Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH nft 03/18] rule: skip fuzzy lookup for unexisting 64-bit handle, (continued)
  • [PATCH nft 03/18] rule: skip fuzzy lookup for unexisting 64-bit handle, Pablo Neira Ayuso
  • [PATCH nft 04/18] src: pass chain name to chain_cache_find(), Pablo Neira Ayuso
  • [PATCH nft 05/18] src: consolidate nft_cache infrastructure, Pablo Neira Ayuso
  • [PATCH nft 06/18] src: consolidate object cache infrastructure, Pablo Neira Ayuso
  • [PATCH nft 09/18] cache: add set_cache_del() and use it, Pablo Neira Ayuso
  • [PATCH nft 07/18] cache: add hashtable cache for object, Pablo Neira Ayuso
  • [PATCH nft 08/18] cache: add hashtable cache for flowtable, Pablo Neira Ayuso
  • [PATCH nft 10/18] evaluate: add set to the cache, Pablo Neira Ayuso
  • [PATCH nft 11/18] evaluate: add flowtable to the cache, Pablo Neira Ayuso
  • [PATCH nft 12/18] cache: missing table cache for several policy objects, Pablo Neira Ayuso
  • [PATCH nft 13/18] evaluate: add object to the cache, Pablo Neira Ayuso
  • [PATCH nft 14/18] cache: add hashtable cache for table, Pablo Neira Ayuso
  • [PATCH nft 15/18] evaluate: remove chain from cache on delete chain command, Pablo Neira Ayuso
  • [PATCH nft 17/18] evaluate: remove flowtable from cache on delete flowtable command, Pablo Neira Ayuso
  • [PATCH nft 16/18] evaluate: remove set from cache on delete set command, Pablo Neira Ayuso
  • [PATCH nft 18/18] evaluate: remove object from cache on delete object command, Pablo Neira Ayuso
• [PATCH net-next] netfilter: x_tables: improve limit_mt scalability, Jason Baron
  • Re: [PATCH net-next] netfilter: x_tables: improve limit_mt scalability, Pablo Neira Ayuso
• [iptables PATCH] extensions: SECMARK: Implement revision 1, Phil Sutter
• [net-next PATCH] netfilter: xt_SECMARK: add new revision to fix structure layout, Phil Sutter
  • Re: [net-next PATCH] netfilter: xt_SECMARK: add new revision to fix structure layout, Jan Engelhardt
    • Re: [net-next PATCH] netfilter: xt_SECMARK: add new revision to fix structure layout, Phil Sutter
      • Re: [net-next PATCH] netfilter: xt_SECMARK: add new revision to fix structure layout, Jan Engelhardt
• [iptables PATCH] extensions: sctp: Explain match types in man page, Phil Sutter
• [iptables PATCH 0/5] Merge some common code, Phil Sutter
  • [iptables PATCH 4/5] ebtables-translate: Use shared ebt_get_current_chain() function, Phil Sutter
  • [iptables PATCH 1/5] xtables: Make invflags 16bit wide, Phil Sutter
  • [iptables PATCH 5/5] Use proto_to_name() from xshared in more places, Phil Sutter
  • [iptables PATCH 3/5] xshared: Merge invflags handling code, Phil Sutter
  • [iptables PATCH 2/5] xshared: Eliminate iptables_command_state->invert, Phil Sutter
• [PATCH] Avoid potentially erroneos RST check, Ali Abdallah
  • Re: [PATCH] Avoid potentially erroneos RST check, Florian Westphal
  • Re: [PATCH] Avoid potentially erroneos RST check, Pablo Neira Ayuso
    • Re: [PATCH] Avoid potentially erroneos RST check, Ali Abdallah
      • Re: [PATCH] Avoid potentially erroneos RST check, Pablo Neira Ayuso
        • Re: [PATCH] Avoid potentially erroneos RST check, Ali Abdallah
• [PATCH] Don't drop out of segments RST if tcp_be_liberal is set, Ali Abdallah
• [PATCH net-next 0/7] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 1/7] netfilter: nftables: rename set element data activation/deactivation functions, Pablo Neira Ayuso
    • Re: [PATCH net-next 1/7] netfilter: nftables: rename set element data activation/deactivation functions, patchwork-bot+netdevbpf
  • [PATCH net-next 2/7] netfilter: nftables: add loop check helper function, Pablo Neira Ayuso
  • [PATCH net-next 3/7] netfilter: nftables: add helper function to flush set elements, Pablo Neira Ayuso
  • [PATCH net-next 4/7] netfilter: nftables: add helper function to validate set element data, Pablo Neira Ayuso
  • [PATCH net-next 5/7] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
  • [PATCH net-next 6/7] netfilter: nft_socket: fix an unused variable warning, Pablo Neira Ayuso
  • [PATCH net-next 7/7] netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=n, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net-next 0/7] netfilter updates for net-next, Florian Westphal
    • [PATCH net-next 1/7] netfilter: xt_mangle: only check verdict part of return value, Florian Westphal
      • Re: [PATCH net-next 1/7] netfilter: xt_mangle: only check verdict part of return value, patchwork-bot+netdevbpf
    • [PATCH net-next 2/7] netfilter: nf_tables: mask out non-verdict bits when checking return value, Florian Westphal
    • [PATCH net-next 3/7] netfilter: conntrack: convert nf_conntrack_update to netfilter verdicts, Florian Westphal
    • [PATCH net-next 5/7] netfilter: make nftables drops visible in net dropmonitor, Florian Westphal
    • [PATCH net-next 4/7] netfilter: nf_nat: mask out non-verdict bits when checking return value, Florian Westphal
    • [PATCH net-next 6/7] netfilter: bridge: convert br_netfilter to NF_DROP_REASON, Florian Westphal
    • [PATCH net-next 7/7] netfilter: nf_tables: de-constify set commit ops function argument, Florian Westphal
• [PATCH 1/2] netfilter: nft_socket: fix an unused variable warning, Arnd Bergmann
  • [PATCH 2/2] netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=n, Arnd Bergmann
    • Re: [PATCH 2/2] netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=n, Pablo Neira Ayuso
  • Re: [PATCH 1/2] netfilter: nft_socket: fix an unused variable warning, Pablo Neira Ayuso
• [PATCH nf-next 1/5, v2] netfilter: nftables: rename set element data activation/deactivation functions, Pablo Neira Ayuso
  • [PATCH nf-next 5/5,v4] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nftables: add helper function to validate set element data, Pablo Neira Ayuso
  • [PATCH nf-next 3/5,v2] netfilter: nftables: add helper function to flush set elements, Pablo Neira Ayuso
  • [PATCH nf-next 2/5,v2] netfilter: nftables: add loop check helper function, Pablo Neira Ayuso
• [iptables PATCH 0/2] Drop use of some obsolete functions, Phil Sutter
  • [iptables PATCH 2/2] nft-arp: Make use of ipv4_addr_to_string(), Phil Sutter
  • [iptables PATCH 1/2] Eliminate inet_aton() and inet_ntoa(), Phil Sutter
• [PATCH net-next 00/22] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 01/22] netfilter: nat: move nf_xfrm_me_harder to where it is used, Pablo Neira Ayuso
    • Re: [PATCH net-next 01/22] netfilter: nat: move nf_xfrm_me_harder to where it is used, patchwork-bot+netdevbpf
  • [PATCH net-next 02/22] netfilter: nft_socket: add support for cgroupsv2, Pablo Neira Ayuso
  • [PATCH net-next 03/22] netfilter: disable defrag once its no longer needed, Pablo Neira Ayuso
  • [PATCH net-next 04/22] netfilter: ebtables: remove the 3 ebtables pointers from struct net, Pablo Neira Ayuso
  • [PATCH net-next 05/22] netfilter: x_tables: remove ipt_unregister_table, Pablo Neira Ayuso
  • [PATCH net-next 06/22] netfilter: x_tables: add xt_find_table, Pablo Neira Ayuso
  • [PATCH net-next 07/22] netfilter: iptables: unregister the tables by name, Pablo Neira Ayuso
  • [PATCH net-next 08/22] netfilter: ip6tables: unregister the tables by name, Pablo Neira Ayuso
  • [PATCH net-next 09/22] netfilter: arptables: unregister the tables by name, Pablo Neira Ayuso
  • [PATCH net-next 10/22] netfilter: x_tables: remove paranoia tests, Pablo Neira Ayuso
  • [PATCH net-next 11/22] netfilter: xt_nat: pass table to hookfn, Pablo Neira Ayuso
  • [PATCH net-next 21/22] netfilter: nfnetlink: consolidate callback types, Pablo Neira Ayuso
  • [PATCH net-next 22/22] netfilter: allow to turn off xtables compat layer, Pablo Neira Ayuso
  • [PATCH net-next 12/22] netfilter: ip_tables: pass table pointer via nf_hook_ops, Pablo Neira Ayuso
  • [PATCH net-next 13/22] netfilter: arp_tables: pass table pointer via nf_hook_ops, Pablo Neira Ayuso
  • [PATCH net-next 15/22] netfilter: remove all xt_table anchors from struct net, Pablo Neira Ayuso
  • [PATCH net-next 16/22] netfilter: nf_log_syslog: Unset bridge logger in pernet exit, Pablo Neira Ayuso
  • [PATCH net-next 14/22] netfilter: ip6_tables: pass table pointer via nf_hook_ops, Pablo Neira Ayuso
  • [PATCH net-next 17/22] netfilter: nftables: add nft_pernet() helper function, Pablo Neira Ayuso
  • [PATCH net-next 18/22] netfilter: nfnetlink: add struct nfnl_info and pass it to callbacks, Pablo Neira Ayuso
  • [PATCH net-next 19/22] netfilter: nfnetlink: pass struct nfnl_info to rcu callbacks, Pablo Neira Ayuso
  • [PATCH net-next 20/22] netfilter: nfnetlink: pass struct nfnl_info to batch callbacks, Pablo Neira Ayuso
• [nf-next:for-net-next 25/25] net/netfilter/nf_tables_api.c:4448:22: warning: variable 'ext' set but not used, kernel test robot
• [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Florian Westphal
  • Re: [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Jan Engelhardt
    • Re: [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Pablo Neira Ayuso
      • Re: [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Florian Westphal
  • Re: [PATCH nf-next] netfilter: allow to turn off xtables compat layer, Pablo Neira Ayuso
• [PATCH nf-next 1/4] netfilter: nftables: rename set element data activation/deactivation functions, Pablo Neira Ayuso
  • [PATCH nf-next 2/4] netfilter: nftables: add loop check helper function, Pablo Neira Ayuso
  • [PATCH nf-next 3/4] netfilter: nftables: add helper function to flush set elements, Pablo Neira Ayuso
  • [PATCH nf-next 4/4,v3] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
• [PATCH nf-next,v2] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nftables: add catch-all set element support, Pablo Neira Ayuso
• RSTs being marked as invalid because of wrong td_maxack value, Ali Abdallah
  • Re: RSTs being marked as invalid because of wrong td_maxack value, Florian Westphal
    • Re: RSTs being marked as invalid because of wrong td_maxack value, Ali Abdallah
      • Re: RSTs being marked as invalid because of wrong td_maxack value, Florian Westphal
• [PATCH nf-next 0/5] nfnetlink housekeeping, Pablo Neira Ayuso
  • [PATCH nf-next 3/5] netfilter: nfnetlink: pass struct nfnl_info to rcu callbacks, Pablo Neira Ayuso
  • [PATCH nf-next 1/5] netfilter: nftables: add nft_pernet() helper function, Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nfnetlink: add struct nfnl_info and pass it to callbacks, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nfnetlink: pass struct nfnl_info to batch callbacks, Pablo Neira Ayuso
  • [PATCH nf-next 5/5] netfilter: nfnetlink: consolidate callback types, Pablo Neira Ayuso
• [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
  • Re: [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
    • [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
      • Re: [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
        • Message not available
          • [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API, Cole Dishington
        • Message not available
          • [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
            • Re: [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
              • [PATCH 0/3] Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                • [PATCH 1/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API, Cole Dishington
                • [PATCH 3/3] selftests: netfilter: Add RFC-7597 Section 5.1 PSID selftests, Cole Dishington
                • [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                  • Re: [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
                    • [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                      • Re: [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
                        • [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                          • Re: [PATCH 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Florian Westphal
                            • [PATCH net-next 0/3] Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                              • [PATCH net-next 1/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API, Cole Dishington
                              • [PATCH net-next 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                                • Re: [PATCH net-next 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Pablo Neira Ayuso
                                  • Re: [PATCH net-next 2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support, Cole Dishington
                              • [PATCH net-next 3/3] selftests: netfilter: Add RFC-7597 Section 5.1 PSID selftests, Cole Dishington
• [PATCH] netfilter: nf_log_syslog: Unset bridge logger in pernet exit, Phil Sutter
  • Re: [PATCH] netfilter: nf_log_syslog: Unset bridge logger in pernet exit, Florian Westphal
  • Re: [PATCH] netfilter: nf_log_syslog: Unset bridge logger in pernet exit, Pablo Neira Ayuso
• [PATCH nf-next v2 00/12] netfilter: x_tables: remove ipt_unregister_table, Florian Westphal
  • [PATCH nf-next v2 01/12] netfilter: ebtables: remove the 3 ebtables pointers from struct net, Florian Westphal
  • [PATCH nf-next v2 02/12] netfilter: x_tables: remove ipt_unregister_table, Florian Westphal
  • [PATCH nf-next v2 03/12] netfilter: add xt_find_table, Florian Westphal
  • [PATCH nf-next v2 04/12] netfilter: iptables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next v2 05/12] netfilter: ip6tables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next v2 06/12] netfilter: arptables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next v2 08/12] netfilter: xt_nat: pass table to hookfn, Florian Westphal
  • [PATCH nf-next v2 07/12] netfilter: x_tables: remove paranoia tests, Florian Westphal
  • [PATCH nf-next v2 10/12] netfilter: arp_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next v2 09/12] netfilter: ip_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next v2 12/12] netfilter: remove all xt_table anchors from struct net, Florian Westphal
  • [PATCH nf-next v2 11/12] netfilter: ip6_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • Re: [PATCH nf-next v2 00/12] netfilter: x_tables: remove ipt_unregister_table, Pablo Neira Ayuso
• [PATCH v2 nf-next] netfilter: disable defrag once its no longer needed, Florian Westphal
  • Re: [PATCH v2 nf-next] netfilter: disable defrag once its no longer needed, Pablo Neira Ayuso
• [PATCH nft] src: add cgroupsv2 support, Pablo Neira Ayuso
• [PATCH libnftnl] expr: socket: add cgroups v2 support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_socket: add support for cgroupsv2, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: disable defrag once its no longer needed, Florian Westphal
  • Re: [PATCH nf-next] netfilter: disable defrag once its no longer needed, kernel test robot
• [PATCH nf-next 00/12] netfilter: remove xtables pointers from struct net, Florian Westphal
  • [PATCH nf-next 01/12] netfilter: ebtables: remove the 3 ebtables pointers from struct net, Florian Westphal
  • [PATCH nf-next 02/12] netfilter: x_tables: remove ipt_unregister_table, Florian Westphal
    • Re: [PATCH nf-next 02/12] netfilter: x_tables: remove ipt_unregister_table, kernel test robot
    • Re: [PATCH nf-next 02/12] netfilter: x_tables: remove ipt_unregister_table, kernel test robot
  • [PATCH nf-next 03/12] netfilter: add xt_find_table, Florian Westphal
  • [PATCH nf-next 04/12] netfilter: iptables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next 05/12] netfilter: ip6tables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next 06/12] netfilter: arptables: unregister the tables by name, Florian Westphal
  • [PATCH nf-next 07/12] netfilter: x_tables: remove paranoia tests, Florian Westphal
  • [PATCH nf-next 08/12] netfilter: xt_nat: pass table to hookfn, Florian Westphal
  • [PATCH nf-next 09/12] netfilter: ip_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next 10/12] netfilter: arp_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next 11/12] netfilter: ip6_tables: pass table pointer via nf_hook_ops, Florian Westphal
  • [PATCH nf-next 12/12] netfilter: remove all xt_table anchors from struct net, Florian Westphal
• [PATCH] netfilter: conntrack: Reset the max ACK flag on SYN in ignore state, Ali Abdallah
  • Re: [PATCH] netfilter: conntrack: Reset the max ACK flag on SYN in ignore state, Florian Westphal
• Error when using clone option in iptables, Mohan Das
  • Re: Error when using clone option in iptables, Jan Engelhardt
• Now have make distcheck passing with doxygen enabled, Duncan Roe
  • [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
    • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Jan Engelhardt
      • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
        • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Jan Engelhardt
          • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
            • Re: [PATCH libnetfilter_queue 1/1] build: doc: `make distcheck` passes with doxygen enabled, Jan Engelhardt
              • [PATCH libnetfilter_queue v2] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
                • Re: [PATCH libnetfilter_queue v2] build: doc: `make distcheck` passes with doxygen enabled, Duncan Roe
                  • Re: [PATCH libnetfilter_queue v2] build: doc: `make distcheck` passes with doxygen enabled, Jan Engelhardt
                • Re: [PATCH libnetfilter_queue v2] build: doc: `make distcheck` passes with doxygen enabled, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nat: move nf_xfrm_me_harder to where it is used, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nat: move nf_xfrm_me_harder to where it is used, Pablo Neira Ayuso
• [PATCH nft] parser_bison: missing relational operation on flag list, Pablo Neira Ayuso
• [PATCH net-next 00/14] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 01/14] netfilter: flowtable: add vlan match offload support, Pablo Neira Ayuso
    • Re: [PATCH net-next 01/14] netfilter: flowtable: add vlan match offload support, patchwork-bot+netdevbpf
  • [PATCH net-next 02/14] netfilter: flowtable: add vlan pop action offload support, Pablo Neira Ayuso
  • [PATCH net-next 03/14] netfilter: conntrack: move autoassign warning member to net_generic data, Pablo Neira Ayuso
  • [PATCH net-next 04/14] netfilter: conntrack: move autoassign_helper sysctl to net_generic data, Pablo Neira Ayuso
  • [PATCH net-next 05/14] netfilter: conntrack: move expect counter to net_generic data, Pablo Neira Ayuso
  • [PATCH net-next 07/14] netfilter: conntrack: convert sysctls to u8, Pablo Neira Ayuso
  • [PATCH net-next 06/14] netfilter: conntrack: move ct counter to net_generic data, Pablo Neira Ayuso
  • [PATCH net-next 08/14] netfilter: flowtable: Add FLOW_OFFLOAD_XMIT_UNSPEC xmit type, Pablo Neira Ayuso
  • [PATCH net-next 09/14] netfilter: nft_payload: fix C-VLAN offload support, Pablo Neira Ayuso
  • [PATCH net-next 10/14] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector, Pablo Neira Ayuso
  • [PATCH net-next 12/14] netfilter: Dissect flow after packet mangling, Pablo Neira Ayuso
  • [PATCH net-next 11/14] netfilter: nftables_offload: special ethertype handling for VLAN, Pablo Neira Ayuso
  • [PATCH net-next 13/14] selftests: fib_tests: Add test cases for interaction with mangling, Pablo Neira Ayuso
  • [PATCH net-next 14/14] netfilter: nftables: counter hardware offload support, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net-next 00/14] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH net-next 02/14] netfilter: nfqueue: enable to get skb->priority, Pablo Neira Ayuso
    • [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Pablo Neira Ayuso
      • Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, patchwork-bot+netdevbpf
      • Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Gal Pressman
        • Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Florian Westphal
          • Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Pablo Neira Ayuso
            • Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Gal Pressman
              • Re: [PATCH net-next 01/14] netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY, Florian Westphal
    • [PATCH net-next 03/14] netfilter: conntrack: make all extensions 8-byte alignned, Pablo Neira Ayuso
    • [PATCH net-next 06/14] netfilter: conntrack: remove extension register api, Pablo Neira Ayuso
    • [PATCH net-next 05/14] netfilter: conntrack: handle ->destroy hook via nat_ops instead, Pablo Neira Ayuso
    • [PATCH net-next 04/14] netfilter: conntrack: move extension sizes into core, Pablo Neira Ayuso
    • [PATCH net-next 07/14] netfilter: conntrack: pptp: use single option structure, Pablo Neira Ayuso
    • [PATCH net-next 08/14] netfilter: exthdr: add support for tcp option removal, Pablo Neira Ayuso
    • [PATCH net-next 10/14] netfilter: ecache: don't use nf_conn spinlock, Pablo Neira Ayuso
    • [PATCH net-next 09/14] netfilter: nft_compat: suppress comment match, Pablo Neira Ayuso
    • [PATCH net-next 13/14] nfqueue: enable to set skb->priority, Pablo Neira Ayuso
    • [PATCH net-next 12/14] netfilter: nft_cmp: optimize comparison for 16-bytes, Pablo Neira Ayuso
    • [PATCH net-next 11/14] netfilter: cttimeout: use option structure, Pablo Neira Ayuso
    • [PATCH net-next 14/14] netfilter: ctnetlink: use dump structure instead of raw args, Pablo Neira Ayuso
  • [PATCH net-next 00/14] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH net-next 03/14] netfilter: nf_tables: add nft_trans_commit_list_add_elem helper, Pablo Neira Ayuso
    • [PATCH net-next 01/14] netfilter: nfnetlink: Report extack policy errors for batched ops, Pablo Neira Ayuso
      • Re: [PATCH net-next 01/14] netfilter: nfnetlink: Report extack policy errors for batched ops, patchwork-bot+netdevbpf
    • [PATCH net-next 02/14] netfilter: bpf: Pass string literal as format argument of request_module(), Pablo Neira Ayuso
    • [PATCH net-next 05/14] netfilter: nf_tables: prepare nft audit for set element compaction, Pablo Neira Ayuso
    • [PATCH net-next 04/14] netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structure, Pablo Neira Ayuso
    • [PATCH net-next 10/14] netfilter: rpfilter: Convert rpfilter_mt() to dscp_t., Pablo Neira Ayuso
    • [PATCH net-next 08/14] netfilter: ipv4: Convert ip_route_me_harder() to dscp_t., Pablo Neira Ayuso
    • [PATCH net-next 09/14] netfilter: flow_offload: Convert nft_flow_route() to dscp_t., Pablo Neira Ayuso
    • [PATCH net-next 07/14] netfilter: nf_tables: allocate element update information dynamically, Pablo Neira Ayuso
    • [PATCH net-next 06/14] netfilter: nf_tables: switch trans_elem to real flex array, Pablo Neira Ayuso
    • [PATCH net-next 12/14] netfilter: nf_dup4: Convert nf_dup_ipv4_route() to dscp_t., Pablo Neira Ayuso
    • [PATCH net-next 11/14] netfilter: nft_fib: Convert nft_fib4_eval() to dscp_t., Pablo Neira Ayuso
    • [PATCH net-next 13/14] netfilter: bitwise: rename some boolean operation functions, Pablo Neira Ayuso
    • [PATCH net-next 14/14] netfilter: bitwise: add support for doing AND, OR and XOR directly, Pablo Neira Ayuso
• [PATCH 3/3,v4] netfilter: nftables_offload: special ethertype handling for VLAN, Pablo Neira Ayuso
• [PATCH v2 0/2] Two fixes related to '--concurrent', Firo Yang
  • [PATCH v2 1/2] libebtc: Fix an issue that '--concurrent' doesn't work with NFS, Firo Yang
  • [PATCH v2 2/2] ebtables: Spewing an error if --concurrent isn't first argument, Firo Yang
  • Re: [PATCH v2 0/2] Two fixes related to '--concurrent', Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nftables: counter hardware offload support, Pablo Neira Ayuso
• [PATCH nft 0/10] cache updates, Pablo Neira Ayuso
  • [PATCH nft 01/10] cache: add hashtable cache for object, Pablo Neira Ayuso
  • [PATCH nft 02/10] cache: add hashtable cache for flowtable, Pablo Neira Ayuso
  • [PATCH nft 03/10] cache: add set_cache_del() and use it, Pablo Neira Ayuso
  • [PATCH nft 04/10] evaluate: add set to the cache, Pablo Neira Ayuso
  • [PATCH nft 05/10] evaluate: add flowtable to the cache, Pablo Neira Ayuso
  • [PATCH nft 07/10] evaluate: add object to the cache, Pablo Neira Ayuso
  • [PATCH nft 06/10] cache: missing table cache for several policy objects, Pablo Neira Ayuso
  • [PATCH nft 08/10] cache: move struct nft_cache declaration to cache.h, Pablo Neira Ayuso
  • [PATCH nft 09/10] cache: add hashtable cache for table, Pablo Neira Ayuso
  • [PATCH nft 10/10] evaluate: remove table_lookup_global(), Pablo Neira Ayuso
• [nft PATCH] mnl: Increase BATCH_PAGE_SIZE to support huge rulesets, Phil Sutter
• [PATCH nf-next v2 0/2] netfilter: Dissect flow after packet mangling, Ido Schimmel
  • [PATCH nf-next v2 1/2] netfilter: Dissect flow after packet mangling, Ido Schimmel
  • [PATCH nf-next v2 2/2] selftests: fib_tests: Add test cases for interaction with mangling, Ido Schimmel
    • Re: [PATCH nf-next v2 2/2] selftests: fib_tests: Add test cases for interaction with mangling, David Ahern
  • Re: [PATCH nf-next v2 0/2] netfilter: Dissect flow after packet mangling, Pablo Neira Ayuso
• [PATCH] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Cole Dishington
  • Re: [PATCH] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Florian Westphal
    • [PATCH] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Cole Dishington
      • Re: [PATCH] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Florian Westphal
        • Re: [PATCH] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Florian Westphal
          • [PATCH v3] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Cole Dishington
            • Re: [PATCH v3] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Florian Westphal
            • Re: [PATCH v3] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Florian Westphal
    • Re: [PATCH] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Jan Engelhardt
      • Re: [PATCH] netfilter: nf_conntrack: Add conntrack helper for ESP/IPsec, Cole Dishington
• [PATCH nf-next,v3 1/3] netfilter: nft_payload: fix C-VLAN offload support, Pablo Neira Ayuso
  • [PATCH nf-next,v3 3/3] netfilter: nftables_offload: special ethertype handling for VLAN, Pablo Neira Ayuso
  • [PATCH nf-next,v3 2/3] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector, Pablo Neira Ayuso
• [PATCH nft] parser: allow to load stateful ct connlimit elements in sets, nevola
  • Re: [PATCH nft] parser: allow to load stateful ct connlimit elements in sets, Pablo Neira Ayuso
• [PATCH net 0/7] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 1/7] netfilter: flowtable: fix NAT IPv6 offload mangling, Pablo Neira Ayuso
    • Re: [PATCH net 1/7] netfilter: flowtable: fix NAT IPv6 offload mangling, patchwork-bot+netdevbpf
  • [PATCH net 2/7] netfilter: conntrack: do not print icmpv6 as unknown via /proc, Pablo Neira Ayuso
  • [PATCH net 3/7] netfilter: nft_limit: avoid possible divide error in nft_limit_init, Pablo Neira Ayuso
  • [PATCH net 4/7] netfilter: bridge: add pre_exit hooks for ebtable unregistration, Pablo Neira Ayuso
  • [PATCH net 5/7] netfilter: arp_tables: add pre_exit hook for table unregister, Pablo Neira Ayuso
  • [PATCH net 6/7] netfilter: x_tables: fix compat match/target pad out-of-bound write, Pablo Neira Ayuso
  • [PATCH net 7/7] netfilter: nftables: clone set element expression template, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/7] netfilter: nfnetlink_queue: silence bogus compiler warning, Pablo Neira Ayuso
      • Re: [PATCH net 1/7] netfilter: nfnetlink_queue: silence bogus compiler warning, patchwork-bot+netdevbpf
    • [PATCH net 4/7] selftests: netfilter: Add correctness test for mac,net set type, Pablo Neira Ayuso
    • [PATCH net 2/7] vrf: don't run conntrack on vrf with !dflt qdisc, Pablo Neira Ayuso
    • [PATCH net 5/7] netfilter: nft_exthdr: break evaluation if setting TCP option fails, Pablo Neira Ayuso
    • [PATCH net 3/7] nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups, Pablo Neira Ayuso
    • [PATCH net 7/7] netfilter: conntrack: annotate data-races around ct->timeout, Pablo Neira Ayuso
    • [PATCH net 6/7] selftests: netfilter: switch zone stress to socat, Pablo Neira Ayuso
  • [PATCH net 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/7] netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices, Pablo Neira Ayuso
    • [PATCH net 4/7] netfilter: nft_flow_offload: fix offload with pppoe + vlan, Pablo Neira Ayuso
    • [PATCH net 7/7] netfilter: nf_tables: disable expression reduction infra, Pablo Neira Ayuso
    • [PATCH net 3/7] net: fix dev_fill_forward_path with pppoe + bridge, Pablo Neira Ayuso
    • [PATCH net 1/7] netfilter: flowtable: fix excessive hw offload attempts after failure, Pablo Neira Ayuso
      • Re: [PATCH net 1/7] netfilter: flowtable: fix excessive hw offload attempts after failure, patchwork-bot+netdevbpf
    • [PATCH net 5/7] netfilter: flowtable: fix TCP flow teardown, Pablo Neira Ayuso
    • [PATCH net 6/7] netfilter: flowtable: move dst_check to packet path, Pablo Neira Ayuso
  • [PATCH net 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 7/7] netfilter: nf_tables: bail out early if hardware offload is not supported, Pablo Neira Ayuso
      • Re: [PATCH net 7/7] netfilter: nf_tables: bail out early if hardware offload is not supported, Jakub Kicinski
        • Re: [PATCH net 7/7] netfilter: nf_tables: bail out early if hardware offload is not supported, Pablo Neira Ayuso
    • [PATCH net 2/7] netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net path, Pablo Neira Ayuso
    • [PATCH net 4/7] netfilter: nf_tables: always initialize flowtable hook list in transaction, Pablo Neira Ayuso
    • [PATCH net 6/7] netfilter: nf_tables: memleak flow rule from commit path, Pablo Neira Ayuso
    • [PATCH net 1/7] netfilter: nat: really support inet nat without l3 address, Pablo Neira Ayuso
      • Re: [PATCH net 1/7] netfilter: nat: really support inet nat without l3 address, patchwork-bot+netdevbpf
    • [PATCH net 5/7] netfilter: nf_tables: release new hooks on unsupported flowtable flags, Pablo Neira Ayuso
    • [PATCH net 3/7] netfilter: nf_tables: delete flowtable hooks via transaction list, Pablo Neira Ayuso
  • [PATCH net 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/7] netfilter: conntrack: fix ipv6 exthdr error check, Pablo Neira Ayuso
      • Re: [PATCH net 1/7] netfilter: conntrack: fix ipv6 exthdr error check, patchwork-bot+netdevbpf
    • [PATCH net 3/7] netfilter: nf_tables: add function to create set stateful expressions, Pablo Neira Ayuso
    • [PATCH net 4/7] netfilter: nf_tables: perform type checking for existing sets, Pablo Neira Ayuso
    • [PATCH net 2/7] netfilter: nf_tables: consolidate set description, Pablo Neira Ayuso
    • [PATCH net 5/7] netfilter: nf_tables: honor set timeout and garbage collection updates, Pablo Neira Ayuso
    • [PATCH net 6/7] netfilter: ipset: fix hash:net,port,net hang with /0 subnet, Pablo Neira Ayuso
    • [PATCH net 7/7] netfilter: ipset: Rework long task execution when adding/deleting entries, Pablo Neira Ayuso
  • [PATCH net 0/7] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/7] netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get(), Pablo Neira Ayuso
    • [PATCH net 1/7] netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get(), Pablo Neira Ayuso
      • Re: [PATCH net 1/7] netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get(), patchwork-bot+netdevbpf
    • [PATCH net 4/7] netfilter: nft_set_pipapo: walk over current view on netlink dump, Pablo Neira Ayuso
    • [PATCH net 3/7] netfilter: br_netfilter: skip conntrack input hook for promisc packets, Pablo Neira Ayuso
    • [PATCH net 5/7] netfilter: nft_set_pipapo: do not free live element, Pablo Neira Ayuso
    • [PATCH net 6/7] netfilter: flowtable: validate pppoe header, Pablo Neira Ayuso
    • [PATCH net 7/7] netfilter: flowtable: incorrect pppoe tuple, Pablo Neira Ayuso
    • Re: [PATCH net 0/7] Netfilter fixes for net, Paolo Abeni
      • Re: [PATCH net 0/7] Netfilter fixes for net, Pablo Neira Ayuso
        • Re: [PATCH net 0/7] Netfilter fixes for net, Paolo Abeni
          • Re: [PATCH net 0/7] Netfilter fixes for net, Pablo Neira Ayuso
• [PATCH nf-next v2 0/5] netfilter: conntrack: shrink size of netns_ct, Florian Westphal
  • [PATCH nf-next v2 1/5] netfilter: conntrack: move autoassign warning member to net_generic data, Florian Westphal
  • [PATCH nf-next v2 2/5] netfilter: conntrack: move autoassign_helper sysctl to net_generic data, Florian Westphal
  • [PATCH nf-next v2 3/5] netfilter: conntrack: move expect counter to net_generic data, Florian Westphal
  • [PATCH nf-next v2 4/5] netfilter: conntrack: move ct counter to net_generic data, Florian Westphal
  • [PATCH nf-next v2 5/5] netfilter: conntrack: convert sysctls to u8, Florian Westphal
  • Re: [PATCH nf-next v2 0/5] netfilter: conntrack: shrink size of netns_ct, Pablo Neira Ayuso
• [PATCH nf-next,v2 1/3] netfilter: nft_payload: fix C-VLAN offload support, Pablo Neira Ayuso
  • [PATCH nf-next,v2 3/3] netfilter: nftables_offload: special ethertype handling for VLAN, Pablo Neira Ayuso
  • [PATCH nf-next,v2 2/3] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector, Pablo Neira Ayuso
    • Re: [PATCH nf-next,v2 2/3] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector, kernel test robot
• [PATCH nf-next 1/3] netfilter: nft_payload: fix C-VLAN offload support, Pablo Neira Ayuso
  • [PATCH nf-next 2/3] netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector, Pablo Neira Ayuso
  • [PATCH nf-next 3/3] netfilter: nftables_offload: special ethertype handling for VLAN, Pablo Neira Ayuso
    • Re: [PATCH nf-next 3/3] netfilter: nftables_offload: special ethertype handling for VLAN, kernel test robot
• linux-next: build failure after merge of the net-next tree, Stephen Rothwell
  • Re: linux-next: build failure after merge of the net-next tree, Florian Westphal
  • Re: linux-next: build failure after merge of the net-next tree, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: Dissect flow after packet mangling, Ido Schimmel
  • Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling, David Ahern
    • Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling, Ido Schimmel
      • Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling, Michal Soltys
        • Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling, Ido Schimmel
          • Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling, Michal Soltys
• [PATCH nf,v4] netfilter: nftables: clone set element expression template, Pablo Neira Ayuso
• [PATCH nf,v3] netfilter: nftables: clone set element expression template, Pablo Neira Ayuso
• [syzbot] WARNING in __nf_unregister_net_hook (4), syzbot
  • Re: [syzbot] WARNING in __nf_unregister_net_hook (4), Dmitry Vyukov
    • Re: [syzbot] WARNING in __nf_unregister_net_hook (4), Florian Westphal
      • Re: [syzbot] WARNING in __nf_unregister_net_hook (4), Pablo Neira Ayuso
        • Re: [syzbot] WARNING in __nf_unregister_net_hook (4), Dmitry Vyukov
          • Re: [syzbot] WARNING in __nf_unregister_net_hook (4), Pablo Neira Ayuso
            • Re: [syzbot] WARNING in __nf_unregister_net_hook (4), Dmitry Vyukov
              • Re: [syzbot] WARNING in __nf_unregister_net_hook (4), Pablo Neira Ayuso
  • Re: [syzbot] WARNING in __nf_unregister_net_hook (4), syzbot
  • [PATCH nf] netfilter: nftables: skip netdev events generated on netns removal, Florian Westphal
    • Re: [PATCH nf] netfilter: nftables: skip netdev events generated on netns removal, Pablo Neira Ayuso
• [PATCH net] netfilter: nft_limit: avoid possible divide error in nft_limit_init, Eric Dumazet
  • Re: [PATCH net] netfilter: nft_limit: avoid possible divide error in nft_limit_init, Pablo Neira Ayuso
• [PATCH nf-next 0/5] netfilter: conntrack: shrink size of netns_ct, Florian Westphal
  • [PATCH nf-next 1/5] netfilter: conntrack: move autoassign warning member to net_generic data, Florian Westphal
  • [PATCH nf-next 2/5] netfilter: conntrack: move autoassign_helper sysctl to net_generic data, Florian Westphal
  • [PATCH nf-next 3/5] netfilter: conntrack: move expect counter to net_generic data, Florian Westphal
  • [PATCH nf-next 4/5] netfilter: conntrack: move ct counter to net_generic data, Florian Westphal
    • Re: [PATCH nf-next 4/5] netfilter: conntrack: move ct counter to net_generic data, kernel test robot
  • [PATCH nf-next 5/5] netfilter: conntrack: convert sysctls to u8, Florian Westphal
• [PATCH] net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta, wenxu
  • Re: [PATCH] net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta, Pablo Neira Ayuso
  • Re: [PATCH] net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta, Saeed Mahameed
• [PATCH nf v2] netfilter: nft_payload: fix the h_vlan_encapsulated_proto flow_dissector vlaue, wenxu
  • Re: [PATCH nf v2] netfilter: nft_payload: fix the h_vlan_encapsulated_proto flow_dissector vlaue, Pablo Neira Ayuso
    • Re: [PATCH nf v2] netfilter: nft_payload: fix the h_vlan_encapsulated_proto flow_dissector vlaue, Pablo Neira Ayuso
      • Re: [PATCH nf v2] netfilter: nft_payload: fix the h_vlan_encapsulated_proto flow_dissector vlaue, wenxu
• [PATCH nf] netfilter: nftables: clone set element expression template, Pablo Neira Ayuso
• [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state, Ali Abdallah
  • Re: [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state, Florian Westphal
    • Re: [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state, Ali Abdallah
      • Re: [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state, Florian Westphal
        • Re: [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state, Ali Abdallah
          • Re: [PATCH] conntrack_tcp: Reset the max ACK flag on SYN in ignore state, Florian Westphal
• [PATCH nf 0/2] arp,ebtables: add pre_exit hooks for arp/ebtable hook unregister, Florian Westphal
  • [PATCH nf 1/2] netfilter: bridge: add pre_exit hooks for ebtable unregistration, Florian Westphal
  • [PATCH nf 2/2] netfilter: arp_tables: netfilter: bridge: add pre_exit hook for table unregister, Florian Westphal
  • Re: [PATCH nf 0/2] arp,ebtables: add pre_exit hooks for arp/ebtable hook unregister, Pablo Neira Ayuso
• [PATCH nf] netfilter: x_tables: fix compat match/target pad out-of-bound write, Florian Westphal
  • Re: [PATCH nf] netfilter: x_tables: fix compat match/target pad out-of-bound write, Pablo Neira Ayuso
• [PATCH nft] evaluate: check if nat statement map specifies a transport header expr, Florian Westphal
• LPC 2021 Networking and BPF Track CFP, Daniel Borkmann
  • LPC 2021 Networking and BPF Track CFP (Reminder), Daniel Borkmann
    • LPC 2021 Networking and BPF Track CFP (2nd reminder), Daniel Borkmann
• [PATCH net-next 00/28] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 01/28] netfilter: nf_log_ipv4: rename to nf_log_syslog, Pablo Neira Ayuso
  • [PATCH net-next 02/28] netfilter: nf_log_arp: merge with nf_log_syslog, Pablo Neira Ayuso
  • [PATCH net-next 03/28] netfilter: nf_log_ipv6: merge with nf_log_syslog, Pablo Neira Ayuso
  • [PATCH net-next 04/28] netfilter: nf_log_netdev: merge with nf_log_syslog, Pablo Neira Ayuso
  • [PATCH net-next 05/28] netfilter: nf_log_bridge: merge with nf_log_syslog, Pablo Neira Ayuso
  • [PATCH net-next 07/28] netfilter: nf_log: add module softdeps, Pablo Neira Ayuso
  • [PATCH net-next 06/28] netfilter: nf_log_common: merge with nf_log_syslog, Pablo Neira Ayuso
  • [PATCH net-next 12/28] netfilter: nftables: remove unnecessary spin_lock_init(), Pablo Neira Ayuso
  • [PATCH net-next 08/28] netfilter: nft_log: perform module load from nf_tables, Pablo Neira Ayuso
  • [PATCH net-next 10/28] netfilter: ipset: Remove duplicate declaration, Pablo Neira Ayuso
  • [PATCH net-next 09/28] audit: log nftables configuration change events once per table, Pablo Neira Ayuso
  • [PATCH net-next 13/28] netfilter: nftables: add helper function to set the base sequence number, Pablo Neira Ayuso
  • [PATCH net-next 16/28] netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect(), Pablo Neira Ayuso
  • [PATCH net-next 20/28] netfilter: cttimeout: use net_generic infra, Pablo Neira Ayuso
  • [PATCH net-next 22/28] netfilter: nf_defrag_ipv4: use net_generic infra, Pablo Neira Ayuso
  • [PATCH net-next 18/28] netfilter: nfnetlink: add and use nfnetlink_broadcast, Pablo Neira Ayuso
  • [PATCH net-next 17/28] netfilter: nftables: remove documentation on static functions, Pablo Neira Ayuso
  • [PATCH net-next 15/28] netfilter: ipvs: do not printk on netns creation, Pablo Neira Ayuso
  • [PATCH net-next 14/28] netfilter: add helper function to set up the nfnetlink header and use it, Pablo Neira Ayuso
  • [PATCH net-next 11/28] netfilter: flowtable: dst_check() from garbage collector path, Pablo Neira Ayuso
  • [PATCH net-next 23/28] netfilter: ebtables: use net_generic infra, Pablo Neira Ayuso
  • [PATCH net-next 19/28] netfilter: nfnetlink: use net_generic infra, Pablo Neira Ayuso
  • [PATCH net-next 24/28] netfilter: nf_tables: use net_generic infra for transaction data, Pablo Neira Ayuso
  • [PATCH net-next 21/28] netfilter: nf_defrag_ipv6: use net_generic infra, Pablo Neira Ayuso
  • [PATCH net-next 25/28] netfilter: x_tables: move known table lists to net_generic infra, Pablo Neira Ayuso
  • [PATCH net-next 26/28] netfilter: conntrack: move sysctl pointer to net_generic infra, Pablo Neira Ayuso
  • [PATCH net-next 27/28] netfilter: conntrack: move ecache dwork to net_generic infra, Pablo Neira Ayuso
  • [PATCH net-next 28/28] net: remove obsolete members from struct net, Pablo Neira Ayuso
• [PATCH v4 0/5] conntrack: save output format, Mikhail Sennikovsky
  • [PATCH v4 1/5] conntrack: introduce ct_cmd_list, Mikhail Sennikovsky
  • [PATCH v4 2/5] conntrack: accept commands from file, Mikhail Sennikovsky
  • [PATCH v4 3/5] conntrack.8: man update for --load-file support, Mikhail Sennikovsky
  • [PATCH v4 4/5] tests: saving and loading ct entries, save format, Mikhail Sennikovsky
  • [PATCH v4 5/5] tests: conntrack -L/-D ip family filtering, Mikhail Sennikovsky
  • Re: [PATCH v4 0/5] conntrack: save output format, Pablo Neira Ayuso
• [iptables PATCH v2] nft: Increase BATCH_PAGE_SIZE to support huge rulesets, Phil Sutter
• Unused macro, Alejandro Colomar (man-pages)
  • Re: Unused macro, Florian Westphal
    • Re: Unused macro, Alejandro Colomar (man-pages)
      • Re: Unused macro, Pablo Neira Ayuso
        • Re: Unused macro, Alejandro Colomar (man-pages)
• [PATCH nf-next v2 1/2] netfilter: flowtable: add vlan match offload support, wenxu
  • [PATCH nf-next v2 2/2] netfilter: flowtable: add vlan pop action offload support, wenxu
    • Re: [PATCH nf-next v2 2/2] netfilter: flowtable: add vlan pop action offload support, Pablo Neira Ayuso
  • Re: [PATCH nf-next v2 1/2] netfilter: flowtable: add vlan match offload support, Pablo Neira Ayuso
• [syzbot] WARNING: suspicious RCU usage in find_inlist_lock, syzbot
  • Re: [syzbot] WARNING: suspicious RCU usage in find_inlist_lock, Dmitry Vyukov
• [PATCH iptables] fix build for missing ETH_ALEN definition, Maciej Żenczykowski
• [PATCH netfilter] netfilter: xt_IDLETIMER: fix idletimer_tg_helper non-kosher casts, Maciej Żenczykowski
  • Re: [PATCH netfilter] netfilter: xt_IDLETIMER: fix idletimer_tg_helper non-kosher casts, Florian Westphal
    • Re: [PATCH netfilter] netfilter: xt_IDLETIMER: fix idletimer_tg_helper non-kosher casts, Maciej Żenczykowski
• [PATCH nft 1/2] cache: add hashtable cache for sets, Pablo Neira Ayuso
  • [PATCH nft 2/2] cache: bail out if chain list cannot be fetched from kernel, Pablo Neira Ayuso
• [PATCH] netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect(), Dan Carpenter
  • Re: [PATCH] netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect(), Paul Moore
    • Re: [PATCH] netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect(), Pablo Neira Ayuso
      • Re: [PATCH] netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect(), Richard Guy Briggs
• [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto, wenxu
  • Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto, kernel test robot
  • Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto, wenxu
      • Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto, wenxu
        • Re: [PATCH nf] netfilter: nft_payload: fix vlan_tpid get from h_vlan_proto, Pablo Neira Ayuso
• [PATCH nft] cache: check for NULL chain in cache_init(), Pablo Neira Ayuso
• [PATCH nft 1/4] cache: rename chain_htable to cache_chain_ht, Pablo Neira Ayuso
  • [PATCH nft 2/4,v2] src: split chain list in table, Pablo Neira Ayuso
  • [PATCH nft 3/4] evaluate: use chain hashtable for lookups, Pablo Neira Ayuso
  • [PATCH nft 4/4] cache: statify chain_cache_dump(), Pablo Neira Ayuso
• [iptables PATCH v5 1/2] extensions: libxt_conntrack: print xlate state as set, Alexander Mikhalitsyn
  • [iptables PATCH v5 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
    • Re: [iptables PATCH v5 2/2] extensions: libxt_conntrack: print xlate status as set, Florian Westphal
      • Re: [iptables PATCH v5 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
  • Re: [iptables PATCH v5 1/2] extensions: libxt_conntrack: print xlate state as set, Florian Westphal
• [iptables PATCH v5 PATCH 1/2] extensions: libxt_conntrack: print xlate state as set, Alexander Mikhalitsyn
  • [iptables PATCH v5 PATCH 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
    • Re: [iptables PATCH v5 PATCH 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
• [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets, Phil Sutter
  • Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets, Florian Westphal
    • Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets, Pablo Neira Ayuso
    • Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets, Phil Sutter
      • Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets, Pablo Neira Ayuso
      • Re: [iptables PATCH] nft: Increase BATCH_PAGE_SIZE to support huge rulesets, Florian Westphal
• [PATCH nft 0/4] Add support for 8021.AD frame matching, Florian Westphal
  • [PATCH nft 2/4] proto: add 8021ad as mnemonic for IEEE 802.1AD (0x88a8) ether type, Florian Westphal
  • [PATCH nft 1/4] src: vlan: allow matching vlan id insider 802.1ad frame, Florian Westphal
  • [PATCH nft 4/4] tests: add 8021.AD vlan test cases, Florian Westphal
  • [PATCH nft 3/4] payload: be careful on vlan dependency removal, Florian Westphal
  • [PATCH nft 5/4] proto: replace vlan ether type with 8021q, Florian Westphal
• [PATCH nft] evaluate: use chain hashtable for lookups, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nft] evaluate: use chain hashtable for lookups, Pablo Neira Ayuso
• [PATCH nf-next v2 00/11] netfilter: reduce struct net size, Florian Westphal
  • [PATCH nf-next v2 04/11] netfilter: nf_defrag_ipv6: use net_generic infra, Florian Westphal
  • [PATCH nf-next v2 08/11] netfilter: x_tables: move known table lists to net_generic infra, Florian Westphal
  • [PATCH nf-next v2 03/11] netfilter: cttimeout: use net_generic infra, Florian Westphal
  • [PATCH nf-next v2 10/11] netfilter: conntrack: move ecache dwork to net_generic infra, Florian Westphal
  • [PATCH nf-next v2 02/11] netfilter: nfnetlink: use net_generic infra, Florian Westphal
  • [PATCH nf-next v2 01/11] netfilter: nfnetlink: add and use nfnetlink_broadcast, Florian Westphal
  • [PATCH nf-next v2 06/11] netfilter: ebtables: use net_generic infra, Florian Westphal
  • [PATCH nf-next v2 09/11] netfilter: conntrack: move sysctl pointer to net_generic infra, Florian Westphal
  • [PATCH nf-next v2 05/11] netfilter: nf_defrag_ipv4: use net_generic infra, Florian Westphal
  • [PATCH nf-next v2 11/11] net: remove obsolete members from struct net, Florian Westphal
  • [PATCH nf-next v2 07/11] netfilter: nf_tables: use net_generic infra for transaction data, Florian Westphal
  • Re: [PATCH nf-next v2 00/11] netfilter: reduce struct net size, Pablo Neira Ayuso
• [PATCH nf-next 1/2] netfilter: flowtable: add vlan match offload support, wenxu
  • [PATCH nf-next 2/2] netfilter: flowtable: add vlan pop action offload support, wenxu
  • Re: [PATCH nf-next 1/2] netfilter: flowtable: add vlan match offload support, Pablo Neira Ayuso
    • Re: [PATCH nf-next 1/2] netfilter: flowtable: add vlan match offload support, wenxu
  • Re: [PATCH nf-next 1/2] netfilter: flowtable: add vlan match offload support, kernel test robot
• [PATCH 0/2] Two fixes related to '--concurrent'., Firo Yang
  • [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Firo Yang
    • Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Pablo Neira Ayuso
      • Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Pablo Neira Ayuso
        • Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Firo Yang
          • Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Pablo Neira Ayuso
        • Message not available
          • Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Simon Lees
            • Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Pablo Neira Ayuso
            • Message not available
              • Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Simon Lees
                • Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Pablo Neira Ayuso
                  • Re: [PATCH 1/2] ebtables: processing '--concurrent' beofore other arguments, Firo Yang
  • [PATCH 2/2] libebtc: Fix an issue that '--concurrent' doesn't work with NFS, Firo Yang
• [PATCH nf-next] netfilter: nftables: remove documentation on static functions, Pablo Neira Ayuso
• nf-next rebase..., Pablo Neira Ayuso
• [PATCH nf-next 00/11] netfilter: reduce struct net size, Florian Westphal
  • [PATCH nf-next 03/11] netfilter: cttimeout: use net_generic infra, Florian Westphal
  • [PATCH nf-next 01/11] netfilter: nfnetlink: add and use nfnetlink_broadcast, Florian Westphal
  • [PATCH nf-next 06/11] netfilter: ebtables: use net_generic infra, Florian Westphal
  • [PATCH nf-next 02/11] netfilter: nfnetlink: use net_generic infra, Florian Westphal
  • [PATCH nf-next 05/11] netfilter: nf_defrag_ipv4: use net_generic infra, Florian Westphal
  • [PATCH nf-next 04/11] netfilter: nf_defrag_ipv6: use net_generic infra, Florian Westphal
  • [PATCH nf-next 08/11] netfilter: x_tables: move known table lists to net_generic infra, Florian Westphal
  • [PATCH nf-next 07/11] netfilter: nf_tables: use net_generic infra for transaction data, Florian Westphal
    • Re: [PATCH nf-next 07/11] netfilter: nf_tables: use net_generic infra for transaction data, kernel test robot
  • [PATCH nf-next 09/11] netfilter: conntrack: move sysctl pointer to net_generic infra, Florian Westphal
  • [PATCH nf-next 10/11] netfilter: conntrack: move ecache dwork to net_generic infra, Florian Westphal
  • [PATCH nf-next 11/11] net: remove obsolete members from struct net, Florian Westphal
• [PATCH][next] netfilter: nf_log_bridge: Fix missing assignment of ret on a call to nf_log_register, Colin King
  • Re: [PATCH][next] netfilter: nf_log_bridge: Fix missing assignment of ret on a call to nf_log_register, Florian Westphal
  • Re: [PATCH][next] netfilter: nf_log_bridge: Fix missing assignment of ret on a call to nf_log_register, Pablo Neira Ayuso
• [PATCH nft 1/2] mnl: do not set flowtable flags twice, Pablo Neira Ayuso
  • [PATCH nft 2/2] parser_bison: simplify flowtable offload flag parser, Pablo Neira Ayuso
• [iptables PATCH v4 PATCH 1/2] extensions: libxt_conntrack: print xlate state as set, Alexander Mikhalitsyn
  • [iptables PATCH v4 PATCH 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
  • [iptables PATCH v5 PATCH 1/2] extensions: libxt_conntrack: print xlate state as set, Alexander Mikhalitsyn
• [iptables PATCH v3 1/2] extensions: libxt_conntrack: print xlate state as set, Alexander Mikhalitsyn
  • [iptables PATCH v3 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
    • Re: [iptables PATCH v3 2/2] extensions: libxt_conntrack: print xlate status as set, Florian Westphal
      • Re: [iptables PATCH v3 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
  • Re: [iptables PATCH v3 1/2] extensions: libxt_conntrack: print xlate state as set, Florian Westphal
• iptables-nft fails to restore huge rulesets, Phil Sutter
  • Re: iptables-nft fails to restore huge rulesets, Florian Westphal
    • Re: iptables-nft fails to restore huge rulesets, Phil Sutter
      • Re: iptables-nft fails to restore huge rulesets, Pablo Neira Ayuso
        • Re: iptables-nft fails to restore huge rulesets, Phil Sutter
          • Re: iptables-nft fails to restore huge rulesets, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: flowtable: fix set software outdev on top of the net_device_path_stack, wenxu
• [PATCH] tcp: Reset tcp connections in SYN-SENT state, Manoj Basapathi
• [PATCH nf] netfilter: conntrack: do not print icmpv6 as unknown via /proc, Pablo Neira Ayuso
• [PATCH nf-next 1/2] netfilter: nftables: add helper function to set the base sequence number, Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: add helper function to set up the nfnetlink header and use it, Pablo Neira Ayuso
• [PATCH] files: move example files away from /etc, Jan Engelhardt
  • Re: [PATCH] files: move example files away from /etc, Pablo Neira Ayuso
• [PATCH] netfilter: flowtable: fix NAT IPv6 offload mangling, Pablo Neira Ayuso
• [iptables PATCH v2 1/2] extensions: libxt_conntrack: print xlate state as set, Alexander Mikhalitsyn
  • [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
    • Re: [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set, Florian Westphal
      • Re: [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
        • Re: [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set, Florian Westphal
          • Re: [iptables PATCH v2 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
• [iptables PATCH 1/2] extensions: libxt_conntrack: print xlate state as set, Alexander Mikhalitsyn
  • [iptables PATCH 2/2] extensions: libxt_conntrack: print xlate status as set, Alexander Mikhalitsyn
• [PATCH nf-next] netfilter: ipvs: do not printk on netns creation, Florian Westphal
  • Re: [PATCH nf-next] netfilter: ipvs: do not printk on netns creation, Julian Anastasov
    • Re: [PATCH nf-next] netfilter: ipvs: do not printk on netns creation, Simon Horman
  • Re: [PATCH nf-next] netfilter: ipvs: do not printk on netns creation, Pablo Neira Ayuso
• [PATCH AUTOSEL 5.4 12/19] netfilter: conntrack: Fix gre tunneling over ipv6, Sasha Levin
• [PATCH AUTOSEL 5.10 17/33] netfilter: nftables: skip hook overlap logic if flowtable is stale, Sasha Levin
• [PATCH AUTOSEL 5.10 16/33] netfilter: conntrack: Fix gre tunneling over ipv6, Sasha Levin
• [PATCH AUTOSEL 5.11 20/38] netfilter: nftables: skip hook overlap logic if flowtable is stale, Sasha Levin
• [PATCH AUTOSEL 5.11 19/38] netfilter: conntrack: Fix gre tunneling over ipv6, Sasha Levin
• [PATCH -next] netfilter: nftables: remove unnecessary spin_lock_init(), Yang Yingliang
  • Re: [PATCH -next] netfilter: nftables: remove unnecessary spin_lock_init(), Pablo Neira Ayuso
• [PATCH nf-next] netfilter: flowtable: dst_check() from garbage collector path, Pablo Neira Ayuso
• Re: [PATCH 08/19] netfilter: ipvs: A spello fix, Simon Horman
• Re: [PATCH] netfilter: ipvs: A spello fix, Simon Horman
• [PATCH] netfilter: ipset: Remove duplicate declaration, Wan Jiabing
  • Re: [PATCH] netfilter: ipset: Remove duplicate declaration, Jozsef Kadlecsik
    • Re: [PATCH] netfilter: ipset: Remove duplicate declaration, Pablo Neira Ayuso
• [PATCH v5] audit: log nftables configuration change events once per table, Richard Guy Briggs
  • Re: [PATCH v5] audit: log nftables configuration change events once per table, Paul Moore
    • Re: [PATCH v5] audit: log nftables configuration change events once per table, Pablo Neira Ayuso
      • Re: [PATCH v5] audit: log nftables configuration change events once per table, Paul Moore
  • Re: [PATCH v5] audit: log nftables configuration change events once per table, Pablo Neira Ayuso
    • Re: [PATCH v5] audit: log nftables configuration change events once per table, Richard Guy Briggs
      • Re: [PATCH v5] audit: log nftables configuration change events once per table, Pablo Neira Ayuso
  • Re: [PATCH v5] audit: log nftables configuration change events once per table, Pablo Neira Ayuso
    • Re: [PATCH v5] audit: log nftables configuration change events once per table, Richard Guy Briggs
  • Re: [PATCH v5] audit: log nftables configuration change events once per table, Phil Sutter
    • Re: [PATCH v5] audit: log nftables configuration change events once per table, Richard Guy Briggs
• [iptables PATCH] nft: cache: Sort chains on demand only, Phil Sutter
• [PATCH net-next] docs: nf_flowtable: fix compilation and warnings, Pablo Neira Ayuso
  • Re: [PATCH net-next] docs: nf_flowtable: fix compilation and warnings, Stephen Rothwell
  • Re: [PATCH net-next] docs: nf_flowtable: fix compilation and warnings, patchwork-bot+netdevbpf
• [PATCH 0/8] netfilter: merge nf_log_proto modules, Florian Westphal
  • [PATCH 3/8] netfilter: nf_log_ipv6: merge with nf_log_syslog, Florian Westphal
  • [PATCH 2/8] netfilter: nf_log_arp: merge with nf_log_syslog, Florian Westphal
  • [PATCH 1/8] netfilter: nf_log_ipv4: rename to nf_log_syslog, Florian Westphal
  • [PATCH 4/8] netfilter: nf_log_netdev: merge with nf_log_syslog, Florian Westphal
  • [PATCH 6/8] netfilter: nf_log_common: merge with nf_log_syslog, Florian Westphal
  • [PATCH 5/8] netfilter: nf_log_bridge: merge with nf_log_syslog, Florian Westphal
  • [PATCH 7/8] netfilter: nf_log: add module softdeps, Florian Westphal
  • [PATCH 8/8] netfilter: nft_log: perform module load from nf_tables, Florian Westphal
  • Re: [PATCH 0/8] netfilter: merge nf_log_proto modules, Phil Sutter
  • Re: [PATCH 0/8] netfilter: merge nf_log_proto modules, Pablo Neira Ayuso
• [PATCH nft] parser: fix scope closure of COUNTER token, Florian Westphal
• [PATCH v4] audit: log nftables configuration change events once per table, Richard Guy Briggs
  • Re: [PATCH v4] audit: log nftables configuration change events once per table, kernel test robot
• [PATCH] src: add datatype->describe(), Pablo Neira Ayuso
• [PATCH net-next,v2 00/24] netfilter: flowtable enhancements, Pablo Neira Ayuso
  • [PATCH net-next,v2 02/24] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
  • [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
    • Re: [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address, DENG Qingfang
      • Re: [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
        • Re: [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address, DENG Qingfang
          • Re: [PATCH net-next,v2 01/24] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
  • [PATCH net-next,v2 05/24] net: ppp: resolve forwarding path for bridge pppoe devices, Pablo Neira Ayuso
  • [PATCH net-next,v2 03/24] net: bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
  • [PATCH net-next,v2 04/24] net: bridge: resolve forwarding path for VLAN tag actions in bridge devices, Pablo Neira Ayuso
  • [PATCH net-next,v2 11/24] netfilter: flowtable: add bridge vlan filtering support, Pablo Neira Ayuso
  • [PATCH net-next,v2 06/24] net: dsa: resolve forwarding path for dsa slave ports, Pablo Neira Ayuso
  • [PATCH net-next,v2 09/24] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
  • [PATCH net-next,v2 07/24] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
  • [PATCH net-next,v2 10/24] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
  • [PATCH net-next,v2 08/24] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
  • [PATCH net-next,v2 18/24] net: flow_offload: add FLOW_ACTION_PPPOE_PUSH, Pablo Neira Ayuso
  • [PATCH net-next,v2 19/24] netfilter: flowtable: support for FLOW_ACTION_PPPOE_PUSH, Pablo Neira Ayuso
  • [PATCH net-next,v2 14/24] selftests: netfilter: flowtable bridge and vlan support, Pablo Neira Ayuso
  • [PATCH net-next,v2 16/24] netfilter: nft_flow_offload: use direct xmit if hardware offload is enabled, Pablo Neira Ayuso
  • [PATCH net-next,v2 17/24] netfilter: flowtable: bridge vlan hardware offload and switchdev, Pablo Neira Ayuso
  • [PATCH net-next,v2 12/24] netfilter: flowtable: add pppoe support, Pablo Neira Ayuso
  • [PATCH net-next,v2 13/24] netfilter: flowtable: add dsa support, Pablo Neira Ayuso
  • [PATCH net-next,v2 15/24] netfilter: flowtable: add offload support for xmit path types, Pablo Neira Ayuso
  • [PATCH net-next,v2 22/24] net: ethernet: mtk_eth_soc: add support for initializing the PPE, Pablo Neira Ayuso
  • [PATCH net-next,v2 21/24] net: ethernet: mtk_eth_soc: fix parsing packets in GDM, Pablo Neira Ayuso
  • [PATCH net-next,v2 20/24] dsa: slave: add support for TC_SETUP_FT, Pablo Neira Ayuso
  • [PATCH net-next,v2 24/24] docs: nf_flowtable: update documentation with enhancements, Pablo Neira Ayuso
  • [PATCH net-next,v2 23/24] net: ethernet: mtk_eth_soc: add flow offloading support, Pablo Neira Ayuso
  • Re: [PATCH net-next,v2 00/24] netfilter: flowtable enhancements, patchwork-bot+netdevbpf
• [PATCH v3] audit: log nftables configuration change events once per table, Richard Guy Briggs
  • Re: [PATCH v3] audit: log nftables configuration change events once per table, Florian Westphal
  • Re: [PATCH v3] audit: log nftables configuration change events once per table, Paul Moore
    • Re: [PATCH v3] audit: log nftables configuration change events once per table, Richard Guy Briggs
• [PATCH net-next 00/10] Netfilter updates for net-next, Pablo Neira Ayuso