Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH RFC nf-next 7/9] netfilter: core: do not rebuild bpf program on dying netns, (continued)
  • [PATCH RFC nf-next 7/9] netfilter: core: do not rebuild bpf program on dying netns, Florian Westphal
  • [PATCH RFC nf-next 8/9] netfilter: ingress: switch to invocation via bpf, Florian Westphal
  • [PATCH RFC nf-next 9/9] netfilter: hook_jit: add prog cache, Florian Westphal
• [PATCH nf-next v2 0/4] netfilter: ipvs: remove unneeded hook wrappers, Florian Westphal
  • [PATCH nf-next v2 1/4] netfilter: ipvs: prepare for hook function reduction, Florian Westphal
  • [PATCH nf-next v2 2/4] netfilter: ipvs: remove unneeded output wrappers, Florian Westphal
  • [PATCH nf-next v2 4/4] netfilter: ipvs: merge ipv4 + ipv6 icmp reply handlers, Florian Westphal
  • [PATCH nf-next v2 3/4] netfilter: ipvs: remove unneeded input wrappers, Florian Westphal
  • Re: [PATCH nf-next v2 0/4] netfilter: ipvs: remove unneeded hook wrappers, Julian Anastasov
    • Re: [PATCH nf-next v2 0/4] netfilter: ipvs: remove unneeded hook wrappers, Simon Horman
  • Re: [PATCH nf-next v2 0/4] netfilter: ipvs: remove unneeded hook wrappers, Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: remove stray bash debug line, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: remove stray bash debug line, Pablo Neira Ayuso
• [PATCH net] netfilter: ipvs: make global sysctl readonly in non-init netns, Antoine Tenart
  • Re: [PATCH net] netfilter: ipvs: make global sysctl readonly in non-init netns, Julian Anastasov
    • Re: [PATCH net] netfilter: ipvs: make global sysctl readonly in non-init netns, Simon Horman
  • Re: [PATCH net] netfilter: ipvs: make global sysctl readonly in non-init netns, Pablo Neira Ayuso
• [PATCH net-next] net: bridge: make use of helper netif_is_bridge_master(), Kyungrok Chung
  • Re: [PATCH net-next] net: bridge: make use of helper netif_is_bridge_master(), Nikolay Aleksandrov
  • Re: [PATCH net-next] net: bridge: make use of helper netif_is_bridge_master(), Jakub Kicinski
• Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Eugene Crosser
  • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Florian Westphal
    • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Florian Westphal
      • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, David Ahern
        • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Florian Westphal
          • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, David Ahern
            • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Florian Westphal
              • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Eugene Crosser
              • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, David Ahern
                • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Florian Westphal
      • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Jakub Kicinski
  • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Lahav Schlesinger
    • Re: Commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1r "vrf: Reset skb conntrack connection on VRF rcv" breaks expected netfilter behaviour, Florian Westphal
• [PATCHv2 nf] netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6, Xin Long
  • Re: [PATCHv2 nf] netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6, Florian Westphal
  • Re: [PATCHv2 nf] netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6, Pablo Neira Ayuso
• [PATCH nf-next 0/4] netfilter: ipvs: remove unneeded hook wrappers, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: ipvs: prepare for hook function reduction, Florian Westphal
  • [PATCH nf-next 2/4] netfilter: ipvs: remove unneeded output wrappers, Florian Westphal
  • [PATCH nf-next 3/4] netfilter: ipvs: remove unneeded input wrappers, Florian Westphal
  • [PATCH nf-next 4/4] netfilter: ipvs: merge ipv4 + ipv6 icmp reply handlers, Florian Westphal
    • Re: [PATCH nf-next 4/4] netfilter: ipvs: merge ipv4 + ipv6 icmp reply handlers, Julian Anastasov
• [PATCH ulogd] XML: show both nflog packet and conntrack, Ken-ichirou MATSUZAWA
  • Re: [PATCH ulogd] XML: show both nflog packet and conntrack, Pablo Neira Ayuso
• [PATCH ulogd 2/2] NFLOG: attach struct nf_conntrack, Ken-ichirou MATSUZAWA
  • Re: [PATCH ulogd 2/2] NFLOG: attach struct nf_conntrack, Jeremy Sowden
    • [PATCHv2 ulogd 2/2] NFLOG: attach struct nf_conntrack, Ken-ichirou MATSUZAWA
      • Re: [PATCHv2 ulogd 2/2] NFLOG: attach struct nf_conntrack, Pablo Neira Ayuso
      • Re: [PATCHv2 ulogd 2/2] NFLOG: attach struct nf_conntrack, Pablo Neira Ayuso
• [PATCH ulogd 1/2] NFLOG: add NFULNL_CFG_F_CONNTRACK flag, Ken-ichirou MATSUZAWA
  • Re: [PATCH ulogd 1/2] NFLOG: add NFULNL_CFG_F_CONNTRACK flag, Jeremy Sowden
    • [PATCHv2 ulogd 1/2] NFLOG: add NFULNL_CFG_F_CONNTRACK flag, Ken-ichirou MATSUZAWA
      • Re: [PATCHv2 ulogd 1/2] NFLOG: add NFULNL_CFG_F_CONNTRACK flag, Pablo Neira Ayuso
• [PATCH nf] netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6, Xin Long
  • Re: [PATCH nf] netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6, Florian Westphal
    • Re: [PATCH nf] netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6, Xin Long
• [PATCH nf-next 0/4] netfilter: remove obsolete hook wrappers, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: iptables: allow use of ipt_do_table as hookfn, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: ipv4: allow use of ipt_do_table as hookfn, Florian Westphal
  • [PATCH nf-next 2/4] netfilter: arp_tables: allow use of arpt_do_table as hookfn, Florian Westphal
  • [PATCH nf-next 3/4] netfilter: ip6tables: allow use of ip6t_do_table as hookfn, Florian Westphal
  • [PATCH nf-next 4/4] netfilter: ebtables: allow use of ebt_do_table as hookfn, Florian Westphal
  • Re: [PATCH nf-next 0/4] netfilter: remove obsolete hook wrappers, Pablo Neira Ayuso
• [PATCH nft 1/2] doc: libnftables-json: make the example valid JSON, Štěpán Němec
  • [PATCH nft 2/2] doc: libnftables-json: make the example valid libnftables JSON input, Štěpán Němec
  • Re: [PATCH nft 1/2] doc: libnftables-json: make the example valid JSON, Phil Sutter
• [PATCH] netfilter: ebtables: allocate chainstack on CPU local nodes, Davidlohr Bueso
  • Re: [PATCH] netfilter: ebtables: allocate chainstack on CPU local nodes, Pablo Neira Ayuso
• [PATCH] conntrack: fix invmap_icmpv6 entries, Ken-ichirou MATSUZAWA
  • Re: [PATCH] conntrack: fix invmap_icmpv6 entries, Pablo Neira Ayuso
• [PATCH v2 net] netfilter: fix conntrack flows stuck issue on cleanup., Volodymyr Mytnyk
• [PATCH libnetfilter_log v5 0/1] build: doc: `make` generates requested documentation, Duncan Roe
  • [PATCH libnetfilter_log v5 1/1] build: doc: `make` generates requested documentation, Duncan Roe
    • Re: [PATCH libnetfilter_log v5 1/1] build: doc: `make` generates requested documentation, Jeremy Sowden
• xtable-addons document request, alireza sadeghpour
  • Re: xtable-addons document request, Jan Engelhardt
• [libnetfilter_log PATCH 0/8] Build fixes, Jeremy Sowden
  • [libnetfilter_log PATCH 1/9] build: correct pkg-config dependency configuration, Jeremy Sowden
  • [libnetfilter_log PATCH 2/9] build: add pkg-config configuration for libipulog, Jeremy Sowden
  • [libnetfilter_log PATCH 3/9] build: fix linker flags for nf-log, Jeremy Sowden
  • [libnetfilter_log PATCH 4/9] build: move dependency CFLAGS variables out of `AM_CPPFLAGS`, Jeremy Sowden
  • [libnetfilter_log PATCH 7/9] build: replace `AM_PROG_LIBTOOL` and `AC_DISABLE_STATIC` with `LT_INIT`, Jeremy Sowden
  • [libnetfilter_log PATCH 5/9] build: remove superfluous .la when linking ulog_test, Jeremy Sowden
  • [libnetfilter_log PATCH 6/9] build: remove `-dynamic` when linking check progs, Jeremy Sowden
  • [libnetfilter_log PATCH 8/9] build: replace `AC_HELP_STRING` with `AS_HELP_STRING`, Jeremy Sowden
  • [libnetfilter_log PATCH 9/9] Add Emacs artefacts to .gitignore, Jeremy Sowden
  • Re: [libnetfilter_log PATCH 0/8] Build fixes, Pablo Neira Ayuso
• [PATCH libnetfilter_log v4] build: doc: `make` generates requested documentation, Duncan Roe
• [PATCH nf-next v6 0/4] Netfilter egress hook, Lukas Wunner
  • [PATCH nf-next v6 1/4] netfilter: Rename ingress hook include file, Lukas Wunner
  • [PATCH nf-next v6 2/4] netfilter: Generalize ingress hook include file, Lukas Wunner
  • [PATCH nf-next v6 3/4] netfilter: Introduce egress hook, Lukas Wunner
  • [PATCH nf-next v6 4/4] af_packet: Introduce egress hook, Lukas Wunner
  • Re: [PATCH nf-next v6 0/4] Netfilter egress hook, Pablo Neira Ayuso
• [PATCH net] netfilter: fix conntrack flows stack issue on cleanup., Volodymyr Mytnyk
• [nft PATCH v3 0/3] Stateless output fixes, Jeremy Sowden
  • [nft PATCH v3 1/3] rule: remove fake stateless output of named counters, Jeremy Sowden
  • [nft PATCH v3 2/3] rule: fix stateless output after listing sets containing counters, Jeremy Sowden
  • [nft PATCH v3 3/3] rule: replace three conditionals with one, Jeremy Sowden
  • Re: [nft PATCH v3 0/3] Stateless output fixes, Pablo Neira Ayuso
• [nft PATCH v2 0/3] Stateless output fixes, Jeremy Sowden
  • [nft PATCH v2 2/3] rule: fix stateless output after listing sets containing counters., Jeremy Sowden
  • [nft PATCH v2 1/3] rule: remove fake stateless output of named counters, Jeremy Sowden
  • [nft PATCH v2 3/3] rule: replace three conditionals with one., Jeremy Sowden
• [PATCH libnetfilter_log v3] build: doc: `make` generates requested documentation, Duncan Roe
  • Re: [PATCH libnetfilter_log v3] build: doc: `make` generates requested documentation, Jeremy Sowden
    • Re: [PATCH libnetfilter_log v3] build: doc: `make` generates requested documentation, Jeremy Sowden
      • Re: [PATCH libnetfilter_log v3] build: doc: `make` generates requested documentation, Duncan Roe
• [PATCH] net/netfilter/Kconfig: use 'default y' instead of 'm' for bool config option, Vegard Nossum
  • Re: [PATCH] net/netfilter/Kconfig: use 'default y' instead of 'm' for bool config option, Pablo Neira Ayuso
• [PATCH AUTOSEL 5.14 20/40] netfilter: conntrack: serialize hash resizes and cleanups, Sasha Levin
• [PATCH AUTOSEL 5.14 18/40] netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic, Sasha Levin
• [PATCH AUTOSEL 5.14 19/40] netfilter: nf_nat_masquerade: defer conntrack walk to work queue, Sasha Levin
• [PATCH AUTOSEL 5.14 17/40] netfilter: nf_tables: Fix oversized kvmalloc() calls, Sasha Levin
• [PATCH AUTOSEL 5.14 12/40] netfilter: ip6_tables: zero-initialize fragment offset, Sasha Levin
• [PATCH AUTOSEL 5.14 09/40] netfilter: ipset: Fix oversized kvmalloc() calls, Sasha Levin
• [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
  • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Mathieu Desnoyers
    • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
      • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Mathieu Desnoyers
        • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Paul E. McKenney
        • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
    • RE: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, David Laight
      • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Mathieu Desnoyers
        • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
  • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Linus Torvalds
    • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
      • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Linus Torvalds
    • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
  • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Rasmus Villemoes
    • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Mathieu Desnoyers
      • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Jan Engelhardt
        • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
          • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Jan Engelhardt
            • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
              • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Linus Torvalds
                • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
              • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Mathieu Desnoyers
                • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
              • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
                • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Linus Torvalds
                  • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
                • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Jan Engelhardt
                  • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Steven Rostedt
                    • RE: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, David Laight
                  • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Linus Torvalds
                    • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Jan Engelhardt
      • Re: [RFC][PATCH] rcu: Use typeof(p) instead of typeof(*p) *, Rasmus Villemoes
• Linux 5.14 breaks wlan-ap traffic between wlan device, Reindl Harald
• [PATCH nf v2] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value, Juhee Kang
  • Re: [PATCH nf v2] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value, Florian Westphal
  • Re: [PATCH nf v2] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value, Pablo Neira Ayuso
• [PATCH nf] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value, Juhee Kang
  • Re: [PATCH nf] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value, Florian Westphal
    • Re: [PATCH nf] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value, Juhee Kang
• [nft PATCH] rule: remove fake stateless output of named counters, Jeremy Sowden
• [nft PATCH] parser: extend limit statement syntax., Jeremy Sowden
  • Re: [nft PATCH] parser: extend limit statement syntax., Jeremy Sowden
    • Re: [nft PATCH] parser: extend limit statement syntax., Pablo Neira Ayuso
      • Re: [nft PATCH] parser: extend limit statement syntax., Pablo Neira Ayuso
        • Re: [nft PATCH] parser: extend limit statement syntax., Jeremy Sowden
      • Re: [nft PATCH] parser: extend limit statement syntax., Jeremy Sowden
• [PATCH nft] cache: unset NFT_CACHE_SETELEM with --terse listing, Pablo Neira Ayuso
• [PATCH net 0/4] Netfilter fixes for net (v2), Pablo Neira Ayuso
  • [PATCH net 1/4] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1, Pablo Neira Ayuso
    • Re: [PATCH net 1/4] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1, patchwork-bot+netdevbpf
  • [PATCH net 3/4] netfilter: nf_tables: reverse order in rule replacement expansion, Pablo Neira Ayuso
  • [PATCH net 2/4] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
  • [PATCH net 4/4] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification, Pablo Neira Ayuso
• [iptables PATCH] tests: shell: fix bashism, Jeremy Sowden
  • Re: [iptables PATCH] tests: shell: fix bashism, Florian Westphal
• [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft, Jeremy Sowden
  • [PATCH iptables v2 7/8] build: replace `AM_PROG_LIBTOOL` and `AC_DISABLE_STATIC` with `LT_INIT`, Jeremy Sowden
  • [PATCH iptables v2 1/8] nft: fix indentation error., Jeremy Sowden
  • [PATCH iptables v2 6/8] extensions: libxt_NFLOG: remove extra space when saving targets with prefixes, Jeremy Sowden
  • [PATCH iptables v2 2/8] extensions: libxt_NFLOG: use nft built-in logging instead of xt_NFLOG, Jeremy Sowden
    • Re: [PATCH iptables v2 2/8] extensions: libxt_NFLOG: use nft built-in logging instead of xt_NFLOG, Florian Westphal
  • [PATCH iptables v2 5/8] extensions: libxt_NFLOG: fix `--nflog-prefix` Python test-cases, Jeremy Sowden
  • [PATCH iptables v2 4/8] extensions: libxt_NFLOG: disable `--nflog-range` Python test-cases, Jeremy Sowden
  • [PATCH iptables v2 3/8] extensions: libxt_NFLOG: don't truncate log prefix on print/save, Jeremy Sowden
  • [PATCH iptables v2 8/8] tests: iptables-test: correct misspelt variable, Jeremy Sowden
  • Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft, Jeremy Sowden
    • Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft, Florian Westphal
      • Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft, Phil Sutter
        • Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft, Jeremy Sowden
          • Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft, Pablo Neira Ayuso
            • Re: [PATCH iptables v2 0/8] extensions: libxt_NFLOG: use nft back-end for iptables-nft, Jeremy Sowden
• In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf, Eugene Crosser
  • Re: In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf, Florian Westphal
    • Re: In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf, Eugene Crosser
      • Re: In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf, Eugene Crosser
        • Re: In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf, Florian Westphal
          • Re: In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf, Eugene Crosser
            • Re: In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf, Florian Westphal
      • Re: In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf, Florian Westphal
• [PATCH v1 net-next 1/1] net: Mark possible unused variables on stack with __maybe_unused, Andy Shevchenko
  • Re: [PATCH v1 net-next 1/1] net: Mark possible unused variables on stack with __maybe_unused, Jakub Kicinski
• [iptables PATCH v2 00/17] Eliminate dedicated arptables-nft parser, Phil Sutter
  • [iptables PATCH v2 08/17] arptables: Use standard data structures when parsing, Phil Sutter
  • [iptables PATCH v2 15/17] xtables: arptables ignores wrong -t values, Phil Sutter
  • [iptables PATCH v2 04/17] xtables: Simplify addr_mask freeing, Phil Sutter
  • [iptables PATCH v2 09/17] nft-arp: Introduce post_parse callback, Phil Sutter
  • [iptables PATCH v2 11/17] xtables: Derive xtables_globals from family, Phil Sutter
  • [iptables PATCH v2 16/17] xtables: Support '!' betwen option and argument, Phil Sutter
  • [iptables PATCH v2 10/17] nft-shared: Make nft_check_xt_legacy() family agnostic, Phil Sutter
  • [iptables PATCH v2 06/17] xtables-standalone: Drop version number from init errors, Phil Sutter
  • [iptables PATCH v2 12/17] nft: Merge xtables-arp-standalone.c into xtables-standalone.c, Phil Sutter
  • [iptables PATCH v2 02/17] xshared: Store optstring in xtables_globals, Phil Sutter
  • [iptables PATCH v2 17/17] nft: Store maximum allowed chain name length in family ops, Phil Sutter
  • [iptables PATCH v2 05/17] nft: Add family ops callbacks wrapping different nft_cmd_* functions, Phil Sutter
  • [iptables PATCH v2 13/17] xtables: arptables doesn't warn about empty interface, Phil Sutter
  • [iptables PATCH v2 01/17] nft: Introduce builtin_tables_lookup(), Phil Sutter
  • [iptables PATCH v2 14/17] xtables: arptables accepts but ignores '-m', Phil Sutter
  • [iptables PATCH v2 03/17] nft-shared: Introduce init_cs family ops callback, Phil Sutter
  • [iptables PATCH v2 07/17] libxtables: Introduce xtables_globals print_help callback, Phil Sutter
  • Re: [iptables PATCH v2 00/17] Eliminate dedicated arptables-nft parser, Pablo Neira Ayuso
    • Re: [iptables PATCH v2 00/17] Eliminate dedicated arptables-nft parser, Phil Sutter
      • Re: [iptables PATCH v2 00/17] Eliminate dedicated arptables-nft parser, Pablo Neira Ayuso
• ebtables behaving weirdly on MIPS platform, Senthil Kumar Balasubramanian
  • Re: ebtables behaving weirdly on MIPS platform, Phil Sutter
    • Re: ebtables behaving weirdly on MIPS platform, Florian Westphal
      • Re: ebtables behaving weirdly on MIPS platform, Senthil Kumar Balasubramanian
        • Re: ebtables behaving weirdly on MIPS platform, Florian Westphal
• [syzbot] WARNING: kmalloc bug in hash_netportnet_create, syzbot
• [PATCH nft] cache: filter out sets and maps that are not requested, Pablo Neira Ayuso
• [PATCH nft 1/2] cache: finer grain cache population for list commands, Pablo Neira Ayuso
  • [PATCH nft 2/2] cache: filter out tables that are not requested, Pablo Neira Ayuso
• [PATCH nft] cache: set on cache flags for nested notation, Pablo Neira Ayuso
• Re: [PATCH] Fix typo in ipset-translate man page, Pablo Neira Ayuso
• [PATCH nft,v2 2/2] evaluate: check for missing transport protocol match in nat map with concatenations, Pablo Neira Ayuso
• [PATCH nft 1/2] evaluate: check for concatenation in set data datatype, Pablo Neira Ayuso
  • [PATCH nft 2/2] evaluate: check for missing transport protocol match in nat map with concatenations, Pablo Neira Ayuso
• [PATCH][net-next] netfilter: ebtables: use array_size() helper in copy_{from,to}_user(), Gustavo A. R. Silva
  • Re: [PATCH][net-next] netfilter: ebtables: use array_size() helper in copy_{from,to}_user(), Kees Cook
    • Re: [PATCH][net-next] netfilter: ebtables: use array_size() helper in copy_{from,to}_user(), Pablo Neira Ayuso
• [PATCH nft] netlink: dynset: set compound expr dtype based on set key definition, Florian Westphal
• [syzbot] KASAN: use-after-free Read in nf_tables_fill_table_info, syzbot
• [PATCH nft] payload: don't adjust offsets of autogenerated dependency expressions, Florian Westphal
• [PATCH nf-next v5 0/6] Netfilter egress hook, Pablo Neira Ayuso
  • [PATCH nf-next v5 1/6] netfilter: Rename ingress hook include file, Pablo Neira Ayuso
  • [PATCH nf-next v5 2/6] netfilter: Generalize ingress hook include file, Pablo Neira Ayuso
  • [PATCH nf-next v5 3/6] netfilter: nf_tables: move netdev ingress filter chain to nf_tables_netdev.c, Pablo Neira Ayuso
  • [PATCH nf-next v5 5/6] af_packet: Introduce egress hook, Pablo Neira Ayuso
  • [PATCH nf-next v5 4/6] netfilter: Introduce egress hook, Pablo Neira Ayuso
  • [PATCH nf-next v5 6/6] netfilter: nf_tables: add egress support, Pablo Neira Ayuso
  • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Daniel Borkmann
    • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Lukas Wunner
      • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Daniel Borkmann
      • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Pablo Neira Ayuso
    • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Pablo Neira Ayuso
      • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Daniel Borkmann
        • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Pablo Neira Ayuso
          • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Jakub Kicinski
            • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Pablo Neira Ayuso
              • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Jakub Kicinski
                • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Pablo Neira Ayuso
                  • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Jakub Kicinski
            • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Lukas Wunner
              • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Jakub Kicinski
                • Re: [PATCH nf-next v5 0/6] Netfilter egress hook, Lukas Wunner
• [PATCH libnetfilter_log v2] build: doc: `make` generates requested documentation, Duncan Roe
  • Re: [PATCH libnetfilter_log v2] build: doc: `make` generates requested documentation, Duncan Roe
    • Re: [PATCH libnetfilter_log v2] build: doc: `make` generates requested documentation, Duncan Roe
• [PATCH conntrack-tools v2] conntrack.8: minor copy edit, Štěpán Němec
  • Re: [PATCH conntrack-tools v2] conntrack.8: minor copy edit, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrack.8: minor copy edit, Štěpán Němec
• [iptables PATCH 00/12] Eliminate dedicated arptables-nft parser, Phil Sutter
  • [iptables PATCH 02/12] xshared: Store optstring in xtables_globals, Phil Sutter
  • [iptables PATCH 03/12] nft-shared: Introduce init_cs family ops callback, Phil Sutter
  • [iptables PATCH 12/12] nft: Merge xtables-arp-standalone.c into xtables-standalone.c, Phil Sutter
  • [iptables PATCH 06/12] xtables-standalone: Drop version number from init errors, Phil Sutter
  • [iptables PATCH 05/12] nft: Add family ops callbacks wrapping different nft_cmd_* functions, Phil Sutter
  • [iptables PATCH 04/12] xtables: Simplify addr_mask freeing, Phil Sutter
  • [iptables PATCH 11/12] xtables: Derive xtables_globals from family, Phil Sutter
  • [iptables PATCH 10/12] nft-shared: Make nft_check_xt_legacy() family agnostic, Phil Sutter
  • [iptables PATCH 01/12] nft: Introduce builtin_tables_lookup(), Phil Sutter
  • [iptables PATCH 09/12] nft-arp: Introduce post_parse callback, Phil Sutter
  • [iptables PATCH 08/12] arptables: Use standard data structures when parsing, Phil Sutter
  • [iptables PATCH 07/12] libxtables: Introduce xtables_globals print_help callback, Phil Sutter
• [PATCH libnetfilter_queue v3 1/4] src: doc: revise doxygen for all other modules, Duncan Roe
  • [PATCH libnetfilter_queue v3 2/4] src: doc: Insert SYNOPSIS sections for man pages, Duncan Roe
  • [PATCH libnetfilter_queue v3 3/4] src: doc: Add \return for nflog_get_packet_hw(), Duncan Roe
  • [PATCH libnetfilter_queue v3 4/4] src: doc: Document nflog_callback_register() and nflog_handle_packet(), Duncan Roe
  • Re: [PATCH libnetfilter_queue v3 1/4] src: doc: revise doxygen for all other modules, Duncan Roe
• [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Philip Prindeville
  • Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Jan Engelhardt
    • Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Philip Prindeville
      • Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Jeremy Sowden
        • Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Philip Prindeville
          • Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Jeremy Sowden
            • Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Philip Prindeville
              • Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Jan Engelhardt
                • Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Philip Prindeville
                  • Re: [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Philip Prindeville
• [PATCH 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6, Philip Prindeville
• [PATCH nf,v2] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification, Pablo Neira Ayuso
• [PATCH nft] monitor: honor NLM_F_EXCL netlink flag, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification, Pablo Neira Ayuso
• [PATCH nft] evaluate: provide a hint on missing dynamic flag, Pablo Neira Ayuso
• [PATCH 1/3] monitor: display rule position handle, Pablo Neira Ayuso
  • [PATCH 3/3] tests: monitor: update insert and replace commands, Pablo Neira Ayuso
  • [PATCH 2/3] monitor: honor NLM_F_APPEND flag for rules, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_dynset: relax superfluous check on set updates, Pablo Neira Ayuso
• [conntrack-tools 0/6] Build fixes, Jeremy Sowden
  • [conntrack-tools 1/6] build: remove commented-out macros from configure.ac, Jeremy Sowden
  • [conntrack-tools 3/6] build: replace `AM_PROG_LIBTOOL` and `AC_DISABLE_STATIC` with `LT_INIT`, Jeremy Sowden
  • [conntrack-tools 2/6] build: quote AC_INIT arguments, Jeremy Sowden
  • [conntrack-tools 6/6] build: fix dependency-tracking of yacc-generated header, Jeremy Sowden
    • Re: [conntrack-tools 6/6] build: fix dependency-tracking of yacc-generated header, Jan Engelhardt
      • Re: [conntrack-tools 6/6] build: fix dependency-tracking of yacc-generated header, Jeremy Sowden
  • [conntrack-tools 4/6] build: remove yacc-generated header from EXTRA_DIST, Jeremy Sowden
  • [conntrack-tools 5/6] build: clean yacc- and lex-generated files with maintainer-clean, Jeremy Sowden
  • Re: [conntrack-tools 0/6] Build fixes, Pablo Neira Ayuso
• [syzbot] general protection fault in nf_tables_dump_tables, syzbot
  • Re: [syzbot] general protection fault in nf_tables_dump_tables, syzbot
    • Re: [syzbot] general protection fault in nf_tables_dump_tables, Dmitry Vyukov
• [PATCH nf,v3 1/2] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nf_tables: reverse order in rule replacement expansion, Pablo Neira Ayuso
• [PATCH net 00/15] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH net 02/15] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20, Pablo Neira Ayuso
  • [PATCH net 01/15] netfilter: ipset: Fix oversized kvmalloc() calls, Pablo Neira Ayuso
    • Re: [PATCH net 01/15] netfilter: ipset: Fix oversized kvmalloc() calls, patchwork-bot+netdevbpf
  • [PATCH net 03/15] netfilter: ip6_tables: zero-initialize fragment offset, Pablo Neira Ayuso
  • [PATCH net 06/15] netfilter: nat: include zone id in nat table hash again, Pablo Neira Ayuso
  • [PATCH net 05/15] netfilter: conntrack: include zone id in tuple hash again, Pablo Neira Ayuso
  • [PATCH net 04/15] netfilter: conntrack: make max chain length random, Pablo Neira Ayuso
  • [PATCH net 08/15] selftests: netfilter: add zone stress test with colliding tuples, Pablo Neira Ayuso
  • [PATCH net 07/15] selftests: netfilter: add selftest for directional zone support, Pablo Neira Ayuso
  • [PATCH net 09/15] netfilter: nf_tables: unlink table before deleting it, Pablo Neira Ayuso
  • [PATCH net 11/15] netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic, Pablo Neira Ayuso
  • [PATCH net 12/15] netfilter: nf_nat_masquerade: defer conntrack walk to work queue, Pablo Neira Ayuso
  • [PATCH net 10/15] netfilter: nf_tables: Fix oversized kvmalloc() calls, Pablo Neira Ayuso
  • [PATCH net 15/15] netfilter: conntrack: serialize hash resizes and cleanups, Pablo Neira Ayuso
  • [PATCH net 13/15] netfilter: iptable_raw: drop bogus net_init annotation, Pablo Neira Ayuso
  • [PATCH net 14/15] netfilter: log: work around missing softdep backend module, Pablo Neira Ayuso
• [PATCH v29 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v29 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v29 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v29 08/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v29 07/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• [PATCH libnetfilter_queue v4 0/1] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
  • [PATCH libnetfilter_queue v4 1/1] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
  • Re: [PATCH libnetfilter_queue v4 0/1] build: doc: Allow to specify whether to produce man pages, html, neither or both, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1, Pablo Neira Ayuso
• [PATCH nf 0/1.5 RFC] netfilter: nat: source port shadowing, Florian Westphal
  • [PATCH nf 1/2] selftests: nft_nat: add udp hole punch test case, Florian Westphal
    • Re: [PATCH nf 1/2] selftests: nft_nat: add udp hole punch test case, Pablo Neira Ayuso
  • [PATCH RFC 2/2] netfilter: nf_nat: don't allow source ports that shadow local port, Florian Westphal
    • Re: [PATCH RFC 2/2] netfilter: nf_nat: don't allow source ports that shadow local port, Florian Westphal
      • Re: [PATCH RFC 2/2] netfilter: nf_nat: don't allow source ports that shadow local port, Pablo Neira Ayuso
        • Re: [PATCH RFC 2/2] netfilter: nf_nat: don't allow source ports that shadow local port, Florian Westphal
• [iptables PATCH 0/4] nft: Fix and improve base chain handling, Phil Sutter
  • [iptables PATCH 3/4] nft-chain: Introduce base_slot field, Phil Sutter
  • [iptables PATCH 4/4] nft: Delete builtin chains compatibly, Phil Sutter
    • Re: [iptables PATCH 4/4] nft: Delete builtin chains compatibly, Florian Westphal
  • [iptables PATCH 2/4] nft: Check base-chain compatibility when adding to cache, Phil Sutter
  • [iptables PATCH 1/4] nft: cache: Avoid double free of unrecognized base-chains, Phil Sutter
• [PATCH iptables] xtables-translate: add missing argument and option to usage, mizuta.takeshi@xxxxxxxxxxx
  • Re: [PATCH iptables] xtables-translate: add missing argument and option to usage, Florian Westphal
• [iptables PATCH] tests: iptables-test: Fix conditional colors on stderr, Phil Sutter
• [PATCH libnetfilter_log 0/2] utils: nfulnl_test: Test nflog_get_packet_hw, Duncan Roe
  • [PATCH libnetfilter_log 1/2] utils: nfulnl_test: Agree with man pages, Duncan Roe
    • Re: [PATCH libnetfilter_log 1/2] utils: nfulnl_test: Agree with man pages, Pablo Neira Ayuso
  • [PATCH libnetfilter_log 2/2] utils: nfulnl_test: Add rather extensive test of nflog_get_packet_hw(), Duncan Roe
    • Re: [PATCH libnetfilter_log 2/2] utils: nfulnl_test: Add rather extensive test of nflog_get_packet_hw(), Pablo Neira Ayuso
• [PATCH nft,v2 2/2] monitor: honor NLM_F_APPEND flag for rules, Pablo Neira Ayuso
• [PATCH nft 1/2] monitor: display rule position handle, Pablo Neira Ayuso
  • [PATCH nft 2/2] monitor: honor NLM_F_APPEND flag, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
• [PATCH net v6 0/2] Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Cole Dishington
  • [PATCH net v6 2/2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Cole Dishington
  • [PATCH net v6 1/2] net: netfilter: Limit the number of ftp helper port attempts, Cole Dishington
• [PATCH nf] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
• [RESEND PATCH net-next v4] extensions: masquerade: Add RFC-7597 section 5.1 PSID support, Cole Dishington
• [RESEND PATCH net-next v7 0/3] Add RFC-7597 Section 5.1 PSID support, Cole Dishington
  • [RESEND PATCH net-next v7 3/3] selftests: netfilter: Add RFC-7597 Section 5.1 PSID selftests, Cole Dishington
  • [RESEND PATCH net-next v7 1/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API, Cole Dishington
  • [RESEND PATCH net-next v7 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
• [PATCH net v5 0/2] Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Cole Dishington
  • [PATCH net v5 2/2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Cole Dishington
    • Re: [PATCH net v5 2/2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Florian Westphal
  • [PATCH net v5 1/2] net: netfilter: Limit the number of ftp helper port attempts, Cole Dishington
    • Re: [PATCH net v5 1/2] net: netfilter: Limit the number of ftp helper port attempts, kernel test robot
    • Re: [PATCH net v5 1/2] net: netfilter: Limit the number of ftp helper port attempts, kernel test robot
    • Re: [PATCH net v5 1/2] net: netfilter: Limit the number of ftp helper port attempts, Florian Westphal
• [PATCH nf] netfilter: conntrack: serialize hash resizes and cleanups, Eric Dumazet
  • Re: [PATCH nf] netfilter: conntrack: serialize hash resizes and cleanups, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: serialize hash resizes and cleanups, Pablo Neira Ayuso
• [PATCH ulogd] NFLOG: fix seq global flag setting, Ken-ichirou MATSUZAWA
  • Re: [PATCH ulogd] NFLOG: fix seq global flag setting, Pablo Neira Ayuso
• [PATCH ulogd] XML: support nflog pkt output, Ken-ichirou MATSUZAWA
  • Re: [PATCH ulogd] XML: support nflog pkt output, Pablo Neira Ayuso
• [RFC PATCH libnetfilter_log] src: support conntrack XML output, Ken-ichirou MATSUZAWA
  • Re: [RFC PATCH libnetfilter_log] src: support conntrack XML output, Pablo Neira Ayuso
    • [PATCH libnf-log] src: add conntrack ID to XML output, Ken-ichirou MATSUZAWA
      • Re: [PATCH libnf-log] src: add conntrack ID to XML output, Pablo Neira Ayuso
• [PATCH nf] netfilter: log: work around missing softdep backend module, Florian Westphal
• [PATCH nf] netfilter: iptable_raw: drop bogus net_init annotation, Florian Westphal
  • Re: [PATCH nf] netfilter: iptable_raw: drop bogus net_init annotation, Pablo Neira Ayuso
• [PATCH libnetfilter_queue] src: build: Stop build_man.sh from deleting short Detailed Descriptions, Duncan Roe
  • Re: [PATCH libnetfilter_queue] src: build: Stop build_man.sh from deleting short Detailed Descriptions, Florian Westphal
• [syzbot] general protection fault in nf_tables_dump_rules, syzbot
• [PATCH libnetfilter_log v2] src: doc: revise doxygen for all other modules, Duncan Roe
  • Re: [PATCH libnetfilter_log v2] src: doc: revise doxygen for all other modules, Duncan Roe
• [PATCH nft] netlink: reset temporary set element stmt list after list splice, Pablo Neira Ayuso
• [PATCH nft,v2] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}, Pablo Neira Ayuso
  • Re: [PATCH nft,v2] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}, Jeremy Sowden
    • Re: [PATCH nft,v2] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}, Pablo Neira Ayuso
• [PATCH nft] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}, Pablo Neira Ayuso
• list vmap counter errot, Martin Zatloukal
  • Re: list vmap counter errot, Pablo Neira Ayuso
    • Message not available
      • Message not available
        • Message not available
          • Re: list vmap counter errot, Pablo Neira Ayuso
• [PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Cole Dishington
  • Re: [PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Florian Westphal
    • Re: [PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Cole Dishington
      • Re: [PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Florian Westphal
• [PATCH libnetfilter_log] src: doc: revise doxygen for all other modules, Duncan Roe
  • Re: [PATCH libnetfilter_log] src: doc: revise doxygen for all other modules, Duncan Roe
• [PATCH libnetfilter_log v3] src: doc: revise doxygen for module "Netlink message helper functions", Duncan Roe
  • Re: [PATCH libnetfilter_log v3] src: doc: revise doxygen for module "Netlink message helper functions", Pablo Neira Ayuso
• [iptables PATCH] ebtables: Avoid dropping policy when flushing, Phil Sutter
  • Re: [iptables PATCH] ebtables: Avoid dropping policy when flushing, Phil Sutter
• [PATCH nf 0/2] netfilter: nf_nat_masquerade: don't block rtnl lock, Florian Westphal
  • [PATCH nf 1/2] netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic, Florian Westphal
  • [PATCH nf 2/2] netfilter: nf_nat_masquerade: defer conntrack walk to work queue, Florian Westphal
  • Re: [PATCH nf 0/2] netfilter: nf_nat_masquerade: don't block rtnl lock, Pablo Neira Ayuso
• [PATCH net v3] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Cole Dishington
  • Re: [PATCH net v3] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Florian Westphal
• [PATCH nft] src: revert hashtable for expression handlers, Pablo Neira Ayuso
• Python bindings crash when more than one Nftables is instantiated, Eugene Crosser
  • Re: Python bindings crash when more than one Nftables is instantiated, Pablo Neira Ayuso
• [xtables-addons] xt_ipp2p: add ipv6 module alias, Jeremy Sowden
  • Re: [xtables-addons] xt_ipp2p: add ipv6 module alias, Jan Engelhardt
  • Message not available
    • Re: [xtables-addons] xt_ipp2p: add ipv6 module alias, Jeremy Sowden
      • Message not available
        • Re: [xtables-addons] xt_ipp2p: add ipv6 module alias, Jan Engelhardt
          • Message not available
            • Re: [xtables-addons] xt_ipp2p: add ipv6 module alias, Jeremy Sowden
              • Re: [xtables-addons] xt_ipp2p: add ipv6 module alias, kaskada
              • Re: [xtables-addons] xt_ipp2p: add ipv6 module alias, kaskada
                • Re: [xtables-addons] xt_ipp2p: add ipv6 module alias, Jeremy Sowden
• [xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels, Jeremy Sowden
  • Message not available
    • Re: [xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels, Jeremy Sowden
  • Re: [xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels, Jan Engelhardt
• [PATCH nf] netfilter: nf_tables: Fix oversized kvmalloc() calls, Pablo Neira Ayuso
• [syzbot] WARNING: kmalloc bug in hash_ipportip_create, syzbot
• [xtables-addons 0/4] IPv6 support for xt_ipp2p, Jeremy Sowden
  • [xtables-addons 2/4] xt_ipp2p: move the protocol-specific code out into separate functions, Jeremy Sowden
  • [xtables-addons 4/4] xt_ipp2p: add ipv6 support, Jeremy Sowden
  • [xtables-addons 3/4] xt_ipp2p: move result printing code into separate functions, Jeremy Sowden
  • [xtables-addons 1/4] xt_ipp2p: don't search haystack if it's empty, Jeremy Sowden
  • Message not available
    • Re: [xtables-addons 0/4] IPv6 support for xt_ipp2p, Jeremy Sowden
  • Re: [xtables-addons 0/4] IPv6 support for xt_ipp2p, Jan Engelhardt
• Re: [syzbot] WARNING in __percpu_ref_exit (2), syzbot
  • Re: [syzbot] WARNING in __percpu_ref_exit (2), Dmitry Vyukov
    • Re: [syzbot] WARNING in __percpu_ref_exit (2), Pavel Begunkov
      • Re: [syzbot] WARNING in __percpu_ref_exit (2), syzbot
        • Re: [syzbot] WARNING in __percpu_ref_exit (2), Dmitry Vyukov
• [syzbot] KASAN: use-after-free Read in nft_table_lookup (2), syzbot
  • [PATCH nf] netfilter: nf_tables: unlink table before deleting it, Florian Westphal
    • Re: [PATCH nf] netfilter: nf_tables: unlink table before deleting it, Pablo Neira Ayuso
• [PATCH libnetfilter_log] src: make nflog_open_nfnl() static, Duncan Roe
  • Re: [PATCH libnetfilter_log] src: make nflog_open_nfnl() static, Pablo Neira Ayuso
• [PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset, Jeremy Sowden
  • Re: [PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset, Florian Westphal
    • Re: [PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset, Jeremy Sowden
  • Re: [PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset, Pablo Neira Ayuso
• module ipp2p (xtables) for ip6tables? No such file or directory..., kaskada
  • Re: module ipp2p (xtables) for ip6tables? No such file or directory..., Jeremy Sowden
• [PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20, Andrea Claudi
  • Re: [PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20, Julian Anastasov
  • Re: [PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20, Simon Horman
  • Re: [PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20, Pablo Neira Ayuso
• [PATCH] libnetfilter_queue: src/nlmsg.c: SECCTX can be of any length, Topi Miettinen
  • Re: [PATCH] libnetfilter_queue: src/nlmsg.c: SECCTX can be of any length, Florian Westphal
• [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y, Florian Westphal
  • [PATCH 5.10.y 1/3] netfilter: nftables: avoid potential overflows on 32bit arches, Florian Westphal
  • [PATCH 5.10.y 3/3] netfilter: nftables: clone set element expression template, Florian Westphal
  • [PATCH 5.10.y 2/3] netfilter: nf_tables: initialize set before expression setup, Florian Westphal
  • Re: [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y, Greg KH
    • Re: [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y, Salvatore Bonaccorso
      • Re: [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y, Florian Westphal
• [PATCH AUTOSEL 5.10 124/176] net: Fix offloading indirect devices dependency on qdisc order creation, Sasha Levin
• [PATCH AUTOSEL 5.13 156/219] net: Fix offloading indirect devices dependency on qdisc order creation, Sasha Levin
• [PATCH AUTOSEL 5.13 082/219] netfilter: nft_compat: use nfnetlink_unicast(), Sasha Levin
• [PATCH AUTOSEL 5.14 176/252] net: Fix offloading indirect devices dependency on qdisc order creation, Sasha Levin
• [PATCH AUTOSEL 5.14 096/252] netfilter: nft_compat: use nfnetlink_unicast(), Sasha Levin
• [syzbot] WARNING: kmalloc bug in hash_ipport_create, syzbot
  • Re: [syzbot] WARNING: kmalloc bug in hash_ipport_create, syzbot
• [PATCH nf 0/5] netfilter: conntrack: make zone id part of conntrack hash, Florian Westphal
  • [PATCH nf 1/5] netfilter: conntrack: make connection tracking table less predictable, Florian Westphal
  • [PATCH nf 1/5] netfilter: conntrack: make max chain length random, Florian Westphal
  • [PATCH nf 2/5] netfilter: conntrack: include zone id in tuple hash again, Florian Westphal
  • [PATCH nf 3/5] netfilter: nat: include zone id in nat table hash again, Florian Westphal
  • [PATCH nf 4/5] selftests: netfilter: add selftest for directional zone support, Florian Westphal
  • [PATCH nf 5/5] selftests: netfilter: add zone stress test with colliding tuples, Florian Westphal
  • Re: [PATCH nf 0/5] netfilter: conntrack: make zone id part of conntrack hash, Pablo Neira Ayuso
• [PATCH libnetfilter_log] utils: nfulnl_test: Print meaningful error messages, Duncan Roe
  • Re: [PATCH libnetfilter_log] utils: nfulnl_test: Print meaningful error messages, Pablo Neira Ayuso
• [PATCH libnetfilter_log v2] src: doc: revise doxygen for module "Netlink message helper functions", Duncan Roe
• [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Cole Dishington
  • Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, kernel test robot
  • Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Florian Westphal
    • Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Jan Engelhardt
      • Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Duncan Roe
        • Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, Jan Engelhardt
  • Re: [PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED, kernel test robot
• [PATCH nft] doc: nfnetlink_log allows one single process through unicast, Pablo Neira Ayuso
• [PATCH nft] netlink: rework range_expr_to_prefix(), Pablo Neira Ayuso
• [iptables PATCH 1/7] tests: iptables-test: Fix missing chain case, Phil Sutter
  • [iptables PATCH 2/7] tests: xlate-test: Don't skip any input after the first empty line, Phil Sutter
  • [iptables PATCH 4/7] tests: iptables-test: Print errors to stderr, Phil Sutter
  • [iptables PATCH 5/7] tests: xlate-test: Exit non-zero on error, Phil Sutter
  • [iptables PATCH 6/7] tests: iptables-test: Exit non-zero on error, Phil Sutter
  • [iptables PATCH 7/7] tests: shell: Return non-zero on error, Phil Sutter
  • [iptables PATCH 3/7] tests: xlate-test: Print errors to stderr, Phil Sutter
• [PATCH 1/1] netfilter: ipset: Fix oversized kvmalloc() calls, Jozsef Kadlecsik
  • Re: [PATCH 1/1] netfilter: ipset: Fix oversized kvmalloc() calls, Pablo Neira Ayuso
• [PATCH nft] doc: refer to ulogd manpage, Pablo Neira Ayuso
• [PATCH nft] doc: Missing NFT_CTX_OUTPUT_NUMERIC_SYMBOL in libnftables documentation, Pablo Neira Ayuso
• [PATCH nft] meta: skip -T for hour and date format, Pablo Neira Ayuso
• [PATCH libnetfilter_log] src: consistently use `gh` in code, code snippets and examples, Duncan Roe
  • Re: [PATCH libnetfilter_log] src: consistently use `gh` in code, code snippets and examples, Pablo Neira Ayuso
• [PATCH nftables] doc: libnflog handles `log group`, not libnfq, Duncan Roe
  • Re: [PATCH nftables] doc: libnflog handles `log group`, not libnfq, Pablo Neira Ayuso
• [PATCH nft] src: Check range bounds before converting to prefix, Xiao Liang
  • Re: [PATCH nft] src: Check range bounds before converting to prefix, Pablo Neira Ayuso
    • Re: [PATCH nft] src: Check range bounds before converting to prefix, Xiao Liang
  • Re: [PATCH nft] src: Check range bounds before converting to prefix, Pablo Neira Ayuso
• [net-next v4] extensions: masquerade: Add RFC-7597 section 5.1 PSID support, Cole Dishington
• [syzbot] WARNING: kmalloc bug in hash_mac_create, syzbot
• [PATCH libnetfilter_log] src: doc: revise doxygen for module "Netlink message helper functions", Duncan Roe
  • Re: [PATCH libnetfilter_log] src: doc: revise doxygen for module "Netlink message helper functions", Pablo Neira Ayuso
    • Re: [PATCH libnetfilter_log] src: doc: revise doxygen for module "Netlink message helper functions", Duncan Roe
• [syzbot] WARNING: kmalloc bug in hash_ipportnet_create, syzbot
• [syzbot] WARNING: kmalloc bug in hash_netport_create, syzbot
  • Re: [syzbot] WARNING: kmalloc bug in hash_netport_create, Eric Dumazet
  • Re: [syzbot] WARNING: kmalloc bug in hash_netport_create, syzbot
• [syzbot] WARNING: kmalloc bug in hash_ipmark_create, syzbot
  • Re: [syzbot] WARNING: kmalloc bug in hash_ipmark_create, Eric Dumazet
• [syzbot] WARNING: kmalloc bug in hash_ipmac_create, syzbot
  • Re: [syzbot] WARNING: kmalloc bug in hash_ipmac_create, Eric Dumazet
• [syzbot] WARNING: kmalloc bug in hash_net_create, syzbot
  • Re: [syzbot] WARNING: kmalloc bug in hash_net_create, Eric Dumazet
    • Re: [syzbot] WARNING: kmalloc bug in hash_net_create, Jozsef Kadlecsik
  • Re: [syzbot] WARNING: kmalloc bug in hash_net_create, syzbot
• [syzbot] WARNING: kmalloc bug in nf_tables_newset, syzbot
  • Re: [syzbot] WARNING: kmalloc bug in nf_tables_newset, Eric Dumazet
  • Re: [syzbot] WARNING: kmalloc bug in nf_tables_newset, syzbot
• [syzbot] WARNING: kmalloc bug in hash_ip_create, syzbot
  • Re: [syzbot] WARNING: kmalloc bug in hash_ip_create, Eric Dumazet
  • Re: [syzbot] WARNING: kmalloc bug in hash_ip_create, syzbot
  • Re: [syzbot] WARNING: kmalloc bug in hash_ip_create, Jozsef Kadlecsik
• [PATCH nf] netfilter: socket: icmp6: fix use-after-scope, Benjamin Hesmans
  • Re: [PATCH nf] netfilter: socket: icmp6: fix use-after-scope, Florian Westphal
  • Re: [PATCH nf] netfilter: socket: icmp6: fix use-after-scope, Pablo Neira Ayuso
• [PATCH nft] include: add NFT_CTX_OUTPUT_NUMERIC_TIME to NFT_CTX_OUTPUT_NUMERIC_ALL, Pablo Neira Ayuso
• [PATCH nft] datatype: time_print() ignores -T, Pablo Neira Ayuso
• [PATCH libnetfilter_queue] build: doc: Fix rendering of verbatim '\n"' in man pages, Duncan Roe
  • <Possible follow-ups>
  • [PATCH libnetfilter_queue] build: doc: Fix rendering of verbatim '\n"' in man pages, Duncan Roe
    • Re: [PATCH libnetfilter_queue] build: doc: Fix rendering of verbatim '\n"' in man pages, Pablo Neira Ayuso
• [PATCH iptables] Fix a few doc typos, Štěpán Němec
  • Re: [PATCH iptables] Fix a few doc typos, Phil Sutter
• [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty, Štěpán Němec
  • Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty, Phil Sutter
    • Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty, Štěpán Němec
      • Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty, Phil Sutter
        • Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty, Štěpán Němec
          • Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty, Phil Sutter
            • Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty, Štěpán Němec
              • Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty, Phil Sutter
                • Re: [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty, Štěpán Němec
• [PATCH libnetfilter_log 0/1] build: doc: `make` generates requested documentation, Duncan Roe
  • [PATCH libnetfilter_log 1/1] build: doc: `make` generates requested documentation, Duncan Roe
• [nft PATCH] parser_json: Fix error reporting for invalid syntax, Phil Sutter
• [PATCH libnetfilter_log 0/1] src: doc: Eliminate doxygen warnings, Duncan Roe
  • [PATCH libnetfilter_log 1/1] src: doc: Eliminate doxygen warnings, Duncan Roe
    • Re: [PATCH libnetfilter_log 1/1] src: doc: Eliminate doxygen warnings, Pablo Neira Ayuso
• Netdevconf 0x15 videos, slides and papers up, Jamal Hadi Salim
• [iptables PATCH 1/2] nft: Use xtables_malloc() in mnl_err_list_node_add(), Phil Sutter
  • [iptables PATCH 2/2] nft: Use xtables_{m,c}alloc() everywhere, Phil Sutter
• [PATCH libnetfilter_log 0/3] Miscellaneous cleanups, Duncan Roe
  • [PATCH libnetfilter_log 1/3] src: whitespace: Remove trailing whitespace and inconsistent indents, Duncan Roe
  • [PATCH libnetfilter_log 2/3] build: doc: reduce doxygen.cfg.in to non-default entries only, Duncan Roe
  • [PATCH libnetfilter_log 3/3] build: doc: remove trailing whitespace from doxygen.cfg.in, Duncan Roe
  • Re: [PATCH libnetfilter_log 0/3] Miscellaneous cleanups, Pablo Neira Ayuso
• [PATCH nft 1/2] netlink_delinearize: incorrect meta protocol dependency kill again, Pablo Neira Ayuso
  • [PATCH nft 2/2] rule: remove redundant meta protocol from the evaluation step, Pablo Neira Ayuso
• [iptables PATCH] extensions: libxt_mac: Fix for missing space in listing, Phil Sutter
• Patch for iptables v 1.8.7 mac extension, a.wojcik hyp.home.pl
  • Re: Patch for iptables v 1.8.7 mac extension, Jan Engelhardt
• [PATCH libnetfilter_queue] build: doc: Be sure to rerun doxygen after ./configure, Duncan Roe
  • Re: [PATCH libnetfilter_queue] build: doc: Be sure to rerun doxygen after ./configure, Pablo Neira Ayuso
• [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Jeremy Sowden
  • [PATCH libnetfilter_log 2/6] build: remove references to non-existent man-pages., Jeremy Sowden
  • [PATCH libnetfilter_log 1/6] Add doxygen directory to .gitignore., Jeremy Sowden
  • [PATCH libnetfilter_log 3/6] doc: fix typo's in example., Jeremy Sowden
  • [PATCH libnetfilter_log 6/6] libipulog: fill in missing packet fields., Jeremy Sowden
  • [PATCH libnetfilter_log 5/6] libipulog: use correct index to find attribute in packet., Jeremy Sowden
  • [PATCH libnetfilter_log 4/6] src: use calloc instead of malloc + memset., Jeremy Sowden
  • Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Jan Engelhardt
    • Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Jeremy Sowden
  • Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Pablo Neira Ayuso
    • Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Duncan Roe
      • Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Jeremy Sowden
        • Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Duncan Roe
          • Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Jeremy Sowden
    • Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Jeremy Sowden
      • Re: [PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`., Pablo Neira Ayuso
• [PATCH libnetfilter_queue v3 1/6] build: doc: Fix man pages, Duncan Roe
  • [PATCH libnetfilter_queue v3 2/6] build: doc: Add a man page post-processor to build_man.sh, Duncan Roe
    • Re: [PATCH libnetfilter_queue v3 2/6] build: doc: Add a man page post-processor to build_man.sh, Pablo Neira Ayuso
  • [PATCH libnetfilter_queue v3 3/6] build: doc: Avoid having to special-case `make distcheck`, Duncan Roe
    • Re: [PATCH libnetfilter_queue v3 3/6] build: doc: Avoid having to special-case `make distcheck`, Pablo Neira Ayuso
  • [PATCH libnetfilter_queue v3 4/6] build: doc: fix `make distcleancheck`, Duncan Roe
    • Re: [PATCH libnetfilter_queue v3 4/6] build: doc: fix `make distcleancheck`, Pablo Neira Ayuso
  • [PATCH libnetfilter_queue v3 5/6] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
    • Re: [PATCH libnetfilter_queue v3 5/6] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
  • [PATCH libnetfilter_queue v3 6/6] build: doc: Eliminate warning from ./autogen.sh, Duncan Roe
    • [PATCH libnetfilter_queue v2] build: doc: Eliminate warning from ./autogen.sh, Duncan Roe
      • Re: [PATCH libnetfilter_queue v2] build: doc: Eliminate warning from ./autogen.sh, Pablo Neira Ayuso
  • Verion info, Duncan Roe
  • Re: [PATCH libnetfilter_queue v3 1/6] build: doc: Fix man pages, Pablo Neira Ayuso
• libnetfilter_queue: automake portability warning, Jeremy Sowden
  • Re: libnetfilter_queue: automake portability warning, Duncan Roe
  • Re: libnetfilter_queue: automake portability warning, Jan Engelhardt
    • Re: libnetfilter_queue: automake portability warning, Duncan Roe
      • Re: libnetfilter_queue: automake portability warning, Pablo Neira Ayuso
        • Re: libnetfilter_queue: automake portability warning, Duncan Roe
• [PATCH libnetfilter_log] build: remove broken code from autogen.sh., Jeremy Sowden
  • Re: [PATCH libnetfilter_log] build: remove broken code from autogen.sh., Pablo Neira Ayuso
• [PATCH nf 0/3] netfilter: conntrack: switch to siphash, Florian Westphal
  • [PATCH nf 1/3] netfilter: conntrack: sanitize table size default settings, Florian Westphal
  • [PATCH nf 2/3] netfilter: conntrack: switch to siphash, Florian Westphal
  • [PATCH nf 3/3] netfilter: conntrack: refuse insertion if chain has grown too large, Florian Westphal
  • [PATCH nf 3/3] netfilter: refuse insertion if chain has grown too large, Florian Westphal
  • Re: [PATCH nf 0/3] netfilter: conntrack: switch to siphash, Pablo Neira Ayuso
• [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill, Pablo Neira Ayuso
  • Re: [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill, Florian Westphal
  • Re: [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill, Phil Sutter
    • Re: [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill, Pablo Neira Ayuso
      • Re: [PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill, Pablo Neira Ayuso
• [Bug] Reverse translation skips "leading" meta protocol match, Tom Yan
  • Re: [Bug] Reverse translation skips "leading" meta protocol match, Tom Yan
  • Re: [Bug] Reverse translation skips "leading" meta protocol match, Pablo Neira Ayuso
• [PATCH libnetfilter_queue v2 1/5] build: doc: Fix man pages, Duncan Roe
  • [PATCH libnetfilter_queue v2 2/5] build: doc: Add a man page post-processor to build_man.sh, Duncan Roe
  • [PATCH libnetfilter_queue v2 3/5] build: doc: Avoid having to special-case `make distcheck`, Duncan Roe
  • [PATCH libnetfilter_queue v2 4/5] build: doc: fix `make distcleancheck`, Duncan Roe
  • [PATCH libnetfilter_queue v2 5/5] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
• [PATCH nft] cache: provide a empty list for flowtables and objects when request fails, Pablo Neira Ayuso
• [PATCH libnetfilter_queue] build: doc: Fix man pages, Duncan Roe
• Request for a backport to Linux v5.4, Gianluca Anzolin
  • Re: Request for a backport to Linux v5.4, Florian Westphal
    • Re: Request for a backport to Linux v5.4, Sasha Levin
• [PATCH nft] cache: skip set element netlink dump for add/delete element command, Pablo Neira Ayuso
• [PATCH] netfilter: x_tables: handle xt_register_template() returning an error value, Lukas Bulwahn
  • Re: [PATCH] netfilter: x_tables: handle xt_register_template() returning an error value, Florian Westphal
  • Re: [PATCH] netfilter: x_tables: handle xt_register_template() returning an error value, Pablo Neira Ayuso
• Suspicious pattern for use of function xt_register_template(), Lukas Bulwahn
  • Re: Suspicious pattern for use of function xt_register_template(), Florian Westphal
    • Re: Suspicious pattern for use of function xt_register_template(), Lukas Bulwahn
• [PATCH 0/2] Reusing nfct handle for bulk ct loads, Mikhail Sennikovsky
  • [PATCH 1/2] tests/conntrack: script for stress-testing ct load, Mikhail Sennikovsky
    • Re: [PATCH 1/2] tests/conntrack: script for stress-testing ct load, Pablo Neira Ayuso
  • [PATCH 2/2] conntrack: use same nfct handle for all entries, Mikhail Sennikovsky