Netfilter-Devel Archive on lore.kernel.org
 help / color / Atom feed
[PATCH v4 0/2] Drop IPV6 packets if IPv6 is disabled on boot
 2019-09-03 16:56 UTC  (10+ messages) - mbox.gz / Atom
` [PATCH v4 1/2] netfilter: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled
` [PATCH v4 2/2] net: br_netfiler_hooks: Drops IPv6 packets if IPv6 module is not loaded

[PATCH net-next,v2 0/4] flow_offload: update mangle action representation
 2019-09-03 16:45 UTC  (5+ messages) - mbox.gz / Atom
` [PATCH net-next,v2 1/4] net: flow_offload: flip mangle action mask
` [PATCH net-next,v2 2/4] net: flow_offload: bitwise AND on mangle action value field
` [PATCH net-next,v2 3/4] net: flow_offload: mangle action at byte level
` [PATCH net-next,v2 4/4] netfilter: nft_payload: packet mangling offload support

[PATCH nf-next v3] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_cb
 2019-09-03  3:15 UTC  - mbox.gz / Atom

[PATCH 0/4 net-next] flow_offload: update mangle action representation
 2019-09-03  0:05 UTC  (12+ messages) - mbox.gz / Atom
` [PATCH net-next 1/4] net: flow_offload: flip mangle action mask
` [PATCH net-next 2/4] net: flow_offload: bitwise AND on mangle action value field
` [PATCH net-next 3/4] net: flow_offload: mangle action at byte level
` [PATCH net-next 4/4] netfilter: nft_payload: packet mangling offload support

[PATCH nf-next v2 00/30] Add config option checks to netfilter headers
 2019-09-02 23:06 UTC  (31+ messages) - mbox.gz / Atom
` [PATCH nf-next v2 01/30] netfilter: add include guard to nf_conntrack_h323_types.h
` [PATCH nf-next v2 02/30] netfilter: add include guard to nf_conntrack_labels.h
` [PATCH nf-next v2 03/30] netfilter: fix include guard comment
` [PATCH nf-next v2 04/30] netfilter: add GPL-2.0 SPDX ID's to a couple of headers
` [PATCH nf-next v2 05/30] netfilter: remove trailing white-space
` [PATCH nf-next v2 06/30] netfilter: fix Kconfig formatting error
` [PATCH nf-next v2 07/30] netfilter: remove stray semicolons
` [PATCH nf-next v2 08/30] netfilter: remove unused function declarations
` [PATCH nf-next v2 09/30] netfilter: remove unused includes
` [PATCH nf-next v2 10/30] netfilter: include the right header in nf_conntrack_zones.h
` [PATCH nf-next v2 11/30] netfilter: fix inclusions of <linux/netfilter/nf_nat.h>
` [PATCH nf-next v2 12/30] netfilter: added missing includes
` [PATCH nf-next v2 13/30] netfilter: inline three headers
` [PATCH nf-next v2 14/30] netfilter: remove superfluous header
` [PATCH nf-next v2 15/30] netfilter: move inline function to a more appropriate header
` [PATCH nf-next v2 16/30] netfilter: move code between synproxy headers
` [PATCH nf-next v2 17/30] netfilter: move struct definition function to a more appropriate header
` [PATCH nf-next v2 18/30] netfilter: use consistent style when defining inline functions in nf_conntrack_ecache.h
` [PATCH nf-next v2 19/30] netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENABLED(CONFIG...)
` [PATCH nf-next v2 20/30] netfilter: wrap union nf_conntrack_proto members in CONFIG_NF_CT_PROTO_* check
` [PATCH nf-next v2 21/30] netfilter: wrap inline synproxy function in CONFIG_NETFILTER_SYNPROXY check
` [PATCH nf-next v2 22/30] netfilter: wrap inline timeout function in CONFIG_NETFILTER_TIMEOUT check
` [PATCH nf-next v2 23/30] netfilter: wrap some nat-related conntrack code in a CONFIG_NF_NAT check
` [PATCH nf-next v2 24/30] netfilter: wrap some ipv6 tables code in a CONFIG_NF_TABLES_IPV6 check
` [PATCH nf-next v2 25/30] netfilter: wrap some conntrack code in a CONFIG_NF_CONNTRACK check
` [PATCH nf-next v2 26/30] netfilter: add CONFIG_NETFILTER check to linux/netfilter.h
` [PATCH nf-next v2 27/30] netfilter: add NF_TPROXY config option
` [PATCH nf-next v2 28/30] netfilter: add IP_SET_BITMAP "
` [PATCH nf-next v2 29/30] netfilter: add IP_SET_HASH "
` [PATCH nf-next v2 30/30] netfilter: wrap headers in CONFIG checks

[PATCH nf-next v2] netfilter: nft_socket: fix erroneous socket assignment
 2019-09-02 21:21 UTC  (2+ messages) - mbox.gz / Atom

[PATCH v5 1/1] net: br_netfiler_hooks: Drops IPv6 packets if IPv6 module is not loaded
 2019-09-02 21:20 UTC  (3+ messages) - mbox.gz / Atom

[PATCH nf-next v2] netfilter: nf_table_offload: Fix the incorrect rcu usage in nft_indr_block_get_and_ing_cmd
 2019-09-02 21:12 UTC  (3+ messages) - mbox.gz / Atom

[PATCH nf-next 1/2] netfilter: nf_tables_offload: move indirect flow_block callback logic to core
 2019-09-02 21:11 UTC  (2+ messages) - mbox.gz / Atom
` [PATCH nf-next 2/2] netfilter: nf_tables_offload: save one indent level in nft_indr_block_cb()

[PATCH nf 1/2] netfilter: ctnetlink: honor IPS_OFFLOAD flag
 2019-09-02 17:37 UTC  (2+ messages) - mbox.gz / Atom
` [PATCH nf 2/2] netfilter: nf_flow_table: set default timeout after successful insertion

[conntrack-tools PATCH] conntrack: Fix CIDR to mask conversion on Big Endian
 2019-09-02 16:44 UTC  - mbox.gz / Atom

[PATCH nf-next 00/29] Add config option checks to netfilter headers
 2019-09-02  6:38 UTC  (32+ messages) - mbox.gz / Atom
` [PATCH nf-next 01/29] netfilter: add include guard to nf_conntrack_h323_types.h
` [PATCH nf-next 02/29] netfilter: add include guard to nf_conntrack_labels.h
` [PATCH nf-next 03/29] netfilter: fix include guard comment
` [PATCH nf-next 04/29] netfilter: add GPL-2.0 SPDX ID's to a couple of headers
` [PATCH nf-next 05/29] netfilter: remove trailing white-space
` [PATCH nf-next 06/29] netfilter: fix Kconfig formatting error
` [PATCH nf-next 07/29] netfilter: remove stray semicolons
` [PATCH nf-next 08/29] netfilter: remove unused function declarations
` [PATCH nf-next 09/29] netfilter: remove unused includes
` [PATCH nf-next 10/29] netfilter: include the right header in nf_conntrack_zones.h
` [PATCH nf-next 11/29] netfilter: added missing includes
` [PATCH nf-next 12/29] netfilter: inline three headers
` [PATCH nf-next 13/29] netfilter: remove superfluous header
` [PATCH nf-next 14/29] netfilter: move inline function to a more appropriate header
` [PATCH nf-next 15/29] netfilter: move code between synproxy headers
` [PATCH nf-next 16/29] netfilter: move struct definition function to a more appropriate header
` [PATCH nf-next 17/29] netfilter: use consistent style when defining inline functions in nf_conntrack_ecache.h
` [PATCH nf-next 18/29] netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENABLED(CONFIG...)
` [PATCH nf-next 19/29] netfilter: wrap union nf_conntrack_proto members in CONFIG_NF_CT_PROTO_* check
` [PATCH nf-next 20/29] netfilter: wrap inline synproxy function in CONFIG_NETFILTER_SYNPROXY check
` [PATCH nf-next 21/29] netfilter: wrap inline timeout function in CONFIG_NETFILTER_TIMEOUT check
` [PATCH nf-next 22/29] netfilter: wrap some nat-related conntrack code in a CONFIG_NF_NAT check
` [PATCH nf-next 23/29] netfilter: wrap some ipv6 tables code in a CONFIG_NF_TABLES_IPV6 check
` [PATCH nf-next 24/29] netfilter: wrap some conntrack code in a CONFIG_NF_CONNTRACK check
` [PATCH nf-next 25/29] netfilter: add CONFIG_NETFILTER check to linux/netfilter.h
` [PATCH nf-next 26/29] netfilter: add NF_TPROXY config option
` [PATCH nf-next 27/29] netfilter: add IP_SET_BITMAP "
` [PATCH nf-next 28/29] netfilter: add IP_SET_HASH "
` [PATCH nf-next 29/29] netfilter: wrap headers in CONFIG checks

[PATCH nf-next 1/3] netfilter: nf_offload: Make nft_flow_offload_chain public
 2019-09-02  6:13 UTC  (2+ messages) - mbox.gz / Atom

[PATCH nf-next v5 0/2] netfilter: nf_tables_offload: support fwd_netdev offload
 2019-09-02  6:12 UTC  (3+ messages) - mbox.gz / Atom
` [PATCH nf-next v5 1/2] netfilter: nf_flow_offload: add net in offload_ctx

xtables addons build on 5.2.6 ends with error: 'struct shash_desc' has no member named 'flags'
 2019-09-01 17:04 UTC  (7+ messages) - mbox.gz / Atom
` [PATCH xtables-addons v2 0/2] Kernel API updates
  ` [PATCH xtables-addons v2 1/2] xt_pknock, xt_SYSRQ: don't set shash_desc::flags

[PATCH nf-next] netfilter: nft_socket: fix erroneous socket assignment
 2019-08-31 10:41 UTC  (3+ messages) - mbox.gz / Atom

[PATCH 0/5] Netfilter fixes for net
 2019-08-31  0:52 UTC  (7+ messages) - mbox.gz / Atom
` [PATCH 1/5] netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
` [PATCH 2/5] netfilter: nf_conntrack_ftp: Fix debug output
` [PATCH 3/5] netfilter: conntrack: make sysctls per-namespace again
` [PATCH 4/5] netfilter: nf_flow_table: clear skb tstamp before xmit
` [PATCH 5/5] netfilter: nft_meta_bridge: Fix get NFT_META_BRI_IIFVPROTO in network byteorder

[PATCH v2 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot
 2019-08-30 18:16 UTC  (17+ messages) - mbox.gz / Atom

[PATCH nf-next v7 0/8] netfilter: Support the bridge family in flow table
 2019-08-30 13:30 UTC  (11+ messages) - mbox.gz / Atom
` [PATCH nf-next v7 1/8] netfilter:nf_flow_table: Refactor flow_offload_tuple to destination
` [PATCH nf-next v7 2/8] netfilter:nf_flow_table_core: Separate inet operation to single function
` [PATCH nf-next v7 3/8] netfilter:nf_flow_table_ip: "
` [PATCH nf-next v7 4/8] bridge: add br_vlan_get_info_rcu()
` [PATCH nf-next v7 5/8] netfilter:nf_flow_table_core: Support bridge family flow offload
` [PATCH nf-next v7 6/8] netfilter:nf_flow_table_ip: "
` [PATCH nf-next v7 7/8] netfilter:nft_flow_offload: "
` [PATCH nf-next v7 8/8] netfilter: Support the bridge family in flow table

[PATCH nft v6] meta: add ibrpvid and ibrvproto support
 2019-08-30 11:31 UTC  (2+ messages) - mbox.gz / Atom

[PATCH] netfilter: reject: fix ICMP csum verification
 2019-08-30  9:21 UTC  (3+ messages) - mbox.gz / Atom

[PATCH nf] netfilter: nft_meta_bridge: Fix get NFT_META_BRI_IIFVPROTO in network byteorder
 2019-08-30  0:48 UTC  (2+ messages) - mbox.gz / Atom

[PATCH AUTOSEL 4.19 02/45] netfilter: nf_tables: use-after-free in failing rule with bound set
 2019-08-29 18:15 UTC  (2+ messages) - mbox.gz / Atom
` [PATCH AUTOSEL 4.19 11/45] netfilter: nft_flow_offload: skip tcp rst and fin packets

[PATCH AUTOSEL 5.2 04/76] netfilter: nf_flow_table: fix offload for flows that are subject to xfrm
 2019-08-29 18:12 UTC  (5+ messages) - mbox.gz / Atom
` [PATCH AUTOSEL 5.2 10/76] netfilter: nf_tables: use-after-free in failing rule with bound set
` [PATCH AUTOSEL 5.2 11/76] netfilter: nf_flow_table: conntrack picks up expired flows
` [PATCH AUTOSEL 5.2 12/76] netfilter: nf_flow_table: teardown flow timeout race
` [PATCH AUTOSEL 5.2 24/76] netfilter: nft_flow_offload: skip tcp rst and fin packets

[PATCH nf] netfilter: nf_flow_table: clear skb tstamp before xmit
 2019-08-29 14:38 UTC  (2+ messages) - mbox.gz / Atom

[PATCH nft 0/4] meta: introduce time/day/hour matching
 2019-08-29 14:09 UTC  (5+ messages) - mbox.gz / Atom
` [PATCH nft 1/4] evaluate: New internal helper __expr_evaluate_range
` [PATCH nft 2/4] meta: Introduce new conditions 'time', 'day' and 'hour'
` [PATCH nft 3/4] tests: add meta time test cases
` [PATCH nft 4/4] src: evaluate: catch invalid 'meta day' values in eval step

[PATCH nft] src: json: add support for element deletion
 2019-08-29 11:18 UTC  (2+ messages) - mbox.gz / Atom

[PATCH AUTOSEL 4.19 15/29] netfilter: nf_tables: use-after-free in failing rule with bound set
 2019-08-29 10:50 UTC  (3+ messages) - mbox.gz / Atom
` [PATCH AUTOSEL 4.19 21/29] netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too
` [PATCH AUTOSEL 4.19 22/29] netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets

[PATCH] netfilter: nf_conntrack_ftp: Fix debug output
 2019-08-28 12:13 UTC  (5+ messages) - mbox.gz / Atom

[PATCH v5 1/2] netfilter: Introduce new 64-bit helper functions
 2019-08-28 11:15 UTC  (7+ messages) - mbox.gz / Atom
` [PATCH v5 2/2] netfilter: nft_meta: support for time matching

[PATCH] bridge:fragmented packets dropped by bridge
 2019-08-28  9:21 UTC  (4+ messages) - mbox.gz / Atom

[PATCH nft v5] meta: add ibrpvid and ibrvproto support
 2019-08-28  8:30 UTC  (6+ messages) - mbox.gz / Atom

[PATCH nf] netfilter: conntrack: make sysctls per-namespace again
 2019-08-28  7:40 UTC  (4+ messages) - mbox.gz / Atom

Unable to create htb tc classes more than 64K
 2019-08-27 21:41 UTC  (13+ messages) - mbox.gz / Atom

[PATCH v3 1/1] netfilter: nf_tables: fib: Drop IPV6 packets if IPv6 is disabled on boot
 2019-08-27 18:57 UTC  - mbox.gz / Atom

[PATCH v2] netfilter: ipset: Fix an error code in ip_set_sockfn_get()
 2019-08-27 18:21 UTC  (2+ messages) - mbox.gz / Atom

[PATCH libnftnl v2 1/2] expr: meta: Make NFT_META_TIME_{NS,DAY,HOUR} known
 2019-08-27 16:09 UTC  (4+ messages) - mbox.gz / Atom
` [PATCH libnftnl v2 2/2] expr: meta: Make NFT_DYNSET_OP_DELETE known

[PATCH] netfilter: not mark a spinlock as __read_mostly
 2019-08-27 16:07 UTC  (2+ messages) - mbox.gz / Atom

[PATCH v4] netfilter: nft_dynset: support for element deletion
 2019-08-27 15:27 UTC  (2+ messages) - mbox.gz / Atom

[iptables PATCH 00/14] Implement among match support
 2019-08-27 12:47 UTC  (14+ messages) - mbox.gz / Atom
` [iptables PATCH 05/14] nft: Fetch sets when updating rule cache
` [iptables PATCH 11/14] nft: Bore up nft_parse_payload()
` [iptables PATCH 14/14] nft: bridge: Rudimental among extension support

[PATCH] netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
 2019-08-27 11:00 UTC  (2+ messages) - mbox.gz / Atom

[PATCH 1/1] netfilter: nf_tables: fib: Drop IPV6 packages if IPv6 is disabled on boot
 2019-08-26 16:47 UTC  (5+ messages) - mbox.gz / Atom

page:   latest

Netfilter-Devel Archive on lore.kernel.org

Archives are clonable:
	git clone --mirror https://lore.kernel.org/netfilter-devel/0 netfilter-devel/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 netfilter-devel netfilter-devel/ https://lore.kernel.org/netfilter-devel \
		netfilter-devel@vger.kernel.org netfilter-devel@archiver.kernel.org
	public-inbox-index netfilter-devel


Newsgroup available over NNTP:
	nntp://nntp.lore.kernel.org/org.kernel.vger.netfilter-devel


AGPL code for this site: git clone https://public-inbox.org/ public-inbox