Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-10-08 15:28:47 to 2026-10-18 05:23:54 UTC [more...]

[PATCH nf v2] netfilter: ipset: don't mask the element in place in mtype_test_cidrs()
 2026-10-18  5:23 UTC 

[PATCH nf] netfilter: ipset: restore element before rescanning cidrs on seqcount retry
 2026-10-18  5:23 UTC  (3+ messages)

[PATCH conntrack-tools] conntrack: apply the receive buffer size to the event socket
 2026-10-18  4:03 UTC 

[PATCH nf-next 0/3] netfilter: flowtable: update upper device stats in the fast path
 2026-10-18  2:53 UTC  (5+ messages)
` [PATCH nf-next 2/3] "

[PATCH nf-next v3 0/3] netfilter: flowtable: carry a priority into the offload
 2026-10-18  2:38 UTC  (10+ messages)
` [PATCH nf-next v3 1/3] net/mlx5e: Ignore FLOW_ACTION_PRIORITY on flowtable offload
` [PATCH nf-next v3 2/3] netfilter: flowtable: carry a priority into the offload

[PATCH nf-next v2 0/4] netfilter: offload a TCP flow whose reply is never seen
 2026-10-18  2:02 UTC  (8+ messages)
` [PATCH nf-next v2 1/4] netfilter: conntrack: pick up a TCP flow whose SYN was never answered

[PATCH net-next 00/15] Netfilter updates for net-next
 2026-10-18  1:20 UTC  (18+ messages)
` [PATCH net-next 01/15] netfilter: disable br_netfilter in user namespaces
` [PATCH net-next 02/15] selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply
` [PATCH net-next 03/15] ipvs: fix buffer overflow when sending sync messages
` [PATCH net-next 04/15] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point
` [PATCH net-next 05/15] selftests: netfilter: nft_queue: check the scope of the hook drop flush
` [PATCH net-next 06/15] netfilter: conntrack: fix unlikely UaF in gc worker
` [PATCH net-next 07/15] netfilter: nf_tables: switch chain_types array to rcu
` [PATCH net-next 08/15] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init
` [PATCH net-next 09/15] netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option mangling
` [PATCH net-next 10/15] selftests: netfilter: fix return value in zone subtest
` [PATCH net-next 11/15] netfilter: nft_compat: restrict raw table targets/matches
` [PATCH net-next 12/15] netfilter: flowtable: set inner protocol when popping tunnel header
` [PATCH net-next 13/15] netfilter: flowtable: populate tunnel tuple regardless of inner protocol
` [PATCH net-next 14/15] netfilter: flowtable: add encap_proto to flow_offload_tunnel
` [PATCH net-next 15/15] netfilter: flowtable: unify tunnel push for IPv4 and IPv6

[PATCH nf-next 1/2] netfilter: nfnetlink_queue: add helper function to retrieve hook entries
 2026-10-18  0:06 UTC  (2+ messages)
` [PATCH nf-next 2/2] netfilter: nfnetlink_queue: restrict NFQA_EXP to userspace helpers

[PATCH nf-next v7 0/2] netfilter: flowtable: tear down bridged flows on layer 2 roaming
 2026-10-18  0:04 UTC  (7+ messages)
` [PATCH nf-next v7 1/2] netfilter: flowtable: tear down direct xmit flows when the fdb entry moves
` [PATCH nf-next v7 2/2] selftests: netfilter: nft_flowtable.sh: roam a host between two bridge ports

[PATCH nf-next v8 0/2] netfilter: flowtable: tear down bridged flows on layer 2 roaming
 2026-10-17 23:58 UTC  (3+ messages)
` [PATCH nf-next v8 1/2] netfilter: flowtable: tear down direct xmit flows when the fdb entry moves
` [PATCH nf-next v8 2/2] selftests: netfilter: nft_flowtable.sh: roam a host between two bridge ports

[syzbot] [netfilter?] BUG: workqueue lockup in batadv_tt_purge
 2026-10-17 10:43 UTC  (2+ messages)
` [syzbot] [arm?] "

[PATCH nf v2 0/2] netfilter: flowtable: correct and advertise the vlan match
 2026-10-17 10:37 UTC  (3+ messages)

[PATCH] selinux: don't label bridged packets in selinux_ip_forward()
 2026-10-16 19:11 UTC  (2+ messages)

[PATCH nf-next] netfilter: flowtable: do not hw offload flows in teardown state
 2026-10-16 16:35 UTC  (2+ messages)
` [syzbot ci] "

[PATCH nf v8 0/3] netfilter: bound asynchronous packet duplication
 2026-10-16 16:20 UTC  (9+ messages)
` [PATCH nf v8 1/3] netfilter: nf_dup: preserve guard across NFQUEUE reinjection
` [PATCH nf v8 2/3] netfilter: nf_dup_netdev: bound asynchronous duplication
` [PATCH nf v8 3/3] netfilter: nf_dup: prevent TTL and hop-limit underflow

[PATCH nf v9 0/1] netfilter: nf_dup: preserve guard across NFQUEUE reinjection
 2026-10-16 16:14 UTC  (2+ messages)
` [PATCH nf v9 1/1] "

[PATCH nf-next v2 1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point
 2026-10-16 14:13 UTC  (3+ messages)

[RFC PATCH net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains
 2026-10-16 12:01 UTC  (8+ messages)

[PATCH net-next v2 6/7] net: add ip4_parse()
 2026-10-16 11:56 UTC  (3+ messages)

[PATCH nf-next,v2] netfilter: flowtable: do not hw offload flows in teardown state
 2026-10-16  9:16 UTC 

[PATCH] extensions: ebt_string: Remove spurious inverse check for --string-icase
 2026-10-16  3:24 UTC 

[SECURITY] netfilter: nft_limit byte-rate bypass via unchecked u64 multiplication
 2026-10-15 22:57 UTC  (9+ messages)
                        ` [PATCH nf-next] netfilter: nft_limit: reject configurations that cause integer overflow

[PATCH 5.10] netfilter: nf_tables: fix bidirectional offload regression
 2026-10-15 19:35 UTC  (2+ messages)

[PATCH nf-next 1/2] netfilter: flowtable: consolidate unsupported hardware offload check
 2026-10-15 17:53 UTC  (2+ messages)
` [PATCH nf-next 2/2] netfilter: flowtable: move hardware offload refresh to GC worker

[PATCH nf] netfilter: flowtable: move hardware offload refresh to GC worker
 2026-10-15 17:37 UTC 

[RFC]: Per-element logging for sets and maps
 2026-10-15 15:59 UTC 

[PATCH nf-next] netfilter: ipvs: avoid passing skb->sk to route_me_harder
 2026-10-15 13:11 UTC 

[PATCH nf-next] netfilter: nft_ct: validate hook and priority for ct zone set
 2026-10-15 12:31 UTC  (3+ messages)

[PATCH nf-next] netfilter: flowtable: teardown flow reaching bridge port on fdb updates
 2026-10-15 12:07 UTC  (5+ messages)

[PATCH net-next 00/15] Netfilter/IPVS updates for net-next
 2026-10-15 10:18 UTC  (22+ messages)
` [PATCH net-next 01/15] netfilter: disable br_netfilter in user namespaces
` [PATCH net-next 02/15] netfilter: flowtable: recognize IPv4/IPv6 in tunnel proto matching
` [PATCH net-next 03/15] netfilter: flowtable: set inner protocol when popping tunnel header
` [PATCH net-next 04/15] netfilter: flowtable: populate tunnel tuple regardless of inner protocol
` [PATCH net-next 05/15] netfilter: flowtable: add encap_proto to flow_offload_tunnel
` [PATCH net-next 06/15] netfilter: flowtable: refactor MTU check for tunnel offload
` [PATCH net-next 07/15] netfilter: flowtable: unify tunnel push for IPv4 and IPv6
` [PATCH net-next 08/15] selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply
` [PATCH net-next 09/15] ipvs: fix buffer overflow when sending sync messages
` [PATCH net-next 10/15] netfilter: conntrack: fix unlikely UaF in gc worker
` [PATCH net-next 11/15] netfilter: nf_tables: switch chain_types array to rcu
` [PATCH net-next 12/15] netfilter: add nf_skb_sk helper and use it
` [PATCH net-next 13/15] netfilter: add nf_sk_to_full_sk "
` [PATCH net-next 14/15] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init
` [PATCH net-next 15/15] netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option mangling

[PATCH nf-next 1/2] netfilter: flowtable: use PPPoE GSO handler
 2026-10-15  8:56 UTC  (2+ messages)
` [PATCH nf-next 2/2] netfilter: flowtable: avoid unnecessary linearization for PPPoE

[RFC conntrack-tools] conntrackd: StartupResync and the FTFW HELLO exchange
 2026-10-15  6:43 UTC 

[PATCH nf] netfilter: ipset: fix double free on kernel-side delete during resize
 2026-10-14 12:50 UTC  (2+ messages)

[PATCH nf v7 0/1] netfilter: nf_dup: preserve duplication guard across NFQUEUE
 2026-10-14 11:10 UTC  (7+ messages)
` [PATCH nf v7 1/1] "

[PATCH nf 0/5] netfilter: pin file with get_file_rcu() before reading f_cred
 2026-10-14  9:09 UTC  (8+ messages)
` [PATCH nf 1/5] netfilter: xt_owner: "
` [PATCH nf 2/5] netfilter: nft_meta: "
` [PATCH nf 3/5] netfilter: nfnetlink_log: "
` [PATCH nf 4/5] netfilter: nfnetlink_queue: "
` [PATCH nf 5/5] netfilter: nf_log_syslog: "
` [syzbot ci] Re: netfilter: "

[PATCH v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
 2026-10-13  9:00 UTC  (3+ messages)

[PATCH nf-next v3 1/2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them
 2026-10-13 23:36 UTC  (3+ messages)

[PATCH nf v2] netfilter: synproxy: check TCP header before verifying checksum
 2026-10-13 22:08 UTC  (2+ messages)

[PATCH net-next 2/4] net: use ip4_parse() in receive validation
 2026-10-13 10:58 UTC 

[syzbot] [lvs?] INFO: rcu detected stall in ip_vs_estimation_kthread (2)
 2026-10-12 15:44 UTC 

[PATCH] netfilter: nf_conntrack_h323: fix NULL deref in decode_seqof()
 2026-10-12  9:20 UTC  (3+ messages)

[RFC PATCH net-next] netfilter: bridge: refragment reassembled packets passed up
 2026-10-12  8:52 UTC  (3+ messages)

[PATCH net v2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them
 2026-10-12  7:27 UTC  (2+ messages)

[PATCH nf-next v3 2/2] netfilter: ebtables: ebt_802_3: fix control format test and the ni type offset
 2026-10-12  7:24 UTC 

[PATCH net v2] netfilter: nf_conntrack_reasm: avoid truncating header offsets
 2026-10-12  5:11 UTC  (2+ messages)

[PATCH net v2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them
 2026-10-12  3:42 UTC  (2+ messages)

[PATCH net] ipv4: validate checksum_start before completing checksum
 2026-10-11 22:02 UTC  (3+ messages)

[PATCH 6.1.y v2] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting
 2026-10-11 16:48 UTC  (2+ messages)

[PATCH 6.6.y v2] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting
 2026-10-11 16:48 UTC  (2+ messages)

[PATCH] netfilter: nf_conntrack_h323: fix NULL pointer deref in decode_seqof()
 2026-10-10 13:30 UTC  (3+ messages)

[PATCH nf] netfilter: nft_set_rbtree: narrow down range completion to anonymous sets
 2026-10-10  8:46 UTC  (5+ messages)

[PATCH] netfilter: xt_dccp: handle reserved options as single-byte
 2026-10-09 15:29 UTC  (6+ messages)

[PATCH nf] netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum
 2026-10-09 14:41 UTC  (3+ messages)

[PATCH nf-next RFC] netfilter: nft_exthdr: add inner option type search for MPTCP
 2026-10-09 13:05 UTC  (3+ messages)

[PATCH v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
 2026-10-09  3:21 UTC  (2+ messages)

[PATCH nf v3 0/1] netfilter: x_tables: avoid holding mutex over faultable user copies
 2026-10-09  1:09 UTC  (6+ messages)
` [PATCH nf v3 1/1] "

[PATCH nf v6 0/1] netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns
 2026-10-09  0:53 UTC  (4+ messages)
` [PATCH nf v6 1/1] "

[PATCH nf v3] netfilter: disable br_netfilter in user namespaces
 2026-10-09  0:39 UTC  (3+ messages)

[PATCH nf 0/1] netfilter: nf_ip6_checksum: validate checksum offset
 2026-10-09  0:05 UTC  (7+ messages)

[iptables PATCH] extensions: libxt_conntrack: Fail on untranslatable state match
 2026-10-08 18:23 UTC 

[PATCH nf-next v2] netfilter: nf_conntrack_sip: only honour Via: port in original direction
 2026-10-08 15:28 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox