Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH nf-next,v2] netfilter: nf_tables: add last expression, (continued)
  • Re: [PATCH nf-next,v2] netfilter: nf_tables: add last expression, kernel test robot
  • Re: [PATCH nf-next,v2] netfilter: nf_tables: add last expression, kernel test robot
• [PATCH nftables] rule: rework CMD_OBJ_SETELEMS logic, Pablo Neira Ayuso
• [PATCH nft 0/4] nftables: convert single-elem anon sets to compare operation, Florian Westphal
  • [PATCH nft 1/4] tests: ct: prefer normal cmp, Florian Westphal
  • [PATCH nft 2/4] tests: remove redundant test cases, Florian Westphal
  • [PATCH nft 3/4] evaluate: remove anon sets with exactly one element, Florian Westphal
  • [PATCH nft 4/4] tests: add test case for removal of anon sets with only a single element, Florian Westphal
• [PATCH nf-next v2 0/2] netfilter: new hook nfnl subsystem, Florian Westphal
  • [PATCH nf-next v2 1/2] netfilter: annotate nf_tables base hook ops, Florian Westphal
  • [PATCH nf-next v2 2/2] netfilter: add new hook nfnl subsystem, Florian Westphal
  • Re: [PATCH nf-next v2 0/2] netfilter: new hook nfnl subsystem, Pablo Neira Ayuso
• [syzbot] KMSAN: uninit-value in translate_table (2), syzbot
• [PATCH nf] netfilter: nf_tables: initialize set before expression setup, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: add last expression, Pablo Neira Ayuso
  • Re: [PATCH nf-next] netfilter: nf_tables: add last expression, Florian Westphal
    • Re: [PATCH nf-next] netfilter: nf_tables: add last expression, Pablo Neira Ayuso
• [PATCH iptables,v2 0/5] iptables-translation enhancements, Pablo Neira Ayuso
  • [PATCH iptables,v2 1/5] libxtables: extend xlate infrastructure, Pablo Neira Ayuso
  • [PATCH iptables,v2 2/5] tests: xlate-test: support multiline expectation, Pablo Neira Ayuso
  • [PATCH iptables,v2 3/5] extensions: libxt_connlimit: add translation, Pablo Neira Ayuso
  • [PATCH iptables,v2 4/5] extensions: libxt_tcp: rework translation to use flags match representation, Pablo Neira Ayuso
  • [PATCH iptables,v2 5/5] extensions: libxt_conntrack: simplify translation using negation, Pablo Neira Ayuso
• [PATCH nf-next 0/3] Control nf flow table timeouts, Oz Shlomo
  • [PATCH nf-next 1/3] netfilter: conntrack: Introduce tcp offload timeout configuration, Oz Shlomo
  • [PATCH nf-next 2/3] netfilter: conntrack: Introduce udp offload timeout configuration, Oz Shlomo
  • [PATCH nf-next 3/3] netfilter: flowtable: Set offload timeouts according to proto values, Oz Shlomo
  • Re: [PATCH nf-next 0/3] Control nf flow table timeouts, Pablo Neira Ayuso
    • Re: [PATCH nf-next 0/3] Control nf flow table timeouts, Marcelo Ricardo Leitner
      • Re: [PATCH nf-next 0/3] Control nf flow table timeouts, Oz Shlomo
• [PATCH iptables] extensions: libxt_conntrack: simplify translation using negation, Pablo Neira Ayuso
• [PATCH iptables] extensions: libxt_tcp: rework translation to use flags match representation, Pablo Neira Ayuso
• [PATCH nft] statement: connlimit: remove extra whitespace in print function, Pablo Neira Ayuso
• [PATCH iptables 1/2] libxtables: extend xlate infrastructure, Pablo Neira Ayuso
  • [PATCH iptables 2/2] extensions: libxt_connlimit: add translation, Pablo Neira Ayuso
• [PATCH nft] tests: py: update netdev reject test file, Florian Westphal
• [PATCH nft] json: catchall element support, Florian Westphal
• [syzbot] general protection fault in nft_set_elem_expr_alloc, syzbot
  • Re: [syzbot] general protection fault in nft_set_elem_expr_alloc, Pablo Neira Ayuso
    • Re: [syzbot] general protection fault in nft_set_elem_expr_alloc, Salvatore Bonaccorso
      • Re: [syzbot] general protection fault in nft_set_elem_expr_alloc, Greg KH
        • Re: [syzbot] general protection fault in nft_set_elem_expr_alloc, Florian Westphal
• [syzbot] general protection fault in lock_page_memcg, syzbot
• [iptables PATCH 0/9] Fix a bunch of static analyzer warnings, Phil Sutter
  • [iptables PATCH 6/9] iptables-apply: Drop unused variable, Phil Sutter
  • [iptables PATCH 8/9] libxtables: Introduce xtables_strdup() and use it everywhere, Phil Sutter
  • [iptables PATCH 1/9] libxtables: Drop leftover variable in xtables_numeric_to_ip6addr(), Phil Sutter
  • [iptables PATCH 4/9] nft: Avoid memleak in error path of nft_cmd_new(), Phil Sutter
  • [iptables PATCH 2/9] extensions: libebt_ip6: Drop unused variables, Phil Sutter
  • [iptables PATCH 9/9] extensions: libxt_string: Avoid buffer size warning for strncpy(), Phil Sutter
  • [iptables PATCH 5/9] nft: Avoid buffer size warnings copying iface names, Phil Sutter
  • [iptables PATCH 7/9] extensions: libebt_ip6: Use xtables_ip6parse_any(), Phil Sutter
  • [iptables PATCH 3/9] libxtables: Fix memleak in xtopt_parse_hostmask(), Phil Sutter
• [PATCH nft] json: fix parse of flagcmp expression, Florian Westphal
• [PATCH nft] json: fix base chain output, Florian Westphal
• [PATCH nf-next] netfilter: nftables: add nf_ct_pernet() helper function, Pablo Neira Ayuso
• Re: [syzbot] WARNING in idr_get_next, syzbot
  • Re: [syzbot] WARNING in idr_get_next, Matthew Wilcox
    • Re: [syzbot] WARNING in idr_get_next, syzbot
    • Re: [syzbot] WARNING in idr_get_next, syzbot
    • Re: [syzbot] WARNING in idr_get_next, Dmitry Vyukov
• [PATCH net-next 00/16] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 01/16] netfilter: nft_exthdr: Support SCTP chunks, Pablo Neira Ayuso
    • Re: [PATCH net-next 01/16] netfilter: nft_exthdr: Support SCTP chunks, patchwork-bot+netdevbpf
  • [PATCH net-next 02/16] netfilter: nft_set_pipapo_avx2: Skip LDMXCSR, we don't need a valid MXCSR state, Pablo Neira Ayuso
  • [PATCH net-next 03/16] netfilter: add and use nft_set_do_lookup helper, Pablo Neira Ayuso
  • [PATCH net-next 05/16] netfilter: Remove leading spaces in Kconfig, Pablo Neira Ayuso
  • [PATCH net-next 08/16] netfilter: use nfnetlink_unicast(), Pablo Neira Ayuso
  • [PATCH net-next 07/16] netfilter: xt_CT: Remove redundant assignment to ret, Pablo Neira Ayuso
  • [PATCH net-next 06/16] netfilter: x_tables: improve limit_mt scalability, Pablo Neira Ayuso
  • [PATCH net-next 04/16] netfilter: nf_tables: prefer direct calls for set lookups, Pablo Neira Ayuso
  • [PATCH net-next 11/16] netfilter: nf_tables: add and use nft_sk helper, Pablo Neira Ayuso
  • [PATCH net-next 10/16] netfilter: reduce size of nf_hook_state on 32bit platforms, Pablo Neira Ayuso
  • [PATCH net-next 09/16] netfilter: x_tables: reduce xt_action_param by 8 byte, Pablo Neira Ayuso
  • [PATCH net-next 12/16] netfilter: nf_tables: add and use nft_thoff helper, Pablo Neira Ayuso
  • [PATCH net-next 13/16] netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec(), Pablo Neira Ayuso
  • [PATCH net-next 15/16] netfilter: nft_set_pipapo_avx2: fix up description warnings, Pablo Neira Ayuso
  • [PATCH net-next 14/16] netfilter: nf_tables: remove xt_action_param from nft_pktinfo, Pablo Neira Ayuso
  • [PATCH net-next 16/16] netfilter: fix clang-12 fmt string warnings, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net-next 00/16] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH net-next 01/16] netfilter: ctnetlink: support CTA_FILTER for flush, Pablo Neira Ayuso
      • Re: [PATCH net-next 01/16] netfilter: ctnetlink: support CTA_FILTER for flush, patchwork-bot+netdevbpf
    • [PATCH net-next 02/16] netfilter: nft_counter: Use u64_stats_t for statistic., Pablo Neira Ayuso
    • [PATCH net-next 03/16] netfilter: Use kmemdup_array instead of kmemdup for multiple allocation, Pablo Neira Ayuso
    • [PATCH net-next 06/16] netfilter: nf_tables: Correct spelling in nf_tables.h, Pablo Neira Ayuso
    • [PATCH net-next 04/16] netfilter: conntrack: Convert to use ERR_CAST(), Pablo Neira Ayuso
    • [PATCH net-next 08/16] netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire, Pablo Neira Ayuso
    • [PATCH net-next 07/16] netfilter: nf_tables: Add missing Kernel doc, Pablo Neira Ayuso
    • [PATCH net-next 05/16] netfilter: nf_tables: drop unused 3rd argument from validate callback ops, Pablo Neira Ayuso
    • [PATCH net-next 09/16] netfilter: nf_tables: reject element expiration with no timeout, Pablo Neira Ayuso
    • [PATCH net-next 10/16] netfilter: nf_tables: reject expiration higher than timeout, Pablo Neira Ayuso
    • [PATCH net-next 11/16] netfilter: nf_tables: remove annotation to access set timeout while holding lock, Pablo Neira Ayuso
    • [PATCH net-next 12/16] netfilter: nft_dynset: annotate data-races around set timeout, Pablo Neira Ayuso
    • [PATCH net-next 13/16] netfilter: nf_tables: annotate data-races around element expiration, Pablo Neira Ayuso
    • [PATCH net-next 14/16] netfilter: nf_tables: consolidate timeout extension for elements, Pablo Neira Ayuso
    • [PATCH net-next 15/16] netfilter: nf_tables: zero timeout means element never times out, Pablo Neira Ayuso
    • [PATCH net-next 16/16] netfilter: nf_tables: set element timeout update support, Pablo Neira Ayuso
• [PATCH nf-next 0/2] netfilter: new hook nfnl subsystem, Florian Westphal
  • [PATCH nf-next 1/2] netfilter: annotate nf_tables base hook ops, Florian Westphal
  • [PATCH nf-next 2/2] netfilter: add new hook nfnl subsystem, Florian Westphal
    • [netfilter] a0aa657b74: WARNING:at_kernel/locking/lockdep.c:#lockdep_init_map_type, kernel test robot
      • Re: [netfilter] a0aa657b74: WARNING:at_kernel/locking/lockdep.c:#lockdep_init_map_type, Florian Westphal
• [PATCH ipset,v2] add ipset to nftables translation infrastructure, Pablo Neira Ayuso
• [PATCH ipset 1/3] lib: split parser from command execution, Pablo Neira Ayuso
  • [PATCH ipset 2/3] lib: Detach restore routine from parser, Pablo Neira Ayuso
  • [PATCH ipset 3/3] add ipset to nftables translation infrastructure, Pablo Neira Ayuso
• [PATCH nf-next 1/3,v3] netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use it, Pablo Neira Ayuso
  • [PATCH nf-next 2/3,v3] netfilter: nf_tables: remove nft_ctx_init_from_elemattr(), Pablo Neira Ayuso
  • [PATCH nf-next 3/3] netfilter: nf_tables: remove nft_ctx_init_from_setattr(), Pablo Neira Ayuso
• [PATCH nf-next,v2 1/3] netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use it, Pablo Neira Ayuso
  • [PATCH nf-next,v2 2/3] netfilter: nf_tables: remove nft_ctx_init_from_elemattr(), Pablo Neira Ayuso
  • [PATCH nf-next,v2 3/3] netfilter: nf_tables: remove nft_ctx_init_from_setattr(), Pablo Neira Ayuso
• [PATCH nf-next 1/3] netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use it, Pablo Neira Ayuso
  • [PATCH nf-next 2/3] netfilter: nf_tables: remove nft_ctx_init_from_elemattr(), Pablo Neira Ayuso
  • [PATCH nf-next 3/3] netfilter: nf_tables: remove nft_ctx_init_from_setattr(), Pablo Neira Ayuso
• [PATCH nf-next] netfilter: fix clang-12 fmt string warnings, Florian Westphal
• [PATCH nf-next] netfilter: nft_set_pipapo_avx2: fix up description warnings, Florian Westphal
• [PATCH nf-next] netfilter: nft_compat: fix bridge family target evaluation, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nft_compat: fix bridge family target evaluation, Pablo Neira Ayuso
• [PATCH] netfilter: conntrack: remove the repeated declaration, Shaokun Zhang
  • Re: [PATCH] netfilter: conntrack: remove the repeated declaration, Florian Westphal
  • Re: [PATCH] netfilter: conntrack: remove the repeated declaration, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: conntrack: remove the repeated declaration, Shaokun Zhang
• [nf-next:master 14/14] net/netfilter/nft_compat.c:113:10: warning: address of 'xt.hotdrop' will always evaluate to 'true', kernel test robot
• [nf-next:master 4/14] net/netfilter/nft_set_pipapo.c:412:6: error: static declaration of 'nft_pipapo_lookup' follows non-static declaration, kernel test robot
  • Re: [nf-next:master 4/14] net/netfilter/nft_set_pipapo.c:412:6: error: static declaration of 'nft_pipapo_lookup' follows non-static declaration, Florian Westphal
    • Re: [nf-next:master 4/14] net/netfilter/nft_set_pipapo.c:412:6: error: static declaration of 'nft_pipapo_lookup' follows non-static declaration, Pablo Neira Ayuso
• [PATCH conntrackd] cthelper: fix overlapping queue numbers in example file, Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches, Pablo Neira Ayuso
• [PATCH conntrackd,v2 1/2] cthelper: Set up userspace helpers when daemon starts, Pablo Neira Ayuso
  • [PATCH conntrackd,v2 2/2] doc: manual: Document userspace helper configuration at daemon startup, Pablo Neira Ayuso
• [PATCH nf-next 0/6] netfilter: reduce size of core data structures, Florian Westphal
  • [PATCH nf-next 1/6] netfilter: x_tables: reduce xt_action_param by 8 byte, Florian Westphal
  • [PATCH nf-next 2/6] netfilter: reduce size of nf_hook_state on 32bit platforms, Florian Westphal
  • [PATCH nf-next 3/6] netfilter: nf_tables: add and use nft_sk helper, Florian Westphal
  • [PATCH nf-next 4/6] netfilter: nf_tables: add and use nft_thoff helper, Florian Westphal
  • [PATCH nf-next 5/6] netfilter: nft_set_pktinfo_unspec: remove unused arg, Florian Westphal
  • [PATCH nf-next 6/6] netfilter: nf_tables: remove xt_action_param from nft_pktinfo, Florian Westphal
  • Re: [PATCH nf-next 0/6] netfilter: reduce size of core data structures, Pablo Neira Ayuso
• [PATCH nf] MAINTAINERS: netfilter: add irc channel, Nicolas Dichtel
  • Re: [PATCH nf] MAINTAINERS: netfilter: add irc channel, Nicolas Dichtel
    • Re: [PATCH nf] MAINTAINERS: netfilter: add irc channel, Pablo Neira Ayuso
      • Re: [PATCH nf] MAINTAINERS: netfilter: add irc channel, Nicolas Dichtel
• [PATCH conntrackd] cthelper: Set up userspace helpers when daemon starts, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH conntrackd] cthelper: Set up userspace helpers when daemon starts, Pablo Neira Ayuso
    • [PATCH conntrackd] doc: manual: Document userspace helper configuration at daemon startup, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nft_ct: skip expectations for confirmed conntrack, Pablo Neira Ayuso
• [PATCH nf-next,v3] netfilter: use nfnetlink_unicast(), Pablo Neira Ayuso
• [PATCH net 0/5] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH net 1/5] netfilter: conntrack: unregister ipv4 sockopts on error unwind, Pablo Neira Ayuso
  • [PATCH net 2/5] netfilter: nf_tables: missing error reporting for not selected expressions, Pablo Neira Ayuso
  • [PATCH net 3/5] netfilter: nf_tables: extended netlink error reporting for chain type, Pablo Neira Ayuso
  • [PATCH net 5/5] ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service, Pablo Neira Ayuso
  • [PATCH net 4/5] netfilter: nf_tables: fix table flag updates, Pablo Neira Ayuso
  • Re: [PATCH net 0/5] Netfilter/IPVS fixes for net, Jakub Kicinski
• [PATCH nft 0/6] nftables: add --optimize support, Florian Westphal
  • [PATCH nft 1/6] src: add proto ctx options, Florian Westphal
  • [PATCH nft 2/6] src: allow to turn off dependency removal, Florian Westphal
  • [PATCH nft 3/6] main: add -O help to dump list of supported optimzation flags, Florian Westphal
  • [PATCH nft 4/6] evaluate: optionally kill anon sets with one element, Florian Westphal
  • [PATCH nft 6/6] tests: add test case for removal of anon sets with only a single element, Florian Westphal
  • [PATCH nft 5/6] tests: add test case for -O no-remove-dependencies, Florian Westphal
• [PATCH nf-next,v2] netfilter: use nfnetlink_unicast(), Pablo Neira Ayuso
• [PATCH-v2] netfilter: conntrack: add new sysctl to disable RST check, Ali Abdallah
• [PATCH] netfilter: conntrack: add new sysctl to disable RST check, Ali Abdallah
  • Re: [PATCH] netfilter: conntrack: add new sysctl to disable RST check, Nicolas Dichtel
    • Re: [PATCH] netfilter: conntrack: add new sysctl to disable RST check, Ali Abdallah
      • Re: [PATCH] netfilter: conntrack: add new sysctl to disable RST check, Nicolas Dichtel
        • Re: [PATCH] netfilter: conntrack: add new sysctl to disable RST check, Ali Abdallah
  • Re: [PATCH] netfilter: conntrack: add new sysctl to disable RST check, Florian Westphal
• [ANNOUNCE] nftables 0.9.9 release, Pablo Neira Ayuso
• [PATCH nf-next v2 0/4] netfilter: add hook dump feature, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: nf_tables: allow to dump all registered base hooks, Florian Westphal
  • [PATCH nf-next 2/4] netfilter: nf_tables: include function and module name in hook dumps, Florian Westphal
  • [PATCH nf-next 3/4] netfilter: annotate nf_tables base hook ops, Florian Westphal
  • [PATCH nf-next 4/4] netfilter: nf_tables: include table and chain name when dumping hooks, Florian Westphal
• [ANNOUNCE] libnftnl 1.2.0 release, Pablo Neira Ayuso
• [ulogd2 PATCH] ulogd: printpkt: print pkt mark like kernel, Cole Dishington
  • Re: [ulogd2 PATCH] ulogd: printpkt: print pkt mark like kernel, Pablo Neira Ayuso
• [PATCH nftables] evaluate: allow == and != in the new shortcut syntax to match for flags, Pablo Neira Ayuso
  • [PATCH nftables] expression: display an error on unknown datatype, Pablo Neira Ayuso
• [PATCH net] ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service, Julian Anastasov
  • Re: [PATCH net] ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service, Simon Horman
  • Re: [PATCH net] ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix table flag updates, Pablo Neira Ayuso
• [syzbot] memory leak in ip_vs_add_service, syzbot
  • Re: [syzbot] memory leak in ip_vs_add_service, Xin Long
    • Re: [syzbot] memory leak in ip_vs_add_service, Julian Anastasov
      • Re: [syzbot] memory leak in ip_vs_add_service, Xin Long
• [nftables PATCH] files: improve secmark.nft example, Dominick Grift
  • Re: [nftables PATCH] files: improve secmark.nft example, Pablo Neira Ayuso
• [PATCH nft 0/3] hook dump support, Florian Westphal
  • [PATCH nft 1/3] scanner: add list cmd parser scope, Florian Westphal
  • [PATCH nft 2/3] src: add support for base hook dumping, Florian Westphal
  • [PATCH nft 3/3] doc: add LISTING section, Florian Westphal
    • Re: [PATCH nft 3/3] doc: add LISTING section, Duncan Roe
• [PATCH nf-next 0/4] netfilter: add hook dump feature, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: nf_tables: allow to dump all registered base hooks, Florian Westphal
    • Re: [PATCH nf-next 1/4] netfilter: nf_tables: allow to dump all registered base hooks, kernel test robot
  • [PATCH nf-next 2/4] netfilter: nf_tables: include function and module name in hook dumps, Florian Westphal
  • [PATCH nf-next 3/4] netfilter: annotate nf_tables base hook ops, Florian Westphal
  • [PATCH nf-next 4/4] netfilter: nf_tables: include table and chain name when dumping hooks, Florian Westphal
    • Re: [PATCH nf-next 4/4] netfilter: nf_tables: include table and chain name when dumping hooks, Pablo Neira Ayuso
      • Re: [PATCH nf-next 4/4] netfilter: nf_tables: include table and chain name when dumping hooks, Florian Westphal
        • Re: [PATCH nf-next 4/4] netfilter: nf_tables: include table and chain name when dumping hooks, Pablo Neira Ayuso
          • Re: [PATCH nf-next 4/4] netfilter: nf_tables: include table and chain name when dumping hooks, Florian Westphal
            • Re: [PATCH nf-next 4/4] netfilter: nf_tables: include table and chain name when dumping hooks, Pablo Neira Ayuso
• [PATCH] Disable RST seq number check when tcp_be_liberal is greater 1, Ali Abdallah
  • Re: [PATCH] Disable RST seq number check when tcp_be_liberal is greater 1, Nicolas Dichtel
    • Re: [PATCH] Disable RST seq number check when tcp_be_liberal is greater 1, Ali Abdallah
• Re: mmotm 2021-05-19-23-58 uploaded (net/netfilter/nft_set_pipapo_avx2.c), Randy Dunlap
  • Re: mmotm 2021-05-19-23-58 uploaded (net/netfilter/nft_set_pipapo_avx2.c), Stephen Rothwell
    • Re: mmotm 2021-05-19-23-58 uploaded (net/netfilter/nft_set_pipapo_avx2.c), Randy Dunlap
• [PATCH nf] netfilter: nft_ct: skip unconfirmed helper extension for unconfirmed conntrack, Pablo Neira Ayuso
• [nft PATCH] expr_postprocess: Avoid an unintended fall through, Phil Sutter
• [PATCH nf] netfilter: conntrack: improve RST handling when tuple is re-used, Florian Westphal
  • Re: [PATCH nf] netfilter: conntrack: improve RST handling when tuple is re-used, aabdallah
    • Re: [PATCH nf] netfilter: conntrack: improve RST handling when tuple is re-used, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: conntrack: improve RST handling when tuple is re-used, Ali Abdallah
        • Re: [PATCH nf] netfilter: conntrack: improve RST handling when tuple is re-used, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: extended netlink error reporting for chain type, Pablo Neira Ayuso
• [PATCH nftables] rule: skip exact matches on fuzzy lookup, Pablo Neira Ayuso
• [PATCH nftables] cmd: typo in chain fuzzy lookup, Pablo Neira Ayuso
• [PATCH] libnftables: location-based error reporting for chain type, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: missing error reporting for not selected expressions, Pablo Neira Ayuso
• [nft PATCH] doc: nft.8: Extend monitor description by trace, Phil Sutter
• [PATCH nf,v2] netfilter: nftables: accept all dummy chain when table is dormant, Pablo Neira Ayuso
  • Re: [PATCH nf,v2] netfilter: nftables: accept all dummy chain when table is dormant, Florian Westphal
    • Re: [PATCH nf,v2] netfilter: nftables: accept all dummy chain when table is dormant, Pablo Neira Ayuso
      • Re: [PATCH nf,v2] netfilter: nftables: accept all dummy chain when table is dormant, Florian Westphal
        • Re: [PATCH nf,v2] netfilter: nftables: accept all dummy chain when table is dormant, Pablo Neira Ayuso
          • Re: [PATCH nf,v2] netfilter: nftables: accept all dummy chain when table is dormant, Florian Westphal
• [PATCH nftables] doc: document cgroupv2, Pablo Neira Ayuso
• [PATCH nf] netfilter: nftables: accept all dummy chain when table is dormant, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nftables: accept all dummy chain when table is dormant, Florian Westphal
    • Re: [PATCH nf] netfilter: nftables: accept all dummy chain when table is dormant, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nftables: accept all dummy chain when table is dormant, Florian Westphal
        • Re: [PATCH nf] netfilter: nftables: accept all dummy chain when table is dormant, Pablo Neira Ayuso
          • Re: [PATCH nf] netfilter: nftables: accept all dummy chain when table is dormant, Pablo Neira Ayuso
• [ebtables PATCH 1/2] ebtables.h: restore KERNEL_64_USERSPACE_32 checks, Thomas De Schampheleire
  • [ebtables PATCH 2/2] configure.ac: add option --enable-kernel-64-userland-32, Thomas De Schampheleire
    • Re: [ebtables PATCH 2/2] configure.ac: add option --enable-kernel-64-userland-32, Pablo Neira Ayuso
      • Re: [ebtables PATCH 2/2] configure.ac: add option --enable-kernel-64-userland-32, Thomas De Schampheleire
        • Re: [ebtables PATCH 2/2] configure.ac: add option --enable-kernel-64-userland-32, Pablo Neira Ayuso
          • Re: [ebtables PATCH 2/2] configure.ac: add option --enable-kernel-64-userland-32, Florian Westphal
            • Re: [ebtables PATCH 2/2] configure.ac: add option --enable-kernel-64-userland-32, Thomas De Schampheleire
              • Re: [ebtables PATCH 2/2] configure.ac: add option --enable-kernel-64-userland-32, Florian Westphal
• warning splat in nftables ct expect, Pablo Neira Ayuso
  • Re: warning splat in nftables ct expect, Stéphane Veyret
    • Re: warning splat in nftables ct expect, Pablo Neira Ayuso
• [PATCH nftables,v2] datatype: skip cgroupv2 rootfs in listing, Pablo Neira Ayuso
• [PATCH nftables 1/2] src: use PRIu64 format, Pablo Neira Ayuso
  • [PATCH nftables 2/2] datatype: skip cgroupv2 rootfs in listing, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: use nfnetlink_unicast(), Pablo Neira Ayuso
• [PATCH] netfilter: Remove leading spaces in Kconfig, Juerg Haefliger
  • Re: [PATCH] netfilter: Remove leading spaces in Kconfig, Pablo Neira Ayuso
• [PATCH] treewide: Remove leading spaces in Kconfig files, Juerg Haefliger
  • Re: [PATCH] treewide: Remove leading spaces in Kconfig files, Greg KH
    • Re: [PATCH] treewide: Remove leading spaces in Kconfig files, Juerg Haefliger
      • Re: [PATCH] treewide: Remove leading spaces in Kconfig files, Greg KH
        • Re: [PATCH] treewide: Remove leading spaces in Kconfig files, Juerg Haefliger
• [PATCH nftables,v3] parser_bison: add shortcut syntax for matching flags without binary operations, Pablo Neira Ayuso
• [PATCH nftables,v2] parser_bison: add shortcut syntax for matching flags without binary operations, Pablo Neira Ayuso
• [PATCH nf 0/2] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH nf 1/2] netfilter: flowtable: Remove redundant hw refresh bit, Pablo Neira Ayuso
    • Re: [PATCH nf 1/2] netfilter: flowtable: Remove redundant hw refresh bit, patchwork-bot+netdevbpf
  • [PATCH nf 2/2] netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version, Pablo Neira Ayuso
• [pablo@xxxxxxxxxxxxx: Re: [PATCH net 1/1] netfilter: flowtable: Remove redundant hw refresh bit], Pablo Neira Ayuso
• [PATCH nf-next 0/2] nf_tables: avoid retpoline overhead on set lookups, Florian Westphal
  • [PATCH nf-next 1/2] netfilter: add and use nft_set_do_lookup helper, Florian Westphal
  • [PATCH nf-next 2/2] netfilter: nf_tables: prefer direct calls for set lookups, Florian Westphal
  • Re: [PATCH nf-next 0/2] nf_tables: avoid retpoline overhead on set lookups, Stefano Brivio
  • Re: [PATCH nf-next 0/2] nf_tables: avoid retpoline overhead on set lookups, Pablo Neira Ayuso
• [PATCH v26 18/25] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
  • Re: [PATCH v26 18/25] LSM: security_secid_to_secctx in netlink netfilter, Paul Moore
• [PATCH v26 16/25] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v26 15/25] LSM: Ensure the correct LSM context releaser, Casey Schaufler
  • Re: [PATCH v26 15/25] LSM: Ensure the correct LSM context releaser, Paul Moore
• [PATCH v26 08/25] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
  • Re: [PATCH v26 08/25] LSM: Use lsmblob in security_secid_to_secctx, Kees Cook
  • Re: [PATCH v26 08/25] LSM: Use lsmblob in security_secid_to_secctx, Paul Moore
• [PATCH v26 07/25] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
  • Re: [PATCH v26 07/25] LSM: Use lsmblob in security_secctx_to_secid, Kees Cook
  • Re: [PATCH v26 07/25] LSM: Use lsmblob in security_secctx_to_secid, Paul Moore
• [nftables PATCH] cache: check errno before invoking cache_release(), Marco Oliverio
  • Re: [nftables PATCH] cache: check errno before invoking cache_release(), Pablo Neira Ayuso
• [PATCH nftables] parser_bison: add shortcut syntax for matching flags without binary operations, Pablo Neira Ayuso
• [PATCH nftables] netlink_delinearize: fix binary operation postprocessing with sets, Pablo Neira Ayuso
• netfilter: iptables-restore: setsockopt(3, SOL_IP, IPT_SO_SET_REPLACE, "security...", ...) return -EAGAIN, Dexuan Cui
  • RE: netfilter: iptables-restore: setsockopt(3, SOL_IP, IPT_SO_SET_REPLACE, "security...", ...) return -EAGAIN, Dexuan Cui
    • RE: netfilter: iptables-restore: setsockopt(3, SOL_IP, IPT_SO_SET_REPLACE, "security...", ...) return -EAGAIN, Dexuan Cui
      • RE: netfilter: iptables-restore: setsockopt(3, SOL_IP, IPT_SO_SET_REPLACE, "security...", ...) return -EAGAIN, Dexuan Cui
        • Re: netfilter: iptables-restore: setsockopt(3, SOL_IP, IPT_SO_SET_REPLACE, "security...", ...) return -EAGAIN, Pablo Neira Ayuso
          • Re: netfilter: iptables-restore: setsockopt(3, SOL_IP, IPT_SO_SET_REPLACE, "security...", ...) return -EAGAIN, Phil Sutter
            • RE: netfilter: iptables-restore: setsockopt(3, SOL_IP, IPT_SO_SET_REPLACE, "security...", ...) return -EAGAIN, Dexuan Cui
• [PATCH nftables,v3 2/2] src: add set element catch-all support, Pablo Neira Ayuso
  • Re: [PATCH nftables,v3 2/2] src: add set element catch-all support, Phil Sutter
• [PATCH nftables,v2 2/2] src: add set element catch-all support, Pablo Neira Ayuso
  • Re: [PATCH nftables,v2 2/2] src: add set element catch-all support, Phil Sutter
    • Re: [PATCH nftables,v2 2/2] src: add set element catch-all support, Pablo Neira Ayuso
    • Re: [PATCH nftables,v2 2/2] src: add set element catch-all support, Pablo Neira Ayuso
• [PATCH nftables] evaluate: don't crash on set definition with incorrect datatype, Pablo Neira Ayuso
• [PATCH nftables 2/2] src: add set element catch-all support, Pablo Neira Ayuso
• [PATCH nftables 1/2] parser_bison: add set_elem_key_expr rule, Pablo Neira Ayuso
  • [PATCH nftables 2/2] src: add set element catch-all support, Pablo Neira Ayuso
    • Re: [PATCH nftables 2/2] src: add set element catch-all support, Phil Sutter
      • Re: [PATCH nftables 2/2] src: add set element catch-all support, Arturo Borrero Gonzalez
        • Re: [PATCH nftables 2/2] src: add set element catch-all support, Pablo Neira Ayuso
          • Re: [PATCH nftables 2/2] src: add set element catch-all support, Phil Sutter
• [PATCH nf-next] nft_set_pipapo_avx2: Skip LDMXCSR, we don't need a valid MXCSR state, Stefano Brivio
  • Re: [PATCH nf-next] nft_set_pipapo_avx2: Skip LDMXCSR, we don't need a valid MXCSR state, Pablo Neira Ayuso
    • Re: [PATCH nf-next] nft_set_pipapo_avx2: Skip LDMXCSR, we don't need a valid MXCSR state, Andy Lutomirski
      • Re: [PATCH nf-next] nft_set_pipapo_avx2: Skip LDMXCSR, we don't need a valid MXCSR state, Stefano Brivio
• [PATCH nf] nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version, Stefano Brivio
  • Re: [PATCH nf] nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version, Pablo Neira Ayuso
• [PATCH net 0/8] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 2/8] netfilter: arptables: use pernet ops struct during unregister, Pablo Neira Ayuso
  • [PATCH net 1/8] netfilter: xt_SECMARK: add new revision to fix structure layout, Pablo Neira Ayuso
    • Re: [PATCH net 1/8] netfilter: xt_SECMARK: add new revision to fix structure layout, patchwork-bot+netdevbpf
  • [PATCH net 3/8] netfilter: nfnetlink: add a missing rcu_read_unlock(), Pablo Neira Ayuso
  • [PATCH net 4/8] netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check, Pablo Neira Ayuso
  • [PATCH net 5/8] netfilter: remove BUG_ON() after skb_header_pointer(), Pablo Neira Ayuso
  • [PATCH net 6/8] netfilter: nftables: Fix a memleak from userdata error path in new objects, Pablo Neira Ayuso
  • [PATCH net 7/8] netfilter: nftables: avoid overflows in nft_hash_buckets(), Pablo Neira Ayuso
  • [PATCH net 8/8] netfilter: nftables: avoid potential overflows on 32bit arches, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/8] MAINTAINERS: netfilter: add irc channel, Pablo Neira Ayuso
      • Re: [PATCH net 1/8] MAINTAINERS: netfilter: add irc channel, patchwork-bot+netdevbpf
    • [PATCH net 2/8] netfilter: nft_exthdr: check for IPv6 packet before further processing, Pablo Neira Ayuso
    • [PATCH net 3/8] netfilter: nft_osf: check for TCP packet before further processing, Pablo Neira Ayuso
    • [PATCH net 4/8] netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols, Pablo Neira Ayuso
    • [PATCH net 7/8] netfilter: nf_tables: skip netlink portID validation if zero, Pablo Neira Ayuso
    • [PATCH net 8/8] netfilter: nf_tables: do not allow to delete table with owner by handle, Pablo Neira Ayuso
    • [PATCH net 6/8] netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer logic, Pablo Neira Ayuso
    • [PATCH net 5/8] netfilter: nf_tables: memleak in hw offload abort path, Pablo Neira Ayuso
    • Re: [PATCH net 0/8] Netfilter fixes for net, David Miller
      • Re: [PATCH net 0/8] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/8] netfilter: Remove flowtable relics, Pablo Neira Ayuso
      • Re: [PATCH net 1/8] netfilter: Remove flowtable relics, patchwork-bot+netdevbpf
    • [PATCH net 2/8] netfilter: nft_ct: fix use after free when attaching zone template, Pablo Neira Ayuso
    • [PATCH net 4/8] selftests: netfilter: check stateless nat udp checksum fixup, Pablo Neira Ayuso
    • [PATCH net 3/8] selftests: netfilter: reduce zone stress test running time, Pablo Neira Ayuso
    • [PATCH net 6/8] netfilter: nft_byteorder: track register operations, Pablo Neira Ayuso
    • [PATCH net 7/8] selftests: nft_concat_range: add test for reload with no element add/del, Pablo Neira Ayuso
    • [PATCH net 5/8] netfilter: nft_reject_bridge: Fix for missing reply from prerouting, Pablo Neira Ayuso
    • [PATCH net 8/8] netfilter: nf_tables: remove assignment with no effect in chain blob builder, Pablo Neira Ayuso
  • [PATCH net 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/8] netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant, Pablo Neira Ayuso
      • Re: [PATCH net 1/8] netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant, patchwork-bot+netdevbpf
    • [PATCH net 3/8] netfilter: egress: silence egress hook lockdep splats, Pablo Neira Ayuso
    • [PATCH net 2/8] netfilter: fix use-after-free in __nf_register_net_hook(), Pablo Neira Ayuso
    • [PATCH net 5/8] selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test, Pablo Neira Ayuso
    • [PATCH net 6/8] netfilter: nf_queue: fix possible use-after-free, Pablo Neira Ayuso
    • [PATCH net 4/8] netfilter: nf_queue: don't assume sk is full socket, Pablo Neira Ayuso
    • [PATCH net 7/8] netfilter: nf_queue: handle socket prefetch, Pablo Neira Ayuso
    • [PATCH net 8/8] net/sched: act_ct: Fix flow table lookup failure with no originating ifindex, Pablo Neira Ayuso
  • [PATCH net 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/8] netfilter: nf_tables: do not allow SET_ID to refer to another table, Pablo Neira Ayuso
    • [PATCH net 3/8] netfilter: nf_tables: do not allow CHAIN_ID to refer to another table, Pablo Neira Ayuso
    • [PATCH net 1/8] netfilter: nf_tables: validate variable length element extension, Pablo Neira Ayuso
      • Re: [PATCH net 1/8] netfilter: nf_tables: validate variable length element extension, Jakub Kicinski
      • Re: [PATCH net 1/8] netfilter: nf_tables: validate variable length element extension, patchwork-bot+netdevbpf
    • [PATCH net 7/8] netfilter: nf_tables: disallow jump to implicit chain from set element, Pablo Neira Ayuso
    • [PATCH net 6/8] netfilter: nf_tables: upfront validation of data via nft_data_init(), Pablo Neira Ayuso
    • [PATCH net 8/8] netfilter: nf_tables: fix null deref due to zeroed list head, Pablo Neira Ayuso
    • [PATCH net 4/8] netfilter: nf_tables: do not allow RULE_ID to refer to another chain, Pablo Neira Ayuso
    • [PATCH net 5/8] netfilter: ip6t_LOG: Fix a typo in a comment, Pablo Neira Ayuso
    • Re: [PATCH net 0/8] Netfilter fixes for net, Jakub Kicinski
      • Re: [PATCH net 0/8] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 0/8] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/8] netfilter: nfnetlink: Initialise extack before use in ACKs, Pablo Neira Ayuso
    • [PATCH net 3/8] netfilter: flowtable: initialise extack before use, Pablo Neira Ayuso
    • [PATCH net 1/8] netfilter: allow ipv6 fragments to arrive on different devices, Pablo Neira Ayuso
      • Re: [PATCH net 1/8] netfilter: allow ipv6 fragments to arrive on different devices, patchwork-bot+netdevbpf
    • [PATCH net 4/8] netfilter: nf_queue: drop packets with cloned unconfirmed conntracks, Pablo Neira Ayuso
    • [PATCH net 5/8] selftests: netfilter: add test for br_netfilter+conntrack+queue combination, Pablo Neira Ayuso
    • [PATCH net 8/8] netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests, Pablo Neira Ayuso
    • [PATCH net 6/8] netfilter: nf_tables: Audit log dump reset after the fact, Pablo Neira Ayuso
    • [PATCH net 7/8] netfilter: nf_tables: Introduce nf_tables_getobj_single, Pablo Neira Ayuso
• nft_pipapo_avx2_lookup backtrace in linux 5.10, Arturo Borrero Gonzalez
  • Re: nft_pipapo_avx2_lookup backtrace in linux 5.10, Florian Westphal
    • Re: nft_pipapo_avx2_lookup backtrace in linux 5.10, Stefano Brivio
      • Re: nft_pipapo_avx2_lookup backtrace in linux 5.10, Stefano Brivio
        • Re: nft_pipapo_avx2_lookup backtrace in linux 5.10, Arturo Borrero Gonzalez
  • Re: nft_pipapo_avx2_lookup backtrace in linux 5.10, Stefano Brivio
    • Re: nft_pipapo_avx2_lookup backtrace in linux 5.10, Arturo Borrero Gonzalez
      • Re: nft_pipapo_avx2_lookup backtrace in linux 5.10, Stefano Brivio
        • Re: nft_pipapo_avx2_lookup backtrace in linux 5.10, Arturo Borrero Gonzalez
• [PATCH net 2/2] netfilter: nf_tables: avoid potential overflows on 32bit arches, Eric Dumazet
  • Re: [PATCH net 2/2] netfilter: nf_tables: avoid potential overflows on 32bit arches, Pablo Neira Ayuso
• [PATCH net 1/2] netfilter: nf_tables: avoid overflows in nft_hash_buckets(), Eric Dumazet
  • Re: [PATCH net 1/2] netfilter: nf_tables: avoid overflows in nft_hash_buckets(), Pablo Neira Ayuso
• [nft PATCH] doc: Reduce size of NAT statement synopsis, Phil Sutter
• [PATCH nft 0/2] Fix display of < 64 bits IPv6 masks in concatenated elements, Stefano Brivio
  • [PATCH nft 1/2] segtree: Fix range_mask_len() for subnet ranges exceeding unsigned int, Stefano Brivio
    • Re: [PATCH nft 1/2] segtree: Fix range_mask_len() for subnet ranges exceeding unsigned int, Phil Sutter
      • Re: [PATCH nft 1/2] segtree: Fix range_mask_len() for subnet ranges exceeding unsigned int, Stefano Brivio
        • Re: [PATCH nft 1/2] segtree: Fix range_mask_len() for subnet ranges exceeding unsigned int, Phil Sutter
  • [PATCH nft 2/2] tests: Introduce 0043_concatenated_ranges_1 for subnets of different sizes, Stefano Brivio
• [PATCH nf,v2] netfilter: remove BUG_ON() after skb_header_pointer(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nftables: Fix a memleak from userdata error path in new objects, Pablo Neira Ayuso
• [PATCH nf] netfilter: remove BUG_ON() after skb_header_pointer(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check, Pablo Neira Ayuso
• [PATCH] ipv6: netfilter.c: fix missing line after declaration, Pallavi Prabhu
  • Re: [PATCH] ipv6: netfilter.c: fix missing line after declaration, Pablo Neira Ayuso
• [PATCH net] netfilter: nfnetlink: add a missing rcu_read_unlock(), Eric Dumazet
  • Re: [PATCH net] netfilter: nfnetlink: add a missing rcu_read_unlock(), Pablo Neira Ayuso
• [iptables PATCH 1/2] extensions: sctp: Fix nftables translation, Phil Sutter
  • [iptables PATCH 2/2] extensions: sctp: Translate --chunk-types option, Phil Sutter
• [nft PATCH 1/3] scanner: sctp: Move to own scope, Phil Sutter
  • [nft PATCH 2/3] json: Simplify non-tcpopt exthdr printing a bit, Phil Sutter
  • [nft PATCH 3/3] exthdr: Implement SCTP Chunk matching, Phil Sutter
    • Re: [nft PATCH 3/3] exthdr: Implement SCTP Chunk matching, Florian Westphal
  • Re: [nft PATCH 1/3] scanner: sctp: Move to own scope, Florian Westphal
• [net-next PATCH] net: netfilter: nft_exthdr: Support SCTP chunks, Phil Sutter
  • Re: [net-next PATCH] net: netfilter: nft_exthdr: Support SCTP chunks, Pablo Neira Ayuso
• [PATCH nf] netfilter: conntrack: unregister ipv4 sockopts on error unwind, Florian Westphal
• [PATCH RFC libnetfilter_queue 0/1] Eliminate packet copy when constructing struct pkt_buff, Duncan Roe
  • [PATCH RFC libnetfilter_queue 1/1] Eliminate packet copy when constructing struct pkt_buff, Duncan Roe
    • [PATCH libnetfilter_queue v2 0/1] Speed-up, Duncan Roe
    • [PATCH libnetfilter_queue v2 1/1] Eliminate packet copy when constructing struct pkt_buff, Duncan Roe
      • Re: [PATCH libnetfilter_queue v2 1/1] Eliminate packet copy when constructing struct pkt_buff, Pablo Neira Ayuso
        • Re: [PATCH libnetfilter_queue v2 1/1] Eliminate packet copy when constructing struct pkt_buff, Duncan Roe
        • Re: [PATCH libnetfilter_queue v2 1/1] Eliminate packet copy when constructing struct pkt_buff, Duncan Roe
  • Re: [PATCH RFC libnetfilter_queue 0/1] Eliminate packet copy when constructing struct pkt_buff, Duncan Roe
  • Re: [PATCH RFC libnetfilter_queue 0/1] Eliminate packet copy when constructing struct pkt_buff, Duncan Roe
• Re: conntrackd inverted NAT address, endianness issue?, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrack: release options after parsing, Pablo Neira Ayuso
• [syzbot] bpf test error: WARNING in __nf_unregister_net_hook, syzbot
  • Re: [syzbot] bpf test error: WARNING in __nf_unregister_net_hook, Florian Westphal
• [syzbot] net test error: WARNING in __nf_unregister_net_hook, syzbot
  • Re: [syzbot] net test error: WARNING in __nf_unregister_net_hook, Florian Westphal
• [syzbot] memory leak in nf_hook_entries_grow (2), syzbot
  • Re: [syzbot] memory leak in nf_hook_entries_grow (2), syzbot
  • Re: [syzbot] memory leak in nf_hook_entries_grow (2), Florian Westphal
• [syzbot] upstream test error: WARNING in __nf_unregister_net_hook, syzbot
  • Re: [syzbot] upstream test error: WARNING in __nf_unregister_net_hook, Florian Westphal
• [PATCH nf] netfilter: arptables: use pernet ops struct during unregister, Florian Westphal
  • Re: [PATCH nf] netfilter: arptables: use pernet ops struct during unregister, Pablo Neira Ayuso
• [syzbot] bpf-next test error: WARNING in __nf_unregister_net_hook, syzbot
  • Re: [syzbot] bpf-next test error: WARNING in __nf_unregister_net_hook, Florian Westphal
• [syzbot] linux-next test error: WARNING in __nf_unregister_net_hook, syzbot
  • Re: [syzbot] linux-next test error: WARNING in __nf_unregister_net_hook, Florian Westphal
• [iptables PATCH v2] extensions: SECMARK: Implement revision 1, Phil Sutter
• [net-next PATCH v2] netfilter: xt_SECMARK: add new revision to fix structure layout, Phil Sutter
  • Re: [net-next PATCH v2] netfilter: xt_SECMARK: add new revision to fix structure layout, Pablo Neira Ayuso
• [PATCH] Avoid potentially erroneos RST drop., Ali Abdallah
  • Re: [PATCH] Avoid potentially erroneos RST drop., Florian Westphal
    • Re: [PATCH] Avoid potentially erroneos RST drop., Ali Abdallah
    • Re: [PATCH] Avoid potentially erroneos RST drop., Ali Abdallah
      • Re: [PATCH] Avoid potentially erroneos RST drop., Florian Westphal
        • Re: [PATCH] Avoid potentially erroneos RST drop., Pablo Neira Ayuso
        • Re: [PATCH] Avoid potentially erroneos RST drop., Ali Abdallah
• [PATCH] netfilter: Remove redundant assignment to ret, Yang Li
  • Re: [PATCH] netfilter: Remove redundant assignment to ret, Pablo Neira Ayuso
• [PATCH nft 00/18] cache updates,v2, Pablo Neira Ayuso
  • [PATCH nft 01/18] tests: shell: remove missing modules, Pablo Neira Ayuso
  • [PATCH nft 02/18] src: unbreak deletion by table handle, Pablo Neira Ayuso
  • [PATCH nft 03/18] rule: skip fuzzy lookup for unexisting 64-bit handle, Pablo Neira Ayuso
  • [PATCH nft 04/18] src: pass chain name to chain_cache_find(), Pablo Neira Ayuso
  • [PATCH nft 05/18] src: consolidate nft_cache infrastructure, Pablo Neira Ayuso
  • [PATCH nft 06/18] src: consolidate object cache infrastructure, Pablo Neira Ayuso
  • [PATCH nft 09/18] cache: add set_cache_del() and use it, Pablo Neira Ayuso
  • [PATCH nft 07/18] cache: add hashtable cache for object, Pablo Neira Ayuso
  • [PATCH nft 08/18] cache: add hashtable cache for flowtable, Pablo Neira Ayuso
  • [PATCH nft 10/18] evaluate: add set to the cache, Pablo Neira Ayuso
  • [PATCH nft 11/18] evaluate: add flowtable to the cache, Pablo Neira Ayuso
  • [PATCH nft 12/18] cache: missing table cache for several policy objects, Pablo Neira Ayuso
  • [PATCH nft 13/18] evaluate: add object to the cache, Pablo Neira Ayuso
  • [PATCH nft 14/18] cache: add hashtable cache for table, Pablo Neira Ayuso
  • [PATCH nft 15/18] evaluate: remove chain from cache on delete chain command, Pablo Neira Ayuso
  • [PATCH nft 17/18] evaluate: remove flowtable from cache on delete flowtable command, Pablo Neira Ayuso
  • [PATCH nft 16/18] evaluate: remove set from cache on delete set command, Pablo Neira Ayuso
  • [PATCH nft 18/18] evaluate: remove object from cache on delete object command, Pablo Neira Ayuso
• [PATCH net-next] netfilter: x_tables: improve limit_mt scalability, Jason Baron
  • Re: [PATCH net-next] netfilter: x_tables: improve limit_mt scalability, Pablo Neira Ayuso
• [iptables PATCH] extensions: SECMARK: Implement revision 1, Phil Sutter
• [net-next PATCH] netfilter: xt_SECMARK: add new revision to fix structure layout, Phil Sutter
  • Re: [net-next PATCH] netfilter: xt_SECMARK: add new revision to fix structure layout, Jan Engelhardt
    • Re: [net-next PATCH] netfilter: xt_SECMARK: add new revision to fix structure layout, Phil Sutter
      • Re: [net-next PATCH] netfilter: xt_SECMARK: add new revision to fix structure layout, Jan Engelhardt
• [iptables PATCH] extensions: sctp: Explain match types in man page, Phil Sutter
• [iptables PATCH 0/5] Merge some common code, Phil Sutter
  • [iptables PATCH 4/5] ebtables-translate: Use shared ebt_get_current_chain() function, Phil Sutter
  • [iptables PATCH 1/5] xtables: Make invflags 16bit wide, Phil Sutter
  • [iptables PATCH 5/5] Use proto_to_name() from xshared in more places, Phil Sutter
  • [iptables PATCH 3/5] xshared: Merge invflags handling code, Phil Sutter
  • [iptables PATCH 2/5] xshared: Eliminate iptables_command_state->invert, Phil Sutter
• [PATCH] Avoid potentially erroneos RST check, Ali Abdallah
  • Re: [PATCH] Avoid potentially erroneos RST check, Florian Westphal
  • Re: [PATCH] Avoid potentially erroneos RST check, Pablo Neira Ayuso
    • Re: [PATCH] Avoid potentially erroneos RST check, Ali Abdallah
      • Re: [PATCH] Avoid potentially erroneos RST check, Pablo Neira Ayuso
        • Re: [PATCH] Avoid potentially erroneos RST check, Ali Abdallah
• [PATCH] Don't drop out of segments RST if tcp_be_liberal is set, Ali Abdallah
• [PATCH net-next 0/7] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 1/7] netfilter: nftables: rename set element data activation/deactivation functions, Pablo Neira Ayuso
    • Re: [PATCH net-next 1/7] netfilter: nftables: rename set element data activation/deactivation functions, patchwork-bot+netdevbpf
  • [PATCH net-next 2/7] netfilter: nftables: add loop check helper function, Pablo Neira Ayuso
  • [PATCH net-next 3/7] netfilter: nftables: add helper function to flush set elements, Pablo Neira Ayuso
  • [PATCH net-next 4/7] netfilter: nftables: add helper function to validate set element data, Pablo Neira Ayuso
  • [PATCH net-next 5/7] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
  • [PATCH net-next 6/7] netfilter: nft_socket: fix an unused variable warning, Pablo Neira Ayuso
  • [PATCH net-next 7/7] netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=n, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net-next 0/7] netfilter updates for net-next, Florian Westphal
    • [PATCH net-next 1/7] netfilter: xt_mangle: only check verdict part of return value, Florian Westphal
      • Re: [PATCH net-next 1/7] netfilter: xt_mangle: only check verdict part of return value, patchwork-bot+netdevbpf
    • [PATCH net-next 2/7] netfilter: nf_tables: mask out non-verdict bits when checking return value, Florian Westphal
    • [PATCH net-next 3/7] netfilter: conntrack: convert nf_conntrack_update to netfilter verdicts, Florian Westphal
    • [PATCH net-next 5/7] netfilter: make nftables drops visible in net dropmonitor, Florian Westphal
    • [PATCH net-next 4/7] netfilter: nf_nat: mask out non-verdict bits when checking return value, Florian Westphal
    • [PATCH net-next 6/7] netfilter: bridge: convert br_netfilter to NF_DROP_REASON, Florian Westphal
    • [PATCH net-next 7/7] netfilter: nf_tables: de-constify set commit ops function argument, Florian Westphal
• [PATCH 1/2] netfilter: nft_socket: fix an unused variable warning, Arnd Bergmann
  • [PATCH 2/2] netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=n, Arnd Bergmann
    • Re: [PATCH 2/2] netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=n, Pablo Neira Ayuso
  • Re: [PATCH 1/2] netfilter: nft_socket: fix an unused variable warning, Pablo Neira Ayuso
• [PATCH nf-next 1/5, v2] netfilter: nftables: rename set element data activation/deactivation functions, Pablo Neira Ayuso
  • [PATCH nf-next 5/5,v4] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nftables: add helper function to validate set element data, Pablo Neira Ayuso
  • [PATCH nf-next 3/5,v2] netfilter: nftables: add helper function to flush set elements, Pablo Neira Ayuso
  • [PATCH nf-next 2/5,v2] netfilter: nftables: add loop check helper function, Pablo Neira Ayuso
• [iptables PATCH 0/2] Drop use of some obsolete functions, Phil Sutter
  • [iptables PATCH 2/2] nft-arp: Make use of ipv4_addr_to_string(), Phil Sutter
  • [iptables PATCH 1/2] Eliminate inet_aton() and inet_ntoa(), Phil Sutter
• [PATCH net-next 00/22] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 01/22] netfilter: nat: move nf_xfrm_me_harder to where it is used, Pablo Neira Ayuso
    • Re: [PATCH net-next 01/22] netfilter: nat: move nf_xfrm_me_harder to where it is used, patchwork-bot+netdevbpf
  • [PATCH net-next 02/22] netfilter: nft_socket: add support for cgroupsv2, Pablo Neira Ayuso
  • [PATCH net-next 03/22] netfilter: disable defrag once its no longer needed, Pablo Neira Ayuso
  • [PATCH net-next 04/22] netfilter: ebtables: remove the 3 ebtables pointers from struct net, Pablo Neira Ayuso
  • [PATCH net-next 05/22] netfilter: x_tables: remove ipt_unregister_table, Pablo Neira Ayuso
  • [PATCH net-next 06/22] netfilter: x_tables: add xt_find_table, Pablo Neira Ayuso
  • [PATCH net-next 07/22] netfilter: iptables: unregister the tables by name, Pablo Neira Ayuso
  • [PATCH net-next 08/22] netfilter: ip6tables: unregister the tables by name, Pablo Neira Ayuso
  • [PATCH net-next 09/22] netfilter: arptables: unregister the tables by name, Pablo Neira Ayuso
  • [PATCH net-next 10/22] netfilter: x_tables: remove paranoia tests, Pablo Neira Ayuso
  • [PATCH net-next 11/22] netfilter: xt_nat: pass table to hookfn, Pablo Neira Ayuso
  • [PATCH net-next 21/22] netfilter: nfnetlink: consolidate callback types, Pablo Neira Ayuso
  • [PATCH net-next 22/22] netfilter: allow to turn off xtables compat layer, Pablo Neira Ayuso
  • [PATCH net-next 12/22] netfilter: ip_tables: pass table pointer via nf_hook_ops, Pablo Neira Ayuso
  • [PATCH net-next 13/22] netfilter: arp_tables: pass table pointer via nf_hook_ops, Pablo Neira Ayuso
  • [PATCH net-next 15/22] netfilter: remove all xt_table anchors from struct net, Pablo Neira Ayuso
  • [PATCH net-next 16/22] netfilter: nf_log_syslog: Unset bridge logger in pernet exit, Pablo Neira Ayuso
  • [PATCH net-next 14/22] netfilter: ip6_tables: pass table pointer via nf_hook_ops, Pablo Neira Ayuso
  • [PATCH net-next 17/22] netfilter: nftables: add nft_pernet() helper function, Pablo Neira Ayuso
  • [PATCH net-next 18/22] netfilter: nfnetlink: add struct nfnl_info and pass it to callbacks, Pablo Neira Ayuso
  • [PATCH net-next 19/22] netfilter: nfnetlink: pass struct nfnl_info to rcu callbacks, Pablo Neira Ayuso
  • [PATCH net-next 20/22] netfilter: nfnetlink: pass struct nfnl_info to batch callbacks, Pablo Neira Ayuso
• [nf-next:for-net-next 25/25] net/netfilter/nf_tables_api.c:4448:22: warning: variable 'ext' set but not used, kernel test robot
• [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Florian Westphal
  • Re: [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Jan Engelhardt
    • Re: [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Pablo Neira Ayuso
      • Re: [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Florian Westphal
  • Re: [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Pablo Neira Ayuso
• [PATCH nf-next 1/4] netfilter: nftables: rename set element data activation/deactivation functions, Pablo Neira Ayuso
  • [PATCH nf-next 2/4] netfilter: nftables: add loop check helper function, Pablo Neira Ayuso
  • [PATCH nf-next 3/4] netfilter: nftables: add helper function to flush set elements, Pablo Neira Ayuso
  • [PATCH nf-next 4/4,v3] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
• [PATCH nf-next,v2] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
• RSTs being marked as invalid because of wrong td_maxack value, Ali Abdallah
  • Re: RSTs being marked as invalid because of wrong td_maxack value, Florian Westphal
    • Re: RSTs being marked as invalid because of wrong td_maxack value, Ali Abdallah
      • Re: RSTs being marked as invalid because of wrong td_maxack value, Florian Westphal
• [PATCH nf-next 0/5] nfnetlink housekeeping, Pablo Neira Ayuso
  • [PATCH nf-next 3/5] netfilter: nfnetlink: pass struct nfnl_info to rcu callbacks, Pablo Neira Ayuso
  • [PATCH nf-next 1/5] netfilter: nftables: add nft_pernet() helper function, Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nfnetlink: add struct nfnl_info and pass it to callbacks, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nfnetlink: pass struct nfnl_info to batch callbacks, Pablo Neira Ayuso
  • [PATCH nf-next 5/5] netfilter: nfnetlink: consolidate callback types, Pablo Neira Ayuso
• [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
  • Re: [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
    • [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
      • Re: [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
        • Message not available
          • [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API, Cole Dishington
        • Message not available
          • [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
            • Re: [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
              • [PATCH 0/3] Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                • [PATCH 1/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API, Cole Dishington
                • [PATCH 3/3] selftests: netfilter: Add RFC-7597 Section 5.1 PSID selftests, Cole Dishington
                • [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                  • Re: [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
                    • [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                      • Re: [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
                        • [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                          • Re: [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
                            • [PATCH net-next 0/3] Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                              • [PATCH net-next 1/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API, Cole Dishington
                              • [PATCH net-next 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                                • Re: [PATCH net-next 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Pablo Neira Ayuso
                                  • Re: [PATCH net-next 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                              • [PATCH net-next 3/3] selftests: netfilter: Add RFC-7597 Section 5.1 PSID selftests, Cole Dishington
• [PATCH] netfilter: nf_log_syslog: Unset bridge logger in pernet exit, Phil Sutter
  • Re: [PATCH] netfilter: nf_log_syslog: Unset bridge logger in pernet exit, Florian Westphal
  • Re: [PATCH] netfilter: nf_log_syslog: Unset bridge logger in pernet exit, Pablo Neira Ayuso
• [PATCH nf-next v2 00/12] netfilter: x_tables: remove ipt_unregister_table, Florian Westphal
  • [PATCH nf-next v2 01/12] netfilter: ebtables: remove the 3 ebtables pointers from struct net, Florian Westphal
  • [PATCH nf-next v2 02/12] netfilter: x_tables: remove ipt_unregister_table, Florian Westphal
  • [PATCH nf-next v2 03/12] netfilter: add xt_find_table, Florian Westphal
  • [PATCH nf-next v2 04/12] netfilter: iptables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next v2 05/12] netfilter: ip6tables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next v2 06/12] netfilter: arptables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next v2 08/12] netfilter: xt_nat: pass table to hookfn, Florian Westphal
  • [PATCH nf-next v2 07/12] netfilter: x_tables: remove paranoia tests, Florian Westphal
  • [PATCH nf-next v2 10/12] netfilter: arp_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next v2 09/12] netfilter: ip_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next v2 12/12] netfilter: remove all xt_table anchors from struct net, Florian Westphal
  • [PATCH nf-next v2 11/12] netfilter: ip6_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • Re: [PATCH nf-next v2 00/12] netfilter: x_tables: remove ipt_unregister_table, Pablo Neira Ayuso
• [PATCH v2 nf-next] netfilter: disable defrag once its no longer needed, Florian Westphal
  • Re: [PATCH v2 nf-next] netfilter: disable defrag once its no longer needed, Pablo Neira Ayuso
• [PATCH nft] src: add cgroupsv2 support, Pablo Neira Ayuso
• [PATCH libnftnl] expr: socket: add cgroups v2 support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_socket: add support for cgroupsv2, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: disable defrag once its no longer needed, Florian Westphal
  • Re: [PATCH nf-next] netfilter: disable defrag once its no longer needed, kernel test robot
• [PATCH nf-next 00/12] netfilter: remove xtables pointers from struct net, Florian Westphal
  • [PATCH nf-next 01/12] netfilter: ebtables: remove the 3 ebtables pointers from struct net, Florian Westphal
  • [PATCH nf-next 02/12] netfilter: x_tables: remove ipt_unregister_table, Florian Westphal
    • Re: [PATCH nf-next 02/12] netfilter: x_tables: remove ipt_unregister_table, kernel test robot
    • Re: [PATCH nf-next 02/12] netfilter: x_tables: remove ipt_unregister_table, kernel test robot
  • [PATCH nf-next 03/12] netfilter: add xt_find_table, Florian Westphal
  • [PATCH nf-next 04/12] netfilter: iptables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next 05/12] netfilter: ip6tables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next 06/12] netfilter: arptables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next 07/12] netfilter: x_tables: remove paranoia tests, Florian Westphal
  • [PATCH nf-next 08/12] netfilter: xt_nat: pass table to hookfn, Florian Westphal
  • [PATCH nf-next 09/12] netfilter: ip_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next 10/12] netfilter: arp_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next 11/12] netfilter: ip6_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next 12/12] netfilter: remove all xt_table anchors from struct net, Florian Westphal
• [PATCH] netfilter: conntrack: Reset the max ACK flag on SYN in ignore state, Ali Abdallah
  • Re: [PATCH] netfilter: conntrack: Reset the max ACK flag on SYN in ignore state, Florian Westphal
• Error when using clone option in iptables, Mohan Das
  • Re: Error when using clone option in iptables, Jan Engelhardt
• Now have make distcheck passing with doxygen enabled, Duncan Roe
  • [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
    • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Jan Engelhardt
      • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
        • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Jan Engelhardt
          • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
            • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Jan Engelhardt
              • [PATCH libnetfilter_queue v2] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
                • Re: [PATCH libnetfilter_queue v2] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
                  • Re: [PATCH libnetfilter_queue v2] build: doc: `make distcheck` passes with doxygen enabled, Jan Engelhardt
                • Re: [PATCH libnetfilter_queue v2] build: doc: `make distcheck` passes with doxygen enabled, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nat: move nf_xfrm_me_harder to where it is used, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nat: move nf_xfrm_me_harder to where it is used, Pablo Neira Ayuso
• [PATCH nft] parser_bison: missing relational operation on flag list, Pablo Neira Ayuso
• [PATCH net-next 00/14] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 01/14] netfilter: flowtable: add vlan match offload support, Pablo Neira Ayuso
    • Re: [PATCH net-next 01/14] netfilter: flowtable: add vlan match offload support, patchwork-bot+netdevbpf
  • [PATCH net-next 02/14] netfilter: flowtable: add vlan pop action offload support, Pablo Neira Ayuso
  • [PATCH net-next 03/14] netfilter: conntrack: move autoassign warning member to net_generic data, Pablo Neira Ayuso
  • [PATCH net-next 04/14] netfilter: conntrack: move autoassign_helper sysctl to net_generic data, Pablo Neira Ayuso
  • [PATCH net-next 05/14] netfilter: conntrack: move expect counter to net_generic data, Pablo Neira Ayuso
  • [PATCH net-next 07/14] netfilter: conntrack: convert sysctls to u8, Pablo Neira Ayuso
  • [PATCH net-next 06/14] netfilter: conntrack: move ct counter to net_generic data, Pablo Neira Ayuso
  • [PATCH net-next 08/14] netfilter: flowtable: Add FLOW_OFFLOAD_XMIT_UNSPEC xmit type, Pablo Neira Ayuso
  • [PATCH net-next 09/14] netfilter: nft_payload: fix C-VLAN offload support, Pablo Neira Ayuso
  • [PATCH net-next 10/14] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector, Pablo Neira Ayuso
  • [PATCH net-next 12/14] netfilter: Dissect flow after packet mangling, Pablo Neira Ayuso
  • [PATCH net-next 11/14] netfilter: nftables_offload: special ethertype handling for VLAN, Pablo Neira Ayuso
  • [PATCH net-next 13/14] selftests: fib_tests: Add test cases for interaction with mangling, Pablo Neira Ayuso