aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2019-09-08netfilter: nf_tables_offload: move indirect flow_block callback logic to corePablo Neira Ayuso2-11/+21
2019-09-08netfilter: nf_tables_offload: avoid excessive stack usageArnd Bergmann1-7/+13
2019-09-08netfilter: nf_tables: Fix an Oops in nf_tables_updobj() error handlingDan Carpenter1-3/+3
2019-09-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller9-21/+231
2019-09-05netfilter: nf_tables: fix possible null-pointer dereference in object updateFernando Fernandez Mancera1-0/+3
2019-09-03netfilter: nf_flow_table: set default timeout after successful insertionPablo Neira Ayuso1-1/+1
2019-09-03netfilter: ctnetlink: honor IPS_OFFLOAD flagPablo Neira Ayuso1-2/+5
2019-09-03netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabledLeonardo Bras1-0/+3
2019-09-03netfilter: nft_quota: add quota object update supportFernando Fernandez Mancera1-7/+22
2019-09-03netfilter: nf_tables: Introduce stateful object update operationFernando Fernandez Mancera1-7/+71
2019-09-02netfilter: nft_socket: fix erroneous socket assignmentFernando Fernandez Mancera1-3/+3
2019-09-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller4-6/+10
2019-08-29netfilter: nf_flow_table: clear skb tstamp before xmitFlorian Westphal1-1/+2
2019-08-27Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller2-11/+31
2019-08-27netfilter: not mark a spinlock as __read_mostlyLi RongQing2-3/+2
2019-08-27netfilter: conntrack: make sysctls per-namespace againFlorian Westphal1-0/+5
2019-08-27netfilter: nft_dynset: support for element deletionAnder Juaristi2-0/+25
2019-08-27netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch1-1/+1
2019-08-27netfilter: xt_physdev: Fix spurious error message in physdev_mt_checkTodd Seidelmann1-4/+2
2019-08-26netfilter: nfnetlink_log: add support for VLAN informationMichael Braun1-0/+57
2019-08-26netfilter: nft_meta: support for time matchingAnder Juaristi1-0/+46
2019-08-26netfilter: nf_tables: Introduce new 64-bit helper register functionsAnder Juaristi1-4/+5
2019-08-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller6-31/+116
2019-08-19netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro1-11/+25
2019-08-19netfilter: nft_flow_offload: missing netlink attribute policyPablo Neira Ayuso1-0/+6
2019-08-18netfilter: nf_tables: map basechain priority to hardware priorityPablo Neira Ayuso2-3/+18
2019-08-14netfilter: nft_bitwise: Adjust parentheses to fix memcmp size argumentNathan Chancellor1-2/+2
2019-08-14netfilter: nft_flow_offload: skip tcp rst and fin packetsPablo Neira Ayuso1-3/+6
2019-08-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski22-87/+113
2019-08-13netfilter: conntrack: Use consistent ct id hash calculationDirk Morris1-8/+8
2019-08-13netfilter: connlabels: prefer static lock initialiserFlorian Westphal1-2/+1
2019-08-13netfilter: nf_nat_proto: make tables staticValdis Klētnieks1-2/+2
2019-08-13netfilter: nf_tables: add missing prototypes.Valdis Klētnieks3-3/+3
2019-08-13netfilter: inline four headers files into another one.Jeremy Sowden2-2/+1
2019-08-13netfilter: nf_tables: store data in offload context registersPablo Neira Ayuso1-7/+17
2019-08-13netfilter: nft_bitwise: add offload supportPablo Neira Ayuso1-0/+19
2019-08-13netfilter: remove unnecessary spacesyangxingwu10-13/+13
2019-08-09netfilter: nf_flow_table: teardown flow timeout racePablo Neira Ayuso1-9/+25
2019-08-09netfilter: nf_flow_table: conntrack picks up expired flowsPablo Neira Ayuso1-7/+10
2019-08-09netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso1-5/+10
2019-08-08netfilter: nf_tables_offload: support indr block callwenxu2-24/+131
2019-08-08net: delete "register" keywordAlexey Dobriyan2-4/+4
2019-08-05netfilter: nf_flow_table: fix offload for flows that are subject to xfrmFlorian Westphal1-0/+43
2019-08-03ipvs: Improve robustness to the ipvs sysctlJunwei Hu1-34/+35
2019-08-03netfilter: conntrack: use shared sysctl constantsMatteo Croce1-18/+16
2019-08-03netfilter: synproxy: rename mss synproxy_options fieldFernando Fernandez Mancera2-6/+6
2019-07-29netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik1-1/+1
2019-07-29netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac setsStefano Brivio2-2/+2
2019-07-29netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets tooStefano Brivio1-4/+0
2019-07-25netfilter: nf_tables: Make nft_meta expression more robustPhil Sutter1-12/+4