Show patches with: State = Action Required       |   104 patches
« 1 2 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
Bug in ulogd2 when destroying a stack that failed to start (with fix attached) Bug in ulogd2 when destroying a stack that failed to start (with fix attached) - - - - --- 2023-12-14 Gérald Colangelo New
[iptables,5/8] nft: ruleparse: Introduce nft_parse_rule_expr() nft: Implement forward compat for future binaries - - - - --- 2024-07-31 Phil Sutter New
[iptables,6/8] nft: __add_{match,target}() can't fail nft: Implement forward compat for future binaries - - - - --- 2024-07-31 Phil Sutter New
[iptables,7/8] nft: Introduce UDATA_TYPE_COMPAT_EXT nft: Implement forward compat for future binaries - - - - --- 2024-07-31 Phil Sutter New
[iptables,RFC,8/8] nft: Support compat extensions in rule userdata nft: Implement forward compat for future binaries - - - - --- 2024-07-31 Phil Sutter New
[iptables] extensions: TPROXY: Fix for translation being non-terminal [iptables] extensions: TPROXY: Fix for translation being non-terminal - 1 - - --- 2024-09-13 Phil Sutter New
[libmnl] doc: Address warnings emitted by doxygen 1.12.0 [libmnl] doc: Address warnings emitted by doxygen 1.12.0 - - - - --- 2024-09-09 Duncan Roe New
[libnetfilter_queue,1/1] src: add nfq_socket_sendto() - send config request and check response src: add nfq_socket_sendto() - send config request and check response - - - - --- 2023-12-11 Duncan Roe New
[libnetfilter_queue] Stop a memory leak in nfq_close [libnetfilter_queue] Stop a memory leak in nfq_close - 1 - - --- 2024-05-06 Duncan Roe New
[libnetfilter_queue] doc: Install libnetfilter_queue.7 man page [libnetfilter_queue] doc: Install libnetfilter_queue.7 man page - 1 - - --- 2024-09-14 Duncan Roe New
[libnftnl,v3,1/5] include: add new bitwise boolean attributes to nf_tables.h bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[libnftnl,v3,2/5] expr: bitwise: rename some boolean operation functions bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[libnftnl,v3,3/5] expr: bitwise: add support for kernel space AND, OR and XOR operations bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[libnftnl,v3,4/5] tests: bitwise: refactor shift tests bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[libnftnl,v3,5/5] tests: bitwise: add tests for new boolean operations bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[net,0/2] Netfilter fixes for net - - - - --- 2024-09-11 Pablo Neira Ayuso New
[net,1/2] netfilter: nft_socket: fix sk refcount leaks [net,1/2] netfilter: nft_socket: fix sk refcount leaks - 1 - - --- 2024-09-11 Pablo Neira Ayuso New
[net,2/2] netfilter: nft_socket: make cgroupsv2 matching work with namespaces [net,1/2] netfilter: nft_socket: fix sk refcount leaks - 1 - - --- 2024-09-11 Pablo Neira Ayuso New
[net,v1,1/1] netfilter: nf_reject: Fix build error when CONFIG_BRIDGE_NETFILTER=n [net,v1,1/1] netfilter: nf_reject: Fix build error when CONFIG_BRIDGE_NETFILTER=n - 2 - - --- 2024-09-06 Andy Shevchenko New
[net-next,v3,1/1] netfilter: conntrack: Guard possible unused functions [net-next,v3,1/1] netfilter: conntrack: Guard possible unused functions - - 1 - --- 2024-09-10 Andy Shevchenko New
[net] net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_init() [net] net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_init() 2 1 - - --- 2024-09-11 Lorenzo Bianconi New
[net] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() [net] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() - 1 1 - --- 2024-09-13 Eric Dumazet New
[net] netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() [net] netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() 2 1 - - --- 2024-09-14 Dan Carpenter New
[nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown [nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown - 1 - - --- 2024-03-20 Pablo Neira Ayuso New
[nf,2/2] netfilter: flowtable: use UDP timeout after flow teardown [nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown - 1 - - --- 2024-03-20 Pablo Neira Ayuso New
[nf-next,1/3] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash netfilter: conntrack: clash resolution for reverse collisions - - - - --- 2024-09-10 Florian Westphal New
[nf-next,1/5] netfilter: nf_tables: prefer nft_trans_elem_alloc helper netfilter: nf_tables: reduce set element - - - - --- 2024-09-11 Florian Westphal New
[nf-next,2/3] netfilter: conntrack: add clash resolution for reverse collisions netfilter: conntrack: clash resolution for reverse collisions - - - - --- 2024-09-10 Florian Westphal New
[nf-next,2/5] netfilter: nf_tables: add nft_trans_commit_list_add_elem helper netfilter: nf_tables: reduce set element - - - - --- 2024-09-11 Florian Westphal New
[nf-next,3/3] selftests: netfilter: add reverse-clash resolution test case netfilter: conntrack: clash resolution for reverse collisions - - - - --- 2024-09-10 Florian Westphal New
[nf-next,3/5] netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structure netfilter: nf_tables: reduce set element - - - - --- 2024-09-11 Florian Westphal New
[nf-next,4/5] netfilter: nf_tables: switch trans_elem to real flex array netfilter: nf_tables: reduce set element - - - - --- 2024-09-11 Florian Westphal New
[nf-next,5/5] netfilter: nf_tables: allocate element update information dynamically netfilter: nf_tables: reduce set element - - - - --- 2024-09-11 Florian Westphal New
[nf-next,v2,3/3] selftests: netfilter: flowtable vlan filtering bridge support [nf-next,v2,1/3] nf_flow_table_offload: offload the vlan encap in the flowtable - - - - --- 2022-05-26 wenxu@chinatelecom.cn pablo Under Review
[nf-next,v3,01/16] netfilter: nf_tables: Keep deleted flowtable hooks until after RCU Dynamic hook interface binding - 1 - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,02/16] netfilter: nf_tables: Flowtable hook's pf value never varies Dynamic hook interface binding - 1 - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,03/16] netfilter: nf_tables: Store user-defined hook ifname Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,04/16] netfilter: nf_tables: Use stored ifname in netdev hook dumps Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,05/16] netfilter: nf_tables: Compare netdev hooks based on stored name Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,06/16] netfilter: nf_tables: Tolerate chains with no remaining hooks Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,07/16] netfilter: nf_tables: Introduce functions freeing nft_hook objects Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,08/16] netfilter: nf_tables: Introduce nft_hook_find_ops() Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,09/16] netfilter: nf_tables: Introduce nft_register_flowtable_ops() Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,10/16] netfilter: nf_tables: Have a list of nf_hook_ops in nft_hook Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,11/16] netfilter: nf_tables: chain: Respect NETDEV_REGISTER events Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,12/16] netfilter: nf_tables: flowtable: Respect NETDEV_REGISTER events Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,13/16] netfilter: nf_tables: Handle NETDEV_CHANGENAME events Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,14/16] netfilter: nf_tables: Support wildcard netdev hook specs Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,15/16] netfilter: nf_tables: Add notications for hook changes Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v3,16/16] selftests: netfilter: Torture nftables netdev hooks Dynamic hook interface binding - - - - --- 2024-09-12 Phil Sutter New
[nf-next,v4,1/2] netfilter: Make IP6_NF_IPTABLES_LEGACY selectable netfilter: Make IP_NF_IPTABLES_LEGACY selectable - - - - --- 2024-08-29 Breno Leitao New
[nf-next,v4,1/2] netfilter: bitwise: rename some boolean operation functions netfilter: bitwise: support boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nf-next,v4,2/2] netfilter: Make IP_NF_IPTABLES_LEGACY selectable netfilter: Make IP_NF_IPTABLES_LEGACY selectable - - - - --- 2024-08-29 Breno Leitao New
[nf-next,v4,2/2] netfilter: bitwise: add support for doing AND, OR and XOR directly netfilter: bitwise: support boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nf-next,v5,1/2] netfilter: Make IP6_NF_IPTABLES_LEGACY selectable netfilter: Make IP_NF_IPTABLES_LEGACY selectable - - - - --- 2024-09-09 Breno Leitao New
[nf-next,v5,2/2] netfilter: Make IP_NF_IPTABLES_LEGACY selectable netfilter: Make IP_NF_IPTABLES_LEGACY selectable - - - - --- 2024-09-09 Breno Leitao New
[nf-next] netfilter: nf_tables: missing objects with no memcg accounting [nf-next] netfilter: nf_tables: missing objects with no memcg accounting - 1 - - --- 2024-06-05 Pablo Neira Ayuso New
[nf-next] netfilter: nft_byteorder: remove multi-register support [nf-next] netfilter: nft_byteorder: remove multi-register support - 1 - - --- 2024-02-14 Florian Westphal New
[nf] netfilter: nf_tables: do not reject dormant flag update for table with owner [nf] netfilter: nf_tables: do not reject dormant flag update for table with owner - 1 - - --- 2024-03-15 Quan Tian New
[nf] netfilter: nf_tables: fix consistent table updates being rejected [nf] netfilter: nf_tables: fix consistent table updates being rejected - 1 - - --- 2024-03-13 Quan Tian New
[nf] netfilter: nfnetlink_queue: reroute reinjected packets from postrouting [nf] netfilter: nfnetlink_queue: reroute reinjected packets from postrouting - 1 - - --- 2024-09-12 Pablo Neira Ayuso New
[nf] netfilter: nft_tproxy: make it terminal [nf] netfilter: nft_tproxy: make it terminal 1 1 - - --- 2024-09-13 Pablo Neira Ayuso New
[nf] netfilter: restore default behavior for nf_conntrack_events [nf] netfilter: restore default behavior for nf_conntrack_events - 1 - - --- 2024-06-04 Nicolas Dichtel New
[nft,2/2,v2] tests/shell: have .json-nft dumps prettified to wrap lines Untitled series #385629 - - - - --- 2023-12-07 Thomas Haller New
[nft,2/5] datatype: don't clone static name/desc strings for datatype more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,3/5] datatype: don't clone datatype in set_datatype_alloc() if byteorder already matches more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,4/5] datatype: extend set_datatype_alloc() to change size more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,v2,1/5] build: add basic "check-{local,more,all}" and "build-all" make targets add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,2/5] build: add `make check-build` to run `./tests/build/run-tests.sh` add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,3/5] build: add `make check-tree` to check consistency of source tree add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,4/5] build: cleanup if-blocks for conditional compilation in "Makefile.am" add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,5/5] tests/unit: add unit tests for libnftables add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2] src: support for timeout never in elements [nft,v2] src: support for timeout never in elements - - - - --- 2024-09-02 Pablo Neira Ayuso New
[nft,v5,1/8] netlink: support (de)linearization of new bitwise boolean operations Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,2/8] netlink_delinearize: refactor stmt_payload_binop_postprocess Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,3/8] netlink_delinearize: add support for processing variable payload statement arguments Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,4/8] evaluate: prevent nested byte-order conversions Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,5/8] evaluate: preserve existing binop properties Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,6/8] evaluate: allow binop expressions with variable right-hand operands Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,7/8] parser_json: allow RHS mark and payload expressions Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,8/8] tests: add tests for binops with variable RHS operands Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft] limit: Support arbitrary unit values [nft] limit: Support arbitrary unit values - - - - --- 2024-04-13 Phil Sutter New
[ulogd] log NAT events using IPFIX [ulogd] log NAT events using IPFIX - - - - --- 2023-12-10 Tomasz Pala New
[v2,1/2] err.h: Add ERR_PTR_PCPU(), PTR_ERR_PCPU() and IS_ERR_PCPU() macros netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c - - - - --- 2024-08-29 Uros Bizjak New
[v2,1/7] netfilter: nf_tables: Store user-defined hook ifname Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,2/2] netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c - - 1 - --- 2024-08-29 Uros Bizjak New
[v2,2/7] netfilter: nf_tables: Relax hook interface binding Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,3/7] netfilter: nf_tables: Report active interfaces to user space Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,4/7] netfilter: nf_tables: Dynamic hook interface binding Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,5/7] netfilter: nf_tables: Correctly handle NETDEV_RENAME events Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,6/7] netfilter: nf_tables: Add notications for hook changes Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,7/7] selftests: netfilter: Torture nftables netdev hooks Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2] selftests: netfilter: tproxy tcp and udp tests [v2] selftests: netfilter: tproxy tcp and udp tests - - - - --- 2024-09-11 Antonio Ojea New
[v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table [v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table - - - - --- 2024-03-11 Quan Tian New
[v3,nf-next,2/2] netfilter: nf_tables: support updating userdata for nft_table [v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table - - - - --- 2024-03-11 Quan Tian New
[v3,nft] support for afl++ (american fuzzy lop++) fuzzer [v3,nft] support for afl++ (american fuzzy lop++) fuzzer - - - - --- 2023-12-19 Florian Westphal New
[v3] selftests: netfilter: nft_tproxy.sh: add tcp tests [v3] selftests: netfilter: nft_tproxy.sh: add tcp tests - - - - --- 2024-09-12 Antonio Ojea New
conntrack: -L doesn't take a value, so don't discard one (same for -IUDGEFA) conntrack: -L doesn't take a value, so don't discard one (same for -IUDGEFA) - - - - --- 2024-09-03 Ahelenia Ziemiańska Under Review
docs: tproxy: ipt: ignore non-transparent sockets docs: tproxy: ipt: ignore non-transparent sockets - - - - --- 2024-09-12 谢致邦 (XIE Zhibang) New
ksleftest nfqueue race with dnat ksleftest nfqueue race with dnat - - - - --- 2024-09-01 Antonio Ojea New
« 1 2 »