Linux Netfilter / IP Tables Devel

• Date Index

• Re: [PATCH net-next 00/12] selftests: netfilter: move to lib.sh infra, (continued)
  • Re: [PATCH net-next 00/12] selftests: netfilter: move to lib.sh infra, Pablo Neira Ayuso
• [PATCH net-next] netfilter: nft_chain_filter: remove redundant code in nf_tables_netdev_event, Zhengchao Shao
• Incorrect dependency handling with delayed ipset destroy ipset 7.21, keltargw
  • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, Jozsef Kadlecsik
    • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, keltargw
      • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, Jozsef Kadlecsik
        • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, keltargw
          • Re: Incorrect dependency handling with delayed ipset destroy ipset 7.21, Jozsef Kadlecsik
• [nft PATCH] limit: Support arbitrary unit values, Phil Sutter
• [libnftnl PATCH] expr: limit: Prepare for odd time units, Phil Sutter
  • Re: [libnftnl PATCH] expr: limit: Prepare for odd time units, Phil Sutter
• [PATCH v3 0/4] sysctl: Remove sentinel elements from networking, Joel Granados via B4 Relay
  • [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Kuniyuki Iwashima
      • Re: [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Paolo Abeni
        • Re: [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
      • Re: [PATCH v3 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
  • [PATCH v3 2/4] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v3 3/4] appletalk: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v3 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • Re: [PATCH v3 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Kuniyuki Iwashima
• [nft PATCH v3] Add support for table's persist flag, Phil Sutter
  • Re: [nft PATCH v3] Add support for table's persist flag, Phil Sutter
• [PATCH net-next 00/15] selftests: move netfilter tests to net, Florian Westphal
  • [PATCH net-next 02/15] selftests: netfilter: bridge_brouter.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 01/15] selftests: netfilter: move to net subdir, Florian Westphal
  • [PATCH net-next 03/15] selftests: netfilter: br_netfilter.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 04/15] selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 05/15] selftests: netfilter: conntrack_tcp_unreplied.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 06/15] selftests: netfilter: conntrack_sctp_collision.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 07/15] selftests: netfilter: conntrack_vrf.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 08/15] selftests: netfilter: conntrack_ipip_mtu.sh" move to lib.sh infra, Florian Westphal
  • [PATCH net-next 09/15] selftests: netfilter: place checktool helper in lib.sh, Florian Westphal
  • [PATCH net-next 10/15] selftests: netfilter: ipvs.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 11/15] selftests: netfilter: nf_nat_edemux.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 12/15] selftests: netfilter: nft_conntrack_helper.sh: test to lib.sh infra, Florian Westphal
  • [PATCH net-next 13/15] selftests: netfilter: nft_fib.sh: move to lib.sh infra, Florian Westphal
  • [PATCH net-next 14/15] selftests: netfilter: nft_flowtable.sh: move test to lib.sh infra, Florian Westphal
  • [PATCH net-next 15/15] selftests: netfilter: nft_nat.sh: move to lib.sh infra, Florian Westphal
  • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Jakub Kicinski
    • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Florian Westphal
      • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Jakub Kicinski
        • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Florian Westphal
  • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, Jakub Kicinski
  • Re: [PATCH net-next 00/15] selftests: move netfilter tests to net, patchwork-bot+netdevbpf
• [PATCH nf,v2] netfilter: flowtable: incorrect pppoe tuple, Pablo Neira Ayuso
• [PATCH nf] netfilter: flowtable: incorrect pppoe tuple in reply direction, Pablo Neira Ayuso
• [PATCH nf,v3] netfilter: flowtable: validate pppoe header, Pablo Neira Ayuso
• [PATCH net-next v2 0/3] netlink: Add nftables spec w/ multi messages, Donald Hunter
  • [PATCH net-next v2 1/3] doc/netlink/specs: Add draft nftables spec, Donald Hunter
  • [PATCH net-next v2 2/3] netfilter: nfnetlink: Handle ACK flags for batch messages, Donald Hunter
    • Re: [PATCH net-next v2 2/3] netfilter: nfnetlink: Handle ACK flags for batch messages, Pablo Neira Ayuso
      • Re: [PATCH net-next v2 2/3] netfilter: nfnetlink: Handle ACK flags for batch messages, Donald Hunter
  • [PATCH net-next v2 3/3] tools/net/ynl: Add multi message support to ynl, Donald Hunter
    • Re: [PATCH net-next v2 3/3] tools/net/ynl: Add multi message support to ynl, Jakub Kicinski
      • Re: [PATCH net-next v2 3/3] tools/net/ynl: Add multi message support to ynl, Donald Hunter
• [PATCH v2 nf] netfilter: nft_set_pipapo: do not free live element, Florian Westphal
• [PATCH nf] netfilter: nft_set_pipapo: walk over current view on netlink dump, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_pipapo: do not free live element, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_set_pipapo: do not free live element, Stefano Brivio
• [PATCH nf,v2] netfilter: flowtable: validate PPPoe header, Pablo Neira Ayuso
• [iptables PATCH] libxtables: Attenuate effects of functions' internal static buffers, Phil Sutter
  • Re: [iptables PATCH] libxtables: Attenuate effects of functions' internal static buffers, Vitaly Chikunov
    • Re: [iptables PATCH] libxtables: Attenuate effects of functions' internal static buffers, Phil Sutter
• [PATCH net] netfilter: complete validation of user input, Eric Dumazet
  • Re: [PATCH net] netfilter: complete validation of user input, Pablo Neira Ayuso
  • Re: [PATCH net] netfilter: complete validation of user input, patchwork-bot+netdevbpf
• [PATCH nf] netfilter: flowtable: validate PPPoe header, Pablo Neira Ayuso
• [iptables PATCH] xshared: Fix parsing of empty string arg in '-c' option, Phil Sutter
  • Re: [iptables PATCH] xshared: Fix parsing of empty string arg in '-c' option, Phil Sutter
• [PATCH nf] netfilter: br_netfilter: skip conntrack input hook for promisc packets, Pablo Neira Ayuso
• [PATCH -stable,5.4.x 0/5] Netfilter fixes for -stable, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 1/5] netfilter: nf_tables: reject new basechain after table flag update, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 2/5] netfilter: nf_tables: flush pending destroy work before exit_net release, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 3/5] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 4/5] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH -stable,5.4.x 5/5] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
• [PATCH -stable,5.10.x 0/3] Netfilter fixes for -stable, Pablo Neira Ayuso
  • [PATCH 1/5] netfilter: nf_tables: reject new basechain after table flag update, Pablo Neira Ayuso
  • [PATCH 2/5] netfilter: nf_tables: flush pending destroy work before exit_net release, Pablo Neira Ayuso
  • [PATCH 3/5] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH 4/5] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH 5/5] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
  • Re: [PATCH -stable,5.10.x 0/3] Netfilter fixes for -stable, Pablo Neira Ayuso
• [PATCH -stable,5.15.x 0/3] Netfilter fixes for -stable, Pablo Neira Ayuso
  • [PATCH -stable,5.15.x 2/3] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH -stable,5.15.x 1/3] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH -stable,5.15.x 3/3] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
• [PATCH -stable 6.1.x 0/3] Netfilter fixes for -stable, Pablo Neira Ayuso
  • [PATCH -stable 6.1.x 1/3] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH -stable 6.1.x 2/3] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH -stable 6.1.x 3/3] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
  • Re: [PATCH -stable 6.1.x 0/3] Netfilter fixes for -stable, Sasha Levin
• [PATCH nft 0/4] add missing requirements in tests/shell, Pablo Neira Ayuso
  • [PATCH nft 3/4] tests: shell: maps/{vmap_unary,named_limits} require pipapo set backend, Pablo Neira Ayuso
  • [PATCH nft 1/4] tests: shell: payload matching requires egress support, Pablo Neira Ayuso
  • [PATCH nft 2/4] tests: shell: chains/{netdev_netns_gone,netdev_chain_dev_gone} require inet/ingress support, Pablo Neira Ayuso
  • [PATCH nft 4/4] tests: shell: check for reset tcp options support, Pablo Neira Ayuso
• [PATCH 0/2] Forbid illegitimate binding via listen(2), Ivanov Mikhail
  • [PATCH 2/2] selftests/landlock: Create 'listen_zero', 'deny_listen_zero' tests, Ivanov Mikhail
    • Re: [PATCH 2/2] selftests/landlock: Create 'listen_zero', 'deny_listen_zero' tests, Mickaël Salaün
      • Re: [PATCH 2/2] selftests/landlock: Create 'listen_zero', 'deny_listen_zero' tests, Ivanov Mikhail
  • [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
    • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Mickaël Salaün
      • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Mickaël Salaün
      • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
        • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Mickaël Salaün
        • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Günther Noack
          • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Mickaël Salaün
          • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
            • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Günther Noack
              • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
                • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Günther Noack
                  • Re: [PATCH 1/2] landlock: Add hook on socket_listen(), Ivanov Mikhail
  • Re: [PATCH 0/2] Forbid illegitimate binding via listen(2), Mickaël Salaün
• [RFC PATCH v1 00/10] Socket type control for Landlock, Ivanov Mikhail
  • [RFC PATCH v1 01/10] landlock: Support socket access-control, Ivanov Mikhail
    • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Günther Noack
      • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Ivanov Mikhail
        • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Günther Noack
        • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Mickaël Salaün
    • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Mickaël Salaün
      • Re: [RFC PATCH v1 01/10] landlock: Support socket access-control, Ivanov Mikhail
  • [RFC PATCH v1 02/10] landlock: Add hook on socket_create(), Ivanov Mikhail
  • [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Ivanov Mikhail
    • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Günther Noack
      • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Ivanov Mikhail
        • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Mickaël Salaün
          • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Ivanov Mikhail
            • Re: [RFC PATCH v1 03/10] selftests/landlock: Create 'create' test, Mickaël Salaün
  • [RFC PATCH v1 04/10] selftests/landlock: Create 'socket_access_rights' test, Ivanov Mikhail
  • [RFC PATCH v1 06/10] selftests/landlock: Create 'rule_with_unhandled_access' test, Ivanov Mikhail
  • [RFC PATCH v1 05/10] selftests/landlock: Create 'rule_with_unknown_access' test, Ivanov Mikhail
  • [RFC PATCH v1 08/10] selftests/landlock: Create 'ruleset_overlap' test, Ivanov Mikhail
  • [RFC PATCH v1 07/10] selftests/landlock: Create 'inval' test, Ivanov Mikhail
  • [RFC PATCH v1 10/10] samples/landlock: Support socket protocol restrictions, Ivanov Mikhail
  • [RFC PATCH v1 09/10] selftests/landlock: Create 'ruleset_with_unknown_access' test, Ivanov Mikhail
  • Re: [RFC PATCH v1 00/10] Socket type control for Landlock, Günther Noack
• [nft PATCH] dynset: avoid errouneous assert with ipv6 concat data, Son Dinh
  • Re: [nft PATCH] dynset: avoid errouneous assert with ipv6 concat data, Florian Westphal
    • Re: [nft PATCH] dynset: avoid errouneous assert with ipv6 concat data, Son Tra Dinh
      • [nft PATCH v2] dynset: avoid errouneous assert with ipv6 concat data, Son Dinh
      • [nft PATCH v3] dynset: avoid errouneous assert with ipv6 concat data, Son Dinh
• [PATCH nft 0/2] netfilter: nf_tables: Use rcu lock to enhance protection of the lists, Ziyang Xuan
  • [PATCH nft 1/2] netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get(), Ziyang Xuan
    • Re: [PATCH nft 1/2] netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get(), Pablo Neira Ayuso
  • [PATCH nft 2/2] netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get(), Ziyang Xuan
    • Re: [PATCH nft 2/2] netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get(), Pablo Neira Ayuso
• [nft PATCH] expr: make map lookup expression as an argument in vmap statement, Son Dinh
  • Re: [nft PATCH] expr: make map lookup expression as an argument in vmap statement, Florian Westphal
    • Re: [nft PATCH] expr: make map lookup expression as an argument in vmap statement, Son Tra Dinh
      • [nft PATCH v2] expr: make map lookup expression as an argument in vmap statement, Son Dinh
• [syzbot] [netfilter?] KMSAN: uninit-value in nf_flow_offload_ip_hook, syzbot
  • Re: [syzbot] [netfilter?] KMSAN: uninit-value in nf_flow_offload_ip_hook, syzbot
• [PATCH net] netfilter: validate user input for expected length, Eric Dumazet
  • Re: [PATCH net] netfilter: validate user input for expected length, Pablo Neira Ayuso
  • Re: [PATCH net] netfilter: validate user input for expected length, patchwork-bot+netdevbpf
• [PATCH] conntrackd: Fix signal handler race-condition, bre Breitenberger Markus
  • Re: [PATCH] conntrackd: Fix signal handler race-condition, Pablo Neira Ayuso
• static analysis results, Ivan Stepchenko
• [PATCH nf,v2] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: discard table flag update with pending basechain deletion, Pablo Neira Ayuso
• [PATCH nft v2 0/2] Support for variables in map expressions, Jeremy Sowden
  • [PATCH nft v2 2/2] evaluate: add support for variables in map expressions, Jeremy Sowden
  • [PATCH nft v2 1/2] evaluate: handle invalid mapping expressions in stateful object statements gracefully., Jeremy Sowden
  • Re: [PATCH nft v2 0/2] Support for variables in map expressions, Pablo Neira Ayuso
    • Re: [PATCH nft v2 0/2] Support for variables in map expressions, Jeremy Sowden
• [PATCH nf,v2 1/4] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH nf,v2 2/4] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH nf,v2 4/4] netfilter: nf_tables: reject new basechain after table flag update, Pablo Neira Ayuso
  • [PATCH nf,v2 3/4] netfilter: nf_tables: flush pending destroy work before exit_net release, Pablo Neira Ayuso
• [PATCH nft] tests: packetpath: add check for drop policy, Florian Westphal
• [PATCH nf-next 0/9] nft_set_pipapo: remove cannot-fail allocations on commit and abort, Florian Westphal
  • [PATCH nf-next 2/9] netfilter: nft_set_pipapo: make pipapo_clone helper return NULL, Florian Westphal
  • [PATCH nf-next 5/9] netfilter: nf_tables: pass new nft_iter_type hint to walker, Florian Westphal
  • [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Florian Westphal
    • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Stefano Brivio
      • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Florian Westphal
        • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Stefano Brivio
          • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Florian Westphal
            • Re: [PATCH nf-next 3/9] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone, Stefano Brivio
  • [PATCH nf-next 4/9] netfilter: nft_set_pipapo: prepare walk function for on-demand clone, Florian Westphal
  • [PATCH nf-next 7/9] netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone, Florian Westphal
  • [PATCH nf-next 8/9] netfilter: nft_set_pipapo: move cloning of match info to insert/removal path, Florian Westphal
    • Re: [PATCH nf-next 8/9] netfilter: nft_set_pipapo: move cloning of match info to insert/removal path, Stefano Brivio
  • [PATCH nf-next 9/9] netfilter: nft_set_pipapo: remove dirty flag, Florian Westphal
  • [PATCH nf-next 6/9] netfilter: nft_set_pipapo: merge deactivate helper into caller, Florian Westphal
  • [PATCH nf-next 1/9] netfilter: nft_set_pipapo: move prove_locking helper around, Florian Westphal
• [PATCH nft v2] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan
  • Re: [PATCH nft v2] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Florian Westphal
    • Re: [PATCH nft v2] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan (William)
• [PATCH nft] src: disentangle ICMP code types, Pablo Neira Ayuso
• [PATCH nf 1/3] netfilter: nf_tables: release batch on table validation from abort path, Pablo Neira Ayuso
  • [PATCH nf 2/3] netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path, Pablo Neira Ayuso
  • [PATCH nf 3/3] netfilter: nf_tables: flush pending destroy work before exit_net release, Pablo Neira Ayuso
• [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan
  • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Florian Westphal
    • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Pablo Neira Ayuso
      • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan (William)
    • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan (William)
      • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Florian Westphal
        • Re: [PATCH nft] netfilter: nf_tables: Fix pertential data-race in __nft_flowtable_type_get(), Ziyang Xuan (William)
• [PATCH nft] netlink_delinearize: unused code in reverse cross-day meta hour range, Pablo Neira Ayuso
• [PATCHv3 net-next 00/14] ipvs: per-net tables and optimizations, Julian Anastasov
  • [PATCHv3 net-next 08/14] ipvs: use resizable hash table for services, Julian Anastasov
  • [PATCHv3 net-next 10/14] ipvs: show the current conn_tab size to users, Julian Anastasov
  • [PATCHv3 net-next 12/14] ipvs: use more keys for connection hashing, Julian Anastasov
  • [PATCHv3 net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Julian Anastasov
  • [PATCHv3 net-next 14/14] ipvs: add conn_lfactor and svc_lfactor sysctl vars, Julian Anastasov
  • [PATCHv3 net-next 05/14] ipvs: do not keep dest_dst after dest is removed, Julian Anastasov
  • [PATCHv3 net-next 13/14] ipvs: add ip_vs_status info, Julian Anastasov
  • [PATCHv3 net-next 11/14] ipvs: no_cport and dropentry counters can be per-net, Julian Anastasov
  • [PATCHv3 net-next 03/14] ipvs: some service readers can use RCU, Julian Anastasov
  • [PATCHv3 net-next 04/14] ipvs: use single svc table, Julian Anastasov
  • [PATCHv3 net-next 07/14] ipvs: add resizable hash tables, Julian Anastasov
  • [PATCHv3 net-next 02/14] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Julian Anastasov
  • [PATCHv3 net-next 09/14] ipvs: switch to per-net connection table, Julian Anastasov
  • [PATCHv3 net-next 06/14] ipvs: use more counters to avoid service lookups, Julian Anastasov
• Re: [PATCH net-next v1 2/2] tools/net/ynl: Add multi message support to ynl, Pablo Neira Ayuso
• [PATCH bpf-next] net: netfilter: Make ct zone id configurable for bpf ct helper functions, Brad Cowie
  • Re: [PATCH bpf-next] net: netfilter: Make ct zone id configurable for bpf ct helper functions, Martin KaFai Lau
    • Re: [PATCH bpf-next] net: netfilter: Make ct zone id configurable for bpf ct helper functions, Brad Cowie
      • Re: [PATCH bpf-next] net: netfilter: Make ct zone id configurable for bpf ct helper functions, Martin KaFai Lau
• (re-send): Convert libnetfilter_queue to not need libnfnetlink], Duncan Roe
  • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink], Pablo Neira Ayuso
    • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink], Duncan Roe
    • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink, Duncan Roe
    • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink], Duncan Roe
    • Re: (re-send): Convert libnetfilter_queue to not need libnfnetlink], Duncan Roe
• [PATCH v2 0/4] sysctl: Remove sentinel elements from networking, Joel Granados via B4 Relay
  • [PATCH v2 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v2 2/4] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v2 3/4] appletalk: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH v2 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
    • [PATCH v2 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Kuniyuki Iwashima
      • Re: [PATCH v2 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
        • Re: [PATCH v2 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
      • Re: [PATCH v2 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
        • Re: [PATCH v2 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Kuniyuki Iwashima
          • Re: [PATCH v2 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
          • Re: [PATCH v2 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados
• Convert libnetfilter_queue to not need libnfnetlink, Duncan Roe
• [nft PATCH v2 0/2] Add support for table's persist flag, Phil Sutter
  • [nft PATCH v2 1/2] doc: nft.8: Two minor synopsis fixups, Phil Sutter
    • Re: [nft PATCH v2 1/2] doc: nft.8: Two minor synopsis fixups, Phil Sutter
  • [nft PATCH v2 2/2] Add support for table's persist flag, Phil Sutter
• [PATCH v2 net] inet: inet_defrag: prevent sk release while still in use, Florian Westphal
  • Re: [PATCH v2 net] inet: inet_defrag: prevent sk release while still in use, Eric Dumazet
  • Re: [PATCH v2 net] inet: inet_defrag: prevent sk release while still in use, patchwork-bot+netdevbpf
• [PATCH] samples/landlock: Fix incorrect free in populate_ruleset_net, Ivanov Mikhail
  • Re: [PATCH] samples/landlock: Fix incorrect free in populate_ruleset_net, Mickaël Salaün
• [PATCH v1 nf] netfilter: arptables: Select NETFILTER_FAMILY_ARP when building arp_tables.c, Kuniyuki Iwashima
  • Re: [PATCH v1 nf] netfilter: arptables: Select NETFILTER_FAMILY_ARP when building arp_tables.c, Simon Horman
• [PATCH net-next v2] netfilter: use NF_DROP instead of -NF_DROP, Jason Xing
  • Re: [PATCH net-next v2] netfilter: use NF_DROP instead of -NF_DROP, Jason Xing
    • Re: [PATCH net-next v2] netfilter: use NF_DROP instead of -NF_DROP, Pablo Neira Ayuso
• [PATCH net-next 0/3] netfilter: use NF_DROP instead of -NF_DROP, Jason Xing
  • [PATCH net-next 1/3] netfilter: using NF_DROP in test statement in nf_conntrack_in(), Jason Xing
  • [PATCH net-next 3/3] netfilter: use NF_DROP in ip6table_filter_table_init(), Jason Xing
  • [PATCH net-next 2/3] netfilter: use NF_DROP in iptable_filter_table_init(), Jason Xing
  • Re: [PATCH net-next 0/3] netfilter: use NF_DROP instead of -NF_DROP, Pablo Neira Ayuso
    • Re: [PATCH net-next 0/3] netfilter: use NF_DROP instead of -NF_DROP, Jason Xing
      • Re: [PATCH net-next 0/3] netfilter: use NF_DROP instead of -NF_DROP, Pablo Neira Ayuso
• [PATCH RESEND net-next] netfilter: conntrack: dccp: try not to drop skb in conntrack, Jason Xing
• [PATCH nftables] evaluate: add support for variables in map expressions, Jeremy Sowden
  • [PATCH nftables] tests: shell: packetpath/flowtables: open all temporary files in /tmp, Jeremy Sowden
    • Re: [PATCH nftables] tests: shell: packetpath/flowtables: open all temporary files in /tmp, Pablo Neira Ayuso
  • Re: [PATCH nftables] evaluate: add support for variables in map expressions, Pablo Neira Ayuso
    • Re: [PATCH nftables] evaluate: add support for variables in map expressions, Jeremy Sowden
• Re: [PATCH 1/3] leds: trigger: legtrig-bpf: Add ledtrig-bpf module, Alexei Starovoitov
  • Re: [PATCH 1/3] leds: trigger: legtrig-bpf: Add ledtrig-bpf module, Andrew Lunn
• nftables documentation improvement?, Harald Welte
  • Re: nftables documentation improvement?, Pablo Neira Ayuso
    • Re: nftables documentation improvement?, Harald Welte
• [PATCH iptables] libxtables: Fix xtables_ipaddr_to_numeric calls with xtables_ipmask_to_numeric, Vitaly Chikunov
  • Re: [PATCH iptables] libxtables: Fix xtables_ipaddr_to_numeric calls with xtables_ipmask_to_numeric, Vitaly Chikunov
  • Re: [PATCH iptables] libxtables: Fix xtables_ipaddr_to_numeric calls with xtables_ipmask_to_numeric, Phil Sutter
    • Re: [PATCH iptables] libxtables: Fix xtables_ipaddr_to_numeric calls with xtables_ipmask_to_numeric, Vitaly Chikunov
      • Re: [PATCH iptables] libxtables: Fix xtables_ipaddr_to_numeric calls with xtables_ipmask_to_numeric, Phil Sutter
• [nft PATCH] tests: shell: Avoid escape chars when printing to non-terminals, Phil Sutter
  • Re: [nft PATCH] tests: shell: Avoid escape chars when printing to non-terminals, Phil Sutter
• [nft PATCH v2 0/5] json: Accept more than two operands in binary expressions, Phil Sutter
  • [nft PATCH v2 4/5] tests: py: Warn if recorded JSON output matches the input, Phil Sutter
  • [nft PATCH v2 5/5] tests: py: Drop needless recorded JSON outputs, Phil Sutter
  • [nft PATCH v2 2/5] mergesort: Avoid accidental set element reordering, Phil Sutter
  • [nft PATCH v2 3/5] tests: py: Fix some JSON equivalents, Phil Sutter
  • [nft PATCH v2 1/5] json: Accept more than two operands in binary expressions, Phil Sutter
  • Re: [nft PATCH v2 0/5] json: Accept more than two operands in binary expressions, Phil Sutter
• [nft PATCH 0/2] Add support for table's persist flag, Phil Sutter
  • [nft PATCH 1/2] doc: nft.8: Two minor synopsis fixups, Phil Sutter
  • [nft PATCH 2/2] Add support for table's persist flag, Phil Sutter
    • Re: [nft PATCH 2/2] Add support for table's persist flag, Quentin Deslandes
      • Re: [nft PATCH 2/2] Add support for table's persist flag, Phil Sutter
• [PATCH nft] datatype: leave DTYPE_F_PREFIX only for IP address datatype, Pablo Neira Ayuso
• [PATCH net 0/3,v2] Netfilter fixes for net, Pablo Neira Ayuso
  • [PATCH net 3/3] netfilter: nf_tables: Fix a memory leak in nf_tables_updchain, Pablo Neira Ayuso
  • [PATCH net 1/3] netfilter: nft_set_pipapo: release elements in clone only from destroy path, Pablo Neira Ayuso
    • Re: [PATCH net 1/3] netfilter: nft_set_pipapo: release elements in clone only from destroy path, patchwork-bot+netdevbpf
  • [PATCH net 2/3] netfilter: nf_tables: do not compare internal table flags on updates, Pablo Neira Ayuso
• [PATCH nf 1/3] netfilter: nf_tables: reject destroy command to remove basechain hooks, Pablo Neira Ayuso
  • [PATCH nf 2/3] netfilter: nf_tables: reject table flag and netdev basechain updates, Pablo Neira Ayuso
  • [PATCH nf 3/3] netfilter: nf_tables: skip netdev hook unregistration if table is dormant, Pablo Neira Ayuso
• [nft PATCH] doc: libnftables-json: Drop invalid ops from match expression, Phil Sutter
  • Re: [nft PATCH] doc: libnftables-json: Drop invalid ops from match expression, Phil Sutter
• [nft PATCH] json: Accept more than two operands in binary expressions, Phil Sutter
  • Re: [nft PATCH] json: Accept more than two operands in binary expressions, Pablo Neira Ayuso
    • Re: [nft PATCH] json: Accept more than two operands in binary expressions, Phil Sutter
• [nft PATCH] tests: shell: Fix one json-nft dump for reordered output, Phil Sutter
  • Re: [nft PATCH] tests: shell: Fix one json-nft dump for reordered output, Phil Sutter
• xtables-addons RAWDNAT bug, Sagatov, Evgeniy
  • Re: xtables-addons RAWDNAT bug, Jan Engelhardt
• [PATCH nf 1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: flowtable: use UDP timeout after flow teardown, Pablo Neira Ayuso
• [PATCH nf] netfilter: nft_set_pipapo: release elements in clone only from destroy path, Pablo Neira Ayuso
• [PATCH nft] tests: shell: update packetpath/flowtables after flow teardown changes, Pablo Neira Ayuso
• [PATCH nft] netlink_delinearize: reverse cross-day meta hour range, Pablo Neira Ayuso
  • Re: [PATCH nft] netlink_delinearize: reverse cross-day meta hour range, Pablo Neira Ayuso
• [PATCH nft] evaluate: display "Range negative size" error, Pablo Neira Ayuso
  • Re: [PATCH nft] evaluate: display "Range negative size" error, Pablo Neira Ayuso
• [libnftnl PATCH 00/17] obj: Introduce attribute policies, Phil Sutter
  • [libnftnl PATCH 06/17] table: Validate NFTNL_TABLE_OWNER, too, Phil Sutter
  • [libnftnl PATCH 05/17] set: Validate NFTNL_SET_ID, too, Phil Sutter
  • [libnftnl PATCH 07/17] obj: Do not call nftnl_obj_set_data() with zero data_len, Phil Sutter
  • [libnftnl PATCH 11/17] obj: Repurpose struct obj_ops::max_attr field, Phil Sutter
  • [libnftnl PATCH 15/17] utils: Introduce and use nftnl_set_str_attr(), Phil Sutter
  • [libnftnl PATCH 13/17] obj: Introduce struct obj_ops::attr_policy, Phil Sutter
  • [libnftnl PATCH 02/17] table: Validate NFTNL_TABLE_USE, too, Phil Sutter
  • [libnftnl PATCH 17/17] expr: Respect data_len when setting attributes, Phil Sutter
  • [libnftnl PATCH 10/17] obj: Return value on setters, Phil Sutter
  • [libnftnl PATCH 08/17] obj: synproxy: Use memcpy() to handle potentially unaligned data, Phil Sutter
  • [libnftnl PATCH 16/17] obj: Respect data_len when setting attributes, Phil Sutter
  • [libnftnl PATCH 01/17] chain: Validate NFTNL_CHAIN_USE, too, Phil Sutter
  • [libnftnl PATCH 09/17] utils: Fix for wrong variable use in nftnl_assert_validate(), Phil Sutter
  • [libnftnl PATCH 14/17] obj: Enforce attr_policy compliance in nftnl_obj_set_data(), Phil Sutter
  • [libnftnl PATCH 04/17] obj: Validate NFTNL_OBJ_TYPE, too, Phil Sutter
  • [libnftnl PATCH 12/17] obj: Call obj_ops::set with legal attributes only, Phil Sutter
  • [libnftnl PATCH 03/17] flowtable: Validate NFTNL_FLOWTABLE_SIZE, too, Phil Sutter
  • Re: [libnftnl PATCH 00/17] obj: Introduce attribute policies, Phil Sutter
• [PATCH net] inet: inet_defrag: prevent sk release while still in use, Florian Westphal
  • Re: [PATCH net] inet: inet_defrag: prevent sk release while still in use, Eric Dumazet
    • Re: [PATCH net] inet: inet_defrag: prevent sk release while still in use, Paolo Abeni
• [PATCH net] MAINTAINERS: step down as netfilter maintainer, Florian Westphal
  • Re: [PATCH net] MAINTAINERS: step down as netfilter maintainer, Paolo Abeni
  • Re: [PATCH net] MAINTAINERS: step down as netfilter maintainer, patchwork-bot+netdevbpf
• [PATCH nft] netlink_delinearize: restore binop syntax when listing ruleset for flags, Pablo Neira Ayuso
  • Re: [PATCH nft] netlink_delinearize: restore binop syntax when listing ruleset for flags, Pablo Neira Ayuso
    • Re: [PATCH nft] netlink_delinearize: restore binop syntax when listing ruleset for flags, Phil Sutter
• [PATCH nf 2/2] netfilter: flowtable: use UDP timeout after flow teardown, Pablo Neira Ayuso
• [BUG] kernel warning from br_nf_local_in+0x157/0x180, Jianbo Liu
  • Re: [BUG] kernel warning from br_nf_local_in+0x157/0x180, Florian Westphal
  • Re: [BUG] kernel warning from br_nf_local_in+0x157/0x180, Pablo Neira Ayuso
    • Re: [BUG] kernel warning from br_nf_local_in+0x157/0x180, Jianbo Liu
      • Re: [BUG] kernel warning from br_nf_local_in+0x157/0x180, Pablo Neira Ayuso
        • Re: [BUG] kernel warning from br_nf_local_in+0x157/0x180, Jianbo Liu
• [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
  • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
    • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
        • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
          • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
            • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
              • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
                • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
                  • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
                    • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
                      • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
                  • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
                    • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
                      • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
                        • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
                          • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
                          • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
                            • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
                              • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
                                • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
                                  • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Florian Westphal
                                    • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
                                      • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Florian Westphal
                                        • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Pablo Neira Ayuso
                                          • Re: [PATCH nf] netfilter: flowtable: infer TCP state and timeout before flow teardown, Sven Auhagen
• [PATCH 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers, Thomas Weißschuh
  • [PATCH 01/11] stackleak: don't modify ctl_table argument, Thomas Weißschuh
  • [PATCH 02/11] cgroup: bpf: constify ctl_table arguments and fields, Thomas Weißschuh
  • [PATCH 03/11] hugetlb: constify ctl_table arguments of utility functions, Thomas Weißschuh
  • [PATCH 04/11] utsname: constify ctl_table arguments of utility function, Thomas Weißschuh
  • [PATCH 05/11] neighbour: constify ctl_table arguments of utility function, Thomas Weißschuh
  • [PATCH 06/11] ipv4/sysctl: constify ctl_table arguments of utility functions, Thomas Weißschuh
  • [PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers, Thomas Weißschuh
    • Re: [PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers, Dave Chinner
  • [PATCH 07/11] ipv6/addrconf: constify ctl_table arguments of utility functions, Thomas Weißschuh
  • [PATCH 10/11] sysctl: constify ctl_table arguments of utility function, Thomas Weißschuh
  • [PATCH 09/11] ipvs: constify ctl_table arguments of utility functions, Thomas Weißschuh
  • [PATCH 08/11] ipv6/ndisc: constify ctl_table arguments of utility function, Thomas Weißschuh
• [PATCH nf] netfilter: nf_tables: do not reject dormant flag update for table with owner, Quan Tian
  • Re: [PATCH nf] netfilter: nf_tables: do not reject dormant flag update for table with owner, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: do not compare internal table flags on updates, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: do not compare internal table flags on updates, Quan Tian
    • Re: [PATCH nf] netfilter: nf_tables: do not compare internal table flags on updates, Pablo Neira Ayuso
• [PATCH 0/4] sysctl: Remove sentinel elements from networking, Joel Granados via B4 Relay
  • [PATCH 1/4] networking: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH 2/4] netfilter: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH 3/4] appletalk: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • [PATCH 4/4] ax.25: Remove the now superfluous sentinel elements from ctl_table array, Joel Granados via B4 Relay
  • Re: [PATCH 0/4] sysctl: Remove sentinel elements from networking, Jakub Kicinski
    • Re: [PATCH 0/4] sysctl: Remove sentinel elements from networking, Joel Granados
• [PATCH nft] tests: py: remove meter tests, Pablo Neira Ayuso
  • Re: [PATCH nft] tests: py: remove meter tests, Florian Westphal
• [PATCH nf] netfilter: nf_tables: fix consistent table updates being rejected, Quan Tian
• [PATCH nft] tests/py: remove flow table json test cases, Florian Westphal
  • Re: [PATCH nft] tests/py: remove flow table json test cases, Pablo Neira Ayuso
• [PATCH] iptables: Fixed the issue with combining the payload in case of invert filter for tcp src and dst ports, Sriram Rajagopalan
  • Re: [PATCH] iptables: Fixed the issue with combining the payload in case of invert filter for tcp src and dst ports, Sriram Rajagopalan
  • Re: [PATCH] iptables: Fixed the issue with combining the payload in case of invert filter for tcp src and dst ports, Phil Sutter
    • Re: [PATCH] iptables: Fixed the issue with combining the payload in case of invert filter for tcp src and dst ports, Sriram Rajagopalan
      • Re: [PATCH] iptables: Fixed the issue with combining the payload in case of invert filter for tcp src and dst ports, Phil Sutter
• [PATCH] nftables: Fixed the issue with merging the payload in case of invert filter for tcp src and dst ports, Sriram Rajagopalan
  • Re: [PATCH] nftables: Fixed the issue with merging the payload in case of invert filter for tcp src and dst ports, Florian Westphal
• Flowtable race condition error, Sven Auhagen
  • Re: Flowtable race condition error, Florian Westphal
    • Re: Flowtable race condition error, Florian Westphal
      • Re: Flowtable race condition error, Sven Auhagen
        • Re: Flowtable race condition error, Florian Westphal
          • Re: Flowtable race condition error, Sven Auhagen
          • Re: Flowtable race condition error, Sven Auhagen
            • Re: Flowtable race condition error, Florian Westphal
              • Re: Flowtable race condition error, Sven Auhagen
                • Re: Flowtable race condition error, Florian Westphal
  • Re: Flowtable race condition error, Pablo Neira Ayuso
    • Re: Flowtable race condition error, Sven Auhagen
      • Re: Flowtable race condition error, Pablo Neira Ayuso
        • Re: Flowtable race condition error, Sven Auhagen
          • Re: Flowtable race condition error, Pablo Neira Ayuso
            • Re: Flowtable race condition error, Sven Auhagen
            • Re: Flowtable race condition error, Sven Auhagen
• [PATCH v3 nf-next 1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table, Quan Tian
  • [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Quan Tian
    • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Florian Westphal
      • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Pablo Neira Ayuso
        • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Florian Westphal
          • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Quan Tian
            • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Florian Westphal
              • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Pablo Neira Ayuso
                • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Quan Tian
                  • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Pablo Neira Ayuso
                    • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Quan Tian
            • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Pablo Neira Ayuso
    • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Pablo Neira Ayuso
      • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Florian Westphal
    • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Florian Westphal
      • Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Quan Tian
  • Re: [PATCH v3 nf-next 1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table, Florian Westphal
    • Re: [PATCH v3 nf-next 1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table, Pablo Neira Ayuso
      • Re: [PATCH v3 nf-next 1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table, Florian Westphal
        • Re: [PATCH v3 nf-next 1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table, Quan Tian
• [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
  • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Florian Westphal
    • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
  • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Simon Horman
    • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
      • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Simon Horman
  • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
      • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Pablo Neira Ayuso
    • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jozsef Kadlecsik
      • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
        • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jozsef Kadlecsik
          • Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
• [PATCH nf] netfilter: nf_tables: fix updating/deleting devices in an existing netdev chain, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: fix updating/deleting devices in an existing netdev chain, Florian Westphal
    • Re: [PATCH nf] netfilter: nf_tables: fix updating/deleting devices in an existing netdev chain, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nf_tables: fix updating/deleting devices in an existing netdev chain, Pablo Neira Ayuso
• [PATCH v2 nf-next 1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table, Quan Tian
  • [PATCH v2 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Quan Tian
    • Re: [PATCH v2 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Florian Westphal
      • Re: [PATCH v2 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table, Quan Tian
  • Re: [PATCH v2 nf-next 1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table, Florian Westphal
    • Re: [PATCH v2 nf-next 1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table, Quan Tian
• [PATCH nf-next] netfilter: nf_tables: support updating userdata for nft_table, Quan Tian
  • Re: [PATCH nf-next] netfilter: nf_tables: support updating userdata for nft_table, Florian Westphal
• [nft PATCH 0/7] A bunch of JSON printer/parser fixes, Phil Sutter
  • [nft PATCH 3/7] json: Order output like nft_cmd_expand(), Phil Sutter
  • [nft PATCH 5/7] json: Support maps with concatenated data, Phil Sutter
  • [nft PATCH 1/7] tests: shell: maps/named_ct_objects: Fix for recent kernel, Phil Sutter
    • Re: [nft PATCH 1/7] tests: shell: maps/named_ct_objects: Fix for recent kernel, Florian Westphal
      • Re: [nft PATCH 1/7] tests: shell: maps/named_ct_objects: Fix for recent kernel, Phil Sutter
  • [nft PATCH 7/7] tests: shell: Add missing json-nft dumps, Phil Sutter
  • [nft PATCH 2/7] tests: shell: packetpath/flowtables: Avoid spurious EPERM, Phil Sutter
  • [nft PATCH 6/7] parser: json: Support for synproxy objects, Phil Sutter
  • [nft PATCH 4/7] tests: shell: Regenerate all json-nft dumps, Phil Sutter
  • Re: [nft PATCH 0/7] A bunch of JSON printer/parser fixes, Phil Sutter
  • Re: [nft PATCH 0/7] A bunch of JSON printer/parser fixes, Pablo Neira Ayuso
    • Re: [nft PATCH 0/7] A bunch of JSON printer/parser fixes, Pablo Neira Ayuso
      • Re: [nft PATCH 0/7] A bunch of JSON printer/parser fixes, Phil Sutter
• [PATCH arptables] Fix a couple of spelling errors, Jeremy Sowden
  • Re: [PATCH arptables] Fix a couple of spelling errors, Phil Sutter
    • Re: [PATCH arptables] Fix a couple of spelling errors, Jeremy Sowden
• [PATCH v2 xtables] extensions: xt_TPROXY: add txlate support, Florian Westphal
  • Re: [PATCH v2 xtables] extensions: xt_TPROXY: add txlate support, Phil Sutter
• [PATCH net-next] netfilter: conntrack: dccp: try not to drop skb in conntrack, Jason Xing
  • [PATCH net-next] netfilter: conntrack: using NF_DROP in test statement in nf_conntrack_in(), Jason Xing
  • Re: [PATCH net-next] netfilter: conntrack: dccp: try not to drop skb in conntrack, Jason Xing
    • Re: [PATCH net-next] netfilter: conntrack: dccp: try not to drop skb in conntrack, Jakub Kicinski
      • Re: [PATCH net-next] netfilter: conntrack: dccp: try not to drop skb in conntrack, Jason Xing
• iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Sriram Rajagopalan
  • Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Phil Sutter
    • Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Sriram Rajagopalan
  • Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Florian Westphal
    • Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Sriram Rajagopalan
      • Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Florian Westphal
        • Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx", Sriram Rajagopalan
• [RFC nftables PATCH]: fix a2x: ERROR: missing --destination-dir: ./doc, Neels Hofmeyr
  • Re: [RFC nftables PATCH]: fix a2x: ERROR: missing --destination-dir: ./doc, Phil Sutter
• [PATCH] ipvs: allow netlink configuration from non-initial user namespace, Michael Weiß
  • Re: [PATCH] ipvs: allow netlink configuration from non-initial user namespace, Julian Anastasov
    • Re: [PATCH] ipvs: allow netlink configuration from non-initial user namespace, Michael Weiß
• [PATCH xtables] extensions: xt_TPROXY: add txlate support, Florian Westphal
  • Re: [PATCH xtables] extensions: xt_TPROXY: add txlate support, Phil Sutter
    • Re: [PATCH xtables] extensions: xt_TPROXY: add txlate support, Florian Westphal
• [PATCH nft 0/5] parser_json: fix up transaction ordering, Florian Westphal
  • [PATCH nft 1/5] parser_json: move some code around, Florian Westphal
  • [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Florian Westphal
    • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Phil Sutter
      • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Florian Westphal
        • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Phil Sutter
          • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Florian Westphal
            • Re: [PATCH nft 2/5] parser_json: move list_add into json_parse_cmd, Phil Sutter
  • [PATCH nft 3/5] parser_json: add and use CMD_ERR helpers, Florian Westphal
  • [PATCH nft 4/5] parser_json: defer command allocation to nft_cmd_expand, Florian Westphal
  • [PATCH nft 5/5] tests: shell: add more json-nft dumps, Florian Westphal
• [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
  • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Florian Westphal
    • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
      • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Florian Westphal
        • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
          • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Florian Westphal
            • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
              • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jozsef Kadlecsik
                • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
                  • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jozsef Kadlecsik
                    • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
              • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
              • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Florian Westphal
                • Re: [PATCH net-next] netfilter: conntrack: avoid sending RST to reply out-of-window skb, Jason Xing
• [PATCH nf-next 0/9] netfilter: nf_tables: rewrite gc again, Florian Westphal
  • [PATCH nf-next 1/9] netfilter: nf_tables: warn if set being destroyed is still active, Florian Westphal
  • [PATCH nf-next 2/9] netfilter: nf_tables: decrement element counters on set removal/flush, Florian Westphal
  • [PATCH nf-next 3/9] netfilter: nf_tables: add lockdep assertion for chain use counter, Florian Westphal
  • [PATCH nf-next 4/9] netfilter: remove nft_trans_gc_catchall_async handling, Florian Westphal
  • [PATCH nf-next 6/9] netfilter: nf_tables: add in-kernel only query that will return expired/dead elements, Florian Westphal
  • [PATCH nf-next 5/9] netfilter: nf_tables: condense catchall gc, Florian Westphal
  • [PATCH nf-next 7/9] netfilter: nf_tables: prepare for key-based deletion from workqueue, Florian Westphal
  • [PATCH nf-next 8/9] netfilter: nf_tables: remove expired elements based on key lookup only, Florian Westphal
  • [PATCH nf-next 9/9] netfilter: nf_tables: remove gc sequence counter, Florian Westphal
• [PATCH nf] netfilter: nf_tables: skip netdev hook unregistration if table is dormant, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: skip netdev hook unregistration if table is dormant, Pablo Neira Ayuso
• [PATCH nft,v2] evaluate: translate meter into dynamic set, Pablo Neira Ayuso
• [PATCH nft] evaluate: translate meter into dynamic set, Pablo Neira Ayuso
• [PATCH net] netfilter: nf_tables: Fix a memory leak in nf_tables_updchain, Quan Tian
• Issues with netdev egress hooks, Daniel Mack
  • Re: Issues with netdev egress hooks, Pablo Neira Ayuso
    • Re: Issues with netdev egress hooks, Daniel Mack
      • Re: Issues with netdev egress hooks, Pablo Neira Ayuso
• [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Linus Lüssing
  • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Simon Horman
    • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Linus Lüssing
      • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Florian Westphal
  • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Pablo Neira Ayuso
    • Re: [PATCH net] netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery, Linus Lüssing
• [syzbot] [netfilter?] KASAN: slab-use-after-free Read in ip_skb_dst_mtu, syzbot
• [PATCH xtables-nft v2] extensions: xt_socket: add txlate support for socket match, Florian Westphal
  • Re: [PATCH xtables-nft v2] extensions: xt_socket: add txlate support for socket match, Phil Sutter
    • Re: [PATCH xtables-nft v2] extensions: xt_socket: add txlate support for socket match, Florian Westphal
      • Re: [PATCH xtables-nft v2] extensions: xt_socket: add txlate support for socket match, Phil Sutter
• [PATCH xtables-nft] extensions: xt_socket: add txlate support for sk match v3, Florian Westphal
• [iptables PATCH 1/2] xlate: Improve redundant l4proto match avoidance, Phil Sutter
  • [iptables PATCH 2/2] xlate: libip6t_mh: Fix and simplify plain '-m mh' match, Phil Sutter
  • Re: [iptables PATCH 1/2] xlate: Improve redundant l4proto match avoidance, Phil Sutter
• [PATCH net v3] netfilter: Add protection for bmp length out of range, Lena Wang (王娜)
  • Re: [PATCH net v3] netfilter: Add protection for bmp length out of range, Lena Wang (王娜)
    • Re: [PATCH net v3] netfilter: Add protection for bmp length out of range, Florian Westphal
• [PATCH nf-next] netfilter: nf_tables: remove NETDEV_CHANGENAME from netdev chain event handler, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_tables: skip transaction if update object is not implemented, Pablo Neira Ayuso
• [PATCH nf,v2] netfilter: nf_tables: mark set as dead when deactivating anonymous set with timeout, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: mark set as dead when deactivating anonymous set, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: mark set as dead when deactivating anonymous set, Florian Westphal
    • Re: [PATCH nf] netfilter: nf_tables: mark set as dead when deactivating anonymous set, Pablo Neira Ayuso
• [PATCH conntrack-tools v2 0/3] fix potential memory loss and exit codes, Donald Yandt
  • [PATCH conntrack-tools v2 1/3] conntrackd: prevent memory loss if reallocation fails, Donald Yandt
  • [PATCH conntrack-tools v2 2/3] conntrackd: use size_t for element indices, Donald Yandt
  • [PATCH conntrack-tools v2 3/3] conntrackd: exit with failure status, Donald Yandt
  • Re: [PATCH conntrack-tools v2 0/3] fix potential memory loss and exit codes, Pablo Neira Ayuso
    • Re: [PATCH conntrack-tools v2 0/3] fix potential memory loss and exit codes, Pablo Neira Ayuso
      • Re: [PATCH conntrack-tools v2 0/3] fix potential memory loss and exit codes, Donald Yandt
• [PATCH conntrack-tools 0/3] fix potential memory loss and exit codes, Donald Yandt
  • [PATCH conntrack-tools 1/3] conntrackd: prevent memory loss if reallocation fails, Donald Yandt
    • Re: [PATCH conntrack-tools 1/3] conntrackd: prevent memory loss if reallocation fails, Pablo Neira Ayuso
      • Re: [PATCH conntrack-tools 1/3] conntrackd: prevent memory loss if reallocation fails, Donald Yandt
  • [PATCH conntrack-tools 2/3] conntrackd: use size_t for element indices, Donald Yandt
    • Re: [PATCH conntrack-tools 2/3] conntrackd: use size_t for element indices, Pablo Neira Ayuso
      • Re: [PATCH conntrack-tools 2/3] conntrackd: use size_t for element indices, Donald Yandt
        • Re: [PATCH conntrack-tools 2/3] conntrackd: use size_t for element indices, Pablo Neira Ayuso
  • [PATCH conntrack-tools 3/3] conntrackd: exit with failure status, Donald Yandt
• [PATCH net v2] netfilter: Add protection for bmp length out of range, Lena Wang (王娜)
  • Re: [PATCH net v2] netfilter: Add protection for bmp length out of range, Jiri Pirko
  • Re: [PATCH net v2] netfilter: Add protection for bmp length out of range, Pablo Neira Ayuso
    • Re: [PATCH net v2] netfilter: Add protection for bmp length out of range, Florian Westphal
      • Re: [PATCH net v2] netfilter: Add protection for bmp length out of range, Pablo Neira Ayuso
• [PATCH nft 0/3] parser: allow to define maps that contain ct objects, Florian Westphal
  • [PATCH nft 1/3] parser: allow to define maps that contain timeouts and expectations, Florian Westphal
  • [PATCH nft 2/3] parser: allow to define maps that contain ct helpers, Florian Westphal
  • [PATCH nft 3/3] tests: add test case for named ct objects, Florian Westphal
• [PATCH nf v2] netfilter: nft_ct: fix l3num expectations with inet pseudo family, Florian Westphal
• [PATCH nf] netfilter: nft_ct: fix l3num expectations with inet pseudo family, Florian Westphal
• [PATCH nf,v2 1/2] netfilter: nf_tables: disallow anonymous set with timeout flag, Pablo Neira Ayuso
  • [PATCH nf,v2 2/2] netfilter: nf_tables: reject constant set with timeout, Pablo Neira Ayuso
• [PATCH nf 1/2] netfilter: nf_tables: disallow anonymous set with NFT_SET_{TIMEOUT,EVAL} flags, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nf_tables: reject constant set with timeout, Pablo Neira Ayuso
• [iptables PATCH] xtables-translate: Leverage stored protocol names, Phil Sutter
  • Re: [iptables PATCH] xtables-translate: Leverage stored protocol names, Phil Sutter
• [PATCH nft] rule: fix ASAN errors in priority to string conversion, Pablo Neira Ayuso
• [PATCH nft 0/3] nftables: add typeof support for objref maps, Florian Westphal
  • [PATCH nft 2/3] netlink: allow typeof keywords with objref maps during listing, Florian Westphal
  • [PATCH nft 1/3] parser: allow typeof in objref maps, Florian Westphal
  • [PATCH nft 3/3] tests: maps: add a test case for "limit" objref map, Florian Westphal
• [iptables PATCH] nft: Fix for broken recover_rule_compat(), Phil Sutter
  • Re: [iptables PATCH] nft: Fix for broken recover_rule_compat(), Phil Sutter
• [PATCH v2 nf] netfilter: bridge: confirm multicast packets before passing them up the stack, Florian Westphal
• [PATCH nft] parser: compact type/typeof set rules, Florian Westphal
• [PATCH nft] parser: compact interval typeof rules, Florian Westphal
• Ulogd2 Mysql KO, Yves Metivier
  • Re: Ulogd2 Mysql KO, Pablo Neira Ayuso
• [PATCH libnftnl 1/3] expr: immediate: check for chain attribute to release chain name, Pablo Neira Ayuso
  • [PATCH libnftnl 2/3] udata: incorrect userdata buffer size validation, Pablo Neira Ayuso
  • [PATCH libnftnl 3/3] utils: remove unused code, Pablo Neira Ayuso
• [PATCH 0/2] netfilter: bridge_netfilter:, Florian Westphal
  • [PATCH nf 1/2] netfilter: bridge: confirm multicast packets before passing them up the stack, Florian Westphal
  • [PATCH nf 2/2] selftests: netfilter: add bridge conntrack + multicast test case, Florian Westphal
• [PATCH nft] parser_json: allow 0 offsets again, Florian Westphal
• [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Pablo Neira Ayuso
  • Re: [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Jiri Pirko
  • Re: [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Eric Dumazet
  • Re: [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Jakub Kicinski
    • Re: [PATCH net] netlink: validate length of NLA_{BE16,BE32} types, Pablo Neira Ayuso
• [PATCH] netfilter: xtables: fix IP6_NF_IPTABLES_LEGACY typo, Arnd Bergmann
  • Re: [PATCH] netfilter: xtables: fix IP6_NF_IPTABLES_LEGACY typo, Florian Westphal
• [PATCH v3] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Ignat Korchagin
  • Re: [PATCH v3] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Pablo Neira Ayuso
    • Re: [PATCH v3] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Ignat Korchagin
      • Re: [PATCH v3] netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate(), Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: use kzalloc for hook allocation, Florian Westphal
• [PATCH nf] netfilter: nf_tables: register hooks last when adding new chain/flowtable, Pablo Neira Ayuso
• [PATCH nf 1/2] netfilter: nft_flow_offload: reset dst in route object after setting up flow, Pablo Neira Ayuso
  • [PATCH nf 2/2] netfilter: nft_flow_offload: release dst in case direct xmit path is used, Pablo Neira Ayuso
• [nft PATCH] src: improve error reporting for destroy command, 谢致邦 (XIE Zhibang)
• [PATCH net-next 00/12] netfilter updates for net-next, Florian Westphal
  • [PATCH net-next 02/12] netfilter: nf_log: consolidate check for NULL logger in lookup function, Florian Westphal
  • [PATCH net-next 01/12] netfilter: expect: Simplify the allocation of slab caches in nf_conntrack_expect_init, Florian Westphal
    • Re: [PATCH net-next 01/12] netfilter: expect: Simplify the allocation of slab caches in nf_conntrack_expect_init, patchwork-bot+netdevbpf
  • [PATCH net-next 03/12] netfilter: nf_log: validate nf_logger_find_get(), Florian Westphal
  • [PATCH net-next 06/12] netfilter: nft_set_pipapo: constify lookup fn args where possible, Florian Westphal
  • [PATCH net-next 04/12] netfilter: nft_osf: simplify init path, Florian Westphal
  • [PATCH net-next 07/12] netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR, Florian Westphal
  • [PATCH net-next 08/12] netfilter: nft_set_pipapo: shrink data structures, Florian Westphal
  • [PATCH net-next 09/12] netfilter: nft_set_pipapo: speed up bulk element insertions, Florian Westphal
  • [PATCH net-next 05/12] netfilter: xtables: fix up kconfig dependencies, Florian Westphal