Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-07-31 15:34:26 to 2026-08-11 11:27:54 UTC [more...]

[nf_tables] pipapo: inserting an interval that strictly contains an existing one is accepted; rbtree rejects the same insert
 2026-08-11 11:27 UTC  (5+ messages)

[nf_tables] netdev chain: DELCHAIN with an exact device name matches a prefix hook and deletes the chain
 2026-08-11 10:29 UTC 

[nf_tables] rbtree interval set: in one batch, re-adding element E0 makes deleting an unrelated interval E1 fail with -ENOENT
 2026-08-11  9:22 UTC 

[PATCH] netfilter: nft_ct: validate timeout object protocol
 2026-08-10 22:21 UTC  (2+ messages)

[PATCH] netfilter: nf_conntrack: validate template helper protocol
 2026-08-10 22:16 UTC 

[PATCH net-next 00/12] Netfilter updates for net
 2026-08-10 19:40 UTC  (13+ messages)
` [PATCH net-next 01/12] netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct()
` [PATCH net-next 02/12] net: pass net_device_path_ctx to dev_fill_forward_path()
` [PATCH net-next 03/12] net: netfilter: add ether_type to net_device_path_ctx and use it
` [PATCH net-next 04/12] netfilter: flowtable: rename tun.l3_proto to tun.inner_proto
` [PATCH net-next 05/12] netfilter: flowtable: rename ctx.tun.proto to ctx.tun.inner_proto
` [PATCH net-next 06/12] netfilter: flowtable: store ethertype in flowtable context
` [PATCH net-next 07/12] netfilter: flowtable: move ipv4 and ipv6 xmit path to function
` [PATCH net-next 08/12] netfilter: flowtable: detach layer 2 encapsulation parser from lookup
` [PATCH net-next 09/12] netfilter: nft_ct: move custom expectation support to helper
` [PATCH net-next 10/12] netfilter: conntrack: always lower timeout for non-closing RST packets
` [PATCH net-next 11/12] netfilter: nf_conntrack_expect: bail out on insert dead expectations
` [PATCH net-next 12/12] selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo

[PATCH net 00/13] Netfilter/IPVS fixes for net
 2026-08-10 19:06 UTC  (14+ messages)
` [PATCH net 01/13] netfilter: ipset: fix refcount race between list:set GC and swap
` [PATCH net 02/13] netfilter: bridge: release template ct on non-IP path
` [PATCH net 03/13] ipvs: add totalconns for dest
` [PATCH net 04/13] ipvs: properly update the overload flag on dest edit
` [PATCH net 05/13] ipvs: separate destination availability state
` [PATCH net 06/13] netfilter: nf_conntrack: defer invalid log until after unlock
` [PATCH net 07/13] netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
` [PATCH net 08/13] ipvs: clear IPv4 options after rebasing tunnel ICMP errors
` [PATCH net 09/13] ipvs: revalidate ihl to prevent out-of-bounds access
` [PATCH net 10/13] netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
` [PATCH net 11/13] netfilter: flowtable: publish GC-visible tuple last
` [PATCH net 12/13] netfilter: ipset: fix list type element drift bug
` [PATCH net 13/13] netfilter: ipset: let destroy callbacks adjust ext mem size

[PATCH nf v2] netfilter: nf_reject: initialize IPCB at inet ingress
 2026-08-10 16:07 UTC 

[PATCH nf] netfilter: ipset: remove need to allocate memory on delete operations
 2026-08-10 15:10 UTC  (4+ messages)

[PATCH nf] netfilter: ipset: fix list type element drift bug
 2026-08-10 13:04 UTC  (6+ messages)

[PATCH v4 0/3] net: sysctl: Const Qualify sysctl ctl_table arrays
 2026-08-10 13:01 UTC  (4+ messages)
` [PATCH v4 1/3] net: enforce net sysctl registration
` [PATCH v4 2/3] net: Const qualify ctl_tables that kmemdup unconditionally
` [PATCH v4 3/3] net: Const qualify network templated ctl_tables Arrays

[PATCH nf] netfilter: nf_tables: don't queue packet path object notifications
 2026-08-10 11:35 UTC 

[PATCH nf-next] netfilter: nf_conntrack_expect: bail out on insert dead expectations
 2026-08-10 10:34 UTC 

[PATCH nf,v2 1/2] netfilter: nf_tables: move set_update_list to nftables per-netns
 2026-08-10  9:43 UTC  (8+ messages)
` [PATCH nf,v2 2/2] netfilter: nf_tables: call set ops .commit when building new ruleset

[PATCH nf-next] netfilter: conntrack: always lower timeout for non-closing RST packets
 2026-08-10  8:37 UTC 

[PATCH nf-next,v4] netfilter: nft_ct: move custom expectation support to helper
 2026-08-10  7:09 UTC 

[PATCH net v2] selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo
 2026-08-10  3:01 UTC  (5+ messages)

[PATCH nf 0/7] netfilter: switch ipset to rhashtable
 2026-08-09 14:14 UTC  (11+ messages)
` [PATCH nf 1/7] netfilter: ipset: remove need to allocate memory on delete operations
` [PATCH nf 2/7] netfilter: ipset: let destroy callbacks adjust ext mem size
` [PATCH nf 3/7] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf 4/7] netfilter: ipset: add rhltable "
` [PATCH nf 5/7] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf 6/7] netfilter: ipset: re-add forceadd support for rhashtable
` [PATCH nf 7/7] netfilter: ipset: also report mem size for cidr storage to userspace
` [syzbot ci] Re: netfilter: switch ipset to rhashtable

[PATCH nf v4] netfilter: ipset: remove need to allocate memory on delete operations operations
 2026-08-09 13:36 UTC  (3+ messages)

[PATCH nf] netfilter: ipset: let destroy callbacks adjust ext mem size
 2026-08-09 12:59 UTC  (3+ messages)

[PATCH nf] netfilter: ipset: let destroy callbacks adjust ext mem size
 2026-08-09 11:20 UTC  (2+ messages)

[PATCH nf 0/5] netfilter: ipset fixes and rhastable prep work
 2026-08-09 10:55 UTC  (5+ messages)

[PATCH] netfilter: flowtable: publish GC-visible tuple last
 2026-08-08 12:40 UTC 

[PATCH nft] tests: shell: use an unassigned protocol number in exclusive_start_cond
 2026-08-08  1:33 UTC 

[PATCH nft] evaluate: reject negative values for unsigned datatypes
 2026-08-08  1:33 UTC 

[PATCH nft] datatype: accept a numeric cgroupsv2 id on input
 2026-08-08  1:27 UTC  (6+ messages)

[PATCH nf-next,v3 1/2] netfilter: nf_conntrack_helper: remove synchronize_rcu() on helper removal
 2026-08-07 12:13 UTC  (2+ messages)
` [PATCH nf-next,v3 2/2] netfilter: nft_ct: move custom expectation support to helper

[PATCH nf-next] net: pass net_device_path_ctx to dev_fill_forward_path()
 2026-08-07 10:36 UTC  (2+ messages)

[PATCH nf-next 0/7] flowtable preparation for IPv4 over IPv6 and SIT
 2026-08-07  9:15 UTC  (14+ messages)
` [PATCH nf-next 1/7] net: pass net_device_path_ctx to dev_fill_forward_path()
` [PATCH nf-next 2/7] net: netfilter: add ether_type to net_device_path_ctx and use it
` [PATCH nf-next 3/7] netfilter: flowtable: rename tun.l3_proto to tun.inner_proto
` [PATCH nf-next 4/7] netfilter: flowtable: rename ctx.tun.proto to ctx.tun.inner_proto
` [PATCH nf-next 5/7] netfilter: flowtable: store ethertype in flowtable context
` [PATCH nf-next 6/7] netfilter: flowtable: move ipv4 and ipv6 xmit path to function
` [PATCH nf-next 7/7] netfilter: flowtable: detach layer 2 encapsulation parser from lookup

[PATCH nf v3] netfilter: ip6tables: set hotdrop for malformed extension header matches
 2026-08-07  8:57 UTC  (2+ messages)

[PATCH nf-next v4] netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers
 2026-08-07  8:45 UTC 

[PATCH nf v3] netfilter: ipset: remove need to allocate memory on delete operations
 2026-08-06 20:22 UTC 

[PATCH 00/36] treewide: remove conditional returns with no effect
 2026-08-06 19:06 UTC  (2+ messages)
` (subset) "

[PATCH nft] netlink_linearize: size nat register allocation by address expression
 2026-08-06 18:50 UTC 

[PATCH v2 nf] netfilter: ipset: remove need to allocate memory on delete operations
 2026-08-06 17:41 UTC 

[PATCH net] netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
 2026-08-06 16:11 UTC 

[PATCH nf] ipvs: revalidate ihl to prevent out-of-bounds access
 2026-08-06 10:52 UTC 

[PATCH nf-next,v2] netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct()
 2026-08-06 10:44 UTC  (2+ messages)

[PATCH] selftests: netfilter: Remove unused variables in conntrack_dump_flush
 2026-08-06  9:03 UTC  (3+ messages)

[PATCH nf-next,v5] netfilter: flowtable: initial bridge support
 2026-08-06  1:27 UTC  (2+ messages)

[PATCH net] netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
 2026-08-06  0:20 UTC  (3+ messages)

[PATCH net-next 1/9] netfilter: conncount: normalize tuple and zone on successful ct lookup
 2026-08-05 23:50 UTC  (2+ messages)

[PATCH net 01/10] ipvs: stop estimator after disabled calc phase
 2026-08-05 23:50 UTC  (2+ messages)

[PATCH net 00/10] Netfilter/IPVS fixes for net
 2026-08-05 23:21 UTC  (4+ messages)

[PATCH nft v3] datatype: accept a numeric cgroupsv2 id on input
 2026-08-05 21:10 UTC  (2+ messages)

[PATCH net 03/10] netfilter: ipset: rework cidr bookkeeping
 2026-08-05 19:17 UTC  (5+ messages)

[PATCH net 02/10] netfilter: ebt_nflog: pin the NFLOG backend
 2026-08-05 19:12 UTC  (6+ messages)

[PATCH net-next 0/9] Netfilter updates for net-next
 2026-08-05 17:40 UTC  (5+ messages)
` [PATCH net-next 9/9] netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets

[PATCH net 10/10] netfilter: nft_ct: move custom expectation support to helper
 2026-08-05 17:38 UTC  (3+ messages)

[PATCH net 08/10] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
 2026-08-05 17:20 UTC  (4+ messages)

nft_set_pipapo: UAF and double free from a stranded GC batch in the 5.15.y / 6.1.y / 6.6.y backports of 9df95785d3d8
 2026-08-05 16:41 UTC  (2+ messages)

[PATCH nft,v2 1/3] mergesort: use lhs expression when sorting concatenation
 2026-08-05 16:39 UTC  (3+ messages)
` [PATCH nft 2/3] segtree: basic support for binary operations in concatenated set ranges
` [PATCH nft 3/3] tests: shell: add flush set after expiration

[syzbot] [netfilter?] INFO: task hung in nfnetlink_rcv_msg (5)
 2026-08-05 14:42 UTC  (2+ messages)

[PATCH nf-next 1/2] netfilter: nf_tables: make move set_update_list to nftables per-netns
 2026-08-05 12:59 UTC  (2+ messages)
` [PATCH nf-next 2/2] netfilter: nf_tables: call set ops .commit when building new ruleset

[PATCH net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path
 2026-08-05  9:02 UTC  (3+ messages)

[PATCH net-next 7/9] netfilter: flowtable: release tunnel route on error when building forward path
 2026-08-05  8:06 UTC  (3+ messages)

[PATCH] selftests: netfilter: add functional test for nft ct timeout policies
 2026-08-05  6:05 UTC 

[PATCH net 06/10] netfilter: ipset: add and use mtype_del_cidr_all helper
 2026-08-05  0:15 UTC  (2+ messages)

[syzbot] [netfilter?] WARNING in nf_flow_offload_ip_hook
 2026-08-04 11:52 UTC  (2+ messages)

[PATCH nf] netfilter: nf_reject_ipv4: initialize IPCB at inet ingress
 2026-08-04 10:21 UTC  (2+ messages)

[PATCH nf v2] ipvs: clear IPv4 options after rebasing tunnel ICMP errors
 2026-08-04  7:54 UTC  (2+ messages)

[PATCH net v2] net: flow_offload: serialize driver callback lists
 2026-08-03 23:04 UTC  (2+ messages)

[PATCH nf] netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
 2026-08-03 18:32 UTC  (2+ messages)

[PATCH nft] tests: shell: add packetpath test for nft ct expectation support
 2026-08-03 16:43 UTC 

[PATCH nft] test: shell: add regression test for 'ip fwd to' stack recursion
 2026-08-03 16:42 UTC 

[PATCH nf v4 1/1] netfilter: validate L4 headers after userspace packet writes
 2026-08-03  1:11 UTC 

[PATCH nf v4 0/3] ipvs: fix destination overload state updates
 2026-08-02 11:30 UTC  (2+ messages)

[PATCH] ipvs: clear IPv4 options after rebasing tunnel ICMP errors
 2026-08-02  8:44 UTC  (2+ messages)

[syzbot] Monthly netfilter report (Aug 2026)
 2026-08-02  0:00 UTC 

[PATCH bpf v3] bpf: Fix netns reference imbalance in conntrack kfuncs
 2026-08-01 19:00 UTC  (4+ messages)

[PATCH nf v4 0/1] netfilter: nf_conntrack: defer invalid log until after unlock
 2026-08-01 14:27 UTC  (2+ messages)
` [PATCH nf v4 1/1] "

[PATCH nf 0/1] netfilter: ipset: serialize kernel-side put-byindex with swap
 2026-08-01 13:55 UTC  (3+ messages)
` [PATCH nf 1/1] "

[PATCH nf v3 1/1] netfilter: validate L4 headers after userspace packet writes
 2026-08-01 12:58 UTC  (2+ messages)

[PATCH nf v3 0/1] netfilter: nf_conntrack: defer invalid log until after unlock
 2026-08-01 11:23 UTC  (3+ messages)
` [PATCH nf v3 1/1] "

[stable request] Backport b2870fc21601 to 6.1.y, 6.6.y, 6.12.y, 6.18.y
 2026-08-01  1:40 UTC  (2+ messages)

[PATCH nf 0/1] netfilter: bridge: release template ct on non-IP path
 2026-07-31 23:41 UTC  (5+ messages)
` [PATCH nf 1/1] "

[PATCH] netfilter: nf_conntrack: prevent helper extension relocation
 2026-07-31 15:37 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox