netfilter · Maintained

Maintainers

• M Pablo Neira Ayuso <pablo@netfilter.org>
• M Florian Westphal <fw@strlen.de>
• R Phil Sutter <phil@nwl.cc>

Paths

• F include/linux/netfilter*
• F include/linux/netfilter/
• F include/net/netfilter/
• F include/uapi/linux/netfilter*
• F include/uapi/linux/netfilter/
• F net/*/netfilter.c
• F net/*/netfilter/
• F net/bridge/br_netfilter*.c
• F net/netfilter/
• F tools/testing/selftests/net/netfilter/

Last 30 days

Most active threads (last 7 days)

• WARM2d [PATCH net 0/9] netfilter: updates for net
  2026-07-03 12:57 · 8 replies in 7d · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH nf-next v4 0/6] Add IPv4 over IPv6 and SIT flowtable SW acceleration
  2026-07-03 14:11 · 6 replies in 7d · Lorenzo Bianconi <lorenzo@kernel.org>
• WARM2d [PATCH net-next 00/12] netfilter: updates for net-next
  2026-07-02 10:51 · 11 replies in 7d · Florian Westphal <fw@strlen.de>
• HOTtoday [PATCH net] selftests: netfilter: conntrack_resize.sh: fix skip exit code
  2026-07-05 21:38 · 0 replies in 7d · Dharmik Parmar <hidden>
• DORMANTno replies [PATCH nf] ipvs: skip IPv6 extension headers in TCP state lookup
  2026-07-05 12:57 · 0 replies in 7d · Yizhou Zhao <hidden>
• HOTtoday [PATCH nf] ipvs: skip IPv6 extension headers in SCTP state lookup
  2026-07-05 12:31 · 0 replies in 7d · Yizhou Zhao <hidden>
• DORMANTno replies [PATCH nf] netfilter: ipset: skip extension destroy on hash resize replay
  2026-07-04 06:22 · 0 replies in 7d · Weiming Shi <hidden>
• COOLING4d [PATCH net 0/9] netfilter: updates for net
  2026-06-30 04:53 · 9 replies in 7d · Florian Westphal <fw@strlen.de>
• DORMANTno replies [PATCH net] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
  2026-07-02 11:29 · 0 replies in 7d · Yizhou Zhao <hidden>
• WARM2d [PATCH v2 nf-next] ipvs: Move defense_work and est_reload_work to system_dfl_long_wq
  2026-07-02 10:11 · 0 replies in 7d · Ismael Luceno <hidden>

Active reviewers (last 30 days)

• Yizhou Zhao <hidden>
  7 attestations (7 Reported-by) · last on 2026-07-05
• Yuxiang Yang <hidden>
  7 attestations (7 Reported-by) · last on 2026-07-05
• Ao Wang <hidden>
  7 attestations (7 Reported-by) · last on 2026-07-05
• Xuewei Feng <hidden>
  7 attestations (7 Reported-by) · last on 2026-07-05
• Qi Li <hidden>
  7 attestations (7 Reported-by) · last on 2026-07-05
• Ke Xu <hidden>
  7 attestations (7 Reported-by) · last on 2026-07-05
• Yuan Tan <hidden>
  7 attestations (7 Reported-by) · last on 2026-07-03
• Fernando Fernandez Mancera <hidden>
  7 attestations (7 Reviewed-by) · last on 2026-06-23
• Yifan Wu <hidden>
  6 attestations (6 Reported-by) · last on 2026-07-03
• Juefei Pu <hidden>
  6 attestations (6 Reported-by) · last on 2026-07-03

Recent patches

Most-recent 30 patches in this subsystem on netdev (capped at 30), ordered by date desc.

• HOTtoday [PATCH net] selftests: netfilter: conntrack_resize.sh: fix skip exit code
  2026-07-05 · Dharmik Parmar <hidden>
• DORMANTno replies [PATCH nf] ipvs: skip IPv6 extension headers in TCP state lookup
  2026-07-05 · Yizhou Zhao <hidden>
• HOTtoday [PATCH nf] ipvs: skip IPv6 extension headers in SCTP state lookup
  2026-07-05 · Yizhou Zhao <hidden>
• DORMANTno replies [PATCH nf] netfilter: ipset: skip extension destroy on hash resize replay
  2026-07-04 · Weiming Shi <hidden>
• DORMANTno replies [PATCH nf-next v4 6/6] selftests: netfilter: nft_flowtable.sh: Add SIT flowtable selftest
  2026-07-03 · Lorenzo Bianconi <lorenzo@kernel.org>
• WARM2d [PATCH nf-next v4 5/6] net: netfilter: Add SIT tunnel flowtable acceleration
  2026-07-03 · Lorenzo Bianconi <lorenzo@kernel.org>
• WARM2d [PATCH nf-next v4 4/6] selftests: netfilter: nft_flowtable.sh: Add IPv4 over IPv6 flowtable selftest
  2026-07-03 · Lorenzo Bianconi <lorenzo@kernel.org>
• WARM2d [PATCH nf-next v4 3/6] net: netfilter: Add IPv4 over IPv6 tunnel flowtable acceleration
  2026-07-03 · Lorenzo Bianconi <lorenzo@kernel.org>
• WARM2d [PATCH nf-next v4 2/6] net: netfilter: Add encap_proto to flow_offload_tunnel
  2026-07-03 · Lorenzo Bianconi <lorenzo@kernel.org>
• WARM2d [PATCH nf-next v4 1/6] net: netfilter: Add ether_type to net_device_path_ctx
  2026-07-03 · Lorenzo Bianconi <lorenzo@kernel.org>
• DORMANTno replies REVIEWED: 2 (1M) [PATCH net 9/9] netfilter: xt_connmark: reject invalid shift parameters
  2026-07-03 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net 8/9] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
  2026-07-03 · Florian Westphal <fw@strlen.de>
• WARM2d REVIEWED: 1 (1M) [PATCH net 7/9] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
  2026-07-03 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net 6/9] netfilter: nft_set_rbtree: get command skips end element with open interval
  2026-07-03 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net 4/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
  2026-07-03 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net 3/9] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
  2026-07-03 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net 2/9] netfilter: xt_u32: reject invalid shift counts
  2026-07-03 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net 1/9] netfilter: nf_nat_sip: reload possible stale data pointer
  2026-07-03 · Florian Westphal <fw@strlen.de>
• DORMANTno replies [PATCH net] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
  2026-07-02 · Yizhou Zhao <hidden>
• WARM2d [PATCH net-next 12/12] netfilter: nft_ct: support expectation creation for natted flows
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 10/12] netfilter: conntrack: remove obsolete module parameters
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 09/12] netfilter: conntrack: get rid of tuple in helper definitions
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 08/12] netfilter: nf_conntrack_helper: do not hash by tuple
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 07/12] netfilter: xt_dscp: add checkentry for tos match
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 06/12] netfilter: xt_tcpmss: add checkentry for parameter validation
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 05/12] netfilter: remove redundant null check before kvfree()
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 04/12] netfilter: avoid strcpy usage
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 03/12] netfilter: replace u_int8_t and u_int16t with u8 and u16
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 02/12] netfilter: x_tables: replace strlcat() with snprintf()
  2026-07-02 · Florian Westphal <fw@strlen.de>
• WARM2d [PATCH net-next 01/12] netfilter: nfnetlink_hook: Dump nat type chains
  2026-07-02 · Florian Westphal <fw@strlen.de>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• DORMANTno replies REVIEWED: 1 (0M) [PATCH v5.10-v6.6 ] netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  2026-02-05 · Keerthana K <hidden> · 1 Reviewed-by
• STALE138d REVIEWED: 1 (0M) [PATCH net] net: flow_offload: protect driver_block_list in flow_block_cb_setup_simple()
  2026-02-08 · Shigeru Yoshida <hidden> · 1 Tested-by
• DORMANTno replies REVIEWED: 1 (1M) [PATCH v2 nf-next] netfilter: nf_log_syslog: no longer acquire sk_callback_lock in nf_log_dump_sk_uid_gid()
  2026-02-25 · Eric Dumazet <edumazet@google.com> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 1 (1M) [PATCH v2 nf-next] netfilter: xt_owner: no longer acquire sk_callback_lock in mt_owner()
  2026-02-25 · Eric Dumazet <edumazet@google.com> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 1 (0M) [PATCH 6.1.y 2/2] netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
  2026-03-10 · XiaoHua Wang <hidden> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 2 (2M) [PATCH v12 nf-next] netfilter: nft_flow_offload: Add DEV_PATH_MTK_WDMA to nft_dev_path_info()
  2026-03-17 · Eric Woudstra <hidden> · 1 Reviewed-by
• STALE98d REVIEWED: 1 (0M) [PATCH 11/11 net-next v5] netfilter: remove nf_ipv6_ops and use direct function calls
  2026-03-25 · Fernando Fernandez Mancera <hidden> · 1 Tested-by
• STALE97d REVIEWED: 1 (0M) [PATCH AUTOSEL 6.19-5.10] netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
  2026-03-30 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• STALE93d REVIEWED: 1 (0M) [PATCH v3] netfilter: xt_multiport: validate range encoding in checkentry
  2026-04-02 · Ren Wei <hidden> · 1 Tested-by
• DORMANTno replies REVIEWED: 1 (0M) [PATCH v4] netfilter: xt_multiport: validate range encoding in checkentry
  2026-04-03 · Ren Wei <hidden> · 1 Tested-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE170d [PATCH nf-next v2 3/4] netfilter: flowtable: Add IP6IP6 tx sw acceleration
  2025-12-09 · Lorenzo Bianconi <lorenzo@kernel.org>
• STALE170d [PATCH nf-next v2 4/4] selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest
  2025-12-09 · Lorenzo Bianconi <lorenzo@kernel.org>
• STALE206d [PATCH net 3/4] netfilter: always set route tuple out ifindex
  2025-12-10 · Florian Westphal <fw@strlen.de>
• STALE198d [PATCH net 3/6] netfilter: nf_tables: remove redundant chain validation on register store
  2025-12-16 · Florian Westphal <fw@strlen.de>
• STALE198d [PATCH net 5/6] netfilter: nf_tables: avoid softlockup warnings in nft_chain_validate
  2025-12-16 · Florian Westphal <fw@strlen.de>
• DORMANTno replies [PATCH net] netfilter: nf_tables: Fix memory leak in nf_tables_newrule()
  2025-12-24 · Zilin Guan <hidden>
• STALE182d [PATCH net 2/6] selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug
  2026-01-02 · Florian Westphal <fw@strlen.de>
• STALE182d [PATCH net 3/6] netfilter: nft_synproxy: avoid possible data-race on update operation
  2026-01-02 · Florian Westphal <fw@strlen.de>
• STALE182d [PATCH net 4/6] netfilter: replace -EEXIST with -EBUSY
  2026-01-02 · Florian Westphal <fw@strlen.de>
• STALE182d [PATCH net 5/6] netfilter: nf_tables: fix memory leak in nf_tables_newrule()
  2026-01-02 · Florian Westphal <fw@strlen.de>