Linux Netfilter / IP Tables Devel
[Prev Page][Next Page]
- [nft PATCH 2/2] main: Refer to nft_options in nft_options_check(), (continued)
- [PATCH nft] initial support for the afl++ (american fuzzy lop++) fuzzer,
Florian Westphal
- [PATCH nf] netfilter: nft_set_pipapo: skip inactive elements during set walk, Florian Westphal
- [PATCH nft] evaluate: prevent assert when evaluating very large shift values, Florian Westphal
- [PATCH nft] evaluate: reject sets with no key, Florian Westphal
- [PATCH net] net/netfilter: bpf: fix bad registration on nf_defrag,
D. Wythe
- [iptables PATCH 00/13] ebtables: Use the shared commandline parser,
Phil Sutter
- [iptables PATCH 07/13] ebtables{,-translate}: Convert if-clause to switch(), Phil Sutter
- [iptables PATCH 02/13] xshared: Perform protocol value parsing in callback, Phil Sutter
- [iptables PATCH 10/13] ebtables: Make 'h' case just a call to print_help(), Phil Sutter
- [iptables PATCH 09/13] ebtables: Pass struct iptables_command_state to print_help(), Phil Sutter
- [iptables PATCH 06/13] xshared: Support for ebtables' --change-counters command, Phil Sutter
- [iptables PATCH 04/13] xshared: Introduce print_help callback (again), Phil Sutter
- [iptables PATCH 12/13] xshared: Introduce option_test_and_reject(), Phil Sutter
- [iptables PATCH 05/13] xshared: Support rule range deletion in do_parse(), Phil Sutter
- [iptables PATCH 11/13] ebtables: Use struct xt_cmd_parse, Phil Sutter
- [iptables PATCH 03/13] xshared: Turn command_default() into a callback, Phil Sutter
- [iptables PATCH 08/13] ebtables: Change option values to avoid clashes, Phil Sutter
- [iptables PATCH 01/13] xshared: do_parse: Skip option checking for CMD_DELETE_NUM, Phil Sutter
- [iptables PATCH 13/13] ebtables: Use do_parse() from xshared, Phil Sutter
- Re: [iptables PATCH 00/13] ebtables: Use the shared commandline parser, Phil Sutter
- [PATCH net] net/netfilter: bpf: avoid leakage of skb,
D. Wythe
- [iptables PATCH 0/2] libxtables: Fix two xtoptions bugs,
Phil Sutter
- [iptables PATCH] man: Do not escape exclamation marks,
Phil Sutter
- ipset hash:net,iface - can not add more than 64 interfaces,
Марк Коренберг
[PATCH nft 0/2] tests/shell: workaround for bash,
Thomas Haller
Re: [PATCH net-next v2] net: ctnetlink: support filtering by zone,
Pablo Neira Ayuso
<Possible follow-ups>
Re: [PATCH net-next v2] net: ctnetlink: support filtering by zone, Pablo Neira Ayuso
[PATCH nf-next] netfilter: nf_tables: mark newset as dead on transaction abort,
Florian Westphal
[PATCH libnetfilter_queue v3 0/1] New example program nfq6,
Duncan Roe
[PATCH] man: proper roff encoding for ~ and ^,
Jan Engelhardt
[PATCH] man: proper roff encoding for ^, Jan Engelhardt
[PATCH 5.4 154/159] netfilter: nf_tables: unregister flowtable hooks on netns exit, Greg Kroah-Hartman
[PATCH 5.4 145/159] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path, Greg Kroah-Hartman
[PATCH 5.4 153/159] netfilter: nf_tables: fix memleak when more than 255 elements expired, Greg Kroah-Hartman
[PATCH 5.4 152/159] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration, Greg Kroah-Hartman
[PATCH 5.4 151/159] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention, Greg Kroah-Hartman
[PATCH 5.4 150/159] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction, Greg Kroah-Hartman
[PATCH 5.4 149/159] netfilter: nf_tables: defer gc run if previous batch is still pending, Greg Kroah-Hartman
[PATCH 5.4 148/159] netfilter: nf_tables: use correct lock to protect gc_list, Greg Kroah-Hartman
[PATCH 5.4 147/159] netfilter: nf_tables: GC transaction race with abort path, Greg Kroah-Hartman
[PATCH 5.4 159/159] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4), Greg Kroah-Hartman
[PATCH 5.4 158/159] netfilter: nf_tables: disable toggling dormant table state more than once, Greg Kroah-Hartman
[PATCH 5.4 157/159] netfilter: nf_tables: fix table flag updates, Greg Kroah-Hartman
[PATCH 5.4 156/159] netfilter: nftables: update table flags from the commit phase, Greg Kroah-Hartman
[PATCH 5.4 155/159] netfilter: nf_tables: double hook unregistration in netns path, Greg Kroah-Hartman
[PATCH 5.4 146/159] netfilter: nf_tables: GC transaction race with netns dismantle, Greg Kroah-Hartman
[PATCH 5.4 144/159] netfilter: nf_tables: remove busy mark and gc batch API, Greg Kroah-Hartman
[PATCH 5.4 143/159] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Greg Kroah-Hartman
[PATCH 5.4 141/159] netfilter: nf_tables: GC transaction API to avoid race with control plane, Greg Kroah-Hartman
[PATCH 5.4 142/159] netfilter: nf_tables: adapt set backend to use GC transaction API, Greg Kroah-Hartman
[PATCH 5.4 139/159] netfilter: nft_set_rbtree: fix overlap expiration walk, Greg Kroah-Hartman
[PATCH 5.4 140/159] netfilter: nf_tables: dont skip expired elements during walk, Greg Kroah-Hartman
[PATCH 5.4 138/159] netfilter: nft_set_rbtree: fix null deref on element insertion, Greg Kroah-Hartman
[PATCH 5.4 137/159] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection, Greg Kroah-Hartman
[PATCH 5.4 136/159] netfilter: nf_tables: drop map element references from preparation phase, Greg Kroah-Hartman
[PATCH 5.4 135/159] netfilter: nftables: rename set element data activation/deactivation functions, Greg Kroah-Hartman
[PATCH 5.4 134/159] netfilter: nf_tables: pass context to nft_set_destroy(), Greg Kroah-Hartman
[PATCH 5.10 193/193] netfilter: nf_tables: disable toggling dormant table state more than once, Greg Kroah-Hartman
[PATCH 5.10 192/193] netfilter: nf_tables: fix table flag updates, Greg Kroah-Hartman
[PATCH 5.10 191/193] netfilter: nftables: update table flags from the commit phase, Greg Kroah-Hartman
[PATCH nft 0/2] pretty print .json-nft files,
Thomas Haller
[iptables PATCH 0/3] Review interface parsing and printing,
Phil Sutter
[iptables PATCH 0/3] xshared: Review option parsing,
Phil Sutter
[nft PATCH] tests/shell: Treat json-nft dumps as binary in git,
Phil Sutter
[PATCH] net: make config lines follow common pattern,
Lukas Bulwahn
[PATCH nft] json: deal appropriately with multidevice in chain, Pablo Neira Ayuso
PSA: this list has moved to new vger infra (no action required), Konstantin Ryabitsev
[iptables PATCH 0/6] Extend guided option parser for use by arptables,
Phil Sutter
[PATCH nft] evaluate: clone unary expression datatype to deal with dynamic datatype, Pablo Neira Ayuso
[PATCH nft 1/1] tests/shell: accept name of dump files in place of test names,
Thomas Haller
[PATCH AUTOSEL 4.19 2/6] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
[PATCH AUTOSEL 5.4 2/6] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
[PATCH AUTOSEL 5.10 3/7] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
[PATCH AUTOSEL 5.15 3/7] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
[PATCH AUTOSEL 6.1 4/9] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
[PATCH AUTOSEL 6.5 05/15] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
[PATCH AUTOSEL 6.6 06/17] netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test, Sasha Levin
[iptables PATCH 00/12] Misc fixes (more or less),
Phil Sutter
- [iptables PATCH 10/12] ebtables: Align line number formatting with legacy, Phil Sutter
- [iptables PATCH 06/12] xshared: Drop pointless CMD_REPLACE check, Phil Sutter
- [iptables PATCH 09/12] ebtables: Make ebt_load_match_extensions() static, Phil Sutter
- [iptables PATCH 08/12] ebtables: Drop append_entry() wrapper, Phil Sutter
- [iptables PATCH 07/12] tests: xlate: Print failing command line, Phil Sutter
- [iptables PATCH 05/12] xshared: Drop needless assignment in --help case, Phil Sutter
- [iptables PATCH 01/12] Makefile: Install arptables-translate link and man page, Phil Sutter
- [iptables PATCH 03/12] xshared: struct xt_cmd_parse::xlate is unused, Phil Sutter
- [iptables PATCH 04/12] xshared: All variants support -v, Phil Sutter
- [iptables PATCH 02/12] nft-bridge: nft_bridge_add() uses wrong flags, Phil Sutter
- [iptables PATCH 11/12] xshared: do_parse: Ignore '-j CONTINUE', Phil Sutter
- [iptables PATCH 12/12] ebtables: Implement --change-counters command, Phil Sutter
- Re: [iptables PATCH 00/12] Misc fixes (more or less), Phil Sutter
[PATCH nft 1/1] tests: prettify JSON in test output and add helper,
Thomas Haller
[PATCH nft 1/8] tests: shell: connlimit tests requires set expression support,
Pablo Neira Ayuso
[PATCH nft] evaluate: bogus error when adding devices to flowtable, Pablo Neira Ayuso
[PATCH v6 05/13] x86/bugs: Rename RETPOLINE to MITIGATION_RETPOLINE,
Breno Leitao
[PATCH nft] tests: shell: flush connlimit sets, Pablo Neira Ayuso
[PATCH nf-next 0/8] netfilter: make nf_flowtable lifetime differ from container struct,
Florian Westphal
[PATCH 6.6.y 0/2] netfilter: fix catchall element double-free,
Florian Westphal
[PATCH -stable,5.4 00/26] Netfilter stable fixes for 5.4,
Pablo Neira Ayuso
- [PATCH -stable,5.4 01/26] netfilter: nf_tables: pass context to nft_set_destroy(), Pablo Neira Ayuso
- [PATCH -stable,5.4 23/26] netfilter: nftables: update table flags from the commit phase, Pablo Neira Ayuso
- [PATCH -stable,5.4 11/26] netfilter: nf_tables: remove busy mark and gc batch API, Pablo Neira Ayuso
- [PATCH -stable,5.4 03/26] netfilter: nf_tables: drop map element references from preparation phase, Pablo Neira Ayuso
- [PATCH -stable,5.4 05/26] netfilter: nft_set_rbtree: fix null deref on element insertion, Pablo Neira Ayuso
- [PATCH -stable,5.4 10/26] netfilter: nft_set_hash: mark set element as dead when deleting from packet path, Pablo Neira Ayuso
- [PATCH -stable,5.4 25/26] netfilter: nf_tables: disable toggling dormant table state more than once, Pablo Neira Ayuso
- [PATCH -stable,5.4 15/26] netfilter: nf_tables: use correct lock to protect gc_list, Pablo Neira Ayuso
- [PATCH -stable,5.4 02/26] netfilter: nftables: rename set element data activation/deactivation functions, Pablo Neira Ayuso
- [PATCH -stable,5.4 16/26] netfilter: nf_tables: defer gc run if previous batch is still pending, Pablo Neira Ayuso
- [PATCH -stable,5.4 14/26] netfilter: nf_tables: GC transaction race with abort path, Pablo Neira Ayuso
- [PATCH -stable,5.4 12/26] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path, Pablo Neira Ayuso
- [PATCH -stable,5.4 18/26] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention, Pablo Neira Ayuso
- [PATCH -stable,5.4 24/26] netfilter: nf_tables: fix table flag updates, Pablo Neira Ayuso
- [PATCH -stable,5.4 22/26] netfilter: nf_tables: double hook unregistration in netns path, Pablo Neira Ayuso
- [PATCH -stable,5.4 17/26] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction, Pablo Neira Ayuso
- [PATCH -stable,5.4 08/26] netfilter: nf_tables: GC transaction API to avoid race with control plane, Pablo Neira Ayuso
- [PATCH -stable,5.4 06/26] netfilter: nft_set_rbtree: fix overlap expiration walk, Pablo Neira Ayuso
- [PATCH -stable,5.4 04/26] netfilter: nft_set_rbtree: Switch to node list walk for overlap detection, Pablo Neira Ayuso
- [PATCH -stable,5.4 21/26] netfilter: nf_tables: unregister flowtable hooks on netns exit, Pablo Neira Ayuso
- [PATCH -stable,5.4 20/26] netfilter: nf_tables: fix memleak when more than 255 elements expired, Pablo Neira Ayuso
- [PATCH -stable,5.4 19/26] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration, Pablo Neira Ayuso
- [PATCH -stable,5.4 13/26] netfilter: nf_tables: GC transaction race with netns dismantle, Pablo Neira Ayuso
- [PATCH -stable,5.4 09/26] netfilter: nf_tables: adapt set backend to use GC transaction API, Pablo Neira Ayuso
- [PATCH -stable,5.4 07/26] netfilter: nf_tables: don't skip expired elements during walk, Pablo Neira Ayuso
- [PATCH -stable,5.4 26/26] netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4), Pablo Neira Ayuso
[PATCH nft v2 1/1] tests/shell: sanitize "handle" in JSON output, Thomas Haller
[PATCH nft] tests: shell: quote reference to array to iterate over empty string, Pablo Neira Ayuso
[PATCH nf-next] netfilter: flowtable: reorder nf_flowtable struct members, Florian Westphal
[PATCH nf-next] netfilter: nft_set_pipapo: prefer gfp_kernel allocation, Florian Westphal
[PATCH nft] tests: shell: adjust add-after-delete flowtable for older kernels, Pablo Neira Ayuso
[PATCH nft] tests: shell: skip meta time test meta expression lacks support, Florian Westphal
[PATCH nft] tests: shell: skip maps delete test if dynset lacks delete op, Florian Westphal
[PATCH nft] tests: shell: skip ct expectation test if feature is missing, Florian Westphal
[PATCH libnetfilter_queue v4] src: Add nfq_nlmsg_put2() - user specifies header flags,
Duncan Roe
[PATCH nft] evaluate: fix rule replacement with anon sets, Florian Westphal
[PATCH nft 1/1] tests/shell: sanitize "handle" in JSON output,
Thomas Haller
[PATCH net-next] net: ctnetlink: support filtering by zone, Felix Huettner
[ANNOUNCE] Coreteam updates: Eric Leblond and Arturo Borrero enter emeritus status, Pablo Neira Ayuso
[PATCH nft 5/4] tests: shell: skip sets/sets_with_ifnames if no pipapo backend is available, Pablo Neira Ayuso
[PATCH nft 0/4] more tests/shell updates to run on 5.4 kernels,
Pablo Neira Ayuso
Re: [syzbot] [batman?] INFO: rcu detected stall in worker_thread (9), syzbot
[RFC nf-next] netfilter: nf_tables: reject flowtable hw offload for same device, Florian Westphal
[PATCH nft v3 0/6] add and check dump files for JSON in tests/shell,
Thomas Haller
[PATCH nft,v2] src: expand create commands, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: split async and sync catchall in two functions, Pablo Neira Ayuso
[PATCH 0/1] ipset patch to fix race condition between swap/destroy and add/del/test, v3,
Jozsef Kadlecsik
[PATCH nf] netfilter: nf_tables: bogus ENOENT when destroying element which does not exist, Pablo Neira Ayuso
[PATCH nft] src: expand create commands, Pablo Neira Ayuso
[PATCH nft,v2 01/11] tests: shell: skip pipapo tests if kernel lacks support,
Pablo Neira Ayuso
- [PATCH nft,v2 06/11] tests: shell: skip multidevice chain tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft,v2 03/11] tests: shell: skip stateful expression in sets tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft,v2 02/11] tests: shell: skip prerouting reject tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft,v2 04/11] tests: shell: skip NAT netmap tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft,v2 05/11] tests: shell: skip comment tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft,v2 07/11] tests: shell: skip if kernel does not support bitshift, Pablo Neira Ayuso
- [PATCH nft,v2 10/11] tests: shell: split single element in anonymous set, Pablo Neira Ayuso
- [PATCH nft,v2 08/11] tests: shell: split set NAT interval test, Pablo Neira Ayuso
- [PATCH nft,v2 09/11] tests: shell: split map test, Pablo Neira Ayuso
- [PATCH nft,v2 11/11] tests: shell: split merge nat optimization in two tests, Pablo Neira Ayuso
ebtables documentation updates,
Jan Engelhardt
iptables manpage updates,
Jan Engelhardt
libnfnetlink dependency elimination,
Duncan Roe
[PATCH libnetfilter_queue] utils: Add example of setting socket buffer size,
Duncan Roe
[PATCH nft 1/3] parser: don't mark "string" as const,
Thomas Haller
[PATCH nft 00/12] update tests/shell for 5.4 kernels,
Pablo Neira Ayuso
- [PATCH nft 02/12] tests: shell: skip pipapo tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft 03/12] tests: shell: skip prerouting reject tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft 01/12] tests: shell: export DIFF to use it from feature scripts, Pablo Neira Ayuso
- [PATCH nft 06/12] tests: shell: skip comment tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft 08/12] tests: shell: skip if kernel does not support bitshift, Pablo Neira Ayuso
- [PATCH nft 04/12] tests: shell: skip stateful expression in sets tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft 12/12] tests: shell: split merge nat optimization in two tests, Pablo Neira Ayuso
- [PATCH nft 05/12] tests: shell: skip NAT netmap tests if kernel lacks support, Pablo Neira Ayuso
- [PATCH nft 09/12] tests: shell: split set NAT interval test, Pablo Neira Ayuso
- [PATCH nft 10/12] tests: shell: split map test, Pablo Neira Ayuso
- [PATCH nft 11/12] tests: shell: split single element in anonymous set, Pablo Neira Ayuso
- [PATCH nft 07/12] tests: shell: skip multidevice chain tests if kernel lacks support, Pablo Neira Ayuso
- Re: [PATCH nft 00/12] update tests/shell for 5.4 kernels, Florian Westphal
[nf-next PATCH v4 0/3] Add locking for NFT_MSG_GETSETELEM_RESET,
Phil Sutter
[PATCH nft 1/2] utils: add memory_allocation_check() helper,
Thomas Haller
[PATCH nft] netlink: fix buffer size for user data in netlink_delinearize_chain(),
Thomas Haller
[PATCH nf] netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses, Florian Westphal
[iptables PATCH 1/3] arptables: Fix formatting of numeric --h-type output,
Phil Sutter
[iptables PATCH] ebtables: Fix corner-case noflush restore bug,
Phil Sutter
[PATCH v2 iptables 0/4] xtables-nft: add arptranslate support,
Florian Westphal
[PATCH nf] ipvs: add missing module descriptions,
Florian Westphal
[PATCH nft,v2 1/2] evaluate: reset statement length context only for set mappings,
Pablo Neira Ayuso
[PATCH nf,v4] netfilter: nf_tables: remove catchall element in GC sync path, Pablo Neira Ayuso
[PATCH nf,v3] netfilter: nf_tables: remove catchall element in GC sync path,
Pablo Neira Ayuso
[PATCH nf,v2] netfilter: nf_tables: remove catchall element in GC sync path, Pablo Neira Ayuso
[PATCH nf] netfilter: nf_tables: remove catchall element in GC sync path, Pablo Neira Ayuso
[PATCH nft] evaluate: place byteorder conversion before rshift in payload expressions, Pablo Neira Ayuso
[PATCH net v2] netfilter: xt_recent: fix (increase) ipv6 literal buffer length,
Maciej Żenczykowski
[PATCH nft] evaluate: reset statement length context only for set mappings, Pablo Neira Ayuso
[PATCH nft v2 0/5] add infrastructure for unit tests,
Thomas Haller
[PATCH libmnl v2] nlmsg: fix false positives when validating buffer sizes,
Jeremy Sowden
[PATCH net] net: xt_recent: fix (increase) ipv6 literal buffer length,
Maciej Żenczykowski
[PATCH nf] netfilter: add missing module descriptions, Florian Westphal
[PATCH 0/1] ipset patch to fix race condition between swap/destroy and add/del/test, v2,
Jozsef Kadlecsik
[PATCH] netfilter: nat: add MODULE_DESCRIPTION,
Randy Dunlap
[PATCH nft v2 0/6] add and check dump files for JSON in tests/shell,
Thomas Haller
Re: [PATCH nft v2 0/6] add and check dump files for JSON in tests/shell, Pablo Neira Ayuso
[PATCH nft v3 0/2] drop warning messages from stmt_print_json()/expr_print_json(),
Thomas Haller
[PATCH nft 0/6] add infrastructure for unit tests,
Thomas Haller
- [PATCH nft 4/6] build: add check for consistency of source tree, Thomas Haller
- [PATCH nft 1/6] gitignore: ignore build artifacts from top level file, Thomas Haller
- [PATCH nft 5/6] build: cleanup if blocks for conditional compilation, Thomas Haller
- [PATCH nft 2/6] build: add basic "check-{local,more,all}" and "build-all" make targets, Thomas Haller
- [PATCH nft 3/6] build: add `make check-tests-build` to add build test, Thomas Haller
- [PATCH nft 6/6] tests/unit: add unit tests for libnftables, Thomas Haller
- Re: [PATCH nft 0/6] add infrastructure for unit tests, Pablo Neira Ayuso
- Re: [PATCH nft 0/6] add infrastructure for unit tests, Florian Westphal
Re: net/netfilter/nft_set_rbtree.c:636:33: warning: variable 'nft_net' set but not used, Pablo Neira Ayuso
[PATCH iptables 0/4] add arptables-translate,
Florian Westphal
[PATCH net] netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval(),
Dan Carpenter
[nft PATCH v2] tests: shell: Fix sets/reset_command_0 for current kernels,
Phil Sutter
[nft PATCH] tests: shell: Fix sets/reset_command_0 for current kernels,
Phil Sutter
[nf-next PATCH v3] netfilter: nf_tables: Add locking for NFT_MSG_GETSETELEM_RESET requests,
Phil Sutter
[nft PATCH] tproxy: Drop artificial port printing restriction,
Phil Sutter
[PATCH nft] tests: meta: test hour decoding wrap,
Florian Westphal
[PATCH nft] meta: fix hour decoding when timezone offset is negative, Florian Westphal
[GIT PULL] Landlock updates for v6.7,
Mickaël Salaün
[PATCH nft 1/2] json: implement json() hook for "symbol_expr_ops"/"variabl_expr_ops",
Thomas Haller
[PATCH nft 1/1] tests/shell: fix mount command in "test-wrapper.sh",
Thomas Haller
[PATCH] netfilter: bridge: initialize err to 0,
xiaolinkui
[PATCH net-next] netfilter: nf_tables: Remove unused variable nft_net,
Yang Li
[PATCH nft 0/7] add and check dump files for JSON in tests/shell,
Thomas Haller
[PATCH AUTOSEL 4.19 05/12] netfilter: nfnetlink_log: silence bogus compiler warning, Sasha Levin
[PATCH AUTOSEL 5.15 17/28] netfilter: nfnetlink_log: silence bogus compiler warning, Sasha Levin
[PATCH AUTOSEL 5.4 06/13] netfilter: nfnetlink_log: silence bogus compiler warning, Sasha Levin
[PATCH AUTOSEL 5.10 07/16] netfilter: nfnetlink_log: silence bogus compiler warning, Sasha Levin
[PATCH AUTOSEL 4.14 05/11] netfilter: nfnetlink_log: silence bogus compiler warning, Sasha Levin
[PATCH AUTOSEL 6.1 35/39] netfilter: nf_tables: audit log object reset once per table, Sasha Levin
[PATCH AUTOSEL 6.1 18/39] netfilter: nfnetlink_log: silence bogus compiler warning, Sasha Levin
[PATCH AUTOSEL 6.5 47/52] netfilter: nf_tables: audit log object reset once per table, Sasha Levin
[PATCH AUTOSEL 6.5 24/52] netfilter: nfnetlink_log: silence bogus compiler warning, Sasha Levin
Re: [RFC Draft PATCHv2 net-next] Doc: update bridge doc,
Florian Westphal
[PATCH net-next 0/4] net: fill in 18 MODULE_DESCRIPTION()s, Jakub Kicinski
[PATCH 01/10] man: display number ranges with an en dash,
Jan Engelhardt
[PATCH v14 00/12] Network support for Landlock,
Konstantin Meskhidze
- [PATCH v14 01/12] landlock: Make ruleset's access masks more generic, Konstantin Meskhidze
- [PATCH v14 02/12] landlock: Allow FS topology changes for domains without such rule type, Konstantin Meskhidze
- [PATCH v14 03/12] landlock: Refactor landlock_find_rule/insert_rule, Konstantin Meskhidze
- [PATCH v14 04/12] landlock: Refactor merge/inherit_ruleset functions, Konstantin Meskhidze
- [PATCH v14 05/12] landlock: Move and rename layer helpers, Konstantin Meskhidze
- [PATCH v14 06/12] landlock: Refactor layer helpers, Konstantin Meskhidze
- [PATCH v14 07/12] landlock: Refactor landlock_add_rule() syscall, Konstantin Meskhidze
- [PATCH v14 08/12] landlock: Add network rules and TCP hooks support, Konstantin Meskhidze
- [PATCH v14 09/12] selftests/landlock: Share enforce_ruleset(), Konstantin Meskhidze
- [PATCH v14 11/12] samples/landlock: Support TCP restrictions, Konstantin Meskhidze
- [PATCH v14 10/12] selftests/landlock: Add network tests, Konstantin Meskhidze
- [PATCH v14 12/12] landlock: Document network support, Konstantin Meskhidze
- Re: [PATCH v14 00/12] Network support for Landlock, Mickaël Salaün
- [PATCH] selftests/landlock: Add tests for FS topology changes with network rules, Mickaël Salaün
[nf-next PATCH v3 0/3] Add locking for NFT_MSG_GETOBJ_RESET requests,
Phil Sutter
[PATCH nft] evaluate: reject set in concatenation, Pablo Neira Ayuso
[PATCH nf] sched: act_ct: additional checks for outdated flows,
Pablo Neira Ayuso
[PATCH nf] netfilter: nf_flow_table: GC pushes back packets to classic path,
Pablo Neira Ayuso
[PATCH net] netfilter: flowtable: additional checks for outdated flows,
Vlad Buslov
[PATCH 1/6] man: encode minushyphen the way groff/man requires it,
Jan Engelhardt
[nf-next PATCH] netfilter: nf_tables: Carry reset boolean in nft_set_dump_ctx, Phil Sutter
[iptables PATCH 0/2] Fix up string match man page,
Phil Sutter
[PATCH nft] check-tree.sh: check and flag /bin/sh usage,
Florian Westphal
[PATCH nft v2 0/4] [RESENT] remove xfree() and add free_const()+nft_gmp_free(),
Thomas Haller
[Index of Archives]
[LARTC]
[Berkeley Packet Filter]
[Bugtraq]
[Yosemite Discussion]