| netfilter: information leaks building packet message |
2013-08-01 |
Dan Carpenter |
|
Accepted |
| [net-next,2/2] net: use reciprocal_divide instead of reimplementing it |
2013-09-03 |
Daniel Borkmann |
|
Awaiting Upstream |
| [nf-next] netfilter: xtables: lightweight process control group matching |
2013-10-10 |
Daniel Borkmann |
|
Superseded |
| [nf-next,v5,1/3] net: net_cls: move cgroupfs classid handling into core |
2013-12-29 |
Daniel Borkmann |
|
Accepted |
| [nf-next,v5,2/3] net: netprio: rename config to be more consistent with cgroup configs |
2013-12-29 |
Daniel Borkmann |
|
Accepted |
| [nf-next,v5,3/3] netfilter: xtables: lightweight process control group matching |
2013-12-29 |
Daniel Borkmann |
|
Accepted |
| [nf] netfilter: nf_nat: fix buffer overflow in IRC NAT helper |
2013-12-31 |
Daniel Borkmann |
|
Superseded |
| [nf] netfilter: nf_conntrack: fix skb_header_pointer API usages in DCCP |
2014-01-05 |
Daniel Borkmann |
|
Accepted |
| [nf-next] netfilter: nf_log: use %s format string for buffer |
2014-01-06 |
Daniel Borkmann |
|
Accepted |
| [nf-next,v4,3/3] netfilter: xtables: lightweight process control group matching |
2013-12-29 |
Daniel Borkmann |
|
Superseded |
| [iptables-nftables,v3] iptables: add libxt_cgroup frontend |
2013-12-23 |
Daniel Borkmann |
|
Changes Requested |
| [nf-next,v3] netfilter: xtables: lightweight process control group matching |
2013-12-23 |
Daniel Borkmann |
|
Changes Requested |
| [net] net: nft: call ipv6_find_hdr() with explicitly initialized offset |
2013-12-20 |
Daniel Borkmann |
|
Accepted |
| [iptables] iptables: add libxt_cgroup frontend |
2013-10-04 |
Daniel Borkmann |
|
Deferred |
| [nf-next,v4,1/3] net: net_cls: move cgroupfs classid handling into core |
2013-12-29 |
Daniel Borkmann |
|
Superseded |
| [nf-next,v4,2/3] net: netprio: rename config to be more consistent with cgroup configs |
2013-12-29 |
Daniel Borkmann |
|
Superseded |
| [net] ipvs: sctp: fix checksumming on snat and dnat handlers |
2013-02-05 |
Daniel Borkmann |
|
Not Applicable |
| [stable] ipvs: sctp: fix checksumming on snat and dnat handlers |
2013-02-21 |
Daniel Borkmann |
|
Accepted |
| [net] ipvs: sctp: fix checksumming by adding hardware offload support |
2013-02-04 |
Daniel Borkmann |
|
Not Applicable |
| [nf-next] netfilter: xtables: lightweight process control group matching |
2013-10-04 |
Daniel Borkmann |
|
RFC |
| [nf-next] netfilter: xtables: lightweight process control group matching |
2013-10-18 |
Daniel Borkmann |
|
Changes Requested |
| [nf-next] netfilter: ct: check return code from nla_parse_tested |
2013-06-12 |
Daniel Borkmann |
pablo |
Accepted |
| [nf-next] netfilter: fix type in parsing in nf_tables_set_alloc_name |
2013-12-31 |
Daniel Borkmann |
|
Accepted |
| [v2] xt_quota2: introduce support for network namespaces |
2014-03-05 |
Daniel Golle |
|
Not Applicable |
| xt_quota2: introduce support for netns |
2014-02-25 |
Daniel Golle |
|
Not Applicable |
| [24/28] proc: Supply an accessor to get the name in a proc_dir_entry struct [RFC] |
2013-04-16 |
David Howells |
|
Awaiting Upstream |
| [04/28] proc: Supply PDE attribute setting accessor functions [RFC] |
2013-04-16 |
David Howells |
|
Awaiting Upstream |
| [26/28] proc: Supply a function to remove a proc entry by PDE [RFC] |
2013-04-16 |
David Howells |
|
Awaiting Upstream |
| [03/12] netfilter: nfnetlink_queue: enable UID/GID socket info retrieval |
2014-01-06 |
David Miller |
|
Awaiting Upstream |
| net: Add socket() system call self test. |
2013-03-20 |
David Miller |
|
Not Applicable |
| net: Add socket() system call self test. |
2013-03-19 |
David Miller |
|
Not Applicable |
| linux-next: Tree for Sep 5 (netfilter: xt_socket.c) |
2013-09-05 |
David Miller |
|
Awaiting Upstream |
| [v3] netfilter: nf_conntrack_sip: Handle Cisco 7941/7945 IP phones |
2012-12-17 |
David Woodhouse |
|
Superseded |
| [NETFILTER] bridge: rcu_deref outside read-lock section |
2012-08-13 |
Denis Efremov |
|
Not Applicable |
| [v2] bridge: rcu_deref outside read-lock section |
2012-08-14 |
Denis Efremov |
|
Not Applicable |
| [1/1] netfilter: xt_recent: Add optional mask option for xt_recent |
2012-03-06 |
Denys Fedoryshchenko |
|
Superseded |
| iptables recent mask option, request for comments |
2012-03-01 |
Denys Fedoryshchenko |
|
Superseded |
| iptables: xt_recent: Add optional mask option for xt_recent |
2012-05-17 |
Denys Fedoryshchenko |
|
Accepted |
| net/bridge/netfilter: Fix the randconfig warning |
2012-05-14 |
Devendra Naga |
|
Not Applicable |
| xtables-addons: xt_RAWNAT: skb writable part might not include whole l4 header (ipv4 case). |
2013-05-05 |
Dmitry Popov |
|
Not Applicable |
| [libnftables] build: properly handle --without-{xml,json}-parsing |
2013-12-23 |
Douglas Freed |
|
Accepted |
| ipvs: fixed spacing at for statements |
2013-07-11 |
Dragos Foianu |
|
Awaiting Upstream |
| ipvs: fixed style errors in ip_vs_dh |
2013-07-11 |
Dragos Foianu |
|
Awaiting Upstream |
| ipvs: fixed style errors and warnings in ip_vs_conn |
2013-07-11 |
Dragos Foianu |
|
Awaiting Upstream |
| ipvs: fixed style error in ip_vs_sched |
2013-07-11 |
Dragos Foianu |
|
Awaiting Upstream |
| net: ICMPv6 packets transmitted on wrong interface if nfmark is mangled |
2012-11-28 |
Dries De Winter |
|
Superseded |
| net: ICMPv6 packets transmitted on wrong interface if nfmark is mangled |
2012-12-03 |
Dries De Winter |
|
Deferred |
| netfilter/xt_CT.c: remove redundant header include |
2012-05-09 |
Eldad Zack |
|
Accepted |
| libxt_recent: remove unused variable |
2012-07-04 |
Eldad Zack |
|
Accepted |
| [1/1] netfilter : fix hooks for SNAT and DNAT targets |
2012-10-15 |
Elison Niven |
|
Accepted |
| [net-next] netfilter: xt_socket: use IP early demux |
2013-05-22 |
Eric Dumazet |
|
Accepted |
| [net-next] netfilter: xt_socket: use sock_gen_put() |
2013-10-11 |
Eric Dumazet |
|
Accepted |
| [resend,nf-next] netfilter: xt_CT: optimize XT_CT_NOTRACK |
2013-05-22 |
Eric Dumazet |
|
Accepted |
| [net-next,3/3] fix skb_morph to preserve skb->sk and skb->destructor pointers |
2013-11-05 |
Eric Dumazet |
|
Superseded |
| NULL pointer dereference in xt_register_target() |
2012-09-05 |
Eric Dumazet |
|
Superseded |
| [v2,nf-next] netfilter: conntrack: remove the central spinlock |
2013-05-22 |
Eric Dumazet |
|
Not Applicable |
| netfilter: ipvs: fix dst leak in __ip_vs_addr_is_local_v6 |
2012-06-25 |
Eric Dumazet |
|
Accepted |
| nfnetlink: use rcu_assign_pointer in nfnetlink_subsys_unregister |
2013-10-08 |
Eric Dumazet |
|
Deferred |
| [net-next] netfilter: x_tables: xt_init() should run earlier |
2012-09-05 |
Eric Dumazet |
|
Superseded |
| NAT stops forwarding ACKs after PMTU discovery |
2013-08-19 |
Eric Dumazet |
|
Superseded |
| netfilter: ipt_LOG: add __printf() to sb_add() |
2012-03-01 |
Eric Dumazet |
|
Accepted |
| [nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag |
2013-06-03 |
Eric Dumazet |
pablo |
Changes Requested |
| netfilter: xt_TEE: dont use destination address found in header |
2012-10-17 |
Eric Dumazet |
|
Accepted |
| [iptables] xt_socket: add --nowildcard flag |
2013-06-20 |
Eric Dumazet |
|
Accepted |
| TEE broken in 3.6 |
2012-10-16 |
Eric Dumazet |
|
Superseded |
| [v2,nf-next] netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag |
2013-06-20 |
Eric Dumazet |
|
Accepted |
| [net-next] netfilter: remove two dropwatch false positives |
2012-05-02 |
Eric Dumazet |
|
Not Applicable |
| netfilter: xt_socket: fix broken v0 support |
2013-07-12 |
Eric Dumazet |
|
Accepted |
| `iptables -m tcp --syn` doesn't do what the man says |
2012-03-30 |
Eric Dumazet |
|
Not Applicable |
| [nf-next] netfilter: xt_CT: optimize XT_CT_NOTRACK |
2013-05-09 |
Eric Dumazet |
|
Superseded |
| netfilter: take care of timewait sockets |
2012-09-04 |
Eric Dumazet |
|
Accepted |
| [nf-next] netfilter: conntrack: remove the central spinlock |
2013-05-09 |
Eric Dumazet |
pablo |
Superseded |
| [nf-next] netfilter: nfnetlink_queue: zero copy support |
2013-03-18 |
Eric Dumazet |
|
Accepted |
| [net] ipv4: set transport header earlier |
2013-07-16 |
Eric Dumazet |
|
Not Applicable |
| netfilter: xt_recent: avoid high order page allocations |
2013-01-04 |
Eric Dumazet |
|
Accepted |
| [libmnl] debug: don't colorize output on non tty |
2013-09-30 |
Eric Leblond |
|
RFC |
| [Ulogd] pgsql: add var to specify arbitrary conn params |
2013-05-28 |
Eric Leblond |
regit |
Accepted |
| [1/2] netfilter: nft: select NFNETLINK |
2013-12-29 |
Eric Leblond |
|
Accepted |
| [05/11] sqlite3: add sanity checking |
2013-05-10 |
Eric Leblond |
|
Accepted |
| [nftables,4/4] netlink: fix nft flush operation |
2013-10-02 |
Eric Leblond |
|
Accepted |
| [PATCHv4,1/3] netfilter: nft: fix issue with verdict support |
2013-12-05 |
Eric Leblond |
|
Accepted |
| [2/2] netfilter: nft: reject support for IPv6 and TCP reset |
2013-12-12 |
Eric Leblond |
|
Superseded |
| nfct: use timestamp of conntrack object. |
2013-03-03 |
Eric Leblond |
|
Accepted |
| [1/2] netfilter: REJECT: separate reusable code |
2013-12-12 |
Eric Leblond |
|
Superseded |
| [libnftables,2/2] test: add tests for expr queue |
2013-11-30 |
Eric Leblond |
|
Accepted |
| [2/2] netfilter: nftables: introduce ct_set module |
2014-01-02 |
Eric Leblond |
|
Changes Requested |
| [1/2] netfilter: nft: fix issue with verdict support |
2013-11-30 |
Eric Leblond |
|
Superseded |
| netfilter: CT: improve error treatment |
2014-01-02 |
Eric Leblond |
|
Accepted |
| [Ulogd] Improve pid file handling. |
2013-05-19 |
Eric Leblond |
|
Accepted |
| [1/2] netfilter: CT: factorize reusable code |
2014-01-02 |
Eric Leblond |
|
Changes Requested |
| Fix typo in loop. |
2012-07-14 |
Eric Leblond |
|
Accepted |
| [libnftables] expr: add ct_set expression |
2014-01-02 |
Eric Leblond |
|
Changes Requested |
| Fix crash when the same NFCT is used by two stacks. |
2012-07-19 |
Eric Leblond |
|
Accepted |
| [nftables,PATCHv2] Add support for queue target |
2013-12-29 |
Eric Leblond |
|
Accepted |
| NFCT filter and IPv6 |
2012-07-17 |
Eric Leblond |
|
Not Applicable |
| [nft] Add support for queue target |
2013-11-30 |
Eric Leblond |
|
Superseded |
| [nftables] Add icmpv6 support. |
2013-07-28 |
Eric Leblond |
|
Accepted |
| [nftables,2/3] jump: fix logic in netlink linearize. |
2013-11-17 |
Eric Leblond |
|
Accepted |
| [3/5] pgsql schema: fix timestamp default value |
2012-08-01 |
Eric Leblond |
|
Accepted |
| [nftables] listing: only display wanted chain |
2013-11-18 |
Eric Leblond |
|
Accepted |
