netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2019-09-08 14:19:32 to 2019-09-19 01:24:28 UTC [more...]

[PATCH ghak90 V7 00/21] audit: implement container identifier
 2019-09-19  1:22 UTC  (6+ messages)
` [PATCH ghak90 V7 01/21] audit: collect audit task parameters
` [PATCH ghak90 V7 02/21] audit: add container id
` [PATCH ghak90 V7 03/21] audit: read container ID of a process
` [PATCH ghak90 V7 04/21] audit: convert to contid list to check for orch/engine ownership
` [PATCH ghak90 V7 05/21] audit: log drop of contid on exit of last task

What is 'dynamic' set flag supposed to mean?
 2019-09-18 14:42 UTC  (3+ messages)

[PATCH nf-next v6 0/8] netfilter: nf_tables_offload: support tunnel offload
 2019-09-18  8:02 UTC  (10+ messages)
` [PATCH nf-next v6 1/8] netfilter: nft_tunnel: add nft_tunnel_mode_validate function
` [PATCH nf-next v6 2/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP_SRC/DST match
` [PATCH nf-next v6 3/8] netfilter: nft_tunnel: add ipv6 check in nft_tunnel_mode_validate
` [PATCH nf-next v6 4/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP6_SRC/DST match
` [PATCH nf-next v6 5/8] netfilter: nft_tunnel: support tunnel meta match offload
` [PATCH nf-next v6 6/8] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action
` [PATCH nf-next v6 7/8] netfilter: nft_objref: add nft_objref_type offload
` [PATCH nf-next v6 8/8] netfilter: nft_tunnel: support nft_tunnel_obj offload

icmp_hdr is wrong on CentOS 6 kernels (2.6.32-754.12.1)
 2019-09-18  2:53 UTC 

[PATCH] extensions: fix iptables-{nft,translate} with conntrack EXPECTED
 2019-09-17 18:36 UTC 

[PATCH] netfilter: bridge: drop a broken include
 2019-09-17 14:59 UTC  (5+ messages)

[iptables PATCH 00/14] Improve iptables-nft performance with large rulesets
 2019-09-17 14:08 UTC  (18+ messages)
` [iptables PATCH 01/14] tests/shell: Make ebtables-basic test more verbose
` [iptables PATCH 02/14] tests/shell: Speed up ipt-restore/0004-restore-race_0
` [iptables PATCH 03/14] DEBUG: Print to stderr to not disturb iptables-save
` [iptables PATCH 04/14] nft: Use nftnl_*_set_str() functions
` [iptables PATCH 05/14] nft: Introduce nft_bridge_commit()
` [iptables PATCH 06/14] nft: Fix for add and delete of same rule in single batch
` [iptables PATCH 07/14] nft Increase mnl_talk() receive buffer size
` [iptables PATCH 08/14] xtables-restore: Avoid cache population when flushing
` [iptables PATCH 09/14] nft: Rename have_cache into have_chain_cache
` [iptables PATCH 10/14] nft: Fetch rule cache only if needed
` [iptables PATCH 11/14] nft: Allow to fetch only a specific chain from kernel
` [iptables PATCH 12/14] nft: Support fetching rules for a single chain only
` [iptables PATCH 13/14] nft: Optimize flushing all chains of a table
` [iptables PATCH 14/14] nft: Reduce impact of nft_chain_builtin_init()

[PATCH nf 1/2] netfilter: nf_tables: add NFT_CHAIN_POLICY_UNSET and use it
 2019-09-16 16:33 UTC  (2+ messages)
` [PATCH nf 2/2] netfilter: nf_tables_offload: fix always true policy is unset check

[PATCH nft] src: parser_json: fix crash while restoring secmark object
 2019-09-16 14:11 UTC  (2+ messages)

Feature request: Add support for linenoise as alternative to readline
 2019-09-16 12:42 UTC  (6+ messages)
` [PATCH RFC nftables 0/4] Add Linenoise support to the CLI
  ` [PATCH RFC nftables 1/4] configure: remove unused AC_SUBST macros
  ` [PATCH RFC nftables 2/4] cli: remove unused declaration
  ` [PATCH RFC nftables 3/4] cli: add upstream linenoise source
  ` [PATCH RFC nftables 4/4] cli: add linenoise CLI implementation

[PATCH nft v2] src: parser_json: fix crash while restoring secmark object
 2019-09-16 10:24 UTC 

[PATCH] nftables: don't crash in 'list ruleset' if policy is not set
 2019-09-16  7:52 UTC  (3+ messages)

[PATCH nft] json: tests: fix typo in ct expectation json test
 2019-09-15 19:07 UTC  (2+ messages)

[nf-next:master 7/27] net/netfilter/nf_tables_offload.c:316 nft_flow_offload_chain() warn: always true condition '(policy != -1) => (0-255 != (-1))'
 2019-09-15 16:04 UTC 

[iptables PATCH] iptables-test: Support testing host binaries
 2019-09-14  8:30 UTC  (2+ messages)

[PATCH] src: Enable doxygen to generate Function Documentation
 2019-09-14  3:25 UTC  (2+ messages)

[nft PATCH v2] parser_bison: Fix 'exists' keyword on Big Endian
 2019-09-13 22:35 UTC  (4+ messages)

[PATCH nft] json: fix type mismatch on "ct expect" json exporting
 2019-09-13 19:06 UTC  (3+ messages)

[nft PATCH] parser_bison: Fix 'exists' keyword on Big Endian
 2019-09-13 18:35 UTC  (3+ messages)

[PATCH] netfilter: trivial: remove extraneous space from message
 2019-09-13 13:43 UTC  (2+ messages)

[PATCH 00/27] Netfilter updates for net-next
 2019-09-13 13:40 UTC  (29+ messages)
` [PATCH 01/27] netfilter: nf_tables: Fix an Oops in nf_tables_updobj() error handling
` [PATCH 02/27] netfilter: nf_tables_offload: avoid excessive stack usage
` [PATCH 03/27] netfilter: nf_tables_offload: move indirect flow_block callback logic to core
` [PATCH 04/27] netfilter: nft_synproxy: add synproxy stateful object support
` [PATCH 05/27] netfilter: nft_{fwd,dup}_netdev: add offload support
` [PATCH 06/27] netfilter: nf_tables_offload: add __nft_offload_get_chain function
` [PATCH 07/27] netfilter: nf_tables_offload: refactor the nft_flow_offload_chain function
` [PATCH 08/27] netfilter: nf_tables_offload: refactor the nft_flow_offload_rule function
` [PATCH 09/27] netfilter: nf_tables_offload: remove rules when the device unregisters
` [PATCH 10/27] netfilter: fix include guards
` [PATCH 11/27] netfilter: fix coding-style errors
` [PATCH 12/27] netfilter: ip_tables: remove unused function declarations
` [PATCH 13/27] netfilter: inline xt_hashlimit, ebt_802_3 and xt_physdev headers
` [PATCH 14/27] netfilter: update include directives
` [PATCH 15/27] netfilter: remove nf_conntrack_icmpv6.h header
` [PATCH 16/27] netfilter: move inline nf_ip6_ext_hdr() function to a more appropriate header
` [PATCH 17/27] netfilter: synproxy: move code between headers
` [PATCH 18/27] netfilter: move nf_bridge_frag_data struct definition to a more appropriate header
` [PATCH 19/27] netfilter: conntrack: use consistent style when defining inline functions
` [PATCH 20/27] netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENABLED(CONFIG...)
` [PATCH 21/27] netfilter: conntrack: wrap two inline functions in config checks
` [PATCH 22/27] netfilter: br_netfilter: update stub br_nf_pre_routing_ipv6 parameter to `void *priv`
` [PATCH 23/27] netfilter: conntrack: move code to linux/nf_conntrack_common.h
` [PATCH 24/27] netfilter: conntrack: remove CONFIG_NF_CONNTRACK check from nf_conntrack_acct.h
` [PATCH 25/27] netfilter: remove CONFIG_NETFILTER checks from headers
` [PATCH 26/27] netfilter: conntrack: remove CONFIG_NF_CONNTRACK checks from nf_conntrack_zones.h
` [PATCH 27/27] netfilter: conntrack: remove two unused functions from nf_conntrack_timestamp.h

[PATCH nft v5] src: add synproxy stateful object support
 2019-09-13 11:42 UTC  (2+ messages)

[PATCH nf-next v6 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister
 2019-09-13 10:58 UTC  (6+ messages)
` [PATCH nf-next v6 1/4] netfilter: nf_tables_offload: add __nft_offload_get_chain function
` [PATCH nf-next v6 2/4] netfilter: nf_offload: refactor the nft_flow_offload_chain function
` [PATCH nf-next v6 3/4] netfilter: nf_offload: refactor the nft_flow_offload_rule function
` [PATCH nf-next v6 4/4] netfilter: nf_offload: clean offload things when the device unregister

[PATCH nf-next v3 00/18] Remove config option checks from netfilter headers
 2019-09-13 10:57 UTC  (23+ messages)
` [PATCH nf-next v3 01/18] netfilter: fix include guards
` [PATCH nf-next v3 02/18] netfilter: fix coding-style errors
` [PATCH nf-next v3 03/18] netfilter: remove unused function declarations
` [PATCH nf-next v3 04/18] netfilter: inline three headers
` [PATCH nf-next v3 05/18] netfilter: update include directives
` [PATCH nf-next v3 06/18] netfilter: remove nf_conntrack_icmpv6.h header
` [PATCH nf-next v3 07/18] netfilter: move inline function to a more appropriate header
` [PATCH nf-next v3 08/18] netfilter: move code between synproxy headers
` [PATCH nf-next v3 09/18] netfilter: move struct definition function to a more appropriate header
` [PATCH nf-next v3 10/18] netfilter: use consistent style when defining inline functions in nf_conntrack_ecache.h
` [PATCH nf-next v3 11/18] netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENABLED(CONFIG...)
` [PATCH nf-next v3 12/18] netfilter: wrap two inline functions in config checks
` [PATCH nf-next v3 13/18] netfilter: update stub br_nf_pre_routing_ipv6 parameter to `void *priv`
` [PATCH nf-next v3 14/18] netfilter: move nf_conntrack code to linux/nf_conntrack_common.h
` [PATCH nf-next v3 15/18] netfilter: remove CONFIG_NF_CONNTRACK check from nf_conntrack_acct.h
` [PATCH nf-next v3 16/18] netfilter: remove CONFIG_NETFILTER checks from headers
` [PATCH nf-next v3 17/18] netfilter: remove CONFIG_NF_CONNTRACK checks from nf_conntrack_zones.h
` [PATCH nf-next v3 18/18] netfilter: remove two unused functions from nf_conntrack_timestamp.h

[PATCH nft v4] src: add synproxy stateful object support
 2019-09-11 21:51 UTC  (2+ messages)

[PATCH ebtables-nft] ebtables: fix over-eager -o checks on custom chains
 2019-09-11 17:22 UTC  (2+ messages)

[PATCH iptables] netfilter: hashlimit: prefer PRIu64 to avoid warnings on 32bit platforms
 2019-09-11 17:21 UTC  (2+ messages)

[PATCH nft] libnftables: use-after-free in exit path
 2019-09-11 11:56 UTC 

userspace conntrack helper and confirming the master conntrack
 2019-09-11  8:17 UTC  (7+ messages)

iptables release
 2019-09-11  7:33 UTC  (2+ messages)

[PATCH nf-next v5 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister
 2019-09-11  0:02 UTC  (10+ messages)
` [PATCH nf-next v5 1/4] netfilter: nf_tables_offload: add __nft_offload_get_chain function
` [PATCH nf-next v5 2/4] netfilter: nf_offload: refactor the nft_flow_offload_chain function
` [PATCH nf-next v5 3/4] netfilter: nf_offload: refactor the nft_flow_offload_rule function
` [PATCH nf-next v5 4/4] netfilter: nf_offload: clean offload things when the device unregister

[PATCH nft v3] src: add synproxy stateful object support
 2019-09-10 20:50 UTC  (3+ messages)

[PATCH libnftnl] src: synproxy stateful object support
 2019-09-10 20:48 UTC  (2+ messages)

[PATCH nf-next] netfilter: nft_synproxy: add synproxy stateful object support
 2019-09-10 20:30 UTC  (2+ messages)

[PATCH nft] netlink_delinearize: fix wrong conversion to "list" in ct mark
 2019-09-10 20:01 UTC  (2+ messages)

[conntrack-tools PATCH] nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size
 2019-09-10 18:33 UTC  (2+ messages)

[PATCH nft] parser_json: fix crash on insert rule to bad references
 2019-09-10 16:25 UTC  (2+ messages)

[PATCH nft 1/3] tests: shell: verify huge transaction returns expected number of rules
 2019-09-10 16:25 UTC  (4+ messages)
` [PATCH nft 2/3] tests: shell: add huge JSON transaction
` [PATCH nft 3/3] tests: shell: add huge transaction from firewalld

[PATCH nft] src: mnl: fix --echo buffer size -- again
 2019-09-10 13:08 UTC  (6+ messages)

[PATCH v2 nftables 0/3] un-break nftables on big-endian arches
 2019-09-09 22:12 UTC  (4+ messages)
` [PATCH nftables 3/3] src: mnl: retry when we hit -ENOBUFS

[PATCH nf-next v4 0/4] netfilter: nf_tables_offload: clean offload things when the device unregister
 2019-09-09 11:35 UTC  (5+ messages)
` [PATCH nf-next v4 4/4] netfilter: nf_offload: "

[PATCH nf-next] netfilter: nft_{fwd,dup}_netdev: add offload support
 2019-09-09  3:23 UTC  (2+ messages)

[PATCH nft v2] src: add synproxy stateful object support
 2019-09-08 19:33 UTC  (4+ messages)

[PATCH nf-next v2 00/30] Add config option checks to netfilter headers
 2019-09-08 18:14 UTC  (4+ messages)

[PATCH nf-next 1/2] netfilter: nf_tables_offload: move indirect flow_block callback logic to core
 2019-09-08 16:23 UTC  (2+ messages)

[PATCH] netfilter: nf_tables: Fix an Oops in nf_tables_updobj() error handling
 2019-09-08 16:11 UTC  (2+ messages)

[PATCH nf-next v6 0/8] netfilter: nf_tables_offload: support tunnel offload
 2019-09-08 16:01 UTC  (10+ messages)
` [PATCH nf-next v6 1/8] netfilter: nft_tunnel: add nft_tunnel_mode_validate function
` [PATCH nf-next v6 2/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP_SRC/DST match
` [PATCH nf-next v6 3/8] netfilter: nft_tunnel: add ipv6 check in nft_tunnel_mode_validate
` [PATCH nf-next v6 4/8] netfilter: nft_tunnel: support NFT_TUNNEL_IP6_SRC/DST match
` [PATCH nf-next v6 5/8] netfilter: nft_tunnel: support tunnel meta match offload
` [PATCH nf-next v6 6/8] netfilter: nft_tunnel: add NFTA_TUNNEL_KEY_RELEASE action
` [PATCH nf-next v6 7/8] netfilter: nft_objref: add nft_objref_type offload
` [PATCH nf-next v6 8/8] netfilter: nft_tunnel: support nft_tunnel_obj offload


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).