Linux Netfilter / IP Tables Devel

• Date Index

• [libnftnl] chain: Removed non-defined functions, Nicholas Vinson
  • Re: [libnftnl] chain: Removed non-defined functions, Pablo Neira Ayuso
• [PATCH 01/14] netfilter: cleanup enum nft_set_class, George Guo
  • [PATCH 02/14] netfilter: cleanup struct nft_set_elem, George Guo
  • [PATCH 03/14] netfilter: cleanup struct nft_ctx, George Guo
  • [PATCH 04/14] netfilter: cleanup struct nft_set_iter, George Guo
  • [PATCH 05/14] netfilter: cleanup struct nft_set_ops, George Guo
  • [PATCH 06/14] netfilter: cleanup struct nft_set, George Guo
  • [PATCH 07/14] netfilter: cleanup struct nft_set_ext_tmpl, George Guo
  • [PATCH 08/14] netfilter: cleanup struct nft_expr_type, George Guo
  • [PATCH 09/14] netfilter: cleanup struct nft_expr_ops, George Guo
  • [PATCH 10/14] netfilter: cleanup struct nft_chain, George Guo
  • [PATCH 11/14] netfilter: cleanup struct nft_base_chain, George Guo
  • [PATCH 12/14] netfilter: cleanup struct nft_object, George Guo
  • [PATCH 13/14] netfilter: cleanup struct nft_object_ops, George Guo
  • [PATCH 14/14] netfilter: cleanup struct nft_flowtable, George Guo
  • Re: [PATCH 01/14] netfilter: cleanup enum nft_set_class, Pablo Neira Ayuso
• Kprobe for nf_nat is broken in Latest Debian 6.1.66-1, P K
  • Re: Kprobe for nf_nat is broken in Latest Debian 6.1.66-1, P K
• [PATCH v2 nft] datatype: do not assert when value exceeds expected width, Florian Westphal
• [PATCH net] netfilter: nf_nat: fix action not being set for all ct states, Brad Cowie
  • Re: [PATCH net] netfilter: nf_nat: fix action not being set for all ct states, Simon Horman
    • Re: [PATCH net] netfilter: nf_nat: fix action not being set for all ct states, Brad Cowie
      • Re: [PATCH net] netfilter: nf_nat: fix action not being set for all ct states, Xin Long
    • Re: [PATCH net] netfilter: nf_nat: fix action not being set for all ct states, Aaron Conole
      • Re: [PATCH net] netfilter: nf_nat: fix action not being set for all ct states, Pablo Neira Ayuso
      • Re: [PATCH net] netfilter: nf_nat: fix action not being set for all ct states, Brad Cowie
• [iptables PATCH v2] ebtables: Default to extrapositioned negations, Phil Sutter
  • Re: [iptables PATCH v2] ebtables: Default to extrapositioned negations, Phil Sutter
• [nf-next PATCH v2 0/3] netfilter: nf_tables: Introduce NFT_TABLE_F_PERSIST, Phil Sutter
  • [nf-next PATCH v2 2/3] netfilter: nf_tables: Introduce NFT_TABLE_F_PERSIST, Phil Sutter
  • [nf-next PATCH v2 3/3] netfilter: nf_tables: Implement table adoption support, Phil Sutter
  • [nf-next PATCH v2 1/3] netfilter: uapi: Document NFT_TABLE_F_OWNER flag, Phil Sutter
  • Re: [nf-next PATCH v2 0/3] netfilter: nf_tables: Introduce NFT_TABLE_F_PERSIST, Pablo Neira Ayuso
• [iptables PATCH] ebtables: Default to extrapositioned negations, Phil Sutter
• [PATCH nft v2] src: do not allow to chain more than 16 binops, Florian Westphal
• [iptables PATCH 00/23] Guided option parser for ebtables, Phil Sutter
  • [iptables PATCH 04/23] libxtables: xtoptions: Treat NFPROTO_BRIDGE as IPv4, Phil Sutter
    • Re: [iptables PATCH 04/23] libxtables: xtoptions: Treat NFPROTO_BRIDGE as IPv4, Jan Engelhardt
      • Re: [iptables PATCH 04/23] libxtables: xtoptions: Treat NFPROTO_BRIDGE as IPv4, Phil Sutter
  • [iptables PATCH 12/23] extensions: libebt_log: Use guided option parser, Phil Sutter
  • [iptables PATCH 05/23] ebtables: Support for guided option parser, Phil Sutter
  • [iptables PATCH 10/23] extensions: libebt_ip6: Use guided option parser, Phil Sutter
  • [iptables PATCH 23/23] extensions: libxt_HMARK: Review HMARK_parse(), Phil Sutter
  • [iptables PATCH 13/23] extensions: libebt_mark: Use guided option parser, Phil Sutter
  • [iptables PATCH 11/23] extensions: libebt_ip: Use guided option parser, Phil Sutter
  • [iptables PATCH 14/23] extensions: libebt_nflog: Use guided option parser, Phil Sutter
  • [iptables PATCH 08/23] extensions: libebt_arpreply: Use guided option parser, Phil Sutter
  • [iptables PATCH 01/23] libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK, Phil Sutter
  • [iptables PATCH 22/23] extensions: libebt_mark_m: Use guided option parser, Phil Sutter
  • [iptables PATCH 15/23] extensions: libebt_snat: Use guided option parser, Phil Sutter
  • [iptables PATCH 20/23] extensions: libxt_limit: Use guided option parser for NFPROTO_BRIDGE, too, Phil Sutter
  • [iptables PATCH 16/23] extensions: libebt_redirect: Use guided option parser, Phil Sutter
  • [iptables PATCH 21/23] extensions: libebt_pkttype: Use guided option parser, Phil Sutter
  • [iptables PATCH 03/23] libxtables: xtoptions: Implement XTTYPE_ETHERMACMASK, Phil Sutter
  • [iptables PATCH 02/23] libxtables: xtoptions: Support XTOPT_NBO with XTTYPE_UINT*, Phil Sutter
    • Re: [iptables PATCH 02/23] libxtables: xtoptions: Support XTOPT_NBO with XTTYPE_UINT*, Jan Engelhardt
      • Re: [iptables PATCH 02/23] libxtables: xtoptions: Support XTOPT_NBO with XTTYPE_UINT*, Phil Sutter
  • [iptables PATCH 18/23] extensions: libebt_vlan: Use guided option parser, Phil Sutter
  • [iptables PATCH 09/23] extensions: libebt_dnat: Use guided option parser, Phil Sutter
  • [iptables PATCH 07/23] extensions: libebt_stp: Use guided option parser, Phil Sutter
    • Re: [iptables PATCH 07/23] extensions: libebt_stp: Use guided option parser, Jan Engelhardt
      • Re: [iptables PATCH 07/23] extensions: libebt_stp: Use guided option parser, Phil Sutter
  • [iptables PATCH 19/23] extensions: libebt_arp: Use guided option parser, Phil Sutter
  • [iptables PATCH 06/23] extensions: libebt_*: Drop some needless init callbacks, Phil Sutter
  • [iptables PATCH 17/23] extensions: libebt_802_3: Use guided option parser, Phil Sutter
  • Re: [iptables PATCH 00/23] Guided option parser for ebtables, Phil Sutter
• [iptables PATCH] tests: iptables-test: Use difflib if dumps differ, Phil Sutter
  • Re: [iptables PATCH] tests: iptables-test: Use difflib if dumps differ, Phil Sutter
• [PATCH nft] netlink: fix stack overflow due to erroneous rounding, Florian Westphal
• [RFC nf-next v3 0/2] netfilter: bpf: support prog update, D. Wythe
  • [RFC nf-next v3 2/2] selftests/bpf: Add netfilter link prog update test, D. Wythe
  • [RFC nf-next v3 1/2] netfilter: bpf: support prog update, D. Wythe
    • Re: [RFC nf-next v3 1/2] netfilter: bpf: support prog update, Alexei Starovoitov
      • Re: [RFC nf-next v3 1/2] netfilter: bpf: support prog update, D. Wythe
        • Re: [RFC nf-next v3 1/2] netfilter: bpf: support prog update, Alexei Starovoitov
          • Re: [RFC nf-next v3 1/2] netfilter: bpf: support prog update, D. Wythe
            • Re: [RFC nf-next v3 1/2] netfilter: bpf: support prog update, Alexei Starovoitov
              • Re: [RFC nf-next v3 1/2] netfilter: bpf: support prog update, D. Wythe
• [PATCH nft] src: do not allow to chain more than 16 binops, Florian Westphal
• [PATCH nft] evaluate: don't crash if object map does not refer to a value, Florian Westphal
• netfilter ipv6 flow offloading seemingly causing hangs - how to debug?, Pierre Bourdon
  • Re: netfilter ipv6 flow offloading seemingly causing hangs - how to debug?, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: skip set commit for deleted/destroyed sets, Pablo Neira Ayuso
• [PATCH nft] datatype: do not assert when value exceeds 255, Florian Westphal
• [PATCH nft] parser_bison: error out on duplicated type/typeof/element keywords, Florian Westphal
• [PATCH nft] intervals: BUG on prefix expressions without value, Florian Westphal
• [PATCH v3 nft] support for afl++ (american fuzzy lop++) fuzzer, Florian Westphal
• [iptables PATCH] iptables-legacy: Fix for mandatory lock waiting, Phil Sutter
  • Re: [iptables PATCH] iptables-legacy: Fix for mandatory lock waiting, Phil Sutter
    • Re: [iptables PATCH] iptables-legacy: Fix for mandatory lock waiting, Phil Sutter
• [PATCH nft] tests: shell: add test to cover payload transport match and mangle, Pablo Neira Ayuso
• Can netfilter-ebpf modify packets ？, D. Wythe
• [RFC nf-next v2 0/2] netfilter: bpf: support prog update, D. Wythe
  • [RFC nf-next v2 2/2] selftests/bpf: Add netfilter link prog update test, D. Wythe
  • [RFC nf-next v2 1/2] netfilter: bpf: support prog update, D. Wythe
    • Re: [RFC nf-next v2 1/2] netfilter: bpf: support prog update, Simon Horman
      • Re: [RFC nf-next v2 1/2] netfilter: bpf: support prog update, D. Wythe
        • Re: [RFC nf-next v2 1/2] netfilter: bpf: support prog update, Florian Westphal
          • Re: [RFC nf-next v2 1/2] netfilter: bpf: support prog update, D. Wythe
• PATCH [netfilter] Remove old case sensitive variants of lowercase .c and .h files, Samuel Marks
  • Re: PATCH [netfilter] Remove old case sensitive variants of lowercase .c and .h files, Jan Engelhardt
  • Re: [netfilter-core] PATCH [netfilter] Remove old case sensitive variants of lowercase .c and .h files, Phil Sutter
  • <Possible follow-ups>
  • Re: PATCH [netfilter] Remove old case sensitive variants of lowercase .c and .h files, Tomasz Pala
• [PATCH v39 18/42] LSM: Use lsmcontext in security_lsmblob_to_secctx, Casey Schaufler
• [PATCH v39 17/42] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v39 16/42] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [libnftnl PATCH 0/6] Attribute policies for expressions, Phil Sutter
  • [libnftnl PATCH 6/6] expr: Enforce attr_policy compliance in nftnl_expr_set(), Phil Sutter
  • [libnftnl PATCH 1/6] tests: Fix objref test case, Phil Sutter
  • [libnftnl PATCH 4/6] include: Sync nf_log.h with kernel headers, Phil Sutter
  • [libnftnl PATCH 2/6] expr: Repurpose struct expr_ops::max_attr field, Phil Sutter
  • [libnftnl PATCH 5/6] expr: Introduce struct expr_ops::attr_policy, Phil Sutter
  • [libnftnl PATCH 3/6] expr: Call expr_ops::set with legal types only, Phil Sutter
  • Re: [libnftnl PATCH 0/6] Attribute policies for expressions, Phil Sutter
• [nft PATCH] datatype: rt_symbol_table_init() to search for iproute2 configs, Phil Sutter
  • Re: [nft PATCH] datatype: rt_symbol_table_init() to search for iproute2 configs, Pablo Neira Ayuso
    • Re: [nft PATCH] datatype: rt_symbol_table_init() to search for iproute2 configs, Pablo Neira Ayuso
      • [nft PATCH 1/2] datatype: Initialize rt_symbol_tables' base field, Phil Sutter
        • [nft PATCH 2/2] datatype: Describe rt symbol tables, Phil Sutter
  • Re: [nft PATCH] datatype: rt_symbol_table_init() to search for iproute2 configs, Phil Sutter
• [PATCH net-next 07/24] netfilter: br_netfilter: Use nested-BH locking for brnf_frag_data_storage., Sebastian Andrzej Siewior
• [nf-next PATCH] netfilter: nf_tables: Introduce NFT_TABLE_F_PERSIST, Phil Sutter
  • Re: [nf-next PATCH] netfilter: nf_tables: Introduce NFT_TABLE_F_PERSIST, Pablo Neira Ayuso
• [PATCH nft] tcpopt: don't create exthdr expression without datatype, Florian Westphal
• [PATCH nft] evaluate: fix stack overflow with huge priority string, Florian Westphal
• [RFC nf-next v1 0/2] netfilter: bpf: support prog update, D. Wythe
  • [RFC nf-next v1 2/2] selftests/bpf: Add netfilter link prog update test, D. Wythe
  • [RFC nf-next v1 1/2] netfilter: bpf: support prog update, D. Wythe
    • Re: [RFC nf-next v1 1/2] netfilter: bpf: support prog update, Florian Westphal
      • Re: [RFC nf-next v1 1/2] netfilter: bpf: support prog update, D. Wythe
• [PATCH nf-next] netfilter: nf_tables: validate chain type update if available, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: set transport offset from mac header for netdev/egress, Pablo Neira Ayuso
• ulogd / JSON output / enhancement proposal, Gérald Colangelo
  • Re: ulogd / JSON output / enhancement proposal, Jeremy Sowden
• Bug in ulogd2 when destroying a stack that failed to start (with fix attached), Gérald Colangelo
• [PATCH nft] evaluate: exthdr: statement arg must be not be a range, Florian Westphal
• [PATCH iptables v2 0/6] Autoools silent-rules fixes, Jeremy Sowden
  • [PATCH iptables v2 3/6] build: remove unused `AM_VERBOSE_CXX*` variables, Jeremy Sowden
  • [PATCH iptables v2 4/6] build: use standard automake verbosity variables, Jeremy Sowden
  • [PATCH iptables v2 1/6] build: format `AM_CPPFLAGS` variables, Jeremy Sowden
  • [PATCH iptables v2 6/6] build: replace `echo -e` with `printf`, Jeremy Sowden
  • [PATCH iptables v2 5/6] build: add an automake verbosity variable for `ln`, Jeremy Sowden
  • [PATCH iptables v2 2/6] build: remove obsolete `AM_LIBTOOL_SILENT` variable, Jeremy Sowden
  • Re: [PATCH iptables v2 0/6] Autoools silent-rules fixes, Phil Sutter
• [PATCH nft] netlink: don't crash if prefix for < byte is requested, Florian Westphal
• [PATCH iptables 0/7] Autoools silent-rules fixes, Jeremy Sowden
  • [PATCH iptables 2/7] build: remove obsolete `AM_LIBTOOL_SILENT` variable, Jeremy Sowden
  • [PATCH iptables 1/7] build: format `AM_CPPFLAGS` variables, Jeremy Sowden
  • [PATCH iptables 7/7] build: suppress man-page listing in silent rules, Jeremy Sowden
    • Re: [PATCH iptables 7/7] build: suppress man-page listing in silent rules, Jan Engelhardt
      • Re: [PATCH iptables 7/7] build: suppress man-page listing in silent rules, Jeremy Sowden
  • [PATCH iptables 5/7] build: add an automake verbosity variable for `ln`, Jeremy Sowden
  • [PATCH iptables 6/7] build: replace `echo -e` with `printf`, Jeremy Sowden
    • Re: [PATCH iptables 6/7] build: replace `echo -e` with `printf`, Jeremy Sowden
  • [PATCH iptables 4/7] build: use standard automake verbosity variables, Jeremy Sowden
  • [PATCH iptables 3/7] build: remove unused `AM_VERBOSE_CXX*` variables, Jeremy Sowden
• [PATCH v2 nft] initial support for the afl++ (american fuzzy lop++) fuzzer, Florian Westphal
  • Re: [PATCH v2 nft] initial support for the afl++ (american fuzzy lop++) fuzzer, Thomas Haller
• [PATCH nft] evaluate: fix gmp assertion with too-large reject code, Florian Westphal
• [libnftnl RFC 1/2] expr: Repurpose struct expr_ops::max_attr field, Phil Sutter
  • [libnftnl RFC 2/2] expr: Introduce struct expr_ops::attr_policy, Phil Sutter
    • Re: [libnftnl RFC 2/2] expr: Introduce struct expr_ops::attr_policy, Florian Westphal
      • Re: [libnftnl RFC 2/2] expr: Introduce struct expr_ops::attr_policy, Phil Sutter
        • Re: [libnftnl RFC 2/2] expr: Introduce struct expr_ops::attr_policy, Florian Westphal
• [PATCH nft 0/3] src: make set-merging less zealous, Florian Westphal
  • [PATCH nft 1/3] intervals: BUG on prefix expressions without value, Florian Westphal
  • [PATCH nft 2/3] src: do not merge a set with a erroneous one, Florian Westphal
  • [PATCH nft 3/3] evaluate: don't assert if set->data is NULL, Florian Westphal
  • Re: [PATCH nft 0/3] src: make set-merging less zealous, Florian Westphal
• [PATCH nft] netlink: fix stack buffer overflow with sub-reg sized prefixes, Florian Westphal
• [PATCH nft] meta: fix tc classid parsing out-of-bounds access, Florian Westphal
• [PATCH nft] evaluate: error out when existing set has incompatible key, Florian Westphal
• [PATCH nft] evaluate: stmt_nat: set reference must point to a map, Florian Westphal
• [RFC nf-next 0/2] netfilter: bpf: support prog update, D. Wythe
  • [RFC nf-next 1/2] netfilter: bpf: support prog update, D. Wythe
    • Re: [RFC nf-next 1/2] netfilter: bpf: support prog update, Florian Westphal
      • Re: [RFC nf-next 1/2] netfilter: bpf: support prog update, Alexei Starovoitov
      • Re: [RFC nf-next 1/2] netfilter: bpf: support prog update, D. Wythe
        • Re: [RFC nf-next 1/2] netfilter: bpf: support prog update, Alexei Starovoitov
          • Re: [RFC nf-next 1/2] netfilter: bpf: support prog update, D. Wythe
            • Re: [RFC nf-next 1/2] netfilter: bpf: support prog update, Alexei Starovoitov
              • Re: [RFC nf-next 1/2] netfilter: bpf: support prog update, D. Wythe
                • Re: [RFC nf-next 1/2] netfilter: bpf: support prog update, Alexei Starovoitov
                  • Re: [RFC nf-next 1/2] netfilter: bpf: support prog update, D. Wythe
  • [RFC nf-next 2/2] selftests/bpf: Add netfilter link prog update test, D. Wythe
• [PATCH nft] parser_bison: fix memory leaks on hookspec error processing, Florian Westphal
• [PATCH nft] parser_bison: close chain scope before chain release, Florian Westphal
• [PATCH v2 nft] src: reject large raw payload and concat expressions, Florian Westphal
• [PATCHv2 RFC net-next 00/14] ipvs: per-net tables and optimizations, Julian Anastasov
  • [PATCHv2 RFC net-next 10/14] ipvs: show the current conn_tab size to users, Julian Anastasov
  • [PATCHv2 RFC net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu, Julian Anastasov
  • [PATCHv2 RFC net-next 14/14] ipvs: add conn_lfactor and svc_lfactor sysctl vars, Julian Anastasov
  • [PATCHv2 RFC net-next 05/14] ipvs: do not keep dest_dst after dest is removed, Julian Anastasov
  • [PATCHv2 RFC net-next 13/14] ipvs: add ip_vs_status info, Julian Anastasov
  • [PATCHv2 RFC net-next 03/14] ipvs: some service readers can use RCU, Julian Anastasov
  • [PATCHv2 RFC net-next 11/14] ipvs: no_cport and dropentry counters can be per-net, Julian Anastasov
  • [PATCHv2 RFC net-next 06/14] ipvs: use more counters to avoid service lookups, Julian Anastasov
  • [PATCHv2 RFC net-next 04/14] ipvs: use single svc table, Julian Anastasov
  • [PATCHv2 RFC net-next 07/14] ipvs: add resizable hash tables, Julian Anastasov
  • [PATCHv2 RFC net-next 02/14] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns, Julian Anastasov
  • [PATCHv2 RFC net-next 12/14] ipvs: use more keys for connection hashing, Julian Anastasov
  • [PATCHv2 RFC net-next 08/14] ipvs: use resizable hash table for services, Julian Anastasov
    • Re: [PATCHv2 RFC net-next 08/14] ipvs: use resizable hash table for services, Simon Horman
      • Re: [PATCHv2 RFC net-next 08/14] ipvs: use resizable hash table for services, Julian Anastasov
  • [PATCHv2 RFC net-next 09/14] ipvs: switch to per-net connection table, Julian Anastasov
• [PATCH nft] evaluate: error out if concat expression becomes too large, Florian Westphal
• [PATCH libnftnl] expr: fix buffer overflows in data value setters, Florian Westphal
• [PATCH nft] parser_bison: reject large raw payload expressions, Florian Westphal
• [PATCH nft] parser_bison: ensure all timeout policy names are released, Florian Westphal
• [PATCH nft] parser_bison: make sure obj_free releases timeout policies, Florian Westphal
• [PATCH nft] parser_bison: fix ct scope underflow if ct helper section is duplicated, Florian Westphal
• Should we keep the advice to increase queue max length?, Duncan Roe
  • Re: Should we keep the advice to increase queue max length?, Florian Westphal
• [PATCH iptables] Fix spelling mistakes, Jeremy Sowden
  • Re: [PATCH iptables] Fix spelling mistakes, Phil Sutter
• [PATCH libnetfilter_queue 0/1] src: add nfq_socket_sendto() - send config request and check response, Duncan Roe
  • [PATCH libnetfilter_queue 1/1] src: add nfq_socket_sendto() - send config request and check response, Duncan Roe
• [PATCH ulogd] log NAT events using IPFIX, Tomasz Pala
  • Re: [PATCH ulogd] log NAT events using IPFIX, Pablo Neira Ayuso
    • Re: [PATCH ulogd] log NAT events using IPFIX, Tomasz Pala
      • Re: [PATCH ulogd] log NAT events using IPFIX, Tomasz Pala
      • Re: [PATCH ulogd] log NAT events using IPFIX, Tomasz Pala
        • Re: [PATCH ulogd] log NAT events using IPFIX, Tomasz Pala
      • Re: [PATCH ulogd] log NAT events using IPFIX, Tomasz Pala
      • Re: [PATCH ulogd] log NAT events using IPFIX, Tomasz Pala
        • Re: [PATCH ulogd] log NAT events using IPFIX, Tomasz Pala
• [PATCH libnftnl] object: getters take const struct, corubba
  • Re: [PATCH libnftnl] object: getters take const struct, Pablo Neira Ayuso
• [PATCH libnetfilter_queue 0/1] whitespace: replace spaces with tab in indent, Duncan Roe
  • [PATCH libnetfilter_queue 1/1] whitespace: replace spaces with tab in indent, Duncan Roe
    • Re: [PATCH libnetfilter_queue 1/1] whitespace: replace spaces with tab in indent, Florian Westphal
    • This didn't make it into patchwork, Duncan Roe
      • Sorry for previous message - please ignore, Duncan Roe
• [PATCH nft] evaluate: validate chain max length, Florian Westphal
• [PATCH v2 nft] parser_bison: fix objref statement corruption, Florian Westphal
• [PATCH v2 nft] evaluate: fix bogus assertion failure with boolean datatype, Florian Westphal
• [PATCH nft] parser_bison: fix objref statement corruption, Florian Westphal
• [PATCH nft] netlink: add and use nft_data_memcpy helper, Florian Westphal
• [PATCH 03/13] evaluate: fix bogus assertion failure with boolean datatype, Florian Westphal
• [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Phil Sutter
  • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Pablo Neira Ayuso
    • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Phil Sutter
      • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Eric Garver
        • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Phil Sutter
          • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Eric Garver
            • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Florian Westphal
          • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Pablo Neira Ayuso
            • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Phil Sutter
              • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Pablo Neira Ayuso
            • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Thomas Haller
              • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Florian Westphal
                • Re: [nf-next PATCH] netfilter: nf_tables: Support updating table's owner flag, Thomas Haller
• [PATCH nft] parser_bison: fix memleak in meta set error handling, Florian Westphal
• [PATCH nft] evaluate: reset statement length context before evaluating statement, Pablo Neira Ayuso
• [PATCH nft] evaluate: reset statement length context for relational expressions, Florian Westphal
  • Re: [PATCH nft] evaluate: reset statement length context for relational expressions, Pablo Neira Ayuso
• [PATCH nft,v2] evaluate: reject set definition with no key, Pablo Neira Ayuso
• [PATCH nft] evaluate: reject set definition with no key, Pablo Neira Ayuso
  • Re: [PATCH nft] evaluate: reject set definition with no key, Florian Westphal
• [PATCH nft v3] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
  • Re: [PATCH nft v3] parser: tcpopt: fix tcp option parsing with NUM + length field, Pablo Neira Ayuso
• [PATCH nft] monitor: add support for concatenated set ranges, Pablo Neira Ayuso
• Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Jann Horn
  • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Jann Horn
    • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Phil Sutter
      • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Jann Horn
        • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Pablo Neira Ayuso
        • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Christian Brauner
        • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Phil Sutter
          • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Jann Horn
            • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Phil Sutter
      • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Pablo Neira Ayuso
    • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Christian Brauner
      • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Jann Horn
        • Re: Is xt_owner's owner_mt() racy with sock_orphan()? [worse with new TYPESAFE_BY_RCU file lifetime?], Christian Brauner
• [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Pablo Neira Ayuso
  • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Florian Westphal
    • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Thomas Haller
      • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Pablo Neira Ayuso
        • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Florian Westphal
          • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Pablo Neira Ayuso
            • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Pablo Neira Ayuso
              • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Florian Westphal
                • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Thomas Haller
        • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Thomas Haller
          • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Pablo Neira Ayuso
    • Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing, Pablo Neira Ayuso
• [PATCH nft] intervals: don't assert when symbolic expression is to be split into a range, Florian Westphal
  • Re: [PATCH nft] intervals: don't assert when symbolic expression is to be split into a range, Pablo Neira Ayuso
• [PATCH nft] evaluate: fix double free on dtype release, Florian Westphal
  • Re: [PATCH nft] evaluate: fix double free on dtype release, Pablo Neira Ayuso
    • Re: [PATCH nft] evaluate: fix double free on dtype release, Thomas Haller
      • Re: [PATCH nft] evaluate: fix double free on dtype release, Pablo Neira Ayuso
• [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
  • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Pablo Neira Ayuso
    • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
      • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Pablo Neira Ayuso
        • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
          • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Pablo Neira Ayuso
  • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Thomas Haller
    • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
      • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Thomas Haller
        • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
          • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
            • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Thomas Haller
              • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
                • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Thomas Haller
                  • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
                    • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Thomas Haller
            • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Phil Sutter
              • Re: [PATCH v2 nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Thomas Haller
• [PATCH libnetfilter_conntrack 0/2] dump/flush support filtering by zone, Felix Huettner
  • [PATCH libnetfilter_conntrack 1/2] dump: support filtering by zone, Felix Huettner
    • Re: [PATCH libnetfilter_conntrack 1/2] dump: support filtering by zone, Pablo Neira Ayuso
  • [PATCH libnetfilter_conntrack 2/2] flush: support filtering, Felix Huettner
• [PATCH nft] evaluate: catch implicit map expressions without known datatype, Florian Westphal
• [PATCH nft] evaluate: reject attempt to update a set, Florian Westphal
• [PATCH nft] evaluate: disable meta set with ranges, Florian Westphal
• [PATCH nft] evaluate: error out if basetypes are different, Florian Westphal
• [PATCH nft] evaluate: guard against NULL basetype, Florian Westphal
• [PATCH nft] evaluate: handle invalid mapping expressions gracefully, Florian Westphal
• [PATCH nft] evaluate: turn assert into real error check, Florian Westphal
  • Re: [PATCH nft] evaluate: turn assert into real error check, Pablo Neira Ayuso
• [PATCH] ipvs: add a stateless type of service and a stateless Maglev hashing scheduler, Lev Pantiukhin
  • Re: [PATCH] ipvs: add a stateless type of service and a stateless Maglev hashing scheduler, Julian Anastasov
  • Re: [PATCH] ipvs: add a stateless type of service and a stateless Maglev hashing scheduler, kernel test robot
  • Re: [PATCH] ipvs: add a stateless type of service and a stateless Maglev hashing scheduler, Julian Anastasov
  • Re: [PATCH] ipvs: add a stateless type of service and a stateless Maglev hashing scheduler, Dan Carpenter
• [PATCH nf] netfilter: nf_tables: validate family when identifying table via handle, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: nf_tables: validate family when identifying table via handle, Florian Westphal
    • Re: [PATCH nf] netfilter: nf_tables: validate family when identifying table via handle, Pablo Neira Ayuso
      • Re: [PATCH nf] netfilter: nf_tables: validate family when identifying table via handle, Phil Sutter
        • Re: [PATCH nf] netfilter: nf_tables: validate family when identifying table via handle, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: bail out on mismatching dynset and set expressions, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: fix 'exist' matching on bigendian arches, Florian Westphal
  • Re: [PATCH nf] netfilter: nf_tables: fix 'exist' matching on bigendian arches, Phil Sutter
    • Re: [PATCH nf] netfilter: nf_tables: fix 'exist' matching on bigendian arches, Pablo Neira Ayuso
• does nft 'tcp option ... exists' work?, Maciej Żenczykowski
  • Re: does nft 'tcp option ... exists' work?, Maciej Żenczykowski
    • Re: does nft 'tcp option ... exists' work?, Florian Westphal
      • Re: does nft 'tcp option ... exists' work?, Florian Westphal
        • Re: does nft 'tcp option ... exists' work?, Pablo Neira Ayuso
          • Re: does nft 'tcp option ... exists' work?, Maciej Żenczykowski
            • Re: does nft 'tcp option ... exists' work?, Florian Westphal
              • Re: does nft 'tcp option ... exists' work?, Maciej Żenczykowski
                • Re: does nft 'tcp option ... exists' work?, Florian Westphal
                  • Re: does nft 'tcp option ... exists' work?, Maciej Żenczykowski
                    • [PATCH nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Florian Westphal
                      • Re: [PATCH nft] parser: tcpopt: fix tcp option parsing with NUM + length field, Pablo Neira Ayuso
• [nft PATCH 0/2] Review nft_options_check(), Phil Sutter
  • [nft PATCH 1/2] main: Reduce indenting in nft_options_check(), Phil Sutter
  • [nft PATCH 2/2] main: Refer to nft_options in nft_options_check(), Phil Sutter
• [PATCH nft] initial support for the afl++ (american fuzzy lop++) fuzzer, Florian Westphal
  • Re: [PATCH nft] initial support for the afl++ (american fuzzy lop++) fuzzer, Phil Sutter
  • Re: [PATCH nft] initial support for the afl++ (american fuzzy lop++) fuzzer, Phil Sutter
    • Re: [PATCH nft] initial support for the afl++ (american fuzzy lop++) fuzzer, Florian Westphal
      • Re: [PATCH nft] initial support for the afl++ (american fuzzy lop++) fuzzer, Phil Sutter
        • Re: [PATCH nft] initial support for the afl++ (american fuzzy lop++) fuzzer, Florian Westphal
          • Re: [PATCH nft] initial support for the afl++ (american fuzzy lop++) fuzzer, Phil Sutter
• [PATCH nf] netfilter: nft_set_pipapo: skip inactive elements during set walk, Florian Westphal
• [PATCH nft] evaluate: prevent assert when evaluating very large shift values, Florian Westphal
• [PATCH nft] evaluate: reject sets with no key, Florian Westphal
• [PATCH net] net/netfilter: bpf: fix bad registration on nf_defrag, D. Wythe
  • Re: [PATCH net] net/netfilter: bpf: fix bad registration on nf_defrag, Daniel Xu
  • Re: [PATCH net] net/netfilter: bpf: fix bad registration on nf_defrag, Simon Horman
• [iptables PATCH 00/13] ebtables: Use the shared commandline parser, Phil Sutter
  • [iptables PATCH 07/13] ebtables{,-translate}: Convert if-clause to switch(), Phil Sutter
  • [iptables PATCH 02/13] xshared: Perform protocol value parsing in callback, Phil Sutter
  • [iptables PATCH 10/13] ebtables: Make 'h' case just a call to print_help(), Phil Sutter
  • [iptables PATCH 09/13] ebtables: Pass struct iptables_command_state to print_help(), Phil Sutter
  • [iptables PATCH 06/13] xshared: Support for ebtables' --change-counters command, Phil Sutter
  • [iptables PATCH 04/13] xshared: Introduce print_help callback (again), Phil Sutter
  • [iptables PATCH 12/13] xshared: Introduce option_test_and_reject(), Phil Sutter
  • [iptables PATCH 05/13] xshared: Support rule range deletion in do_parse(), Phil Sutter
  • [iptables PATCH 11/13] ebtables: Use struct xt_cmd_parse, Phil Sutter
  • [iptables PATCH 03/13] xshared: Turn command_default() into a callback, Phil Sutter
  • [iptables PATCH 08/13] ebtables: Change option values to avoid clashes, Phil Sutter
  • [iptables PATCH 01/13] xshared: do_parse: Skip option checking for CMD_DELETE_NUM, Phil Sutter
  • [iptables PATCH 13/13] ebtables: Use do_parse() from xshared, Phil Sutter
  • Re: [iptables PATCH 00/13] ebtables: Use the shared commandline parser, Phil Sutter
• [PATCH net] net/netfilter: bpf: avoid leakage of skb, D. Wythe
  • Re: [PATCH net] net/netfilter: bpf: avoid leakage of skb, Florian Westphal
    • Re: [PATCH net] net/netfilter: bpf: avoid leakage of skb, D. Wythe
      • Re: [PATCH net] net/netfilter: bpf: avoid leakage of skb, Florian Westphal
        • Re: [PATCH net] net/netfilter: bpf: avoid leakage of skb, D. Wythe
• [iptables PATCH 0/2] libxtables: Fix two xtoptions bugs, Phil Sutter
  • [iptables PATCH 2/2] libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks, Phil Sutter
  • [iptables PATCH 1/2] libxtables: xtoptions: Fix for garbage access in xtables_options_xfrm(), Phil Sutter
  • Re: [iptables PATCH 0/2] libxtables: Fix two xtoptions bugs, Phil Sutter
• [iptables PATCH] man: Do not escape exclamation marks, Phil Sutter
  • Re: [iptables PATCH] man: Do not escape exclamation marks, Phil Sutter
• ipset hash:net,iface - can not add more than 64 interfaces, Марк Коренберг
  • Re: ipset hash:net,iface - can not add more than 64 interfaces, Jozsef Kadlecsik
    • Re: ipset hash:net,iface - can not add more than 64 interfaces, Марк Коренберг
      • Re: ipset hash:net,iface - can not add more than 64 interfaces, Jozsef Kadlecsik
    • Re: ipset hash:net,iface - can not add more than 64 interfaces, Марк Коренберг
      • Re: ipset hash:net,iface - can not add more than 64 interfaces, Jozsef Kadlecsik
        • Message not available
          • Re: ipset hash:net,iface - can not add more than 64 interfaces, Марк Коренберг
• [PATCH nft 0/2] tests/shell: workaround for bash, Thomas Haller
  • [PATCH nft 1/2] tests/shell: workaround lack of `wait -p` before bash 5.1, Thomas Haller
  • [PATCH nft 2/2] tests/shell: workaround lack of $SRANDOM before bash 5.1, Thomas Haller
  • Re: [PATCH nft 0/2] tests/shell: workaround for bash, Pablo Neira Ayuso
• Re: [PATCH net-next v2] net: ctnetlink: support filtering by zone, Pablo Neira Ayuso
  • Message not available
    • Re: [PATCH net-next v2] net: ctnetlink: support filtering by zone, Felix Huettner
  • <Possible follow-ups>
  • Re: [PATCH net-next v2] net: ctnetlink: support filtering by zone, Pablo Neira Ayuso
    • Re: [PATCH net-next v2] net: ctnetlink: support filtering by zone, Ilya Maximets
      • Re: [PATCH net-next v2] net: ctnetlink: support filtering by zone, Pablo Neira Ayuso
        • Re: [PATCH net-next v2] net: ctnetlink: support filtering by zone, Felix Huettner
          • Re: [PATCH net-next v2] net: ctnetlink: support filtering by zone, Felix Huettner
• [PATCH nf-next] netfilter: nf_tables: mark newset as dead on transaction abort, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_tables: mark newset as dead on transaction abort, kernel test robot
  • Re: [PATCH nf-next] netfilter: nf_tables: mark newset as dead on transaction abort, kernel test robot
• [PATCH libnetfilter_queue v3 0/1] New example program nfq6, Duncan Roe
  • [PATCH libnetfilter_queue v3 1/1] examples: add an example which uses more functions, Duncan Roe
  • <Possible follow-ups>
  • [PATCH libnetfilter_queue v3 0/1] New example program nfq6, Duncan Roe
    • [PATCH libnetfilter_queue v3 1/1] examples: add an example which uses more functions, Duncan Roe
    • Re: [PATCH libnetfilter_queue v3 0/1] New example program nfq6, Pablo Neira Ayuso
      • Re: [PATCH libnetfilter_queue v3 0/1] New example program nfq6, Duncan Roe
• [PATCH] man: proper roff encoding for ~ and ^, Jan Engelhardt
  • Re: [PATCH] man: proper roff encoding for ~ and ^, Phil Sutter
    • Re: [PATCH] man: proper roff encoding for ~ and ^, Jan Engelhardt
• [PATCH] man: proper roff encoding for ^, Jan Engelhardt
• [PATCH 5.4 154/159] netfilter: nf_tables: unregister flowtable hooks on netns exit, Greg Kroah-Hartman
• [PATCH 5.4 145/159] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path, Greg Kroah-Hartman
• [PATCH 5.4 153/159] netfilter: nf_tables: fix memleak when more than 255 elements expired, Greg Kroah-Hartman
• [PATCH 5.4 152/159] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration, Greg Kroah-Hartman
• [PATCH 5.4 151/159] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention, Greg Kroah-Hartman
• [PATCH 5.4 150/159] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction, Greg Kroah-Hartman
• [PATCH 5.4 149/159] netfilter: nf_tables: defer gc run if previous batch is still pending, Greg Kroah-Hartman
• [PATCH 5.4 148/159] netfilter: nf_tables: use correct lock to protect gc_list, Greg Kroah-Hartman
• [PATCH 5.4 147/159] netfilter: nf_tables: GC transaction race with abort path, Greg Kroah-Hartman
• [PATCH 5.4 159/159] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4), Greg Kroah-Hartman
• [PATCH 5.4 158/159] netfilter: nf_tables: disable toggling dormant table state more than once, Greg Kroah-Hartman
• [PATCH 5.4 157/159] netfilter: nf_tables: fix table flag updates, Greg Kroah-Hartman
• [PATCH 5.4 156/159] netfilter: nftables: update table flags from the commit phase, Greg Kroah-Hartman
• [PATCH 5.4 155/159] netfilter: nf_tables: double hook unregistration in netns path, Greg Kroah-Hartman
• [PATCH 5.4 146/159] netfilter: nf_tables: GC transaction race with netns dismantle, Greg Kroah-Hartman
• [PATCH 5.4 144/159] netfilter: nf_tables: remove busy mark and gc batch API, Greg Kroah-Hartman
• [PATCH 5.4 143/159] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Greg Kroah-Hartman
• [PATCH 5.4 141/159] netfilter: nf_tables: GC transaction API to avoid race with control plane, Greg Kroah-Hartman
• [PATCH 5.4 142/159] netfilter: nf_tables: adapt set backend to use GC transaction API, Greg Kroah-Hartman
• [PATCH 5.4 139/159] netfilter: nft_set_rbtree: fix overlap expiration walk, Greg Kroah-Hartman
• [PATCH 5.4 140/159] netfilter: nf_tables: dont skip expired elements during walk, Greg Kroah-Hartman
• [PATCH 5.4 138/159] netfilter: nft_set_rbtree: fix null deref on element insertion, Greg Kroah-Hartman
• [PATCH 5.4 137/159] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection, Greg Kroah-Hartman
• [PATCH 5.4 136/159] netfilter: nf_tables: drop map element references from preparation phase, Greg Kroah-Hartman
• [PATCH 5.4 135/159] netfilter: nftables: rename set element data activation/deactivation functions, Greg Kroah-Hartman
• [PATCH 5.4 134/159] netfilter: nf_tables: pass context to nft_set_destroy(), Greg Kroah-Hartman
• [PATCH 5.10 193/193] netfilter: nf_tables: disable toggling dormant table state more than once, Greg Kroah-Hartman
• [PATCH 5.10 192/193] netfilter: nf_tables: fix table flag updates, Greg Kroah-Hartman
• [PATCH 5.10 191/193] netfilter: nftables: update table flags from the commit phase, Greg Kroah-Hartman
• [PATCH nft 0/2] pretty print .json-nft files, Thomas Haller
  • [PATCH nft 1/2] tests/shell: use generated ruleset for `nft --check`, Thomas Haller
  • [PATCH nft 2/2] tests/shell: have .json-nft dumps prettified to wrap lines, Thomas Haller
    • [PATCH nft 2/2 v2] tests/shell: have .json-nft dumps prettified to wrap lines, Thomas Haller
      • Re: [PATCH nft 2/2 v2] tests/shell: have .json-nft dumps prettified to wrap lines, Phil Sutter
• [iptables PATCH 0/3] Review interface parsing and printing, Phil Sutter
  • [iptables PATCH 2/3] xshared: Do not populate interface masks per default, Phil Sutter
  • [iptables PATCH 3/3] nft: Leave interface masks alone when parsing from kernel, Phil Sutter
  • [iptables PATCH 1/3] xshared: Entirely ignore interface masks when saving rules, Phil Sutter
  • Re: [iptables PATCH 0/3] Review interface parsing and printing, Phil Sutter
• [iptables PATCH 0/3] xshared: Review option parsing, Phil Sutter
  • [iptables PATCH 3/3] xshared: Simplify generic_opt_check(), Phil Sutter
  • [iptables PATCH 2/3] xshared: Introduce xt_cmd_parse_ops::option_invert, Phil Sutter
  • [iptables PATCH 1/3] xshared: Introduce xt_cmd_parse_ops::option_name, Phil Sutter
  • Re: [iptables PATCH 0/3] xshared: Review option parsing, Phil Sutter
• [nft PATCH] tests/shell: Treat json-nft dumps as binary in git, Phil Sutter
  • Re: [nft PATCH] tests/shell: Treat json-nft dumps as binary in git, Florian Westphal
    • Re: [nft PATCH] tests/shell: Treat json-nft dumps as binary in git, Pablo Neira Ayuso
      • Re: [nft PATCH] tests/shell: Treat json-nft dumps as binary in git, Phil Sutter
        • Re: [nft PATCH] tests/shell: Treat json-nft dumps as binary in git, Thomas Haller
• [PATCH] net: make config lines follow common pattern, Lukas Bulwahn
  • Re: [PATCH] net: make config lines follow common pattern, Paolo Abeni
• [PATCH nft] json: deal appropriately with multidevice in chain, Pablo Neira Ayuso
• PSA: this list has moved to new vger infra (no action required), Konstantin Ryabitsev
• [iptables PATCH 0/6] Extend guided option parser for use by arptables, Phil Sutter
  • [iptables PATCH 4/6] libxtables: Introduce struct xt_option_entry::base, Phil Sutter
  • [iptables PATCH 6/6] extensions: MARK: arptables: Use guided option parser, Phil Sutter
  • [iptables PATCH 1/6] libxtables: Combine the two extension option mergers, Phil Sutter
  • [iptables PATCH 3/6] libxtables: Introduce xtables_strtoul_base(), Phil Sutter
  • [iptables PATCH 2/6] libxtables: Fix guided option parser for use with arptables, Phil Sutter
  • [iptables PATCH 5/6] extensions: libarpt_mangle: Use guided option parser, Phil Sutter
  • Re: [iptables PATCH 0/6] Extend guided option parser for use by arptables, Phil Sutter
• [PATCH nft] evaluate: clone unary expression datatype to deal with dynamic datatype, Pablo Neira Ayuso
• [PATCH nft 1/1] tests/shell: accept name of dump files in place of test names, Thomas Haller
  • Re: [PATCH nft 1/1] tests/shell: accept name of dump files in place of test names, Pablo Neira Ayuso
    • Re: [PATCH nft 1/1] tests/shell: accept name of dump files in place of test names, Thomas Haller
• [PATCH AUTOSEL 4.19 2/6] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
• [PATCH AUTOSEL 5.4 2/6] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
• [PATCH AUTOSEL 5.10 3/7] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
• [PATCH AUTOSEL 5.15 3/7] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
• [PATCH AUTOSEL 6.1 4/9] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
• [PATCH AUTOSEL 6.5 05/15] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
• [PATCH AUTOSEL 6.6 06/17] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
• [iptables PATCH 00/12] Misc fixes (more or less), Phil Sutter
  • [iptables PATCH 10/12] ebtables: Align line number formatting with legacy, Phil Sutter
  • [iptables PATCH 06/12] xshared: Drop pointless CMD_REPLACE check, Phil Sutter
  • [iptables PATCH 09/12] ebtables: Make ebt_load_match_extensions() static, Phil Sutter
  • [iptables PATCH 08/12] ebtables: Drop append_entry() wrapper, Phil Sutter
  • [iptables PATCH 07/12] tests: xlate: Print failing command line, Phil Sutter
  • [iptables PATCH 05/12] xshared: Drop needless assignment in --help case, Phil Sutter
  • [iptables PATCH 01/12] Makefile: Install arptables-translate link and man page, Phil Sutter
  • [iptables PATCH 03/12] xshared: struct xt_cmd_parse::xlate is unused, Phil Sutter
  • [iptables PATCH 04/12] xshared: All variants support -v, Phil Sutter
  • [iptables PATCH 02/12] nft-bridge: nft_bridge_add() uses wrong flags, Phil Sutter
  • [iptables PATCH 11/12] xshared: do_parse: Ignore '-j CONTINUE', Phil Sutter
  • [iptables PATCH 12/12] ebtables: Implement --change-counters command, Phil Sutter
  • Re: [iptables PATCH 00/12] Misc fixes (more or less), Phil Sutter
• [PATCH nft 1/1] tests: prettify JSON in test output and add helper, Thomas Haller
  • Re: [PATCH nft 1/1] tests: prettify JSON in test output and add helper, Pablo Neira Ayuso
    • Re: [PATCH nft 1/1] tests: prettify JSON in test output and add helper, Thomas Haller
      • Re: [PATCH nft 1/1] tests: prettify JSON in test output and add helper, Pablo Neira Ayuso
        • Re: [PATCH nft 1/1] tests: prettify JSON in test output and add helper, Thomas Haller
• [PATCH nft 1/8] tests: shell: connlimit tests requires set expression support, Pablo Neira Ayuso
  • [PATCH nft 2/8] tests: shell: skip stateful object updates if unsupported, Pablo Neira Ayuso
  • [PATCH nft 4/8] tests: shell: skip synproxy test if kernel does not support it, Pablo Neira Ayuso
  • [PATCH nft 3/8] tests: shell: detach synproxy test, Pablo Neira Ayuso
  • [PATCH nft 5/8] tests: shell: skip nat inet if kernel does not support it, Pablo Neira Ayuso
  • [PATCH nft 8/8] tests: shell: skip if kernel does not allow to restore set element expiration, Pablo Neira Ayuso
  • [PATCH nft 7/8] tests: shell: skip secmark tests if kernel does not support it, Pablo Neira Ayuso
  • [PATCH nft 6/8] tests: shell: split nat inet tests, Pablo Neira Ayuso
• [PATCH nft] evaluate: bogus error when adding devices to flowtable, Pablo Neira Ayuso
• [PATCH v6 05/13] x86/bugs: Rename RETPOLINE to MITIGATION_RETPOLINE, Breno Leitao
  • Re: [PATCH v6 05/13] x86/bugs: Rename RETPOLINE to MITIGATION_RETPOLINE, Ariel Miculas
• [PATCH nft] tests: shell: flush connlimit sets, Pablo Neira Ayuso
• [PATCH nf-next 0/8] netfilter: make nf_flowtable lifetime differ from container struct, Florian Westphal
  • [PATCH nf-next 2/8] netfilter: nf_flowtable: replace init callback with a create one, Florian Westphal
  • [PATCH nf-next 1/8] netfilter: flowtable: move nf_flowtable out of container structures, Florian Westphal
    • Re: [PATCH nf-next 1/8] netfilter: flowtable: move nf_flowtable out of container structures, Simon Horman
      • Re: [PATCH nf-next 1/8] netfilter: flowtable: move nf_flowtable out of container structures, Florian Westphal
        • Re: [PATCH nf-next 1/8] netfilter: flowtable: move nf_flowtable out of container structures, Simon Horman
          • Re: [PATCH nf-next 1/8] netfilter: flowtable: move nf_flowtable out of container structures, Simon Horman
  • [PATCH nf-next 3/8] netfilter: nf_flowtable: make free a real free function, Florian Westphal
  • [PATCH nf-next 4/8] netfilter: nf_flowtable: delay flowtable release a second time, Florian Westphal
  • [PATCH nf-next 5/8] netfilter: nf_tables: reject flowtable hw offload for same device, Florian Westphal
  • [PATCH nf-next 6/8] netfilter: nf_tables: add xdp offload flag, Florian Westphal
  • [PATCH nf-next 7/8] netfilter: nf_tables: add flowtable map for xdp offload, Florian Westphal
    • Re: [PATCH nf-next 7/8] netfilter: nf_tables: add flowtable map for xdp offload, Lorenzo Bianconi
    • Re: [PATCH nf-next 7/8] netfilter: nf_tables: add flowtable map for xdp offload, Toke Høiland-Jørgensen
      • Re: [PATCH nf-next 7/8] netfilter: nf_tables: add flowtable map for xdp offload, Florian Westphal
        • Re: [PATCH nf-next 7/8] netfilter: nf_tables: add flowtable map for xdp offload, Toke Høiland-Jørgensen
  • [PATCH nf-next 8/8] netfilter: nf_tables: permit duplicate flowtable mappings, Florian Westphal
  • Re: [PATCH nf-next 0/8] netfilter: make nf_flowtable lifetime differ from container struct, Pablo Neira Ayuso
    • Re: [PATCH nf-next 0/8] netfilter: make nf_flowtable lifetime differ from container struct, Florian Westphal
      • Re: [PATCH nf-next 0/8] netfilter: make nf_flowtable lifetime differ from container struct, Pablo Neira Ayuso
        • Re: [PATCH nf-next 0/8] netfilter: make nf_flowtable lifetime differ from container struct, Florian Westphal
    • Re: [PATCH nf-next 0/8] netfilter: make nf_flowtable lifetime differ from container struct, Toke Høiland-Jørgensen
• [PATCH 6.6.y 0/2] netfilter: fix catchall element double-free, Florian Westphal
  • [PATCH 6.6.y 1/2] netfilter: nf_tables: remove catchall element in GC sync path, Florian Westphal
  • [PATCH 6.6.y 2/2] netfilter: nf_tables: split async and sync catchall in two functions, Florian Westphal
  • Re: [PATCH 6.6.y 0/2] netfilter: fix catchall element double-free, Pablo Neira Ayuso
    • Re: [PATCH 6.6.y 0/2] netfilter: fix catchall element double-free, Sasha Levin
• [PATCH -stable,5.4 00/26] Netfilter stable fixes for 5.4, Pablo Neira Ayuso
  • [PATCH -stable,5.4 01/26] netfilter: nf_tables: pass context to nft_set_destroy(), Pablo Neira Ayuso
  • [PATCH -stable,5.4 23/26] netfilter: nftables: update table flags from the commit phase, Pablo Neira Ayuso
    • Re: [PATCH -stable,5.4 23/26] netfilter: nftables: update table flags from the commit phase, Sasha Levin
      • Re: [PATCH -stable,5.4 23/26] netfilter: nftables: update table flags from the commit phase, Pablo Neira Ayuso
        • Re: [PATCH -stable,5.4 23/26] netfilter: nftables: update table flags from the commit phase, Pablo Neira Ayuso
          • Re: [PATCH -stable,5.4 23/26] netfilter: nftables: update table flags from the commit phase, Greg KH
  • [PATCH -stable,5.4 11/26] netfilter: nf_tables: remove busy mark and gc batch API, Pablo Neira Ayuso
  • [PATCH -stable,5.4 03/26] netfilter: nf_tables: drop map element references from preparation phase, Pablo Neira Ayuso
  • [PATCH -stable,5.4 05/26] netfilter: nft_set_rbtree: fix null deref on element insertion, Pablo Neira Ayuso
  • [PATCH -stable,5.4 10/26] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Pablo Neira Ayuso
  • [PATCH -stable,5.4 25/26] netfilter: nf_tables: disable toggling dormant table state more than once, Pablo Neira Ayuso
  • [PATCH -stable,5.4 15/26] netfilter: nf_tables: use correct lock to protect gc_list, Pablo Neira Ayuso
  • [PATCH -stable,5.4 02/26] netfilter: nftables: rename set element data activation/deactivation functions, Pablo Neira Ayuso
  • [PATCH -stable,5.4 16/26] netfilter: nf_tables: defer gc run if previous batch is still pending, Pablo Neira Ayuso
  • [PATCH -stable,5.4 14/26] netfilter: nf_tables: GC transaction race with abort path, Pablo Neira Ayuso
  • [PATCH -stable,5.4 12/26] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path, Pablo Neira Ayuso
  • [PATCH -stable,5.4 18/26] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention, Pablo Neira Ayuso
  • [PATCH -stable,5.4 24/26] netfilter: nf_tables: fix table flag updates, Pablo Neira Ayuso
  • [PATCH -stable,5.4 22/26] netfilter: nf_tables: double hook unregistration in netns path, Pablo Neira Ayuso
  • [PATCH -stable,5.4 17/26] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction, Pablo Neira Ayuso
  • [PATCH -stable,5.4 08/26] netfilter: nf_tables: GC transaction API to avoid race with control plane, Pablo Neira Ayuso
  • [PATCH -stable,5.4 06/26] netfilter: nft_set_rbtree: fix overlap expiration walk, Pablo Neira Ayuso
  • [PATCH -stable,5.4 04/26] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection, Pablo Neira Ayuso
  • [PATCH -stable,5.4 21/26] netfilter: nf_tables: unregister flowtable hooks on netns exit, Pablo Neira Ayuso
  • [PATCH -stable,5.4 20/26] netfilter: nf_tables: fix memleak when more than 255 elements expired, Pablo Neira Ayuso
  • [PATCH -stable,5.4 19/26] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration, Pablo Neira Ayuso
  • [PATCH -stable,5.4 13/26] netfilter: nf_tables: GC transaction race with netns dismantle, Pablo Neira Ayuso
  • [PATCH -stable,5.4 09/26] netfilter: nf_tables: adapt set backend to use GC transaction API, Pablo Neira Ayuso
  • [PATCH -stable,5.4 07/26] netfilter: nf_tables: don't skip expired elements during walk, Pablo Neira Ayuso
  • [PATCH -stable,5.4 26/26] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4), Pablo Neira Ayuso
• [PATCH nft v2 1/1] tests/shell: sanitize "handle" in JSON output, Thomas Haller
• [PATCH nft] tests: shell: quote reference to array to iterate over empty string, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: flowtable: reorder nf_flowtable struct members, Florian Westphal
• [PATCH nf-next] netfilter: nft_set_pipapo: prefer gfp_kernel allocation, Florian Westphal
• [PATCH nft] tests: shell: adjust add-after-delete flowtable for older kernels, Pablo Neira Ayuso
• [PATCH nft] tests: shell: skip meta time test meta expression lacks support, Florian Westphal
• [PATCH nft] tests: shell: skip maps delete test if dynset lacks delete op, Florian Westphal
• [PATCH nft] tests: shell: skip ct expectation test if feature is missing, Florian Westphal
• [PATCH libnetfilter_queue v4] src: Add nfq_nlmsg_put2() - user specifies header flags, Duncan Roe
  • Re: [PATCH libnetfilter_queue v4] src: Add nfq_nlmsg_put2() - user specifies header flags, Pablo Neira Ayuso
    • [PATCH libnetfilter_queue v5 0/1] src: Add nfq_nlmsg_put2() - user specifies header flags, Duncan Roe
    • [PATCH libnetfilter_queue v5 1/1] src: Add nfq_nlmsg_put2() - user specifies header flags, Duncan Roe
      • Re: [PATCH libnetfilter_queue v5 1/1] src: Add nfq_nlmsg_put2() - user specifies header flags, Pablo Neira Ayuso
• [PATCH nft] evaluate: fix rule replacement with anon sets, Florian Westphal
• [PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output, Thomas Haller
  • Re: [PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output, Phil Sutter
    • Re: [PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output, Thomas Haller
      • Re: [PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output, Phil Sutter
        • Re: [PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output, Thomas Haller
          • Re: [PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output, Phil Sutter
            • Re: [PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output, Thomas Haller
              • Re: [PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output, Phil Sutter
      • Re: [PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output, Pablo Neira Ayuso
        • Message not available
          • Re: [PATCH nft v3 1/1] tests/shell: sanitize "handle" in JSON output, Pablo Neira Ayuso
            • Re: [PATCH nft v3 1/1] tests/shell: sanitize "handle" in JSON output, Thomas Haller
              • Re: [PATCH nft v3 1/1] tests/shell: sanitize "handle" in JSON output, Pablo Neira Ayuso
                • Re: [PATCH nft v3 1/1] tests/shell: sanitize "handle" in JSON output, Thomas Haller
                  • Re: [PATCH nft v3 1/1] tests/shell: sanitize "handle" in JSON output, Pablo Neira Ayuso
• [PATCH net-next] net: ctnetlink: support filtering by zone, Felix Huettner
• [ANNOUNCE] Coreteam updates: Eric Leblond and Arturo Borrero enter emeritus status, Pablo Neira Ayuso
• [PATCH nft 5/4] tests: shell: skip sets/sets_with_ifnames if no pipapo backend is available, Pablo Neira Ayuso
• [PATCH nft 0/4] more tests/shell updates to run on 5.4 kernels, Pablo Neira Ayuso
  • [PATCH nft 1/4] tests: shell: skip if kernel does not support flowtable counter, Pablo Neira Ayuso
  • [PATCH nft 2/4] tests: shell: skip if kernel does not support flowtable with no devices, Pablo Neira Ayuso
  • [PATCH nft 4/4] tests: shell: restore pipapo and chain binding coverage in standalone 30s-stress, Pablo Neira Ayuso
  • [PATCH nft 3/4] tests: shell: skip pipapo set backend in transactions/30s-stress, Pablo Neira Ayuso
    • Re: [PATCH nft 3/4] tests: shell: skip pipapo set backend in transactions/30s-stress, Thomas Haller
      • Re: [PATCH nft 3/4] tests: shell: skip pipapo set backend in transactions/30s-stress, Pablo Neira Ayuso
• Re: [syzbot] [batman?] INFO: rcu detected stall in worker_thread (9), syzbot
• [RFC nf-next] netfilter: nf_tables: reject flowtable hw offload for same device, Florian Westphal
• [PATCH nft v3 0/6] add and check dump files for JSON in tests/shell, Thomas Haller
  • [PATCH nft v3 1/6] json: fix use after free in table_flags_json(), Thomas Haller
    • Re: [PATCH nft v3 1/6] json: fix use after free in table_flags_json(), Pablo Neira Ayuso
  • [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Thomas Haller
    • [PATCH nft v3 6/6] tools: check for consistency of .json-nft dumps in "check-tree.sh", Thomas Haller
    • [PATCH nft v3 4/6] tools: simplify error handling in "check-tree.sh" by adding msg_err()/msg_warn(), Thomas Haller
    • [PATCH nft v3 5/6] tools: check more strictly for bash shebang in "check-tree.sh", Thomas Haller
    • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Florian Westphal
      • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Pablo Neira Ayuso
        • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Florian Westphal
          • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Pablo Neira Ayuso
            • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Florian Westphal
              • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Pablo Neira Ayuso
                • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Florian Westphal
                  • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Pablo Neira Ayuso
          • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Pablo Neira Ayuso
            • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Florian Westphal
              • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Pablo Neira Ayuso
                • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Thomas Haller
                  • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Pablo Neira Ayuso
                    • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Thomas Haller
                      • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Thomas Haller
                    • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Florian Westphal
                      • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Florian Westphal
                      • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Pablo Neira Ayuso
                      • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Thomas Haller
                        • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Pablo Neira Ayuso
                          • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Thomas Haller
                          • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Phil Sutter
                            • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Thomas Haller
                              • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Phil Sutter
                                • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Thomas Haller
                                  • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Phil Sutter
        • Re: [PATCH nft v3 2/6] tests/shell: check and generate JSON dump files, Thomas Haller
• [PATCH nft,v2] src: expand create commands, Pablo Neira Ayuso
• [PATCH nf] netfilter: nf_tables: split async and sync catchall in two functions, Pablo Neira Ayuso
• [PATCH 0/1] ipset patch to fix race condition between swap/destroy and add/del/test, v3, Jozsef Kadlecsik
  • [PATCH 1/1] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, v2, Jozsef Kadlecsik
  • <Possible follow-ups>
  • [PATCH 0/1] ipset patch to fix race condition between swap/destroy and add/del/test, v3, Jozsef Kadlecsik
    • [PATCH 1/1] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, v3, Jozsef Kadlecsik
      • Re: [PATCH 1/1] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, v3, Florian Westphal
• [PATCH nf] netfilter: nf_tables: bogus ENOENT when destroying element which does not exist, Pablo Neira Ayuso