Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- Re: [PATCH bpf v1 1/2] bpf: fix link info netfilter flags to populate defrag flag, (continued)
- [nft PATCH] tests: shell: Join arithmetic statements in maps/vmap_timeout,
Phil Sutter
- [PATCH nf-next v2 0/5] netfilter: nf_tables: reduce set element transaction size,
Florian Westphal
- [PATCH nft] tests: shell: fix spurious dump failure in vmap timeout test,
Florian Westphal
- [PATCH net] netfilter: nf_tables: Fix memory leak in nf_flow_offload_xdp_setup(), Lorenzo Bianconi
- [PATCH nf] netfilter: bpf: must hold reference on net namespace,
Florian Westphal
- [PATCH nft] doc: extend description of fib expression,
Florian Westphal
- [PATCH libnftnl] include: refresh nf_tables.h copy,
Pablo Neira Ayuso
- [syzbot] [netfilter?] INFO: rcu detected stall in NF_HOOK (2), syzbot
- [PATCH] nf_conntrack_proto_udp: Set ASSURED for NAT_CLASH entries to avoid packets dropped,
Yadan Fan
- [PATCH] netfilter: Record uid and gid in xt_AUDIT,
Richard Weinberger
- [iptables PATCH 1/3] ebtables: Fix for -S with rule number,
Phil Sutter
- [PATCH nft,v2] libnftables: remove set element uncollapse for error reporting, Pablo Neira Ayuso
- [iptables PATCH v2 0/8] nft: Implement forward compat for future binaries,
Phil Sutter
- [iptables PATCH v2 7/8] nft: Embed compat extensions in rule userdata, Phil Sutter
- [iptables PATCH v2 1/8] nft: Make add_log() static, Phil Sutter
- [iptables PATCH v2 3/8] nft: __add_{match,target}() can't fail, Phil Sutter
- [iptables PATCH v2 4/8] nft: Introduce UDATA_TYPE_COMPAT_EXT, Phil Sutter
- [iptables PATCH v2 5/8] nft-ruleparse: Fallback to compat expressions in userdata, Phil Sutter
- [iptables PATCH v2 2/8] nft: ruleparse: Introduce nft_parse_rule_expr(), Phil Sutter
- [iptables PATCH v2 6/8] nft: Pass nft_handle into add_{action,match}(), Phil Sutter
- [iptables PATCH v2 8/8] tests: iptables-test: Add nft-compat variant, Phil Sutter
- [iptables PATCH 0/5] Some minor fixes,
Phil Sutter
- [PATCH nft] libnftables: remove set element uncollapse for error reporting, Pablo Neira Ayuso
- kmemleak in flowtable xdp, Pablo Neira Ayuso
- [PATCH nf 1/2] netfilter: fib: check correct rtable in vrf setups,
Florian Westphal
- Argument -S (--list-rules) in ebtables,
Nicola Serafini
- [syzbot] [netfilter?] WARNING in __nf_unregister_net_hook (7), syzbot
- [RFC libnftnl/nft 0/5] nftables: indicate presence of unsupported netlink attributes,
Florian Westphal
- [PATCH nf v3] netfilter: xtables: avoid NFPROTO_UNSPEC where needed,
Florian Westphal
- [PATCH] doc: don't suggest to disable GSO, Ronan Pigott
- [PATCH nf v2] netfilter: xtables: avoid NFPROTO_UNSPEC where needed,
Florian Westphal
- [PATCH AUTOSEL 6.1 33/42] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
- [PATCH AUTOSEL 6.6 47/58] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
- [PATCH AUTOSEL 6.6 46/58] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Sasha Levin
- [PATCH AUTOSEL 6.10 54/70] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
- [PATCH AUTOSEL 6.10 53/70] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Sasha Levin
- [PATCH AUTOSEL 6.11 60/76] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Sasha Levin
- [PATCH AUTOSEL 6.11 59/76] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Sasha Levin
- [PATCH] netfilter: xt_cluster: restrict it to NFPROTO_IPV4 and NFPROTO_IPV6, Pablo Neira Ayuso
- [PATCH libnetfilter_queue] build: add missing backslash to build_man.sh,
Duncan Roe
- [PATCH] xt_cluster: add logic for use from NFPROTO_BRIDGE, Jan Engelhardt
- [PATCH nf] netfilter: xt_cluster: restrict to ip/ip6tables,
Florian Westphal
- [syzbot] [netfilter?] WARNING in xt_cluster_mt (2), syzbot
- [RFC PATCH v1 0/2] Fix non-TCP sockets restriction,
Mikhail Ivanov
- Re: [syzbot] [tipc?] BUG: soft lockup in do_sock_setsockopt, syzbot
- [ANNOUNCE] nftables 1.1.1 release, Pablo Neira Ayuso
- [ANNOUNCE] libnftnl 1.2.8 release, Pablo Neira Ayuso
- [nft PATCH 0/9] Support wildcard netdev hooks and events,
Phil Sutter
- [nft PATCH 3/9] monitor: Recognize flowtable add/del events, Phil Sutter
- [nft PATCH 5/9] mnl: Support simple wildcards in netdev hooks, Phil Sutter
- [nft PATCH 8/9] tests: monitor: Support running external commands, Phil Sutter
- [nft PATCH 6/9] parser_bison: Accept ASTERISK_STRING in flowtable_expr_member, Phil Sutter
- [nft PATCH 1/9] json: Support typeof in set and map types, Phil Sutter
- [nft PATCH 7/9] tests: shell: Adjust to ifname-based flowtables, Phil Sutter
- [nft PATCH 2/9] tests: py: Fix for storing payload into missing file, Phil Sutter
- [nft PATCH 9/9] monitor: Support NFT_MSG_(NEW|DEL)DEV events, Phil Sutter
- [nft PATCH 4/9] tests: monitor: Run in own netns, Phil Sutter
- Re: [nft PATCH 0/9] Support wildcard netdev hooks and events, Florian Westphal
- Re: [nft PATCH 0/9] Support wildcard netdev hooks and events, Phil Sutter
- [libnftnl PATCH 0/4] Support wildcard netdev hooks and events,
Phil Sutter
- [PATCH nf-next 0/4] netfilter: use skb_drop_reason in more places,
Florian Westphal
- [iptables PATCH] tests: shell: Adjust for recent changes in libnftnl,
Phil Sutter
- [libnftnl PATCH] rule: Don't append a newline when printing a rule,
Phil Sutter
- [libnftnl PATCH] Partially revert "rule, set_elem: remove trailing \n in userdata snprintf",
Phil Sutter
- [PATCH nf-next v6] netfilter: Make legacy configs user selectable,
Breno Leitao
- [PATCH] nf_conntrack_proto_udp: do not accept packets with IPS_NAT_CLASH,
Hannes Reinecke
- iptables 1.8.10 translate error,
imnozi
- [PATCH 6.1 62/73] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
- [PATCH 6.1 61/73] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
- [PATCH 6.6 46/54] netfilter: nf_tables: missing iterator type in lookup walk, Greg Kroah-Hartman
- [PATCH 6.6 45/54] netfilter: nft_set_pipapo: walk over current view on netlink dump, Greg Kroah-Hartman
- [PATCH] selftests: netfilter: Add missing resturn value.,
zhangjiao2
- [PATCH nf] netfilter: nf_tables: prevent nf_skb_duplicated corruption,
Eric Dumazet
- [nf PATCH] selftests: netfilter: Fix nft_audit.sh for newer nft binaries,
Phil Sutter
- [PATCH net,v2 00/14] Netfilter fixes for net,
Pablo Neira Ayuso
- [PATCH net 03/14] selftests: netfilter: add reverse-clash resolution test case, Pablo Neira Ayuso
- [PATCH net 01/14] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash, Pablo Neira Ayuso
- [PATCH net 04/14] selftests: netfilter: nft_tproxy.sh: add tcp tests, Pablo Neira Ayuso
- [PATCH net 07/14] netfilter: nf_tables: Keep deleted flowtable hooks until after RCU, Pablo Neira Ayuso
- [PATCH net 08/14] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Pablo Neira Ayuso
- [PATCH net 12/14] netfilter: nfnetlink_queue: remove old clash resolution logic, Pablo Neira Ayuso
- [PATCH net 05/14] netfilter: ctnetlink: Guard possible unused functions, Pablo Neira Ayuso
- [PATCH net 14/14] selftests: netfilter: Avoid hanging ipvs.sh, Pablo Neira Ayuso
- [PATCH net 11/14] netfilter: nf_tables: missing objects with no memcg accounting, Pablo Neira Ayuso
- [PATCH net 06/14] docs: tproxy: ignore non-transparent sockets in iptables, Pablo Neira Ayuso
- [PATCH net 10/14] netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path, Pablo Neira Ayuso
- [PATCH net 02/14] netfilter: conntrack: add clash resolution for reverse collisions, Pablo Neira Ayuso
- [PATCH net 09/14] netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS, Pablo Neira Ayuso
- [PATCH net 13/14] kselftest: add test for nfqueue induced conntrack race, Pablo Neira Ayuso
- [nf-next PATCH v5 00/18] Dynamic hook interface binding,
Phil Sutter
- [nf-next PATCH v5 07/18] netfilter: nf_tables: Introduce functions freeing nft_hook objects, Phil Sutter
- [nf-next PATCH v5 03/18] netfilter: nf_tables: Use stored ifname in netdev hook dumps, Phil Sutter
- [nf-next PATCH v5 17/18] netfilter: nf_tables: Add notications for hook changes, Phil Sutter
- [nf-next PATCH v5 10/18] netfilter: nf_tables: Drop __nft_unregister_flowtable_net_hooks(), Phil Sutter
- [nf-next PATCH v5 16/18] netfilter: nf_tables: Support wildcard netdev hook specs, Phil Sutter
- [nf-next PATCH v5 12/18] netfilter: nf_tables: chain: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v5 13/18] netfilter: nf_tables: flowtable: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v5 01/18] netfilter: nf_tables: Flowtable hook's pf value never varies, Phil Sutter
- [nf-next PATCH v5 02/18] netfilter: nf_tables: Store user-defined hook ifname, Phil Sutter
- [nf-next PATCH v5 04/18] netfilter: nf_tables: Compare netdev hooks based on stored name, Phil Sutter
- [nf-next PATCH v5 11/18] netfilter: nf_tables: Have a list of nf_hook_ops in nft_hook, Phil Sutter
- [nf-next PATCH v5 18/18] selftests: netfilter: Torture nftables netdev hooks, Phil Sutter
- [nf-next PATCH v5 15/18] netfilter: nf_tables: Handle NETDEV_CHANGENAME events, Phil Sutter
- [nf-next PATCH v5 08/18] netfilter: nf_tables: Introduce nft_hook_find_ops(), Phil Sutter
- [nf-next PATCH v5 09/18] netfilter: nf_tables: Introduce nft_register_flowtable_ops(), Phil Sutter
- [nf-next PATCH v5 14/18] netfilter: nf_tables: Wrap netdev notifiers, Phil Sutter
- [nf-next PATCH v5 05/18] netfilter: nf_tables: Tolerate chains with no remaining hooks, Phil Sutter
- [nf-next PATCH v5 06/18] netfilter: nf_tables: Simplify chain netdev notifier, Phil Sutter
- Re: [nf-next PATCH v5 00/18] Dynamic hook interface binding, Florian Westphal
- [bug report] netfilter: nf_tables: no size estimation if number of set elements is unknown, Dan Carpenter
- [nf PATCH] netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED,
Phil Sutter
- Unsubscribe, michael . steinmann
- [ANNOUNCE] libnetfilter_conntrack 1.1.0 release, Pablo Neira Ayuso
- [PATCH AUTOSEL 6.6 038/139] netfilter: nf_tables: don't initialize registers in nft_do_chain(), Sasha Levin
- [PATCH AUTOSEL 6.10 040/197] netfilter: nf_tables: don't initialize registers in nft_do_chain(), Sasha Levin
- [PATCH AUTOSEL 6.11 049/244] netfilter: nf_tables: don't initialize registers in nft_do_chain(),
Sasha Levin
- [PATCH AUTOSEL 6.11 048/244] netfilter: nf_tables: do not remove elements if set backend implements .abort, Sasha Levin
- [PATCH libnftnl] src: remove scaffolding around deprecated parser functions, Pablo Neira Ayuso
- [PATCH libnetfilter_conntrack] src: remove unused parameter from build functions, Pablo Neira Ayuso
- [PATCH v4] net/bridge: Optimizing read-write locks in ebtables.c,
yushengjin
- [PATCH nf-next 0/7] netfilter: rework conntrack/flowtable interaction,
Florian Westphal
- [PATCH v3] net/bridge: Optimizing read-write locks in ebtables.c,
yushengjin
- [PATCH v2] net/bridge: Optimizing read-write locks in ebtables.c,
yushengjin
- ct hardware offload ignores RST packet,
Chris Mi
- [PATCH] net/bridge: Optimizing read-write locks in ebtables.c,
yushengjin
- [PATCH libnftnl] expr: dynset: validate expressions are of nested type, Florian Westphal
- [nf-next:testing 4/5] net/netfilter/nf_nat_masquerade.c:273:6: warning: variable 'ret' is uninitialized when used here, kernel test robot
- [nf-next:testing 4/5] net/netfilter/nf_nat_masquerade.c:252:30: warning: variable 'newrange' set but not used, kernel test robot
- Re: [syzbot] [netfilter] BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet,
syzbot
- [nf-next PATCH v4 00/16] Dynamic hook interface binding,
Phil Sutter
- [nf-next PATCH v4 09/16] netfilter: nf_tables: Drop __nft_unregister_flowtable_net_hooks(), Phil Sutter
- [nf-next PATCH v4 06/16] netfilter: nf_tables: Introduce functions freeing nft_hook objects, Phil Sutter
- [nf-next PATCH v4 03/16] netfilter: nf_tables: Use stored ifname in netdev hook dumps, Phil Sutter
- [nf-next PATCH v4 07/16] netfilter: nf_tables: Introduce nft_hook_find_ops(), Phil Sutter
- [nf-next PATCH v4 10/16] netfilter: nf_tables: Have a list of nf_hook_ops in nft_hook, Phil Sutter
- [nf-next PATCH v4 14/16] netfilter: nf_tables: Support wildcard netdev hook specs, Phil Sutter
- [nf-next PATCH v4 04/16] netfilter: nf_tables: Compare netdev hooks based on stored name, Phil Sutter
- [nf-next PATCH v4 05/16] netfilter: nf_tables: Tolerate chains with no remaining hooks, Phil Sutter
- [nf-next PATCH v4 08/16] netfilter: nf_tables: Introduce nft_register_flowtable_ops(), Phil Sutter
- [nf-next PATCH v4 02/16] netfilter: nf_tables: Store user-defined hook ifname, Phil Sutter
- [nf-next PATCH v4 12/16] netfilter: nf_tables: flowtable: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v4 16/16] selftests: netfilter: Torture nftables netdev hooks, Phil Sutter
- [nf-next PATCH v4 13/16] netfilter: nf_tables: Handle NETDEV_CHANGENAME events, Phil Sutter
- [nf-next PATCH v4 01/16] netfilter: nf_tables: Flowtable hook's pf value never varies, Phil Sutter
- [nf-next PATCH v4 11/16] netfilter: nf_tables: chain: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v4 15/16] netfilter: nf_tables: Add notications for hook changes, Phil Sutter
- stable request: netfilter: make cgroupsv2 matching work with namespaces,
Florian Westphal
- [nf PATCH v2] selftests: netfilter: Avoid hanging ipvs.sh,
Phil Sutter
- [nf PATCH] netfilter: nf_tables: nft_flowtable_find_dev() lacks rcu_read_lock(),
Phil Sutter
- [nf PATCH] selftests: netfilter: Avoid hanging ipvs.sh,
Phil Sutter
- [PATCH 5.4.y 1/1] inet: inet_defrag: prevent sk release while still in use, Saeed Mirzamohammadi
- [PATCH 5.10.y 1/1] inet: inet_defrag: prevent sk release while still in use, Saeed Mirzamohammadi
- [PATCH 5.15.y 1/1] inet: inet_defrag: prevent sk release while still in use, Saeed Mirzamohammadi
- [PATCH nf] kselftest: add test for nfqueue induced conntrack race,
Florian Westphal
- [PATCH nf] netfilter: nfnetlink_queue: remove old clash resolution logic,
Florian Westphal
- [PATCH nf,v2] netfilter: nf_tables: missing objects with no memcg accounting,
Pablo Neira Ayuso
- [PATCH 1/5] LSM: Replace context+len with lsm_context,
Casey Schaufler
- [no subject], Unknown
- [PATCH nf] netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path,
Pablo Neira Ayuso
- [PATCH -stable,5.10 0/2] Netfilter fixes for -stable,
Pablo Neira Ayuso
- [PATCH -stable,5.15 0/2] Netfilter fixes for -stable,
Pablo Neira Ayuso
- [PATCH -stable,6.1 0/2] Netfilter fixes for -stable,
Pablo Neira Ayuso
- [PATCH -stable,6.6 0/2] Netfilter fixes for -stable,
Pablo Neira Ayuso
- [PATCH nft,v2] cache: initialize filter when fetching implicit chains, Pablo Neira Ayuso
- [PATCH nft] cache: initialize filter when fetching implicit chains, Pablo Neira Ayuso
- [PATCH nft,v3] doc: tproxy is non-terminal in nftables,
Pablo Neira Ayuso
- [PATCH nft,v2] doc: tproxy is non-terminal in nftables, Pablo Neira Ayuso
- [PATCH nf-next 0/2] netfilter: conntrack: label helpers conditional compilation updates,
Simon Horman
- [PATCH nf-next] netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n, Simon Horman
- "libmnl" project doxygen-generated documentation,
Duncan Roe
- [PATCH nft] doc: tproxy is non-terminal in nftables,
Pablo Neira Ayuso
- [PATCH nft] tests: shell: more ransomization for timeout parameter, Florian Westphal
- Re: [syzbot] [virt?] [netfilter?] INFO: rcu detected stall in ip_list_rcv (6), syzbot
- [PATCH net] netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level(),
Dan Carpenter
- [PATCH libnetfilter_queue] doc: Install libnetfilter_queue.7 man page, Duncan Roe
- [PATCH net] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put(),
Eric Dumazet
- [iptables PATCH] extensions: TPROXY: Fix for translation being non-terminal,
Phil Sutter
- [PATCH nf] netfilter: nft_tproxy: make it terminal,
Pablo Neira Ayuso
- [PATCH nf] netfilter: nfnetlink_queue: reroute reinjected packets from postrouting,
Pablo Neira Ayuso
- [no subject], Unknown
- [no subject], Unknown
- [nf-next PATCH v3 00/16] Dynamic hook interface binding,
Phil Sutter
- [nf-next PATCH v3 11/16] netfilter: nf_tables: chain: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v3 02/16] netfilter: nf_tables: Flowtable hook's pf value never varies, Phil Sutter
- [nf-next PATCH v3 14/16] netfilter: nf_tables: Support wildcard netdev hook specs, Phil Sutter
- [nf-next PATCH v3 04/16] netfilter: nf_tables: Use stored ifname in netdev hook dumps, Phil Sutter
- [nf-next PATCH v3 09/16] netfilter: nf_tables: Introduce nft_register_flowtable_ops(), Phil Sutter
- [nf-next PATCH v3 07/16] netfilter: nf_tables: Introduce functions freeing nft_hook objects, Phil Sutter
- [nf-next PATCH v3 01/16] netfilter: nf_tables: Keep deleted flowtable hooks until after RCU, Phil Sutter
- [nf-next PATCH v3 03/16] netfilter: nf_tables: Store user-defined hook ifname, Phil Sutter
- [nf-next PATCH v3 06/16] netfilter: nf_tables: Tolerate chains with no remaining hooks, Phil Sutter
- [nf-next PATCH v3 05/16] netfilter: nf_tables: Compare netdev hooks based on stored name, Phil Sutter
- [nf-next PATCH v3 12/16] netfilter: nf_tables: flowtable: Respect NETDEV_REGISTER events, Phil Sutter
- [nf-next PATCH v3 08/16] netfilter: nf_tables: Introduce nft_hook_find_ops(), Phil Sutter
- [nf-next PATCH v3 10/16] netfilter: nf_tables: Have a list of nf_hook_ops in nft_hook, Phil Sutter
- [nf-next PATCH v3 13/16] netfilter: nf_tables: Handle NETDEV_CHANGENAME events, Phil Sutter
- [nf-next PATCH v3 15/16] netfilter: nf_tables: Add notications for hook changes, Phil Sutter
- [nf-next PATCH v3 16/16] selftests: netfilter: Torture nftables netdev hooks, Phil Sutter
- [PATCH] docs: tproxy: ipt: ignore non-transparent sockets, 谢致邦 (XIE Zhibang)
- [PATCH v3] selftests: netfilter: nft_tproxy.sh: add tcp tests, Antonio Ojea
- [PATCH net] net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_init(),
Lorenzo Bianconi
- [PATCH nf-next 0/5] netfilter: nf_tables: reduce set element,
Florian Westphal
- [PATCH v2] selftests: netfilter: tproxy tcp and udp tests,
Antonio Ojea
- [PATCH nft] tests: py: fix up udp csum fixup output, Florian Westphal
- [PATCH nf-next 0/3] netfilter: conntrack: clash resolution for reverse collisions,
Florian Westphal
- [PATCH net-next v3 1/1] netfilter: conntrack: Guard possible unused functions,
Andy Shevchenko
- [PATCH] netfilter: nf_tables: replace deprecated strncpy with strscpy_pad,
Justin Stitt
- [PATCH nft] tests: shell: add test case for timeout updates, Florian Westphal
- [PATCH nft] tests: shell: extend vmap test with updates, Florian Westphal
- [PATCH net-next v2 1/1] netfilter: conntrack: Guard possible unused functions,
Andy Shevchenko
- [PATCH] selftests: netfilter: nft_tproxy.sh: add tcp tests, Antonio Ojea
- [PATCH nft 1/2] tests: shell: stabilize packetpath/payload,
Pablo Neira Ayuso
- [PATCH nf-next v5 0/2] netfilter: Make IP_NF_IPTABLES_LEGACY selectable,
Breno Leitao
- [PATCH libmnl] doc: Address warnings emitted by doxygen 1.12.0, Duncan Roe
- [PATCH net v1 1/1] netfilter: nf_reject: Fix build error when CONFIG_BRIDGE_NETFILTER=n,
Andy Shevchenko
- [PATCH net v1 1/1] netfilter: conntrack: Guard possoble unused functions,
Andy Shevchenko
- [PATCH net-next 00/12] Unmask upper DSCP bits - part 4 (last),
Ido Schimmel
- [PATCH net-next 01/12] netfilter: br_netfilter: Unmask upper DSCP bits in br_nf_pre_routing_finish(), Ido Schimmel
- [PATCH net-next 02/12] ipv4: ip_gre: Unmask upper DSCP bits in ipgre_open(), Ido Schimmel
- [PATCH net-next 03/12] bpf: lwtunnel: Unmask upper DSCP bits in bpf_lwt_xmit_reroute(), Ido Schimmel
- [PATCH net-next 04/12] ipv4: icmp: Unmask upper DSCP bits in icmp_reply(), Ido Schimmel
- [PATCH net-next 05/12] ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev(), Ido Schimmel
- [PATCH net-next 06/12] ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit(), Ido Schimmel
- [PATCH net-next 07/12] ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit(), Ido Schimmel
- [PATCH net-next 08/12] ipv4: netfilter: Unmask upper DSCP bits in ip_route_me_harder(), Ido Schimmel
- [PATCH net-next 09/12] netfilter: nft_flow_offload: Unmask upper DSCP bits in nft_flow_route(), Ido Schimmel
- [PATCH net-next 10/12] netfilter: nf_dup4: Unmask upper DSCP bits in nf_dup_ipv4_route(), Ido Schimmel
- [PATCH net-next 11/12] ipv4: udp_tunnel: Unmask upper DSCP bits in udp_tunnel_dst_lookup(), Ido Schimmel
- [PATCH net-next 12/12] sctp: Unmask upper DSCP bits in sctp_v4_get_dst(), Ido Schimmel
- Re: [PATCH net-next 00/12] Unmask upper DSCP bits - part 4 (last), David Ahern
- Re: [PATCH net-next 00/12] Unmask upper DSCP bits - part 4 (last), patchwork-bot+netdevbpf
- [PATCH nf 1/2] netfilter: nft_socket: fix sk refcount leaks,
Florian Westphal
- [PATCH] netfilter: tproxy: Add RCU protection in nf_tproxy_laddr4,
Jiawei Ye
- [RFC PATCH v3 00/19] Support socket access-control,
Mikhail Ivanov
- [RFC PATCH v3 01/19] landlock: Support socket access-control, Mikhail Ivanov
- [RFC PATCH v3 02/19] landlock: Add hook on socket creation, Mikhail Ivanov
- [RFC PATCH v3 03/19] selftests/landlock: Test basic socket restriction, Mikhail Ivanov
- [RFC PATCH v3 04/19] selftests/landlock: Test adding a rule with each supported access, Mikhail Ivanov
- [RFC PATCH v3 05/19] selftests/landlock: Test adding a rule for each unknown access, Mikhail Ivanov
- [RFC PATCH v3 06/19] selftests/landlock: Test adding a rule for unhandled access, Mikhail Ivanov
- [RFC PATCH v3 07/19] selftests/landlock: Test adding a rule for empty access, Mikhail Ivanov
- [RFC PATCH v3 08/19] selftests/landlock: Test overlapped restriction, Mikhail Ivanov
- [RFC PATCH v3 09/19] selftests/landlock: Test creating a ruleset with unknown access, Mikhail Ivanov
- [RFC PATCH v3 10/19] selftests/landlock: Test adding a rule with family and type outside the range, Mikhail Ivanov
- [RFC PATCH v3 11/19] selftests/landlock: Test unsupported protocol restriction, Mikhail Ivanov
- [RFC PATCH v3 12/19] selftests/landlock: Test that kernel space sockets are not restricted, Mikhail Ivanov
- [RFC PATCH v3 13/19] selftests/landlock: Test packet protocol alias, Mikhail Ivanov
- [RFC PATCH v3 14/19] selftests/landlock: Test socketpair(2) restriction, Mikhail Ivanov
- [RFC PATCH v3 15/19] selftests/landlock: Test SCTP peeloff restriction, Mikhail Ivanov
- [RFC PATCH v3 16/19] selftests/landlock: Test that accept(2) is not restricted, Mikhail Ivanov
- [RFC PATCH v3 17/19] samples/landlock: Replace atoi() with strtoull() in populate_ruleset_net(), Mikhail Ivanov
- [RFC PATCH v3 18/19] samples/landlock: Support socket protocol restrictions, Mikhail Ivanov
- [RFC PATCH v3 19/19] landlock: Document socket rule type support, Mikhail Ivanov
- [PATCH net-next v2 0/5] make use of the helper macro LIST_HEAD(),
Hongbo Li
- [PATCH net-next v1] netlink: specs: nftables: allow decode of tailscale ruleset,
Donald Hunter
- [nft PATCH] libnftables: Zero ctx->vars after freeing it,
Phil Sutter
- [PATCH nf-next,v3 6/9] netfilter: nf_tables: annotate data-races around element expiration,
Pablo Neira Ayuso
- [PATCH nf-next,v3 1/9] netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire,
Pablo Neira Ayuso
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
