATCH net-next 2/3] act_ct: Support GRE offload, Toshiaki Makita
    • Re: [PATCH net-next 2/3] act_ct: Support GRE offload, Paul Blakey
  • [PATCH net-next 3/3] net/mlx5: Support GRE conntrack offload, Toshiaki Makita
    • Re: [PATCH net-next 3/3] net/mlx5: Support GRE conntrack offload, Paul Blakey
• [PATCH] netfilter: nat: limit port clash resolution attempts, Vimal Agrawal
  • Re: [PATCH] netfilter: nat: limit port clash resolution attempts, Vimal Agrawal
  • Re: [PATCH] netfilter: nat: limit port clash resolution attempts, Florian Westphal
• [PATCH v32 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v32 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v32 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v32 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v32 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• commit a504b703bb1da526a01593da0e4be2af9d9f5fa8 missing from 4.x LTS, Vimal Agrawal
  • Re: commit a504b703bb1da526a01593da0e4be2af9d9f5fa8 missing from 4.x LTS, Pablo Neira Ayuso
• [PATCH nf] netfilter: ctnetlink: disable helper autoassign, Florian Westphal
  • Re: [PATCH nf] netfilter: ctnetlink: disable helper autoassign, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_compat: suppress comment match, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nft_compat: suppress comment match, Pablo Neira Ayuso
• Re: PROBLEM: Injected conntrack lost helper, Florian Westphal
  • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
    • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
  • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
    • Re: PROBLEM: Injected conntrack lost helper, Pablo Neira Ayuso
      • Re: PROBLEM: Injected conntrack lost helper, Florian Westphal
        • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
          • Re: PROBLEM: Injected conntrack lost helper, Florian Westphal
            • Re: PROBLEM: Injected conntrack lost helper, Pham Thanh Tuyen
        • Re: PROBLEM: Injected conntrack lost helper, Pablo Neira Ayuso
• [PATCH nf] MAINTAINERS: netfilter: update git links, Florian Westphal
• [PATCH nf 1/2] netfilter: conntrack: move synack init code to helper, Florian Westphal
  • [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack, Florian Westphal
    • Re: [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack, Jozsef Kadlecsik
      • Re: [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack, Florian Westphal
      • Re: [PATCH nf 2/2] netfilter: conntrack: re-init state for retransmitted syn-ack, Pablo Neira Ayuso
  • Re: [PATCH nf 1/2] netfilter: conntrack: move synack init code to helper, Jozsef Kadlecsik
    • Re: [PATCH nf 1/2] netfilter: conntrack: move synack init code to helper, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_payload: don't allow th access for fragments, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_payload: don't allow th access for fragments, Pablo Neira Ayuso
• new iptables release?, First Mate Rummey
• [iptables PATCH 1/2] nft: Use verbose flag to toggle debug output, Phil Sutter
  • [iptables PATCH 2/2] iptables-restore: Support for extra debug output, Phil Sutter
  • Re: [iptables PATCH 1/2] nft: Use verbose flag to toggle debug output, Pablo Neira Ayuso
    • Re: [iptables PATCH 1/2] nft: Use verbose flag to toggle debug output, Phil Sutter
• [PATCH nf] netfilter: conntrack: don't refresh sctp entries in closed state, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: don't refresh sctp entries in closed state, Pablo Neira Ayuso
• [PATCH v2 nf-next] netfilter: exthdr: add support for tcp option removal, Florian Westphal
  • Re: [PATCH v2 nf-next] netfilter: exthdr: add support for tcp option removal, Pablo Neira Ayuso
• [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Florian Westphal
  • Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Pablo Neira Ayuso
  • Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Greg KH
    • Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Florian Westphal
      • Re: [PATCH 4.19.y] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Greg KH
• [PATCH v3 net-next 0/7] net: use kfree_skb_reason() for ip/udp packet receive, menglong8 . dong
  • [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, menglong8 . dong
    • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, David Ahern
      • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Menglong Dong
        • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Jakub Kicinski
          • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Menglong Dong
            • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Jakub Kicinski
              • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Eric Dumazet
                • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Menglong Dong
              • Re: [PATCH v3 net-next 1/7] net: skb_drop_reason: add document for drop reasons, Menglong Dong
  • [PATCH v3 net-next 2/7] net: netfilter: use kfree_drop_reason() for NF_DROP, menglong8 . dong
  • [PATCH v3 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), menglong8 . dong
    • Re: [PATCH v3 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), David Ahern
      • Re: [PATCH v3 net-next 3/7] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), Menglong Dong
  • [PATCH v3 net-next 4/7] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), menglong8 . dong
    • Re: [PATCH v3 net-next 4/7] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), David Ahern
  • [PATCH v3 net-next 5/7] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), menglong8 . dong
    • Re: [PATCH v3 net-next 5/7] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), David Ahern
  • [PATCH v3 net-next 6/7] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), menglong8 . dong
    • Re: [PATCH v3 net-next 6/7] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), David Ahern
  • [PATCH v3 net-next 7/7] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb(), menglong8 . dong
    • Re: [PATCH v3 net-next 7/7] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb(), David Ahern
• [PATCH nftables,v2] iface: handle EINTR case when creating the cache, Pablo Neira Ayuso
  • Re: [PATCH nftables,v2] iface: handle EINTR case when creating the cache, Eugene Crosser
• [PATCH nftables] iface: handle EINTR case when creating the cache, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: remove assignment with no effect in chain blob builder, Pablo Neira Ayuso
• [PATCH v2 net-next 0/8] net: use kfree_skb_reason() for ip/udp packet receive, menglong8 . dong
  • [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER, menglong8 . dong
    • Re: [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER, David Ahern
      • Re: [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER, Jakub Kicinski
        • Re: [PATCH v2 net-next 1/8] net: socket: intrudoce SKB_DROP_REASON_SOCKET_FILTER, Menglong Dong
  • [PATCH v2 net-next 2/8] net: skb_drop_reason: add document for drop reasons, menglong8 . dong
    • Re: [PATCH v2 net-next 2/8] net: skb_drop_reason: add document for drop reasons, David Ahern
  • [PATCH v2 net-next 3/8] net: netfilter: use kfree_drop_reason() for NF_DROP, menglong8 . dong
  • [PATCH v2 net-next 4/8] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), menglong8 . dong
    • Re: [PATCH v2 net-next 4/8] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), David Ahern
  • [PATCH v2 net-next 5/8] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), menglong8 . dong
  • [PATCH v2 net-next 6/8] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), menglong8 . dong
  • [PATCH v2 net-next 7/8] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), menglong8 . dong
  • [PATCH v2 net-next 8/8] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb(), menglong8 . dong
• [conntrack-tools PATCH] Merge nfct tool into conntrackd, Phil Sutter
• [PATCH nftables 0/4] optimization updates, Pablo Neira Ayuso
  • [PATCH nftables 1/4] optimize: add __expr_cmp(), Pablo Neira Ayuso
  • [PATCH nftables 3/4] optimize: check for payload base and offset when searching for mergers, Pablo Neira Ayuso
  • [PATCH nftables 2/4] optimize: merge verdict maps with same lookup key, Pablo Neira Ayuso
  • [PATCH nftables 4/4] optimize: do not merge raw payload expressions, Pablo Neira Ayuso
• [PATCH nf] selftests: nft_concat_range: add test for reload with no element add/del, Florian Westphal
  • Re: [PATCH nf] selftests: nft_concat_range: add test for reload with no element add/del, Stefano Brivio
• [PATCH nf] netfilter: nft_byteorder: track register operations, Pablo Neira Ayuso
• [nf PATCH] netfilter: nft_reject_bridge: Fix for missing reply from prerouting, Phil Sutter
  • Re: [nf PATCH] netfilter: nft_reject_bridge: Fix for missing reply from prerouting, Pablo Neira Ayuso
• [PATCH iptables-nft 0/7] iptables: prefer native expressions for udp and tcp matches, Florian Westphal
  • [PATCH iptables-nft 2/7] nft-shared: support native tcp port range delinearize, Florian Westphal
  • [PATCH iptables-nft 1/7] nft-shared: support native tcp port delinearize, Florian Westphal
  • [PATCH iptables-nft 5/7] nft: prefer native expressions instead of tcp match, Florian Westphal
  • [PATCH iptables-nft 3/7] nft-shared: support native udp port delinearize, Florian Westphal
  • [PATCH iptables-nft 4/7] nft: prefer native expressions instead of udp match, Florian Westphal
  • [PATCH iptables-nft 7/7] nft: add support for native tcp flag matching, Florian Westphal
  • [PATCH iptables-nft 6/7] nft-shared: add tcp flag dissection, Florian Westphal
  • Re: [PATCH iptables-nft 0/7] iptables: prefer native expressions for udp and tcp matches, Florian Westphal
• [PATCH nf] selftests: netfilter: check stateless nat udp checksum fixup, Florian Westphal
• [PATCH net-next 0/6] net: use kfree_skb_reason() for ip/udp packet receive, menglong8 . dong
  • [PATCH net-next 1/6] net: netfilter: use kfree_drop_reason() for NF_DROP, menglong8 . dong
    • Re: [PATCH net-next 1/6] net: netfilter: use kfree_drop_reason() for NF_DROP, Jakub Kicinski
      • Re: [PATCH net-next 1/6] net: netfilter: use kfree_drop_reason() for NF_DROP, Pablo Neira Ayuso
  • [PATCH net-next 2/6] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), menglong8 . dong
    • Re: [PATCH net-next 2/6] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), David Ahern
      • Re: [PATCH net-next 2/6] net: ipv4: use kfree_skb_reason() in ip_rcv_core(), Menglong Dong
  • [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), menglong8 . dong
    • Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), David Ahern
      • Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), Menglong Dong
        • Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), David Ahern
          • Re: [PATCH net-next 3/6] net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core(), Menglong Dong
  • [PATCH net-next 4/6] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), menglong8 . dong
    • Re: [PATCH net-next 4/6] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), David Ahern
      • Re: [PATCH net-next 4/6] net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu(), Menglong Dong
  • [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), menglong8 . dong
    • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), David Ahern
      • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), Menglong Dong
        • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), David Ahern
          • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), Jakub Kicinski
            • Re: [PATCH net-next 5/6] net: udp: use kfree_skb_reason() in udp_queue_rcv_one_skb(), David Ahern
  • [PATCH net-next 6/6] net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb(), menglong8 . dong
• [ANNOUNCE] Settlement with Patrick McHardy, Pablo Neira Ayuso
• [PATCH] net: fix duplicate logs of iptables TRACE target, kai zhang
  • Re: [PATCH] net: fix duplicate logs of iptables TRACE target, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH] net: fix duplicate logs of iptables TRACE target, kai zhang
    • Re: [PATCH] net: fix duplicate logs of iptables TRACE target, Florian Westphal
• [PATCH nf] selftests: netfilter: reduce zone stress test running time, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: reduce zone stress test running time, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_ct: fix use after free when attaching zone template, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_ct: fix use after free when attaching zone template, Pablo Neira Ayuso
• [PATCH] netfilter: Remove flowtable relics, Geert Uytterhoeven
  • Re: [PATCH] netfilter: Remove flowtable relics, Pablo Neira Ayuso
• [PATCH 28/31] net: netfilter: changing LED_* from enum led_brightness to actual value, Luiz Sampaio
• [PATCH nf-next] netfilter: conntrack: pptp: use single option structure, Florian Westphal
• [PATCH nf-next 0/4] netfilter: conntrack: remove extension register api, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: conntrack: make all extensions 8-byte alignned, Florian Westphal
  • [PATCH nf-next 2/4] netfilter: conntrack: move extension sizes into core, Florian Westphal
  • [PATCH nf-next 3/4] netfilter: conntrack: hande ->destroy hook via nat_ops instead, Florian Westphal
  • [PATCH nf-next 4/4] netfilter: conntrack: remove extension register api, Florian Westphal
  • Re: [PATCH nf-next 0/4] netfilter: conntrack: remove extension register api, Pablo Neira Ayuso
• [iptables PATCH] extensions: libxt_NFLOG: fix typo, Jeremy Sowden
  • Re: [iptables PATCH] extensions: libxt_NFLOG: fix typo, Florian Westphal
• [iptables PATCH] xshared: Fix response to unprivileged users, Phil Sutter
  • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Florian Westphal
  • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Pablo Neira Ayuso
    • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Phil Sutter
      • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Pablo Neira Ayuso
        • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Phil Sutter
          • Re: [iptables PATCH] xshared: Fix response to unprivileged users, Pablo Neira Ayuso
• [PATCH libnftnl 0/3] add description infrastructure, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3] desc: add datatype description, Pablo Neira Ayuso
  • [PATCH libnftnl 1/3] desc: add expression description, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] desc: add set description, Pablo Neira Ayuso
    • Re: [PATCH libnftnl 3/3] desc: add set description, Phil Sutter
      • Re: [PATCH libnftnl 3/3] desc: add set description, Pablo Neira Ayuso
        • Re: [PATCH libnftnl 3/3] desc: add set description, Phil Sutter
  • Re: [PATCH libnftnl 0/3] add description infrastructure, Phil Sutter
    • Re: [PATCH libnftnl 0/3] add description infrastructure, Pablo Neira Ayuso
  • Re: [PATCH libnftnl 0/3] add description infrastructure, Phil Sutter
    • Re: [PATCH libnftnl 0/3] add description infrastructure, Pablo Neira Ayuso
• [PATCH nft] parser_bison: missing synproxy support in map declarations, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrack: add --reliable option, Florian Westphal
• [PATCH nf-next] nfqueue: enable to get skb->priority, Nicolas Dichtel
  • Re: [PATCH nf-next] nfqueue: enable to get skb->priority, Florian Westphal
  • Re: [PATCH nf-next] nfqueue: enable to get skb->priority, Pablo Neira Ayuso
    • Re: [PATCH nf-next] nfqueue: enable to get skb->priority, Pablo Neira Ayuso
      • [PATCH nf-next] nfqueue: enable to set skb->priority, Nicolas Dichtel
        • Re: [PATCH nf-next] nfqueue: enable to set skb->priority, Florian Westphal
        • Re: [PATCH nf-next] nfqueue: enable to set skb->priority, kernel test robot
        • Re: [PATCH nf-next] nfqueue: enable to set skb->priority, Pablo Neira Ayuso
    • [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Nicolas Dichtel
      • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Nicolas Dichtel
        • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Florian Westphal
          • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Pablo Neira Ayuso
            • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Nicolas Dichtel
              • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Pablo Neira Ayuso
                • Re: [PATCH libnetfilter_queue] libnetfilter_queue: add support of skb->priority, Nicolas Dichtel
• [PATCH conntrack-tools] conntrack: fix compiler warnings, Florian Westphal
  • Re: [PATCH conntrack-tools] conntrack: fix compiler warnings, Pablo Neira Ayuso
• [nft PATCH v2 0/5] Store multiple payload dependencies, Jeremy Sowden
  • [nft PATCH v2 2/5] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
  • [nft PATCH v2 1/5] tests: py: fix inet/ip.t bridge payload, Jeremy Sowden
  • [nft PATCH v2 4/5] tests: py: remove redundant payload expressions, Jeremy Sowden
  • [nft PATCH v2 3/5] src: store more than one payload dependency, Jeremy Sowden
  • [nft PATCH v2 5/5] tests: shell: remove redundant payload expressions, Jeremy Sowden
  • Re: [nft PATCH v2 0/5] Store multiple payload dependencies, Florian Westphal
• [PATCH nft] nft-shared: support native tcp port delinearize, Florian Westphal
  • Re: [PATCH nft] nft-shared: support native tcp port delinearize, Pablo Neira Ayuso
    • Re: [PATCH nft] nft-shared: support native tcp port delinearize, Florian Westphal
• [PATCH 0/1] UDP traceroute packets with no checksum, Kevin Mitchell
  • [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Kevin Mitchell
    • Re: [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Florian Westphal
    • Re: [PATCH 1/1] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Pablo Neira Ayuso
• [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 01/10] bpf: Fix UAF due to race between btf_try_get_module and load_module, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 03/10] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 04/10] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 06/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 07/10] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 08/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests, Benjamin Poirier
      • Re: [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v8 09/10] selftests/bpf: Extend kfunc selftests, Benjamin Poirier
  • [PATCH bpf-next v8 10/10] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v8 10/10] selftests/bpf: Add test for race in btf_try_get_module, Alexei Starovoitov
  • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Alexander Egorenkov
    • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
      • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Alexander Egorenkov
        • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v8 00/10] Introduce unstable CT lookup helpers, Andrii Nakryiko
• [PATCH nf] netfilter: conntrack: don't increment invalid counter on NF_REPEAT, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: don't increment invalid counter on NF_REPEAT, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: set last expression in register tracking area, Pablo Neira Ayuso
• [bug report] netfilter: nf_tables: add register tracking infrastructure, Dan Carpenter
  • Re: [bug report] netfilter: nf_tables: add register tracking infrastructure, Pablo Neira Ayuso
• [PATCH nft 0/4] fix list chain x y with anonymous chains, Pablo Neira Ayuso
  • [PATCH nft 1/4] src: do not use the nft_cache_filter object from mnl.c, Pablo Neira Ayuso
  • [PATCH nft 3/4] cache: add helper function to fill up the rule cache, Pablo Neira Ayuso
  • [PATCH nft 2/4] cache: do not set error code twice, Pablo Neira Ayuso
  • [PATCH nft 4/4] src: 'nft list chain' prints anonymous chains correctly, Pablo Neira Ayuso
• [PATCH bpf-next v7 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 04/10] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 01/10] bpf: Fix UAF due to race between btf_try_get_module and load_module, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Alexei Starovoitov
      • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
          • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Alexei Starovoitov
            • Re: [PATCH bpf-next v7 02/10] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 03/10] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 06/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 08/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API, Alexei Starovoitov
      • Re: [PATCH bpf-next v7 07/10] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 10/10] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v7 09/10] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
• [iptables PATCH v2 00/11] Share do_parse() between nft and legacy, Phil Sutter
  • [iptables PATCH v2 11/11] ip6tables: Use the shared do_parse, too, Phil Sutter
  • [iptables PATCH v2 05/11] xtables: Pass xtables_args to check_inverse(), Phil Sutter
  • [iptables PATCH v2 03/11] xtables: Move struct nft_xt_cmd_parse to xshared.h, Phil Sutter
  • [iptables PATCH v2 09/11] nft: Move proto_parse and post_parse callbacks to xshared, Phil Sutter
  • [iptables PATCH v2 10/11] iptables: Use xtables' do_parse() function, Phil Sutter
  • [iptables PATCH v2 02/11] xtables: Pull table validity check out of do_parse(), Phil Sutter
  • [iptables PATCH v2 08/11] xshared: Store parsed wait and wait_interval in xtables_args, Phil Sutter
  • [iptables PATCH v2 01/11] xtables: Drop xtables' family on demand feature, Phil Sutter
  • [iptables PATCH v2 06/11] xtables: Do not pass nft_handle to do_parse(), Phil Sutter
  • [iptables PATCH v2 04/11] xtables: Pass xtables_args to check_empty_interface(), Phil Sutter
  • [iptables PATCH v2 07/11] xshared: Move do_parse to shared space, Phil Sutter
  • Re: [iptables PATCH v2 00/11] Share do_parse() between nft and legacy, Pablo Neira Ayuso
    • Re: [iptables PATCH v2 00/11] Share do_parse() between nft and legacy, Phil Sutter
• [PATCH nft] evaluate: attempt to set_eval flag if dynamic updates requested, Florian Westphal
  • Re: [PATCH nft] evaluate: attempt to set_eval flag if dynamic updates requested, Pablo Neira Ayuso
• [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions, Dan Carpenter
  • Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions, Dan Carpenter
    • Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions, Pablo Neira Ayuso
      • Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions, Dan Carpenter
        • Re: [PATCH v2] netfilter: nft_connlimit: fix nft clone() functions, Pablo Neira Ayuso
• [PATCH net-next] netfilter: nft_connlimit: fix nft_connlimit_clone(), Dan Carpenter
  • Re: [PATCH net-next] netfilter: nft_connlimit: fix nft_connlimit_clone(), Dan Carpenter
• [PATCH net-next] netfilter: nf_tables: typo NULL check in _clone() function, Pablo Neira Ayuso
  • Re: [PATCH net-next] netfilter: nf_tables: typo NULL check in _clone() function, patchwork-bot+netdevbpf
• [iptables PATCH] extensions: *NAT: Kill multiple IPv4 range support, Phil Sutter
  • Re: [iptables PATCH] extensions: *NAT: Kill multiple IPv4 range support, Florian Westphal
• nft -f fails to restore ruleset listing with cetain dynamic set types, Florian Westphal
  • Re: nft -f fails to restore ruleset listing with cetain dynamic set types, Pablo Neira Ayuso
    • Re: nft -f fails to restore ruleset listing with cetain dynamic set types, Florian Westphal
• [PATCH net-next] netfilter: nf_tables: fix compile warnings, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net-next] netfilter: nf_tables: fix compile warnings, Pablo Neira Ayuso
    • Re: [PATCH net-next] netfilter: nf_tables: fix compile warnings, Jakub Kicinski
      • Re: [PATCH net-next] netfilter: nf_tables: fix compile warnings, Pablo Neira Ayuso
• [syzbot] WARNING: suspicious RCU usage in __dev_queue_xmit, syzbot
  • Re: [syzbot] WARNING: suspicious RCU usage in __dev_queue_xmit, Florian Westphal
• [PATCH net-next 00/32] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 01/32] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance, Pablo Neira Ayuso
    • Re: [PATCH net-next 01/32] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance, patchwork-bot+netdevbpf
  • [PATCH net-next 05/32] netfilter: nf_tables: consolidate rule verdict trace call, Pablo Neira Ayuso
  • [PATCH net-next 04/32] netfilter: nft_payload: WARN_ON_ONCE instead of BUG, Pablo Neira Ayuso
  • [PATCH net-next 02/32] netfilter: nf_nat_masquerade: add netns refcount tracker to masq_dev_work, Pablo Neira Ayuso
  • [PATCH net-next 06/32] netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdicts, Pablo Neira Ayuso
  • [PATCH net-next 03/32] netfilter: nf_tables: remove rcu read-size lock, Pablo Neira Ayuso
  • [PATCH net-next 11/32] netfilter: nft_set_pipapo_avx2: remove redundant pointer lt, Pablo Neira Ayuso
  • [PATCH net-next 07/32] netfilter: nf_tables: make counter support built-in, Pablo Neira Ayuso
  • [PATCH net-next 08/32] netfilter: conntrack: tag conntracks picked up in local out hook, Pablo Neira Ayuso
  • [PATCH net-next 10/32] netfilter: flowtable: remove ipv4/ipv6 modules, Pablo Neira Ayuso
    • Re: [PATCH net-next 10/32] netfilter: flowtable: remove ipv4/ipv6 modules, Geert Uytterhoeven
  • [PATCH net-next 09/32] netfilter: nat: force port remap to prevent shadowing well-known ports, Pablo Neira Ayuso
  • [PATCH net-next 14/32] netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook, Pablo Neira Ayuso
  • [PATCH net-next 12/32] netfilter: conntrack: Use max() instead of doing it manually, Pablo Neira Ayuso
  • [PATCH net-next 16/32] netfilter: conntrack: avoid useless indirection during conntrack destruction, Pablo Neira Ayuso
  • [PATCH net-next 15/32] netfilter: make function op structures const, Pablo Neira Ayuso
  • [PATCH net-next 13/32] netfilter: conntrack: convert to refcount_t api, Pablo Neira Ayuso
  • [PATCH net-next 18/32] netfilter: egress: avoid a lockdep splat, Pablo Neira Ayuso
    • Re: [PATCH net-next 18/32] netfilter: egress: avoid a lockdep splat, Eric Dumazet
      • Re: [PATCH net-next 18/32] netfilter: egress: avoid a lockdep splat, Florian Westphal
  • [PATCH net-next 17/32] net: prefer nf_ct_put instead of nf_conntrack_put, Pablo Neira Ayuso
  • [PATCH net-next 19/32] netfilter: nft_connlimit: move stateful fields out of expression data, Pablo Neira Ayuso
    • Re: [PATCH net-next 19/32] netfilter: nft_connlimit: move stateful fields out of expression data, Julian Wiedmann
      • Re: [PATCH net-next 19/32] netfilter: nft_connlimit: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH net-next 21/32] netfilter: nft_quota: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH net-next 20/32] netfilter: nft_last: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH net-next 22/32] netfilter: nft_numgen: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH net-next 25/32] netfilter: nf_tables: add rule blob layout, Pablo Neira Ayuso
  • [PATCH net-next 28/32] netfilter: nft_payload: track register operations, Pablo Neira Ayuso
  • [PATCH net-next 31/32] netfilter: nft_payload: cancel register tracking after payload update, Pablo Neira Ayuso
  • [PATCH net-next 30/32] netfilter: nft_bitwise: track register operations, Pablo Neira Ayuso
  • [PATCH net-next 32/32] netfilter: nft_meta: cancel register tracking after meta update, Pablo Neira Ayuso
  • [PATCH net-next 29/32] netfilter: nft_meta: track register operations, Pablo Neira Ayuso
  • [PATCH net-next 26/32] netfilter: nf_tables: add NFT_REG32_NUM, Pablo Neira Ayuso
  • [PATCH net-next 24/32] netfilter: nft_limit: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH net-next 27/32] netfilter: nf_tables: add register tracking infrastructure, Pablo Neira Ayuso
  • [PATCH net-next 23/32] netfilter: nft_limit: rename stateful structure, Pablo Neira Ayuso
• [PATCH nf-next,v3 00/14] nf_tables datapath ruleset blob and register tracking, Pablo Neira Ayuso
  • [PATCH 01/14] netfilter: nft_connlimit: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH 02/14] netfilter: nft_last: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH 03/14] netfilter: nft_quota: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH 04/14] netfilter: nft_numgen: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH 08/14] netfilter: nf_tables: add NFT_REG32_NUM, Pablo Neira Ayuso
  • [PATCH 05/14] netfilter: nft_limit: rename stateful structure, Pablo Neira Ayuso
  • [PATCH 06/14] netfilter: nft_limit: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH 11/14] netfilter: nft_meta: track register operations, Pablo Neira Ayuso
  • [PATCH 07/14] netfilter: nf_tables: add rule blob layout, Pablo Neira Ayuso
  • [PATCH 13/14] netfilter: nft_payload: cancel register tracking after payload update, Pablo Neira Ayuso
  • [PATCH 10/14] netfilter: nft_payload: track register operations, Pablo Neira Ayuso
  • [PATCH 09/14] netfilter: nf_tables: add register tracking infrastructure, Pablo Neira Ayuso
  • [PATCH 12/14] netfilter: nft_bitwise: track register operations, Pablo Neira Ayuso
  • [PATCH 14/14] netfilter: nft_meta: cancel register tracking after meta update, Pablo Neira Ayuso
• [PATCH libnetfilter_queue v3 0/5] Speed-up, Duncan Roe
  • [PATCH libnetfilter_queue v3 1/5] src: eliminate packet copy when constructing struct pkt_buff, Duncan Roe
  • [PATCH libnetfilter_queue v3 2/5] src: Avoid compiler warning, Duncan Roe
  • [PATCH libnetfilter_queue v3 4/5] build: doc: Eliminate doxygen warnings, Duncan Roe
  • [PATCH libnetfilter_queue v3 3/5] src: Use more meaningful name in callback.c, Duncan Roe
  • [PATCH libnetfilter_queue v3 5/5] src: struct pktbuff is no longer opaque, Duncan Roe
    • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Duncan Roe
      • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Pablo Neira Ayuso
        • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Duncan Roe
          • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Florian Westphal
            • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Duncan Roe
              • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Duncan Roe
          • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Florian Westphal
            • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Pablo Neira Ayuso
              • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Duncan Roe
            • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Duncan Roe
              • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Florian Westphal
        • Re: [PATCH libnetfilter_queue v3 1-5/5] src: Speed-up, Duncan Roe
• [PATCH nf-next,v2 00/14] nf_tables datapath ruleset blob and register tracking, Pablo Neira Ayuso
  • [PATCH nf-next,v2 01/14] netfilter: nft_connlimit: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next,v2 02/14] netfilter: nft_last: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next,v2 03/14] netfilter: nft_quota: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next,v2 05/14] netfilter: nft_limit: rename stateful structure, Pablo Neira Ayuso
  • [PATCH nf-next,v2 04/14] netfilter: nft_numgen: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next,v2 07/14] netfilter: nf_tables: add rule blob layout, Pablo Neira Ayuso
  • [PATCH nf-next,v2 08/14] netfilter: nf_tables: add NFT_REG32_NUM, Pablo Neira Ayuso
  • [PATCH nf-next,v2 06/14] netfilter: nft_limit: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next,v2 10/14] netfilter: nft_payload: track register operations, Pablo Neira Ayuso
  • [PATCH nf-next,v2 09/14] netfilter: nf_tables: add register tracking infrastructure, Pablo Neira Ayuso
  • [PATCH nf-next,v2 14/14] netfilter: nft_meta: cancel register tracking after meta update, Pablo Neira Ayuso
  • [PATCH nf-next,v2 12/14] netfilter: nft_bitwise: track register operations, Pablo Neira Ayuso
  • [PATCH nf-next,v2 13/14] netfilter: nft_payload: cancel register tracking after payload update, Pablo Neira Ayuso
  • [PATCH nf-next,v2 11/14] netfilter: nft_meta: track register operations, Pablo Neira Ayuso
• [conntrack-tools PATCH] conntrackd: cthelper: ssdp: Fix parsing of IPv6 M-SEARCH requests., Aaron Thompson
  • Re: [conntrack-tools PATCH] conntrackd: cthelper: ssdp: Fix parsing of IPv6 M-SEARCH requests., Pablo Neira Ayuso
• [syzbot] KMSAN: uninit-value in nf_nat_setup_info (2), syzbot
  • Re: [syzbot] KMSAN: uninit-value in nf_nat_setup_info (2), syzbot
• [PATCH nf] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: egress: avoid a lockdep splat, Florian Westphal
  • Re: [PATCH nf-next] netfilter: egress: avoid a lockdep splat, Pablo Neira Ayuso
• [PATCH nf-next 0/5] netfilter: conntrack related cleanups, Florian Westphal
  • [PATCH nf-next 1/5] netfilter: conntrack: convert to refcount_t api, Florian Westphal
  • [PATCH nf-next 2/5] netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook, Florian Westphal
  • [PATCH nf-next 3/5] netfilter: make function op structures const, Florian Westphal
  • [PATCH nf-next 4/5] netfilter: conntrack: avoid useless indirection during conntrack destruction, Florian Westphal
  • [PATCH nf-next 5/5] net: prefer nf_ct_put instead of nf_conntrack_put, Florian Westphal
  • Re: [PATCH nf-next 0/5] netfilter: conntrack related cleanups, Pablo Neira Ayuso
• [ulogd2 PATCH 00/10] Add pkg-config support, Jeremy Sowden
  • [ulogd2 PATCH 04/10] build: use pkg-config or pcap-config for libpcap, Jeremy Sowden
  • [ulogd2 PATCH 01/10] build: use `--enable-blah` flags for output plugins, Jeremy Sowden
  • [ulogd2 PATCH 02/10] build: use pkg-config for libdbi, Jeremy Sowden
  • [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql, Jeremy Sowden
    • Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql, Jan Engelhardt
      • Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql, Duncan Roe
      • Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql, Jeremy Sowden
        • Re: [ulogd2 PATCH 03/10] build: use pkg-config or upstream M4 for mysql, Jeremy Sowden
  • [ulogd2 PATCH 05/10] build: use pkg-config for libpq if available, Jeremy Sowden
  • [ulogd2 PATCH 06/10] build: if `--enable-dbi` is `yes` abort if DBI is not found, Jeremy Sowden
  • [ulogd2 PATCH 07/10] build: if `--enable-mysql` is `yes` abort if MySQL is not found, Jeremy Sowden
  • [ulogd2 PATCH 08/10] build: if `--enable-pcap` is `yes` abort if libpcap is not found, Jeremy Sowden
  • [ulogd2 PATCH 09/10] build: if `--enable-pgsql` is `yes` abort if libpq is not found, Jeremy Sowden
  • [ulogd2 PATCH 10/10] build: if `--enable-sqlite3` is `yes` abort if libsqlite3 is not found, Jeremy Sowden
  • <Possible follow-ups>
  • [ulogd2 PATCH 00/10] Add pkg-config support, Jeremy Sowden
    • [ulogd2 PATCH v2 02/10] build: use pkg-config for libdbi, Jeremy Sowden
    • [ulogd2 PATCH v2 01/10] build: use `--enable-XXX` options for output plugins, Jeremy Sowden
    • [ulogd2 PATCH v2 03/10] build: use pkg-config or mysql_config for libmysqlclient, Jeremy Sowden
    • [ulogd2 PATCH v2 05/10] build: use pkg-config or pg_config for libpq, Jeremy Sowden
    • [ulogd2 PATCH v2 04/10] build: use pkg-config or pcap-config for libpcap, Jeremy Sowden
    • [ulogd2 PATCH v2 08/10] build: if `--enable-pcap` is `yes`, abort if libpcap is not found, Jeremy Sowden
    • [ulogd2 PATCH v2 07/10] build: if `--enable-mysql` is `yes`, abort if libmysqlclient is not found, Jeremy Sowden
    • [ulogd2 PATCH v2 06/10] build: if `--enable-dbi` is `yes`, abort if libdbi is not found, Jeremy Sowden
    • [ulogd2 PATCH v2 09/10] build: if `--enable-pgsql` is `yes`, abort if libpq is not found, Jeremy Sowden
    • [ulogd2 PATCH v2 10/10] build: if `--enable-sqlite3` is `yes`, abort if libsqlite3 is not found, Jeremy Sowden
    • Re: [ulogd2 PATCH 00/10] Add pkg-config support, Pablo Neira Ayuso
      • Re: [ulogd2 PATCH 00/10] Add pkg-config support, Jeremy Sowden
        • Re: [ulogd2 PATCH 00/10] Add pkg-config support, Pablo Neira Ayuso
• BUG: unable to handle kernel NULL pointer dereference in iptable_nat_table_init, Sabri N. Ferreiro
• [PATCH nf] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone, Stefano Brivio
  • Re: [PATCH nf] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone, Pablo Neira Ayuso
• Re: nftables >= 0.9.8: atomic update (nft -f ...) of a set not possible any more, Florian Westphal
  • Re: nftables >= 0.9.8: atomic update (nft -f ...) of a set not possible any more, Stefano Brivio
• [PATCH ulogd] GPRINT: fix it with NFLOG, Pablo Neira Ayuso
• INFO: task hung in xt_find_match, kvartet
• INFO: task hung in do_ip6t_get_ctl, kvartet
• [PATCH ulogd2 1/2] output: JSON: fix possible truncation of socket path, Pablo Neira Ayuso
  • [PATCH ulogd2 2/2] output: JSON: remove bogus check for host and port, Pablo Neira Ayuso
• [PATCH nftables,v2 0/7] ruleset optimization infrastructure, Pablo Neira Ayuso
  • [PATCH nftables,v2 1/7] erec: expose print_location() and line_location(), Pablo Neira Ayuso
  • [PATCH nftables,v2 2/7] src: error reporting with -f and read from stdin, Pablo Neira Ayuso
  • [PATCH nftables,v2 3/7] src: remove '$' in symbol_expr_print, Pablo Neira Ayuso
  • [PATCH nftables,v2 5/7] optimize: merge rules with same selectors into a concatenation, Pablo Neira Ayuso
  • [PATCH nftables,v2 4/7] src: add ruleset optimization infrastructure, Pablo Neira Ayuso
  • [PATCH nftables,v2 6/7] optimize: merge same selector with different verdict into verdict map, Pablo Neira Ayuso
  • [PATCH nftables,v2 7/7] optimize: merge several selectors with different verdict into verdict map, Pablo Neira Ayuso
  • Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure, Pablo Neira Ayuso
  • Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure, Nicolas Dichtel
  • Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure, Pablo Neira Ayuso
• [PATCH bpf-next v6 00/11] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 01/11] kernel: Implement try_module_get_live, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v6 01/11] kernel: Implement try_module_get_live, Luis Chamberlain
  • [PATCH bpf-next v6 02/11] bpf: Fix UAF due to race between btf_try_get_module and load_module, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v6 02/11] bpf: Fix UAF due to race between btf_try_get_module and load_module, Alexei Starovoitov
      • Re: [PATCH bpf-next v6 02/11] bpf: Fix UAF due to race between btf_try_get_module and load_module, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Alexei Starovoitov
      • Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Alexei Starovoitov
          • Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 04/11] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 05/11] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 06/11] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 07/11] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 08/11] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 09/11] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 10/11] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Alexei Starovoitov
      • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Andrii Nakryiko
          • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
            • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Andrii Nakryiko
• [PATCH] ipset: SCTP, UDPLITE support added to the bitmap:port type, Quan Tian
• [PATCH linux] netfilter: Remove unnecessary ret assignment, cgel . zte
  • Re: [PATCH linux] netfilter: Remove unnecessary ret assignment, Florian Westphal
• [PATCH bpf-next v5 0/9] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 1/9] kernel: Add kallsyms_on_each_symbol variant for single module, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v5 1/9] kernel: Add kallsyms_on_each_symbol variant for single module, kernel test robot
  • [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF, Alexei Starovoitov
      • Re: [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF, Alexei Starovoitov
  • [PATCH bpf-next v5 3/9] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 4/9] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 5/9] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 6/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 7/9] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 8/9] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 9/9] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
  • Re: [PATCH bpf-next v5 0/9] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
• [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Jakub Kicinski
  • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Florian Fainelli
    • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Jakub Kicinski
      • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Andy Shevchenko
  • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Nikolay Aleksandrov
  • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Stefano Garzarella
  • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Alexei Starovoitov
• [PATCH bpf-next] net: don't include filter.h from net/sock.h, Jakub Kicinski
• [PATCH nf] selftests/netfilter: switch to socat for tests using -q option, Hangbin Liu
  • Re: [PATCH nf] selftests/netfilter: switch to socat for tests using -q option, Florian Westphal
    • Re: [PATCH nf] selftests/netfilter: switch to socat for tests using -q option, Pablo Neira Ayuso
• [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks, trix
  • Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks, Tom Rix
      • Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks, Florian Westphal
• [PATCH] netfilter: conntrack: Use max() instead of doing it manually, Jiapeng Chong
  • Re: [PATCH] netfilter: conntrack: Use max() instead of doing it manually, Pablo Neira Ayuso
• [iptables PATCH 00/11] Share do_parse() between nft and legacy, Phil Sutter
  • [iptables PATCH 08/11] xshared: Store parsed wait and wait_interval in xtables_args, Phil Sutter
  • [iptables PATCH 11/11] ip6tables: Use the shared do_parse, too, Phil Sutter
  • [iptables PATCH 05/11] xtables: Pass xtables_args to check_inverse(), Phil Sutter
  • [iptables PATCH 01/11] xtables: Drop xtables' family on demand feature, Phil Sutter
  • [iptables PATCH 03/11] xtables: Move struct nft_xt_cmd_parse to xshared.h, Phil Sutter
  • [iptables PATCH 02/11] xtables: Pull table validity check out of do_parse(), Phil Sutter
  • [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse(), Phil Sutter
    • Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse(), Pablo Neira Ayuso
      • Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse(), Pablo Neira Ayuso
      • Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse(), Phil Sutter
  • [iptables PATCH 09/11] nft: Move proto_parse and post_parse callbacks to xshared, Phil Sutter
  • [iptables PATCH 04/11] xtables: Pass xtables_args to check_empty_interface(), Phil Sutter
  • [iptables PATCH 10/11] iptables: Use xtables' do_parse() function, Phil Sutter
  • [iptables PATCH 07/11] xshared: Move do_parse to shared space, Phil Sutter
• [PATCH conntrack 0/4] more updates to use libmnl, Pablo Neira Ayuso
  • [PATCH conntrack 1/4] conntrack: add nfct_mnl_talk() and nfct_mnl_recv() helper functions, Pablo Neira Ayuso
  • [PATCH conntrack 3/4] conntrack: use libmnl to create entry, Pablo Neira Ayuso
  • [PATCH conntrack 2/4] conntrack: add netlink flags to nfct_mnl_nlmsghdr_put(), Pablo Neira Ayuso
  • [PATCH conntrack 4/4] conntrack: pass sock to nfct_mnl_*() functions, Pablo Neira Ayuso
• [PATCH] netfilter: seqadj: check seq offset before update, zhang kai
  • Re: [PATCH] netfilter: seqadj: check seq offset before update, Pablo Neira Ayuso
• [PATCH iptables] xshared: Implement xtables lock timeout using signals, Jethro Beekman
  • Re: [PATCH iptables] xshared: Implement xtables lock timeout using signals, Florian Westphal
• [PATCH netfilter] netfilter: xt_owner: use sk->sk_uid for owner lookup, Maciej Żenczykowski
  • Re: [PATCH netfilter] netfilter: xt_owner: use sk->sk_uid for owner lookup, Jan Engelhardt
    • Re: [PATCH netfilter] netfilter: xt_owner: use sk->sk_uid for owner lookup, Maciej Żenczykowski
• [PATCH] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), Xin Xiong
  • Re: [PATCH] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), Florian Westphal
  • Re: [PATCH] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), Pablo Neira Ayuso
• [PATCH] netfilter: nft_set_pipapo_avx2: remove redundant pointer lt, Colin Ian King
  • Re: [PATCH] netfilter: nft_set_pipapo_avx2: remove redundant pointer lt, Pablo Neira Ayuso
• [nft PATCH 00/11] Store multiple payload dependencies, Jeremy Sowden
  • [nft PATCH 04/11] netlink_delinearize: fix typo, Jeremy Sowden
  • [nft PATCH 01/11] tests: py: fix inet/sets.t netdev payload, Jeremy Sowden
  • [nft PATCH 02/11] tests: py: fix inet/ip.t payloads, Jeremy Sowden
  • [nft PATCH 05/11] src: remove arithmetic on booleans, Jeremy Sowden
  • [nft PATCH 03/11] tests: py: fix inet/ip_tcp.t test, Jeremy Sowden
  • [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
    • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Florian Westphal
      • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
        • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
          • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Florian Westphal
            • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
  • [nft PATCH 06/11] src: reduce indentation, Jeremy Sowden
  • [nft PATCH 09/11] src: store more than one payload dependency, Jeremy Sowden
  • [nft PATCH 07/11] src: simplify logic governing storing payload dependencies, Jeremy Sowden
  • [nft PATCH 11/11] tests: shell: remove redundant payload expressions, Jeremy Sowden
  • [nft PATCH 10/11] tests: py: remove redundant payload expressions, Jeremy Sowden
• [PATCH nftables] parser: allow quoted string in flowtable_expr_member, Stijn Tintel
  • Re: [PATCH nftables] parser: allow quoted string in flowtable_expr_member, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Florian Westphal
  • Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Florian Westphal
      • Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Pablo Neira Ayuso
• [syzbot] KASAN: use-after-free Read in nf_hook_entries_grow, syzbot
  • Re: [syzbot] KASAN: use-after-free Read in nf_hook_entries_grow, syzbot
• netdevconf 0x16, Jamal Hadi Salim
• [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2, Duncan Roe
  • Re: [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2, Duncan Roe
  • Re: [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2, Florian Westphal
• [PATCH iptables] nft-shared: set correc register value, Florian Westphal
  • Re: [PATCH iptables] nft-shared: set correc register value, Pablo Neira Ayuso
• [PATCH nf-next,v3 5/5] netfilter: nf_tables: make counter support built-in, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: flowtable: remove ipv4/ipv6 modules, Florian Westphal
  • Re: [PATCH nf-next] netfilter: flowtable: remove ipv4/ipv6 modules, Pablo Neira Ayuso
• [PATCH nf-next,v2 1/5] netfilter: nf_tables: remove rcu read-size lock, Pablo Neira Ayuso
  • [PATCH nf-next,v2 3/5] netfilter: nf_tables: consolidate rule verdict trace call, Pablo Neira Ayuso
  • [PATCH nf-next,v2 2/5] netfilter: nft_payload: WARN_ON_ONCE instead of BUG, Pablo Neira Ayuso
  • [PATCH nf-next,v2 4/5] netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdicts, Pablo Neira Ayuso
  • [PATCH nf-next,v2 5/5] netfilter: nf_tables: make counter support built-in, Pablo Neira Ayuso
    • Re: [PATCH nf-next,v2 5/5] netfilter: nf_tables: make counter support built-in, kernel test robot
    • Re: [PATCH nf-next,v2 5/5] netfilter: nf_tables: make counter support built-in, kernel test robot
• [PATCH nf-next v4 0/2] nat: force port remap to prevent shadowing well-known ports, Florian Westphal
  • [PATCH nf-next v4 1/2] netfilter: conntrack: tag conntracks picked up in local out hook, Florian Westphal
  • [PATCH v4 nf-next 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports, Florian Westphal
    • Re: [PATCH v4 nf-next 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports, Eric Garver
  • Re: [PATCH nf-next v4 0/2] nat: force port remap to prevent shadowing well-known ports, Pablo Neira Ayuso
• [PATCH libnetfilter_queue v2] build: doc: Update build_man.sh for doxygen 1.9.2, Duncan Roe
• [PATCH 1/1] graphics/graphviz: Updated for version 2.50, Duncan Roe
  • Re: [PATCH 1/1] graphics/graphviz: Updated for version 2.50, Duncan Roe
• Re: graphviz.SlackBuild, Duncan Roe
  • Re: graphviz.SlackBuild, Duncan Roe
• [PATCH bpf-next v4 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 01/10] bpf: Refactor bpf_check_mod_kfunc_call, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 02/10] bpf: Remove DEFINE_KFUNC_BTF_ID_SET, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 03/10] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 03/10] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support, Alexei Starovoitov
      • Re: [PATCH bpf-next v4 03/10] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 04/10] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 04/10] bpf: Introduce mem, size argument pair support for kfunc, Alexei Starovoitov
      • Re: [PATCH bpf-next v4 04/10] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Alexei Starovoitov
      • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Alexei Starovoitov
          • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
            • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Alexei Starovoitov
  • [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
      • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
          • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
            • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
              • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
                • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
                  • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
                    • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
                      • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
                        • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
                          • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 07/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 07/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Pablo Neira Ayuso
      • Re: [PATCH bpf-next v4 07/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 08/10] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 09/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 10/10] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
  • Re: [PATCH bpf-next v4 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 00/10] Introduce unstable CT lookup helpers, Andrii Nakryiko
• [conntrack-tools PATCH 0/3] bison & flex autotools updates, Jeremy Sowden
  • [conntrack-tools PATCH 1/3] build: only require bison and flex if the generated files do not exist, Jeremy Sowden
  • [conntrack-tools PATCH 3/3] build: replace `AM_PROG_LEX` with `AC_PROG_LEX`, Jeremy Sowden
  • [conntrack-tools PATCH 2/3] build: remove MAINTAINERCLEANFILES, Jeremy Sowden
  • Re: [conntrack-tools PATCH 0/3] bison & flex autotools updates, Pablo Neira Ayuso
• [nft PATCH] build: remove scanner.c and parser_bison.c with `maintainer-clean`, Jeremy Sowden
  • Re: [nft PATCH] build: remove scanner.c and parser_bison.c with `maintainer-clean`, Pablo Neira Ayuso
• [PATCH nf v3] netfilter: nat: force port remap to prevent shadowing well-known ports, Florian Westphal
  • Re: [PATCH nf v3] netfilter: nat: force port remap to prevent shadowing well-known ports, Phil Sutter
  • Re: [PATCH nf v3] netfilter: nat: force port remap to prevent shadowing well-known ports, kernel test robot
• [iptables PATCH v3 0/6] Some more code de-duplication, Phil Sutter
  • [iptables PATCH v3 1/6] xshared: Share print_match_save() between legacy ip*tables, Phil Sutter
  • [iptables PATCH v3 3/6] xshared: Share exit_tryhelp(), Phil Sutter
  • [iptables PATCH v3 5/6] libxtables: Extend basic_exit_err(), Phil Sutter
  • [iptables PATCH v3 2/6] xshared: Share a common printhelp function, Phil Sutter
  • [iptables PATCH v3 6/6] iptables-*-restore: Drop pointless line reference, Phil Sutter
  • [iptables PATCH v3 4/6] xtables_globals: Embed variant name in .program_version, Phil Sutter
  • Re: [iptables PATCH v3 0/6] Some more code de-duplication, Pablo Neira Ayuso
• [PATCH nf-next 0/7] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH nf-next 1/7] ipvs: remove unused variable for ip_vs_new_dest, Pablo Neira Ayuso
    • Re: [PATCH nf-next 1/7] ipvs: remove unused variable for ip_vs_new_dest, patchwork-bot+netdevbpf
  • [PATCH nf-next 3/7] netfilter: nf_queue: remove leftover synchronize_rcu, Pablo Neira Ayuso
  • [PATCH nf-next 4/7] netfilter: ctnetlink: remove useless type conversion to bool, Pablo Neira Ayuso
  • [PATCH nf-next 2/7] netfilter: conntrack: Use memset_startat() to zero struct nf_conn, Pablo Neira Ayuso
  • [PATCH nf-next 5/7] netfilter: nft_fwd_netdev: Support egress hook, Pablo Neira Ayuso
  • [PATCH nf-next 6/7] netfilter: bridge: add support for pppoe filtering, Pablo Neira Ayuso
  • [PATCH nf-next 7/7] netfilter: conntrack: Remove useless assignment statements, Pablo Neira Ayuso
• [PATCH nft] proto: revisit short-circuit loops over upper protocols, Pablo Neira Ayuso
  • [PATCH nft] tests: shell: extend catchall tests for maps, Pablo Neira Ayuso
  • Re: [PATCH nft] proto: revisit short-circuit loops over upper protocols, Jeremy Sowden
• [PATCH nft 0/3] ruleset optimization infrastructure, Pablo Neira Ayuso
  • [PATCH nft 1/3] src: add ruleset optimization infrastructure, Pablo Neira Ayuso
  • [PATCH nft 3/3] optimize: merge same selector with different verdict into verdict map, Pablo Neira Ayuso
  • [PATCH nft 2/3] optimize: merge rules with same selectors into a concatenation, Pablo Neira Ayuso
  • Re: [PATCH nft 0/3] ruleset optimization infrastructure, Arturo Borrero Gonzalez
    • Re: [PATCH nft 0/3] ruleset optimization infrastructure, Pablo Neira Ayuso
• [PATCH] build: fix autoconf warnings, Jeremy Sowden