| [nftables] rule: display rule handle as comment |
2013-05-20 |
Eric Leblond |
|
New |
| [RFC,2/2] netfilter: nf_tables: improvements for the existing transaction approach |
2013-05-20 |
Pablo Neira |
|
RFC |
| [RFC,1/2] netfilter: nfnetlink: add commit operation to nfnl_subsystems |
2013-05-20 |
Pablo Neira |
|
RFC |
| iptables: use autoconf to process .in man pages |
2013-05-20 |
Andy Spencer |
|
New |
| [Ulogd] Improve pid file handling. |
2013-05-19 |
Eric Leblond |
|
New |
| doc: mention SNAT in INPUT chain since kernel 2.6.36 |
2013-05-19 |
Michael Roth |
|
Accepted |
| [v2] netfilter: add and use nf_ipv6_ops in xt_addrtype |
2013-05-17 |
Florian Westphal |
|
Under Review |
| ipv4: netfilter: always let NUL terminated string ended by '\0' |
2013-05-17 |
Chen Gang |
|
Under Review |
| bridge: netfilter: using strlcpy() instead of strncpy() |
2013-05-17 |
Chen Gang |
|
Under Review |
| [next,v2] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS |
2013-05-17 |
Afschin Hormozdiary |
|
Under Review |
| [4/4] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary |
2013-05-16 |
Pablo Neira |
|
Accepted |
| [3/4] netfilter: log: netns NULL ptr bug when calling from conntrack |
2013-05-16 |
Pablo Neira |
|
Accepted |
| [2/4] netfilter: update MAINTAINERS file |
2013-05-16 |
Pablo Neira |
|
Accepted |
| [1/4] netfilter: nf_{log,queue}: fix compilation without CONFIG_PROC_FS |
2013-05-16 |
Pablo Neira |
|
Accepted |
| [0/4] Netfilter fixes for net (3.10-rc1) |
2013-05-16 |
Pablo Neira |
|
Accepted |
| [next] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS |
2013-05-16 |
Afschin Hormozdiary |
|
RFC |
| [v4] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary |
2013-05-15 |
Pablo Neira |
|
Superseded |
| [v3] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary |
2013-05-15 |
Pablo Neira |
|
Superseded |
| [v2] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary |
2013-05-15 |
Pablo Neira |
|
Superseded |
| netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary |
2013-05-15 |
Pablo Neira |
|
Superseded |
| netfilter: log: netns NULL ptr bug when calling from conntrack. |
2013-05-15 |
Hans Schillstrom |
|
Accepted |
| [libnftables] examples: XML parsing examples |
2013-05-15 |
Arturo Borrero |
|
Under Review |
| cli: complete basic functionality of the interactive mode |
2013-05-14 |
Pablo Neira |
|
Accepted |
| [libnftables,v4] src: support for XML parsing |
2013-05-14 |
Arturo Borrero |
|
Under Review |
| [iptables-nftables,6/6] xtables: add suport for DNAT rule translation to nft extensions |
2013-05-14 |
Tomasz Bursztyka |
|
RFC |
| [iptables-nftables,5/6] xtables: add support for translating xtables matches into nft expressions |
2013-05-14 |
Tomasz Bursztyka |
|
RFC |
| [iptables-nftables,4/6] xtables: Add support for translating xtables target into nft expressions |
2013-05-14 |
Tomasz Bursztyka |
|
RFC |
| [iptables-nftables,3/6] xtables: policy can be changed only on builtin chain |
2013-05-14 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,2/6] xtables: destroy list iterator relevantly |
2013-05-14 |
Tomasz Bursztyka |
|
Under Review |
| [iptables-nftables,1/6] xtables: initialize xtables defaults even on listing rules |
2013-05-14 |
Tomasz Bursztyka |
|
Accepted |
| [libnftables,7/7] chain: handle attribute is relevant if only there is no name to use |
2013-05-14 |
Tomasz Bursztyka |
|
Under Review |
| [libnftables,6/7] expr: add support for expr list and capability to add it into a rule |
2013-05-14 |
Tomasz Bursztyka |
|
Under Review |
| [libnftables,5/7] map: fix nft_rule_expr_build_payload export |
2013-05-14 |
Tomasz Bursztyka |
|
Accepted |
| [libnftables,4/7] expr: remove inconsistent and non implemented function |
2013-05-14 |
Tomasz Bursztyka |
|
Accepted |
| [libnftables,3/7] rule: declare nft_rule_list structure at a proper place |
2013-05-14 |
Tomasz Bursztyka |
|
Accepted |
| [libnftables,2/7] build: add an autogen.sh script |
2013-05-14 |
Tomasz Bursztyka |
|
Accepted |
| [libnftables,1/7] git: add a .gitignore file |
2013-05-14 |
Tomasz Bursztyka |
|
Accepted |
| Some netfilter compile errors when CONFIG_IPV6=m |
2013-05-14 |
Amerigo Wang |
|
Under Review |
| netfilter: add and use nf_afinfo in xt_addrtype |
2013-05-13 |
Florian Westphal |
|
Superseded |
| [v2] ulogd: Implement PID file writing |
2013-05-12 |
Chris Boot |
|
Under Review |
| ipset: Fix hyphen used as minus sign in manpage |
2013-05-12 |
Neutron Soutmun |
|
Under Review |
| ipset: Fix syntax error of bash completion in Debian environment |
2013-05-12 |
Neutron Soutmun |
|
Under Review |
| [2/2] ulogd: Implement PID file writing |
2013-05-11 |
Chris Boot |
|
Superseded |
| [1/2] ulogd: Perform nice() before giving up root |
2013-05-11 |
Chris Boot |
|
Under Review |
| ipset: fix syntax error in bash completion and hyphen used as minus sign in manpage |
2013-05-11 |
Neutron Soutmun |
|
Not Applicable |
| ipset: fix syntax error in bash completion and hyphen used as minus sign in manpage |
2013-05-11 |
Neutron Soutmun |
|
Not Applicable |
| libipset.pc must be installed via 'make install' |
2013-05-10 |
Eric Leblond |
|
Accepted |
| [11/11] db: db ring has precedence over backlog. |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [10/11] db: disable SIGHUP if ring buffer is used. |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [09/11] db: add ring buffer for DB query |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [08/11] db: use offset instead of direct pointer. |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [07/11] db: suppress field in db structure |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [06/11] db: store data in memory during database downtime |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [05/11] sqlite3: add sanity checking |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [04/11] mysql: add sanity checking |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [03/11] postgresql: add sanity checking |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [02/11] Fix automagic support of dbi, pcap and sqlite3 |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [01/11] ulogd: display stack during configuration |
2013-05-10 |
Eric Leblond |
|
Under Review |
| [nf-next] netfilter: xt_CT: optimize XT_CT_NOTRACK |
2013-05-09 |
Eric Dumazet |
|
Under Review |
| [nf-next] netfilter: conntrack: remove the central spinlock |
2013-05-09 |
Eric Dumazet |
|
Under Review |
| libxtables: fix parsing of dotted network mask format |
2013-05-08 |
Pablo Neira |
|
Accepted |
| xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case). |
2013-05-08 |
Jan Engelhardt |
|
Not Applicable |
| [nfacct] Improve 'flush' man page entry |
2013-05-08 |
Thomas Jarosch |
|
Accepted |
| [xtables-addons,1/1] xt_DHCPMAC: correct mac setting and comparing |
2013-05-07 |
Boris Figovsky |
|
Not Applicable |
| [-stable-3.8.y,9/9] netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths |
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,8/9] netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too |
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,7/9] netfilter: ctnetlink: don't permit ct creation with random tuple |
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,6/9] netfilter: nf_ct_helper: don't discard helper if it is actually the same |
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,5/9] netfilter: ipset: "Directory not empty" error message |
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,4/9] netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet |
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,3/9] netfilter: ipset: list:set: fix reference counter update |
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,2/9] netfilter: nf_nat: fix race when unloading protocol modules |
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,1/9] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value |
2013-05-06 |
Pablo Neira |
|
Accepted |
| xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case). |
2013-05-05 |
Dmitry Popov |
|
Not Applicable |
| [v2,1/2] sched: Add cond_resched_rcu_lock() helper |
2013-05-02 |
Julian Anastasov |
|
Not Applicable |
| [6/6] netfilter: ipset: Use fix sized type for timeout in the extension part |
2013-05-02 |
Jozsef Kadlecsik |
|
RFC |
| [5/6] netfilter: ipset: Fix "may be used uninitialized" warnings |
2013-05-02 |
Jozsef Kadlecsik |
|
RFC |
| [4/6] netfilter: ipset: Rename simple macro names to avoid namespace issues. |
2013-05-02 |
Jozsef Kadlecsik |
|
RFC |
| [3/6] netfilter: ipset: Fix sparse warnings due to missing rcu annotations |
2013-05-02 |
Jozsef Kadlecsik |
|
RFC |
| [2/6] netfilter: ipset: Sparse warning about shadowed variable fixed |
2013-05-02 |
Jozsef Kadlecsik |
|
RFC |
| [1/6] netfilter: ipset: Don't call ip_nest_end needlessly in the error path |
2013-05-02 |
Jozsef Kadlecsik |
|
RFC |
| [0/6] ipset updates for nf-next |
2013-05-02 |
Jozsef Kadlecsik |
|
RFC |
| [V2] netfilter: ipset: support package fragments for IPv4 protos without ports |
2013-05-01 |
Anders K. Pedersen | Surftown |
|
Awaiting Upstream |
| [v2,1/2] sched: Add cond_resched_rcu_lock() helper |
2013-05-01 |
Peter Zijlstra |
|
Not Applicable |
| [v3,2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections |
2013-05-01 |
Simon Horman |
|
Not Applicable |
| [v3,1/2] sched: Add cond_resched_rcu_lock() helper |
2013-05-01 |
Simon Horman |
|
Not Applicable |
| net/netfilter/nf_log.c:373:38: error: 'struct netns_nf' has no member named 'proc_netfilter' |
2013-04-30 |
Pablo Neira |
|
Accepted |
| [v2,2/2] ipvs: Use cond_resched_rcu_lock() helper when dumping connections |
2013-04-30 |
Simon Horman |
|
RFC |
| [v2,1/2] sched: Add cond_resched_rcu_lock() helper |
2013-04-30 |
Simon Horman |
|
RFC |
| [18/18] sctp: Correct type and usage of sctp_end_cksum() |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [17/18] netfilter: nfnetlink_queue: avoid expensive gso segmentation and checksum fixup |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [16/18] netfilter: nfnetlink_queue: add skb info attribute |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [15/18] netfilter: move skb_gso_segment into nfnetlink_queue module |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [14/18] netfilter: nf_queue: move device refcount bump to extra function |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [13/18] netfilter: ipset: set match: add support to match the counters |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [12/18] netfilter: ipset: The list:set type with counter support |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [11/18] netfilter: ipset: The hash types with counter support |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [10/18] netfilter: ipset: The bitmap types with counter support |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [09/18] netfilter: ipset: Introduce the counter extension in the core |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [08/18] netfilter: ipset: list:set type using the extension interface |
2013-04-29 |
Pablo Neira |
|
Accepted |
