netfilter-devel archive · September 2021

391 messages · showing the 100 most-recently-active threads .

• STALE1712d [PATCH 1/3] extensions: libtxt_NFLOG: use nft built-in logging instead of xt_NFLOG
  2021-09-30 20:04 · 2 replies this month · Kyle Bowman <hidden>
• STALE1712d [PATCH nf-next v5 0/6] Netfilter egress hook
  2021-09-30 19:18 · 21 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1705d [syzbot] WARNING in __nf_unregister_net_hook (4)
  2021-09-30 17:27 · 1 reply this month · syzbot <hidden>
• STALE1698d [iptables PATCH v2 00/17] Eliminate dedicated arptables-nft parser
  2021-09-30 14:06 · 17 replies this month · Phil Sutter <phil@nwl.cc>
• STALE1713d [PATCH net 0/5] Netfilter fixes for net
  2021-09-30 13:49 · 9 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1713d ebtables behaving weirdly on MIPS platform
  2021-09-30 13:02 · 4 replies this month · Senthil Kumar Balasubramanian <hidden>
• DORMANTno replies [syzbot] WARNING: kmalloc bug in hash_netportnet_create
  2021-09-29 17:56 · 0 replies this month · syzbot <hidden>
• DORMANTno replies [PATCH nft] cache: filter out sets and maps that are not requested
  2021-09-29 16:53 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft 1/2] cache: finer grain cache population for list commands
  2021-09-29 11:33 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] cache: set on cache flags for nested notation
  2021-09-29 09:24 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies Re: [PATCH] Fix typo in ipset-translate man page
  2021-09-29 08:10 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft,v2 2/2] evaluate: check for missing transport protocol match in nat map with concatenations
  2021-09-28 22:27 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1714d [PATCH nft 1/2] evaluate: check for concatenation in set data datatype
  2021-09-28 20:55 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1691d [PATCH][net-next] netfilter: ebtables: use array_size() helper in copy_{from,to}_user()
  2021-09-28 20:02 · 0 replies this month · "Gustavo A. R. Silva" <gustavoars@kernel.org>
• DORMANTno replies [PATCH nft] netlink: dynset: set compound expr dtype based on set key definition
  2021-09-28 19:34 · 0 replies this month · Florian Westphal <fw@strlen.de>
• STALE1714d [PATCH libnetfilter_log v2] src: doc: revise doxygen for all other modules
  2021-09-28 18:52 · 1 reply this month · Duncan Roe <hidden>
• DORMANTno replies [syzbot] KASAN: use-after-free Read in nf_tables_fill_table_info
  2021-09-28 12:19 · 0 replies this month · syzbot <hidden>
• DORMANTno replies [PATCH nft] payload: don't adjust offsets of autogenerated dependency expressions
  2021-09-28 12:16 · 0 replies this month · Florian Westphal <fw@strlen.de>
• STALE1715d [PATCH nf] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
  2021-09-28 11:05 · 1 reply this month · Florian Westphal <fw@strlen.de>
• STALE1715d [PATCH conntrack-tools v2] conntrack.8: minor copy edit
  2021-09-28 10:54 · 1 reply this month · Štěpán Němec <hidden>
• STALE1715d [PATCH libnetfilter_log 0/2] utils: nfulnl_test: Test nflog_get_packet_hw
  2021-09-28 10:50 · 4 replies this month · Duncan Roe <hidden>
• STALE1715d [PATCH libnetfilter_queue v4 0/1] build: doc: Allow to specify whether to produce man pages, html, neither or both
  2021-09-28 10:21 · 2 replies this month · Duncan Roe <hidden>
• STALE1518d [PATCH v2 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
  2021-09-28 09:43 · 1 reply this month · Philip Prindeville <hidden>
• STALE1710d [PATCH libnetfilter_log v2] build: doc: `make` generates requested documentation
  2021-09-28 02:28 · 0 replies this month · Duncan Roe <hidden>
• STALE1715d [PATCH libnetfilter_queue v3 1/4] src: doc: revise doxygen for all other modules
  2021-09-28 00:57 · 4 replies this month · Duncan Roe <hidden>
• DORMANTno replies [PATCH conntrack-tools] conntrack.8: minor copy edit
  2021-09-27 15:05 · 0 replies this month · Štěpán Němec <hidden>
• STALE1716d [iptables PATCH 00/12] Eliminate dedicated arptables-nft parser
  2021-09-27 15:04 · 12 replies this month · Phil Sutter <phil@nwl.cc>
• STALE1716d [conntrack-tools 0/6] Build fixes
  2021-09-27 08:33 · 9 replies this month · Jeremy Sowden <hidden>
• STALE1716d [iptables PATCH 0/4] nft: Fix and improve base chain handling
  2021-09-27 07:32 · 5 replies this month · Phil Sutter <phil@nwl.cc>
• DORMANTno replies [PATCH 1/1] xt_ECHO, xt_TARPIT: make properly conditional on IPv6
  2021-09-26 19:39 · 0 replies this month · Philip Prindeville <hidden>
• DORMANTno replies [PATCH nf,v2] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification
  2021-09-26 11:22 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] monitor: honor NLM_F_EXCL netlink flag
  2021-09-26 10:50 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf] netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification
  2021-09-26 10:49 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1717d [PATCH iptables] xtables-translate: add missing argument and option to usage
  2021-09-26 09:34 · 1 reply this month · mizuta.takeshi@fujitsu.com <hidden>
• DORMANTno replies [PATCH nft] evaluate: provide a hint on missing dynamic flag
  2021-09-25 20:46 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1717d [PATCH 1/3] monitor: display rule position handle
  2021-09-25 20:46 · 2 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf] netfilter: nft_dynset: relax superfluous check on set updates
  2021-09-25 20:40 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1718d LANDED [PATCH net 00/15] Netfilter/IPVS fixes for net
  2021-09-25 03:40 · 16 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1688d [syzbot] general protection fault in nf_tables_dump_tables
  2021-09-25 00:07 · 0 replies this month · syzbot <hidden>
• STALE1718d [PATCH nf,v3 1/2] netfilter: nf_tables: add position handle in event notification
  2021-09-24 23:46 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1718d REVIEWED: 10 (9M) [PATCH v29 18/28] LSM: security_secid_to_secctx in netlink netfilter
  2021-09-24 18:14 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1718d REVIEWED: 7 (6M) [PATCH v29 16/28] LSM: Use lsmcontext in security_secid_to_secctx
  2021-09-24 18:12 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1718d REVIEWED: 12 (11M) [PATCH v29 15/28] LSM: Ensure the correct LSM context releaser
  2021-09-24 18:11 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1718d REVIEWED: 6 (5M) [PATCH v29 08/28] LSM: Use lsmblob in security_secid_to_secctx
  2021-09-24 18:03 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1718d REVIEWED: 6 (5M) [PATCH v29 07/28] LSM: Use lsmblob in security_secctx_to_secid
  2021-09-24 18:02 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1701d [PATCH nf 0/1.5 RFC] netfilter: nat: source port shadowing
  2021-09-23 13:13 · 2 replies this month · Florian Westphal <fw@strlen.de>
• DORMANTno replies [iptables PATCH] tests: iptables-test: Fix conditional colors on stderr
  2021-09-22 11:40 · 0 replies this month · Phil Sutter <phil@nwl.cc>
• STALE1721d [PATCH libnetfilter_log] src: doc: revise doxygen for all other modules
  2021-09-22 08:17 · 1 reply this month · Duncan Roe <hidden>
• STALE1722d [PATCH nf] netfilter: conntrack: serialize hash resizes and cleanups
  2021-09-21 01:56 · 2 replies this month · Eric Dumazet <hidden>
• STALE1722d [PATCH nf 0/2] netfilter: nf_nat_masquerade: don't block rtnl lock
  2021-09-21 01:55 · 3 replies this month · Florian Westphal <fw@strlen.de>
• STALE1722d [PATCH nf] netfilter: iptable_raw: drop bogus net_init annotation
  2021-09-21 01:55 · 1 reply this month · Florian Westphal <fw@strlen.de>
• STALE1722d [PATCH nf 0/5] netfilter: conntrack: make zone id part of conntrack hash
  2021-09-21 01:55 · 7 replies this month · Florian Westphal <fw@strlen.de>
• STALE1722d [syzbot] KASAN: use-after-free Read in nft_table_lookup (2)
  2021-09-21 01:55 · 2 replies this month · syzbot <hidden>
• STALE1722d [PATCH net v6 0/2] Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  2021-09-21 01:43 · 2 replies this month · Cole Dishington <hidden>
• DORMANTno replies [PATCH nft,v2 2/2] monitor: honor NLM_F_APPEND flag for rules
  2021-09-20 23:21 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1722d [PATCH nft 1/2] monitor: display rule position handle
  2021-09-20 22:56 · 1 reply this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf,v2] netfilter: nf_tables: add position handle in event notification
  2021-09-20 22:39 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nf] netfilter: nf_tables: add position handle in event notification
  2021-09-20 18:04 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1723d [PATCH libnetfilter_log] src: make nflog_open_nfnl() static
  2021-09-20 11:49 · 1 reply this month · Duncan Roe <hidden>
• STALE1723d [PATCH libnetfilter_log] utils: nfulnl_test: Print meaningful error messages
  2021-09-20 11:46 · 1 reply this month · Duncan Roe <hidden>
• STALE1723d [PATCH libnetfilter_queue] src: build: Stop build_man.sh from deleting short Detailed Descriptions
  2021-09-20 11:39 · 1 reply this month · Duncan Roe <hidden>
• STALE1723d [PATCH libnetfilter_log v3] src: doc: revise doxygen for module "Netlink message helper functions"
  2021-09-20 11:39 · 1 reply this month · Duncan Roe <hidden>
• STALE1723d [PATCH] libnetfilter_queue: src/nlmsg.c: SECCTX can be of any length
  2021-09-20 11:26 · 1 reply this month · Topi Miettinen <hidden>
• STALE1723d Re: [syzbot] WARNING in __percpu_ref_exit (2)
  2021-09-20 08:15 · 4 replies this month · syzbot <hidden>
• STALE1723d [PATCH net v5 0/2] Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  2021-09-20 07:23 · 6 replies this month · Cole Dishington <hidden>
• DORMANTno replies [RESEND PATCH net-next v4] extensions: masquerade: Add RFC-7597 section 5.1 PSID support
  2021-09-20 03:24 · 0 replies this month · Cole Dishington <hidden>
• STALE1723d [RESEND PATCH net-next v7 0/3] Add RFC-7597 Section 5.1 PSID support
  2021-09-20 02:39 · 3 replies this month · Cole Dishington <hidden>
• STALE1701d [PATCH ulogd] NFLOG: fix seq global flag setting
  2021-09-17 22:10 · 0 replies this month · Ken-ichirou MATSUZAWA <hidden>
• STALE1701d [PATCH ulogd] XML: support nflog pkt output
  2021-09-17 22:09 · 0 replies this month · Ken-ichirou MATSUZAWA <hidden>
• STALE1674d [RFC PATCH libnetfilter_log] src: support conntrack XML output
  2021-09-17 22:07 · 0 replies this month · Ken-ichirou MATSUZAWA <hidden>
• STALE1711d Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  2021-09-17 17:02 · 1 reply this month · Jeremy Sowden <hidden>
• DORMANTno replies [PATCH nf] netfilter: log: work around missing softdep backend module
  2021-09-17 16:50 · 0 replies this month · Florian Westphal <fw@strlen.de>
• STALE1726d [PATCH net v4] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  2021-09-17 14:04 · 3 replies this month · Cole Dishington <hidden>
• DORMANTno replies [syzbot] general protection fault in nf_tables_dump_rules
  2021-09-17 06:42 · 0 replies this month · syzbot <hidden>
• STALE1727d [PATCH net-next 00/10] Netfilter updates for net-next
  2021-09-16 15:59 · 7 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies Re: list vmap counter errot
  2021-09-16 12:01 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] netlink: reset temporary set element stmt list after list splice
  2021-09-16 11:58 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1727d [PATCH nft,v2] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}
  2021-09-16 10:53 · 2 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• DORMANTno replies [PATCH nft] doc: fix sinopsis of named counter, quota and ct {helper,timeout,expect}
  2021-09-16 10:39 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1727d list vmap counter errot
  2021-09-16 09:27 · 1 reply this month · Martin Zatloukal <hidden>
• DORMANTno replies Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  2021-09-15 17:24 · 0 replies this month · Jan Engelhardt <hidden>
• STALE1728d [iptables PATCH] ebtables: Avoid dropping policy when flushing
  2021-09-15 16:33 · 1 reply this month · Phil Sutter <phil@nwl.cc>
• STALE1728d Python bindings crash when more than one Nftables is instantiated
  2021-09-15 15:05 · 1 reply this month · Eugene Crosser <hidden>
• STALE1728d [PATCH nf] netfilter: ip6_tables: zero-initialize fragment offset
  2021-09-15 15:01 · 3 replies this month · Jeremy Sowden <hidden>
• DORMANTno replies Re: [xtables-addons] xt_ipp2p: add ipv6 module alias
  2021-09-15 14:55 · 0 replies this month · Jeremy Sowden <hidden>
• STALE1728d [PATCH nf-next v4 0/5] Netfilter egress hook
  2021-09-15 09:45 · 2 replies this month · Lukas Wunner <lukas@wunner.de>
• STALE1728d [PATCH net v3] net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED
  2021-09-15 08:47 · 1 reply this month · Cole Dishington <hidden>
• DORMANTno replies [PATCH nft] src: revert hashtable for expression handlers
  2021-09-14 23:09 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1729d [xtables-addons] xt_ipp2p: add ipv6 module alias
  2021-09-14 15:08 · 1 reply this month · Jeremy Sowden <hidden>
• STALE1729d [xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels
  2021-09-14 13:32 · 1 reply this month · Jeremy Sowden <hidden>
• DORMANTno replies Re: [xtables-addons] xt_ipp2p: fix compatibility with pre-5.1 kernels
  2021-09-14 12:55 · 0 replies this month · Jeremy Sowden <hidden>
• STALE1729d [PATCH iptables] iptables-test.py: print with color escapes only when stdout isatty
  2021-09-14 11:49 · 8 replies this month · Štěpán Němec <hidden>
• STALE1729d [PATCH nf] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
  2021-09-13 22:58 · 3 replies this month · Andrea Claudi <hidden>
• STALE1729d [PATCH 1/1] netfilter: ipset: Fix oversized kvmalloc() calls
  2021-09-13 22:55 · 1 reply this month · Jozsef Kadlecsik <hidden>
• DORMANTno replies [PATCH nf] netfilter: nf_tables: Fix oversized kvmalloc() calls
  2021-09-13 18:39 · 0 replies this month · Pablo Neira Ayuso <pablo@netfilter.org>
• STALE1730d [xtables-addons 0/4] IPv6 support for xt_ipp2p
  2021-09-13 17:20 · 5 replies this month · Jeremy Sowden <hidden>
• STALE1728d [syzbot] WARNING: kmalloc bug in hash_ipportip_create
  2021-09-13 16:29 · 0 replies this month · syzbot <hidden>
• STALE1730d [PATCH iptabes-nft] iptables-nft: allow removal of empty builtin chains
  2021-09-13 16:03 · 2 replies this month · Florian Westphal <fw@strlen.de>
• DORMANTno replies Re: [xtables-addons 0/4] IPv6 support for xt_ipp2p
  2021-09-13 15:40 · 0 replies this month · Jeremy Sowden <hidden>
• STALE1732d [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y
  2021-09-11 12:06 · 6 replies this month · Florian Westphal <fw@strlen.de>