Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-10-05 11:53:51 to 2026-10-14 11:23:49 UTC [more...]

[PATCH net-next 00/15] Netfilter/IPVS updates for net-next
 2026-10-14 11:23 UTC  (19+ messages)
` [PATCH net-next 01/15] netfilter: disable br_netfilter in user namespaces
` [PATCH net-next 02/15] netfilter: flowtable: recognize IPv4/IPv6 in tunnel proto matching
` [PATCH net-next 03/15] netfilter: flowtable: set inner protocol when popping tunnel header
` [PATCH net-next 04/15] netfilter: flowtable: populate tunnel tuple regardless of inner protocol
` [PATCH net-next 05/15] netfilter: flowtable: add encap_proto to flow_offload_tunnel
` [PATCH net-next 06/15] netfilter: flowtable: refactor MTU check for tunnel offload
` [PATCH net-next 07/15] netfilter: flowtable: unify tunnel push for IPv4 and IPv6
` [PATCH net-next 08/15] selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply
` [PATCH net-next 09/15] ipvs: fix buffer overflow when sending sync messages
` [PATCH net-next 10/15] netfilter: conntrack: fix unlikely UaF in gc worker
` [PATCH net-next 11/15] netfilter: nf_tables: switch chain_types array to rcu
` [PATCH net-next 12/15] netfilter: add nf_skb_sk helper and use it
` [PATCH net-next 13/15] netfilter: add nf_sk_to_full_sk "
` [PATCH net-next 14/15] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init
` [PATCH net-next 15/15] netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option mangling

[PATCH nf v7 0/1] netfilter: nf_dup: preserve duplication guard across NFQUEUE
 2026-10-14 11:10 UTC  (7+ messages)
` [PATCH nf v7 1/1] "

[PATCH nf-next v3 0/3] netfilter: flowtable: carry a priority into the offload
 2026-10-14  9:44 UTC  (4+ messages)
` [PATCH nf-next v3 1/3] net/mlx5e: Ignore FLOW_ACTION_PRIORITY on flowtable offload

[PATCH nf 0/5] netfilter: pin file with get_file_rcu() before reading f_cred
 2026-10-14  9:09 UTC  (8+ messages)
` [PATCH nf 1/5] netfilter: xt_owner: "
` [PATCH nf 2/5] netfilter: nft_meta: "
` [PATCH nf 3/5] netfilter: nfnetlink_log: "
` [PATCH nf 4/5] netfilter: nfnetlink_queue: "
` [PATCH nf 5/5] netfilter: nf_log_syslog: "
` [syzbot ci] Re: netfilter: "

[PATCH v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
 2026-10-13  9:00 UTC  (3+ messages)

[PATCH nf-next] netfilter: nft_ct: validate hook and priority for ct zone set
 2026-10-13 23:52 UTC  (2+ messages)

[PATCH nf-next v3 1/2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them
 2026-10-13 23:36 UTC  (3+ messages)

[PATCH nf v2] netfilter: synproxy: check TCP header before verifying checksum
 2026-10-13 22:08 UTC  (2+ messages)

[PATCH net-next 2/4] net: use ip4_parse() in receive validation
 2026-10-13 10:58 UTC 

[PATCH nf] netfilter: ipset: fix double free on kernel-side delete during resize
 2026-10-12 16:33 UTC 

[RFC PATCH net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains
 2026-10-12 16:13 UTC  (6+ messages)

[syzbot] [lvs?] INFO: rcu detected stall in ip_vs_estimation_kthread (2)
 2026-10-12 15:44 UTC 

[PATCH] netfilter: nf_conntrack_h323: fix NULL deref in decode_seqof()
 2026-10-12  9:20 UTC  (3+ messages)

[RFC PATCH net-next] netfilter: bridge: refragment reassembled packets passed up
 2026-10-12  8:52 UTC  (3+ messages)

[PATCH net v2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them
 2026-10-12  7:27 UTC  (4+ messages)

[PATCH nf-next v3 2/2] netfilter: ebtables: ebt_802_3: fix control format test and the ni type offset
 2026-10-12  7:24 UTC 

[PATCH net] netfilter: nf_conntrack_reasm: avoid truncating header offset
 2026-10-12  5:11 UTC  (6+ messages)
` [PATCH net v2] netfilter: nf_conntrack_reasm: avoid truncating header offsets

[SECURITY] netfilter: nft_limit byte-rate bypass via unchecked u64 multiplication
 2026-10-11 22:08 UTC  (8+ messages)

[PATCH net] ipv4: validate checksum_start before completing checksum
 2026-10-11 22:02 UTC  (4+ messages)

[PATCH 6.1.y v2] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting
 2026-10-11 16:48 UTC  (2+ messages)

[PATCH 6.6.y v2] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting
 2026-10-11 16:48 UTC  (2+ messages)

[PATCH] netfilter: nf_conntrack_h323: fix NULL pointer deref in decode_seqof()
 2026-10-10 13:30 UTC  (3+ messages)

[PATCH nf] netfilter: nft_set_rbtree: narrow down range completion to anonymous sets
 2026-10-10  8:46 UTC  (5+ messages)

[PATCH] netfilter: xt_dccp: handle reserved options as single-byte
 2026-10-09 15:29 UTC  (6+ messages)

[PATCH nf] netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum
 2026-10-09 14:41 UTC  (3+ messages)

[PATCH nf-next RFC] netfilter: nft_exthdr: add inner option type search for MPTCP
 2026-10-09 13:05 UTC  (3+ messages)

[PATCH v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
 2026-10-09  3:21 UTC  (2+ messages)

[PATCH nf v3 0/1] netfilter: x_tables: avoid holding mutex over faultable user copies
 2026-10-09  1:09 UTC  (6+ messages)
` [PATCH nf v3 1/1] "

[PATCH nf v6 0/1] netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns
 2026-10-09  0:53 UTC  (4+ messages)
` [PATCH nf v6 1/1] "

[PATCH nf v3] netfilter: disable br_netfilter in user namespaces
 2026-10-09  0:39 UTC  (3+ messages)

[PATCH nf 0/1] netfilter: nf_ip6_checksum: validate checksum offset
 2026-10-09  0:05 UTC  (7+ messages)

[iptables PATCH] extensions: libxt_conntrack: Fail on untranslatable state match
 2026-10-08 18:23 UTC 

[PATCH nf-next v2] netfilter: nf_conntrack_sip: only honour Via: port in original direction
 2026-10-08 15:28 UTC 

[iptables PATCH 1/3] extensions: libxt_conntrack: Fix inverted ctstate translation
 2026-10-08 13:28 UTC  (2+ messages)

[PATCH] netfilter: nft_set_pipapo: skip transaction elements during GC
 2026-10-08 11:18 UTC  (4+ messages)

[PATCH nf v5 0/1] netfilter: x_tables: avoid holding mutex over faultable user copies
 2026-10-08 10:33 UTC  (2+ messages)
` [PATCH nf v5 1/1] "

[PATCH nf-next,v5] netfilter: flowtable: initial bridge support
 2026-10-08 10:32 UTC  (4+ messages)

[PATCH] netfilter: conntrack: wait for RCU readers before freeing the hash
 2026-10-08  7:28 UTC  (2+ messages)

[PATCH v2] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
 2026-09-22  6:14 UTC  (2+ messages)

[PATCH] netfilter: ebtables: ebt_802_3: drop short frames before the match reads LLC
 2026-10-08  2:45 UTC  (2+ messages)

[PATCH nf] netfilter: nft_set_rbtree: reject expired interval ends
 2026-10-07 22:19 UTC  (6+ messages)

[PATCH nf,v3] netfilter: nf_reject: initialize IPCB at inet ingress
 2026-10-07 21:40 UTC 

[PATCH nf] netfilter: nf_conntrack_sip: only honour Via: port in original direction
 2026-10-07 19:58 UTC  (5+ messages)

[PATCH nf-next v3] netfilter: ip6t_NPT: ensure skb is writable before header modification
 2026-10-07 15:48 UTC 

[ebtables PATCH] include: drop bundled copy of linux/types.h
 2026-10-07 13:23 UTC  (2+ messages)

[PATCH nf-next] selftests: netfilter: fix return value in zone subtest
 2026-10-07 12:55 UTC  (3+ messages)

[PATCH nf-next] netfilter: nf_conntrack: limit expectation master chain depth
 2026-10-07 12:48 UTC 

[PATCH net v3] netfilter: conntrack: avoid recursive master destruction
 2026-10-07 11:45 UTC  (6+ messages)

[PATCH nft] tests: shell: add conntrack template attachment test
 2026-10-07 11:40 UTC  (2+ messages)

[PATCH nf-next] netfilter: nft_compat: restrict raw table targets/matches
 2026-10-07 11:29 UTC  (2+ messages)

Netfilter: match "tcp option" with the same type present multiple times
 2026-10-07 10:47 UTC  (11+ messages)

[PATCH nft v2] doc: add MPTCP subtypes documentation to man page
 2026-10-07  8:22 UTC  (3+ messages)

[PATCH v6 nf-next 0/3] ipvs: add per-service secure_tcp
 2026-10-07  3:52 UTC  (5+ messages)
` [PATCH v6 nf-next 1/3] ipvs: add flags for per-service secure TCP state table
` [PATCH v6 nf-next 2/3] ipvs: tcp: enable per-connection secure_tcp in state machine
` [PATCH v6 nf-next 3/3] selftests: netfilter: ipvs: add per-service secure_tcp test

[PATCH net] netfilter: conntrack: avoid recursive master destruction
 2026-10-07  1:33 UTC  (4+ messages)
` [PATCH v2 net] netfilter: conntrack: reject nested ctnetlink master chains

[PATCH nft] doc: add MPTCP subtypes documentation to man page
 2026-10-06 20:40 UTC  (5+ messages)

hardware flows are left behind when a flowtable is deleted (nf_tables unbinds the offload block at commit time)
 2026-10-06 11:28 UTC  (2+ messages)

[nft PATCH v2] Fix for warnings when compiling for 32bit arch
 2026-10-06  9:30 UTC  (3+ messages)

[PATCH nf-next v2 0/2] netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode
 2026-10-06  6:54 UTC  (3+ messages)
` [PATCH nf-next v2 1/2] netfilter: nf_conntrack_h323: do not bypass NAT helpers when tuple source matches reply destination
` [PATCH nf-next v2 2/2] netfilter: nf_conntrack_h323: check extension bitmap before decoding components

[PATCH net 0/2] netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode
 2026-10-06  3:57 UTC  (6+ messages)

[PATCH nf-next v3 3/3] selftests: netfilter: nft_flowtable.sh: check the priority a flow carries
 2026-10-05 21:20 UTC 

[PATCH nf-next v3 2/3] netfilter: flowtable: carry a priority into the offload
 2026-10-05 21:19 UTC 

[PATCH net-next 00/11] Netfilter updates for net-next
 2026-10-05 20:53 UTC  (7+ messages)
` [PATCH net-next 01/11] netfilter: synproxy: fix reset of ct seqadj when reopening a connection

[PATCH nf v6 0/3] ipvs: avoid stack overflow from recursive connection expiration
 2026-10-05 15:25 UTC  (5+ messages)
` [PATCH nf v6 1/3] ipvs: fix problems during connection deletion
` [PATCH nf v6 2/3] ipvs: avoid stack overflow from recursive connection expiration
` [PATCH nf v6 3/3] ipvs: reject FTP control ports as data ports

[PATCH nf] netfilter: nft_synproxy: only handle pure SYN and ACK packets
 2026-10-05 15:21 UTC  (3+ messages)
` [PATCH nf-next v2] "

[PATCH nf-next] netfilter: nf_nat: replace u_int16_t with u16
 2026-10-05 12:09 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox