netfilter · Maintained

Maintainers

• M Pablo Neira Ayuso <pablo@netfilter.org>
• M Florian Westphal <fw@strlen.de>
• R Phil Sutter <phil@nwl.cc>

Paths

• F include/linux/netfilter*
• F include/linux/netfilter/
• F include/net/netfilter/
• F include/uapi/linux/netfilter*
• F include/uapi/linux/netfilter/
• F net/*/netfilter.c
• F net/*/netfilter/
• F net/bridge/br_netfilter*.c
• F net/netfilter/
• F tools/testing/selftests/net/netfilter/

Last 30 days

Most active threads (last 7 days)

• HOTtoday [PATCH v12 nf-next 0/7] netfilter: Add bridge-fastpath
  2026-07-07 09:11 · 5 replies in 7d · Eric Woudstra <hidden>

Active reviewers (last 30 days)

• Nikolay Aleksandrov <razor@blackwall.org>
  3 attestations (3 Reviewed-by) · last on 2026-07-07
• Daniel Pawlik <hidden>
  2 attestations (2 Co-developed-by) · last on 2026-06-30

Recent patches

Most-recent 30 patches in this subsystem on bridge (capped at 30), ordered by date desc.

• HOTtoday [PATCH v12 nf-next 7/7] netfilter: nft_flow_offload: Add bridgeflow to nft_flow_offload_eval()
  2026-07-07 · Eric Woudstra <hidden>
• HOTtoday REVIEWED: 2 (2M) [PATCH v12 nf-next 6/7] netfilter: nft_flow_offload: Add NFPROTO_BRIDGE to validate
  2026-07-07 · Eric Woudstra <hidden>
• HOTtoday [PATCH v12 nf-next 5/7] netfilter: nft_flow_offload: nft_flow_offload_eval: check thoff==0
  2026-07-07 · Eric Woudstra <hidden>
• HOTtoday REVIEWED: 2 (2M) [PATCH v12 nf-next 4/7] netfilter: nf_flow_table_inet: Add nf_flowtable_type flowtable_bridge
  2026-07-07 · Eric Woudstra <hidden>
• HOTtoday REVIEWED: 2 (2M) [PATCH v12 nf-next 3/7] netfilter: nf_flow_table_offload: Add nf_flow_rule_bridge()
  2026-07-07 · Eric Woudstra <hidden>
• COOLING10d [PATCH 5/5] netfilter: nf_flow_table_path: add VLAN passthrough support
  2026-06-30 · Daniel Pawlik <hidden>
• COOLING10d [PATCH 4/5] netfilter: nf_flow_table_path: handle DEV_PATH_MTK_WDMA in path info
  2026-06-30 · Daniel Pawlik <hidden>
• COOLING10d [PATCH 3/5] netfilter: nf_flow_table_path: add L2 bridge offload
  2026-06-30 · Daniel Pawlik <hidden>
• COOLING11d [PATCH 5/5] netfilter: nf_flow_table_path: add VLAN passthrough support
  2026-06-29 · Daniel Pawlik <hidden>
• COOLING11d [PATCH 4/5] netfilter: nf_flow_table_path: handle DEV_PATH_MTK_WDMA in path info
  2026-06-29 · Daniel Pawlik <hidden>
• COOLING11d [PATCH 3/5] netfilter: nf_flow_table_path: add L2 bridge offload
  2026-06-29 · Daniel Pawlik <hidden>
• COLD37d [PATCH nf v2 1/1] bridge: br_netfilter: move fake rtable off struct net_bridge
  2026-05-26 · Ren Wei <hidden>
• COLD46d [PATCH nf 1/1] bridge: br_netfilter: give fake rtable its own lifetime
  2026-05-14 · Ren Wei <hidden>
• COLD59d [PATCH v20 nf-next 1/2] netfilter: utils: nf_ip(6)_checksum(_partial) correct data!=networkheader
  2026-05-12 · Eric Woudstra <hidden>
• STALE99d [PATCH 5/6] net: Change CONFIG_INET to CONFIG_LEGACY_IP for IPv4-only code
  2026-04-01 · David Woodhouse <dwmw2@infradead.org>
• STALE103d REVIEWED: 1 (0M) [PATCH 11/11 net-next v5] netfilter: remove nf_ipv6_ops and use direct function calls
  2026-03-25 · Fernando Fernandez Mancera <hidden>
• STALE103d REVIEWED: 1 (0M) [PATCH 01/11 net-next v5] ipv6: convert CONFIG_IPV6 to built-in only and clean up Kconfigs
  2026-03-25 · Fernando Fernandez Mancera <hidden>
• STALE108d REVIEWED: 1 (0M) [PATCH 11/11 net-next v4] netfilter: remove nf_ipv6_ops and use direct function calls
  2026-03-20 · Fernando Fernandez Mancera <hidden>
• STALE108d REVIEWED: 1 (0M) [PATCH 01/11 net-next v4] ipv6: convert CONFIG_IPV6 to built-in only and clean up Kconfigs
  2026-03-20 · Fernando Fernandez Mancera <hidden>
• STALE113d REVIEWED: 1 (0M) [PATCH 10/10 net-next v3] netfilter: remove nf_ipv6_ops and use direct function calls
  2026-03-17 · Fernando Fernandez Mancera <hidden>
• STALE113d REVIEWED: 24 (23M) [PATCH 01/10 net-next v3] ipv6: convert CONFIG_IPV6 to built-in only and clean up Kconfigs
  2026-03-17 · Fernando Fernandez Mancera <hidden>
• DORMANTno replies [PATCH v12 nf-next] bridge: Introduce DEV_PATH_BR_VLAN_KEEP_HW
  2026-03-17 · Eric Woudstra <hidden>
• STALE116d [PATCH 10/10 net-next v2] netfilter: remove nf_ipv6_ops and use direct function calls
  2026-03-10 · Fernando Fernandez Mancera <hidden>
• STALE116d [PATCH 01/10 net-next v2] ipv6: convert CONFIG_IPV6 to built-in only and clean up Kconfigs
  2026-03-10 · Fernando Fernandez Mancera <hidden>
• STALE100d [PATCH 10/10 net-next] netfilter: remove nf_ipv6_ops and use direct function calls
  2026-03-09 · Fernando Fernandez Mancera <hidden>
• STALE100d [PATCH 01/10 net-next] ipv6: convert CONFIG_IPV6 to built-in only and clean up Kconfigs
  2026-03-09 · Fernando Fernandez Mancera <hidden>
• STALE121d [PATCH v19 nf-next 5/5] netfilter: nft_chain_filter: Add bridge double vlan and pppoe
  2026-02-24 · Eric Woudstra <hidden>
• STALE121d [PATCH v19 nf-next 4/5] netfilter: nft_set_pktinfo_ipv4/6_validate: Add nhoff argument
  2026-02-24 · Eric Woudstra <hidden>
• STALE121d [PATCH v19 nf-next 2/5] netfilter: utils: nf_checksum(_partial) correct data!=networkheader
  2026-02-24 · Eric Woudstra <hidden>
• STALE137d [PATCH v18 nf-next 4/4] netfilter: nft_chain_filter: Add bridge double vlan and pppoe
  2026-02-22 · Eric Woudstra <hidden>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE103d REVIEWED: 1 (0M) [PATCH 11/11 net-next v5] netfilter: remove nf_ipv6_ops and use direct function calls
  2026-03-25 · Fernando Fernandez Mancera <hidden> · 1 Tested-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE183d [PATCH nf-next 2/2] netfilter: don't include xt and nftables.h in unrelated subsystems
  2026-01-07 · Florian Westphal <fw@strlen.de>
• STALE137d [PATCH v18 nf-next 1/4] netfilter: utils: nf_checksum(_partial) correct data!=networkheader
  2026-02-22 · Eric Woudstra <hidden>
• STALE137d [PATCH v18 nf-next 3/4] netfilter: nft_set_pktinfo_ipv4/6_validate: Add nhoff argument
  2026-02-22 · Eric Woudstra <hidden>
• STALE121d [PATCH v19 nf-next 2/5] netfilter: utils: nf_checksum(_partial) correct data!=networkheader
  2026-02-24 · Eric Woudstra <hidden>
• STALE100d [PATCH 10/10 net-next] netfilter: remove nf_ipv6_ops and use direct function calls
  2026-03-09 · Fernando Fernandez Mancera <hidden>
• STALE116d [PATCH 10/10 net-next v2] netfilter: remove nf_ipv6_ops and use direct function calls
  2026-03-10 · Fernando Fernandez Mancera <hidden>
• DORMANTno replies [PATCH v12 nf-next] bridge: Introduce DEV_PATH_BR_VLAN_KEEP_HW
  2026-03-17 · Eric Woudstra <hidden>
• COLD59d [PATCH v20 nf-next 1/2] netfilter: utils: nf_ip(6)_checksum(_partial) correct data!=networkheader
  2026-05-12 · Eric Woudstra <hidden>