Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, (continued)
  • Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, subashab
    • Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, subashab
  • Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, kernel test robot
  • Re: [PATCH nf] netfilter: x_tables: Switch synchronization to RCU, kernel test robot
• [PATCH xtables-addons 0/4] geoip: script fixes, Jeremy Sowden
  • [PATCH xtables-addons 2/4] geoip: fix man-page typo'., Jeremy Sowden
    • Re: [PATCH xtables-addons 2/4] geoip: fix man-page typo'., Jan Engelhardt
  • [PATCH xtables-addons 1/4] geoip: remove superfluous xt_geoip_fetch_maxmind script., Jeremy Sowden
  • [PATCH xtables-addons 3/4] geoip: add man-pages for MaxMind scripts., Jeremy Sowden
  • [PATCH xtables-addons 4/4] geoip: use correct download URL for MaxMind DB's., Jeremy Sowden
  • Re: [PATCH xtables-addons 0/4] geoip: script fixes, Jan Engelhardt
    • Re: [PATCH xtables-addons 0/4] geoip: script fixes, Jeremy Sowden
      • Re: [PATCH xtables-addons 0/4] geoip: script fixes, Jan Engelhardt
• [RFC] MAINTAINERS tag for cleanup robot, trix
  • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
    • Re: [RFC] MAINTAINERS tag for cleanup robot, Tom Rix
      • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
        • Re: [RFC] MAINTAINERS tag for cleanup robot, Tom Rix
  • Re: [RFC] MAINTAINERS tag for cleanup robot, James Bottomley
    • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
    • Re: [RFC] MAINTAINERS tag for cleanup robot, Jani Nikula
      • Re: [RFC] MAINTAINERS tag for cleanup robot, Lukas Bulwahn
  • Re: [RFC] MAINTAINERS tag for cleanup robot, Matthew Wilcox
    • Re: [RFC] MAINTAINERS tag for cleanup robot, Tom Rix
      • Re: [RFC] MAINTAINERS tag for cleanup robot, Matthew Wilcox
        • Re: [RFC] MAINTAINERS tag for cleanup robot, Tom Rix
          • Re: [RFC] MAINTAINERS tag for cleanup robot, James Bottomley
            • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
              • Re: [RFC] MAINTAINERS tag for cleanup robot, Finn Thain
                • Re: [RFC] MAINTAINERS tag for cleanup robot, Joe Perches
• [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 2/4] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
  • [PATCH net 1/4] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
    • Re: [PATCH net 1/4] netfilter: nftables_offload: set address type in control dissector, Jakub Kicinski
      • Re: [PATCH net 1/4] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
  • [PATCH net 4/4] netfilter: nf_tables: avoid false-postive lockdep splat, Pablo Neira Ayuso
  • [PATCH net 3/4] netfilter: ipset: prevent uninit-value in hash_ip6_add, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: x_tables: Switch synchronization to RCU, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nftables: comment indirect serialization of commit_mutex with rtnl_mutex, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: nft_dynset: fix timeouts later than 23 days, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID, Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net, David Miller
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: ipset: fix shift-out-of-bounds in htable_bits(), Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nftables: fix incorrect increment of loop counter, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nftables: fix incorrect increment of loop counter, patchwork-bot+netdevbpf
    • [PATCH net 3/4] netfilter: ipset: fixes possible oops in mtype_resize, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: x_tables: Update remaining dereference to RCU, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nftables: fix possible UAF over chains from packet path in netns, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: flowtable: fix tcp and udp header checksum update, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, patchwork-bot+netdevbpf
      • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
        • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Jozsef Kadlecsik
          • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
            • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
              • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Jozsef Kadlecsik
                • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
                  • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
                    • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Reindl Harald
                  • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Jozsef Kadlecsik
            • Re: [PATCH net 1/4] netfilter: xt_recent: Fix attempt to update deleted entry, Jozsef Kadlecsik
    • [PATCH net 2/4] selftests: netfilter: fix current year, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/4] selftests: netfilter: switch to socat for tests using -q option, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), patchwork-bot+netdevbpf
    • [PATCH net 3/4] netfilter: nft_payload: do not update layer 4 checksum when mangling fragments, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: Update ip6_route_me_harder to consider L3 domain, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: flowtable: Remove the empty file, Pablo Neira Ayuso
    • [PATCH net 1/4] ipvs: correctly print the memory size of ip_vs_conn_tab, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] ipvs: correctly print the memory size of ip_vs_conn_tab, patchwork-bot+netdevbpf
    • [PATCH net 2/4] netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nfnetlink: fix warn in nfnetlink_unbind, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nfnetlink: fix warn in nfnetlink_unbind, patchwork-bot+netdevbpf
    • [PATCH net 4/4] netfilter: nf_tables: set element extended ACK reporting support, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: conntrack: re-fetch conntrack after insertion, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one, patchwork-bot+netdevbpf
    • [PATCH net 2/4] netfilter: flowtable_offload: fix using __this_cpu_add in preemptible, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: conntrack: fix using __this_cpu_add in preemptible, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE, patchwork-bot+netdevbpf
    • [PATCH net 4/4] netfilter: conntrack: unify established states for SCTP paths, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: conntrack: fix bug in for_each_sctp_chunk, Pablo Neira Ayuso
    • [PATCH net 3/4] Revert "netfilter: conntrack: add sctp DATA_SENT state", Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net: manual merge, Matthieu Baerts
      • RE: [PATCH net 0/4] Netfilter fixes for net: manual merge, Sriram Yagnaraman
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nft_nat: correct length for loading protocol registers, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nft_nat: correct length for loading protocol registers, patchwork-bot+netdevbpf
    • [PATCH net 2/4] netfilter: nft_masq: correct length for loading protocol registers, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nft_redir: correct length for loading protocol registers, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_redir: correct value of inet type `.maxattrs`, Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net, Jeremy Sowden
      • Re: [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: nf_tables: reject destroy command to remove basechain hooks, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: nf_tables: reject destroy command to remove basechain hooks, patchwork-bot+netdevbpf
    • [PATCH net 3/4] netfilter: nf_tables: skip netdev hook unregistration if table is dormant, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: nf_tables: reject table flag and netdev basechain updates, Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: arptables: Select NETFILTER_FAMILY_ARP when building arp_tables.c, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED, Pablo Neira Ayuso
      • Re: [PATCH net 1/4] netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED, patchwork-bot+netdevbpf
    • [PATCH net 2/4] selftests: netfilter: Fix nft_audit.sh for newer nft binaries, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nf_tables: prevent nf_skb_duplicated corruption, Pablo Neira Ayuso
    • [PATCH net 4/4] selftests: netfilter: Add missing return value, Pablo Neira Ayuso
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/4] selftests: netfilter: remove unused parameter, Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: Fix use-after-free in get_info(), Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_payload: sanitize offset and length before calling skb_checksum(), Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6(), Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net, patchwork-bot+netdevbpf
  • [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 3/4] netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level, Pablo Neira Ayuso
    • [PATCH net 1/4] ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init(), Pablo Neira Ayuso
    • [PATCH net 2/4] netfilter: x_tables: fix LED ID check in led_tg_check(), Pablo Neira Ayuso
    • [PATCH net 4/4] netfilter: nft_inner: incorrect percpu area handling under softirq, Pablo Neira Ayuso
    • Re: [PATCH net 0/4] Netfilter fixes for net, Pablo Neira Ayuso
• [PATCH] netfilter: use actual socket sk for REJECT action, Jan Engelhardt
  • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Jan Engelhardt
      • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Pablo Neira Ayuso
        • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Jeremy Sowden
        • Re: [PATCH] netfilter: use actual socket sk for REJECT action, Jan Engelhardt
• [PATCH v23 16/23] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v23 14/23] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v23 13/23] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v23 06/23] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v23 05/23] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• [nft PATCH] json: echo: Speedup seqnum_to_json(), Phil Sutter
  • Re: [nft PATCH] json: echo: Speedup seqnum_to_json(), Pablo Neira Ayuso
    • Re: [nft PATCH] json: echo: Speedup seqnum_to_json(), Phil Sutter
      • Re: [nft PATCH] json: echo: Speedup seqnum_to_json(), Jose M. Guisado
        • Re: [nft PATCH] json: echo: Speedup seqnum_to_json(), Pablo Neira Ayuso
• [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • [PATCH 015/141] netfilter: Fix fall-through warnings for Clang, Gustavo A. R. Silva
    • Re: [PATCH 015/141] netfilter: Fix fall-through warnings for Clang, Florian Westphal
      • Re: [PATCH 015/141] netfilter: Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • [PATCH 108/141] netfilter: ipt_REJECT: Fix fall-through warnings for Clang, Gustavo A. R. Silva
    • Re: [PATCH 108/141] netfilter: ipt_REJECT: Fix fall-through warnings for Clang, Florian Westphal
      • Re: [PATCH 108/141] netfilter: ipt_REJECT: Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Jakub Kicinski
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
      • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Jakub Kicinski
        • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
        • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
          • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
                  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                    • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
                      • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                        • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
                          • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                            • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                              • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                                • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                          • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                            • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Nick Desaulniers
                              • Message not available
                                • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                              • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                                • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Nick Desaulniers
                                  • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                                  • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                              • Message not available
                                • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Nick Desaulniers
                            • Re: [Intel-wired-lan] [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Rafael J. Wysocki
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                      • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                        • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                          • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Edward Cree
                            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Geert Uytterhoeven
                                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Karol Herbst
                                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                        • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Andy Shevchenko
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Sean Young
              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, James Bottomley
                • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
                  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Joe Perches
                      • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Finn Thain
                    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Sam Ravnborg
          • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Nick Desaulniers
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Kees Cook
              • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Edward Cree
            • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Dan Carpenter
          • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Dan Carpenter
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Miguel Ojeda
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Jason Gunthorpe
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Message not available
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Martin K. Petersen
    • Re: [PATCH 000/141] Fix fall-through warnings for Clang, Gustavo A. R. Silva
  • Re: (subset) [PATCH 000/141] Fix fall-through warnings for Clang, Martin K. Petersen
• [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Phil Sutter
  • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Pablo Neira Ayuso
    • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Phil Sutter
      • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Pablo Neira Ayuso
        • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Phil Sutter
          • Re: [iptables PATCH] tests: shell: Stabilize nft-only/0009-needless-bitwise_0, Pablo Neira Ayuso
• [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • [PATCH net-next,v5 1/9] netfilter: flowtable: add hash offset field to tuple, Pablo Neira Ayuso
  • [PATCH net-next,v5 4/9] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
  • [PATCH net-next,v5 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
  • [PATCH net-next,v5 8/9] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
  • [PATCH net-next,v5 9/9] selftests: netfilter: flowtable bridge and VLAN support, Pablo Neira Ayuso
  • [PATCH net-next,v5 7/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
  • [PATCH net-next,v5 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
  • [PATCH net-next,v5 2/9] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
  • [PATCH net-next,v5 5/9] bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
  • <Possible follow-ups>
  • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Alexander Lobakin
    • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Alexander Lobakin
    • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
    • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Alexander Lobakin
      • Re: [PATCH net-next,v5 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
• [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, Wang Hai
  • Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, Julian Anastasov
    • Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, wanghai (M)
      • Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, Julian Anastasov
        • Re: [PATCH net v2] ipvs: fix possible memory leak in ip_vs_control_net_init, wanghai (M)
• [ANNOUNCE] ipset 7.8 released, Jozsef Kadlecsik
  • Re: [ANNOUNCE] ipset 7.8 released, Jan Engelhardt
    • Re: [ANNOUNCE] ipset 7.8 released, Jozsef Kadlecsik
      • Re: [ANNOUNCE] ipset 7.8 released, Jan Engelhardt
        • Re: [ANNOUNCE] ipset 7.8 released, Neutron Soutmun
          • Re: [ANNOUNCE] ipset 7.8 released, Jozsef Kadlecsik
            • Re: [ANNOUNCE] ipset 7.8 released, Neutron Soutmun
  • Re: [ANNOUNCE] ipset 7.8 released, Ed W
    • Re: [ANNOUNCE] ipset 7.8 released, Jozsef Kadlecsik
      • Message not available
        • Re: ipset 7.9 compilation fix on kernel 4.14, Jozsef Kadlecsik
• [PATCH nf] netfilter: nf_tables: avoid false-postive lockdep splat, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: avoid false-postive lockdep splat, Pablo Neira Ayuso
• [PATCH net] ipvs: fix possible memory leak in ip_vs_control_net_init, Wang Hai
  • Re: [PATCH net] ipvs: fix possible memory leak in ip_vs_control_net_init, Julian Anastasov
    • Re: [PATCH net] ipvs: fix possible memory leak in ip_vs_control_net_init, wanghai (M)
• [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add, Eric Dumazet
  • Re: [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add, Florian Westphal
  • Re: [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add, Jozsef Kadlecsik
  • Re: [PATCH net] netfilter: ipset: prevent uninit-value in hash_ip6_add, Pablo Neira Ayuso
• [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Georg Kohmann
  • Re: [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Pablo Neira Ayuso
  • Re: [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Randy Dunlap
  • Re: [PATCH net v2] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, patchwork-bot+netdevbpf
• WARNING: net/mptcp/protocol.c:719 mptcp_reset_timer+0x40/0x50, Naresh Kamboju
  • Re: [MPTCP] WARNING: net/mptcp/protocol.c:719 mptcp_reset_timer+0x40/0x50, Matthieu Baerts
• [PATCH net] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Georg Kohmann
  • Re: [PATCH net] ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 module, Randy Dunlap
• [PATCH net-next,v4 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • [PATCH net-next,v4 1/9] netfilter: flowtable: add hash offset field to tuple, Pablo Neira Ayuso
  • [PATCH net-next,v4 2/9] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
    • Re: [PATCH net-next,v4 2/9] netfilter: flowtable: add xmit path types, Florian Westphal
  • [PATCH net-next,v4 4/9] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
  • [PATCH net-next,v4 7/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
  • [PATCH net-next,v4 5/9] bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
  • [PATCH net-next,v4 9/9] selftests: netfilter: flowtable bridge and VLAN support, Pablo Neira Ayuso
  • [PATCH net-next,v4 8/9] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
  • [PATCH net-next,v4 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
  • [PATCH net-next,v4 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
    • Re: [PATCH net-next,v4 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Florian Westphal
• Re: linux-next: Tree for Nov 18 (net/ipv6/netfilter/nf_conntrack_reasm.o), Randy Dunlap
• Re: [PATCH 5.9 000/255] 5.9.9-rc1 review, Naresh Kamboju
  • Re: [PATCH 5.9 000/255] 5.9.9-rc1 review, Greg Kroah-Hartman
• [iptables PATCH 1/2] iptables-test.py: Accept multiple test files on commandline, Phil Sutter
  • [iptables PATCH 2/2] iptables-test.py: Try to unshare netns by default, Phil Sutter
• [iptables PATCH] ebtables: Fix for broken chain renaming, Phil Sutter
  • Re: [iptables PATCH] ebtables: Fix for broken chain renaming, Florian Westphal
    • Re: [iptables PATCH] ebtables: Fix for broken chain renaming, Phil Sutter
• Issues w/ db-ip country database, Philip Prindeville
  • Re: Issues w/ db-ip country database, Jan Engelhardt
    • Re: Issues w/ db-ip country database, Philip Prindeville
      • Re: Issues w/ db-ip country database, Jan Engelhardt
        • Re: Issues w/ db-ip country database, Philip Prindeville
          • Re: Issues w/ db-ip country database, Philip Prindeville
            • Re: Issues w/ db-ip country database, Jan Engelhardt
• [iptables PATCH 0/3] Merge some common code, Phil Sutter
  • [iptables PATCH 2/3] xtables-arp: Don't use ARPT_INV_*, Phil Sutter
  • [iptables PATCH 1/3] libxtables: Extend MAC address printing/parsing support, Phil Sutter
  • [iptables PATCH 3/3] xshared: Merge some command option-related code, Phil Sutter
• [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack., nusiddiq
  • Re: [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack., Jakub Kicinski
    • Re: [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack., Florian Westphal
      • Re: [PATCH net-next v2] net: openvswitch: Be liberal in tcp conntrack., Jakub Kicinski
• [PATCH] ipvs: replace atomic_add_return(), Yejune Deng
  • Re: [PATCH] ipvs: replace atomic_add_return(), Julian Anastasov
    • Re: [PATCH] ipvs: replace atomic_add_return(), Pablo Neira Ayuso
• [PATCH net-next] netfilter: nf_reject: bridge: fix build errors due to code movement, Randy Dunlap
  • Re: [PATCH net-next] netfilter: nf_reject: bridge: fix build errors due to code movement, Pablo Neira Ayuso
    • Re: [PATCH net-next] netfilter: nf_reject: bridge: fix build errors due to code movement, Randy Dunlap
• [PATCH] tests: py: update format of registers in bitwise payloads., Jeremy Sowden
  • Re: [PATCH] tests: py: update format of registers in bitwise payloads., Pablo Neira Ayuso
• [PATCH] netfilter: nfnl_acct: remove data from struct net, Wang Shanker
  • Re: [PATCH] netfilter: nfnl_acct: remove data from struct net, Pablo Neira Ayuso
    • [PATCH v2] netfilter: nfnl_acct: remove data from struct net, Wang Shanker
      • Re: [PATCH v2] netfilter: nfnl_acct: remove data from struct net, Pablo Neira Ayuso
• [PATCH libnftnl 0/1] Bitwise dump format fix., Jeremy Sowden
  • [PATCH libnftnl 1/1] bitwise: improve formatting of registers in bitwise dumps., Jeremy Sowden
    • Re: [PATCH libnftnl 1/1] bitwise: improve formatting of registers in bitwise dumps., Pablo Neira Ayuso
      • Re: [PATCH libnftnl 1/1] bitwise: improve formatting of registers in bitwise dumps., Jeremy Sowden
• [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Sean Tranchetti
  • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
    • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
      • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
        • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
          • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
            • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
              • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Will Deacon
                  • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                    • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Will Deacon
                      • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                        • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
                          • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                            • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
                              • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                              • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Peter Zijlstra
                                • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Peter Zijlstra
                                  • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Florian Westphal
                                    • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, Peter Zijlstra
                                      • Re: [PATCH nf] x_tables: Properly close read section with read_seqcount_retry, subashab
• [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
  • [PATCH nf,v2 2/2] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
    • [PATCH nf,v2 2/2] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
    • Re: [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Jakub Kicinski
      • Re: [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
        • Re: [PATCH nf,v2 1/2] netfilter: nftables_offload: set address type in control dissector, Jakub Kicinski
• [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
  • [PATCH net-next,v3 4/9] net: 8021q: resolve forwarding path for vlan devices, Pablo Neira Ayuso
  • [PATCH net-next,v3 1/9] netfilter: flowtable: add hash offset field to tuple, Pablo Neira Ayuso
  • [PATCH net-next,v3 2/9] netfilter: flowtable: add xmit path types, Pablo Neira Ayuso
  • [PATCH net-next,v3 7/9] netfilter: flowtable: use dev_fill_forward_path() to obtain egress device, Pablo Neira Ayuso
  • [PATCH net-next,v3 8/9] netfilter: flowtable: add vlan support, Pablo Neira Ayuso
  • [PATCH net-next,v3 9/9] selftests: netfilter: flowtable bridge and VLAN support, Pablo Neira Ayuso
  • [PATCH net-next,v3 6/9] netfilter: flowtable: use dev_fill_forward_path() to obtain ingress device, Pablo Neira Ayuso
  • [PATCH net-next,v3 5/9] bridge: resolve forwarding path for bridge devices, Pablo Neira Ayuso
    • Re: [PATCH net-next,v3 5/9] bridge: resolve forwarding path for bridge devices, Nikolay Aleksandrov
      • Re: [PATCH net-next,v3 5/9] bridge: resolve forwarding path for bridge devices, Nikolay Aleksandrov
  • [PATCH net-next,v3 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
    • Re: [PATCH net-next,v3 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Jakub Kicinski
      • Re: [PATCH net-next,v3 3/9] net: resolve forwarding path from virtual netdevice and HW destination address, Pablo Neira Ayuso
  • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
    • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
      • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Tobias Waldekranz
        • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
          • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
            • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
              • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
                  • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                    • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                      • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
                        • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
                          • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Jakub Kicinski
                            • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
        • Re: [PATCH net-next,v3 0/9] netfilter: flowtable bridge and vlan enhancements, Pablo Neira Ayuso
• [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann
  • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
  • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Pablo Neira Ayuso
    • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
  • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Pablo Neira Ayuso
    • Re: [PATCH net v4] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann (geokohma)
• [iptables PATCH] tests/shell: Add test for bitwise avoidance fixes, Phil Sutter
• [nft PATCH] proto: Fix ARP header field ordering, Phil Sutter
• Re: [PATCH v22 06/23] LSM: Use lsmblob in security_secid_to_secctx, James Morris
• Re: [PATCH v22 05/23] LSM: Use lsmblob in security_secctx_to_secid, James Morris
• Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Jakub Kicinski
  • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
  • <Possible follow-ups>
  • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
    • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Florian Westphal
      • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
        • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Florian Westphal
          • Re: [net-next] netfiler: conntrack: Add the option to set ct tcp flag - BE_LIBERAL per-ct basis., Numan Siddique
• [PATCH v2 0/4] conntrack: accept commands from file + tests, Mikhail Sennikovsky
  • [PATCH v2 2/4] conntrack.8: man update for --load-file support, Mikhail Sennikovsky
  • [PATCH v2 3/4] tests: saving and loading ct entries, save format, Mikhail Sennikovsky
  • [PATCH v2 1/4] conntrack: accept commands from file, Mikhail Sennikovsky
  • [PATCH v2 4/4] tests: conntrack -L/-D ip family filtering, Mikhail Sennikovsky
• [PATCH] tests: py: remove duplicate payloads., Jeremy Sowden
  • Re: [PATCH] tests: py: remove duplicate payloads., Florian Westphal
• [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann
  • Re: [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
    • Re: [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann (geokohma)
      • Re: [PATCH net v3] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
• [PATCH] MAINTAINERS: rectify file patterns for NETFILTER, Lukas Bulwahn
  • Re: [PATCH] MAINTAINERS: rectify file patterns for NETFILTER, Pablo Neira Ayuso
  • Re: [PATCH] MAINTAINERS: rectify file patterns for NETFILTER, Joe Perches
    • Re: [PATCH] MAINTAINERS: rectify file patterns for NETFILTER, Pablo Neira Ayuso
• [PATCH] netfilter: conntrack: fix -Wformat, Nick Desaulniers
  • Re: [PATCH] netfilter: conntrack: fix -Wformat, Joe Perches
    • Re: [PATCH] netfilter: conntrack: fix -Wformat, Lukas Bulwahn
      • Re: [PATCH] netfilter: conntrack: fix -Wformat, Joe Perches
    • Re: [PATCH] netfilter: conntrack: fix -Wformat, Nick Desaulniers
      • Re: [PATCH] netfilter: conntrack: fix -Wformat, Joe Perches
        • Re: [PATCH] netfilter: conntrack: fix -Wformat, Nick Desaulniers
        • Re: [PATCH] netfilter: conntrack: fix -Wformat, Nick Desaulniers
          • Re: [PATCH] netfilter: conntrack: fix -Wformat, Tom Rix
          • Re: [PATCH] netfilter: conntrack: fix -Wformat, Tom Rix
            • Re: [PATCH] netfilter: conntrack: fix -Wformat, Joe Perches
              • Re: [PATCH] netfilter: conntrack: fix -Wformat, Tom Rix
  • Re: [PATCH] netfilter: conntrack: fix -Wformat, Jakub Kicinski
  • Re: [PATCH] netfilter: conntrack: fix -Wformat, kernel test robot
• [PATCH] netfilter: nf_nat: Support fullcone NAT, Paul Menzel
  • Re: [PATCH] netfilter: nf_nat: Support fullcone NAT, Florian Westphal
• [PATCH net v2] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann
  • Re: [PATCH net v2] ipv6/netfilter: Discard first fragment not including all headers, Jakub Kicinski
    • Re: [PATCH net v2] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann (geokohma)
• [PATCH] netfilter: remove unused macro DUMP_INIT to tame gcc, Alex Shi
• [PATCH] netfilter: Remove unnecessary conversion to bool, xiakaixu1987
  • Re: [PATCH] netfilter: Remove unnecessary conversion to bool, Pablo Neira Ayuso
• [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Martin Willi
  • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Jakub Kicinski
    • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, David Ahern
  • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Pablo Neira Ayuso
    • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Martin Willi
      • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Pablo Neira Ayuso
        • Re: [PATCH net] vrf: Fix fast path output packet handling with async Netfilter rules, Jakub Kicinski
• [PATCH nft 0/7] rework tcp option handling, Florian Westphal
  • [PATCH nft 1/7] parser: merge sack-perm/sack-permitted and maxseg/mss, Florian Westphal
    • Re: [PATCH nft 1/7] parser: merge sack-perm/sack-permitted and maxseg/mss, Jeremy Sowden
      • Re: [PATCH nft 1/7] parser: merge sack-perm/sack-permitted and maxseg/mss, Florian Westphal
  • [PATCH nft 2/7] tcpopts: clean up parser -> tcpopt.c plumbing, Florian Westphal
  • [PATCH nft 3/7] tcpopt: rename noop to nop, Florian Westphal
  • [PATCH nft 4/7] tcpopt: split tcpopt_hdr_fields into per-option enum, Florian Westphal
  • [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Florian Westphal
    • Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Jeremy Sowden
      • Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Jeremy Sowden
        • Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Florian Westphal
          • Re: [PATCH nft 5/7] tcpopt: allow to check for presence of any tcp option, Jeremy Sowden
  • [PATCH nft 6/7] tcp: add raw tcp option match support, Florian Westphal
  • [PATCH nft 7/7] json: tcp: add raw tcp option match support, Florian Westphal
• [PATCH v22 16/23] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
  • Re: [PATCH v22 16/23] LSM: security_secid_to_secctx in netlink netfilter, Pablo Neira Ayuso
    • Re: [PATCH v22 16/23] LSM: security_secid_to_secctx in netlink netfilter, James Morris
• [PATCH net-next 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 3/8] netfilter: nft_reject: add reject verdict support for netdev, Pablo Neira Ayuso
  • [PATCH net-next 7/8] netfilter: nftables: Add __printf() attribute, Pablo Neira Ayuso
  • [PATCH net-next 4/8] netfilter: ipset: Support the -exist flag with the destroy command, Pablo Neira Ayuso
  • [PATCH net-next 5/8] netfilter: ipset: Add bucketsize parameter to all hash types, Pablo Neira Ayuso
  • [PATCH net-next 8/8] netfilter: nft_reject_inet: allow to use reject from inet ingress, Pablo Neira Ayuso
  • [PATCH net-next 6/8] netfilter: ipset: Expose the initval hash parameter to userspace, Pablo Neira Ayuso
  • [PATCH net-next 1/8] netfilter: nf_reject: add reject skbuff creation helpers, Pablo Neira Ayuso
  • [PATCH net-next 2/8] netfilter: nft_reject: unify reject init and dump into nft_reject, Pablo Neira Ayuso
  • Re: [PATCH net-next 0/8] Netfilter updates for net-next, Jakub Kicinski
  • <Possible follow-ups>
  • [PATCH net-next 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH net-next 2/8] netfilter: ecache: remove another indent level, Pablo Neira Ayuso
    • [PATCH net-next 1/8] netfilter: ecache: remove one indent level, Pablo Neira Ayuso
      • Re: [PATCH net-next 1/8] netfilter: ecache: remove one indent level, patchwork-bot+netdevbpf
    • [PATCH net-next 4/8] netfilter: ecache: prepare for event notifier merge, Pablo Neira Ayuso
    • [PATCH net-next 5/8] netfilter: ecache: remove nf_exp_event_notifier structure, Pablo Neira Ayuso
    • [PATCH net-next 8/8] netfilter: add netfilter hooks to SRv6 data plane, Pablo Neira Ayuso
    • [PATCH net-next 6/8] netfilter: ctnetlink: missing counters and timestamp in nfnetlink_{log,queue}, Pablo Neira Ayuso
    • [PATCH net-next 7/8] netfilter: x_tables: handle xt_register_template() returning an error value, Pablo Neira Ayuso
    • [PATCH net-next 3/8] netfilter: ecache: add common helper for nf_conntrack_eventmask_report, Pablo Neira Ayuso
  • [PATCH net-next 0/8] Netfilter updates for net-next, Pablo Neira Ayuso
    • [PATCH net-next 1/8] netfilter: nf_tables: Pass const set to nft_get_set_elem, Pablo Neira Ayuso
    • [PATCH net-next 2/8] netfilter: nf_tables: Introduce nft_set_dump_ctx_init(), Pablo Neira Ayuso
    • [PATCH net-next 3/8] netfilter: nf_tables: Add locking for NFT_MSG_GETSETELEM_RESET requests, Pablo Neira Ayuso
    • [PATCH net-next 4/8] netfilter: nft_set_pipapo: prefer gfp_kernel allocation, Pablo Neira Ayuso
    • [PATCH net-next 5/8] netfilter: flowtable: reorder nf_flowtable struct members, Pablo Neira Ayuso
    • [PATCH net-next 6/8] netfilter: nf_tables: mark newset as dead on transaction abort, Pablo Neira Ayuso
    • [PATCH net-next 8/8] netfilter: nf_tables: validate chain type update if available, Pablo Neira Ayuso
    • [PATCH net-next 7/8] netfilter: ctnetlink: support filtering by zone, Pablo Neira Ayuso
• [PATCH net] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann
  • Re: [PATCH net] ipv6/netfilter: Discard first fragment not including all headers, Pablo Neira Ayuso
    • Re: [PATCH net] ipv6/netfilter: Discard first fragment not including all headers, Georg Kohmann (geokohma)
• [PATCH nf 0/2] fixes for nftables offload, Pablo Neira Ayuso
  • [PATCH nf 1/2] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
    • Re: [PATCH nf 2/2] netfilter: nftables_offload: build mask based from the matching bytes, kernel test robot
• [PATCH nft 0/3] json: resolve multiple test case failures, Florian Westphal
  • [PATCH nft 1/3] tests: json: add missing test case output, Florian Westphal
  • [PATCH nft 2/3] tests: avoid warning and add missing json test cases, Florian Westphal
  • [PATCH nft 3/3] json: add missing nat_type flag and netmap nat flag, Florian Westphal
  • Re: [PATCH nft 0/3] json: resolve multiple test case failures, Pablo Neira Ayuso
• [PATCH conntrack] conntrack: do not allow to update offload status bits, Pablo Neira Ayuso
  • Re: [PATCH conntrack] conntrack: do not allow to update offload status bits, Pablo Neira Ayuso
• ipset 7.7 modules fail to build on kernel 4.19.152, Oskar Berggren
  • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Jozsef Kadlecsik
    • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Oskar Berggren
      • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Jozsef Kadlecsik
        • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Oskar Berggren
          • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Jozsef Kadlecsik
            • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Jozsef Kadlecsik
              • Re: ipset 7.7 modules fail to build on kernel 4.19.152, Oskar Berggren
• [PATCH] doc: correct chain name in example of adding a rule., Jeremy Sowden
  • Re: [PATCH] doc: correct chain name in example of adding a rule., Florian Westphal
• [PATCH nf-next,v2] netfilter: nft_reject_inet: allow to use reject from inet ingress, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nf-next,v2] netfilter: nft_reject_inet: allow to use reject from inet ingress, Pablo Neira Ayuso
• [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 1/5] netfilter: nftables: fix netlink report logic in flowtable and genid, Pablo Neira Ayuso
  • [PATCH net 2/5] wireguard: selftests: check that route_me_harder packets use the right sk, Pablo Neira Ayuso
  • [PATCH net 3/5] netfilter: use actual socket sk rather than skb sk when routing harder, Pablo Neira Ayuso
  • [PATCH net 5/5] netfilter: ipset: Update byte and packet counters regardless of whether they match, Pablo Neira Ayuso
  • [PATCH net 4/5] netfilter: nf_tables: missing validation from the abort path, Pablo Neira Ayuso
  • Re: [PATCH net 0/5] Netfilter fixes for net, Jakub Kicinski
  • <Possible follow-ups>
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: avoid false-postive lockdep splat, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nftables_offload: build mask based from the matching bytes, Pablo Neira Ayuso
    • [PATCH net 3/5] ipvs: fix possible memory leak in ip_vs_control_net_init, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: ipset: prevent uninit-value in hash_ip6_add, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nftables_offload: set address type in control dissector, Pablo Neira Ayuso
    • Re: [PATCH net 0/5] Netfilter fixes for net, Jakub Kicinski
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex, patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: conntrack: sanitize table size default settings, Pablo Neira Ayuso
      • Re: [PATCH net 2/5] netfilter: conntrack: sanitize table size default settings, Vincent Pelletier
        • Re: [PATCH net 2/5] netfilter: conntrack: sanitize table size default settings, Florian Westphal
    • [PATCH net 3/5] netfilter: conntrack: switch to siphash, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: socket: icmp6: fix use-after-scope, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: refuse insertion if chain has grown too large, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
      • Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, Jakub Kicinski
        • Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
        • Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, David Miller
          • Re: [PATCH net 2/5] netfilter: nf_tables: add position handle in event notification, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nft_dynset: relax superfluous check on set updates, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nf_tables: reverse order in rule replacement expansion, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_conntrack_netbios_ns: fix helper module alias, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_conntrack_netbios_ns: fix helper module alias, patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: nf_tables: remove unused variable, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nf_tables: set last expression in register tracking area, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: conntrack: don't increment invalid counter on NF_REPEAT, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: hold mutex on netns pre_exit path, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: sanitize nft_set_desc_concat_parse(), Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: sanitize nft_set_desc_concat_parse(), patchwork-bot+netdevbpf
    • [PATCH net 5/5] netfilter: flowtable: fix nft_flow_route source address for nat case, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nf_tables: double hook unregistration in netns path, Pablo Neira Ayuso
      • Re: [PATCH net 3/5] netfilter: nf_tables: double hook unregistration in netns path, Jakub Kicinski
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: use get_random_u32 instead of prandom, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: use get_random_u32 instead of prandom, patchwork-bot+netdevbpf
    • [PATCH net 4/5] netfilter: nf_dup_netdev: do not push mac header a second time, Pablo Neira Ayuso
    • [PATCH net 3/5] selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_dup_netdev: add and use recursion counter, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: Modify nla_memdup's flag to GFP_KERNEL_ACCOUNT, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: br_netfilter: fix recent physdev match breakage, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: br_netfilter: fix recent physdev match breakage, patchwork-bot+netdevbpf
    • [PATCH net 3/5] netfilter: nf_tables: fix ifdef to also consider nf_tables=m, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nf_tables: validate catch-all set elements, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: tighten netlink attribute requirements for catch-all elements, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: out-of-bound check in chain blob, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: Add null check for nla_nest_start_noflag() in nft_dump_basechain_hook(), Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: Add null check for nla_nest_start_noflag() in nft_dump_basechain_hook(), patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: nft_bitwise: fix register tracking, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: ipset: Add schedule point in call_ad()., Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nf_tables: adapt set backend to use GC transaction API, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: remove busy mark and gc batch API, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: GC transaction API to avoid race with control plane, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: don't skip expired elements during walk, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: don't skip expired elements during walk, patchwork-bot+netdevbpf
    • Re: [PATCH net 0/5] Netfilter fixes for net, Greg KH
      • Re: [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • Re: [PATCH net 0/5] Netfilter fixes for net, Jakub Kicinski
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nft_exthdr: Fix non-linear header modification, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nft_exthdr: Fix non-linear header modification, patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: xt_sctp: validate the flag_info count, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nf_tables: Audit log setelem reset, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_tables: Audit log rule reset, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: xt_u32: validate user space input, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nf_tables: remove catchall element in GC sync path, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: add missing module descriptions, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: add missing module descriptions, patchwork-bot+netdevbpf
    • [PATCH net 4/5] netfilter: xt_recent: fix (increase) ipv6 literal buffer length, Pablo Neira Ayuso
    • [PATCH net 3/5] ipvs: add missing module descriptions, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/5] netfilter: nft_flow_offload: reset dst in route object after setting up flow, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nft_flow_offload: release dst in case direct xmit path is used, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nf_tables: register hooks last when adding new chain/flowtable, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: set dormant flag on hook register failure, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: set dormant flag on hook register failure, patchwork-bot+netdevbpf
    • [PATCH net 5/5] netfilter: nf_tables: use kzalloc for hook allocation, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: nf_tables: disallow anonymous set with timeout flag, Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: nf_tables: disallow anonymous set with timeout flag, patchwork-bot+netdevbpf
    • [PATCH net 2/5] netfilter: nf_tables: reject constant set with timeout, Pablo Neira Ayuso
    • [PATCH net 3/5] netfilter: nft_ct: fix l3num expectations with inet pseudo family, Pablo Neira Ayuso
    • [PATCH net 4/5] netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout, Pablo Neira Ayuso
    • [PATCH net 5/5] netfilter: nf_conntrack_h323: Add protection for bmp length out of range, Pablo Neira Ayuso
  • [PATCH net 0/5] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/5] netfilter: ipset: Fix suspicious rcu_dereference_protected(), Pablo Neira Ayuso
      • Re: [PATCH net 1/5] netfilter: ipset: Fix suspicious rcu_dereference_protected(), patchwork-bot+netdevbpf
    • [PATCH net 3/5] netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter core, Pablo Neira Ayuso
    • [PATCH net 4/5] selftests: add selftest for the SRv6 End.DX4 behavior with netfilter, Pablo Neira Ayuso
      • Re: [PATCH net 4/5] selftests: add selftest for the SRv6 End.DX4 behavior with netfilter, Paolo Abeni
    • [PATCH net 2/5] seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors, Pablo Neira Ayuso
    • [PATCH net 5/5] selftests: add selftest for the SRv6 End.DX6 behavior with netfilter, Pablo Neira Ayuso
• [ANNOUNCE] iptables 1.8.6 release, Phil Sutter
• [PATCH nf-next] netfilter: nft_reject_inet: allow to use reject from inet ingress, Pablo Neira Ayuso
• [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations, Cezar Sa Espinola
  • Re: [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations, Julian Anastasov
    • Re: [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations, Cezar Sá Espinola
      • Re: [PATCH RFC] ipvs: add genetlink cmd to dump all services and destinations, Julian Anastasov
        • [PATCH RFC v2] ipvs: add genetlink cmd to dump all services and destinations, Cezar Sa Espinola
          • Re: [PATCH RFC v2] ipvs: add genetlink cmd to dump all services and destinations, Julian Anastasov
            • [PATCH RFC v3] ipvs: add genetlink cmd to dump all services and destinations, Cezar Sa Espinola
              • Re: [PATCH RFC v3] ipvs: add genetlink cmd to dump all services and destinations, Julian Anastasov
• [PATCH nft] tests: shell: exercise validate with nft -c, Pablo Neira Ayuso
• Re: [PATCH] raw2packet: fix comma instead of semicolon, Pablo Neira Ayuso
• [iptables PATCH v2 1/2] nft: Optimize class-based IP prefix matches, Phil Sutter
  • [iptables PATCH 2/2] ebtables: Optimize masked MAC address matches, Phil Sutter
    • Re: [iptables PATCH 2/2] ebtables: Optimize masked MAC address matches, Pablo Neira Ayuso
  • Re: [iptables PATCH v2 1/2] nft: Optimize class-based IP prefix matches, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: missing validation from the abort path, Pablo Neira Ayuso
• [nft PATCH] tests/shell: Improve fix in sets/0036add_set_element_expiration_0, Phil Sutter
• [PATCH v2 0/2] conntrack: save output format, Mikhail Sennikovsky
  • [PATCH v2 1/2] conntrack: implement save output format, Mikhail Sennikovsky
    • Re: [PATCH v2 1/2] conntrack: implement save output format, Pablo Neira Ayuso
  • [PATCH v2 2/2] conntrack.8: man update for opts format support, Mikhail Sennikovsky
    • Re: [PATCH v2 2/2] conntrack.8: man update for opts format support, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack] conntrack: add flush filter command, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH libnetfilter_conntrack] conntrack: add flush filter command, Pablo Neira Ayuso
• [PATCH conntrack-tools] conntrack: allow to flush per family, Pablo Neira Ayuso
• [PATCH nf 0/2] route_me_harder routing loop with tunnels, Jason A. Donenfeld
  • [PATCH nf 1/2] wireguard: selftests: check that route_me_harder packets use the right sk, Jason A. Donenfeld
  • [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder, Jason A. Donenfeld
    • Re: [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder, Florian Westphal
    • Re: [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder, Jason A. Donenfeld
      • Re: [PATCH nf 2/2] netfilter: use actual socket sk rather than skb sk when routing harder, Jason A. Donenfeld
  • Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels, Pablo Neira Ayuso
    • Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels, Jason A. Donenfeld
      • Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels, Pablo Neira Ayuso
        • Re: [PATCH nf 0/2] route_me_harder routing loop with tunnels, Pablo Neira Ayuso
• [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0, Phil Sutter
  • Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0, Pablo Neira Ayuso
    • Re: [nft PATCH] tests/shell: Restore testcases/sets/0036add_set_element_expiration_0, Pablo Neira Ayuso