netfilter-devel
27,523 threads 118,279 messages Latest
About Subsystems, Archive
- Subsystems
- netfilter
- Archive
- lore.kernel.org/netfilter-devel
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
- proc: move procfs to what kernfs does In review 38 replies
- proc: move procfs to what kernfs does Superseded 50 replies
- netfilter: nf_tables: speed up loading rulesets with many sets New 0 replies
- netfilter: ipset: fix double free on kernel-side delete during resize Superseded 4 replies
- tests: hash:net,iface: cover cross-iface narrow-net fallthrough blocking New 0 replies
- ipset: replace internal hash table with rhashtable New 0 replies
- netfilter: flowtable: XMIT_NEIGH flows sent to 00:00:00:00:00:00 once the next hop's neighbour entry is gone 1 reply
- netfilter: nf_nat: skip the xfrm re-lookup without outbound policies New 0 replies
- netfilter: don't send decrypted skbs in clear text New 0 replies
- selftests: netfilter: add UDP flowtable offload test In review 2 replies
- netfilter: add NF_HOOK_OP_CONNTRACK and use it New 0 replies
- audit: fix incomplete NETFILTER_PKT records and return void In review 3 replies
- proc: fix a few old bugs in /proc handlers (Part 1/7) Superseded 11 replies
- netfilter: nf_conntrack: limit expectation master chain depth New 0 replies
- ipv6: honor rule suppression in raw FIB lookups New 0 replies
- netfilter: add NF_HOOK_OP_CONNTRACK and use it Superseded 0 replies
- net: annotate data-races around sysctl knobs In review 5 replies
- netfilter: xt_nat: allow IP_CT_RELATED_REPLY in DNAT targets In review 3 replies
- netfilter: bridge: refragment packets with a vlan tag moved by the bridge In review 4 replies
- netfilter: nf_conntrack: limit expectation master chain depth Superseded 1 reply
- netfilter: nf_reject: validate TCP header length before sending resets In review 1 reply
- libmnl: fix memory safety issues found by static analysis In review 1 reply
- netfilter: nf_flow_table: defer pernet stats release to last flowtable teardown In review 1 reply
- netfilter: add NF_HOOK_OP_CONNTRACK and use it Superseded 0 replies
- selinux: don't label bridged packets in selinux_ip_forward() Applied 2 replies
- netfilter: nf_reject: validate TCP header length before sending resets Superseded 2 replies
- netfilter: nf_tables: add NFT_HOOK_UNREGISTERED and use it New 0 replies
- lib/ts_fsm: preserve patterns across tc dump and restore In review 1 reply
- netfilter: nft_dynset: reject DELETE op when set lacks ->delete In review 2 replies
- netfilter: nf_socket: avoid UDP socket refcounting in socket match New 0 replies
- ipvs: wait grace period before reusing destinations In review 1 reply
- Netfilter/IPVS fixes for net Applied 6 replies
- netfilter: conntrack: avoid secs-to-jiffies overflow in SIP helper New 0 replies
- netfilter: ip_tables: propagate compat_table_info() error In review 1 reply
- netfilter: nft_set_pipapo_avx2: bound refill rule index New 0 replies
- netfilter: flowtable: tear down bridged flows on layer 2 roaming New 0 replies
- xtables-addons 3.31: ASN IPv6 matches fail on little-endian hosts (16-bit vs 32-bit byte swapping) 0 replies
- netfilter: br_netfilter: reject unsafe neighbour devices for DNAT New 0 replies
- ipset: replace internal hash table with rhashtable Superseded 1 reply
- netfilter: nfnetlink_queue: make skb writable before writing NFQA_L2HDR New 0 replies
- netfilter: nfnetlink_queue: unclone skb before writing NFQA_L2HDR Superseded 2 replies
- netfilter: nft_inner: always save the parsed tunnel context New 0 replies
- netfilter: br_netfilter: reject unsafe neighbour devices for DNAT Superseded 4 replies
- selftests/fs/mount-notify: fix the indentation in the fsmount test Applied 9 replies
- Netfilter/IPVS fixes Applied 4 replies
- netfilter: nfnetlink_queue: handle packet ID reuse and large gaps In review 5 replies
- netfilter: conntrack: document sparse hash table eviction Superseded 1 reply
- net: introduce ipxlat stateless IPv4/IPv6 translation In review 3 replies
- netfilter: conntrack: early_drop eviction limitation under sparse table configurations (max << buckets) 5 replies
- netfilter: nf_tables: add NFT_HOOK_UNREGISTERED and use it Superseded 0 replies