netfilter

Most active threads (last 7 days)

Recent patches

Latest 30 postings or standalone patches (up to 30), newest first. Counts below cover matching patches in netdev touching this subsystem.

• [PATCH net] netfilter: xt_dccp: reject short option lengths 2026-11-05 · shaos <hidden>
• [PATCH net] netfilter: nf_flow_table: defer pernet stats release to last flowtable teardown 2026-11-05 · Qihang <hidden>
• proc: drop the __user methods (Part 7/7) v2 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RESEND v2 5/6] proc: drop the _buf suffix from the new methods 2026-11-04
  2026-11-04 · Christian Brauner <brauner@kernel.org>
• proc: convert the net entries and the kfifo samples (Part 6/7) v2 · 2 matching patches

  Entire posting: PENDING · 2 of 13 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RESEND v2 04/13] netfilter: xt_recent: let procfs own the seq_file 2026-11-04
  • [PATCH RESEND v2 05/13] netfilter: xt_recent: let procfs copy in writes 2026-11-04
  2026-11-04 · Christian Brauner <brauner@kernel.org>
• Netfilter/IPVS fixes for net v3 · 9 matching patches

  Entire posting: PENDING · 2 of 13 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net 01/13] netfilter: nft_reject: prevent unbounded recursion in output hooks 2026-11-04
  • [PATCH net 03/13] ipvs: fix protocol data lifetime during namespace teardown 2026-11-04
  • [PATCH net 04/13] ipvs: do not create conns from packets with port 0 2026-11-04
  • [PATCH net 05/13] netfilter: nf_dup: preserve guard across NFQUEUE reinjection 2026-11-04
  • [PATCH net 06/13] netfilter: flowtable: extend ct timeout of offloaded GRE flows 2026-11-04
  • [PATCH net 10/13] netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport() 2026-11-04
  • [PATCH net 11/13] netfilter: nf_tables: fix memleak when rule deletion fails with hardware offload 2026-11-04
  • [PATCH net 12/13] netfilter: xt_recent: do not call remove_proc_entry() under recent_lock 2026-11-04
  • [PATCH net 13/13] netfilter: nat: zero newrange before filling it in 2026-11-04
  2026-11-04 · Pablo Neira Ayuso <pablo@netfilter.org>
• [PATCH net 07/13] netfilter: nft_set_rbtree: check catchall_sync return before queue_done 2026-11-04 · Pablo Neira Ayuso <pablo@netfilter.org>
• REVIEWED: 1 review, 1 by a maintainer [PATCH net 02/13] ipvs: Defer application parent freeing until after RCU readers 2026-11-04 · Pablo Neira Ayuso <pablo@netfilter.org>
• [PATCH net 2/2] netfilter: h323: avoid secs-to-jiffies overflow in RAS timeout 2026-11-04 · luoqing <hidden>
• [PATCH net 1/2] netfilter: conntrack: avoid secs-to-jiffies overflow in SIP helper 2026-11-04 · luoqing <hidden>
• [PATCH nf] netfilter: flowtable: remove hw flows before unbinding the flow block 2026-11-03 · Arnau Valls <hidden>
• [PATCH nf-next] netfilter: flowtable: tunnel device poisons h_source of fast-path frames 2026-11-03 · Marek Majkowski <hidden>
• [PATCH 6.18] Revert "net: Convert proto_ops bind() callbacks to use sockaddr_unsized" 2026-11-03 · Hazem Mohamed Abuelfotoh <hidden>
• ipvs: keep templates and cport 0 conns away from packet lookups v2 · 2 matching patches

  Entire posting: PENDING · 1 of 2 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH nf v2 1/2] ipvs: validate cport in received sync records 2026-11-03
  • [PATCH nf v2 2/2] ipvs: skip cport 0 connections in ip_vs_conn_out_get() 2026-11-03
  2026-11-03 · Axel Mierczuk <hidden>
• [PATCH nf-next] selftests: netfilter: nf_queue: drop the no-op loop initializer 2026-11-03 · Sasha Levin <sashal@kernel.org>
• [PATCH nf v2] ipvs: reject negative sync_refresh_period values 2026-11-03 · Yingjie Wang <hidden>
• Netfilter/IPVS fixes for net v2 · 13 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net 01/15] netfilter: nft_reject: prevent unbounded recursion in output hooks 2026-11-03
  • [PATCH net 02/15] ipvs: wait grace period while reusing dest from trash 2026-11-03
  • [PATCH net 03/15] ipvs: Defer application parent freeing until after RCU readers 2026-11-03
  • [PATCH net 04/15] ipvs: fix protocol data lifetime during namespace teardown 2026-11-03
  • [PATCH net 05/15] ipvs: do not create conns from packets with port 0 2026-11-03
  • [PATCH net 06/15] netfilter: nf_conntrack: limit expectation master chain depth 2026-11-03
  • [PATCH net 07/15] netfilter: nf_dup: preserve guard across NFQUEUE reinjection 2026-11-03
  • [PATCH net 08/15] netfilter: flowtable: extend ct timeout of offloaded GRE flows 2026-11-03
  • [PATCH net 09/15] netfilter: nft_set_rbtree: check catchall_sync return before queue_done 2026-11-03
  • [PATCH net 12/15] netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport() 2026-11-03
  • [PATCH net 13/15] netfilter: nf_tables: fix memleak when rule deletion fails with hardware offload 2026-11-03
  • [PATCH net 14/15] netfilter: xt_recent: do not call remove_proc_entry() under recent_lock 2026-11-03
  • [PATCH net 15/15] netfilter: nat: zero newrange before filling it in 2026-11-03
  2026-11-03 · Pablo Neira Ayuso <pablo@netfilter.org>
• [PATCH nf-next] netfilter: flowtable: do not scrub as crossing netns 2026-11-03 · Pablo Neira Ayuso <pablo@netfilter.org>
• Add IPv4 over IPv6 and SIT flowtable SW acceleration v3 · 7 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH nf-next v3 1/8] net: netfilter: nf_flow_table: recognize IPv4/IPv6 in tunnel proto matching 2026-11-03
  • [PATCH nf-next v3 2/8] net: netfilter: nf_flow_table: refactor MTU check for tunnel offload 2026-11-03
  • [PATCH nf-next v3 4/8] net: netfilter: nf_flow_table: use tunnel encap proto for route lookup 2026-11-03
  • [PATCH nf-next v3 5/8] net: netfilter: add IPv4 over IPv6 tunnel flowtable acceleration 2026-11-03
  • [PATCH nf-next v3 6/8] selftests: netfilter: nft_flowtable.sh: add IPv4 over IPv6 flowtable selftest 2026-11-03
  • [PATCH nf-next v3 7/8] net: netfilter: add SIT tunnel flowtable acceleration 2026-11-03
  • [PATCH nf-next v3 8/8] selftests: netfilter: nft_flowtable.sh: add SIT flowtable selftest 2026-11-03
  2026-11-03 · Lorenzo Bianconi <hidden>
• [PATCH nf] netfilter: flowtable: do not clear the offload bit twice 2026-11-03 · João Silva via B4 Relay <devnull+jgc3silva.gmail.com@kernel.org>
• proc: drop the __user methods rfc · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RFC 5/5] proc: drop the _buf suffix from the new methods 2026-11-02
  2026-11-02 · Christian Brauner <brauner@kernel.org>
• proc: convert the net entries and the kfifo samples rfc · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RFC 04/11] netfilter: xt_recent: let procfs own the seq_file 2026-11-02
  • [PATCH RFC 05/11] netfilter: xt_recent: let procfs copy in writes 2026-11-02
  2026-11-02 · Christian Brauner <brauner@kernel.org>
• proc: fix a few old bugs in /proc handlers rfc · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RFC 03/38] netfilter: xt_recent: don't remove the proc entries under a spinlock 2026-11-02
  2026-11-02 · Christian Brauner <brauner@kernel.org>
• [PATCH net] ipvs: reject negative sync_refresh_period values 2026-11-02 · Yingjie Wang <hidden>
• Netfilter/IPVS fixes for net v1 · 6 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net 08/15] netfilter: flowtable: extend ct timeout of offloaded GRE flows 2026-11-02
  • [PATCH net 09/15] netfilter: nft_set_rbtree: check catchall_sync return before queue_done 2026-11-02
  • [PATCH net 12/15] netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport() 2026-11-02
  • [PATCH net 13/15] netfilter: nf_tables: fix memleak when rule deletion fails with hardware offload 2026-11-02
  • [PATCH net 14/15] netfilter: xt_recent: do not call remove_proc_entry() under recent_lock 2026-11-02
  • [PATCH net 15/15] netfilter: nat: zero newrange before filling it in 2026-11-02
  2026-11-02 · Pablo Neira Ayuso <pablo@netfilter.org>
• [PATCH net 07/15] netfilter: nf_dup: preserve guard across NFQUEUE reinjection 2026-11-02 · Pablo Neira Ayuso <pablo@netfilter.org>
• [PATCH net 06/15] netfilter: nf_conntrack: limit expectation master chain depth 2026-11-02 · Pablo Neira Ayuso <pablo@netfilter.org>
• [PATCH net 05/15] ipvs: do not create conns from packets with port 0 2026-11-02 · Pablo Neira Ayuso <pablo@netfilter.org>
• REVIEWED: 1 review, 1 by a maintainer [PATCH net 04/15] ipvs: fix protocol data lifetime during namespace teardown 2026-11-02 · Pablo Neira Ayuso <pablo@netfilter.org>
• REVIEWED: 1 review, 1 by a maintainer [PATCH net 03/15] ipvs: Defer application parent freeing until after RCU readers 2026-11-02 · Pablo Neira Ayuso <pablo@netfilter.org>
• [PATCH net 02/15] ipvs: wait grace period while reusing dest from trash 2026-11-02 · Pablo Neira Ayuso <pablo@netfilter.org>