From: Pablo Neira Ayuso
Date: Sat, 29 Dec 2018 13:57:54 +0100
> The following patchset contains Netfilter fixes for net, specifically
> fixes for the nf_conncount infrastructure which is causing troubles
> since 5c789e131cbb9 ("netfilter: nf_conncount: Add list lock and gc
> worker, and RCU for i
From: Pablo Neira Ayuso
Date: Mon, 14 Jan 2019 22:29:33 +0100
> This is the first batch of Netfilter fixes for your net tree:
>
> 1) Fix endless loop in nf_tables rules netlink dump, from Phil Sutter.
>
> 2) Reference counter leak in object from the error path, from Taehee Yoo.
>
> 3) Selectiv
From: Pablo Neira Ayuso
Date: Mon, 28 Jan 2019 15:03:58 +0100
> The following patchset contains Netfilter/IPVS fixes for your net tree:
>
> 1) The nftnl mutex is now per-netns, therefore use reference counter
>for matches and targets to deal with concurrent updates from netns.
>Moreover,
From: Pablo Neira Ayuso
Date: Tue, 29 Jan 2019 00:57:17 +0100
> The following patchset contains Netfilter/IPVS updates for your net-next tree:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Pulled, thanks Pablo.
From: Pablo Neira Ayuso
Date: Tue, 5 Feb 2019 20:04:09 +0100
> The following patchset contains Netfilter fixes for net:
...
> Diffstat look rather larger than usual because of the new selftest, but
> Florian and I consider that having tests soon into the tree is good to
> improve coverage. If t
From: Pablo Neira Ayuso
Date: Sat, 2 Feb 2019 12:50:42 +0100
> This patchset, as is, allows us to reuse the driver codebase to
> configure ACL hardware offloads for the ethtool_rxnfc and the TC flower
> interfaces. A few clients for this infrastructure are presented, such as
> the bcm_sf2 and th
From: Pablo Neira Ayuso
Date: Mon, 11 Feb 2019 17:53:17 +0100
> The following patchset contains Netfilter fixes for net:
>
> 1) Out-of-bound access to packet data from the snmp nat helper,
>from Jann Horn.
>
> 2) ICMP(v6) error packets are set as related traffic by conntrack,
>update pr
From: Pablo Neira Ayuso
Date: Wed, 13 Feb 2019 18:47:55 +0100
> The following patchset contains Netfilter/IPVS fixes for net:
>
> 1) Missing structure initialization in ebtables causes splat with
>32-bit user level on a 64-bit kernel, from Francesco Ruggeri.
>
> 2) Missing dependency on nf_
From: Pablo Neira Ayuso
Date: Mon, 18 Feb 2019 00:23:46 +0100
> The following patchset contains Netfilter/IPVS updates for you net-next
> tree:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Pulled, thanks Pablo.
From: Pablo Neira Ayuso
Date: Tue, 19 Feb 2019 00:08:21 +0100
> The following patchset contains Netfilter/IPVS fixes for net:
>
> 1) Follow up patch to fix a compilation warning in a recent IPVS fix:
>098e13f5b21d ("ipvs: fix dependency on nf_defrag_ipv6").
>
> 2) Bogus ENOENT error on flus
From: Pablo Neira Ayuso
Date: Sat, 2 Mar 2019 19:34:28 +0100
> The following patchset contains Netfilter/IPVS updates for net-next:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Pulled, thanks Pablo.
Please only bug fixes as we progress through the merge window.
I'll announce when net-next is open again.
Follow me on social media:
https://twitter.com/davem_dokebi
Thank you.
From: Pablo Neira Ayuso
Date: Mon, 20 Mar 2017 11:08:28 +0100
> The following patchset contains Netfilter/IPVS updates for your
> net-next tree. A couple of new features for nf_tables, and unsorted
> cleanups and incremental updates for the Netfilter tree. More
> specifically, they are:
...
> Yo
From: Pablo Neira Ayuso
Date: Wed, 29 Mar 2017 14:14:02 +0200
> Hi David,
>
> The following patchset contains a rather large update with Netfilter
> fixes, specifically targeted to incorrect RCU usage in several spots and
> the userspace conntrack helper infrastructure (nfnetlink_cthelper),
> mo
From: Pablo Neira Ayuso
Date: Fri, 14 Apr 2017 02:26:42 +0200
> The following patchset contains Netfilter fixes for your net tree,
> they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks Pablo.
--
To unsubscribe from th
From: Pablo Neira Ayuso
Date: Mon, 1 May 2017 12:46:27 +0200
> The following patchset contains Netfilter updates for your net-next
> tree. A large bunch of code cleanups, XXX they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
From: Pablo Neira Ayuso
Date: Mon, 1 May 2017 12:53:53 +0200
> On Mon, May 01, 2017 at 12:46:27PM +0200, Pablo Neira Ayuso wrote:
>> Hi David,
>>
>> The following patchset contains Netfilter updates for your net-next
>> tree. A large bunch of code cleanups, XXX they are:
>
> Oh well, it case yo
From: Geert Uytterhoeven
Date: Wed, 3 May 2017 14:18:43 +0200
> If gcc (e.g. 4.1.2) decides not to inline total_extension_size(), the
> build will fail with:
>
> net/built-in.o: In function `nf_conntrack_init_start':
> (.text+0x9baf6): undefined reference to `__compiletime_assert_1893'
From: Pablo Neira Ayuso
Date: Wed, 3 May 2017 11:31:55 +0200
> The following patchset contains a rather large batch of Netfilter, IPVS
> and OVS fixes for your net tree. This includes fixes for ctnetlink, the
> userspace conntrack helper infrastructure, conntrack OVS support,
> ebtables DNAT tar
From: Pablo Neira Ayuso
Date: Fri, 19 May 2017 10:33:41 +0200
> The following patchset contains Netfilter/IPVS fixes for your net tree,
> they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks Pablo.
--
To unsubscribe fr
From: Pablo Neira Ayuso
Date: Mon, 22 May 2017 00:25:38 +0200
> Could you merge net into net-next as well? I have several patches for
> net-next that need to apply on these fixes. No rush BTW.
Sure, no problem.
As soon as Linus takes in my pull request from today, I will do this
and let you kno
From: David Miller
Date: Mon, 22 May 2017 19:54:44 -0400 (EDT)
> From: Pablo Neira Ayuso
> Date: Mon, 22 May 2017 00:25:38 +0200
>
>> Could you merge net into net-next as well? I have several patches for
>> net-next that need to apply on these fixes. No rush BTW.
>
>
From: Pablo Neira Ayuso
Date: Mon, 29 May 2017 13:34:28 +0200
> Hi David,
>
> The following patchset contains Netfilter fixes for your net tree,
> they are:
>
> 1) Conntrack SCTP CRC32c checksum mangling may operate on non-linear
>skbuff, patch from Davide Caratti.
>
> 2) nf_tables rb-tree
From: Florian Westphal
Date: Tue, 30 May 2017 11:38:12 +0200
> Quoting Joe Stringer:
> If a user loads nf_conntrack_ftp, sends FTP traffic through a network
> namespace, destroys that namespace then unloads the FTP helper module,
> then the kernel will crash.
>
> Events that lead to the cr
From: Mateusz Jurczyk
Date: Wed, 7 Jun 2017 16:41:57 +0200
> On Wed, Jun 7, 2017 at 4:18 PM, Florian Westphal wrote:
>> Mateusz Jurczyk wrote:
>>> Verify that the length of the socket buffer is sufficient to cover the
>>> nlmsghdr structure before accessing the nlh->nlmsg_len field for further
From: Pablo Neira Ayuso
Date: Fri, 30 Jun 2017 00:52:58 +0200
> The following patchset contains Netfilter updates for your net-next
> tree. This batch contains connection tracking updates for the cleanup
> iteration path, patches from Florian Westphal:
...
> You can pull these changes from:
>
>
From: Pablo Neira Ayuso
Date: Thu, 6 Jul 2017 14:54:23 +0200
> The following patchset contains two Netfilter fixes for your net tree,
> they are:
>
> 1) Fix memleak from netns release path of conntrack protocol trackers,
>patch from Liping Zhang.
>
> 2) Uninitialized flags field in ebt_log
It has gotten to the point that even casually walking around
Faro, Portugal last week, random German tourists would stop
me in the street and ask if net-next was open or not.
Therefore, in order to avoid any and all confusion I have created this
web site:
http://vger.kernel.org/~davem/ne
Tell your friends.
http://vger.kernel.org/~davem/net-next.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majord...@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
From: Eric Dumazet
Date: Mon, 17 Jul 2017 02:56:10 -0700
> From: Eric Dumazet
>
> As discussed in Faro during Netfilter Workshop 2017, RB trees can be
> used with RCU, using a seqlock.
>
> Note that net/rxrpc/conn_service.c is already using this.
>
> This patch converts inetpeer from AVL tree
From: Pablo Neira Ayuso
Date: Tue, 18 Jul 2017 12:13:54 +0200
> The following patchset contains Netfilter fixes for your net tree,
> they are:
>
> 1) Missing netlink message sanity check in nfnetlink, patch from
>Mateusz Jurczyk.
>
> 2) We now have netfilter per-netns hooks, so let's kill g
From: Pablo Neira Ayuso
Date: Tue, 18 Jul 2017 23:30:42 +0200
> David,
>
> Please if you can manually take this into your net tree to expedite
> things.
>
> On Tue, Jul 18, 2017 at 10:38:56PM +0300, Dan Carpenter wrote:
>> We accidentally return an uninitialized variable.
>>
>> Fixes: cf56c2f8
From: Florian Westphal
Date: Tue, 18 Jul 2017 23:11:57 +0200
> David Miller wrote:
>> What about that change Eric Dumazet was talking about with Florian
>> that stopped instantiating conntrack by default in new namespaces?
>
> Seems more appropriate for -next. If you pr
From: Stephen Hemminger
Date: Mon, 24 Jul 2017 10:25:17 -0700
> Various fixes for warnings in network code and drivers.
Series applied, thanks Stephen.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majord...@vger.kernel.org
More majordo
From: Pablo Neira Ayuso
Date: Thu, 24 Aug 2017 16:43:26 +0200
> The following patchset contains Netfilter fixes for your net tree,
> they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks.
--
To unsubscribe from this lis
From: Bhumika Goyal
Date: Fri, 25 Aug 2017 19:51:45 +0530
> Make this const as it is either used during a copy operation or passed
> to a const argument of the function rhltable_init
>
> Signed-off-by: Bhumika Goyal
Applied.
--
To unsubscribe from this list: send the line "unsubscribe netfilte
From: Bhumika Goyal
Date: Fri, 25 Aug 2017 19:51:44 +0530
> Make these const as they are only passed to a const argument of the
> function inet_add_protocol.
>
> Signed-off-by: Bhumika Goyal
Applied.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a
From: Bhumika Goyal
Date: Fri, 25 Aug 2017 19:51:42 +0530
> Make this const as it is only passed to a const argument of the function
> ebt_register_table.
>
> Signed-off-by: Bhumika Goyal
Applied.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a me
From: Pablo Neira Ayuso
Date: Mon, 4 Sep 2017 00:25:42 +0200
> The following patchset contains Netfilter updates for your net-next
> tree. Basically, updates to the conntrack core, enhancements for
> nf_tables, conversion of netfilter hooks from linked list to array to
> improve memory locality
I only see patches 3, 4, and 5 of this series.
If this is meant for net-next inclusion, you'll have to submit it such that
I see the entire series on netdev and thus in patchwork.
Thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to ma
From: Pablo Neira Ayuso
Date: Mon, 4 Sep 2017 22:11:02 +0200
> The following patchset contains Netfilter updates for net-next. This
> patchset includes updates for nf_tables, removal of
> CONFIG_NETFILTER_DEBUG and a new mode for xt_hashlimit. More
> specifically, they:
Pulled, thanks.
Since t
If it isn't a bug fix and it isn't in patchwork right now, I don't
want to see it.
This time around inappropriate submissions will be silently marked
as "deferred" in patchwork and not even looked at by me.
Thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
From: Pablo Neira Ayuso
Date: Fri, 8 Sep 2017 19:45:39 +0200
> The following patchset contains Netfilter/IPVS fixes for your net tree,
> they are:
>
> 1) Fix SCTP connection setup when IPVS module is loaded and any scheduler
>is registered, from Xin Long.
>
> 2) Don't create a SCTP connect
From: Pablo Neira Ayuso
Date: Wed, 20 Sep 2017 12:49:01 +0200
> The following patchset contains two Netfilter fixes for your net tree,
> they are:
>
> 1) Fix NAt compilation with UP, from Geert Uytterhoeven.
>
> 2) Fix incorrect number of entries when dumping a set, from
>Vishwanath Pai.
P
From: Pablo Neira Ayuso
Date: Mon, 9 Oct 2017 18:25:34 +0200
> The following patchset contains Netfilter/IPVS fixes for your net tree,
> they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks!
--
To unsubscribe from thi
From: "Gustavo A. R. Silva"
Date: Mon, 16 Oct 2017 15:48:55 -0500
> In preparation to enabling -Wimplicit-fallthrough, mark switch cases
> where we are expecting to fall through.
>
> Notice that in some cases I placed the "fall through" comment
> on its own line, which is what GCC is expecting t
From: "Gustavo A. R. Silva"
Date: Mon, 16 Oct 2017 16:36:52 -0500
> In preparation to enabling -Wimplicit-fallthrough, mark switch cases
> where we are expecting to fall through.
>
> Notice that in some cases I placed the "fall through" comment
> on its own line, which is what GCC is expecting t
From: Pablo Neira Ayuso
Date: Wed, 1 Nov 2017 19:48:10 +0100
> The following patchset contains two one-liner fixes for your net tree,
> they are:
>
> 1) Disable fast hash operations for 2-bytes length keys which is leading
>to incorrect lookups in nf_tables, from Anatole Denis.
>
> 2) Relo
From: Pablo Neira Ayuso
Date: Tue, 7 Nov 2017 01:51:50 +0100
> The following patchset contains Netfilter/IPVS updates for your net-next
> tree, they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Pulled, thanks a lot!
--
To un
From: Pablo Neira Ayuso
Date: Wed, 15 Nov 2017 18:28:21 +0100
> From: Arnd Bergmann
>
> This function is no longer marked 'inline', so we now get a warning
> when it is unused:
>
> net/netfilter/nf_conntrack_netlink.c:536:15: error: 'ctnetlink_proto_size'
> defined but not used [-Werror=unuse
From: Pravin Shedge
Date: Wed, 6 Dec 2017 23:02:58 +0530
> These duplicate includes have been found with scripts/checkincludes.pl but
> they have been removed manually to avoid removing false positives.
>
> Signed-off-by: Pravin Shedge
Networking patches need to be sent to net...@vger.kernel.
From: Pravin Shedge
Date: Sun, 10 Dec 2017 23:30:21 +0530
> On Thu, Dec 7, 2017 at 2:28 AM, David Miller wrote:
>> From: Pravin Shedge
>> Date: Wed, 6 Dec 2017 23:02:58 +0530
>>
>>> These duplicate includes have been found with scripts/checkincludes.pl but
>&
From: Pravin Shedge
Date: Mon, 11 Dec 2017 22:09:46 +0530
> These duplicate includes have been found with scripts/checkincludes.pl but
> they have been removed manually to avoid removing false positives.
>
> Signed-off-by: Pravin Shedge
Applied, thanks.
--
To unsubscribe from this list: send t
From: Pablo Neira Ayuso
Date: Wed, 13 Dec 2017 19:45:08 +0100
> The follow patchset contains Netfilter fixes for your net tree,
> they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, but the attention to detail in these patch
From: Pablo Neira Ayuso
Date: Fri, 5 Jan 2018 16:08:22 +0100
> The following patchset contains Netfilter fixes for your net tree,
> they are:
>
> 1) Fix chain filtering when dumping rules via nf_tables_dump_rules().
>
> 2) Fix accidental change in NF_CT_STATE_UNTRACKED_BIT through uapi,
>i
From: Pablo Neira Ayuso
Date: Wed, 27 Jun 2018 17:22:17 +0200
> The following patchset contains Netfilter fixes for your net tree:
>
> 1) Missing netlink attribute validation in nf_queue, uncovered by KASAN,
>from Eric Dumazet.
>
> 2) Use pointer to sysctl table, save us 192 bytes of memory
From: Cong Wang
Date: Wed, 27 Jun 2018 12:39:01 -0700
> Let me rephrase why I don't like this patchset:
Cong, I don't think you are seeing the situation clearly and
I am certainly going to apply this patch series even in the
face of your objections.
Suggesting that solving the lack of back pres
From: Flavio Leitner
Date: Wed, 27 Jun 2018 10:34:24 -0300
> The sock reference is lost when scrubbing the packet and that breaks
> TSQ (TCP Small Queues) and XPS (Transmit Packet Steering) causing
> performance impacts of about 50% in a single TCP stream when crossing
> network namespaces.
>
>
From: Cong Wang
Date: Thu, 28 Jun 2018 14:41:16 -0700
> Pretty sure you didn't even read the rest of my reply,
> I can't help you if you just stop at where you quoted.
I read your entire email, please do not accuse me of things
you are not sure of.
--
To unsubscribe from this list: send the line
From: Cong Wang
Date: Thu, 28 Jun 2018 14:53:09 -0700
> I will send a revert with quote of the above.
And it will go to /dev/null as far as I am concerned. I read it the
first time, so posting it again will not change my opinion of what you
have to say.
Cong, you really need to calm down and u
The deadline is only 10 days away, and slots are filling up quickly.
This is a call for proposals for the networking track at the 2018
edition of the Linux Plumbers Conference which will be held in
Vancouver on November 13th and November 14th.
The LPC Networking Track is a community event, open
This is the final reminder and the deadline is now only 5 days away,
so if you plan to make a proposal please send it in soon!
This is a call for proposals for the networking track at the 2018
edition of the Linux Plumbers Conference which will be held in
Vancouver on November 13th and November
From: Pablo Neira Ayuso
Date: Mon, 9 Jul 2018 19:18:58 +0200
> The following patchset contains Netfilter fixes for your net tree:
>
> 1) Missing module autoloadfor icmp and icmpv6 x_tables matches,
>from Florian Westphal.
>
> 2) Possible non-linear access to TCP header from tproxy, from
>
From: Toke Høiland-Jørgensen
Date: Fri, 06 Jul 2018 17:37:19 +0200
> This patch series adds the CAKE qdisc, and has been split up to ease
> review.
>
> I have attempted to split out each configurable feature into its own patch.
> The first commit adds the base shaper and packet scheduler, while
From: David Ahern
Date: Tue, 17 Jul 2018 13:02:18 -0600
> I understand the concern about global resource and limits: as it stands
> you have to increase the limits in init_net to the max expected and hope
> for the best. With per namespace limits you can lower the limits of each
> namespace bette
From: Pablo Neira Ayuso
Date: Fri, 20 Jul 2018 15:08:28 +0200
> The following patchset contains Netfilter/IPVS updates for your net-next
> tree:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Pulled, thank you.
--
To unsubscribe fro
From: Florian Westphal
Date: Sun, 22 Jul 2018 18:39:25 +0200
> 3. change meaning of ->done() so its always called once ->start()
>was invoked (and returned 0), this requires audit of all
>places that provide .done to make sure they won't trip.
>
> 3) seems to be what Tom intended when he
From: Florian Westphal
Date: Mon, 23 Jul 2018 12:47:14 +0200
> Shaochun Chen points out we leak dumper filter state allocations
> stored in dump_control->data in case there is an error before netlink sets
> cb_running (after which ->done will be called at some point).
>
> In order to fix this, a
From: Pablo Neira Ayuso
Date: Tue, 24 Jul 2018 18:31:24 +0200
> The following patchset contains Netfilter fixes for net:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thank you.
--
To unsubscribe from this list: send the line "u
From: David Ahern
Date: Tue, 24 Jul 2018 09:14:01 -0600
> I get the impression there is no longer a strong resistance against
> moving the tables to per namespace, but deciding what is the right
> approach to handle backwards compatibility. Correct? Changing the
> accounting is inevitably going t
From: Stephen Hemminger
Date: Tue, 24 Jul 2018 12:29:00 -0700
> Ran script that I use to check for trailing whitespace and
> blank lines at end of files across all files in net/ directory.
> These are errors that checkpatch reports and git flags.
>
> These are the resulting fixes broken up mostl
From: Dmitry Safonov
Date: Sat, 28 Jul 2018 17:26:55 +0100
> Well, I think, I'll rework my patches set according to critics and
> separate compat xfrm layer. I've already a selftest to check that 32/64
> bit xfrm works - so the most time-taking part is done.
The way you've done the compat struct
From: Pablo Neira Ayuso
Date: Sun, 5 Aug 2018 23:21:20 +0200
> The following patchset contains Netfilter updates for your net-next tree:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Pulled, thanks Pablo.
--
To unsubscribe from th
From: Pablo Neira Ayuso
Date: Fri, 10 Aug 2018 13:16:14 +0200
> The following batch contains netfilter updates for your net-next tree:
>
> 1) Expose NFT_OSF_MAXGENRELEN maximum OS name length from the new OS
>passive fingerprint matching extension, from Fernando Fernandez.
>
> 2) Add extens
From: Pablo Neira Ayuso
Date: Fri, 17 Aug 2018 21:38:35 +0200
> The following patchset contains Netfilter/IPVS fixes for your net tree:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks.
From: Pablo Neira Ayuso
Date: Tue, 11 Sep 2018 02:20:32 +0200
> The following patchset contains Netfilter fixes for you net tree:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Looks good, pulled, thanks.
From: dsah...@kernel.org
Date: Thu, 20 Sep 2018 13:50:46 -0700
> From: David Ahern
>
> Two netfilter modules reference fib_nh. In both cases the code is
> only checking if a nexthop in a fib_info uses a specific device.
> Both instances essentially duplicate code from __fib_validate_source,
> so
From: Pablo Neira Ayuso
Date: Tue, 2 Oct 2018 00:37:39 +0200
> The following patchset contains Netfilter fixes for your net tree:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks.
From: Flavio Leitner
Date: Fri, 28 Sep 2018 14:55:34 -0300
> This reverts commit 90c7afc96cbbd77f44094b5b651261968e97de67.
>
> When the commit was merged, the code used nf_ct_put() to free
> the entry, but later on commit 76644232e612 ("openvswitch: Free
> tmpl with tmpl_free.") replaced that wi
From: Flavio Leitner
Date: Fri, 28 Sep 2018 14:51:28 -0300
> Load the respective NAT helper module if the flow uses it.
>
> Signed-off-by: Flavio Leitner
Applied.
From: Pablo Neira Ayuso
Date: Tue, 9 Oct 2018 01:00:54 +0200
> The following patchset contains Netfilter updates for your net-next
> tree:
Pulled, thanks.
From: Pablo Neira Ayuso
Date: Wed, 10 Oct 2018 00:24:36 +0200
> The following patchset adds a new field to the tunnel metadata template.
> This new field allows us to restrict the configuration to a given tunnel
> driver in order to catch incorrect configuration that may result in
> packets going
From: Pablo Neira Ayuso
Date: Sat, 20 Oct 2018 11:43:07 +0200
> The following patchset contains Netfilter updates for your net-next tree:
>
> 1) Use lockdep_is_held() in ipset_dereference_protected(), from Lance Roy.
>
> 2) Remove unused variable in cttimeout, from YueHaibing.
>
> 3) Add ttl o
From: Pablo Neira Ayuso
Date: Mon, 22 Oct 2018 22:07:16 +0200
> The following patchset contains Netfilter fixes for your net tree:
>
> 1) rbtree lookup from control plane returns the left-hand side element
>of the range when the interval end flag is set on.
>
> 2) osf extension is not suppo
From: Pablo Neira Ayuso
Date: Tue, 6 Nov 2018 00:28:18 +0100
> The following patchset contains the first batch of Netfilter fixes for
> your net tree:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thank you.
From: Michał Mirosław
Date: Fri, 09 Nov 2018 00:17:58 +0100
> This series removes from networking core and driver code an assumption
> about how VLAN tag presence is stored in an skb. This will allow to free
> up overloading of VLAN.CFI bit to incidate tag's presence.
This looks good, series app
From: Pablo Neira Ayuso
Date: Wed, 28 Nov 2018 11:17:25 +0100
> The following patchset contains Netfilter fixes for net:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled.
From: Pablo Neira Ayuso
Date: Thu, 13 Dec 2018 02:06:26 +0100
> The following patchset contains Netfilter fixes for net:
>
> 1) Fix warnings suspicious rcu usage when handling base chain
>statistics, from Taehee Yoo.
>
> 2) Refetch pointer to tcp header from nf_ct_sack_adjust() since
>s
From: Pablo Neira Ayuso
Date: Fri, 21 Dec 2018 01:28:04 +0100
> The following patchset contains Netfilter updates for net-next:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Pulled, thanks.
I've merged 'net' into 'net-next' and applied a bunch of pending stuff.
Fire at will...
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majord...@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
From: Pablo Neira Ayuso
Date: Wed, 10 Aug 2016 20:56:25 +0200
> The following patchset contains Netfilter fixes for your net tree,
> they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks a lot Pablo!
--
To unsubscribe f
From: Pablo Neira Ayuso
Date: Thu, 18 Aug 2016 19:29:02 +0200
> The following patchset contains Netfilter updates for your net tree,
> they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks a lot Pablo.
--
To unsubscribe
From: Pablo Neira Ayuso
Date: Tue, 30 Aug 2016 13:26:16 +0200
> The following patchset contains Netfilter fixes for your net tree,
> they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks a lot Pablo.
--
To unsubscribe f
From: Pablo Neira Ayuso
Date: Mon, 5 Sep 2016 12:58:15 +0200
> Hi David,
>
> The following patchset contains Netfilter updates for your net-next
> tree. Most relevant updates are the removal of per-conntrack timers to
> use a workqueue/garbage collection approach instead from Florian
> Westpha
From: Pablo Neira Ayuso
Date: Tue, 13 Sep 2016 11:05:13 +0200
> The following patchset contains Netfilter fixes for your net tree,
> they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks Pablo.
--
To unsubscribe from th
From: Pablo Neira Ayuso
Date: Mon, 26 Sep 2016 01:06:10 +0200
> The following patchset contains Netfilter updates for your net-next
> tree, they are:
...
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Pulled, thanks Pablo.
--
To unsubsc
From: Pablo Neira Ayuso
Date: Thu, 6 Oct 2016 02:07:44 +0200
> This is a pull request to address fallout from previous nf-next pull
> request, only fixes going on here:
>
> 1) Address a potential null dereference in nf_unregister_net_hook()
>when becomes nf_hook_entry_head is NULL, from Aar
From: Pablo Neira Ayuso
Date: Thu, 6 Oct 2016 02:09:45 +0200
> On Wed, Oct 05, 2016 at 03:37:17PM -0700, Linus Torvalds wrote:
>> On Wed, Oct 5, 2016 at 3:29 PM, Stephen Rothwell
>> wrote:
>> >
>> > I have been carrying the following merge fix patch (for the merge of
>> > the net-next tree with
From: Stephen Rothwell
Date: Thu, 6 Oct 2016 13:51:52 +1100
> On Wed, 5 Oct 2016 19:14:21 -0700 Linus Torvalds
> wrote:
>>
>> On Wed, Oct 5, 2016 at 5:52 PM, Stephen Rothwell
>> wrote:
>> >
>> > Except that commit effectively moved that function from
>> > net/netfilter/nf_tables_netdev.c to
>
From: Linus Torvalds
Date: Sun, 9 Oct 2016 20:41:17 -0700
> Note that the "correct way" of doing list operations also almost
> inevitably is the shortest way by far, since it gets rid of all the
> special cases. So the patch looks nice. It gets rid of the magic
> "nf_set_hooks_head()" thing too,
1 - 100 of 234 matches
Mail list logo
