Show patches with: Archived = No       |   22961 patches
« 1 2 3 4229 230 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[iptables] ebtables: Dump atomic waste [iptables] ebtables: Dump atomic waste - - - - --- 2021-07-30 Phil Sutter New
[v3,2/2] netfilter: add netfilter hooks to SRv6 data plane netfilter: add netfilter hooks to track SRv6-encapsulated flows - - - - --- 2021-07-29 Ryoga Saito pablo Under Review
[v3,1/2] netfilter: add new sysctl toggle for lightweight tunnel netfilter hooks netfilter: add netfilter hooks to track SRv6-encapsulated flows - - - - --- 2021-07-29 Ryoga Saito pablo Under Review
[v3] netfilter: nf_conntrack_bridge: Fix memory leak when error [v3] netfilter: nf_conntrack_bridge: Fix memory leak when error - 1 - - --- 2021-07-29 Yajun Deng pablo Under Review
[1/1] netfilter: ipset: Limit the maximal range of consecutive elements to add/delete [1/1] netfilter: ipset: Limit the maximal range of consecutive elements to add/delete - - - - --- 2021-07-28 Jozsef Kadlecsik pablo Under Review
[0/1] ipset patch for the nf tree v2 - - - - --- 2021-07-28 Jozsef Kadlecsik pablo Under Review
net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED net: netfilter: Fix port selection of FTP for NF_NAT_RANGE_PROTO_SPECIFIED - - - - --- 2021-07-28 Cole Dishington pablo Under Review
[nf] netfilter: conntrack: collect all entries in one cycle [nf] netfilter: conntrack: collect all entries in one cycle - - - - --- 2021-07-26 Florian Westphal pablo Under Review
netfilter: nf_conntrack_bridge: Fix not free when error netfilter: nf_conntrack_bridge: Fix not free when error - 1 - - --- 2021-07-26 Yajun Deng pablo Under Review
[2/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support Untitled series #255110 - - 1 - --- 2021-07-25 Cole Dishington pablo Under Review
[nf-next] netfilter: ebtables: do not hook tables by default [nf-next] netfilter: ebtables: do not hook tables by default - - - - --- 2021-07-23 Florian Westphal pablo Under Review
[nf-next,3/3] netfilter: remove xt pernet data netfilter: clusterip: don't register hook in all netns - - - - --- 2021-07-22 Florian Westphal pablo Under Review
[nf-next,2/3] netfilter: ipt_CLUSTERIP: use clusterip_net to store pernet warning netfilter: clusterip: don't register hook in all netns - - - - --- 2021-07-22 Florian Westphal pablo Under Review
[nf-next,1/3] netfilter: ipt_CLUSTERIP: only add arp mangle hook when required netfilter: clusterip: don't register hook in all netns - - - - --- 2021-07-22 Florian Westphal pablo Under Review
[nf-next,v2] netfilter: flowtable: remove nf_ct_l4proto_find() call [nf-next,v2] netfilter: flowtable: remove nf_ct_l4proto_find() call - - - - --- 2021-07-19 Pablo Neira Ayuso pablo Under Review
[libnetfilter_queue] build: doc: get rid of the need for manual updating of Makefile [libnetfilter_queue] build: doc: get rid of the need for manual updating of Makefile - - - - --- 2021-07-18 Duncan Roe pablo Under Review
[libmnl] build: doc: get rid of the need for manual updating of Makefile [libmnl] build: doc: get rid of the need for manual updating of Makefile - - - - --- 2021-07-18 Duncan Roe pablo Under Review
[3/3] selftests: netfilter: Add RFC-7597 Section 5.1 PSID selftests Add RFC-7597 Section 5.1 PSID support - - - - --- 2021-07-16 Cole Dishington pablo Under Review
[1/3] net: netfilter: Add RFC-7597 Section 5.1 PSID support xtables API Add RFC-7597 Section 5.1 PSID support - - - - --- 2021-07-16 Cole Dishington pablo Under Review
extensions: masquerade: Add RFC-7597 section 5.1 PSID support extensions: masquerade: Add RFC-7597 section 5.1 PSID support - - - - --- 2021-07-16 Cole Dishington pablo Under Review
[nf-next,v2] netfilter: nft_compat: use nfnetlink_unicast() [nf-next,v2] netfilter: nft_compat: use nfnetlink_unicast() - - - - --- 2021-07-15 Pablo Neira Ayuso pablo Under Review
[nftables] src: add last statement [nftables] src: add last statement - - - - --- 2021-07-05 Pablo Neira Ayuso pablo Under Review
[libnetfilter_queue,v2,1/1] Eliminate packet copy when constructing struct pkt_buff Speed-up - - - - --- 2021-05-18 Duncan Roe pablo Under Review
[nf-next,2/2] netfilter: nftables: add NFT_CT_HELPER_OBJNAME ct helper object name matching - - - - --- 2021-03-09 Pablo Neira Ayuso pablo Under Review
[nf-next,1/2] netfilter: nftables: rename NFT_CT_HELPER to NFT_CT_HELPER_TYPE ct helper object name matching - - - - --- 2021-03-09 Pablo Neira Ayuso pablo Under Review
[nft,v4] src: Support netdev egress hook [nft,v4] src: Support netdev egress hook - - - - --- 2021-01-24 Lukas Wunner pablo Under Review
ebtables-nft: introduce '-m <match_ext>' option ebtables-nft: introduce '-m <match_ext>' option - - - - --- 2020-06-19 Eugene Crosser pablo Under Review
[1/1,v2] netfilter: Restore the CT mark in Flow Offload [1/1,v2] netfilter: Restore the CT mark in Flow Offload - - - - --- 2020-06-01 Sven Auhagen pablo Under Review
[1/1] Remove flow offload when ct is removed from userspace [1/1] Remove flow offload when ct is removed from userspace - - - - --- 2020-05-23 Sven Auhagen pablo Under Review
[RFC] netlink: do not alter set element width [RFC] netlink: do not alter set element width - - - - --- 2020-05-05 michael-dev pablo Under Review
[RFC] concat with dynamically sized fields like vlan id [RFC] concat with dynamically sized fields like vlan id - - - - --- 2020-05-01 michael-dev pablo Under Review
[libnftnl,2/2] utils: add NFCT_FILTER_DUMP_TUPLE example [libnftnl,1/2] Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API - - - - --- 2020-01-29 Romain Bellan pablo Under Review
[libnftnl,1/2] Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API [libnftnl,1/2] Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API - - - - --- 2020-01-29 Romain Bellan pablo Under Review
[nft] doc: nft.8: Add BUGS section about command line parsing [nft] doc: nft.8: Add BUGS section about command line parsing - - - - --- 2019-12-11 Phil Sutter pablo Under Review
[nft,v3] src: Support maps as left side expressions [nft,v3] src: Support maps as left side expressions - - - - --- 2019-11-30 Phil Sutter pablo Under Review
netfilter: nf_conntrack_sip: fix ct_sip_walk_headers netfilter: nf_conntrack_sip: fix ct_sip_walk_headers - - - - --- 2019-06-05 Igor Ryzhov pablo Under Review
[iptables] doc: ebtables-nft.8: Adjust for missing atomic-options [iptables] doc: ebtables-nft.8: Adjust for missing atomic-options 1 1 - - --- 2021-07-28 Phil Sutter pablo Accepted
[nft] tests: py: check more flag match transformations to compact syntax [nft] tests: py: check more flag match transformations to compact syntax - - - - --- 2021-07-28 Pablo Neira Ayuso pablo Accepted
[nft,v2,3/3] tests: py: tcp flags & (fin | syn | rst | ack) == syn [nft,v2,1/3] tests: py: idempotent tcp flags & syn != 0 to tcp flag syn - - - - --- 2021-07-27 Pablo Neira Ayuso pablo Accepted
[nft,v2,2/3] netlink_delinearize: skip flags / mask notation for singleton bitmask [nft,v2,1/3] tests: py: idempotent tcp flags & syn != 0 to tcp flag syn - 1 - - --- 2021-07-27 Pablo Neira Ayuso pablo Accepted
[nft,v2,1/3] tests: py: idempotent tcp flags & syn != 0 to tcp flag syn [nft,v2,1/3] tests: py: idempotent tcp flags & syn != 0 to tcp flag syn - - - - --- 2021-07-27 Pablo Neira Ayuso pablo Accepted
[nft,3/3] evaluate: disallow negation with binary operation [nft,1/3] expression: missing != in flagcmp expression print function - - - - --- 2021-07-27 Pablo Neira Ayuso pablo Accepted
[nft,2/3] netlink_linearize: incorrect netlink bytecode with binary operation and flags [nft,1/3] expression: missing != in flagcmp expression print function - - - - --- 2021-07-27 Pablo Neira Ayuso pablo Accepted
[nft,1/3] expression: missing != in flagcmp expression print function [nft,1/3] expression: missing != in flagcmp expression print function - 1 - - --- 2021-07-27 Pablo Neira Ayuso pablo Accepted
[nft] evaluate: error reporting for missing statements in set/map declaration [nft] evaluate: error reporting for missing statements in set/map declaration - - - - --- 2021-07-26 Pablo Neira Ayuso pablo Accepted
[nft] src: promote 'reject with icmp CODE' syntax [nft] src: promote 'reject with icmp CODE' syntax - 1 - - --- 2021-07-26 Pablo Neira Ayuso pablo Accepted
[nft] parser_bison: parse number as reject icmp code [nft] parser_bison: parse number as reject icmp code - - - - --- 2021-07-26 Pablo Neira Ayuso pablo Accepted
[nft] tests: shell: Fix bogus testsuite failure with 100Hz [nft] tests: shell: Fix bogus testsuite failure with 100Hz 1 - - - --- 2021-07-26 Phil Sutter pablo Accepted
[nft] parser_bison: stateful statement support in map [nft] parser_bison: stateful statement support in map - - - - --- 2021-07-26 Pablo Neira Ayuso pablo Accepted
[nft,2/2] src: expose nft_ctx_clear_vars as API [nft,1/2] src: fix nft_ctx_clear_include_paths in libnftables.map - - - - --- 2021-07-24 Pablo Neira Ayuso pablo Accepted
[nft,1/2] src: fix nft_ctx_clear_include_paths in libnftables.map [nft,1/2] src: fix nft_ctx_clear_include_paths in libnftables.map - 1 - - --- 2021-07-24 Pablo Neira Ayuso pablo Accepted
[net,6/6] netfilter: nfnl_hook: fix unused variable warning [net,1/6] netfilter: nf_tables: fix audit memory leak in nf_tables_commit - 1 - - --- 2021-07-23 Pablo Neira Ayuso pablo Accepted
[net,5/6] netfilter: nft_nat: allow to specify layer 4 protocol NAT only [net,1/6] netfilter: nf_tables: fix audit memory leak in nf_tables_commit - 1 - - --- 2021-07-23 Pablo Neira Ayuso pablo Accepted
[net,4/6] netfilter: conntrack: adjust stop timestamp to real expiry value [net,1/6] netfilter: nf_tables: fix audit memory leak in nf_tables_commit - 1 - - --- 2021-07-23 Pablo Neira Ayuso pablo Accepted
[net,3/6] netfilter: nft_last: avoid possible false sharing [net,1/6] netfilter: nf_tables: fix audit memory leak in nf_tables_commit - 1 - - --- 2021-07-23 Pablo Neira Ayuso pablo Accepted
[net,2/6] netfilter: flowtable: avoid possible false sharing [net,1/6] netfilter: nf_tables: fix audit memory leak in nf_tables_commit - - - - --- 2021-07-23 Pablo Neira Ayuso pablo Accepted
[net,1/6] netfilter: nf_tables: fix audit memory leak in nf_tables_commit [net,1/6] netfilter: nf_tables: fix audit memory leak in nf_tables_commit - 1 - - --- 2021-07-23 Pablo Neira Ayuso pablo Accepted
[net,0/6] Netfilter fixes for net - - - - --- 2021-07-23 Pablo Neira Ayuso pablo Accepted
[nft,2/2] parser_json: inconditionally initialize ct timeout list [nft,1/2] parser_bison: missing initialization of ct timeout policy list - - - - --- 2021-07-22 Pablo Neira Ayuso pablo Accepted
[nft,1/2] parser_bison: missing initialization of ct timeout policy list [nft,1/2] parser_bison: missing initialization of ct timeout policy list - 1 - - --- 2021-07-22 Pablo Neira Ayuso pablo Accepted
netfilter: nfnl_hook: fix unused variable warning netfilter: nfnl_hook: fix unused variable warning - 1 - - --- 2021-07-21 Arnd Bergmann pablo Accepted
[nf] netfilter: nft_nat: allow to specify layer 4 protocol NAT only [nf] netfilter: nft_nat: allow to specify layer 4 protocol NAT only - 1 - - --- 2021-07-20 Pablo Neira Ayuso pablo Accepted
[nft] evaluate: fix inet nat with no layer 3 info [nft] evaluate: fix inet nat with no layer 3 info - - - - --- 2021-07-20 Pablo Neira Ayuso pablo Accepted
[nft] src: add --define key=value [nft] src: add --define key=value - - - - --- 2021-07-20 Pablo Neira Ayuso pablo Accepted
[nf] netfilter: conntrack: adjust stop timestamp to real expiry value [nf] netfilter: conntrack: adjust stop timestamp to real expiry value - 1 - - --- 2021-07-18 Florian Westphal pablo Accepted
[nf,2/2] netfilter: nft_last: avoid possible false sharing [nf,1/2] netfilter: flowtable: avoid possible false sharing - 1 - - --- 2021-07-17 Pablo Neira Ayuso pablo Accepted
[nf,1/2] netfilter: flowtable: avoid possible false sharing [nf,1/2] netfilter: flowtable: avoid possible false sharing - - - - --- 2021-07-17 Pablo Neira Ayuso pablo Accepted
[v3] audit: fix memory leak in nf_tables_commit [v3] audit: fix memory leak in nf_tables_commit - 1 - - --- 2021-07-14 Dongliang Mu pablo Accepted
xtables: Call init_extensions6() for static builds xtables: Call init_extensions6() for static builds - - - - --- 2021-07-13 Erik Wilson pablo Accepted
[nftables,v3,3/3] src: support for nat with interval concatenation [nftables,v3,1/3] src: remove STMT_NAT_F_INTERVAL flags and interval keyword - - - - --- 2021-07-13 Pablo Neira Ayuso pablo Accepted
[nftables,v3,2/3] src: infer NAT mapping with concatenation from set [nftables,v3,1/3] src: remove STMT_NAT_F_INTERVAL flags and interval keyword - - - - --- 2021-07-13 Pablo Neira Ayuso pablo Accepted
[nftables,v3,1/3] src: remove STMT_NAT_F_INTERVAL flags and interval keyword [nftables,v3,1/3] src: remove STMT_NAT_F_INTERVAL flags and interval keyword - - - - --- 2021-07-13 Pablo Neira Ayuso pablo Accepted
[nftables] netlink_delinearize: stmt and expr error path memleaks [nftables] netlink_delinearize: stmt and expr error path memleaks - 2 - - --- 2021-07-12 Pablo Neira Ayuso pablo Accepted
[net,11/11] netfilter: uapi: refer to nfnetlink_conntrack.h, not nf_conntrack_netlink.h [net,01/11] selftest: netfilter: add test case for unreplied tcp connections - - - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,10/11] netfilter: nft_last: incorrect arithmetics when restoring last used [net,01/11] selftest: netfilter: add test case for unreplied tcp connections - 1 - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,09/11] netfilter: nft_last: honor NFTA_LAST_SET on restoration [net,01/11] selftest: netfilter: add test case for unreplied tcp connections - 1 - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,08/11] netfilter: conntrack: Mark access for KCSAN [net,01/11] selftest: netfilter: add test case for unreplied tcp connections - - - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,07/11] netfilter: conntrack: add new sysctl to disable RST check [net,01/11] selftest: netfilter: add test case for unreplied tcp connections 1 - - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,06/11] netfilter: conntrack: improve RST handling when tuple is re-used [net,01/11] selftest: netfilter: add test case for unreplied tcp connections - - - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,05/11] netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo [net,01/11] selftest: netfilter: add test case for unreplied tcp connections - 2 1 - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,04/11] netfilter: conntrack: nf_ct_gre_keymap_flush() removal [net,01/11] selftest: netfilter: add test case for unreplied tcp connections 1 - - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,03/11] netfilter: nf_tables: Fix dereference of null pointer flow [net,01/11] selftest: netfilter: add test case for unreplied tcp connections - 1 - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,02/11] netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state [net,01/11] selftest: netfilter: add test case for unreplied tcp connections - - - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,01/11] selftest: netfilter: add test case for unreplied tcp connections [net,01/11] selftest: netfilter: add test case for unreplied tcp connections - - - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[net,00/11] Netfilter fixes for net - - - - --- 2021-07-07 Pablo Neira Ayuso pablo Accepted
[libnetfilter_queue] include: refer to nfnetlink_conntrack.h, not nf_conntrack_netlink.h [libnetfilter_queue] include: refer to nfnetlink_conntrack.h, not nf_conntrack_netlink.h - - - - --- 2021-07-07 Duncan Roe pablo Accepted
[libnetfilter_queue] src: annotation: Correctly identify item for which header is needed [libnetfilter_queue] src: annotation: Correctly identify item for which header is needed - - - - --- 2021-07-07 Duncan Roe pablo Accepted
[nf] netfilter: uapi: refer to nfnetlink_conntrack.h, not nf_conntrack_netlink.h [nf] netfilter: uapi: refer to nfnetlink_conntrack.h, not nf_conntrack_netlink.h - - - - --- 2021-07-07 Duncan Roe pablo Accepted
[libnftnl] expr: last: add NFTNL_EXPR_LAST_SET [libnftnl] expr: last: add NFTNL_EXPR_LAST_SET - - - - --- 2021-07-05 Pablo Neira Ayuso pablo Accepted
[nf,2/2] netfilter: nft_last: incorrect arithmetics when restoring last used [nf,1/2] netfilter: nft_last: honor NFTA_LAST_SET on restoration - 1 - - --- 2021-07-05 Pablo Neira Ayuso pablo Accepted
[nf,1/2] netfilter: nft_last: honor NFTA_LAST_SET on restoration [nf,1/2] netfilter: nft_last: honor NFTA_LAST_SET on restoration - 1 - - --- 2021-07-05 Pablo Neira Ayuso pablo Accepted
[nftables] build: get `make distcheck` to pass again [nftables] build: get `make distcheck` to pass again - - - - --- 2021-07-04 Duncan Roe pablo Accepted
[NETFILTER,v2] netfilter: nfnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo [NETFILTER,v2] netfilter: nfnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo - 2 1 - --- 2021-07-01 Vasily Averin pablo Accepted
[NETFILTER,v2] netfilter: gre: nf_ct_gre_keymap_flush() removal [NETFILTER,v2] netfilter: gre: nf_ct_gre_keymap_flush() removal 1 - - - --- 2021-07-01 Vasily Averin pablo Accepted
[nft] cmd: incorrect error reporting when table declaration exists [nft] cmd: incorrect error reporting when table declaration exists - 1 - - --- 2021-06-29 Pablo Neira Ayuso pablo Accepted
[nftables] cmd: incorrect table location in error reporting [nftables] cmd: incorrect table location in error reporting - 1 - - --- 2021-06-29 Pablo Neira Ayuso pablo Accepted
[1/2] net/netfilter/nf_conntrack_core: Mark access for KCSAN Fixes for KCSAN findings - - - - --- 2021-06-27 Manfred Spraul pablo Accepted
[iptables] extensions: libxt_multiport: add translation for -m multiport --ports [iptables] extensions: libxt_multiport: add translation for -m multiport --ports - - - - --- 2021-06-25 Pablo Neira Ayuso pablo Accepted
[ipset,v4,4/4] tests: add tests ipset to nftables nftables to ipset translation infrastructure - - - - --- 2021-06-25 Pablo Neira Ayuso pablo Accepted
[ipset,v4,3/4] add ipset to nftables translation infrastructure nftables to ipset translation infrastructure - - - - --- 2021-06-25 Pablo Neira Ayuso pablo Accepted
« 1 2 3 4229 230 »