Linux Netfilter / IP Tables Devel

Date Index

[Prev Page][Next Page]

[PATCH 0/2] conntrack: -L/-D both ipv4/6 if no family is given, (continued)
[nftables] dynamic flag missing from wiki and using counter, Gopal Yadav
[PATCH] ipset: enable memory accounting for ipset allocations, Vasily Averin
- Re: [PATCH] ipset: enable memory accounting for ipset allocations, kernel test robot
  - [PATCH v2] ipset: enable memory accounting for ipset allocations, Vasily Averin
    - Re: [PATCH v2] ipset: enable memory accounting for ipset allocations, Pablo Neira Ayuso
- Re: [PATCH] ipset: enable memory accounting for ipset allocations, kernel test robot
[nft PATCH] evaluate: Reject quoted strings containing only wildcard, Phil Sutter
- Re: [nft PATCH] evaluate: Reject quoted strings containing only wildcard, Phil Sutter
  - Re: [nft PATCH] evaluate: Reject quoted strings containing only wildcard, Pablo Neira Ayuso
    - Re: [nft PATCH] evaluate: Reject quoted strings containing only wildcard, Phil Sutter
      - Re: [nft PATCH] evaluate: Reject quoted strings containing only wildcard, Pablo Neira Ayuso
[PATCH 1/1 nf] selftests: netfilter: add time counter check, Fabian Frederick
- Re: [PATCH 1/1 nf] selftests: netfilter: add time counter check, Pablo Neira Ayuso
[iptables PATCH v2 00/10] nft: Sorted chain listing et al., Phil Sutter
- [iptables PATCH v2 09/10] tests: shell: Drop any dump sorting in place, Phil Sutter
- [iptables PATCH v2 03/10] nft: cache: Introduce nft_cache_add_chain(), Phil Sutter
  - Re: [iptables PATCH v2 03/10] nft: cache: Introduce nft_cache_add_chain(), Pablo Neira Ayuso
    - Re: [iptables PATCH v2 03/10] nft: cache: Introduce nft_cache_add_chain(), Phil Sutter
- [iptables PATCH v2 02/10] nft: Implement nft_chain_foreach(), Phil Sutter
  - Re: [iptables PATCH v2 02/10] nft: Implement nft_chain_foreach(), Pablo Neira Ayuso
    - Re: [iptables PATCH v2 02/10] nft: Implement nft_chain_foreach(), Phil Sutter
- [iptables PATCH v2 10/10] nft: Avoid pointless table/chain creation, Phil Sutter
- [iptables PATCH v2 06/10] nft: Introduce struct nft_chain, Phil Sutter
  - Re: [iptables PATCH v2 06/10] nft: Introduce struct nft_chain, Pablo Neira Ayuso
    - Re: [iptables PATCH v2 06/10] nft: Introduce struct nft_chain, Phil Sutter
- [iptables PATCH v2 07/10] nft: Introduce a dedicated base chain array, Phil Sutter
- [iptables PATCH v2 08/10] nft: cache: Sort custom chains by name, Phil Sutter
- [iptables PATCH v2 05/10] nft: cache: Move nft_chain_find() over, Phil Sutter
- [iptables PATCH v2 04/10] nft: Eliminate nft_chain_list_get(), Phil Sutter
  - Re: [iptables PATCH v2 04/10] nft: Eliminate nft_chain_list_get(), Pablo Neira Ayuso
    - Re: [iptables PATCH v2 04/10] nft: Eliminate nft_chain_list_get(), Phil Sutter
- [iptables PATCH v2 01/10] nft: Fix selective chain compatibility checks, Phil Sutter
  - Re: [iptables PATCH v2 01/10] nft: Fix selective chain compatibility checks, Pablo Neira Ayuso
    - Re: [iptables PATCH v2 01/10] nft: Fix selective chain compatibility checks, Phil Sutter
[PATCH v2 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain, Jose M. Guisado Gomez
- Re: [PATCH v2 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain, Pablo Neira Ayuso
  - Re: [PATCH v2 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain, Pablo Neira Ayuso
    - [PATCH v3 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain, Jose M. Guisado Gomez
      - Re: [PATCH v3 nf-next] netfilter: nf_tables: add userdata attributes to nft_chain, Florian Westphal
[PATCH] ipvs: adjust the debug order of src and dst, longguang.yue
- Re: [PATCH] ipvs: adjust the debug order of src and dst, Simon Horman
- <Possible follow-ups>
- [PATCH] ipvs: adjust the debug order of src and dst, yue longguang
  - Re: [PATCH] ipvs: adjust the debug order of src and dst, Andrew Lunn
  - Re: [PATCH] ipvs: adjust the debug order of src and dst, Julian Anastasov
[iptables PATCH 0/3] libxtables: Fix for pointless socket() calls, Phil Sutter
- [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order, Phil Sutter
  - Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order, Pablo Neira Ayuso
    - Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order, Phil Sutter
      - Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order, Pablo Neira Ayuso
        
        Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order, Phil Sutter
        
        Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order, Pablo Neira Ayuso
        
        Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order, Phil Sutter
        
        Re: [iptables PATCH 1/3] libxtables: Make sure extensions register in revision order, Pablo Neira Ayuso
  - [iptables PATCH v2] libxtables: Make sure extensions register in revision order, Phil Sutter
    - Re: [iptables PATCH v2] libxtables: Make sure extensions register in revision order, Pablo Neira Ayuso
- [iptables PATCH 2/3] libxtables: Simplify pending extension registration, Phil Sutter
  - Re: [iptables PATCH 2/3] libxtables: Simplify pending extension registration, Pablo Neira Ayuso
- [iptables PATCH 3/3] libxtables: Register multiple extensions in ascending order, Phil Sutter
  - Re: [iptables PATCH 3/3] libxtables: Register multiple extensions in ascending order, Pablo Neira Ayuso
    - Re: [iptables PATCH 3/3] libxtables: Register multiple extensions in ascending order, Phil Sutter
- Re: [iptables PATCH 0/3] libxtables: Fix for pointless socket() calls, Pablo Neira Ayuso
  - Re: [iptables PATCH 0/3] libxtables: Fix for pointless socket() calls, Phil Sutter
- Re: [iptables PATCH 0/3] libxtables: Fix for pointless socket() calls, Pablo Neira Ayuso
[PATCH] Solves Bug 1388 - Combining --terse with --json has no effect (with test), Gopal
- Re: [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect (with test), Pablo Neira Ayuso
Re: UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn, syzbot
- Re: UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn, Kees Cook
  - Re: UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn, Masami Hiramatsu
[PATCH nf] netfilter: nft_immediate: No increment ctx->level for NFT_GOTO, Pablo Neira Ayuso
KMSAN: uninit-value in gc_worker (3), syzbot
[PATCH 0/3] add userdata and comment support for chains, Jose M. Guisado Gomez
- [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_chain, Jose M. Guisado Gomez
  - Re: [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_chain, Pablo Neira Ayuso
- [PATCH libnftnl 2/3] chain: add userdata and comment support, Jose M. Guisado Gomez
- [PATCH nftables 3/3] src: add comment support for chains, Jose M. Guisado Gomez
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2, syzbot
- Re: [syzbot] KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2, syzbot
  - Re: [syzbot] KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2, Dmitry Vyukov
0x14: slides and papers posted, Jamal Hadi Salim
[PATCH net-next] netfilter: nf_tables_offload: Remove unused macro FLOW_SETUP_BLOCK, YueHaibing
- Re: [PATCH net-next] netfilter: nf_tables_offload: Remove unused macro FLOW_SETUP_BLOCK, Pablo Neira Ayuso
[PATCH net-next] ipvs: Remove unused macros, YueHaibing
- Re: [PATCH net-next] ipvs: Remove unused macros, Simon Horman
  - Re: [PATCH net-next] ipvs: Remove unused macros, Pablo Neira Ayuso
[PATCH AUTOSEL 5.4 215/330] netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup(), Sasha Levin
[PATCH net-next] netfilter: nf_tables: Remove ununsed function nft_data_debug, YueHaibing
[PATCH libmnl] doxygen: Fixed link to the git source tree on the website., igo95862
- Re: [PATCH libmnl] doxygen: Fixed link to the git source tree on the website., Pablo Neira Ayuso
[PATCH nft] tests: py: flush log file output before running each command, Pablo Neira Ayuso
- [PATCH nft 1/2] evaluate: remove one indent level in __expr_evaluate_payload(), Pablo Neira Ayuso
- [PATCH nft 2/2] src: context tracking for multiple transport protocols, Pablo Neira Ayuso
[PATCH nft 1/2] mnl: larger receive socket buffer for netlink errors, Pablo Neira Ayuso
- [PATCH nft 2/2] libnftables: avoid repeated command list traversal on errors, Pablo Neira Ayuso
[PATCH] Solves Bug 1388 - Combining --terse with --json has no effect, Gopal Yadav
- Re: [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect, Pablo Neira Ayuso
  - Re: [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect, Gopal Yadav
    - Re: [PATCH] Solves Bug 1388 - Combining --terse with --json has no effect, Pablo Neira Ayuso
[iptables] Multiple labels simultaneously, Amiq Nahas
[PATCH nftables] parser_bison: fail when specifying multiple comments, Jose M. Guisado Gomez
- Re: [PATCH nftables] parser_bison: fail when specifying multiple comments, Pablo Neira Ayuso
[trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Joe Perches
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Gustavo A. R. Silva
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Keith Busch
  - Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Jacob Keller
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Jason Gunthorpe
  - Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Joe Perches
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Mauro Carvalho Chehab
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Wolfram Sang
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Nicolas.Ferre
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Felipe Balbi
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Steffen Maier
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Ilya Dryomov
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Matthias Brugger
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Robin Murphy
  - Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Joe Perches
- Re: [Intel-gfx] [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Jani Nikula
- Re: [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Miquel Raynal
- Re: [oss-drivers] [trivial PATCH] treewide: Convert switch/case fallthrough; to break;, Simon Horman
[PATCH 3/3 nf] selftests: netfilter: remove unused cnt and simplify command testing, Fabian Frederick
[PATCH 2/3 nf] selftests: netfilter: fix nft_meta.sh error reporting, Fabian Frederick
[PATCH 1/3 nf] selftests: netfilter: add cpu counter check, Fabian Frederick
- Re: [PATCH 1/3 nf] selftests: netfilter: add cpu counter check, Florian Westphal
- Re: [PATCH 1/3 nf] selftests: netfilter: add cpu counter check, Pablo Neira Ayuso
[PATCH] net/netfilter: fix a typo for nf_conntrack_proto_dccp.c, Wang Qing
- Re: [PATCH] net/netfilter: fix a typo for nf_conntrack_proto_dccp.c, Simon Horman
[PATCH nf-next] netfilter: conntrack: proc: rename stat column, Florian Westphal
- Re: [PATCH nf-next] netfilter: conntrack: proc: rename stat column, Pablo Neira Ayuso
[PATCH 00/13] Netfilter updates for net-next, Pablo Neira Ayuso
- [PATCH 12/13] selftests/net: replace obsolete NFT_CHAIN configuration, Pablo Neira Ayuso
- [PATCH 09/13] netfilter: nft_socket: add wildcard support, Pablo Neira Ayuso
- [PATCH 13/13] netfilter: nf_tables: add userdata support for nft_object, Pablo Neira Ayuso
- [PATCH 11/13] netfilter: ebt_stp: Remove unused macro BPDU_TYPE_TCN, Pablo Neira Ayuso
- [PATCH 07/13] netfilter: conntrack: remove unneeded nf_ct_put, Pablo Neira Ayuso
- [PATCH 10/13] ipvs: remove dependency on ip6_tables, Pablo Neira Ayuso
- [PATCH 08/13] netfilter: xt_HMARK: Use ip_is_fragment() helper, Pablo Neira Ayuso
- [PATCH 06/13] netfilter: conntrack: add clash resolution stat counter, Pablo Neira Ayuso
- [PATCH 05/13] netfilter: conntrack: remove ignore stats, Pablo Neira Ayuso
- [PATCH 04/13] netfilter: conntrack: do not increment two error counters at same time, Pablo Neira Ayuso
- [PATCH 03/13] netfilter: nf_tables: add userdata attributes to nft_table, Pablo Neira Ayuso
- [PATCH 01/13] netfilter: ip6t_NPT: rewrite addresses in ICMPv6 original packet, Pablo Neira Ayuso
- [PATCH 02/13] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Pablo Neira Ayuso
- Re: [PATCH 00/13] Netfilter updates for net-next, David Miller
[nftables] TODO: Replace yy_switch_to_buffer by yypop_buffer_state and yypush_buffer_state, Gopal Yadav
- Re: [nftables] TODO: Replace yy_switch_to_buffer by yypop_buffer_state and yypush_buffer_state, Florian Westphal
  - Re: [nftables] TODO: Replace yy_switch_to_buffer by yypop_buffer_state and yypush_buffer_state, Gopal Yadav
    - Re: [nftables] TODO: Replace yy_switch_to_buffer by yypop_buffer_state and yypush_buffer_state, Gopal Yadav
INFO: trying to register non-static key in update_defense_level, syzbot
Re: [PATCH 1/1 net-next] selftests/net: replace obsolete NFT_CHAIN configuration, Jakub Kicinski
- <Possible follow-ups>
- Re: [PATCH 1/1 net-next] selftests/net: replace obsolete NFT_CHAIN configuration, Pablo Neira Ayuso
[PATCH AUTOSEL 5.8 04/53] netfilter: conntrack: allow sctp hearbeat after connection re-use, Sasha Levin
[PATCH AUTOSEL 5.8 06/53] netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match, Sasha Levin
[PATCH AUTOSEL 5.4 03/43] netfilter: conntrack: allow sctp hearbeat after connection re-use, Sasha Levin
[PATCH AUTOSEL 4.19 03/26] netfilter: conntrack: allow sctp hearbeat after connection re-use, Sasha Levin
Re: [PATCH net-net] netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled, Simon Horman
- <Possible follow-ups>
- Re: [PATCH net-net] netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled, Pablo Neira Ayuso
Can someone please update libnetfilter_queue online documentation, Duncan Roe
- Re: Can someone please update libnetfilter_queue online documentation, Pablo Neira Ayuso
  - Re: Can someone please update libnetfilter_queue online documentation, Duncan Roe
    - [PATCH libnetfilter_queue] build: check whether dot is available when configuring doxygen., Jeremy Sowden
      - Re: [PATCH libnetfilter_queue] build: check whether dot is available when configuring doxygen., Duncan Roe
      - Re: [PATCH libnetfilter_queue] build: check whether dot is available when configuring doxygen., Pablo Neira Ayuso
[PATCH nf] netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid, Pablo Neira Ayuso
- Re: [PATCH nf] netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid, Phil Sutter
[PATCH net-next] netfilter: ebt_stp: Remove unused macro BPDU_TYPE_TCN, Wang Hai
- Re: [PATCH net-next] netfilter: ebt_stp: Remove unused macro BPDU_TYPE_TCN, Pablo Neira Ayuso
[PATCH nft,v4] mergesort: find base value expression type via recursion, Pablo Neira Ayuso
[PATCH nft,v3] mergesort: find base value expression type via recursion, Pablo Neira Ayuso
[PATCH nft] mergesort: find base value expression type via recursion, Pablo Neira Ayuso
[PATCH nf,v3] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Pablo Neira Ayuso
- Re: [PATCH nf,v3] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Phil Sutter
  - Re: [PATCH nf,v3] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Pablo Neira Ayuso
    - Re: [PATCH nf,v3] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Phil Sutter
[PATCH nf,v2] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Pablo Neira Ayuso
- Re: [PATCH nf,v2] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Phil Sutter
  - Re: [PATCH nf,v2] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Pablo Neira Ayuso
[PATCH 0/3] add object userdata and comment support, Jose M. Guisado Gomez
- [PATCH nf-next 1/3] netfilter: nf_tables: add userdata support for nft_object, Jose M. Guisado Gomez
  - Re: [PATCH nf-next 1/3] netfilter: nf_tables: add userdata support for nft_object, Pablo Neira Ayuso
    - [PATCH nf-next 1/3, v2] netfilter: nf_tables: add userdata support for nft_object, Jose M. Guisado Gomez
      - Re: [PATCH nf-next 1/3, v2] netfilter: nf_tables: add userdata support for nft_object, Pablo Neira Ayuso
- [PATCH libnftnl 2/3] object: add userdata and comment support, Jose M. Guisado Gomez
  - Re: [PATCH libnftnl 2/3] object: add userdata and comment support, Pablo Neira Ayuso
- [PATCH nftables 3/3] src: add comment support for objects, Jose M. Guisado Gomez
  - [PATCH nftables 3/3, v2] src: add comment support for objects, Jose M. Guisado Gomez
  - Re: [PATCH nftables 3/3] src: add comment support for objects, Pablo Neira Ayuso
[PATCH nf] netfilter: ctnetlink: fix mark based dump filtering regression, Martin Willi
- Re: [PATCH nf] netfilter: ctnetlink: fix mark based dump filtering regression, Pablo Neira Ayuso
inserting rule at the top of the chain using libnftnl, JM
[PATCH 1/2] xt_ACCOUNT: update prototype of `struct nf_sockopt_ops` `.set` call-back., Jeremy Sowden
- [PATCH 2/2] build: bump supported kernel version to 5.9., Jeremy Sowden
  - Re: [PATCH 2/2] build: bump supported kernel version to 5.9., Jan Engelhardt
[PATCH xtables-addons] build: don't hard-code pkg-config., Jeremy Sowden
- Re: [PATCH xtables-addons] build: don't hard-code pkg-config., Jan Engelhardt
KMSAN: uninit-value in translate_table, syzbot
[PATCH xtables-addons] build: clean some extra build artefacts., Jeremy Sowden
- Re: [PATCH xtables-addons] build: clean some extra build artefacts., Jan Engelhardt
  - Re: [PATCH xtables-addons] build: clean some extra build artefacts., Jeremy Sowden
[no subject], Balazs Scheidler
- [PATCH nftables v2 1/5] socket: add support for "wildcard" key, Balazs Scheidler
  - Re: [PATCH nftables v2 1/5] socket: add support for "wildcard" key, Pablo Neira Ayuso
- [PATCH nftables v2 2/5] src/scanner.l: fix whitespace issue for the TRANSPARENT keyword, Balazs Scheidler
  - Re: [PATCH nftables v2 2/5] src/scanner.l: fix whitespace issue for the TRANSPARENT keyword, Pablo Neira Ayuso
- [PATCH nftables v2 3/5] doc: added documentation on "socket wildcard", Balazs Scheidler
  - Re: [PATCH nftables v2 3/5] doc: added documentation on "socket wildcard", Pablo Neira Ayuso
- [PATCH nftables v2 4/5] tests: added "socket wildcard" testcases, Balazs Scheidler
  - Re: [PATCH nftables v2 4/5] tests: added "socket wildcard" testcases, Pablo Neira Ayuso
- [PATCH nftables v2 5/5] tests: allow tests/monitor to use a custom nft executable, Balazs Scheidler
  - Re: [PATCH nftables v2 5/5] tests: allow tests/monitor to use a custom nft executable, Pablo Neira Ayuso
    - Re: [PATCH nftables v2 5/5] tests: allow tests/monitor to use a custom nft executable, Stefano Brivio
      - Re: [PATCH nftables v2 5/5] tests: allow tests/monitor to use a custom nft executable, Pablo Neira Ayuso
[PATCH] netfilter: No increment ctx->level for NFT_GOTO, Steve Hill
[PATCH nf-next] netfilter: nft_socket: add wildcard support, Pablo Neira Ayuso
- Re: [PATCH nf-next] netfilter: nft_socket: add wildcard support, kernel test robot
- Re: [PATCH nf-next] netfilter: nft_socket: add wildcard support, kernel test robot
- [PATCH nf-next v2] netfilter: nft_socket: add wildcard support, Balazs Scheidler
  - Re: [PATCH nf-next v2] netfilter: nft_socket: add wildcard support, Pablo Neira Ayuso
[PATCH] Remove ipvs v6 dependency on iptables, Lach
- Re: [PATCH] Remove ipvs v6 dependency on iptables, Julian Anastasov
  - [PATCH] Remove ipvs v6 dependency on iptables, Lach
    - Re: [PATCH] Remove ipvs v6 dependency on iptables, Nicolas Dichtel
      - [PATCH] Remove ipvs v6 dependency on iptables, Yaroslav Bolyukin
        
        Re: [PATCH] Remove ipvs v6 dependency on iptables, Julian Anastasov
        
        [PATCHv4 net-next] Remove ipvs v6 dependency on iptables, Yaroslav Bolyukin
        
        [PATCHv5 net-next] ipvs: remove dependency on ip6_tables, Yaroslav Bolyukin
        
        Re: [PATCHv5 net-next] ipvs: remove dependency on ip6_tables, Julian Anastasov
        
        Re: [PATCHv5 net-next] ipvs: remove dependency on ip6_tables, Pablo Neira Ayuso
[PATCH] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Pablo Neira Ayuso
- Re: [PATCH] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Phil Sutter
- Re: [PATCH] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Phil Sutter
  - Re: [PATCH] netfilter: nf_tables: coalesce multiple notifications into one skbuff, Pablo Neira Ayuso
[PATCH] netfilter: nftables: fix documentation for dup statement, Quentin Armitage
- Re: [PATCH] netfilter: nftables: fix documentation for dup statement, Phil Sutter
  - Re: [PATCH] netfilter: nftables: fix documentation for dup statement, Florian Westphal
    - Re: [PATCH] netfilter: nftables: fix documentation for dup statement, Quentin Armitage
      - Re: [PATCH] netfilter: nftables: fix documentation for dup statement, Phil Sutter
        
        Re: [PATCH] netfilter: nftables: fix documentation for dup statement, Quentin Armitage
- Re: [PATCH] netfilter: nftables: fix documentation for dup statement, Pablo Neira Ayuso
[PATCH net-next] netfilter: xt_HMARK: Use ip_is_fragment() helper, YueHaibing
- Re: [PATCH net-next] netfilter: xt_HMARK: Use ip_is_fragment() helper, Pablo Neira Ayuso
[PATCH nf-next v3 0/3] Netfilter egress hook, Lukas Wunner
- [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Lukas Wunner
  - RE: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, John Fastabend
    - RE: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, John Fastabend
      - Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Laura García Liébana
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, John Fastabend
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Laura García Liébana
      - Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Lukas Wunner
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Daniel Borkmann
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Lukas Wunner
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Daniel Borkmann
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Laura García Liébana
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Daniel Borkmann
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Laura García Liébana
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Daniel Borkmann
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Laura García Liébana
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Daniel Borkmann
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Pablo Neira Ayuso
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Laura García Liébana
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Lukas Wunner
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Pablo Neira Ayuso
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Alexei Starovoitov
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Pablo Neira Ayuso
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Alexei Starovoitov
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Lukas Wunner
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Alexei Starovoitov
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Lukas Wunner
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Laura García Liébana
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Daniel Borkmann
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Laura García Liébana
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Arturo Borrero Gonzalez
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Daniel Borkmann
        
        Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, John Fastabend
  - Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Pablo Neira Ayuso
    - Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook, Lukas Wunner
- [PATCH nf-next v3 1/3] netfilter: Rename ingress hook include file, Lukas Wunner
- [PATCH nf-next v3 2/3] netfilter: Generalize ingress hook, Lukas Wunner
- Re: [PATCH nf-next v3 0/3] Netfilter egress hook, Laura García Liébana
- Re: [PATCH nf-next v3 0/3] Netfilter egress hook, Daniel Borkmann
  - Re: [PATCH nf-next v3 0/3] Netfilter egress hook, Eric Dumazet
[PATCH lnf-conntrack] include: add CTA_STATS_CLASH_RESOLVE, Florian Westphal
[PATCH conntrack-tools] conntrack: add support for CLASH_RESOLVED counter, Florian Westphal
[PATCH nf-next 0/4] netfilter: revisit conntrack statistics, Florian Westphal
- [PATCH nf-next 1/4] netfilter: conntrack: do not increment two error counters at same time, Florian Westphal
- [PATCH nf-next 2/4] netfilter: conntrack: remove ignore stats, Florian Westphal
- [PATCH nf-next 3/4] netfilter: conntrack: add clash resolution stat counter, Florian Westphal
- [PATCH nf-next 4/4] netfilter: conntrack: remove unneeded nf_ct_put, Florian Westphal
- Re: [PATCH nf-next 0/4] netfilter: revisit conntrack statistics, Pablo Neira Ayuso
[PATCH nf] netfilter: conntrack: do not auto-delete clash entries on reply, Florian Westphal
- Re: [PATCH nf] netfilter: conntrack: do not auto-delete clash entries on reply, Pablo Neira Ayuso
[PATCH AUTOSEL 5.8 23/63] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Sasha Levin
[PATCH AUTOSEL 5.7 22/54] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Sasha Levin
[PATCH AUTOSEL 5.4 18/38] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Sasha Levin
[PATCH V2 5/5 nf] selftests: netfilter: add command usage, Fabian Frederick
[PATCH V2 4/5 nf] selftests: netfilter: simplify command testing, Fabian Frederick
[PATCH V2 3/5 nf] selftests: netfilter: remove unused variable in make_file(), Fabian Frederick
[PATCH V2 2/5 nf] selftests: netfilter: exit on invalid parameters, Fabian Frederick
[PATCH V2 1/5 nf] selftests: netfilter: fix header example, Fabian Frederick
- Re: [PATCH V2 1/5 nf] selftests: netfilter: fix header example, Pablo Neira Ayuso
[PATCH nf] netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS, Pablo Neira Ayuso
[PATCH] net: netfilter: delete repeated words, Randy Dunlap
- Re: [PATCH] net: netfilter: delete repeated words, Florian Westphal
- Re: [PATCH] net: netfilter: delete repeated words, Pablo Neira Ayuso
[PATCH nftables 0/4] socket: add support for "wildcard" key, Balazs Scheidler
- [PATCH nftables 1/4] socket: add support for "wildcard" key, Balazs Scheidler
  - Re: [PATCH nftables 1/4] socket: add support for "wildcard" key, Stefano Brivio
  - Re: [PATCH nftables 1/4] socket: add support for "wildcard" key, Pablo Neira Ayuso
- [PATCH nftables 2/4] doc: added documentation on "socket wildcard", Balazs Scheidler
  - Re: [PATCH nftables 2/4] doc: added documentation on "socket wildcard", Stefano Brivio
- [PATCH nftables 4/4] tests: allow tests to use a custom nft executable, Balazs Scheidler
  - Re: [PATCH nftables 4/4] tests: allow tests to use a custom nft executable, Stefano Brivio
- [PATCH nftables 3/4] tests: added "socked wildcard" testcases, Balazs Scheidler
  - Re: [PATCH nftables 3/4] tests: added "socked wildcard" testcases, Stefano Brivio
nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Phil Sutter
- Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Florian Westphal
  - Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Pablo Neira Ayuso
    - Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Florian Westphal
  - Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Phil Sutter
    - Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Pablo Neira Ayuso
      - Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Eric Garver
      - Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Phil Sutter
        
        Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Pablo Neira Ayuso
- Re: nfnetlink: Busy-loop in nfnetlink_rcv_msg(), Pablo Neira Ayuso
[PATCH AUTOSEL 5.7 55/61] netfilter: nf_tables: report EEXIST on overlaps, Sasha Levin
[PATCH AUTOSEL 5.8 56/62] netfilter: nf_tables: report EEXIST on overlaps, Sasha Levin
[PATCH nft,v2] src: add chain hashtable cache, Pablo Neira Ayuso
[PATCH nft 1/2] src: add expression handler hashtable, Pablo Neira Ayuso
- [PATCH nft 2/2] src: add chain hashtable cache, Pablo Neira Ayuso
[PATCH nf v2] netfilter: nf_tables: fix destination register zeroing, Florian Westphal
- Re: [PATCH nf v2] netfilter: nf_tables: fix destination register zeroing, Pablo Neira Ayuso
[PATCH nf] netfilter: fix destination register zeroing, Florian Westphal
[PATCH nft v2] nftables: dump raw element info from libnftnl when netlink debugging is on, Florian Westphal
[PATCH nft] nftables: dump raw element info from libnftnl when netlink debugging is on, Florian Westphal
bridge firewall "bypass" using VLAN 0 stacking, Etienne Champetier
[PATCH libnftnl] libnftnl: export nftnl_set_elem_fprintf, Florian Westphal
[PATCH nf 1/2] netfilter: nf_tables: add NFTA_SET_USERDATA if not null, Pablo Neira Ayuso
- [PATCH nf 2/2] netfilter: nf_tables: incorrect enum nft_list_attributes definition, Pablo Neira Ayuso
[PATCH 0/3] Add userdata and comment support for tables, Jose M. Guisado Gomez
- [PATCH libnftnl 2/3] table: add userdata support, Jose M. Guisado Gomez
  - Re: [PATCH libnftnl 2/3] table: add userdata support, Pablo Neira Ayuso
- [PATCH nftables 3/3] src: add comment support when adding tables, Jose M. Guisado Gomez
  - [PATCH nftables v2 3/3] src: add comment support when adding tables, Jose M. Guisado Gomez
    - Re: [PATCH nftables v2 3/3] src: add comment support when adding tables, Pablo Neira Ayuso
- [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_table, Jose M. Guisado Gomez
  - Re: [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_table, Pablo Neira Ayuso
    - Re: [PATCH nf-next 1/3] netfilter: nf_tables: add userdata attributes to nft_table, Jose M. Guisado
  - [PATCH nf-next v2 1/3] netfilter: nf_tables: add userdata attributes to nft_table, Jose M. Guisado Gomez
    - Re: [PATCH nf-next v2 1/3] netfilter: nf_tables: add userdata attributes to nft_table, Pablo Neira Ayuso
[PATCH nft] mergesort: unbreak listing with binops, Pablo Neira Ayuso
[PATCH nft] tests: sets: Check rbtree overlap detection after tree rotations, Stefano Brivio
[PATCH nf 0/2] nft_set_rbtree: Two fixes for overlap detection on insert, Stefano Brivio
- [PATCH nf 2/2] nft_set_rbtree: Detect partial overlap with start endpoint match, Stefano Brivio
- [PATCH nf 1/2] nft_set_rbtree: Handle outcomes of tree rotations in overlap detection, Stefano Brivio
- Re: [PATCH nf 0/2] nft_set_rbtree: Two fixes for overlap detection on insert, Pablo Neira Ayuso
[iptables] connlabel, increase the number of labels supported, Amiq Nahas
[iptables PATCH 0/4] ordered chain listing fallout, Phil Sutter
- [iptables PATCH 1/4] nft: cache: Check consistency with NFT_CL_FAKE, too, Phil Sutter
- [iptables PATCH 2/4] nft: Extend use of nftnl_chain_list_foreach(), Phil Sutter
- [iptables PATCH 4/4] nft: Use nft_chain_find() in nft_chain_builtin_init(), Phil Sutter
- [iptables PATCH 3/4] nft: Fold nftnl_rule_list_chain_save() into caller, Phil Sutter
[PATCH nf v2] netfilter: conntrack: allow sctp hearbeat after connection re-use, Florian Westphal
- Re: [PATCH nf v2] netfilter: conntrack: allow sctp hearbeat after connection re-use, Pablo Neira Ayuso
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user, syzbot
[iptables] Use ipset with conntrack module, Amiq Nahas
- Re: [iptables] Use ipset with conntrack module, Florian Westphal
[PATCH nft] src: add comment support for map too, Pablo Neira Ayuso
[iptables PATCH] Makefile: Add missing man pages to CLEANFILES, Phil Sutter
- Re: [iptables PATCH] Makefile: Add missing man pages to CLEANFILES, Pablo Neira Ayuso
[PATCH] netfilter: nf_conntrack_sip: fix parsing error, Tong Zhang
- Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error, Florian Westphal
- Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error, Pablo Neira Ayuso
  - Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error, Tong Zhang
    - Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error, Pablo Neira Ayuso
      - Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error, Tong Zhang
iptables: undefined symbol xtables_fini, Amiq Nahas
[PATCH nf] netfilter: nft_set_rbtree: revisit partial overlap detection, Pablo Neira Ayuso
- Re: [PATCH nf] netfilter: nft_set_rbtree: revisit partial overlap detection, Stefano Brivio
[PATCH 2/2 nf] selftests: netfilter: exit on invalid parameters, Fabian Frederick
- Re: [PATCH 2/2 nf] selftests: netfilter: exit on invalid parameters, Stefano Brivio
  - Re: [PATCH 2/2 nf] selftests: netfilter: exit on invalid parameters, Fabian Frederick
[PATCH 1/2 nf] selftests: netfilter: fix header example, Fabian Frederick
KMSAN: uninit-value in __skb_checksum_complete (5), syzbot
- Re: KMSAN: uninit-value in __skb_checksum_complete (5), syzbot
[PATCH nf] netfilter: nftables: permit any priority for nat hooks, Florian Westphal
[PATCH nf] netfilter: conntrack: allow sctp hearbeat after connection re-use, Florian Westphal
[PATCH lnf-conntrack] conntrack: sctp: update states, Florian Westphal
- Re: [PATCH lnf-conntrack] conntrack: sctp: update states, Pablo Neira Ayuso
[PATCH lnf-conntrack] conntrack: dccp print function should use dccp state, Florian Westphal
- Re: [PATCH lnf-conntrack] conntrack: dccp print function should use dccp state, Pablo Neira Ayuso
iptables memory leak, Maciej Żenczykowski
- Re: iptables memory leak, Phil Sutter
[PATCH nf] netfilter: free chain context when BINDING flag is missing, Florian Westphal
- Re: [PATCH nf] netfilter: free chain context when BINDING flag is missing, Pablo Neira Ayuso
KASAN: wild-memory-access Read in do_ebt_set_ctl, syzbot
memory leak in nf_tables_addchain, syzbot
general protection fault in ip6t_do_table (2), syzbot
[PATCH libnftnl] udata: add NFTNL_UDATA_SET_COMMENT, Jose M. Guisado Gomez
- [PATCH nft] src: add comment support for set declarations, Jose M. Guisado Gomez
  - Re: [PATCH nft] src: add comment support for set declarations, Pablo Neira Ayuso
- Re: [PATCH libnftnl] udata: add NFTNL_UDATA_SET_COMMENT, Pablo Neira Ayuso
[Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Peilin Ye
- Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Cong Wang
  - Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Peilin Ye
    - Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Julian Anastasov
      - Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Peilin Ye
- [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Peilin Ye
  - Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Julian Anastasov
    - Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Simon Horman
      - Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Pablo Neira Ayuso
  - Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Pablo Neira Ayuso
[PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Florian Westphal
- Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Pablo Neira Ayuso
- Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Pablo Neira Ayuso
[PATCH nf] netfilter: nft_compat: remove flush counter optimization, Florian Westphal
- Re: [PATCH nf] netfilter: nft_compat: remove flush counter optimization, Pablo Neira Ayuso
[PATCH 3/3 linux-next] selftests: netfilter: kill running process only, Fabian Frederick
- Re: [PATCH 3/3 linux-next] selftests: netfilter: kill running process only, Pablo Neira Ayuso
[PATCH 2/3 linux-next] selftests: netfilter: add MTU arguments to flowtables, Fabian Frederick
- Re: [PATCH 2/3 linux-next] selftests: netfilter: add MTU arguments to flowtables, Pablo Neira Ayuso
[PATCH 1/3 linux-next] selftests: netfilter: add checktool function, Fabian Frederick
- Re: [PATCH 1/3 linux-next] selftests: netfilter: add checktool function, Pablo Neira Ayuso
[iptables PATCH] xtables-monitor: Fix ip6tables rule printing, Phil Sutter
- Re: [iptables PATCH] xtables-monitor: Fix ip6tables rule printing, Pablo Neira Ayuso
[iptables PATCH v2 1/2] nft: Fix command name in ip6tables error message, Phil Sutter
- [iptables PATCH v2 2/2] tests: shell: Merge and extend return codes test, Phil Sutter
  - Re: [iptables PATCH v2 2/2] tests: shell: Merge and extend return codes test, Pablo Neira Ayuso
- Re: [iptables PATCH v2 1/2] nft: Fix command name in ip6tables error message, Pablo Neira Ayuso
WARNING in compat_do_ebt_get_ctl, syzbot
- Re: WARNING in compat_do_ebt_get_ctl, syzbot
- [PATCH nf] netfilter/ebtables: reject bogus getopt len value, Florian Westphal
  - Re: [PATCH nf] netfilter/ebtables: reject bogus getopt len value, Christoph Hellwig
  - Re: [PATCH nf] netfilter/ebtables: reject bogus getopt len value, Jakub Kicinski
  - Re: [PATCH nf] netfilter/ebtables: reject bogus getopt len value, Pablo Neira Ayuso
[PATCH v2] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Michael Zhou
- Re: [PATCH v2] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Pablo Neira Ayuso
[PATCH nft] src: cache gets out of sync in interactive mode, Pablo Neira Ayuso
[iptables PATCH] tests: shell: Merge and extend return codes test, Phil Sutter
xtables-addon official website changed from sourceforge to inai.de?, Amish
- Re: xtables-addon official website changed from sourceforge to inai.de?, Jan Engelhardt
  - Re: xtables-addon official website changed from sourceforge to inai.de?, Amish
    - Re: xtables-addon official website changed from sourceforge to inai.de?, Jan Engelhardt
Re: WARNING: refcount bug in l2cap_global_chan_by_psm, syzbot
[PATCH nft] segtree: memleaks in interval_map_decompose(), Pablo Neira Ayuso
[PATCH nf,v2] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Stephen Suryaputra
- Re: [PATCH nf,v2] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Pablo Neira Ayuso
[PATCH nft] src: add cookie support for rules, Pablo Neira Ayuso
- Re: [PATCH nft] src: add cookie support for rules, Eric Garver
  - Re: [PATCH nft] src: add cookie support for rules, Pablo Neira Ayuso
[PATCH libnftnl] udata: add cookie support, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Stephen Suryaputra
- Re: [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Florian Westphal
- Re: [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, kernel test robot
Re: KASAN: use-after-free Read in hci_chan_del, syzbot
[PATCH nft] tests: 0043concatenated_ranges_0: Fix checks for add/delete failures, Stefano Brivio
- Re: [PATCH nft] tests: 0043concatenated_ranges_0: Fix checks for add/delete failures, Pablo Neira Ayuso
[PATCH nft v2] tests: 0044interval_overlap_0: Repeat insertion tests with timeout, Stefano Brivio
- Re: [PATCH nft v2] tests: 0044interval_overlap_0: Repeat insertion tests with timeout, Pablo Neira Ayuso
Re: KASAN: use-after-free Write in __sco_sock_close, syzbot
- <Possible follow-ups>
- Re: KASAN: use-after-free Write in __sco_sock_close, syzbot
  - Re: KASAN: use-after-free Write in __sco_sock_close, Dmitry Vyukov
[PATCH nf-next 0/2] improve error reporting, Pablo Neira Ayuso
- [PATCH nf-next 1/2] netfilter: nf_tables: extended netlink error reporting for expressions, Pablo Neira Ayuso
- [PATCH nf-next 2/2] netfilter: nf_tables: report EEXIST on overlaps, Pablo Neira Ayuso
[PATCH nf] netfilter: nft_meta: fix iifgroup matching, Florian Westphal
- Re: [PATCH nf] netfilter: nft_meta: fix iifgroup matching, Pablo Neira Ayuso
  - Re: [PATCH nf] netfilter: nft_meta: fix iifgroup matching, Demi M. Obenour
[PATCH nf] selftests: netfilter: add meta iif/oif match test, Florian Westphal
Re: WARNING in hci_conn_timeout, syzbot
- Re: WARNING in hci_conn_timeout, Greg KH
[PATCH nft] src: fix obj list output when reset command, Jose M. Guisado Gomez
- Re: [PATCH nft] src: fix obj list output when reset command, Pablo Neira Ayuso
Re: WARNING: ODEBUG bug in cancel_delayed_work, syzbot
[PATCH nft] evaluate: disregard ct address matching without family, Pablo Neira Ayuso
Re: [PATCH nf] netfilter: nft_compat: make sure xtables destructors have run, Pablo Neira Ayuso
KASAN: null-ptr-deref Write in amp_read_loc_assoc_final_data, syzbot
[iptables PATCH] nft: Fix for ruleset flush while restoring, Phil Sutter
- Re: [iptables PATCH] nft: Fix for ruleset flush while restoring, Pablo Neira Ayuso
[PATCH nft] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado Gomez
- [PATCH nft v2 0/1] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado Gomez
- [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado Gomez
  - Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
    - [PATCH nft v3] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado Gomez
      - [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado Gomez
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
        
        Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Eric Garver
    - Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
      - Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Eric Garver
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Eric Garver
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Eric Garver
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado
        
        Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
[iptables PATCH] nft: Eliminate table list from cache, Phil Sutter
- Re: [iptables PATCH] nft: Eliminate table list from cache, Pablo Neira Ayuso
  - Re: [iptables PATCH] nft: Eliminate table list from cache, Phil Sutter
    - Re: [iptables PATCH] nft: Eliminate table list from cache, Pablo Neira Ayuso
      - Re: [iptables PATCH] nft: Eliminate table list from cache, Pablo Neira Ayuso
        
        Re: [iptables PATCH] nft: Eliminate table list from cache, Phil Sutter
      - Re: [iptables PATCH] nft: Eliminate table list from cache, Phil Sutter
[PATCH nft] netlink_delinearize: transform binary operation to prefix only with values, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH nft] netlink_delinearize: transform binary operation to prefix only with values, Pablo Neira Ayuso
[nft PATCH] json: Expect refcount increment by json_array_extend(), Phil Sutter
KASAN: vmalloc-out-of-bounds Read in get_counters, syzbot
[PATCH 1/1] Improve detecting the kernel version logic, Philip Prindeville
[PATCH nft 1/3] evaluate: flush set cache from the evaluation phase, Pablo Neira Ayuso
- [PATCH nft 3/3] evaluate: remove table from cache on delete table, Pablo Neira Ayuso
- [PATCH nft 2/3] src: remove cache lookups after the evaluation phase, Pablo Neira Ayuso
[PATCH nft 1/3] parser_bison: memleak symbol redefinition, Pablo Neira Ayuso
- [PATCH nft 2/3] evaluate: memleak in invalid default policy definition, Pablo Neira Ayuso
- [PATCH nft 3/3] evaluate: UAF in hook priority expression, Pablo Neira Ayuso
- <Possible follow-ups>
- [PATCH nft 1/3] parser_bison: memleak symbol redefinition, Pablo Neira Ayuso
  - [PATCH nft 2/3] evaluate: memleak in invalid default policy definition, Pablo Neira Ayuso
  - [PATCH nft 3/3] evaluate: UAF in hook priority expression, Pablo Neira Ayuso
[PATCH 0/1] Netfilter OOB memory access security patch, Will McVicker
- [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], Will McVicker
  - Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], Pablo Neira Ayuso
    - Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], William Mcvicker
      - Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], Pablo Neira Ayuso
        
        Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], William Mcvicker
        
        Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum, William Mcvicker
        
        Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum, Pablo Neira Ayuso
        
        [PATCH v3 0/1] netfilter: nat: add a range check for l3/l4 protonum, Will McVicker
        
        [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum, Will McVicker
        
        Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum, Pablo Neira Ayuso
        
        Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum, Florian Westphal
        
        Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum, Pablo Neira Ayuso
        
        Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum, Will Deacon
        
        Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum, William Mcvicker
[PATCH nft] nft: rearrange help output to group related options together, Pablo Neira Ayuso
[PATCH libnftnl] examples: add support for NF_PROTO_INET family, Jose M. Guisado Gomez
- Re: [PATCH libnftnl] examples: add support for NF_PROTO_INET family, Pablo Neira Ayuso
[PATCH iptables] iptables: replace libnftnl table list by linux list, Pablo Neira Ayuso
[nft PATCH 2] nft: rearrange help output to group related options together, Arturo Borrero Gonzalez
[nft PATCH] nft: rearrange help output to group related options together, Arturo Borrero Gonzalez
- Re: [nft PATCH] nft: rearrange help output to group related options together, Pablo Neira Ayuso
  - Re: [nft PATCH] nft: rearrange help output to group related options together, Arturo Borrero Gonzalez
get rid of the address_space override in setsockopt v2, Christoph Hellwig
- [PATCH 14/26] net/ipv4: switch ip_mroute_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Christoph Hellwig
  - Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Ido Schimmel
    - Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Christoph Hellwig
      - Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Ido Schimmel
        
        Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Christoph Hellwig
        
        Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Ido Schimmel
    - RE: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, David Laight
- [PATCH 26/26] net: optimize the sockptr_t for unified kernel/user address spaces, Christoph Hellwig
- [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Christoph Hellwig
  - Re: [MPTCP] [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Matthieu Baerts
  - Re: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Eric Dumazet
    - Re: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Christoph Hellwig
    - RE: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, David Laight
      - Re: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Eric Dumazet
        
        RE: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, David Laight
- [PATCH 18/26] net/ipv6: split up ipv6_flowlabel_opt, Christoph Hellwig
- [PATCH 17/26] net/ipv6: switch ip6_mroute_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 24/26] net/tcp: switch do_tcp_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 16/26] net/ipv4: switch do_ip_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 15/26] net/ipv4: merge ip_options_get and ip_options_get_from_user, Christoph Hellwig
- [PATCH 23/26] net/tcp: switch ->md5_parse to sockptr_t, Christoph Hellwig
- [PATCH 22/26] net/udp: switch udp_lib_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 21/26] net/ipv6: switch do_ipv6_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 20/26] net/ipv6: factor out a ipv6_set_opt_hdr helper, Christoph Hellwig
- [PATCH 10/26] netfilter: remove the unused user argument to do_update_counters, Christoph Hellwig
- [PATCH 13/26] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, Christoph Hellwig
  - RE: [PATCH 13/26] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, David Laight
    - Re: [PATCH 13/26] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, 'Christoph Hellwig'
- [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Christoph Hellwig
  - Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Jason A. Donenfeld
    - Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Christoph Hellwig
      - Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Jason A. Donenfeld
        
        Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Christoph Hellwig
        
        RE: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, David Laight
        
        Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Jason A. Donenfeld
    - Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Christoph Hellwig
      - Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Jason A. Donenfeld
- [PATCH 11/26] netfilter: switch xt_copy_counters to sockptr_t, Christoph Hellwig
- [PATCH 06/26] net: switch sock_setbindtodevice to sockptr_t, Christoph Hellwig
- [PATCH 02/26] net/bpfilter: split __bpfilter_process_sockopt, Christoph Hellwig
- [PATCH 09/26] net/xfrm: switch xfrm_user_policy to sockptr_t, Christoph Hellwig
- [PATCH 01/26] bpfilter: fix up a sparse annotation, Christoph Hellwig
  - Re: [PATCH 01/26] bpfilter: fix up a sparse annotation, Luc Van Oostenryck
- [PATCH 07/26] net: switch sock_set_timeout to sockptr_t, Christoph Hellwig
- [PATCH 08/26] net: switch sock_set_timeout to sockptr_t, Christoph Hellwig
  - Re: [MPTCP] [PATCH 08/26] net: switch sock_set_timeout to sockptr_t, Matthieu Baerts
- [PATCH 04/26] net: add a new sockptr_t type, Christoph Hellwig
  - Re: [PATCH 04/26] net: add a new sockptr_t type, Jan Engelhardt
  - Re: [PATCH 04/26] net: add a new sockptr_t type, Eric Dumazet
    - Re: [PATCH 04/26] net: add a new sockptr_t type, Christoph Hellwig
- [PATCH 05/26] net: switch copy_bpf_fprog_from_user to sockptr_t, Christoph Hellwig
- [PATCH 03/26] bpfilter: reject kernel addresses, Christoph Hellwig
  - RE: [PATCH 03/26] bpfilter: reject kernel addresses, David Laight
    - Re: [PATCH 03/26] bpfilter: reject kernel addresses, 'Christoph Hellwig'
      - RE: [PATCH 03/26] bpfilter: reject kernel addresses, David Laight
- Re: get rid of the address_space override in setsockopt v2, David Miller
  - Re: get rid of the address_space override in setsockopt v2, Christoph Hellwig
    - Re: get rid of the address_space override in setsockopt v2, Andreas Schwab
    - Re: get rid of the address_space override in setsockopt v2, David Miller
  - RE: get rid of the address_space override in setsockopt v2, David Laight
    - Re: get rid of the address_space override in setsockopt v2, Al Viro
      - RE: get rid of the address_space override in setsockopt v2, David Laight
LPC 2020 Networking and BPF Track CFP (Reminder), David Miller
[PATCH nft] evaluate: bail out with concatenations and singleton values, Pablo Neira Ayuso
Netdev conf 0x14 update and logistics, Jamal Hadi Salim
[PATCH nft 1/2] netlink: fix concat range expansion in map case, Florian Westphal
- [PATCH nft 2/2] tests: extend 0043concatenated_ranges_0 to cover maps too, Florian Westphal
  - Re: [PATCH nft 2/2] tests: extend 0043concatenated_ranges_0 to cover maps too, Stefano Brivio
- Re: [PATCH nft 1/2] netlink: fix concat range expansion in map case, Stefano Brivio
[PATCH iptables] extensions: libxt_conntrack: provide translation for DNAT and SNAT --ctstate, Pablo Neira Ayuso
[PATCH nft] evaluate: permit get element on maps, Florian Westphal
[PATCH nft 1/2] evaluate: replace variable expression by the value expression, Pablo Neira Ayuso
- [PATCH nft 2/2] src: allow for negative value in variable definitions, Pablo Neira Ayuso
[PATCH xtables-addons v2] doc: fix quoted string in libxt_DNETMAP man-page., Jeremy Sowden
- Re: [PATCH xtables-addons v2] doc: fix quoted string in libxt_DNETMAP man-page., Jan Engelhardt
[PATCH xtables-addons] doc: fix quoted string in libxt_DNETMAP man-page., Jeremy Sowden
- Re: [PATCH xtables-addons] doc: fix quoted string in libxt_DNETMAP man-page., Jan Engelhardt
  - Re: [PATCH xtables-addons] doc: fix quoted string in libxt_DNETMAP man-page., Jeremy Sowden
[PATCH nft] rule: missing map command expansion, Pablo Neira Ayuso
[PATCH nft,v2] rule: flush set cache before flush command, Pablo Neira Ayuso
[PATCH nft] rule: flush set cache after flush command, Pablo Neira Ayuso
[PATCH v4 14/24] netfilter: conntrack: Use sequence counter with associated spinlock, Ahmed S. Darwish
[PATCH v4 15/24] netfilter: nft_set_rbtree: Use sequence counter with associated rwlock, Ahmed S. Darwish
[PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Michael Zhou
- Re: [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Pablo Neira Ayuso
  - TEST Re: [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Michael Zhou
    - Re: TEST Re: [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Florian Westphal
get rid of the address_space override in setsockopt, Christoph Hellwig
- [PATCH 08/24] net/xfrm: switch xfrm_user_policy to sockptr_t, Christoph Hellwig
- [PATCH 13/24] net/ipv4: switch ip_mroute_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, Christoph Hellwig
  - RE: [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, David Laight
    - Re: [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, 'Christoph Hellwig'
      - Re: [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, 'Christoph Hellwig'
- [PATCH 22/24] net/tcp: switch ->md5_parse to sockptr_t, Christoph Hellwig
- [PATCH 24/24] net: pass a sockptr_t into ->setsockopt, Christoph Hellwig
  - Re: [PATCH 24/24] net: pass a sockptr_t into ->setsockopt, Stefan Schmidt
    - Re: [PATCH 24/24] net: pass a sockptr_t into ->setsockopt, David Miller
  - Re: [MPTCP] [PATCH 24/24] net: pass a sockptr_t into ->setsockopt, Matthieu Baerts
- [PATCH 20/24] net/ipv6: switch do_ipv6_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 23/24] net/tcp: switch do_tcp_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 19/24] net/ipv6: factor out a ipv6_set_opt_hdr helper, Christoph Hellwig
- [PATCH 21/24] net/udp: switch udp_lib_setsockopt to sockptr_t, Christoph Hellwig
- [PATCH 17/24] net/ipv6: split up ipv6_flowlabel_opt, Christoph Hellwig
- [PATCH 18/24] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Christoph Hellwig

[Index of Archives] [LARTC] [Berkeley Packet Filter] [Bugtraq] [Yosemite Discussion]