aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (unfollow)
AgeCommit message (Expand)AuthorFilesLines
2022-01-10netfilter: nf_tables: don't use 'data_size' uninitializedLinus Torvalds1-0/+1
2022-01-09netfilter: nft_meta: cancel register tracking after meta updatePablo Neira Ayuso1-0/+20
2022-01-09netfilter: nft_payload: cancel register tracking after payload updatePablo Neira Ayuso1-0/+21
2022-01-09netfilter: nft_bitwise: track register operationsPablo Neira Ayuso3-2/+97
2022-01-09netfilter: nft_meta: track register operationsPablo Neira Ayuso1-0/+28
2022-01-09netfilter: nft_payload: track register operationsPablo Neira Ayuso1-0/+30
2022-01-09netfilter: nf_tables: add register tracking infrastructurePablo Neira Ayuso1-0/+11
2022-01-09netfilter: nf_tables: add rule blob layoutPablo Neira Ayuso3-63/+129
2022-01-09netfilter: nft_limit: move stateful fields out of expression dataPablo Neira Ayuso1-12/+82
2022-01-09netfilter: nft_limit: rename stateful structurePablo Neira Ayuso1-52/+52
2022-01-09netfilter: nft_numgen: move stateful fields out of expression dataPablo Neira Ayuso1-6/+28
2022-01-09netfilter: nft_quota: move stateful fields out of expression dataPablo Neira Ayuso1-5/+47
2022-01-09netfilter: nft_last: move stateful fields out of expression dataPablo Neira Ayuso1-18/+51
2022-01-09netfilter: nft_connlimit: move stateful fields out of expression dataPablo Neira Ayuso1-8/+18
2022-01-09net: prefer nf_ct_put instead of nf_conntrack_putFlorian Westphal1-2/+2
2022-01-09netfilter: conntrack: avoid useless indirection during conntrack destructionFlorian Westphal1-6/+6
2022-01-09netfilter: make function op structures constFlorian Westphal5-14/+14
2022-01-09netfilter: core: move ip_ct_attach indirection to struct nf_ct_hookFlorian Westphal2-14/+9
2022-01-09netfilter: conntrack: convert to refcount_t apiFlorian Westphal8-27/+23
2022-01-06netfilter: nft_set_pipapo: allocate pcpu scratch maps on cloneFlorian Westphal1-0/+8
2022-01-06netfilter: nft_payload: do not update layer 4 checksum when mangling fragmentsPablo Neira Ayuso1-0/+3
2022-01-04net/sched: act_ct: Fill offloading tuple iifidxPaul Blakey1-1/+5
2021-12-29net: Don't include filter.h from net/sock.hJakub Kicinski2-0/+2
2021-12-24netfilter: nft_set_pipapo_avx2: remove redundant pointer ltColin Ian King1-3/+1
2021-12-23netfilter: flowtable: remove ipv4/ipv6 modulesFlorian Westphal1-0/+26
2021-12-23netfilter: nat: force port remap to prevent shadowing well-known portsFlorian Westphal1-3/+40
2021-12-23netfilter: conntrack: tag conntracks picked up in local out hookFlorian Westphal1-0/+3
2021-12-23netfilter: nf_tables: make counter support built-inPablo Neira Ayuso4-51/+21
2021-12-23netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdictsPablo Neira Ayuso1-1/+1
2021-12-23netfilter: nf_tables: consolidate rule verdict trace callPablo Neira Ayuso1-7/+32
2021-12-23netfilter: nft_payload: WARN_ON_ONCE instead of BUGPablo Neira Ayuso1-2/+4
2021-12-23netfilter: nf_tables: remove rcu read-size lockPablo Neira Ayuso1-2/+0
2021-12-16netfilter: ctnetlink: remove expired entries firstFlorian Westphal1-2/+3
2021-12-16netfilter: nf_nat_masquerade: add netns refcount tracker to masq_dev_workEric Dumazet1-1/+3
2021-12-16netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instanceEric Dumazet1-2/+3
2021-12-16netfilter: conntrack: Remove useless assignment statementsluo penghao1-1/+0
2021-12-16netfilter: fix regression in looped (broad|multi)cast's MAC handlingIgnacy Gawędzki2-2/+4
2021-12-15netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()Eric Dumazet1-2/+2
2021-12-08netfilter: conntrack: annotate data-races around ct->timeoutEric Dumazet3-6/+6
2021-12-08netfilter: nft_exthdr: break evaluation if setting TCP option failsPablo Neira Ayuso1-4/+7
2021-12-08nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groupsStefano Brivio1-1/+1
2021-11-30netfilter: nft_fwd_netdev: Support egress hookPablo Neira Ayuso1-2/+5
2021-11-30netfilter: nfnetlink_queue: silence bogus compiler warningFlorian Westphal1-1/+1
2021-11-30netfilter: ctnetlink: remove useless type conversion to boolBernard Zhao1-1/+1
2021-11-30netfilter: nf_queue: remove leftover synchronize_rcuFlorian Westphal1-6/+0
2021-11-30netfilter: conntrack: Use memset_startat() to zero struct nf_connKees Cook1-3/+1
2021-11-30ipvs: remove unused variable for ip_vs_new_destGuoYong Zheng1-5/+2
2021-11-16net: align static siphash keysEric Dumazet4-5/+5
2021-11-08netfilter: flowtable: fix IPv6 tunnel addr matchWill Mortensen1-2/+2
2021-11-08netfilter: xt_IDLETIMER: replace snprintf in show functions with sysfs_emitJing Yao1-2/+2