| unbind [was: Re: [PATCH] netlink: have netlink per-protocol bind function return] an error code. |
2014-03-25 |
Richard Guy Briggs |
|
Changes Requested |
| [v6] netlink: have netlink per-protocol bind function return an error code. |
2014-03-25 |
Richard Guy Briggs |
|
Awaiting Upstream |
| [v5] netlink: have netlink per-protocol bind function return an error code. |
2014-03-24 |
Richard Guy Briggs |
|
Superseded |
| [v4] netlink: have netlink per-protocol bind function return an error code. |
2014-03-24 |
Richard Guy Briggs |
|
Superseded |
| [v3] netlink: have netlink per-protocol bind function return an error code. |
2014-03-24 |
Richard Guy Briggs |
|
Superseded |
| netfilter: nf_tables: set names cannot be larger than 15 bytes |
2014-03-24 |
Pablo Neira |
|
Superseded |
| [iptables] nft: replace nft_rule_attr_get_u8 |
2014-03-24 |
Giuseppe Longo |
|
Accepted |
| [v4] net: netfilter: LLVMLinux: vlais-netfilter |
2014-03-23 |
Behan Webster |
|
Deferred |
| netfilter: disallow builtin socket/tproxy with modular ipv6 defrag |
2014-03-22 |
Florian Westphal |
|
Deferred |
| nftables: fix length of set name |
2014-03-21 |
Giuseppe Longo |
|
Not Applicable |
| [nft] src: check if the set name is too long |
2014-03-21 |
Giuseppe Longo |
|
Not Applicable |
| netlink: simplify nfnetlink_bind |
2014-03-21 |
Richard Guy Briggs |
|
Accepted |
| netlink: have netlink per-protocol bind function return an error code. |
2014-03-21 |
Richard Guy Briggs |
|
Not Applicable |
| [v4] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors |
2014-03-21 |
Zoltan Kiss |
|
Changes Requested |
| [nft] src: check if the set name is too long |
2014-03-20 |
Giuseppe Longo |
|
Superseded |
| [v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors |
2014-03-20 |
Zoltan Kiss |
|
Superseded |
| [next] netfilter: connlimit: move lock array out of struct connlimit_data |
2014-03-20 |
Florian Westphal |
|
Accepted |
| [v2] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors |
2014-03-19 |
Zoltan Kiss |
|
Superseded |
| core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors |
2014-03-19 |
Zoltan Kiss |
|
Superseded |
| [libnftnl] set_elems: delete void EXPORT_SYMBOL |
2014-03-19 |
Arturo Borrero |
|
Accepted |
| [nf_tables,RFH] netfilter: nf_tables: add set_elem notifications |
2014-03-19 |
Arturo Borrero |
|
Superseded |
| netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks |
2014-03-19 |
Alexey Perevalov |
|
Accepted |
| [v3] net: netfilter: LLVMLinux: vlais-netfilter |
2014-03-19 |
Behan Webster |
|
Superseded |
| core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors |
2014-03-18 |
Zoltan Kiss |
|
Superseded |
| [v2] net: netfilter: LLVMLinux: vlais-netfilter |
2014-03-18 |
Behan Webster |
|
Superseded |
| [nft] expr: do not suppress OP_EQ when RHS is bitmask type |
2014-03-17 |
Florian Westphal |
|
Accepted |
| [-next] netfilter: connlimit: fix UP build |
2014-03-17 |
Florian Westphal |
|
Accepted |
| [38/38] netfilter: connlimit: use rbtree for per-host conntrack obj storage |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [37/38] netfilter: connlimit: make same_source_net signed |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [36/38] netfilter: connlimit: use keyed locks |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [35/38] netfilter: Convert uses of __constant_<foo> to <foo> |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [34/38] netfilter: connlimit: use kmem_cache for conn objects |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [33/38] netfilter: connlimit: move insertion of new element out of count function |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [32/38] netfilter: connlimit: improve packet-to-closed-connection logic |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [31/38] netfilter: connlimit: factor hlist search into new function |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [30/38] netfilter: nft_nat: fix family validation |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [29/38] netfilter: nft_ct: remove family from struct nft_ct |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [28/38] netfilter: nf_tables: restore notifications for anonymous set destruction |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [27/38] netfilter: nf_tables: restore context for expression destructors |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [26/38] netfilter: nf_tables: clean up nf_tables_trans_add() argument order |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [25/38] netfilter: nft_hash: bug fixes and resizing |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [24/38] netfilter: conntrack: remove central spinlock nf_conntrack_lock |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [23/38] netfilter: conntrack: seperate expect locking from nf_conntrack_lock |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [22/38] netfilter: avoid race with exp->master ct |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [21/38] netfilter: conntrack: spinlock per cpu to protect special lists. |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [20/38] netfilter: trivial code cleanup and doc changes |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [19/38] ipvs: Reduce checkpatch noise in ip_vs_lblc.c |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [18/38] sections, ipvs: Remove useless __read_mostly for ipvs genl_ops |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [17/38] netfilter: ipset: add forceadd kernel support for hash set types |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [16/38] netfilter: ipset: move registration message to init from net_init |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [15/38] netfilter: ipset: kernel: uapi: fix MARKMASK attr ABI breakage |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [14/38] netfilter: ipset: Prepare the kernel for create option flags when no extension is needed |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [13/38] netfilter: ipset: add markmask for hash:ip,mark data type |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [12/38] netfilter: ipset: add hash:ip,mark data type to ipset |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [11/38] netfilter: ipset: Add hash: fix coccinelle warnings |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [10/38] netfilter: ipset: Follow manual page behavior for SET target on list:set |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [09/38] netfilter: nf_tables: add optional user data area to rules |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [08/38] netfilter: nfnetlink_log: remove unused code |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [07/38] netfilter: nf_tables: accept QUEUE/DROP verdict parameters |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [06/38] netfilter: nf_tables: add nft_dereference() macro |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [05/38] netfilter: nfnetlink: add rcu_dereference_protected() helpers |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [04/38] netfilter: ip_set: rename nfnl_dereference()/nfnl_set() |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [03/38] netfilter: nft_ct: labels get support |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [02/38] netfilter: xt_ipcomp: Use ntohs to ease sparse warning |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [01/38] netfilter: remove double colon |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [00/38] Netfilter/IPVS updates for net-next |
2014-03-17 |
Pablo Neira |
|
Awaiting Upstream |
| [RFC,0/9] socket filtering using nf_tables |
2014-03-15 |
Pablo Neira |
|
RFC |
| [RFC,0/9] socket filtering using nf_tables |
2014-03-14 |
Pablo Neira |
|
RFC |
| [nft,RFC] mnl: Fix a potential buffer overflow |
2014-03-14 |
Yuxuan Shui |
|
Under Review |
| [libnftnl,RFC] set: Add nft_set_elems_nlmsg_build_payload_check |
2014-03-14 |
Yuxuan Shui |
|
Under Review |
| [2/2] iptables: save: actually parse -M/--modprobe option |
2014-03-14 |
Jiri Popelka |
|
Accepted |
| [1/2] iptables: save&restore: warn that -b/--binary isn't implemented |
2014-03-14 |
Jiri Popelka |
|
Accepted |
| [libnftnl,v2,2/2] rule: Changed parser for being more flexible |
2014-03-13 |
Alvaro Neira |
|
Accepted |
| [libnftnl,v2,1/2] rule: Changed the print support for not having several attributes |
2014-03-13 |
Alvaro Neira |
|
Accepted |
| [3/3] iptables: save - fix getopt_long()'s optstring |
2014-03-13 |
Jiri Popelka |
|
Not Applicable |
| [2/3] iptables-restore(8): file to read from can be specified as argument |
2014-03-13 |
Jiri Popelka |
|
Accepted |
| [1/3] iptables-restore(8): missing -T in synopsis |
2014-03-13 |
Jiri Popelka |
|
Accepted |
| [2/2] iptables: missing bracket in iptables-save(8) |
2014-03-13 |
Jiri Popelka |
|
Accepted |
| [1/2] update FSF address in license text |
2014-03-13 |
Jiri Popelka |
|
Accepted |
| [v2,3/3] netfilter: connlimit: use rbtree for per-host conntrack obj storage |
2014-03-12 |
Florian Westphal |
|
Accepted |
| [v2,2/3] netfilter: connlimit: make same_source_net signed |
2014-03-12 |
Florian Westphal |
|
Accepted |
| [v2,1/3] netfilter: connlimit: use keyed locks |
2014-03-12 |
Florian Westphal |
|
Accepted |
| [nft] ct: add support for setting ct mark |
2014-03-12 |
Arturo Borrero |
|
Accepted |
| [net-next,5/6] netfilter: Convert uses of __constant_<foo> to <foo> |
2014-03-12 |
Joe Perches |
|
Accepted |
| [nft] src: fix expr_binary_error()-related compilation warnings |
2014-03-12 |
Arturo Borrero |
|
Accepted |
| iptables: make 'iptables-save -M' actually work |
2014-03-12 |
Jiri Popelka |
|
Superseded |
| [v5] netfilter: xtables: add quota support for nfacct |
2014-03-12 |
Pablo Neira |
|
Superseded |
| conntrackd: claim lockfile ownership properly |
2014-03-12 |
Ansis Atteka |
|
Under Review |
| [RFC,9/9] netfilter: nf_tables: add support for socket filtering |
2014-03-11 |
Pablo Neira |
|
Superseded |
| [RFC,8/9] netfilter: nf_tables: generalize verdict handling and introduce scopes |
2014-03-11 |
Pablo Neira |
|
Superseded |
| [RFC,7/9] netfilter: nf_tables: move expression infrastructure to built-in core |
2014-03-11 |
Pablo Neira |
|
Superseded |
| [RFC,6/9] netfilter: nf_tables: rename nf_tables_core.c to nf_tables_nf.c |
2014-03-11 |
Pablo Neira |
|
Superseded |
| [RFC,5/9] netfilter: nf_tables: add nft_value_init |
2014-03-11 |
Pablo Neira |
|
Superseded |
| [RFC,4/9] netfilter: nf_tables: move fast operations to header |
2014-03-11 |
Pablo Neira |
|
Superseded |
| [RFC,3/9] net: filter: generalise sk_filter_release |
2014-03-11 |
Pablo Neira |
|
Superseded |
| [RFC,2/9] net: filter: account filter length in bytes |
2014-03-11 |
Pablo Neira |
|
Superseded |
| [RFC,1/9] net: rename fp->bpf_func to fp->run_filter |
2014-03-11 |
Pablo Neira |
|
Superseded |
| [7/7] netfilter: connlimit: use rbtree for per-host conntrack obj storage |
2014-03-09 |
Florian Westphal |
|
Superseded |
| [libnftnl,2/2] src/rule: Changed parser support for having consistent with the new print support |
2014-03-09 |
Alvaro Neira |
|
Superseded |
| [libnftnl,1/2] src/rule: Removed mandatory attribute printing in rules |
2014-03-09 |
Alvaro Neira |
|
Superseded |
