Show patches with: Archived = No       |   28542 patches
« 1 2 ... 23 24 25 … 285 286 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[nf] netfilter: nft_payload: incorrect arithmetics when rebuiling VLAN header [nf] netfilter: nft_payload: incorrect arithmetics when rebuiling VLAN header - 1 - - --- 2023-01-11 Pablo Neira Ayuso pablo Accepted
[nf] netfilter: conntrack: handle tcp challenge acks during connection reuse [nf] netfilter: conntrack: handle tcp challenge acks during connection reuse - 1 - - --- 2023-01-11 Florian Westphal pablo Accepted
[v2] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. [v2] netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. - 1 1 - --- 2023-01-11 Gavrilov Ilia pablo Accepted
[v4] netfilter: conntrack: simplify sctp state machine [v4] netfilter: conntrack: simplify sctp state machine - - - - --- 2023-01-11 Sriram Yagnaraman pablo Changes Requested
[iptables] Makefile: Replace brace expansion [iptables] Makefile: Replace brace expansion - 1 - - --- 2023-01-10 Phil Sutter Accepted
[net-next,v1,7/7] netfilter: nf_conntrack: allow early drop of offloaded UDP conns Allow offloading of UDP NEW connections via act_ct - - - - --- 2023-01-10 Vlad Buslov pablo Changes Requested
[net-next,v1,6/7] net/sched: act_ct: offload UDP NEW connections Allow offloading of UDP NEW connections via act_ct - - - - --- 2023-01-10 Vlad Buslov pablo Changes Requested
[net-next,v1,5/7] net/sched: act_ct: set ctinfo in meta action depending on ct state Allow offloading of UDP NEW connections via act_ct - - - - --- 2023-01-10 Vlad Buslov pablo Changes Requested
[net-next,v1,4/7] netfilter: flowtable: allow updating offloaded rules asynchronously Allow offloading of UDP NEW connections via act_ct - - - - --- 2023-01-10 Vlad Buslov pablo Changes Requested
[net-next,v1,3/7] netfilter: flowtable: allow unidirectional rules Allow offloading of UDP NEW connections via act_ct - - - - --- 2023-01-10 Vlad Buslov pablo Changes Requested
[net-next,v1,2/7] netfilter: flowtable: fixup UDP timeout depending on ct state Allow offloading of UDP NEW connections via act_ct - - - - --- 2023-01-10 Vlad Buslov pablo Changes Requested
[net-next,v1,1/7] net: flow_offload: provision conntrack info in ct_metadata Allow offloading of UDP NEW connections via act_ct - - - - --- 2023-01-10 Vlad Buslov pablo Changes Requested
[RFC,v3] netfilter: conntrack: simplify sctp state machine [RFC,v3] netfilter: conntrack: simplify sctp state machine - - - - --- 2023-01-09 Sriram Yagnaraman pablo RFC
netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. - 1 - - --- 2023-01-09 Gavrilov Ilia Changes Requested
[no subject] Untitled series #335660 - 1 - - --- 2023-01-09 Gavrilov Ilia pablo Not Applicable
[libnetfilter_conntrack,1/1] conntrack: Allow setting of netlink buffer size [libnetfilter_conntrack,1/1] conntrack: Allow setting of netlink buffer size - - - - --- 2023-01-06 Bill Blough pablo Not Applicable
[nft] src: allow for updating devices on existing netdev chain [nft] src: allow for updating devices on existing netdev chain - - - - --- 2023-01-06 Pablo Neira Ayuso pablo Changes Requested
[nf-next,v2,4/4] netfilter: nf_tables: allow to create netdev chain without device [nf-next,v2,1/4] netfilter: nf_tables: rename function to destroy hook list - - - - --- 2023-01-06 Pablo Neira Ayuso pablo Changes Requested
[nf-next,v2,3/4] netfilter: nf_tables: support for deleting devices in an existing netdev chain [nf-next,v2,1/4] netfilter: nf_tables: rename function to destroy hook list - - - - --- 2023-01-06 Pablo Neira Ayuso pablo Changes Requested
[nf-next,v2,2/4] netfilter: nf_tables: support for adding new devices to an existing netdev chain [nf-next,v2,1/4] netfilter: nf_tables: rename function to destroy hook list - - - - --- 2023-01-06 Pablo Neira Ayuso pablo Changes Requested
[nf-next,v2,1/4] netfilter: nf_tables: rename function to destroy hook list [nf-next,v2,1/4] netfilter: nf_tables: rename function to destroy hook list - - - - --- 2023-01-06 Pablo Neira Ayuso pablo Changes Requested
[nf] netfilter: nf_tables: do not send complete notification of deletions [nf] netfilter: nf_tables: do not send complete notification of deletions - 1 - - --- 2023-01-06 Pablo Neira Ayuso pablo Changes Requested
[RFC,v2] netfilter: conntrack: simplify sctp state machine [RFC,v2] netfilter: conntrack: simplify sctp state machine - - - - --- 2023-01-05 Sriram Yagnaraman pablo Changes Requested
[nf] selftests: netfilter: fix transaction test script timeout handling [nf] selftests: netfilter: fix transaction test script timeout handling - 1 - - --- 2023-01-04 Florian Westphal pablo Accepted
[nft] optimize: payload expression requires inner_desc comparison [nft] optimize: payload expression requires inner_desc comparison - - - - --- 2023-01-04 Pablo Neira Ayuso pablo Accepted
[net-next,04/14] netlink: add macro for checking dump ctx size Untitled series #334882 - - 2 - --- 2023-01-04 Jakub Kicinski pablo Handled Elsewhere
[nf-next,v1,3/3] netfilter: nf_tables: support for deleting devices in an existing netdev chain [nf-next,v1,1/3] netfilter: nf_tables: rename function to destroy hook list - - - - --- 2023-01-03 Pablo Neira Ayuso pablo Changes Requested
[nf-next,v1,2/3] netfilter: nf_tables: support for adding new devices to an existing netdev chain [nf-next,v1,1/3] netfilter: nf_tables: rename function to destroy hook list - - - - --- 2023-01-03 Pablo Neira Ayuso pablo Changes Requested
[nf-next,v1,1/3] netfilter: nf_tables: rename function to destroy hook list [nf-next,v1,1/3] netfilter: nf_tables: rename function to destroy hook list - - - - --- 2023-01-03 Pablo Neira Ayuso pablo Changes Requested
[nft,v1] src: allow for updating devices on existing netdev chain [nft,v1] src: allow for updating devices on existing netdev chain - - - - --- 2023-01-03 Pablo Neira Ayuso pablo Changes Requested
[libnftnl] chain: relax logic to build NFTA_CHAIN_HOOK [libnftnl] chain: relax logic to build NFTA_CHAIN_HOOK - - - - --- 2023-01-03 Pablo Neira Ayuso pablo Accepted
[net,7/7] netfilter: ipset: Rework long task execution when adding/deleting entries [net,1/7] netfilter: conntrack: fix ipv6 exthdr error check - 1 - - --- 2023-01-02 Pablo Neira Ayuso pablo Accepted
[net,6/7] netfilter: ipset: fix hash:net,port,net hang with /0 subnet [net,1/7] netfilter: conntrack: fix ipv6 exthdr error check - 1 - - --- 2023-01-02 Pablo Neira Ayuso pablo Accepted
[net,5/7] netfilter: nf_tables: honor set timeout and garbage collection updates [net,1/7] netfilter: conntrack: fix ipv6 exthdr error check - 1 - - --- 2023-01-02 Pablo Neira Ayuso pablo Accepted
[net,4/7] netfilter: nf_tables: perform type checking for existing sets [net,1/7] netfilter: conntrack: fix ipv6 exthdr error check - 1 - - --- 2023-01-02 Pablo Neira Ayuso pablo Accepted
[net,3/7] netfilter: nf_tables: add function to create set stateful expressions [net,1/7] netfilter: conntrack: fix ipv6 exthdr error check - - - - --- 2023-01-02 Pablo Neira Ayuso pablo Accepted
[net,2/7] netfilter: nf_tables: consolidate set description [net,1/7] netfilter: conntrack: fix ipv6 exthdr error check - - - - --- 2023-01-02 Pablo Neira Ayuso pablo Accepted
[net,1/7] netfilter: conntrack: fix ipv6 exthdr error check [net,1/7] netfilter: conntrack: fix ipv6 exthdr error check - 1 - - --- 2023-01-02 Pablo Neira Ayuso pablo Accepted
[net,0/7] Netfilter fixes for net - - - - --- 2023-01-02 Pablo Neira Ayuso pablo Accepted
[nft,v6] src: add support to command "destroy" [nft,v6] src: add support to command "destroy" - - - - --- 2023-01-02 Fernando F. Mancera pablo Accepted
[nf-next,v4] netfilter: nf_tables: add support to destroy operation [nf-next,v4] netfilter: nf_tables: add support to destroy operation - - - - --- 2023-01-02 Fernando F. Mancera pablo Changes Requested
pcap: prevent crashes when output `FILE *` is null pcap: prevent crashes when output `FILE *` is null - - - - --- 2023-01-02 Jeremy Sowden pablo Superseded
[2/2] netfilter: ipset: Rework long task execution when adding/deleting entries [1/2] netfilter: ipset: fix hash:net,port,net hang with /0 subnet - 1 - - --- 2022-12-30 Jozsef Kadlecsik pablo Accepted
[1/2] netfilter: ipset: fix hash:net,port,net hang with /0 subnet [1/2] netfilter: ipset: fix hash:net,port,net hang with /0 subnet - - - - --- 2022-12-30 Jozsef Kadlecsik pablo Accepted
[0/2] ipset patches for nf - - - - --- 2022-12-30 Jozsef Kadlecsik pablo Accepted
[xtables-addons,3/3] build: support for Linux 6.2 Add Linux 6.2 Support - - - - --- 2022-12-29 Jeremy Sowden pablo Handled Elsewhere
[xtables-addons,2/3] build: replace `AC_DISABLE_STATIC` macro with an argument to `LT_INIT` Add Linux 6.2 Support - - - - --- 2022-12-29 Jeremy Sowden pablo Handled Elsewhere
[xtables-addons,1/3] build: replace obsolete `AC_PROG_LIBTOOL` macro with `LT_INIT` Add Linux 6.2 Support - - - - --- 2022-12-29 Jeremy Sowden pablo Handled Elsewhere
[libmnl,v2] doc: fix some non-native English usages [libmnl,v2] doc: fix some non-native English usages - - - - --- 2022-12-24 Jeremy Sowden pablo Accepted
[libmnl] doc: fix some non-native English usages [libmnl] doc: fix some non-native English usages - - - - --- 2022-12-23 Jeremy Sowden pablo Changes Requested
[libnetfilter_conntrack,2/2] conntrack: simplify calculation of `struct sock_fprog` length [libnetfilter_conntrack,1/2] conntrack: fix BPF code for filtering on big-endian architectures - - - - --- 2022-12-23 Jeremy Sowden pablo Accepted
[libnetfilter_conntrack,1/2] conntrack: fix BPF code for filtering on big-endian architectures [libnetfilter_conntrack,1/2] conntrack: fix BPF code for filtering on big-endian architectures - 1 - - --- 2022-12-23 Jeremy Sowden pablo Accepted
[libnetfilter_conntrack] conntrack: increase the length of `l4proto_map` [libnetfilter_conntrack] conntrack: increase the length of `l4proto_map` - - - - --- 2022-12-23 Jeremy Sowden pablo Accepted
[iptables,3/3] ebtables-translate: Install symlink [iptables,1/3] gitignore: Ignore utils/nfsynproxy - - - - --- 2022-12-22 Phil Sutter Accepted
[iptables,2/3] gitignore: Ignore generated ip6tables man pages [iptables,1/3] gitignore: Ignore utils/nfsynproxy - 1 - - --- 2022-12-22 Phil Sutter Accepted
[iptables,1/3] gitignore: Ignore utils/nfsynproxy [iptables,1/3] gitignore: Ignore utils/nfsynproxy - 1 - - --- 2022-12-22 Phil Sutter Accepted
[iptables] nft: Reject tcp/udp extension without proper protocol match [iptables] nft: Reject tcp/udp extension without proper protocol match - 1 - - --- 2022-12-22 Phil Sutter Accepted
[nft,2/2] ct: use inet_service_type for proto-src and proto-dst [nft,1/2,v2] evaluate: fix shift exponent underflow in concatenation evaluation - - - - --- 2022-12-22 Pablo Neira Ayuso pablo Accepted
[nft,1/2,v2] evaluate: fix shift exponent underflow in concatenation evaluation [nft,1/2,v2] evaluate: fix shift exponent underflow in concatenation evaluation - - - - --- 2022-12-22 Pablo Neira Ayuso pablo Accepted
[nft] evaluate: fix shift exponent underflow in concatenation evaluation [nft] evaluate: fix shift exponent underflow in concatenation evaluation - - - - --- 2022-12-22 Pablo Neira Ayuso pablo Changes Requested
[nf,4/4,v6] netfilter: nf_tables: honor set timeout and garbage collection updates Untitled series #333776 - 1 - - --- 2022-12-22 Pablo Neira Ayuso pablo Accepted
[nft] owner: Fix potential array out of bounds access [nft] owner: Fix potential array out of bounds access - 1 - - --- 2022-12-21 Pablo Neira Ayuso pablo Accepted
[nf,v5,4/4] netfilter: nf_tables: honor set timeout and garbage collection updates [nf,v5,1/4] netfilter: nf_tables: consolidate set description - 1 - - --- 2022-12-21 Pablo Neira Ayuso pablo Changes Requested
[nf,v5,3/4] netfilter: nf_tables: perform type checking for existing sets [nf,v5,1/4] netfilter: nf_tables: consolidate set description - 1 - - --- 2022-12-21 Pablo Neira Ayuso pablo Accepted
[nf,v5,2/4] netfilter: nf_tables: add function to create set stateful expressions [nf,v5,1/4] netfilter: nf_tables: consolidate set description - - - - --- 2022-12-21 Pablo Neira Ayuso pablo Accepted
[nf,v5,1/4] netfilter: nf_tables: consolidate set description [nf,v5,1/4] netfilter: nf_tables: consolidate set description - - - - --- 2022-12-21 Pablo Neira Ayuso pablo Accepted
[nf-next,v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR [nf-next,v2] netfilter: nf_tables: Introduce NFTA_RULE_ACTUAL_EXPR - - - - --- 2022-12-21 Phil Sutter pablo Accepted
treewide: Convert del_timer*() to timer_shutdown*() treewide: Convert del_timer*() to timer_shutdown*() 2 - - - --- 2022-12-20 Steven Rostedt pablo Awaiting Upstream
[nf,v4,4/4] netfilter: nf_tables: honor set timeout and garbage collection updates Untitled series #333545 - 1 - - --- 2022-12-20 Pablo Neira Ayuso pablo Changes Requested
[conntrack-tools,4/4] conntrack: Sanitize free_tmpl_objects() Fix some minor bugs - 1 - - --- 2022-12-20 Phil Sutter pablo Accepted
[conntrack-tools,3/4] conntrack: Fix for unused assignment in ct_save_snprintf() Fix some minor bugs - 1 - - --- 2022-12-20 Phil Sutter pablo Accepted
[conntrack-tools,2/4] conntrack: Fix for unused assignment in do_command_ct() Fix some minor bugs - 1 - - --- 2022-12-20 Phil Sutter pablo Accepted
[conntrack-tools,1/4] conntrack: Fix potential array out of bounds access Fix some minor bugs - 1 - - --- 2022-12-20 Phil Sutter pablo Accepted
[nf,v3,4/4] netfilter: nf_tables: honor set timeout and garbage collection updates Untitled series #333404 - 1 - - --- 2022-12-19 Pablo Neira Ayuso pablo Changes Requested
[nf,v2,4/4] netfilter: nf_tables: honor set timeout and garbage collection updates nf_tables: set updates type check - 1 - - --- 2022-12-19 Pablo Neira Ayuso pablo Changes Requested
[nf,v2,3/4] netfilter: nf_tables: perform type checking for existing sets nf_tables: set updates type check - 1 - - --- 2022-12-19 Pablo Neira Ayuso pablo Changes Requested
[nf,v2,2/4] netfilter: nf_tables: add function to create set stateful expressions nf_tables: set updates type check - - - - --- 2022-12-19 Pablo Neira Ayuso pablo Changes Requested
[nf,v2,1/4] netfilter: nf_tables: consolidate set description nf_tables: set updates type check - - - - --- 2022-12-19 Pablo Neira Ayuso pablo Changes Requested
[nf,v1] netfilter: nf_tables: perform type checking for existing sets [nf,v1] netfilter: nf_tables: perform type checking for existing sets - 1 - - --- 2022-12-18 Pablo Neira Ayuso pablo Changes Requested
[nft] scanner: treat invalid octal strings as strings [nft] scanner: treat invalid octal strings as strings - - - - --- 2022-12-16 Jeremy Sowden pablo Accepted
[nf-next] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS [nf-next] netfilter: nf_tables: Introduce NFTA_RULE_ALT_EXPRESSIONS - - - - --- 2022-12-15 Phil Sutter pablo Changes Requested
ipvs: use div_s64 for signed division ipvs: use div_s64 for signed division - 1 - - --- 2022-12-15 Arnd Bergmann pablo Not Applicable
[iptables,4/4] nft: Make rule parsing errors fatal Make rule parsing strict - - - - --- 2022-12-15 Phil Sutter Accepted
[iptables,3/4] nft: Increase rule parser strictness Make rule parsing strict - - - - --- 2022-12-15 Phil Sutter Accepted
[iptables,2/4] arptables: Check the mandatory ar_pln match Make rule parsing strict - 1 - - --- 2022-12-15 Phil Sutter Accepted
[iptables,1/4] nft: Parse icmp header matches Make rule parsing strict - - - - --- 2022-12-15 Phil Sutter Accepted
[nf] netfilter: conntrack: fix ipv6 exthdr error check [nf] netfilter: conntrack: fix ipv6 exthdr error check - 1 - - --- 2022-12-15 Florian Westphal pablo Accepted
[RFC,net-next,05/15] netlink: add macro for checking dump ctx size Untitled series #332806 - - - - --- 2022-12-15 Jakub Kicinski pablo RFC
[net,3/3] netfilter: conntrack: document sctp timeouts [net,1/3] netfilter: flowtable: really fix NAT IPv6 offload - - - - --- 2022-12-13 Pablo Neira Ayuso pablo Accepted
[net,2/3] ipvs: add a 'default' case in do_ip_vs_set_ctl() [net,1/3] netfilter: flowtable: really fix NAT IPv6 offload 1 - 1 - --- 2022-12-13 Pablo Neira Ayuso pablo Accepted
[net,1/3] netfilter: flowtable: really fix NAT IPv6 offload [net,1/3] netfilter: flowtable: really fix NAT IPv6 offload - 2 - - --- 2022-12-13 Pablo Neira Ayuso pablo Accepted
[net,0/3] Netfilter/IPVS fixes for net - - - - --- 2022-12-13 Pablo Neira Ayuso pablo Accepted
[nft] doc: add/update can be used with maps too [nft] doc: add/update can be used with maps too - - - - --- 2022-12-13 Florian Westphal pablo Accepted
[ulogd2,v2] build: fix pgsql fall-back configuration of CFLAGS [ulogd2,v2] build: fix pgsql fall-back configuration of CFLAGS - 1 - - --- 2022-12-13 Jeremy Sowden pablo Accepted
[net-next] ipvs: fix type warning in do_div() on 32 bit [net-next] ipvs: fix type warning in do_div() on 32 bit - 1 - - --- 2022-12-13 Jakub Kicinski pablo Accepted
ipvs: use u64 to silence do_div warnings ipvs: use u64 to silence do_div warnings - - - - --- 2022-12-12 Julian Anastasov pablo Superseded
netfilter: conntrack: document sctp timeouts netfilter: conntrack: document sctp timeouts - - - - --- 2022-12-12 Sriram Yagnaraman pablo Accepted
[nft,3/3] tests: add a test case for map update from packet path with concat fix map update with concatenation and timeouts - - - - --- 2022-12-12 Florian Westphal strlen Accepted
[nft,2/3] netlink_linearize: fix timeout with map updates fix map update with concatenation and timeouts - - - - --- 2022-12-12 Florian Westphal strlen Accepted
[nft,1/3] netlink_delinearize: fix decoding of concat data element fix map update with concatenation and timeouts - - - - --- 2022-12-12 Florian Westphal strlen Accepted
« 1 2 ... 23 24 25 … 285 286 »