Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-07-03 09:14:45 to 2026-07-09 20:04:28 UTC [more...]

[PATCH ipset 0/7] test updates
 2026-07-09 20:03 UTC  (6+ messages)
` [PATCH ipset 1/7] tests: make runtest.sh work with readonly-cwd
` [PATCH ipset 2/7] tests: runtest.sh: run inside namespace
` [PATCH ipset 3/7] tests: diff.sh: preserve file name
` [PATCH ipset 4/7] tests: check_klog.sh: unclutter stderr
` [PATCH ipset 5/7] tests: setlist_ns.sh: use local ipset binary and don't rely on userns

[nf-next PATCH v2 0/5] Address Sashiko review of NAT hook dump code
 2026-07-09 19:46 UTC  (6+ messages)
` [nf-next PATCH v2 1/5] netfilter: nfnetlink_hook: Fix for EINTR due to index too large
` [nf-next PATCH v2 2/5] netfilter: nfnetlink_hook: Pass cb object to nfnl_hook_dump_nat()
` [nf-next PATCH v2 3/5] netfilter: nfnetlink_hook: Address hook ops using READ_ONCE()
` [nf-next PATCH v2 4/5] netfilter: nfnetlink_hook: Handle multipart NAT hook dumps
` [nf-next PATCH v2 5/5] netfilter: nfnetlink_hook: Fix for concurrent NAT hooks dump and change

[PATCH nf] netfilter: flowtable: tear down HW offloaded flows on FIB route changes
 2026-07-09 17:08 UTC  (3+ messages)

[nf-next PATCH 0/4] Address Sashiko review of NAT hook dump code
 2026-07-09 17:04 UTC  (9+ messages)
` [nf-next PATCH 1/4] netfilter: nfnetlink_hook: Pass cb object to nfnl_hook_dump_nat()
` [nf-next PATCH 2/4] netfilter: nfnetlink_hook: Deref hook entry using READ_ONCE()
` [nf-next PATCH 3/4] netfilter: nfnetlink_hook: Handle multipart NAT hook dumps
` [nf-next PATCH 4/4] netfilter: nfnetlink_hook: Fix for concurrent NAT hooks dump and change

[nft PATCH] mnl: support RLIMIT_NOFILE soft limit > FD_SETSIZE
 2026-07-09 16:53 UTC 

[PATCH net v2] netfilter: nf_nat: recalculate TCP TS offset when snat change sport
 2026-07-09 13:30 UTC  (2+ messages)

[PATCH nf] ipvs: make destination flags atomic
 2026-07-09 13:06 UTC  (6+ messages)

[PATCH nf v3 2/2] selftests: netfilter: add bridge tunnel flowtable regression
 2026-07-09 12:17 UTC  (2+ messages)

[PATCH nf] netfilter: flowtable: use correct direction to set up tunnel route
 2026-07-09 11:40 UTC 

[PATCH nf] netfilter: ip6tables: set hotdrop for malformed extension header matches
 2026-07-09 11:02 UTC  (2+ messages)

[netfilter-nf:testing 11/20] net/netfilter/ipset/ip_set_hash_gen.h:379:21: warning: result of comparison of constant -1 with expression of type 'u8' (aka 'unsigned char') is always false
 2026-07-09 10:15 UTC  (2+ messages)

[PATCH net 00/17] netfilter: updates for net
 2026-07-09  9:50 UTC  (19+ messages)
` [PATCH net 01/17] netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
` [PATCH net 02/17] netfilter: ebtables: terminate table name before find_table_lock()
` [PATCH net 03/17] netfilter: ebtables: zero chainstack array
` [PATCH net 04/17] netfilter: ebtables: module names must be null-terminated
` [PATCH net 05/17] netfilter: nft_lookup: fix catchall element handling with inverted lookups
` [PATCH net 06/17] netfilter: ipset: mark the rcu locked areas properly
` [PATCH net 07/17] netfilter: ipset: exclude gc when resize is in progress
` [PATCH net 08/17] netfilter: ipset: cleanup the add/del backlog when resize failed
` [PATCH net 09/17] netfilter: ipset: allocate the proper memory for the generic hash structure
` [PATCH net 10/17] netfilter: flowtable: use dst in this direction when pushing IPIP header
` [PATCH net 11/17] netfilter: flowtable: IPIP tunnel hardware offload is not yet support
` [PATCH net 12/17] netfilter: flowtable: support IPIP tunnel with direct xmit
` [PATCH net 13/17] netfilter: handle unreadable frags
` [PATCH net 14/17] ipvs: pass parsed transport offset to state handlers
` [PATCH net 15/17] ipvs: use parsed transport offset in TCP state lookup
` [PATCH net 16/17] ipvs: use parsed transport offset in SCTP "
` [PATCH net 17/17] ipvs: ensure inner headers in ICMP errors are in headroom

[PATCH v12 nf-next 0/7] netfilter: Add bridge-fastpath
 2026-07-09  9:41 UTC  (16+ messages)
` [PATCH v12 nf-next 1/7] bridge: Add filling forward path from port to port
` [PATCH v12 nf-next 2/7] net: core: dev: Add dev_fill_bridge_path()
` [PATCH v12 nf-next 3/7] netfilter: nf_flow_table_offload: Add nf_flow_rule_bridge()
` [PATCH v12 nf-next 4/7] netfilter: nf_flow_table_inet: Add nf_flowtable_type flowtable_bridge
` [PATCH v12 nf-next 5/7] netfilter: nft_flow_offload: nft_flow_offload_eval: check thoff==0
` [PATCH v12 nf-next 6/7] netfilter: nft_flow_offload: Add NFPROTO_BRIDGE to validate
` [PATCH v12 nf-next 7/7] netfilter: nft_flow_offload: Add bridgeflow to nft_flow_offload_eval()

[PATCH nf-next v5 0/6] Add IPv4 over IPv6 and SIT flowtable SW acceleration
 2026-07-09  8:52 UTC  (7+ messages)
` [PATCH nf-next v5 1/6] net: netfilter: add ether_type to net_device_path_ctx
` [PATCH nf-next v5 2/6] net: netfilter: add encap_proto to flow_offload_tunnel
` [PATCH nf-next v5 3/6] net: netfilter: add IPv4 over IPv6 tunnel flowtable acceleration
` [PATCH nf-next v5 4/6] selftests: netfilter: nft_flowtable.sh: add IPv4 over IPv6 flowtable selftest
` [PATCH nf-next v5 5/6] net: netfilter: add SIT tunnel flowtable acceleration
` [PATCH nf-next v5 6/6] selftests: netfilter: nft_flowtable.sh: add SIT flowtable selftest

[PATCH nft] parser_json: initialize geneve options list for empty tunnel array
 2026-07-09  8:05 UTC  (2+ messages)

[PATCH net] netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized
 2026-07-09  7:19 UTC  (8+ messages)

[PATCH net] netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
 2026-07-08 18:13 UTC  (3+ messages)

[PATCH net v2] netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
 2026-07-08 18:11 UTC 

[PATCH nf] ipvs: fix more places with wrong ipv6 transport offsets
 2026-07-08 18:03 UTC 

[PATCH net-next] net: ipip: use tunnel parameters for fill_forward_path route lookup
 2026-07-08 15:42 UTC  (4+ messages)

[PATCH net-next] net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup
 2026-07-08 15:42 UTC  (2+ messages)

[PATCH nf] ipvs: reload ip header after head reallocation
 2026-07-08 15:31 UTC  (2+ messages)

[PATCH nf-next 0/4] netfilter: replace u_int*_t with kernel int types (batch 3)
 2026-07-08 14:56 UTC  (6+ messages)
` [PATCH nf-next 1/4] netfilter: ip_vs_core: replace u_int32_t with u32
` [PATCH nf-next 2/4] netfilter: nf_conntrack_sip: replace u_int16_t with u16
` [PATCH nf-next 3/4] netfilter: nf_nat_amanda: "
` [PATCH nf-next 4/4] netfilter: nfnetlink_osf: replace u_int8_t with u8

[RFC] VEGA: a syzbot-like workflow for LLM-found kernel bugs
 2026-07-08 14:55 UTC  (5+ messages)

[PATCH nf-next v4 0/6] Add IPv4 over IPv6 and SIT flowtable SW acceleration
 2026-07-08 10:33 UTC  (11+ messages)
` [PATCH nf-next v4 1/6] net: netfilter: Add ether_type to net_device_path_ctx
` [PATCH nf-next v4 2/6] net: netfilter: Add encap_proto to flow_offload_tunnel
` [PATCH nf-next v4 3/6] net: netfilter: Add IPv4 over IPv6 tunnel flowtable acceleration
` [PATCH nf-next v4 4/6] selftests: netfilter: nft_flowtable.sh: Add IPv4 over IPv6 flowtable selftest
` [PATCH nf-next v4 5/6] net: netfilter: Add SIT tunnel flowtable acceleration
` [PATCH nf-next v4 6/6] selftests: netfilter: nft_flowtable.sh: Add SIT flowtable selftest

[PATCH nf-next,v1 1/4] bridge: Add filling forward path from port to port
 2026-07-08  9:32 UTC  (4+ messages)
` [PATCH nf-next,v1 2/4] net: pass net_device_path_ctx struct to dev_fill_forward_path()
` [PATCH nf-next,v1 3/4] net: expose dev_fwd_path() helper via static inline
` [PATCH nf-next,v1 4/4] netfilter: flowtable: initial bridge support

[PATCH nf,v1 1/4] bridge: Add filling forward path from port to port
 2026-07-08  9:31 UTC 

[PATCH nf v2] ipvs: make destination flags atomic
 2026-07-08  8:53 UTC  (2+ messages)

[PATCH nf] netfilter: nf_conncount: fix zone comparison in tuple dedup
 2026-07-08  5:30 UTC  (3+ messages)

[PATCH nf v2] netfilter: nf_conncount: fix zone comparison in tuple dedup
 2026-07-08  5:27 UTC 

[PATCH nf v2] ipvs: ensure inner headers in ICMP errors are in headroom
 2026-07-07 18:25 UTC 

[PATCH nf v2] netfilter: handle unreadable frags
 2026-07-07 18:08 UTC  (2+ messages)

[PATCH nft 1/2] segtree: fix get element command with open intervals
 2026-07-07 14:52 UTC  (6+ messages)
` [PATCH nft 2/2] tests: shell: expand get command test "

[PATCH nf v2 0/3] ipvs: use parsed transport offsets in state handlers
 2026-07-07 13:51 UTC  (5+ messages)
` [PATCH nf v2 1/3] ipvs: pass parsed transport offset to "
` [PATCH nf v2 2/3] ipvs: use parsed transport offset in TCP state lookup
` [PATCH nf v2 3/3] ipvs: use parsed transport offset in SCTP "

[PATCH nf] netfilter: ecache: fix inverted time_after() check
 2026-07-07 11:00 UTC 

[PATCH nf,v2 1/3] netfilter: flowtable: use dst in this direction when pushing IPIP header
 2026-07-07 10:46 UTC  (4+ messages)
` [PATCH nf,v2 2/3] netfilter: flowtable: IPIP tunnel hardware offload is not yet support

[PATCH nf] ipvs: skip IPv6 extension headers in SCTP state lookup
 2026-07-07  5:38 UTC  (5+ messages)

[PATCH nf] ipvs: ensure inner headers in ICMP errors are in headroom
 2026-07-06 17:49 UTC  (2+ messages)

[PATCH nf] netfilter: handle unreadable frags
 2026-07-06 15:52 UTC 

[PATCH nf-next] netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet
 2026-07-06 12:30 UTC 

[PATCH net v2] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
 2026-07-06 10:50 UTC  (3+ messages)

[PATCH net 0/9] netfilter: updates for net
 2026-07-06 10:50 UTC  (12+ messages)
` [PATCH net 1/9] netfilter: nf_nat_sip: reload possible stale data pointer
` [PATCH net 2/9] netfilter: xt_u32: reject invalid shift counts
` [PATCH net 3/9] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
` [PATCH net 4/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
` [PATCH net 5/9] netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
` [PATCH net 6/9] netfilter: nft_set_rbtree: get command skips end element with open interval
` [PATCH net 7/9] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
` [PATCH net 8/9] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
` [PATCH net 9/9] netfilter: xt_connmark: reject invalid shift parameters

[PATCH net] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
 2026-07-06 10:50 UTC  (2+ messages)

[PATCH nf] netfilter: ebtables: zero chainstack array
 2026-07-06 10:02 UTC 

[PATCH nf] netfilter: ebtables: module names must be null-terminated
 2026-07-06 10:01 UTC 

[PATCH nf] netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
 2026-07-05 23:36 UTC 

[PATCH nf] netfilter: ebtables: terminate table name before find_table_lock()
 2026-07-05 21:58 UTC 

[PATCH nf] ipvs: skip IPv6 extension headers in TCP state lookup
 2026-07-05 12:56 UTC 

[PATCH nf-next 0/3] netfilter: ebtables: shashiko nitpicks
 2026-07-04  9:31 UTC  (5+ messages)
` [PATCH nf-next 1/3] netfilter: ebtables: zero chainstack array
` [PATCH nf-next 2/3] netfilter: ebtables: account compat ebt_table_info to kmemcg
` [PATCH nf-next 3/3] netfilter: ebtables: bound num_counters in do_update_counters()

[PATCH nf] netfilter: ebtables: must null-terminate name
 2026-07-04  9:29 UTC 

[PATCH nf v5 1/1] bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst
 2026-07-04  7:50 UTC  (4+ messages)

[PATCH nf-next] netfilter: xt_tcpmss: extend checkentry to ipv6
 2026-07-04  7:31 UTC 

[PATCH net-next 00/12] netfilter: updates for net-next
 2026-07-04  6:33 UTC  (3+ messages)

[PATCH nf] netfilter: ipset: skip extension destroy on hash resize replay
 2026-07-04  6:22 UTC 

[PATCH net-next 01/12] netfilter: nfnetlink_hook: Dump nat type chains
 2026-07-03 20:10 UTC  (2+ messages)

[PATCH v2 nf-next] ipvs: Move defense_work and est_reload_work to system_dfl_long_wq
 2026-07-03 17:49 UTC  (2+ messages)

[PATCH] netfilter: nft_lookup: fix catchall element handling with inverted lookups
 2026-07-03 16:22 UTC 

[PATCH nf 1/1] netfilter: xt_time: reject pre-epoch calendar matching
 2026-07-03 11:07 UTC  (7+ messages)

[nft PATCH 0/6] Eliminate variable declarations in switch cases
 2026-07-03  9:55 UTC  (4+ messages)
` [nft PATCH 6/6] netlink: Call tunnel getters unconditionally


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox