Show patches with: State = Action Required       |    Archived = No       |   125 patches
« 1 2 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[nf-next,v2,3/3] selftests: netfilter: flowtable vlan filtering bridge support [nf-next,v2,1/3] nf_flow_table_offload: offload the vlan encap in the flowtable - - - - --- 2022-05-26 wenxu@chinatelecom.cn pablo Under Review
[nft,v5,2/8] netlink_delinearize: refactor stmt_payload_binop_postprocess Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,3/8] netlink_delinearize: add support for processing variable payload statement arguments Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,4/8] evaluate: prevent nested byte-order conversions Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,5/8] evaluate: preserve existing binop properties Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,7/8] parser_json: allow RHS mark and payload expressions Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,v5,8/8] tests: add tests for binops with variable RHS operands Bitwise boolean operations with variable RHS operands - - - - --- 2023-05-28 Jeremy Sowden Under Review
[nft,2/5] datatype: don't clone static name/desc strings for datatype more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,3/5] datatype: don't clone datatype in set_datatype_alloc() if byteorder already matches more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,4/5] datatype: extend set_datatype_alloc() to change size more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller New
[nft,v2,1/5] build: add basic "check-{local,more,all}" and "build-all" make targets add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,2/5] build: add `make check-build` to run `./tests/build/run-tests.sh` add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,3/5] build: add `make check-tree` to check consistency of source tree add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,4/5] build: cleanup if-blocks for conditional compilation in "Makefile.am" add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,v2,5/5] tests/unit: add unit tests for libnftables add infrastructure for unit tests - - - - --- 2023-11-05 Thomas Haller New
[nft,2/2,v2] tests/shell: have .json-nft dumps prettified to wrap lines Untitled series #385629 - - - - --- 2023-12-07 Thomas Haller New
[ulogd] log NAT events using IPFIX [ulogd] log NAT events using IPFIX - - - - --- 2023-12-10 Tomasz Pala New
[libnetfilter_queue,1/1] src: add nfq_socket_sendto() - send config request and check response src: add nfq_socket_sendto() - send config request and check response - - - - --- 2023-12-11 Duncan Roe New
Bug in ulogd2 when destroying a stack that failed to start (with fix attached) Bug in ulogd2 when destroying a stack that failed to start (with fix attached) - - - - --- 2023-12-14 Gérald Colangelo New
ulogd / JSON output / enhancement proposal ulogd / JSON output / enhancement proposal - - - - --- 2023-12-14 Gérald Colangelo New
[v3,nft] support for afl++ (american fuzzy lop++) fuzzer [v3,nft] support for afl++ (american fuzzy lop++) fuzzer - - - - --- 2023-12-19 Florian Westphal New
[nf-next] netfilter: nft_byteorder: remove multi-register support [nf-next] netfilter: nft_byteorder: remove multi-register support - 1 - - --- 2024-02-14 Florian Westphal New
[v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table [v3,nf-next,1/2] netfilter: nf_tables: use struct nlattr * to store userdata for nft_table - - - - --- 2024-03-11 Quan Tian New
[nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown [nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown - 1 - - --- 2024-03-20 Pablo Neira Ayuso New
[nf,2/2] netfilter: flowtable: use UDP timeout after flow teardown [nf,1/2] netfilter: flowtable: infer TCP state and timeout before flow teardown - 1 - - --- 2024-03-20 Pablo Neira Ayuso New
[nft] limit: Support arbitrary unit values [nft] limit: Support arbitrary unit values - - - - --- 2024-04-13 Phil Sutter New
[nf] netfilter: restore default behavior for nf_conntrack_events [nf] netfilter: restore default behavior for nf_conntrack_events - 1 - - --- 2024-06-04 Nicolas Dichtel New
netfilter: conntrack: tcp: do not lower timeout to CLOSE for in-window RSTs netfilter: conntrack: tcp: do not lower timeout to CLOSE for in-window RSTs - - - - --- 2024-07-05 yyxRoy Under Review
[nf-next,1/7] netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpath netfilter: rework conntrack/flowtable interaction - - - - --- 2024-09-24 Florian Westphal New
[nf-next,2/7] netfilter: nft_flow_offload: update tcp state flags under lock netfilter: rework conntrack/flowtable interaction - 1 - - --- 2024-09-24 Florian Westphal New
[nf-next,3/7] netfilter: conntrack: remove skb argument from nf_ct_refresh netfilter: rework conntrack/flowtable interaction - - - - --- 2024-09-24 Florian Westphal New
[nf-next,4/7] netfilter: flowtable: prefer plain nf_ct_refresh for setting initial timeout netfilter: rework conntrack/flowtable interaction - - - - --- 2024-09-24 Florian Westphal New
[nf-next,5/7] netfilter: conntrack: rework offload nf_conn timeout extension logic netfilter: rework conntrack/flowtable interaction - - - - --- 2024-09-24 Florian Westphal New
[nf-next,6/7] netfilter: nft_flow_offload: never grow the timeout when moving packets back to slowp… netfilter: rework conntrack/flowtable interaction - - - - --- 2024-09-24 Florian Westphal New
[nf-next,7/7] netfilter: nft_flow_offload: do not remove flowtable entry for fin packets netfilter: rework conntrack/flowtable interaction - - - - --- 2024-09-24 Florian Westphal New
[v4] net/bridge: Optimizing read-write locks in ebtables.c [v4] net/bridge: Optimizing read-write locks in ebtables.c - - - - --- 2024-09-25 yushengjin New
[libnftnl,1/4] include: utils.h needs errno.h Support wildcard netdev hooks and events - 1 - - --- 2024-10-02 Phil Sutter New
[libnftnl,2/4] utils: Add helpers for interface name wildcards Support wildcard netdev hooks and events - - - - --- 2024-10-02 Phil Sutter New
[libnftnl,3/4] utils: Introduce nftnl_parse_str_attr() Support wildcard netdev hooks and events - - - - --- 2024-10-02 Phil Sutter New
[libnftnl,4/4] device: Introduce nftnl_device Support wildcard netdev hooks and events - - - - --- 2024-10-02 Phil Sutter New
[nft,5/9] mnl: Support simple wildcards in netdev hooks Support wildcard netdev hooks and events - - - - --- 2024-10-02 Phil Sutter New
[nft,6/9] parser_bison: Accept ASTERISK_STRING in flowtable_expr_member Support wildcard netdev hooks and events - - - - --- 2024-10-02 Phil Sutter New
[nft,7/9] tests: shell: Adjust to ifname-based flowtables Support wildcard netdev hooks and events - - - - --- 2024-10-02 Phil Sutter New
[nft,8/9] tests: monitor: Support running external commands Support wildcard netdev hooks and events - - - - --- 2024-10-02 Phil Sutter New
[nft,9/9] monitor: Support NFT_MSG_(NEW|DEL)DEV events Support wildcard netdev hooks and events - - - - --- 2024-10-02 Phil Sutter New
doc: don't suggest to disable GSO doc: don't suggest to disable GSO - 1 - - --- 2024-10-06 Ronan Pigott New
[iptables,v2,1/8] nft: Make add_log() static nft: Implement forward compat for future binaries - - - - --- 2024-10-09 Phil Sutter New
[iptables,v2,2/8] nft: ruleparse: Introduce nft_parse_rule_expr() nft: Implement forward compat for future binaries - - - - --- 2024-10-09 Phil Sutter New
[iptables,v2,3/8] nft: __add_{match,target}() can't fail nft: Implement forward compat for future binaries - - - - --- 2024-10-09 Phil Sutter New
[iptables,v2,4/8] nft: Introduce UDATA_TYPE_COMPAT_EXT nft: Implement forward compat for future binaries - - - - --- 2024-10-09 Phil Sutter New
[iptables,v2,5/8] nft-ruleparse: Fallback to compat expressions in userdata nft: Implement forward compat for future binaries - - - - --- 2024-10-09 Phil Sutter New
[iptables,v2,6/8] nft: Pass nft_handle into add_{action,match}() nft: Implement forward compat for future binaries - - - - --- 2024-10-09 Phil Sutter New
[iptables,v2,7/8] nft: Embed compat extensions in rule userdata nft: Implement forward compat for future binaries - - - - --- 2024-10-09 Phil Sutter New
[iptables,v2,8/8] tests: iptables-test: Add nft-compat variant nft: Implement forward compat for future binaries - - - - --- 2024-10-09 Phil Sutter New
nf_conntrack_proto_udp: Set ASSURED for NAT_CLASH entries to avoid packets dropped nf_conntrack_proto_udp: Set ASSURED for NAT_CLASH entries to avoid packets dropped 1 1 - - --- 2024-10-10 Yadan Fan New
[libnetfilter_queue,v3,01/15] src: Convert nfq_open() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,02/15] src: Convert nfq_open_nfnl() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,03/15] src: Convert nfq_close() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,04/15] src: Convert nfq_create_queue(), nfq_bind_pf() & nfq_unbind_pf() to u… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,05/15] src: Convert nfq_set_queue_flags(), nfq_set_queue_maxlen() & nfq_set_… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,06/15] src: Convert nfq_handle_packet(), nfq_get_secctx(), nfq_get_payload()… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,07/15] src: Convert nfq_set_verdict() and nfq_set_verdict2() to use libmnl i… Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,08/15] src: Incorporate nfnl_rcvbufsiz() in libnetfilter_queue Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,09/15] src: Convert nfq_fd() to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,10/15] src: Convert remaining nfq_* functions to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,11/15] src: Copy nlif-related files from libnfnetlink Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,12/15] doc: Add iftable.c to the doxygen system Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,13/15] src: Convert all nlif_* functions to use libmnl Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,14/15] include: Use libmnl.h instead of libnfnetlink.h Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[libnetfilter_queue,v3,15/15] build: Remove libnfnetlink from the build Convert libnetfilter_queue to not need libnfnetlink - - - - --- 2024-10-12 Duncan Roe New
[nf-next,v6,1/7] netfilter: nf_tables: Flowtable hook's pf value never varies Dynamic hook interface binding part 1 - - - - --- 2024-10-23 Phil Sutter New
[nf-next,v6,2/7] netfilter: nf_tables: Store user-defined hook ifname Dynamic hook interface binding part 1 - - - - --- 2024-10-23 Phil Sutter New
[nf-next,v6,3/7] netfilter: nf_tables: Use stored ifname in netdev hook dumps Dynamic hook interface binding part 1 - - - - --- 2024-10-23 Phil Sutter New
[nf-next,v6,4/7] netfilter: nf_tables: Compare netdev hooks based on stored name Dynamic hook interface binding part 1 - - - - --- 2024-10-23 Phil Sutter New
[nf-next,v6,5/7] netfilter: nf_tables: Tolerate chains with no remaining hooks Dynamic hook interface binding part 1 - - - - --- 2024-10-23 Phil Sutter New
[nf-next,v6,6/7] netfilter: nf_tables: Simplify chain netdev notifier Dynamic hook interface binding part 1 - - - - --- 2024-10-23 Phil Sutter New
[nf-next,v6,7/7] netfilter: nf_tables: Drop __nft_unregister_flowtable_net_hooks() Dynamic hook interface binding part 1 - - - - --- 2024-10-23 Phil Sutter New
[nf-next] netfilter: conntrack: add conntrack event timestamp [nf-next] netfilter: conntrack: add conntrack event timestamp - - - - --- 2024-11-07 Florian Westphal New
[nf-next] netfilter: conntrack: add conntrack event timestamp [nf-next] netfilter: conntrack: add conntrack event timestamp - - - - --- 2024-11-15 Florian Westphal New
[v2,01/21] netfilter: conntrack: Cleanup timeout definitions Converge on using secs_to_jiffies() - - - - --- 2024-11-15 Easwar Hariharan New
[nf-next] netfilter: nf_tables: export set count and backend name to userspace [nf-next] netfilter: nf_tables: export set count and backend name to userspace - - - - --- 2024-11-20 Florian Westphal New
[libnftnl] set: dump set backend name (hash, rbtree...) and elem count, if available [libnftnl] set: dump set backend name (hash, rbtree...) and elem count, if available - - - - --- 2024-11-20 Florian Westphal New
[nft,1/2] tests/py: prepare for set debug change [nft,1/2] tests/py: prepare for set debug change - - - - --- 2024-11-20 Florian Westphal New
[nft,2/2] debug: include kernel set information on cache fill [nft,1/2] tests/py: prepare for set debug change - - - - --- 2024-11-20 Florian Westphal New
[linux-next] netfilter: nf_tables: remove the genmask parameter [linux-next] netfilter: nf_tables: remove the genmask parameter - - 1 - --- 2024-11-25 jiang.kun2@zte.com.cn New
[nf-next] netfilter: nf_tables: fix set size with rbtree backend [nf-next] netfilter: nf_tables: fix set size with rbtree backend - 1 - - --- 2024-11-26 Pablo Neira Ayuso New
NETFILTER: Fix typo in nf_conntrack_l4proto.h comment NETFILTER: Fix typo in nf_conntrack_l4proto.h comment - - - - --- 2024-11-28 caivive (Weibiao Tu) New
[4.19.y,1/1] inet: inet_defrag: prevent sk release while still in use [4.19.y,1/1] inet: inet_defrag: prevent sk release while still in use - 1 1 - --- 2024-12-02 Saeed Mirzamohammadi New
[nf-next] ipvs: speed up reads from ip_vs_conn proc file [nf-next] ipvs: speed up reads from ip_vs_conn proc file 1 - - - --- 2024-12-03 Florian Westphal New
[xtables-addons] build: fix inclusion of Makefile.extra [xtables-addons] build: fix inclusion of Makefile.extra - 1 - - --- 2024-12-03 Jeremy Sowden New
[net] Fix clamp() of ip_vs_conn_tab on small memory systems. [net] Fix clamp() of ip_vs_conn_tab on small memory systems. - 1 - - --- 2024-12-06 David Laight Under Review
[nf-next] netfilter: xt_hashlimit: htable_selective_cleanup() optimization [nf-next] netfilter: xt_hashlimit: htable_selective_cleanup() optimization - - - - --- 2024-12-06 Eric Dumazet New
[nf] selftests: netfilter: Stabilize rpath.sh [nf] selftests: netfilter: Stabilize rpath.sh - 1 - - --- 2024-12-06 Phil Sutter New
[nf] netfilter: IDLETIMER: Fix for possible ABBA deadlock [nf] netfilter: IDLETIMER: Fix for possible ABBA deadlock - 1 - - --- 2024-12-06 Phil Sutter New
[nf] netfilter: nf_tables: do not defer rule destruction via call_rcu [nf] netfilter: nf_tables: do not defer rule destruction via call_rcu - 1 - - --- 2024-12-07 Florian Westphal New
[nft] tests: shell: add a test case for netdev ruleset flush + parallel link down [nft] tests: shell: add a test case for netdev ruleset flush + parallel link down - - - - --- 2024-12-07 Florian Westphal New
[nft,1/2] expression: remove elem_flags from EXPR_SET_ELEM to shrink struct expr size [nft,1/2] expression: remove elem_flags from EXPR_SET_ELEM to shrink struct expr size - - - - --- 2024-12-09 Pablo Neira Ayuso New
[nft,2/2] src: remove unused token_offset from struct location [nft,1/2] expression: remove elem_flags from EXPR_SET_ELEM to shrink struct expr size - - - - --- 2024-12-09 Pablo Neira Ayuso New
intervals: set internal element location with the deletion trigger intervals: set internal element location with the deletion trigger - 1 - - --- 2024-12-09 Pablo Neira Ayuso New
netfilter: nfnetlink_queue: Fix redundant comparison of unsigned value netfilter: nfnetlink_queue: Fix redundant comparison of unsigned value - - - - --- 2024-12-09 Karol Przybylski New
« 1 2 »