Show patches with: State = Action Required       |   60 patches
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[nft,2/2] expr: add jool expressions [libnftnl,1/2] expr: add jool support - - - - --- 2020-04-07 Alberto Leiva pablo Under Review
[libnftnl,1/2] expr: add jool support [libnftnl,1/2] expr: add jool support - - - - --- 2020-04-07 Alberto Leiva pablo Under Review
netfilter/ipvs: immediately expire no destination connections in kthread if expire_nodest_conn=1 netfilter/ipvs: immediately expire no destination connections in kthread if expire_nodest_conn=1 - - - - --- 2020-05-24 Andrew Kim pablo Under Review
[next] netfilter: conntrack: fix an unsigned int comparison to less than zero [next] netfilter: conntrack: fix an unsigned int comparison to less than zero - 1 - - --- 2020-05-26 Colin King pablo Under Review
[net] netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code [net] netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code - 1 - - --- 2020-05-06 Dan Carpenter pablo Under Review
[libnetfilter_queue,1/1] example: nf-queue: use pkt_buff (updated) pktbuff API updates - - - - --- 2020-05-14 Duncan Roe pablo Under Review
[libnetfilter_queue,1/1] src & doc: Rename pktb_alloc2 to pktb_setup [libnetfilter_queue,1/1] src & doc: Rename pktb_alloc2 to pktb_setup - - - - --- 2020-05-13 Duncan Roe pablo Under Review
[libnetfilter_queue,1/1] src: add pktb_alloc2() and pktb_head_size() pktb_alloc2() - - - - --- 2020-05-10 Duncan Roe pablo Under Review
netfilter: nf_conntrack_sip: fix ct_sip_walk_headers netfilter: nf_conntrack_sip: fix ct_sip_walk_headers - - - - --- 2019-06-05 Igor Ryzhov pablo Under Review
[v4] doc: document danger of applying REJECT to INVALID CTs [v4] doc: document danger of applying REJECT to INVALID CTs - - - - --- 2020-05-13 Jan Engelhardt pablo Under Review
libiptc.c: pragma disable a gcc compiler warning libiptc.c: pragma disable a gcc compiler warning - 1 - - --- 2020-05-11 Maciej ┼╗enczykowski pablo Under Review
[net] netfilter: conntrack: Pass value of ctinfo to __nf_conntrack_update [net] netfilter: conntrack: Pass value of ctinfo to __nf_conntrack_update - 1 - - --- 2020-05-27 Nathan Chancellor pablo Under Review
[nf] netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build [nf] netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build - 1 - - --- 2020-05-27 Pablo Neira Ayuso pablo Under Review
[nf,v2] netfilter: nf_conntrack: comparison of unsigned in cthelper confirmation [nf,v2] netfilter: nf_conntrack: comparison of unsigned in cthelper confirmation - 1 - - --- 2020-05-27 Pablo Neira Ayuso pablo Under Review
netfilter: nfnetlink_cthelper: protocol offset signess in IPv6 netfilter: nfnetlink_cthelper: protocol offset signess in IPv6 - 1 - - --- 2020-05-27 Pablo Neira Ayuso pablo Under Review
[libnftnl] flowtable: relax logic to build NFTA_FLOWTABLE_HOOK [libnftnl] flowtable: relax logic to build NFTA_FLOWTABLE_HOOK - - - - --- 2020-05-25 Pablo Neira Ayuso pablo Under Review
[nf-next] netfilter: nf_tables: skip flowtable hooknum and priority on device updates [nf-next] netfilter: nf_tables: skip flowtable hooknum and priority on device updates - - - - --- 2020-05-25 Pablo Neira Ayuso pablo Under Review
[nft,4/4] src: allow flowtable definitions with no devices [nft,1/4] mnl: add function to convert flowtable device list to array - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nft,3/4] src: delete devices to an existing flowtable [nft,1/4] mnl: add function to convert flowtable device list to array - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nft,2/4] src: add devices to an existing flowtable [nft,1/4] mnl: add function to convert flowtable device list to array - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nft,1/4] mnl: add function to convert flowtable device list to array [nft,1/4] mnl: add function to convert flowtable device list to array - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nf-next,7/7] netfilter: nf_tables: allow to register flowtable with no devices dynamic device updates for flowtables - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nf-next,6/7] netfilter: nf_tables: delete devices from flowtable dynamic device updates for flowtables - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nf-next,5/7] netfilter: nf_tables: add devices to existing flowtable dynamic device updates for flowtables - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nf-next,4/7] netfilter: nf_tables: pass hook list to flowtable event notifier dynamic device updates for flowtables - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nf-next,3/7] netfilter: nf_tables: add nft_flowtable_hooks_destroy() dynamic device updates for flowtables - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nf-next,2/7] netfilter: nf_tables: pass hook list to nft_{un,}register_flowtable_net_hooks() dynamic device updates for flowtables - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[nf-next,1/7] netfilter: nf_tables: generalise flowtable hook parsing dynamic device updates for flowtables - - - - --- 2020-05-20 Pablo Neira Ayuso pablo Under Review
[libnetfilter_queue,2/2] pktbuff: add pktb_head_alloc(), pktb_setup() and pktb_head_size() [libnetfilter_queue,1/2] pktbuff: add __pktb_setup() - - - - --- 2020-05-09 Pablo Neira Ayuso pablo Under Review
[libnetfilter_queue,1/2] pktbuff: add __pktb_setup() [libnetfilter_queue,1/2] pktbuff: add __pktb_setup() - - - - --- 2020-05-09 Pablo Neira Ayuso pablo Under Review
[iptables] doc: libxt_MARK: OUTPUT chain is fine, too [iptables] doc: libxt_MARK: OUTPUT chain is fine, too - 1 - - --- 2020-05-19 Phil Sutter pablo Under Review
[iptables,3/3] libxt_SECMARK: Fix for failing target comparison Fix SECMARK target comparison - - - - --- 2020-05-12 Phil Sutter pablo Under Review
[iptables,2/3] libxtables: Introduce 'matchmask' target callback Fix SECMARK target comparison - - - - --- 2020-05-12 Phil Sutter pablo Under Review
[iptables,1/3] xshared: Share make_delete_mask() between ip{,6}tables Fix SECMARK target comparison - - - - --- 2020-05-12 Phil Sutter pablo Under Review
[iptables] xtables-restore: Fix verbose mode table flushing [iptables] xtables-restore: Fix verbose mode table flushing - - - - --- 2020-05-12 Phil Sutter pablo Under Review
[nft] doc: nft.8: Add BUGS section about command line parsing [nft] doc: nft.8: Add BUGS section about command line parsing - - - - --- 2019-12-11 Phil Sutter pablo Under Review
[nft,v3] src: Support maps as left side expressions [nft,v3] src: Support maps as left side expressions - - - - --- 2019-11-30 Phil Sutter pablo Under Review
[1/1] geoip: add quiet flag to xt_geoip_build [1/1] geoip: add quiet flag to xt_geoip_build - - - - --- 2020-05-25 Philip Prindeville pablo Under Review
[ghak25,v6a] audit: add subj creds to NETFILTER_CFG record to cover async unregister [ghak25,v6a] audit: add subj creds to NETFILTER_CFG record to cover async unregister - - - - --- 2020-05-20 Richard Guy Briggs pablo Under Review
[nf-next,v6] netfilter: ctnetlink: add kernel side filtering for dump [nf-next,v6] netfilter: ctnetlink: add kernel side filtering for dump - - - - --- 2020-05-04 Romain Bellan pablo Under Review
[libnftnl,2/2] utils: add NFCT_FILTER_DUMP_TUPLE example [libnftnl,1/2] Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API - - - - --- 2020-01-29 Romain Bellan pablo Under Review
[libnftnl,1/2] Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API [libnftnl,1/2] Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API - - - - --- 2020-01-29 Romain Bellan pablo Under Review
[nft,2/2] tests: shell: Introduce test for concatenated ranges in anonymous sets Fix evaluation of anonymous sets with concatenated ranges - - - - --- 2020-05-24 Stefano Brivio pablo Under Review
[nft,1/2] evaluate: Perform set evaluation on implicitly declared (anonymous) sets Fix evaluation of anonymous sets with concatenated ranges 1 - - - --- 2020-05-24 Stefano Brivio pablo Under Review
[nft] tests: shell: Avoid breaking basic connectivity when run [nft] tests: shell: Avoid breaking basic connectivity when run - - - - --- 2020-05-24 Stefano Brivio pablo Under Review
[NOMERGE,iptables,2/2] man: xt_set: Describe --update-counters-first flag man: xt_set: Describe existing behaviour and new counters update flag - - - - --- 2020-03-22 Stefano Brivio kadlec Under Review
[NOMERGE,iptables,1/2] man: xt_set: Reflect current behaviour of counter update and match flags man: xt_set: Describe existing behaviour and new counters update flag - - - - --- 2020-03-22 Stefano Brivio kadlec Under Review
ipset: Update byte and packet counters regardless of whether they match ipset: Update byte and packet counters regardless of whether they match - 1 - - --- 2020-02-24 Stefano Brivio pablo Under Review
[1/1] Remove flow offload when ct is removed from userspace [1/1] Remove flow offload when ct is removed from userspace - - - - --- 2020-05-23 Sven Auhagen pablo Under Review
[1/1] Restore the CT mark in Flow Offload [1/1] Restore the CT mark in Flow Offload - - - - --- 2020-05-23 Sven Auhagen pablo Under Review
[iptables] avoid raw sockets which requires CAP_NET_RAW [iptables] avoid raw sockets which requires CAP_NET_RAW - - - - --- 2020-03-29 Youfu Zhang pablo Under Review
[2/3] nftables: enable reject with 802.1q Avoid gretap fragmentation with nftables on bridge - - - - --- 2020-05-06 michael-dev pablo Under Review
[1/3] nftables: add frag-needed (ipv4) to reject options Avoid gretap fragmentation with nftables on bridge - - - - --- 2020-05-06 michael-dev pablo Under Review
[RFC] netlink: do not alter set element width [RFC] netlink: do not alter set element width - - - - --- 2020-05-05 michael-dev pablo Under Review
[RFC] concat with dynamically sized fields like vlan id [RFC] concat with dynamically sized fields like vlan id - - - - --- 2020-05-01 michael-dev pablo Under Review
[nf-next] netfilter: nf_flow_table_offload: fix kernel NULL pointer dereference in nf_flow_table_... [nf-next] netfilter: nf_flow_table_offload: fix kernel NULL pointer dereference in nf_flow_table_... - 1 - - --- 2020-03-18 wenxu pablo Under Review
[nf-next,v2,4/4] netfilter: nft_tunnel: add nft_tunnel_get_offload support netfilter: nft_tunnel: support tunnel match expr offload - - - - --- 2019-11-16 wenxu pablo Under Review
[nf-next,v2,3/4] netfilter: nft_tunnel: support NFT_TUNNEL_IPV6_SRC/DST match netfilter: nft_tunnel: support tunnel match expr offload - - - - --- 2019-11-16 wenxu pablo Under Review
[nf-next,v2,2/4] netfilter: nft_tunnel: support NFT_TUNNEL_IPV4_SRC/DST match netfilter: nft_tunnel: support tunnel match expr offload - - - - --- 2019-11-16 wenxu pablo Under Review
[nf-next,v2,1/4] netfilter: nft_tunnel: add nft_tunnel_mode_match function netfilter: nft_tunnel: support tunnel match expr offload - - - - --- 2019-11-16 wenxu pablo Under Review