netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2023-09-20 09:27:09 to 2023-09-26 20:05:18 UTC [more...]

[PATCH net v6 0/3] Insulate Kernel Space From SOCK_ADDR Hooks
 2023-09-26 20:05 UTC  (2+ messages)
` [PATCH net v6 1/3] net: replace calls to sock->ops->connect() with kernel_connect()

[nft PATCH] tests: shell: features: Fix table owner flag check
 2023-09-26 19:58 UTC  (2+ messages)

[PATCH nft 3/3,v2] netlink_linearize: skip set element expression in map statement key
 2023-09-26 16:55 UTC  (2+ messages)

[PATCH nft 1/3] tests: py: add map support
 2023-09-26 15:58 UTC  (6+ messages)
` [PATCH nft 2/3] json: expose dynamic flag
` [PATCH nft 3/3] netlink_linearize: skip set element expression in map statement key

[nf PATCH 0/5] Introduce locking for reset requests
 2023-09-26 13:59 UTC  (23+ messages)
` [nf PATCH 1/5] netfilter: nf_tables: Don't allocate nft_rule_dump_ctx
` [nf PATCH 2/5] netfilter: nf_tables: Add locking for NFT_MSG_GETRULE_RESET requests
` [nf PATCH 3/5] netfilter: nf_tables: Introduce struct nft_obj_dump_ctx
` [nf PATCH 4/5] netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
` [nf PATCH 5/5] netfilter: nf_tables: Add locking for NFT_MSG_GETSETELEM_RESET requests

[PATCH conntrack-tools] conntrackd: consolidate check for maximum number of channels
 2023-09-25 12:28 UTC 

[PATCH nft 0/9] various cleanups related to enums and struct datatype
 2023-09-25  8:44 UTC  (31+ messages)
` [PATCH nft 1/9] src: fix indentation/whitespace
` [PATCH nft 2/9] include: fix missing definitions in <cache.h>/<headers.h>
` [PATCH nft 3/9] datatype: drop flags field from datatype
` [PATCH nft 4/9] datatype: use "enum byteorder" instead of int in set_datatype_alloc()
` [PATCH nft 5/9] payload: use enum icmp_hdr_field_type in payload_may_dependency_kill_icmp()
` [PATCH nft 6/9] netlink: handle invalid etype in set_make_key()
` [PATCH nft 7/9] expression: cleanup expr_ops_by_type() and handle u32 input
` [PATCH nft 8/9] datatype: use __attribute__((packed)) instead of enum bitfields
` [PATCH nft 9/9] proto: add missing proto_definitions for PROTO_DESC_GENEVE

[syzbot] [netfilter?] INFO: rcu detected stall in gc_worker (3)
 2023-09-24 10:59 UTC 

[PATCH -stable,6.5 0/5] Netfilter stable fixes for 6.5
 2023-09-23 12:51 UTC  (7+ messages)
` [PATCH -stable,6.5 1/5] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
` [PATCH -stable,6.5 2/5] netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
` [PATCH -stable,6.5 3/5] netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
` [PATCH -stable,6.5 4/5] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
` [PATCH -stable,6.5 5/5] netfilter: nf_tables: fix memleak when more than 255 elements expired

[nf PATCH 0/3] Review nf_tables audit logging
 2023-09-23  1:53 UTC  (4+ messages)
` [nf PATCH 1/3] selftests: netfilter: Extend nft_audit.sh
` [nf PATCH 2/3] netfilter: nf_tables: Deduplicate nft_register_obj audit logs
` [nf PATCH 3/3] netfilter: nf_tables: Audit log object reset once per table

[PATCH -stable,5.10 00/17] Netfilter stable fixes for 5.10
 2023-09-22 17:01 UTC  (18+ messages)
` [PATCH -stable,5.10 01/17] netfilter: nf_tables: integrate pipapo into commit protocol
` [PATCH -stable,5.10 02/17] netfilter: nf_tables: don't skip expired elements during walk
` [PATCH -stable,5.10 03/17] netfilter: nf_tables: GC transaction API to avoid race with control plane
` [PATCH -stable,5.10 04/17] netfilter: nf_tables: adapt set backend to use GC transaction API
` [PATCH -stable,5.10 05/17] netfilter: nft_set_hash: mark set element as dead when deleting from packet path
` [PATCH -stable,5.10 06/17] netfilter: nf_tables: remove busy mark and gc batch API
` [PATCH -stable,5.10 07/17] netfilter: nf_tables: don't fail inserts if duplicate has expired
` [PATCH -stable,5.10 08/17] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path
` [PATCH -stable,5.10 09/17] netfilter: nf_tables: GC transaction race with netns dismantle
` [PATCH -stable,5.10 10/17] netfilter: nf_tables: GC transaction race with abort path
` [PATCH -stable,5.10 11/17] netfilter: nf_tables: use correct lock to protect gc_list
` [PATCH -stable,5.10 12/17] netfilter: nf_tables: defer gc run if previous batch is still pending
` [PATCH -stable,5.10 13/17] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
` [PATCH -stable,5.10 14/17] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
` [PATCH -stable,5.10 15/17] netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
` [PATCH -stable,5.10 16/17] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
` [PATCH -stable,5.10 17/17] netfilter: nf_tables: fix memleak when more than 255 elements expired

[PATCH -stable,5.15 00/17] Netfilter stable fixes for 5.15
 2023-09-22 16:43 UTC  (18+ messages)
` [PATCH -stable,5.15 01/17] netfilter: nf_tables: don't skip expired elements during walk
` [PATCH -stable,5.15 02/17] netfilter: nf_tables: GC transaction API to avoid race with control plane
` [PATCH -stable,5.15 03/17] netfilter: nf_tables: adapt set backend to use GC transaction API
` [PATCH -stable,5.15 04/17] netfilter: nft_set_hash: mark set element as dead when deleting from packet path
` [PATCH -stable,5.15 05/17] netfilter: nf_tables: remove busy mark and gc batch API
` [PATCH -stable,5.15 06/17] netfilter: nf_tables: don't fail inserts if duplicate has expired
` [PATCH -stable,5.15 07/17] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path
` [PATCH -stable,5.15 08/17] netfilter: nf_tables: GC transaction race with netns dismantle
` [PATCH -stable,5.15 09/17] netfilter: nf_tables: GC transaction race with abort path
` [PATCH -stable,5.15 10/17] netfilter: nf_tables: use correct lock to protect gc_list
` [PATCH -stable,5.15 11/17] netfilter: nf_tables: defer gc run if previous batch is still pending
` [PATCH -stable,5.15 12/17] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
` [PATCH -stable,5.15 13/17] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
` [PATCH -stable,5.15 14/17] netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
` [PATCH -stable,5.15 15/17] netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
` [PATCH -stable,5.15 16/17] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
` [PATCH -stable,5.15 17/17] netfilter: nf_tables: fix memleak when more than 255 elements expired

[PATCH -stable,6.1 00/17] Netfilter stable fixes for 6.1
 2023-09-22 16:30 UTC  (18+ messages)
` [-stable,6.1 01/17] netfilter: nf_tables: don't skip expired elements during walk
` [-stable,6.1 02/17] netfilter: nf_tables: GC transaction API to avoid race with control plane
` [-stable,6.1 03/17] netfilter: nf_tables: adapt set backend to use GC transaction API
` [-stable,6.1 04/17] netfilter: nft_set_hash: mark set element as dead when deleting from packet path
` [-stable,6.1 05/17] netfilter: nf_tables: remove busy mark and gc batch API
` [-stable,6.1 06/17] netfilter: nf_tables: don't fail inserts if duplicate has expired
` [-stable,6.1 07/17] netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path
` [-stable,6.1 08/17] netfilter: nf_tables: GC transaction race with netns dismantle
` [-stable,6.1 09/17] netfilter: nf_tables: GC transaction race with abort path
` [-stable,6.1 10/17] netfilter: nf_tables: use correct lock to protect gc_list
` [-stable,6.1 11/17] netfilter: nf_tables: defer gc run if previous batch is still pending
` [-stable,6.1 12/17] netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
` [-stable,6.1 13/17] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
` [-stable,6.1 14/17] netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
` [-stable,6.1 15/17] netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
` [-stable,6.1 16/17] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
` [-stable,6.1 17/17] netfilter: nf_tables: fix memleak when more than 255 elements expired

[RFC nf] netfilter: nf_tables: nft_set_rbtree: invalidate greater range element on removal
 2023-09-22 11:15 UTC  (4+ messages)

[PATCH nft] tests: shell: skip flowtable-uaf if we lack table owner support
 2023-09-22  9:54 UTC 

[nft PATCH 0/9] Misc JSON parser fixes
 2023-09-22  8:56 UTC  (11+ messages)
` [nft PATCH 1/9] parser_json: Catch wrong "reset" payload
` [nft PATCH 2/9] parser_json: Fix typo in json_parse_cmd_add_object()
` [nft PATCH 3/9] parser_json: Proper ct expectation attribute parsing
` [nft PATCH 4/9] parser_json: Fix flowtable prio value parsing
` [nft PATCH 5/9] parser_json: Fix limit object burst "
` [nft PATCH 6/9] parser_json: Fix synproxy object mss/wscale parsing
` [nft PATCH 7/9] parser_json: Wrong check in json_parse_ct_timeout_policy()
` [nft PATCH 8/9] parser_json: Catch nonsense ops in match statement
` [nft PATCH 9/9] parser_json: Default meter size to zero

LPC 2023 Networking and BPF Track CFP (Reminder)
 2023-09-22  8:31 UTC  (2+ messages)
` LPC 2023 Networking and BPF Track CFP (Final Reminder)

[PATCH net 1/3] netfilter: nf_tables: disable toggling dormant table state more than once
 2023-09-21  9:20 UTC  (2+ messages)

[ANNOUNCE] ipset 7.18 released
 2023-09-21  6:56 UTC  (6+ messages)

[ANNOUNCE] ipset 7.19 released
 2023-09-21  7:02 UTC 

[PATCH nft 0/4] remove xfree() and add free_const()+nft_gmp_free()
 2023-09-21  9:08 UTC  (17+ messages)
` [PATCH nft 1/4] datatype: don't return a const string from cgroupv2_get_path()
` [PATCH nft 2/4] gmputil: add nft_gmp_free() to free strings from mpz_get_str()
` [PATCH nft 3/4] all: add free_const() and use it instead of xfree()
` [PATCH nft 4/4] all: remove xfree() and use plain free()

[PATCH 0/3] nftables: add feature probes for sctp and multistmt set support
 2023-09-21  8:48 UTC  (4+ messages)
` [PATCH 1/3] tests: shell: skip adding catchall elements if unuspported
` [PATCH 2/3] tests: shell: add feature probe for sets with more than one element
` [PATCH 3/3] tests: shell: add feature probe for sctp chunk matching

[PATCH libnetfilter_queue v2] doc: make the HTML main page available as `man 7 libnetfilter_queue`
 2023-09-21  0:43 UTC 

[PATCH nft] datatype: return const pointer from datatype_get()
 2023-09-20 22:00 UTC  (2+ messages)

[PATCH nft 1/3] tests/shell: fix preserving ruleset diff after test
 2023-09-20 15:50 UTC  (3+ messages)
` [PATCH nft 3/3] tests/shell: run `nft --check` on persisted dump files

[PATCH nft v2] icmpv6: Allow matching target address in NS/NA, redirect and MLD
 2023-09-20 15:03 UTC 

[PATCH] build: Fix double-prefix w/ pkgconfig
 2023-09-20 14:20 UTC  (2+ messages)

[PATCH 4.19 046/273] netfilter: nft_flow_offload: fix underflow in flowtable reference counter
 2023-09-20 11:28 UTC  (2+ messages)
` [PATCH 4.19 047/273] netfilter: nf_tables: missing NFT_TRANS_PREPARE_ERROR in flowtable deactivatation

[PATCH v11 10/12] selftests/landlock: Add 11 new test suites dedicated to network
 2023-09-20 10:00 UTC  (10+ messages)
` [PATCH v11.1] "

[PATCH v12 00/12] Network support for Landlock
 2023-09-20  9:26 UTC  (13+ messages)
` [PATCH v12 01/12] landlock: Make ruleset's access masks more generic
` [PATCH v12 02/12] landlock: Allow filesystem layout changes for domains without such rule type
` [PATCH v12 03/12] landlock: Refactor landlock_find_rule/insert_rule
` [PATCH v12 04/12] landlock: Refactor merge/inherit_ruleset functions
` [PATCH v12 05/12] landlock: Move and rename layer helpers
` [PATCH v12 06/12] landlock: Refactor "
` [PATCH v12 07/12] landlock: Refactor landlock_add_rule() syscall
` [PATCH v12 08/12] landlock: Add network rules and TCP hooks support
` [PATCH v12 09/12] selftests/landlock: Share enforce_ruleset()
` [PATCH v12 10/12] selftests/landlock: Add 7 new test variants dedicated to network
` [PATCH v12 11/12] samples/landlock: Add network demo
` [PATCH v12 12/12] landlock: Document Landlock's network support


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).