Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-06-24 21:00:28 to 2026-07-05 17:35:35 UTC [more...]

[PATCH nf] ipvs: skip IPv6 extension headers in SCTP state lookup
 2026-07-05 17:35 UTC  (2+ messages)

[PATCH nf] ipvs: skip IPv6 extension headers in TCP state lookup
 2026-07-05 12:56 UTC 

[PATCH net v2] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
 2026-07-04 10:03 UTC  (3+ messages)

[PATCH nf-next 0/3] netfilter: ebtables: shashiko nitpicks
 2026-07-04  9:31 UTC  (5+ messages)
` [PATCH nf-next 1/3] netfilter: ebtables: zero chainstack array
` [PATCH nf-next 2/3] netfilter: ebtables: account compat ebt_table_info to kmemcg
` [PATCH nf-next 3/3] netfilter: ebtables: bound num_counters in do_update_counters()

[PATCH nf] netfilter: ebtables: must null-terminate name
 2026-07-04  9:29 UTC 

[PATCH nf v5 1/1] bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst
 2026-07-04  7:50 UTC  (4+ messages)

[PATCH nf-next] netfilter: xt_tcpmss: extend checkentry to ipv6
 2026-07-04  7:31 UTC 

[PATCH net-next 00/12] netfilter: updates for net-next
 2026-07-04  6:33 UTC  (16+ messages)
` [PATCH net-next 01/12] netfilter: nfnetlink_hook: Dump nat type chains
` [PATCH net-next 02/12] netfilter: x_tables: replace strlcat() with snprintf()
` [PATCH net-next 03/12] netfilter: replace u_int8_t and u_int16t with u8 and u16
` [PATCH net-next 04/12] netfilter: avoid strcpy usage
` [PATCH net-next 05/12] netfilter: remove redundant null check before kvfree()
` [PATCH net-next 06/12] netfilter: xt_tcpmss: add checkentry for parameter validation
` [PATCH net-next 07/12] netfilter: xt_dscp: add checkentry for tos match
` [PATCH net-next 08/12] netfilter: nf_conntrack_helper: do not hash by tuple
` [PATCH net-next 09/12] netfilter: conntrack: get rid of tuple in helper definitions
` [PATCH net-next 10/12] netfilter: conntrack: remove obsolete module parameters
` [PATCH net-next 11/12] netfilter: ebtables: bound num_counters like nentries in do_replace()
` [PATCH net-next 12/12] netfilter: nft_ct: support expectation creation for natted flows

[PATCH nf] netfilter: ipset: skip extension destroy on hash resize replay
 2026-07-04  6:22 UTC 

[PATCH v2 nf-next] ipvs: Move defense_work and est_reload_work to system_dfl_long_wq
 2026-07-03 17:49 UTC  (3+ messages)

[PATCH] netfilter: nft_lookup: fix catchall element handling with inverted lookups
 2026-07-03 16:22 UTC 

[PATCH nf-next v4 0/6] Add IPv4 over IPv6 and SIT flowtable SW acceleration
 2026-07-03 14:10 UTC  (7+ messages)
` [PATCH nf-next v4 1/6] net: netfilter: Add ether_type to net_device_path_ctx
` [PATCH nf-next v4 2/6] net: netfilter: Add encap_proto to flow_offload_tunnel
` [PATCH nf-next v4 3/6] net: netfilter: Add IPv4 over IPv6 tunnel flowtable acceleration
` [PATCH nf-next v4 4/6] selftests: netfilter: nft_flowtable.sh: Add IPv4 over IPv6 flowtable selftest
` [PATCH nf-next v4 5/6] net: netfilter: Add SIT tunnel flowtable acceleration
` [PATCH nf-next v4 6/6] selftests: netfilter: nft_flowtable.sh: Add SIT flowtable selftest

[PATCH net 0/9] netfilter: updates for net
 2026-07-03 12:57 UTC  (10+ messages)
` [PATCH net 1/9] netfilter: nf_nat_sip: reload possible stale data pointer
` [PATCH net 2/9] netfilter: xt_u32: reject invalid shift counts
` [PATCH net 3/9] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
` [PATCH net 4/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
` [PATCH net 5/9] netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
` [PATCH net 6/9] netfilter: nft_set_rbtree: get command skips end element with open interval
` [PATCH net 7/9] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
` [PATCH net 8/9] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
` [PATCH net 9/9] netfilter: xt_connmark: reject invalid shift parameters

[PATCH nf 1/1] netfilter: xt_time: reject pre-epoch calendar matching
 2026-07-03 11:07 UTC  (7+ messages)

[nft PATCH 0/6] Eliminate variable declarations in switch cases
 2026-07-03  9:55 UTC  (4+ messages)
` [nft PATCH 6/6] netlink: Call tunnel getters unconditionally

[PATCH nf 1/1] netfilter: xt_connmark: reject invalid shift parameters
 2026-07-03  9:00 UTC  (2+ messages)

[PATCH 0/5] netfilter: ipset: gc, backlog and cidr patches
 2026-07-02 13:47 UTC  (6+ messages)
` [PATCH 1/5] netfilter: ipset: mark the rcu locked areas properly
` [PATCH 2/5] netfilter: ipset: exlude gc when resize is in progress
` [PATCH 3/5] netfilter: ipset: cleanup the add/del backlog when resize failed
` [PATCH 4/5] netfilter: ipset: allocate the proper memory for the generic hash structure
` [PATCH 5/5] netfilter: ipset: rework cidr bookkeeping

[PATCH nft 1/2] segtree: fix get element command with open intervals
 2026-07-02 12:36 UTC  (2+ messages)
` [PATCH nft 2/2] tests: shell: expand get command test "

[PATCH nf] netfilter: nft_set_rbtree: get command skips end element with open interval
 2026-07-02 12:33 UTC 

[PATCH net] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
 2026-07-02 11:28 UTC 

[PATCH 1/1] ipvs: preserve conn hash flags when late-binding dest
 2026-07-01 21:25 UTC  (8+ messages)
      ` [PATCH RFC nf 1/2] ipvs: do not propagate one_packet flag to hashed conns
        ` [PATCH RFC nf 2/2] ipvs: adjust double hashing when fwd method changes
      ` [PATCH RFC nf v2 1/2] ipvs: do not propagate one_packet flag to hashed conns
        ` [PATCH RFC nf v2 2/2] ipvs: adjust double hashing when fwd method changes

[PATCH net 0/9] netfilter: updates for net
 2026-07-01 20:33 UTC  (17+ messages)
` [PATCH net 1/9] netfilter: nf_conntrack_expect: zero at allocation time
` [PATCH net 2/9] netfilter: nft_set_pipapo: don't leak bad clone into future transaction
` [PATCH net 3/9] netfilter: ipset: fix race between dump and ip_set_list resize
` [PATCH net 4/9] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
` [PATCH net 5/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master
` [PATCH net 6/9] netfilter: nft_fib: reject fib expression on the netdev egress hook
` [PATCH net 7/9] netfilter: nfnetlink_queue: restrict writes to network header
` [PATCH net 8/9] netfilter: nftables: restrict linklayer and network header writes
` [PATCH net 9/9] netfilter: nftables: restrict checkum update offset

[PATCH nf] netfilter: nft_set_rbtree: reject interval-end get for open intervals
 2026-07-01 19:31 UTC  (2+ messages)

[PATCH net] netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized
 2026-07-01 14:17 UTC  (8+ messages)

[PATCH net] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
 2026-07-01 12:58 UTC  (2+ messages)

[syzbot] Monthly netfilter report (Jul 2026)
 2026-07-01 12:32 UTC 

[PATCH nf] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
 2026-07-01 10:46 UTC 

[PATCH nf v2] netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
 2026-07-01 10:09 UTC 

[PATCH nf 0/3] flowtable fixes for ipip tunnels
 2026-07-01  6:44 UTC  (8+ messages)
` [PATCH nf 1/3] netfilter: flowtable: use dst in this direction when pushing IPIP header
` [PATCH nf 2/3] netfilter: flowtable: IPIP tunnel hardware offload is not yet support
` [PATCH nf 3/3] netfilter: flowtable: support IPIP tunnel with direct xmit

[PATCH] netfilter: x_tables: replace strlcat() with snprintf()
 2026-07-01  6:31 UTC  (4+ messages)

[PATCH nf] netfilter: nf_nat_sip: reload possible stale data pointer
 2026-07-01  6:29 UTC 

[PATCH v2 0/5] netfilter: nf_flow_table_path: L2 bridge offload
 2026-07-01  6:11 UTC  (8+ messages)
` [PATCH 1/5] net: export __dev_fill_forward_path
` [PATCH 2/5] net: bridge: add flow offload helpers
` [PATCH 3/5] netfilter: nf_flow_table_path: add L2 bridge offload
` [PATCH 4/5] netfilter: nf_flow_table_path: handle DEV_PATH_MTK_WDMA in path info
` [PATCH 5/5] netfilter: nf_flow_table_path: add VLAN passthrough support

[PATCH nf-next v4] netfilter: nft_ct: support expectation creation for natted flows
 2026-07-01  4:37 UTC 

[PATCH v3 nf] netfilter: nft_ct: support expectation creation for natted flows
 2026-07-01  0:40 UTC  (2+ messages)

[PATCH nf-next v2] netfilter: nft_ct: support expectation creation for natted flows
 2026-06-30 14:20 UTC  (4+ messages)

[PATCH nf] netfilter: ip6t_ah: validate AH header length
 2026-06-30 12:46 UTC  (3+ messages)

[PATCH nf,v2 1/3] netfilter: flowtable: use dst in this direction when pushing IPIP header
 2026-06-30 10:19 UTC  (5+ messages)
` [PATCH nf,v2 2/3] netfilter: flowtable: IPIP tunnel hardware offload is not yet support
` [PATCH nf,v2 3/3] netfilter: flowtable: support IPIP tunnel with direct xmit

[PATCH nf] netfilter: nf_conntrack_expect: zero at allocation time
 2026-06-29 22:21 UTC  (4+ messages)

[PATCH nf-next] netfilter: nft_ct: support expectation creation for natted flows
 2026-06-29 13:46 UTC 

[PATCH nf-next v2 0/3] netfilter: conntrack: remove obsolete module parameters
 2026-06-29 12:58 UTC  (4+ messages)
` [PATCH nf-next v2 1/3] netfilter: nf_conntrack_helper: do not hash by tuple
` [PATCH nf-next v2 2/3] netfilter: conntrack: get rid of tuple in helper definitions
` [PATCH nf-next v2 3/3] netfilter: conntrack: remove obsolete module parameters

[PATCH 0/5] netfilter: nf_flow_table_path: L2 bridge offload
 2026-06-29 12:56 UTC  (7+ messages)
` [PATCH 1/5] net: export __dev_fill_forward_path
` [PATCH 2/5] net: bridge: add flow offload helpers
` [PATCH 3/5] netfilter: nf_flow_table_path: add L2 bridge offload
` [PATCH 4/5] netfilter: nf_flow_table_path: handle DEV_PATH_MTK_WDMA in path info
` [PATCH 5/5] netfilter: nf_flow_table_path: add VLAN passthrough support

[BUG] netfilter: nft_fib: NULL-ptr-deref (GPF) in nft_fib6_eval on netdev egress hook
 2026-06-29 10:53 UTC  (7+ messages)
      ` [PATCH nf] netfilter: nft_fib: reject fib expression on the "
          ` [PATCH nf v2] "

[PATCH nf 1/1] netfilter: xt_u32: reject invalid shift counts
 2026-06-28  8:05 UTC 

[PATCH] minor spelling and grammar fixes in doc
 2026-06-27 11:10 UTC  (3+ messages)

[PATCH nf 1/1] netfilter: nf_conntrack_sip: guard against missing skb dst
 2026-06-27  3:37 UTC  (4+ messages)
      `  "

OpenWRT bounty for strong host behavior
 2026-06-26 21:23 UTC 

[PATCH nf-next 0/3] netfilter: conntrack: remove obsolete module parameters
 2026-06-26 12:31 UTC  (4+ messages)
` [PATCH nf-next 1/3] netfilter: nf_conntrack_helper: do not hash by tuple
` [PATCH nf-next 2/3] netfilter: conntrack: get rid of tuple in helper definitions
` [PATCH nf-next 3/3] netfilter: conntrack: remove obsolete module parameters

[PATCH nf] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master
 2026-06-26 11:40 UTC 

[PATCH nf] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
 2026-06-26 11:24 UTC 

[PATCH nf-next v2 0/3] netfilter: replace u_int*_t with kernel int types (batch 2)
 2026-06-25 17:25 UTC  (4+ messages)
` [PATCH nf-next v2 1/3] netfilter: nf_conntrack_h323_main: replace u_int8_t with u8
` [PATCH nf-next v2 2/3] netfilter: nf_conntrack_amanda: replace u_int16_t with u16
` [PATCH nf-next v2 3/3] netfilter: ip_vs_nfct: replace u_int8_t with u8

[PATCH nf-next] netfilter: remove redundant null check before kvfree()
 2026-06-25 13:31 UTC 

[PATCH nf 3/3] netfilter: xt_tcpmss: add checkentry for parameter validation
 2026-06-25  8:44 UTC 

[PATCH nf 1/3] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
 2026-06-25  8:44 UTC 

[PATCH nf 2/3] netfilter: xt_dscp: add checkentry for tos match
 2026-06-25  8:43 UTC 

[PATCH nf 0/3] netfilter: xtables match fixes
 2026-06-25  8:43 UTC 

[PATCH nf] netfilter: ipset: fix race between dump and ip_set_list resize
 2026-06-25  7:21 UTC  (2+ messages)

[PATCH net 01/14] netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
 2026-06-25  3:00 UTC  (2+ messages)

[PATCH nf] netfilter: nft_set_pipapo: don't leak bad clone into future transaction
 2026-06-24 21:31 UTC  (6+ messages)

[PATCH nf-next 0/4] netfilter: replace u_int*_t with kernel int types (batch 2)
 2026-06-24 21:00 UTC  (3+ messages)
` [PATCH nf-next 1/4] netfilter: nf_conntrack_sane: replace u_int16_t with u16


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox