Show patches with: State = Action Required       |   92 patches
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[iptables] extensions: recent: New kernels support 999 hits [iptables] extensions: recent: New kernels support 999 hits - - - - --- 2024-07-20 Phil Sutter New
[nf] netfilter: nft_set_pipapo_avx2: disable softinterrupts [nf] netfilter: nft_set_pipapo_avx2: disable softinterrupts - 1 1 - --- 2024-07-19 Florian Westphal New
[nft] optimize: skip variables in nat statements [nft] optimize: skip variables in nat statements - 1 - - --- 2024-07-18 Pablo Neira Ayuso New
[nf-next] netfilter: move nf_ct_netns_get out of nf_conncount_init [nf-next] netfilter: move nf_ct_netns_get out of nf_conncount_init - - 1 - --- 2024-07-18 Xin Long New
[iptables] nft: Fix for zeroing non-existent builtin chains [iptables] nft: Fix for zeroing non-existent builtin chains - 1 - - --- 2024-07-17 Phil Sutter New
[RFC,iptables,8/8] xtables-monitor: Print commands instead of -4/-6/-0 flags Fix xtables-monitor rule printing, partially RFC - - - - --- 2024-07-16 Phil Sutter New
[iptables,7/8] xtables-monitor: Ignore ebtables policy rules unless tracing Fix xtables-monitor rule printing, partially RFC - - - - --- 2024-07-16 Phil Sutter New
[iptables,6/8] xtables-monitor: Fix for ebtables rule events Fix xtables-monitor rule printing, partially RFC - - - - --- 2024-07-16 Phil Sutter New
[iptables,5/8] tests: shell: New xtables-monitor test Fix xtables-monitor rule printing, partially RFC - - - - --- 2024-07-16 Phil Sutter New
[iptables,4/8] xtables-monitor: Support arptables chain events Fix xtables-monitor rule printing, partially RFC - - - - --- 2024-07-16 Phil Sutter New
[iptables,3/8] xtables-monitor: Align builtin chain and table output Fix xtables-monitor rule printing, partially RFC - - - - --- 2024-07-16 Phil Sutter New
[iptables,2/8] xtables-monitor: Flush stdout after all lines of output Fix xtables-monitor rule printing, partially RFC - 1 - - --- 2024-07-16 Phil Sutter New
[iptables,1/8] xtables-monitor: Proper re-init for rule's family Fix xtables-monitor rule printing, partially RFC - 1 - - --- 2024-07-16 Phil Sutter New
[nf-next] netfilter: nf_tables: do not remove elements if set backend implements .abort [nf-next] netfilter: nf_tables: do not remove elements if set backend implements .abort - - - - --- 2024-07-15 Pablo Neira Ayuso New
configure: Add option for building with musl configure: Add option for building with musl - - - - --- 2024-07-12 Joshua Lant New
netfilter: conntrack: tcp: do not lower timeout to CLOSE for in-window RSTs netfilter: conntrack: tcp: do not lower timeout to CLOSE for in-window RSTs - - - - --- 2024-07-05 yyxRoy New
[nf-next] selftests: netfilter: nft_queue.sh: sctp coverage [nf-next] selftests: netfilter: nft_queue.sh: sctp coverage - - - - --- 2024-07-02 Florian Westphal New
netfilter: remove unnecessary assignment in translate_table netfilter: remove unnecessary assignment in translate_table - - 1 - --- 2024-07-01 Liu Jing New
[libnetfilter_queue] build: Speed up build_man.sh [libnetfilter_queue] build: Speed up build_man.sh - - - - --- 2024-06-28 Duncan Roe New
[RFC,nf-next,4/4] netfilter: nf_tables: don't initialize registers in nft_do_chain() nf_tables: remove explicit register zeroing - - - - --- 2024-06-27 Florian Westphal New
[RFC,nf-next,3/4] netfilter: nf_tables: insert register zeroing instructions for dodgy chains nf_tables: remove explicit register zeroing - - - - --- 2024-06-27 Florian Westphal New
[RFC,nf-next,2/4] netfilter: nf_tables: allow loads only when register is initialized nf_tables: remove explicit register zeroing - - - - --- 2024-06-27 Florian Westphal New
[RFC,nf-next,1/4] netfilter: nf_tables: pass context structure to nft_parse_register_load nf_tables: remove explicit register zeroing - - - - --- 2024-06-27 Florian Westphal New
netfilter: ctnetlink: support CTA_FILTER for flush netfilter: ctnetlink: support CTA_FILTER for flush - - - - --- 2024-06-20 Changliang Wu New
[v8,net-next,07/15] netfilter: br_netfilter: Use nested-BH locking for brnf_frag_data_storage. Untitled series #411550 - - - - --- 2024-06-19 Sebastian Andrzej Siewior New
[nf-next] netfilter: nf_tables: missing objects with no memcg accounting [nf-next] netfilter: nf_tables: missing objects with no memcg accounting - 1 - - --- 2024-06-05 Pablo Neira Ayuso New
[nf] netfilter: restore default behavior for nf_conntrack_events [nf] netfilter: restore default behavior for nf_conntrack_events - 1 - - --- 2024-06-04 Nicolas Dichtel New
[net-next,v1] netfilter: nfnetlink: convert kfree_skb to consume_skb [net-next,v1] netfilter: nfnetlink: convert kfree_skb to consume_skb - - - - --- 2024-05-28 Donald Hunter New
[libnetfilter_queue,v2,15/15] build: Remove libnfnetlink from the build Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,14/15] include: Use libmnl.h instead of libnfnetlink.h Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,13/15] src: Convert all nlif_* functions to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,12/15] doc: Add iftable.c to the doxygen system Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,11/15] src: Copy nlif-related files from libnfnetlink Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,10/15] src: Convert remaining nfq_* functions to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,09/15] src: Convert nfq_fd() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,08/15] src: Incorporate nfnl_rcvbufsiz() in libnetfilter_queue Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,07/15] src: Convert nfq_set_verdict() and nfq_set_verdict2() to use libmnl i… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,06/15] src: Convert nfq_handle_packet(), nfq_get_secctx(), nfq_get_payload()… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,05/15] src: Convert nfq_set_queue_flags(), nfq_set_queue_maxlen() & nfq_set_… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,04/15] src: Convert nfq_create_queue(), nfq_bind_pf() & nfq_unbind_pf() to u… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,03/15] src: Convert nfq_close() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,02/15] src: Convert nfq_open_nfnl() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,01/15] src: Convert nfq_open() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[v2,7/7] selftests: netfilter: Torture nftables netdev hooks Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,6/7] netfilter: nf_tables: Add notications for hook changes Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,5/7] netfilter: nf_tables: Correctly handle NETDEV_RENAME events Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,4/7] netfilter: nf_tables: Dynamic hook interface binding Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,3/7] netfilter: nf_tables: Report active interfaces to user space Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,2/7] netfilter: nf_tables: Relax hook interface binding Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,1/7] netfilter: nf_tables: Store user-defined hook ifname Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[nf] netfilter: nfnetlink_queue: fix rcu splat on program exit [nf] netfilter: nfnetlink_queue: fix rcu splat on program exit - - - - --- 2024-05-14 Florian Westphal New
[libnetfilter_queue] Stop a memory leak in nfq_close [libnetfilter_queue] Stop a memory leak in nfq_close - 1 - - --- 2024-05-06 Duncan Roe New
[libnetfilter_queue] Update .gitignore [libnetfilter_queue] Update .gitignore - - - - --- 2024-04-29 Duncan Roe New
[nft] limit: Support arbitrary unit values [nft] limit: Support arbitrary unit values - - - - --- 2024-04-13 Phil Sutter New
[nf,2/2] netfilter: flowtable: use UDP timeout after flow teardown [nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown - 1 - - --- 2024-03-20 Pablo Neira Ayuso New
[nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown [nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown - 1 - - --- 2024-03-20 Pablo Neira Ayuso New
[nf] netfilter: nf_tables: do not reject dormant flag update for table with owner [nf] netfilter: nf_tables: do not reject dormant flag update for table with owner - 1 - - --- 2024-03-15 Quan Tian New
[nf] netfilter: nf_tables: fix consistent table updates being rejected [nf] netfilter: nf_tables: fix consistent table updates being rejected - 1 - - --- 2024-03-13 Quan Tian New
[v3,nf-next,2/2] netfilter: nf_tables: support updating userdata for nft_table [v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table - - - - --- 2024-03-11 Quan Tian New
[v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table [v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table - - - - --- 2024-03-11 Quan Tian New
[nf-next] netfilter: nft_byteorder: remove multi-register support [nf-next] netfilter: nft_byteorder: remove multi-register support - 1 - - --- 2024-02-14 Florian Westphal New
[v3,nft] support for afl++ (american fuzzy lop++) fuzzer [v3,nft] support for afl++ (american fuzzy lop++) fuzzer - - - - --- 2023-12-19 Florian Westphal New
ulogd / JSON output / enhancement proposal ulogd / JSON output / enhancement proposal - - - - --- 2023-12-14 Gérald Colangelo New
Bug in ulogd2 when destroying a stack that failed to start (with fix attached) Bug in ulogd2 when destroying a stack that failed to start (with fix attached) - - - - --- 2023-12-14 Gérald Colangelo New
[libnetfilter_queue,1/1] src: add nfq_socket_sendto() - send config request and check response src: add nfq_socket_sendto() - send config request and check response - - - - --- 2023-12-11 Duncan Roe New
[ulogd] log NAT events using IPFIX [ulogd] log NAT events using IPFIX - - - - --- 2023-12-10 Tomasz Pala New
[nft,2/2,v2] tests/shell: have .json-nft dumps prettified to wrap lines Untitled series #385629 - - - - --- 2023-12-07 Thomas Haller New
[nft,v2,5/5] tests/unit: add unit tests for libnftables add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,4/5] build: cleanup if-blocks for conditional compilation in "Makefile.am" add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,3/5] build: add `make check-tree` to check consistency of source tree add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,2/5] build: add `make check-build` to run `./tests/build/run-tests.sh` add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,1/5] build: add basic "check-{local,more,all}" and "build-all" make targets add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,4/5] datatype: extend set_datatype_alloc() to change size more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,3/5] datatype: don't clone datatype in set_datatype_alloc() if byteorder already matches more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,2/5] datatype: don't clone static name/desc strings for datatype more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,1/5] datatype: make "flags" field of datatype struct simple booleans more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,v5,8/8] tests: add tests for binops with variable RHS operands Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,7/8] parser_json: allow RHS mark and payload expressions Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,6/8] evaluate: allow binop expressions with variable right-hand operands Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,5/8] evaluate: preserve existing binop properties Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,4/8] evaluate: prevent nested byte-order conversions Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,3/8] netlink_delinearize: add support for processing variable payload statement arguments Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,2/8] netlink_delinearize: refactor stmt_payload_binop_postprocess Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,1/8] netlink: support (de)linearization of new bitwise boolean operations Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[libnftnl,v3,5/5] tests: bitwise: add tests for new boolean operations bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[libnftnl,v3,4/5] tests: bitwise: refactor shift tests bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[libnftnl,v3,3/5] expr: bitwise: add support for kernel space AND, OR and XOR operations bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[libnftnl,v3,2/5] expr: bitwise: rename some boolean operation functions bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[libnftnl,v3,1/5] include: add new bitwise boolean attributes to nf_tables.h bitwise: support for boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nf-next,v4,2/2] netfilter: bitwise: add support for doing AND, OR and XOR directly netfilter: bitwise: support boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nf-next,v4,1/2] netfilter: bitwise: rename some boolean operation functions netfilter: bitwise: support boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nf-next,v2,3/3] selftests: netfilter: flowtable vlan filtering bridge support [nf-next,v2,1/3] nf_flow_table_offload: offload the vlan encap in the flowtable - - - - --- 2022-05-26 wenxu@chinatelecom.cn pablo Under Review