Linux Netfilter / IP Tables Devel

• Date Index

• [iptables PATCH] extensions: libxt_sctp: Add an extra assert(), Phil Sutter
  • <Possible follow-ups>
  • [iptables PATCH] extensions: libxt_sctp: Add an extra assert(), Phil Sutter
    • Re: [iptables PATCH] extensions: libxt_sctp: Add an extra assert(), Phil Sutter
• [PATCH v2 0/7] Dynamic hook interface binding, Phil Sutter
  • [PATCH v2 6/7] netfilter: nf_tables: Add notications for hook changes, Phil Sutter
  • [PATCH v2 1/7] netfilter: nf_tables: Store user-defined hook ifname, Phil Sutter
  • [PATCH v2 4/7] netfilter: nf_tables: Dynamic hook interface binding, Phil Sutter
  • [PATCH v2 3/7] netfilter: nf_tables: Report active interfaces to user space, Phil Sutter
  • [PATCH v2 2/7] netfilter: nf_tables: Relax hook interface binding, Phil Sutter
  • [PATCH v2 7/7] selftests: netfilter: Torture nftables netdev hooks, Phil Sutter
  • [PATCH v2 5/7] netfilter: nf_tables: Correctly handle NETDEV_RENAME events, Phil Sutter
  • Re: [PATCH v2 0/7] Dynamic hook interface binding, Pablo Neira Ayuso
    • Re: [PATCH v2 0/7] Dynamic hook interface binding, Phil Sutter
      • Re: [PATCH v2 0/7] Dynamic hook interface binding, Pablo Neira Ayuso
        • Re: [PATCH v2 0/7] Dynamic hook interface binding, Phil Sutter
          • Re: [PATCH v2 0/7] Dynamic hook interface binding, Pablo Neira Ayuso
          • Re: [PATCH v2 0/7] Dynamic hook interface binding, Pablo Neira Ayuso
• tcpwrite question, Byron Mugabi
  • <Possible follow-ups>
  • tcpwrite question, Byron Mugabi
• [PATCH nft 0/3] vlan support updates, Pablo Neira Ayuso
  • [PATCH nft 2/3] tests: shell: add vlan double tagging match simple test case, Pablo Neira Ayuso
  • [PATCH nft 3/3] tests: shell: add vlan mangling test case, Pablo Neira Ayuso
  • [PATCH nft 1/3] evaluate: bogus protocol conflicts in vlan with implicit dependencies, Pablo Neira Ayuso
• [PATCH bpf-next 0/4] netfilter: Add the capability to offload flowtable in XDP layer, Lorenzo Bianconi
  • [PATCH bpf-next 1/4] netfilter: nf_tables: add flowtable map for xdp offload, Lorenzo Bianconi
  • [PATCH bpf-next 2/4] netfilter: add bpf_xdp_flow_offload_lookup kfunc, Lorenzo Bianconi
    • Re: [PATCH bpf-next 2/4] netfilter: add bpf_xdp_flow_offload_lookup kfunc, Kumar Kartikeya Dwivedi
      • Re: [PATCH bpf-next 2/4] netfilter: add bpf_xdp_flow_offload_lookup kfunc, Lorenzo Bianconi
  • [PATCH bpf-next 3/4] samples/bpf: Add bpf sample to offload flowtable traffic to xdp, Lorenzo Bianconi
  • [PATCH bpf-next 4/4] selftests/bpf: Add selftest for bpf_xdp_flow_offload_lookup kfunc, Lorenzo Bianconi
• [PATCH net] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu(), Eric Dumazet
  • Re: [PATCH net] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu(), Florian Westphal
    • Re: [PATCH net] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu(), Eric Dumazet
      • Re: [PATCH net] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu(), Eric Dumazet
      • Re: [PATCH net] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu(), Florian Westphal
• [PATCH net-next] selftests: netfilter: fix packetdrill conntrack testcase, Florian Westphal
  • Re: [PATCH net-next] selftests: netfilter: fix packetdrill conntrack testcase, patchwork-bot+netdevbpf
• [PATCH nf] netfilter: nfnetlink_queue: fix rcu splat on program exit, Florian Westphal
  • Re: [PATCH nf] netfilter: nfnetlink_queue: fix rcu splat on program exit, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nfnetlink_queue: fix rcu splat on program exit, Florian Westphal
• [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Antonio Ojea
  • [PATCH v3 1/2] netfilter: nft_queue: compute SCTP checksum, Antonio Ojea
    • Re: [PATCH v3 1/2] netfilter: nft_queue: compute SCTP checksum, Florian Westphal
  • [PATCH v3 2/2] selftests: net: netfilter: nft_queue.sh: sctp checksum, Antonio Ojea
    • Re: [PATCH v3 2/2] selftests: net: netfilter: nft_queue.sh: sctp checksum, Florian Westphal
  • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Pablo Neira Ayuso
    • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Pablo Neira Ayuso
      • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Pablo Neira Ayuso
        • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Pablo Neira Ayuso
          • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Antonio Ojea
            • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Pablo Neira Ayuso
              • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Florian Westphal
                • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Pablo Neira Ayuso
                  • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Florian Westphal
                    • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Pablo Neira Ayuso
                      • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Florian Westphal
                        • Re: [PATCH v3 0/2] netfilter: nfqueue: incorrect sctp checksum, Pablo Neira Ayuso
• [PATCH nf-next 00/11] netfilter: nf_tables: reduce transaction log memory usage, Florian Westphal
  • [PATCH nf-next 01/11] netfilter: nf_tables: make struct nft_trans first member of derived subtypes, Florian Westphal
    • Re: [PATCH nf-next 01/11] netfilter: nf_tables: make struct nft_trans first member of derived subtypes, Pablo Neira Ayuso
      • Re: [PATCH nf-next 01/11] netfilter: nf_tables: make struct nft_trans first member of derived subtypes, Florian Westphal
  • [PATCH nf-next 02/11] netfilter: nf_tables: move bind list_head into relevant subtypes, Florian Westphal
    • Re: [PATCH nf-next 02/11] netfilter: nf_tables: move bind list_head into relevant subtypes, Pablo Neira Ayuso
      • Re: [PATCH nf-next 02/11] netfilter: nf_tables: move bind list_head into relevant subtypes, Florian Westphal
    • Re: [PATCH nf-next 02/11] netfilter: nf_tables: move bind list_head into relevant subtypes, Pablo Neira Ayuso
      • Re: [PATCH nf-next 02/11] netfilter: nf_tables: move bind list_head into relevant subtypes, Florian Westphal
        • Re: [PATCH nf-next 02/11] netfilter: nf_tables: move bind list_head into relevant subtypes, Pablo Neira Ayuso
          • Re: [PATCH nf-next 02/11] netfilter: nf_tables: move bind list_head into relevant subtypes, Pablo Neira Ayuso
  • [PATCH nf-next 04/11] netfilter: nf_tables: reduce trans->ctx.table references, Florian Westphal
  • [PATCH nf-next 03/11] netfilter: nf_tables: compact chain+ft transaction objects, Florian Westphal
  • [PATCH nf-next 06/11] netfilter: nf_tables: pass more specific nft_trans_chain where possible, Florian Westphal
  • [PATCH nf-next 05/11] netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx, Florian Westphal
  • [PATCH nf-next 07/11] netfilter: nf_tables: avoid usage of embedded nft_ctx, Florian Westphal
  • [PATCH nf-next 08/11] netfilter: nf_tables: store chain pointer in rule transaction, Florian Westphal
  • [PATCH nf-next 09/11] netfilter: nf_tables: reduce trans->ctx.chain references, Florian Westphal
  • [PATCH nf-next 10/11] netfilter: nf_tables: pass nft_table to destroy function, Florian Westphal
  • [PATCH nf-next 11/11] netfilter: nf_tables: do not store nft_ctx in transaction objects, Florian Westphal
• [syzbot] [netfilter?] general protection fault in nf_tproxy_laddr4, syzbot
  • [PATCH nf] netfilter: tproxy: bail out if IP has been disabled on the device, Florian Westphal
• [PATCH v2 0/2] netfilter: nfqueue: incorrect sctp checksum, Antonio Ojea
  • [PATCH v2 1/2] netfilter: nft_queue: compute SCTP checksum, Antonio Ojea
    • Re: [PATCH v2 1/2] netfilter: nft_queue: compute SCTP checksum, Florian Westphal
  • [PATCH v2 2/2] selftests: net: netfilter: nft_queue.sh: sctp checksum, Antonio Ojea
    • Re: [PATCH v2 2/2] selftests: net: netfilter: nft_queue.sh: sctp checksum, Florian Westphal
• [PATCH net-next] selftests: netfilter: nft_flowtable.sh: bump socat timeout to 1m, Florian Westphal
  • Re: [PATCH net-next] selftests: netfilter: nft_flowtable.sh: bump socat timeout to 1m, patchwork-bot+netdevbpf
• [RFC bpf-next v1 0/4] netfilter: Add the capability to offload flowtable in XDP layer, Lorenzo Bianconi
  • [RFC bpf-next v1 1/4] netfilter: nf_tables: add flowtable map for xdp offload, Lorenzo Bianconi
  • [RFC bpf-next v1 2/4] netfilter: add bpf_xdp_flow_offload_lookup kfunc, Lorenzo Bianconi
  • [RFC bpf-next v1 3/4] samples/bpf: Add bpf sample to offload flowtable traffic to xdp, Lorenzo Bianconi
  • [RFC bpf-next v1 4/4] selftests/bpf: Add selftest for bpf_xdp_flow_offload_lookup kfunc, Lorenzo Bianconi
• [PATCH v4 35/66] selftests/net: Drop define _GNU_SOURCE, Edward Liaw
• [PATCH nf-next 0/2] nf_tables: vlan matching & mangling, Pablo Neira Ayuso
  • [PATCH nf-next 1/2] netfilter: nft_payload: restore vlan q-in-q match support, Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: nft_payload: skbuff vlan metadata mangle support, Pablo Neira Ayuso
    • Re: [PATCH nf-next 2/2] netfilter: nft_payload: skbuff vlan metadata mangle support, kernel test robot
• [PATCH v3 37/68] selftests/net: Drop define _GNU_SOURCE, Edward Liaw
• Could not process rule: Cannot allocate memory, Sven Auhagen
  • [PATCH nf-next] netfilter: nf_tables: allow clone callbacks to sleep, Florian Westphal
  • Re: Could not process rule: Cannot allocate memory, Florian Westphal
    • Re: Could not process rule: Cannot allocate memory, Sven Auhagen
      • Re: Could not process rule: Cannot allocate memory, Florian Westphal
  • Re: Could not process rule: Cannot allocate memory, Florian Westphal
    • Re: Could not process rule: Cannot allocate memory, Jan Engelhardt
    • Re: Could not process rule: Cannot allocate memory, Sven Auhagen
    • Re: Could not process rule: Cannot allocate memory, Florian Westphal
      • Re: Could not process rule: Cannot allocate memory, Sven Auhagen
        • Re: Could not process rule: Cannot allocate memory, Pablo Neira Ayuso
          • Re: Could not process rule: Cannot allocate memory, Sven Auhagen
        • Re: Could not process rule: Cannot allocate memory, Florian Westphal
• [PATCH bpf-next v3 1/2] net: netfilter: Make ct zone opts configurable for bpf ct helpers, Brad Cowie
  • [PATCH bpf-next v3 2/2] selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs, Brad Cowie
    • Re: [PATCH bpf-next v3 2/2] selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs, Martin KaFai Lau
• [PATCH nf-next] selftests: netfilter: add packetdrill based conntrack tests, Florian Westphal
  • Re: [PATCH nf-next] selftests: netfilter: add packetdrill based conntrack tests, Jozsef Kadlecsik
• [PATCH libnetfilter_queue] Stop a memory leak in nfq_close, Duncan Roe
  • Re: [PATCH libnetfilter_queue] Stop a memory leak in nfq_close, Pablo Neira Ayuso
    • Re: [PATCH libnetfilter_queue] Stop a memory leak in nfq_close, Duncan Roe
      • Re: [PATCH libnetfilter_queue] Stop a memory leak in nfq_close, Pablo Neira Ayuso
        • Re: [PATCH libnetfilter_queue] Stop a memory leak in nfq_close, Duncan Roe
• [PATCH v4 1/2] ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh, Alexander Mikhalitsyn
  • [PATCH v4 2/2] ipvs: allow some sysctls in non-init user namespaces, Alexander Mikhalitsyn
    • Re: [PATCH v4 2/2] ipvs: allow some sysctls in non-init user namespaces, Julian Anastasov
  • Re: [PATCH v4 1/2] ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh, Julian Anastasov
  • Re: [PATCH v4 1/2] ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh, patchwork-bot+netdevbpf
• nftables with thousands of chains is unreasonably slow, Neels Hofmeyr
  • Re: nftables with thousands of chains is unreasonably slow, Pablo Neira Ayuso
    • Re: nftables with thousands of chains is unreasonably slow, Neels Hofmeyr
      • Re: nftables with thousands of chains is unreasonably slow, Pablo Neira Ayuso
    • Re: nftables with thousands of chains is unreasonably slow, Neels Hofmeyr
      • Re: nftables with thousands of chains is unreasonably slow, Pablo Neira Ayuso
• [PATCH net-next] selftests: netfilter: conntrack_tcp_unreplied.sh: wait for initial connection attempt, Florian Westphal
  • Re: [PATCH net-next] selftests: netfilter: conntrack_tcp_unreplied.sh: wait for initial connection attempt, patchwork-bot+netdevbpf
• [nf-next PATCH 0/5] Dynamic hook interface binding, Phil Sutter
  • [nf-next PATCH 2/5] netfilter: nf_tables: Relax hook interface binding, Phil Sutter
  • [nf-next PATCH 1/5] netfilter: nf_tables: Store user-defined hook ifname, Phil Sutter
  • [nf-next PATCH 3/5] netfilter: nf_tables: Report active interfaces to user space, Phil Sutter
  • [nf-next PATCH 4/5] netfilter: nf_tables: Dynamic hook interface binding, Phil Sutter
  • [nf-next PATCH 5/5] netfilter: nf_tables: Correctly handle NETDEV_RENAME events, Phil Sutter
  • Re: [nf-next PATCH 0/5] Dynamic hook interface binding, Pablo Neira Ayuso
    • Re: [nf-next PATCH 0/5] Dynamic hook interface binding, Phil Sutter
      • Re: [nf-next PATCH 0/5] Dynamic hook interface binding, Florian Westphal
        • Re: [nf-next PATCH 0/5] Dynamic hook interface binding, Phil Sutter
• [PATCH net-next 07/15] netfilter: br_netfilter: Use nested-BH locking for brnf_frag_data_storage., Sebastian Andrzej Siewior
• [PATCH net-next 0/2] netfilter: nfqueue: incorrect sctp checksum, Antonio Ojea
  • [PATCH net-next 1/2] netfilter: nft_queue: compute SCTP checksum, Antonio Ojea
    • Re: [PATCH net-next 1/2] netfilter: nft_queue: compute SCTP checksum, Antonio Ojea
      • Re: [PATCH net-next 1/2] netfilter: nft_queue: compute SCTP checksum, Antonio Ojea
      • Re: [PATCH net-next 1/2] netfilter: nft_queue: compute SCTP checksum, Pablo Neira Ayuso
    • Re: [PATCH net-next 1/2] netfilter: nft_queue: compute SCTP checksum, kernel test robot
  • [PATCH net-next 2/2] selftests: net: netfilter: nft_queue.sh: sctp checksum, Antonio Ojea
• [netfilter-nf:under-review 14/18] net/netfilter/nft_set_pipapo.c:2122: warning: expecting prototype for __nft_pipapo_walk(). Prototype was for nft_pipapo_do_walk() instead, kernel test robot
  • Re: [netfilter-nf:under-review 14/18] net/netfilter/nft_set_pipapo.c:2122: warning: expecting prototype for __nft_pipapo_walk(). Prototype was for nft_pipapo_do_walk() instead, Florian Westphal
    • Re: [netfilter-nf:under-review 14/18] net/netfilter/nft_set_pipapo.c:2122: warning: expecting prototype for __nft_pipapo_walk(). Prototype was for nft_pipapo_do_walk() instead, Pablo Neira Ayuso
• [syzbot] [netfilter?] WARNING: suspicious RCU usage in br_mst_set_state, syzbot
• [PATCH net-next v6 0/8] sysctl: Remove sentinel elements from networking, Joel Granados via B4 Relay
  • [PATCH net-next v6 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH net-next v6 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, patchwork-bot+netdevbpf
  • [PATCH net-next v6 2/8] net: ipv{6,4}: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH net-next v6 5/8] net: Remove ctl_table sentinel elements from several networking subsystems, Joel Granados via B4 Relay
  • [PATCH net-next v6 4/8] net: sunrpc: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH net-next v6 6/8] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH net-next v6 7/8] appletalk: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH net-next v6 8/8] ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH net-next v6 8/8] ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array, Sabrina Dubroca
      • Re: [PATCH net-next v6 8/8] ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
        • Re: [PATCH net-next v6 8/8] ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array, Dan Carpenter
          • Re: [PATCH net-next v6 8/8] ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
  • [PATCH net-next v6 3/8] net: rds: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH net-next v6 3/8] net: rds: Remove the now superfluous sentinel elements from ctl_table array, Allison Henderson
  • Re: [PATCH net-next v6 0/8] sysctl: Remove sentinel elements from networking, Sabrina Dubroca
    • Re: [PATCH net-next v6 0/8] sysctl: Remove sentinel elements from networking, Joel Granados
• [PATCH net-next] selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time, Florian Westphal
  • Re: [PATCH net-next] selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time, Simon Horman
    • Re: [PATCH net-next] selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time, Florian Westphal
      • Re: [PATCH net-next] selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time, Simon Horman
  • Re: [PATCH net-next] selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time, patchwork-bot+netdevbpf
• [libnetfilter_log] fix bug in race condition of calling nflog_open from different threads at same time, Evgen Bendyak
  • Re: [libnetfilter_log] fix bug in race condition of calling nflog_open from different threads at same time, Phil Sutter
    • Re: [libnetfilter_log] fix bug in race condition of calling nflog_open from different threads at same time, Evgen Bendyak
      • Re: [libnetfilter_log] fix bug in race condition of calling nflog_open from different threads at same time, Phil Sutter
  • Re: [libnetfilter_log] fix bug in race condition of calling nflog_open from different threads at same time, Pablo Neira Ayuso
    • Re: [libnetfilter_log] fix bug in race condition of calling nflog_open from different threads at same time, Evgen Bendyak
      • Re: [libnetfilter_log] fix bug in race condition of calling nflog_open from different threads at same time, Pablo Neira Ayuso
• [PATCH nft v3 0/2] Support for variables in map expressions, Jeremy Sowden
  • [PATCH nft v3 1/2] evaluate: handle invalid mapping expressions in stateful object statements gracefully., Jeremy Sowden
  • [PATCH nft v3 2/2] evaluate: add support for variables in map expressions, Jeremy Sowden
  • Re: [PATCH nft v3 0/2] Support for variables in map expressions, Pablo Neira Ayuso
• [PATCH net-next] selftests: netfilter: avoid test timeouts on debug kernels, Florian Westphal
  • Re: [PATCH net-next] selftests: netfilter: avoid test timeouts on debug kernels, patchwork-bot+netdevbpf
• [PATCH libnetfilter_queue] Update .gitignore, Duncan Roe
• [libnetfilter_conntrack PATCH] conntrack: bsf: Do not return -1 on failure, Phil Sutter
  • Re: [libnetfilter_conntrack PATCH] conntrack: bsf: Do not return -1 on failure, Phil Sutter
• [PATCH v5 0/8] sysctl: Remove sentinel elements from networking, Joel Granados via B4 Relay
  • [PATCH v5 2/8] net: ipv{6,4}: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v5 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH v5 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Sabrina Dubroca
      • Re: [PATCH v5 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
        • Re: [PATCH v5 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Sabrina Dubroca
          • Re: [PATCH v5 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
  • [PATCH v5 3/8] net: rds: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v5 4/8] net: sunrpc: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH v5 4/8] net: sunrpc: Remove the now superfluous sentinel elements from ctl_table array, Jeffrey Layton
    • Re: [PATCH v5 4/8] net: sunrpc: Remove the now superfluous sentinel elements from ctl_table array, Chuck Lever
  • [PATCH v5 7/8] appletalk: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v5 8/8] ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH v5 8/8] ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array, Sabrina Dubroca
      • Re: [PATCH v5 8/8] ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
  • [PATCH v5 6/8] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH v5 6/8] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Julian Anastasov
      • Re: [PATCH v5 6/8] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
  • [PATCH v5 5/8] net: Remove ctl_table sentinel elements from several networking subsystems, Joel Granados via B4 Relay
    • Re: [PATCH v5 5/8] net: Remove ctl_table sentinel elements from several networking subsystems, Sabrina Dubroca
      • Re: [PATCH v5 5/8] net: Remove ctl_table sentinel elements from several networking subsystems, Joel Granados
• [PATCH v3] ipvs: Fix checksumming on GSO of SCTP packets, Ismael Luceno
  • Re: [PATCH v3] ipvs: Fix checksumming on GSO of SCTP packets, Julian Anastasov
  • Re: [PATCH v3] ipvs: Fix checksumming on GSO of SCTP packets, Jakub Kicinski
  • Re: [PATCH v3] ipvs: Fix checksumming on GSO of SCTP packets, Pablo Neira Ayuso
• [PATCH] conntrackd: helpers/rpc: Don't add expectation table entry for portmap port, pda Pfeil Daniel
  • AW: [PATCH] conntrackd: helpers/rpc: Don't add expectation table entry for portmap port, pda Pfeil Daniel
  • Re: [PATCH] conntrackd: helpers/rpc: Don't add expectation table entry for portmap port, Pablo Neira Ayuso
    • Re: [PATCH] conntrackd: helpers/rpc: Don't add expectation table entry for portmap port, Pablo Neira Ayuso
      • AW: [PATCH] conntrackd: helpers/rpc: Don't add expectation table entry for portmap port, pda Pfeil Daniel
        • Re: AW: [PATCH] conntrackd: helpers/rpc: Don't add expectation table entry for portmap port, Pablo Neira Ayuso
• [PATCH nf-next v2 0/8] nft_set_pipapo: remove cannot-fail allocations on commit and abort, Florian Westphal
  • [PATCH nf-next v2 2/8] netfilter: nft_set_pipapo: make pipapo_clone helper return NULL, Florian Westphal
  • [PATCH nf-next v2 1/8] netfilter: nft_set_pipapo: move prove_locking helper around, Florian Westphal
  • [PATCH nf-next v2 3/8] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Florian Westphal
  • [PATCH nf-next v2 4/8] netfilter: nft_set_pipapo: prepare walk function for on-demand clone, Florian Westphal
    • Re: [PATCH nf-next v2 4/8] netfilter: nft_set_pipapo: prepare walk function for on-demand clone, Stefano Brivio
  • [PATCH nf-next v2 5/8] netfilter: nft_set_pipapo: merge deactivate helper into caller, Florian Westphal
  • [PATCH nf-next v2 6/8] netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone, Florian Westphal
  • [PATCH nf-next v2 7/8] netfilter: nft_set_pipapo: move cloning of match info to insert/removal path, Florian Westphal
    • Re: [PATCH nf-next v2 7/8] netfilter: nft_set_pipapo: move cloning of match info to insert/removal path, Pablo Neira Ayuso
      • Re: [PATCH nf-next v2 7/8] netfilter: nft_set_pipapo: move cloning of match info to insert/removal path, Florian Westphal
  • [PATCH nf-next v2 8/8] netfilter: nft_set_pipapo: remove dirty flag, Florian Westphal
• [PATCH v4 0/8] sysctl: Remove sentinel elements from networking, Joel Granados via B4 Relay
  • [PATCH v4 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH v4 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Jakub Kicinski
      • Re: [PATCH v4 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
        • Re: [PATCH v4 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Jakub Kicinski
          • Re: [PATCH v4 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
            • Re: [PATCH v4 1/8] net: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
  • [PATCH v4 2/8] net: ipv{6,4}: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v4 3/8] net: rds: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v4 7/8] appletalk: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v4 5/8] net: Remove ctl_table sentinel elements from several networking subsystems, Joel Granados via B4 Relay
  • [PATCH v4 6/8] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v4 8/8] ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v4 4/8] net: sunrpc: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
• [iptables][PATCHv2] configure: Add option to enable/disable libnfnetlink, Alexander Kanavin
  • Re: [iptables][PATCHv2] configure: Add option to enable/disable libnfnetlink, Phil Sutter
• [nft PATCH 1/2] doc: nft.8: Fix markup in ct expectation synopsis, Phil Sutter
  • [nft PATCH 2/2] doc: nft.8: Highlight "hook" in flowtable description, Phil Sutter
  • Re: [nft PATCH 1/2] doc: nft.8: Fix markup in ct expectation synopsis, Phil Sutter
• [nft PATCH] tests: shell: Fix for maps/typeof_maps_add_delete with ASAN, Phil Sutter
  • Re: [nft PATCH] tests: shell: Fix for maps/typeof_maps_add_delete with ASAN, Phil Sutter
• [nft PATCH] json: Fix for memleak in __binop_expr_json, Phil Sutter
  • Re: [nft PATCH] json: Fix for memleak in __binop_expr_json, Pablo Neira Ayuso
    • Re: [nft PATCH] json: Fix for memleak in __binop_expr_json, Phil Sutter
• [PATCH nf] netfilter: nf_tables: honor table dormant flag from netdev release event path, Pablo Neira Ayuso
• [iptables][PATCH] configure: Add option to enable/disable libnfnetlink, Alexander Kanavin
  • Re: [iptables][PATCH] configure: Add option to enable/disable libnfnetlink, Phil Sutter
    • Re: [iptables][PATCH] configure: Add option to enable/disable libnfnetlink, Alexander Kanavin
      • Re: [iptables][PATCH] configure: Add option to enable/disable libnfnetlink, Phil Sutter
        • Re: [iptables][PATCH] configure: Add option to enable/disable libnfnetlink, Pablo Neira Ayuso
          • Re: [iptables][PATCH] configure: Add option to enable/disable libnfnetlink, Phil Sutter
            • Re: [iptables][PATCH] configure: Add option to enable/disable libnfnetlink, Pablo Neira Ayuso
        • Re: [iptables][PATCH] configure: Add option to enable/disable libnfnetlink, Alexander Kanavin
  • <Possible follow-ups>
  • [iptables][PATCH] configure: Add option to enable/disable libnfnetlink, Alexander Kanavin
• [PATCH v2 net-next] tools: testing: selftests: prefer TEST_PROGS for conntrack_dump_flush, Florian Westphal
  • Re: [PATCH v2 net-next] tools: testing: selftests: prefer TEST_PROGS for conntrack_dump_flush, patchwork-bot+netdevbpf
• [PATCH bpf-next v2 1/2] net: netfilter: Make ct zone opts configurable for bpf ct helpers, Brad Cowie
  • [PATCH bpf-next v2 2/2] selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs, Brad Cowie
    • Re: [PATCH bpf-next v2 2/2] selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs, Martin KaFai Lau
      • Re: [PATCH bpf-next v2 2/2] selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs, Brad Cowie
  • Re: [PATCH bpf-next v2 1/2] net: netfilter: Make ct zone opts configurable for bpf ct helpers, Martin KaFai Lau
    • Re: [PATCH bpf-next v2 1/2] net: netfilter: Make ct zone opts configurable for bpf ct helpers, Brad Cowie
      • Re: [PATCH bpf-next v2 1/2] net: netfilter: Make ct zone opts configurable for bpf ct helpers, Martin KaFai Lau
• [PATCH] netfilter: mark racy access on ext->gen_id, linke li
  • Re: [PATCH] netfilter: mark racy access on ext->gen_id, Florian Westphal
    • Re: [PATCH] netfilter: mark racy access on ext->gen_id, Pablo Neira Ayuso
  • Re: [PATCH] netfilter: mark racy access on ext->gen_id, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: mark racy access on ext->gen_id, Eric Dumazet
      • Re: [PATCH] netfilter: mark racy access on ext->gen_id, Florian Westphal
• [PATCH nf-next] netfilter: conntrack: remove flowtable early-drop test, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: remove flowtable early-drop test, Vlad Buslov
    • Re: [PATCH nf-next] netfilter: conntrack: remove flowtable early-drop test, Florian Westphal
      • Re: [PATCH nf-next] netfilter: conntrack: remove flowtable early-drop test, Vlad Buslov
        • Re: [PATCH nf-next] netfilter: conntrack: remove flowtable early-drop test, Florian Westphal
• [PATCH net-next 0/7] selftest: netfilter: additional cleanups, Florian Westphal
  • [PATCH net-next 1/7] selftests: netfilter: nft_concat_range.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 4/7] selftests: netfilter: nft_flowtable.sh: re-run with random mtu sizes, Florian Westphal
  • [PATCH net-next 2/7] selftests: netfilter: nft_concat_range.sh: drop netcat support, Florian Westphal
  • [PATCH net-next 3/7] selftests: netfilter: nft_concat_range.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next 5/7] selftests: netfilter: nft_flowtable.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next 6/7] selftests: netfilter: skip tests on early errors, Florian Westphal
  • [PATCH net-next 7/7] selftests: netfilter: conntrack_vrf.sh: prefer socat, not iperf3, Florian Westphal
  • Re: [PATCH net-next 0/7] selftest: netfilter: additional cleanups, Jakub Kicinski
    • Re: [PATCH net-next 0/7] selftest: netfilter: additional cleanups, Florian Westphal
      • Re: [PATCH net-next 0/7] selftest: netfilter: additional cleanups, Jakub Kicinski
        • Re: [PATCH net-next 0/7] selftest: netfilter: additional cleanups, Florian Westphal
  • Re: [PATCH net-next 0/7] selftest: netfilter: additional cleanups, patchwork-bot+netdevbpf
  • Re: [PATCH net-next 0/7] selftest: netfilter: additional cleanups, Jakub Kicinski
• [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Thomas Weißschuh
  • [PATCH v3 05/11] neighbour: constify ctl_table arguments of utility function, Thomas Weißschuh
  • [PATCH v3 06/11] ipv4/sysctl: constify ctl_table arguments of utility functions, Thomas Weißschuh
  • [PATCH v3 07/11] ipv6/addrconf: constify ctl_table arguments of utility functions, Thomas Weißschuh
  • [PATCH v3 08/11] ipv6/ndisc: constify ctl_table arguments of utility function, Thomas Weißschuh
  • [PATCH v3 10/11] sysctl: constify ctl_table arguments of utility function, Thomas Weißschuh
  • [PATCH v3 09/11] ipvs: constify ctl_table arguments of utility functions, Thomas Weißschuh
  • [PATCH v3 11/11] sysctl: treewide: constify the ctl_table argument of handlers, Thomas Weißschuh
    • Re: [PATCH v3 11/11] sysctl: treewide: constify the ctl_table argument of handlers, Heiko Carstens
  • [PATCH v3 02/11] cgroup: bpf: constify ctl_table arguments and fields, Thomas Weißschuh
  • [PATCH v3 04/11] utsname: constify ctl_table arguments of utility function, Thomas Weißschuh
  • [PATCH v3 03/11] hugetlb: constify ctl_table arguments of utility functions, Thomas Weißschuh
  • [PATCH v3 01/11] stackleak: don't modify ctl_table argument, Thomas Weißschuh
  • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Luis Chamberlain
  • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Jakub Kicinski
    • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Thomas Weißschuh
      • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Thomas Weißschuh
    • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Joel Granados
      • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Thomas Weißschuh
        • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Joel Granados
    • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Kees Cook
      • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Jakub Kicinski
      • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Thomas Weißschuh
        • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Joel Granados
          • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Kees Cook
      • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Joel Granados
  • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Joel Granados
    • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Thomas Weißschuh
      • Re: [PATCH v3 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Joel Granados
• Launchpad: Validate your team's contact email address, Launchpad Email Validator
• [PATCH net-next] tools: testing: selftests: switch conntrack_dump_flush to TEST_PROGS, Florian Westphal
  • Re: [PATCH net-next] tools: testing: selftests: switch conntrack_dump_flush to TEST_PROGS, Jakub Kicinski
    • Re: [PATCH net-next] tools: testing: selftests: switch conntrack_dump_flush to TEST_PROGS, Florian Westphal
• Looking for (unit-) tests for libmnl, Schroeder, Stefan
• [PATCH net-next] selftests: netfilter: fix conntrack_dump_flush retval on unsupported kernel, Florian Westphal
  • Re: [PATCH net-next] selftests: netfilter: fix conntrack_dump_flush retval on unsupported kernel, patchwork-bot+netdevbpf
• [PATCH net-next] selftests: netfilter: nft_zones_many.sh: set ct sysctl after ruleset load, Florian Westphal
  • Re: [PATCH net-next] selftests: netfilter: nft_zones_many.sh: set ct sysctl after ruleset load, patchwork-bot+netdevbpf
• [PATCH v2] ipvs: Fix checksumming on GSO of SCTP packets, Ismael Luceno
  • Re: [PATCH v2] ipvs: Fix checksumming on GSO of SCTP packets, Julian Anastasov
  • Re: [PATCH v2] ipvs: Fix checksumming on GSO of SCTP packets, Pablo Neira Ayuso
• Re: [Thread split] nftables rule optimization - dropping invalid in ingress?, imnozi
  • <Possible follow-ups>
  • Re: [Thread split] nftables rule optimization - dropping invalid in ingress?, imnozi
• [PATCH nf] netfilter: conntrack: documentation: remove reference to non-existent sysctl, Florian Westphal
• [PATCH net-next v2 00/12] testing: make netfilter selftests functional in vng environment, Florian Westphal
  • [PATCH net-next v2 02/12] selftests: netfilter: nft_queue.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next v2 01/12] selftests: netfilter: nft_queue.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next v2 03/12] selftests: netfilter: nft_synproxy.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next v2 04/12] selftests: netfilter: nft_zones_many.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next v2 05/12] selftests: netfilter: xt_string.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next v2 06/12] selftests: netfilter: xt_string.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next v2 07/12] selftests: netfilter: nft_nat_zones.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next v2 08/12] selftests: netfilter: conntrack_ipip_mtu.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next v2 09/12] selftests: netfilter: nft_fib.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next v2 10/12] selftests: netfilter: nft_meta.sh: small shellcheck cleanup, Florian Westphal
  • [PATCH net-next v2 11/12] selftests: netfilter: nft_audit.sh: add more skip checks, Florian Westphal
  • [PATCH net-next v2 12/12] selftests: netfilter: update makefiles and kernel config, Florian Westphal
  • Re: [PATCH net-next v2 00/12] testing: make netfilter selftests functional in vng environment, patchwork-bot+netdevbpf
• [PATCH net-next v3 1/2] ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh, Alexander Mikhalitsyn
  • [PATCH net-next v3 2/2] ipvs: allow some sysctls in non-init user namespaces, Alexander Mikhalitsyn
    • Re: [PATCH net-next v3 2/2] ipvs: allow some sysctls in non-init user namespaces, Julian Anastasov
    • Re: [PATCH net-next v3 2/2] ipvs: allow some sysctls in non-init user namespaces, Julian Anastasov
      • Re: [PATCH net-next v3 2/2] ipvs: allow some sysctls in non-init user namespaces, Aleksandr Mikhalitsyn
  • Re: [PATCH net-next v3 1/2] ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh, Julian Anastasov
    • Re: [PATCH net-next v3 1/2] ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh, Aleksandr Mikhalitsyn
• [PATCH] ipvs: Fix checksumming on GSO of SCTP packets, Ismael Luceno
  • Re: [PATCH] ipvs: Fix checksumming on GSO of SCTP packets, Julian Anastasov
    • Re: [PATCH] ipvs: Fix checksumming on GSO of SCTP packets, Ismael Luceno
      • Re: [PATCH] ipvs: Fix checksumming on GSO of SCTP packets, Julian Anastasov
• [PATCH net-next v2 1/2] ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh, Alexander Mikhalitsyn
  • [PATCH net-next v2 2/2] ipvs: allow some sysctls in non-init user namespaces, Alexander Mikhalitsyn
  • Re: [PATCH net-next v2 1/2] ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh, Julian Anastasov
    • Re: [PATCH net-next v2 1/2] ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh, Aleksandr Mikhalitsyn
• [PATCH net-next v4 0/4] netlink: Add nftables spec w/ multi messages, Donald Hunter
  • [PATCH net-next v4 1/4] doc/netlink/specs: Add draft nftables spec, Donald Hunter
  • [PATCH net-next v4 2/4] tools/net/ynl: Fix extack decoding for directional ops, Donald Hunter
  • [PATCH net-next v4 3/4] tools/net/ynl: Add multi message support to ynl, Donald Hunter
  • [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Donald Hunter
    • Re: [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Pablo Neira Ayuso
      • Re: [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Jakub Kicinski
        • Re: [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Jakub Kicinski
          • Re: [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Pablo Neira Ayuso
      • Re: [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Donald Hunter
        • Re: [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Pablo Neira Ayuso
    • Re: [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Jiri Slaby
      • Re: [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Pablo Neira Ayuso
        • Re: [PATCH net-next v4 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Jiri Slaby
  • Re: [PATCH net-next v4 0/4] netlink: Add nftables spec w/ multi messages, patchwork-bot+netdevbpf
• [PATCH v2] sysctl: treewide: constify ctl_table_header::ctl_table_arg, Thomas Weißschuh
  • Re: [PATCH v2] sysctl: treewide: constify ctl_table_header::ctl_table_arg, Kees Cook
  • Re: [PATCH v2] sysctl: treewide: constify ctl_table_header::ctl_table_arg, Joel Granados
• [PATCH nf 1/3] netfilter: nf_tables: missing iterator type in lookup walk, Pablo Neira Ayuso
  • [PATCH nf 2/3] netfilter: nf_tables: restore set elements when delete set fails, Pablo Neira Ayuso
  • [PATCH nf 3/3] netfilter: nf_tables: fix memleak in map from abort path, Pablo Neira Ayuso
• [PATCH] netfilter: ipset: Add list flush to cancel_gc, Alexander Maltsev
  • Re: [PATCH] netfilter: ipset: Add list flush to cancel_gc, Jozsef Kadlecsik
  • Re: [PATCH] netfilter: ipset: Add list flush to cancel_gc, Pablo Neira Ayuso
• [PATCH net-next v3 0/4] netlink: Add nftables spec w/ multi messages, Donald Hunter
  • [PATCH net-next v3 1/4] doc/netlink/specs: Add draft nftables spec, Donald Hunter
  • [PATCH net-next v3 2/4] tools/net/ynl: Add multi message support to ynl, Donald Hunter
  • [PATCH net-next v3 3/4] tools/net/ynl: Handle acks that use req_value, Donald Hunter
    • Re: [PATCH net-next v3 3/4] tools/net/ynl: Handle acks that use req_value, Jakub Kicinski
      • Re: [PATCH net-next v3 3/4] tools/net/ynl: Handle acks that use req_value, Donald Hunter
        • Re: [PATCH net-next v3 3/4] tools/net/ynl: Handle acks that use req_value, Jakub Kicinski
  • [PATCH net-next v3 4/4] netfilter: nfnetlink: Handle ACK flags for batch messages, Donald Hunter
• [PATCH net-next] ipvs: allow some sysctls in non-init user namespaces, Alexander Mikhalitsyn
  • Re: [PATCH net-next] ipvs: allow some sysctls in non-init user namespaces, Julian Anastasov
    • Re: [PATCH net-next] ipvs: allow some sysctls in non-init user namespaces, Aleksandr Mikhalitsyn
• [PATCH net-next] selftests: fix netfilter path in Makefile, Yujie Liu
  • Re: [PATCH net-next] selftests: fix netfilter path in Makefile, patchwork-bot+netdevbpf
• [PATCH net-next 00/12] selftests: netfilter: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 05/12] selftests: netfilter: nft_zones_many.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 01/12] selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra, Florian Westphal
    • Re: [PATCH net-next 01/12] selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra, Matthieu Baerts
      • Re: [PATCH net-next 01/12] selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 06/12] selftests: netfilter: xt_string.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 02/12] selftests: netfilter: conntrack_tcp_unreplied.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 04/12] selftests: netfilter: nft_synproxy.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 03/12] selftests: netfilter: nft_queue.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 07/12] selftests: netfilter: nft_nat_zones.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next 08/12] selftests: netfilter: nft_queue.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next 09/12] selftests: netfilter: conntrack_ipip_mtu.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next 10/12] selftests: netfilter: nft_fib.sh: shellcheck cleanups, Florian Westphal
  • [PATCH net-next 11/12] selftests: netfilter: nft_audit.sh: skip if auditd is running, Florian Westphal
  • [PATCH net-next 12/12] selftests: netfilter: update makefiles and kernel config, Florian Westphal
    • Re: [PATCH net-next 12/12] selftests: netfilter: update makefiles and kernel config, Jakub Kicinski
      • Re: [PATCH net-next 12/12] selftests: netfilter: update makefiles and kernel config, Florian Westphal
        • Re: [PATCH net-next 12/12] selftests: netfilter: update makefiles and kernel config, Jakub Kicinski
          • Re: [PATCH net-next 12/12] selftests: netfilter: update makefiles and kernel config, Florian Westphal
  • Re: [PATCH net-next 00/12] selftests: netfilter: move to lib.sh infra, Pablo Neira Ayuso
• [PATCH net-next] netfilter: nft_chain_filter: remove redundant code in nf_tables_netdev_event, Zhengchao Shao
• Incorrect dependency handling with delayed ipset destroy ipset 7.21, keltargw
  • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, Jozsef Kadlecsik
    • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, keltargw
      • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, Jozsef Kadlecsik
        • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, keltargw
          • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, Jozsef Kadlecsik
• [nft PATCH] limit: Support arbitrary unit values, Phil Sutter
• [libnftnl PATCH] expr: limit: Prepare for odd time units, Phil Sutter
  • Re: [libnftnl PATCH] expr: limit: Prepare for odd time units, Phil Sutter
• [PATCH v3 0/4] sysctl: Remove sentinel elements from networking, Joel Granados via B4 Relay
  • [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Kuniyuki Iwashima
      • Re: [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Paolo Abeni
        • Re: [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
      • Re: [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
  • [PATCH v3 2/4] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v3 3/4] appletalk: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v3 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH v3 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Kuniyuki Iwashima
• [nft PATCH v3] Add support for table's persist flag, Phil Sutter
  • Re: [nft PATCH v3] Add support for table's persist flag, Phil Sutter
• [PATCH net-next 00/15] selftests: move netfilter tests to net, Florian Westphal
  • [PATCH net-next 02/15] selftests: netfilter: bridge_brouter.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 01/15] selftests: netfilter: move to net subdir, Florian Westphal
  • [PATCH net-next 03/15] selftests: netfilter: br_netfilter.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 04/15] selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 05/15] selftests: netfilter: conntrack_tcp_unreplied.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 06/15] selftests: netfilter: conntrack_sctp_collision.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 07/15] selftests: netfilter: conntrack_vrf.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 08/15] selftests: netfilter: conntrack_ipip_mtu.sh" move to lib.sh infra, Florian Westphal
  • [PATCH net-next 09/15] selftests: netfilter: place checktool helper in lib.sh, Florian Westphal
  • [PATCH net-next 10/15] selftests: netfilter: ipvs.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 11/15] selftests: netfilter: nf_nat_edemux.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 12/15] selftests: netfilter: nft_conntrack_helper.sh: test to lib.sh infra, Florian Westphal
  • [PATCH net-next 13/15] selftests: netfilter: nft_fib.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 14/15] selftests: netfilter: nft_flowtable.sh: move test to lib.sh infra, Florian Westphal
  • [PATCH net-next 15/15] selftests: netfilter: nft_nat.sh: move to lib.sh infra, Florian Westphal
  • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Jakub Kicinski
    • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Florian Westphal
      • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Jakub Kicinski
        • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Florian Westphal
  • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Jakub Kicinski
  • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, patchwork-bot+netdevbpf
• [PATCH nf,v2] netfilter: flowtable: incorrect pppoe tuple, Pablo Neira Ayuso
• [PATCH nf] netfilter: flowtable: incorrect pppoe tuple in reply direction, Pablo Neira Ayuso
• [PATCH nf,v3] netfilter: flowtable: validate pppoe header, Pablo Neira Ayuso
• [PATCH net-next v2 0/3] netlink: Add nftables spec w/ multi messages, Donald Hunter
  • [PATCH net-next v2 1/3] doc/netlink/specs: Add draft nftables spec, Donald Hunter
  • [PATCH net-next v2 2/3] netfilter: nfnetlink: Handle ACK flags for batch messages, Donald Hunter
    • Re: [PATCH net-next v2 2/3] netfilter: nfnetlink: Handle ACK flags for batch messages, Pablo Neira Ayuso
      • Re: [PATCH net-next v2 2/3] netfilter: nfnetlink: Handle ACK flags for batch messages, Donald Hunter
  • [PATCH net-next v2 3/3] tools/net/ynl: Add multi message support to ynl, Donald Hunter
    • Re: [PATCH net-next v2 3/3] tools/net/ynl: Add multi message support to ynl, Jakub Kicinski
      • Re: [PATCH net-next v2 3/3] tools/net/ynl: Add multi message support to ynl, Donald Hunter
• [PATCH v2 nf] netfilter: nft_set_pipapo: do not free live element, Florian Westphal
• [PATCH nf] netfilter: nft_set_pipapo: walk over current view on netlink dump, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_pipapo: do not free live element, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_set_pipapo: do not free live element, Stefano Brivio
• [PATCH nf,v2] netfilter: flowtable: validate PPPoe header, Pablo Neira Ayuso
• [iptables PATCH] libxtables: Attenuate effects of functions' internal static buffers, Phil Sutter
  • Re: [iptables PATCH] libxtables: Attenuate effects of functions' internal static buffers, Vitaly Chikunov
    • Re: [iptables PATCH] libxtables: Attenuate effects of functions' internal static buffers, Phil Sutter
• [PATCH net] netfilter: complete validation of user input, Eric Dumazet
  • Re: [PATCH net] netfilter: complete validation of user input, Pablo Neira Ayuso
  • Re: [PATCH net] netfilter: complete validation of user input, patchwork-bot+netdevbpf
• [PATCH nf] netfilter: flowtable: validate PPPoe header, Pablo Neira Ayuso
• [iptables PATCH] xshared: Fix parsing of empty string arg in '-c' option, Phil Sutter
  • Re: [iptables PATCH] xshared: Fix parsing of empty string arg in '-c' option, Phil Sutter
• [PATCH nf] netfilter: br_netfilter: skip conntrack input hook for promisc packets, Pablo Neira Ayuso
• [PATCH -stable,5.4.x 0/5] Netfilter fixes for -stable, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 1/5] netfilter: nf_tables: reject new basechain after table flag update, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 2/5] netfilter: nf_tables: flush pending destroy work before exit_net release, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 3/5] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 4/5] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 5/5] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
• [PATCH -stable,5.10.x 0/3] Netfilter fixes for -stable, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: nf_tables: reject new basechain after table flag update, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nf_tables: flush pending destroy work before exit_net release, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
  • Re: [PATCH -stable,5.10.x 0/3] Netfilter fixes for -stable, Pablo Neira Ayuso
• [PATCH -stable,5.15.x 0/3] Netfilter fixes for -stable, Pablo Neira Ayuso
  • [PATCH -stable,5.15.x 2/3] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH -stable,5.15.x 1/3] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH -stable,5.15.x 3/3] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
• [PATCH -stable 6.1.x 0/3] Netfilter fixes for -stable, Pablo Neira Ayuso
  • [PATCH -stable 6.1.x 1/3] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH -stable 6.1.x 2/3] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH -stable 6.1.x 3/3] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
  • Re: [PATCH -stable 6.1.x 0/3] Netfilter fixes for -stable, Sasha Levin
• [PATCH nft 0/4] add missing requirements in tests/shell, Pablo Neira Ayuso
  • [PATCH nft 3/4] tests: shell: maps/{vmap_unary,named_limits} require pipapo set backend, Pablo Neira Ayuso
  • [PATCH nft 1/4] tests: shell: payload matching requires egress support, Pablo Neira Ayuso
  • [PATCH nft 2/4] tests: shell: chains/{netdev_netns_gone,netdev_chain_dev_gone} require inet/ingress support, Pablo Neira Ayuso
  • [PATCH nft 4/4] tests: shell: check for reset tcp options support, Pablo Neira Ayuso
• [PATCH 0/2] Forbid illegitimate binding via listen(2), Ivanov Mikhail
  • [PATCH 2/2] selftests/landlock: Create 'listen_zero', 'deny_listen_zero' tests, Ivanov Mikhail
    • Re: [PATCH 2/2] selftests/landlock: Create 'listen_zero', 'deny_listen_zero' tests, Mickaël Salaün
      • Re: [PATCH 2/2] selftests/landlock: Create 'listen_zero', 'deny_listen_zero' tests, Ivanov Mikhail
  • [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
    • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Mickaël Salaün
      • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Mickaël Salaün
      • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
        • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Mickaël Salaün
        • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Günther Noack
          • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Mickaël Salaün
          • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
            • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Günther Noack
              • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
                • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Günther Noack
                  • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
  • Re: [PATCH 0/2] Forbid illegitimate binding via listen(2), Mickaël Salaün
• [RFC PATCH v1 00/10] Socket type control for Landlock, Ivanov Mikhail
  • [RFC PATCH v1 01/10] landlock: Support socket access-control, Ivanov Mikhail
    • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Günther Noack
      • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Ivanov Mikhail
        • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Günther Noack
        • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Mickaël Salaün
    • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Mickaël Salaün
      • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Ivanov Mikhail
  • [RFC PATCH v1 02/10] landlock: Add hook on socket_create(), Ivanov Mikhail
  • [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Ivanov Mikhail
    • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Günther Noack
      • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Ivanov Mikhail
        • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Mickaël Salaün
          • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Ivanov Mikhail
            • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Mickaël Salaün
  • [RFC PATCH v1 04/10] selftests/landlock: Create 'socket_access_rights' test, Ivanov Mikhail
  • [RFC PATCH v1 06/10] selftests/landlock: Create 'rule_with_unhandled_access' test, Ivanov Mikhail
  • [RFC PATCH v1 05/10] selftests/landlock: Create 'rule_with_unknown_access' test, Ivanov Mikhail
  • [RFC PATCH v1 08/10] selftests/landlock: Create 'ruleset_overlap' test, Ivanov Mikhail
  • [RFC PATCH v1 07/10] selftests/landlock: Create 'inval' test, Ivanov Mikhail
  • [RFC PATCH v1 10/10] samples/landlock: Support socket protocol restrictions, Ivanov Mikhail
  • [RFC PATCH v1 09/10] selftests/landlock: Create 'ruleset_with_unknown_access' test, Ivanov Mikhail
  • Re: [RFC PATCH v1 00/10] Socket type control for Landlock, Günther Noack
• [nft PATCH] dynset: avoid errouneous assert with ipv6 concat data, Son Dinh
  • Re: [nft PATCH] dynset: avoid errouneous assert with ipv6 concat data, Florian Westphal
    • Re: [nft PATCH] dynset: avoid errouneous assert with ipv6 concat data, Son Tra Dinh
      • [nft PATCH v2] dynset: avoid errouneous assert with ipv6 concat data, Son Dinh
      • [nft PATCH v3] dynset: avoid errouneous assert with ipv6 concat data, Son Dinh
• [PATCH nft 0/2] netfilter: nf_tables: Use rcu lock to enhance protection of the lists, Ziyang Xuan
  • [PATCH nft 1/2] netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get(), Ziyang Xuan
    • Re: [PATCH nft 1/2] netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get(), Pablo Neira Ayuso
  • [PATCH nft 2/2] netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get(), Ziyang Xuan
    • Re: [PATCH nft 2/2] netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get(), Pablo Neira Ayuso
• [nft PATCH] expr: make map lookup expression as an argument in vmap statement, Son Dinh
  • Re: [nft PATCH] expr: make map lookup expression as an argument in vmap statement, Florian Westphal
    • Re: [nft PATCH] expr: make map lookup expression as an argument in vmap statement, Son Tra Dinh
      • [nft PATCH v2] expr: make map lookup expression as an argument in vmap statement, Son Dinh
• [syzbot] [netfilter?] KMSAN: uninit-value in nf_flow_offload_ip_hook, syzbot
  • Re: [syzbot] [netfilter?] KMSAN: uninit-value in nf_flow_offload_ip_hook, syzbot
• [PATCH net] netfilter: validate user input for expected length, Eric Dumazet
  • Re: [PATCH net] netfilter: validate user input for expected length, Pablo Neira Ayuso
  • Re: [PATCH net] netfilter: validate user input for expected length, patchwork-bot+netdevbpf
• [PATCH] conntrackd: Fix signal handler race-condition, bre Breitenberger Markus
  • Re: [PATCH] conntrackd: Fix signal handler race-condition, Pablo Neira Ayuso
• static analysis results, Ivan Stepchenko
• [PATCH nf,v2] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
• [PATCH nft v2 0/2] Support for variables in map expressions, Jeremy Sowden
  • [PATCH nft v2 2/2] evaluate: add support for variables in map expressions, Jeremy Sowden
  • [PATCH nft v2 1/2] evaluate: handle invalid mapping expressions in stateful object statements gracefully., Jeremy Sowden
  • Re: [PATCH nft v2 0/2] Support for variables in map expressions, Pablo Neira Ayuso
    • Re: [PATCH nft v2 0/2] Support for variables in map expressions, Jeremy Sowden
• [PATCH nf,v2 1/4] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH nf,v2 2/4] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH nf,v2 4/4] netfilter: nf_tables: reject new basechain after table flag update, Pablo Neira Ayuso
  • [PATCH nf,v2 3/4] netfilter: nf_tables: flush pending destroy work before exit_net release, Pablo Neira Ayuso
• [PATCH nft] tests: packetpath: add check for drop policy, Florian Westphal
• [PATCH nf-next 0/9] nft_set_pipapo: remove cannot-fail allocations on commit and abort, Florian Westphal
  • [PATCH nf-next 2/9] netfilter: nft_set_pipapo: make pipapo_clone helper return NULL, Florian Westphal
  • [PATCH nf-next 5/9] netfilter: nf_tables: pass new nft_iter_type hint to walker, Florian Westphal
  • [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Florian Westphal
    • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Stefano Brivio
      • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Florian Westphal
        • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Stefano Brivio
          • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Florian Westphal
            • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Stefano Brivio
  • [PATCH nf-next 4/9] netfilter: nft_set_pipapo: prepare walk function for on-demand clone, Florian Westphal
  • [PATCH nf-next 7/9] netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone, Florian Westphal
  • [PATCH nf-next 8/9] netfilter: nft_set_pipapo: move cloning of match info to insert/removal path, Florian Westphal
    • Re: [PATCH nf-next 8/9] netfilter: nft_set_pipapo: move cloning of match info to insert/removal path, Stefano Brivio
  • [PATCH nf-next 9/9] netfilter: nft_set_pipapo: remove dirty flag, Florian Westphal
  • [PATCH nf-next 6/9] netfilter: nft_set_pipapo: merge deactivate helper into caller, Florian Westphal
  • [PATCH nf-next 1/9] netfilter: nft_set_pipapo: move prove_locking helper around, Florian Westphal
• [PATCH nft v2] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan
  • Re: [PATCH nft v2] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Florian Westphal
    • Re: [PATCH nft v2] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan (William)
• [PATCH nft] src: disentangle ICMP code types, Pablo Neira Ayuso
• [PATCH nf 1/3] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH nf 2/3] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH nf 3/3] netfilter: nf_tables: flush pending destroy work before exit_net release, Pablo Neira Ayuso
• [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan
  • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Florian Westphal
    • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Pablo Neira Ayuso
      • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan (William)
    • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan (William)
      • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Florian Westphal
        • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan (William)
• [PATCH nft] netlink_delinearize: unused code in reverse cross-day meta hour range, Pablo Neira Ayuso
• [PATCHv3 net-next 00/14] ipvs: per-net tables and optimizations, Julian Anastasov
  • [PATCHv3 net-next 08/14] ipvs: use resizable hash table for services, Julian Anastasov
  • [PATCHv3 net-next 10/14] ipvs: show the current conn_tab size to users, Julian Anastasov
  • [PATCHv3 net-next 12/14] ipvs: use more keys for connection hashing, Julian Anastasov
  • [PATCHv3 net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Julian Anastasov
  • [PATCHv3 net-next 14/14] ipvs: add conn_lfactor and svc_lfactor sysctl vars, Julian Anastasov
  • [PATCHv3 net-next 05/14] ipvs: do not keep dest_dst after dest is removed, Julian Anastasov
  • [PATCHv3 net-next 13/14] ipvs: add ip_vs_status info, Julian Anastasov
  • [PATCHv3 net-next 11/14] ipvs: no_cport and dropentry counters can be per-net, Julian Anastasov
  • [PATCHv3 net-next 03/14] ipvs: some service readers can use RCU, Julian Anastasov
  • [PATCHv3 net-next 04/14] ipvs: use single svc table, Julian Anastasov
  • [PATCHv3 net-next 07/14] ipvs: add resizable hash tables, Julian Anastasov
  • [PATCHv3 net-next 02/14] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Julian Anastasov
  • [PATCHv3 net-next 09/14] ipvs: switch to per-net connection table, Julian Anastasov
  • [PATCHv3 net-next 06/14] ipvs: use more counters to avoid service lookups, Julian Anastasov
• Re: [PATCH net-next v1 2/2] tools/net/ynl: Add multi message support to ynl, Pablo Neira Ayuso
• [PATCH bpf-next] net: netfilter: Make ct zone id configurable for bpf ct helper functions, Brad Cowie
  • Re: [PATCH bpf-next] net: netfilter: Make ct zone id configurable for bpf ct helper functions, Martin KaFai Lau
    • Re: [PATCH bpf-next] net: netfilter: Make ct zone id configurable for bpf ct helper functions, Brad Cowie
      • Re: [PATCH bpf-next] net: netfilter: Make ct zone id configurable for bpf ct helper functions, Martin KaFai Lau
• (re-send): Convert libnetfilter_queue to not need libnfnetlink], Duncan Roe
  • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink], Pablo Neira Ayuso
    • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink], Duncan Roe
    • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink, Duncan Roe
    • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink], Duncan Roe
    • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink], Duncan Roe
• [PATCH v2 0/4] sysctl: Remove sentinel elements from networking, Joel Granados via B4 Relay
  • [PATCH v2 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v2 2/4] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v2 3/4] appletalk: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay