| [iptables-nftables,RFC,5/6] nft: Use the right payload parsing function when saving a rule |
2013-01-10 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,RFC,4/6] nft: Support IPv6 rules manipulation |
2013-01-10 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,RFC,3/6] nft: Use handle's family attribute instead of hardcoded AF_INET one |
2013-01-10 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,RFC,2/6] xtables: Combine IPv6 support with IPv4 support |
2013-01-10 |
Tomasz Bursztyka |
|
Superseded |
| [iptables-nftables,RFC,1/6] nft: Add a family attribute to nft_handle |
2013-01-10 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,RFC,-,v2,-,2/6] xtables: Combine IPv6 support with IPv4 support |
2013-01-11 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,6/6] xtables: add suport for DNAT rule translation to nft extensions |
2013-05-14 |
Tomasz Bursztyka |
|
RFC |
| [iptables-nftables,5/6] xtables: add support for translating xtables matches into nft expressions |
2013-05-14 |
Tomasz Bursztyka |
|
RFC |
| [iptables-nftables,4/6] xtables: Add support for translating xtables target into nft expressions |
2013-05-14 |
Tomasz Bursztyka |
|
RFC |
| [iptables-nftables,3/6] xtables: policy can be changed only on builtin chain |
2013-05-14 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,2/6] xtables: destroy list iterator relevantly |
2013-05-14 |
Tomasz Bursztyka |
|
Under Review |
| [iptables-nftables,1/6] xtables: initialize xtables defaults even on listing rules |
2013-05-14 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,-,5/5] iptables: nft: Add support for -R option |
2012-10-31 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,-,4/5] iptables: nft: Refactor __nft_rule_check to return rule handle when relevant |
2012-10-31 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,-,3/5] iptables: nft: Fix -D chain rulenum option |
2012-10-31 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,-,2/5] nft: Add support for chain rename options (-E) |
2012-10-31 |
Tomasz Bursztyka |
|
Accepted |
| [iptables-nftables,-,1/5] headers: Make nf_tables.h up to date |
2012-10-31 |
Tomasz Bursztyka |
|
Accepted |
| [iptables,v2] nfnl_osf: use the right nfnetlink lib |
2013-04-03 |
Nicolas Dichtel |
|
Accepted |
| [iptables,v2] configure: display summary at end of configure |
2013-01-27 |
Eric Leblond |
|
Under Review |
| [ipset] Fix wrong bracket placing |
2012-12-27 |
Thomas Jarosch |
|
Accepted |
| [ipset] Fix wrong bracket placing |
2013-01-09 |
Jozsef Kadlecsik |
|
Accepted |
| [conntrack-tools] conntrack: flush stdout for each expectation event, too |
2012-05-18 |
Florian Westphal |
|
Accepted |
| [V4,7/7] ipvs: SIP fragment handling |
2012-09-26 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [V4,6/7] ipvs: API change to avoid rescan of IPv6 exthdr |
2012-09-26 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [V4,5/7] ipvs: Complete IPv6 fragment handling for IPVS |
2012-09-26 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [V4,4/7] ipvs: Fix faulty IPv6 extension header handling in IPVS |
2012-09-26 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [V4,3/7] ipvs: Use config macro IS_ENABLED() |
2012-09-26 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [V4,2/7] ipvs: IPv6 extend ICMPv6 handling for future types |
2012-09-26 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [V4,1/7] ipvs: Trivial changes, use compressed IPv6 address in output |
2012-09-26 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [V3,8/8] ipvs: SIP fragment handling |
2012-09-11 |
Jesper Dangaard Brouer |
|
Superseded |
| [V3,7/8] ipvs: API change to avoid rescan of IPv6 exthdr |
2012-09-11 |
Jesper Dangaard Brouer |
|
Superseded |
| [V3,6/8] ipvs: Complete IPv6 fragment handling for IPVS |
2012-09-11 |
Jesper Dangaard Brouer |
|
Superseded |
| [V3,5/8] ipvs: Fix faulty IPv6 extension header handling in IPVS |
2012-09-11 |
Jesper Dangaard Brouer |
|
Superseded |
| [V3,4/8] ipvs: Fix bug in IPv6 NAT mangling of ports inside ICMPv6 packets |
2012-09-11 |
Jesper Dangaard Brouer |
|
Superseded |
| [V3,3/8] ipvs: Use config macro IS_ENABLED() |
2012-09-11 |
Jesper Dangaard Brouer |
|
Superseded |
| [V3,2/8] ipvs: IPv6 extend ICMPv6 handling for future types |
2012-09-11 |
Jesper Dangaard Brouer |
|
Superseded |
| [V3,1/8] ipvs: Trivial changes, use compressed IPv6 address in output |
2012-09-11 |
Jesper Dangaard Brouer |
|
Superseded |
| [V2] netfilter: remove extra timer from ecache extension |
2012-12-04 |
Florian Westphal |
|
Superseded |
| [V2] netfilter: ipset: support package fragments for IPv4 protos without ports |
2013-05-01 |
Anders K. Pedersen | Surftown |
|
Awaiting Upstream |
| [V2] netfilter/iptables: Fix log-level processing |
2012-09-12 |
Joe Perches |
|
Accepted |
| [V2,3/3] Remove VLAIS usage from netfilter |
2012-10-30 |
Behan Webster |
|
Rejected |
| [V2,2/3] Remove VLAIS usage from gadget code |
2012-10-30 |
Behan Webster |
|
Rejected |
| [V2,2/2] ipvs: Extend MTU check to account for IPv6 NAT defrag changes |
2012-08-28 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [V2,1/3] Helper macros used for replacing the use of VLAIS |
2012-10-30 |
Behan Webster |
|
Rejected |
| [V2,1/2] netfilter: rpfilter: skip locally generated bcast, too |
2013-04-18 |
Florian Westphal |
|
Accepted |
| [V2,1/2] ipvs: IPv6 MTU checking cleanup and bugfix |
2012-08-28 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [Ulogd] Improve pid file handling. |
2013-05-19 |
Eric Leblond |
|
New |
| [Ulogd2,4/4] Prepare release number to 2.0.2 |
2013-02-22 |
Eric Leblond |
|
Accepted |
| [Ulogd2,3/4] Update README |
2013-02-22 |
Eric Leblond |
|
Accepted |
| [Ulogd2,3/3] Lower libnetfilter_conntrack requirement to 0.9.1 |
2013-04-05 |
Victor Julien |
|
Not Applicable |
| [Ulogd2,2/4] Update man page. |
2013-02-22 |
Eric Leblond |
|
Accepted |
| [Ulogd2,2/3] Lower libnfnetlink requirement to 1.0.0 |
2013-04-05 |
Victor Julien |
|
Not Applicable |
| [Ulogd2,1/4] Add Changes to extra dist. |
2013-02-22 |
Eric Leblond |
|
Accepted |
| [Ulogd2,1/3] Remove configure check for libmnl, it is not used |
2013-04-05 |
Victor Julien |
|
RFC |
| [Ulogd,4/4] db: store data in memory during database downtime |
2013-03-18 |
Eric Leblond |
|
Not Applicable |
| [Ulogd,3/4] sqlite3: add sanity checking |
2013-03-18 |
Eric Leblond |
|
Not Applicable |
| [Ulogd,2/4] mysql: add sanity checking |
2013-03-18 |
Eric Leblond |
|
Not Applicable |
| [Ulogd,1/4] postgresql: add sanity checking |
2013-03-18 |
Eric Leblond |
|
Not Applicable |
| [Ulog2] Exec libmnl config check only if nfacct is enabled |
2013-04-05 |
Victor Julien |
|
Accepted |
| [Resend,2/2] netfilter: remove rev 0 of xt_connlimit |
2012-05-19 |
Amerigo Wang |
|
Accepted |
| [Resend,1/2] netfilter: remove include/linux/netfilter_ipv4/ipt_addrtype.h |
2012-05-19 |
Amerigo Wang |
|
Accepted |
| [RFC] netfilter: xt_TEE: IPv4 Don't Fragmet options |
2012-06-14 |
Hans Schillstrom |
|
Under Review |
| [RFC] netfilter: nfnetlink_queue: Don't set random flag bits |
2012-06-27 |
Krishna Kumar |
|
Accepted |
| [RFC] netfilter: don't assume NFPROTO_* are like PF_* |
2012-05-14 |
Alban Crequy |
|
Rejected |
| [RFC] netfilter: bridge: change indev name to vlan if vlan tag present |
2012-03-26 |
Florian Westphal |
|
Rejected |
| [RFC] netfilter: add xt_skbuff xtables match |
2012-12-08 |
Willem de Bruijn |
|
Superseded |
| [RFC] netfilter: add connlabel conntrack extension |
2012-10-18 |
Florian Westphal |
|
Superseded |
| [RFC] includes: add definitions of nfnl_tables |
2012-10-02 |
Nicolas Dichtel |
|
Not Applicable |
| [RFC] death_by_event() does not check IPS_DYING_BIT - race condition against ctnetlink_del_conntrack |
2012-08-27 |
Oliver |
|
Not Applicable |
| [RFC] Multi-namespace support (Request for comments) |
2012-10-14 |
Ansis Atteka |
|
Under Review |
| [RFC] Inter-match communication cache |
2012-09-18 |
Jozsef Kadlecsik |
|
Not Applicable |
| [RFC] Handle routing changes for the MASQUERADE target |
2012-11-29 |
Jozsef Kadlecsik |
|
Superseded |
| [RFC,v2] nf_tables: Transaction API proposal |
2013-03-28 |
Pablo Neira |
|
Not Applicable |
| [RFC,v2] nf_tables: Transaction API proposal |
2013-03-28 |
Tomasz Bursztyka |
|
Not Applicable |
| [RFC,v2] netfilter: add connlabel conntrack extension |
2012-11-02 |
Florian Westphal |
|
Superseded |
| [RFC,ulogd] nfct: implement src and dst filter |
2012-08-01 |
Eric Leblond |
|
Superseded |
| [RFC,net-next] ipvs: add missing lock in ip_vs_ftp_init_conn() |
2012-06-28 |
Xiaotian Feng |
|
Not Applicable |
| [RFC,net-next] ipv6: unify conntrack reassembly expire code with standard one |
2012-08-17 |
Amerigo Wang |
|
Not Applicable |
| [RFC,net-next,2/2] net: Convert net_ratelimit uses to net_<level>_ratelimited |
2012-05-14 |
Joe Perches |
|
Not Applicable |
| [RFC,net-next,(V2,RESENT)] ipv6: Queue fragments per interface for multicast/link-local addresses. |
2013-02-16 |
YOSHIFUJI Hideaki / 吉藤英明 |
|
RFC |
| [RFC,4/4] netfilter: ip6t_NPT: Do not mix two prefixes. |
2013-01-26 |
YOSHIFUJI Hideaki / 吉藤英明 |
|
Accepted |
| [RFC,4/4] netfilter: Enable fail-open |
2012-05-07 |
Krishna Kumar |
|
Superseded |
| [RFC,3/4] netfilter: Add support for failopen in nf_queue() |
2012-05-07 |
Krishna Kumar |
|
Superseded |
| [RFC,3/4] netfilter ip6t_NPT: Ensure to check lower part of prefixes are zero. |
2013-01-26 |
YOSHIFUJI Hideaki / 吉藤英明 |
|
Accepted |
| [RFC,3/3] NFQUEUE: add --queue-cpu-fanout parameter |
2013-03-19 |
holger@eitzenberger.org |
|
RFC |
| [RFC,2/4] netfilter: ip6t_NPT: Use csum_partial(). |
2013-01-26 |
YOSHIFUJI Hideaki / 吉藤英明 |
|
Superseded |
| [RFC,2/4] netfilter: ip6t_NPT: Use csum_partial(). |
2013-01-26 |
YOSHIFUJI Hideaki / 吉藤英明 |
|
Accepted |
| [RFC,2/4] netfilter: Add new argument to enqueue handlers |
2012-05-07 |
Krishna Kumar |
|
Superseded |
| [RFC,2/3] NFQUEUE: coalesce IPv4 and IPv6 hashing |
2013-03-19 |
holger@eitzenberger.org |
|
RFC |
| [RFC,2/2] netfilter: nf_tables: improvements for the existing transaction approach |
2013-05-20 |
Pablo Neira |
|
RFC |
| [RFC,2/2] netfilter: conntrack: replace mutex with cmpxchg |
2012-04-27 |
Benjamin Poirier |
|
Rejected |
| [RFC,2/2] netfilter: More users of ipv6_find_hdr_cb() |
2012-09-03 |
Jesper Dangaard Brouer |
|
Not Applicable |
| [RFC,2/2] icmp6: match on errors and informational messages |
2013-04-03 |
holger@eitzenberger.org |
|
RFC |
| [RFC,1/4] netfilter: ip6t_NPT: Fix checksuming. |
2013-01-29 |
Ulrich Weber |
|
Accepted |
| [RFC,1/4] netfilter: ip6t_NPT: Fix checksuming. |
2013-01-26 |
YOSHIFUJI Hideaki / 吉藤英明 |
|
Accepted |
| [RFC,1/4] netfilter: Define FAILOPEN flag |
2012-05-07 |
Krishna Kumar |
|
Superseded |
| [RFC,1/3] NFQUEUE: introduce CPU fanout |
2013-03-19 |
holger@eitzenberger.org |
|
RFC |
| [RFC,1/2] netfilter: nfnetlink: add commit operation to nfnl_subsystems |
2013-05-20 |
Pablo Neira |
|
RFC |
| [RFC,1/2] netfilter: conntrack: remove RCU usage in conntrack notifier |
2012-04-27 |
Benjamin Poirier |
|
Rejected |
| [RFC,1/2] net: Cache IPv6 extension header "skip" parsing |
2012-09-03 |
Jesper Dangaard Brouer |
|
Not Applicable |