Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-07-28 11:09:52 to 2026-08-05 08:06:56 UTC [more...]

[PATCH net-next 0/9] Netfilter updates for net-next
 2026-08-05  8:06 UTC  (14+ messages)
` [PATCH net-next 1/9] netfilter: conncount: normalize tuple and zone on successful ct lookup
` [PATCH net-next 2/9] netfilter: flowtable: consolidate net_device field in nft_forward_info struct
` [PATCH net-next 3/9] netfilter: flowtable: consolidate flowtable device check
` [PATCH net-next 4/9] net: dsa: stop at the user device in .fill_forward_path
` [PATCH net-next 5/9] net: do not advance stack index from dev_fwd_path()
` [PATCH net-next 6/9] net: pass dst via net_device_path in dev_fill_forward_path()
` [PATCH net-next 7/9] netfilter: flowtable: release tunnel route on error when building forward path
` [PATCH net-next 8/9] netfilter: nf_tables: call skb_valid_dst() before skb_dst()
` [PATCH net-next 9/9] netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets

[PATCH net 00/10] Netfilter/IPVS fixes for net
 2026-08-05  7:42 UTC  (21+ messages)
` [PATCH net 01/10] ipvs: stop estimator after disabled calc phase
` [PATCH net 02/10] netfilter: ebt_nflog: pin the NFLOG backend
` [PATCH net 03/10] netfilter: ipset: rework cidr bookkeeping
` [PATCH net 04/10] netfilter: ipset: switch ext_size to atomic64_t
` [PATCH net 05/10] netfilter: ipset: add small wrappers for hash and bucket sizes
` [PATCH net 06/10] netfilter: ipset: add and use mtype_del_cidr_all helper
` [PATCH net 07/10] netfilter: ipset: switch to rcu work
` [PATCH net 08/10] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
` [PATCH net 09/10] ipvs: return the csum validation for forward hook
` [PATCH net 10/10] netfilter: nft_ct: move custom expectation support to helper

[PATCH] selftests: netfilter: add functional test for nft ct timeout policies
 2026-08-05  6:05 UTC 

[PATCH net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path
 2026-08-04 20:11 UTC 

[PATCH nf] netfilter: ipset: let destroy callbacks adjust ext mem size
 2026-08-04 17:02 UTC 

[PATCH nf] netfilter: ipset: remove need to allocate memory on delete operations
 2026-08-04 17:02 UTC 

[syzbot] [netfilter?] WARNING in nf_flow_offload_ip_hook
 2026-08-04 11:52 UTC  (2+ messages)

[PATCH nf] netfilter: nf_reject_ipv4: initialize IPCB at inet ingress
 2026-08-04 10:21 UTC  (2+ messages)

[PATCH net] netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
 2026-08-04 10:20 UTC  (2+ messages)

[PATCH nf v2] ipvs: clear IPv4 options after rebasing tunnel ICMP errors
 2026-08-04  7:54 UTC  (2+ messages)

nft_set_pipapo: UAF and double free from a stranded GC batch in the 5.15.y / 6.1.y / 6.6.y backports of 9df95785d3d8
 2026-08-04  6:01 UTC 

[PATCH net v2] net: flow_offload: serialize driver callback lists
 2026-08-03 23:04 UTC  (3+ messages)

[PATCH nf] netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
 2026-08-03 18:32 UTC  (2+ messages)

[PATCH nft] tests: shell: add packetpath test for nft ct expectation support
 2026-08-03 16:43 UTC 

[PATCH nft] test: shell: add regression test for 'ip fwd to' stack recursion
 2026-08-03 16:42 UTC 

[PATCH nf 0/5] netfilter: ipset fixes and rhastable prep work
 2026-08-03  8:55 UTC  (9+ messages)
` [PATCH nf 1/5] netfilter: ipset: rework cidr bookkeeping
` [PATCH nf 2/5] netfilter: ipset: switch ext_size to atomic64_t
` [PATCH nf 3/5] netfilter: ipset: add small wrappers for hash and bucket sizes
` [PATCH nf 4/5] netfilter: ipset: add and use mtype_del_cidr_all helper
` [PATCH nf 5/5] netfilter: ipset: switch to rcu work

[PATCH nf v4 1/1] netfilter: validate L4 headers after userspace packet writes
 2026-08-03  1:11 UTC 

[PATCH nf v4 0/3] ipvs: fix destination overload state updates
 2026-08-02 11:30 UTC  (5+ messages)
` [PATCH nf v4 1/3] ipvs: add totalconns for dest
` [PATCH nf v4 2/3] ipvs: properly update the overload flag on dest edit
` [PATCH nf v4 3/3] ipvs: separate destination availability state

[PATCH] ipvs: clear IPv4 options after rebasing tunnel ICMP errors
 2026-08-02  8:44 UTC  (2+ messages)

[syzbot] Monthly netfilter report (Aug 2026)
 2026-08-02  0:00 UTC 

[PATCH bpf v3] bpf: Fix netns reference imbalance in conntrack kfuncs
 2026-08-01 19:00 UTC  (4+ messages)

[PATCH nf v4 0/1] netfilter: nf_conntrack: defer invalid log until after unlock
 2026-08-01 14:27 UTC  (2+ messages)
` [PATCH nf v4 1/1] "

[PATCH nf 0/1] netfilter: ipset: serialize kernel-side put-byindex with swap
 2026-08-01 13:55 UTC  (3+ messages)
` [PATCH nf 1/1] "

[PATCH nf v3 1/1] netfilter: validate L4 headers after userspace packet writes
 2026-08-01 12:58 UTC  (2+ messages)

[PATCH nf v3 0/1] netfilter: nf_conntrack: defer invalid log until after unlock
 2026-08-01 11:23 UTC  (3+ messages)
` [PATCH nf v3 1/1] "

[PATCH nft v3] datatype: accept a numeric cgroupsv2 id on input
 2026-08-01  7:27 UTC 

[stable request] Backport b2870fc21601 to 6.1.y, 6.6.y, 6.12.y, 6.18.y
 2026-08-01  1:40 UTC  (2+ messages)

[PATCH nf 0/1] netfilter: bridge: release template ct on non-IP path
 2026-07-31 23:41 UTC  (5+ messages)
` [PATCH nf 1/1] "

[PATCH] netfilter: nf_conntrack: prevent helper extension relocation
 2026-07-31 15:37 UTC  (2+ messages)

[PATCH nf] netfilter: conntrack: sctp: verify vtag before state changes
 2026-07-31 14:58 UTC  (5+ messages)

[PATCH nf-next] netfilter: conntrack: sctp: validate vtag before state changes
 2026-07-31 14:53 UTC 

[PATCH nft v2] datatype: accept a numeric cgroupsv2 id on input
 2026-07-31 12:41 UTC  (3+ messages)

[PATCH iptables] nft: fix out-of-bounds read listing an old-revision match
 2026-07-31 11:37 UTC  (2+ messages)

[PATCH iptables] nft: bridge: fix among buffer overflow when set has no size
 2026-07-31 11:33 UTC  (2+ messages)

[PATCH nf v3] netfilter: ip6tables: set hotdrop for malformed extension header matches
 2026-07-31 11:11 UTC 

[PATCH nf v2 0/2] netfilter: fix TCP conntrack invalid-log deadlock
 2026-07-31 10:26 UTC  (7+ messages)
` [PATCH nf v2 1/2] netfilter: nf_conntrack_tcp: defer timeout-lowering invalid log until after unlock
` [PATCH nf v2 2/2] netfilter: nf_conntrack_tcp: defer tcp_in_window invalid logging "

[PATCH nf-next] netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct()
 2026-07-31  9:53 UTC 

Backport request: "netfilter: nf_conntrack_expect: restore helper propagation via expectation"
 2026-07-30 19:38 UTC  (6+ messages)
` [PATCH 6.18.y] netfilter: nf_conntrack_expect: restore helper propagation via expectation
` [PATCH 6.1.y] "

[PATCH nf v3 0/2] ipvs: csum validations, part 2
 2026-07-30 18:35 UTC  (3+ messages)
` [PATCH nf v3 1/2] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
` [PATCH nf v3 2/2] ipvs: return the csum validation for forward hook

[PATCH bpf] bpf: Fix netns reference imbalance in conntrack kfuncs
 2026-07-30 18:08 UTC  (7+ messages)
` [PATCH bpf v2] "

[PATCH nf,v2] netfilter: nft_ct: move custom expectation support to helper
 2026-07-30 15:03 UTC 

[PATCH nf v3 1/1] ipvs: stop estimator after disabled calc phase
 2026-07-30 14:44 UTC  (2+ messages)

[PATCH nf] netfilter: nft_ct: move custom expectation support to helper
 2026-07-30 13:49 UTC 

[PATCH nf-next,v2] netfilter: nf_tables: call skb_valid_dst() before skb_dst()
 2026-07-30 13:00 UTC  (2+ messages)

[PATCH nf v2 1/1] netfilter: validate L4 headers after userspace packet writes
 2026-07-30 11:34 UTC  (4+ messages)

[PATCH nf,v2] netfilter: nft_ct: postpone expectation creation to confirmed conntrack
 2026-07-30 11:26 UTC 

[PATCH nf] netfilter: nft_ct: postpone expectation creation to confirmed conntrack
 2026-07-30  9:48 UTC 

[conntrack-tools PATCH v2] conntrack.8: Document --stats counters
 2026-07-30  9:18 UTC 

[PATCH] netfilter: ebt_nflog: pin the NFLOG backend
 2026-07-29 17:31 UTC 

[PATCH nf-next] netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
 2026-07-29 15:51 UTC  (4+ messages)
  `  "
` [PATCH v2 "

[PATCH nf 0/1] netfilter: fix TCP conntrack invalid-log deadlock
 2026-07-29 15:28 UTC  (4+ messages)
` [PATCH nf 1/1] netfilter: nf_conntrack_tcp: defer invalid logging until after unlock

[PATCH ipset 0/5] ipset test updates
 2026-07-29 15:05 UTC 

[PATCH nf 0/1] netfilter: h323: fix helper NAT mangling
 2026-07-29 14:45 UTC  (5+ messages)

[nft PATCH 1/2] gitignore: Only ignore top level *.m4
 2026-07-29 14:21 UTC  (2+ messages)

[PATCH nft] datatype: accept a numeric cgroupsv2 id on input
 2026-07-29 14:19 UTC  (11+ messages)

[PATCH nf,v2 1/2] netfilter: ctnetlink: reject expectation deletions on unconfirmed conntrack
 2026-07-29 12:38 UTC  (3+ messages)
` [PATCH nf,v2 2/2] netfilter: nf_conntrack: move expectation hlist_head on ct extension realloc

[PATCH nf-next,v5 1/6] netfilter: flowtable: consolidate net_device field in nft_forward_info struct
 2026-07-29 11:49 UTC  (6+ messages)
` [PATCH nf-next,v5 2/6] netfilter: flowtable: consolidate flowtable device check
` [PATCH nf-next,v5 3/6] net: dsa: stop at the user device in .fill_forward_path
` [PATCH nf-next,v5 4/6] net: do not advance stack index from dev_fwd_path()
` [PATCH nf-next,v5 5/6] net: pass dst via net_device_path in dev_fill_forward_path()
` [PATCH nf-next,v5 6/6] netfilter: flowtable: release tunnel route on error when building forward path

[PATCH nf-next] netfilter: nf_tables: call skb_valid_dst() before skb_dst()
 2026-07-29  9:45 UTC  (3+ messages)

[PATCH nf 0/1] netfilter: ebtables: avoid unbounded counter allocations
 2026-07-29  4:44 UTC  (3+ messages)

[PATCH nf] netfilter: nf_conntrack: move expectation hlist_head on ct extension realloc
 2026-07-29  0:39 UTC  (2+ messages)

[PATCH nf v2 0/2] ipvs: csum validations, part 2
 2026-07-28 21:39 UTC  (4+ messages)
` [PATCH nf v2 1/2] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
` [PATCH nf v2 2/2] ipvs: return the csum validation for forward hook

[nft PATCH v2] parser_bison: Fix for bison < 3.6
 2026-07-28 15:10 UTC  (4+ messages)

[PATCH net-next v3] net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup
 2026-07-28 14:10 UTC  (2+ messages)

[PATCH nf v2 1/1] ipvs: stop estimator after disabled calc phase
 2026-07-28 13:04 UTC  (2+ messages)

[PATCH nf-next,v4 1/5] netfilter: flowtable: consolidate net_device field in nft_forward_info struct
 2026-07-28 12:26 UTC  (5+ messages)
` [PATCH nf-next,v4 2/5] netfilter: flowtable: consolidate flowtable device check
` [PATCH nf-next,v4 3/5] net: do not advance stack index from dev_fwd_path()
` [PATCH nf-next,v4 4/5] net: pass dst via net_device_path in dev_fill_forward_path()
` [PATCH nf-next,v4 5/5] netfilter: flowtable: release tunnel route on error when building forward path

[PATCH nf-next,v3 1/5] netfilter: flowtable: consolidate net_device field in nft_forward_info struct
 2026-07-28 11:09 UTC  (5+ messages)
` [PATCH nf-next,v3 2/5] netfilter: flowtable: consolidate flowtable device check
` [PATCH nf-next,v3 3/5] net: do not advance stack index from dev_fwd_path()
` [PATCH nf-next,v3 4/5] net: pass dst via net_device_path in dev_fill_forward_path()
` [PATCH nf-next,v3 5/5] netfilter: flowtable: release tunnel route on error when building forward path


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox