Linux Netfilter / IP Tables Devel

• Date Index

• Re: [iptables PATCH] ebtables: among: Support mixed MAC and MAC/IP entries, (continued)
  • Re: [iptables PATCH] ebtables: among: Support mixed MAC and MAC/IP entries, Phil Sutter
• Thank you for your fundamental work!, Max Mehl
• Proposing to add a structure to UserData, sbezverk
  • Re: Proposing to add a structure to UserData, Florian Westphal
    • Re: Proposing to add a structure to UserData, sbezverk
      • Re: Proposing to add a structure to UserData, Phil Sutter
• [iptables PATCH] xtables-translate: Fix for iface++, Phil Sutter
  • Re: [iptables PATCH] xtables-translate: Fix for iface++, Pablo Neira Ayuso
    • Re: [iptables PATCH] xtables-translate: Fix for iface++, Phil Sutter
• [PATCH nft] scanner: use list_is_first() from scanner_pop_indesc(), Pablo Neira Ayuso
• [PATCH nft] src: maps: update data expression dtype based on set, Florian Westphal
  • Re: [PATCH nft] src: maps: update data expression dtype based on set, Pablo Neira Ayuso
• [PATCH nft] tests: shell: validate error reporting with include and glob, Pablo Neira Ayuso
• [Patch nf] netfilter: xt_hashlimit: unregister proc file before releasing mutex, Cong Wang
  • Re: [Patch nf] netfilter: xt_hashlimit: unregister proc file before releasing mutex, Pablo Neira Ayuso
    • Re: [Patch nf] netfilter: xt_hashlimit: unregister proc file before releasing mutex, Cong Wang
      • Re: [Patch nf] netfilter: xt_hashlimit: unregister proc file before releasing mutex, Pablo Neira Ayuso
        • Re: [Patch nf] netfilter: xt_hashlimit: unregister proc file before releasing mutex, Cong Wang
          • Re: [Patch nf] netfilter: xt_hashlimit: unregister proc file before releasing mutex, Pablo Neira Ayuso
            • Re: [Patch nf] netfilter: xt_hashlimit: unregister proc file before releasing mutex, Pablo Neira Ayuso
• [iptables PATCH] tests: shell: Fix skip checks with --host mode, Phil Sutter
• [PATCH nft 0/4] glob and maximum number of includes, Pablo Neira Ayuso
  • [PATCH nft 1/4] scanner: call scanner_push_file() after scanner_push_file(), Pablo Neira Ayuso
  • [PATCH nft 2/4] scanner: add indesc_file_alloc() helper function, Pablo Neira Ayuso
  • [PATCH nft 3/4] scanner: call scanner_push_indesc() after scanner_push_file(), Pablo Neira Ayuso
  • [PATCH nft 4/4] scanner: multi-level input file stack for glob, Pablo Neira Ayuso
  • Re: [PATCH nft 0/4] glob and maximum number of includes, Pablo Neira Ayuso
• [PATCH v4 net 0/5] icmp: account for NAT when sending icmps from ndo layer, Jason A. Donenfeld
  • Re: [PATCH v4 net 0/5] icmp: account for NAT when sending icmps from ndo layer, David Miller
• [iptables PATCH] xtables-restore: fix for --noflush and empty lines, Phil Sutter
  • Re: [iptables PATCH] xtables-restore: fix for --noflush and empty lines, Arturo Borrero Gonzalez
• [PATCH v3 net 0/9] icmp: account for NAT when sending icmps from ndo layer, Jason A. Donenfeld
• WARNING: proc registration bug in hashlimit_mt_check_common, syzbot
  • Re: WARNING: proc registration bug in hashlimit_mt_check_common, Cong Wang
• [PATCH v2 net 0/5] icmp: account for NAT when sending icmps from ndo layer, Jason A. Donenfeld
• [iptables PATCH v2] xtables-translate: Fix for interface name corner-cases, Phil Sutter
  • Re: [iptables PATCH v2] xtables-translate: Fix for interface name corner-cases, Pablo Neira Ayuso
• [nft PATCH v2 1/2] doc: nft.8: Mention wildcard interface matching, Phil Sutter
  • [nft PATCH v2 2/2] scanner: Extend asteriskstring definition, Phil Sutter
    • Re: [nft PATCH v2 2/2] scanner: Extend asteriskstring definition, Pablo Neira Ayuso
  • Re: [nft PATCH v2 1/2] doc: nft.8: Mention wildcard interface matching, Pablo Neira Ayuso
• [PATCH nft include v2 0/7] Improve include behaviour, Laurent Fasnacht
  • [PATCH nft include v2 2/7] scanner: move the file descriptor to be in the input_descriptor structure, Laurent Fasnacht
    • Re: [PATCH nft include v2 2/7] scanner: move the file descriptor to be in the input_descriptor structure, Pablo Neira Ayuso
  • [PATCH nft include v2 1/7] tests: shell: add test for glob includes, Laurent Fasnacht
    • Re: [PATCH nft include v2 1/7] tests: shell: add test for glob includes, Pablo Neira Ayuso
  • [PATCH nft include v2 3/7] scanner: move indesc list append in scanner_push_indesc, Laurent Fasnacht
    • Re: [PATCH nft include v2 3/7] scanner: move indesc list append in scanner_push_indesc, Pablo Neira Ayuso
  • [PATCH nft include v2 4/7] scanner: remove parser_state->indescs static array, Laurent Fasnacht
    • Re: [PATCH nft include v2 4/7] scanner: remove parser_state->indescs static array, Pablo Neira Ayuso
      • Re: [PATCH nft include v2 4/7] scanner: remove parser_state->indescs static array, Laurent Fasnacht
    • Re: [PATCH nft include v2 4/7] scanner: remove parser_state->indescs static array, Pablo Neira Ayuso
  • [PATCH nft include v2 6/7] scanner: fix indesc_list stack to be in the correct order, Laurent Fasnacht
    • Re: [PATCH nft include v2 6/7] scanner: fix indesc_list stack to be in the correct order, Pablo Neira Ayuso
      • Re: [PATCH nft include v2 6/7] scanner: fix indesc_list stack to be in the correct order, Laurent Fasnacht
  • [PATCH nft include v2 5/7] scanner: correctly compute include depth, Laurent Fasnacht
  • [PATCH nft include v2 7/7] scanner: remove parser_state->indesc_idx, Laurent Fasnacht
    • Re: [PATCH nft include v2 7/7] scanner: remove parser_state->indesc_idx, Pablo Neira Ayuso
      • Re: [PATCH nft include v2 7/7] scanner: remove parser_state->indesc_idx, Laurent Fasnacht
• [PATCH next] nf_tables: make the symbol 'nft_pipapo_get' static, Chen Wandun
  • Re: [PATCH next] nf_tables: make the symbol 'nft_pipapo_get' static, Stefano Brivio
• [PATCHv2 nf-next] netfilter: nft_tunnel: add support for geneve opts, Xin Long
  • Re: [PATCHv2 nf-next] netfilter: nft_tunnel: add support for geneve opts, Pablo Neira Ayuso
• [PATCH net 1/5] icmp: introduce helper for NAT'd source address in ndo context, Jason A. Donenfeld
  • [PATCH net 2/5] gtp: use icmp_ndo_send helper, Jason A. Donenfeld
  • [PATCH net 3/5] sunvnet: use icmp_ndo_send helper, Jason A. Donenfeld
    • Re: [PATCH net 3/5] sunvnet: use icmp_ndo_send helper, David Miller
      • Re: [PATCH net 3/5] sunvnet: use icmp_ndo_send helper, Jason A. Donenfeld
  • [PATCH net 4/5] wireguard: use icmp_ndo_send helper, Jason A. Donenfeld
  • [PATCH net 5/5] xfrm: interface: use icmp_ndo_send helper, Jason A. Donenfeld
  • Re: [PATCH net 1/5] icmp: introduce helper for NAT'd source address in ndo context, Florian Westphal
    • Re: [PATCH net 1/5] icmp: introduce helper for NAT'd source address in ndo context, Jason A. Donenfeld
• [PATCH libnetfilter_queue] build: doc: "make" builds & installs a full set of man pages, Duncan Roe
  • Re: [PATCH libnetfilter_queue] build: doc: "make" builds & installs a full set of man pages, Pablo Neira Ayuso
    • Re: [PATCH libnetfilter_queue] build: doc: "make" builds & installs a full set of man pages, Florian Westphal
      • Re: [PATCH libnetfilter_queue] build: doc: "make" builds & installs a full set of man pages, Pablo Neira Ayuso
        • Re: [PATCH libnetfilter_queue] build: doc: "make" builds & installs a full set of man pages, Florian Westphal
          • Re: [PATCH libnetfilter_queue] build: doc: "make" builds & installs a full set of man pages, Pablo Neira Ayuso
• [PATCH nft] src: compute mnemonic port name much easier, Jan Engelhardt
  • Re: [PATCH nft] src: compute mnemonic port name much easier, Pablo Neira Ayuso
• [nft PATCH] doc: nft.8: Describe element commands in their own section, Phil Sutter
  • Re: [nft PATCH] doc: nft.8: Describe element commands in their own section, Pablo Neira Ayuso
• [iptables PATCH] xtables-translate: Fix for interface name corner-cases, Phil Sutter
  • Re: [iptables PATCH] xtables-translate: Fix for interface name corner-cases, Pablo Neira Ayuso
• [nft PATCH 1/2] doc: nft.8: Mention wildcard interface matching, Phil Sutter
  • [nft PATCH 2/2] scanner: Extend asteriskstring definition, Phil Sutter
    • Re: [nft PATCH 2/2] scanner: Extend asteriskstring definition, Pablo Neira Ayuso
      • Re: [nft PATCH 2/2] scanner: Extend asteriskstring definition, Phil Sutter
        • Re: [nft PATCH 2/2] scanner: Extend asteriskstring definition, Pablo Neira Ayuso
          • Re: [nft PATCH 2/2] scanner: Extend asteriskstring definition, Phil Sutter
• How to continue to use Maxmind geoip csv in xtables-addons 3.8+, jean-christophe manciot
  • Re: How to continue to use Maxmind geoip csv in xtables-addons 3.8+, Jan Engelhardt
• [PATCH] [nf-next,v4] netfilter: xtables: Add snapshot of hardidletimer target, Manoj Basapathi
  • Re: [PATCH] [nf-next,v4] netfilter: xtables: Add snapshot of hardidletimer target, Pablo Neira Ayuso
• Xtalbes -> Xtables ?, Franta Hanzlík
  • Re: Xtalbes -> Xtables ?, Jan Engelhardt
• [nft PATCH 0/4] Extend testsuites to run against installed binaries, Phil Sutter
  • [nft PATCH 1/4] tests: json_echo: Fix for Python3, Phil Sutter
  • [nft PATCH 4/4] tests: py: Support testing host binaries, Phil Sutter
  • [nft PATCH 2/4] tests: json_echo: Support testing host binaries, Phil Sutter
  • [nft PATCH 3/4] tests: monitor: Support testing host's nft binary, Phil Sutter
  • Re: [nft PATCH 0/4] Extend testsuites to run against installed binaries, Pablo Neira Ayuso
• masquerade, Serguei Bezverkhi (sbezverk)
  • Re: masquerade, Florian Westphal
• [PATCH nft 0/3] scanner: improving include handling, Laurent Fasnacht
  • [PATCH nft 1/3] scanner: move the file descriptor to be in the input_descriptor structure, Laurent Fasnacht
    • Re: [PATCH nft 1/3] scanner: move the file descriptor to be in the input_descriptor structure, Pablo Neira Ayuso
  • [PATCH nft 2/3] scanner: correctly compute include depth, Laurent Fasnacht
    • Re: [PATCH nft 2/3] scanner: correctly compute include depth, Pablo Neira Ayuso
  • [PATCH nft 3/3] scanner: remove indescs and indescs_idx attributes from the parser, and directly use indesc_list, Laurent Fasnacht
    • Re: [PATCH nft 3/3] scanner: remove indescs and indescs_idx attributes from the parser, and directly use indesc_list, Pablo Neira Ayuso
  • Re: [PATCH nft 0/3] scanner: improving include handling, Pablo Neira Ayuso
• [PATCH] [nf-next v3] netfilter: xtables: Add snapshot of hardidletimer target, Manoj Basapathi
  • Re: [PATCH] [nf-next v3] netfilter: xtables: Add snapshot of hardidletimer target, kbuild test robot
  • Re: [PATCH] [nf-next v3] netfilter: xtables: Add snapshot of hardidletimer target, Florian Westphal
  • Re: [PATCH] [nf-next v3] netfilter: xtables: Add snapshot of hardidletimer target, kbuild test robot
• [PATCH iptables] extensions: time: add translation and tests, Jose M. Guisado Gomez
  • Re: [PATCH iptables] extensions: time: add translation and tests, Florian Westphal
• [PATCH nft] tests: shell: add test for glob includes, Laurent Fasnacht
• [PATCH libnetfilter_queue 0/1] src: Add nfq_hdr_put to library, Duncan Roe
  • [PATCH libnetfilter_queue 1/1] src: move static nfq_hdr_put from examples/nf-queue.c into the library since everyone is going to want it., Duncan Roe
    • Re: [PATCH libnetfilter_queue 1/1] src: move static nfq_hdr_put from examples/nf-queue.c into the library since everyone is going to want it., Pablo Neira Ayuso
      • [PATCH libnetfilter_queue v2] src: move static nfq_hdr_put from examples/nf-queue.c into the library since everyone is going to want it., Duncan Roe
        • [PATCH libnetfilter_queue v3] src: move static nfq_hdr_put from examples/nf-queue.c into the library since everyone is going to want it., Duncan Roe
          • Re: [PATCH libnetfilter_queue v3] src: move static nfq_hdr_put from examples/nf-queue.c into the library since everyone is going to want it., Pablo Neira Ayuso
• [PATCH nf 0/4] netfilter: conntrack: allow insertion of clashing entries, Florian Westphal
  • [PATCH nf 2/4] netfilter: conntrack: place confirm-bit setting in a helper, Florian Westphal
  • [PATCH nf 3/4] netfilter: conntrack: split resolve_clash function, Florian Westphal
  • [PATCH nf 4/4] netfilter: conntrack: allow insertion of clashing entries, Florian Westphal
  • [PATCH nf 1/4] netfilter: conntrack: remove two args from resolve_clash, Florian Westphal
  • Re: [PATCH nf 0/4] netfilter: conntrack: allow insertion of clashing entries, Pablo Neira Ayuso
    • Re: [PATCH nf 0/4] netfilter: conntrack: allow insertion of clashing entries, Florian Westphal
• invalid read in, dyslexicatheist
  • Re: invalid read in, Phil Sutter
    • Re: invalid read in, dyslexicatheist
      • Re: invalid read in, Phil Sutter
        • Re: invalid read in, dyslexicatheist
• [PATCH nf] netfilter: flowtable: always init block_offload struct, Florian Westphal
  • Re: [PATCH nf] netfilter: flowtable: always init block_offload struct, Pablo Neira Ayuso
• [PATCH nft v4 0/6] Remaining bitwise-shift-related changes, Jeremy Sowden
  • [PATCH nft v4 1/6] parser: add parenthesized statement expressions., Jeremy Sowden
  • [PATCH nft v4 2/6] evaluate: correct variable name., Jeremy Sowden
  • [PATCH nft v4 5/6] tests: py: add missing JSON output., Jeremy Sowden
  • [PATCH nft v4 4/6] tests: shell: add bit-shift tests., Jeremy Sowden
  • [PATCH nft v4 3/6] evaluate: change shift byte-order to host-endian., Jeremy Sowden
  • [PATCH nft v4 6/6] tests: py: add bit-shift tests., Jeremy Sowden
  • Re: [PATCH nft v4 0/6] Remaining bitwise-shift-related changes, Pablo Neira Ayuso
• [Patch nf v2 0/3] netfilter: xt_hashlimit: a few improvements, Cong Wang
  • [Patch nf v2 1/3] xt_hashlimit: avoid OOM for user-controlled vmalloc, Cong Wang
    • Re: [Patch nf v2 1/3] xt_hashlimit: avoid OOM for user-controlled vmalloc, Florian Westphal
      • Re: [Patch nf v2 1/3] xt_hashlimit: avoid OOM for user-controlled vmalloc, Cong Wang
        • Re: [Patch nf v2 1/3] xt_hashlimit: avoid OOM for user-controlled vmalloc, Florian Westphal
    • Re: [Patch nf v2 1/3] xt_hashlimit: avoid OOM for user-controlled vmalloc, Pablo Neira Ayuso
  • [Patch nf v2 2/3] xt_hashlimit: reduce hashlimit_mutex scope for htable_put(), Cong Wang
    • Re: [Patch nf v2 2/3] xt_hashlimit: reduce hashlimit_mutex scope for htable_put(), Pablo Neira Ayuso
  • [Patch nf v2 3/3] xt_hashlimit: limit the max size of hashtable, Cong Wang
    • Re: [Patch nf v2 3/3] xt_hashlimit: limit the max size of hashtable, Florian Westphal
    • Re: [Patch nf v2 3/3] xt_hashlimit: limit the max size of hashtable, Pablo Neira Ayuso
• NFT - delete rules per interface, Daniel
  • Re: NFT - delete rules per interface, Florian Westphal
    • Re: NFT - delete rules per interface, Daniel
• Ipset combined entry type like hash:ip,port,ip,port, Adam Kalisz
• [Patch nf 0/3] netfilter: xt_hashlimit: a few improvements, Cong Wang
  • [Patch nf 3/3] xt_hashlimit: limit the max size of hashtable, Cong Wang
    • Re: [Patch nf 3/3] xt_hashlimit: limit the max size of hashtable, Florian Westphal
      • Re: [Patch nf 3/3] xt_hashlimit: limit the max size of hashtable, Cong Wang
        • Re: [Patch nf 3/3] xt_hashlimit: limit the max size of hashtable, Florian Westphal
          • Re: [Patch nf 3/3] xt_hashlimit: limit the max size of hashtable, Cong Wang
            • Re: [Patch nf 3/3] xt_hashlimit: limit the max size of hashtable, Florian Westphal
              • Re: [Patch nf 3/3] xt_hashlimit: limit the max size of hashtable, Cong Wang
                • Re: [Patch nf 3/3] xt_hashlimit: limit the max size of hashtable, Florian Westphal
  • [Patch nf 1/3] xt_hashlimit: avoid OOM for user-controlled vmalloc, Cong Wang
    • Re: [Patch nf 1/3] xt_hashlimit: avoid OOM for user-controlled vmalloc, Florian Westphal
      • Re: [Patch nf 1/3] xt_hashlimit: avoid OOM for user-controlled vmalloc, Cong Wang
  • [Patch nf 2/3] xt_hashlimit: reduce hashlimit_mutex scope for htable_put(), Cong Wang
    • Re: [Patch nf 2/3] xt_hashlimit: reduce hashlimit_mutex scope for htable_put(), Florian Westphal
• [MAINTENANCE] migrating git.netfilter.org, Pablo Neira Ayuso
  • Re: [MAINTENANCE] migrating git.netfilter.org, José M. Guisado
    • Re: [MAINTENANCE] migrating git.netfilter.org, Florian Westphal
    • Re: [MAINTENANCE] migrating git.netfilter.org, Pablo Neira Ayuso
• Re: [PATCH net] netfilter: nf_flowtable: fix documentation, Matteo Croce
• Proxy load balancer rules, Serguei Bezverkhi (sbezverk)
  • Re: Proxy load balancer rules, Phil Sutter
    • Re: Proxy load balancer rules, Florian Westphal
      • Re: Proxy load balancer rules, Phil Sutter
• [PATCH nf-next] netfilter: flowtable: Use nf_flow_offload_tuple for stats as well, Paul Blakey
  • Re: [PATCH nf-next] netfilter: flowtable: Use nf_flow_offload_tuple for stats as well, Pablo Neira Ayuso
• [PATCH 0/3] Various fixes for flowtable hardware offload, Paul Blakey
  • [PATCH 1/3] netfilter: flowtable: Fix hardware flush order on nf_flow_table_cleanup, Paul Blakey
  • [PATCH 3/3] netfilter: flowtable: Fix setting forgotten NF_FLOW_HW_DEAD flag, Paul Blakey
  • [PATCH 2/3] netfilter: flowtable: Fix missing flush hardware on table free, Paul Blakey
  • Re: [PATCH 0/3] Various fixes for flowtable hardware offload, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: xtables: Add snapshot of hardidletimer target, Subash Abhinov Kasiviswanathan
  • Re: [PATCH nf-next] netfilter: xtables: Add snapshot of hardidletimer target, Florian Westphal
• [PATCH nft v4 0/4] Introduce support for concatenated ranges, Stefano Brivio
  • [PATCH nft v4 1/4] include: resync nf_tables.h cache copy, Stefano Brivio
    • Re: [PATCH nft v4 1/4] include: resync nf_tables.h cache copy, Pablo Neira Ayuso
  • [PATCH nft v4 2/4] src: Add support for NFTNL_SET_DESC_CONCAT, Stefano Brivio
    • Re: [PATCH nft v4 2/4] src: Add support for NFTNL_SET_DESC_CONCAT, Pablo Neira Ayuso
  • [PATCH nft v4 3/4] src: Add support for concatenated set ranges, Stefano Brivio
    • Re: [PATCH nft v4 3/4] src: Add support for concatenated set ranges, Pablo Neira Ayuso
      • Re: [PATCH nft v4 3/4] src: Add support for concatenated set ranges, Stefano Brivio
    • Re: [PATCH nft v4 3/4] src: Add support for concatenated set ranges, Pablo Neira Ayuso
      • Re: [PATCH nft v4 3/4] src: Add support for concatenated set ranges, Stefano Brivio
  • [PATCH nft v4 4/4] tests: Introduce test for set with concatenated ranges, Stefano Brivio
    • Re: [PATCH nft v4 4/4] tests: Introduce test for set with concatenated ranges, Phil Sutter
    • Re: [PATCH nft v4 4/4] tests: Introduce test for set with concatenated ranges, Pablo Neira Ayuso
      • Re: [PATCH nft v4 4/4] tests: Introduce test for set with concatenated ranges, Stefano Brivio
        • Re: [PATCH nft v4 4/4] tests: Introduce test for set with concatenated ranges, Phil Sutter
        • Re: [PATCH nft v4 4/4] tests: Introduce test for set with concatenated ranges, Florian Westphal
          • Re: [PATCH nft v4 4/4] tests: Introduce test for set with concatenated ranges, Stefano Brivio
• [PATCH libnftnl v4 0/3] Attributes for concatenated ranges, Stefano Brivio
  • [PATCH libnftnl v4 2/3] set: Add support for NFTA_SET_DESC_CONCAT attributes, Stefano Brivio
  • [PATCH libnftnl v4 1/3] include: resync nf_tables.h cache copy, Stefano Brivio
  • [PATCH libnftnl v4 3/3] set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END, Stefano Brivio
  • Re: [PATCH libnftnl v4 0/3] Attributes for concatenated ranges, Pablo Neira Ayuso
• [PATCH v2] Documentation: changes.rst: update several outdated project URLs, Randy Dunlap
  • Re: [PATCH v2] Documentation: changes.rst: update several outdated project URLs, Jonathan Corbet
• use of netfilter-announce list, Thomas Jarosch
• [PATCH nf-next V2] netfilter: ctnetlink: add kernel side filtering for dump, Romain Bellan
  • Re: [PATCH nf-next V2] netfilter: ctnetlink: add kernel side filtering for dump, Florent Fourcot
  • Re: [PATCH nf-next V2] netfilter: ctnetlink: add kernel side filtering for dump, Pablo Neira Ayuso
• [PATCH libnftnl 1/2] Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API, Romain Bellan
  • [PATCH libnftnl 2/2] utils: add NFCT_FILTER_DUMP_TUPLE example, Romain Bellan
• [PATCH] netfilter: Use kvcalloc, Joe Perches
  • Re: [PATCH] netfilter: Use kvcalloc, Pablo Neira Ayuso
• Re: [netfilter-core] INFO: rcu detected stall in hash_ip4_gc, Kadlecsik József
  • <Possible follow-ups>
  • Re: [netfilter-core] INFO: rcu detected stall in hash_ip4_gc, Kadlecsik József
• INFO: rcu detected stall in hash_ip4_gc, syzbot
• general protection fault in ip_set_comment_free, syzbot
• [PATCH 1/1] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Kadlecsik József
  • Re: [PATCH 1/1] netfilter: ipset: fix suspicious RCU usage in find_set_and_id, Pablo Neira Ayuso
• INFO: rcu detected stall in ip_set_udel, syzbot
  • Re: INFO: rcu detected stall in ip_set_udel, syzbot
• KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy, syzbot
• INFO: rcu detected stall in ip_set_uadd, syzbot
• [PATCH AUTOSEL 5.4 060/107] netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct, Sasha Levin
• [PATCH AUTOSEL 5.4 059/107] netfilter: fix a use-after-free in mtype_destroy(), Sasha Levin
• [PATCH AUTOSEL 5.4 090/107] netfilter: nf_tables: store transaction list locally while requesting module, Sasha Levin
• [PATCH AUTOSEL 5.4 092/107] netfilter: nft_tunnel: ERSPAN_VERSION must not be null, Sasha Levin
• [PATCH AUTOSEL 5.4 094/107] netfilter: nf_tables: fix flowtable list del corruption, Sasha Levin
• [PATCH AUTOSEL 5.4 091/107] netfilter: nft_tunnel: fix null-attribute check, Sasha Levin
• [PATCH AUTOSEL 5.4 093/107] netfilter: nf_tables: remove WARN and add NLA_STRING upper limits, Sasha Levin
• [PATCH AUTOSEL 5.4 095/107] netfilter: nat: fix ICMP header corruption on ICMP errors, Sasha Levin
• [PATCH AUTOSEL 4.19 29/56] netfilter: fix a use-after-free in mtype_destroy(), Sasha Levin
• [PATCH AUTOSEL 4.19 30/56] netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct, Sasha Levin
• [PATCH AUTOSEL 4.19 48/56] netfilter: nf_tables: store transaction list locally while requesting module, Sasha Levin
• [PATCH AUTOSEL 4.19 49/56] netfilter: nft_tunnel: fix null-attribute check, Sasha Levin
• [PATCH AUTOSEL 4.19 52/56] netfilter: nf_tables: fix flowtable list del corruption, Sasha Levin
• [PATCH AUTOSEL 4.19 51/56] netfilter: nf_tables: remove WARN and add NLA_STRING upper limits, Sasha Levin
• [PATCH AUTOSEL 4.14 14/32] netfilter: fix a use-after-free in mtype_destroy(), Sasha Levin
• [PATCH AUTOSEL 4.14 15/32] netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct, Sasha Levin
• [PATCH AUTOSEL 4.9 11/18] netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct, Sasha Levin
• [PATCH AUTOSEL 4.9 10/18] netfilter: fix a use-after-free in mtype_destroy(), Sasha Levin
• [PATCH AUTOSEL 4.4 5/9] netfilter: fix a use-after-free in mtype_destroy(), Sasha Levin
• [PATCH AUTOSEL 4.19 50/56] netfilter: nft_tunnel: ERSPAN_VERSION must not be null, Sasha Levin
• KASAN: slab-out-of-bounds Read in bitmap_port_destroy, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_port_destroy, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_port_destroy, syzbot
  • <Possible follow-ups>
  • Re: KASAN: slab-out-of-bounds Read in bitmap_port_destroy, Dan Carpenter
• [PATCH] Documentation: changes.rst: update several outdated project URLs, Randy Dunlap
  • Re: [PATCH] Documentation: changes.rst: update several outdated project URLs, Darrick J. Wong
    • Re: [PATCH] Documentation: changes.rst: update several outdated project URLs, Randy Dunlap
  • Re: [PATCH] Documentation: changes.rst: update several outdated project URLs, Theodore Y. Ts'o
    • Re: [PATCH] Documentation: changes.rst: update several outdated project URLs, Randy Dunlap
      • Re: [PATCH] Documentation: changes.rst: update several outdated project URLs, Theodore Y. Ts'o
• [nft PATCH 0/4] Covscan-induced review of ei_insert(), Phil Sutter
  • [nft PATCH 2/4] segtree: Drop dead code in ei_insert(), Phil Sutter
    • Re: [nft PATCH 2/4] segtree: Drop dead code in ei_insert(), Pablo Neira Ayuso
  • [nft PATCH 3/4] segtree: Simplify overlap case in ei_insert(), Phil Sutter
    • Re: [nft PATCH 3/4] segtree: Simplify overlap case in ei_insert(), Pablo Neira Ayuso
  • [nft PATCH 1/4] segtree: Drop needless insertion in ei_insert(), Phil Sutter
    • Re: [nft PATCH 1/4] segtree: Drop needless insertion in ei_insert(), Pablo Neira Ayuso
  • [nft PATCH 4/4] segtree: Refactor ei_insert(), Phil Sutter
    • Re: [nft PATCH 4/4] segtree: Refactor ei_insert(), Pablo Neira Ayuso
      • Re: [nft PATCH 4/4] segtree: Refactor ei_insert(), Phil Sutter
        • Re: [nft PATCH 4/4] segtree: Refactor ei_insert(), Pablo Neira Ayuso
          • Re: [nft PATCH 4/4] segtree: Refactor ei_insert(), Phil Sutter
• [PATCH nf,v3] netfilter: nf_tables: autoload modules from the abort path, Pablo Neira Ayuso
• [PATCH 4/4] xt_mttg_seq_next should increase position index, Vasily Averin
• [PATCH 3/4] recent_seq_next should increase position index, Vasily Averin
• [PATCH 2/4] synproxy_cpu_seq_next should increase position index, Vasily Averin
• [PATCH 0/4] netfilter: seq_file .next functions should increase position index, Vasily Averin
  • [PATCH v2 0/4] netfilter: seq_file .next functions should increase position index, Vasily Averin
    • Re: [PATCH v2 0/4] netfilter: seq_file .next functions should increase position index, Pablo Neira Ayuso
  • [PATCH v2 1/4] ct_cpu_seq_next should increase position index, Vasily Averin
  • [PATCH v2 2/4] synproxy_cpu_seq_next should increase position index, Vasily Averin
  • [PATCH v2 3/4] recent_seq_next should increase position index, Vasily Averin
  • [PATCH v2 4/4] xt_mttg_seq_next should increase position index, Vasily Averin
• [PATCH 1/4] ct_cpu_seq_next should increase position index, Vasily Averin
• [PATCH nf] Revert "netfilter: unlock xt_table earlier in __do_replace", Sean Tranchetti
  • Re: [PATCH nf] Revert "netfilter: unlock xt_table earlier in __do_replace", Florian Westphal
    • Re: [PATCH nf] Revert "netfilter: unlock xt_table earlier in __do_replace", stranche
    • Re: [PATCH nf] Revert "netfilter: unlock xt_table earlier in __do_replace", Xin Long
• [PATCH] ipvs: fix spelling mistake "to" -> "too", Colin King
• [PATCH nft 1/2] tests: shell: set lookup and set update, Pablo Neira Ayuso
  • [PATCH nft 2/2] tests: shell: update list of rmmod modules, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: autoload modules from the abort path, Pablo Neira Ayuso
  • Re: [PATCH nf,v2] netfilter: nf_tables: autoload modules from the abort path, Florian Westphal
    • Re: [PATCH nf,v2] netfilter: nf_tables: autoload modules from the abort path, Pablo Neira Ayuso
      • Re: [PATCH nf,v2] netfilter: nf_tables: autoload modules from the abort path, Pablo Neira Ayuso
      • Re: [PATCH nf,v2] netfilter: nf_tables: autoload modules from the abort path, Florian Westphal
• [PATCH nf] netfilter: nf_tables: autoload modules from the abort path, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: add __nft_chain_type_get(), Pablo Neira Ayuso
• [PATCH nf-next v4 0/9] nftables: Set implementation for arbitrary concatenation of ranges, Stefano Brivio
  • [PATCH nf-next v4 1/9] netfilter: nf_tables: add nft_setelem_parse_key(), Stefano Brivio
  • [PATCH nf-next v4 2/9] netfilter: nf_tables: add NFTA_SET_ELEM_KEY_END attribute, Stefano Brivio
  • [PATCH nf-next v4 3/9] netfilter: nf_tables: Support for sets with multiple ranged fields, Stefano Brivio
  • [PATCH nf-next v4 4/9] bitmap: Introduce bitmap_cut(): cut bits and shift remaining, Stefano Brivio
  • [PATCH nf-next v4 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
    • Re: [PATCH nf-next v4 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, Pablo Neira Ayuso
      • Re: [PATCH nf-next v4 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
        • Re: [PATCH nf-next v4 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, Pablo Neira Ayuso
          • Re: [PATCH nf-next v4 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
            • Re: [PATCH nf-next v4 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, Pablo Neira Ayuso
              • Re: [PATCH nf-next v4 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
  • [PATCH nf-next v4 7/9] nft_set_pipapo: Prepare for vectorised implementation: alignment, Stefano Brivio
  • [PATCH nf-next v4 6/9] selftests: netfilter: Introduce tests for sets with range concatenation, Stefano Brivio
  • [PATCH nf-next v4 8/9] nft_set_pipapo: Prepare for vectorised implementation: helpers, Stefano Brivio
  • [PATCH nf-next v4 9/9] nft_set_pipapo: Introduce AVX2-based lookup implementation, Stefano Brivio
    • Re: [PATCH nf-next v4 9/9] nft_set_pipapo: Introduce AVX2-based lookup implementation, kbuild test robot
  • Re: [PATCH nf-next v4 0/9] nftables: Set implementation for arbitrary concatenation of ranges, Pablo Neira Ayuso
  • Re: [PATCH nf-next v4 0/9] nftables: Set implementation for arbitrary concatenation of ranges, Phil Sutter
    • Re: [PATCH nf-next v4 0/9] nftables: Set implementation for arbitrary concatenation of ranges, Stefano Brivio
• WARNING: suspicious RCU usage in find_set_and_id, syzbot
• general protection fault in __nf_tables_chain_type_lookup, syzbot
• Update on UAF in ip6_do_table on 4.19.X kernel, stranche
• [nft PATCH 0/4] Fixes for a recent covscan run, Phil Sutter
  • [nft PATCH 2/4] netlink: Fix leaks in netlink_parse_cmp(), Phil Sutter
    • Re: [nft PATCH 2/4] netlink: Fix leaks in netlink_parse_cmp(), Pablo Neira Ayuso
  • [nft PATCH 4/4] netlink: Avoid potential NULL-pointer deref in netlink_gen_payload_stmt(), Phil Sutter
    • Re: [nft PATCH 4/4] netlink: Avoid potential NULL-pointer deref in netlink_gen_payload_stmt(), Pablo Neira Ayuso
  • [nft PATCH 1/4] netlink: Fix leak in unterminated string deserializer, Phil Sutter
    • Re: [nft PATCH 1/4] netlink: Fix leak in unterminated string deserializer, Pablo Neira Ayuso
  • [nft PATCH 3/4] segtree: Fix for potential NULL-pointer deref in ei_insert(), Phil Sutter
    • Re: [nft PATCH 3/4] segtree: Fix for potential NULL-pointer deref in ei_insert(), Pablo Neira Ayuso
      • Re: [nft PATCH 3/4] segtree: Fix for potential NULL-pointer deref in ei_insert(), Phil Sutter
        • Re: [nft PATCH 3/4] segtree: Fix for potential NULL-pointer deref in ei_insert(), Phil Sutter
• [iptables PATCH] .gitignore: add nano/vim swap file, Arturo Borrero Gonzalez
• KASAN: slab-out-of-bounds Read in bitmap_ipmac_gc, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ipmac_gc, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ipmac_gc, syzbot
• KASAN: use-after-free Read in __nf_tables_abort, syzbot
  • Re: KASAN: use-after-free Read in __nf_tables_abort, Dan Carpenter
  • Re: KASAN: use-after-free Read in __nf_tables_abort, syzbot
  • Re: KASAN: use-after-free Read in __nf_tables_abort, syzbot
• KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup, syzbot
• KASAN: slab-out-of-bounds Write in bitmap_ip_del, syzbot
  • Re: KASAN: slab-out-of-bounds Write in bitmap_ip_del, syzbot
  • Re: KASAN: slab-out-of-bounds Write in bitmap_ip_del, syzbot
• load balancing between two chains, sbezverk
  • Re: load balancing between two chains, Phil Sutter
    • Re: load balancing between two chains, sbezverk
      • Re: load balancing between two chains, Florian Westphal
        • Re: load balancing between two chains, sbezverk
          • Re: load balancing between two chains, Florian Westphal
            • Re: load balancing between two chains, sbezverk
              • Re: load balancing between two chains, Florian Westphal
                • Re: load balancing between two chains, sbezverk
                • Re: load balancing between two chains, Florian Westphal
                  • Re: load balancing between two chains, sbezverk
                  • Re: load balancing between two chains, sbezverk
                    • Re: load balancing between two chains, Florian Westphal
• KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup, syzbot
  • Re: KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup, syzbot
  • Re: KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup, syzbot
• KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup, syzbot
    • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup, Christian Brauner
      • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup, Dan Carpenter
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup, syzbot
• KASAN: use-after-free Read in bitmap_ip_destroy, syzbot
  • Re: KASAN: use-after-free Read in bitmap_ip_destroy, syzbot
  • Re: KASAN: use-after-free Read in bitmap_ip_destroy, syzbot
    • Re: KASAN: use-after-free Read in bitmap_ip_destroy, Jozsef Kadlecsik
• [PATCH nft v3 0/9] bitwise shift support, Jeremy Sowden
  • [PATCH nft v3 1/9] Update gitignore., Jeremy Sowden
  • [PATCH nft v3 2/9] src: white-space fixes., Jeremy Sowden
  • [PATCH nft v3 4/9] netlink_delinearize: remove commented out pr_debug statement., Jeremy Sowden
  • [PATCH nft v3 6/9] evaluate: change shift byte-order to host-endian., Jeremy Sowden
  • [PATCH nft v3 8/9] netlink: add support for handling shift expressions., Jeremy Sowden
  • [PATCH nft v3 7/9] include: update nf_tables.h., Jeremy Sowden
  • [PATCH nft v3 5/9] parser: add parenthesized statement expressions., Jeremy Sowden
  • [PATCH nft v3 9/9] tests: shell: add bit-shift tests., Jeremy Sowden
    • Re: [PATCH nft v3 9/9] tests: shell: add bit-shift tests., Pablo Neira Ayuso
      • Re: [PATCH nft v3 9/9] tests: shell: add bit-shift tests., Jeremy Sowden
  • [PATCH nft v3 3/9] netlink_delinearize: fix typo., Jeremy Sowden
  • Re: [PATCH nft v3 0/9] bitwise shift support, Pablo Neira Ayuso
    • Re: [PATCH nft v3 0/9] bitwise shift support, Jeremy Sowden
      • Re: [PATCH nft v3 0/9] bitwise shift support, Jeremy Sowden
• [PATCH 1/1] netfilter: ipset: use bitmap infrastructure completely, Kadlecsik József
  • Re: [PATCH 1/1] netfilter: ipset: use bitmap infrastructure completely, Pablo Neira Ayuso
• [PATCH nft] evaluate: don't eval unary arguments., Jeremy Sowden
  • Re: [PATCH nft] evaluate: don't eval unary arguments., Pablo Neira Ayuso
    • Re: [PATCH nft] evaluate: don't eval unary arguments., Jeremy Sowden
      • Re: [PATCH nft] evaluate: don't eval unary arguments., Pablo Neira Ayuso
        • Re: [PATCH nft] evaluate: don't eval unary arguments., Jeremy Sowden
        • Re: [PATCH nft] evaluate: don't eval unary arguments., Jeremy Sowden
          • Re: [PATCH nft] evaluate: don't eval unary arguments., Pablo Neira Ayuso
            • Re: [PATCH nft] evaluate: don't eval unary arguments., Florian Westphal
              • Re: [PATCH nft] evaluate: don't eval unary arguments., Pablo Neira Ayuso
                • Re: [PATCH nft] evaluate: don't eval unary arguments., Florian Westphal
            • Re: [PATCH nft] evaluate: don't eval unary arguments., Jeremy Sowden
• general protection fault in nf_flow_table_offload_setup, syzbot
  • Re: general protection fault in nf_flow_table_offload_setup, syzbot
  • Re: general protection fault in nf_flow_table_offload_setup, syzbot
    • Re: general protection fault in nf_flow_table_offload_setup, Florian Westphal
• [PATCH libnftnl v3 0/2] Attributes for concatenated ranges, Stefano Brivio
  • [PATCH libnftnl v3 1/2] set: Add support for NFTA_SET_DESC_CONCAT attributes, Stefano Brivio
    • Re: [PATCH libnftnl v3 1/2] set: Add support for NFTA_SET_DESC_CONCAT attributes, Pablo Neira Ayuso
      • Re: [PATCH libnftnl v3 1/2] set: Add support for NFTA_SET_DESC_CONCAT attributes, Stefano Brivio
        • Re: [PATCH libnftnl v3 1/2] set: Add support for NFTA_SET_DESC_CONCAT attributes, Pablo Neira Ayuso
  • [PATCH libnftnl v3 2/2] set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END, Stefano Brivio
• [PATCH nft v3 0/3] Introduce support for concatenated ranges, Stefano Brivio
  • [PATCH nft v3 1/3] src: Add support for NFTNL_SET_DESC_CONCAT, Stefano Brivio
  • [PATCH nft v3 2/3] src: Add support for concatenated set ranges, Stefano Brivio
  • [PATCH nft v3 3/3] tests: Introduce test for set with concatenated ranges, Stefano Brivio
• [PATCH nf-next v3 0/9] nftables: Set implementation for arbitrary concatenation of ranges, Stefano Brivio
  • [PATCH nf-next v3 1/9] netfilter: nf_tables: add nft_setelem_parse_key(), Stefano Brivio
  • [PATCH nf-next v3 2/9] netfilter: nf_tables: add NFTA_SET_ELEM_KEY_END attribute, Stefano Brivio
  • [PATCH nf-next v3 3/9] netfilter: nf_tables: Support for sets with multiple ranged fields, Stefano Brivio
  • [PATCH nf-next v3 4/9] bitmap: Introduce bitmap_cut(): cut bits and shift remaining, Stefano Brivio
  • [PATCH nf-next v3 6/9] selftests: netfilter: Introduce tests for sets with range concatenation, Stefano Brivio
  • [PATCH nf-next v3 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
    • Re: [PATCH nf-next v3 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, kbuild test robot
      • Re: [PATCH nf-next v3 5/9] nf_tables: Add set type for arbitrary concatenation of ranges, Stefano Brivio
  • [PATCH nf-next v3 7/9] nft_set_pipapo: Prepare for vectorised implementation: alignment, Stefano Brivio
  • [PATCH nf-next v3 8/9] nft_set_pipapo: Prepare for vectorised implementation: helpers, Stefano Brivio
  • [PATCH nf-next v3 9/9] nft_set_pipapo: Introduce AVX2-based lookup implementation, Stefano Brivio
• KASAN: use-after-free Read in bitmap_ip_ext_cleanup, syzbot
  • Re: KASAN: use-after-free Read in bitmap_ip_ext_cleanup, syzbot
  • Re: KASAN: use-after-free Read in bitmap_ip_ext_cleanup, syzbot
• [PATCH nft] include: nf_tables: correct bitwise header comment., Jeremy Sowden
• KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup, syzbot
• [PATCH nf v2] netfilter: nf_tables_offload: fix check the chain offload flag, wenxu
  • Re: [PATCH nf v2] netfilter: nf_tables_offload: fix check the chain offload flag, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables_offload: fix check the chain offload flag, wenxu
• KASAN: slab-out-of-bounds Read in bitmap_ip_add, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_add, syzbot
    • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_add, Linus Torvalds
      • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_add, Cong Wang
        • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_add, Linus Torvalds
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_add, syzbot
• [PATCH nft v2 0/9] bitwise shift support, Jeremy Sowden
  • [PATCH nft v2 3/9] netlink_delinearize: fix typo., Jeremy Sowden
  • [PATCH nft v2 4/9] netlink_delinearize: remove commented out pr_debug statement., Jeremy Sowden
  • [PATCH nft v2 6/9] evaluate: change shift byte-order to host-endian., Jeremy Sowden
  • [PATCH nft v2 9/9] tests: shell: add bit-shift tests., Jeremy Sowden
  • [PATCH nft v2 1/9] Update gitignore., Jeremy Sowden
  • [PATCH nft v2 8/9] netlink: add support for handling shift expressions., Jeremy Sowden
  • [PATCH nft v2 7/9] include: update nf_tables.h., Jeremy Sowden
  • [PATCH nft v2 5/9] parser: add parenthesized statement expressions., Jeremy Sowden
  • [PATCH nft v2 2/9] src: white-space fixes., Jeremy Sowden
  • Re: [PATCH nft v2 0/9] bitwise shift support, Jeremy Sowden
• [Patch nf] netfilter: nft_osf: NFTA_OSF_DREG must not be null, Cong Wang
  • Re: [Patch nf] netfilter: nft_osf: NFTA_OSF_DREG must not be null, Pablo Neira Ayuso
    • Re: [Patch nf] netfilter: nft_osf: NFTA_OSF_DREG must not be null, Cong Wang
• KASAN: slab-out-of-bounds Read in bitmap_port_gc, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_port_gc, syzbot
• KASAN: use-after-free Read in bitmap_port_destroy, syzbot
  • Re: KASAN: use-after-free Read in bitmap_port_destroy, Cong Wang
• KASAN: slab-out-of-bounds Read in bitmap_ip_test, syzbot
• KASAN: slab-out-of-bounds Read in bitmap_ip_gc, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ip_gc, syzbot
• [PATCH nf] netfilter: conntrack: sctp: use distinct states for new SCTP connections, Jiri Wiesner
  • Re: [PATCH nf] netfilter: conntrack: sctp: use distinct states for new SCTP connections, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: conntrack: sctp: use distinct states for new SCTP connections, Jiri Wiesner
  • Re: [PATCH nf] netfilter: conntrack: sctp: use distinct states for new SCTP connections, Pablo Neira Ayuso
• BUG: corrupted list in __nf_tables_abort, syzbot
  • Re: BUG: corrupted list in __nf_tables_abort, syzbot
  • Re: BUG: corrupted list in __nf_tables_abort, syzbot
    • Re: BUG: corrupted list in __nf_tables_abort, Florian Westphal
• general protection fault in nft_parse_register, syzbot
  • [PATCH nf] netfilter: nft_osf: add missing check for DREG attribute, Florian Westphal
    • Re: [PATCH nf] netfilter: nft_osf: add missing check for DREG attribute, Fernando Fernández Mancera
    • Re: [PATCH nf] netfilter: nft_osf: add missing check for DREG attribute, Pablo Neira Ayuso
• KASAN: slab-out-of-bounds Read in bitmap_port_add, syzbot
• KASAN: slab-out-of-bounds Read in bitmap_ipmac_list, syzbot
  • Re: KASAN: slab-out-of-bounds Read in bitmap_ipmac_list, syzbot
• KASAN: slab-out-of-bounds Read in bitmap_ip_list, syzbot
• KASAN: slab-out-of-bounds Read in bitmap_port_list, syzbot
• WARNING in nf_tables_table_destroy, syzbot
  • Re: WARNING in nf_tables_table_destroy, syzbot
  • Re: WARNING in nf_tables_table_destroy, syzbot
    • Re: WARNING in nf_tables_table_destroy, Florian Westphal
• [PATCH libnftnl v2 0/6] bitwise shift support, Jeremy Sowden
  • [PATCH libnftnl v2 1/6] Update gitignore., Jeremy Sowden
  • [PATCH libnftnl v2 3/6] bitwise: add helper to print boolean expressions., Jeremy Sowden
  • [PATCH libnftnl v2 2/6] bitwise: fix some incorrect indentation., Jeremy Sowden
  • [PATCH libnftnl v2 4/6] include: update nf_tables.h., Jeremy Sowden
  • [PATCH libnftnl v2 5/6] bitwise: add support for new netlink attributes., Jeremy Sowden
  • [PATCH libnftnl v2 6/6] bitwise: add support for left- and right-shifts., Jeremy Sowden
  • Re: [PATCH libnftnl v2 0/6] bitwise shift support, Jeremy Sowden
  • Re: [PATCH libnftnl v2 0/6] bitwise shift support, Pablo Neira Ayuso
• [PATCH 0/9] Netfilter updates for net, Pablo Neira Ayuso
  • [PATCH 1/9] netfilter: fix a use-after-free in mtype_destroy(), Pablo Neira Ayuso
  • [PATCH 7/9] netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks(), Pablo Neira Ayuso
  • [PATCH 9/9] netfilter: nat: fix ICMP header corruption on ICMP errors, Pablo Neira Ayuso
  • [PATCH 8/9] netfilter: nf_tables: fix flowtable list del corruption, Pablo Neira Ayuso
  • [PATCH 6/9] netfilter: nf_tables: remove WARN and add NLA_STRING upper limits, Pablo Neira Ayuso
  • [PATCH 4/9] netfilter: nft_tunnel: fix null-attribute check, Pablo Neira Ayuso
  • [PATCH 5/9] netfilter: nft_tunnel: ERSPAN_VERSION must not be null, Pablo Neira Ayuso
  • [PATCH 3/9] netfilter: nf_tables: store transaction list locally while requesting module, Pablo Neira Ayuso
  • [PATCH 2/9] netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct, Pablo Neira Ayuso
  • Re: [PATCH 0/9] Netfilter updates for net, David Miller
• [PATCH AUTOSEL 5.4 148/205] netfilter: nf_tables_offload: release flow_rule on error from commit path, Sasha Levin
• [PATCH AUTOSEL 4.19 032/671] netfilter: nft_osf: usage from output path is not valid, Sasha Levin
• [PATCH AUTOSEL 4.19 037/671] netfilter: nf_flow_table: do not remove offload when other netns's interface is down, Sasha Levin
• [PATCH AUTOSEL 4.19 225/671] netfilter: nft_set_hash: fix lookups with fixed size hash on big endian, Sasha Levin
• [PATCH AUTOSEL 4.19 226/671] netfilter: nft_set_hash: bogus element self comparison from deactivation path, Sasha Levin
• [PATCH AUTOSEL 4.19 320/671] netfilter: nft_flow_offload: add entry to flowtable after confirmation, Sasha Levin
• [PATCH AUTOSEL 4.19 349/671] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule, Sasha Levin
• [PATCH AUTOSEL 4.19 355/671] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value, Sasha Levin
• [PATCH AUTOSEL 4.19 524/671] netfilter: ctnetlink: honor IPS_OFFLOAD flag, Sasha Levin
• [PATCH AUTOSEL 4.14 126/371] netfilter: nft_set_hash: fix lookups with fixed size hash on big endian, Sasha Levin
• [PATCH AUTOSEL 4.14 197/371] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule, Sasha Levin
• [PATCH AUTOSEL 4.9 137/251] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule, Sasha Levin
• [PATCH AUTOSEL 4.4 089/174] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule, Sasha Levin
• [PATCH nf-next,v3 8/9] netfilter: flowtable: add nf_flow_offload_tuple() helper, Pablo Neira Ayuso
  • [PATCH nf-next,v3 9/9] netfilter: flowtable: add nf_flow_table_offload_cmd(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_tunnel: ERSPAN_VERSION must not be null, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_tunnel: ERSPAN_VERSION must not be null, Pablo Neira Ayuso
• memory leak in nf_tables_parse_netdev_hooks, syzbot
  • [PATCH] netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks(), Dan Carpenter
    • Re: [PATCH] netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks(), Florian Westphal
    • Re: [PATCH] netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks(), Pablo Neira Ayuso
• [PATCH] Fixed some man pages typos ('This modules' -> 'This module'), aa . santos
  • Re: [PATCH] Fixed some man pages typos ('This modules' -> 'This module'), Phil Sutter
• WARNING in nft_request_module, syzbot
  • [PATCH nf] netfilter: nf_tables: remove WARN and add NLA_STRING upper limits, Florian Westphal
    • Re: [PATCH nf] netfilter: nf_tables: remove WARN and add NLA_STRING upper limits, Pablo Neira Ayuso
  • Re: WARNING in nft_request_module, syzbot
• BUG: corrupted list in nf_tables_commit, syzbot
  • [PATCH nf] netfilter: nf_tables: fix flowtable list del corruption, Florian Westphal
    • Re: [PATCH nf] netfilter: nf_tables: fix flowtable list del corruption, Pablo Neira Ayuso
  • Re: BUG: corrupted list in nf_tables_commit, syzbot
• general protection fault in nft_tunnel_get_init, syzbot
  • [PATCH nf] netfilter: nft_tunnel: fix null-attribute check, Florian Westphal
    • Re: [PATCH nf] netfilter: nft_tunnel: fix null-attribute check, Pablo Neira Ayuso
• BUG: corrupted list in nft_obj_del, syzbot
  • Re: BUG: corrupted list in nft_obj_del, syzbot
  • Re: BUG: corrupted list in nft_obj_del, Florian Westphal
• [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
  • [PATCH nf-next v4 01/10] netfilter: nf_tables: white-space fixes., Jeremy Sowden
  • [PATCH nf-next v4 03/10] netfilter: bitwise: replace gotos with returns., Jeremy Sowden
  • [PATCH nf-next v4 04/10] netfilter: bitwise: add NFTA_BITWISE_OP attribute., Jeremy Sowden
  • [PATCH nf-next v4 05/10] netfilter: bitwise: add helper for initializing boolean operations., Jeremy Sowden
  • [PATCH nf-next v4 06/10] netfilter: bitwise: add helper for evaluating boolean operations., Jeremy Sowden
  • [PATCH nf-next v4 07/10] netfilter: bitwise: add helper for dumping boolean operations., Jeremy Sowden
  • [PATCH nf-next v4 09/10] netfilter: bitwise: add NFTA_BITWISE_DATA attribute., Jeremy Sowden
  • [PATCH nf-next v4 08/10] netfilter: bitwise: only offload boolean operations., Jeremy Sowden
  • [PATCH nf-next v4 02/10] netfilter: bitwise: remove NULL comparisons from attribute checks., Jeremy Sowden
  • [PATCH nf-next v4 10/10] netfilter: bitwise: add support for shifts., Jeremy Sowden
  • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
    • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Pablo Neira Ayuso
      • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Pablo Neira Ayuso
      • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
        • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Pablo Neira Ayuso
          • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
  • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Pablo Neira Ayuso
    • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
      • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Pablo Neira Ayuso
        • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
          • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Pablo Neira Ayuso
            • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
              • Re: [PATCH nf-next v4 00/10] netfilter: nft_bitwise: shift support, Pablo Neira Ayuso
• general protection fault in nft_chain_parse_hook, syzbot
  • Re: general protection fault in nft_chain_parse_hook, syzbot
  • [PATCH nf] netfilter: nf_tables: check for valid chain type pointer before dereference, Florian Westphal
    • Re: [PATCH nf] netfilter: nf_tables: check for valid chain type pointer before dereference, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nf_tables: check for valid chain type pointer before dereference, Florian Westphal
      • Re: [PATCH nf] netfilter: nf_tables: check for valid chain type pointer before dereference, Pablo Neira Ayuso
        • Re: [PATCH nf] netfilter: nf_tables: check for valid chain type pointer before dereference, Florian Westphal
  • Re: general protection fault in nft_chain_parse_hook, syzbot
• [PATCH nf-next v3 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
  • [PATCH nf-next v3 01/10] netfilter: nf_tables: white-space fixes., Jeremy Sowden
  • [PATCH nf-next v3 03/10] netfilter: bitwise: replace gotos with returns., Jeremy Sowden
  • [PATCH nf-next v3 08/10] netfilter: bitwise: only offload boolean operations., Jeremy Sowden
  • [PATCH nf-next v3 09/10] netfilter: bitwise: add NFTA_BITWISE_DATA attribute., Jeremy Sowden
  • [PATCH nf-next v3 07/10] netfilter: bitwise: add helper for dumping boolean operations., Jeremy Sowden
  • [PATCH nf-next v3 04/10] netfilter: bitwise: add NFTA_BITWISE_OP netlink attribute., Jeremy Sowden
  • [PATCH nf-next v3 02/10] netfilter: bitwise: remove NULL comparisons from attribute checks., Jeremy Sowden
  • [PATCH nf-next v3 06/10] netfilter: bitwise: add helper for evaluating boolean operations., Jeremy Sowden
  • [PATCH nf-next v3 05/10] netfilter: bitwise: add helper for initializing boolean operations., Jeremy Sowden
  • [PATCH nf-next v3 10/10] netfilter: bitwise: add support for shifts., Jeremy Sowden
  • Re: [PATCH nf-next v3 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
• [PATCH libnetfilter_queue] src: Fix indenting weirdness is pktbuff.c w/out changing indent, Duncan Roe
  • Re: [PATCH libnetfilter_queue] src: Fix indenting weirdness is pktbuff.c w/out changing indent, Pablo Neira Ayuso
• [PATCH nf-next v2 00/10] netfilter: nft_bitwise: shift support, Jeremy Sowden
  • [PATCH nf-next v2 01/10] netfilter: nf_tables: white-space fixes., Jeremy Sowden
  • [PATCH nf-next v2 04/10] netfilter: bitwise: add NFTA_BITWISE_OP netlink attribute., Jeremy Sowden
  • [PATCH nf-next v2 05/10] netfilter: bitwise: add helper for initializing boolean operations., Jeremy Sowden
  • [PATCH nf-next v2 02/10] netfilter: bitwise: remove NULL comparisons from attribute checks., Jeremy Sowden
  • [PATCH nf-next v2 08/10] netfilter: bitwise: only offload boolean operations., Jeremy Sowden
  • [PATCH nf-next v2 07/10] netfilter: bitwise: add helper for dumping boolean operations., Jeremy Sowden
  • [PATCH nf-next v2 09/10] netfilter: bitwise: add NFTA_BITWISE_DATA attribute., Jeremy Sowden
    • Re: [PATCH nf-next v2 09/10] netfilter: bitwise: add NFTA_BITWISE_DATA attribute., Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 09/10] netfilter: bitwise: add NFTA_BITWISE_DATA attribute., Jeremy Sowden
  • [PATCH nf-next v2 06/10] netfilter: bitwise: add helper for evaluating boolean operations., Jeremy Sowden
  • [PATCH nf-next v2 03/10] netfilter: bitwise: replace gotos with returns., Jeremy Sowden
  • [PATCH nf-next v2 10/10] netfilter: bitwise: add support for shifts., Jeremy Sowden
  • Re: [PATCH nf-next v2 00/10] netfilter: nft_bitwise: shift support, Pablo Neira Ayuso
• [nft PATCH 1/2] tests: shell: Search diff tool once and for all, Phil Sutter
  • [nft PATCH 2/2] cache: Fix for doubled output after reset command, Phil Sutter
    • Re: [nft PATCH 2/2] cache: Fix for doubled output after reset command, Pablo Neira Ayuso
  • Re: [nft PATCH 1/2] tests: shell: Search diff tool once and for all, Pablo Neira Ayuso
• [PATCH nft] xfrm: spi is big endian, Florian Westphal
  • Re: [PATCH nft] xfrm: spi is big endian, Pablo Neira Ayuso
    • Re: [PATCH nft] xfrm: spi is big endian, Florian Westphal
• [PATCH nf-next v4 0/4] netfilter: flowtable: add indr-block offload, wenxu
  • [PATCH nf-next v4 1/4] netfilter: flowtable: add nf_flow_table_block_offload_init(), wenxu
  • [PATCH nf-next v4 2/4] netfilter: flowtable: add indr block setup support, wenxu
    • Re: [PATCH nf-next v4 2/4] netfilter: flowtable: add indr block setup support, Pablo Neira Ayuso
      • Re: [PATCH nf-next v4 2/4] netfilter: flowtable: add indr block setup support, wenxu
  • [PATCH nf-next v4 4/4] netfilter: flowtable: add tunnel encap/decap action offload support, wenxu
  • [PATCH nf-next v4 3/4] netfilter: flowtable: add tunnel match offload support, wenxu
  • Re: [PATCH nf-next v4 0/4] netfilter: flowtable: add indr-block offload, wenxu
• [PATCH nf-next,v2 8/9] netfilter: flowtable: add flow_offload_tuple() helper, Pablo Neira Ayuso
  • [PATCH nf-next,v2 9/9] netfilter: flowtable: add nf_flow_table_offload_cmd(), Pablo Neira Ayuso
• [net,v2] netfilter: nat: fix ICMP header corruption on ICMP errors, Eyal Birger
  • Re: [net,v2] netfilter: nat: fix ICMP header corruption on ICMP errors, Florian Westphal
  • Re: [net,v2] netfilter: nat: fix ICMP header corruption on ICMP errors, Pablo Neira Ayuso
• [NET] netfilter: nat: fix ICMP header corruption on ICMP errors, Eyal Birger
• WARNING: locking bug in finish_task_switch, syzbot
• [PATCH nf-next,v3 1/9] netfilter: flowtable: fetch stats only if flow is still alive, Pablo Neira Ayuso
  • [PATCH nf-next,v2 3/9] netfilter: flowtable: add nf_flow_offload_work_alloc(), Pablo Neira Ayuso
  • [PATCH nf-next,v2 5/9] netfilter: flowtable: use atomic bitwise operations for flow flags, Pablo Neira Ayuso
  • [PATCH nf-next,v2 4/9] netfilter: flowtable: remove dying bit, use teardown bit instead, Pablo Neira Ayuso
  • [PATCH nf-next 8/9] netfilter: flowtable: add flow_offload_tuple() helper, Pablo Neira Ayuso
    • Re: [PATCH nf-next 8/9] netfilter: flowtable: add flow_offload_tuple() helper, wenxu
  • [PATCH nf-next,v2 7/9] netfilter: flowtable: refresh flow if hardware offload fails, Pablo Neira Ayuso
  • [PATCH nf-next 9/9] netfilter: flowtable: add nf_flow_table_offload_cmd(), Pablo Neira Ayuso
    • Re: [PATCH nf-next 9/9] netfilter: flowtable: add nf_flow_table_offload_cmd(), wenxu
  • [PATCH nf-next,v2 2/9] netfilter: flowtable: restrict flow dissector match on meta ingress device, Pablo Neira Ayuso
  • [PATCH nf-next 6/9] netfilter: flowtable: add nf_flowtable_hw_offload() helper function, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: store transaction list locally while requesting module, Pablo Neira Ayuso
• [nft PATCH] monitor: Fix output for ranges in anonymous sets, Phil Sutter
  • Re: [nft PATCH] monitor: Fix output for ranges in anonymous sets, Pablo Neira Ayuso
• vmaps and default action, Florian Westphal
• general protection fault in xt_rateest_put, syzbot
  • Re: general protection fault in xt_rateest_put, Cong Wang
    • Re: general protection fault in xt_rateest_put, Florian Westphal
      • Re: general protection fault in xt_rateest_put, Cong Wang
  • [PATCH nf] netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct, Florian Westphal
    • Re: [PATCH nf] netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct, Pablo Neira Ayuso
  • Re: general protection fault in xt_rateest_put, syzbot
• [Patch net] netfilter: fix a use-after-free in mtype_destroy(), Cong Wang
  • Re: [Patch net] netfilter: fix a use-after-free in mtype_destroy(), Pablo Neira Ayuso
• KASAN: use-after-free Read in bitmap_port_ext_cleanup, syzbot
  • Re: KASAN: use-after-free Read in bitmap_port_ext_cleanup, Cong Wang
    • Re: KASAN: use-after-free Read in bitmap_port_ext_cleanup, Kadlecsik József
• INFO: task hung in hashlimit_mt_check_common, syzbot
  • Re: INFO: task hung in hashlimit_mt_check_common, syzbot
  • Re: INFO: task hung in hashlimit_mt_check_common, syzbot
  • Message not available
    • Re: INFO: task hung in hashlimit_mt_check_common, Dan Carpenter
      • Re: INFO: task hung in hashlimit_mt_check_common, Cong Wang
• [PATCH nft 0/7] bitwise shift support, Jeremy Sowden
  • [PATCH nft 3/7] netlink_delinearize: fix typo., Jeremy Sowden
  • [PATCH nft 2/7] src: white-space fixes., Jeremy Sowden
  • [PATCH nft 4/7] netlink_delinearize: remove commented out pr_debug statement., Jeremy Sowden
  • [PATCH nft 1/7] Update gitignore., Jeremy Sowden