Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- Re: [PATCH net-next v2] netfilter: Fix incorrect tc_setup_type type for flowtable offload, (continued)
- [PATCH v3 nf] selftests: netfilter: add nfqueue test case,
Florian Westphal
- [PATCH nf v2 0/4] nftables: Consistently report partial and entire set overlaps,
Stefano Brivio
- [PATCH NOMERGE iptables 0/2] man: xt_set: Describe existing behaviour and new counters update flag,
Stefano Brivio
- [PATCH nf-next 0/3] netfilter: nf_flow_table_offload: add nf_conn_acct for flowtable offload,
wenxu
- [PATCH nf-next v2] netfilter: nf_flow_table_offload: set hw_stats_type of flow_action_entry to FLOW_ACTION_HW_STATS_ANY,
wenxu
- [PATCH nft] tests: py: update nat expressions payload to include proto flags, Pablo Neira Ayuso
- [PATCH libnftnl 1/2] expr: masq: revisit _snprintf(),
Pablo Neira Ayuso
- [PATCH nf-next] netfilter:nf_flow_table: add HW stats type support in flowtable,
wenxu
- [PATCH] iptables: open eBPF programs in read only mode,
Maciej Żenczykowski
- [PATCH net] netfilter: nf_flow_table: populate addr_type mask,
Edward Cree
- [PATCH net] netfilter: flowtable: Fix flushing of offloaded flows on free,
Paul Blakey
- [PATCH nf-next] netfilter: nf_flow_table_offload: fix potential NULL pointer dereference for dst_cache in handling lwtstate,
wenxu
- Re: Bug URGENT Report with new kernel 5.5.10-5.6-rc6,
Stefano Brivio
[PATCH AUTOSEL 5.4 20/73] netfilter: cthelper: add missing attribute validation for cthelper, Sasha Levin
[PATCH AUTOSEL 5.4 21/73] netfilter: nft_payload: add missing attribute validation for payload csum flags, Sasha Levin
[PATCH AUTOSEL 5.4 26/73] netfilter: nf_tables: dump NFTA_CHAIN_FLAGS attribute, Sasha Levin
[PATCH AUTOSEL 5.4 27/73] netfilter: nf_tables: fix infinite loop when expr is not available, Sasha Levin
[PATCH AUTOSEL 5.4 31/73] netfilter: nft_chain_nat: inet family is missing module ownership, Sasha Levin
[PATCH AUTOSEL 4.19 16/37] netfilter: nft_payload: add missing attribute validation for payload csum flags, Sasha Levin
[PATCH AUTOSEL 4.19 15/37] netfilter: cthelper: add missing attribute validation for cthelper, Sasha Levin
[PATCH AUTOSEL 4.19 17/37] netfilter: nft_tunnel: add missing attribute validation for tunnels, Sasha Levin
[PATCH AUTOSEL 4.14 13/28] netfilter: cthelper: add missing attribute validation for cthelper, Sasha Levin
[PATCH AUTOSEL 4.14 14/28] netfilter: nft_payload: add missing attribute validation for payload csum flags, Sasha Levin
[PATCH AUTOSEL 4.9 08/15] netfilter: cthelper: add missing attribute validation for cthelper, Sasha Levin
[PATCH AUTOSEL 4.4 06/12] netfilter: cthelper: add missing attribute validation for cthelper, Sasha Levin
[PATCH AUTOSEL 5.4 22/73] netfilter: nft_tunnel: add missing attribute validation for tunnels, Sasha Levin
[PATCH nft] evaluate: add range specified flag setting (missing NF_NAT_RANGE_PROTO_SPECIFIED),
Pablo Neira Ayuso
[PATCH nf-next] netfilter: nf_tables: add nft_set_elem_expr_destroy() and use it, Pablo Neira Ayuso
[PATCH nf-next] netfilter: nf_flow_table_offload: fix kernel NULL pointer dereference in nf_flow_table_indr_block_cb,
wenxu
[bug report] netfilter: nf_tables: add elements with stateful expressions,
Dan Carpenter
[PATCH net-next] flow_offload: add TC_SETP_FT type in flow_indr_block_call,
wenxu
[PATCH nf-next] netfilter: nf_tables: fix double-free on set expression from the error path, Pablo Neira Ayuso
[PATCH ghak25 v3 0/3] Address NETFILTER_CFG issues,
Richard Guy Briggs
[PATCH nft] src: support for counter in set definition, Pablo Neira Ayuso
[PATCH libnftnl] set: support for NFTNL_SET_EXPR, Pablo Neira Ayuso
[PATCH nf-next 0/3] support for stateful expressions in set definition,
Pablo Neira Ayuso
[PATCH v2 1/2] netfilter: nf_flow_table: reload ip{v6}h in nf_flow_nat_ip{v6},
Haishuang Yan
compilation of netfilter missing libnftnl functions - undefined reference - (RASPBERRY pi 3B),
MELCHOR PENA, Bernardo Santiago
[PATCH] netfilter: nft_masq: add range specified flag setting, Sergey Marinkevich
[PATCH 1/4] netfilter: nf_flow_table: reload ipv6h in nf_flow_nat_ipv6,
Haishuang Yan
[PATCH v2] ipvs: optimize tunnel dumps for icmp errors,
Haishuang Yan
[PATCH] ipvs: optimize tunnel dumps for icmp errors,
Haishuang Yan
[iptables PATCH] nft: cache: Fix iptables-save segfault under stress,
Phil Sutter
[iptables PATCH] nft: cache: Fix for unused variable warnings, Phil Sutter
linux-next: manual merge of the netfilter-next tree with the net-next tree, Stephen Rothwell
[PATCH 0/3] treewide: Convert unscriptable /* fallthrough */ comments to fallthrough;,
Joe Perches
Re: WARNING in geneve_exit_batch_net (2),
syzbot
[PATCH nf-next 1/1] netfilter: conntrack: re-visit sysctls in unprivileged namespaces,
Florian Westphal
[PATCH nft 1/2] netlink: remove unused parameter from netlink_gen_stmt_stateful(),
Pablo Neira Ayuso
[PATCH 0/5 nf-next,v2] enhance stateful expression support,
Pablo Neira Ayuso
[PATCH libnftnl] set_elem: missing set and build for NFTNL_SET_ELEM_EXPR, Pablo Neira Ayuso
[PATCH nf-next 0/4] enhance stateful expression support,
Pablo Neira Ayuso
[PATCH nft] src: Support netdev egress hook,
Lukas Wunner
[PATCH nf-next 0/3] Netfilter egress hook,
Lukas Wunner
[PATCH 4/8] netfilter: Add missing annotation for ctnetlink_parse_nat_setup(),
Jules Irenge
[PATCH 5/8] netfilter: conntrack: Add missing annotations for nf_conntrack_all_lock() and nf_conntrack_all_unlock(),
Jules Irenge
[nft PATCH] tests/py: Move tcpopt.t to any/ directory,
Phil Sutter
Re: Restoring rulesets containing dynamic sets with counters,
Pablo Neira Ayuso
[PATCH nft] parser_bison: fix rshift statement expression.,
Jeremy Sowden
shift_stmt_expr grammar question,
Jeremy Sowden
[PATCH nf-next v2 0/6] nft_set_pipapo: Performance improvements: Season 1,
Stefano Brivio
[nft PATCH v2 1/2] parser_json: Support ranges in concat expressions,
Phil Sutter
[nft PATCH] tests/py: Fix JSON output for changed timezone, Phil Sutter
[PATCH nf] netfilter: nf_tables: missing module ownership in chain type definitions,
Pablo Neira Ayuso
[PATCH nf] netfilter: nft_chain_nat: inet family is missing module ownership,
Pablo Neira Ayuso
[nft PATCH] parser_json: Support ranges in concat expressions,
Phil Sutter
[PATCH nft] tests: Introduce test for insertion of overlapping and non-overlapping ranges,
Stefano Brivio
[PATCH nf 0/4] nftables: Consistently report partial and entire set overlaps,
Stefano Brivio
[PATCH AUTOSEL 5.4 24/58] netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports, Sasha Levin
[PATCH AUTOSEL 5.4 25/58] netfilter: ipset: Fix forceadd evaluation path, Sasha Levin
[PATCH AUTOSEL 5.5 29/67] netfilter: ipset: Fix forceadd evaluation path, Sasha Levin
[PATCH AUTOSEL 5.5 28/67] netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports, Sasha Levin
[PATCH nft 0/4] Help and getopt improvements,
Jeremy Sowden
[PATCH nf] netfilter: nf_tables: fix infinite loop when expr is not available,
Florian Westphal
[iptables PATCH v2] connlabel: Allow numeric labels even if connlabel.conf exists, Phil Sutter
[iptables PATCH] connlabel: Allow numeric labels even if connlabel.conf exists,
Phil Sutter
[PATCH nft] main: add more information to `nft -V`.,
Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: dump NFTA_CHAIN_FLAGS attribute, Pablo Neira Ayuso
[PATCH nft] src: support for offload chain flags, Pablo Neira Ayuso
[PATCH libnftnl] chain: add NFTNL_CHAIN_FLAGS, Pablo Neira Ayuso
[PATCH nft v3 00/18] Support for boolean binops with variable RHS operands.,
Jeremy Sowden
- [PATCH nft v3 01/18] evaluate: add separate variables for lshift and xor binops., Jeremy Sowden
- [PATCH nft v3 02/18] evaluate: simplify calculation of payload size., Jeremy Sowden
- [PATCH nft v3 06/18] netlink_delinearize: set shift RHS byte-order., Jeremy Sowden
- [PATCH nft v3 03/18] evaluate: don't evaluate payloads twice., Jeremy Sowden
- [PATCH nft v3 07/18] src: fix leaks., Jeremy Sowden
- [PATCH nft v3 08/18] include: update nf_tables.h., Jeremy Sowden
- [PATCH nft v3 04/18] evaluate: convert the byte-order of payload statement arguments., Jeremy Sowden
- [PATCH nft v3 09/18] src: support (de)linearization of bitwise op's with variable right operands., Jeremy Sowden
- [PATCH nft v3 05/18] evaluate: no need to swap byte-order for values of fewer than 16 bits., Jeremy Sowden
- [PATCH nft v3 14/18] netlink_delinearize: add support for processing variable payload statement arguments., Jeremy Sowden
- [PATCH nft v3 15/18] netlink_delinearize: add postprocessing for payload binops., Jeremy Sowden
- [PATCH nft v3 16/18] tests: shell: remove stray debug flag., Jeremy Sowden
- [PATCH nft v3 13/18] netlink_delinearize: refactor stmt_payload_binop_postprocess., Jeremy Sowden
- [PATCH nft v3 18/18] tests: py: add variable binop RHS tests., Jeremy Sowden
- [PATCH nft v3 12/18] netlink_delinearize: fix typo., Jeremy Sowden
- [PATCH nft v3 17/18] tests: shell: add variable binop RHS tests., Jeremy Sowden
- [PATCH nft v3 11/18] evaluate: don't clobber binop bitmask lengths., Jeremy Sowden
- [PATCH nft v3 10/18] evaluate: allow boolean binop expressions with variable righthand arguments., Jeremy Sowden
- Re: [PATCH nft v3 00/18] Support for boolean binops with variable RHS operands., Florian Westphal
Re: + seq_read-info-message-about-buggy-next-functions.patch added to -mm tree, Vasily Averin
[PATCH netfilter 0/3] netfilter: add missing attribute validation,
Jakub Kicinski
[PATCH nft v2 00/18] Support for boolean binops with variable RHS operands.,
Jeremy Sowden
- [PATCH nft v2 02/18] evaluate: simplify calculation of payload size., Jeremy Sowden
- [PATCH nft v2 01/18] evaluate: add separate variables for lshift and xor binops., Jeremy Sowden
- [PATCH nft v2 03/18] evaluate: don't evaluate payloads twice., Jeremy Sowden
- [PATCH nft v2 06/18] netlink_delinearize: set shift RHS byte-order., Jeremy Sowden
- [PATCH nft v2 08/18] include: update nf_tables.h., Jeremy Sowden
- [PATCH nft v2 07/18] src: fix leaks., Jeremy Sowden
- [PATCH nft v2 05/18] evaluate: no need to swap byte-order for values of fewer than 16 bits., Jeremy Sowden
- [PATCH nft v2 09/18] src: support (de)linearization of bitwise op's with variable right operands., Jeremy Sowden
- [PATCH nft v2 04/18] evaluate: convert the byte-order of payload statement arguments., Jeremy Sowden
- [PATCH nft v2 15/18] netlink_delinearize: add postprocessing for payload binops., Jeremy Sowden
- [PATCH nft v2 11/18] netlink_linearize: round binop bitmask length up., Jeremy Sowden
- [PATCH nft v2 13/18] netlink_delinearize: refactor stmt_payload_binop_postprocess., Jeremy Sowden
- [PATCH nft v2 18/18] tests: py: add variable binop RHS tests., Jeremy Sowden
- [PATCH nft v2 16/18] tests: shell: remove stray debug flag., Jeremy Sowden
- [PATCH nft v2 17/18] tests: shell: add variable binop RHS tests., Jeremy Sowden
- [PATCH nft v2 10/18] evaluate: allow boolean binop expressions with variable righthand arguments., Jeremy Sowden
- [PATCH nft v2 12/18] netlink_delinearize: fix typo., Jeremy Sowden
- [PATCH nft v2 14/18] netlink_delinearize: add support for processing variable payload statement arguments., Jeremy Sowden
[PATCH nf] netfilter: nf_tables: free flowtable hooks on hook register error,
Florian Westphal
memory leak in nf_tables_parse_netdev_hooks (2), syzbot
[iptables PATCH 0/4] Fix for iptables-nft-restore under pressure,
Phil Sutter
general protection fault in gc_worker, syzbot
0x14: COVID-19 update, postponement of Netdev conf 0x14, Jamal Hadi Salim
Re: [patch net-next v2 01/12] flow_offload: Introduce offload of HW stats type,
Pablo Neira Ayuso
[PATCH nft 00/18] Support for boolean binops with variable RHS operands.,
Jeremy Sowden
- [PATCH nft 08/18] include: update nf_tables.h., Jeremy Sowden
- [PATCH nft 07/18] src: fix leaks., Jeremy Sowden
- [PATCH nft 09/18] src: support (de)linearization of bitwise op's with variable right operands., Jeremy Sowden
- [PATCH nft 01/18] evaluate: add separate variables for lshift and xor binops., Jeremy Sowden
- [PATCH nft 02/18] evaluate: simplify calculation of payload size., Jeremy Sowden
- [PATCH nft 03/18] evaluate: don't evaluate payloads twice., Jeremy Sowden
- [PATCH nft 05/18] evaluate: no need to swap byte-order for values of fewer than 16 bits., Jeremy Sowden
- [PATCH nft 06/18] netlink_delinearize: set shift RHS byte-order., Jeremy Sowden
- [PATCH nft 04/18] evaluate: convert the byte-order of payload statement arguments., Jeremy Sowden
- [PATCH nft 11/18] netlink_linearize: round binop bitmask length up., Jeremy Sowden
- [PATCH nft 18/18] tests: py: add variable binop RHS tests., Jeremy Sowden
- [PATCH nft 17/18] tests: shell: add variable binop RHS tests., Jeremy Sowden
- [PATCH nft 13/18] netlink_delinearize: refactor stmt_payload_binop_postprocess., Jeremy Sowden
- [PATCH nft 14/18] netlink_delinearize: add support for processing variable payload statement arguments., Jeremy Sowden
- [PATCH nft 10/18] evaluate: allow boolean binop expressions with variable righthand arguments., Jeremy Sowden
- [PATCH nft 15/18] netlink_delinearize: add postprocessing for payload binops., Jeremy Sowden
- [PATCH nft 12/18] netlink_delinearize: fix typo., Jeremy Sowden
- [PATCH nft 16/18] tests: shell: remove stray debug flag., Jeremy Sowden
Ipv6 address in concatenation,
Serguei Bezverkhi (sbezverk)
[PATCH net] netlink: Use netlink header as base to calculate bad attribute offset,
Pablo Neira Ayuso
[PATCH nft 1/2] expressions: concat: add typeof support,
Florian Westphal
Null Pointer Dereference in nf_nat, Alex Buie
[PATCH] netfilter: clean up some indenting,
Dan Carpenter
[PATCH nf] netfilter: ensure rcu_read_lock() in ipv4_find_option(),
Matteo Croce
[PATCH 7/6 nft,v2] src: nat concatenation support with anonymous maps,
Pablo Neira Ayuso
[PATCH] ipset: Update byte and packet counters regardless of whether they match,
Stefano Brivio
[PATCH libnftnl 0/3] bitwise: support for passing mask and xor via registers,
Jeremy Sowden
[PATCH nft 7/6] src: nat concatenation support with anonymous maps, Pablo Neira Ayuso
[PATCH nf-next 0/2] netfilter: bitwise: support variable RHS operands,
Jeremy Sowden
[PATCH nf-next v5 0/4] netfilter: flowtable: add indr-block offload,
wenxu
[PATCH nft 0/6] allow s/dnat to map to both addr and port,
Florian Westphal
[PATCH libnetfilter_queue] src: add nfq_get_skbinfo(),
Florian Westphal
[PATCH nf-next 0/5] nft_set_pipapo: Performance improvements: Season 1,
Stefano Brivio
[PATCH 1/2] netfilter: Pass lockdep expression to __instance_lookup traversal,
Amol Grover
[PATCH nft] expression: use common code for expr_ops/expr_ops_by_type, Florian Westphal
[ANNOUNCE] ipset 7.6 released, Jozsef Kadlecsik
KMSAN: uninit-value in nf_flow_table_offload_setup, syzbot
[iptables PATCH] iptables-test.py: Fix --host mode, Phil Sutter
[iptables PATCH 1/3] xtables: Align effect of -4/-6 options with legacy,
Phil Sutter
[PATCH] ulogd: printpkt: always print IPv6 protocol,
Andreas Jaggi
[PATCH nf] selftests: nft_concat_range: Move option for 'list ruleset' before command,
Stefano Brivio
[PATCH nf 0/2] nft_set_pipapo: Fix crash due to dangling entries in mapping table,
Stefano Brivio
[PATCH 1/2] parser_json: fix parsing prefix inside concat,
Eric Garver
[PATCH][next] netfilter: Replace zero-length array with flexible-array member,
Gustavo A. R. Silva
[PATCH][nf-next] netfilter: cleanup unused macro,
Li RongQing
[PATCH nft 2/2,v2] mnl: do not use expr->identifier to fetch device name, Pablo Neira Ayuso
[PATCH nft 1/2] parser_bison: memleak in device parser,
Pablo Neira Ayuso
[PATCH nft 1/3] mnl: extended error support for create command,
Pablo Neira Ayuso
[libnftnl PATCH] src: Fix for reading garbage in nftnl_chain getters, Phil Sutter
[PATCH] netfilter: ipt_CLUSTERIP: Pass lockdep expression to RCU lists,
Amol Grover
[PATCH libnftnl] src: add nftnl_*_{get,set}_array(),
Pablo Neira Ayuso
[PATCH nft] src: combine extended netlink error reporting with mispelling support, Pablo Neira Ayuso
[PATCH nf-next v2 0/2] netfilter: nf_tables: make sets built-in,
Florian Westphal
[PATCH nft] src: initial extended netlink error reporting, Pablo Neira Ayuso
[PATCH][next] netfilter: ebtables: Replace zero-length array with flexible-array member, Gustavo A. R. Silva
Strange nf_conntrack_tcp_timeout_established behavior,
FUSTE Emmanuel
[iptables PATCH] nft: Drop pointless assignment,
Phil Sutter
[PATCH nf-next 0/2] netfilter: nf_tables: make sets built-in,
Florian Westphal
[PATCH] netfilter: ipset: Pass lockdep expression to RCU lists,
Amol Grover
0x14: Schedule out!, Jamal Hadi Salim
[PATCH AUTOSEL 5.5 126/542] netfilter: flowtable: Fix hardware flush order on nf_flow_table_cleanup, Sasha Levin
[PATCH AUTOSEL 5.5 125/542] netfilter: flowtable: Fix missing flush hardware on table free, Sasha Levin
[PATCH AUTOSEL 5.5 220/542] netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy, Sasha Levin
[PATCH AUTOSEL 5.5 386/542] netfilter: flowtable: restrict flow dissector match on meta ingress device, Sasha Levin
[PATCH AUTOSEL 5.4 193/459] netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy, Sasha Levin
[libnftnl PATCH] src: Fix nftnl_assert() on data_len,
Phil Sutter
[PATCH nf-next 0/2] Two non-functional fixes for nft_set_pipapo,
Stefano Brivio
[PATCH AUTOSEL 4.19 100/252] netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy, Sasha Levin
[PATCH nft v5] tests: Introduce test for set with concatenated ranges,
Stefano Brivio
[iptables PATCH] ebtables: among: Support mixed MAC and MAC/IP entries,
Phil Sutter
Thank you for your fundamental work!, Max Mehl
Proposing to add a structure to UserData,
sbezverk
[iptables PATCH] xtables-translate: Fix for iface++,
Phil Sutter
[PATCH nft] scanner: use list_is_first() from scanner_pop_indesc(), Pablo Neira Ayuso
[PATCH nft] src: maps: update data expression dtype based on set,
Florian Westphal
[PATCH nft] tests: shell: validate error reporting with include and glob, Pablo Neira Ayuso
[Patch nf] netfilter: xt_hashlimit: unregister proc file before releasing mutex,
Cong Wang
[iptables PATCH] tests: shell: Fix skip checks with --host mode, Phil Sutter
[PATCH nft 0/4] glob and maximum number of includes,
Pablo Neira Ayuso
[PATCH v4 net 0/5] icmp: account for NAT when sending icmps from ndo layer,
Jason A. Donenfeld
[iptables PATCH] xtables-restore: fix for --noflush and empty lines,
Phil Sutter
[PATCH v3 net 0/9] icmp: account for NAT when sending icmps from ndo layer, Jason A. Donenfeld
WARNING: proc registration bug in hashlimit_mt_check_common,
syzbot
[PATCH v2 net 0/5] icmp: account for NAT when sending icmps from ndo layer, Jason A. Donenfeld
[iptables PATCH v2] xtables-translate: Fix for interface name corner-cases,
Phil Sutter
[nft PATCH v2 1/2] doc: nft.8: Mention wildcard interface matching,
Phil Sutter
[PATCH nft include v2 0/7] Improve include behaviour,
Laurent Fasnacht
[PATCH next] nf_tables: make the symbol 'nft_pipapo_get' static,
Chen Wandun
[PATCHv2 nf-next] netfilter: nft_tunnel: add support for geneve opts,
Xin Long
[PATCH net 1/5] icmp: introduce helper for NAT'd source address in ndo context,
Jason A. Donenfeld
[PATCH libnetfilter_queue] build: doc: "make" builds & installs a full set of man pages,
Duncan Roe
[PATCH nft] src: compute mnemonic port name much easier,
Jan Engelhardt
[nft PATCH] doc: nft.8: Describe element commands in their own section,
Phil Sutter
[iptables PATCH] xtables-translate: Fix for interface name corner-cases,
Phil Sutter
[nft PATCH 1/2] doc: nft.8: Mention wildcard interface matching,
Phil Sutter
How to continue to use Maxmind geoip csv in xtables-addons 3.8+,
jean-christophe manciot
[PATCH] [nf-next,v4] netfilter: xtables: Add snapshot of hardidletimer target,
Manoj Basapathi
Xtalbes -> Xtables ?,
Franta Hanzlík
[nft PATCH 0/4] Extend testsuites to run against installed binaries,
Phil Sutter
masquerade,
Serguei Bezverkhi (sbezverk)
[PATCH nft 0/3] scanner: improving include handling,
Laurent Fasnacht
[PATCH] [nf-next v3] netfilter: xtables: Add snapshot of hardidletimer target,
Manoj Basapathi
[PATCH iptables] extensions: time: add translation and tests,
Jose M. Guisado Gomez
[PATCH nft] tests: shell: add test for glob includes, Laurent Fasnacht
[PATCH libnetfilter_queue 0/1] src: Add nfq_hdr_put to library,
Duncan Roe
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]
