Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2025-09-06 21:11:32 to 2025-09-25 07:35:19 UTC [more...]

nft manpage/wiki issues and improvement ideas
 2025-09-25  7:35 UTC  (2+ messages)

[PATCH net-next 0/6] netfilter: fixes for net-next
 2025-09-25  0:50 UTC  (10+ messages)
` [PATCH net-next 1/6] ipvs: Defer ip_vs_ftp unregister during netns cleanup
` [PATCH net-next 2/6] netfilter: nfnetlink: reset nlh pointer during batch replay
` [PATCH net-next 3/6] netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups
` [PATCH net-next 4/6] netfilter: nft_set_pipapo_avx2: fix skip of expired entries
` [PATCH net-next 5/6] selftests: netfilter: nft_concat_range.sh: add check for double-create bug
` [PATCH net-next 6/6] netfilter: nf_conntrack: do not skip entries in /proc/net/nf_conntrack

[PATCH net-next RFC] netfilter: flowtable: add CT metadata action for nft flowtables
 2025-09-24 22:51 UTC  (9+ messages)

bug: nft -n still shows "resolved" values for iif and oif
 2025-09-24 21:48 UTC 

[PATCH nft] libnftables: do not re-add default include directory in include search
 2025-09-24 22:21 UTC 

bug: nft include with includedir path with globs loads files twice
 2025-09-24 20:23 UTC 

[PATCH 00/19 v6.1.y] Backport minmax.h updates from v6.17-rc7
 2025-09-24 20:23 UTC  (20+ messages)
` [PATCH 01/19 v6.1.y] minmax: add in_range() macro
` [PATCH 02/19 v6.1.y] minmax: Introduce {min,max}_array()
` [PATCH 03/19 v6.1.y] minmax: deduplicate __unconst_integer_typeof()
` [PATCH 04/19 v6.1.y] minmax: fix indentation of __cmp_once() and __clamp_once()
` [PATCH 05/19 v6.1.y] minmax: avoid overly complicated constant expressions in VM code
` [PATCH 06/19 v6.1.y] minmax: simplify and clarify min_t()/max_t() implementation
` [PATCH 07/19 v6.1.y] minmax: make generic MIN() and MAX() macros available everywhere
` [PATCH 08/19 v6.1.y] minmax: add a few more MIN_T/MAX_T users
` [PATCH 09/19 v6.1.y] minmax: simplify min()/max()/clamp() implementation
` [PATCH 10/19 v6.1.y] minmax: don't use max() in situations that want a C constant expression
` [PATCH 11/19 v6.1.y] minmax: improve macro expansion and type checking
` [PATCH 12/19 v6.1.y] minmax: fix up min3() and max3() too
` [PATCH 13/19 v6.1.y] minmax.h: add whitespace around operators and after commas
` [PATCH 14/19 v6.1.y] minmax.h: update some comments
` [PATCH 15/19 v6.1.y] minmax.h: reduce the #define expansion of min(), max() and clamp()
` [PATCH 16/19 v6.1.y] minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
` [PATCH 17/19 v6.1.y] minmax.h: move all the clamp() definitions after the min/max() ones
` [PATCH 18/19 v6.1.y] minmax.h: simplify the variants of clamp()
` [PATCH 19/19 v6.1.y] minmax.h: remove some #defines that are only expanded once

[PATCH RFC nf-next] netfilter: nf_tables: add math expression support
 2025-09-24  9:17 UTC  (5+ messages)

[PATCH nf] netfilter: nf_conntrack: do not skip entries in /proc/net/nf_conntrack
 2025-09-24  8:50 UTC  (2+ messages)

[PATCH v1] audit: include source and destination ports to NETFILTER_PKT
 2025-09-23 20:11 UTC  (5+ messages)

[PATCH RFC libnftnl] expr: add support to math expression
 2025-09-23 15:27 UTC 

[PATCH 0/3] netfilter/x_tables: go back to using vmalloc
 2025-09-23 12:22 UTC  (9+ messages)
` [PATCH 1/3] netfilter/x_tables: go back to using vmalloc for xt_table_info
` [PATCH 2/3] netfilter/x_tables: introduce a helper for freeing entry offsets
` [PATCH 3/3] netfilter/x_tables: allocate entry_offsets with vcalloc

[PATCH 00/27 5.10.y] Backport minmax.h updates from v6.17-rc6
 2025-09-22 13:10 UTC  (36+ messages)
` [PATCH 01/27 5.10.y] overflow, tracing: Define the is_signed_type() macro once
` [PATCH 02/27 5.10.y] minmax: sanity check constant bounds when clamping
` [PATCH 03/27 5.10.y] minmax: clamp more efficiently by avoiding extra comparison
` [PATCH 04/27 5.10.y] minmax: add in_range() macro
` [PATCH 05/27 5.10.y] minmax: Introduce {min,max}_array()
` [PATCH 06/27 5.10.y] minmax: deduplicate __unconst_integer_typeof()
` [PATCH 07/27 5.10.y] minmax: fix header inclusions
` [PATCH 08/27 5.10.y] minmax: allow min()/max()/clamp() if the arguments have the same signedness
` [PATCH 09/27 5.10.y] minmax: fix indentation of __cmp_once() and __clamp_once()
` [PATCH 10/27 5.10.y] minmax: allow comparisons of 'int' against 'unsigned char/short'
` [PATCH 11/27 5.10.y] minmax: relax check to allow comparison between unsigned arguments and signed constants
` [PATCH 12/27 5.10.y] minmax: avoid overly complicated constant expressions in VM code
` [PATCH 13/27 5.10.y] minmax: add a few more MIN_T/MAX_T users
` [PATCH 14/27 5.10.y] minmax: simplify and clarify min_t()/max_t() implementation
` [PATCH 15/27 5.10.y] minmax: make generic MIN() and MAX() macros available everywhere
` [PATCH 16/27 5.10.y] lib: zstd: drop local MIN/MAX macros in favor of generic ones
` [PATCH 17/27 5.10.y] minmax: don't use max() in situations that want a C constant expression
` [PATCH 18/27 5.10.y] minmax: simplify min()/max()/clamp() implementation
` [PATCH 19/27 5.10.y] minmax: improve macro expansion and type checking
` [PATCH 20/27 5.10.y] minmax: fix up min3() and max3() too
` [PATCH 21/27 5.10.y] minmax.h: add whitespace around operators and after commas
` [PATCH 22/27 5.10.y] minmax.h: update some comments
` [PATCH 23/27 5.10.y] minmax.h: reduce the #define expansion of min(), max() and clamp()
` [PATCH 24/27 5.10.y] minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
` [PATCH 25/27 5.10.y] minmax.h: move all the clamp() definitions after the min/max() ones
` [PATCH 26/27 5.10.y] minmax.h: simplify the variants of clamp()
` [PATCH 27/27 5.10.y] minmax.h: remove some #defines that are only expanded once

[syzbot] Monthly netfilter report (Sep 2025)
 2025-09-20 18:33 UTC 

[PATCH nf] netfilter: nfnetlink: reset nlh pointer during batch replay
 2025-09-19 12:40 UTC 

[syzbot] [netfilter?] general protection fault in nft_fib6_eval (2)
 2025-09-18 15:34 UTC 

[PATCH nft 0/2] Service file installation fix
 2025-09-17 20:34 UTC  (3+ messages)
` [PATCH nft 1/2] doc: fix some man-page mistakes
` [PATCH nft 2/2] build: don't install ancillary files without systemd service file

[libnftnl RFC] data_reg: Improve data reg value printing
 2025-09-16 22:32 UTC  (7+ messages)

[PATCH nft] tests: shell: add regression tests for set flush+add bugs
 2025-09-16 16:52 UTC 

[PATCH nf] netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups
 2025-09-16 16:34 UTC 

genl-family-get test fails with "Invalid Argument" on kernel 6.8
 2025-09-15 21:18 UTC  (3+ messages)
` [PATCH libmnl] examples: genl: fix wrong attribute size

[PATCH 1/1] IPVS: Fix use-after-free issue in ip_vs_unbind_app()
 2025-09-13 21:07 UTC  (8+ messages)
` [PATCH v2] ipvs: Check ipvs->enable before unregistration in __ip_vs_ftp_exit()
  ` [RFC PATCH v3] ipvs: Defer ip_vs_ftp unregister during netns cleanup
    ` [PATCH v4] "

[PATCH RFC nf-next 1/2] netfilter: nft_set_pipapo_avx2: fix skip of expired entries
 2025-09-13 20:17 UTC  (5+ messages)
` [PATCH RFC nf-next 2/2] selftests: netfilter: nft_concat_range.sh: add check for double-create bug

[PATCH net-next 0/5] netfilter: updates for net-next
 2025-09-13  0:10 UTC  (7+ messages)
` [PATCH net-next 1/5] selftest:net: fixed spelling mistakes
` [PATCH net-next 2/5] netfilter: ipset: Remove unused htable_bits in macro ahash_region
` [PATCH net-next 3/5] netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support
` [PATCH net-next 4/5] ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
` [PATCH net-next 5/5] netfilter: nf_reject: don't reply to icmp error messages

[nft PATCH] fib: Fix for existence check on Big Endian
 2025-09-11 16:17 UTC  (7+ messages)

[nft PATCH v4 0/8] Run all test suites via 'make check'
 2025-09-11 16:14 UTC  (2+ messages)

[nft PATCH 0/5] Fixes (and fallout) from running tests/monitor in JSON mode
 2025-09-11 16:05 UTC  (13+ messages)
` [nft PATCH 3/5] mnl: Allow for updating devices on existing inet ingress hook chains
` [nft PATCH 4/5] monitor: Inform JSON printer when reporting an object delete event
` [nft PATCH 5/5] tests: monitor: Extend testcases a bit

[nft PATCH v3 00/11] Run all test suites via 'make check'
 2025-09-11 15:13 UTC  (8+ messages)
` [nft PATCH v3 11/11] Makefile: Enable support for "

[PATCH nf 0/5] netfilter: nf_tables: fix false negative lookups with ongoing transaction
 2025-09-11 11:02 UTC  (8+ messages)
` [PATCH nf 1/5] netfilter: nft_set_pipapo: don't check genbit from packetpath lookups
` [PATCH nf 2/5] netfilter: nft_set_rbtree: continue traversal if element is inactive
` [PATCH nf 3/5] netfilter: nf_tables: place base_seq in struct net
` [PATCH nf 4/5] netfilter: nf_tables: make nft_set_do_lookup available unconditionally
` [PATCH nf 5/5] netfilter: nf_tables: restart set lookup on base_seq change

[PATCH nf-next v2 defer] netfilter: nft_byteorder: remove multi-register support
 2025-09-11  9:50 UTC 

[PATCH net 0/7] netfilter: updates for net
 2025-09-11  7:16 UTC  (10+ messages)
` [PATCH net 1/7] netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation
` [PATCH net 2/7] netfilter: nft_set_pipapo: don't check genbit from packetpath lookups
` [PATCH net 3/7] netfilter: nft_set_rbtree: continue traversal if element is inactive
` [PATCH net 4/7] netfilter: nf_tables: place base_seq in struct net
` [PATCH net 5/7] netfilter: nf_tables: make nft_set_do_lookup available unconditionally
` [PATCH net 6/7] netfilter: nf_tables: restart set lookup on base_seq change
` [PATCH net 7/7] MAINTAINERS: add Phil as netfilter reviewer
` [PATCH net 0/7] netfilter: updates for net: manual merge

[PATCH nf-next v6 0/2] Add IPIP flowtable SW acceleratio
 2025-09-09 21:31 UTC  (3+ messages)
` [PATCH nf-next v6 1/2] net: netfilter: Add IPIP flowtable SW acceleration

[conntrack-tools PATCH v2] nfct: helper: Extend error message for EBUSY
 2025-09-09 15:35 UTC  (2+ messages)

[PATCH v14 nf-next 0/3] conntrack: bridge: add double vlan, pppoe and pppoe-in-q
 2025-09-09 14:26 UTC  (8+ messages)
` [PATCH v14 nf-next 2/3] netfilter: bridge: Add conntrack double vlan and pppoe
` [PATCH v14 nf-next 3/3] netfilter: nft_chain_filter: Add bridge "

[PATCH nf] netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation
 2025-09-09 12:45 UTC 

[syzbot] [bridge?] [netfilter?] WARNING in br_nf_local_in
 2025-09-09 11:17 UTC  (3+ messages)

[nft PATCH] Makefile: Fix for 'make CFLAGS=...'
 2025-09-09 10:19 UTC  (3+ messages)

[PATCH v3 nf-next 0/3] flow offload teardown when layer 2 roaming
 2025-09-08 21:56 UTC  (5+ messages)
` [PATCH v3 nf-next 2/3] netfilter: nf_flow_table_core: teardown direct xmit when destination changed
` [PATCH v3 nf-next 3/3] netfilter: nf_flow_table_ip: don't follow fastpath when marked teardown

[PATCH] netfilter: Set expressions out of range in nft_add_set_elem()
 2025-09-08 15:54 UTC  (3+ messages)

[nft PATCH] table: Embed creating nft version into userdata
 2025-09-08 12:07 UTC  (3+ messages)

[PATCH nft 0/7] prepare for EXPR_SET_ELEM removal
 2025-09-08  7:59 UTC  (4+ messages)
` [PATCH nft 1/7] src: normalize set element with EXPR_MAPPING


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox