Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-09-02 22:14:39 to 2026-09-08 20:32:44 UTC [more...]

[PATCH net,v2 0/9] Netfilter/IPVS fixes for net
 2026-09-08 20:32 UTC  (16+ messages)
` [PATCH net 1/9] ipvs: reject invalid states in connection template sync records
` [PATCH net 2/9] ipvs: fix reversed sequence option serialization
` [PATCH net 3/9] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
` [PATCH net 4/9] netfilter: cttimeout: prevent UAF during module unload
` [PATCH net 5/9] netfilter: nf_log: unregister loggers before per-net teardown
` [PATCH net 6/9] netfilter: nfnetlink_log: cope with concurrent instance destruction
` [PATCH net 7/9] netfilter: arp_tables: remove the 32bit compat interface
` [PATCH net 8/9] netfilter: ip6_tables: set F_PROTO when proto value is nonzero
` [PATCH net 9/9] netfilter: report NLM_F_DUMP_FILTERED when all is filtered out

[PATCH net] ipvs: shut down destination trash timer on netns cleanup
 2026-09-08 15:48 UTC  (3+ messages)

[PATCH net 0/2] selftests: net: use KHDR_INCLUDES in CFLAGS
 2026-09-08 15:28 UTC  (9+ messages)
` [PATCH net 1/2] selftests: netfilter: "
` [PATCH net 2/2] selftests: forwarding: "

[nf PATCH v3] netfilter: nfnetlink: Fix for interrupted hook dumps
 2026-09-08 13:57 UTC  (5+ messages)

[PATCH nf-next v4 00/13] ipset: replace internal hash table with rhashtable
 2026-09-08 13:25 UTC  (21+ messages)
` [PATCH nf-next v4 01/13] rhashtable: add rhashtable_flush_and_free helper
` [PATCH nf-next v4 02/13] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf-next v4 03/13] netfilter: ipset: add rhltable "
` [PATCH nf-next v4 04/13] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf-next v4 05/13] netfilter: ipset: re-add forceadd support
` [PATCH nf-next v4 06/13] netfilter: ipset: also report mem size for cidr storage to userspace
` [PATCH nf-next v4 07/13] netfilter: ipset: remove obsolete data_next stubs
` [PATCH nf-next v4 08/13] netfilter: ipset: remove last region lock usage
` [PATCH nf-next v4 09/13] netfilter: ipset: remove multi-flag
` [PATCH nf-next v4 10/13] netfilter: ipset: remove resize completely
` [PATCH nf-next v4 11/13] netfilter: ipset: remove trivial kvfree wrapper
` [PATCH nf-next v4 12/13] netfilter: ipset: use plain rcu_read_lock
` [PATCH nf-next v4 13/13] netfilter: ipset: improve lockdep coverage

[PATCH nf] netfilter: nf_tables: skip expired catchall elements in dedup walk
 2026-09-08 12:32 UTC 

[nf-next PATCH 0/4] netfilter: Conntrack counter review
 2026-09-08 10:02 UTC  (5+ messages)
` [nf-next PATCH 1/4] netfilter: conntrack: Untangle insert_failed counter from others
` [nf-next PATCH 2/4] netfilter: conntrack: Untangle drop and invalid counters
` [nf-next PATCH 3/4] netfilter: conntrack: nf_ct_seq_adjust to return error cause
` [nf-next PATCH 4/4] netfilter: conntrack: Improve invalid packet stats

[PATCH nft v2] extend ct_label_set with a negative ct label match and switch to inline counter checks (.nodump)
 2026-09-08  9:43 UTC 

[PATCH] netfilter: nf_conntrack_h323: fix OOB read in decode_enum()
 2026-09-08  3:18 UTC  (2+ messages)

[PATCH] netfilter: conntrack_irc: fix port value truncation in parse_dcc()
 2026-09-08  2:03 UTC  (3+ messages)

[PATCH] netfilter: conntrack_amanda: fix port value truncation
 2026-09-08  1:37 UTC  (5+ messages)

[PATCH nf] netfilter: xt_IDLETIMER: allocate timer with kzalloc()
 2026-09-07 19:17 UTC 

[PATCH nf] netfilter: flowtable: hold reference on ct until flow is released
 2026-09-07 19:11 UTC 

[PATCH nf-next,v3 1/8] netfilter: x_tables: use GFP_KERNEL_ACCOUNT in match/target
 2026-09-07 18:55 UTC  (8+ messages)
` [PATCH nf-next,v3 2/8] netfilter: nfnetlink: use GFP_KERNEL_ACCOUNT
` [PATCH nf-next,v3 3/8] netfilter: nf_tables: "
` [PATCH nf-next,v3 4/8] netfilter: synproxy: "
` [PATCH nf-next,v3 5/8] netfilter: sysctl: "
` [PATCH nf-next,v3 6/8] netfilter: nat: "
` [PATCH nf-next,v3 7/8] netfilter: conncount: "
` [PATCH nf-next,v3 8/8] netfilter: ipset: "

[PATCH nf] ipvs: revalidate ihl before icmp_send
 2026-09-07 18:37 UTC 

[PATCH nf] ipvs: fix more races around the overload flag
 2026-09-07 18:34 UTC 

[PATCH net-next v2 0/3] netfilter: conntrack: add shared port parser and use it in IRC and Amanda helpers
 2026-09-07 16:39 UTC  (4+ messages)
` [PATCH net-next v3 0/4] netfilter: conntrack: shared port parser for helpers
  ` [PATCH net-next v3 3/4] netfilter: nf_conntrack_amanda: use nf_ct_helper_parse_port()

[PATCH nf 0/1] netfilter: xt_IDLETIMER: restrict to init_net
 2026-09-07 12:03 UTC  (2+ messages)
` [PATCH nf 1/1] "

[PATCH nf-next] netfilter: conntrack: make filtering by zone discoverable
 2026-09-07  9:57 UTC  (4+ messages)

[PATCH nf-next v2 0/3] netfilter: fix typos in comments
 2026-09-07  9:52 UTC  (4+ messages)
` [PATCH nf-next v2 1/3] netfilter: arp_tables: fix typo "alignement" in comment
` [PATCH nf-next v2 2/3] netfilter: ipset: fix typo "artifical" "
` [PATCH nf-next v2 3/3] selftests: netfilter: fix typo "adress" "

[PATCH nf-next v2 0/6] net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload
 2026-09-07  7:33 UTC  (7+ messages)
` [PATCH nf-next v2 1/6] net: netfilter: nf_flow_table: recognize IPv4/IPv6 in tunnel proto matching
` [PATCH nf-next v2 2/6] net: netfilter: nf_flow_table: set inner protocol when popping tunnel header
` [PATCH nf-next v2 3/6] net: netfilter: nf_flow_table: populate tunnel tuple regardless of inner protocol
` [PATCH nf-next v2 4/6] net: netfilter: add encap_proto to flow_offload_tunnel
` [PATCH nf-next v2 5/6] net: netfilter: nf_flow_table: refactor MTU check for tunnel offload
` [PATCH nf-next v2 6/6] net: netfilter: nf_flow_table: unify tunnel push for IPv4 and IPv6

[PATCH net v2] net/ipv6: don't route packets with unknown source address
 2026-09-07  7:24 UTC  (5+ messages)

[PATCH 0/3] net: fix typos in comments
 2026-09-07  6:42 UTC  (4+ messages)
` [PATCH 1/3] net: ipv4: fix typo "alignement" in comment
` [PATCH 2/3] net: netfilter: fix typo "artifical" "
` [PATCH 3/3] selftests: net: fix typo "adress" "

[PATCH 1/4] lib/ts_bm: advance state->offset past the reported match
 2026-09-06 22:19 UTC  (3+ messages)

[PATCH nf] netfilter: flowtable: advertise the vlan match in used_keys
 2026-09-06 14:24 UTC  (2+ messages)

[PATCH nf] netfilter: flowtable: advertise the vlan match in used_keys
 2026-09-06 14:19 UTC 

[PATCH 5.10.y] netfilter: nf_tables: make nft_object rhltable per table
 2026-09-06 13:32 UTC  (2+ messages)

[PATCH 6.1.y] netfilter: nf_tables: make nft_object rhltable per table
 2026-09-06 13:32 UTC  (2+ messages)

[PATCH nf v2 0/1] netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
 2026-09-06 13:29 UTC  (2+ messages)
` [PATCH nf v2 1/1] "

[PATCH nf v2] netfilter: ip6t_rpfilter: reject routes without inet6_dev
 2026-09-06  8:44 UTC 

[PATCH nf v2] netfilter: ip6t_rpfilter: reject routes without inet6_dev
 2026-09-06  7:54 UTC 

[PATCH nf] netfilter: ip6t_rpfilter: handle routes without inet6_dev
 2026-09-06  7:46 UTC  (3+ messages)

[BUG] net/ipv6: NULL pointer dereference in ip6_rt_copy_init()
 2026-09-06  3:37 UTC 

[PATCH nf v3] netfilter: nft_payload: restrict checksum offsets to known values
 2026-09-05  5:01 UTC 

[PATCH nf 0/1] netfilter: xt_IDLETIMER: fix out-of-bounds heap read in checkentry
 2026-09-05  4:10 UTC  (4+ messages)
` [PATCH nf 1/1] netfilter: xt_IDLETIMER: validate label before debug logging "

[PATCH bpf v3 0/2] bpf: Fix socket leaks around connect(AF_UNSPEC)+listen()
 2026-09-05  1:20 UTC  (6+ messages)

[PATCH nf] netfilter: ipset: do not update comments from kernel-side adds
 2026-09-04 18:03 UTC 

[PATCH RFC v3 00/13] sysctl: add module aliases
 2026-09-04 17:45 UTC  (5+ messages)

[PATCH nf 0/1] netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
 2026-09-04 17:38 UTC  (3+ messages)
` [PATCH nf 1/1] "

[PATCH] net: netfilter: fix typo "specifiy" in comment
 2026-09-04 11:45 UTC 

[PATCH net 00/12] Netfilter/IPVS fixes for net
 2026-09-04 10:59 UTC  (23+ messages)
` [PATCH net 01/12] ipvs: reject invalid states in connection template sync records
` [PATCH net 02/12] ipvs: fix reversed sequence option serialization
` [PATCH net 03/12] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
` [PATCH net 04/12] netfilter: cttimeout: prevent UAF during module unload
` [PATCH net 05/12] netfilter: nf_log: unregister loggers before per-net teardown
` [PATCH net 06/12] ipvs: bound LBLCR and LBLC cache growth
` [PATCH net 07/12] netfilter: nft_payload: restrict checksum offsets to known values
` [PATCH net 08/12] netfilter: nfnetlink_log: cope with concurrent instance destruction
` [PATCH net 09/12] netfilter: nfnetlink_queue: hold nfnl mutex in event notifier
` [PATCH net 10/12] netfilter: arp_tables: remove the 32bit compat interface
` [PATCH net 11/12] netfilter: ip6_tables: set F_PROTO when proto value is nonzero
` [PATCH net 12/12] netfilter: report NLM_F_DUMP_FILTERED when all is filtered out

[PATCH nf] netfilter: nft_payload: restrict checksum offsets to known values
 2026-09-04  9:57 UTC 

[nf PATCH v2] netfilter: nfnetlink: Fix for interrupted hook dumps
 2026-09-04  8:23 UTC  (3+ messages)

[ANNOUNCE] A Syzbot-style Platform for Verifying and Fixing LLM-reported Bugs
 2026-09-04  6:51 UTC  (6+ messages)

[PATCH 5.10] netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
 2026-09-04  2:52 UTC  (2+ messages)

[conntrack-tools PATCH v2] conntrack.8: Document --stats counters
 2026-09-03 14:35 UTC  (4+ messages)

[PATCH nf v2 0/1] netfilter: nf_dup: disable duplication in user namespaces
 2026-09-03 11:55 UTC  (2+ messages)
` [PATCH nf v2 1/1] "

[PATCH nf-next,v2 1/8] netfilter: x_tables: use GFP_KERNEL_ACCOUNT in match/target
 2026-09-03 11:34 UTC  (8+ messages)
` [PATCH nf-next,v2 2/8] netfilter: nfnetlink: use GFP_KERNEL_ACCOUNT
` [PATCH nf-next,v2 3/8] netfilter: nf_tables: "
` [PATCH nf-next,v2 4/8] netfilter: synproxy: "
` [PATCH nf-next,v2 5/8] netfilter: sysctl: "
` [PATCH nf-next,v2 6/8] netfilter: nat: "
` [PATCH nf-next,v2 7/8] netfilter: conncount: "
` [PATCH nf-next,v2 8/8] netfilter: ipset: "

[PATCH v2 0/7] Change skb secmarks to x-array indexes
 2026-09-03  9:40 UTC  (15+ messages)
` [PATCH v2 1/7] net, smack: Create a function to set secmarks
` [PATCH v2 2/7] LSM: Implement x array functions for secmarks
` [PATCH v2 3/7] LSM: Two hooks for manipulating struct lsm_prop
` [PATCH v2 4/7] SELinux: hooks for secctx_to_lsmprop and update_lsmprop
` [PATCH v2 5/7] Smack: "
` [PATCH v2 6/7] Apparmor: "
` [PATCH v2 7/7] net, lsm: Change skb secmarks to x-array indexes

[nft PATCH] tests: shell: Test odd netdev hook updates
 2026-09-03  8:10 UTC  (5+ messages)

[PATCH nf 0/1] netfilter: nf_dup: prevent asynchronous duplicate recursion
 2026-09-03  8:09 UTC  (6+ messages)
` [PATCH nf 1/1] "

[PATCH nf-next v2 1/2] netfilter: flowtable: carry a priority into the offload
 2026-09-03  7:34 UTC  (2+ messages)

[PATCH 6.1.y 6.6.y] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting
 2026-09-03  0:01 UTC  (4+ messages)

[PATCH nf,v3] netfilter: nf_nat: unregister and release hooks on error
 2026-09-02 23:28 UTC 

[PATCH nf,v2] netfilter: nf_nat: unregister and release hooks on error
 2026-09-02 23:06 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox