Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-06-30 04:53:23 to 2026-07-08 10:34:04 UTC [more...]

[PATCH nf-next v4 0/6] Add IPv4 over IPv6 and SIT flowtable SW acceleration
 2026-07-08 10:33 UTC  (11+ messages)
` [PATCH nf-next v4 1/6] net: netfilter: Add ether_type to net_device_path_ctx
` [PATCH nf-next v4 2/6] net: netfilter: Add encap_proto to flow_offload_tunnel
` [PATCH nf-next v4 3/6] net: netfilter: Add IPv4 over IPv6 tunnel flowtable acceleration
` [PATCH nf-next v4 4/6] selftests: netfilter: nft_flowtable.sh: Add IPv4 over IPv6 flowtable selftest
` [PATCH nf-next v4 5/6] net: netfilter: Add SIT tunnel flowtable acceleration
` [PATCH nf-next v4 6/6] selftests: netfilter: nft_flowtable.sh: Add SIT flowtable selftest

[RFC] VEGA: a syzbot-like workflow for LLM-found kernel bugs
 2026-07-08  9:58 UTC  (2+ messages)

[PATCH v12 nf-next 0/7] netfilter: Add bridge-fastpath
 2026-07-08  9:54 UTC  (12+ messages)
` [PATCH v12 nf-next 1/7] bridge: Add filling forward path from port to port
` [PATCH v12 nf-next 2/7] net: core: dev: Add dev_fill_bridge_path()
` [PATCH v12 nf-next 3/7] netfilter: nf_flow_table_offload: Add nf_flow_rule_bridge()
` [PATCH v12 nf-next 4/7] netfilter: nf_flow_table_inet: Add nf_flowtable_type flowtable_bridge
` [PATCH v12 nf-next 5/7] netfilter: nft_flow_offload: nft_flow_offload_eval: check thoff==0
` [PATCH v12 nf-next 6/7] netfilter: nft_flow_offload: Add NFPROTO_BRIDGE to validate
` [PATCH v12 nf-next 7/7] netfilter: nft_flow_offload: Add bridgeflow to nft_flow_offload_eval()

[PATCH nf-next,v1 1/4] bridge: Add filling forward path from port to port
 2026-07-08  9:32 UTC  (4+ messages)
` [PATCH nf-next,v1 2/4] net: pass net_device_path_ctx struct to dev_fill_forward_path()
` [PATCH nf-next,v1 3/4] net: expose dev_fwd_path() helper via static inline
` [PATCH nf-next,v1 4/4] netfilter: flowtable: initial bridge support

[PATCH nf,v1 1/4] bridge: Add filling forward path from port to port
 2026-07-08  9:31 UTC 

[PATCH nf v2] ipvs: make destination flags atomic
 2026-07-08  8:53 UTC  (2+ messages)

[PATCH nf] ipvs: make destination flags atomic
 2026-07-08  6:11 UTC  (3+ messages)

[PATCH nf] netfilter: nf_conncount: fix zone comparison in tuple dedup
 2026-07-08  5:30 UTC  (3+ messages)

[PATCH nf v2] netfilter: nf_conncount: fix zone comparison in tuple dedup
 2026-07-08  5:27 UTC 

[PATCH nf-next 0/4] netfilter: replace u_int*_t with kernel int types (batch 3)
 2026-07-07 19:51 UTC  (5+ messages)
` [PATCH nf-next 1/4] netfilter: ip_vs_core: replace u_int32_t with u32
` [PATCH nf-next 2/4] netfilter: nf_conntrack_sip: replace u_int16_t with u16
` [PATCH nf-next 3/4] netfilter: nf_nat_amanda: "
` [PATCH nf-next 4/4] netfilter: nfnetlink_osf: replace u_int8_t with u8

[PATCH nf v2] ipvs: ensure inner headers in ICMP errors are in headroom
 2026-07-07 18:25 UTC 

[PATCH nf v2] netfilter: handle unreadable frags
 2026-07-07 18:08 UTC  (2+ messages)

[PATCH nft 1/2] segtree: fix get element command with open intervals
 2026-07-07 14:52 UTC  (6+ messages)
` [PATCH nft 2/2] tests: shell: expand get command test "

[PATCH nf v2 0/3] ipvs: use parsed transport offsets in state handlers
 2026-07-07 13:51 UTC  (5+ messages)
` [PATCH nf v2 1/3] ipvs: pass parsed transport offset to "
` [PATCH nf v2 2/3] ipvs: use parsed transport offset in TCP state lookup
` [PATCH nf v2 3/3] ipvs: use parsed transport offset in SCTP "

[PATCH nf] netfilter: ecache: fix inverted time_after() check
 2026-07-07 11:00 UTC 

[PATCH nf,v2 1/3] netfilter: flowtable: use dst in this direction when pushing IPIP header
 2026-07-07 10:46 UTC  (7+ messages)
` [PATCH nf,v2 2/3] netfilter: flowtable: IPIP tunnel hardware offload is not yet support
` [PATCH nf,v2 3/3] netfilter: flowtable: support IPIP tunnel with direct xmit

[PATCH nf] ipvs: skip IPv6 extension headers in SCTP state lookup
 2026-07-07  5:38 UTC  (5+ messages)

[PATCH net] netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
 2026-07-06 23:28 UTC 

[PATCH nf] ipvs: ensure inner headers in ICMP errors are in headroom
 2026-07-06 17:49 UTC  (2+ messages)

[PATCH nf] netfilter: handle unreadable frags
 2026-07-06 15:52 UTC 

[PATCH nf-next] netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet
 2026-07-06 12:30 UTC 

[PATCH net] netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized
 2026-07-06 12:08 UTC  (7+ messages)

[PATCH net v2] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
 2026-07-06 10:50 UTC  (4+ messages)

[PATCH net 0/9] netfilter: updates for net
 2026-07-06 10:50 UTC  (12+ messages)
` [PATCH net 1/9] netfilter: nf_nat_sip: reload possible stale data pointer
` [PATCH net 2/9] netfilter: xt_u32: reject invalid shift counts
` [PATCH net 3/9] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
` [PATCH net 4/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
` [PATCH net 5/9] netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
` [PATCH net 6/9] netfilter: nft_set_rbtree: get command skips end element with open interval
` [PATCH net 7/9] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
` [PATCH net 8/9] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
` [PATCH net 9/9] netfilter: xt_connmark: reject invalid shift parameters

[PATCH net] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
 2026-07-06 10:50 UTC  (2+ messages)

[PATCH nf] netfilter: ebtables: zero chainstack array
 2026-07-06 10:02 UTC 

[PATCH nf] netfilter: ebtables: module names must be null-terminated
 2026-07-06 10:01 UTC 

[PATCH nf] netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
 2026-07-05 23:36 UTC 

[PATCH nf] netfilter: ebtables: terminate table name before find_table_lock()
 2026-07-05 21:58 UTC 

[PATCH nf] ipvs: skip IPv6 extension headers in TCP state lookup
 2026-07-05 12:56 UTC 

[PATCH nf-next 0/3] netfilter: ebtables: shashiko nitpicks
 2026-07-04  9:31 UTC  (5+ messages)
` [PATCH nf-next 1/3] netfilter: ebtables: zero chainstack array
` [PATCH nf-next 2/3] netfilter: ebtables: account compat ebt_table_info to kmemcg
` [PATCH nf-next 3/3] netfilter: ebtables: bound num_counters in do_update_counters()

[PATCH nf] netfilter: ebtables: must null-terminate name
 2026-07-04  9:29 UTC 

[PATCH nf v5 1/1] bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst
 2026-07-04  7:50 UTC  (4+ messages)

[PATCH nf-next] netfilter: xt_tcpmss: extend checkentry to ipv6
 2026-07-04  7:31 UTC 

[PATCH net-next 00/12] netfilter: updates for net-next
 2026-07-04  6:33 UTC  (16+ messages)
` [PATCH net-next 01/12] netfilter: nfnetlink_hook: Dump nat type chains
` [PATCH net-next 02/12] netfilter: x_tables: replace strlcat() with snprintf()
` [PATCH net-next 03/12] netfilter: replace u_int8_t and u_int16t with u8 and u16
` [PATCH net-next 04/12] netfilter: avoid strcpy usage
` [PATCH net-next 05/12] netfilter: remove redundant null check before kvfree()
` [PATCH net-next 06/12] netfilter: xt_tcpmss: add checkentry for parameter validation
` [PATCH net-next 07/12] netfilter: xt_dscp: add checkentry for tos match
` [PATCH net-next 08/12] netfilter: nf_conntrack_helper: do not hash by tuple
` [PATCH net-next 09/12] netfilter: conntrack: get rid of tuple in helper definitions
` [PATCH net-next 10/12] netfilter: conntrack: remove obsolete module parameters
` [PATCH net-next 11/12] netfilter: ebtables: bound num_counters like nentries in do_replace()
` [PATCH net-next 12/12] netfilter: nft_ct: support expectation creation for natted flows

[PATCH nf] netfilter: ipset: skip extension destroy on hash resize replay
 2026-07-04  6:22 UTC 

[PATCH v2 nf-next] ipvs: Move defense_work and est_reload_work to system_dfl_long_wq
 2026-07-03 17:49 UTC  (3+ messages)

[PATCH] netfilter: nft_lookup: fix catchall element handling with inverted lookups
 2026-07-03 16:22 UTC 

[PATCH nf 1/1] netfilter: xt_time: reject pre-epoch calendar matching
 2026-07-03 11:07 UTC  (7+ messages)

[nft PATCH 0/6] Eliminate variable declarations in switch cases
 2026-07-03  9:55 UTC  (4+ messages)
` [nft PATCH 6/6] netlink: Call tunnel getters unconditionally

[PATCH nf 1/1] netfilter: xt_connmark: reject invalid shift parameters
 2026-07-03  9:00 UTC  (2+ messages)

[PATCH 0/5] netfilter: ipset: gc, backlog and cidr patches
 2026-07-02 13:47 UTC  (6+ messages)
` [PATCH 1/5] netfilter: ipset: mark the rcu locked areas properly
` [PATCH 2/5] netfilter: ipset: exlude gc when resize is in progress
` [PATCH 3/5] netfilter: ipset: cleanup the add/del backlog when resize failed
` [PATCH 4/5] netfilter: ipset: allocate the proper memory for the generic hash structure
` [PATCH 5/5] netfilter: ipset: rework cidr bookkeeping

[PATCH nf] netfilter: nft_set_rbtree: get command skips end element with open interval
 2026-07-02 12:33 UTC 

[PATCH 1/1] ipvs: preserve conn hash flags when late-binding dest
 2026-07-01 21:25 UTC  (6+ messages)
` [PATCH RFC nf 1/2] ipvs: do not propagate one_packet flag to hashed conns
  ` [PATCH RFC nf 2/2] ipvs: adjust double hashing when fwd method changes
` [PATCH RFC nf v2 1/2] ipvs: do not propagate one_packet flag to hashed conns
  ` [PATCH RFC nf v2 2/2] ipvs: adjust double hashing when fwd method changes

[PATCH net 0/9] netfilter: updates for net
 2026-07-01 20:33 UTC  (15+ messages)
` [PATCH net 2/9] netfilter: nft_set_pipapo: don't leak bad clone into future transaction
` [PATCH net 3/9] netfilter: ipset: fix race between dump and ip_set_list resize
` [PATCH net 4/9] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
` [PATCH net 5/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master
` [PATCH net 6/9] netfilter: nft_fib: reject fib expression on the netdev egress hook
` [PATCH net 7/9] netfilter: nfnetlink_queue: restrict writes to network header
` [PATCH net 8/9] netfilter: nftables: restrict linklayer and network header writes
` [PATCH net 9/9] netfilter: nftables: restrict checkum update offset

[PATCH nf] netfilter: nft_set_rbtree: reject interval-end get for open intervals
 2026-07-01 19:31 UTC  (2+ messages)

[PATCH net 1/9] netfilter: nf_conntrack_expect: zero at allocation time
 2026-07-01 17:10 UTC  (2+ messages)

[PATCH net] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
 2026-07-01 12:58 UTC  (2+ messages)

[syzbot] Monthly netfilter report (Jul 2026)
 2026-07-01 12:32 UTC 

[PATCH nf] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
 2026-07-01 10:46 UTC 

[PATCH nf v2] netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
 2026-07-01 10:09 UTC 

[PATCH nf 0/3] flowtable fixes for ipip tunnels
 2026-07-01  6:44 UTC  (2+ messages)

[PATCH] netfilter: x_tables: replace strlcat() with snprintf()
 2026-07-01  6:31 UTC  (4+ messages)

[PATCH nf] netfilter: nf_nat_sip: reload possible stale data pointer
 2026-07-01  6:29 UTC 

[PATCH v2 0/5] netfilter: nf_flow_table_path: L2 bridge offload
 2026-07-01  6:11 UTC  (8+ messages)
` [PATCH 1/5] net: export __dev_fill_forward_path
` [PATCH 2/5] net: bridge: add flow offload helpers
` [PATCH 3/5] netfilter: nf_flow_table_path: add L2 bridge offload
` [PATCH 4/5] netfilter: nf_flow_table_path: handle DEV_PATH_MTK_WDMA in path info
` [PATCH 5/5] netfilter: nf_flow_table_path: add VLAN passthrough support

[PATCH nf-next v4] netfilter: nft_ct: support expectation creation for natted flows
 2026-07-01  4:37 UTC 

[PATCH v3 nf] netfilter: nft_ct: support expectation creation for natted flows
 2026-07-01  0:40 UTC  (2+ messages)

[PATCH nf-next v2] netfilter: nft_ct: support expectation creation for natted flows
 2026-06-30 14:20 UTC  (4+ messages)

[PATCH nf] netfilter: ip6t_ah: validate AH header length
 2026-06-30 12:46 UTC  (3+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox