| [1/4] netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet |
2013-04-12 |
Pablo Neira |
|
Accepted |
| [Ulogd2,2/4] Update man page. |
2013-02-22 |
Eric Leblond |
|
Accepted |
| arptables: build an libarptc.a archive |
2013-02-21 |
Jonh Wendell |
|
Not Applicable |
| [Ulogd2,4/4] Prepare release number to 2.0.2 |
2013-02-22 |
Eric Leblond |
|
Accepted |
| [2/4] netfilter: ipset: list:set: fix reference counter update |
2013-04-12 |
Pablo Neira |
|
Accepted |
| [1/7] netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABEL |
2013-02-19 |
Pablo Neira |
|
Accepted |
| [18/18] sctp: Correct type and usage of sctp_end_cksum() |
2013-04-29 |
Pablo Neira |
|
Accepted |
| [6/7] netfilter: nf_ct_pptp: Fix comment referring to incorrect RFC |
2013-02-19 |
Pablo Neira |
|
Accepted |
| ulog: add protection when remove ipt_ULOG |
2013-02-05 |
Gao feng |
|
Not Applicable |
| [2/2] netfilter: ipt_ULOG: make spinlock per nlgroup |
2013-02-05 |
Gao feng |
|
Superseded |
| [iptables-nftables,RFC] nft: Split nft core to become family independant |
2013-01-30 |
Tomasz Bursztyka |
|
Accepted |
| [Ulogd2,1/4] Add Changes to extra dist. |
2013-02-22 |
Eric Leblond |
|
Accepted |
| [Ulogd2,3/4] Update README |
2013-02-22 |
Eric Leblond |
|
Accepted |
| [1/2] netfilter: ipset: timeout values corrupted on set resize |
2013-02-21 |
Jozsef Kadlecsik |
|
Accepted |
| [stable] ipvs: sctp: fix checksumming on snat and dnat handlers |
2013-02-21 |
Daniel Borkmann |
|
Accepted |
| [1/2] netfilter: ipset: timeout values corrupted on set resize |
2013-02-26 |
Pablo Neira |
|
Accepted |
| [2/2] netfilter: ipset: "Directory not empty" error message |
2013-02-26 |
Pablo Neira |
|
Accepted |
| [RFC,nf_conntrack_extend] new extensions without changes kernel source |
2013-10-16 |
Vitaly E. Lavrov |
|
RFC |
| [4/5] netfilter: add my copyright statements |
2013-04-19 |
Pablo Neira |
|
Accepted |
| [2/2] netfilter: nf_tables: don't skip inactive rules and dump generation mask |
2013-02-28 |
Pablo Neira |
|
Not Applicable |
| [nf-next,9/9] ipvs: Use network byte order for sync message size |
2013-04-23 |
Simon Horman |
|
Accepted |
| netfilter: rpfilter: skip locally generated bcast, too |
2013-04-12 |
Florian Westphal |
|
Superseded |
| [0/4] netfilter fixes for net |
2013-04-12 |
Pablo Neira |
|
Accepted |
| [4/4] netfilter: nf_nat: fix race when unloading protocol modules |
2013-04-12 |
Pablo Neira |
|
Accepted |
| [3/4] netfilter: ipset: hash:*net*: nomatch flag not excluded on set resize |
2013-04-12 |
Pablo Neira |
|
Accepted |
| netfilter: xt_AUDIT: only generate audit log when audit enabled |
2013-03-04 |
Gao feng |
|
Accepted |
| netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set |
2013-03-04 |
Paul Bolle |
|
Accepted |
| Save funcs, installation, const |
2013-03-05 |
Jan Engelhardt |
|
Not Applicable |
| [-v3,19/23] net/netfilter: rename random32() to prandom_u32() |
2013-03-04 |
Akinobu Mita |
|
Awaiting Upstream |
| [2/6] build: do not dereference symlinks on installation |
2013-01-28 |
Jan Engelhardt |
|
Superseded |
| nfacct: correct regressions in v1.0.1 |
2013-03-05 |
Mr Dash Four |
|
Superseded |
| [3/4] extensions: eui64: set userspacesize=0 |
2013-02-06 |
Jan Engelhardt |
|
Superseded |
| [nftables] nftables: fix compilation when nf-netlink is a module |
2013-03-06 |
Nicolas Dichtel |
|
Not Applicable |
| [1/3] netfilter: nf_ct_helper: Fix logging for dropped packets |
2013-03-07 |
Pablo Neira |
|
Accepted |
| [3/3] netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn't set |
2013-03-07 |
Pablo Neira |
|
Accepted |
| xtables: improve get_modprobe handling |
2013-05-27 |
Phil Oester |
|
Accepted |
| netfilter: register pernet subsystem before register L4 proto |
2013-03-08 |
Gao feng |
|
Accepted |
| [4/4] libiptc: Use DEBUGP macro from trace.h |
2013-07-25 |
Alexey Perevalov |
|
Not Applicable |
| [nf-next] netfilter: xt_CT: optimize XT_CT_NOTRACK |
2013-05-09 |
Eric Dumazet |
|
Superseded |
| Unable to get NPTv6 to work with kernel 3.8.2 |
2013-03-12 |
Florian Westphal |
|
Accepted |
| [2/3] netfilter: xt_AUDIT: only generate audit log when audit enabled |
2013-03-07 |
Pablo Neira |
|
Accepted |
| ipv4: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR |
2013-03-12 |
Silviu-Mihai Popescu |
|
Accepted |
| [libnftables,4/4] Add a constant for to put the JSON Version |
2013-06-06 |
Alvaro Neira |
|
Superseded |
| bridge: netfilter: use PTR_RET instead of IS_ERR + PTR_ERR |
2013-03-12 |
Silviu-Mihai Popescu |
|
Accepted |
| [libnftables,2/4] Add implementation for to proof the JSON export function |
2013-06-06 |
Alvaro Neira |
|
Superseded |
| [libnftables,3/4] Add JSON Constant for to use the Json export function |
2013-06-06 |
Alvaro Neira |
|
Superseded |
| netfilter: remove pointless conditional before kfree_skb() |
2012-08-28 |
Wei Yongjun |
|
Superseded |
| netfilter: remove redundant skb check in nf_conntrack_put_reasm |
2013-06-20 |
Pablo Neira |
|
Not Applicable |
| [02/11] inet_diag: pass inet_diag module to netlink_dump_start |
2012-09-26 |
Gao feng |
|
Not Applicable |
| nft: loop optimization |
2013-06-19 |
Giuseppe Longo |
|
Accepted |
| netfilter: remove redundant skb check in nf_conntrack_put_reasm |
2013-06-19 |
Phil Oester |
|
Not Applicable |
| [libmnl] doxygen: fix a variable name. |
2013-03-14 |
Eric Leblond |
|
Accepted |
| xtables-addons: build against 3.8.y |
2013-03-12 |
holger@eitzenberger.org |
|
Not Applicable |
| [iptables-nftables] iptables: fix compil when lib[mnl|nftables] are not in standard path |
2013-03-06 |
Nicolas Dichtel |
|
Accepted |
| [2/2] netfilter: nfnetlink_queue: fix incorrect initialization of copy range field |
2013-03-14 |
Pablo Neira |
|
Accepted |
| [nftables,v2] nftables: fix compilation when nf-netlink is a module |
2013-03-06 |
Nicolas Dichtel |
|
Accepted |
| [1/2] netfilter: nf_tables: partially rework commit and abort operation |
2013-02-28 |
Pablo Neira |
|
Accepted |
| [net-next] ipv6: use ipv6_iface_scope_id in conntrack to return scope id |
2013-03-12 |
Hannes Frederic Sowa |
|
Accepted |
| libnetfilter_acct: use PRIu64 and remove unnecessary cast |
2013-03-05 |
Mr Dash Four |
|
Accepted |
| nfct: use timestamp of conntrack object. |
2013-03-03 |
Eric Leblond |
|
Accepted |
| [1/2] netfilter: nfnetlink_queue: use xor hash function to distribute instances |
2013-03-14 |
Pablo Neira |
|
Accepted |
| [GIT,PULL,nf-next] IPVS fixes for v3.10 |
2013-04-17 |
Simon Horman |
|
RFC |
| [libnftables,2/5] src: expr: XML printing for binary data in targer and match |
2013-04-10 |
Arturo Borrero |
|
RFC |
| [libnftables,4/5] src: expr: print flags in XML |
2013-04-10 |
Arturo Borrero |
|
RFC |
| [libnftables,5/5] src: support for XML parsing |
2013-04-10 |
Arturo Borrero |
|
RFC |
| libxt_multiport.man: Update list of valid protocols |
2013-04-09 |
Mart Frauenlob |
|
Accepted |
| iptables manpage: Update NETMAP target |
2013-04-10 |
Mart Frauenlob |
|
Accepted |
| [3/5] netfilter: move skb_gso_segment into nfnetlink_queue module |
2013-04-16 |
Florian Westphal |
|
Superseded |
| [4/5] netfilter: nfnetlink_queue: add skb info attribute |
2013-04-16 |
Florian Westphal |
|
Superseded |
| [24/28] proc: Supply an accessor to get the name in a proc_dir_entry struct [RFC] |
2013-04-16 |
David Howells |
|
Awaiting Upstream |
| [5/5] netfilter: nfqueue: avoid expensive gso segmentation and checksum fixup |
2013-04-19 |
Florian Westphal |
|
Accepted |
| [2/5] netfilter: nfnetlink_queue: avoid peer_portid test |
2013-04-16 |
Florian Westphal |
|
Superseded |
| [5/5] netfilter: nfqueue: avoid expensive gso segmentation and checksum fixup |
2013-04-16 |
Florian Westphal |
|
Superseded |
| ipvs: off by one in set_sctp_state() |
2013-04-20 |
Dan Carpenter |
|
Awaiting Upstream |
| [GIT,PULL,nf-next,v2] IPVS fixes for v3.10 |
2013-04-23 |
Simon Horman |
|
Accepted |
| [nf-next,8/9] ipvs: off by one in set_sctp_state() |
2013-04-23 |
Simon Horman |
|
Accepted |
| [nf-next,6/9] ipvs: Avoid shadowing net variable in ip_vs_leave() |
2013-04-23 |
Simon Horman |
|
Accepted |
| [nf-next,7/9] ipvs: Use min3() in ip_vs_dbg_callid() |
2013-04-23 |
Simon Horman |
|
Accepted |
| [nf-next,1/9] ipvs: properly dereference dest_dst in ip_vs_forget_dev |
2013-04-23 |
Simon Horman |
|
Accepted |
| [nf-next,4/9] ipvs: fix sparse warnings in lblc and lblcr |
2013-04-23 |
Simon Horman |
|
Accepted |
| nfnetlink: use rcu_assign_pointer in nfnetlink_subsys_unregister |
2013-10-08 |
Eric Dumazet |
|
Deferred |
| [-next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder() |
2013-04-24 |
Dan Carpenter |
|
Accepted |
| [2/2] netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling |
2013-06-21 |
Pablo Neira |
|
Superseded |
| [1/1] ip_vs_sip_fill_param() uninitialized var |
2013-04-24 |
Hans Schillstrom |
|
Awaiting Upstream |
| [1/2] ipvs: SCTP ports should be writable in ICMP packets |
2013-06-21 |
Pablo Neira |
|
Superseded |
| [0/2] netfilter fixes for net |
2013-04-19 |
Pablo Neira |
|
Accepted |
| [-stable-3.9,02/15] netfilter: ipt_ULOG: fix non-null terminated string in the nf_log path |
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [0/5] Netfilter updates for net-next |
2013-04-19 |
Pablo Neira |
|
Accepted |
| [1/5] netfilter: ipv4: propagate routing errors from ip_route_me_harder() |
2013-04-19 |
Pablo Neira |
|
Accepted |
| [2/5] netfilter: ipv6: propagate routing errors from ip6_route_me_harder() |
2013-04-19 |
Pablo Neira |
|
Accepted |
| [3/5] netfilter: nat: propagate errors from xfrm_me_harder() |
2013-04-19 |
Pablo Neira |
|
Accepted |
| netfilter: add my copyright statements |
2013-04-19 |
Pablo Neira |
|
Accepted |
| [04/28] proc: Supply PDE attribute setting accessor functions [RFC] |
2013-04-16 |
David Howells |
|
Awaiting Upstream |
| [26/28] proc: Supply a function to remove a proc entry by PDE [RFC] |
2013-04-16 |
David Howells |
|
Awaiting Upstream |
| [05/10] ipvs: fix sparse warnings for some parameters |
2013-04-25 |
Pablo Neira |
|
Accepted |
| [00/10] netfilter fixes for net-next |
2013-04-25 |
Pablo Neira |
|
Accepted |
| [1/1] ip_vs_sip_fill_param() BUG: bad check of return value |
2013-04-25 |
Hans Schillstrom |
|
Awaiting Upstream |
| libmnl: docs were wrong |
2013-12-04 |
Shawn Landden |
|
Under Review |
| ipv4: netfilter: always let NUL terminated string ended by '\0' |
2013-05-17 |
Chen Gang |
|
Superseded |
| [nftables] netlink: do not SIGSEGV when socket() fails |
2013-12-04 |
Shawn Landden |
|
Changes Requested |
