Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2024-09-03 15:49:26 to 2024-09-12 20:43:59 UTC [more...]

[nf-next PATCH v3 00/16] Dynamic hook interface binding
 2024-09-12 20:43 UTC  (30+ messages)
` [nf-next PATCH v3 01/16] netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
` [nf-next PATCH v3 02/16] netfilter: nf_tables: Flowtable hook's pf value never varies
` [nf-next PATCH v3 03/16] netfilter: nf_tables: Store user-defined hook ifname
` [nf-next PATCH v3 04/16] netfilter: nf_tables: Use stored ifname in netdev hook dumps
` [nf-next PATCH v3 05/16] netfilter: nf_tables: Compare netdev hooks based on stored name
` [nf-next PATCH v3 06/16] netfilter: nf_tables: Tolerate chains with no remaining hooks
` [nf-next PATCH v3 07/16] netfilter: nf_tables: Introduce functions freeing nft_hook objects
` [nf-next PATCH v3 08/16] netfilter: nf_tables: Introduce nft_hook_find_ops()
` [nf-next PATCH v3 09/16] netfilter: nf_tables: Introduce nft_register_flowtable_ops()
` [nf-next PATCH v3 10/16] netfilter: nf_tables: Have a list of nf_hook_ops in nft_hook
` [nf-next PATCH v3 11/16] netfilter: nf_tables: chain: Respect NETDEV_REGISTER events
` [nf-next PATCH v3 12/16] netfilter: nf_tables: flowtable: "
` [nf-next PATCH v3 13/16] netfilter: nf_tables: Handle NETDEV_CHANGENAME events
` [nf-next PATCH v3 14/16] netfilter: nf_tables: Support wildcard netdev hook specs
` [nf-next PATCH v3 15/16] netfilter: nf_tables: Add notications for hook changes
` [nf-next PATCH v3 16/16] selftests: netfilter: Torture nftables netdev hooks

[PATCH nf] netfilter: nfnetlink_queue: reroute reinjected packets from postrouting
 2024-09-12 18:58 UTC 

[PATCH net] net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_init()
 2024-09-12 13:50 UTC  (5+ messages)

[PATCH net 0/2] Netfilter fixes for net
 2024-09-12 13:50 UTC  (4+ messages)
` [PATCH net 1/2] netfilter: nft_socket: fix sk refcount leaks
` [PATCH net 2/2] netfilter: nft_socket: make cgroupsv2 matching work with namespaces

[PATCH nf-next v5 0/2] netfilter: Make IP_NF_IPTABLES_LEGACY selectable
 2024-09-12 12:18 UTC  (8+ messages)
` [PATCH nf-next v5 1/2] netfilter: Make IP6_NF_IPTABLES_LEGACY selectable
` [PATCH nf-next v5 2/2] netfilter: Make IP_NF_IPTABLES_LEGACY selectable

[PATCH] docs: tproxy: ipt: ignore non-transparent sockets
 2024-09-12 11:59 UTC 

[PATCH v3] selftests: netfilter: nft_tproxy.sh: add tcp tests
 2024-09-12  6:17 UTC 

[PATCH nf-next 0/5] netfilter: nf_tables: reduce set element
 2024-09-11 15:00 UTC  (6+ messages)
` [PATCH nf-next 1/5] netfilter: nf_tables: prefer nft_trans_elem_alloc helper
` [PATCH nf-next 2/5] netfilter: nf_tables: add nft_trans_commit_list_add_elem helper
` [PATCH nf-next 3/5] netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structure
` [PATCH nf-next 4/5] netfilter: nf_tables: switch trans_elem to real flex array
` [PATCH nf-next 5/5] netfilter: nf_tables: allocate element update information dynamically

[PATCH v2] selftests: netfilter: tproxy tcp and udp tests
 2024-09-11 13:04 UTC  (2+ messages)

[PATCH nft] tests: py: fix up udp csum fixup output
 2024-09-11 12:24 UTC 

[RFC PATCH v3 00/19] Support socket access-control
 2024-09-11  8:19 UTC  (28+ messages)
` [RFC PATCH v3 01/19] landlock: "
` [RFC PATCH v3 02/19] landlock: Add hook on socket creation
` [RFC PATCH v3 03/19] selftests/landlock: Test basic socket restriction
` [RFC PATCH v3 04/19] selftests/landlock: Test adding a rule with each supported access
` [RFC PATCH v3 05/19] selftests/landlock: Test adding a rule for each unknown access
` [RFC PATCH v3 06/19] selftests/landlock: Test adding a rule for unhandled access
` [RFC PATCH v3 07/19] selftests/landlock: Test adding a rule for empty access
` [RFC PATCH v3 08/19] selftests/landlock: Test overlapped restriction
` [RFC PATCH v3 09/19] selftests/landlock: Test creating a ruleset with unknown access
` [RFC PATCH v3 10/19] selftests/landlock: Test adding a rule with family and type outside the range
` [RFC PATCH v3 11/19] selftests/landlock: Test unsupported protocol restriction
` [RFC PATCH v3 12/19] selftests/landlock: Test that kernel space sockets are not restricted
` [RFC PATCH v3 13/19] selftests/landlock: Test packet protocol alias
` [RFC PATCH v3 14/19] selftests/landlock: Test socketpair(2) restriction
` [RFC PATCH v3 15/19] selftests/landlock: Test SCTP peeloff restriction
` [RFC PATCH v3 16/19] selftests/landlock: Test that accept(2) is not restricted
` [RFC PATCH v3 17/19] samples/landlock: Replace atoi() with strtoull() in populate_ruleset_net()
` [RFC PATCH v3 18/19] samples/landlock: Support socket protocol restrictions
` [RFC PATCH v3 19/19] landlock: Document socket rule type support

[PATCH] ksleftest nfqueue race with dnat
 2024-09-11  7:50 UTC  (3+ messages)

[PATCH net-next v3 1/1] netfilter: conntrack: Guard possible unused functions
 2024-09-10 13:21 UTC  (2+ messages)

[PATCH nf-next 0/3] netfilter: conntrack: clash resolution for reverse collisions
 2024-09-10  9:38 UTC  (4+ messages)
` [PATCH nf-next 1/3] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
` [PATCH nf-next 2/3] netfilter: conntrack: add clash resolution for reverse collisions
` [PATCH nf-next 3/3] selftests: netfilter: add reverse-clash resolution test case

[PATCH net v1 1/1] netfilter: conntrack: Guard possoble unused functions
 2024-09-10  9:45 UTC  (10+ messages)

[PATCH net-next v2 1/1] netfilter: conntrack: Guard possible unused functions
 2024-09-10  8:37 UTC  (3+ messages)

[PATCH] netfilter: nf_tables: replace deprecated strncpy with strscpy_pad
 2024-09-09 22:48 UTC 

[PATCH nft] tests: shell: add test case for timeout updates
 2024-09-09 16:16 UTC 

[PATCH nft] tests: shell: extend vmap test with updates
 2024-09-09 16:15 UTC 

[PATCH] selftests: netfilter: nft_tproxy.sh: add tcp tests
 2024-09-09 14:27 UTC 

[PATCH net-next 00/12] Unmask upper DSCP bits - part 4 (last)
 2024-09-09 13:20 UTC  (31+ messages)
` [PATCH net-next 01/12] netfilter: br_netfilter: Unmask upper DSCP bits in br_nf_pre_routing_finish()
` [PATCH net-next 02/12] ipv4: ip_gre: Unmask upper DSCP bits in ipgre_open()
` [PATCH net-next 03/12] bpf: lwtunnel: Unmask upper DSCP bits in bpf_lwt_xmit_reroute()
` [PATCH net-next 04/12] ipv4: icmp: Unmask upper DSCP bits in icmp_reply()
` [PATCH net-next 05/12] ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
` [PATCH net-next 06/12] ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
` [PATCH net-next 07/12] ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
` [PATCH net-next 08/12] ipv4: netfilter: Unmask upper DSCP bits in ip_route_me_harder()
` [PATCH net-next 09/12] netfilter: nft_flow_offload: Unmask upper DSCP bits in nft_flow_route()
` [PATCH net-next 10/12] netfilter: nf_dup4: Unmask upper DSCP bits in nf_dup_ipv4_route()
` [PATCH net-next 11/12] ipv4: udp_tunnel: Unmask upper DSCP bits in udp_tunnel_dst_lookup()
` [PATCH net-next 12/12] sctp: Unmask upper DSCP bits in sctp_v4_get_dst()

[PATCH nft 1/2] tests: shell: stabilize packetpath/payload
 2024-09-09 13:13 UTC  (2+ messages)
` [PATCH nft 2/2] proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle UDP checksum

[PATCH net v1 1/1] netfilter: nf_reject: Fix build error when CONFIG_BRIDGE_NETFILTER=n
 2024-09-09  9:44 UTC  (3+ messages)

[PATCH nf-next v4 0/2] netfilter: Make IP_NF_IPTABLES_LEGACY selectable
 2024-09-09  8:29 UTC  (4+ messages)
` [PATCH nf-next v4 1/2] netfilter: Make IP6_NF_IPTABLES_LEGACY selectable

[PATCH libmnl] doc: Address warnings emitted by doxygen 1.12.0
 2024-09-09  2:04 UTC 

[PATCH nf 1/2] netfilter: nft_socket: fix sk refcount leaks
 2024-09-08 17:06 UTC  (5+ messages)
` [PATCH nf 2/2] netfilter: nft_socket: make cgroupsv2 matching work with namespaces
    ` [PATCH nf v2 "

[PATCH net-next 00/16] Netfilter updates for net-next
 2024-09-07  2:10 UTC  (18+ messages)
` [PATCH net-next 01/16] netfilter: ctnetlink: support CTA_FILTER for flush
` [PATCH net-next 02/16] netfilter: nft_counter: Use u64_stats_t for statistic
` [PATCH net-next 03/16] netfilter: Use kmemdup_array instead of kmemdup for multiple allocation
` [PATCH net-next 04/16] netfilter: conntrack: Convert to use ERR_CAST()
` [PATCH net-next 05/16] netfilter: nf_tables: drop unused 3rd argument from validate callback ops
` [PATCH net-next 06/16] netfilter: nf_tables: Correct spelling in nf_tables.h
` [PATCH net-next 07/16] netfilter: nf_tables: Add missing Kernel doc
` [PATCH net-next 08/16] netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
` [PATCH net-next 09/16] netfilter: nf_tables: reject element expiration with no timeout
` [PATCH net-next 10/16] netfilter: nf_tables: reject expiration higher than timeout
` [PATCH net-next 11/16] netfilter: nf_tables: remove annotation to access set timeout while holding lock
` [PATCH net-next 12/16] netfilter: nft_dynset: annotate data-races around set timeout
` [PATCH net-next 13/16] netfilter: nf_tables: annotate data-races around element expiration
` [PATCH net-next 14/16] netfilter: nf_tables: consolidate timeout extension for elements
` [PATCH net-next 15/16] netfilter: nf_tables: zero timeout means element never times out
` [PATCH net-next 16/16] netfilter: nf_tables: set element timeout update support

[PATCH net-next v2 0/5] make use of the helper macro LIST_HEAD()
 2024-09-07  1:20 UTC  (8+ messages)
` [PATCH net-next v2 1/5] net/ipv4: "
` [PATCH net-next v2 2/5] net/tipc: "
` [PATCH net-next v2 3/5] net/netfilter: "
` [PATCH net-next v2 4/5] net/ipv6: "
` [PATCH net-next v2 5/5] net/core: "

[PATCH net-next v1] netlink: specs: nftables: allow decode of tailscale ruleset
 2024-09-06  3:31 UTC  (2+ messages)

[PATCH] netfilter: tproxy: Add RCU protection in nf_tproxy_laddr4
 2024-09-05 15:41 UTC  (5+ messages)

[PATCH V5] ext4: check hash version and filesystem casefolded consistent
 2024-09-05 14:53 UTC  (5+ messages)
` [PATCH V6] fs/ext4: Filesystem without casefold feature cannot be mounted with spihash
    ` [PATCH] ext4: Fix error message when rejecting the default hash

[RFC PATCH v1 0/4] Implement performance impact measurement tool
 2024-09-04 12:56 UTC  (3+ messages)
` [RFC PATCH v1 2/4] selftests/landlock: Implement per-syscall microbenchmarks

[PATCH v2 net-next] netlink: specs: nftables: allow decode of default firewalld ruleset
 2024-09-03 22:30 UTC  (2+ messages)

[PATCH libnetfilter_conntrack v2] conntrack: Add zone filtering for conntrack events
 2024-09-03 18:17 UTC  (4+ messages)

[PATCH v2 0/2] netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c
 2024-09-03 16:23 UTC  (4+ messages)

[nft PATCH] libnftables: Zero ctx->vars after freeing it
 2024-09-03 16:14 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox