Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error, (continued)
  • Re: [PATCH] netfilter: nf_conntrack_sip: fix parsing error, Tong Zhang
• iptables: undefined symbol xtables_fini, Amiq Nahas
• [PATCH nf] netfilter: nft_set_rbtree: revisit partial overlap detection, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_set_rbtree: revisit partial overlap detection, Stefano Brivio
• [PATCH 2/2 nf] selftests: netfilter: exit on invalid parameters, Fabian Frederick
  • Re: [PATCH 2/2 nf] selftests: netfilter: exit on invalid parameters, Stefano Brivio
    • Re: [PATCH 2/2 nf] selftests: netfilter: exit on invalid parameters, Fabian Frederick
• [PATCH 1/2 nf] selftests: netfilter: fix header example, Fabian Frederick
• KMSAN: uninit-value in __skb_checksum_complete (5), syzbot
  • Re: KMSAN: uninit-value in __skb_checksum_complete (5), syzbot
• [PATCH nf] netfilter: nftables: permit any priority for nat hooks, Florian Westphal
• [PATCH nf] netfilter: conntrack: allow sctp hearbeat after connection re-use, Florian Westphal
• [PATCH lnf-conntrack] conntrack: sctp: update states, Florian Westphal
  • Re: [PATCH lnf-conntrack] conntrack: sctp: update states, Pablo Neira Ayuso
• [PATCH lnf-conntrack] conntrack: dccp print function should use dccp state, Florian Westphal
  • Re: [PATCH lnf-conntrack] conntrack: dccp print function should use dccp state, Pablo Neira Ayuso
• iptables memory leak, Maciej Żenczykowski
  • Re: iptables memory leak, Phil Sutter
• [PATCH nf] netfilter: free chain context when BINDING flag is missing, Florian Westphal
  • Re: [PATCH nf] netfilter: free chain context when BINDING flag is missing, Pablo Neira Ayuso
• KASAN: wild-memory-access Read in do_ebt_set_ctl, syzbot
• memory leak in nf_tables_addchain, syzbot
• general protection fault in ip6t_do_table (2), syzbot
• [PATCH libnftnl] udata: add NFTNL_UDATA_SET_COMMENT, Jose M. Guisado Gomez
  • [PATCH nft] src: add comment support for set declarations, Jose M. Guisado Gomez
    • Re: [PATCH nft] src: add comment support for set declarations, Pablo Neira Ayuso
  • Re: [PATCH libnftnl] udata: add NFTNL_UDATA_SET_COMMENT, Pablo Neira Ayuso
• [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Peilin Ye
  • Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Cong Wang
    • Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Peilin Ye
      • Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Julian Anastasov
        • Re: [Linux-kernel-mentees] [PATCH net] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Peilin Ye
  • [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Peilin Ye
    • Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Julian Anastasov
      • Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Simon Horman
        • Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Pablo Neira Ayuso
    • Re: [Linux-kernel-mentees] [PATCH net-next v2] ipvs: Fix uninit-value in do_ip_vs_set_ctl(), Pablo Neira Ayuso
• [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Florian Westphal
  • Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_compat: remove flush counter optimization, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_compat: remove flush counter optimization, Pablo Neira Ayuso
• [PATCH 3/3 linux-next] selftests: netfilter: kill running process only, Fabian Frederick
  • Re: [PATCH 3/3 linux-next] selftests: netfilter: kill running process only, Pablo Neira Ayuso
• [PATCH 2/3 linux-next] selftests: netfilter: add MTU arguments to flowtables, Fabian Frederick
  • Re: [PATCH 2/3 linux-next] selftests: netfilter: add MTU arguments to flowtables, Pablo Neira Ayuso
• [PATCH 1/3 linux-next] selftests: netfilter: add checktool function, Fabian Frederick
  • Re: [PATCH 1/3 linux-next] selftests: netfilter: add checktool function, Pablo Neira Ayuso
• [iptables PATCH] xtables-monitor: Fix ip6tables rule printing, Phil Sutter
  • Re: [iptables PATCH] xtables-monitor: Fix ip6tables rule printing, Pablo Neira Ayuso
• [iptables PATCH v2 1/2] nft: Fix command name in ip6tables error message, Phil Sutter
  • [iptables PATCH v2 2/2] tests: shell: Merge and extend return codes test, Phil Sutter
    • Re: [iptables PATCH v2 2/2] tests: shell: Merge and extend return codes test, Pablo Neira Ayuso
  • Re: [iptables PATCH v2 1/2] nft: Fix command name in ip6tables error message, Pablo Neira Ayuso
• WARNING in compat_do_ebt_get_ctl, syzbot
  • Re: WARNING in compat_do_ebt_get_ctl, syzbot
  • [PATCH nf] netfilter/ebtables: reject bogus getopt len value, Florian Westphal
    • Re: [PATCH nf] netfilter/ebtables: reject bogus getopt len value, Christoph Hellwig
    • Re: [PATCH nf] netfilter/ebtables: reject bogus getopt len value, Jakub Kicinski
    • Re: [PATCH nf] netfilter/ebtables: reject bogus getopt len value, Pablo Neira Ayuso
• [PATCH v2] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Michael Zhou
  • Re: [PATCH v2] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Pablo Neira Ayuso
• [PATCH nft] src: cache gets out of sync in interactive mode, Pablo Neira Ayuso
• [iptables PATCH] tests: shell: Merge and extend return codes test, Phil Sutter
• xtables-addon official website changed from sourceforge to inai.de?, Amish
  • Re: xtables-addon official website changed from sourceforge to inai.de?, Jan Engelhardt
    • Re: xtables-addon official website changed from sourceforge to inai.de?, Amish
      • Re: xtables-addon official website changed from sourceforge to inai.de?, Jan Engelhardt
• Re: WARNING: refcount bug in l2cap_global_chan_by_psm, syzbot
• [PATCH nft] segtree: memleaks in interval_map_decompose(), Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Stephen Suryaputra
  • Re: [PATCH nf,v2] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Pablo Neira Ayuso
• [PATCH nft] src: add cookie support for rules, Pablo Neira Ayuso
  • Re: [PATCH nft] src: add cookie support for rules, Eric Garver
    • Re: [PATCH nft] src: add cookie support for rules, Pablo Neira Ayuso
• [PATCH libnftnl] udata: add cookie support, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Stephen Suryaputra
  • Re: [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian, kernel test robot
• Re: KASAN: use-after-free Read in hci_chan_del, syzbot
• [PATCH nft] tests: 0043concatenated_ranges_0: Fix checks for add/delete failures, Stefano Brivio
  • Re: [PATCH nft] tests: 0043concatenated_ranges_0: Fix checks for add/delete failures, Pablo Neira Ayuso
• [PATCH nft v2] tests: 0044interval_overlap_0: Repeat insertion tests with timeout, Stefano Brivio
  • Re: [PATCH nft v2] tests: 0044interval_overlap_0: Repeat insertion tests with timeout, Pablo Neira Ayuso
• Re: KASAN: use-after-free Write in __sco_sock_close, syzbot
  • <Possible follow-ups>
  • Re: KASAN: use-after-free Write in __sco_sock_close, syzbot
    • Re: KASAN: use-after-free Write in __sco_sock_close, Dmitry Vyukov
• [PATCH nf-next 0/2] improve error reporting, Pablo Neira Ayuso
  • [PATCH nf-next 1/2] netfilter: nf_tables: extended netlink error reporting for expressions, Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: nf_tables: report EEXIST on overlaps, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_meta: fix iifgroup matching, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_meta: fix iifgroup matching, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nft_meta: fix iifgroup matching, Demi M. Obenour
• [PATCH nf] selftests: netfilter: add meta iif/oif match test, Florian Westphal
• Re: WARNING in hci_conn_timeout, syzbot
  • Re: WARNING in hci_conn_timeout, Greg KH
• [PATCH nft] src: fix obj list output when reset command, Jose M. Guisado Gomez
  • Re: [PATCH nft] src: fix obj list output when reset command, Pablo Neira Ayuso
• Re: WARNING: ODEBUG bug in cancel_delayed_work, syzbot
• [PATCH nft] evaluate: disregard ct address matching without family, Pablo Neira Ayuso
• Re: [PATCH nf] netfilter: nft_compat: make sure xtables destructors have run, Pablo Neira Ayuso
• KASAN: null-ptr-deref Write in amp_read_loc_assoc_final_data, syzbot
• [iptables PATCH] nft: Fix for ruleset flush while restoring, Phil Sutter
  • Re: [iptables PATCH] nft: Fix for ruleset flush while restoring, Pablo Neira Ayuso
• [PATCH nft] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado Gomez
  • [PATCH nft v2 0/1] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado Gomez
  • [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado Gomez
    • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
      • [PATCH nft v3] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado Gomez
        • [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado Gomez
          • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
            • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado
              • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
          • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
            • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado
              • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
                • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado
                  • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
                    • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
                    • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
                      • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Jose M. Guisado
                      • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
                        • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
                          • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Pablo Neira Ayuso
                            • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Phil Sutter
          • Re: [PATCH nft v4] src: enable json echo output when reading native syntax, Eric Garver
      • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
        • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
          • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
            • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Eric Garver
              • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
                • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Eric Garver
                  • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Eric Garver
            • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
              • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
                • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Pablo Neira Ayuso
                  • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
                    • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Jose M. Guisado
                      • Re: [PATCH nft v2 1/1] src: enable output with "nft --echo --json" and nftables syntax, Phil Sutter
• [iptables PATCH] nft: Eliminate table list from cache, Phil Sutter
  • Re: [iptables PATCH] nft: Eliminate table list from cache, Pablo Neira Ayuso
    • Re: [iptables PATCH] nft: Eliminate table list from cache, Phil Sutter
      • Re: [iptables PATCH] nft: Eliminate table list from cache, Pablo Neira Ayuso
        • Re: [iptables PATCH] nft: Eliminate table list from cache, Pablo Neira Ayuso
          • Re: [iptables PATCH] nft: Eliminate table list from cache, Phil Sutter
        • Re: [iptables PATCH] nft: Eliminate table list from cache, Phil Sutter
• [PATCH nft] netlink_delinearize: transform binary operation to prefix only with values, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nft] netlink_delinearize: transform binary operation to prefix only with values, Pablo Neira Ayuso
• [nft PATCH] json: Expect refcount increment by json_array_extend(), Phil Sutter
• KASAN: vmalloc-out-of-bounds Read in get_counters, syzbot
• [PATCH 1/1] Improve detecting the kernel version logic, Philip Prindeville
• [PATCH nft 1/3] evaluate: flush set cache from the evaluation phase, Pablo Neira Ayuso
  • [PATCH nft 3/3] evaluate: remove table from cache on delete table, Pablo Neira Ayuso
  • [PATCH nft 2/3] src: remove cache lookups after the evaluation phase, Pablo Neira Ayuso
• [PATCH nft 1/3] parser_bison: memleak symbol redefinition, Pablo Neira Ayuso
  • [PATCH nft 2/3] evaluate: memleak in invalid default policy definition, Pablo Neira Ayuso
  • [PATCH nft 3/3] evaluate: UAF in hook priority expression, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nft 1/3] parser_bison: memleak symbol redefinition, Pablo Neira Ayuso
    • [PATCH nft 2/3] evaluate: memleak in invalid default policy definition, Pablo Neira Ayuso
    • [PATCH nft 3/3] evaluate: UAF in hook priority expression, Pablo Neira Ayuso
• [PATCH 0/1] Netfilter OOB memory access security patch, Will McVicker
  • [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], Will McVicker
    • Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], Pablo Neira Ayuso
      • Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], William Mcvicker
        • Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], Pablo Neira Ayuso
          • Re: [PATCH 1/1] netfilter: nat: add range checks for access to nf_nat_l[34]protos[], William Mcvicker
            • Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum, William Mcvicker
              • Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum, Pablo Neira Ayuso
                • [PATCH v3 0/1] netfilter: nat: add a range check for l3/l4 protonum, Will McVicker
                  • [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum, Will McVicker
                    • Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum, Pablo Neira Ayuso
                      • Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum, Florian Westphal
                        • Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum, Pablo Neira Ayuso
                • Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum, Will Deacon
                  • Re: [PATCH v2 1/1] netfilter: nat: add a range check for l3/l4 protonum, William Mcvicker
• [PATCH nft] nft: rearrange help output to group related options together, Pablo Neira Ayuso
• [PATCH libnftnl] examples: add support for NF_PROTO_INET family, Jose M. Guisado Gomez
  • Re: [PATCH libnftnl] examples: add support for NF_PROTO_INET family, Pablo Neira Ayuso
• [PATCH iptables] iptables: replace libnftnl table list by linux list, Pablo Neira Ayuso
• [nft PATCH 2] nft: rearrange help output to group related options together, Arturo Borrero Gonzalez
• [nft PATCH] nft: rearrange help output to group related options together, Arturo Borrero Gonzalez
  • Re: [nft PATCH] nft: rearrange help output to group related options together, Pablo Neira Ayuso
    • Re: [nft PATCH] nft: rearrange help output to group related options together, Arturo Borrero Gonzalez
• get rid of the address_space override in setsockopt v2, Christoph Hellwig
  • [PATCH 14/26] net/ipv4: switch ip_mroute_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Christoph Hellwig
    • Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Ido Schimmel
      • Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Christoph Hellwig
        • Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Ido Schimmel
          • Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Christoph Hellwig
            • Re: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Ido Schimmel
      • RE: [PATCH 19/26] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, David Laight
  • [PATCH 26/26] net: optimize the sockptr_t for unified kernel/user address spaces, Christoph Hellwig
  • [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Christoph Hellwig
    • Re: [MPTCP] [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Matthieu Baerts
    • Re: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Eric Dumazet
      • Re: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Christoph Hellwig
      • RE: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, David Laight
        • Re: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, Eric Dumazet
          • RE: [PATCH 25/26] net: pass a sockptr_t into ->setsockopt, David Laight
  • [PATCH 18/26] net/ipv6: split up ipv6_flowlabel_opt, Christoph Hellwig
  • [PATCH 17/26] net/ipv6: switch ip6_mroute_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 24/26] net/tcp: switch do_tcp_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 16/26] net/ipv4: switch do_ip_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 15/26] net/ipv4: merge ip_options_get and ip_options_get_from_user, Christoph Hellwig
  • [PATCH 23/26] net/tcp: switch ->md5_parse to sockptr_t, Christoph Hellwig
  • [PATCH 22/26] net/udp: switch udp_lib_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 21/26] net/ipv6: switch do_ipv6_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 20/26] net/ipv6: factor out a ipv6_set_opt_hdr helper, Christoph Hellwig
  • [PATCH 10/26] netfilter: remove the unused user argument to do_update_counters, Christoph Hellwig
  • [PATCH 13/26] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, Christoph Hellwig
    • RE: [PATCH 13/26] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, David Laight
      • Re: [PATCH 13/26] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, 'Christoph Hellwig'
  • [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Christoph Hellwig
    • Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Jason A. Donenfeld
      • Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Christoph Hellwig
        • Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Jason A. Donenfeld
          • Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Christoph Hellwig
            • RE: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, David Laight
              • Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Jason A. Donenfeld
      • Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Christoph Hellwig
        • Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t, Jason A. Donenfeld
  • [PATCH 11/26] netfilter: switch xt_copy_counters to sockptr_t, Christoph Hellwig
  • [PATCH 06/26] net: switch sock_setbindtodevice to sockptr_t, Christoph Hellwig
  • [PATCH 02/26] net/bpfilter: split __bpfilter_process_sockopt, Christoph Hellwig
  • [PATCH 09/26] net/xfrm: switch xfrm_user_policy to sockptr_t, Christoph Hellwig
  • [PATCH 01/26] bpfilter: fix up a sparse annotation, Christoph Hellwig
    • Re: [PATCH 01/26] bpfilter: fix up a sparse annotation, Luc Van Oostenryck
  • [PATCH 07/26] net: switch sock_set_timeout to sockptr_t, Christoph Hellwig
  • [PATCH 08/26] net: switch sock_set_timeout to sockptr_t, Christoph Hellwig
    • Re: [MPTCP] [PATCH 08/26] net: switch sock_set_timeout to sockptr_t, Matthieu Baerts
  • [PATCH 04/26] net: add a new sockptr_t type, Christoph Hellwig
    • Re: [PATCH 04/26] net: add a new sockptr_t type, Jan Engelhardt
    • Re: [PATCH 04/26] net: add a new sockptr_t type, Eric Dumazet
      • Re: [PATCH 04/26] net: add a new sockptr_t type, Christoph Hellwig
  • [PATCH 05/26] net: switch copy_bpf_fprog_from_user to sockptr_t, Christoph Hellwig
  • [PATCH 03/26] bpfilter: reject kernel addresses, Christoph Hellwig
    • RE: [PATCH 03/26] bpfilter: reject kernel addresses, David Laight
      • Re: [PATCH 03/26] bpfilter: reject kernel addresses, 'Christoph Hellwig'
        • RE: [PATCH 03/26] bpfilter: reject kernel addresses, David Laight
  • Re: get rid of the address_space override in setsockopt v2, David Miller
    • Re: get rid of the address_space override in setsockopt v2, Christoph Hellwig
      • Re: get rid of the address_space override in setsockopt v2, Andreas Schwab
      • Re: get rid of the address_space override in setsockopt v2, David Miller
    • RE: get rid of the address_space override in setsockopt v2, David Laight
      • Re: get rid of the address_space override in setsockopt v2, Al Viro
        • RE: get rid of the address_space override in setsockopt v2, David Laight
• LPC 2020 Networking and BPF Track CFP (Reminder), David Miller
• [PATCH nft] evaluate: bail out with concatenations and singleton values, Pablo Neira Ayuso
• Netdev conf 0x14 update and logistics, Jamal Hadi Salim
• [PATCH nft 1/2] netlink: fix concat range expansion in map case, Florian Westphal
  • [PATCH nft 2/2] tests: extend 0043concatenated_ranges_0 to cover maps too, Florian Westphal
    • Re: [PATCH nft 2/2] tests: extend 0043concatenated_ranges_0 to cover maps too, Stefano Brivio
  • Re: [PATCH nft 1/2] netlink: fix concat range expansion in map case, Stefano Brivio
• [PATCH iptables] extensions: libxt_conntrack: provide translation for DNAT and SNAT --ctstate, Pablo Neira Ayuso
• [PATCH nft] evaluate: permit get element on maps, Florian Westphal
• [PATCH nft 1/2] evaluate: replace variable expression by the value expression, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: allow for negative value in variable definitions, Pablo Neira Ayuso
• [PATCH xtables-addons v2] doc: fix quoted string in libxt_DNETMAP man-page., Jeremy Sowden
  • Re: [PATCH xtables-addons v2] doc: fix quoted string in libxt_DNETMAP man-page., Jan Engelhardt
• [PATCH xtables-addons] doc: fix quoted string in libxt_DNETMAP man-page., Jeremy Sowden
  • Re: [PATCH xtables-addons] doc: fix quoted string in libxt_DNETMAP man-page., Jan Engelhardt
    • Re: [PATCH xtables-addons] doc: fix quoted string in libxt_DNETMAP man-page., Jeremy Sowden
• [PATCH nft] rule: missing map command expansion, Pablo Neira Ayuso
• [PATCH nft,v2] rule: flush set cache before flush command, Pablo Neira Ayuso
• [PATCH nft] rule: flush set cache after flush command, Pablo Neira Ayuso
• [PATCH v4 14/24] netfilter: conntrack: Use sequence counter with associated spinlock, Ahmed S. Darwish
• [PATCH v4 15/24] netfilter: nft_set_rbtree: Use sequence counter with associated rwlock, Ahmed S. Darwish
• [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Michael Zhou
  • Re: [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Pablo Neira Ayuso
    • TEST Re: [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Michael Zhou
      • Re: TEST Re: [PATCH] net/ipv6/netfilter/ip6t_NPT: rewrite addresses in ICMPv6 original packet, Florian Westphal
• get rid of the address_space override in setsockopt, Christoph Hellwig
  • [PATCH 08/24] net/xfrm: switch xfrm_user_policy to sockptr_t, Christoph Hellwig
  • [PATCH 13/24] net/ipv4: switch ip_mroute_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, Christoph Hellwig
    • RE: [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, David Laight
      • Re: [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, 'Christoph Hellwig'
        • Re: [PATCH 12/24] bpfilter: switch bpfilter_ip_set_sockopt to sockptr_t, 'Christoph Hellwig'
  • [PATCH 22/24] net/tcp: switch ->md5_parse to sockptr_t, Christoph Hellwig
  • [PATCH 24/24] net: pass a sockptr_t into ->setsockopt, Christoph Hellwig
    • Re: [PATCH 24/24] net: pass a sockptr_t into ->setsockopt, Stefan Schmidt
      • Re: [PATCH 24/24] net: pass a sockptr_t into ->setsockopt, David Miller
    • Re: [MPTCP] [PATCH 24/24] net: pass a sockptr_t into ->setsockopt, Matthieu Baerts
  • [PATCH 20/24] net/ipv6: switch do_ipv6_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 23/24] net/tcp: switch do_tcp_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 19/24] net/ipv6: factor out a ipv6_set_opt_hdr helper, Christoph Hellwig
  • [PATCH 21/24] net/udp: switch udp_lib_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 17/24] net/ipv6: split up ipv6_flowlabel_opt, Christoph Hellwig
  • [PATCH 18/24] net/ipv6: switch ipv6_flowlabel_opt to sockptr_t, Christoph Hellwig
  • [PATCH 16/24] net/ipv6: switch ip6_mroute_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 15/24] net/ipv4: switch do_ip_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 14/24] net/ipv4: merge ip_options_get and ip_options_get_from_user, Christoph Hellwig
  • [PATCH 11/24] netfilter: switch nf_setsockopt to sockptr_t, Christoph Hellwig
  • [PATCH 10/24] netfilter: switch xt_copy_counters to sockptr_t, Christoph Hellwig
  • [PATCH 09/24] netfilter: remove the unused user argument to do_update_counters, Christoph Hellwig
  • [PATCH 07/24] net: switch sock_set_timeout to sockptr_t, Christoph Hellwig
  • [PATCH 04/24] net: switch copy_bpf_fprog_from_user to sockptr_t, Christoph Hellwig
  • [PATCH 03/24] net: add a new sockptr_t type, Christoph Hellwig
    • Re: [PATCH 03/24] net: add a new sockptr_t type, Eric Biggers
      • Re: [PATCH 03/24] net: add a new sockptr_t type, Christoph Hellwig
        • Re: [PATCH 03/24] net: add a new sockptr_t type, Eric Biggers
          • Re: [PATCH 03/24] net: add a new sockptr_t type, Christoph Hellwig
      • RE: [PATCH 03/24] net: add a new sockptr_t type, David Laight
    • RE: [PATCH 03/24] net: add a new sockptr_t type, David Laight
  • [PATCH 06/24] net: switch sock_set_timeout to sockptr_t, Christoph Hellwig
  • [PATCH 05/24] net: switch sock_setbindtodevice to sockptr_t, Christoph Hellwig
  • [PATCH 02/24] bpfilter: fix up a sparse annotation, Christoph Hellwig
    • Re: [PATCH 02/24] bpfilter: fix up a sparse annotation, Luc Van Oostenryck
      • Re: [PATCH 02/24] bpfilter: fix up a sparse annotation, Christoph Hellwig
        • Re: [PATCH 02/24] bpfilter: fix up a sparse annotation, Al Viro
  • [PATCH 01/24] bpfilter: reject kernel addresses, Christoph Hellwig
  • Re: get rid of the address_space override in setsockopt, Eric Biggers
    • Re: get rid of the address_space override in setsockopt, Christoph Hellwig
  • Re: get rid of the address_space override in setsockopt, Alexei Starovoitov
    • Re: get rid of the address_space override in setsockopt, Christoph Hellwig
      • Re: get rid of the address_space override in setsockopt, Alexei Starovoitov
  • RE: get rid of the address_space override in setsockopt, David Laight
    • Re: get rid of the address_space override in setsockopt, 'Christoph Hellwig'
      • RE: get rid of the address_space override in setsockopt, David Laight
  • RE: get rid of the address_space override in setsockopt, David Laight
    • Re: get rid of the address_space override in setsockopt, 'Christoph Hellwig'
• [PATCH for v5.9] netfilter: xtables: Replace HTTP links with HTTPS ones, Alexander A. Klimov
• [PATCH for v5.9] netfilter: Replace HTTP links with HTTPS ones, Alexander A. Klimov
  • Re: [PATCH for v5.9] netfilter: Replace HTTP links with HTTPS ones, Pablo Neira Ayuso
    • [PATCH v2] netfilter: Replace HTTP links with HTTPS ones, Alexander A. Klimov
      • Re: [PATCH v2] netfilter: Replace HTTP links with HTTPS ones, Pablo Neira Ayuso
• [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member, Phil Sutter
  • Re: [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member, Gustavo A. R. Silva
    • Re: [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member, Phil Sutter
  • Re: [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member, kernel test robot
  • Re: [nf-next PATCH v2] netfilter: include: uapi: Use C99 flexible array member, kernel test robot
• [PATCH] ipvs: add missing struct name in ip_vs_enqueue_expire_nodest_conns when CONFIG_SYSCTL is disabled, Andrew Sy Kim
  • Re: [PATCH] ipvs: add missing struct name in ip_vs_enqueue_expire_nodest_conns when CONFIG_SYSCTL is disabled, Julian Anastasov
    • Re: [PATCH] ipvs: add missing struct name in ip_vs_enqueue_expire_nodest_conns when CONFIG_SYSCTL is disabled, Pablo Neira Ayuso
      • Re: [PATCH] ipvs: add missing struct name in ip_vs_enqueue_expire_nodest_conns when CONFIG_SYSCTL is disabled, Julian Anastasov
• [PATCH net-next] ipvs: missing unlock in ip_vs_expire_nodest_conn_flush(), Dan Carpenter
• [iptables PATCH v3] iptables: accept lock file name at runtime, Giuseppe Scrivano
  • Re: [iptables PATCH v3] iptables: accept lock file name at runtime, Pablo Neira Ayuso
    • Re: [iptables PATCH v3] iptables: accept lock file name at runtime, Giuseppe Scrivano
      • Re: [iptables PATCH v3] iptables: accept lock file name at runtime, Pablo Neira Ayuso
  • Re: [iptables PATCH v3] iptables: accept lock file name at runtime, Pablo Neira Ayuso
• sockopt cleanups, Christoph Hellwig
  • [PATCH 03/22] net: streamline __sys_getsockopt, Christoph Hellwig
  • [PATCH 06/22] net: remove compat_sys_{get,set}sockopt, Christoph Hellwig
  • [PATCH 07/22] netfilter/arp_tables: clean up compat {get,set}sockopt handling, Christoph Hellwig
  • [PATCH 12/22] netfilter: remove the compat argument to xt_copy_counters_from_user, Christoph Hellwig
  • [PATCH 21/22] net/ipv6: remove compat_ipv6_{get,set}sockopt, Christoph Hellwig
  • [PATCH 22/22] net: make ->{get,set}sockopt in proto_ops optional, Christoph Hellwig
    • Re: [PATCH 22/22] net: make ->{get,set}sockopt in proto_ops optional, Marc Kleine-Budde
  • [PATCH 19/22] net/ipv6: factor out MCAST_MSFILTER setsockopt helpers, Christoph Hellwig
  • [PATCH 20/22] net/ipv6: factor out mcast join/leave setsockopt helpers, Christoph Hellwig
  • [PATCH 18/22] net/ipv6: factor out MCAST_MSFILTER getsockopt helpers, Christoph Hellwig
  • [PATCH 17/22] net/ipv4: remove compat_ip_{get,set}sockopt, Christoph Hellwig
  • [PATCH 16/22] net/ipv4: factor out mcast join/leave setsockopt helpers, Christoph Hellwig
  • [PATCH 15/22] net/ipv4: factor out MCAST_MSFILTER setsockopt helpers, Christoph Hellwig
  • [PATCH 14/22] net/ipv4: factor out MCAST_MSFILTER getsockopt helpers, Christoph Hellwig
  • [PATCH 11/22] netfilter: remove the compat_{get,set} methods, Christoph Hellwig
  • [PATCH 13/22] netfilter: split nf_sockopt, Christoph Hellwig
  • [PATCH 10/22] netfilter/ebtables: clean up compat {get,set}sockopt handling, Christoph Hellwig
  • [PATCH 09/22] netfilter/ip6_tables: clean up compat {get,set}sockopt handling, Christoph Hellwig
  • [PATCH 08/22] netfilter/ip_tables: clean up compat {get,set}sockopt handling, Christoph Hellwig
  • [PATCH 05/22] net: remove compat_sock_common_{get,set}sockopt, Christoph Hellwig
    • Re: [MPTCP] [PATCH 05/22] net: remove compat_sock_common_{get,set}sockopt, Matthieu Baerts
    • Re: [PATCH 05/22] net: remove compat_sock_common_{get,set}sockopt, Stefan Schmidt
  • [PATCH 01/22] net/atm: remove the atmdev_ops {get,set}sockopt methods, Christoph Hellwig
  • [PATCH 02/22] net: streamline __sys_setsockopt, Christoph Hellwig
  • [PATCH 04/22] net: simplify cBPF setsockopt compat handling, Christoph Hellwig
  • Re: sockopt cleanups, David Miller
• [PATCH nft 1/4] tests: shell: chmod 755 testcases/chains/0030create_0, Pablo Neira Ayuso
  • [PATCH nft 3/4] evaluate: use evaluate_expr_variable() for chain policy evaluation, Pablo Neira Ayuso
  • [PATCH nft 4/4] tests: shell: remove check for reject from prerouting, Pablo Neira Ayuso
  • [PATCH nft 2/4] src: allow to use variables in flowtable and chain devices, Pablo Neira Ayuso
• [PATCH net-next] ipvs: ensure RCU read unlock when connection flushing and ipvs is disabled, Andrew Sy Kim
  • Re: [PATCH net-next] ipvs: ensure RCU read unlock when connection flushing and ipvs is disabled, Julian Anastasov
• [nf-next:master 2/3] net/netfilter/ipvs/ip_vs_conn.c:1394:6: sparse: sparse: context imbalance in 'ip_vs_expire_nodest_conn_flush' - wrong count at exit, kernel test robot
  • Re: [nf-next:master 2/3] net/netfilter/ipvs/ip_vs_conn.c:1394:6: sparse: sparse: context imbalance in 'ip_vs_expire_nodest_conn_flush' - wrong count at exit, Pablo Neira Ayuso
    • Re: [nf-next:master 2/3] net/netfilter/ipvs/ip_vs_conn.c:1394:6: sparse: sparse: context imbalance in 'ip_vs_expire_nodest_conn_flush' - wrong count at exit, Andrew Kim
    • Re: [nf-next:master 2/3] net/netfilter/ipvs/ip_vs_conn.c:1394:6: sparse: sparse: context imbalance in 'ip_vs_expire_nodest_conn_flush' - wrong count at exit, Julian Anastasov
• [PATCH,v2] ipvs: fix the connection sync failed in some cases, guodeqing
  • Re: [PATCH,v2] ipvs: fix the connection sync failed in some cases, Julian Anastasov
    • Re: [PATCH,v2] ipvs: fix the connection sync failed in some cases, Pablo Neira Ayuso
• [PATCH] ipvs: fix the connection sync failed in some cases, guodeqing
  • Re: [PATCH] ipvs: fix the connection sync failed in some cases, Julian Anastasov
    • 答复: [PATCH] ipvs: fix the connection sync failed in some cases, Guodeqing (A)
• [iptables PATCH v2] iptables: accept lock file name at runtime, Giuseppe Scrivano
  • Re: [iptables PATCH v2] iptables: accept lock file name at runtime, Phil Sutter
    • Re: [iptables PATCH v2] iptables: accept lock file name at runtime, Giuseppe Scrivano
• [PATCH nft 1/2] monitor: print "dormant" flag in monitor mode, Florian Westphal
  • [PATCH nft 2/2] tests: extend existing dormat test case to catch a kernel bug, Florian Westphal
• [PATCH] iptables: accept lock file name at runtime, Giuseppe Scrivano
  • Re: [PATCH] iptables: accept lock file name at runtime, Phil Sutter
    • Re: [PATCH] iptables: accept lock file name at runtime, Giuseppe Scrivano
• [PATCH nf] netfilter: nf_tables: fix nat hook table deletion, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: fix nat hook table deletion, Pablo Neira Ayuso
• [PATCH] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy(), Dan Carpenter
  • Re: [PATCH] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy(), Pablo Neira Ayuso
• WARNING in __nf_unregister_net_hook (2), syzbot
• [nf-next PATCH] netfilter: include: uapi: Use C99 flexible array member, Phil Sutter
  • Re: [nf-next PATCH] netfilter: include: uapi: Use C99 flexible array member, Pablo Neira Ayuso
    • Re: [nf-next PATCH] netfilter: include: uapi: Use C99 flexible array member, Phil Sutter
      • Re: [nf-next PATCH] netfilter: include: uapi: Use C99 flexible array member, Pablo Neira Ayuso
• [iptables PATCH 00/18] nft: Sorted chain listing et al., Phil Sutter
  • [iptables PATCH 14/18] nft: cache: Introduce nft_cache_add_chain(), Phil Sutter
  • [iptables PATCH 12/18] nft: Fold nftnl_rule_list_chain_save() into caller, Phil Sutter
  • [iptables PATCH 07/18] nft: Reorder enum nft_table_type, Phil Sutter
  • [iptables PATCH 03/18] nft: cache: Drop duplicate chain check, Phil Sutter
  • [iptables PATCH 01/18] nft: Make table creation purely implicit, Phil Sutter
  • [iptables PATCH 09/18] nft: Use nftnl_chain_list_foreach in nft_rule_list{,_save}, Phil Sutter
  • [iptables PATCH 06/18] nft: Use nft_chain_find() in two more places, Phil Sutter
  • [iptables PATCH 08/18] nft: cache: Fetch only interesting tables from kernel, Phil Sutter
  • [iptables PATCH 13/18] nft: Implement nft_chain_foreach(), Phil Sutter
  • [iptables PATCH 04/18] nft: Drop pointless nft_xt_builtin_init() call, Phil Sutter
  • [iptables PATCH 10/18] nft: Use nftnl_chain_list_foreach in nft_rule_flush, Phil Sutter
  • [iptables PATCH 11/18] nft: Use nftnl_chain_foreach in nft_rule_save, Phil Sutter
  • [iptables PATCH 15/18] nft: Introduce a dedicated base chain array, Phil Sutter
  • [iptables PATCH 17/18] tests: shell: Drop any dump sorting in place, Phil Sutter
  • [iptables PATCH 16/18] nft: cache: Sort custom chains by name, Phil Sutter
  • [iptables PATCH 18/18] nft: Avoid pointless table/chain creation, Phil Sutter
  • [iptables PATCH 02/18] nft: Be lazy when flushing, Phil Sutter
  • [iptables PATCH 05/18] nft: Turn nft_chain_save() into a foreach-callback, Phil Sutter
  • Re: [iptables PATCH 00/18] nft: Sorted chain listing et al., Pablo Neira Ayuso
    • Re: [iptables PATCH 00/18] nft: Sorted chain listing et al., Phil Sutter
      • Re: [iptables PATCH 00/18] nft: Sorted chain listing et al., Pablo Neira Ayuso
        • Re: [iptables PATCH 00/18] nft: Sorted chain listing et al., Phil Sutter
• [libnftnl PATCH] chain: Implement chain list sorting, Phil Sutter
• [PATCH v2][next] netfilter: Use fallthrough pseudo-keyword, Gustavo A. R. Silva
  • Re: [PATCH v2][next] netfilter: Use fallthrough pseudo-keyword, Pablo Neira Ayuso
• [PATCH nft 1/2] src: use expression to store the log prefix, Pablo Neira Ayuso
  • [PATCH nft 2/2] src: allow for variables in the log prefix string, Pablo Neira Ayuso
• [PATCH][next] netfilter: nf_tables: Use fallthrough pseudo-keyword, Gustavo A. R. Silva
  • Re: [PATCH][next] netfilter: nf_tables: Use fallthrough pseudo-keyword, Pablo Neira Ayuso
    • Re: [PATCH][next] netfilter: nf_tables: Use fallthrough pseudo-keyword, Gustavo A. R. Silva
• [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear, wenxu
  • [PATCH net-next v2 3/3] net/sched: act_ct: fix clobber qdisc_skb_cb in defrag, wenxu
  • [PATCH net-next v2 1/3] net: ip_fragment: Add ip_defrag_ignore_cb support, wenxu
  • [PATCH net-next v2 2/3] netfilter: nf_conntrack_reasm: make nf_ct_frag6_gather elide the CB clear, wenxu
  • Re: [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear, Jakub Kicinski
    • Re: [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear, Florian Westphal
      • Re: [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear, wenxu
      • Re: [PATCH net-next v2 0/3] make nf_ct_frag/6_gather elide the skb CB clear, Cong Wang
• [PATCH] Replace HTTP links with HTTPS ones: IPv*, Alexander A. Klimov
  • Re: [PATCH] Replace HTTP links with HTTPS ones: IPv*, David Miller
• [PATCH nft] segtree: zap element statement when decomposing interval, Pablo Neira Ayuso
• [iptables PATCH] tests: shell: Add help output to run-tests.sh, Phil Sutter
• [PATCH net-next 0/3] make nf_ct_frag/6_gather elide the skb CB clear, wenxu
  • [PATCH net-next 2/3] netfilter: nf_conntrack_reasm: make nf_ct_frag6_gather elide the CB clear, wenxu
  • [PATCH net-next 3/3] net/sched: act_ct: fix clobber qdisc_skb_cb in defrag, wenxu
  • [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support, wenxu
    • Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support, Cong Wang
    • Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support, Florian Westphal
      • Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support, wenxu
        • Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support, Florian Westphal
          • Re: [PATCH net-next 1/3] netfilter: nf_defrag_ipv4: Add nf_ct_frag_gather support, wenxu
• [PATCH nf-next] netfilter: nf_tables: reject unsupported chain flags, Pablo Neira Ayuso
• [PATCH nft,v2 1/2] datatype: convert chain name from gmp value to string, Pablo Neira Ayuso
  • [PATCH nft,v2 2/2] src: support for implicit chain bindings, Pablo Neira Ayuso
• [PATCH nf-next,v3 1/6] netfilter: nf_tables: add NFTA_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next,v3 2/6] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next,v3 3/6] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next,v3 4/6] netfilter: nf_tables: expose enum nft_chain_flags through UAPI, Pablo Neira Ayuso
  • [PATCH nf-next,v3 5/6] netfilter: nf_tables: add nft_chain_add(), Pablo Neira Ayuso
  • [PATCH nf-next,v3 6/6] netfilter: nf_tables: add NFT_CHAIN_BINDING, Pablo Neira Ayuso
• [PATCH] audit: use the proper gfp flags in the audit_log_nfcfg() calls, Paul Moore
  • Re: [PATCH] audit: use the proper gfp flags in the audit_log_nfcfg() calls, Richard Guy Briggs
    • Re: [PATCH] audit: use the proper gfp flags in the audit_log_nfcfg() calls, Paul Moore
• [PATCH nft] src: Allow for empty set variable definition, Pablo Neira Ayuso
• Moving from ipset to nftables: Sets not ready for prime time yet?, Timo Sigurdsson
  • Re: Moving from ipset to nftables: Sets not ready for prime time yet?, Stefano Brivio
    • Re: Moving from ipset to nftables: Sets not ready for prime time yet?, Jozsef Kadlecsik
      • Re: Moving from ipset to nftables: Sets not ready for prime time yet?, Stefano Brivio
    • Re: Moving from ipset to nftables: Sets not ready for prime time yet?, Timo Sigurdsson
  • Re: Moving from ipset to nftables: Sets not ready for prime time yet?, Pablo Neira Ayuso
• [PATCH nft] src: support for implicit chain bindings, Pablo Neira Ayuso
• [PATCH nf-next,v2 1/6] netfilter: nf_tables: add NFTA_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next,v2 2/6] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next,v2 3/6] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next,v2 4/6] netfilter: nf_tables: expose enum nft_chain_flags through UAPI, Pablo Neira Ayuso
  • [PATCH nf-next,v2 5/6] netfilter: nf_tables: add nft_chain_add(), Pablo Neira Ayuso
  • [PATCH nf-next,v2 6/6] netfilter: nf_tables: add NFT_CHAIN_BINDING, Pablo Neira Ayuso
• [PATCH nf-next 6/6,v2] netfilter: nf_tables: add NFT_CHAIN_BINDING, Pablo Neira Ayuso
• [PATCH net-next] ipvs: allow connection reuse for unconfirmed conntrack, Julian Anastasov
  • Re: [PATCH net-next] ipvs: allow connection reuse for unconfirmed conntrack, Simon Horman
    • Re: [PATCH net-next] ipvs: allow connection reuse for unconfirmed conntrack, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_conntrack: refetch conntrack after nf_conntrack_update(), Pablo Neira Ayuso
• LPC 2020 Networking and BPF Track CFP, David Miller
• [PATCH v3 11/20] netfilter: nft_set_rbtree: Use sequence counter with associated rwlock, Ahmed S. Darwish
• [PATCH v3 10/20] netfilter: conntrack: Use sequence counter with associated spinlock, Ahmed S. Darwish
• [PATCH net] netfilter: ipset: call ip_set_free() instead of kfree(), Eric Dumazet
  • Re: [PATCH net] netfilter: ipset: call ip_set_free() instead of kfree(), Pablo Neira Ayuso
• [PATCH nft WIP] src: support for implicit chain bindings, Pablo Neira Ayuso
• [PATCH nf-next 0/5,v2] nftables: support for implicit chains binding, Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next 1/5] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute, Pablo Neira Ayuso
    • Re: [PATCH nf-next 1/5] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute, kernel test robot
  • [PATCH nf-next 4/5] netfilter: nf_tables: add nft_chain_add(), Pablo Neira Ayuso
  • [PATCH nf-next 3/5] netfilter: nf_tables: expose enum nft_chain_flags through UAPI, Pablo Neira Ayuso
  • [PATCH nf-next 5/5] netfilter: nf_tables: add NFT_CHAIN_BINDING, Pablo Neira Ayuso
• [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg, Richard Guy Briggs
  • Re: [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg, Paul Moore
  • Re: [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg, Jones Desougi
    • Re: [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg, Paul Moore
      • Re: [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg, Richard Guy Briggs
• mDNS helper fails to add expectations if host joined 224.0.0.251 multicast group, Andrei Borzenkov
• [PATCH ghak90 V9 00/13] audit: implement container identifier, Richard Guy Briggs
  • [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Paul Moore
      • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Paul Moore
          • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Richard Guy Briggs
            • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Paul Moore
  • [PATCH ghak90 V9 03/13] audit: read container ID of a process, Richard Guy Briggs
  • [PATCH ghak90 V9 04/13] audit: log drop of contid on exit of last task, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 04/13] audit: log drop of contid on exit of last task, Paul Moore
  • [PATCH ghak90 V9 07/13] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 07/13] audit: add support for non-syscall auxiliary records, Paul Moore
  • [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Paul Moore
      • Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Paul Moore
          • Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
  • [PATCH ghak90 V9 08/13] audit: add containerid support for user records, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 08/13] audit: add containerid support for user records, Paul Moore
      • Re: [PATCH ghak90 V9 08/13] audit: add containerid support for user records, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 08/13] audit: add containerid support for user records, Paul Moore
  • [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Paul Moore
      • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Paul Moore
          • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
            • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
              • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Steve Grubb
                • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
              • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Paul Moore
                • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
                  • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Paul Moore
  • [PATCH ghak90 V9 02/13] audit: add container id, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 02/13] audit: add container id, Paul Moore
      • Re: [PATCH ghak90 V9 02/13] audit: add container id, Paul Moore
    • Re: [PATCH ghak90 V9 02/13] audit: add container id, Paul Moore
      • Re: [PATCH ghak90 V9 02/13] audit: add container id, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 02/13] audit: add container id, Paul Moore
  • [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Paul Moore
      • Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Paul Moore
          • Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Richard Guy Briggs
  • [PATCH ghak90 V9 12/13] audit: track container nesting, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 12/13] audit: track container nesting, Paul Moore
  • [PATCH ghak90 V9 13/13] audit: add capcontid to set contid outside init_user_ns, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 13/13] audit: add capcontid to set contid outside init_user_ns, Paul Moore
  • [PATCH ghak90 V9 09/13] audit: add containerid filtering, Richard Guy Briggs
  • [PATCH ghak90 V9 10/13] audit: add support for containerid to network namespaces, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 10/13] audit: add support for containerid to network namespaces, Paul Moore
      • Re: [PATCH ghak90 V9 10/13] audit: add support for containerid to network namespaces, Richard Guy Briggs
• [bug report] audit: log nftables configuration change events, Dan Carpenter
  • Re: [bug report] audit: log nftables configuration change events, Richard Guy Briggs
• [PATCH nf-next 0/5] support for anonymous non-base chains in nftables, Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nf_tables: add NFTA_RULE_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next 1/5] netfilter: nf_tables: add NFTA_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nf_tables: expose enum nft_chain_flags through UAPI, Pablo Neira Ayuso
  • [PATCH nf-next 3/5] netfilter: nf_tables: add NFTA_VERDICT_CHAIN_ID attribute, Pablo Neira Ayuso
  • [PATCH nf-next 5/5] netfilter: nf_tables: add NFT_CHAIN_ANONYMOUS, Pablo Neira Ayuso
  • Re: [PATCH nf-next 0/5] support for anonymous non-base chains in nftables, Florian Westphal
    • Re: [PATCH nf-next 0/5] support for anonymous non-base chains in nftables, Pablo Neira Ayuso
• [PATCH] [net/ipv6] Remove redundant null check in rt_mt6, Gaurav Singh
• [PATCH] [net/ipv6] Remove redundant null check in hbh_mt6, Gaurav Singh
• [PATCH] [net/ipv6] remove redundant null check in frag_mt6, Gaurav Singh
• [PATCH] [net/ipv6] Remove redundant null check in ah_mt6, Gaurav Singh
  • Re: [PATCH] [net/ipv6] Remove redundant null check in ah_mt6, Pablo Neira Ayuso
  • [PATCH] netfilter: ip6tables: Remove redundant null checks, Gaurav Singh
    • Re: [PATCH] netfilter: ip6tables: Remove redundant null checks, Pablo Neira Ayuso
• clean up kernel_{read,write} & friends v5, Christoph Hellwig
  • [PATCH 01/14] cachefiles: switch to kernel_write, Christoph Hellwig
  • [PATCH 12/14] fs: remove __vfs_read, Christoph Hellwig
  • [PATCH 13/14] fs: implement default_file_splice_read using __kernel_read, Christoph Hellwig
    • [fs] 140402bab8: stress-ng.splice.ops_per_sec -100.0% regression, kernel test robot
      • Re: [fs] 140402bab8: stress-ng.splice.ops_per_sec -100.0% regression, Christoph Hellwig
        • Re: [fs] 140402bab8: stress-ng.splice.ops_per_sec -100.0% regression, Linus Torvalds
  • [PATCH 14/14] fs: don't change the address limit for ->read_iter in __kernel_read, Christoph Hellwig
  • [PATCH 09/14] fs: add a __kernel_read helper, Christoph Hellwig
  • [PATCH 11/14] fs: implement kernel_read using __kernel_read, Christoph Hellwig
  • [PATCH 08/14] fs: don't change the address limit for ->write_iter in __kernel_write, Christoph Hellwig
  • [PATCH 10/14] integrity/ima: switch to using __kernel_read, Christoph Hellwig
  • [PATCH 03/14] bpfilter: switch to kernel_write, Christoph Hellwig
  • [PATCH 02/14] autofs: switch to kernel_write, Christoph Hellwig
  • [PATCH 07/14] fs: remove __vfs_write, Christoph Hellwig
  • [PATCH 06/14] fs: implement kernel_write using __kernel_write, Christoph Hellwig
  • [PATCH 04/14] fs: unexport __kernel_write, Christoph Hellwig
  • [PATCH 05/14] fs: check FMODE_WRITE in __kernel_write, Christoph Hellwig
• [libnf_ct PATCH v2 1/9] Handle negative snprintf return values properly, Daniel Gröber
  • [libnf_ct PATCH v2 6/9] Fix buffer overflow on invalid icmp type in setters, Daniel Gröber
  • [libnf_ct PATCH v2 4/9] Fix incorrect snprintf size calculation, Daniel Gröber
  • [libnf_ct PATCH v2 3/9] Replace strncpy with snprintf to improve null byte handling, Daniel Gröber
  • [libnf_ct PATCH v2 5/9] Add ARRAY_SIZE() macro, Daniel Gröber
  • [libnf_ct PATCH v2 7/9] Move icmp request>reply type mapping to common file, Daniel Gröber
  • [libnf_ct PATCH v2 2/9] Fix nfexp_snprintf return value docs, Daniel Gröber
  • [libnf_ct PATCH v2 8/9] Fix buffer overflow in protocol related snprintf functions, Daniel Gröber
  • [libnf_ct PATCH v2 9/9] Fix buffer overflows in __snprintf_protoinfo* like in *2str fns, Daniel Gröber
  • Re: [libnf_ct PATCH v2 1/9] Handle negative snprintf return values properly, Pablo Neira Ayuso
    • Re: [libnf_ct PATCH v2 1/9] Handle negative snprintf return values properly, Daniel Gröber
• [PATCH iptables] libxtables/xtables.c - compiler warning fixes for NO_SHARED_LIBS, Maciej Żenczykowski
  • Re: [PATCH iptables] libxtables/xtables.c - compiler warning fixes for NO_SHARED_LIBS, Maciej Żenczykowski
  • Re: [PATCH iptables] libxtables/xtables.c - compiler warning fixes for NO_SHARED_LIBS, Pablo Neira Ayuso
• Various memory-safety related fixes, Daniel Gröber
  • [libnf_ct PATCH 4/8] Fix incorrect snprintf size calculation, Daniel Gröber
  • [libnf_ct PATCH 3/8] Replace strncpy with snprintf to improve null byte handling, Daniel Gröber
  • <Possible follow-ups>
  • Various memory-safety related fixes, Daniel Gröber
    • [libnf_ct resend PATCH 1/8] Handle negative snprintf return values properly, Daniel Gröber
      • Re: [libnf_ct resend PATCH 1/8] Handle negative snprintf return values properly, Pablo Neira Ayuso
    • [libnf_ct resend PATCH 3/8] Replace strncpy with snprintf to improve null byte handling, Daniel Gröber
    • [libnf_ct resend PATCH 2/8] Fix nfexp_snprintf return value docs, Daniel Gröber
    • [libnf_ct resend PATCH 4/8] Fix incorrect snprintf size calculation, Daniel Gröber
    • [libnf_ct resend PATCH 7/8] Fix buffer overflow in protocol related snprintf functions, Daniel Gröber
    • [libnf_ct resend PATCH 6/8] Fix buffer overflow on invalid icmp type in setters, Daniel Gröber
      • Re: [libnf_ct resend PATCH 6/8] Fix buffer overflow on invalid icmp type in setters, Pablo Neira Ayuso
    • [libnf_ct resend PATCH 8/8] Fix buffer overflows in __snprintf_protoinfo* like in *2str fns, Daniel Gröber
    • [libnf_ct resend PATCH 5/8] Add asizeof() macro, Daniel Gröber
      • Re: [libnf_ct resend PATCH 5/8] Add asizeof() macro, Pablo Neira Ayuso
• [PATCH v1 0/4] iptables: Module unload causing NULL pointer reference., David Wilder
  • [PATCH v1 1/4] netfilter: Split ipt_unregister_table() into pre_exit and exit helpers., David Wilder
  • [PATCH v1 3/4] netfilter: Split ip6t_unregister_table() into pre_exit and exit helpers., David Wilder
  • [PATCH v1 2/4] netfilter: Add a .pre_exit hook in all iptable_foo.c., David Wilder
  • [PATCH v1 4/4] netfilter: Add a .pre_exit hook in all ip6table_foo.c., David Wilder
  • Re: [PATCH v1 0/4] iptables: Module unload causing NULL pointer reference., Pablo Neira Ayuso
• KMSAN: uninit-value in hash_net6_add, syzbot
• [nft PATCH] doc: Document notrack statement, Phil Sutter
  • Re: [nft PATCH] doc: Document notrack statement, Florian Westphal
• [PATCH nft] doc: revisit meta/rt primary expressions and ct statement, Florian Westphal
• [PATCH nf 1/1] selftests: netfilter: add test case for conntrack helper assignment, Florian Westphal
  • Re: [PATCH nf 1/1] selftests: netfilter: add test case for conntrack helper assignment, Pablo Neira Ayuso
• [PATCH net-next] ipvs: register hooks only with services, Julian Anastasov
  • Re: [PATCH net-next] ipvs: register hooks only with services, Simon Horman
    • Re: [PATCH net-next] ipvs: register hooks only with services, Pablo Neira Ayuso
• [PATCH v3] netfilter: Add MODULE_DESCRIPTION entries to kernel modules, Rob Gill
  • Re: [PATCH v3] netfilter: Add MODULE_DESCRIPTION entries to kernel modules, Pablo Neira Ayuso
• [PATCH v2] netfilter: Add MODULE_DESCRIPTION entries to kernel modules, Rob Gill
  • Re: [PATCH v2] netfilter: Add MODULE_DESCRIPTION entries to kernel modules, Florian Westphal
• [PATCH net-next] ipvs: avoid expiring many connections from timer, Julian Anastasov
  • Re: [PATCH net-next] ipvs: avoid expiring many connections from timer, Simon Horman
    • Re: [PATCH net-next] ipvs: avoid expiring many connections from timer, Julian Anastasov
      • Re: [PATCH net-next] ipvs: avoid expiring many connections from timer, Simon Horman
  • Re: [PATCH net-next] ipvs: avoid expiring many connections from timer, Pablo Neira Ayuso
• [PATCH] netfilter: Add MODULE_DESCRIPTION entries to kernel modules, Rob Gill
  • Re: [PATCH] netfilter: Add MODULE_DESCRIPTION entries to kernel modules, kernel test robot
  • Re: [PATCH] netfilter: Add MODULE_DESCRIPTION entries to kernel modules, kernel test robot
  • Re: [PATCH] netfilter: Add MODULE_DESCRIPTION entries to kernel modules, kernel test robot
• Allow dynamic loading of extentions in ebtables (-m option), Eugene Crosser
  • [PATCH] ebtables-nft: introduce '-m <match_ext>' option, Eugene Crosser
• iptables user space performance benchmarks published, Phil Sutter
  • Re: iptables user space performance benchmarks published, Pablo Neira Ayuso
    • Re: iptables user space performance benchmarks published, Reindl Harald
      • Re: iptables user space performance benchmarks published, Phil Sutter
        • Re: iptables user space performance benchmarks published, Reindl Harald
          • Re: iptables user space performance benchmarks published, Phil Sutter
            • Re: iptables user space performance benchmarks published, Reindl Harald
              • Re: iptables user space performance benchmarks published, Phil Sutter
                • Re: iptables user space performance benchmarks published, Reindl Harald
                  • Re: iptables user space performance benchmarks published, Phil Sutter
                    • Re: iptables user space performance benchmarks published, Reindl Harald
      • Re: iptables user space performance benchmarks published, Stefano Brivio
        • Re: iptables user space performance benchmarks published, Reindl Harald
    • Re: iptables user space performance benchmarks published, Phil Sutter
  • Re: iptables user space performance benchmarks published, Jan Engelhardt
    • Re: iptables user space performance benchmarks published, Phil Sutter