Toggle navigation
Patchwork
Netfilter Development
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: Archived =
No
| 30564 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Needs Review / ACK
Handled Elsewhere
Search
Archived
No
Yes
Both
Delegate
------
Nobody
jgarzik
arnd
ymano
smfrench
jlayton
tseliot
ogasawara
amitk
awhitcroft
mst
dayangkun
jwboyer
jwboyer
colinking
colinking
azummo
dwmw2
rtg
sconklin
smb
aliguori
bradf
demarchi
ms
bhundven
chbs
kengyu
kadlec
regit
jabk
laforge
laforge
tonyb
alai
zecke
zecke
__damien__
luka
luka
prafulla@marvell.com
cyrus
PeterHuewe
kiho
jow
jow
ypwong
nico
dedeckeh
dedeckeh
yousong
yousong
tomcwarren
mb
patrick_delaunay
mrchuck
vineetg76
computersforpeace
Noltari
Noltari
ee07b291
ldir
ldir
stefanct
zhouhan
carldani
blp
ffainelli
ffainelli
regXboi
bbrezillon
pravin
mkp
jpettit
phil
mkresin
mkresin
thess
thess
fbarrat
fbarrat
linville
jesse
tjaalton
esben
abrodkin
abrodkin
diproiettod
tbot
stephenfin
ajd
darball1
sammj
jogo
jogo
bhelgaas
blogic
blogic
pchotard
oohal
russellb
ptomsich
agraf
joestringer
mwalle
naveen
pepe2k
pepe2k
tagr
tagr
arj
arj
davem
davem
davem
jforissier
andmur01
amitay
matttbe
pabeni
istokes
aparcar
martineau
Ansuel
danielschwierzeck
maddy
goliath
mariosix
dcaratti
aserdean
ovsrobot
ovsrobot
tpetazzoni
marex
mkorpershoek
khem
XiaoYang
mmichelson
robimarko
apritzel
danielhb
groug
npiggin
liwang
pareddja
atishp
netdrv
mkubecek
stintel
stintel
jkicinski
cpitchen
dsa
jstancek
bpf
shettyg
lorpie01
acelan
wigyori
wigyori
pm215
apopple
dja
alexhung
lynxis
lynxis
brgl
brgl
peda
akodanev
0andriy
981213
narmstrong
snowpatch_ozlabs
snowpatch_ozlabs
snowpatch_ozlabs
aivanov
atishp04
blocktrron
monstr
vigneshr
mraynal
shemminger
chunkeey
stewart
stewart
kabel
xypron
Jaehoon
ivanhu
rfried
wsa
ehristev
freenix
akumar
rsalvaterra
adrianschmutzler
hegdevasant
hegdevasant
horms
kevery
sjg
jagan
arbab
ag
rmilecki
rmilecki
ukleinek
ukleinek
bmeng
metan
prom
jacmet
pablo
pablo
trini
wbx
apconole
legoater
legoater
legoater
chleroy
svanheule
rw
rw
juju
abelloni
bjonglez
sbabic
sbabic
ynezz
xback
xback
pevik
richiejp
dangole
dangole
jonhunter
aik
Hauke
Hauke
forty
anuppatel
anuppatel
amusil
next_ghost
acer
echaudron
benh
rgrimm
segher
passgat
pratyush
jms
jms
jms
jmberg
mans0n
ruscur
ymorin
festevam
jk
jk
jk
jk
numans
Andes
xuyang
linusw
linusw
tambarus
conchuod
kubu
matthias_bgg
tytso
ltpci
krzk
spectrum
stroese
imaximets
pbrobinson
dceara
strlen
strlen
apalos
neocturne
cazzacarna
aldot
TIENFONG
mpe
galak
sfr
arnout
ktraynor
robh
nbd
nbd
kcxt
anguy11
paulus
jm
mwilczynski
hs
Apply
«
1
2
3
4
…
305
306
»
Patch
Series
A/F/R/T
S/W/F
Date
Submitter
Delegate
State
netfilter: xt_time: use is_leap_year() helper
netfilter: xt_time: use is_leap_year() helper
- - - -
-
-
-
2026-01-23
Jinjie Ruan
New
[nf-next,v4,5/5] selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest
Add IP6IP6 flowtable SW acceleration
- - - -
-
-
-
2026-01-22
Lorenzo Bianconi
New
[nf-next,v4,4/5] netfilter: flowtable: Add IP6IP6 tx sw acceleration
Add IP6IP6 flowtable SW acceleration
- - - -
-
-
-
2026-01-22
Lorenzo Bianconi
New
[nf-next,v4,3/5] netfilter: flowtable: Add IP6IP6 rx sw acceleration
Add IP6IP6 flowtable SW acceleration
- - - -
-
-
-
2026-01-22
Lorenzo Bianconi
New
[nf-next,v4,2/5] netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct
Add IP6IP6 flowtable SW acceleration
- - - -
-
-
-
2026-01-22
Lorenzo Bianconi
New
[nf-next,v4,1/5] netfilter: Add ctx pointer in nf_flow_skb_encap_protocol/nf_flow_ip4_tunnel_proto …
Add IP6IP6 flowtable SW acceleration
- - - -
-
-
-
2026-01-22
Lorenzo Bianconi
New
[net-next,1/4] netfilter: nf_tables: add .abort_skip_removal flag for set types
[net-next,1/4] netfilter: nf_tables: add .abort_skip_removal flag for set types
- - - -
-
-
-
2026-01-22
Florian Westphal
New
[net-next,0/4] netfilter: updates for net-next
- - - -
-
-
-
2026-01-22
Florian Westphal
New
[v6,6/6] doc/netlink: nftables: Fill out operation attributes
doc/netlink: Expand nftables specification
- - - -
-
-
-
2026-01-21
Remy D. Farley
New
[v6,5/6] doc/netlink: nftables: Add getcompat operation
doc/netlink: Expand nftables specification
- - - -
-
-
-
2026-01-21
Remy D. Farley
New
[v6,4/6] doc/netlink: nftables: Add sub-messages
doc/netlink: Expand nftables specification
- - - -
-
-
-
2026-01-21
Remy D. Farley
New
[v6,3/6] doc/netlink: nftables: Update attribute sets
doc/netlink: Expand nftables specification
- - - -
-
-
-
2026-01-21
Remy D. Farley
New
[v6,2/6] doc/netlink: nftables: Add definitions
doc/netlink: Expand nftables specification
- - - -
-
-
-
2026-01-21
Remy D. Farley
New
[v6,1/6] doc/netlink: netlink-raw: Add max check
doc/netlink: Expand nftables specification
- - - -
-
-
-
2026-01-21
Remy D. Farley
New
[nf-next,v2,4/4] netfilter: nft_set_rbtree: remove seqcount_rwlock_t
convert rbtree to binary search array
- - - -
-
-
-
2026-01-21
Pablo Neira Ayuso
Under Review
[nf-next,v2,3/4] netfilter: nft_set_rbtree: use binary search array in get command
convert rbtree to binary search array
- - - -
-
-
-
2026-01-21
Pablo Neira Ayuso
Under Review
[nf-next,v2,2/4] netfilter: nft_set_rbtree: translate rbtree to array for binary search
convert rbtree to binary search array
- - - -
-
-
-
2026-01-21
Pablo Neira Ayuso
Under Review
[nf-next,v2,1/4] netfilter: nf_tables: add .abort_skip_removal flag for set types
convert rbtree to binary search array
- - - -
-
-
-
2026-01-21
Pablo Neira Ayuso
Under Review
[v6,3/3] tests: shell: add JSON test for handle-based rule positioning
parser_json: support handle for rule positioning
- - - -
-
-
-
2026-01-20
Alexandre Knecht
Accepted
[v6,2/3] tests: shell: add JSON test for all object types
parser_json: support handle for rule positioning
- - - -
-
-
-
2026-01-20
Alexandre Knecht
Accepted
[v6,1/3] parser_json: support handle for rule positioning in explicit JSON format
parser_json: support handle for rule positioning
- - - -
-
-
-
2026-01-20
Alexandre Knecht
Accepted
[RFC,5/5] s390/configs: replace deprecated NF_LOG configs by NF_LOG_SYSLOG
net: make config options NF_LOG_{ARP,IPV4,IPV6} transitional
- - - -
-
-
-
2026-01-12
Lukas Bulwahn
RFC
[RFC,4/5] riscv: defconfig: replace deprecated NF_LOG configs by NF_LOG_SYSLOG
net: make config options NF_LOG_{ARP,IPV4,IPV6} transitional
- - - -
-
-
-
2026-01-12
Lukas Bulwahn
RFC
[RFC,3/5] m68k: defconfig: replace deprecated NF_LOG configs by NF_LOG_SYSLOG
net: make config options NF_LOG_{ARP,IPV4,IPV6} transitional
- - - -
-
-
-
2026-01-12
Lukas Bulwahn
RFC
[RFC,2/5] selftests: net: replace deprecated NF_LOG configs by NF_LOG_SYSLOG
net: make config options NF_LOG_{ARP,IPV4,IPV6} transitional
- - - -
-
-
-
2026-01-12
Lukas Bulwahn
RFC
[RFC,1/5] net: make configs NF_LOG_{ARP,IPV4,IPV6} transitional
net: make config options NF_LOG_{ARP,IPV4,IPV6} transitional
- - - -
-
-
-
2026-01-12
Lukas Bulwahn
RFC
Global buffer overflow in parse_ip6_mask()
Global buffer overflow in parse_ip6_mask()
- - - -
-
-
-
2025-12-18
Ilia Kashintsev
New
[nft] tests: monitor: Fix for out-of-path call
[nft] tests: monitor: Fix for out-of-path call
- 1 - -
-
-
-
2025-12-16
Phil Sutter
Accepted
[nft] datatype: Accept IPv4 addresses for ip6addr_type
[nft] datatype: Accept IPv4 addresses for ip6addr_type
- - - -
-
-
-
2025-12-10
Phil Sutter
New
[nft,v2] src: Convert ip {s,d}addr to IPv4-mapped as needed
[nft,v2] src: Convert ip {s,d}addr to IPv4-mapped as needed
- - - -
-
-
-
2025-12-10
Phil Sutter
New
build: avoid bashism in configure
build: avoid bashism in configure
- - - -
-
-
-
2025-12-05
Jan Palus
Accepted
netfilter: nft_set_hash: fix potential NULL deref in nft_rhash_deactivate
netfilter: nft_set_hash: fix potential NULL deref in nft_rhash_deactivate
- 1 - -
-
-
-
2025-12-03
Melbin K Mathew
Rejected
[RFC,nf-next,4/4] selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest
Add IP6IP6 flowtable SW acceleration
- - - -
-
-
-
2025-12-01
Lorenzo Bianconi
RFC
[RFC,nf-next,3/4] netfilter: flowtable: Add IP6IP6 tx sw acceleration
Add IP6IP6 flowtable SW acceleration
- - - -
-
-
-
2025-12-01
Lorenzo Bianconi
RFC
[RFC,nf-next,2/4] netfilter: flowtable: Add IP6IP6 rx sw acceleration
Add IP6IP6 flowtable SW acceleration
- - - -
-
-
-
2025-12-01
Lorenzo Bianconi
RFC
[RFC,nf-next,1/4] netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct
Add IP6IP6 flowtable SW acceleration
- - - -
-
-
-
2025-12-01
Lorenzo Bianconi
RFC
Some common changes in ulogs: 1) Added debug log to indicate when stack is created. Helps to debug …
Some common changes in ulogs: 1) Added debug log to indicate when stack is created. Helps to debug …
- - - -
-
-
-
2025-11-30
Serhii Ivanov
New
Update nlog plufin to provide more information to other ones
Update nlog plufin to provide more information to other ones
- - - -
-
-
-
2025-11-30
Serhii Ivanov
New
Added netfilter output plugin with ability to write into pcap nflog packets
Added netfilter output plugin with ability to write into pcap nflog packets
- - - -
-
-
-
2025-11-30
Serhii Ivanov
New
[nft,v3] src: add connlimit stateful object support
[nft,v3] src: add connlimit stateful object support
- - 1 -
-
-
-
2025-11-24
Fernando Fernandez Mancera
New
[iptables] nft: Support replacing a rule added in the same batch
[iptables] nft: Support replacing a rule added in the same batch
- 1 - -
-
-
-
2025-11-20
Phil Sutter
Accepted
[nft] rule: skip CMD_OBJ_SETELEMS with no elements after set flush
[nft] rule: skip CMD_OBJ_SETELEMS with no elements after set flush
- 1 - -
-
-
-
2025-11-19
Pablo Neira Ayuso
Accepted
[nf-next,2/2] netfilter: nfnetlink: bail out batch processing with EMLINK
[nf-next,1/2] netfilter: nf_tables: skip register jump/goto validation for non-base chain
- 1 - -
-
-
-
2025-11-18
Pablo Neira Ayuso
New
[nft,v2,11/11] utils: Introduce expr_print_debug()
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,10/11] tests: py: Update payload records
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,09/11] tests: py: tools: Add regen_payloads.sh
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,08/11] netlink: Make use of nftnl_{expr,set_elem}_set_imm()
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,07/11] netlink: Introduce struct nft_data_linearize::sizes
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,06/11] netlink: Introduce struct nft_data_linearize::byteorder
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,05/11] expression: Set range expression 'len' field
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,04/11] intervals: Convert byte order implicitly
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,03/11] mergesort: Align concatenation sort order with Big Endian
Fix netlink debug output on Big Endian
- 1 - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,02/11] mergesort: Fix sorting of string values
Fix netlink debug output on Big Endian
- 1 - -
-
-
-
2025-11-14
Phil Sutter
New
[nft,v2,01/11] segtree: Fix range aggregation on Big Endian
Fix netlink debug output on Big Endian
- 1 - -
-
-
-
2025-11-14
Phil Sutter
New
[conntrack-tools,v2,3/3] conntrackd: update netns test to support IPv6
[conntrack-tools,v2,1/3] conntrackd: restrict multicast reception
- - - -
-
-
-
2025-11-10
Pablo Neira Ayuso
Accepted
[conntrack-tools,v2,2/3] conntrackd: remove double close() in multicast resulting in EBADFD
[conntrack-tools,v2,1/3] conntrackd: restrict multicast reception
- - - -
-
-
-
2025-11-10
Pablo Neira Ayuso
Accepted
[conntrack-tools,v2,1/3] conntrackd: restrict multicast reception
[conntrack-tools,v2,1/3] conntrackd: restrict multicast reception
- - - -
-
-
-
2025-11-10
Pablo Neira Ayuso
Accepted
[v17,nf-next,4/4] netfilter: nft_chain_filter: Add bridge double vlan and pppoe
conntrack: bridge: add double vlan, pppoe and pppoe-in-q
- - - -
-
-
-
2025-11-09
Eric Woudstra
New
[v17,nf-next,3/4] netfilter: nft_set_pktinfo_ipv4/6_validate: Add nhoff argument
conntrack: bridge: add double vlan, pppoe and pppoe-in-q
- - - -
-
-
-
2025-11-09
Eric Woudstra
New
[v17,nf-next,2/4] netfilter: bridge: Add conntrack double vlan and pppoe
conntrack: bridge: add double vlan, pppoe and pppoe-in-q
- - - -
-
-
-
2025-11-09
Eric Woudstra
New
[v17,nf-next,1/4] netfilter: utils: nf_checksum(_partial) correct data!=networkheader
conntrack: bridge: add double vlan, pppoe and pppoe-in-q
- - - -
-
-
-
2025-11-09
Eric Woudstra
New
[nft] doc: libnftables-json: Describe RULESET object
[nft] doc: libnftables-json: Describe RULESET object
- - - -
-
-
-
2025-11-06
Phil Sutter
Accepted
[nf,v3,2/2] doc: clarify JSON rule positioning with handle field
Untitled series #481127
1 - - -
-
-
-
2025-11-06
Alexandre Knecht
Accepted
[libnftnl] src: add connlimit stateful object support
[libnftnl] src: add connlimit stateful object support
- - - -
-
-
-
2025-11-04
Fernando Fernandez Mancera
New
[v4,nf-next] selftests: netfilter: Add bridge_fastpath.sh
[v4,nf-next] selftests: netfilter: Add bridge_fastpath.sh
- - - -
-
-
-
2025-11-04
Eric Woudstra
New
[nf-next,v1,2/2] selftests: netfilter: add test for nf_tables_jumps_max_netns sysctl
[nf-next,1/2] netfilter: nf_tables: limit maximum number of jumps/gotos per netns
- - - -
-
-
-
2025-11-03
Pablo Neira Ayuso
New
[nf-next,1/2] netfilter: nf_tables: limit maximum number of jumps/gotos per netns
[nf-next,1/2] netfilter: nf_tables: limit maximum number of jumps/gotos per netns
- - - -
-
-
-
2025-11-03
Pablo Neira Ayuso
New
[nf-next,v2] netfilter: nf_tables: add math expression support
[nf-next,v2] netfilter: nf_tables: add math expression support
- - - -
-
-
-
2025-11-03
Fernando Fernandez Mancera
New
[libnftnl,v2] expr: add support to math expression
[libnftnl,v2] expr: add support to math expression
- - - -
-
-
-
2025-11-03
Fernando Fernandez Mancera
New
[nft,25/28] tests: py: Update payload records
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,24/28] tests: py: tools: Add regen_payloads.sh
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,23/28] tests: Adjust JSON records to improved element sorting
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,22/28] mergesort: Linearize concatentations in network byte order
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,21/28] netlink: Make use of nftnl_{expr,set_elem}_set_imm()
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,20/28] netlink: Introduce struct nft_data_linearize::sizes
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,19/28] netlink: Introduce struct nft_data_linearize::byteorder
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,18/28] segtree: Drop problematic constant expr len adjustment
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,17/28] segtree: Export complete data before editing
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,16/28] expression: Set range expression 'len' field
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,15/28] Fix byteorder conversion of concatenated value expressions and ranges
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,14/28] segtree: No byteorder conversion for string prefix len calculation
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[nft,13/28] Define string-based data types as Big Endian
Fix netlink debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
Superseded
[libnftnl,9/9] udata: Store u32 udata values in Big Endian
Fix for debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
New
[libnftnl,8/9] data_reg: Support concatenated data
Fix for debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
New
[libnftnl,7/9] data_reg: Respect data byteorder when printing
Fix for debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
New
[libnftnl,6/9] Introduce nftnl_{expr,set_elem}_set_imm()
Fix for debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
New
[libnftnl,5/9] data_reg: Introduce struct nftnl_data_reg::sizes array
Fix for debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
New
[libnftnl,4/9] data_reg: Introduce struct nftnl_data_reg::byteorder field
Fix for debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
New
[libnftnl,3/9] expr: Pass byteorder to struct expr_ops::set callback
Fix for debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
New
[libnftnl,2/9] expr: data_reg: Avoid extra whitespace
Fix for debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
New
[libnftnl,1/9] set_elem: Review debug output
Fix for debug output on Big Endian
- - - -
-
-
-
2025-10-23
Phil Sutter
New
[nf-next,5/5] netfilter: flowtable: remove hw_ifidx
flowtable: consolidate xmit path
- - - -
-
-
-
2025-10-10
Pablo Neira Ayuso
Accepted
[nf-next,4/5] netfilter: flowtable: inline pppoe encapsulation in xmit path
flowtable: consolidate xmit path
- - - -
-
-
-
2025-10-10
Pablo Neira Ayuso
Accepted
[nf-next,3/5] netfilter: flowtable: inline vlan encapsulation in xmit path
flowtable: consolidate xmit path
- - - -
-
-
-
2025-10-10
Pablo Neira Ayuso
Accepted
[nf-next,2/5] netfilter: flowtable: consolidate xmit path
flowtable: consolidate xmit path
- - - -
-
-
-
2025-10-10
Pablo Neira Ayuso
Accepted
[nf-next,1/5] netfilter: flowtable: move path discovery infrastructure to its own file
flowtable: consolidate xmit path
- - - -
-
-
-
2025-10-10
Pablo Neira Ayuso
Accepted
[libnftnl] utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings
[libnftnl] utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings
- 1 - -
-
-
-
2025-10-07
Phil Sutter
Accepted
[nft] mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings
[nft] mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings
- 1 1 -
-
-
-
2025-10-07
Phil Sutter
Accepted
[v3] selftests: netfilter: add nfnetlink ACK handling tests
[v3] selftests: netfilter: add nfnetlink ACK handling tests
- - - -
-
-
-
2025-10-05
Nikolaos Gkarlis
New
[v2,1/2] netfilter: nfnetlink: always ACK batch end if requested
always ACK batch end if requested
- 1 - -
-
-
-
2025-10-04
Nikolaos Gkarlis
Under Review
«
1
2
3
4
…
305
306
»