Linux Netfilter / IP Tables Devel

• Date Index

• Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", (continued)
  • Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Sriram Rajagopalan
    • Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Florian Westphal
      • Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Sriram Rajagopalan
• [RFC nftables PATCH]: fix a2x: ERROR: missing --destination-dir: ./doc, Neels Hofmeyr
  • Re: [RFC nftables PATCH]: fix a2x: ERROR: missing --destination-dir: ./doc, Phil Sutter
• [PATCH] ipvs: allow netlink configuration from non-initial user namespace, Michael Weiß
  • Re: [PATCH] ipvs: allow netlink configuration from non-initial user namespace, Julian Anastasov
    • Re: [PATCH] ipvs: allow netlink configuration from non-initial user namespace, Michael Weiß
• [PATCH xtables] extensions: xt_TPROXY: add txlate support, Florian Westphal
  • Re: [PATCH xtables] extensions: xt_TPROXY: add txlate support, Phil Sutter
    • Re: [PATCH xtables] extensions: xt_TPROXY: add txlate support, Florian Westphal
• [PATCH nft 0/5] parser_json: fix up transaction ordering, Florian Westphal
  • [PATCH nft 1/5] parser_json: move some code around, Florian Westphal
  • [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Florian Westphal
    • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Phil Sutter
      • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Florian Westphal
        • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Phil Sutter
          • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Florian Westphal
            • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Phil Sutter
  • [PATCH nft 3/5] parser_json: add and use CMD_ERR helpers, Florian Westphal
  • [PATCH nft 4/5] parser_json: defer command allocation to nft_cmd_expand, Florian Westphal
  • [PATCH nft 5/5] tests: shell: add more json-nft dumps, Florian Westphal
• [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
  • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Florian Westphal
    • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
      • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Florian Westphal
        • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
          • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Florian Westphal
            • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
              • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jozsef Kadlecsik
                • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
                  • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jozsef Kadlecsik
                    • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
              • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
              • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Florian Westphal
                • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
• [PATCH nf-next 0/9] netfilter: nf_tables: rewrite gc again, Florian Westphal
  • [PATCH nf-next 1/9] netfilter: nf_tables: warn if set being destroyed is still active, Florian Westphal
  • [PATCH nf-next 2/9] netfilter: nf_tables: decrement element counters on set removal/flush, Florian Westphal
  • [PATCH nf-next 3/9] netfilter: nf_tables: add lockdep assertion for chain use counter, Florian Westphal
  • [PATCH nf-next 4/9] netfilter: remove nft_trans_gc_catchall_async handling, Florian Westphal
  • [PATCH nf-next 6/9] netfilter: nf_tables: add in-kernel only query that will return expired/dead elements, Florian Westphal
  • [PATCH nf-next 5/9] netfilter: nf_tables: condense catchall gc, Florian Westphal
  • [PATCH nf-next 7/9] netfilter: nf_tables: prepare for key-based deletion from workqueue, Florian Westphal
  • [PATCH nf-next 8/9] netfilter: nf_tables: remove expired elements based on key lookup only, Florian Westphal
  • [PATCH nf-next 9/9] netfilter: nf_tables: remove gc sequence counter, Florian Westphal
• [PATCH nf] netfilter: nf_tables: skip netdev hook unregistration if table is dormant, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: skip netdev hook unregistration if table is dormant, Pablo Neira Ayuso
• [PATCH nft,v2] evaluate: translate meter into dynamic set, Pablo Neira Ayuso
• [PATCH nft] evaluate: translate meter into dynamic set, Pablo Neira Ayuso
• [PATCH net] netfilter: nf_tables: Fix a memory leak in nf_tables_updchain, Quan Tian
• Issues with netdev egress hooks, Daniel Mack
  • Re: Issues with netdev egress hooks, Pablo Neira Ayuso
    • Re: Issues with netdev egress hooks, Daniel Mack
      • Re: Issues with netdev egress hooks, Pablo Neira Ayuso
• [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Linus Lüssing
  • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Simon Horman
    • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Linus Lüssing
      • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Florian Westphal
  • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Pablo Neira Ayuso
    • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Linus Lüssing
• [syzbot] [netfilter?] KASAN: slab-use-after-free Read in ip_skb_dst_mtu, syzbot
• [PATCH xtables-nft v2] extensions: xt_socket: add txlate support for socket match, Florian Westphal
  • Re: [PATCH xtables-nft v2] extensions: xt_socket: add txlate support for socket match, Phil Sutter
    • Re: [PATCH xtables-nft v2] extensions: xt_socket: add txlate support for socket match, Florian Westphal
      • Re: [PATCH xtables-nft v2] extensions: xt_socket: add txlate support for socket match, Phil Sutter
• [PATCH xtables-nft] extensions: xt_socket: add txlate support for sk match v3, Florian Westphal
• [iptables PATCH 1/2] xlate: Improve redundant l4proto match avoidance, Phil Sutter
  • [iptables PATCH 2/2] xlate: libip6t_mh: Fix and simplify plain '-m mh' match, Phil Sutter
  • Re: [iptables PATCH 1/2] xlate: Improve redundant l4proto match avoidance, Phil Sutter
• [PATCH net v3] netfilter: Add protection for bmp length out of range, Lena Wang (王娜)
  • Re: [PATCH net v3] netfilter: Add protection for bmp length out of range, Lena Wang (王娜)
    • Re: [PATCH net v3] netfilter: Add protection for bmp length out of range, Florian Westphal
• [PATCH nf-next] netfilter: nf_tables: remove NETDEV_CHANGENAME from netdev chain event handler, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: skip transaction if update object is not implemented, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: mark set as dead when deactivating anonymous set with timeout, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: mark set as dead when deactivating anonymous set, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: mark set as dead when deactivating anonymous set, Florian Westphal
    • Re: [PATCH nf] netfilter: nf_tables: mark set as dead when deactivating anonymous set, Pablo Neira Ayuso
• [PATCH conntrack-tools v2 0/3] fix potential memory loss and exit codes, Donald Yandt
  • [PATCH conntrack-tools v2 1/3] conntrackd: prevent memory loss if reallocation fails, Donald Yandt
  • [PATCH conntrack-tools v2 2/3] conntrackd: use size_t for element indices, Donald Yandt
  • [PATCH conntrack-tools v2 3/3] conntrackd: exit with failure status, Donald Yandt
  • Re: [PATCH conntrack-tools v2 0/3] fix potential memory loss and exit codes, Pablo Neira Ayuso
    • Re: [PATCH conntrack-tools v2 0/3] fix potential memory loss and exit codes, Pablo Neira Ayuso
      • Re: [PATCH conntrack-tools v2 0/3] fix potential memory loss and exit codes, Donald Yandt
• [PATCH conntrack-tools 0/3] fix potential memory loss and exit codes, Donald Yandt
  • [PATCH conntrack-tools 1/3] conntrackd: prevent memory loss if reallocation fails, Donald Yandt
    • Re: [PATCH conntrack-tools 1/3] conntrackd: prevent memory loss if reallocation fails, Pablo Neira Ayuso
      • Re: [PATCH conntrack-tools 1/3] conntrackd: prevent memory loss if reallocation fails, Donald Yandt
  • [PATCH conntrack-tools 2/3] conntrackd: use size_t for element indices, Donald Yandt
    • Re: [PATCH conntrack-tools 2/3] conntrackd: use size_t for element indices, Pablo Neira Ayuso
      • Re: [PATCH conntrack-tools 2/3] conntrackd: use size_t for element indices, Donald Yandt
        • Re: [PATCH conntrack-tools 2/3] conntrackd: use size_t for element indices, Pablo Neira Ayuso
  • [PATCH conntrack-tools 3/3] conntrackd: exit with failure status, Donald Yandt
• [PATCH net v2] netfilter: Add protection for bmp length out of range, Lena Wang (王娜)
  • Re: [PATCH net v2] netfilter: Add protection for bmp length out of range, Jiri Pirko
  • Re: [PATCH net v2] netfilter: Add protection for bmp length out of range, Pablo Neira Ayuso
    • Re: [PATCH net v2] netfilter: Add protection for bmp length out of range, Florian Westphal
      • Re: [PATCH net v2] netfilter: Add protection for bmp length out of range, Pablo Neira Ayuso
• [PATCH nft 0/3] parser: allow to define maps that contain ct objects, Florian Westphal
  • [PATCH nft 1/3] parser: allow to define maps that contain timeouts and expectations, Florian Westphal
  • [PATCH nft 2/3] parser: allow to define maps that contain ct helpers, Florian Westphal
  • [PATCH nft 3/3] tests: add test case for named ct objects, Florian Westphal
• [PATCH nf v2] netfilter: nft_ct: fix l3num expectations with inet pseudo family, Florian Westphal
• [PATCH nf] netfilter: nft_ct: fix l3num expectations with inet pseudo family, Florian Westphal
• [PATCH nf,v2 1/2] netfilter: nf_tables: disallow anonymous set with timeout flag, Pablo Neira Ayuso
  • [PATCH nf,v2 2/2] netfilter: nf_tables: reject constant set with timeout, Pablo Neira Ayuso
• [PATCH nf 1/2] netfilter: nf_tables: disallow anonymous set with NFT_SET_{TIMEOUT,EVAL} flags, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nf_tables: reject constant set with timeout, Pablo Neira Ayuso
• [iptables PATCH] xtables-translate: Leverage stored protocol names, Phil Sutter
  • Re: [iptables PATCH] xtables-translate: Leverage stored protocol names, Phil Sutter
• [PATCH nft] rule: fix ASAN errors in priority to string conversion, Pablo Neira Ayuso
• [PATCH nft 0/3] nftables: add typeof support for objref maps, Florian Westphal
  • [PATCH nft 2/3] netlink: allow typeof keywords with objref maps during listing, Florian Westphal
  • [PATCH nft 1/3] parser: allow typeof in objref maps, Florian Westphal
  • [PATCH nft 3/3] tests: maps: add a test case for "limit" objref map, Florian Westphal
• [iptables PATCH] nft: Fix for broken recover_rule_compat(), Phil Sutter
  • Re: [iptables PATCH] nft: Fix for broken recover_rule_compat(), Phil Sutter
• [PATCH v2 nf] netfilter: bridge: confirm multicast packets before passing them up the stack, Florian Westphal
• [PATCH nft] parser: compact type/typeof set rules, Florian Westphal
• [PATCH nft] parser: compact interval typeof rules, Florian Westphal
• Ulogd2 Mysql KO, Yves Metivier
  • Re: Ulogd2 Mysql KO, Pablo Neira Ayuso
• [PATCH libnftnl 1/3] expr: immediate: check for chain attribute to release chain name, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3] udata: incorrect userdata buffer size validation, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] utils: remove unused code, Pablo Neira Ayuso
• [PATCH 0/2] netfilter: bridge_netfilter:, Florian Westphal
  • [PATCH nf 1/2] netfilter: bridge: confirm multicast packets before passing them up the stack, Florian Westphal
  • [PATCH nf 2/2] selftests: netfilter: add bridge conntrack + multicast test case, Florian Westphal
• [PATCH nft] parser_json: allow 0 offsets again, Florian Westphal
• [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Pablo Neira Ayuso
  • Re: [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Jiri Pirko
  • Re: [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Eric Dumazet
  • Re: [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Jakub Kicinski
    • Re: [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Pablo Neira Ayuso
• [PATCH] netfilter: xtables: fix IP6_NF_IPTABLES_LEGACY typo, Arnd Bergmann
  • Re: [PATCH] netfilter: xtables: fix IP6_NF_IPTABLES_LEGACY typo, Florian Westphal
• [PATCH v3] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Ignat Korchagin
  • Re: [PATCH v3] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Pablo Neira Ayuso
    • Re: [PATCH v3] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Ignat Korchagin
      • Re: [PATCH v3] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: use kzalloc for hook allocation, Florian Westphal
• [PATCH nf] netfilter: nf_tables: register hooks last when adding new chain/flowtable, Pablo Neira Ayuso
• [PATCH nf 1/2] netfilter: nft_flow_offload: reset dst in route object after setting up flow, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nft_flow_offload: release dst in case direct xmit path is used, Pablo Neira Ayuso
• [nft PATCH] src: improve error reporting for destroy command, 谢致邦 (XIE Zhibang)
• [PATCH net-next 00/12] netfilter updates for net-next, Florian Westphal
  • [PATCH net-next 02/12] netfilter: nf_log: consolidate check for NULL logger in lookup function, Florian Westphal
  • [PATCH net-next 01/12] netfilter: expect: Simplify the allocation of slab caches in nf_conntrack_expect_init, Florian Westphal
    • Re: [PATCH net-next 01/12] netfilter: expect: Simplify the allocation of slab caches in nf_conntrack_expect_init, patchwork-bot+netdevbpf
  • [PATCH net-next 03/12] netfilter: nf_log: validate nf_logger_find_get(), Florian Westphal
  • [PATCH net-next 06/12] netfilter: nft_set_pipapo: constify lookup fn args where possible, Florian Westphal
  • [PATCH net-next 04/12] netfilter: nft_osf: simplify init path, Florian Westphal
  • [PATCH net-next 07/12] netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR, Florian Westphal
  • [PATCH net-next 08/12] netfilter: nft_set_pipapo: shrink data structures, Florian Westphal
  • [PATCH net-next 09/12] netfilter: nft_set_pipapo: speed up bulk element insertions, Florian Westphal
  • [PATCH net-next 05/12] netfilter: xtables: fix up kconfig dependencies, Florian Westphal
  • [PATCH net-next 10/12] netfilter: nft_set_pipapo: use GFP_KERNEL for insertions, Florian Westphal
  • [PATCH net-next 11/12] netfilter: move nf_reinject into nfnetlink_queue modules, Florian Westphal
  • [PATCH net-next 12/12] netfilter: x_tables: Use unsafe_memcpy() for 0-sized destination, Florian Westphal
• [PATCH v2] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Ignat Korchagin
  • Re: [PATCH v2] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Pablo Neira Ayuso
    • Re: [PATCH v2] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Ignat Korchagin
• [syzbot] [netfilter?] KMSAN: uninit-value in __nla_validate_parse (3), syzbot
  • <Possible follow-ups>
  • Re: [syzbot] [netfilter?] KMSAN: uninit-value in __nla_validate_parse (3), xingwei lee
• Re: [RFC] nftables 0.9.8 -stable backports, Pablo Neira Ayuso
  • Re: [RFC] nftables 0.9.8 -stable backports, Pablo Neira Ayuso
  • Re: [RFC] nftables 0.9.8 -stable backports, Jeremy Sowden
• [PATCH libnftnl] obj: ct_timeout: setter checks for timeout array boundaries, Pablo Neira Ayuso
• [PATCH] Add protection for bmp length out of range, Lena Wang (王娜)
  • <Possible follow-ups>
  • Re: [PATCH] Add protection for bmp length out of range, Florian Westphal
    • Re: [PATCH] Add protection for bmp length out of range, Lena Wang (王娜)
• CFS for Netdev Conf 0x18 open!, Jamal Hadi Salim
• [PATCH nf] netfilter: nf_tables: set dormant flag on hook register failure, Florian Westphal
• [linux-next:master] BUILD REGRESSION d37e1e4c52bc60578969f391fb81f947c3e83118, kernel test robot
• [PATCH] netfilter: x_tables: Use unsafe_memcpy() for 0-sized destination, Kees Cook
  • Re: [PATCH] netfilter: x_tables: Use unsafe_memcpy() for 0-sized destination, Simon Horman
• [PATCH nf-next] netfilter: nft_set_pipapo: use GFP_KERNEL for insertions, Florian Westphal
• [PATCH net] netfilter: nf_tables: fix bidirectional offload regression, Felix Fietkau
  • Re: [PATCH net] netfilter: nf_tables: fix bidirectional offload regression, Pablo Neira Ayuso
  • Re: [PATCH net] netfilter: nf_tables: fix bidirectional offload regression, patchwork-bot+netdevbpf
• [PATCH nf-next] netfilter: move nf_reinject into nfnetlink_queue modules, Florian Westphal
• [PATCH nf-next] netfilter: nft_byteorder: remove multi-register support, Florian Westphal
• [PATCH libnetfilter_queue 0/1] Convert libnetfilter_queue to use entirely libmnl functions, Duncan Roe
  • [PATCH libnetfilter_queue 1/1] Convert libnetfilter_queue to use entirely libmnl functions, Duncan Roe
    • Re: [PATCH libnetfilter_queue 1/1] Convert libnetfilter_queue to use entirely libmnl functions, Pablo Neira Ayuso
      • Re: [PATCH libnetfilter_queue 1/1] Convert libnetfilter_queue to use entirely libmnl functions, Duncan Roe
        • Re: [PATCH libnetfilter_queue 1/1] Convert libnetfilter_queue to use entirely libmnl functions, Duncan Roe
        • Re: [PATCH libnetfilter_queue 00/32] Convert libnetfilter_queue to not need libnfnetlink, Duncan Roe
      • [PATCH libnetfilter_queue 00/32] Convert libnetfilter_queue to not need libnfnetlink, Duncan Roe
      • [PATCH libnetfilter_queue 01/32] src: Convert nfq_open() to use libmnl, Duncan Roe
      • [PATCH libnetfilter_queue 02/32] src: Convert nfq_open_nfnl() to use libmnl, Duncan Roe
      • [PATCH libnetfilter_queue 04/32] src: Convert nfq_create_queue(), nfq_bind_pf() & nfq_unbind_pf() to use libmnl, Duncan Roe
      • [PATCH libnetfilter_queue 03/32] src: Convert nfq_close() to use libmnl, Duncan Roe
      • [PATCH libnetfilter_queue 05/32] src: Convert nfq_set_queue_flags() & nfq_set_queue_maxlen() to use libmnl, Duncan Roe
      • [PATCH libnetfilter_queue 06/32] src: Convert nfq_handle_packet(), nfq_get_secctx(), nfq_get_payload() and all the nfq_get_ functions to use libmnl, Duncan Roe
      • [PATCH libnetfilter_queue 08/32] src: Incorporate nfnl_rcvbufsiz() in libnetfilter_queue, Duncan Roe
      • [PATCH libnetfilter_queue 07/32] src: Convert nfq_set_verdict() and nfq_set_verdict2() to use libmnl if there is no data, Duncan Roe
      • [PATCH libnetfilter_queue 09/32] src: Convert nfq_fd() to use libmnl, Duncan Roe
      • [PATCH libnetfilter_queue 10/32] src: Convert remaining nfq_* functions to use libmnl, Duncan Roe
      • [PATCH libnetfilter_queue 11/32] src: Fix checkpatch whitespace and block comment warnings, Duncan Roe
      • [PATCH libnetfilter_queue 12/32] src: Copy nlif-related code from libnfnetlink, Duncan Roe
      • [PATCH libnetfilter_queue 13/32] include: Cherry-pick macros and functions that nlif will need, Duncan Roe
      • [PATCH libnetfilter_queue 14/32] doc: Add linux_list.h to the doxygen system, Duncan Roe
      • [PATCH libnetfilter_queue 16/32] doc: Eliminate doxygen warnings from iftable.c, Duncan Roe
      • [PATCH libnetfilter_queue 15/32] doc: Eliminate doxygen warnings from linux_list.h, Duncan Roe
      • [PATCH libnetfilter_queue 17/32] whitespace: remove trailing spaces from iftable.c, Duncan Roe
      • [PATCH libnetfilter_queue 19/32] src: Convert all nlif_* functions to use libmnl, Duncan Roe
      • [PATCH libnetfilter_queue 18/32] include: Use libmnl.h instead of libnfnetlink.h, Duncan Roe
      • [PATCH libnetfilter_queue 20/32] src: Delete rtnl.c, Duncan Roe
      • [PATCH libnetfilter_queue 21/32] build: Remove libnfnetlink from the build, Duncan Roe
      • [PATCH libnetfilter_queue 22/32] include: Remove the last remaining use of a libnfnetlink header, Duncan Roe
      • [PATCH libnetfilter_queue 23/32] doc: Get doxygen to document useful static inline functions, Duncan Roe
      • [PATCH libnetfilter_queue 24/32] doc: SYNOPSIS of linux_list.h nominates libnetfilter_queue/libnetfilter_queue.h, Duncan Roe
      • [PATCH libnetfilter_queue 25/32] doc: Move nlif usage description from libnetfilter_queue.c to iftable.c, Duncan Roe
      • [PATCH libnetfilter_queue 26/32] build: Shave some time off build, Duncan Roe
      • [PATCH libnetfilter_queue 28/32] build: Get real & user times back to what they were, Duncan Roe
      • [PATCH libnetfilter_queue 27/32] doc: Resolve most issues with man page generated from linux_list.h, Duncan Roe
      • [PATCH libnetfilter_queue 30/32] doc: Fix list_empty() doxygen comments, Duncan Roe
      • [PATCH libnetfilter_queue 29/32] doc: Cater for doxygen variants w.r.t. #define stmts, Duncan Roe
      • [PATCH libnetfilter_queue 31/32] src: Use a cast in place of convoluted construct, Duncan Roe
      • [PATCH libnetfilter_queue 32/32] whitespace: Fix more checkpatch errors & warnings, Duncan Roe
• [syzbot] [netfilter?] WARNING: ODEBUG bug in ip_set_free, syzbot
  • Re: [syzbot] [netfilter?] WARNING: ODEBUG bug in ip_set_free, Jozsef Kadlecsik
• [PATCH nft] expression: missing line in describe command with invalid expression, Pablo Neira Ayuso
• [PATCH v2 nf-next 0/4] netfilter: nft_set_pipapo: speed up bulk element insertions, Florian Westphal
  • [PATCH v2 nf-next 1/4] netfilter: nft_set_pipapo: constify lookup fn args where possible, Florian Westphal
  • [PATCH v2 nf-next 2/4] netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR, Florian Westphal
    • Re: [PATCH v2 nf-next 2/4] netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR, Florian Westphal
  • [PATCH v2 nf-next 3/4] netfilter: nft_set_pipapo: shrink data structures, Florian Westphal
  • [PATCH v2 nf-next 4/4] netfilter: nft_set_pipapo: speed up bulk element insertions, Florian Westphal
  • Re: [PATCH v2 nf-next 0/4] netfilter: nft_set_pipapo: speed up bulk element insertions, Stefano Brivio
• [ANNOUNCE] ipset 7.21 released, Jozsef Kadlecsik
• [PATCH nf-next 0/4] netfilter: nft_set_pipapo: speed up bulk element insertions, Florian Westphal
  • [PATCH nf-next 2/4] netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR, Florian Westphal
    • Re: [PATCH nf-next 2/4] netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR, Stefano Brivio
      • Re: [PATCH nf-next 2/4] netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR, Florian Westphal
  • [PATCH nf-next 1/4] netfilter: nft_set_pipapo: constify lookup fn args where possible, Florian Westphal
    • Re: [PATCH nf-next 1/4] netfilter: nft_set_pipapo: constify lookup fn args where possible, Stefano Brivio
  • [PATCH nf-next 3/4] netfilter: nft_set_pipapo: shrink data structures, Florian Westphal
    • Re: [PATCH nf-next 3/4] netfilter: nft_set_pipapo: shrink data structures, Stefano Brivio
  • [PATCH nf-next 4/4] netfilter: nft_set_pipapo: speed up bulk element insertions, Florian Westphal
    • Re: [PATCH nf-next 4/4] netfilter: nft_set_pipapo: speed up bulk element insertions, Stefano Brivio
      • Re: [PATCH nf-next 4/4] netfilter: nft_set_pipapo: speed up bulk element insertions, Florian Westphal
• [PATCH] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Ignat Korchagin
  • Re: [PATCH] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Pablo Neira Ayuso
    • Re: [PATCH] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Ignat Korchagin
      • Re: [PATCH] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Jordan Griege
  • Re: [PATCH] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Pablo Neira Ayuso
• [PATCH 1/1] tests: use common shebang in "packetpath/flowtables" test, Thomas Haller
  • Re: [PATCH 1/1] tests: use common shebang in "packetpath/flowtables" test, Phil Sutter
• [PATCH 1/1] tests/shell: no longer support unprettified ".json-nft" files, Thomas Haller
  • Re: [PATCH 1/1] tests/shell: no longer support unprettified ".json-nft" files, Phil Sutter
• [syzbot] Monthly netfilter report (Feb 2024), syzbot
• [netfilter-nf:testing 5/13] net/netfilter/ipset/ip_set_hash_gen.h:435:19: sparse: sparse: incorrect type in assignment (different address spaces), kernel test robot
• [PATCH v3] netfilter: nat: restore default DNAT behavior, Kyle Swenson
• [netfilter-nf:testing 8/13] net/netfilter/nft_set_pipapo.c:518: warning: Function parameter or struct member 'tstamp' not described in 'pipapo_get', kernel test robot
• [nft PATCH] cache: Always set NFT_CACHE_TERSE for list cmd with --terse, Phil Sutter
  • Re: [nft PATCH] cache: Always set NFT_CACHE_TERSE for list cmd with --terse, Phil Sutter
• [PATCH,v2 nft 1/2] evaluate: skip byteorder conversion for selector smaller than 2 bytes, Pablo Neira Ayuso
  • [PATCH nft 2/2] netlink_linearize: add assertion to catch for buggy byteorder, Pablo Neira Ayuso
• [nft PATCH] cache: Reduce caching when terse listing a table, Phil Sutter
• [PATCH nft] evaluate: skip byteorder conversion for selector smaller than 2 bytes, Pablo Neira Ayuso
• [PATCH net 00/13] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 01/13] netfilter: nft_compat: narrow down revision to unsigned 8-bits, Pablo Neira Ayuso
  • [PATCH net 02/13] netfilter: nft_compat: reject unused compat flag, Pablo Neira Ayuso
  • [PATCH net 04/13] netfilter: nft_set_pipapo: remove static in nft_pipapo_get(), Pablo Neira Ayuso
    • Re: [PATCH net 04/13] netfilter: nft_set_pipapo: remove static in nft_pipapo_get(), Paolo Abeni
  • [PATCH net 03/13] netfilter: nft_compat: restrict match/target protocol to u16, Pablo Neira Ayuso
  • [PATCH net 05/13] netfilter: ipset: Missing gc cancellations fixed, Pablo Neira Ayuso
    • Re: [PATCH net 05/13] netfilter: ipset: Missing gc cancellations fixed, Thorsten Leemhuis
      • Re: [PATCH net 05/13] netfilter: ipset: Missing gc cancellations fixed, Paolo Abeni
        • Re: [PATCH net 05/13] netfilter: ipset: Missing gc cancellations fixed, Pablo Neira Ayuso
    • Re: [PATCH net 05/13] netfilter: ipset: Missing gc cancellations fixed, Paolo Abeni
      • Re: [PATCH net 05/13] netfilter: ipset: Missing gc cancellations fixed, Jozsef Kadlecsik
  • [PATCH net 07/13] netfilter: nft_ct: reject direction for ct id, Pablo Neira Ayuso
  • [PATCH net 06/13] netfilter: ctnetlink: fix filtering for zone 0, Pablo Neira Ayuso
  • [PATCH net 08/13] netfilter: nf_tables: use timestamp to check for set element timeout, Pablo Neira Ayuso
    • Re: [PATCH net 08/13] netfilter: nf_tables: use timestamp to check for set element timeout, Paolo Abeni
  • [PATCH net 10/13] netfilter: nft_set_rbtree: skip end interval element from gc, Pablo Neira Ayuso
  • [PATCH net 09/13] netfilter: nfnetlink_queue: un-break NF_REPEAT, Pablo Neira Ayuso
  • [PATCH net 12/13] netfilter: nft_set_pipapo: add helper to release pcpu scratch area, Pablo Neira Ayuso
  • [PATCH net 11/13] netfilter: nft_set_pipapo: store index in scratch maps, Pablo Neira Ayuso
    • Re: [PATCH net 11/13] netfilter: nft_set_pipapo: store index in scratch maps, Paolo Abeni
  • [PATCH net 13/13] netfilter: nft_set_pipapo: remove scratch_aligned pointer, Pablo Neira Ayuso
    • Re: [PATCH net 13/13] netfilter: nft_set_pipapo: remove scratch_aligned pointer, Paolo Abeni
• [PATCH AUTOSEL 5.4 6/7] netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new, Sasha Levin
• [PATCH AUTOSEL 5.10 09/16] netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new, Sasha Levin
• [PATCH AUTOSEL 5.15 12/23] netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new, Sasha Levin
• [PATCH AUTOSEL 6.1 15/29] netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new, Sasha Levin
• [PATCH AUTOSEL 6.6 21/38] netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new, Sasha Levin
• [PATCH AUTOSEL 6.7 23/44] netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new, Sasha Levin
• [PATCH nf v2 0/3] netfilter: nft_set_pipapo: nft_set_pipapo: map_index must be per set, Florian Westphal
  • [PATCH nf v2 1/3] netfilter: nft_set_pipapo: store index in scratch maps, Florian Westphal
  • [PATCH nf v2 2/3] netfilter: nft_set_pipapo: add helper to release pcpu scratch area, Florian Westphal
  • [PATCH nf v2 3/3] netfilter: nft_set_pipapo: remove scratch_aligned pointer, Florian Westphal
• [nft PATCH] cache: Optimize caching for 'list tables' command, Phil Sutter
  • Re: [nft PATCH] cache: Optimize caching for 'list tables' command, Phil Sutter
• [nft PATCH v3] evaluate: fix check for unknown in cmd_op_to_name, 谢致邦 (XIE Zhibang)
  • Re: [nft PATCH v3] evaluate: fix check for unknown in cmd_op_to_name, Phil Sutter
• [PATCH conntrack] conntrack: don't print [USERSPACE] information in case of XML output, Ignacy Gawędzki
  • Re: [PATCH conntrack] conntrack: don't print [USERSPACE] information in case of XML output, Florian Westphal
• [nft PATCH v2] evaluate: fix check for unknown in cmd_op_to_name, 谢致邦 (XIE Zhibang)
  • Re: [nft PATCH v2] evaluate: fix check for unknown in cmd_op_to_name, Phil Sutter
• [PATCH nf] netfilter: nf_tables: use timestamp to check for set element timeout, Pablo Neira Ayuso
• 0x18: Dates And Location for upcoming conference, Jamal Hadi Salim
• [PATCH] Makefile.am: don't silence -Wimplicit-function-declaration, Sam James
  • Re: [PATCH] Makefile.am: don't silence -Wimplicit-function-declaration, Phil Sutter
• [PATCH nf] netfilter: nfnetlink_queue: un-break NF_REPEAT, Florian Westphal
• [PATCH nf-next] netfilter: xtables: fix up kconfig dependencies, Florian Westphal
  • Re: [PATCH nf-next] netfilter: xtables: fix up kconfig dependencies, Randy Dunlap
• [PATCH nf 0/3] netfilter: nft_set_pipapo: map_index must be per set, Florian Westphal
  • [PATCH nf 2/3] netfilter: nft_set_pipapo: add helper to release pcpu scratch area, Florian Westphal
    • Re: [PATCH nf 2/3] netfilter: nft_set_pipapo: add helper to release pcpu scratch area, Stefano Brivio
  • [PATCH nf 1/3] netfilter: nft_set_pipapo: store index in scratch maps, Florian Westphal
    • Re: [PATCH nf 1/3] netfilter: nft_set_pipapo: store index in scratch maps, Stefano Brivio
      • Re: [PATCH nf 1/3] netfilter: nft_set_pipapo: store index in scratch maps, Florian Westphal
        • Re: [PATCH nf 1/3] netfilter: nft_set_pipapo: store index in scratch maps, Stefano Brivio
          • Re: [PATCH nf 1/3] netfilter: nft_set_pipapo: store index in scratch maps, Florian Westphal
  • [PATCH nf 3/3] netfilter: nft_set_pipapo: remove scratch_aligned pointer, Florian Westphal
    • Re: [PATCH nf 3/3] netfilter: nft_set_pipapo: remove scratch_aligned pointer, Stefano Brivio
• [PATCH] evaluate: fix check for unknown in cmd_op_to_name, 谢致邦 (XIE Zhibang)
• [syzbot] [netfilter?] WARNING: suspicious RCU usage in hash_netportnet6_destroy, syzbot
  • Re: [syzbot] [netfilter?] WARNING: suspicious RCU usage in hash_netportnet6_destroy, syzbot
• [PATCH] ipvs: generic netlink multicast event group, Terin Stock
  • Re: [PATCH] ipvs: generic netlink multicast event group, Julian Anastasov
    • Re: [PATCH] ipvs: generic netlink multicast event group, Pablo Neira Ayuso
      • Re: [PATCH] ipvs: generic netlink multicast event group, Julian Anastasov
        • Re: [PATCH] ipvs: generic netlink multicast event group, Terin Stock
• [PATCH nf] netfilter: nft_ct: reject direction for ct id, Pablo Neira Ayuso
• [PATCH net] net: ctnetlink: fix filtering for zone 0, Felix Huettner
• [PATCH v4.19.y] netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval(), Ajay Kaher
  • [PATCH v5.4.y] netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval(), Ajay Kaher
    • Re: [PATCH v5.4.y] netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval(), Greg KH
• iptables: considers incomplete rule in -C and finds an erroneous match, Roman Mamedov
  • Re: iptables: considers incomplete rule in -C and finds an erroneous match, Roman Mamedov
  • Re: iptables: considers incomplete rule in -C and finds an erroneous match, Phil Sutter
• [PATCH 1/1] netfilter: ipset: Missing gc cancellations fixed, Jozsef Kadlecsik
  • Re: [PATCH 1/1] netfilter: ipset: Missing gc cancellations fixed, Linux regression tracking (Thorsten Leemhuis)
• [iptables PATCH 00/12] Range value related fixes/improvements, Phil Sutter
  • [iptables PATCH 11/12] extensions: tcp/udp: Save/xlate inverted full ranges, Phil Sutter
  • [iptables PATCH 09/12] extensions: ipcomp: Save inverted full ranges, Phil Sutter
  • [iptables PATCH 12/12] libxtables: xtoptions: Respect min/max values when completing ranges, Phil Sutter
  • [iptables PATCH 06/12] extensions: mh: Save/xlate inverted full ranges, Phil Sutter
  • [iptables PATCH 07/12] extensions: rt: Save/xlate inverted full ranges, Phil Sutter
  • [iptables PATCH 01/12] extensions: *.t/*.txlate: Test range corner-cases, Phil Sutter
  • [iptables PATCH 03/12] libxtables: Reject negative port ranges, Phil Sutter
  • [iptables PATCH 05/12] extensions: frag: Save/xlate inverted full ranges, Phil Sutter
  • [iptables PATCH 04/12] extensions: ah: Save/xlate inverted full ranges, Phil Sutter
  • [iptables PATCH 10/12] nft: Do not omit full ranges if inverted, Phil Sutter
  • [iptables PATCH 02/12] libxtables: xtoptions: Assert ranges are monotonic increasing, Phil Sutter
  • [iptables PATCH 08/12] extensions: esp: Save/xlate inverted full ranges, Phil Sutter
  • Re: [iptables PATCH 00/12] Range value related fixes/improvements, Phil Sutter
• [syzbot] [netfilter?] WARNING: ODEBUG bug in hash_netiface4_destroy, syzbot
  • Re: [syzbot] [netfilter?] WARNING: ODEBUG bug in hash_netiface4_destroy, syzbot
  • Re: [syzbot] [netfilter?] WARNING: ODEBUG bug in hash_netiface4_destroy, syzbot
• [PATCH nf] netfilter: nft_compat: reject unused compat flag, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_compat: restrict match/target protocol to u16, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_compat: narrow down revision to unsigned 8-bits, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_byteorder: length must be multiple of size, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_pipapo: remove static in nft_pipapo_get(), Pablo Neira Ayuso
• [PATCH v5.10.y] netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval(), Ajay Kaher
• [iptables PATCH 0/7] A number of ASAN-identified fixes, Phil Sutter
  • [iptables PATCH 3/7] libxtables: Fix memleak of matches' udata, Phil Sutter
  • [iptables PATCH 6/7] xshared: Introduce xtables_clear_args(), Phil Sutter
  • [iptables PATCH 1/7] tests: iptables-test: Increase non-fast mode strictness, Phil Sutter
  • [iptables PATCH 7/7] ebtables: Fix for memleak with change counters command, Phil Sutter
  • [iptables PATCH 5/7] xshared: Fix for memleak in option merging with ebtables, Phil Sutter
  • [iptables PATCH 2/7] nft: ruleparse: Add missing braces around ternary, Phil Sutter
  • [iptables PATCH 4/7] xtables-eb: Eliminate 'opts' define, Phil Sutter
  • Re: [iptables PATCH 0/7] A number of ASAN-identified fixes, Phil Sutter
• [nft PATCH] json: Support sets' auto-merge option, Phil Sutter
  • Re: [nft PATCH] json: Support sets' auto-merge option, Phil Sutter
  • Re: [nft PATCH] json: Support sets' auto-merge option, Phil Sutter
• [ANNOUNCE] ipset 7.20 released, Jozsef Kadlecsik
• Re: linux-next: Tree for Jan 30 (netfilter, xtables), Randy Dunlap
  • Re: linux-next: Tree for Jan 30 (netfilter, xtables), Florian Westphal
• [PATCH nf,v2] netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations, Pablo Neira Ayuso
• [RFC PATCH v2 0/1] netfilter: nat: restore default DNAT behavior, Kyle Swenson
  • [RFC PATCH v2 1/1] netfilter: nat: restore default DNAT behavior, Kyle Swenson
    • Re: [RFC PATCH v2 1/1] netfilter: nat: restore default DNAT behavior, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_osf: simplify init path, Pablo Neira Ayuso
• [PATCH nf-next 1/2] netfilter: nf_log: consolidate check for NULL logger in lookup function, Pablo Neira Ayuso
  • [PATCH nf-next 2/2] netfilter: nf_log: validate nf_logger_find_get(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_ct: bail out if helper is not found for NFPROTO_{IPV4,IPV6}, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nft_ct: bail out if helper is not found for NFPROTO_{IPV4,IPV6}, Pablo Neira Ayuso
• [PATCH nf-next 0/9] netfilter updates for -next, Florian Westphal
  • [PATCH nf-next 3/9] netfilter: nf_tables: Implement table adoption support, Florian Westphal
  • [PATCH nf-next 4/9] netfilter: nf_tables: pass flags to set backend selection routine, Florian Westphal
  • [PATCH nf-next 1/9] netfilter: uapi: Document NFT_TABLE_F_OWNER flag, Florian Westphal
    • Re: [PATCH nf-next 1/9] netfilter: uapi: Document NFT_TABLE_F_OWNER flag, patchwork-bot+netdevbpf
  • [PATCH nf-next 2/9] netfilter: nf_tables: Introduce NFT_TABLE_F_PERSIST, Florian Westphal
  • [PATCH nf-next 6/9] ipvs: Simplify the allocation of ip_vs_conn slab caches, Florian Westphal
  • [PATCH nf-next 5/9] netfilter: nf_conncount: Use KMEM_CACHE instead of kmem_cache_create(), Florian Westphal
  • [PATCH nf-next 7/9] netfilter: arptables: allow xtables-nft only builds, Florian Westphal
  • [PATCH nf-next 8/9] netfilter: xtables: allow xtables-nft only builds, Florian Westphal
  • [PATCH nf-next 9/9] netfilter: ebtables: allow xtables-nft only builds, Florian Westphal
  • Re: [PATCH nf-next 0/9] netfilter updates for -next, Jakub Kicinski
    • Re: [PATCH nf-next 0/9] netfilter updates for -next, Pablo Neira Ayuso
    • Re: [PATCH nf-next 0/9] netfilter updates for -next, Florian Westphal
• [PATCH nft] datatype: display 0s time datatype, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations, Pablo Neira Ayuso
• [PATCH bpf-next v4 0/3] Annotate kfuncs in .BTF_ids section, Daniel Xu
  • [PATCH bpf-next v4 3/3] bpf: treewide: Annotate BPF kfuncs in BTF, Daniel Xu
    • Re: [PATCH bpf-next v4 3/3] bpf: treewide: Annotate BPF kfuncs in BTF, Benjamin Tissoires
    • Re: [PATCH bpf-next v4 3/3] bpf: treewide: Annotate BPF kfuncs in BTF, kernel test robot
  • Re: [PATCH bpf-next v4 0/3] Annotate kfuncs in .BTF_ids section, Jiri Olsa
  • Re: [PATCH bpf-next v4 0/3] Annotate kfuncs in .BTF_ids section, patchwork-bot+netdevbpf
  • Re: [PATCH bpf-next v4 0/3] Annotate kfuncs in .BTF_ids section, Manu Bretelle
    • Re: [PATCH bpf-next v4 0/3] Annotate kfuncs in .BTF_ids section, Daniel Xu
    • Re: [PATCH bpf-next v4 0/3] Annotate kfuncs in .BTF_ids section, Jiri Olsa
      • Re: [PATCH bpf-next v4 0/3] Annotate kfuncs in .BTF_ids section, Manu Bretelle
        • Re: [PATCH bpf-next v4 0/3] Annotate kfuncs in .BTF_ids section, Viktor Malik
• [RFC PATCH 0/1] netfilter: nat: restore default DNAT behavior, Kyle Swenson
  • [RFC PATCH 1/1] netfilter: nat: restore default DNAT behavior, Kyle Swenson
    • Re: [RFC PATCH 1/1] netfilter: nat: restore default DNAT behavior, Florian Westphal
      • Re: [RFC PATCH 1/1] netfilter: nat: restore default DNAT behavior, Kyle Swenson
        • Re: [RFC PATCH 1/1] netfilter: nat: restore default DNAT behavior, Florian Westphal
          • Re: [RFC PATCH 1/1] netfilter: nat: restore default DNAT behavior, Kyle Swenson
• [PATCH nf] netfilter: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new, Xin Long
  • Re: [PATCH nf] netfilter: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new, Florian Westphal
• [PATCH nf,v3] netfilter: nf_tables: validate NFPROTO_* family, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: validate NFPROTO_{IPV4,IPV6,INET} family, Pablo Neira Ayuso
• Re: [ANN] net-next is OPEN, Jakub Kicinski
  • Re: [ANN] net-next is OPEN, Matthieu Baerts
    • Re: [ANN] net-next is OPEN, Jakub Kicinski
    • Re: [netfilter-core] [ANN] net-next is OPEN, Pablo Neira Ayuso
      • Re: [netfilter-core] [ANN] net-next is OPEN, Matthieu Baerts
        • Re: [netfilter-core] [ANN] net-next is OPEN, Pablo Neira Ayuso
          • Re: [netfilter-core] [ANN] net-next is OPEN, Matthieu Baerts
            • Re: [netfilter-core] [ANN] net-next is OPEN, Pablo Neira Ayuso
              • Re: [netfilter-core] [ANN] net-next is OPEN, Matthieu Baerts
  • Re: [netfilter-core] [ANN] net-next is OPEN, Pablo Neira Ayuso
    • Re: [netfilter-core] [ANN] net-next is OPEN, Jakub Kicinski
      • Re: [netfilter-core] [ANN] net-next is OPEN, Pablo Neira Ayuso
        • Re: [netfilter-core] [ANN] net-next is OPEN, Jakub Kicinski
          • Re: [netfilter-core] [ANN] net-next is OPEN, Jakub Kicinski
            • Re: [netfilter-core] [ANN] net-next is OPEN, Florian Westphal
              • Re: [netfilter-core] [ANN] net-next is OPEN, Jakub Kicinski
            • Re: [netfilter-core] [ANN] net-next is OPEN, Pablo Neira Ayuso
              • Re: [netfilter-core] [ANN] net-next is OPEN, Jakub Kicinski
• [PATCH nf-next 1/2] netfilter: xtables: add _LEGACY kconfig symbol, Florian Westphal
  • [PATCH nf-next 2/2] netfilter: ebtables: add _LEGACY kconfig symbol, Florian Westphal
• [PATCH nf-next] netfilter: expect: Simplify the allocation of slab caches in nf_conntrack_expect_init, Kunwu Chan
• [PATCH iptables] extensions: libebt_stp: fix range checking, Florian Westphal
  • Re: [PATCH iptables] extensions: libebt_stp: fix range checking, Phil Sutter
    • Re: [PATCH iptables] extensions: libebt_stp: fix range checking, Florian Westphal
      • Re: [PATCH iptables] extensions: libebt_stp: fix range checking, Phil Sutter
        • Re: [PATCH iptables] extensions: libebt_stp: fix range checking, Florian Westphal
          • Re: [PATCH iptables] extensions: libebt_stp: fix range checking, Phil Sutter
            • Re: [PATCH iptables] extensions: libebt_stp: fix range checking, Phil Sutter
• [PATCH nf] netfilter: nf_tables: validate NFPROTO_{IPV4,IPV6,INET} family, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: validate NFPROTO_{IPV4,IPV6,INET} family, Florian Westphal
• [PATCH nf-next] netfilter: arptables: allow arptables-nft only builds, Florian Westphal
  • Re: [PATCH nf-next] netfilter: arptables: allow arptables-nft only builds, Phil Sutter
• [PATCH] netfilter: nf_tables: Add a null pointer check in two functions, Markus Elfring
  • Re: [PATCH] netfilter: nf_tables: Add a null pointer check in two functions, Phil Sutter
    • Re: netfilter: nf_tables: Add a null pointer check in two functions, Markus Elfring
  • Re: [PATCH] netfilter: nf_tables: Add a null pointer check in two functions, Simon Horman
• [iptables PATCH] iptables: Add missing error codes, Jacek Tomasiak
  • Re: [iptables PATCH] iptables: Add missing error codes, Phil Sutter
    • Re: [iptables PATCH] iptables: Add missing error codes, Jacek Tomasiak
      • Re: [iptables PATCH] iptables: Add missing error codes, Phil Sutter
• [PATCH nf-next] netfilter: nf_conncount: Use KMEM_CACHE instead of kmem_cache_create(), Kunwu Chan
  • Re: [PATCH nf-next] netfilter: nf_conncount: Use KMEM_CACHE() instead of kmem_cache_create(), Markus Elfring
• [PATCH 64/82] netfilter: Refactor intentional wrap-around test, Kees Cook
  • Re: [PATCH 64/82] netfilter: Refactor intentional wrap-around test, Florian Westphal
• [PATCH] tests: shell: add test to cover ct offload by using nft flowtables To cover kernel patch ("netfilter: nf_tables: set transport offset from mac header for netdev/egress")., yiche
  • Re: [PATCH] tests: shell: add test to cover ct offload by using nft flowtables To cover kernel patch ("netfilter: nf_tables: set transport offset from mac header for netdev/egress")., Pablo Neira Ayuso
    • Re: [PATCH] tests: shell: add test to cover ct offload by using nft flowtables To cover kernel patch ("netfilter: nf_tables: set transport offset from mac header for netdev/egress")., Florian Westphal
      • Message not available
        • Re: [PATCH] tests: shell: add test to cover ct offload by using nft flowtables To cover kernel patch ("netfilter: nf_tables: set transport offset from mac header for netdev/egress")., Yi Chen
          • Re: [PATCH] tests: shell: add test to cover ct offload by using nft flowtables To cover kernel patch ("netfilter: nf_tables: set transport offset from mac header for netdev/egress")., Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: reject QUEUE/DROP verdict parameters, Florian Westphal
• PROBLEM: nf_conntrack tcp SYN reuse results in incorrect window scaling, Schaefer, Ryan
  • Re: PROBLEM: nf_conntrack tcp SYN reuse results in incorrect window scaling, Schaefer, Ryan
  • Re: PROBLEM: nf_conntrack tcp SYN reuse results in incorrect window scaling, Florian Westphal
  • [PATCH] netfilter: conntrack: correct window scaling with retransmitted SYN, Ryan Schaefer
• [PATCH nft 0/2] fix host-endian constant values in set lookup keys, Florian Westphal
  • [PATCH nft 1/2] netlink_delinearize: move concat and value postprocessing to helpers, Florian Westphal
  • [PATCH nft 2/2] evaluate: permit use of host-endian constant values in set lookup keys, Florian Westphal
• [PATCH nf] netfilter: nf_tables: restrict anonymous set and map names to 16 bytes, Florian Westphal
• [PATCH nf] netfilter: nft_limit: reject configurations that cause integer overflow, Florian Westphal
• [PATCH nf] netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain, Pablo Neira Ayuso
• [PATCH net,v2 00/13] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 02/13] netfilter: nf_tables: validate .maxattr at expression registration, Pablo Neira Ayuso
  • [PATCH net 01/13] netfilter: nf_tables: reject invalid set policy, Pablo Neira Ayuso
    • Re: [PATCH net 01/13] netfilter: nf_tables: reject invalid set policy, patchwork-bot+netdevbpf
  • [PATCH net 03/13] netfilter: nf_tables: bail out if stateful expression provides no .clone, Pablo Neira Ayuso
  • [PATCH net 04/13] netfilter: nft_limit: do not ignore unsupported flags, Pablo Neira Ayuso
  • [PATCH net 05/13] netfilter: nfnetlink_log: use proper helper for fetching physinif, Pablo Neira Ayuso
  • [PATCH net 09/13] netfilter: nf_tables: check if catch-all set element is active in next generation, Pablo Neira Ayuso
  • [PATCH net 07/13] netfilter: propagate net to nf_bridge_get_physindev, Pablo Neira Ayuso
  • [PATCH net 11/13] netfilter: nf_tables: skip dead set elements in netlink dump, Pablo Neira Ayuso
  • [PATCH net 10/13] netfilter: nf_tables: do not allow mismatch field size and set key length, Pablo Neira Ayuso
  • [PATCH net 08/13] netfilter: bridge: replace physindev with physinif in nf_bridge_info, Pablo Neira Ayuso
  • [PATCH net 12/13] netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description, Pablo Neira Ayuso
  • [PATCH net 06/13] netfilter: nf_queue: remove excess nf_bridge variable, Pablo Neira Ayuso
  • [PATCH net 13/13] ipvs: avoid stat macros calls from preemptible context, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net,v2 00/13] Netfilter fixes for net, Pablo Neira Ayuso
    • [PATCH net 01/13] netfilter: nft_compat: narrow down revision to unsigned 8-bits, Pablo Neira Ayuso
      • Re: [PATCH net 01/13] netfilter: nft_compat: narrow down revision to unsigned 8-bits, patchwork-bot+netdevbpf
        • Re: [PATCH net 01/13] netfilter: nft_compat: narrow down revision to unsigned 8-bits, Paolo Abeni
    • [PATCH net 03/13] netfilter: nft_compat: restrict match/target protocol to u16, Pablo Neira Ayuso
    • [PATCH net 04/13] netfilter: nft_set_pipapo: remove static in nft_pipapo_get(), Pablo Neira Ayuso
    • [PATCH net 02/13] netfilter: nft_compat: reject unused compat flag, Pablo Neira Ayuso
    • [PATCH net 05/13] netfilter: ipset: Missing gc cancellations fixed, Pablo Neira Ayuso
    • [PATCH net 07/13] netfilter: nft_ct: reject direction for ct id, Pablo Neira Ayuso
    • [PATCH net 06/13] netfilter: ctnetlink: fix filtering for zone 0, Pablo Neira Ayuso
    • [PATCH net 09/13] netfilter: nfnetlink_queue: un-break NF_REPEAT, Pablo Neira Ayuso
    • [PATCH net 10/13] netfilter: nft_set_rbtree: skip end interval element from gc, Pablo Neira Ayuso
    • [PATCH net 08/13] netfilter: nf_tables: use timestamp to check for set element timeout, Pablo Neira Ayuso
    • [PATCH net 11/13] netfilter: nft_set_pipapo: store index in scratch maps, Pablo Neira Ayuso
    • [PATCH net 12/13] netfilter: nft_set_pipapo: add helper to release pcpu scratch area, Pablo Neira Ayuso
    • [PATCH net 13/13] netfilter: nft_set_pipapo: remove scratch_aligned pointer, Pablo Neira Ayuso
• [PATCH nft] tests: py: remove huge-limit test cases, Florian Westphal
• [syzbot] [netfilter?] WARNING in nf_hook_entry_head, syzbot
• [PATCH net] ipvs: Simplify the allocation of ip_vs_conn slab caches, Kunwu Chan
  • Re: [PATCH net] ipvs: Simplify the allocation of ip_vs_conn slab caches, Denis Kirjanov
  • Re: [PATCH net] ipvs: Simplify the allocation of ip_vs_conn slab caches, Simon Horman
    • Re: [PATCH net] ipvs: Simplify the allocation of ip_vs_conn slab caches, Kunwu Chan
      • Re: [PATCH net] ipvs: Simplify the allocation of ip_vs_conn slab caches, Simon Horman
        • Re: [PATCH net] ipvs: Simplify the allocation of ip_vs_conn slab caches, Kunwu Chan
• [PATCH 0/1] ipset performance regression in swap fix, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: ipset: fix performance regression in swap operation, Jozsef Kadlecsik
    • Re: [PATCH 1/1] netfilter: ipset: fix performance regression in swap operation, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH 0/1] ipset performance regression in swap fix, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: fix performance regression in swap operation, Jozsef Kadlecsik
• [PATCH nft] evaluate: don't assert on net/transport header conflict, Florian Westphal
• [PATCH net] net: ipvs: avoid stat macros calls from preemptible context, Fedor Pchelkin
  • Re: [PATCH net] net: ipvs: avoid stat macros calls from preemptible context, Julian Anastasov
  • Re: [PATCH net] net: ipvs: avoid stat macros calls from preemptible context, Simon Horman
  • Re: [PATCH net] net: ipvs: avoid stat macros calls from preemptible context, Pablo Neira Ayuso
• [PATCH nft] rule: fix sym refcount assertion, Florian Westphal
• [PATCH nft] evaluate: error out when store needs more than one 128bit register of align fixup, Florian Westphal
• [PATCH nf] netfilter: nf_tables: skip dead set elements in netlink dump, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: do not allow mismatch field size and set key length, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: check if catch-all set element is active in next generation, Pablo Neira Ayuso
• [PATCH libnftnl,v3] set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA}, Pablo Neira Ayuso
• [PATCH nft] rule: do not crash if to-be-printed flowtable lacks priority, Florian Westphal
• [PATCH 1/2] parser: reject raw payload expressions with 0 length, Florian Westphal
• [PATCH nft v3] src: do not merge a set with a erroneous one, Florian Westphal
  • Re: [PATCH nft v3] src: do not merge a set with a erroneous one, Pablo Neira Ayuso
• [PATCH libnftnl] set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA}, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH libnftnl] set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA}, Pablo Neira Ayuso
• [PATCH libnftnl] set: buffer overflow in NFTNL_SET_DESC_CONCAT setter, Pablo Neira Ayuso
  • Re: [PATCH libnftnl] set: buffer overflow in NFTNL_SET_DESC_CONCAT setter, Phil Sutter
    • Re: [PATCH libnftnl] set: buffer overflow in NFTNL_SET_DESC_CONCAT setter, Pablo Neira Ayuso
      • Re: [PATCH libnftnl] set: buffer overflow in NFTNL_SET_DESC_CONCAT setter, Phil Sutter
• [PATCH nft 0/2] memleak fixes for tests/shell/testcases/bogons/nft-f/, Pablo Neira Ayuso
  • [PATCH nft 1/2] evaluate: release key expression in error path of implicit map with unknown datatype, Pablo Neira Ayuso
  • [PATCH nft 2/2] evaluate: release mpz type in expr_evaluate_list() error path, Pablo Neira Ayuso
• [PATCH nft,v2] evaluate: bail out if anonymous concat set defines a non concat expression, Pablo Neira Ayuso
• [PATCH nft 0/2] evaluate: add more checks for '... set 1-3', Florian Westphal
  • [PATCH nft 1/2] evaluate: tproxy: move range error checks after arg evaluation, Florian Westphal
  • [PATCH nft v2 2/2] evaluate: add missing range checks for dup,fwd and payload statements, Florian Westphal
• [PATCH nft] evaluate: error out when expression has no datatype, Florian Westphal
• [PATCH v3 0/4] netlink: bridge: fix nf_bridge->physindev use after free, Pavel Tikhomirov
  • [PATCH v3 1/4] netfilter: nfnetlink_log: use proper helper for fetching physinif, Pavel Tikhomirov
    • Re: [PATCH v3 1/4] netfilter: nfnetlink_log: use proper helper for fetching physinif, Simon Horman
  • [PATCH v3 2/4] netfilter: nf_queue: remove excess nf_bridge variable, Pavel Tikhomirov
    • Re: [PATCH v3 2/4] netfilter: nf_queue: remove excess nf_bridge variable, Simon Horman
  • [PATCH v3 3/4] netfilter: propagate net to nf_bridge_get_physindev, Pavel Tikhomirov
    • Re: [PATCH v3 3/4] netfilter: propagate net to nf_bridge_get_physindev, Simon Horman
  • [PATCH v3 4/4] netfilter: bridge: replace physindev with physinif in nf_bridge_info, Pavel Tikhomirov
  • Re: [PATCH v3 0/4] netlink: bridge: fix nf_bridge->physindev use after free, Pablo Neira Ayuso
    • Re: [PATCH v3 0/4] netlink: bridge: fix nf_bridge->physindev use after free, Florian Westphal
• [PATCH nft] evaluate: disable ct set with ranges, Florian Westphal
  • Re: [PATCH nft] evaluate: disable ct set with ranges, Florian Westphal
    • Re: [PATCH nft] evaluate: disable ct set with ranges, Pablo Neira Ayuso
• [PATCH nft] payload: only assert if l2 header base has no length, Florian Westphal
• [iptables PATCH v2 0/3] iptables-save: Avoid /etc/protocols lookups, Phil Sutter
  • [iptables PATCH v2 3/3] iptables-save: Avoid /etc/protocols lookups, Phil Sutter
  • [iptables PATCH v2 2/3] libxtables: Add dccp and ipcomp to xtables_chain_protos, Phil Sutter
  • [iptables PATCH v2 1/3] Revert "xshared: Print protocol numbers if --numeric was given", Phil Sutter
  • Re: [iptables PATCH v2 0/3] iptables-save: Avoid /etc/protocols lookups, Phil Sutter
• [PATCH nft 0/4] assorted fixes, Pablo Neira Ayuso
  • [PATCH nft 2/4] evaluate: do not fetch next expression on runaway number of concatenation components, Pablo Neira Ayuso
  • [PATCH nft 1/4] evaluate: skip anonymous set optimization for concatenations, Pablo Neira Ayuso
  • [PATCH nft 3/4] evaluate: bail out if anonymous concat set defines a non concat expression, Pablo Neira Ayuso
  • [PATCH nft 4/4] Revert "datatype: do not assert when value exceeds expected width", Pablo Neira Ayuso
    • Re: [PATCH nft 4/4] Revert "datatype: do not assert when value exceeds expected width", Florian Westphal
      • Re: [PATCH nft 4/4] Revert "datatype: do not assert when value exceeds expected width", Pablo Neira Ayuso
• [iptables PATCH 1/2] Revert "xshared: Print protocol numbers if --numeric was given", Phil Sutter
  • [iptables PATCH 2/2] iptables-save: Avoid /etc/protocols lookups, Phil Sutter
• Re: Performance regression in ip_set_swap on 6.1.69, David Wang
  • Re: Performance regression in ip_set_swap on 6.1.69, Jozsef Kadlecsik
    • Re: Performance regression in ip_set_swap on 6.1.69, David Wang
      • Re: Performance regression in ip_set_swap on 6.1.69, David Wang
      • Re: Performance regression in ip_set_swap on 6.1.69, Jozsef Kadlecsik
        • Re: Performance regression in ip_set_swap on 6.1.69, Jozsef Kadlecsik
          • Re:Re: Performance regression in ip_set_swap on 6.1.69, David Wang
            • Re:Re: Performance regression in ip_set_swap on 6.1.69, Jozsef Kadlecsik
              • Re:Performance regression in ip_set_swap on 6.7.0, David Wang
                • Re:Performance regression in ip_set_swap on 6.7.0, Jozsef Kadlecsik
                  • Re:Performance regression in ip_set_swap on 6.7.0, David Wang
                    • Re: Performance regression in ip_set_swap on 6.7.0, Ale Crismani
                      • Re: Performance regression in ip_set_swap on 6.7.0, Ale Crismani
                        • Re: Performance regression in ip_set_swap on 6.7.0, Jozsef Kadlecsik
• [PATCH v2 nft 0/3] set related parser fixes, Florian Westphal
  • [PATCH v2 nft 1/3] intervals: allow low-level interval code to return errors, Florian Westphal
  • [PATCH v2 nft 2/3] src: do not merge a set with a erroneous one, Florian Westphal
  • [PATCH v2 nft 3/3] evaluate: don't assert if set->data is NULL, Florian Westphal
    • Re: [PATCH v2 nft 3/3] evaluate: don't assert if set->data is NULL, Florian Westphal
• [PATCH nftables] doc: clarify reject is supported at prerouting stage, Quan Tian
  • Re: [PATCH nftables] doc: clarify reject is supported at prerouting stage, Pablo Neira Ayuso
• [PATCH nft] doc: incorrect datatype description for icmpv6_type and icmpvx_code, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: bail out if stateful expression provides no .clone, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: validate .maxattr at expression registration, Pablo Neira Ayuso
• [PATCH nft] tests: shell: extend coverage for netdevice removal, Pablo Neira Ayuso
• [PATCH bpf-next v3 0/3] Annotate kfuncs in .BTF_ids section, Daniel Xu
  • [PATCH bpf-next v3 3/3] bpf: treewide: Annotate BPF kfuncs in BTF, Daniel Xu
  • Re: [PATCH bpf-next v3 0/3] Annotate kfuncs in .BTF_ids section, Lorenz Bauer
    • Re: [PATCH bpf-next v3 0/3] Annotate kfuncs in .BTF_ids section, Daniel Xu
  • Re: [PATCH bpf-next v3 0/3] Annotate kfuncs in .BTF_ids section, Jiri Olsa
    • Re: [PATCH bpf-next v3 0/3] Annotate kfuncs in .BTF_ids section, Daniel Xu
      • Re: [PATCH bpf-next v3 0/3] Annotate kfuncs in .BTF_ids section, Jiri Olsa
        • Re: [PATCH bpf-next v3 0/3] Annotate kfuncs in .BTF_ids section, Daniel Xu
          • Re: [PATCH bpf-next v3 0/3] Annotate kfuncs in .BTF_ids section, Jiri Olsa
• [PATCH nft] tests: shell: prefer project nft to system-wide nft, Florian Westphal
• [PATCH bpf-next v2 0/3] Annotate kfuncs in .BTF_ids section, Daniel Xu
  • [PATCH bpf-next v2 3/3] bpf: treewide: Annotate BPF kfuncs in BTF, Daniel Xu
    • Re: [PATCH bpf-next v2 3/3] bpf: treewide: Annotate BPF kfuncs in BTF, Jiri Olsa
      • Re: [PATCH bpf-next v2 3/3] bpf: treewide: Annotate BPF kfuncs in BTF, Daniel Xu
        • Re: [PATCH bpf-next v2 3/3] bpf: treewide: Annotate BPF kfuncs in BTF, Jiri Olsa
  • Re: [PATCH bpf-next v2 0/3] Annotate kfuncs in .BTF_ids section, Jiri Olsa
• [PATCH nf-next] netfilter: nf_tables: pass flags to set backend selection routine, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: reject invalid set policy, Pablo Neira Ayuso
• [PATCH libnetfilter_queue] include: pktbuff.h needs stdbool.h, Duncan Roe
• [PATCH bpf-next 0/2] Annotate kfuncs in .BTF_ids section, Daniel Xu
  • [PATCH bpf-next 2/2] bpf: treewide: Annotate BPF kfuncs in BTF, Daniel Xu
    • Re: [PATCH bpf-next 2/2] bpf: treewide: Annotate BPF kfuncs in BTF, Jiri Olsa
      • Re: [PATCH bpf-next 2/2] bpf: treewide: Annotate BPF kfuncs in BTF, Daniel Xu
        • Re: [PATCH bpf-next 2/2] bpf: treewide: Annotate BPF kfuncs in BTF, Daniel Xu
• [syzbot] Monthly netfilter report (Jan 2024), syzbot
• [PATCH libnftnl] object: define nftnl_obj_unset(), Pablo Neira Ayuso
  • Re: [PATCH libnftnl] object: define nftnl_obj_unset(), Nicholas Vinson
    • Re: [PATCH libnftnl] object: define nftnl_obj_unset(), Pablo Neira Ayuso
      • Re: [PATCH libnftnl] object: define nftnl_obj_unset(), Nicholas Vinson
• [PATCH nf] netfilter: nft_immediate: drop chain reference counter on error, Pablo Neira Ayuso
• [RFC nf-next v5 0/2] netfilter: bpf: support prog update, D. Wythe
  • [RFC nf-next v5 1/2] netfilter: bpf: support prog update, D. Wythe
  • [RFC nf-next v5 2/2] selftests/bpf: Add netfilter link prog update test, D. Wythe
  • Re: [RFC nf-next v5 0/2] netfilter: bpf: support prog update, D. Wythe
  • Re: [RFC nf-next v5 0/2] netfilter: bpf: support prog update, Quentin Deslandes
    • Re: [RFC nf-next v5 0/2] netfilter: bpf: support prog update, Pablo Neira Ayuso
      • Re: [RFC nf-next v5 0/2] netfilter: bpf: support prog update, D. Wythe
    • Re: [RFC nf-next v5 0/2] netfilter: bpf: support prog update, D. Wythe
• Re: GUI Frontend for iptables and nftables Linux firewalls, Phil Sutter
  • Message not available
    • Re: GUI Frontend for iptables and nftables Linux firewalls, Josef Vybíhal
• [PATCH RFC libnetfilter_queue 0/1] libnfnetlink dependency elimination, Duncan Roe
  • [PATCH RFC libnetfilter_queue 1/1] utils/nfqnl_test runs without libnfnetlink, Duncan Roe
• feature request: list elements of table for scripting, Han Boetes
  • Re: feature request: list elements of table for scripting, Phil Sutter
    • Re: feature request: list elements of table for scripting, Han Boetes
      • Re: feature request: list elements of table for scripting, Phil Sutter
        • Re: feature request: list elements of table for scripting, Han Boetes
          • Re: feature request: list elements of table for scripting, Phil Sutter
• [RFC nf-next v4 0/2] netfilter: bpf: support prog update, D. Wythe
  • [RFC nf-next v4 1/2] netfilter: bpf: support prog update, D. Wythe
    • Re: [RFC nf-next v4 1/2] netfilter: bpf: support prog update, D. Wythe
  • [RFC nf-next v4 2/2] selftests/bpf: Add netfilter link prog update test, D. Wythe