Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- [PATCH nft,v2] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect},
Pablo Neira Ayuso
- [PATCH nft] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}, Pablo Neira Ayuso
- list vmap counter errot,
Martin Zatloukal
[PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED,
Cole Dishington
[PATCH libnetfilter_log] src: doc: revise doxygen for all other modules,
Duncan Roe
[PATCH libnetfilter_log v3] src: doc: revise doxygen for module "Netlink message helper functions",
Duncan Roe
[iptables PATCH] ebtables: Avoid dropping policy when flushing,
Phil Sutter
[PATCH nf 0/2] netfilter: nf_nat_masquerade: don't block rtnl lock,
Florian Westphal
[PATCH net v3] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED,
Cole Dishington
[PATCH nft] src: revert hashtable for expression handlers, Pablo Neira Ayuso
Python bindings crash when more than one Nftables is instantiated,
Eugene Crosser
[xtables-addons] xt_ipp2p: add ipv6 module alias,
Jeremy Sowden
[xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels,
Jeremy Sowden
Re: [xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels, Jan Engelhardt
[PATCH nf] netfilter: nf_tables: Fix oversized kvmalloc() calls, Pablo Neira Ayuso
[syzbot] WARNING: kmalloc bug in hash_ipportip_create, syzbot
[xtables-addons 0/4] IPv6 support for xt_ipp2p,
Jeremy Sowden
Re: [xtables-addons 0/4] IPv6 support for xt_ipp2p, Jan Engelhardt
Re: [syzbot] WARNING in __percpu_ref_exit (2),
syzbot
[syzbot] KASAN: use-after-free Read in nft_table_lookup (2),
syzbot
[PATCH libnetfilter_log] src: make nflog_open_nfnl() static,
Duncan Roe
[PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset,
Jeremy Sowden
module ipp2p (xtables) for ip6tables? No such file or directory...,
kaskada
[PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20,
Andrea Claudi
[PATCH] libnetfilter_queue: src/nlmsg.c: SECCTX can be of any length,
Topi Miettinen
[PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y,
Florian Westphal
[PATCH AUTOSEL 5.10 124/176] net: Fix offloading indirect devices dependency on qdisc order creation, Sasha Levin
[PATCH AUTOSEL 5.13 156/219] net: Fix offloading indirect devices dependency on qdisc order creation, Sasha Levin
[PATCH AUTOSEL 5.13 082/219] netfilter: nft_compat: use nfnetlink_unicast(), Sasha Levin
[PATCH AUTOSEL 5.14 176/252] net: Fix offloading indirect devices dependency on qdisc order creation, Sasha Levin
[PATCH AUTOSEL 5.14 096/252] netfilter: nft_compat: use nfnetlink_unicast(), Sasha Levin
[syzbot] WARNING: kmalloc bug in hash_ipport_create,
syzbot
[PATCH nf 0/5] netfilter: conntrack: make zone id part of conntrack hash,
Florian Westphal
[PATCH libnetfilter_log] utils: nfulnl_test: Print meaningful error messages,
Duncan Roe
[PATCH libnetfilter_log v2] src: doc: revise doxygen for module "Netlink message helper functions", Duncan Roe
[PATCH net v2] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED,
Cole Dishington
[PATCH nft] doc: nfnetlink_log allows one single process through unicast, Pablo Neira Ayuso
[PATCH nft] netlink: rework range_expr_to_prefix(), Pablo Neira Ayuso
[iptables PATCH 1/7] tests: iptables-test: Fix missing chain case,
Phil Sutter
[PATCH 1/1] netfilter: ipset: Fix oversized kvmalloc() calls,
Jozsef Kadlecsik
[PATCH nft] doc: refer to ulogd manpage, Pablo Neira Ayuso
[PATCH nft] doc: Missing NFT_CTX_OUTPUT_NUMERIC_SYMBOL in libnftables documentation, Pablo Neira Ayuso
[PATCH nft] meta: skip -T for hour and date format, Pablo Neira Ayuso
[PATCH libnetfilter_log] src: consistently use `gh` in code, code snippets and examples,
Duncan Roe
[PATCH nftables] doc: libnflog handles `log group`, not libnfq,
Duncan Roe
[PATCH nft] src: Check range bounds before converting to prefix,
Xiao Liang
[net-next v4] extensions: masquerade: Add RFC-7597 section 5.1 PSID support, Cole Dishington
[syzbot] WARNING: kmalloc bug in hash_mac_create, syzbot
[PATCH libnetfilter_log] src: doc: revise doxygen for module "Netlink message helper functions",
Duncan Roe
[syzbot] WARNING: kmalloc bug in hash_ipportnet_create, syzbot
[syzbot] WARNING: kmalloc bug in hash_netport_create,
syzbot
[syzbot] WARNING: kmalloc bug in hash_ipmark_create,
syzbot
[syzbot] WARNING: kmalloc bug in hash_ipmac_create,
syzbot
[syzbot] WARNING: kmalloc bug in hash_net_create,
syzbot
[syzbot] WARNING: kmalloc bug in nf_tables_newset,
syzbot
[syzbot] WARNING: kmalloc bug in hash_ip_create,
syzbot
[PATCH nf] netfilter: socket: icmp6: fix use-after-scope,
Benjamin Hesmans
[PATCH nft] include: add NFT_CTX_OUTPUT_NUMERIC_TIME to NFT_CTX_OUTPUT_NUMERIC_ALL, Pablo Neira Ayuso
[PATCH nft] datatype: time_print() ignores -T, Pablo Neira Ayuso
[PATCH libnetfilter_queue] build: doc: Fix rendering of verbatim '\n"' in man pages,
Duncan Roe
[PATCH iptables] Fix a few doc typos,
Štěpán Němec
[PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty,
Štěpán Němec
[PATCH libnetfilter_log 0/1] build: doc: `make` generates requested documentation,
Duncan Roe
[nft PATCH] parser_json: Fix error reporting for invalid syntax, Phil Sutter
[PATCH libnetfilter_log 0/1] src: doc: Eliminate doxygen warnings,
Duncan Roe
Netdevconf 0x15 videos, slides and papers up, Jamal Hadi Salim
[iptables PATCH 1/2] nft: Use xtables_malloc() in mnl_err_list_node_add(),
Phil Sutter
[PATCH libnetfilter_log 0/3] Miscellaneous cleanups,
Duncan Roe
[PATCH nft 1/2] netlink_delinearize: incorrect meta protocol dependency kill again,
Pablo Neira Ayuso
[iptables PATCH] extensions: libxt_mac: Fix for missing space in listing, Phil Sutter
Patch for iptables v 1.8.7 mac extension,
a.wojcik hyp.home.pl
[PATCH libnetfilter_queue] build: doc: Be sure to rerun doxygen after ./configure,
Duncan Roe
[PATCH libnetfilter_log 0/6] Implementation of some fields omitted by `ipulog_get_packet`.,
Jeremy Sowden
[PATCH libnetfilter_queue v3 1/6] build: doc: Fix man pages,
Duncan Roe
libnetfilter_queue: automake portability warning,
Jeremy Sowden
[PATCH libnetfilter_log] build: remove broken code from autogen.sh.,
Jeremy Sowden
[PATCH nf 0/3] netfilter: conntrack: switch to siphash,
Florian Westphal
[PATCH nft] netlink_delinearize: incorrect meta protocol dependency kill,
Pablo Neira Ayuso
[Bug] Reverse translation skips "leading" meta protocol match,
Tom Yan
[PATCH libnetfilter_queue v2 1/5] build: doc: Fix man pages,
Duncan Roe
[PATCH nft] cache: provide a empty list for flowtables and objects when request fails, Pablo Neira Ayuso
[PATCH libnetfilter_queue] build: doc: Fix man pages, Duncan Roe
Request for a backport to Linux v5.4,
Gianluca Anzolin
[PATCH nft] cache: skip set element netlink dump for add/delete element command, Pablo Neira Ayuso
[PATCH] netfilter: x_tables: handle xt_register_template() returning an error value,
Lukas Bulwahn
Suspicious pattern for use of function xt_register_template(),
Lukas Bulwahn
[PATCH 0/2] Reusing nfct handle for bulk ct loads,
Mikhail Sennikovsky
Seemingly random crashes with CONFIG_HARDENED_USERCOPY=y on ppc64be, Stijn Tintel
[PATCH xtables-addons 0/8] xt_condition: per-net improvements,
Jeremy Sowden
Old good cBPF and program size, alexandre.ferrieux
[PATCH libnetfilter_queue v4 1/4] build: doc: Fix NAME entry in man pages,
Duncan Roe
[PATCH] Add DWARF object files to .gitignore.,
Jeremy Sowden
Re: [PATCH net-next v4] net: ipvs: add sysctl_run_estimation to support disable estimation,
Julian Anastasov
[PATCH libnetfilter_queue v3 1/3] build: doc: Fix NAME entry in man pages,
Duncan Roe
[PATCH] xtables-addons 3.18 condition - Improved network namespace support,
Grzegorz Kuczyński
[PATCH nftables] src: Optimize prefix match only if is big-endian,
Xiao Liang
[PATCH nft,v3] src: queue: consolidate queue statement syntax, Pablo Neira Ayuso
[PATCH nft,v2] src: queue: consolidate queue statement syntax, Pablo Neira Ayuso
[PATCH nft] tests: shell: add nft-f/0022variables_0 dump file, Pablo Neira Ayuso
[PATCH nft] src: queue: consolidate queue statement syntax, Pablo Neira Ayuso
[PATCH nft] parser_bison: restore variable expression in queue statement, Pablo Neira Ayuso
[ANNOUNCE] nftables 1.0.0 release,
Pablo Neira Ayuso
[PATCH nf-next] netfilter: ctnetlink: missing counters and timestamp in nfnetlink_{log,queue}, Pablo Neira Ayuso
[PATCH v2 40/63] netfilter: conntrack: Use memset_startat() to zero struct nf_conn, Kees Cook
[PATCH v2 iptables] iptables-nft: allow removal of empty builtin chains, Florian Westphal
[PATCH v7 0/2] netfilter: add netfilter hooks to track SRv6-encapsulated flows,
Ryoga Saito
[PATCH v6 0/2] netfilter: add netfilter hooks to track SRv6-encapsulated flows,
Ryoga Saito
[PATCH AUTOSEL 5.4 3/5] netfilter: conntrack: collect all entries in one cycle, Sasha Levin
[PATCH AUTOSEL 4.19 3/4] netfilter: conntrack: collect all entries in one cycle, Sasha Levin
[PATCH AUTOSEL 5.10 5/9] netfilter: conntrack: collect all entries in one cycle, Sasha Levin
[PATCH AUTOSEL 5.13 07/12] netfilter: conntrack: collect all entries in one cycle, Sasha Levin
[PATCH AUTOSEL 5.13 06/12] netfilter: ipset: Limit the maximal range of consecutive elements to add/delete, Sasha Levin
[PATCH nf-next 0/5] netfilter: ecache: simplify event registration,
Florian Westphal
[PATCH nft] netlink_delinearize: skip flags / mask notation for singleton bitmask again, Pablo Neira Ayuso
[PATCH iptabes-nft] iptables-nft: allow removal of empty builtin chains,
Florian Westphal
[PATCH] libxt_ACCOUNT_cl: correct LDFLAGS variable name.,
Jeremy Sowden
nfnetlink_queue -- why linear lookup ?,
alexandre.ferrieux
[PATCH libnetfilter_queue v3 0/1] src: doc: Insert SYNOPSIS sections for man pages,
Duncan Roe
[PATCH nft] evaluate: expand variable containing set into multiple mappings, Pablo Neira Ayuso
[PATCH libnetfilter_queue v2 0/1] Insert SYNOPSIS sections for man pages,
Duncan Roe
[nft PATCH 1/3] tests: json_echo: Print errors to stderr,
Phil Sutter
[iptables PATCH] iptables-test: Make netns spawning more robust, Phil Sutter
[PATCH nft] evaluate: element key cannot in map cannot be a set, Pablo Neira Ayuso
[PATCH nft] tcpopt: bogus assertion on undefined options, Pablo Neira Ayuso
Netdevconf 0x15 slides and papers up,
Jamal Hadi Salim
[PATCH libnetfilter_queue] include: deprecate libnetfilter_queue/linux_nfnetlink_queue.h,
Pablo Neira Ayuso
[nft PATCH] tests/py: Make netns spawning more robust, Phil Sutter
[PATCH] netfiler: protect nft_ct_pcpu_template_refcnt with mutex,
Pavel Skripkin
[ANNOUNCE] ipset 7.15 released, Jozsef Kadlecsik
[PATCH libnetfilter_queue v2] build: doc: Fix NAME entry in man pages,
Duncan Roe
[PATCH 1/3] extensions: libtxt_NFLOG: use nft built-in logging instead of xt_NFLOG,
Kyle Bowman
[iptables PATCH] extensions: hashlimit: Fix tests with HZ=100, Phil Sutter
[syzbot] WARNING in destroy_conntrack,
syzbot
[syzbot] KASAN: use-after-free Read in nf_tables_dump_sets,
syzbot
[nft PATCH RFC] scanner: nat: Move to own scope,
Phil Sutter
[PATCH libnetfilter_queue] src: doc: Insert SYNOPSIS sections for man pages, Duncan Roe
[PATCH libnetfilter_queue] build: doc: Fix NAME entry in man pages,
Duncan Roe
[PATCH v5 0/2] netfilter: add netfilter hooks to track SRv6-encapsulated flows,
proelbtn
[PATCH libmnl] src: doc: Fix messed-up Netlink message batch diagram,
Duncan Roe
[syzbot] KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu,
syzbot
[PATCH libnetfilter_queue v2] build: If doxygen is not available, be sure to report "doxygen: no" to ./configure,
Duncan Roe
[PATCH libmnl] build: If doxygen is not available, be sure to report "doxygen: no" to ./configure,
Duncan Roe
[PATCH] netfilter: remove duplicate code,
Kangmin Park
[PATCH net 0/9,v2] Netfilter fixes for net,
Pablo Neira Ayuso
- [PATCH net 1/9] netfilter: ipset: Limit the maximal range of consecutive elements to add/delete, Pablo Neira Ayuso
- [PATCH net 2/9] netfilter: nf_conntrack_bridge: Fix memory leak when error, Pablo Neira Ayuso
- [PATCH net 3/9] netfilter: conntrack: collect all entries in one cycle, Pablo Neira Ayuso
- [PATCH net 4/9] netfilter: nfnetlink_hook: strip off module name from hookfn, Pablo Neira Ayuso
- [PATCH net 5/9] netfilter: nfnetlink_hook: missing chain family, Pablo Neira Ayuso
- [PATCH net 8/9] netfilter: conntrack: remove offload_pickup sysctl again, Pablo Neira Ayuso
- [PATCH net 6/9] netfilter: nfnetlink_hook: use the sequence number of the request message, Pablo Neira Ayuso
- [PATCH net 7/9] netfilter: nfnetlink_hook: Use same family as request message, Pablo Neira Ayuso
- [PATCH net 9/9] netfilter: nfnetlink_hook: translate inet ingress to netdev, Pablo Neira Ayuso
- Re: [PATCH net 0/9,v2] Netfilter fixes for net, Jakub Kicinski
[PATCH nf] netfilter: nfnetlink_hook: translate inet ingress to netdev, Pablo Neira Ayuso
[PATCH libnetfilter_queue] build: If doxygen is not available, be sure to report "doxygen: no" to ./configure,
Duncan Roe
[PATCH libnetfilter_queue v2] src: Stop users from accidentally using legacy linux_nfnetlink_queue.h,
Duncan Roe
[PATCH nf-next v2] netfilter: nf_queue: move hookfn registration out of struct net,
Florian Westphal
[PATCH nf-next] netfilter: nf_queue: move hookfn registration out of struct net, Florian Westphal
[syzbot] WARNING: proc registration bug in clusterip_tg_check (3),
syzbot
[PATCH iptables] ip6tables: masquerade: use fully-random so that nft can understand the rule,
Pavel Tikhomirov
[PATCH v2 nf] netfilter: conntrack: remove offload_pickup sysctl again,
Florian Westphal
[PATCH nf] netfilter: conntrack: remove offload_pickup sysctl again,
Florian Westphal
[PATCH] netfilter: ipset: fix uninitialized variable bug,
Dan Carpenter
[PATCH nf 1/2] netfilter: nfnetlink_hook: use the sequence number of the request message,
Pablo Neira Ayuso
[PATCH nft,v3] mnl: revisit hook listing, Pablo Neira Ayuso
[PATCH] netfilter: ipset: Fix maximal range check in hash_ipportnet4_uadt(),
Nathan Chancellor
[PATCH nf-next] x_tables: never register tables by default,
Florian Westphal
[iptables PATCH] tests/shell: Assert non-verbose mode is silent, Phil Sutter
[iptables PATCH] nft: Fix for non-verbose check command, Phil Sutter
[PATCH nft,v2] mnl: revisit hook listing, Pablo Neira Ayuso
[PATCH nf 1/2] netfilter: nfnetlink_hook: strip off module name from hookfn,
Pablo Neira Ayuso
[PATCH nft] mnl: revisit hook listing, Pablo Neira Ayuso
[PATCH v4 0/2] netfilter: add netfilter hooks to track SRv6-encapsulated flows,
proelbtn
[PATCH] conntrack-tools: support conntrack dump status filtering,
Florian Westphal
[PATCH nf-next 0/2] netfilter: ctnetlink: allow to filter dumps via ct->status,
Florian Westphal
[iptables PATCH] ebtables: Dump atomic waste,
Phil Sutter
[PATCH v3 0/2] netfilter: add netfilter hooks to track SRv6-encapsulated flows,
Ryoga Saito
[PATCH v2 0/2] net: add netfilter hooks to track SRv6-encapsulated flows,
Ryoga Saito
[PATCH v3] netfilter: nf_conntrack_bridge: Fix memory leak when error,
Yajun Deng
[PATCH v2] netfilter: nf_conntrack_bridge: Fix memory leak when error,
Yajun Deng
[iptables PATCH] doc: ebtables-nft.8: Adjust for missing atomic-options,
Phil Sutter
[PATCH 0/1] ipset patch for the nf tree v2,
Jozsef Kadlecsik
[ANNOUNCE] ipset 7.14 released, Jozsef Kadlecsik
[PATCH nft] tests: py: check more flag match transformations to compact syntax, Pablo Neira Ayuso
[PATCH] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED,
Cole Dishington
[PATCH nft,v2 1/3] tests: py: idempotent tcp flags & syn != 0 to tcp flag syn,
Pablo Neira Ayuso
[PATCH nft 1/2] tests: py: idempotent tcp flags & syn != 0 to tcp flag syn,
Pablo Neira Ayuso
[PATCH] netfilter: xt_NFLOG: allow 128 character log prefixes,
Kyle Bowman
[PATCH nft 1/3] expression: missing != in flagcmp expression print function,
Pablo Neira Ayuso
[nft] Regarding `tcp flags` (and a potential bug),
Tom Yan
[ANNOUNCE] ipset 7.13 released,
Jozsef Kadlecsik
[PATCH nf] netfilter: conntrack: collect all entries in one cycle,
Florian Westphal
[PATCH nft] evaluate: error reporting for missing statements in set/map declaration, Pablo Neira Ayuso
[PATCH nft] src: promote 'reject with icmp CODE' syntax, Pablo Neira Ayuso
[PATCH nft] parser_bison: parse number as reject icmp code, Pablo Neira Ayuso
[nft PATCH] tests: shell: Fix bogus testsuite failure with 100Hz,
Phil Sutter
[PATCH nft] parser_bison: stateful statement support in map, Pablo Neira Ayuso
[PATCH] netfilter: nf_conntrack_bridge: Fix not free when error,
Yajun Deng
Nf_nat_h323 module not working with Panasonic VCs,
Akshat Kakkar
[PATCH nft 1/2] src: fix nft_ctx_clear_include_paths in libnftables.map,
Pablo Neira Ayuso
[PATCH net 0/6] Netfilter fixes for net,
Pablo Neira Ayuso
- [PATCH net 3/6] netfilter: nft_last: avoid possible false sharing, Pablo Neira Ayuso
- [PATCH net 1/6] netfilter: nf_tables: fix audit memory leak in nf_tables_commit, Pablo Neira Ayuso
- [PATCH net 5/6] netfilter: nft_nat: allow to specify layer 4 protocol NAT only, Pablo Neira Ayuso
- [PATCH net 6/6] netfilter: nfnl_hook: fix unused variable warning, Pablo Neira Ayuso
- [PATCH net 2/6] netfilter: flowtable: avoid possible false sharing, Pablo Neira Ayuso
- [PATCH net 4/6] netfilter: conntrack: adjust stop timestamp to real expiry value, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH net 0/6] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/6] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/6] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/6] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH net 0/6] Netfilter fixes for net, Pablo Neira Ayuso
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
