netfilter-devel archive · June 2021

363 messages · showing the 100 most-recently-active threads .

• STALE1810d [PATCH nft v2 0/3] fix icmpv6 id dependeny handling
  2021-06-30 17:12 · 7 replies this month · Florian Westphal <fw@strlen.de>
• STALE1810d [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support
  2021-06-30 14:21 · 2 replies this month · Cole Dishington <hidden>
• STALE1810d REVIEWED: 1 (1M) Re: [PATCH NETFILTER] netfilter: nfnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
  2021-06-30 12:30 · 2 replies this month · Florian Westphal <fw@strlen.de>
• DORMANTno replies REVIEWED: 1 (1M) Re: [PATCH NETFILTER] netfilter: gre: nf_ct_gre_keymap_flush() removal
  2021-06-30 09:54 · 0 replies this month · Florian Westphal <fw@strlen.de>
• STALE1810d Re: Reload IPtables
  2021-06-29 16:50 · 3 replies this month · Neal P. Murphy <hidden>
• DORMANTno replies [PATCH nft] cmd: incorrect error reporting when table declaration exists
  2021-06-29 12:44 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nftables] cmd: incorrect table location in error reporting
  2021-06-29 12:26 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies Netfilter rules to replicate, consume ingress packet locally and forward clone packet.
  2021-06-29 09:47 · 0 replies this month · rakesh goyal <hidden>
• STALE1770d [PATCH libmnl 0/1] build: doc: "make" builds & installs a full set of man pages
  2021-06-29 09:38 · 5 replies this month · Duncan Roe <hidden>
• STALE1810d Re: Reload IPtables
  2021-06-29 08:37 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1795d [PATCH] extensions: masquerade: Add RFC-7597 section 5.1 PSID support
  2021-06-29 00:17 · 0 replies this month · Cole Dishington <hidden>
• STALE1812d [PATCH ipset,v4 0/4] nftables to ipset translation infrastructure
  2021-06-28 18:35 · 5 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1812d Re: [syzbot] KASAN: use-after-free Read in check_all_holdout_tasks_trace
  2021-06-28 08:43 · 2 replies this month · syzbot <hidden>
• STALE1804d [PATCH 0/2] Fixes for KCSAN findings
  2021-06-27 16:19 · 2 replies this month · Manfred Spraul <hidden>
• DORMANTno replies [PATCH iptables] extensions: libxt_multiport: add translation for -m multiport --ports
  2021-06-25 21:08 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1809d [PATCH][next] netfilter: nf_tables: Fix dereference of null pointer flow
  2021-06-25 10:33 · 5 replies this month · Colin King <hidden>
• DORMANTno replies [PATCH ipset 3/3,v3] add ipset to nftables translation infrastructure
  2021-06-24 19:16 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1809d [PATCH nf-next 0/2] netfilter: conntrack: do not renew timeout while in tcp SYN_SENT state
  2021-06-24 10:37 · 2 replies this month · Florian Westphal <fw@strlen.de>
• STALE1816d [PATCH net] ipv6/netfilter: Drop Packet Too Big with invalid payload
  2021-06-24 09:35 · 2 replies this month · Georg Kohmann <hidden>
• STALE1816d [syzbot] WARNING: zero-size vmalloc in corrupted
  2021-06-24 06:17 · 6 replies this month · syzbot <hidden>
• STALE1817d [PATCH net-next 0/6] Netfilter updates for net-next
  2021-06-23 19:40 · 7 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1817d [PATCH net-next 0/6] Netfilter updates for net-next
  2021-06-23 17:02 · 4 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] rule: obj_free() releases timeout state string
  2021-06-23 12:46 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] parser_bison: memleak in rate limit parser
  2021-06-23 11:43 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] libnftables: fix memleak when first message in batch is used to report error
  2021-06-23 11:28 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] libnftables: fix memleak when EOPNOTSUPP
  2021-06-23 11:26 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] parser_bison: string memleak in YYERROR path
  2021-06-23 11:17 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] parser_bison: string memleak when datatype is incorrect
  2021-06-23 11:12 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1818d [PATCH net 0/8] Netfilter fixes for net
  2021-06-22 23:30 · 11 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] evaluate: fix maps with key and data concatenations
  2021-06-22 19:42 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1818d [PATCH nf 1/2] netfilter: nf_tables: skip netlink portID validation if zero
  2021-06-22 14:35 · 3 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf 2/2,v2] netfilter: nf_tables: do not allow to delete table with owner by handle
  2021-06-22 10:15 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf,v4] netfilter: nf_tables: memleak in hw offload abort path
  2021-06-21 20:27 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1819d [PATCH net-next] netfilter: nfnetlink_hook: fix check for snprintf() overflow
  2021-06-21 20:06 · 2 replies this month · Dan Carpenter <hidden>
• STALE1819d [syzbot] general protection fault in smc_tx_sendmsg
  2021-06-21 19:05 · 3 replies this month · syzbot <hidden>
• DORMANTno replies [PATCH nf] netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer logic
  2021-06-21 18:04 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1819d [PATCH nf-next] docs: networking: Update connection tracking offload sysctl parameters
  2021-06-21 17:03 · 4 replies this month · Oz Shlomo <hidden>
• DORMANTno replies [PATCH nf,v3] netfilter: nf_tables: memleak in hw offload abort path
  2021-06-21 16:52 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf,v2] netfilter: nf_tables: memleak in hw offload abort path
  2021-06-21 15:45 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies can't compile with CLANG + ThinLTO
  2021-06-20 12:22 · 0 replies this month · Pascal Dupuis <hidden>
• DORMANTno replies [PATCH] netfilter: nf_tables: memleak in hw offload abort path
  2021-06-19 00:11 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf] netfilter: nf_tables_offload: skip VLAN handling if FLOW_DISSECTOR_KEY_CONTROL is unset
  2021-06-19 00:10 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf] netfilter: nf_tables_offload: skip VLAN handling if FLOW_DISSECTOR_KEY_CONTROL is unset
  2021-06-19 00:09 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1822d [nf-next PATCH] netfilter: nft_extdhr: Drop pointless check of tprot_set
  2021-06-18 12:48 · 1 reply this month · Phil Sutter <phil@nwl.cc>
• STALE1822d [PATCH nf-next] netfilter: conntrack: pass hook state to log functions
  2021-06-18 12:34 · 1 reply this month · Florian Westphal <fw@strlen.de>
• STALE1822d [nf-next PATCH v2] netfilter: nft_exthdr: Search chunks in SCTP packets only
  2021-06-18 12:34 · 1 reply this month · Phil Sutter <phil@nwl.cc>
• DORMANTno replies [PATCH nft,v2] rule: memleak of list of timeout policies
  2021-06-17 21:08 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] rule: memleak of list of timeout policies
  2021-06-17 15:49 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] parser_bison: memleak in osf flags
  2021-06-17 15:41 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] netlink_delinearize: memleak when listing ct event rule
  2021-06-17 15:15 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] segtree: memleak in error path of the set to segtree conversion
  2021-06-17 10:54 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf-next,v6] netfilter: nf_tables: add last expression
  2021-06-17 01:27 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] netlink_delinearize: memleak in string netlink postprocessing
  2021-06-17 01:12 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] evaluate: memleak in binary operation transfer to RHS
  2021-06-16 23:41 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1824d [PATCH nf-next,v4] netfilter: nf_tables: add last expression
  2021-06-16 23:10 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1824d [PATCH nft 0/8] Enableruntime queue selection via jhash, numgen and map statement
  2021-06-16 21:17 · 8 replies this month · Florian Westphal <fw@strlen.de>
• DORMANTno replies [PATCH nf-next,v5] netfilter: nf_tables: add last expression
  2021-06-16 21:06 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1824d [PATCH nf,v2 1/2] netfilter: nft_exthdr: check for IPv6 packet before further processing
  2021-06-16 18:40 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1824d [PATCH nft 1/2] evaluate: do not skip evaluation of mapping set elements
  2021-06-16 18:09 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1824d [PATCH nf 1/2] netfilter: nft_exthdr: check for IPv6 packet before further processing
  2021-06-16 14:42 · 5 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1825d nfqueue hashing on TCP/UDP port
  2021-06-15 22:58 · 2 replies this month · Jake Owen <hidden>
• STALE1825d [PATCH nf] MAINTAINERS: netfilter: add irc channel
  2021-06-15 07:12 · 3 replies this month · Nicolas Dichtel <hidden>
• STALE1798d [PATCH nf] Revert "netfilter: flowtable: Remove redundant hw refresh bit"
  2021-06-14 21:55 · 1 reply this month · Aleksander Jan Bajkowski <hidden>
• STALE1826d [PATCH nft 0/3] fix icmpv6 id dependeny handling
  2021-06-14 13:10 · 3 replies this month · Florian Westphal <fw@strlen.de>
• STALE1826d [PATCH nftables] src: use opencoded NFT_SET_ANONYMOUS set flag check by set_is_anonymous()
  2021-06-14 13:04 · 2 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1826d [PATCH nftables] src: add xzalloc_array() and use it to allocate the expression hashtable
  2021-06-14 12:53 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1826d [PATCH nftables] evaluate: add set to cache once
  2021-06-14 12:41 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1826d [PATCH nft 2/2] evaluate: restore interval + concatenation in anonymous set
  2021-06-14 12:04 · 4 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nftables,v2] src: add vlan dei
  2021-06-11 17:49 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf] netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols
  2021-06-11 17:27 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] src: add vlan dei
  2021-06-11 17:15 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1829d [nft PATCH 00/10] Some covscan fixes
  2021-06-11 16:41 · 10 replies this month · Phil Sutter <phil@nwl.cc>
• STALE1829d [nf-next PATCH] netfilter: nft_exthdr: Search chunks in SCTP packets only
  2021-06-11 14:54 · 5 replies this month · Phil Sutter <phil@nwl.cc>
• STALE1824d REVIEWED: 5 (3M) [PATCH v27 18/25] LSM: security_secid_to_secctx in netlink netfilter
  2021-06-11 00:24 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1824d REVIEWED: 7 (5M) [PATCH v27 16/25] LSM: Use lsmcontext in security_secid_to_secctx
  2021-06-11 00:22 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1824d REVIEWED: 7 (5M) [PATCH v27 15/25] LSM: Ensure the correct LSM context releaser
  2021-06-11 00:21 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1824d [PATCH v27 08/25] LSM: Use lsmblob in security_secid_to_secctx
  2021-06-11 00:13 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1824d [PATCH v27 07/25] LSM: Use lsmblob in security_secctx_to_secid
  2021-06-11 00:12 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1830d [PATCH net 0/3] Netfilter fixes for net
  2021-06-10 21:50 · 4 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1830d [PATCH libnftnl 1/2] expr: add last match time support
  2021-06-10 18:54 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] tests: shell: extend connlimit test
  2021-06-10 18:41 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies Re: [syzbot] KASAN: use-after-free Read in blk_mq_exit_sched
  2021-06-10 08:04 · 0 replies this month · syzbot <hidden>
• STALE1830d [PATCH nf-next 0/3] Control nf flow table timeouts
  2021-06-10 07:08 · 6 replies this month · Oz Shlomo <hidden>
• STALE1831d Re: linux-next: Tree for Jun 9 (net/netfilter/nfnetlink_hook.c)
  2021-06-09 22:03 · 1 reply this month · Randy Dunlap <hidden>
• DORMANTno replies linux-next: Fixes tags need some work in the netfilter-next tree
  2021-06-09 21:56 · 0 replies this month · Stephen Rothwell <hidden>
• STALE1831d [PATCH net-next 00/13] Netfilter updates for net-next
  2021-06-09 21:45 · 13 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1831d [PATCH nf-next] netfilter: move nf_tables base hook annotation to init helper
  2021-06-09 19:35 · 1 reply this month · Florian Westphal <fw@strlen.de>
• STALE1831d [PATCH v2 nf-next] netfilter: nfnetlink_hook: add depends-on nftables
  2021-06-09 19:34 · 1 reply this month · Florian Westphal <fw@strlen.de>
• STALE1831d [PATCH][next] etfilter: fix array index out-of-bounds error
  2021-06-09 19:34 · 1 reply this month · Colin King <hidden>
• STALE1831d [PATCH nf 0/2] netfilter: nft_fib: ignore icmpv6 packets from ::
  2021-06-09 19:08 · 3 replies this month · Florian Westphal <fw@strlen.de>
• DORMANTno replies [nft PATCH] segtree: Fix segfault when restoring a huge interval set
  2021-06-09 14:02 · 0 replies this month · Phil Sutter <phil@nwl.cc>
• DORMANTno replies [PATCH -next] netfilter: Make NETFILTER_NETLINK_HOOK depends on NF_TABLES
  2021-06-09 09:56 · 0 replies this month · He Ying <hidden>
• DORMANTno replies Re: [syzbot] WARNING in cancel_delayed_work
  2021-06-08 20:17 · 0 replies this month · syzbot <hidden>
• STALE1832d [PATCH nf-next] nfilter: nf_hooks: fix build failure with NF_TABLES=n
  2021-06-08 20:11 · 4 replies this month · Florian Westphal <fw@strlen.de>
• DORMANTno replies [PATCH nft,v2] netlink: quick sort array of devices
  2021-06-08 15:40 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1832d [PATCH nft] cmd: check for table mismatch first in error reporting
  2021-06-08 13:00 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1832d [nf-next PATCH v2] netfilter: nft_exthdr: Fix for unsafe packet data read
  2021-06-08 10:38 · 5 replies this month · Phil Sutter <phil@nwl.cc>
• STALE1832d [syzbot] general protection fault in kcm_sendmsg
  2021-06-08 10:17 · 2 replies this month · syzbot <hidden>
• STALE1832d [nf-next PATCH] netfilter: nft_exthdr: Fix for unsafe packet data read
  2021-06-08 09:15 · 1 reply this month · Phil Sutter <phil@nwl.cc>
• STALE1832d Re: [syzbot] KASAN: use-after-free Read in hci_chan_del
  2021-06-07 22:25 · 0 replies this month · syzbot <hidden>