Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- [PATCH 0/1] ipset patch for the nf tree,
Jozsef Kadlecsik
- A bug in commit: Use flock() for --concurrent option,
Tangchen (UVP)
- [PATCH nf-next] netfilter: nf_defrag: Fix compiler errors,
Subash Abhinov Kasiviswanathan
- [nf-next:master 16/16] net/ipv6/netfilter/nf_defrag_ipv6_hooks.c:68:9: error: 'struct sk_buff' has no member named '_nfct',
kbuild test robot
- [nf-next:master 16/16] WARNING: vmlinux.o(.data+0x1911f0): Section mismatch in reference from the variable packet_raw to the function .init.text:iptable_raw_table_init(), kbuild test robot
- [PATCH v2] netfilter : add NAT support for shifted portmap ranges,
Thierry Du Tre
- [iptables v2] extensions: add support for 'srh' match,
Ahmed Abdelsalam
- [nftables] vmap and bit-sized headers,
Florian Westphal
- [PATCH] netfilter: nf_tables: fix odd_ptr_err.cocci warnings,
Julia Lawall
- [PATCH nf-next] netfilter: clusterip: make sure arp hooks are available,
Florian Westphal
- [PATCH nf-next v4] netfilter: nf_defrag: Skip defrag if NOTRACK is set,
Subash Abhinov Kasiviswanathan
- [PATCH net-next] netfilter: improve flow table Kconfig dependencies,
Arnd Bergmann
- [PATCH nf-next] netfilter: core: return EBUSY in case NAT hook is already in use, Pablo Neira Ayuso
- [PATCH net-next] netfilter: nf_flow_table: remove duplicated include from nf_flow_table_ipv6.c,
Wei Yongjun
- [PATCH net-next] netfilter: nf_queue: remove duplicated include from nf_queue.c,
Wei Yongjun
- [nft PATCH] Don't merge adjacent/overlapping ranges by default,
Phil Sutter
- [PATCH] netfilter: nf_tables: copy and paste bug in nf_tables_getflowtable(),
Dan Carpenter
- [PATCH net-next] netfilter: core: make local function __nf_unregister_net_hook static,
Wei Yongjun
- [PATCH net-next] netfilter: nf_tables: fix a typo in nf_tables_getflowtable(),
Wei Yongjun
- [PATCH] netfilter: nf_tables: delete chains via chain handle, Harsha Sharma
- [PATCH 0/2] parser_bison: delete chains via chain handle,
Harsha Sharma
- [PATCH nf-next 0/7] nf_tables: remove struct nft_af_info,
Pablo Neira Ayuso
- [PATCH nft] build: Bump version to v0.8.1, Pablo Neira Ayuso
- [PATCH nf-next] netfilter: x_tables: unbreak module auto loading,
Florian Westphal
- compilation warning --with-mini-gmp,
Pablo Neira Ayuso
- [PATCH v3] netfilter: nf_tables: delete table via table handle, Harsha Sharma
- [PATCH 00/52] Netfilter/IPVS updates for net-next,
Pablo Neira Ayuso
- [PATCH 07/52] netfilter: ipset: use nfnl_mutex_is_locked, Pablo Neira Ayuso
- [PATCH 38/52] netfilter: remove route_key_size field in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH 44/52] netfilter: nf_tables: add flow table netlink frontend, Pablo Neira Ayuso
- [PATCH 49/52] netfilter: nf_tables: flow offload expression, Pablo Neira Ayuso
- [PATCH 50/52] netfilter: ipset: use swap macro instead of _manually_ swapping values, Pablo Neira Ayuso
- [PATCH 46/52] netfilter: flow table support for IPv4, Pablo Neira Ayuso
- [PATCH 52/52] netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit(), Pablo Neira Ayuso
- [PATCH 51/52] netfilter: ipset: Fix "don't update counters" mode when counters used at the matching, Pablo Neira Ayuso
- [PATCH 48/52] netfilter: flow table support for the mixed IPv4/IPv6 family, Pablo Neira Ayuso
- [PATCH 37/52] netfilter: move reroute indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH 45/52] netfilter: add generic flow table infrastructure, Pablo Neira Ayuso
- [PATCH 47/52] netfilter: flow table support for IPv6, Pablo Neira Ayuso
- [PATCH 40/52] netfilter: meta: secpath support, Pablo Neira Ayuso
- [PATCH 39/52] netfilter: remove struct nf_afinfo and its helper functions, Pablo Neira Ayuso
- [PATCH 43/52] netfilter: nf_conntrack: add IPS_OFFLOAD status bit, Pablo Neira Ayuso
- [PATCH 42/52] netfilter: nf_tables: remove nft_dereference(), Pablo Neira Ayuso
- [PATCH 41/52] netfilter: remove defensive check on malformed packets from raw sockets, Pablo Neira Ayuso
- [PATCH 32/52] netfilter: connlimit: split xt_connlimit into front and backend, Pablo Neira Ayuso
- [PATCH 36/52] netfilter: move route indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH 31/52] netfilter: nf_tables: remove hooks from family definition, Pablo Neira Ayuso
- [PATCH 35/52] netfilter: remove saveroute indirection in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH 34/52] netfilter: move checksum_partial indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH 30/52] netfilter: nf_tables: remove multihook chains and families, Pablo Neira Ayuso
- [PATCH 33/52] netfilter: move checksum indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH 24/52] netfilter: nf_tables: add nft_set_is_anonymous() helper, Pablo Neira Ayuso
- [PATCH 29/52] netfilter: nf_tables_inet: don't use multihook infrastructure anymore, Pablo Neira Ayuso
- [PATCH 28/52] netfilter: core: support for NFPROTO_INET hook registration, Pablo Neira Ayuso
- [PATCH 27/52] netfilter: core: pass family as parameter to nf_remove_net_hook(), Pablo Neira Ayuso
- [PATCH 26/52] netfilter: core: pass hook number, family and device to nf_find_hook_list(), Pablo Neira Ayuso
- [PATCH 23/52] netfilter: nf_tables: explicit nft_set_pktinfo() call from hook path, Pablo Neira Ayuso
- [PATCH 17/52] netfilter: don't allocate space for arp/bridge hooks unless needed, Pablo Neira Ayuso
- [PATCH 25/52] netfilter: core: add nf_remove_net_hook, Pablo Neira Ayuso
- [PATCH 15/52] netfilter: reduce hook array sizes to what is needed, Pablo Neira Ayuso
- [PATCH 20/52] netfilter: core: only allow one nat hook per hook point, Pablo Neira Ayuso
- [PATCH 21/52] netfilter: nf_tables: reject nat hook registration if prio is before conntrack, Pablo Neira Ayuso
- [PATCH 22/52] netfilter: nf_tables_arp: don't set forward chain, Pablo Neira Ayuso
- [PATCH 19/52] netfilter: xtables: add and use xt_request_find_table_lock, Pablo Neira Ayuso
- [PATCH 16/52] netfilter: don't allocate space for decnet hooks unless needed, Pablo Neira Ayuso
- [PATCH 18/52] netfilter: reduce NF_MAX_HOOKS define, Pablo Neira Ayuso
- [PATCH 14/52] netfilter: add defines for arp/decnet max hooks, Pablo Neira Ayuso
- [PATCH 08/52] netfilter: ipset: add resched points during set listing, Pablo Neira Ayuso
- [PATCH 13/52] netfilter: reduce size of hook entry point locations, Pablo Neira Ayuso
- [PATCH 10/52] netfilter: core: make nf_unregister_net_hooks simple wrapper again, Pablo Neira Ayuso
- [PATCH 11/52] netfilter: core: remove synchronize_net call if nfqueue is used, Pablo Neira Ayuso
- [PATCH 12/52] netfilter: core: free hooks with call_rcu, Pablo Neira Ayuso
- [PATCH 09/52] netfilter: nf_conntrack_h323: Remove unwanted comments., Pablo Neira Ayuso
- [PATCH 05/52] netfilter: conntrack: timeouts can be const, Pablo Neira Ayuso
- [PATCH 04/52] netfilter: mark expected switch fall-throughs, Pablo Neira Ayuso
- [PATCH 06/52] netfilter: ipvs: Remove useless ipvsh param of frag_safe_skb_hp, Pablo Neira Ayuso
- [PATCH 02/52] netfilter: conntrack: constify list of builtin trackers, Pablo Neira Ayuso
- [PATCH 03/52] netfilter: conntrack: l4 protocol trackers can be const, Pablo Neira Ayuso
- [PATCH 01/52] netfilter: conntrack: remove nlattr_size pointer from l4proto trackers, Pablo Neira Ayuso
- Re: [PATCH 00/52] Netfilter/IPVS updates for net-next, David Miller
- [PATCH v2] netfilter: nf_tables: delete table via table handle,
Harsha Sharma
- [PATCH v3] parser_bison: extend nft to delete table via table handle, Harsha Sharma
- [net-next v2] netfilter: add segment routing header 'srh' match,
Ahmed Abdelsalam
- Re: [net-next v2] netfilter: add segment routing header 'srh' match, Pablo Neira Ayuso
[PATCH V5 5/5] netfilter: nf_nat_snmp_basic: use asn1 decoder library,
Taehee Yoo
[PATCH V5 4/5] netfilter: nf_nat_snmp_basic: use nf_ct_helper_log, Taehee Yoo
[PATCH V5 3/5] netfilter: nf_nat_snmp_basic: replace ctinfo with dir., Taehee Yoo
[PATCH V5 2/5] netfilter: nf_nat_snmp_basic: remove debug parameter, Taehee Yoo
[PATCH V5 1/5] netfilter: nf_nat_snmp_basic: remove useless comment, Taehee Yoo
[PATCH V5 0/5] netfilter: nf_nat_snmp_basic: use ASN.1 decoder,
Taehee Yoo
[RFC PATCH nf-next] netfilter: nf_tables: nft_flow_offload_type can be static, kbuild test robot
[PATCH nf-next] netfilter: avoid arp/bridge WARN_ON if arp/ebtables not supported,
Florian Westphal
[nf-next:master 54/54] net//netfilter/nf_flow_table.c:196:6: error: void value not ignored as it ought to be, kbuild test robot
[PATCH v2] parser_bison: extend nft to delete table via table handle, Harsha Sharma
[PATCH] netfilter: nf_tables: delete table via table handle,
Harsha Sharma
[PATCH] parser_bison: extend nft to delete table via table handle,
Harsha Sharma
[ANNOUNCE] ipset 6.35 released, Jozsef Kadlecsik
[PATCH] iptables: add support for rmirror target, Colin Zeidler
[PATCH] netfilter: add encapsulated packet mirroring target, Colin Zeidler
suspicious RCU usage at net/netfilter/ipset/ip_set_core.c:LINE, syzbot
[xtables-addons][PATCH 0/2] Compatibility fixes for linux 4.14 and 4.15,
Marcelo Henrique Cerri
general protection fault in nf_tables_dump_obj_done,
syzbot
[PATCH iptables] extensions: hashlimit: always print timeout on translations,
Pablo Neira Ayuso
[PATCH nf-next v3] netfilter: nf_defrag: Skip defrag if NOTRACK is set,
Subash Abhinov Kasiviswanathan
[tip:core/rcu] netlink: Remove smp_read_barrier_depends() from comment, tip-bot for Paul E. McKenney
[tip:core/rcu] netfilter: Remove now-redundant smp_read_barrier_depends(), tip-bot for Paul E. McKenney
[tip:core/rcu] netfilter: Eliminate cond_resched_rcu_qs() in favor of cond_resched(), tip-bot for Paul E. McKenney
[PATCH iptables] extensions: hashlimit: fix incorrect burst in translations,
Pablo Neira Ayuso
[PATCH v3] extensions: libxt_hashlimit: Do not insert default timeout or burst, Duncan Roe
[ANNOUNCE] libnftnl 1.0.9 release, Pablo Neira Ayuso
[PATCH nf-next,v2] netfilter: remove defensive check on malformed packets from raw sockets, Pablo Neira Ayuso
[PATCH] netfilter: add nf_queue_entry forward declaration,
Arnd Bergmann
[PATCH nf-next] netfilter: nf_tables: remove nft_dereference(), Pablo Neira Ayuso
[PATCH nf-next RFC 0/8] simplify nf_tables family and filter chain infra,
Pablo Neira Ayuso
[PATCH nf-next] netfilter: remove defensive check on malformed packets from raw sockets, Pablo Neira Ayuso
Unable to git clone git repositories,
Duncan Roe
[iptables] extensions: add support for 'srh' match,
Ahmed Abdelsalam
[net-next] netfilter: add segment routing header 'srh' match,
Ahmed Abdelsalam
[PATCH libnftnl] tests: nft-parsing-test: fix warning - ignoring return value of fgets,
Harsha Sharma
[PATCH libnftnl] tests: change char * pointer to constant (const char *),
Harsha Sharma
[PATCH libnftnl] src: Fix exporting symbols with clang, Pablo Neira Ayuso
[PATCH libnftnl] build: libnftnl 1.0.9 release, Pablo Neira Ayuso
[PATCH libnftnl,v2] data_reg: calm down compilation warning in nftnl_data_reg_value_json_parse(), Pablo Neira Ayuso
[PATCH libnftnl] data_reg: calm down compilation warning in nftnl_data_reg_value_json_parse(), Pablo Neira Ayuso
[PATCH nf-next 7/7,v5] netfilter: remove struct nf_afinfo and its helper functions, Pablo Neira Ayuso
[PATCH] netfilter: fix int overflow in xt_alloc_table_info(),
Dmitry Vyukov
[PATCH v2] extensions: libxt_hashlimit: Do not print default timeout and burst,
Harsha Sharma
Re: lost connection to test machine (3),
Dmitry Vyukov
[PATCH nf-next,v4 0/7] get rid of struct nf_afinfo,
Pablo Neira Ayuso
- [PATCH nf-next,v4 1/7] netfilter: move checksum indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH nf-next,v4 2/7] netfilter: move checksum_partial indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH nf-next,v4 4/7] netfilter: move route indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH nf-next,v4 5/7] netfilter: move reroute indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH nf-next,v4 6/7] netfilter: remove route_key_size field in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH nf-next,v4 3/7] netfilter: remove saveroute indirection in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH nf-next,v4 7/7] netfilter: remove struct nf_afinfo and its helper functions, Pablo Neira Ayuso
[nf-next:for-net-next4 37/40] net/netfilter/utils.c:60: undefined reference to `nf_ip_route', kbuild test robot
[PATCH v2] netfilter: nf_tables: allocate table handle, Harsha Sharma
[bisected] Forwarded packets occasionally has loopback output interface in Netfilter,
Anders K. Pedersen | Cohaesio
[PATCH V4 5/5] netfilter: nf_nat_snmp_basic: use asn1 decoder library,
Taehee Yoo
[PATCH V4 4/5] netfilter: nf_nat_snmp_basic: use nf_ct_helper_log, Taehee Yoo
[PATCH V4 3/5] netfilter: nf_nat_snmp_basic: replace ctinfo with dir., Taehee Yoo
[PATCH V4 2/5] netfilter: nf_nat_snmp_basic: remove debug parameter, Taehee Yoo
[PATCH V4 1/5] netfilter: nf_nat_snmp_basic: remove useless comment, Taehee Yoo
[PATCH V4 0/5] netfilter: nf_nat_snmp_basic: use ASN.1 decoder, Taehee Yoo
[PATCH nf] netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done(),
Hangbin Liu
[PATCH] src: print 'handle' attribute in tables,
Harsha Sharma
[PATCH] src: parse new handle attribute for tables, Harsha Sharma
[PATCH] netfilter: nf_tables: allocate table handle,
Harsha Sharma
[PATCH nf-next,v3 0/7] Flow offload infrastructure,
Pablo Neira Ayuso
- [PATCH nf-next,v3 1/7] netfilter: nf_tables: add flow table netlink frontend, Pablo Neira Ayuso
- [PATCH nf-next,v3 4/7] netfilter: flow table support for IPv6, Pablo Neira Ayuso
- [PATCH nf-next,v3 5/7] netfilter: flow table support for the mixed IPv4/IPv6 family, Pablo Neira Ayuso
- [PATCH nf-next,v3 6/7] netfilter: nf_tables: flow offload expression, Pablo Neira Ayuso
- [PATCH nf-next,v3 2/7] netfilter: add generic flow table infrastructure, Pablo Neira Ayuso
- [PATCH nf-next,v3 3/7] netfilter: flow table support for IPv4, Pablo Neira Ayuso
- [PATCH RFC nf-next,v3 7/7] netfilter: nf_flow_table: add hardware offload support, Pablo Neira Ayuso
[PATCH nft] src: do not print limit keyword inside object definition,
Pablo M. Bermudo Garay
[PATCH iptables] iptables: Remove const qualifier from struct option.,
Varsha Rao
[PATCH] ebtables: Add filter for matching on a string,
Bernie Harris
[ebtables PATCH] Add filter for matching on a string, Bernie Harris
[PATCH nf-next,v3 0/7] get rid of struct nf_afinfo,
Pablo Neira Ayuso
- [PATCH nf-next,v3 1/7] netfilter: move checksum indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH nf-next,v3 2/7] netfilter: move checksum_partial indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH nf-next,v3 3/7] netfilter: remove saveroute indirection in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH nf-next,v3 5/7] netfilter: move reroute indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH nf-next,v3 4/7] netfilter: move route indirection to struct nf_ipv6_ops, Pablo Neira Ayuso
- [PATCH nf-next,v3 6/7] netfilter: remove route_key_size field in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH nf-next,v3 7/7] netfilter: core: remove struct nf_afinfo and its helper functions, Pablo Neira Ayuso
[PATCH] extensions: libipt_DNAT: support shifted portmap ranges, Thierry Du Tre
[PATCH] netfilter : add NAT support for shifted portmap ranges,
Thierry Du Tre
[PATCH nf] netfilter: uapi: correct UNTRACKED conntrack state bit number,
Florian Westphal
[nf-next:for-net-next3 38/40] net/netfilter/utils.c:56: undefined reference to `nf_ip6_reroute', kbuild test robot
[nf-next:for-net-next3 38/40] (.text.nf_reroute+0x58): undefined reference to `nf_ip6_reroute', kbuild test robot
[nf-next:for-net-next3 36/40] net/netfilter/utils.c:54: undefined reference to `nf_ip6_saveroute', kbuild test robot
[nf-next:for-net-next3 36/40] (.text.nf_saveroute+0x58): undefined reference to `nf_ip6_saveroute', kbuild test robot
[nf-next:for-net-next3 35/40] utils.c:undefined reference to `nf_ip6_checksum_partial', kbuild test robot
[nf-next:for-net-next3 35/40] net/netfilter/utils.c:37: undefined reference to `nf_ip6_checksum_partial', kbuild test robot
[nf-next:for-net-next3 37/40] net/netfilter/xt_addrtype.c:55: undefined reference to `nf_ip6_route', kbuild test robot
[nf-next:for-net-next2 38/40] net/netfilter/utils.c:53: undefined reference to `nf_ip_reroute', kbuild test robot
[nf-next:for-net-next3 34/40] utils.c:undefined reference to `nf_ip6_checksum', kbuild test robot
[nf-next:for-net-next3 34/40] net/netfilter/utils.c:17: undefined reference to `nf_ip6_checksum', kbuild test robot
[PATCH nf-next v2] netfilter: nf_defrag_ipv4: Skip defrag if NOTRACK is set,
Subash Abhinov Kasiviswanathan
[nf-next:for-net-next2 36/40] net/netfilter/utils.c:51: undefined reference to `nf_ip_saveroute', kbuild test robot
[nf-next:for-net-next2 35/40] net/netfilter/utils.c:33: undefined reference to `nf_ip_checksum_partial', kbuild test robot
[nf-next:for-net-next2 34/40] net/netfilter/utils.c:14: undefined reference to `nf_ip_checksum', kbuild test robot
[nf-next:for-net-next3 32/40] net/netfilter/nf_conncount.c:74:9-10: WARNING: return of 0/1 in function 'already_closed' with return type bool,
kbuild test robot
[nf-next:for-net-next3 28/40] net/netfilter/core.c:403:6: sparse: symbol '__nf_unregister_net_hook' was not declared. Should it be static?,
kbuild test robot
[nf-next:for-net-next2 38/40] net/ipv6/netfilter.c:96:5: error: redefinition of 'nf_ip6_reroute', kbuild test robot
[nf-next:for-net-next2 35/40] net/ipv6/netfilter.c:166:9: error: redefinition of 'nf_ip6_checksum_partial', kbuild test robot
Unable to compile linux-kernel pulled from nf-next tree, Harsha Sharma
[PATCH] extensions: libxt_hashlimit: Do not print default timeout and burst,
Harsha Sharma
[PATCH nf] netfilter: nf_tables: fix chain filter in nf_tables_dump_rules(),
Pablo Neira Ayuso
[nf-next:for-net-next 36/40] net/netfilter/utils.c:56:24: error: passing argument 1 of 'nf_ip6_reroute' from incompatible pointer type, kbuild test robot
[nf-next:for-net-next 35/40] net/ipv6/netfilter.c:111:5: error: redefinition of 'nf_ip6_route', kbuild test robot
[PATCH nf-next,v2 1/7] netfilter: remove checksum indirection in struct nf_afinfo,
Pablo Neira Ayuso
- [PATCH nf-next,v2 2/7] netfilter: remove checksum_partial indirection in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH nf-next,v2 3/7] netfilter: remove saveroute indirection in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH nf-next,v2 4/7] netfilter: remove route indirection in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH nf-next,v2 5/7] netfilter: remove reroute indirection in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH nf-next,v2 6/7] netfilter: remove route_key_size field in struct nf_afinfo, Pablo Neira Ayuso
- [PATCH nf-next,v2 7/7] netfilter: core: remove struct nf_afinfo and its helper functions, Pablo Neira Ayuso
[nf-next:for-net-next 33/40] net//ipv6/netfilter.c:166:9: error: conflicting types for 'nf_ip6_checksum_partial', kbuild test robot
[nf-next:for-net-next 33/40] include/linux/netfilter_ipv6.h:36:8: error: unknown type name 'inline__sum16', kbuild test robot
[nf-next:for-net-next 36/40] net//netfilter/utils.c:60:9: warning: 'ret' may be used uninitialized in this function, kbuild test robot
[nf-next:for-net-next 34/40] include/linux/netfilter_ipv6.h:30:57: warning: 'struct nf_queue_entry' declared inside parameter list will not be visible outside of this definition or declaration, kbuild test robot
[nf-next:for-net-next 32/40] net//ipv6/netfilter.c:133:9: error: redefinition of 'nf_ip6_checksum', kbuild test robot
[nf-next:for-net-next 34/40] include/linux/netfilter_ipv4.h:15:56: warning: 'struct nf_queue_entry' declared inside parameter list will not be visible outside of this definition or declaration, kbuild test robot
[RFC] Can someone please review my latest wiki update,
Duncan Roe
[libnftnl PATCH 0/6] Another round of Covscan indicated fixes,
Phil Sutter
[PATCH 00/12] Netfilter fixes for net,
Pablo Neira Ayuso
- [PATCH 03/12] netfilter: nf_ct_h323: Convert CHECK_BOUND macro to function, Pablo Neira Ayuso
- [PATCH 02/12] netfilter: exit_net cleanup check added, Pablo Neira Ayuso
- [PATCH 01/12] netfilter: remove redundant assignment to e, Pablo Neira Ayuso
- [PATCH 07/12] netfilter: nfnetlink_cthelper: Add missing permission checks, Pablo Neira Ayuso
- [PATCH 04/12] netfilter: nf_ct_h323: Extend nf_h323_error_boundary to work on bits as well, Pablo Neira Ayuso
- [PATCH 11/12] netfilter: exthdr: add missign attributes to policy, Pablo Neira Ayuso
- [PATCH 12/12] netfilter: ip6t_MASQUERADE: add dependency on conntrack module, Pablo Neira Ayuso
- [PATCH 05/12] netfilter: conntrack: lower timeout to RETRANS seconds if window is 0, Pablo Neira Ayuso
- [PATCH 08/12] netfilter: xt_bpf: add overflow checks, Pablo Neira Ayuso
- [PATCH 09/12] netfilter: xt_osf: Add missing permission checks, Pablo Neira Ayuso
- [PATCH 10/12] netfilter: ipt_CLUSTERIP: fix clusterip_net_exit build regression, Pablo Neira Ayuso
- [PATCH 06/12] netfilter: conntrack: clamp timeouts to INT_MAX, Pablo Neira Ayuso
- Re: [PATCH 00/12] Netfilter fixes for net, David Miller
- <Possible follow-ups>
- [PATCH 00/12] Netfilter fixes for net, Pablo Neira Ayuso
- [PATCH 01/12] netfilter: conntrack: remove duplicated include from nf_conntrack_proto_udp.c, Pablo Neira Ayuso
- [PATCH 02/12] netfilter: xt_cluster: add dependency on conntrack module, Pablo Neira Ayuso
- [PATCH 04/12] netfilter: conntrack: place 'new' timeout in first location too, Pablo Neira Ayuso
- [PATCH 07/12] netfilter: nf_tables: release chain in flushing set, Pablo Neira Ayuso
- [PATCH 06/12] netfilter: kconfig: nat related expression depend on nftables core, Pablo Neira Ayuso
- [PATCH 08/12] netfilter: conntrack: reset tcp maxwin on re-register, Pablo Neira Ayuso
- [PATCH 11/12] netfilter: nfnetlink_queue: Solve the NFQUEUE/conntrack clash for NF_REPEAT, Pablo Neira Ayuso
- [PATCH 09/12] netfilter: conntrack: timeout interface depend on CONFIG_NF_CONNTRACK_TIMEOUT, Pablo Neira Ayuso
- [PATCH 12/12] netfilter: xt_hashlimit: use s->file instead of s->private, Pablo Neira Ayuso
- [PATCH 10/12] netfilter: cttimeout: ctnl_timeout_find_get() returns incorrect pointer to type, Pablo Neira Ayuso
- [PATCH 05/12] netfilter: nf_tables: rework ct timeout set support, Pablo Neira Ayuso
- [PATCH 03/12] netfilter: xt_checksum: ignore gso skbs, Pablo Neira Ayuso
- Re: [PATCH 00/12] Netfilter fixes for net, David Miller
[PATCH] Fix handling of verdicts after NF_QUEUE,
Debabrata Banerjee
[PATCH nft] netlink_linearize: exthdr op must be u32,
Florian Westphal
[PATCH nf] netfilter: exthdr: add missign attributes to policy,
Florian Westphal
[PATCH][netfilter-next] netfilter: conntrack: make struct nf_conntrack_l4proto_gre4 static,
Colin King
[PATCH nf-next 0/7] get rid of struct nf_afinfo,
Pablo Neira Ayuso
[PATCH nf-next,v2 0/7] handle NFPROTO_INET from core,
Pablo Neira Ayuso
- [PATCH nf-next,v2 2/7] netfilter: core: pass hook number, family and device to nf_find_hook_list(), Pablo Neira Ayuso
- [PATCH nf-next,v2 1/7] netfilter: core: add nf_remove_net_hook, Pablo Neira Ayuso
- [PATCH nf-next,v2 3/7] netfilter: core: pass family as parameter to nf_remove_net_hook(), Pablo Neira Ayuso
- [PATCH nf-next,v2 5/7] netfilter: nf_tables_inet: don't use multihook infrastructure anymore, Pablo Neira Ayuso
- [PATCH nf-next,v2 4/7] netfilter: core: support for NFPROTO_INET hook registration, Pablo Neira Ayuso
- [PATCH nf-next,v2 7/7] netfilter: nf_tables: remove hooks from family definition, Pablo Neira Ayuso
- [PATCH nf-next,v2 6/7] netfilter: nf_tables: remove multihook chains and families, Pablo Neira Ayuso
[PATCH nf-next] netfilter: nf_tables: add nft_set_is_anonymous() helper, Pablo Neira Ayuso
[PATCH nf-next,v2] netfilter: nf_tables: explicit nft_set_pktinfo() call from hook path, Pablo Neira Ayuso
[PATCH nf-next,v2] netfilter: nf_tables_arp: don't set forward chain, Pablo Neira Ayuso
[PATCH v5 nf-next] netfilter: connlimit: split xt_connlimit into front and backend,
Florian Westphal
[nft PATCH] tests/py: trivial: Fix error message,
Phil Sutter
[nft PATCH] Fix protocol context update on big-endian systems,
Phil Sutter
[PATCH nf-next 0/3] netfilter: disable parallel use of xtables and nftables nat,
Florian Westphal
[PATCH v4 nf-next] netfilter: connlimit: split xt_connlimit into front and backend,
Florian Westphal
[PATCH v3 nf-next 0/5] netfilter: reduce hook array sizes,
Florian Westphal
[PATCH] netfilter: fix clusterip_net_exit build regression,
Arnd Bergmann
[PATCH nf-next 0/3] netfilter: reduce hook array sizes to what is needed,
Florian Westphal
[PATCH nf-next RFC,v2 0/6] Flow offload infrastructure,
Pablo Neira Ayuso
- [PATCH nf-next RFC,v2 2/6] netfilter: nf_tables: add flow table netlink frontend, Pablo Neira Ayuso
- [PATCH nf-next RFC,v2 5/6] netfilter: nf_tables: flow offload expression, Pablo Neira Ayuso
- [PATCH nf-next RFC,v2 3/6] netfilter: add generic flow table infrastructure, Pablo Neira Ayuso
- [PATCH nf-next RFC,v2 4/6] netfilter: flow table support for IPv4, Pablo Neira Ayuso
- [PATCH nf-next RFC,v2 6/6] netfilter: nft_flow_offload: add ndo hooks for hardware offload, Pablo Neira Ayuso
- [PATCH nf-next RFC,v2 1/6] netfilter: nf_conntrack: add IPS_OFFLOAD status bit, Pablo Neira Ayuso
linux-next: manual merge of the netfilter-next tree with the netfilter tree,
Stephen Rothwell
linux-next: manual merge of the vfs tree with the netfilter tree,
Stephen Rothwell
[nf-next:master 14/14] net/bridge/br_netfilter_hooks.c:994:30: error: 'struct netns_nf' has no member named 'hooks_bridge'; did you mean 'hooks_ipv4'?,
kbuild test robot
[nf-next:master 14/14] net/netfilter/nf_queue.c:208:34: error: 'const struct netns_nf' has no member named 'hooks_bridge'; did you mean 'hooks_ipv4'?, kbuild test robot
[PATCH 27/45] net: remove duplicate includes,
Pravin Shedge
[PATCH v2 nf-next] netfilter: meta: secpath support, Florian Westphal
[PATCH v3 nf-next] netfilter: connlimit: split xt_connlimit into front/backend,
Florian Westphal
[PATCH] src: Add option -D to define variable from command line, Harsha Sharma
[PATCH] netfilter: xt_osf: Add missing permission checks,
Kevin Cernekee
[RFC PATCH nft V6 1/2] src: Add import command for low level json,
Shyam Saini
[PATCH] net: netfilter: fix coding style, Lin Zhang
[PATCH] src: Add option '-D' to define variables from command-line,
Harsha Sharma
[PATCH] iptables: masquerade: add randomize-full support,
Max Laverse
[PATCH] netfilter: nfnetlink_cthelper: Add missing permission checks,
Kevin Cernekee
[PATCH nf-next 0/2] netfilter: reduce size of hook entry points,
Florian Westphal
[PATCH] doc: nft.8 aim for consistent synopses throughout,
Duncan Roe
[PATCH nf-next v2] netfilter: connlimit: split xt_connlimit into front/backend,
Florian Westphal
[PATCH tip/core/rcu 19/21] netlink: Remove smp_read_barrier_depends() from comment, Paul E. McKenney
[PATCH tip/core/rcu 14/21] netfilter: Remove now-redundant smp_read_barrier_depends(), Paul E. McKenney
[PATCH tip/core/rcu 03/10] netfilter: Eliminate cond_resched_rcu_qs() in favor of cond_resched(), Paul E. McKenney
[PATCH next] nftables: add inbound ipsec matching,
Florian Westphal
[PATCH nf-next] netfilter: connlimit: split xt_connlimit into front/backend,
Florian Westphal
[PATCH] netfilter: add overflow checks in xt_bpf.c,
Jann Horn
[PATCH nf-next 0/3] netfilter: reduce netns create/delete cost,
Florian Westphal
[PATCH ipset nf-next] netfilter: ipset: add resched points during set listing,
Florian Westphal
[PATCH ipset nf-next] netfilter: ipset: use nfnl_mutex_is_locked,
Florian Westphal
[PATCH nf-next] net: netfilter: nf_conntrack_h323: Remove unwanted comments.,
Varsha Rao
[PATCH] iptables: xtables-eb: Remove const qualifier from struct option,
Varsha Rao
[PATCH nft] tests: shell: Modify ipv6_maps_ipv4_0 file permission.,
Varsha Rao
[PATCH 1/1] iptables: patch to correct linker flag sequence,
Jay Shah
[PATCH] tests/py: add test for empty string match,
Harsha Sharma
[PATCH nf-next,RFC 1/3] netfilter: nf_conntrack: add 64-bit conntrack ID extension,
Pablo Neira Ayuso
inquiry for behavior of xt_RATEEST., Taehee Yoo
[PATCH] iptables: extensions: Fix MARK target help,
Mart Frauenlob
[PATCH] doc: nft.8 Syslog level is introduced by "level" not "syslog-level",
Duncan Roe
[PATCH net-next] bridge: ebtables: Avoid resetting limit rule state,
Linus Lüssing
static libnftables by now?,
Pablo Neira Ayuso
[PATCH nft 1/2] parser_bison: dismiss anonymous meters,
Pablo Neira Ayuso
[PATCH] evaluate: print error for null string befort assert statement,
Harsha Sharma
[PATCH nft] src: deprecate "flow table" syntax, replace it by "meter",
Pablo Neira Ayuso
nft crashes on empty interface name,
Harsha Sharma
[PATCH nft 1/2] utils: fix one compilation error with --with-mini-gmp,
Pablo Neira Ayuso
[PATCH nf-next] netfilter: nf_tables: explicit nft_set_pktinfo() call from hook path, Pablo Neira Ayuso
[PATCH nf-next 1/2] netfilter: nf_tables_arp: don't set forward chain,
Pablo Neira Ayuso
[PATCH nf-next 0/5] promote NFPROTO_INET as real family,
Pablo Neira Ayuso
[RFC PATCH] netfilter: call synchronize_net only once from nf_register_net_hooks,
Giuseppe Scrivano
nftables: lockout with 0008split_tables_0 test,
Phil Sutter
[PATCH nf] netfilter: conntrack: lower timeout to RETRANS seconds if window is 0,
Florian Westphal
[PATCH V3 0/5] netfilter: nf_nat_snmp_basic: use ASN.1 decoder,
Taehee Yoo
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]