Toggle navigation
Patchwork
Netfilter Development
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: Submitter =
Florian Westphal
| 3345 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Needs Review / ACK
Handled Elsewhere
Search
Archived
No
Yes
Both
Delegate
------
Nobody
jgarzik
arnd
ymano
smfrench
jlayton
tseliot
ogasawara
amitk
awhitcroft
mst
dayangkun
jwboyer
jwboyer
colinking
colinking
azummo
dwmw2
rtg
sconklin
smb
aliguori
bradf
demarchi
ms
bhundven
chbs
kengyu
kadlec
regit
jabk
laforge
laforge
tonyb
alai
zecke
zecke
__damien__
luka
luka
prafulla@marvell.com
cyrus
PeterHuewe
kiho
jow
jow
ypwong
nico
dedeckeh
dedeckeh
yousong
yousong
tomcwarren
mb
mrchuck
vineetg76
computersforpeace
patrick_delaunay
Noltari
Noltari
ee07b291
ldir
ldir
stefanct
zhouhan
carldani
blp
ffainelli
ffainelli
regXboi
bbrezillon
pravin
mkp
jpettit
mkresin
mkresin
thess
thess
fbarrat
fbarrat
phil
linville
jesse
tjaalton
esben
abrodkin
abrodkin
diproiettod
tbot
stephenfin
ajd
darball1
sammj
jogo
jogo
bhelgaas
blogic
blogic
oohal
russellb
ptomsich
agraf
joestringer
mwalle
naveen
pchotard
pepe2k
pepe2k
arj
arj
tagr
tagr
tagr
davem
davem
davem
andmur01
jforissier
amitay
matttbe
pabeni
istokes
aparcar
tytso
goliath
martineau
maddy
Ansuel
danielschwierzeck
mariosix
dcaratti
aserdean
ovsrobot
ovsrobot
XiaoYang
marex
mkorpershoek
hs
khem
tpetazzoni
liwang
apritzel
danielhb
groug
npiggin
robimarko
pareddja
mmichelson
atishp
netdrv
mkubecek
jstancek
stintel
stintel
jkicinski
cpitchen
dsa
pm215
bpf
shettyg
lorpie01
acelan
wigyori
wigyori
apopple
dja
alexhung
lynxis
lynxis
brgl
brgl
peda
akodanev
0andriy
981213
narmstrong
snowpatch_ozlabs
snowpatch_ozlabs
snowpatch_ozlabs
aivanov
atishp04
shemminger
monstr
blocktrron
vigneshr
mraynal
chunkeey
stewart
stewart
wsa
kabel
Jaehoon
kevery
rfried
freenix
akumar
ukleinek
ukleinek
jagan
arbab
rsalvaterra
adrianschmutzler
horms
hegdevasant
hegdevasant
jacmet
sjg
ehristev
prom
bmeng
ag
rmilecki
rmilecki
metan
xypron
ivanhu
wbx
chleroy
apconole
abelloni
pablo
pablo
rw
rw
legoater
legoater
legoater
svanheule
trini
juju
bjonglez
xback
xback
richiejp
aik
dangole
dangole
pevik
jonhunter
ynezz
sbabic
sbabic
Hauke
Hauke
echaudron
forty
next_ghost
anuppatel
anuppatel
acer
benh
rgrimm
segher
pratyush
passgat
jms
jms
jms
mans0n
ruscur
linusw
linusw
jk
jk
jk
jk
ymorin
jmberg
Andes
numans
festevam
xuyang
tambarus
kubu
conchuod
matthias_bgg
imaximets
apalos
pbrobinson
spectrum
stroese
dceara
krzk
strlen
strlen
cazzacarna
neocturne
aldot
TIENFONG
mpe
sfr
galak
arnout
ktraynor
anguy11
calebccff
nbd
nbd
paulus
robh
jm
Apply
«
1
2
3
4
…
33
34
»
Patch
Series
A/F/R/T
S/W/F
Date
Submitter
Delegate
State
[nft,2/2] debug: include kernel set information on cache fill
[nft,1/2] tests/py: prepare for set debug change
- - - -
-
-
-
2024-11-20
Florian Westphal
New
[nft,1/2] tests/py: prepare for set debug change
[nft,1/2] tests/py: prepare for set debug change
- - - -
-
-
-
2024-11-20
Florian Westphal
New
[libnftnl] set: dump set backend name (hash, rbtree...) and elem count, if available
[libnftnl] set: dump set backend name (hash, rbtree...) and elem count, if available
- - - -
-
-
-
2024-11-20
Florian Westphal
New
[nf-next] netfilter: nf_tables: export set count and backend name to userspace
[nf-next] netfilter: nf_tables: export set count and backend name to userspace
- - - -
-
-
-
2024-11-20
Florian Westphal
New
[nf-next] netfilter: nft_byteorder: remove multi-register support
[nf-next] netfilter: nft_byteorder: remove multi-register support
- 1 - -
-
-
-
2024-02-14
Florian Westphal
New
[v3,nft] support for afl++ (american fuzzy lop++) fuzzer
[v3,nft] support for afl++ (american fuzzy lop++) fuzzer
- - - -
-
-
-
2023-12-19
Florian Westphal
New
[nft,v2] evaluate: don't update cache for anonymous chains
[nft,v2] evaluate: don't update cache for anonymous chains
- 1 - -
-
-
-
2025-03-21
Florian Westphal
Accepted
[nft] json: make sure timeout list is initialised
[nft] json: make sure timeout list is initialised
- 1 1 -
-
-
-
2025-03-21
Florian Westphal
Accepted
[nft] evaluate: fix assertion failure with malformed map definitions
[nft] evaluate: fix assertion failure with malformed map definitions
- 1 1 -
-
-
-
2025-03-20
Florian Westphal
Accepted
[nft] rule: return error if table does not exist
[nft] rule: return error if table does not exist
- - 1 -
-
-
-
2025-03-20
Florian Westphal
Accepted
[nft] evaluate: don't allow nat map with specified protocol
[nft] evaluate: don't allow nat map with specified protocol
- 1 1 -
-
-
-
2025-03-20
Florian Westphal
Accepted
[nft,v2] expression: tolerate named set protocol dependency
[nft,v2] expression: tolerate named set protocol dependency
- - 1 -
-
-
-
2025-03-20
Florian Westphal
Accepted
[nft] parser_bison: reject non-serializeable typeof expressions
[nft] parser_bison: reject non-serializeable typeof expressions
- 2 - -
-
-
-
2025-03-19
Florian Westphal
Accepted
[nft] netlink_delinerize: add more restrictions on meta nfproto removal
[nft] netlink_delinerize: add more restrictions on meta nfproto removal
- - 1 -
-
-
-
2025-03-19
Florian Westphal
Accepted
[nft] evaluate: move interval flag compat check after set key evaluation
[nft] evaluate: move interval flag compat check after set key evaluation
- 1 1 -
-
-
-
2025-03-17
Florian Westphal
Accepted
[nft] netlink: fix stack buffer overrun when emitting ranged expressions
[nft] netlink: fix stack buffer overrun when emitting ranged expressions
- - - -
-
-
-
2025-03-14
Florian Westphal
Accepted
[nft] evaluate: don't allow merging interval set/map with non-interval one
[nft] evaluate: don't allow merging interval set/map with non-interval one
- - 1 -
-
-
-
2025-03-13
Florian Westphal
Accepted
[nft] evaluate: fix expression data corruption
[nft] evaluate: fix expression data corruption
- - 1 -
-
-
-
2025-03-11
Florian Westphal
Accepted
[nf] selftests: netfilter: skip br_netfilter queue tests if kernel is tainted
[nf] selftests: netfilter: skip br_netfilter queue tests if kernel is tainted
- - - -
-
-
-
2025-03-11
Florian Westphal
Accepted
[nft] tests: shell: skip interval size tests on kernel that lack rbtree size fix
[nft] tests: shell: skip interval size tests on kernel that lack rbtree size fix
1 - - -
-
-
-
2025-03-10
Florian Westphal
Accepted
[nft] evaluate: don't crash if range has same start and end interval
[nft] evaluate: don't crash if range has same start and end interval
- 1 1 -
-
-
-
2025-03-10
Florian Westphal
Accepted
[libnetfilter_log] autoconf: don't curl build script
[libnetfilter_log] autoconf: don't curl build script
- - - -
-
-
-
2025-03-09
Florian Westphal
Accepted
[nft] doc: add mptcp to tcp option matching list
[nft] doc: add mptcp to tcp option matching list
- - - -
-
-
-
2025-03-06
Florian Westphal
Accepted
[nf,v2] netfilter: nf_tables: make destruction work queue pernet
[nf,v2] netfilter: nf_tables: make destruction work queue pernet
- 1 - -
-
-
-
2025-03-06
Florian Westphal
Accepted
[nft] segtree: fix string data initialisation
[nft] segtree: fix string data initialisation
- 1 1 -
-
-
-
2025-03-05
Florian Westphal
Accepted
[nft] tests: remove temporary file
[nft] tests: remove temporary file
1 - - -
-
-
-
2025-03-04
Florian Westphal
Accepted
[nft] tests: add atomic chain replace test
[nft] tests: add atomic chain replace test
1 - - -
-
-
-
2025-03-03
Florian Westphal
Accepted
[nft,4/4] expression: expr_build_udata_recurse should recurse
add mptcp suboption mnemonics
- - - -
-
-
-
2025-02-27
Florian Westphal
Accepted
[nft,3/4] netlink_delinearize: also consider exthdr type when trimming binops
add mptcp suboption mnemonics
- - - -
-
-
-
2025-02-27
Florian Westphal
Accepted
[nft,2/4] expression: propagate key datatype for anonymous sets
add mptcp suboption mnemonics
- - - -
-
-
-
2025-02-27
Florian Westphal
Accepted
[nft,1/4] tcpopt: add symbol table for mptcp suboptions
add mptcp suboption mnemonics
- - - -
-
-
-
2025-02-27
Florian Westphal
Accepted
[nft] payload: don't kill dependency for proto_th
[nft] payload: don't kill dependency for proto_th
- - 1 -
-
-
-
2025-02-27
Florian Westphal
Accepted
[nft] payload: return early if dependency is not a payload expression
[nft] payload: return early if dependency is not a payload expression
- 1 1 -
-
-
-
2025-02-25
Florian Westphal
strlen
Accepted
[nft] payload: remove double-store
[nft] payload: remove double-store
- - 1 -
-
-
-
2025-02-25
Florian Westphal
strlen
Accepted
[nft] parser_bison: get rid of unneeded statement
[nft] parser_bison: get rid of unneeded statement
- - 1 -
-
-
-
2025-02-24
Florian Westphal
strlen
Accepted
[nf-next] netfilter: fib: avoid lookup if socket is available
[nf-next] netfilter: fib: avoid lookup if socket is available
- - - -
-
-
-
2025-02-20
Florian Westphal
Accepted
[v2,net-next] netlink: specs: add conntrack dump and stats dump support
[v2,net-next] netlink: specs: add conntrack dump and stats dump support
- - - -
-
-
-
2025-02-10
Florian Westphal
Accepted
[nft,3/3] tests: py: extend raw payload match tests
[nft,1/3] netlink_delinarize: fix bogus munging of mask value
- - 1 -
-
-
-
2025-01-30
Florian Westphal
Accepted
[nft,2/3] src: add and use payload_expr_trim_force
[nft,1/3] netlink_delinarize: fix bogus munging of mask value
- - 1 -
-
-
-
2025-01-30
Florian Westphal
Accepted
[nft,1/3] netlink_delinarize: fix bogus munging of mask value
[nft,1/3] netlink_delinarize: fix bogus munging of mask value
- 1 1 -
-
-
-
2025-01-30
Florian Westphal
Accepted
[nft] evaluate: allow to re-use existing metered set
[nft] evaluate: allow to re-use existing metered set
- 1 - -
-
-
-
2025-01-22
Florian Westphal
Accepted
[nft] parser_bison: compact and simplify list and reset syntax
[nft] parser_bison: compact and simplify list and reset syntax
- - 1 -
-
-
-
2025-01-16
Florian Westphal
Accepted
[conntrack-tools,2/2] conntrack: prefer kernel-provided event timestamp if it is available
[libnetfilter_conntrack,1/2] src: add support for CTA_TIMESTAMP_EVENT
- - 1 -
-
-
-
2025-01-09
Florian Westphal
Accepted
[libnetfilter_conntrack,1/2] src: add support for CTA_TIMESTAMP_EVENT
[libnetfilter_conntrack,1/2] src: add support for CTA_TIMESTAMP_EVENT
- - 1 -
-
-
-
2025-01-09
Florian Westphal
Accepted
[nft] rule: make cmd_free(NULL) valid
[nft] rule: make cmd_free(NULL) valid
- - 1 -
-
-
-
2025-01-08
Florian Westphal
Accepted
[nft] parser_bison: fix UaF when reporting table parse error
[nft] parser_bison: fix UaF when reporting table parse error
- 1 1 -
-
-
-
2025-01-07
Florian Westphal
Accepted
[nft] tests: shell: add cgroupv2 socket match test case
[nft] tests: shell: add cgroupv2 socket match test case
- - - -
-
-
-
2025-01-02
Florian Westphal
Accepted
[nft] tests: shell: add a test case for netdev ruleset flush + parallel link down
[nft] tests: shell: add a test case for netdev ruleset flush + parallel link down
- - - -
-
-
-
2024-12-07
Florian Westphal
strlen
Accepted
[nf] netfilter: nf_tables: do not defer rule destruction via call_rcu
[nf] netfilter: nf_tables: do not defer rule destruction via call_rcu
- 1 - -
-
-
-
2024-12-07
Florian Westphal
Accepted
[nf-next] ipvs: speed up reads from ip_vs_conn proc file
[nf-next] ipvs: speed up reads from ip_vs_conn proc file
1 - - -
-
-
-
2024-12-03
Florian Westphal
Accepted
[nf-next] netfilter: conntrack: add conntrack event timestamp
[nf-next] netfilter: conntrack: add conntrack event timestamp
- - - -
-
-
-
2024-11-15
Florian Westphal
Accepted
[nf-next,v5,5/5] netfilter: nf_tables: allocate element update information dynamically
netfilter: nf_tables: reduce set element transaction size
- - - -
-
-
-
2024-11-13
Florian Westphal
Accepted
[nf-next,v5,4/5] netfilter: nf_tables: switch trans_elem to real flex array
netfilter: nf_tables: reduce set element transaction size
- - - -
-
-
-
2024-11-13
Florian Westphal
Accepted
[nf-next,v5,3/5] netfilter: nf_tables: prepare nft audit for set element compaction
netfilter: nf_tables: reduce set element transaction size
- - - -
-
-
-
2024-11-13
Florian Westphal
Accepted
[nf-next,v5,2/5] netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structure
netfilter: nf_tables: reduce set element transaction size
- - - -
-
-
-
2024-11-13
Florian Westphal
Accepted
[nf-next,v5,1/5] netfilter: nf_tables: add nft_trans_commit_list_add_elem helper
netfilter: nf_tables: reduce set element transaction size
- - - -
-
-
-
2024-11-13
Florian Westphal
Accepted
[nf-next,v3,7/7] netfilter: nf_tables: must hold rcu read lock while iterating object type list
netfilter: nf_tables: avoid PROVE_RCU_LIST splats
- 1 - -
-
-
-
2024-11-04
Florian Westphal
Accepted
[nf-next,v3,6/7] netfilter: nf_tables: must hold rcu read lock while iterating expression type list
netfilter: nf_tables: avoid PROVE_RCU_LIST splats
- 1 - -
-
-
-
2024-11-04
Florian Westphal
Accepted
[nf-next,v3,5/7] netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook
netfilter: nf_tables: avoid PROVE_RCU_LIST splats
- - - -
-
-
-
2024-11-04
Florian Westphal
Accepted
[nf-next,v3,4/7] netfilter: nf_tables: avoid false-positive lockdep splats in set walker
netfilter: nf_tables: avoid PROVE_RCU_LIST splats
- - - -
-
-
-
2024-11-04
Florian Westphal
Accepted
[nf-next,v3,3/7] netfilter: nf_tables: avoid false-positive lockdep splats with flowtables
netfilter: nf_tables: avoid PROVE_RCU_LIST splats
- - - -
-
-
-
2024-11-04
Florian Westphal
Accepted
[nf-next,v3,2/7] netfilter: nf_tables: avoid false-positive lockdep splats with sets
netfilter: nf_tables: avoid PROVE_RCU_LIST splats
- - - -
-
-
-
2024-11-04
Florian Westphal
Accepted
[nf-next,v3,1/7] netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
netfilter: nf_tables: avoid PROVE_RCU_LIST splats
- 1 - 1
-
-
-
2024-11-04
Florian Westphal
Accepted
[nft,v2] doc: extend description of fib expression
[nft,v2] doc: extend description of fib expression
- - 1 -
-
-
-
2024-10-30
Florian Westphal
Accepted
[nft] tests: monitor: fix up test case breakage
[nft] tests: monitor: fix up test case breakage
- - - -
-
-
-
2024-10-29
Florian Westphal
Accepted
[nft] src: allow to map key to nfqueue number
[nft] src: allow to map key to nfqueue number
- - - -
-
-
-
2024-10-25
Florian Westphal
Accepted
[net] selftests: netfilter: nft_flowtable.sh: make first pass deterministic
[net] selftests: netfilter: nft_flowtable.sh: make first pass deterministic
- - 1 -
-
-
-
2024-10-22
Florian Westphal
Accepted
[nft] tests: shell: don't rely on writable test directory
[nft] tests: shell: don't rely on writable test directory
- - - -
-
-
-
2024-10-22
Florian Westphal
Accepted
[nft] tests: shell: fix spurious dump failure in vmap timeout test
[nft] tests: shell: fix spurious dump failure in vmap timeout test
- 1 - -
-
-
-
2024-10-11
Florian Westphal
Accepted
[nf] netfilter: bpf: must hold reference on net namespace
[nf] netfilter: bpf: must hold reference on net namespace
- 1 1 -
-
-
-
2024-10-10
Florian Westphal
Accepted
[nf,2/2] selftests: netfilter: conntrack_vrf.sh: add fib test case
[nf,1/2] netfilter: fib: check correct rtable in vrf setups
- - - -
-
-
-
2024-10-09
Florian Westphal
Accepted
[nf,1/2] netfilter: fib: check correct rtable in vrf setups
[nf,1/2] netfilter: fib: check correct rtable in vrf setups
- 1 - -
-
-
-
2024-10-09
Florian Westphal
Accepted
[nf,v3] netfilter: xtables: avoid NFPROTO_UNSPEC where needed
[nf,v3] netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- 1 - -
-
-
-
2024-10-07
Florian Westphal
Accepted
[nf-next,4/4] netfilter: nf_tables: use skb_drop_reason
netfilter: use skb_drop_reason in more places
- - - -
-
-
-
2024-10-02
Florian Westphal
Accepted
[nf-next,3/4] netfilter: nf_nat: use skb_drop_reason
netfilter: use skb_drop_reason in more places
- - - -
-
-
-
2024-10-02
Florian Westphal
Accepted
[nf-next,2/4] netfilter: xt_nat: drop packet earlier
netfilter: use skb_drop_reason in more places
- - - -
-
-
-
2024-10-02
Florian Westphal
Accepted
[nf-next,1/4] netfilter: xt_nat: compact nf_nat_setup_info calls
netfilter: use skb_drop_reason in more places
- - - -
-
-
-
2024-10-02
Florian Westphal
Accepted
[libnftnl] expr: dynset: validate expressions are of nested type
[libnftnl] expr: dynset: validate expressions are of nested type
- - - -
-
-
-
2024-09-22
Florian Westphal
Accepted
[nf] kselftest: add test for nfqueue induced conntrack race
[nf] kselftest: add test for nfqueue induced conntrack race
- - - -
-
-
-
2024-09-18
Florian Westphal
Accepted
[nf] netfilter: nfnetlink_queue: remove old clash resolution logic
[nf] netfilter: nfnetlink_queue: remove old clash resolution logic
- - - 1
-
-
-
2024-09-18
Florian Westphal
Accepted
[nft] tests: shell: more ransomization for timeout parameter
[nft] tests: shell: more ransomization for timeout parameter
- - - -
-
-
-
2024-09-14
Florian Westphal
Accepted
[nft] tests: py: fix up udp csum fixup output
[nft] tests: py: fix up udp csum fixup output
- 1 - -
-
-
-
2024-09-11
Florian Westphal
strlen
Accepted
[nf-next,3/3] selftests: netfilter: add reverse-clash resolution test case
netfilter: conntrack: clash resolution for reverse collisions
- - - -
-
-
-
2024-09-10
Florian Westphal
Accepted
[nf-next,2/3] netfilter: conntrack: add clash resolution for reverse collisions
netfilter: conntrack: clash resolution for reverse collisions
- - - -
-
-
-
2024-09-10
Florian Westphal
Accepted
[nf-next,1/3] netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
netfilter: conntrack: clash resolution for reverse collisions
- - - -
-
-
-
2024-09-10
Florian Westphal
Accepted
[nft] tests: shell: add test case for timeout updates
[nft] tests: shell: add test case for timeout updates
- - - -
-
-
-
2024-09-09
Florian Westphal
strlen
Accepted
[nft] tests: shell: extend vmap test with updates
[nft] tests: shell: extend vmap test with updates
- - - -
-
-
-
2024-09-09
Florian Westphal
strlen
Accepted
[nf,v2,2/2] netfilter: nft_socket: make cgroupsv2 matching work with namespaces
Untitled series #422862
- 1 - -
-
-
-
2024-09-07
Florian Westphal
Accepted
[nf,1/2] netfilter: nft_socket: fix sk refcount leaks
[nf,1/2] netfilter: nft_socket: fix sk refcount leaks
- 1 - -
-
-
-
2024-09-05
Florian Westphal
Accepted
[nf-next] netfilter: nf_tables: drop unused 3rd argument from validate callback ops
[nf-next] netfilter: nf_tables: drop unused 3rd argument from validate callback ops
- - - -
-
-
-
2024-08-28
Florian Westphal
Accepted
[nft,2/2] src: mnl: always dump all netdev hooks if no interface name was given
mnl: query netdevices for in/egress hooks
- - - -
-
-
-
2024-08-20
Florian Westphal
Accepted
[nft,1/2] src: mnl: prepare for listing all device netdev device hooks
mnl: query netdevices for in/egress hooks
- - - -
-
-
-
2024-08-20
Florian Westphal
Accepted
[nf-next,3/3] netfilter: nf_tables: don't initialize registers in nft_do_chain()
netfilter: nf_tables: reject loads from
- - - -
-
-
-
2024-08-20
Florian Westphal
Accepted
[nf-next,2/3] netfilter: nf_tables: allow loads only when register is initialized
netfilter: nf_tables: reject loads from
- - - -
-
-
-
2024-08-20
Florian Westphal
Accepted
[nf-next,1/3] netfilter: nf_tables: pass context structure to nft_parse_register_load
netfilter: nf_tables: reject loads from
- - - -
-
-
-
2024-08-20
Florian Westphal
Accepted
[nft] optimize: compare meta inner_desc pointers too
[nft] optimize: compare meta inner_desc pointers too
- - - -
-
-
-
2024-08-08
Florian Westphal
Accepted
[nf,v2,2/2] selftests: netfilter: add test for br_netfilter+conntrack+queue combination
Untitled series #418633
- - - -
-
-
-
2024-08-08
Florian Westphal
Accepted
[nf,1/2] netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
netfilter: disable support for queueing cloned conntrack entries
- 1 - -
-
-
-
2024-08-07
Florian Westphal
Accepted
[nft,v2,5/5] doc: add documentation about list hooks feature
src: mnl: rework list hooks infra
- - - -
-
-
-
2024-07-31
Florian Westphal
Accepted
[nft,v2,4/5] src: add egress support for 'list hooks'
src: mnl: rework list hooks infra
- - - -
-
-
-
2024-07-31
Florian Westphal
Accepted
«
1
2
3
4
…
33
34
»