Show patches with: State = Action Required       |    Archived = No       |   113 patches
« 1 2 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[v3,net-next,07/15] netfilter: br_netfilter: Use nested-BH locking for brnf_frag_data_storage. Untitled series #408757 - - - - --- 2024-05-29 Sebastian Andrzej Siewior New
[v4,bpf-next,3/3] selftests/bpf: Add selftest for bpf_xdp_flow_lookup kfunc netfilter: Add the capability to offload flowtable in XDP layer - - - - --- 2024-05-29 Lorenzo Bianconi New
[v4,bpf-next,2/3] netfilter: add bpf_xdp_flow_lookup kfunc netfilter: Add the capability to offload flowtable in XDP layer 1 - - - --- 2024-05-29 Lorenzo Bianconi New
[v4,bpf-next,1/3] netfilter: nf_tables: add flowtable map for xdp offload netfilter: Add the capability to offload flowtable in XDP layer - - - - --- 2024-05-29 Lorenzo Bianconi New
[net] netfilter: nf_conncount: fix wrong variable type [net] netfilter: nf_conncount: fix wrong variable type - 2 - - --- 2024-05-29 wangyunjian New
[net,6/6] netfilter: nft_fib: allow from forward/input without iif selector [net,1/6] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - 1 - - --- 2024-05-28 Pablo Neira Ayuso New
[net,5/6] netfilter: tproxy: bail out if IP has been disabled on the device [net,1/6] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - 1 - - --- 2024-05-28 Pablo Neira Ayuso New
[net,4/6] netfilter: nft_payload: skbuff vlan metadata mangle support [net,1/6] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - 1 - - --- 2024-05-28 Pablo Neira Ayuso New
[net,3/6] netfilter: nft_payload: restore vlan q-in-q match support [net,1/6] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - 1 - - --- 2024-05-28 Pablo Neira Ayuso New
[net,2/6] netfilter: ipset: Add list flush to cancel_gc [net,1/6] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() 1 1 - - --- 2024-05-28 Pablo Neira Ayuso New
[net,1/6] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() [net,1/6] netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() 1 1 - - --- 2024-05-28 Pablo Neira Ayuso New
[net,0/6,v3] Netfilter fixes for net - - - - --- 2024-05-28 Pablo Neira Ayuso New
[nft,2/2,v2] cache: recycle existing cache with incremental updates [nft,1/2,v2] cache: check for NFT_CACHE_REFRESH in current requested cache too - - - - --- 2024-05-28 Pablo Neira Ayuso New
[nft,1/2,v2] cache: check for NFT_CACHE_REFRESH in current requested cache too [nft,1/2,v2] cache: check for NFT_CACHE_REFRESH in current requested cache too - 1 - - --- 2024-05-28 Pablo Neira Ayuso New
[net-next,v1] netfilter: nfnetlink: convert kfree_skb to consume_skb [net-next,v1] netfilter: nfnetlink: convert kfree_skb to consume_skb - - - - --- 2024-05-28 Donald Hunter New
iptables: cleanup FIXME iptables: cleanup FIXME - - - - --- 2024-05-24 Michael Estner New
[nft,v2] tests: shell: add vlan double tagging match simple test case [nft,v2] tests: shell: add vlan double tagging match simple test case - - - - --- 2024-05-24 Pablo Neira Ayuso New
[libnetfilter_queue,v2,15/15] build: Remove libnfnetlink from the build Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,14/15] include: Use libmnl.h instead of libnfnetlink.h Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,13/15] src: Convert all nlif_* functions to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,12/15] doc: Add iftable.c to the doxygen system Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,11/15] src: Copy nlif-related files from libnfnetlink Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,10/15] src: Convert remaining nfq_* functions to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,09/15] src: Convert nfq_fd() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,08/15] src: Incorporate nfnl_rcvbufsiz() in libnetfilter_queue Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,07/15] src: Convert nfq_set_verdict() and nfq_set_verdict2() to use libmnl i… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,06/15] src: Convert nfq_handle_packet(), nfq_get_secctx(), nfq_get_payload()… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,05/15] src: Convert nfq_set_queue_flags(), nfq_set_queue_maxlen() & nfq_set_… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,04/15] src: Convert nfq_create_queue(), nfq_bind_pf() & nfq_unbind_pf() to u… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,03/15] src: Convert nfq_close() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,02/15] src: Convert nfq_open_nfnl() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
[libnetfilter_queue,v2,01/15] src: Convert nfq_open() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-05-24 Duncan Roe New
ipvs: Avoid unnecessary calls to skb_is_gso_sctp ipvs: Avoid unnecessary calls to skb_is_gso_sctp 1 - - - --- 2024-05-23 Ismael Luceno New
iptables: cleanup FIXME iptables: cleanup FIXME - - - - --- 2024-05-23 Michael Estner New
[v3,bpf-next,3/3] selftests/bpf: Add selftest for bpf_xdp_flow_lookup kfunc netfilter: Add the capability to offload flowtable in XDP layer - - - - --- 2024-05-23 Lorenzo Bianconi New
[v3,bpf-next,2/3] netfilter: add bpf_xdp_flow_lookup kfunc netfilter: Add the capability to offload flowtable in XDP layer 1 - - - --- 2024-05-23 Lorenzo Bianconi New
[v3,bpf-next,1/3] netfilter: nf_tables: add flowtable map for xdp offload netfilter: Add the capability to offload flowtable in XDP layer - - - - --- 2024-05-23 Lorenzo Bianconi New
[iptables] extensions: libxt_sctp: Add an extra assert() [iptables] extensions: libxt_sctp: Add an extra assert() - - - - --- 2024-05-17 Phil Sutter New
[v2,7/7] selftests: netfilter: Torture nftables netdev hooks Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,6/7] netfilter: nf_tables: Add notications for hook changes Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,5/7] netfilter: nf_tables: Correctly handle NETDEV_RENAME events Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,4/7] netfilter: nf_tables: Dynamic hook interface binding Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,3/7] netfilter: nf_tables: Report active interfaces to user space Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,2/7] netfilter: nf_tables: Relax hook interface binding Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[v2,1/7] netfilter: nf_tables: Store user-defined hook ifname Dynamic hook interface binding - - - - --- 2024-05-17 Phil Sutter New
[nft,3/3] tests: shell: add vlan mangling test case vlan support updates - - - - --- 2024-05-16 Pablo Neira Ayuso New
[nft,2/3] tests: shell: add vlan double tagging match simple test case vlan support updates - - - - --- 2024-05-16 Pablo Neira Ayuso New
[nft,1/3] evaluate: bogus protocol conflicts in vlan with implicit dependencies vlan support updates - 1 - - --- 2024-05-16 Pablo Neira Ayuso New
[nf] netfilter: nfnetlink_queue: fix rcu splat on program exit [nf] netfilter: nfnetlink_queue: fix rcu splat on program exit - - - - --- 2024-05-14 Florian Westphal New
[v3,2/2] selftests: net: netfilter: nft_queue.sh: sctp checksum netfilter: nfqueue: incorrect sctp checksum 1 - - - --- 2024-05-13 Antonio Ojea New
[v3,1/2] netfilter: nft_queue: compute SCTP checksum netfilter: nfqueue: incorrect sctp checksum - - 1 - --- 2024-05-13 Antonio Ojea New
[nf-next,11/11] netfilter: nf_tables: do not store nft_ctx in transaction objects netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,10/11] netfilter: nf_tables: pass nft_table to destroy function netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,09/11] netfilter: nf_tables: reduce trans->ctx.chain references netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,08/11] netfilter: nf_tables: store chain pointer in rule transaction netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,07/11] netfilter: nf_tables: avoid usage of embedded nft_ctx netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,06/11] netfilter: nf_tables: pass more specific nft_trans_chain where possible netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,05/11] netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,04/11] netfilter: nf_tables: reduce trans->ctx.table references netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,03/11] netfilter: nf_tables: compact chain+ft transaction objects netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,02/11] netfilter: nf_tables: move bind list_head into relevant subtypes netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[nf-next,01/11] netfilter: nf_tables: make struct nft_trans first member of derived subtypes netfilter: nf_tables: reduce transaction log memory usage - - - - --- 2024-05-13 Florian Westphal New
[libnetfilter_queue] Stop a memory leak in nfq_close [libnetfilter_queue] Stop a memory leak in nfq_close - 1 - - --- 2024-05-06 Duncan Roe New
[nft,v3,2/2] evaluate: add support for variables in map expressions Support for variables in map expressions - - - - --- 2024-04-29 Jeremy Sowden New
[nft,v3,1/2] evaluate: handle invalid mapping expressions in stateful object statements gracefully. Support for variables in map expressions - - - - --- 2024-04-29 Jeremy Sowden New
[libnetfilter_queue] Update .gitignore [libnetfilter_queue] Update .gitignore - - - - --- 2024-04-29 Duncan Roe New
conntrackd: helpers/rpc: Don't add expectation table entry for portmap port conntrackd: helpers/rpc: Don't add expectation table entry for portmap port - - - - --- 2024-04-25 pda Pfeil Daniel New
netfilter: ipset: Add list flush to cancel_gc netfilter: ipset: Add list flush to cancel_gc 1 1 - - --- 2024-04-17 Alexander Maltsev New
[nft] limit: Support arbitrary unit values [nft] limit: Support arbitrary unit values - - - - --- 2024-04-13 Phil Sutter New
[libnftnl] expr: limit: Prepare for odd time units [libnftnl] expr: limit: Prepare for odd time units - - - - --- 2024-04-13 Phil Sutter New
[nft,v2] expr: make map lookup expression as an argument in vmap statement [nft,v2] expr: make map lookup expression as an argument in vmap statement - - - - --- 2024-04-10 Son Dinh New
[nft,v3] dynset: avoid errouneous assert with ipv6 concat data [nft,v3] dynset: avoid errouneous assert with ipv6 concat data - - - - --- 2024-04-09 Son Dinh New
[nf,2/2] netfilter: flowtable: use UDP timeout after flow teardown [nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown - 1 - - --- 2024-03-20 Pablo Neira Ayuso New
[nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown [nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown - 1 - - --- 2024-03-20 Pablo Neira Ayuso New
[nf] netfilter: nf_tables: do not reject dormant flag update for table with owner [nf] netfilter: nf_tables: do not reject dormant flag update for table with owner - 1 - - --- 2024-03-15 Quan Tian New
[nf] netfilter: nf_tables: fix consistent table updates being rejected [nf] netfilter: nf_tables: fix consistent table updates being rejected - 1 - - --- 2024-03-13 Quan Tian New
[v3,nf-next,2/2] netfilter: nf_tables: support updating userdata for nft_table [v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table - - - - --- 2024-03-11 Quan Tian New
[v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table [v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table - - - - --- 2024-03-11 Quan Tian New
[nf-next] netfilter: nft_byteorder: remove multi-register support [nf-next] netfilter: nft_byteorder: remove multi-register support - 1 - - --- 2024-02-14 Florian Westphal New
[1/1] tests: use common shebang in "packetpath/flowtables" test [1/1] tests: use common shebang in "packetpath/flowtables" test - - - - --- 2024-02-09 Thomas Haller New
[nft] rule: do not crash if to-be-printed flowtable lacks priority [nft] rule: do not crash if to-be-printed flowtable lacks priority - - - - --- 2024-01-12 Florian Westphal New
[v3,nft] support for afl++ (american fuzzy lop++) fuzzer [v3,nft] support for afl++ (american fuzzy lop++) fuzzer - - - - --- 2023-12-19 Florian Westphal New
ulogd / JSON output / enhancement proposal ulogd / JSON output / enhancement proposal - - - - --- 2023-12-14 Gérald Colangelo New
Bug in ulogd2 when destroying a stack that failed to start (with fix attached) Bug in ulogd2 when destroying a stack that failed to start (with fix attached) - - - - --- 2023-12-14 Gérald Colangelo New
[libnetfilter_queue,1/1] src: add nfq_socket_sendto() - send config request and check response src: add nfq_socket_sendto() - send config request and check response - - - - --- 2023-12-11 Duncan Roe New
[ulogd] log NAT events using IPFIX [ulogd] log NAT events using IPFIX - - - - --- 2023-12-10 Tomasz Pala New
[nft,2/2,v2] tests/shell: have .json-nft dumps prettified to wrap lines Untitled series #385629 - - - - --- 2023-12-07 Thomas Haller New
[nft,v2,5/5] tests/unit: add unit tests for libnftables add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,4/5] build: cleanup if-blocks for conditional compilation in "Makefile.am" add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,3/5] build: add `make check-tree` to check consistency of source tree add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,2/5] build: add `make check-build` to run `./tests/build/run-tests.sh` add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,1/5] build: add basic "check-{local,more,all}" and "build-all" make targets add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,4/5] datatype: extend set_datatype_alloc() to change size more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,3/5] datatype: don't clone datatype in set_datatype_alloc() if byteorder already matches more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,2/5] datatype: don't clone static name/desc strings for datatype more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,1/5] datatype: make "flags" field of datatype struct simple booleans more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,v5,8/8] tests: add tests for binops with variable RHS operands Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,7/8] parser_json: allow RHS mark and payload expressions Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,6/8] evaluate: allow binop expressions with variable right-hand operands Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,5/8] evaluate: preserve existing binop properties Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
« 1 2 »