messages from 2025-10-17 09:13:58 to 2025-10-27 03:36:18 UTC [more...]
nftables.service hardening ideas
2025-10-27 3:36 UTC
[PATCH nftables] tests: shell: fix typo in vmap_timeout test script
2025-10-26 21:58 UTC (2+ messages)
[PATCH] selftest: net: fix socklen_t type mismatch in sctp_collision test
2025-10-26 18:09 UTC (2+ messages)
[PATCH nft] doc: remove queue from verdict list
2025-10-26 8:54 UTC
ipset download location
2025-10-25 16:08 UTC
[PATCH AUTOSEL 6.17] netfilter: nf_tables: all transaction allocations can now sleep
2025-10-25 16:01 UTC (2+ messages)
` [PATCH AUTOSEL 6.17-5.15] netfilter: nf_reject: don't reply to icmp error messages
[PATCH v4 0/1] nf_conntrack_ftp: Added nfct_seqadj_ext_add()
2025-10-24 16:27 UTC (3+ messages)
` [PATCH v4 1/1] nft_ct: Added nfct_seqadj_ext_add() for DNAT'ed conntrack
[PATCH nf v2] netfilter: nft_connlimit: fix possible data race on connection count
2025-10-24 15:54 UTC
[PATCH nf] netfilter: nft_connlimit: fix stale read of connection count
2025-10-24 15:47 UTC (10+ messages)
[PATCH nf] netfilter: nf_tables: limit maximum number of jumps/gotos per netns
2025-10-24 14:38 UTC (3+ messages)
[PATCH v3 0/1] nf_conntrack_ftp: Added nfct_seqadj_ext_add()
2025-10-24 12:58 UTC (13+ messages)
` [PATCH v3 1/1] nft_ct: Added nfct_seqadj_ext_add() for NAT'ed conntrack
[PATCH nf] netfilter: nft_ct: enable labels for get case too
2025-10-24 12:55 UTC (3+ messages)
[PATCH 0/8] improve systemd service
2025-10-24 2:08 UTC (10+ messages)
` [PATCH 1/9] tools: don’t set options whose values match their defaults
` [PATCH 2/9] tools: use the same pair of boolean literals
` [PATCH 3/9] tools: include further `Documentation=` URIs
` [PATCH 4/9] tools: reorder options
` [PATCH 5/9] tools: depend on `sysinit.target`
` [PATCH 6/9] tools: don’t stop `nftables.service` (and flush the ruleset) on shutdown
` [PATCH 7/9] tools: don’t stop `nftables.service` (and flush the ruleset) when isolating another unit
` [PATCH 8/9] tools: flush the ruleset only on an actual dedicated unit stop
` [PATCH 9/9] tools: let the unit fail if the rules file is missing
[PATCHv6 net-next 00/14] ipvs: per-net tables and optimizations
2025-10-24 2:21 UTC (18+ messages)
` [PATCHv6 net-next 01/14] rculist_bl: add hlist_bl_for_each_entry_continue_rcu
` [PATCHv6 net-next 02/14] ipvs: make ip_vs_svc_table and ip_vs_svc_fwm_table per netns
` [PATCHv6 net-next 03/14] ipvs: some service readers can use RCU
` [PATCHv6 net-next 04/14] ipvs: use single svc table
` [PATCHv6 net-next 05/14] ipvs: do not keep dest_dst after dest is removed
` [PATCHv6 net-next 06/14] ipvs: use more counters to avoid service lookups
` [PATCHv6 net-next 07/14] ipvs: add resizable hash tables
` [PATCHv6 net-next 08/14] ipvs: use resizable hash table for services
` [PATCHv6 net-next 09/14] ipvs: switch to per-net connection table
` [PATCHv6 net-next 10/14] ipvs: show the current conn_tab size to users
` [PATCHv6 net-next 11/14] ipvs: no_cport and dropentry counters can be per-net
` [PATCHv6 net-next 12/14] ipvs: use more keys for connection hashing
` [PATCHv6 net-next 13/14] ipvs: add ip_vs_status info
` [PATCHv6 net-next 14/14] ipvs: add conn_lfactor and svc_lfactor sysctl vars
[PATCH v5 1/4] doc: fix/improve documentation of verdicts
2025-10-24 1:36 UTC (4+ messages)
` [PATCH v5 2/4] doc: add overall description of the ruleset evaluation
` [PATCH v5 3/4] doc: add more documentation on bitmasks and sets
` [PATCH v5 4/4] doc: minor improvements the `reject` statement
[nft PATCH 00/28] Fix netlink debug output on Big Endian
2025-10-23 20:47 UTC (31+ messages)
` [nft PATCH 01/28] datatype: Fix boolean type "
` [nft PATCH 02/28] optimize: Fix verdict expression comparison
` [nft PATCH 03/28] tests: py: any/tcpopt.t.json: Fix JSON equivalent
` [nft PATCH 04/28] tests: py: any/ct.t.json.output: Drop leftover entry
` [nft PATCH 05/28] tests: py: inet/osf.t: Fix element ordering in JSON equivalents
` [nft PATCH 06/28] tests: py: Fix for using wrong payload path
` [nft PATCH 07/28] tests: py: Implement payload_record()
` [nft PATCH 08/28] tests: py: Do not rely upon '[end]' marker
` [nft PATCH 09/28] netlink: No need to reference array when passing as pointer
` [nft PATCH 10/28] datatype: Increase symbolic constant printer robustness
` [nft PATCH 11/28] tests: py: ip6/vmap.t: Drop double whitespace in rule
` [nft PATCH 12/28] netlink: Zero nft_data_linearize objects when populating
` [nft PATCH 13/28] Define string-based data types as Big Endian
` [nft PATCH 14/28] segtree: No byteorder conversion for string prefix len calculation
` [nft PATCH 15/28] Fix byteorder conversion of concatenated value expressions and ranges
` [nft PATCH 16/28] expression: Set range expression 'len' field
` [nft PATCH 17/28] segtree: Export complete data before editing
` [nft PATCH 18/28] segtree: Drop problematic constant expr len adjustment
` [nft PATCH 19/28] netlink: Introduce struct nft_data_linearize::byteorder
` [nft PATCH 20/28] netlink: Introduce struct nft_data_linearize::sizes
` [nft PATCH 21/28] netlink: Make use of nftnl_{expr,set_elem}_set_imm()
` [nft PATCH 22/28] mergesort: Linearize concatentations in network byte order
` [nft PATCH 23/28] tests: Adjust JSON records to improved element sorting
` [nft PATCH 24/28] tests: py: tools: Add regen_payloads.sh
` [nft PATCH 25/28] tests: py: Update payload records
` [nft PATCH 26/28] utils: Introduce expr_print_debug()
` [nft PATCH 27/28] utils: Cover for missing newline after BUG() messages
` [nft PATCH 28/28] Drop no longer needed newline in "
[libnftnl PATCH 0/9] Fix for debug output on Big Endian
2025-10-23 16:05 UTC (10+ messages)
` [libnftnl PATCH 1/9] set_elem: Review debug output
` [libnftnl PATCH 2/9] expr: data_reg: Avoid extra whitespace
` [libnftnl PATCH 3/9] expr: Pass byteorder to struct expr_ops::set callback
` [libnftnl PATCH 4/9] data_reg: Introduce struct nftnl_data_reg::byteorder field
` [libnftnl PATCH 5/9] data_reg: Introduce struct nftnl_data_reg::sizes array
` [libnftnl PATCH 6/9] Introduce nftnl_{expr,set_elem}_set_imm()
` [libnftnl PATCH 7/9] data_reg: Respect data byteorder when printing
` [libnftnl PATCH 8/9] data_reg: Support concatenated data
` [libnftnl PATCH 9/9] udata: Store u32 udata values in Big Endian
[PATCH nft] src: parser_json: fix format string bugs
2025-10-23 12:21 UTC
[PATCH nft v3] src: add refcount asserts
2025-10-23 12:19 UTC
[PATCH nf-next v8 0/3] Add IPIP flowtable SW acceleration
2025-10-23 8:50 UTC (4+ messages)
` [PATCH nf-next v8 1/3] net: netfilter: Add IPIP flowtable rx sw acceleration
` [PATCH nf-next v8 2/3] net: netfilter: Add IPIP flowtable tx "
` [PATCH nf-next v8 3/3] selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest
nft manpage/wiki issues and improvement ideas
2025-10-22 14:34 UTC (40+ messages)
` [PATCH v2 0/7] doc: miscellaneous improvements
` [PATCH v2 2/7] doc: fix/improve documentation of verdicts
` [PATCH v2 4/7] doc: add overall description of the ruleset evaluation
` [PATCH v2 5/7] doc: add some more documentation on bitmasks
` [PATCH v2 6/7] doc: describe include’s collation order to be that of the C locale
` [PATCH v2 7/7] doc: describe how values match sets
` [PATCH v3 0/6] doc: miscellaneous improvements
` [PATCH v3 1/6] doc: fix/improve documentation of verdicts
` [PATCH v3 2/6] doc: minor improvements with respect to the term “ruleset”
` [PATCH v3 3/6] doc: add overall description of the ruleset evaluation
` [PATCH v3 4/6] doc: add more documentation on bitmasks and sets
` [PATCH v3 5/6] doc: describe include’s collation order to be that of the C locale
` [PATCH v3 6/6] doc: minor improvements the `reject` statement
` [PATCH v4 0/5] doc: miscellaneous improvements
` [PATCH v4 1/5] doc: fix/improve documentation of verdicts
` [PATCH v4 2/5] doc: add overall description of the ruleset evaluation
` [PATCH v4 3/5] doc: add more documentation on bitmasks and sets
` [PATCH v4 4/5] doc: describe include’s collation order to be that of the C locale
` [PATCH v4 5/5] doc: minor improvements the `reject` statement
[PATCH] selftests: nft_queue: conntrack expiration requeue
2025-10-22 14:15 UTC (11+ messages)
[PATCH nf-next v7 0/3] Add IPIP flowtable SW acceleration
2025-10-22 14:14 UTC (6+ messages)
` [PATCH nf-next v7 1/3] net: netfilter: Add IPIP flowtable rx sw acceleration
` [PATCH nf-next v7 2/3] net: netfilter: Add IPIP flowtable tx "
` [PATCH nf-next v7 3/3] selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest
[PATCH nf-next v6 0/2] Add IPIP flowtable SW acceleratio
2025-10-21 17:46 UTC (4+ messages)
` [PATCH nf-next v6 1/2] net: netfilter: Add IPIP flowtable SW acceleration
[PATCH nft v2] support for afl++ (american fuzzy lop++) fuzzer
2025-10-20 22:46 UTC (12+ messages)
[PATCH v2 nft] src: add and use refcount assert helper
2025-10-20 22:22 UTC (3+ messages)
[PATCH v2 0/1] nf_conntrack_ftp: Added nfct_seqadj_ext_add()
2025-10-20 14:20 UTC (4+ messages)
` [PATCH v2 1/1] nf_conntrack_ftp: Added nfct_seqadj_ext_add() for ftp's conntrack
[PATCH nft] src: add refcount asserts
2025-10-19 20:57 UTC (3+ messages)
[PATCH v2 00/27 5.10.y] Backport minmax.h updates from v6.17-rc7
2025-10-19 12:38 UTC (11+ messages)
` [PATCH v2 01/27 5.10.y] overflow, tracing: Define the is_signed_type() macro once
` [PATCH v2 27/27 5.10.y] minmax.h: remove some #defines that are only expanded once
[libnftnl PATCH] utils: Introduce nftnl_parse_str_attr()
2025-10-18 19:13 UTC (2+ messages)
[PATCH nft] evaluate: follow prefix expression recursively
2025-10-17 11:45 UTC
[PATCH nft 0/4] nft tunnel mode parser/eval fixes
2025-10-17 9:39 UTC (3+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox