Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- [PATCH nft] evaluate: use-after-free in implicit set, Pablo Neira Ayuso
- [PATCH nft 1/2] src: generation ID is 32-bit long,
Pablo Neira Ayuso
- [PATCH nf-next v4 0/3] Extract SYNPROXY infrastructure,
Fernando Fernandez Mancera
- Re: How to use concatenation ipv4_addr . inet_proto . inet_service,
Florian Westphal
- [PATCH iptables v1] iptables-test: fix python3,
Shekhar Sharma
- [PATCH nf] netfilter: ipv6: nf_defrag: accept duplicate fragments again,
Guillaume Nault
- [PATCH nft] rule: ensure cache consistency, Pablo Neira Ayuso
- [PATCH RESEND net-next 0/2] br_netfilter: enable in non-initial netns,
Christian Brauner
- [PATCH nft 4/4,v2] src: single cache_update() call to build cache before evaluation, Pablo Neira Ayuso
- [PATCH nft] mnl: bogus error when running monitor mode,
Pablo Neira Ayuso
- [PATCH] netfilter: nf_conntrack_sip: fix ct_sip_walk_headers,
Igor Ryzhov
- [PATCH nftables v4 0/1] add ct expectation support,
Stéphane Veyret
- [PATCH nft 0/4] split parse and evaluation phase to simplify cache logic,
Pablo Neira Ayuso
- [PATCH net] ipvs: defer hook registration to avoid leaks,
Julian Anastasov
- LPC 2019 Networking Track CFP, David Miller
- [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references,
Phil Sutter
- [nft PATCH v5 09/10] include: Collect __stmt_binary_error() wrapper macros, Phil Sutter
- [nft PATCH v5 01/10] src: Fix cache_flush() in cache_needs_more() logic, Phil Sutter
- [nft PATCH v5 05/10] src: Make {table,chain}_not_found() public, Phil Sutter
- [nft PATCH v5 08/10] src: Make cache_is_complete() public, Phil Sutter
- [nft PATCH v5 07/10] rule: Introduce rule_lookup_by_index(), Phil Sutter
- [nft PATCH v5 10/10] src: Support intra-transaction rule references, Phil Sutter
- [nft PATCH v5 04/10] libnftables: Keep list of commands in nft context, Phil Sutter
- [nft PATCH v5 03/10] libnftables: Drop cache in error case, Phil Sutter
- [nft PATCH v5 02/10] src: Utilize CMD_FLUSH for cache->cmd, Phil Sutter
- [nft PATCH v5 06/10] src: Restore local entries after cache update, Phil Sutter
- Re: [nft PATCH v5 00/10] Cache update fix && intra-transaction rule references, Pablo Neira Ayuso
- [PATCH nf-next] netfilter: conntrack: small conntrack lookup optimization,
Florian Westphal
- memory leak in nf_hook_entries_grow,
syzbot
- WARNING: suspicious RCU usage in in_dev_dump_addr, syzbot
- [PATCH net-next v2] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather,
wenxu
- [PATCH] netfilter: ipv6: Fix undefined symbol nf_ct_frag6_gather, wenxu
- [PATCH net] netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments,
Guillaume Nault
- [PATCH 00/15] Netfilter/IPVS updates for net-next,
Pablo Neira Ayuso
- [PATCH 01/15] ipvs: allow rs_table to contain different real server types, Pablo Neira Ayuso
- [PATCH 04/15] netfilter: xt_owner: Add supplementary groups option, Pablo Neira Ayuso
- [PATCH 12/15] netfilter: xt_HL: prefer skb_ensure_writable, Pablo Neira Ayuso
- [PATCH 09/15] netfilter: conntrack, nat: prefer skb_ensure_writable, Pablo Neira Ayuso
- [PATCH 14/15] netfilter: replace skb_make_writable with skb_ensure_writable, Pablo Neira Ayuso
- [PATCH 15/15] ipvs: add checksum support for gue encapsulation, Pablo Neira Ayuso
- [PATCH 13/15] netfilter: tcpmss, optstrip: prefer skb_ensure_writable, Pablo Neira Ayuso
- [PATCH 11/15] netfilter: nf_tables: prefer skb_ensure_writable, Pablo Neira Ayuso
- [PATCH 10/15] netfilter: ipv4: prefer skb_ensure_writable, Pablo Neira Ayuso
- [PATCH 03/15] ipvs: strip udp tunnel headers from icmp errors, Pablo Neira Ayuso
- [PATCH 06/15] netfilter: nf_tables: free base chain counters from worker, Pablo Neira Ayuso
- [PATCH 02/15] ipvs: add function to find tunnels, Pablo Neira Ayuso
- [PATCH 05/15] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple, Pablo Neira Ayuso
- [PATCH 08/15] netfilter: ipvs: prefer skb_ensure_writable, Pablo Neira Ayuso
- [PATCH 07/15] netfilter: bridge: convert skb_make_writable to skb_ensure_writable, Pablo Neira Ayuso
- Re: [PATCH 00/15] Netfilter/IPVS updates for net-next, David Miller
- <Possible follow-ups>
- [PATCH 00/15] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
- [PATCH 01/15] netfilter: rename nf_SYNPROXY.h to nf_synproxy.h, Pablo Neira Ayuso
- [PATCH 03/15] netfilter: nf_queue: remove unused hook entries pointer, Pablo Neira Ayuso
- [PATCH 06/15] ipvs: strip gre tunnel headers from icmp errors, Pablo Neira Ayuso
- [PATCH 15/15] netfilter: nf_tables: force module load in case select_ops() returns -EAGAIN, Pablo Neira Ayuso
- [PATCH 07/15] netfilter: nft_meta: move bridge meta keys into nft_meta_bridge, Pablo Neira Ayuso
- [PATCH 10/15] netfilter: nft_meta_bridge: add NFT_META_BRI_IIFPVID support, Pablo Neira Ayuso
- [PATCH 14/15] netfilter: nf_tables: __nft_expr_type_get() selects specific family type, Pablo Neira Ayuso
- [PATCH 13/15] netfilter: nf_tables: add nft_expr_type_request_module(), Pablo Neira Ayuso
- [PATCH 11/15] bridge: add br_vlan_get_proto(), Pablo Neira Ayuso
- [PATCH 12/15] netfilter: nft_meta_bridge: Add NFT_META_BRI_IIFVPROTO support, Pablo Neira Ayuso
- [PATCH 09/15] bridge: add br_vlan_get_pvid_rcu(), Pablo Neira Ayuso
- [PATCH 05/15] netfilter: nf_tables: Add synproxy support, Pablo Neira Ayuso
- [PATCH 08/15] netfilter: nft_meta_bridge: Remove the br_private.h header, Pablo Neira Ayuso
- [PATCH 04/15] ipvs: allow tunneling with gre encapsulation, Pablo Neira Ayuso
- [PATCH 02/15] netfilter: nf_log: Replace a seq_printf() call by seq_puts() in seq_show(), Pablo Neira Ayuso
- Re: [PATCH 00/15] Netfilter/IPVS updates for net-next, David Miller
- [PATCH AUTOSEL 5.1 070/186] netfilter: nf_conntrack_h323: restore boundary check correctness, Sasha Levin
- [PATCH AUTOSEL 5.1 069/186] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast, Sasha Levin
- [PATCH AUTOSEL 5.1 066/186] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Sasha Levin
- [PATCH AUTOSEL 5.0 061/173] netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression, Sasha Levin
- [PATCH AUTOSEL 5.0 064/173] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast, Sasha Levin
- [PATCH AUTOSEL 5.0 065/173] netfilter: nf_conntrack_h323: restore boundary check correctness, Sasha Levin
- [PATCH AUTOSEL 5.0 067/173] netfilter: nf_tables: fix base chain stat rcu_dereference usage, Sasha Levin
- [PATCH AUTOSEL 4.19 051/141] netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast, Sasha Levin
- [PATCH AUTOSEL 4.19 054/141] netfilter: nf_tables: fix base chain stat rcu_dereference usage, Sasha Levin
- [PATCH AUTOSEL 4.19 052/141] netfilter: nf_conntrack_h323: restore boundary check correctness, Sasha Levin
- [PATCH AUTOSEL 5.1 072/186] netfilter: nf_tables: fix base chain stat rcu_dereference usage, Sasha Levin
- Kernel compilation error,
Fernando Fernandez Mancera
- [PATCH ghak90 V6] fixup! audit: add containerid filtering,
Richard Guy Briggs
- [PATCH libnftnl v4 0/2] add ct expectation support,
Stéphane Veyret
- [nft PATCH 0/2] Fix and simplify mnl_batch_talk(),
Phil Sutter
- [PATCH nft 2/7,v4] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small, Pablo Neira Ayuso
- [PATCH net-next,v2] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y,
Pablo Neira Ayuso
- [PATCH] netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y,
Pablo Neira Ayuso
- [PATCH net-next] netfilter: ipv6: fix compile err unknown field br_defrag and br_fragment,
wenxu
- [PATCH net-next] netfilter: missing #include for nf_ct_frag6_gather declaration,
Pablo Neira Ayuso
- [PATCH] build: avoid unnecessary rebuild of iptables when rerunning configure,
Jan Engelhardt
- [PATCH net-next] netfilter: nf_conntrack_bridge: Fix build error without IPV6,
YueHaibing
- [PATCH v2] conntrackd: Use strdup in lexer, Ash Hughes
- [PATCH nft,v4 5/7] mnl: estimate receiver buffer size, Pablo Neira Ayuso
- [PATCH nft,v3 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small,
Pablo Neira Ayuso
- [PATCH nft,v2 1/7] mnl: add mnl_set_rcvbuffer() and use it,
Pablo Neira Ayuso
- [PATCH nft,v2 3/7] mnl: call mnl_set_sndbuffer() from mnl_batch_talk(), Pablo Neira Ayuso
- [PATCH nft,v2 4/7] mnl: add mnl_nft_batch_to_msg(), Pablo Neira Ayuso
- [PATCH nft,v2 2/7] mnl: mnl_set_rcvbuffer() skips buffer size update if it is too small, Pablo Neira Ayuso
- [PATCH nft,v2 5/7] mnl: estimate receiver buffer size, Pablo Neira Ayuso
- [PATCH nft,v2 7/7] erec: remove double \n on error when internal_netlink is used, Pablo Neira Ayuso
- [PATCH nft,v2 6/7] mnl: mnl_batch_talk() returns -1 on internal netlink errors, Pablo Neira Ayuso
- [PATCH v4] ipvs: add checksum support for gue encapsulation,
Jacky Hu
- [PATCH nft 1/3] mnl: add mnl_set_rcvbuffer() and use it,
Pablo Neira Ayuso
- [nft PATCH 0/4] Fix ENOBUFS error in large transactions with --echo,
Phil Sutter
- nftables release,
Nicolas Dichtel
- [PATCH net-next,v3 0/9] connection tracking support for bridge,
Pablo Neira Ayuso
- [PATCH net-next,v3 2/9] net: ipv6: add skbuff fraglist splitter, Pablo Neira Ayuso
- [PATCH net-next,v3 3/9] net: ipv4: split skbuff into fragments transformer, Pablo Neira Ayuso
- [PATCH net-next,v3 7/9] netfilter: bridge: add connection tracking system, Pablo Neira Ayuso
- [PATCH net-next,v3 4/9] net: ipv6: split skbuff into fragments transformer, Pablo Neira Ayuso
- [PATCH net-next,v3 8/9] netfilter: nf_conntrack_bridge: add support for IPv6, Pablo Neira Ayuso
- [PATCH net-next,v3 9/9] netfilter: nf_conntrack_bridge: register inet conntrack for bridge, Pablo Neira Ayuso
- [PATCH net-next,v3 6/9] netfilter: nf_conntrack: allow to register bridge support, Pablo Neira Ayuso
- [PATCH net-next,v3 1/9] net: ipv4: add skbuff fraglist splitter, Pablo Neira Ayuso
- [PATCH net-next,v3 5/9] net: ipv4: place control buffer handling away from fragmentation iterators, Pablo Neira Ayuso
- Re: [PATCH net-next,v3 0/9] connection tracking support for bridge, David Miller
- [PATCH v3] ipvs: add checksum support for gue encapsulation,
Jacky Hu
- Announcing Netdev 0x14, Jamal Hadi Salim
- [nft PATCH v4 0/7] Cache update fix && intra-transaction rule references,
Phil Sutter
- memory leak in start_sync_thread,
syzbot
- Avoid unnecessary rebuilds of iptables,
Jan Engelhardt
- [PATCH] Apply userspace filter on resync with internal cache disabled,
Robin Geuze
- [PATCH] build: remove -Wl,--no-as-needed and libiptc.so,
Jan Engelhardt
- [PATCH] conntrackd: Fix "Address Accept" filter case,
Robin Geuze
- [PATCH nft v2]tests: json_echo: convert to py3,
Shekhar Sharma
[PATCH nft v3]tests: py: add netns feature,
Shekhar Sharma
[PATCH nft v5] tests: py: fix python3,
Shekhar Sharma
[PATCH] conntrackd: Use strdup in lexer,
Ash Hughes
[PATCH] conntrackd: search for RPC headers,
Ash Hughes
[ANNOUNCE] iptables 1.8.3 release, Pablo Neira Ayuso
[ANNOUNCE] libnftnl 1.1.3 release, Pablo Neira Ayuso
[nft PATCH] parser_json: Fix and simplify verdict expression parsing,
Phil Sutter
[nft PATCH v4 0/2] JSON schema for nftables.py,
Phil Sutter
[PATCH] ipset: Fix memory accounting for hash types on resize,
Stefano Brivio
[PATCH v2] ipvs: add checksum support for gue encapsulation,
Jacky Hu
[PATCH nf-next v5] netfilter: nft_ct: add ct expectations support,
Stéphane Veyret
[PATCH nf] netfilter: nf_tables: fix module autoload with inet family, Pablo Neira Ayuso
[PATCH iptables v1] iptables-test.py: fix python3,
Shekhar Sharma
[PATCH nft] tests: replace single element sets, Pablo Neira Ayuso
[PATCH nft v1 ] py: nftables.py: fix python3,
Shekhar Sharma
[PATCH nft] src: add cache_is_complete() and cache_is_updated(),
Pablo Neira Ayuso
[PATCH nft v1] tests: json_echo: fix python3,
Shekhar Sharma
[PATCH nf-next v3 0/4] Extract SYNPROXY infrastructure,
Fernando Fernandez Mancera
[PATCH nft v4 1/2] jump: Introduce chain_expr in jump and goto statements,
Fernando Fernandez Mancera
[PATCH v1] ipvs: add checksum support for gue encapsulation,
Jacky Hu
[PATCH 00/11] Netfilter/IPVS fixes for net,
Pablo Neira Ayuso
- [PATCH 02/11] netfilter: nf_queue: fix reinject verdict handling, Pablo Neira Ayuso
- [PATCH 03/11] netfilter: nft_fib: Fix existence check support, Pablo Neira Ayuso
- [PATCH 07/11] netfilter: nf_flow_table: ignore DF bit setting, Pablo Neira Ayuso
- [PATCH 08/11] netfilter: nft_flow_offload: set liberal tracking mode for tcp, Pablo Neira Ayuso
- [PATCH 06/11] netfilter: nat: fix udp checksum corruption, Pablo Neira Ayuso
- [PATCH 10/11] netfilter: nft_flow_offload: IPCB is only valid for ipv4 family, Pablo Neira Ayuso
- [PATCH 11/11] selftests: netfilter: add flowtable test script, Pablo Neira Ayuso
- [PATCH 09/11] netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment, Pablo Neira Ayuso
- [PATCH 05/11] selftests: netfilter: missing error check when setting up veth interface, Pablo Neira Ayuso
- [PATCH 04/11] ipvs: Fix use-after-free in ip_vs_in, Pablo Neira Ayuso
- [PATCH 01/11] netfilter: nf_tables: fix oops during rule dump, Pablo Neira Ayuso
- Re: [PATCH 00/11] Netfilter/IPVS fixes for net, David Miller
[PATCH nf-next v4 0/1] add ct expectation support,
Stéphane Veyret
[PATCH nft v2] tests: py: Add netns feature, Shekhar Sharma
[PATCH nft v4] tests: py: fix python3,
Shekhar Sharma
[PATCH nf-next 0/8] netfilter: remove skb_make_writable helper,
Florian Westphal
- [PATCH nf-next 1/8] netfilter: bridge: convert skb_make_writable to skb_ensure_writable, Florian Westphal
- [PATCH nf-next 2/8] netfilter: ipvs: prefer skb_ensure_writable, Florian Westphal
- [PATCH nf-next 3/8] netfilter: conntrack, nat: prefer skb_ensure_writable, Florian Westphal
- [PATCH nf-next 4/8] netfilter: ipv4: prefer skb_ensure_writable, Florian Westphal
- [PATCH nf-next 5/8] netfilter: nf_tables: prefer skb_ensure_writable, Florian Westphal
- [PATCH nf-next 6/8] netfilter: xt_HL: prefer skb_ensure_writable, Florian Westphal
- [PATCH nf-next 7/8] netfilter: tcpmss, optstrip: prefer skb_ensure_writable, Florian Westphal
- [PATCH nf-next 8/8] netfilter: replace skb_make_writable with skb_ensure_writable, Florian Westphal
- Re: [PATCH nf-next 0/8] netfilter: remove skb_make_writable helper, Pablo Neira Ayuso
[PATCH nftables] exthdr: doc: add support for matching IPv4 options, Stephen Suryaputra
[PATCH libnftnl] src: libnftnl: add support for matching IPv4 options, Stephen Suryaputra
[PATCH nf-next] netfilter: add support for matching IPv4 options,
Stephen Suryaputra
[PATCH nf-next] netfilter: nf_tables: free base chain counters from worker,
Florian Westphal
[PATCH nft] src: support for arp sender and target ethernet and IPv4 addresses,
Pablo Neira Ayuso
[nft PATCH v2 0/3] Resolve cache update woes,
Phil Sutter
[nft PATCH v3 0/2] JSON schema for nftables.py,
Phil Sutter
[nft PATCH 0/3] Support intra-transaction rule references,
Phil Sutter
[PATCH nft v3]tests: py: fix python3.,
Shekhar Sharma
progress on connection tracking for bridge family, M. Schröder
[PATCH nf 0/5] netfilter: flow table fixes,
Florian Westphal
[PATCH iptables 0/6] ERESTART fixes,
Pablo Neira Ayuso
[PATCH iptables RFC 0/4] revisit RESTART log,
Pablo Neira Ayuso
[PATCH iptables 0/6] cache rework,
Pablo Neira Ayuso
[PATCH nf] netfilter: nat: fix udp checksum corruption,
Florian Westphal
[iptables PATCH] Drop release.sh,
Phil Sutter
[iptables PATCH] Revert "build: don't include tests in released tarball",
Phil Sutter
iptables: Testsuites in release tarballs?,
Phil Sutter
[PATCH nf-next v2 0/4] Extract SYNPROXY infrastructure,
Fernando Fernandez Mancera
[PATCH iptables 1/4] nft: add struct nft_cache,
Pablo Neira Ayuso
[PATCH nft] evaluate: kill anon sets with one element,
Florian Westphal
[PATCH nft v1] tests: py: Add netns feature,
Shekhar Sharma
[PATCH nft v2] tests: py: fix python3.,
Shekhar Sharma
[PATCH 0/5] Extract SYNPROXY infrastructure,
Fernando Fernandez Mancera
Expectations,
Stéphane Veyret
Refcounts in libnftnl?, Phil Sutter
[nft PATCH 0/3] Resolve cache update woes,
Phil Sutter
[nft PATCH v2 0/2] JSON schema for nftables.py,
Phil Sutter
[PATCH nftables,v3] add ct expectations support,
Stéphane Veyret
nftables flow offload possible mtu handling issue,
marcmicalizzi
oops in netfilter, David Howells
[nft PATCH 0/2] JSON schema for nftables.py,
Phil Sutter
[PATCH nft v3 1/2] jump: Introduce chain_expr in jump and goto statements,
Fernando Fernandez Mancera
[PATCH nft] src: update cache if cmd is more specific, Eric Garver
[PATCH nf-next] netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple,
Taehee Yoo
[PATCH nf] netfilter: nft_fib: Fix existence check support,
Phil Sutter
[PATCH 1/2 nft v2] jump: Introduce chain_expr in jump and goto statements,
Fernando Fernandez Mancera
[PATCH] ipvs: Fix use-after-free in ip_vs_in,
YueHaibing
[PATCH nft] tests: py: fix python3.,
Shekhar Sharma
[PATCH v2] selftests: netfilter: missing error check when setting up veth interface,
Jeffrin Jose T
[PATCH 1/2 nft] jump: Introduce chain_expr in jump and goto statements,
Fernando Fernandez Mancera
[PATCH 1/2 nft WIP v2] jump: Introduce chain_expr in jump statements,
Fernando Fernandez Mancera
[PATCH iptables] man: refer to iptables-translate and ip6tables, Pablo Neira Ayuso
[iptables PATCH] tests: Fix ipt-restore/0004-restore-race_0 testcase,
Phil Sutter
[iptables PATCH] xtables: Fix typo in nft_rebuild_cache(),
Phil Sutter
[PATCH net v3] netfilter: nf_queue:fix reinject verdict handling,
Jagdish Motwani
[PATCH net v2] netfilter: nf_queue:fix reinject verdict handling, Jagdish Motwani
[iptables PATCH] xtables: Don't leak iter in error path of __nft_chain_zero_counters(),
Phil Sutter
[libnftnl PATCH] include: Remove redundant declaration of nftnl_gen_nlmsg_parse(),
Phil Sutter
[iptables PATCH] xtables: Fix for explicit rule flushes, Phil Sutter
[PATCH nf] netfilter: nf_tables: incorrect definition for NFT_LOGLEVEL_MAX, Pablo Neira Ayuso
[PATCH nft] src: use definitions in include/linux/netfilter/nf_tables.h,
Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value,
Florian Westphal
Undefined reference?,
Stéphane Veyret
[ebtables PATCH] Fix incorrect IPv6 prefix formatting,
Phil Sutter
[PATCH libnftnl,v1 1/2] src: add ct expectation support,
Stéphane Veyret
[PATCH nft v2] py: fix missing decode/encode of strings,
Eric Garver
[PATCH v3] extensions: libxt_owner: Add supplementary groups option, Lukasz Pawelczyk
[PATCH v3] netfilter: xt_owner: Add supplementary groups option,
Lukasz Pawelczyk
linux-next: manual merge of the netfilter tree with Linus' tree, Stephen Rothwell
[conntrack-tools PATCH] sync-mode: Also cancel flush timer in ALL_FLUSH_CACHE,
Simon Kirby
[PATCH net-next,RFC 0/2] netfilter: add hardware offload infrastructure,
Pablo Neira Ayuso
[nft PATCH 0/9] Testsuite-indicated fixes for JSON,
Phil Sutter
- [nft PATCH 2/9] parser_json: Fix igmp support, Phil Sutter
- [nft PATCH 9/9] tests/py: Fix JSON expected output for icmpv6 code values, Phil Sutter
- [nft PATCH 3/9] netlink: Fix printing of zero-length prefixes, Phil Sutter
- [nft PATCH 5/9] json: Fix tproxy support regarding latest changes, Phil Sutter
- [nft PATCH 4/9] tests/py: Fix JSON equivalents of osf tests, Phil Sutter
- [nft PATCH 1/9] json: Support nat in inet family, Phil Sutter
- [nft PATCH 7/9] tests/py: Fix for ip dscp symbol "le", Phil Sutter
- [nft PATCH 8/9] tests/py: Fix JSON expexted output after expr merge change, Phil Sutter
- [nft PATCH 6/9] parser_json: Fix ct timeout object support, Phil Sutter
- Re: [nft PATCH 0/9] Testsuite-indicated fixes for JSON, Pablo Neira Ayuso
[PATCH nft WIP] jump: Allow jump to a variable when using nft input files,
Fernando Fernandez Mancera
[PATCH net] netfilter: nf_queue:fix reinject verdict handling,
Jagdish Motwani
[PATCH v2] extensions: libxt_owner: Add supplementary groups option, Lukasz Pawelczyk
[PATCH v2] netfilter: xt_owner: Add supplementary groups option,
Lukasz Pawelczyk
[PATCH nf] netfilter: nf_tables: remove NFT_CT_TIMEOUT, Pablo Neira Ayuso
[nft PATCH] doc: Review man page synopses, Phil Sutter
[nft PATCH] py: Fix gitignore of lib/ directory, Phil Sutter
[PATCH AUTOSEL 5.0 64/99] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook(), Sasha Levin
[PATCH AUTOSEL 5.0 63/99] netfilter: ctnetlink: don't use conntrack/expect object addresses as id, Sasha Levin
[PATCH AUTOSEL 5.0 62/99] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
[PATCH AUTOSEL 5.0 65/99] netfilter: nat: fix icmp id randomization, Sasha Levin
[PATCH AUTOSEL 5.0 75/99] netfilter: fix nf_l4proto_log_invalid to log invalid packets, Sasha Levin
[PATCH AUTOSEL 5.0 74/99] netfilter: never get/set skb->tstamp, Sasha Levin
[PATCH AUTOSEL 4.19 46/81] netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook(), Sasha Levin
[PATCH AUTOSEL 4.19 45/81] netfilter: ctnetlink: don't use conntrack/expect object addresses as id, Sasha Levin
[PATCH AUTOSEL 4.19 44/81] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
[PATCH AUTOSEL 4.19 52/81] netfilter: fix nf_l4proto_log_invalid to log invalid packets, Sasha Levin
[PATCH AUTOSEL 4.19 71/81] netfilter: nf_tables: add missing ->release_ops() in error path of newrule(), Sasha Levin
[PATCH AUTOSEL 4.19 70/81] netfilter: nf_tables: use-after-free in dynamic operations, Sasha Levin
[PATCH AUTOSEL 4.14 24/95] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
[PATCH AUTOSEL 4.14 25/95] netfilter: ctnetlink: don't use conntrack/expect object addresses as id, Sasha Levin
[PATCH AUTOSEL 4.14 81/95] netfilter: nf_tables: warn when expr implements only one of activate/deactivate, Sasha Levin
[PATCH AUTOSEL 4.9 17/25] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
[PATCH AUTOSEL 4.4 11/14] ipvs: do not schedule icmp errors from tunnels, Sasha Levin
Subject: [PATCH netfilter] ipvs: Fix crash when ipv6 route unreach,
hujunwei
[PATCH nft v2] evaluate: force full cache update on rule index translation,
Eric Garver
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]