Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- Re: iptables-nft fails to restore huge rulesets, (continued)
- [PATCH nf-next] netfilter: flowtable: fix set software outdev on top of the net_device_path_stack, wenxu
- [PATCH] tcp: Reset tcp connections in SYN-SENT state, Manoj Basapathi
- [PATCH nf] netfilter: conntrack: do not print icmpv6 as unknown via /proc, Pablo Neira Ayuso
- [PATCH nf-next 1/2] netfilter: nftables: add helper function to set the base sequence number,
Pablo Neira Ayuso
- [PATCH] files: move example files away from /etc,
Jan Engelhardt
- [PATCH] netfilter: flowtable: fix NAT IPv6 offload mangling, Pablo Neira Ayuso
- [iptables PATCH v2 1/2] extensions: libxt_conntrack: print xlate state as set,
Alexander Mikhalitsyn
- [iptables PATCH 1/2] extensions: libxt_conntrack: print xlate state as set,
Alexander Mikhalitsyn
- [PATCH nf-next] netfilter: ipvs: do not printk on netns creation,
Florian Westphal
- [PATCH AUTOSEL 5.4 12/19] netfilter: conntrack: Fix gre tunneling over ipv6, Sasha Levin
- [PATCH AUTOSEL 5.10 17/33] netfilter: nftables: skip hook overlap logic if flowtable is stale, Sasha Levin
- [PATCH AUTOSEL 5.10 16/33] netfilter: conntrack: Fix gre tunneling over ipv6, Sasha Levin
- [PATCH AUTOSEL 5.11 20/38] netfilter: nftables: skip hook overlap logic if flowtable is stale, Sasha Levin
- [PATCH AUTOSEL 5.11 19/38] netfilter: conntrack: Fix gre tunneling over ipv6, Sasha Levin
- [PATCH -next] netfilter: nftables: remove unnecessary spin_lock_init(),
Yang Yingliang
- [PATCH nf-next] netfilter: flowtable: dst_check() from garbage collector path, Pablo Neira Ayuso
- Re: [PATCH 08/19] netfilter: ipvs: A spello fix, Simon Horman
- Re: [PATCH] netfilter: ipvs: A spello fix, Simon Horman
- [PATCH] netfilter: ipset: Remove duplicate declaration,
Wan Jiabing
- [PATCH v5] audit: log nftables configuration change events once per table,
Richard Guy Briggs
- [iptables PATCH] nft: cache: Sort chains on demand only, Phil Sutter
- [PATCH net-next] docs: nf_flowtable: fix compilation and warnings,
Pablo Neira Ayuso
- [PATCH 0/8] netfilter: merge nf_log_proto modules,
Florian Westphal
- [PATCH 3/8] netfilter: nf_log_ipv6: merge with nf_log_syslog, Florian Westphal
- [PATCH 2/8] netfilter: nf_log_arp: merge with nf_log_syslog, Florian Westphal
- [PATCH 1/8] netfilter: nf_log_ipv4: rename to nf_log_syslog, Florian Westphal
- [PATCH 4/8] netfilter: nf_log_netdev: merge with nf_log_syslog, Florian Westphal
- [PATCH 6/8] netfilter: nf_log_common: merge with nf_log_syslog, Florian Westphal
- [PATCH 5/8] netfilter: nf_log_bridge: merge with nf_log_syslog, Florian Westphal
- [PATCH 7/8] netfilter: nf_log: add module softdeps, Florian Westphal
- [PATCH 8/8] netfilter: nft_log: perform module load from nf_tables, Florian Westphal
- Re: [PATCH 0/8] netfilter: merge nf_log_proto modules, Phil Sutter
- Re: [PATCH 0/8] netfilter: merge nf_log_proto modules, Pablo Neira Ayuso
- [PATCH nft] parser: fix scope closure of COUNTER token, Florian Westphal
- [PATCH v4] audit: log nftables configuration change events once per table,
Richard Guy Briggs
- [PATCH] src: add datatype->describe(), Pablo Neira Ayuso
- [PATCH net-next,v2 00/24] netfilter: flowtable enhancements,
Pablo Neira Ayuso
- [PATCH net-next,v2 02/24] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
- [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
- [PATCH net-next,v2 05/24] net: ppp: resolve forwarding path for bridge pppoe devices, Pablo Neira Ayuso
- [PATCH net-next,v2 03/24] net: bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
- [PATCH net-next,v2 04/24] net: bridge: resolve forwarding path for VLAN tag actions in bridge devices, Pablo Neira Ayuso
- [PATCH net-next,v2 11/24] netfilter: flowtable: add bridge vlan filtering support, Pablo Neira Ayuso
- [PATCH net-next,v2 06/24] net: dsa: resolve forwarding path for dsa slave ports, Pablo Neira Ayuso
- [PATCH net-next,v2 09/24] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
- [PATCH net-next,v2 07/24] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
- [PATCH net-next,v2 10/24] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
- [PATCH net-next,v2 08/24] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
- [PATCH net-next,v2 18/24] net: flow_offload: add FLOW_ACTION_PPPOE_PUSH, Pablo Neira Ayuso
- [PATCH net-next,v2 19/24] netfilter: flowtable: support for FLOW_ACTION_PPPOE_PUSH, Pablo Neira Ayuso
- [PATCH net-next,v2 14/24] selftests: netfilter: flowtable bridge and vlan support, Pablo Neira Ayuso
- [PATCH net-next,v2 16/24] netfilter: nft_flow_offload: use direct xmit if hardware offload is enabled, Pablo Neira Ayuso
- [PATCH net-next,v2 17/24] netfilter: flowtable: bridge vlan hardware offload and switchdev, Pablo Neira Ayuso
- [PATCH net-next,v2 12/24] netfilter: flowtable: add pppoe support, Pablo Neira Ayuso
- [PATCH net-next,v2 13/24] netfilter: flowtable: add dsa support, Pablo Neira Ayuso
- [PATCH net-next,v2 15/24] netfilter: flowtable: add offload support for xmit path types, Pablo Neira Ayuso
- [PATCH net-next,v2 22/24] net: ethernet: mtk_eth_soc: add support for initializing the PPE, Pablo Neira Ayuso
- [PATCH net-next,v2 21/24] net: ethernet: mtk_eth_soc: fix parsing packets in GDM, Pablo Neira Ayuso
- [PATCH net-next,v2 20/24] dsa: slave: add support for TC_SETUP_FT, Pablo Neira Ayuso
- [PATCH net-next,v2 24/24] docs: nf_flowtable: update documentation with enhancements, Pablo Neira Ayuso
- [PATCH net-next,v2 23/24] net: ethernet: mtk_eth_soc: add flow offloading support, Pablo Neira Ayuso
- Re: [PATCH net-next,v2 00/24] netfilter: flowtable enhancements, patchwork-bot+netdevbpf
- [PATCH v3] audit: log nftables configuration change events once per table,
Richard Guy Briggs
- [PATCH net-next 00/10] Netfilter updates for net-next,
Pablo Neira Ayuso
- [PATCH net-next 01/10] netfilter: flowtable: separate replace, destroy and stats to different workqueues, Pablo Neira Ayuso
- [PATCH net-next 02/10] netfilter: Fix fall-through warnings for Clang, Pablo Neira Ayuso
- [PATCH net-next 03/10] netfilter: conntrack: Remove unused variable declaration, Pablo Neira Ayuso
- [PATCH net-next 06/10] netfilter: flowtable: move FLOW_OFFLOAD_DIR_MAX away from enumeration, Pablo Neira Ayuso
- [PATCH net-next 05/10] netfilter: flowtable: move skb_try_make_writable() before NAT in IPv4, Pablo Neira Ayuso
- [PATCH net-next 08/10] netfilter: flowtable: call dst_check() to fall back to classic forwarding, Pablo Neira Ayuso
- [PATCH net-next 09/10] netfilter: flowtable: refresh timeout after dst and writable checks, Pablo Neira Ayuso
- [PATCH net-next 07/10] netfilter: flowtable: fast NAT functions never fail, Pablo Neira Ayuso
- [PATCH net-next 04/10] netfilter: flowtable: consolidate skb_try_make_writable() call, Pablo Neira Ayuso
- [PATCH net-next 10/10] netfilter: nftables: update table flags from the commit phase, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH net-next 00/10] Netfilter updates for net-next, Pablo Neira Ayuso
- [PATCH net-next 01/10] netfilter: nft_compat: use nfnetlink_unicast(), Pablo Neira Ayuso
- [PATCH net-next 02/10] netfilter: flowtable: remove nf_ct_l4proto_find() call, Pablo Neira Ayuso
- [PATCH net-next 03/10] netfilter: ipt_CLUSTERIP: only add arp mangle hook when required, Pablo Neira Ayuso
- [PATCH net-next 04/10] netfilter: ipt_CLUSTERIP: use clusterip_net to store pernet warning, Pablo Neira Ayuso
- [PATCH net-next 05/10] netfilter: remove xt pernet data, Pablo Neira Ayuso
- [PATCH net-next 07/10] netfilter: ctnetlink: add and use a helper for mark parsing, Pablo Neira Ayuso
- [PATCH net-next 06/10] netfilter: ebtables: do not hook tables by default, Pablo Neira Ayuso
- [PATCH net-next 09/10] netfilter: x_tables: never register tables by default, Pablo Neira Ayuso
- [PATCH net-next 08/10] netfilter: ctnetlink: allow to filter dump by status bits, Pablo Neira Ayuso
- [PATCH net-next 10/10] netfilter: nf_queue: move hookfn registration out of struct net, Pablo Neira Ayuso
- [PATCH net-next 00/10] Netfilter updates for net-next, Pablo Neira Ayuso
- [PATCH net-next 01/10] netfilter: nft_payload: move struct nft_payload_set definition where it belongs, Pablo Neira Ayuso
- [PATCH net-next 02/10] netfilter: nf_tables: reduce nft_pktinfo by 8 bytes, Pablo Neira Ayuso
- [PATCH net-next 03/10] netfilter: nft_objref: make it builtin, Pablo Neira Ayuso
- [PATCH net-next 04/10] netfilter: nft_payload: access GRE payload via inner offset, Pablo Neira Ayuso
- [PATCH net-next 05/10] netfilter: nft_payload: access ipip payload for inner offset, Pablo Neira Ayuso
- [PATCH net-next 06/10] netfilter: nft_inner: support for inner tunnel header matching, Pablo Neira Ayuso
- [PATCH net-next 08/10] netfilter: nft_meta: add inner match support, Pablo Neira Ayuso
- [PATCH net-next 07/10] netfilter: nft_inner: add percpu inner context, Pablo Neira Ayuso
- [PATCH net-next 09/10] netfilter: nft_inner: add geneve support, Pablo Neira Ayuso
- [PATCH net-next 10/10] netfilter: nft_inner: set tunnel offset to GRE header offset, Pablo Neira Ayuso
- [PATCH net-next 00/10] netfilter updates for net-next, Florian Westphal
- [PATCH net-next 01/10] netfilter: ebtables: fix fortify warnings in size_entry_mwt(), Florian Westphal
- [PATCH net-next 02/10] netfilter: ebtables: replace zero-length array members, Florian Westphal
- [PATCH net-next 09/10] netfilter: xtables: refactor deprecated strncpy, Florian Westphal
- [PATCH net-next 07/10] netfilter: nft_meta: refactor deprecated strncpy, Florian Westphal
- [PATCH net-next 04/10] netfilter: nf_tables: refactor deprecated strncpy, Florian Westphal
- [PATCH net-next 08/10] netfilter: x_tables: refactor deprecated strncpy, Florian Westphal
- [PATCH net-next 03/10] netfilter: ipset: refactor deprecated strncpy, Florian Westphal
- [PATCH net-next 05/10] netfilter: nf_tables: refactor deprecated strncpy, Florian Westphal
- [PATCH net-next 06/10] netfilter: nft_osf: refactor deprecated strncpy, Florian Westphal
- [PATCH net-next 10/10] netfilter: nf_tables: allow loop termination for pending fatal signal, Florian Westphal
- [PATCH v2] audit: log nftables configuration change events once per table,
Richard Guy Briggs
- Associate extra information to conntrack entries, Major Dávid
- [PATCH] nftables: add flags offload to flowtable,
Frank Wunderlich
- [PATCH] audit: log nftables configuration change events once per table,
Richard Guy Briggs
- Bug when updating ICMP flows using conntrack tools,
Luuk Paulussen
- [nf-next,v2] netfilter: nftables: update table flags from the commit phase, Pablo Neira Ayuso
- [PATCH nf-next] netfilter: nftables: update table flags from the commit phase, Pablo Neira Ayuso
- [PATCH nft] tests: shell: flowtable add after delete in batch, Pablo Neira Ayuso
- [PATCH nf 1/2] netfilter: nftables: missing transaction object on flowtable deletion,
Pablo Neira Ayuso
- [PATCH nf-next,v2 1/6] netfilter: flowtable: consolidate skb_try_make_writable() call,
Pablo Neira Ayuso
- [PATCH nf-next,v2 6/6] netfilter: flowtable: refresh timeout after dst and writable checks, Pablo Neira Ayuso
- [PATCH nf-next,v2 2/6] netfilter: flowtable: move skb_try_make_writable() before NAT in IPv4, Pablo Neira Ayuso
- [PATCH nf-next,v2 3/6] netfilter: flowtable: move FLOW_OFFLOAD_DIR_MAX away from enumeration, Pablo Neira Ayuso
- [PATCH nf-next,v2 4/6] netfilter: flowtable: fast NAT functions never fail, Pablo Neira Ayuso
- [PATCH nf-next,v2 5/6] netfilter: flowtable: call dst_check() to fall back to classic forwarding, Pablo Neira Ayuso
- [PATCH nf] netfilter: flowtable: Make sure GC works periodically in idle system,
Simon Horman
- Ethernet Frame capture with nfqueue, ilker
- [PATCH 2/2,v2] netfilter: nftables: allow to update flowtable flags, Pablo Neira Ayuso
- [PATCH nf-next 1/3] netfilter: flowtable: consolidate skb_try_make_writable() call,
Pablo Neira Ayuso
- [PATCH nf 1/2] netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags,
Pablo Neira Ayuso
- [syzbot] KMSAN: uninit-value in iptable_mangle_hook (5), syzbot
- [PATCH nft] segtree: release single element already contained in an interval, Pablo Neira Ayuso
- [PATCH nft 0/6] arbirary table/chain names,
Florian Westphal
- CFS for Netdev 0x15 open!, Jamal Hadi Salim
- [PATCH conntrack 1/6] conntrack: pass command object to callbacks,
Pablo Neira Ayuso
- [PATCH nf] netfilter: ctnetlink: fix dump of the expect mask attribute,
Florian Westphal
- [PATCH nft 00/12] move more keywords away from initial scope,
Florian Westphal
- [PATCH nft 02/12] scanner: ip: move to own scope, Florian Westphal
- [PATCH nft 01/12] scanner: ct: move to own scope, Florian Westphal
- [PATCH nft 05/12] scanner: add ether scope, Florian Westphal
- [PATCH nft 03/12] scanner: ip6: move to own scope, Florian Westphal
- [PATCH nft 04/12] scanner: add fib scope, Florian Westphal
- [PATCH nft 07/12] scanner: remove saddr/daddr from initial state, Florian Westphal
- [PATCH nft 08/12] scanner: vlan: move to own scope, Florian Westphal
- [PATCH nft 06/12] scanner: arp: move to own scope, Florian Westphal
- [PATCH nft 09/12] scanner: limit: move to own scope, Florian Westphal
- [PATCH nft 10/12] scanner: quota: move to own scope, Florian Westphal
- [PATCH nft 11/12] scanner: move until,over,used keywords away from init state, Florian Westphal
- [PATCH nft 12/12] scanner: secmark: move to own scope, Florian Westphal
- [PATCH nft] src: move remaining cache in rule.c function to cache.c, Pablo Neira Ayuso
- [PATCH net-next] netfilter: conntrack: Remove unused variable declaration,
YueHaibing
- [PATCH net-next 00/23] netfilter: flowtable enhancements,
Pablo Neira Ayuso
- [PATCH net-next 01/23] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
- [PATCH net-next 02/23] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
- [PATCH net-next 04/23] net: bridge: resolve forwarding path for VLAN tag actions in bridge devices, Pablo Neira Ayuso
- [PATCH net-next 03/23] net: bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
- [PATCH net-next 06/23] net: dsa: resolve forwarding path for dsa slave ports, Pablo Neira Ayuso
- [PATCH net-next 05/23] net: ppp: resolve forwarding path for bridge pppoe devices, Pablo Neira Ayuso
- [PATCH net-next 08/23] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
- [PATCH net-next 07/23] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
- [PATCH net-next 09/23] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
- [PATCH net-next 11/23] netfilter: flowtable: add bridge vlan filtering support, Pablo Neira Ayuso
- [PATCH net-next 12/23] netfilter: flowtable: add pppoe support, Pablo Neira Ayuso
- [PATCH net-next 13/23] netfilter: flowtable: add dsa support, Pablo Neira Ayuso
- [PATCH net-next 10/23] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
- [PATCH net-next 15/23] netfilter: flowtable: add offload support for xmit path types, Pablo Neira Ayuso
- [PATCH net-next 14/23] selftests: netfilter: flowtable bridge and vlan support, Pablo Neira Ayuso
- [PATCH net-next 16/23] netfilter: nft_flow_offload: use direct xmit if hardware offload is enabled, Pablo Neira Ayuso
- [PATCH net-next 17/23] netfilter: flowtable: bridge vlan hardware offload and switchdev, Pablo Neira Ayuso
- [PATCH net-next 18/23] net: flow_offload: add FLOW_ACTION_PPPOE_PUSH, Pablo Neira Ayuso
- [PATCH net-next 19/23] netfilter: flowtable: support for FLOW_ACTION_PPPOE_PUSH, Pablo Neira Ayuso
- [PATCH net-next 21/23] net: ethernet: mtk_eth_soc: add support for initializing the PPE, Pablo Neira Ayuso
- [PATCH net-next 20/23] dsa: slave: add support for TC_SETUP_FT, Pablo Neira Ayuso
- [PATCH net-next 22/23] net: ethernet: mtk_eth_soc: add flow offloading support, Pablo Neira Ayuso
- [PATCH net-next 23/23] net: ethernet: mtk_eth_soc: fix parsing packets in GDM, Pablo Neira Ayuso
- Re: [PATCH net-next 00/23] netfilter: flowtable enhancements, Jakub Kicinski
- [conntrack-tools PATCH 1/2] tests: conntrackd: add testcase for missing hashtable buckets and max entries,
Arturo Borrero Gonzalez
- [PATCH RFC nf-next 0/2] ct helper object name matching,
Pablo Neira Ayuso
- [libnftnl PATCH 00/10] Kill non-default output leftovers,
Phil Sutter
- [libnftnl PATCH 01/10] expr: Fix snprintf buffer length updates, Phil Sutter
- [libnftnl PATCH 05/10] expr: Check output type once and for all, Phil Sutter
- [libnftnl PATCH 06/10] expr/data_reg: Drop output_format parameter, Phil Sutter
- [libnftnl PATCH 09/10] Get rid of single option switch statements, Phil Sutter
- [libnftnl PATCH 08/10] Drop pointless local variable in snprintf callbacks, Phil Sutter
- [libnftnl PATCH 07/10] obj: Drop type parameter from snprintf callback, Phil Sutter
- [libnftnl PATCH 10/10] ruleset: Eliminate tag and separator helpers, Phil Sutter
- [libnftnl PATCH 02/10] obj/ct_expect: Fix snprintf buffer length updates, Phil Sutter
- [libnftnl PATCH 03/10] obj/ct_timeout: Fix snprintf buffer length updates, Phil Sutter
- [libnftnl PATCH 04/10] object: Fix for wrong parameter passed to snprintf callback, Phil Sutter
- [PATCH nft] nftables: xt: fix misprint in nft_xt_compatible_revision,
Pavel Tikhomirov
- [PATCH v25 18/25] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
- [PATCH v25 16/25] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
- [PATCH v25 15/25] LSM: Ensure the correct LSM context releaser, Casey Schaufler
- [PATCH v25 08/25] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
- [PATCH v25 07/25] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
- [PATCH] doc: use symbolic names for chain priorities,
Simon Ruderich
- [PATCH] net: bridge: fix error return code of do_update_counters(),
Jia-Ju Bai
- [HEADS UP] bugzilla.netfilter.org is under maintainance,
Pablo Neira Ayuso
- xtables-addons-3.17 fail build on armv7 with musl libc,
Milan P. Stanić
- [PATCH nft 0/6] scanner rework part 1,
Florian Westphal
- [PATCH conntrack-tools] conntrackd: set default hashtable buckets and max entries if not specified,
Pablo Neira Ayuso
- [nft PATCH] tests/py: Fix for missing JSON equivalent in any/ct.t.json, Phil Sutter
- [nft PATCH] mnl: Set NFTNL_SET_DATA_TYPE before dumping set elements, Phil Sutter
- [libnftnl PATCH] set_elem: Fix printing of verdict map elements, Phil Sutter
- [nft PATCH] tests/py: Adjust payloads for fixed nat statement dumps, Phil Sutter
- [libnftnl PATCH] expr/{masq,nat}: Don't print unused regs, Phil Sutter
- [libnftnl PATCH 0/5] A few cosmetic changes,
Phil Sutter
- [PATCH nf] netfilter REJECT: Fix destination MAC in RST packets,
Marc Aurèle La France
- [PATCH v2 0/3] Don't use RCU for x_tables synchronization,
Mark Tomlinson
- {PATCH nf] x_tables: Allow REJECT targets in PREROUTING chains,
Marc Aurèle La France
- [RFC PATCH] doc: use symbolic names for chain priorities,
Simon Ruderich
- [PATCH 0/3] Minor documentation improvements,
Simon Ruderich
- [PATCH net 0/9] Netfilter fixes for net,
Pablo Neira Ayuso
- [PATCH net 7/9] netfilter: nftables: disallow updates on table ownership, Pablo Neira Ayuso
- [PATCH net 1/9] uapi: nfnetlink_cthelper.h: fix userspace compilation error, Pablo Neira Ayuso
- [PATCH net 6/9] netfilter: x_tables: gpf inside xt_find_revision(), Pablo Neira Ayuso
- [PATCH net 9/9] netfilter: nftables: bogus check for netlink portID with table owner, Pablo Neira Ayuso
- [PATCH net 3/9] netfilter: nf_nat: undo erroneous tcp edemux lookup, Pablo Neira Ayuso
- [PATCH net 5/9] selftests: netfilter: test nat port clash resolution interaction with tcp early demux, Pablo Neira Ayuso
- [PATCH net 2/9] netfilter: conntrack: Remove a double space in a log message, Pablo Neira Ayuso
- [PATCH net 8/9] netfilter: nftables: fix possible double hook unregistration with table owner, Pablo Neira Ayuso
- [PATCH net 4/9] netfilter: conntrack: avoid misleading 'invalid' in log message, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH net 0/9] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/9] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/9] netfilter fixes for net, Florian Westphal
- [PATCH net 0/9] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH nft] expression: memleak in verdict_expr_parse_udata(), Pablo Neira Ayuso
- Kernel Error FLOW OFFLOAD on nftables,
Максим
- [PATCH RESEND][next] netfilter: Fix fall-through warnings for Clang,
Gustavo A. R. Silva
- [PATCH nft,v2] mnl: remove nft_mnl_socket_reopen(), Pablo Neira Ayuso
- [PATCH][nft,v2] conntrack: Fix gre tunneling over ipv6,
Ludovic Senecaux
- [PATCH nf 1/2,v2] netfilter: nftables: fix possible double hook unregistration with table owner,
Pablo Neira Ayuso
- [PATCH nf] netfilter: nftables: fix possible double hook unregistration with table owner, Pablo Neira Ayuso
- [PATCH 0/3] Don't use RCU for x_tables synchronization,
Mark Tomlinson
- [PATCH nft 1/3] parser: squash duplicated spec/specid rules,
Florian Westphal
- [PATCH nf-next] netfilter: flowtable: separate replace, destroy and stats to different workqueues,
Oz Shlomo
- [PATCH] netfilter: Fix GRE over IPv6 with conntrack module,
linuxludo
- [iptables PATCH 1/2] xtables-translate: Fix translation of odd netmasks,
Phil Sutter
- [nf:master 7/7] net/netfilter/nf_tables_api.c:920:15: warning: converting the enum constant to a boolean,
kernel test robot
- [PATCH nft] mnl: remove nft_mnl_socket_reopen(),
Pablo Neira Ayuso
- [PATCH nft] table: support for the table owner flag, Pablo Neira Ayuso
- [PATCH libnftnl] table: add table owner support, Pablo Neira Ayuso
- [PATCH nf] netfilter: nftables: disallow updates on table ownership, Pablo Neira Ayuso
- [PATCH] netfilter: gpf inside xt_find_revision(),
Vasily Averin
- [PATCH nf 0/3] netfilter: nat: fix ancient dnat+edemux bug,
Florian Westphal
- [PATCH iptables-nft] iptables-nft: fix -Z option,
Florian Westphal
- [PATCH] uapi: nfnetlink_cthelper.h: fix userspace compilation error,
Dmitry V. Levin
- [PATCH nft] table: rework flags printing, Pablo Neira Ayuso
- increasing ip_list_tot in net/netfilter/xt_recent.c for a non-modular kernel,
Toralf Förster
- [PATCH nft] src: allow use of 'verdict' in typeof definitions, Florian Westphal
- [nft PATCH 1/2] main: fix nft --help output fallout from 719e4427,
Štěpán Němec
- [PATCH] xtables-addons 3.15 doesn't compile on 32-bit x86,
andy
- [PATCH] netfilter: Remove a double space in a log message,
Klemen Košir
- [ANNOUNCE] ipset 7.11 released, Jozsef Kadlecsik
- [iptables PATCH] nft: Fix bitwise expression avoidance detection, Phil Sutter
- [PATCH nft] json: init parser state for every new buffer/file,
Eric Garver
- [ebtables PATCH] Open the lockfile with O_CLOEXEC,
Ondrej Mosnacek
- [libnftnl PATCH 2/2] Avoid out of bounds read from data,
Maya Rashish
- [libnftnl PATCH 1/2] Avoid out of bound reads in tests.,
Maya Rashish
- [PATCH net-next 0/3] Netfilter updates for net-next,
Pablo Neira Ayuso
- [nft PATCH] monitor: Don't print newgen message with JSON output, Phil Sutter
- [iptables PATCH] include: Drop libipulog.h,
Phil Sutter
- traffic shaping with tc on Linux 5.4.x, Lars Noodén
- [PATCH nf-next,v3 1/3] netfilter: nftables: allow to release one table,
Pablo Neira Ayuso
- [PATCH nf-next,v2] netfilter: nftables: introduce table ownership, Pablo Neira Ayuso
- Question about using NFT_GOTO in kernel module, Bob @ gmail
- [PATCH libnetfilter_queue v3] src: fix IPv6 header handling,
Etan Kissling
- [PATCH net 0/2] Netfilter fixes for net,
Pablo Neira Ayuso
- [PATCH net 1/2] netfilter: conntrack: skip identical origin tuple in same zone only, Pablo Neira Ayuso
- [PATCH net 2/2] netfilter: nftables: relax check for stateful expressions in set definition, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/2] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH libnetfilter_queue v2] src: fix IPv6 header handling, Etan Kissling
- [PATCH] evaluate: incorrect usage of stmt_binary_error() in reject, Pablo Neira Ayuso
- [PATCH nf,v3] netfilter: nftables: relax check for stateful expressions in set definition, Pablo Neira Ayuso
- [PATCH nf,v2] netfilter: nftables: relax check for stateful expressions in set definition, Pablo Neira Ayuso
- Re: Unable to create a chain called "trace",
Florian Westphal
- [PATCH nft] trace: do not remove icmp type from packet dump, Florian Westphal
- [PATCH nf] netfilter: nftables: relax check for stateful expressions in set definition, Pablo Neira Ayuso
- [PATCH net-next 0/7] Netfilter/IPVS updates for net-next,
Pablo Neira Ayuso
- [PATCH nf] netfilter: conntrack: skip identical origin tuple in same zone only,
Florian Westphal
- [RFC conntrack-tools PATCH] conntrack-tools: introduce conntrackdctl,
Arturo Borrero Gonzalez
- [PATCH nft,v2] src: add negation match on singleton bitmask value, Pablo Neira Ayuso
- [nft PATCH 1/2] tests/py: Write dissenting payload into the right file,
Phil Sutter
- [PATCH nft 0/3] evaluate: fix crash on empty set restore,
Florian Westphal
- [PATCH nft 0/3] nft: fix ct zone handling in sets and maps,
Florian Westphal
- [PATCH net-next v2 0/4] Fix W=1 compilation warnings in net/* folder,
Leon Romanovsky
- [PATCH net-next v1 0/4] Fix W=1 compilation warnings in net/* folder,
Leon Romanovsky
- [nft PATCH] json: Do not abbreviate reject statement object, Phil Sutter
- [PATCH] netfilter: flowtable: fix tcp and udp header checksum update,
sven . auhagen
- [PATCH nf] netfilter: nftables: fix possible UAF over chains from packet path in netns, Pablo Neira Ayuso
- [PATCH net 0/4] Fix W=1 compilation warnings in net/* folder,
Leon Romanovsky
- [PATCH nft 1/2] tests: add icmp/6 test where dependency should be left alone,
Florian Westphal
- [PATCH nft] src: add negation match on singleton bitmask value, Pablo Neira Ayuso
- [PATCH conntrack-tools] tests: conntrackd: move basic netns scenario setup to shell script,
Pablo Neira Ayuso
- [PATCH 1/1 nf] selftests: netfilter: fix current year, Fabian Frederick
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]