|
[nf-next,v3,2/3] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to us...
|
- - - |
0 0 0 |
2016-02-20 |
Stephane Bryant |
pablo |
Changes Requested |
|
[nf-next,v3,1/3] netfilter: bridge: add nf_afinfo to enable queuing to userspace
|
- - - |
0 0 0 |
2016-02-20 |
Stephane Bryant |
pablo |
Changes Requested |
|
[nf,3/3] netfilter: ipvs: handle ip_vs_fill_iph_skb_off failure
|
1 - - |
0 0 0 |
2016-02-18 |
Simon Horman |
pablo |
Superseded |
|
[nf,2/3] netfilter: ipvs: allow rescheduling after RST
|
- - - |
0 0 0 |
2016-02-18 |
Simon Horman |
pablo |
Superseded |
|
[nf,1/3] netfilter: ipvs: drop first packet to redirect conntrack
|
- - - |
0 0 0 |
2016-02-18 |
Simon Horman |
pablo |
Superseded |
|
[GIT,PULL,nf,0/3] IPVS Fixes for v4.5
|
- - - |
0 0 0 |
2016-02-18 |
Simon Horman |
pablo |
Superseded |
|
[nf-next,2/2] netfilter: ipvs: avoid unused variable warnings
|
1 - - |
0 0 0 |
2016-02-18 |
Simon Horman |
pablo |
Accepted |
|
[nf-next,1/2] netfilter: ipvs: Remove noisy debug print from ip_vs_del_service
|
- - - |
0 0 0 |
2016-02-18 |
Simon Horman |
pablo |
Accepted |
|
[GIT,PULL,nf-next,0/2] IPVS Updates for v4.6
|
- - - |
0 0 0 |
2016-02-18 |
Simon Horman |
pablo |
Accepted |
|
conntrackd: Disable runtime systemd support by default
|
- - - |
0 0 0 |
2016-02-17 |
Pablo Neira |
pablo |
Accepted |
|
[RESEND,-stable,4.3.y] netfilter: xt_TEE: fix NULL dereference
|
- - - |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Awaiting Upstream |
|
[RESEND,-stable,4.x.y] netfilter: nf_nat_redirect: add missing NULL pointer check
|
- - - |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Awaiting Upstream |
|
[conntrackd] conntrackd: Disable systemd support by default
|
1 - - |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Changes Requested |
|
[6/6] netfilter: nft_counter: fix erroneous return values
|
- - - |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Accepted |
|
[5/6] netfilter: tee: select NF_DUP_IPV6 unconditionally
|
- - - |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Accepted |
|
[4/6] netfilter: nfnetlink: correctly validate length of batch messages
|
- - - |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Accepted |
|
[3/6] netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversion
|
- - - |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Accepted |
|
[2/6] netfilter: nfnetlink: use original skbuff when acking batches
|
- - - |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Accepted |
|
[1/6] netfilter: conntrack: resched in nf_ct_iterate_cleanup
|
- - 1 |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Accepted |
|
[0/6] Netfilter fixes for net
|
- - - |
0 0 0 |
2016-02-16 |
Pablo Neira |
pablo |
Accepted |
|
[nf-next,v2] netfilter: meta: add PRANDOM support
|
- - - |
0 0 0 |
2016-02-16 |
Florian Westphal |
pablo |
Accepted |
|
comment: Add translation to nft
|
- - - |
0 0 0 |
2016-02-15 |
Shivani Bhardwaj |
pablo |
Changes Requested |
|
[1/7] netfilter: fix IS_ERR_VALUE usage
|
- - - |
0 0 0 |
2016-02-15 |
Andrzej Hajda |
pablo |
Superseded |
|
[6/6] net: Export ip fragment sysctl to unprivileged users
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Awaiting Upstream |
|
[5/6] ipv4: namespacify ip fragment max dist sysctl knob
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Awaiting Upstream |
|
[4/6] ipv4: namespacify ip_early_demux sysctl knob
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Awaiting Upstream |
|
[3/6] ipv4: Namespacify ip_dynaddr sysctl knob
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Awaiting Upstream |
|
[2/6] igmp: net: Move igmp namespace init to correct file
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Awaiting Upstream |
|
[1/6] ipv4: Namespaceify ip_default_ttl sysctl knob
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Awaiting Upstream |
|
[6/6] net: Export ip fragment sysctl to unprivileged users
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Superseded |
|
[5/6] ipv4: namespacify ip fragment max dist sysctl knob
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Superseded |
|
[4/6] ipv4: namespacify ip_early_demux sysctl knob
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Superseded |
|
[3/6] ipv4: Namespacify ip_dynaddr sysctl knob
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Superseded |
|
[2/6] igmp: net: Move igmp namespace init to correct file
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Superseded |
|
[1/6] ipv4: Namespaceify ip_default_ttl sysctl knob
|
- - - |
0 0 0 |
2016-02-15 |
Nikolay Borisov |
pablo |
Superseded |
|
extensions: libxt_tos: Add translation to nft
|
- - - |
0 0 0 |
2016-02-14 |
Shivani Bhardwaj |
pablo |
Not Applicable |
|
[nf-next,v2,2/2] netfilter: bridge: pass L2 header and VLAN as netlink attributes in queues to us...
|
- - - |
0 0 0 |
2016-02-11 |
Stephane Bryant |
pablo |
Changes Requested |
|
[nf-next,v2,1/2] netfilter: bridge: add nf_afinfo to enable queuing to userspace
|
- - - |
0 0 0 |
2016-02-11 |
Stephane Bryant |
pablo |
Changes Requested |
|
iptables: nft-ipv6: Fix ipv6 flags
|
- - - |
0 0 0 |
2016-02-10 |
Shivani Bhardwaj |
pablo |
Accepted |
|
[v4] extensions: libxt_NFQUEUE: Add translation to nft
|
- - - |
0 0 0 |
2016-02-09 |
Shivani Bhardwaj |
pablo |
Accepted |
|
[v3] extensions: libxt_NFQUEUE: Add translation to nft
|
- - - |
0 0 0 |
2016-02-07 |
Shivani Bhardwaj |
pablo |
Changes Requested |
|
uapi glibc compat: fix cases where glibc net/if.h is included before linux/if.h
|
- - - |
0 0 0 |
2016-02-07 |
Mikko Rapeli |
pablo |
Changes Requested |
|
[v2] extensions: libxt_NFQUEUE: Add translation to nft
|
- - - |
0 0 0 |
2016-02-07 |
Shivani Bhardwaj |
pablo |
Changes Requested |
|
netfilter: nft_counter: fix erroneous return values
|
- - - |
0 0 0 |
2016-02-07 |
Anton Protopopov |
pablo |
Accepted |
|
[nf-next,v7,7/7] openvswitch: Interface with NAT.
|
- - - |
0 0 0 |
2016-02-06 |
Jarno Rajahalme |
pablo |
Changes Requested |
|
[nf-next,v7,6/7] openvswitch: Delay conntrack helper call for new connections.
|
- - - |
0 0 0 |
2016-02-06 |
Jarno Rajahalme |
pablo |
Changes Requested |
|
[nf-next,v7,5/7] openvswitch: Handle NF_REPEAT in conntrack action.
|
1 - - |
0 0 0 |
2016-02-06 |
Jarno Rajahalme |
pablo |
Changes Requested |
|
[nf-next,v7,4/7] openvswitch: Find existing conntrack entry after upcall.
|
- - - |
0 0 0 |
2016-02-06 |
Jarno Rajahalme |
pablo |
Changes Requested |
|
[nf-next,v7,3/7] openvswitch: Update the CT state key only after nf_conntrack_in().
|
- - - |
0 0 0 |
2016-02-06 |
Jarno Rajahalme |
pablo |
Changes Requested |
|
[nf-next,v7,2/7] netfilter: Allow calling into nat helper without skb_dst.
|
- - - |
0 0 0 |
2016-02-06 |
Jarno Rajahalme |
pablo |
Changes Requested |
|
[nf-next,v7,1/7] netfilter: Remove IP_CT_NEW_REPLY definition.
|
- - - |
0 0 0 |
2016-02-06 |
Jarno Rajahalme |
pablo |
Changes Requested |
|
[RFC,nftables] nft: add bash completion script
|
- - - |
0 0 0 |
2016-02-05 |
Giuseppe Longo |
pablo |
RFC |
|
netfilter: tee: select NF_DUP_IPV6 unconditionally
|
- - - |
0 0 0 |
2016-02-05 |
Arnd Bergmann |
pablo |
Accepted |
|
[2/2] Rule comment is now stored into a TLV attribute.
|
- - - |
0 0 0 |
2016-02-04 |
Carlos Falgueras García |
pablo |
Changes Requested |
|
[1/2] set: Implement new buffer of TLV objects.
|
- - - |
0 0 0 |
2016-02-04 |
Carlos Falgueras García |
pablo |
Changes Requested |
|
[nf-next] netfilter: nf_defrag_ipv4: Drop redundant ip_send_check()
|
- - - |
0 0 0 |
2016-02-03 |
Joe Stringer |
pablo |
Accepted |
|
[nf] netfilter: nfnetlink: correctly validate length of batch messages
|
- - - |
0 0 0 |
2016-02-02 |
phil.turnbull@oracle.com |
pablo |
Accepted |
|
[V6] netfilter: h323: avoid potential attack
|
- - - |
0 0 0 |
2016-02-02 |
Zhouyi Zhou |
pablo |
Changes Requested |
|
[V5] netfilter: h323: avoid potential attack
|
- - - |
0 0 0 |
2016-02-02 |
Zhouyi Zhou |
pablo |
Not Applicable |
|
[V4] netfilter: h323: avoid potential attack
|
- - - |
0 0 0 |
2016-02-02 |
Zhouyi Zhou |
pablo |
Not Applicable |
|
netfilter: nft_ct: define nft_ct_get_eval_counter() only when needed
|
- - - |
0 0 0 |
2016-02-02 |
Eric Biggers |
pablo |
Not Applicable |
|
[nft,3/3] tests: add test cases for meta random
|
- - - |
0 0 0 |
2016-02-01 |
Florian Westphal |
pablo |
RFC |
|
[nft,2/3] meta: add prandom matching
|
- - - |
0 0 0 |
2016-02-01 |
Florian Westphal |
pablo |
RFC |
|
[nft,1/3] evaluate: move default op lookup into helper
|
- - - |
0 0 0 |
2016-02-01 |
Florian Westphal |
pablo |
RFC |
|
[3/3,iptables,xlate4] xtables: add xt_xlate_add_comment()
|
- - - |
0 0 0 |
2016-02-01 |
Pablo Neira |
pablo |
Accepted |
|
[2/3,iptables,xlate4] extensions: rename xt_buf to xt_xlate
|
- - - |
0 0 0 |
2016-02-01 |
Pablo Neira |
pablo |
Accepted |
|
[1/3,iptables,xlate4] libxtables: fix leak in xt_buf object
|
- - - |
0 0 0 |
2016-02-01 |
Pablo Neira |
pablo |
Accepted |
|
[nft] proto: use parameter-problem for icmpv6 type
|
- - - |
0 0 0 |
2016-02-01 |
Pablo Neira |
pablo |
Accepted |
|
[nft] netlink_delinearize: prune implicit binop before payload_match_postprocess()
|
- - - |
0 0 0 |
2016-02-01 |
Pablo Neira |
pablo |
Accepted |
|
[conntrack,4/4] tests: conntrack: add tests for CIDR notation
|
- - - |
0 0 0 |
2016-02-01 |
Asbjørn Sloth Tønnesen |
pablo |
Accepted |
|
[conntrack,3/4,v2] conntrack: add support for CIDR notation
|
- - - |
0 0 0 |
2016-02-01 |
Asbjørn Sloth Tønnesen |
pablo |
Accepted |
|
[conntrack,2/4,v2] conntrack: extend parse_addr() with CIDR support
|
- - - |
0 0 0 |
2016-02-01 |
Asbjørn Sloth Tønnesen |
pablo |
Accepted |
|
[conntrack,1/4] conntrack: split up nfct_set_addr_from_opt()
|
- - - |
0 0 0 |
2016-02-01 |
Asbjørn Sloth Tønnesen |
pablo |
Accepted |
|
[nft] meta: fix error checks in tc handle parser
|
1 - - |
0 0 0 |
2016-02-01 |
Florian Westphal |
pablo |
Accepted |
|
comment: Add translation to nft
|
- - - |
0 0 0 |
2016-02-01 |
Shivani Bhardwaj |
pablo |
Changes Requested |
|
[net-next] netfilter: nf_conntrack: remove the unneed check for *bucket
|
- - - |
0 0 0 |
2016-01-30 |
wangweidong |
pablo |
Not Applicable |
|
[V3] netfilter: h323: avoid potential attack
|
- 1 - |
0 0 0 |
2016-01-29 |
Zhouyi Zhou |
pablo |
Changes Requested |
|
[nft,11/11] tests/py: test vlan on ingress
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,10/11] src: annotate follow up dependency just after killing another
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,09/11] proto: proto_dev_type() returns interface type for base protocols too
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,08/11] evaluate: generate ether type payload after meta iiftype
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,07/11] evaluate: wrap protocol context debunk into function
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,06/11] evaluate: assert on invalid base in resolve_protocol_conflict()
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,05/11] evaluate: only try to replace dummy protocol from link-layer context
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,04/11] evaluate: don't adjust offset from resolve_protocol_conflict()
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,03/11] evaluate: check if we have to resolve a conflict in first place
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,02/11] evaluate: move inet/netdev protocol context supersede logic to supersede_dep()
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
[nft,01/11] evaluate: resolve_protocol_conflict() should return int
|
- - - |
0 0 0 |
2016-01-28 |
Pablo Neira |
pablo |
Accepted |
|
src: netlink_linearize: Fix bug for redirect target
|
- - - |
0 0 0 |
2016-01-28 |
Shivani Bhardwaj |
pablo |
Accepted |
|
[nf] netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversion
|
- - - |
0 0 0 |
2016-01-28 |
Florian Westphal |
pablo |
Accepted |
|
[V2] netfilter: h323: avoid potential attack
|
- - - |
0 0 0 |
2016-01-28 |
Zhouyi Zhou |
pablo |
Changes Requested |
|
[1/1] netfilter: h323: avoid potential attack
|
- - - |
0 0 0 |
2016-01-27 |
Zhouyi Zhou |
pablo |
Changes Requested |
|
[2/2] netfilter: ipvs/SIP: handle ip_vs_fill_iph_skb_off failure
|
1 - - |
0 0 0 |
2016-01-27 |
Arnd Bergmann |
pablo |
Awaiting Upstream |
|
[1/2] netfilter: ipvs: avoid unused variable warnings
|
1 - - |
0 0 0 |
2016-01-27 |
Arnd Bergmann |
pablo |
Awaiting Upstream |
|
[nft] netlink_delinearize: only remove protocol if equal cmp is used
|
1 - - |
0 0 0 |
2016-01-27 |
Florian Westphal |
pablo |
Accepted |
|
[conntrack,5/5,v2] tests: conntrack: add netmask tests
|
- - - |
0 0 0 |
2016-01-25 |
Asbjørn Sloth Tønnesen |
pablo |
Accepted |
|
[conntrack,4/5,v2] conntrack: add support for netmask filtering
|
- - - |
0 0 0 |
2016-01-25 |
Asbjørn Sloth Tønnesen |
pablo |
Accepted |
|
[conntrack,3/5] conntrack: cleanup: use switch statements for family checks
|
- - - |
0 0 0 |
2016-01-25 |
Asbjørn Sloth Tønnesen |
pablo |
Accepted |
|
[conntrack,2/5] conntrack: consolidate filtering
|
- - - |
0 0 0 |
2016-01-25 |
Asbjørn Sloth Tønnesen |
pablo |
Accepted |
|
[conntrack,1/5] conntrack: support delete by label
|
- - - |
0 0 0 |
2016-01-25 |
Asbjørn Sloth Tønnesen |
pablo |
Accepted |