netfilter · Maintained

Maintainers

• M Pablo Neira Ayuso <pablo@netfilter.org>
• M Florian Westphal <fw@strlen.de>
• R Phil Sutter <phil@nwl.cc>

Paths

• F include/linux/netfilter*
• F include/linux/netfilter/
• F include/net/netfilter/
• F include/uapi/linux/netfilter*
• F include/uapi/linux/netfilter/
• F net/*/netfilter.c
• F net/*/netfilter/
• F net/bridge/br_netfilter*.c
• F net/netfilter/
• F tools/testing/selftests/net/netfilter/

Last 30 days

Most active threads (last 7 days)

• HOTtoday [PATCH nf] ipvs: make destination flags atomic
  2026-07-08 15:53 · 1 reply in 7d · Yizhou Zhao <hidden>
• HOTtoday [PATCH nf v2] ipvs: make destination flags atomic
  2026-07-08 06:05 · 0 replies in 7d · Yizhou Zhao <hidden>
• DORMANTno replies [PATCH nf v2] netfilter: nf_conncount: fix zone comparison in tuple dedup
  2026-07-08 05:28 · 0 replies in 7d · Yizhou Zhao <hidden>
• WARM1d [PATCH nf v2 0/3] ipvs: use parsed transport offsets in state handlers
  2026-07-06 10:17 · 3 replies in 7d · Yizhou Zhao <hidden>
• DORMANTno replies [PATCH nf] netfilter: ecache: fix inverted time_after() check
  2026-07-07 11:00 · 0 replies in 7d · Yizhou Zhao <hidden>
• WARM1d [PATCH nf] ipvs: skip IPv6 extension headers in SCTP state lookup
  2026-07-06 14:17 · 1 reply in 7d · Yizhou Zhao <hidden>
• HOTtoday [PATCH nf] netfilter: nf_conncount: fix zone comparison in tuple dedup
  2026-07-06 11:48 · 0 replies in 7d · Yizhou Zhao <hidden>
• DORMANTno replies [PATCH nf] ipvs: skip IPv6 extension headers in TCP state lookup
  2026-07-05 12:57 · 0 replies in 7d · Yizhou Zhao <hidden>
• DORMANTno replies Linux 6.6.144
  2026-07-04 11:59 · 1 reply in 7d · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies Linux 6.1.177
  2026-07-04 11:58 · 1 reply in 7d · Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Active reviewers (last 30 days)

• Florian Westphal <fw@strlen.de>
  20 attestations (20 Suggested-by) · last on 2026-06-16
• Yizhou Zhao <hidden>
  12 attestations (12 Reported-by) · last on 2026-07-08
• Yuxiang Yang <hidden>
  12 attestations (12 Reported-by) · last on 2026-07-08
• Ao Wang <hidden>
  12 attestations (12 Reported-by) · last on 2026-07-08
• Xuewei Feng <hidden>
  12 attestations (12 Reported-by) · last on 2026-07-08
• Qi Li <hidden>
  12 attestations (12 Reported-by) · last on 2026-07-08
• Ke Xu <hidden>
  12 attestations (12 Reported-by) · last on 2026-07-08
• Fernando Fernandez Mancera <hidden>
  11 attestations (11 Reviewed-by) · last on 2026-06-16
• Ji'an Zhou <hidden>
  10 attestations (10 Reported-by) · last on 2026-06-16
• Weiming Shi <hidden>
  6 attestations (6 Reported-by) · last on 2026-06-16

Recent patches

Most-recent 30 patches in this subsystem on stable (capped at 30), ordered by date desc.

• DORMANTno replies Re: [PATCH nf] ipvs: make destination flags atomic
  2026-07-08 · Julian Anastasov <ja@ssi.bg>
• HOTtoday [PATCH nf v2] ipvs: make destination flags atomic
  2026-07-08 · Yizhou Zhao <hidden>
• DORMANTno replies [PATCH nf v2] netfilter: nf_conncount: fix zone comparison in tuple dedup
  2026-07-08 · Yizhou Zhao <hidden>
• DORMANTno replies [PATCH nf] netfilter: ecache: fix inverted time_after() check
  2026-07-07 · Yizhou Zhao <hidden>
• HOTtoday [PATCH nf] ipvs: make destination flags atomic
  2026-07-07 · Yizhou Zhao <hidden>
• WARM1d Re: [PATCH nf] ipvs: skip IPv6 extension headers in SCTP state lookup
  2026-07-06 · Julian Anastasov <ja@ssi.bg>
• HOTtoday [PATCH nf] netfilter: nf_conncount: fix zone comparison in tuple dedup
  2026-07-06 · Yizhou Zhao <hidden>
• WARM1d [PATCH nf v2 3/3] ipvs: use parsed transport offset in SCTP state lookup
  2026-07-06 · Yizhou Zhao <hidden>
• WARM1d [PATCH nf v2 1/3] ipvs: pass parsed transport offset to state handlers
  2026-07-06 · Yizhou Zhao <hidden>
• WARM1d [PATCH nf v2 2/3] ipvs: use parsed transport offset in TCP state lookup
  2026-07-06 · Yizhou Zhao <hidden>
• DORMANTno replies [PATCH nf] ipvs: skip IPv6 extension headers in TCP state lookup
  2026-07-05 · Yizhou Zhao <hidden>
• WARM1d [PATCH nf] ipvs: skip IPv6 extension headers in SCTP state lookup
  2026-07-05 · Yizhou Zhao <hidden>
• COOLING4d Re: Linux 6.6.144
  2026-07-04 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• COOLING4d Re: Linux 6.1.177
  2026-07-04 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• COOLING5d [PATCH 6.1 010/129] netfilter: nf_tables: always increment set element count
  2026-07-02 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• COOLING5d [PATCH 6.1 012/129] netfilter: nf_tables: unconditionally bump set->nelems before insertion
  2026-07-02 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• COOLING5d [PATCH 6.1 011/129] netfilter: nf_tables: fix set size with rbtree backend
  2026-07-02 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• WARM2d [PATCH net] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
  2026-07-02 · Yizhou Zhao <hidden>
• WARM2d [PATCH net v2] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
  2026-07-02 · Yizhou Zhao <hidden>
• COOLING7d [PATCH net] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
  2026-07-01 · Yizhou Zhao <hidden>
• HOTtoday [PATCH net] netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized
  2026-06-29 · xietangxin <hidden>
• DORMANTno replies [PATCH 5.15.y] netfilter: nf_tables: restore set elements when delete set fails
  2026-06-24 · Sid Kumar <hidden>
• DORMANTno replies [PATCH v2 v6.6-v6.1] netfilter: nf_tables: always walk all pending catchall elements
  2026-06-23 · Shivani Agarwal <hidden>
• COLD19d Re: Linux 7.0.13
  2026-06-19 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies Re: Linux 6.6.143
  2026-06-19 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies Re: Linux 6.18.36
  2026-06-19 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies Re: Linux 6.12.94
  2026-06-19 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• COLD19d Re: Linux 6.1.176
  2026-06-19 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies Re: Linux 5.15.210
  2026-06-19 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies Re: Linux 5.10.259
  2026-06-19 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• DORMANTno replies REVIEWED: 1 (0M) [PATCH v5.10-v6.6 ] netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  2026-02-05 · Keerthana K <hidden> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 1 (0M) [PATCH 6.6.y 2/2] netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
  2026-02-11 · Bin Lan <hidden> · 1 Reviewed-by
• STALE91d REVIEWED: 1 (0M) [PATCH v3 6.6.y 1/8] netfilter: nft_set_pipapo: move prove_locking helper around
  2026-03-04 · Natarajan KV <hidden> · 1 Reviewed-by
• STALE91d REVIEWED: 1 (0M) [PATCH v3 6.6.y 2/8] netfilter: nft_set_pipapo: make pipapo_clone helper return NULL
  2026-03-04 · Natarajan KV <hidden> · 1 Reviewed-by
• STALE91d REVIEWED: 1 (0M) [PATCH v3 6.6.y 3/8] netfilter: nft_set_pipapo: prepare destroy function for on-demand clone
  2026-03-04 · Natarajan KV <hidden> · 1 Reviewed-by
• STALE91d REVIEWED: 1 (0M) [PATCH v3 6.6.y 4/8] netfilter: nft_set_pipapo: prepare walk function for on-demand clone
  2026-03-04 · Natarajan KV <hidden> · 1 Reviewed-by
• STALE91d REVIEWED: 1 (0M) [PATCH v3 6.6.y 5/8] netfilter: nft_set_pipapo: merge deactivate helper into caller
  2026-03-04 · Natarajan KV <hidden> · 1 Reviewed-by
• STALE91d REVIEWED: 1 (0M) [PATCH v3 6.6.y 6/8] netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone
  2026-03-04 · Natarajan KV <hidden> · 1 Reviewed-by
• STALE91d REVIEWED: 1 (0M) [PATCH v3 6.6.y 7/8] netfilter: nft_set_pipapo: move cloning of match info to insert/removal path
  2026-03-04 · Natarajan KV <hidden> · 1 Reviewed-by
• STALE91d REVIEWED: 1 (0M) [PATCH v3 6.6.y 8/8] netfilter: nft_set_pipapo: remove dirty flag
  2026-03-04 · Natarajan KV <hidden> · 1 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE202d [PATCH 6.12 265/354] netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
  2025-12-16 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE202d [PATCH 6.12 266/354] netfilter: nf_conncount: rework API to use sk_buff directly
  2025-12-16 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE202d [PATCH 6.12 267/354] netfilter: nft_connlimit: update the count if add was skipped
  2025-12-16 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE201d [PATCH 6.17 394/507] netfilter: nft_connlimit: update the count if add was skipped
  2025-12-16 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE201d [PATCH 6.17 392/507] netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
  2025-12-16 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE201d [PATCH 6.17 393/507] netfilter: nf_conncount: rework API to use sk_buff directly
  2025-12-16 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE191d [PATCH 6.18 481/614] netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
  2025-12-16 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE191d [PATCH 6.18 482/614] netfilter: nf_conncount: rework API to use sk_buff directly
  2025-12-16 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE191d [PATCH 6.18 483/614] netfilter: nft_connlimit: update the count if add was skipped
  2025-12-16 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies Re: Linux 6.12.63
  2025-12-18 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>