netfilter-devel archive · July 2021

255 messages across 89 threads, ordered by last activity .

• STALE1784d [PATCH v3 0/2] netfilter: add netfilter hooks to track SRv6-encapsulated flows
  2021-07-30 20:21 · 3 replies this month · Ryoga Saito <hidden>
• STALE1778d [PATCH] netfilter: xt_NFLOG: allow 128 character log prefixes
  2021-07-30 18:30 · 11 replies this month · Kyle Bowman <hidden>
• STALE1778d [PATCH nf-next 0/2] netfilter: ctnetlink: allow to filter dumps via ct->status
  2021-07-30 13:14 · 2 replies this month · Florian Westphal <fw@strlen.de>
• STALE1781d [iptables PATCH] ebtables: Dump atomic waste
  2021-07-30 10:37 · 0 replies this month · Phil Sutter <phil@nwl.cc>
• STALE1784d [PATCH nft 1/3] expression: missing != in flagcmp expression print function
  2021-07-30 04:53 · 12 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1785d [PATCH v2 0/2] net: add netfilter hooks to track SRv6-encapsulated flows
  2021-07-29 12:41 · 3 replies this month · Ryoga Saito <hidden>
• STALE1782d [PATCH v3] netfilter: nf_conntrack_bridge: Fix memory leak when error
  2021-07-29 08:20 · 0 replies this month · Yajun Deng <hidden>
• STALE1785d [PATCH v2] netfilter: nf_conntrack_bridge: Fix memory leak when error
  2021-07-29 08:08 · 1 reply this month · Yajun Deng <hidden>
• STALE1785d [PATCH] netfilter: nf_conntrack_bridge: Fix not free when error
  2021-07-29 07:24 · 3 replies this month · Yajun Deng <hidden>
• STALE1785d [nft] Regarding `tcp flags` (and a potential bug)
  2021-07-29 07:13 · 5 replies this month · Tom Yan <hidden>
• STALE1786d [iptables PATCH] doc: ebtables-nft.8: Adjust for missing atomic-options
  2021-07-28 21:16 · 1 reply this month · Phil Sutter <phil@nwl.cc>
• STALE1782d [PATCH 0/1] ipset patch for the nf tree v2
  2021-07-28 15:02 · 1 reply this month · Jozsef Kadlecsik <hidden>
• DORMANTno replies [ANNOUNCE] ipset 7.14 released
  2021-07-28 14:38 · 0 replies this month · Jozsef Kadlecsik <hidden>
• STALE1786d [ANNOUNCE] ipset 7.13 released
  2021-07-28 12:44 · 3 replies this month · Jozsef Kadlecsik <hidden>
• STALE1786d [PATCH] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  2021-07-28 11:10 · 4 replies this month · Cole Dishington <hidden>
• DORMANTno replies [PATCH nft] tests: py: check more flag match transformations to compact syntax
  2021-07-28 10:15 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1787d [PATCH nft,v2 1/3] tests: py: idempotent tcp flags & syn != 0 to tcp flag syn
  2021-07-27 22:39 · 2 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1787d [PATCH nft 1/2] tests: py: idempotent tcp flags & syn != 0 to tcp flag syn
  2021-07-27 20:50 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1780d Nf_nat_h323 module not working with Panasonic VCs
  2021-07-27 13:32 · 4 replies this month · Akshat Kakkar <hidden>
• DORMANTno replies [PATCH 0/1] ipset patch for the nf tree
  2021-07-27 11:22 · 1 reply this month · Jozsef Kadlecsik <hidden>
• STALE1778d [PATCH nf] netfilter: conntrack: collect all entries in one cycle
  2021-07-26 22:29 · 0 replies this month · Florian Westphal <fw@strlen.de>
• STALE1788d Re: [PATCH] net: Add netfilter hooks to track SRv6-encapsulated flows
  2021-07-26 21:29 · 7 replies this month · Ryoga Saito <hidden>
• DORMANTno replies [PATCH nft] evaluate: error reporting for missing statements in set/map declaration
  2021-07-26 16:40 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] src: promote 'reject with icmp CODE' syntax
  2021-07-26 16:01 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] parser_bison: parse number as reject icmp code
  2021-07-26 14:48 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1754d [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support
  2021-07-26 14:37 · 10 replies this month · Cole Dishington <hidden>
• STALE1788d [nft PATCH] tests: shell: Fix bogus testsuite failure with 100Hz
  2021-07-26 14:36 · 1 reply this month · Phil Sutter <phil@nwl.cc>
• DORMANTno replies [PATCH nft] parser_bison: stateful statement support in map
  2021-07-26 10:01 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1790d [PATCH nft 1/2] src: fix nft_ctx_clear_include_paths in libnftables.map
  2021-07-24 10:28 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1790d [PATCH libnetfilter_queue] src: Stop users from accidentally using legacy linux_nfnetlink_queue.h
  2021-07-24 10:12 · 1 reply this month · Duncan Roe <hidden>
• STALE1774d [PATCH libmnl 0/1] build: doc: "make" builds & installs a full set of man pages
  2021-07-24 08:56 · 9 replies this month · Duncan Roe <hidden>
• STALE1791d [PATCH net 0/6] Netfilter fixes for net
  2021-07-23 16:50 · 7 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1781d [PATCH nf-next] netfilter: ebtables: do not hook tables by default
  2021-07-23 13:18 · 0 replies this month · Florian Westphal <fw@strlen.de>
• STALE1791d [PATCH] netfilter: nfnl_hook: fix unused variable warning
  2021-07-23 12:33 · 1 reply this month · Arnd Bergmann <arnd@kernel.org>
• STALE1791d [PATCH nf] netfilter: conntrack: adjust stop timestamp to real expiry value
  2021-07-23 12:23 · 1 reply this month · Florian Westphal <fw@strlen.de>
• DORMANTno replies [PATCH nft 1/2] parser_bison: missing initialization of ct timeout policy list
  2021-07-22 16:53 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1782d [PATCH nf-next 0/3] netfilter: clusterip: don't register hook in all netns
  2021-07-22 08:49 · 3 replies this month · Florian Westphal <fw@strlen.de>
• STALE1759d REVIEWED: 10 (8M) [PATCH v28 18/25] LSM: security_secid_to_secctx in netlink netfilter
  2021-07-22 01:08 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1759d REVIEWED: 7 (5M) [PATCH v28 16/25] LSM: Use lsmcontext in security_secid_to_secctx
  2021-07-22 01:05 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1759d REVIEWED: 9 (6M) [PATCH v28 15/25] LSM: Ensure the correct LSM context releaser
  2021-07-22 01:04 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1759d REVIEWED: 6 (5M) [PATCH v28 08/25] LSM: Use lsmblob in security_secid_to_secctx
  2021-07-22 00:57 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1759d REVIEWED: 6 (5M) [PATCH v28 07/25] LSM: Use lsmblob in security_secctx_to_secid
  2021-07-22 00:55 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies [PATCH nf] netfilter: nft_nat: allow to specify layer 4 protocol NAT only
  2021-07-20 17:00 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] evaluate: fix inet nat with no layer 3 info
  2021-07-20 17:00 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] src: add --define key=value
  2021-07-20 10:55 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf-next,v2] netfilter: flowtable: remove nf_ct_l4proto_find() call
  2021-07-19 16:11 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1796d [PATCH nf 1/2] netfilter: nft_last: avoid possible false sharing
  2021-07-18 12:26 · 2 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1796d Documentation question
  2021-07-18 05:28 · 8 replies this month · Duncan Roe <hidden>
• STALE1779d [PATCH RFC libnetfilter_queue 0/1] Eliminate packet copy when constructing struct pkt_buff
  2021-07-18 04:29 · 1 reply this month · Duncan Roe <hidden>
• DORMANTno replies [PATCH libnetfilter_queue] build: doc: get rid of the need for manual updating of Makefile
  2021-07-18 03:52 · 0 replies this month · Duncan Roe <hidden>
• STALE1782d [PATCH libmnl] build: doc: get rid of the need for manual updating of Makefile
  2021-07-18 03:47 · 0 replies this month · Duncan Roe <hidden>
• DORMANTno replies [PATCH nf 1/2] netfilter: flowtable: avoid possible false sharing
  2021-07-17 08:28 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf-next] netfilter: flowtable: remove nf_ct_l4proto_find() call
  2021-07-17 08:26 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1797d [PATCH v3] audit: fix memory leak in nf_tables_commit
  2021-07-17 00:22 · 1 reply this month · Dongliang Mu <hidden>
• STALE1798d [PATCH] extensions: masquerade: Add RFC-7597 section 5.1 PSID support
  2021-07-16 00:22 · 3 replies this month · Cole Dishington <hidden>
• DORMANTno replies [syzbot] general protection fault in nf_tables_dump_flowtable
  2021-07-15 14:36 · 0 replies this month · syzbot <hidden>
• DORMANTno replies [PATCH nf-next,v2] netfilter: nft_compat: use nfnetlink_unicast()
  2021-07-15 09:11 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1800d [PATCH] xtables: Call init_extensions6() for static builds
  2021-07-14 09:34 · 1 reply this month · Erik Wilson <hidden>
• STALE1800d [PATCH v2] audit: fix memory leak in nf_tables_commit
  2021-07-14 02:19 · 4 replies this month · Dongliang Mu <hidden>
• STALE1801d [PATCH nftables,v2 1/2] src: infer interval from set
  2021-07-13 18:43 · 2 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1801d [PATCH nftables,v3 1/3] src: remove STMT_NAT_F_INTERVAL flags and interval keyword
  2021-07-13 18:36 · 2 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf] netfilter: nft_compat: use nfnetlink_unicast()
  2021-07-13 16:46 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1801d [PATCH v2] net: Use nlmsg_unicast() instead of netlink_unicast()
  2021-07-13 16:40 · 2 replies this month · Yajun Deng <hidden>
• STALE1801d [PATCH] audit: fix memory leak in nf_tables_commit
  2021-07-13 12:05 · 3 replies this month · Dongliang Mu <hidden>
• DORMANTno replies [issue] conntrack: lack of lock during nat
  2021-07-13 10:08 · 0 replies this month · ze wang <hidden>
• DORMANTno replies [PATCH nftables] src: support for nat with interval concatenation
  2021-07-12 17:04 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nftables] netlink_delinearize: stmt and expr error path memleaks
  2021-07-12 17:03 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1802d [PATCH] net: Use nlmsg_unicast() instead of netlink_unicast()
  2021-07-12 16:49 · 1 reply this month · Yajun Deng <hidden>
• STALE1802d [PATCH nf] Revert "netfilter: flowtable: Remove redundant hw refresh bit"
  2021-07-12 10:18 · 4 replies this month · Aleksander Jan Bajkowski <hidden>
• STALE1806d [PATCH] net: Add netfilter hooks to track SRv6-encapsulated flows
  2021-07-08 16:33 · 3 replies this month · Ryoga Saito <hidden>
• STALE1807d [PATCH net 00/11] Netfilter fixes for net
  2021-07-07 21:10 · 12 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1807d [PATCH libnetfilter_queue] src: annotation: Correctly identify item for which header is needed
  2021-07-07 15:40 · 11 replies this month · Duncan Roe <hidden>
• STALE1807d Re: netfilter: Use netlink_ns_capable to verify the permisions of netlink messages
  2021-07-07 13:22 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies Netdevconf 0x15 update
  2021-07-07 11:23 · 0 replies this month · Jamal Hadi Salim <jhs@mojatatu.com>
• STALE1808d [PATCH 0/2] Fixes for KCSAN findings
  2021-07-06 23:06 · 1 reply this month · Manfred Spraul <hidden>
• STALE1777d LPC 2021 Networking and BPF Track CFP
  2021-07-06 19:33 · 1 reply this month · Daniel Borkmann <daniel@iogearbox.net>
• STALE1808d [PATCH nf] netfilter: conntrack: improve RST handling when tuple is re-used
  2021-07-06 12:10 · 4 replies this month · Florian Westphal <fw@strlen.de>
• DORMANTno replies [PATCH nftables] src: add last statement
  2021-07-05 19:18 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH libnftnl] expr: last: add NFTNL_EXPR_LAST_SET
  2021-07-05 18:39 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1809d [PATCH nf-next] include: fix header file name in 3 comments
  2021-07-05 18:36 · 2 replies this month · Duncan Roe <hidden>
• STALE1809d [PATCH nf 1/2] netfilter: nft_last: honor NFTA_LAST_SET on restoration
  2021-07-05 18:30 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1809d [PATCH nftables] build: get `make distcheck` to pass again
  2021-07-05 08:49 · 1 reply this month · Duncan Roe <hidden>
• DORMANTno replies [PATCH] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API
  2021-07-05 04:09 · 0 replies this month · Cole Dishington <hidden>
• STALE1812d [PATCH][next] netfilter: nf_tables: Fix dereference of null pointer flow
  2021-07-02 00:56 · 1 reply this month · Colin King <hidden>
• STALE1812d REVIEWED: 1 (1M) [PATCH NETFILTER v2] netfilter: gre: nf_ct_gre_keymap_flush() removal
  2021-07-02 00:56 · 1 reply this month · Vasily Averin <hidden>
• STALE1812d REVIEWED: 1 (1M) [PATCH NETFILTER v2] netfilter: nfnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
  2021-07-02 00:54 · 1 reply this month · Vasily Averin <hidden>
• STALE1812d [PATCH nf-next 0/2] netfilter: conntrack: do not renew timeout while in tcp SYN_SENT state
  2021-07-02 00:53 · 1 reply this month · Florian Westphal <fw@strlen.de>
• STALE1813d Re: Reload IPtables
  2021-07-01 02:32 · 1 reply this month · Neal P. Murphy <hidden>
• STALE1813d Re: Reload IPtables
  2021-07-01 01:49 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>