netfilter
Maintained 31,288 threads 124,303 messages Latest
About Lists, Files, Maintainers, Reviewers
- Lists
- [email protected], netfilter-devel
- Files
include/linux/netfilter*,include/linux/netfilter/,include/net/netfilter/,include/uapi/linux/netfilter*,include/uapi/linux/netfilter/,net/*/netfilter.c,net/*/netfilter/,net/bridge/br_netfilter*.cand 2 more- Maintainers
- Florian Westphal, Pablo Neira Ayuso
- Reviewers
- Phil Sutter
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
- proc: move procfs to what kernfs does drivers/ (29), fs/ (20), arch/ (18), tools/ (12), +9 In review 38 replies
- sysctl: replace overloaded extra pointers with typed bounds and context net/ (33), kernel/ (29), fs/ (22), drivers/ (14), +8 In review 13 replies
- proc: move procfs to what kernfs does drivers/ (28), fs/ (20), arch/ (18), tools/ (10), +9 Superseded 50 replies
- netfilter: nf_tables: speed up loading rulesets with many sets include/net/netfilter/, net/netfilter/ New 0 replies
- netfilter: ipset: fix double free on kernel-side delete during resize net/netfilter/ipset/ip_set_hash_gen.h Superseded 4 replies
- tests: hash:net,iface: cover cross-iface narrow-net fallthrough blocking tests/hash:net,iface.t New 0 replies
- ipset: replace internal hash table with rhashtable net/netfilter/ipset/ (13), include/linux/, lib/ New 0 replies
- netfilter: flowtable: XMIT_NEIGH flows sent to 00:00:00:00:00:00 once the next hop's neighbour entry is gone 1 reply
- netfilter: nf_nat: skip the xfrm re-lookup without outbound policies net/netfilter/nf_nat_proto.c New 0 replies
- netfilter: don't send decrypted skbs in clear text net/bridge/netfilter/, net/ipv4/netfilter/, net/ipv6/, net/ipv6/netfilter/ New 0 replies
- selftests: netfilter: add UDP flowtable offload test tools/testing/selftests/net/netfilter/ (2) In review 2 replies
- FAILED: patch "[PATCH] netfilter: nf_reject: initialize IPCB at inet ingress" failed to apply to 5.10-stable tree net/ipv4/netfilter/, net/ipv6/netfilter/ New 0 replies
- netfilter: add NF_HOOK_OP_CONNTRACK and use it net/netfilter/ (4), include/linux/, net/bridge/netfilter/ New 0 replies
- FAILED: patch "[PATCH] netfilter: nf_reject: initialize IPCB at inet ingress" failed to apply to 5.15-stable tree include/net/netfilter/, net/ipv4/netfilter/, net/ipv6/netfilter/ New 0 replies
- audit: fix incomplete NETFILTER_PKT records and return void include/linux/, kernel/ In review 3 replies
- proc: fix a few old bugs in /proc handlers (Part 1/7) drivers/ (11), arch/ (9), fs/ (9), tools/ (4), +4 Superseded 11 replies
- netfilter: nf_conntrack: limit expectation master chain depth net/netfilter/ (2), include/net/netfilter/ New 0 replies
- ipv6: honor rule suppression in raw FIB lookups net/ipv6/, tools/testing/selftests/net/netfilter/ New 0 replies
- netfilter: add NF_HOOK_OP_CONNTRACK and use it net/netfilter/ (4), include/linux/, net/bridge/netfilter/ Superseded 0 replies
- net: annotate data-races around sysctl knobs net/ (44), include/ (3) In review 5 replies
- inet: frags: bound the wmem charge of the socket completing a reassembly net/ipv4/ (2), net/ipv6/, net/ipv6/netfilter/ Applied 1 reply
- netfilter: xt_nat: allow IP_CT_RELATED_REPLY in DNAT targets net/ (7), include/ In review 3 replies
- netfilter: bridge: refragment packets with a vlan tag moved by the bridge tools/testing/selftests/net/netfilter/ (3), include/linux/, net/bridge/netfilter/ In review 4 replies
- netfilter: nf_conntrack: limit expectation master chain depth net/netfilter/ (2), include/net/netfilter/ Superseded 1 reply
- netfilter: nf_reject: validate TCP header length before sending resets net/ipv4/netfilter/, net/ipv6/netfilter/ In review 1 reply
- libmnl: fix memory safety issues found by static analysis src/ (3) In review 1 reply
- netfilter: nf_flow_table: defer pernet stats release to last flowtable teardown net/netfilter/ (2), include/net/netfilter/, include/net/netns/ In review 1 reply
- netfilter: add NF_HOOK_OP_CONNTRACK and use it net/netfilter/ (3), include/linux/, net/bridge/netfilter/ Superseded 0 replies
- selinux: don't label bridged packets in selinux_ip_forward() include/linux/, security/selinux/ Applied 2 replies
- netfilter: nf_reject: validate TCP header length before sending resets net/ipv4/netfilter/, net/ipv6/netfilter/ Superseded 2 replies
- Completely editing packet should be allowed. 10 replies
- netfilter: nf_tables: add NFT_HOOK_UNREGISTERED and use it net/netfilter/ (2), include/net/netfilter/ New 0 replies
- lib/ts_fsm: preserve patterns across tc dump and restore lib/ (2), lib/tests/ (2) In review 1 reply
- netfilter: nft_dynset: reject DELETE op when set lacks ->delete net/netfilter/nft_dynset.c In review 2 replies
- netfilter: nf_socket: avoid UDP socket refcounting in socket match net/ (6), include/ New 0 replies
- ipvs: wait grace period before reusing destinations include/net/, net/netfilter/ipvs/ In review 1 reply
- Netfilter/IPVS fixes for net net/ (24), include/ Applied 6 replies
- netfilter: conntrack: avoid secs-to-jiffies overflow in SIP helper net/netfilter/ (2), include/net/netfilter/ New 0 replies
- netfilter: ip_tables: propagate compat_table_info() error net/ipv4/netfilter/, net/ipv6/netfilter/ In review 1 reply
- netfilter: nft_set_pipapo_avx2: bound refill rule index net/netfilter/nft_set_pipapo_avx2.c New 0 replies
- netfilter: flowtable: tear down bridged flows on layer 2 roaming net/ (7), include/ (2), tools/ New 0 replies
- xtables-addons 3.31: ASN IPv6 matches fail on little-endian hosts (16-bit vs 32-bit byte swapping) 0 replies
- netfilter: br_netfilter: reject unsafe neighbour devices for DNAT net/bridge/br_netfilter_hooks.c New 0 replies
- ipset: replace internal hash table with rhashtable net/netfilter/ipset/ (13), include/linux/, lib/ Superseded 1 reply
- netfilter: nfnetlink_queue: make skb writable before writing NFQA_L2HDR net/netfilter/nfnetlink_queue.c New 0 replies
- netfilter: nfnetlink_queue: unclone skb before writing NFQA_L2HDR net/netfilter/nfnetlink_queue.c Superseded 2 replies
- netfilter: nft_inner: always save the parsed tunnel context net/netfilter/nft_inner.c New 0 replies
- netfilter: br_netfilter: reject unsafe neighbour devices for DNAT net/bridge/br_netfilter_hooks.c Superseded 4 replies
- FAILED: patch "[PATCH] netfilter: nf_conntrack_netlink: fix inverted IPv6 tuple filter" failed to apply to 5.10-stable tree net/netfilter/nf_conntrack_netlink.c 0 replies
- FAILED: patch "[PATCH] netfilter: nf_conntrack_netlink: fix inverted IPv6 tuple filter" failed to apply to 5.15-stable tree net/netfilter/nf_conntrack_netlink.c 0 replies